From f7e07eafc88128a556efbc94a9b062fd48ad91f4 Mon Sep 17 00:00:00 2001 From: Jelmer Vernooij Date: Fri, 6 Jun 2003 20:07:16 +0000 Subject: - Regenerate docs - Fix db2latex (it depended on the $Id$ tags) - Fix CUPS-Printing syntax - Update instructions in docbook.txt (This used to be commit 8d7c96a4e267c5546518d097edbe03e27b1ad073) --- docs/Samba-Developers-Guide.pdf | 14581 ++++++-- docs/Samba-HOWTO-Collection.pdf | 51432 ++++++++++++++++++++++---- docs/docbook/Makefile.in | 2 +- docs/docbook/docbook.txt | 64 +- docs/docbook/projdoc/CUPS-printing.xml | 5 +- docs/docbook/xslt/db2latex/docbook.xsl | 3 - docs/docbook/xslt/generate-attributions.xsl | 1 + docs/faq/samba-faq.html | 350 +- docs/htmldocs/Samba-Developers-Guide.html | 10559 +----- docs/htmldocs/bugreport.html | 411 +- docs/htmldocs/diagnosis.html | 835 +- docs/htmldocs/findsmb.1.html | 307 +- docs/htmldocs/groupmapping.html | 412 +- docs/htmldocs/install.html | 1039 +- docs/htmldocs/integrate-ms-networks.html | 1221 +- docs/htmldocs/introduction.html | 424 +- docs/htmldocs/lmhosts.5.html | 215 +- docs/htmldocs/msdfs.html | 359 +- docs/htmldocs/net.8.html | 545 +- docs/htmldocs/nmbd.8.html | 821 +- docs/htmldocs/nmblookup.1.html | 467 +- docs/htmldocs/optional.html | 924 +- docs/htmldocs/pam.html | 861 +- docs/htmldocs/pdbedit.8.html | 680 +- docs/htmldocs/printing.html | 3604 +- docs/htmldocs/rpcclient.1.html | 871 +- docs/htmldocs/samba-bdc.html | 592 +- docs/htmldocs/samba-pdc.html | 3070 +- docs/htmldocs/samba.7.html | 427 +- docs/htmldocs/smb.conf.5.html | 19827 +--------- docs/htmldocs/smbcacls.1.html | 460 +- docs/htmldocs/smbclient.1.html | 1747 +- docs/htmldocs/smbcontrol.1.html | 444 +- docs/htmldocs/smbd.8.html | 807 +- docs/htmldocs/smbmnt.8.html | 197 +- docs/htmldocs/smbmount.8.html | 482 +- docs/htmldocs/smbpasswd.5.html | 342 +- docs/htmldocs/smbpasswd.8.html | 663 +- docs/htmldocs/smbsh.1.html | 551 +- docs/htmldocs/smbspool.8.html | 232 +- docs/htmldocs/smbstatus.1.html | 257 +- docs/htmldocs/smbtar.1.html | 375 +- docs/htmldocs/smbumount.8.html | 145 +- docs/htmldocs/speed.html | 504 +- docs/htmldocs/swat.8.html | 486 +- docs/htmldocs/testparm.1.html | 331 +- docs/htmldocs/testprns.1.html | 265 +- docs/htmldocs/type.html | 398 +- docs/htmldocs/vfstest.1.html | 502 +- docs/htmldocs/wbinfo.1.html | 408 +- docs/htmldocs/winbind.html | 1897 +- docs/htmldocs/winbindd.8.html | 999 +- docs/manpages/findsmb.1 | 145 +- docs/manpages/lmhosts.5 | 130 +- docs/manpages/net.8 | 624 +- docs/manpages/nmbd.8 | 372 +- docs/manpages/nmblookup.1 | 297 +- docs/manpages/pdbedit.8 | 430 +- docs/manpages/rpcclient.1 | 908 +- docs/manpages/smb.conf.5 | 7529 +--- docs/manpages/smbcacls.1 | 328 +- docs/manpages/smbclient.1 | 1311 +- docs/manpages/smbcontrol.1 | 317 +- docs/manpages/smbd.8 | 438 +- docs/manpages/smbmnt.8 | 113 +- docs/manpages/smbmount.8 | 368 +- docs/manpages/smbpasswd.5 | 222 +- docs/manpages/smbpasswd.8 | 424 +- docs/manpages/smbsh.1 | 249 +- docs/manpages/smbspool.8 | 146 +- docs/manpages/smbstatus.1 | 158 +- docs/manpages/smbtar.1 | 199 +- docs/manpages/smbumount.8 | 69 +- docs/manpages/swat.8 | 239 +- docs/manpages/testparm.1 | 175 +- docs/manpages/testprns.1 | 135 +- docs/manpages/vfstest.1 | 266 +- docs/manpages/wbinfo.1 | 266 +- docs/manpages/winbindd.8 | 492 +- 79 files changed, 71087 insertions(+), 72664 deletions(-) (limited to 'docs') diff --git a/docs/Samba-Developers-Guide.pdf b/docs/Samba-Developers-Guide.pdf index 897074783c..491f8be2a0 100644 --- a/docs/Samba-Developers-Guide.pdf +++ b/docs/Samba-Developers-Guide.pdf @@ -1,2533 +1,12068 @@ -%PDF-1.3 -% -1 0 obj<>endobj -2 0 obj<>endobj -3 0 obj<>endobj -4 0 obj<>endobj -5 0 obj<>endobj -6 0 obj<>endobj -7 0 obj<>endobj -8 0 obj<>endobj -9 0 obj<>endobj -10 0 obj<>endobj -11 0 obj<>endobj -12 0 obj<>endobj -13 0 obj<>endobj -14 0 obj<>endobj -15 0 obj<>endobj -16 0 obj<>endobj -17 0 obj<>endobj -18 0 obj<>endobj -19 0 obj<>endobj -20 0 obj<>endobj -21 0 obj<>endobj -22 0 obj<>endobj -23 0 obj<>endobj -24 0 obj<>endobj -25 0 obj<>endobj -26 0 obj<>endobj -27 0 obj<>endobj -28 0 obj<>endobj -29 0 obj<>endobj -30 0 obj<>endobj -31 0 obj<>endobj -32 0 obj<>endobj -33 0 obj<>endobj -34 0 obj<>endobj -35 0 obj<>endobj -36 0 obj<>endobj -37 0 obj<>endobj -38 0 obj<>endobj -39 0 obj<>endobj -40 0 obj<>endobj -41 0 obj<>endobj -42 0 obj<>endobj -43 0 obj<>endobj -44 0 obj<>endobj -45 0 obj<>endobj -46 0 obj<>endobj -47 0 obj<>endobj -48 0 obj<>endobj -49 0 obj<>endobj -50 0 obj<>endobj -51 0 obj<>endobj -52 0 obj<>endobj -53 0 obj<>endobj -54 0 obj<>endobj -55 0 obj[13 0 R -14 0 R -15 0 R -16 0 R -17 0 R -18 0 R -19 0 R -20 0 R -21 0 R -22 0 R -23 0 R -24 0 R -25 0 R -26 0 R -27 0 R -28 0 R -29 0 R -30 0 R -31 0 R -32 0 R -33 0 R -34 0 R -35 0 R -36 0 R -37 0 R -38 0 R -39 0 R -40 0 R -41 0 R -42 0 R -43 0 R -44 0 R -45 0 R -46 0 R -47 0 R -48 0 R -49 0 R -50 0 R -51 0 R -52 0 R -53 0 R -54 0 R]endobj -56 0 obj<>endobj -57 0 obj<>endobj -58 0 obj<>endobj -59 0 obj<>endobj -60 0 obj<>endobj -61 0 obj<>endobj -62 0 obj<>endobj -63 0 obj<>endobj -64 0 obj<>endobj -65 0 obj<>endobj -66 0 obj<>endobj -67 0 obj<>endobj -68 0 obj<>endobj -69 0 obj<>endobj -70 0 obj<>endobj -71 0 obj<>endobj -72 0 obj<>endobj -73 0 obj<>endobj -74 0 obj<>endobj -75 0 obj<>endobj -76 0 obj<>endobj -77 0 obj<>endobj -78 0 obj<>endobj -79 0 obj<>endobj -80 0 obj<>endobj -81 0 obj<>endobj -82 0 obj<>endobj -83 0 obj<>endobj -84 0 obj<>endobj -85 0 obj<>endobj -86 0 obj<>endobj -87 0 obj<>endobj -88 0 obj<>endobj -89 0 obj<>endobj -90 0 obj<>endobj -91 0 obj<>endobj -92 0 obj<>endobj -93 0 obj<>endobj -94 0 obj<>endobj -95 0 obj<>endobj -96 0 obj<>endobj -97 0 obj<>endobj -98 0 obj<>endobj -99 0 obj<>endobj -100 0 obj[56 0 R -57 0 R -58 0 R -59 0 R -60 0 R -61 0 R -62 0 R -63 0 R -64 0 R -65 0 R -66 0 R -67 0 R -68 0 R -69 0 R -70 0 R -71 0 R -72 0 R -73 0 R -74 0 R -75 0 R -76 0 R -77 0 R -78 0 R -79 0 R -80 0 R -81 0 R -82 0 R -83 0 R -84 0 R -85 0 R -86 0 R -87 0 R -88 0 R -89 0 R -90 0 R -91 0 R -92 0 R -93 0 R -94 0 R -95 0 R -96 0 R -97 0 R -98 0 R -99 0 R]endobj -101 0 obj<>endobj -102 0 obj<>endobj -103 0 obj<>endobj -104 0 obj<>endobj -105 0 obj<>endobj -106 0 obj<>endobj -107 0 obj<>endobj -108 0 obj<>endobj -109 0 obj<>endobj -110 0 obj<>endobj -111 0 obj<>endobj -112 0 obj<>endobj -113 0 obj<>endobj -114 0 obj<>endobj -115 0 obj<>endobj -116 0 obj<>endobj -117 0 obj<>endobj -118 0 obj<>endobj -119 0 obj<>endobj -120 0 obj<>endobj -121 0 obj<>endobj -122 0 obj<>endobj -123 0 obj<>endobj -124 0 obj<>endobj -125 0 obj<>endobj -126 0 obj<>endobj -127 0 obj<>endobj -128 0 obj<>endobj -129 0 obj<>endobj -130 0 obj<>endobj -131 0 obj<>endobj -132 0 obj<>endobj -133 0 obj<>endobj -134 0 obj<>endobj -135 0 obj<>endobj -136 0 obj<>endobj -137 0 obj<>endobj -138 0 obj<>endobj -139 0 obj<>endobj -140 0 obj<>endobj -141 0 obj<>endobj -142 0 obj<>endobj -143 0 obj<>endobj -144 0 obj<>endobj -145 0 obj[101 0 R -102 0 R -103 0 R -104 0 R -105 0 R -106 0 R -107 0 R -108 0 R -109 0 R -110 0 R -111 0 R -112 0 R -113 0 R -114 0 R -115 0 R -116 0 R -117 0 R -118 0 R -119 0 R -120 0 R -121 0 R -122 0 R -123 0 R -124 0 R -125 0 R -126 0 R -127 0 R -128 0 R -129 0 R -130 0 R -131 0 R -132 0 R -133 0 R -134 0 R -135 0 R -136 0 R -137 0 R -138 0 R -139 0 R -140 0 R -141 0 R -142 0 R -143 0 R -144 0 R]endobj -146 0 obj<>endobj -147 0 obj<>endobj -148 0 obj[146 0 R -147 0 R]endobj -149 0 obj<>endobj -150 0 obj<>endobj -151 0 obj<>endobj -152 0 obj<>endobj -153 0 obj<>endobj -154 0 obj<>endobj -155 0 obj<>endobj -156 0 obj<>endobj -157 0 obj<>endobj -158 0 obj<>endobj -159 0 obj<>endobj -160 0 obj<>endobj -161 0 obj<>endobj -162 0 obj<>endobj -163 0 obj<>endobj -164 0 obj<>endobj -165 0 obj<>endobj -166 0 obj<>endobj -167 0 obj<>endobj -168 0 obj<>endobj -169 0 obj<>endobj -170 0 obj<>endobj -171 0 obj<>endobj -172 0 obj<>endobj -173 0 obj<>endobj -174 0 obj<>endobj -175 0 obj<>endobj -176 0 obj<>endobj -177 0 obj<>endobj -178 0 obj<>endobj -179 0 obj<>endobj -180 0 obj<>endobj -181 0 obj<>endobj -182 0 obj<>endobj -183 0 obj<>endobj -184 0 obj<>endobj -185 0 obj<>endobj -186 0 obj<>endobj -187 0 obj<>endobj -188 0 obj<>endobj -189 0 obj<>endobj -190 0 obj<>endobj -191 0 obj[150 0 R -152 0 R -154 0 R -155 0 R -156 0 R -157 0 R -158 0 R -159 0 R -160 0 R -161 0 R -162 0 R -163 0 R -164 0 R -165 0 R -166 0 R -167 0 R -168 0 R -169 0 R -170 0 R -171 0 R -172 0 R -173 0 R -174 0 R -175 0 R -176 0 R -177 0 R -178 0 R -179 0 R -180 0 R -181 0 R -182 0 R -183 0 R -184 0 R -185 0 R -186 0 R -187 0 R -188 0 R -189 0 R -190 0 R]endobj -192 0 obj<>endobj -193 0 obj<>endobj -194 0 obj<>endobj -195 0 obj<>endobj -196 0 obj<>endobj -197 0 obj<>endobj -198 0 obj<>endobj -199 0 obj<>endobj -200 0 obj<>endobj -201 0 obj<>endobj -202 0 obj<>endobj -203 0 obj<>endobj -204 0 obj<>endobj -205 0 obj<>endobj -206 0 obj<>endobj -207 0 obj<>endobj -208 0 obj<>endobj -209 0 obj<>endobj -210 0 obj<>endobj -211 0 obj<>endobj -212 0 obj<>endobj -213 0 obj<>endobj -214 0 obj<>endobj -215 0 obj<>endobj -216 0 obj<>endobj -217 0 obj<>endobj -218 0 obj<>endobj -219 0 obj<>endobj -220 0 obj<>endobj -221 0 obj<>endobj -222 0 obj<>endobj -223 0 obj<>endobj -224 0 obj<>endobj -225 0 obj<>endobj -226 0 obj<>endobj -227 0 obj<>endobj -228 0 obj<>endobj -229 0 obj<>endobj -230 0 obj<>endobj -231 0 obj<>endobj -232 0 obj<>endobj -233 0 obj<>endobj -234 0 obj<>endobj -235 0 obj<>endobj -236 0 obj<>endobj -237 0 obj<>endobj -238 0 obj<>endobj -239 0 obj<>endobj -240 0 obj<>endobj -241 0 obj<>endobj -242 0 obj<>endobj -243 0 obj[192 0 R -193 0 R -194 0 R -195 0 R -196 0 R -197 0 R -198 0 R -199 0 R -200 0 R -201 0 R -202 0 R -203 0 R -204 0 R -205 0 R -206 0 R -207 0 R -208 0 R -209 0 R -210 0 R -211 0 R -212 0 R -213 0 R -214 0 R -215 0 R -216 0 R -217 0 R -218 0 R -219 0 R -220 0 R -221 0 R -222 0 R -223 0 R -224 0 R -225 0 R -226 0 R -227 0 R -228 0 R -229 0 R -230 0 R -231 0 R -232 0 R -233 0 R -234 0 R -235 0 R -236 0 R -237 0 R -238 0 R -239 0 R -240 0 R -241 0 R -242 0 R]endobj -244 0 obj<>endobj -245 0 obj<>endobj -246 0 obj<>endobj -247 0 obj<>endobj -248 0 obj<>endobj -249 0 obj<>endobj -250 0 obj<>endobj -251 0 obj<>endobj -252 0 obj<>endobj -253 0 obj<>endobj -254 0 obj<>endobj -255 0 obj<>endobj -256 0 obj<>endobj -257 0 obj<>endobj -258 0 obj<>endobj -259 0 obj<>endobj -260 0 obj<>endobj -261 0 obj<>endobj -262 0 obj<>endobj -263 0 obj<>endobj -264 0 obj<>endobj -265 0 obj<>endobj -266 0 obj<>endobj -267 0 obj<>endobj -268 0 obj<>endobj -269 0 obj<>endobj -270 0 obj<>endobj -271 0 obj<>endobj -272 0 obj<>endobj -273 0 obj<>endobj -274 0 obj<>endobj -275 0 obj<>endobj -276 0 obj<>endobj -277 0 obj<>endobj -278 0 obj<>endobj -279 0 obj<>endobj -280 0 obj<>endobj -281 0 obj<>endobj -282 0 obj<>endobj -283 0 obj[244 0 R -245 0 R -246 0 R -247 0 R -248 0 R -249 0 R -250 0 R -251 0 R -252 0 R -253 0 R -254 0 R -255 0 R -256 0 R -257 0 R -258 0 R -259 0 R -260 0 R -261 0 R -262 0 R -263 0 R -264 0 R -265 0 R -266 0 R -267 0 R -268 0 R -269 0 R -270 0 R -271 0 R -272 0 R -273 0 R -274 0 R -275 0 R -276 0 R -277 0 R -278 0 R -279 0 R -280 0 R -281 0 R -282 0 R]endobj -284 0 obj<>endobj -285 0 obj<>endobj -286 0 obj<>endobj -287 0 obj<>endobj -288 0 obj[285 0 R -287 0 R]endobj -289 0 obj<>endobj -290 0 obj<>endobj -291 0 obj<>endobj -292 0 obj<>endobj -293 0 obj<>endobj -294 0 obj<>endobj -295 0 obj<>endobj -296 0 obj<>endobj -297 0 obj<>endobj -298 0 obj<>endobj -299 0 obj<>endobj -300 0 obj<>endobj -301 0 obj[290 0 R -292 0 R -294 0 R -296 0 R -298 0 R -300 0 R]endobj -302 0 obj<>endobj -303 0 obj<>endobj -304 0 obj<>endobj -305 0 obj<>endobj -306 0 obj<>endobj -307 0 obj<>endobj -308 0 obj<>endobj -309 0 obj<>endobj -310 0 obj<>endobj -311 0 obj<>endobj -312 0 obj<>endobj -313 0 obj<>endobj -314 0 obj<>endobj -315 0 obj<>endobj -316 0 obj<>endobj -317 0 obj<>endobj -318 0 obj<>endobj -319 0 obj<>endobj -320 0 obj<>endobj -321 0 obj<>endobj -322 0 obj<>endobj -323 0 obj<>endobj -324 0 obj<>endobj -325 0 obj<>endobj -326 0 obj<>endobj -327 0 obj<>endobj -328 0 obj<>endobj -329 0 obj<>endobj -330 0 obj<>endobj -331 0 obj<>endobj -332 0 obj<>endobj -333 0 obj<>endobj -334 0 obj<>endobj -335 0 obj<>endobj -336 0 obj<>endobj -337 0 obj<>endobj -338 0 obj<>endobj -339 0 obj<>endobj -340 0 obj<>endobj -341 0 obj<>endobj -342 0 obj<>endobj -343 0 obj<>endobj -344 0 obj<>endobj -345 0 obj<>endobj -346 0 obj<>endobj -347 0 obj<>endobj -348 0 obj<>endobj -349 0 obj<>endobj -350 0 obj<>endobj -351 0 obj<>endobj -352 0 obj<>endobj -353 0 obj<>endobj -354 0 obj<>endobj -355 0 obj<>endobj -356 0 obj<>endobj -357 0 obj<>endobj -358 0 obj<>endobj -359 0 obj<>endobj -360 0 obj<>endobj -361 0 obj<>endobj -362 0 obj<>endobj -363 0 obj<>endobj -364 0 obj<>endobj -365 0 obj<>endobj -366 0 obj<>endobj -367 0 obj<>endobj -368 0 obj<>endobj -369 0 obj<>endobj -370 0 obj<>endobj -371 0 obj<>endobj -372 0 obj<>endobj -373 0 obj<>endobj -374 0 obj<>endobj -375 0 obj<>endobj -376 0 obj<>endobj -377 0 obj<>endobj -378 0 obj<>endobj -379 0 obj<>endobj -380 0 obj<>endobj -381 0 obj<>endobj -382 0 obj<>endobj -383 0 obj<>endobj -384 0 obj<>endobj -385 0 obj<>endobj -386 0 obj<>endobj -387 0 obj<>endobj -388 0 obj<>endobj -389 0 obj<>endobj -390 0 obj<>endobj -391 0 obj<>endobj -392 0 obj<>endobj -393 0 obj<>endobj -394 0 obj<>endobj -395 0 obj<>endobj -396 0 obj<>endobj -397 0 obj<>endobj -398 0 obj<>endobj -399 0 obj<>endobj -400 0 obj<>endobj -401 0 obj<>endobj -402 0 obj<>endobj -403 0 obj<>endobj -404 0 obj<>endobj -405 0 obj<>endobj -406 0 obj<>endobj -407 0 obj<>endobj -408 0 obj<>endobj -409 0 obj<>endobj -410 0 obj<>endobj -411 0 obj<>endobj -412 0 obj<>endobj -413 0 obj<>endobj -414 0 obj<>endobj -415 0 obj<>endobj -416 0 obj<>endobj -417 0 obj<>endobj -418 0 obj<>endobj -419 0 obj<>endobj -420 0 obj<>endobj -421 0 obj<>endobj -422 0 obj<>endobj -423 0 obj<>endobj -424 0 obj<>endobj -425 0 obj<>endobj -426 0 obj<>endobj -427 0 obj<>endobj -428 0 obj<>endobj -429 0 obj<>endobj -430 0 obj<>endobj -431 0 obj<>endobj -432 0 obj<>endobj -433 0 obj<>endobj -434 0 obj<>endobj -435 0 obj<>endobj -436 0 obj<>endobj -437 0 obj<>endobj -438 0 obj<>endobj -439 0 obj<>endobj -440 0 obj<>endobj -441 0 obj<>endobj -442 0 obj<>endobj -443 0 obj<>endobj -444 0 obj<>endobj -445 0 obj<>endobj -446 0 obj<>endobj -447 0 obj<>endobj -448 0 obj<>endobj -449 0 obj<>endobj -450 0 obj<>endobj -451 0 obj<>endobj -452 0 obj<>endobj -453 0 obj<>endobj -454 0 obj<>endobj -455 0 obj<>endobj -456 0 obj<>endobj -457 0 obj<>endobj -458 0 obj<>endobj -459 0 obj<>endobj -460 0 obj<>endobj -461 0 obj<>endobj -462 0 obj<>endobj -463 0 obj<>endobj -464 0 obj<>endobj -465 0 obj<>endobj -466 0 obj<>endobj -467 0 obj<>endobj -468 0 obj<>endobj -469 0 obj<>endobj -470 0 obj<>endobj -471 0 obj<>endobj -472 0 obj<>endobj -473 0 obj<>endobj -474 0 obj<>endobj -475 0 obj<>endobj -476 0 obj<>endobj -477 0 obj<>endobj -478 0 obj<>endobj -479 0 obj<>endobj -480 0 obj<>endobj -481 0 obj<>endobj -482 0 obj<>endobj -483 0 obj<>endobj -484 0 obj<>endobj -485 0 obj<>endobj -486 0 obj<>endobj -487 0 obj<>endobj -488 0 obj<>endobj -489 0 obj<>endobj -490 0 obj<>endobj -491 0 obj<>endobj -492 0 obj<>endobj -493 0 obj<>endobj -494 0 obj<>endobj -495 0 obj<>endobj -496 0 obj<>endobj -497 0 obj<>endobj -498 0 obj<>endobj -499 0 obj<>endobj -500 0 obj<>endobj -501 0 obj<>endobj -502 0 obj<>endobj -503 0 obj<>endobj -504 0 obj<>endobj -505 0 obj<>endobj -506 0 obj<>endobj -507 0 obj<>endobj -508 0 obj<>endobj -509 0 obj<>endobj -510 0 obj<>endobj -511 0 obj<>endobj -512 0 obj<>endobj -513 0 obj<>endobj -514 0 obj<>/XObject<<>>>>>>endobj -515 0 obj<>stream -x+2T0BCs#c3\..}7K#4CCK=ccS=3=DFKjYjN~AjQ{ifJfHkW S?endstream -endobj -516 0 obj<>/XObject<<>>>>/Annots 55 0 R>>endobj -517 0 obj<>stream -x[moG_SRv}?%hlm,)'zͿCrf]%HyHYΐəUsΒJng<7wMR-&y;=xLgn3p+4/ ˹5iF$LbmRD1TAOzM)g lh1rB砮-k(eXb$ynd- KI"ee@N2J`Yͫ(@=2G.*12lA&}谞k -4kHR6@s3p4% 9,銚LuP2P#<",X:U@ 91Kc5la|IkVN9R)i19 [3 @&,"+Ö#`z-ԑZJREg4 3(Sȃ~SrЖ|lNjB(=h<;$4 PȅM0lj{pۇMo(t;gzǜKuaaƋ~m/+93ZQolŇcj$Б&8)Qj ؾ5 qrF<>?(\m*MgSC!5;۴rUqAm`6h4}tܸ|X bDISG;žK<((q>;ZR4&BCx?v%,.4k4ŗ] 3n`d3e q)1sݱ]ïTSί;uRmR^Nlhжo/?ۨ -B5øhܰb)f zUUU$ -}Ɣ;,12a}6 1bZ&)G5nخ7&Toi\=R{c T_C{6^,xv%m8FgNmq G[=JKL7K !M8Jf L8<GN}8& }ej TXMQMfGodjR )ŬWX<\!m8;ko-\Hw(vts7ǻ?KYP}S翏k1px5Iwh oGOx3SxzF=7WO4+ϡxi2CKQ'O[ ?I͉AM;%xEZpAӞ>{USDOTRV^vH7=׸gVK`qvCި>IʏIy_7 T{56 -z^ dTR`^~ tcեUx^Un~6O19\U5?$?(S괥'7`og<'endstream -endobj -518 0 obj<>/XObject<<>>>>/Annots 100 0 R>>endobj -519 0 obj<>stream -x[MsGWm=GYUɶlʵgcENn`jwL*Jn=,ǿ.k|V|uOr|W&]eE7qg3WY8WY[M -#Ә'!&,*|A -&4p5ͤ3̹nb`?*I!'5jZR)d a M T0p9L4lK -$jaX i"L91wbeSQ%t4!r\PbZ3++ P.@ږL-@"YUY$gEЕIŤk9d  L!Wr,U tIiqTY4V v ^e5IVT—E%R\(Fi1T6a ەpќCM*2"A9ښe$bSQl({Yo$h`w8ܣ\WA) |y3 -Hlɺvl`TY^7y%RG*/NeѨG`\^"+)3zo -Ymv>|{qs&G549fdcsq!6K-2GUyO ̀qm,eҠ>|.^şP0")v[wU\b9+l(Y~v#eɞsE?.wlGvG`]=vxӮkh\'{ .nsBwZ\F;qش#<:~&A'mHU?פ8wj%[p?ֻٟqg`s߱!B,Tط9cőp '5{04ⵘ-vOi0ԀD Dͣ46idgSgW1;^!|}vOFIZTZwy'uh}ĞsEFO[jW Nh˟ Iq!3țy/?h.8HoM 5gll܉k846G_Ҟ"]36亟 uOǣCp4QZam_/?`ʪ-N p( \ͺ8%m^eHy}aHN;~Õn$e_}l\e<~pˎe<PHO51xdnU+lc[(q]pӐ8'O ߟ>5Gݒ1x~~ݯfb o=vRx0oR+.ǁ;)jd`7P łAڋ=cҗR.)$H\!] x) Wa'E%`77@9[^85p'm+FR`6?,d"ি_~k((چ'l_l -z ;=ZbHz[ \\#xäT8>/XObject<<>>>>/Annots 145 0 R>>endobj -521 0 obj<>stream -x[rI}W>X/Ʊ0H@F#I!=Y-EuKeeeD1K*2.Q'׻W$*/%̣񞁋(Qj:lf%M'+F5Sh4&I` `a/4=[ 6mFii:*1ƼМ Ġq: i1Xr?,`jб L  s(i1-2M` &))˃M&nP:d@ZnlTE5,t6` Rh+S3v^v Lqn -JZnZ aʠP 87렁Ie -=(݌@RQw IYYpaK`h&lse`9[MYQQWau\[%-F6(!"5E$rRՔ/@"B2 8I9+HS i1XWLUZ IhʊRe D D8ab.O(E"i,/L2]N=%0]Q.["VћDZnq`1%eeXr[()0ѫrS^yJZ 1l a;,6+A8}Rԝ8 \jhˋG]o1RRaQomN @\E(dK4-Fʣxt~wQu\_s_*0'/E==h/݊!ہ@'gOfDD!}ڸGG-1f񻷇OܐX)2$J8`h:w,鞶7ɛWoN?a4srCc7n*ljWt/biI^;!mvHhG\(Jz+/畍 -UECN C3KTv-ɆTFnHIq6m,MS:oU:{˖CewlܭrKEz^]}WXM=zܱu8s]' r zo^b~-%=šscG!nV͈v~p)ÉhIWI|jngBfMtcۑn)G#{ޘ8.Czc;;MGeݾlP_,7.v%i0%bk=-onHprx$F \m 2/]I*#/ I{h%| lH7Jw>=/{P6kXΖWmzj//fHRI-w5;sƣnuePC;HL3}Ď.p'}띁q~rt8/Gp;cl'BE&dK~O9YG1}hQa;o< 56nTF̾\B#vKk~!8Q빷jCu,K* -Y?@Pty} 㔱;z7$^/K(nJ> ۂ"$YsnIFMGŧ+jS3TZsf|7JeFzR#uN|>]W܁1o(h 8&p~饰filv* ,̚ Yv5قcvnVxOg& T=)a3F0O375 |09z.u4: x߶j^:Ԡ7\RDu|k -Ѓ!3쇬 #`tN/Nҭ2v(WwAP+e-%<=}SkSI .>̖gW 6s:yfJZH1oF4ʯx}گg\W;ݕD`S)iaĖ@ÈtX Kh@6`gވ* ajl"!|F;/ZEdXư 9HfL-_L_^iDpZU;v\ k%'(nlxMW?BdP&߆OWz^\bs.JG'^>ak_`&RR7~z6|#T.ۨ/ -$(iI0pMwXZ "!+Cll'n%:daLxqGND.}ƒ9Bo*?qi^ h|@HT%j4kq:zCHnfjSŃ-ֶ]vY+u7EQP\_\Q"vz9룍c,[9>jGjn=-`v~jǷtz[298s_>-/̙@)3g2v]RAZpDڟofzKb9yf'2$( a"cCZ!OuǪbD}CZK^2tȞ.Çz4EOǗ_H_(STٶ~x{G <[,l[n_"ɋ^]K ߤ6UW[ٌz1mendstream -endobj -522 0 obj<>/XObject<<>>>>/Annots 148 0 R>>endobj -523 0 obj<>stream -xSr@s4}Qz$X0bL3"~A -,_A@`RY(;pU -4"X#-H1ݣaR3Fe$Ny)4n^%8 d-<]BcLɸeNd4;\:6Lfc M})KR%g8kإ  t)S=*\ȜLμ4]`QoSM:5dVOsp|TѬޜOCJ榟4Főͤm})j}VhFn- .gx>/XObject<<>>>>>>endobj -525 0 obj<>stream -x}0 E|a iH؊Ā6"~\ډY,#? CPu,!d+c1pdoPYpiM5;&vOW[\WǫEjz%`>`؊9Ұ7~endstream -endobj -526 0 obj<>/XObject<<>>>>/Annots 191 0 R>>endobj -527 0 obj<>stream -xWRH}+mIUd]rITaTd{l++iY۹lQӗi4OI@aLdI$N4R*O|/PAӓ Iφq:b h<(0!s(EVbȑ` qX$a\R0 &r6N\D -RǶE~ bw0#l$X{:;$w>LcIwW9܂'#V4R*Hp0\>:|=+QC"34bWD\gZtlך -r\wlbžu3P{:f yCD`?b'(2@  <8'\ራ։%.G=k:* ?aٞt1XyyV0vzޓ.Z/A(IkY & ʹ@dGw쐓m1'|ZĞFB4,6 -&6DV05`woN܂X7bF1Rh9 `8nu (`O"ӀK9r"\ɁQ?"[#t1(sqyXג}H1 ]A'4( Ȱ벳}Ac Ȯg~HAVPONsLz*p詸[80">?zpg0p 0pؚ0Hb`jvrs5 -/ql)dqz9oL-̛7X! ,OЧ23ڌ;S{]TmqMqAxt}3A zDg2ЙmZCBZzEKhKU&3T덡QiPTϪۼZS@nQjZ.\_jq}04TiJ]+X":7FU4veuk A5:mC۬F}(UK_ѶF#]zɋE,thAj63wC%M߿ T.t`ƘTI=*C V'*JU[z?:erL-+> EVU -zlE ǻ/o.1 W|!zTKyƶSm2Azͽ+Z⭚ۜgwW&q ulIE3f˵Kߣʫ|wqJDCV*zR.ZK%p6HA݌jtF]#WS?s#@d*ݽ;PZ/[ {`'6Gmapbʖ|H>)Ӭ7kbZT?<nl$f_Jyw閚WCwXlq璘ɾ$'c}-j}dօ˛_XJ/,Q)G3zװnX(->/XObject<<>>>>/Annots 243 0 R>>endobj -529 0 obj<>stream -xuXrH}WB_T,/(BؒWciv(3g'0YhT3?_?~&S7kdG6 lyI)6)TXHMB/1id - $)f pR՘t:EH( -U Ѱ%CO2, 0U%d$^43l{bsę/P hUI 9NA봞D侔=`Tf4*$:IŁH -:!+V er5. 5XDĎUnX6@5( q0 l* A*N ~P=N}l($N.+shPQABO8NfocLqmY#($RX=ȑ"SptHC*TX8OXxѴLjKXmSp -u"%ԨHlAzsUyx B -U$g#yYCeD3/Rs9EFcţ,AuУ8 ) ym8fHaUC#{QHf}͠( HbUCnN x"Gv1OG(h5q[ "GǑŒ+40X[/^hXcnЭd> -ÂDUaFwʆ eu%"IGv~(h"n㖍qq0<VVXɲu,6NYb>cJ:l L$nCQb?IWcʱ-1d 2f+H*lbfP Ctd\bX2<شر -p5X !I׺Edc㑏 vdaЬ,#,NlX]e܎-cfyfe(/d>Re.ˆE$.c$ -R#3t0te+1vA1(ȉ9E.MlRܠq! pP㣂9_ -~!&ް4S }R v}kڮ<m nY v*1C:L=xvU]h+⹩7U2\=oXbrմMh>5CݔU) Rв7M[#vh]94]{5U1i?$p``0C̆ez35,]=\\MӚ|ikׯpMzn^|}wO]ϼG~j6GIinuT(z{Up}Yv]o\_ -piw1ď(nnέ7+L,ԝ8[vô:v -w sխK˿D@[rZc̻]_dMm4㲯 + -tZ16GCw5sDFHDNU{$C6Qo(~~acuVܨDSXr8suqMezBD$ J3~Hՙa7ֻٟPJoj*;=GV1gNb(:F ; r?R/#70^("uˌ~6f~}5 -O_{)6S":=}nqsO<~]W~? WvS[Cm“jMS8 35:&{-2n7x7˵Ĵ\ g6.îYJO>/XObject<<>>>>/Annots 283 0 R>>endobj -531 0 obj<>stream -x}XMoFW̩ifM±Ԩ`$f#*%{wdM;/ogvv&IKˢA|z?A)yEň2X 6!d5laad9 =Md\Ю"k[^l^a4R5S9C5Ⱥ$:M)x=b1Mg ;g]1Zx^iMa [D juCvw4>( {`)Y?Z se^PMCʰ`U[6Ʋ`1aRYIKvHf2EWER׼4C2E$]%P(H591'5-o18E bxF֥ғD[rH3rj -.ULĤx2c-Ӓ?Q踂\`R dG'--k0X.-k0$:-px - 9ZEӑ,fEYgVG$:TZL+Yi`65lɁ2`ќ#hbia,?8aP"I<[ݠ5,! {]6LXrI44o *H@zHLC&BE vHbJI8J9*6'F=0CyD2_R^2_gPAd\ev~#]Z4{rOVgH%8 nίg_޾n)\< -zxU? ʄ`ٽ2̇VVmͦ>upy[dv_!C{L=[Wݪ{wCom+eVM'5jqp1rY$;C6A }‡>kI\]n p^Ͼwc'nJa`jF3L8842omrwꡫ'~! ߶=SS`5ikeU-ja+ow>EI4C-7^JQ.X7(\T{ ڱ}gǾ0_n?no-Y=iwru;:YyW5yj fѷ t:Gnqqxݓ`>1mzC!TêVaq -u6k{pj=t>)L'dYs\!Y3K r/F$3VmS/j7lM.z#?Pѩ%N 7ucT]uWZz[ӨuA[6GK,w yXj8Hؚb,{vo'. ?mo,RVZ;]LY>Gqp$P7w~LM/*J=+)ErHEYBDJrendstream -endobj -532 0 obj<>/XObject<<>>>>>>endobj -533 0 obj<>stream -xWRH}+ʖ-c!O@`U,8*ه4'Hef== lr[ӷӧϴ4Ɵf:9(;8g}FRrt>ݞdL&g9c1\Dᤡ02QrJj񰢥NG:%oߎ4Lͽ$}VS ΪpÓ)R0@5M) CYp]1M[HPNSWy^w>͛gGj96tҶ˺ʫЭ6K'Tȹ[=jWZf%ͳd{ֈy01fv@VJ2Ia~8oP}砶ҀkToC'+h:"̝ q;׌ q%i#IHg^yL281۩hKvv 6895\n+X{P!ZH#6)~Xs*Lh$r.E_{^.hG,! n}.;$/W놥'صHX[QS]NAL!6)SТ -0Uk4TR8/CYM[隬Q7xؿW:qe(Y]v5b{޻+z#WS;P{3{'5$F5dlTA!Pܰ-TI:<5:W\:“}٤ ;GuoW2n-3hGLz[w3^* dTH]2zMN4"exm씉(ITЗnN@=TzMUE -I!jXHcԽXq]nw,e -t2Ks g^Fʼz]w'|S=KY}83llendstream -endobj -534 0 obj<>/XObject<<>>>>>>endobj -535 0 obj<>stream -xV]o6}ϯ{J8x nndhHFRvw.)9a(ԑx?9\sRZLzN:$/ɔf?ŏU:xp9Q&GrAg2p{ 䴵FdR8Oފ<򻿒8~C)NY2C4NhuZJOk"6d&L9iVeޒ/4[RUkS3jB8D]:ZJZٝ<ԉk vt+[+, - Ҏ,;4Dڏhz*OFސ/>I%5@#!C{ z#Q#،6T!i"}BaO2%JG!dY;RßRw]>Q3ӌp8pJd`_?ji3U[ ʆr]).Dht=)yA#cQd!RL}23(ؙLkYN nUqWv<+b8pTG4  i-~vnW#]ܡyy|FP@};DzYjp̊A[Ezt! & -HpQr7)֐x)1&0,!(\rLif;4*Nh3I)Bk5$( яf= /%>^ dk? BԁKs3A9ڴ޳|ܙxSkʒm^2{FabɃ]^`W̨6b g BZTQ*^/cAf2FX QC%#5khb@$:[YKyĔ Ş#_ [9^d0R(}9Z}ڐfDjpp 0Ak{` r>JeI;_*)xTQo7Qa -yuO%(̳7݄B$K0VS^xVk%vqOh9QC :T+,rQ*Gl/`"Ȟ-T3t7 dWE}28_i;ǻ7ƍBc|us~ACyD%x, MUĚ>줽Yp#ಔ[SQ<Pbz}A#\+ǍbD٣M-{p1IbYuk=WA0P!Lmx;2qejT6 'D}v: -#V֕y:j* qd=vPFN'2rǂ1-|-ë{WL09"^:G4“ x7'Pá|. - 5An_Mݍ;], n-Ek WCWWޱgI\p=w~ٜq/M5endstream -endobj -536 0 obj<>/XObject<<>>>>>>endobj -537 0 obj<>stream -xW]o8|ϯطKDu^yhC|K(TIʪ %َáHa"wwfvvRfw)s9e3Ygw9~2}q5<ɻ2ɲD;YgM~RmQ5+%|^y};_\-9γLlh\6)\5FYd~ct/c -/AE^V6eZ5R ]Ht&%:˫! -WZ {V:Di]fUknkLڊZ\-&n%$"nu3w6D5Rop?[mSDF/O]=?!K%"gG)VQz5 /@&Ū;o׆T*(wg/k~OP#mb|^*V)wy0Y54!t=]}88%߼@8#8Zol7 * J䫋㋟XdTA㸊\PXѹ<=|}LPlNdGl"c"չ)Mubak{Yn糄'4ˤQ% |adq h|+of6S0=T -c[v8J l (2 bu^&L:{1= ٨ sW yh0Ȯ(Z_z C+a'P;v?7J9b0%j9,IಣxJފQk&FBBOb)ar#̃U! "Y1W 0dd0`H;^UtJXP =htvSceQSThL<9Ln 0s{Z[8TƷϹ%]!S,[$0¢ǎM(KCM!40)S&9OJV v -Q o~W:`$fzGMzl?aR9S5)i,>/XObject<<>>>>>>endobj -539 0 obj<>stream -xuWnF}W Xql/"MRXA`X#i#r]Z,D M̙3g ߂n Uټ|.oyi/f_hqK l, vsZWWuA]`S[%ז \'fzg#|T2ٚMsIeh)Rݞ#u>$SƦ#B- +nkru`lb28&JQƖ#m|$#xɸhgo.W񼏒Ip@J6mOvSLb؊ej0$Dlp[L#S#qO3G?pr})w>T{`f\BTjF ZК=LaؐB`xmce=xI!%DK$@Ӣ;Vc\̩#O~v0 |x͞E"%0c%0ڱK84 $A;-Z1ܑ>8`}ǂ~7OR A~3;}vQHtݫn'G꣕%jM\guG!T:0gb*3kxA\5ՎF) .[n=G@cxU+ۚjI`9?J -ΣMIJTomCZedgY'IyIE6*0:F@0R}6y \[%9Yлv0 թ=zGQL;(Kd$X(#yx! -9vH!A#e*7Y喴&k8dòXU3LÇGLw\Pآ׺ oQF vʚ#55a33dƐ?FfXFt |-_}]_gPYpyݷ%C8Mnpmbq=JL|Ļp&j/"98Ɔ(E'Zo6\M,h0ub5scɔE-SYL<鄩 AHI-{ybJ K| _ P*z:gd#b^vePma2Kg~Q$x*v$z0ۨs'V 1 - -G>/XObject<<>>>>>>endobj -541 0 obj<>stream -xVmo6_qbF:i@b: hDj"wGJ~k2 bsV=`BI=1oaݺZwS{h<(Ie%}4c>kw @?Ch%{i؋3@E& qLm`-2BcE5̡`ڀ dӵ{'t0psК۴o^}sekl/{Ds:߃f<}[~_F7׳,2!1pO)h[pLX'䕁6%'[V$YҹK#裁w^*P% -W&;I\fBhd C+T7e4`:\A8g#b_{ߣRctGR`noD卵Mbn1ZTTZ,VGIg -=&MemRE] >/XObject<<>>>>>>endobj -543 0 obj<>stream -xV]o6|X(ErO .(=}$Yu"}g)g'uC";;;;^D!~# rLI F`D%ey~FфNS0y2 W~,NQ$>E·`OF))CLV\4 hZME!M4S|'#@rj#]X[F"(CVtIs'c|AzAWžBU."kuQ&*YdEJRV;h/Cu䍚UJ-ԟP5dʃŢQ?e}Z (H0ig+gjcS|ĕov3z30}M\t.*u]:^Xv4{ ?&3Dնj%bջcȢ(h%z-yj|&jsԿP =p?2剥18]ɿ;X1,/e7h2 ƳZny|.bWy= GQ0Oq3(d?z !;endstream -endobj -544 0 obj<>/XObject<<>>>>>>endobj -545 0 obj<>stream -xVkF?b8`+G -I9RŬF8ʲ&زf{3#M)/\ǥ}Cp3uo/7y ԣyDq]=$= 8}Z.+ʼnSSxgP.~hq\?i(W9p,+_P;˟l6v'>?uO_t۸R!kkѻZG!(c>ɛ['sQUOpϰN;o:ɂԒ4 - AV9[&"*qG^j2|:IA,#vv }Zf:2E)Ͳa[*kI^G -B)@!Y|6<'FWk\`;' ا$2f ke}Q}iW;7t+qvdL4EU J `lXg)$ML'Yl[k7!tE%.o1 -,@X-rQi&L7I%lK* v~E}Qd`ƘuG/#ʨd=n5"ø<ம"_*5cgϏO"4,6Mk4U'Z$>/XObject<<>>>>>>endobj -547 0 obj<>stream -xUn0+ kَij{ P"e3IW;Ky(i ò,;3_dOh:j=1S\g :.X0=p}:,|Q1Tt*gaN҉)G-Tܚ R20mQxuPGI[Z{/8Ga4Uqޛ[ңqwڵ Tvu[AJsΦbOמ$=ejҘ:%Xs=Z<3. -uhHK P]rb,}nK=!V>tVMM;@1G~5M\v*ڑ Ey;MzO+OnZ mMb>_hk[ -+nP-M fRqdބȧJ8p=*Ă.@vA_5GT5[CA/"[+f6?Ov5r[^eb -sŲԠB/<1ЖZV+GǠc/aw>fOBeʘfcu2--cuPx z/<}:?à|ԍ۰>םQ||!o_/|&o lp;6Iendstream -endobj -548 0 obj<>/XObject<<>>>>/Annots 288 0 R>>endobj -549 0 obj<>stream -xWn6}W lv|CYwo, lj1H IuOs h]:u)єoJtqEe{tVGCWMq1\igMofgG[:?yW74ָS5 eAwRfI~>(kX|IiZ|z~Sc&P$J[I=BPQNϯK^d$ٚB# *%_]:Ѷ#Bm^v*n<a"pl=Ĝ^$+=5+Ȍz/+ZlzIDJ2$.PмxcwZDoiCb/l,uA,VasBH $8^yPn2],@•-)Zi}{k0&Ok`86H]ʁrZ+QJKAw[ D:lYJZ-ي@HDYk``} ekA"-`N~&<ߢ=+vmJ9Q`O/f3w.• $[X -QUhn#ցI[9O=a#m wC:#nJ% TX(>uS$N;Iz;T w=R# mFךoJ2לŅ O^ʖ-$\9^KJ3uVS RNHثSa'Ps[ӯsҞAٓ -L06_CłL̘b^ M+ W`ˢ mn3 l/ꣳrҭ0T 1=.N-z Avzȷol+Hl^ 8._Ѓx%@O nv]OCl]jE2 {y{m'F]g 01We&8y ]a6Q Ѧmǝ -%.z+<64VF*ֱHs~ikNMʾ%T\>i*gLBZ9ArpTjr=t;6ٓd ֍*VOǃsY6F!Uz\rANj`'U:ѵҶq^MjT$tO$9h2Kފ3:ŔE]n~]k{h'G);5>G™:>߆ɑ+kH4@~z͟{7ns<Ř/6qgP1WŋZ~O^ *̤ݬ={g<>pǼqfLL'jk'cŽaK}*`ЪFwD[k޳Ss2 z9f}aR1T`^/1(@{IG%k]kIm+«my) ZW eƎ0h/ @ {\brA~z巗c2JG d  җ|K= 5ep ~*ĆO&`v/ꃠ{ ӑsqq/0ܠi=vo"c&\zxlܒ{fj_;R=1o4~0#;qm. -PaQ!/18Kh@o3sSvp A )xEÇwx㣤 ;`hp,< [>/XObject<<>>>>>>endobj -551 0 obj<>stream -xmWas8_ߚ%7BN皶7s_2:d'[a:&F}Ő7>O(-.ɀFA2Ǐ_\\pHNiH/+/IL C^$"u.*St̚=\z)iҺL$'a2R&HgIfӗ*5⟋b^ʭt{k$!oxOpPsh8LƇ$?lۨfTQjdWy(G:=I,gd_VZ^'y VIcsGTh_L)s'kK+Ѫui[=KbkUd9cemNr*(" VL^)SQ|ǘIMM*C>*tve7>_-NQ)s2 =jdSZ~dP Wy %e*cc1 }[VL'0 37(ӉPo -y<$gQ,}]fL7ꞃ -:BZuOhmeiiK,>cԚ+nȦ .Od[a!dȖu0v)HpaKIhiiH裯a=,W=>'JN$D[%̖k$y@'p@?SM:SJ[MCѺ4醐ĻٓX e@ -{$N={]|_~m^uDZTFt٨K[-z}6sI9ߠ3(jG_J뽂"Fn&oD0B45]H@1>u>irt@׵:X8"ʳݱLGfUmaQ̨T]0Q̭2 -g::;~PFG-) -bB*e'Vj}9âwԦÏN{r@Q7JȄhə:AJ$܆c-ѱR>prM4x;@dD6AJ7PcU„ !8qF9w3L?,#._TH#~7{)"<'7(Z&7 ;i0z}* '[H -49mb0|W:ꣃ^<),opa%5W hOKlcNK > *JD( >'C5ö]Ƿ5`dG"$j]ѓ;N05}xrtd}, ;vmҫQg`Gðb.@f*-n'aGmfjSC^5`1! s_uܴrn׹%L|0l)'WXDFXmNi# b;I%c˲·aaQg/VPr׌Tl3W3'tO -RG?oj^<%6qP(LxGKg쩅S.uu2<h)4ް|СTʌo #c:(;p1wK%.UMo>~B7%Rx ~]k8M&Nimzϳ=4Lk_7gd"phncGtL' qqYendstream -endobj -552 0 obj<>/XObject<<>>>>>>endobj -553 0 obj<>stream -x}XNH}+J<1̍ۆ-R6ha%$Զ^nm3jcl`SΏ)]ϔV3_QR\FX kM']&Ö՚6)a%$g׹]2{UƊn-*Ϳs -;'E4޳e4j?M canl]Mn@vZ:`XVpĎY͛R,lIڄi#@A,azJ[mu -`u,b֊h:)TZ`+7@ogDd5P476ڄ%zz9S.xMlL}*Yv=|P3caEb_zJ #'t&H_7C$fE(FfU֓Ibh0Z#Rf>zW2Wn*b+(0-Ϻ*Bd}_]5>!JcGΑM|@yB -.j/94ִĆO.+lGΈ䜼xaQq[ EA2Ȇ>,2E0Gk^Tk;-#3~O.Ǯk)' -5i:rm*EA6[ [t[ޡ]ň"5*v(]HJaG;B2`!4 &'Z @ff1se^2laU?\w wY{ɨB3 HEBtZ-j:yt.mp`-SkJQ, t AHCh1` QoL*W0\7_z \a#UwJZ.$8A<>~ )&|duZ|" ;($rd\KS%wll`D65lɦඨUvap;RQ; (t'E1gyK/ ;"v&kh~FO1-3 6nwIg9,+&hӶqW=Tz<b g4 -%-zĞbjekCV#}IP+ 9w(_NRn}x VRڣXKI[E&sg]2ݗxxV8v PAGN/#K邏XZqW(I]hcLQűxzG&q<nmƏ@0u#3r;snp,)焂ꑛ`Md" #7CQ+qI|lZ)h[(i+Yw"ih]Bo2D8F:4A`%݊KCQ-;hik0u" ]T[)RDB-m a -6/nM]2/;`ZDuK䯓xrendstream -endobj -554 0 obj<>/XObject<<>>>>>>endobj -555 0 obj<>stream -xUMs0+vr)68i;L?p{"5V 2d}W qHH0H'~yg>I҄4B^9v, ] QuK"ADD&,Jœ.nqE;s+'R&@B>E_f T*l+~!JނZap٨7F-Q[QBC`5O=Pβ0pWpV #I2n HFYSXBD)$wDSh9ABZ#׉Jr'!F$ -]xkQE<#1tES"2!BgӸ?iEcƧ\*N\*TA 7NPBQ:^E-(,Oxb"٥0sT(sFUTd8@2#"j Y1LLZ;CU)QQk+vHvvohlLA 䊓'|<0p_w[u{F]]6^_ ij4 ޷Dg~ۺEIĒ8]J .endstream -endobj -556 0 obj<>/XObject<<>>>>>>endobj -557 0 obj<>stream -xVr6}WIX )Ҥ>mz&N]K͓f2 JhI@8us-z|~vMqQGV.csDAnld֜҆ Tb%yN0#.s$ ikbTQ`3=Q(<7Got1[_uX[}[MeKo˄3ຑGbTh-?mGYF(8_>2E;W~3i!{BDJ`dF}O"%ogIf}Ϊ愊xee5<3BIyiF5IV8=w?S#gIB9kkSʹwRÄU'V )ʵW6S9H$ -yBʚKxtc6eNR8X!љ4VC)^V;y}5taṴ\-k<8i۔!/#RQzIffm6@dRJ/AA,zna@\%bBz&8nKՑwr,*EBcGĸرmTsC3S$ekbL9صs{!GvE>>WHFٳ'( >fxhB9a!|L|lC[m cwJQ#>Ijjt4G+ pBKǧZGҢfҝĂЋS?Rm~k;@Lܻćtg|QyI<*=F~] M|endstream -endobj -558 0 obj<>/XObject<<>>>>>>endobj -559 0 obj<>stream -xW]oF|X6`1,Krޔ) $AZ -Z0ѺSyUw>(VJٙg߄SSV1&dJSՒ -goh2ug̗ ZscZgu.mҍ16SeI$+٭f#qyZ$W(Kd -(rlL5b\Uk%L4g)KLOxǵ˄W]&sޏ$9E%%޴dڧ J_nsv+Yg2.΢}}Wt敦V[IO攪;SWHU*Dvc2q~Ϣl%l6t冴i6L)"YuIfJe #^xw٦V 8@/T)Z5h - ?>Grv57Y[IP` -%|3ӨjdTjO!`<"v5z2O Ù70]QZ\Ӂk>=  -8%( 5EtAHub]^1jQѰpF]uIhޙ69o?gYr9iEL_ёI=37Lۢqv,(S $Ao{>D6ϵm%RQ/ZP:M tpp';@-ps@P˶iGhvN]jp_Ԇqz_`MֆJ͋:}SfrWT(wbo]>@la=- 5+aP r=E =| &\?yKu9xϾIf 4kVކvʍJbpd$KT;E>\ƾVu^OA? ?3O= 9O3+Dɍz9;_O Af/Ȳ1ʴ0`uR -]EGFs0z1≁;a[c1C#FMN'f#_f!nAA&p7ݦM6Em*^f(1L%kkXG]Y`81WזnM'&,%ײQ=;a&qqZ㔛~5Twfy؛vw|90׹3 ^duhCj˗M21Y8[xP3)A#AXϺ|=幫{L!ePA9>eʧIJĹ3ƋPB4Hl X;'9m$yͅr;hN!l0;(ŧ8ʑv=^z pB{QZ/ ` 7n*?Fԏۦa5ݵLhyil9 Sp jg;ݠ Nc7u{ϵP0 ->G6T̓`~ׅ.6A -R'/dnf7sX&[ϜMݯ>[O<7-ҪquW[vb,Kty,9g =endstream -endobj -560 0 obj<>/XObject<<>>>>>>endobj -561 0 obj<>stream -xTMo0 Wڎ]$]YvEX#eܬ klXaĐG1zBH#'Pg19Fhu]P4d!5Px@Ql`jW5X^vxUBw~RgԖ 5}e{8h*-J|=ri@5zݽX!w*%0(Z48@v@ᜪ"wB*ޏ|@Ce-^KH;.קҨ,dtpVzi~ӗo>/XObject<<>>>>>>endobj -563 0 obj<>stream -xVn6+.Ѕm VL1AȢE ̢mHH%|}Ͻ,?&ysoWc{L M甕WdDӻY2OSiZˋtt&#ZkeN3“U+'j*ɜ]zWqpʉyzԯ&S}{"bM)82Oe{0Vj/9 iOn-k< /+5 -Kp<M+fNUI>b;̓[(Ԥ#H2 -5Atۇh}Ÿޕ,Jox/&lIRui+;WۜXO{ie޿u ls^!N[j{UIEe?L,I=93bG r,\U]DdI:8v'vkS@ X_YcTt΁ka% * (Bnc -'# t*)kl*~sL![#E!xoxVE}9X>J F-tD:EqN %%9/9xgQJ$E62S4V?PcO8f5٬q$WD rΛa-v m0( ' VDz{`H;Z6({)c6}:KL3 ױEsHzJS EնQqZL՘ l0kI0xxU:X$}lt&рO] 7kyS"R[$c!qބ>:ϰ~~F̕;HOވ=P=ܺ^ZKrRM pH޵!4fYpPg1(:$w#6⋁|;&ި8 -Ϊ2jo =4J.נݵY^jԏGDP17Ӵ(kf,uHO"HrH._]]ЊW)aݥu\qr/-fb~}꯫jendstream -endobj -564 0 obj<>/XObject<<>>>>>>endobj -565 0 obj<>stream -xV]oF}W7PCHMVYV< nf;c>(ǹsv'qHÈ3CD!~ IK |}zys; ɘf !`@{KIZ#IpIوXZ,T9mug72o -i*ZՎVJP  PK,UG2RW!C,edpi42>ͻKӣ_b]퐥*NQZBH@+ٺ&E!R2.dBZ"&#ȗĥ^"H#i\E(JT 1T*A\" -x'}x4o~ozF͕_E[1:Q8rXd.iId:o؁?|ݛ\-}II:W?c~=5[UkҰiN,!YHmݦ:=ND$\t:6 G{Ok -G7Q;y8K~zCwZIce<`+B)JvkC9DhMPaƿBL?|!X#(bL1PVң[e~fAoxHO_#~{T;fĐ9n&kNЏ..(n>O?\Og$3C}S?Om>/XObject<<>>>>>>endobj -567 0 obj<>stream -x}S0s[X7 !CAe{]j\`CJU)͛7bD3(by2˜z;&\,Xq 2GYR8e4ײPN5J؞5Qjwv\j8n(r{ IcaYBcR"jy)7s,|=3"|m3#:%K=N#A JKϺV'"^Cig (k}Quo=oaՎ0=Xq7=@! ߖph+= -ϵ<JU҇bِfiJ&KXPlM O}du;&}I؇icatvhT*^;MNa~V̅R5z -ڸSڸ٪[\T+]cÐF^5'AC-%FtN *d//%Vdogy-eS6|Z;ˣ]MْgM9:qendstream -endobj -568 0 obj<>/XObject<<>>>>>>endobj -569 0 obj<>stream -xW]o6}ϯ00\%v8k[\/DYl$Q#);;]@"s?ŜoN]R\\eWMvG7wKsy4zvuqy-hUVwvO><>iIּ'X/ olL<68[y0N|O.-\U~ʺ@FB3F-XHN-yEO%t~zD;#JWz~=X==f(MzѪjԁ*]wi ,)Y[l-!:6_?. -fژڄC6,|8n)9n\C:W)OȷՀt0e׮U:gmMm}@Tk .d^9g-Op6?ǧ+ijWPUpBZX|''ym++B .\Kgr}-wN8:;Xs4ک { -̰N1R -^==7:}[m\vu~ƾ =4n}AP'BOHx.$JJȶ㸡pFvZF՚R{lu =RqeAWR -z ^jKac UI oX=qҺŊ5pQĊ_@T2wq;4o4i Kx-8it oc4#mk$-R |nܴ}79*FH}q 6bd&I/KI^=ߒ(ӈy2gA6˗h+ZB w) #)KK3SYсZ 2z[ Nd$X7#q|Ŷ*I,T*vCg'rɮkM'vY1) -4zPf=S89C5%^D`aW`,Iɹur<P0BeK7HpX+HMZ*ȣw9USb4a:X;iӨV15ãh\M}:MW| 0 hc Pin 9Tv Ws I5!Y@v 1l_[Re:$kid}AphGI{GW('G KF -СKD2I8R,XjfLo0Ɛ@s"槚6XR7!NŌhf:ޠ{_/<%&>Yʒ-X# -6Qf c.h -"3P< N9KŁkXk|c=}Kذ=[Z``YEXR.$3)+Y >PX)Ok(b†bi 6`Ҹy,`BK{4I>ejդ6}vyTTmB[Oy&Ѩg=`Qt]g$=gUn.NjWYd;|Ogqޯ.uendstream -endobj -570 0 obj<>/XObject<<>>>>>>endobj -571 0 obj<>stream -x}Wn8}W i(㵓^E&BIŖ"URr`8H$r.gΜ<?SZjAEs2&X\z3|*nK/n&lÜSZW^Һ$؟Lh]k / M^Sju/sR]̆:/F-0%UVoe*UZ? -˳5VN GF(>ӗnh`9ꋫ92ƽe6~g]ӱ.fl-ZIpPz/sc[e;VL?}|J!s'gQE#9bQ\ff;[$p&E yVf.U,:0%tV܃3cW+TVNa|O3<4OɶLOH5l!O0rYUz!kADW0]ýRvWRTCX#)H V)s+B8 SoDQrt*pye=zXZˌ6i -O52ԶQd`Eos`d֑I^z[22Cpe:|! Ha)%պ?3h F8ҭ ŠmlY6L?HL8ʨ9vRb/H>θ `,ǼZ#23ѓ"DgJtKdKU!jNӡGu6?:wG@|4V?dWT&\>¡ޅ rОلPu>7peᥳ[ P hF|і&&+}dci}Q"] -R #KDXo2s+UrC6:==1K*TwXqT {mZ2,q.PZGN$L@m,FX?v1RG \4$v -%FW >I1:E*Eh}(GmҪݯh[܊Nq#0Sbho<ް~3 +%PDF-1.4 +5 0 obj +<< /S /GoTo /D (chapter.1) >> +endobj +8 0 obj +(1 Definition of NetBIOS Protocol and Name Resolution Modes) +endobj +9 0 obj +<< /S /GoTo /D (section.1.1) >> +endobj +12 0 obj +(1.1 NETBIOS) +endobj +13 0 obj +<< /S /GoTo /D (section.1.2) >> +endobj +16 0 obj +(1.2 BROADCAST NetBIOS) +endobj +17 0 obj +<< /S /GoTo /D (section.1.3) >> +endobj +20 0 obj +(1.3 NBNS NetBIOS) +endobj +21 0 obj +<< /S /GoTo /D (chapter.2) >> +endobj +24 0 obj +(2 Samba Architecture) +endobj +25 0 obj +<< /S /GoTo /D (section.2.1) >> +endobj +28 0 obj +(2.1 Introduction) +endobj +29 0 obj +<< /S /GoTo /D (section.2.2) >> +endobj +32 0 obj +(2.2 Multithreading and Samba) +endobj +33 0 obj +<< /S /GoTo /D (section.2.3) >> +endobj +36 0 obj +(2.3 Threading smbd) +endobj +37 0 obj +<< /S /GoTo /D (section.2.4) >> +endobj +40 0 obj +(2.4 Threading nmbd) +endobj +41 0 obj +<< /S /GoTo /D (section.2.5) >> +endobj +44 0 obj +(2.5 nbmd Design) +endobj +45 0 obj +<< /S /GoTo /D (chapter.3) >> +endobj +48 0 obj +(3 The samba DEBUG system) +endobj +49 0 obj +<< /S /GoTo /D (section.3.1) >> +endobj +52 0 obj +(3.1 New Output Syntax) +endobj +53 0 obj +<< /S /GoTo /D (section.3.2) >> +endobj +56 0 obj +(3.2 The DEBUG\(\) Macro) +endobj +57 0 obj +<< /S /GoTo /D (section.3.3) >> +endobj +60 0 obj +(3.3 The DEBUGADD\(\) Macro) +endobj +61 0 obj +<< /S /GoTo /D (section.3.4) >> +endobj +64 0 obj +(3.4 The DEBUGLVL\(\) Macro) +endobj +65 0 obj +<< /S /GoTo /D (section.3.5) >> +endobj +68 0 obj +(3.5 New Functions) +endobj +69 0 obj +<< /S /GoTo /D (subsection.3.5.1) >> +endobj +72 0 obj +(3.5.1 dbgtext\(\)) +endobj +73 0 obj +<< /S /GoTo /D (subsection.3.5.2) >> +endobj +76 0 obj +(3.5.2 dbghdr\(\)) +endobj +77 0 obj +<< /S /GoTo /D (subsection.3.5.3) >> +endobj +80 0 obj +(3.5.3 format\137debug\137text\(\)) +endobj +81 0 obj +<< /S /GoTo /D (chapter.4) >> +endobj +84 0 obj +(4 Coding Suggestions) +endobj +85 0 obj +<< /S /GoTo /D (chapter.5) >> +endobj +88 0 obj +(5 Samba Internals) +endobj +89 0 obj +<< /S /GoTo /D (section.5.1) >> +endobj +92 0 obj +(5.1 Character Handling) +endobj +93 0 obj +<< /S /GoTo /D (section.5.2) >> +endobj +96 0 obj +(5.2 The new functions) +endobj +97 0 obj +<< /S /GoTo /D (section.5.3) >> +endobj +100 0 obj +(5.3 Macros in byteorder.h) +endobj +101 0 obj +<< /S /GoTo /D (subsection.5.3.1) >> +endobj +104 0 obj +(5.3.1 CVAL\(buf,pos\)) +endobj +105 0 obj +<< /S /GoTo /D (subsection.5.3.2) >> +endobj +108 0 obj +(5.3.2 PVAL\(buf,pos\)) +endobj +109 0 obj +<< /S /GoTo /D (subsection.5.3.3) >> +endobj +112 0 obj +(5.3.3 SCVAL\(buf,pos,val\)) +endobj +113 0 obj +<< /S /GoTo /D (subsection.5.3.4) >> +endobj +116 0 obj +(5.3.4 SVAL\(buf,pos\)) +endobj +117 0 obj +<< /S /GoTo /D (subsection.5.3.5) >> +endobj +120 0 obj +(5.3.5 IVAL\(buf,pos\)) +endobj +121 0 obj +<< /S /GoTo /D (subsection.5.3.6) >> +endobj +124 0 obj +(5.3.6 SVALS\(buf,pos\)) +endobj +125 0 obj +<< /S /GoTo /D (subsection.5.3.7) >> +endobj +128 0 obj +(5.3.7 IVALS\(buf,pos\)) +endobj +129 0 obj +<< /S /GoTo /D (subsection.5.3.8) >> +endobj +132 0 obj +(5.3.8 SSVAL\(buf,pos,val\)) +endobj +133 0 obj +<< /S /GoTo /D (subsection.5.3.9) >> +endobj +136 0 obj +(5.3.9 SIVAL\(buf,pos,val\)) +endobj +137 0 obj +<< /S /GoTo /D (subsection.5.3.10) >> +endobj +140 0 obj +(5.3.10 SSVALS\(buf,pos,val\)) +endobj +141 0 obj +<< /S /GoTo /D (subsection.5.3.11) >> +endobj +144 0 obj +(5.3.11 SIVALS\(buf,pos,val\)) +endobj +145 0 obj +<< /S /GoTo /D (subsection.5.3.12) >> +endobj +148 0 obj +(5.3.12 RSVAL\(buf,pos\)) +endobj +149 0 obj +<< /S /GoTo /D (subsection.5.3.13) >> +endobj +152 0 obj +(5.3.13 RIVAL\(buf,pos\)) +endobj +153 0 obj +<< /S /GoTo /D (subsection.5.3.14) >> +endobj +156 0 obj +(5.3.14 RSSVAL\(buf,pos,val\)) +endobj +157 0 obj +<< /S /GoTo /D (subsection.5.3.15) >> +endobj +160 0 obj +(5.3.15 RSIVAL\(buf,pos,val\)) +endobj +161 0 obj +<< /S /GoTo /D (section.5.4) >> +endobj +164 0 obj +(5.4 LAN Manager Samba API) +endobj +165 0 obj +<< /S /GoTo /D (subsection.5.4.1) >> +endobj +168 0 obj +(5.4.1 Parameters) +endobj +169 0 obj +<< /S /GoTo /D (subsection.5.4.2) >> +endobj +172 0 obj +(5.4.2 Return value) +endobj +173 0 obj +<< /S /GoTo /D (section.5.5) >> +endobj +176 0 obj +(5.5 Code character table) +endobj +177 0 obj +<< /S /GoTo /D (chapter.6) >> +endobj +180 0 obj +(6 The smb.conf file) +endobj +181 0 obj +<< /S /GoTo /D (section.6.1) >> +endobj +184 0 obj +(6.1 Lexical Analysis) +endobj +185 0 obj +<< /S /GoTo /D (subsection.6.1.1) >> +endobj +188 0 obj +(6.1.1 Handling of Whitespace) +endobj +189 0 obj +<< /S /GoTo /D (subsection.6.1.2) >> +endobj +192 0 obj +(6.1.2 Handling of Line Continuation) +endobj +193 0 obj +<< /S /GoTo /D (subsection.6.1.3) >> +endobj +196 0 obj +(6.1.3 Line Continuation Quirks) +endobj +197 0 obj +<< /S /GoTo /D (section.6.2) >> +endobj +200 0 obj +(6.2 Syntax) +endobj +201 0 obj +<< /S /GoTo /D (subsection.6.2.1) >> +endobj +204 0 obj +(6.2.1 About params.c) +endobj +205 0 obj +<< /S /GoTo /D (chapter.7) >> +endobj +208 0 obj +(7 NetBIOS in a Unix World) +endobj +209 0 obj +<< /S /GoTo /D (section.7.1) >> +endobj +212 0 obj +(7.1 Introduction) +endobj +213 0 obj +<< /S /GoTo /D (section.7.2) >> +endobj +216 0 obj +(7.2 Usernames) +endobj +217 0 obj +<< /S /GoTo /D (section.7.3) >> +endobj +220 0 obj +(7.3 File Ownership) +endobj +221 0 obj +<< /S /GoTo /D (section.7.4) >> +endobj +224 0 obj +(7.4 Passwords) +endobj +225 0 obj +<< /S /GoTo /D (section.7.5) >> +endobj +228 0 obj +(7.5 Locking) +endobj +229 0 obj +<< /S /GoTo /D (section.7.6) >> +endobj +232 0 obj +(7.6 Deny Modes) +endobj +233 0 obj +<< /S /GoTo /D (section.7.7) >> +endobj +236 0 obj +(7.7 Trapdoor UIDs) +endobj +237 0 obj +<< /S /GoTo /D (section.7.8) >> +endobj +240 0 obj +(7.8 Port numbers) +endobj +241 0 obj +<< /S /GoTo /D (section.7.9) >> +endobj +244 0 obj +(7.9 Protocol Complexity) +endobj +245 0 obj +<< /S /GoTo /D (chapter.8) >> +endobj +248 0 obj +(8 Tracing samba system calls) +endobj +249 0 obj +<< /S /GoTo /D (chapter.9) >> +endobj +252 0 obj +(9 NT Domain RPC's) +endobj +253 0 obj +<< /S /GoTo /D (section.9.1) >> +endobj +256 0 obj +(9.1 Introduction) +endobj +257 0 obj +<< /S /GoTo /D (subsection.9.1.1) >> +endobj +260 0 obj +(9.1.1 Sources) +endobj +261 0 obj +<< /S /GoTo /D (subsection.9.1.2) >> +endobj +264 0 obj +(9.1.2 Credits) +endobj +265 0 obj +<< /S /GoTo /D (section.9.2) >> +endobj +268 0 obj +(9.2 Notes and Structures) +endobj +269 0 obj +<< /S /GoTo /D (subsection.9.2.1) >> +endobj +272 0 obj +(9.2.1 Notes) +endobj +273 0 obj +<< /S /GoTo /D (subsection.9.2.2) >> +endobj +276 0 obj +(9.2.2 Enumerations) +endobj +277 0 obj +<< /S /GoTo /D (subsubsection.9.2.2.1) >> +endobj +280 0 obj +(9.2.2.1 MSRPC Header type) +endobj +281 0 obj +<< /S /GoTo /D (subsubsection.9.2.2.2) >> +endobj +284 0 obj +(9.2.2.2 MSRPC Packet info) +endobj +285 0 obj +<< /S /GoTo /D (subsection.9.2.3) >> +endobj +288 0 obj +(9.2.3 Structures) +endobj +289 0 obj +<< /S /GoTo /D (subsubsection.9.2.3.1) >> +endobj +292 0 obj +(9.2.3.1 VOID *) +endobj +293 0 obj +<< /S /GoTo /D (subsubsection.9.2.3.2) >> +endobj +296 0 obj +(9.2.3.2 char) +endobj +297 0 obj +<< /S /GoTo /D (subsubsection.9.2.3.3) >> +endobj +300 0 obj +(9.2.3.3 UTIME) +endobj +301 0 obj +<< /S /GoTo /D (subsubsection.9.2.3.4) >> +endobj +304 0 obj +(9.2.3.4 NTTIME) +endobj +305 0 obj +<< /S /GoTo /D (subsubsection.9.2.3.5) >> +endobj +308 0 obj +(9.2.3.5 DOM\137SID \(domain SID structure\)) +endobj +309 0 obj +<< /S /GoTo /D (subsubsection.9.2.3.6) >> +endobj +312 0 obj +(9.2.3.6 STR \(string\)) +endobj +313 0 obj +<< /S /GoTo /D (subsubsection.9.2.3.7) >> +endobj +316 0 obj +(9.2.3.7 UNIHDR \(unicode string header\)) +endobj +317 0 obj +<< /S /GoTo /D (subsubsection.9.2.3.8) >> +endobj +320 0 obj +(9.2.3.8 UNIHDR2 \(unicode string header plus buffer pointer\)) +endobj +321 0 obj +<< /S /GoTo /D (subsubsection.9.2.3.9) >> +endobj +324 0 obj +(9.2.3.9 UNISTR \(unicode string\)) +endobj +325 0 obj +<< /S /GoTo /D (subsubsection.9.2.3.10) >> +endobj +328 0 obj +(9.2.3.10 NAME \(length-indicated unicode string\)) +endobj +329 0 obj +<< /S /GoTo /D (subsubsection.9.2.3.11) >> +endobj +332 0 obj +(9.2.3.11 UNISTR2 \(aligned unicode string\)) +endobj +333 0 obj +<< /S /GoTo /D (subsubsection.9.2.3.12) >> +endobj +336 0 obj +(9.2.3.12 OBJ\137ATTR \(object attributes\)) +endobj +337 0 obj +<< /S /GoTo /D (subsubsection.9.2.3.13) >> +endobj +340 0 obj +(9.2.3.13 POL\137HND \(LSA policy handle\)) +endobj +341 0 obj +<< /S /GoTo /D (subsubsection.9.2.3.14) >> +endobj +344 0 obj +(9.2.3.14 DOM\137SID2 \(domain SID structure, SIDS stored in unicode\)) +endobj +345 0 obj +<< /S /GoTo /D (subsubsection.9.2.3.15) >> +endobj +348 0 obj +(9.2.3.15 DOM\137RID \(domain RID structure\)) +endobj +349 0 obj +<< /S /GoTo /D (subsubsection.9.2.3.16) >> +endobj +352 0 obj +(9.2.3.16 LOG\137INFO \(server, account, client structure\)) +endobj +353 0 obj +<< /S /GoTo /D (subsubsection.9.2.3.17) >> +endobj +356 0 obj +(9.2.3.17 CLNT\137SRV \(server, client names structure\)) +endobj +357 0 obj +<< /S /GoTo /D (subsubsection.9.2.3.18) >> +endobj +360 0 obj +(9.2.3.18 CREDS \(credentials + time stamp\)) +endobj +361 0 obj +<< /S /GoTo /D (subsubsection.9.2.3.19) >> +endobj +364 0 obj +(9.2.3.19 CLNT\137INFO2 \(server, client structure, client credentials\)) +endobj +365 0 obj +<< /S /GoTo /D (subsubsection.9.2.3.20) >> +endobj +368 0 obj +(9.2.3.20 CLNT\137INFO \(server, account, client structure, client credentials\)) +endobj +369 0 obj +<< /S /GoTo /D (subsubsection.9.2.3.21) >> +endobj +372 0 obj +(9.2.3.21 ID\137INFO\1371 \(id info structure, auth level 1\)) +endobj +373 0 obj +<< /S /GoTo /D (subsubsection.9.2.3.22) >> +endobj +376 0 obj +(9.2.3.22 SAM\137INFO \(sam logon/logoff id info structure\)) +endobj +377 0 obj +<< /S /GoTo /D (subsubsection.9.2.3.23) >> +endobj +380 0 obj +(9.2.3.23 GID \(group id info\)) +endobj +381 0 obj +<< /S /GoTo /D (subsubsection.9.2.3.24) >> +endobj +384 0 obj +(9.2.3.24 DOM\137REF \(domain reference info\)) +endobj +385 0 obj +<< /S /GoTo /D (subsubsection.9.2.3.25) >> +endobj +388 0 obj +(9.2.3.25 DOM\137INFO \(domain info, levels 3 and 5 are the same\)\)) +endobj +389 0 obj +<< /S /GoTo /D (subsubsection.9.2.3.26) >> +endobj +392 0 obj +(9.2.3.26 USER\137INFO \(user logon info\)) +endobj +393 0 obj +<< /S /GoTo /D (subsubsection.9.2.3.27) >> +endobj +396 0 obj +(9.2.3.27 SH\137INFO\1371\137PTR \(pointers to level 1 share info strings\)) +endobj +397 0 obj +<< /S /GoTo /D (subsubsection.9.2.3.28) >> +endobj +400 0 obj +(9.2.3.28 SH\137INFO\1371\137STR \(level 1 share info strings\)) +endobj +401 0 obj +<< /S /GoTo /D (subsubsection.9.2.3.29) >> +endobj +404 0 obj +(9.2.3.29 SHARE\137INFO\1371\137CTR) +endobj +405 0 obj +<< /S /GoTo /D (subsubsection.9.2.3.30) >> +endobj +408 0 obj +(9.2.3.30 SERVER\137INFO\137101) +endobj +409 0 obj +<< /S /GoTo /D (section.9.3) >> +endobj +412 0 obj +(9.3 MSRPC over Transact Named Pipe) +endobj +413 0 obj +<< /S /GoTo /D (subsection.9.3.1) >> +endobj +416 0 obj +(9.3.1 MSRPC Pipes) +endobj +417 0 obj +<< /S /GoTo /D (subsection.9.3.2) >> +endobj +420 0 obj +(9.3.2 Header) +endobj +421 0 obj +<< /S /GoTo /D (subsubsection.9.3.2.1) >> +endobj +424 0 obj +(9.3.2.1 RPC\137Packet for request, response, bind and bind acknowledgement) +endobj +425 0 obj +<< /S /GoTo /D (subsubsection.9.3.2.2) >> +endobj +428 0 obj +(9.3.2.2 Interface identification) +endobj +429 0 obj +<< /S /GoTo /D (subsubsection.9.3.2.3) >> +endobj +432 0 obj +(9.3.2.3 RPC\137Iface RW) +endobj +433 0 obj +<< /S /GoTo /D (subsubsection.9.3.2.4) >> +endobj +436 0 obj +(9.3.2.4 RPC\137ReqBind RW) +endobj +437 0 obj +<< /S /GoTo /D (subsubsection.9.3.2.5) >> +endobj +440 0 obj +(9.3.2.5 RPC\137Address RW) +endobj +441 0 obj +<< /S /GoTo /D (subsubsection.9.3.2.6) >> +endobj +444 0 obj +(9.3.2.6 RPC\137ResBind RW) +endobj +445 0 obj +<< /S /GoTo /D (subsubsection.9.3.2.7) >> +endobj +448 0 obj +(9.3.2.7 RPC\137ReqNorm RW) +endobj +449 0 obj +<< /S /GoTo /D (subsubsection.9.3.2.8) >> +endobj +452 0 obj +(9.3.2.8 RPC\137ResNorm RW) +endobj +453 0 obj +<< /S /GoTo /D (subsection.9.3.3) >> +endobj +456 0 obj +(9.3.3 Tail) +endobj +457 0 obj +<< /S /GoTo /D (subsection.9.3.4) >> +endobj +460 0 obj +(9.3.4 RPC Bind / Bind Ack) +endobj +461 0 obj +<< /S /GoTo /D (subsection.9.3.5) >> +endobj +464 0 obj +(9.3.5 NTLSA Transact Named Pipe) +endobj +465 0 obj +<< /S /GoTo /D (subsection.9.3.6) >> +endobj +468 0 obj +(9.3.6 LSA Open Policy) +endobj +469 0 obj +<< /S /GoTo /D (subsubsection.9.3.6.1) >> +endobj +472 0 obj +(9.3.6.1 Request) +endobj +473 0 obj +<< /S /GoTo /D (subsubsection.9.3.6.2) >> +endobj +476 0 obj +(9.3.6.2 Response) +endobj +477 0 obj +<< /S /GoTo /D (subsection.9.3.7) >> +endobj +480 0 obj +(9.3.7 LSA Query Info Policy) +endobj +481 0 obj +<< /S /GoTo /D (subsubsection.9.3.7.1) >> +endobj +484 0 obj +(9.3.7.1 Request) +endobj +485 0 obj +<< /S /GoTo /D (subsubsection.9.3.7.2) >> +endobj +488 0 obj +(9.3.7.2 Response) +endobj +489 0 obj +<< /S /GoTo /D (subsection.9.3.8) >> +endobj +492 0 obj +(9.3.8 LSA Enumerate Trusted Domains) +endobj +493 0 obj +<< /S /GoTo /D (subsubsection.9.3.8.1) >> +endobj +496 0 obj +(9.3.8.1 Request) +endobj +497 0 obj +<< /S /GoTo /D (subsubsection.9.3.8.2) >> +endobj +500 0 obj +(9.3.8.2 Response) +endobj +501 0 obj +<< /S /GoTo /D (subsection.9.3.9) >> +endobj +504 0 obj +(9.3.9 LSA Open Secret) +endobj +505 0 obj +<< /S /GoTo /D (subsubsection.9.3.9.1) >> +endobj +508 0 obj +(9.3.9.1 Request) +endobj +509 0 obj +<< /S /GoTo /D (subsubsection.9.3.9.2) >> +endobj +512 0 obj +(9.3.9.2 Response) +endobj +513 0 obj +<< /S /GoTo /D (subsection.9.3.10) >> +endobj +516 0 obj +(9.3.10 LSA Close) +endobj +517 0 obj +<< /S /GoTo /D (subsubsection.9.3.10.1) >> +endobj +520 0 obj +(9.3.10.1 Request) +endobj +521 0 obj +<< /S /GoTo /D (subsubsection.9.3.10.2) >> +endobj +524 0 obj +(9.3.10.2 Response) +endobj +525 0 obj +<< /S /GoTo /D (subsection.9.3.11) >> +endobj +528 0 obj +(9.3.11 LSA Lookup SIDS) +endobj +529 0 obj +<< /S /GoTo /D (subsubsection.9.3.11.1) >> +endobj +532 0 obj +(9.3.11.1 Request) +endobj +533 0 obj +<< /S /GoTo /D (subsubsection.9.3.11.2) >> +endobj +536 0 obj +(9.3.11.2 Response) +endobj +537 0 obj +<< /S /GoTo /D (subsection.9.3.12) >> +endobj +540 0 obj +(9.3.12 LSA Lookup Names) +endobj +541 0 obj +<< /S /GoTo /D (subsubsection.9.3.12.1) >> +endobj +544 0 obj +(9.3.12.1 Request) +endobj +545 0 obj +<< /S /GoTo /D (subsubsection.9.3.12.2) >> +endobj +548 0 obj +(9.3.12.2 Response) +endobj +549 0 obj +<< /S /GoTo /D (section.9.4) >> +endobj +552 0 obj +(9.4 NETLOGON rpc Transact Named Pipe) +endobj +553 0 obj +<< /S /GoTo /D (subsection.9.4.1) >> +endobj +556 0 obj +(9.4.1 LSA Request Challenge) +endobj +557 0 obj +<< /S /GoTo /D (subsubsection.9.4.1.1) >> +endobj +560 0 obj +(9.4.1.1 Request) +endobj +561 0 obj +<< /S /GoTo /D (subsubsection.9.4.1.2) >> +endobj +564 0 obj +(9.4.1.2 Response) +endobj +565 0 obj +<< /S /GoTo /D (subsection.9.4.2) >> +endobj +568 0 obj +(9.4.2 LSA Authenticate 2) +endobj +569 0 obj +<< /S /GoTo /D (subsubsection.9.4.2.1) >> +endobj +572 0 obj +(9.4.2.1 Request) +endobj +573 0 obj +<< /S /GoTo /D (subsubsection.9.4.2.2) >> +endobj +576 0 obj +(9.4.2.2 Response) +endobj +577 0 obj +<< /S /GoTo /D (subsection.9.4.3) >> +endobj +580 0 obj +(9.4.3 LSA Server Password Set) +endobj +581 0 obj +<< /S /GoTo /D (subsubsection.9.4.3.1) >> +endobj +584 0 obj +(9.4.3.1 Request) +endobj +585 0 obj +<< /S /GoTo /D (subsubsection.9.4.3.2) >> +endobj +588 0 obj +(9.4.3.2 Response) +endobj +589 0 obj +<< /S /GoTo /D (subsection.9.4.4) >> +endobj +592 0 obj +(9.4.4 LSA SAM Logon) +endobj +593 0 obj +<< /S /GoTo /D (subsubsection.9.4.4.1) >> +endobj +596 0 obj +(9.4.4.1 Request) +endobj +597 0 obj +<< /S /GoTo /D (subsubsection.9.4.4.2) >> +endobj +600 0 obj +(9.4.4.2 Response) +endobj +601 0 obj +<< /S /GoTo /D (subsection.9.4.5) >> +endobj +604 0 obj +(9.4.5 LSA SAM Logoff) +endobj +605 0 obj +<< /S /GoTo /D (subsubsection.9.4.5.1) >> +endobj +608 0 obj +(9.4.5.1 Request) +endobj +609 0 obj +<< /S /GoTo /D (subsubsection.9.4.5.2) >> +endobj +612 0 obj +(9.4.5.2 Response) +endobj +613 0 obj +<< /S /GoTo /D (section.9.5) >> +endobj +616 0 obj +(9.5 \134\134MAILSLOT\134NET\134NTLOGON) +endobj +617 0 obj +<< /S /GoTo /D (subsection.9.5.1) >> +endobj +620 0 obj +(9.5.1 Query for PDC) +endobj +621 0 obj +<< /S /GoTo /D (subsubsection.9.5.1.1) >> +endobj +624 0 obj +(9.5.1.1 Request) +endobj +625 0 obj +<< /S /GoTo /D (subsubsection.9.5.1.2) >> +endobj +628 0 obj +(9.5.1.2 Response) +endobj +629 0 obj +<< /S /GoTo /D (subsection.9.5.2) >> +endobj +632 0 obj +(9.5.2 SAM Logon) +endobj +633 0 obj +<< /S /GoTo /D (subsubsection.9.5.2.1) >> +endobj +636 0 obj +(9.5.2.1 Request) +endobj +637 0 obj +<< /S /GoTo /D (subsubsection.9.5.2.2) >> +endobj +640 0 obj +(9.5.2.2 Response) +endobj +641 0 obj +<< /S /GoTo /D (section.9.6) >> +endobj +644 0 obj +(9.6 SRVSVC Transact Named Pipe) +endobj +645 0 obj +<< /S /GoTo /D (subsection.9.6.1) >> +endobj +648 0 obj +(9.6.1 Net Share Enum) +endobj +649 0 obj +<< /S /GoTo /D (subsubsection.9.6.1.1) >> +endobj +652 0 obj +(9.6.1.1 Request) +endobj +653 0 obj +<< /S /GoTo /D (subsubsection.9.6.1.2) >> +endobj +656 0 obj +(9.6.1.2 Response) +endobj +657 0 obj +<< /S /GoTo /D (subsection.9.6.2) >> +endobj +660 0 obj +(9.6.2 Net Server Get Info) +endobj +661 0 obj +<< /S /GoTo /D (subsubsection.9.6.2.1) >> +endobj +664 0 obj +(9.6.2.1 Request) +endobj +665 0 obj +<< /S /GoTo /D (subsubsection.9.6.2.2) >> +endobj +668 0 obj +(9.6.2.2 Response) +endobj +669 0 obj +<< /S /GoTo /D (section.9.7) >> +endobj +672 0 obj +(9.7 Cryptographic side of NT Domain Authentication) +endobj +673 0 obj +<< /S /GoTo /D (subsection.9.7.1) >> +endobj +676 0 obj +(9.7.1 Definitions) +endobj +677 0 obj +<< /S /GoTo /D (subsection.9.7.2) >> +endobj +680 0 obj +(9.7.2 Protocol) +endobj +681 0 obj +<< /S /GoTo /D (subsection.9.7.3) >> +endobj +684 0 obj +(9.7.3 Comments) +endobj +685 0 obj +<< /S /GoTo /D (section.9.8) >> +endobj +688 0 obj +(9.8 SIDs and RIDs) +endobj +689 0 obj +<< /S /GoTo /D (subsection.9.8.1) >> +endobj +692 0 obj +(9.8.1 Well-known SIDs) +endobj +693 0 obj +<< /S /GoTo /D (subsubsection.9.8.1.1) >> +endobj +696 0 obj +(9.8.1.1 Universal well-known SIDs) +endobj +697 0 obj +<< /S /GoTo /D (subsubsection.9.8.1.2) >> +endobj +700 0 obj +(9.8.1.2 NT well-known SIDs) +endobj +701 0 obj +<< /S /GoTo /D (subsection.9.8.2) >> +endobj +704 0 obj +(9.8.2 Well-known RIDS) +endobj +705 0 obj +<< /S /GoTo /D (subsubsection.9.8.2.1) >> +endobj +708 0 obj +(9.8.2.1 Well-known RID users) +endobj +709 0 obj +<< /S /GoTo /D (subsubsection.9.8.2.2) >> +endobj +712 0 obj +(9.8.2.2 Well-known RID groups) +endobj +713 0 obj +<< /S /GoTo /D (subsubsection.9.8.2.3) >> +endobj +716 0 obj +(9.8.2.3 Well-known RID aliases) +endobj +717 0 obj +<< /S /GoTo /D (chapter.10) >> +endobj +720 0 obj +(10 Samba Printing Internals) +endobj +721 0 obj +<< /S /GoTo /D (section.10.1) >> +endobj +724 0 obj +(10.1 Abstract) +endobj +725 0 obj +<< /S /GoTo /D (section.10.2) >> +endobj +728 0 obj +(10.2 Printing Interface to Various Back ends) +endobj +729 0 obj +<< /S /GoTo /D (section.10.3) >> +endobj +732 0 obj +(10.3 Print Queue TDB's) +endobj +733 0 obj +<< /S /GoTo /D (section.10.4) >> +endobj +736 0 obj +(10.4 ChangeID and Client Caching of Printer Information) +endobj +737 0 obj +<< /S /GoTo /D (section.10.5) >> +endobj +740 0 obj +(10.5 Windows NT/2K Printer Change Notify) +endobj +741 0 obj +<< /S /GoTo /D (chapter.11) >> +endobj +744 0 obj +(11 Samba WINS Internals) +endobj +745 0 obj +<< /S /GoTo /D (section.11.1) >> +endobj +748 0 obj +(11.1 WINS Failover) +endobj +749 0 obj +<< /S /GoTo /D (chapter.12) >> +endobj +752 0 obj +(12 The Upcoming SAM System) +endobj +753 0 obj +<< /S /GoTo /D (section.12.1) >> +endobj +756 0 obj +(12.1 Security in the 'new SAM') +endobj +757 0 obj +<< /S /GoTo /D (section.12.2) >> +endobj +760 0 obj +(12.2 Standalone from UNIX) +endobj +761 0 obj +<< /S /GoTo /D (section.12.3) >> +endobj +764 0 obj +(12.3 Handles and Races in the new SAM) +endobj +765 0 obj +<< /S /GoTo /D (section.12.4) >> +endobj +768 0 obj +(12.4 Layers) +endobj +769 0 obj +<< /S /GoTo /D (subsection.12.4.1) >> +endobj +772 0 obj +(12.4.1 Application) +endobj +773 0 obj +<< /S /GoTo /D (subsection.12.4.2) >> +endobj +776 0 obj +(12.4.2 SAM Interface) +endobj +777 0 obj +<< /S /GoTo /D (subsection.12.4.3) >> +endobj +780 0 obj +(12.4.3 SAM Modules) +endobj +781 0 obj +<< /S /GoTo /D (section.12.5) >> +endobj +784 0 obj +(12.5 SAM Modules) +endobj +785 0 obj +<< /S /GoTo /D (subsection.12.5.1) >> +endobj +788 0 obj +(12.5.1 Special Module: sam\137passdb) +endobj +789 0 obj +<< /S /GoTo /D (subsection.12.5.2) >> +endobj +792 0 obj +(12.5.2 sam\137ads) +endobj +793 0 obj +<< /S /GoTo /D (section.12.6) >> +endobj +796 0 obj +(12.6 Memory Management) +endobj +797 0 obj +<< /S /GoTo /D (section.12.7) >> +endobj +800 0 obj +(12.7 Testing) +endobj +801 0 obj +<< /S /GoTo /D (chapter.13) >> +endobj +804 0 obj +(13 LanMan and NT Password Encryption) +endobj +805 0 obj +<< /S /GoTo /D (section.13.1) >> +endobj +808 0 obj +(13.1 Introduction) +endobj +809 0 obj +<< /S /GoTo /D (section.13.2) >> +endobj +812 0 obj +(13.2 How does it work?) +endobj +813 0 obj +<< /S /GoTo /D (section.13.3) >> +endobj +816 0 obj +(13.3 The smbpasswd file) +endobj +817 0 obj +<< /S /GoTo /D (chapter.14) >> +endobj +820 0 obj +(14 Modules) +endobj +821 0 obj +<< /S /GoTo /D (section.14.1) >> +endobj +824 0 obj +(14.1 Advantages) +endobj +825 0 obj +<< /S /GoTo /D (section.14.2) >> +endobj +828 0 obj +(14.2 Loading modules) +endobj +829 0 obj +<< /S /GoTo /D (subsection.14.2.1) >> +endobj +832 0 obj +(14.2.1 Static modules) +endobj +833 0 obj +<< /S /GoTo /D (subsection.14.2.2) >> +endobj +836 0 obj +(14.2.2 Shared modules) +endobj +837 0 obj +<< /S /GoTo /D (section.14.3) >> +endobj +840 0 obj +(14.3 Writing modules) +endobj +841 0 obj +<< /S /GoTo /D (subsection.14.3.1) >> +endobj +844 0 obj +(14.3.1 Static/Shared selection in configure.in) +endobj +845 0 obj +<< /S /GoTo /D (chapter.15) >> +endobj +848 0 obj +(15 RPC Pluggable Modules) +endobj +849 0 obj +<< /S /GoTo /D (section.15.1) >> +endobj +852 0 obj +(15.1 About) +endobj +853 0 obj +<< /S /GoTo /D (section.15.2) >> +endobj +856 0 obj +(15.2 General Overview) +endobj +857 0 obj +<< /S /GoTo /D (chapter.16) >> +endobj +860 0 obj +(16 VFS Modules) +endobj +861 0 obj +<< /S /GoTo /D (section.16.1) >> +endobj +864 0 obj +(16.1 The Samba \(Posix\) VFS layer) +endobj +865 0 obj +<< /S /GoTo /D (subsection.16.1.1) >> +endobj +868 0 obj +(16.1.1 The general interface) +endobj +869 0 obj +<< /S /GoTo /D (subsection.16.1.2) >> +endobj +872 0 obj +(16.1.2 Possible VFS operation layers) +endobj +873 0 obj +<< /S /GoTo /D (section.16.2) >> +endobj +876 0 obj +(16.2 The Interaction between the Samba VFS subsystem and the modules) +endobj +877 0 obj +<< /S /GoTo /D (subsection.16.2.1) >> +endobj +880 0 obj +(16.2.1 Initialization and registration) +endobj +881 0 obj +<< /S /GoTo /D (subsection.16.2.2) >> +endobj +884 0 obj +(16.2.2 How the Modules handle per connection data) +endobj +885 0 obj +<< /S /GoTo /D (section.16.3) >> +endobj +888 0 obj +(16.3 Upgrading to the New VFS Interface) +endobj +889 0 obj +<< /S /GoTo /D (subsection.16.3.1) >> +endobj +892 0 obj +(16.3.1 Upgrading from 2.2.* and 3.0aplha modules) +endobj +893 0 obj +<< /S /GoTo /D (section.16.4) >> +endobj +896 0 obj +(16.4 Some Notes) +endobj +897 0 obj +<< /S /GoTo /D (subsection.16.4.1) >> +endobj +900 0 obj +(16.4.1 Implement TRANSPARENT functions) +endobj +901 0 obj +<< /S /GoTo /D (subsection.16.4.2) >> +endobj +904 0 obj +(16.4.2 Implement OPAQUE functions) +endobj +905 0 obj +<< /S /GoTo /D (chapter.17) >> +endobj +908 0 obj +(17 Notes to packagers) +endobj +909 0 obj +<< /S /GoTo /D (section.17.1) >> +endobj +912 0 obj +(17.1 Versioning) +endobj +913 0 obj +<< /S /GoTo /D (section.17.2) >> +endobj +916 0 obj +(17.2 Modules) +endobj +917 0 obj +<< /S /GoTo /D (chapter.18) >> +endobj +920 0 obj +(18 Contributing code) +endobj +921 0 obj +<< /S /GoTo /D [922 0 R /Fit ] >> +endobj +924 0 obj << +/Length 252 +/Filter /FlateDecode +>> +stream +xڍ=O1 sCL| +TlCj ǡD~O` !eEa]ђUC#QbLO'Θ$A!FDџįvj5Ȕ+,eHRp]/ֳ&wzr}yBp[-P۲n.4w| <{q"Juה(H*֩+m6ܮa4&̵ *`X`d}3hKendstream +endobj +922 0 obj << +/Type /Page +/Contents 924 0 R +/Resources 923 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 933 0 R +>> endobj +925 0 obj << +/D [922 0 R /XYZ 85.039 786.531 null] +>> endobj +926 0 obj << +/D [922 0 R /XYZ 85.039 766.606 null] +>> endobj +923 0 obj << +/Font << /F20 929 0 R /F21 932 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +936 0 obj << +/Length 1050 +/Filter /FlateDecode +>> +stream +xڍVM6ϯq@$1T&7$ Mbۭa~ryȽ4KWB#wCH%o Jd\e  w(y{EUm'{UĊPt fi-08@"{[zIR+I_?-~H,^8aNmDv>Y3KiGʮitiꮥpǧb*ǓU~33sq45G&ki˱P߻϶J o4F?#n`hP|R\齕$İv mZ[[%,"RAO,5tri h9RĐXGiAM3!|[ƍy;|!%>V= L4 +Mc57BѸX+8c}ݍWs +i"1s{z9VsNp ,Q5VK΍6T 5-0 ٩Y-T^'mQ_8(ü3*n 6ȈV:[4I<  Cp ,t§֜(јfSϺpv'R4NI_e]ج”2d6>6soꊁ&V'L> endobj +944 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [428.769 482.672 539.579 494.665] +/Subtype/Link/A<> +>> endobj +948 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [84.043 469.123 108.944 481.115] +/Subtype/Link/A<> +>> endobj +949 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [227.588 469.123 304.945 481.115] +/Subtype/Link/A<> +>> endobj +950 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [97.376 414.926 299.821 426.919] +/Subtype/Link/A<> +>> endobj +937 0 obj << +/D [935 0 R /XYZ 85.039 786.531 null] +>> endobj +934 0 obj << +/Font << /F35 940 0 R /F15 943 0 R /F36 947 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +953 0 obj << +/Length 2889 +/Filter /FlateDecode +>> +stream +xڵ[ے۸}[A *5vy&xah˄v> $A(gU6-n9hvdeTN(PNd&K6lr!*?My|3l.XNQΨ_;6Ln.IAfHfc|,gK`\_<\M'ɂN>Oɤ<,~~zvIK<]ͫٯ/^?te$N89 K0Xeh!s 09Q]( "SWjݻ!@"1A$H[6Isq+A3C%Ubwv!>:x拻zw%wSnwj>X[<=$(ӭ?gӅv쥃J0dWN^4q@Z4I).+YYa"H1|/&-ߡsˡ~8~1U٣ĭ Y[>n +4ge)B/7e +?i iێ$r"B-.E]e`ubr6C(EXgo)Χ f x4Rׯ\5Cx* iQ~"͌ChfurIWMQՇj2g<<vِx\.){bi(^B中dLy2Jeg)-Dd%(雙`ӺgO^4faE&Q. ft)]X6*p깮C{^y.@֝.XU__Z pBn6хv+wn9|XmU͈:hq"G݃6Evvm9)kؠwonpO\n[u8ֻ: h[&*d$ىwnv43ho+0ĨU8}^=AgkĂ!PfHīaۢiaͳ&r|H!ȫMZC sUv2gJkHF@3lPl?71v= ݡ$b2砆 ft;uiHL ѐZG 0e'}:3ak۱J -ˬ0x$Ud%vc۲gs`v/3AR'y B~RLB\e7e^oO+Vr:E XQGhJZ(Q5̳sYӳyVZ[w +#QXC`RFP. Mur-0پ8r{Ȣ{Œ6wꨢT#ܩڀ^ogޅ+Q iha\  Ts3*VBÐ,囹]Wmr9DPCN9C^+'Km%2'n[CɶfqvC=R|S~b2ו?ZEC"bPӄMdxf c-Uz ZoJk'4@u걓VO 2 ℸPo*:m H1emА$M8GҲvQ!}{iq~rY>ͽ!{PG4߻i)"}4bFJ(uz# 4ujyVƚмz1%oS5{zPPk*a-Os^eJRízP\3NÐ,z->:0 Dy"*sAlYWDQ!~jb~N$#Qh dT𝥄o!ޮ7} +[/&}{LidŽ+ހ ?4cp*m-K۠I@C#Y" fT)&\!QXw ?#(:W?,jyj1uP$q]`TNh*T~7ouܬey:-ϡPfp 8,kǙoQ}#_J@e|.__.:-yBBQ3|b!h1c[HbsX9fPciޟ9O{77M#S?R#pqkxT@bFm%u  ?r5x^ +j}DMiw}X$O]?L@g6)1PDT\@;4endstream +endobj +952 0 obj << +/Type /Page +/Contents 953 0 R +/Resources 951 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 933 0 R +/Annots [ 958 0 R 962 0 R 963 0 R 964 0 R 965 0 R 969 0 R 970 0 R 971 0 R 972 0 R 973 0 R 974 0 R 975 0 R 976 0 R 977 0 R 978 0 R 979 0 R 980 0 R 981 0 R 982 0 R 983 0 R 984 0 R 985 0 R 986 0 R 987 0 R 988 0 R 989 0 R 990 0 R 991 0 R 992 0 R ] +>> endobj +958 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 711.214 394.107 720.125] +/Subtype /Link +/A << /S /GoTo /D (netbios) >> +>> endobj +962 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 685.311 204.163 694.222] +/Subtype /Link +/A << /S /GoTo /D (architecture) >> +>> endobj +963 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 657.471 238.808 668.319] +/Subtype /Link +/A << /S /GoTo /D (debug) >> +>> endobj +964 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 631.568 202.726 642.416] +/Subtype /Link +/A << /S /GoTo /D (CodingSuggestions) >> +>> endobj +965 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 559.782 187.013 568.693] +/Subtype /Link +/A << /S /GoTo /D (internals) >> +>> endobj +969 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [235.002 544.616 404.366 555.741] +/Subtype/Link/A<> +>> endobj +970 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 533.879 192.838 542.79] +/Subtype /Link +/A << /S /GoTo /D (parsing) >> +>> endobj +971 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 507.976 230.716 516.887] +/Subtype /Link +/A << /S /GoTo /D (unix-smb) >> +>> endobj +972 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 480.136 237.502 490.984] +/Subtype /Link +/A << /S /GoTo /D (tracing) >> +>> endobj +973 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 456.17 199.48 465.081] +/Subtype /Link +/A << /S /GoTo /D (ntdomain) >> +>> endobj +974 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [229.329 441.282 335.928 452.13] +/Subtype/Link/A<> +>> endobj +975 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [220.944 429.05 332.773 440.175] +/Subtype/Link/A<> +>> endobj +976 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [245.85 418.919 326.298 428.22] +/Subtype/Link/A<> +>> endobj +977 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 404.42 227.154 415.268] +/Subtype /Link +/A << /S /GoTo /D (printing) >> +>> endobj +978 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 380.454 218.312 389.365] +/Subtype /Link +/A << /S /GoTo /D (wins) >> +>> endobj +979 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 352.614 244.52 363.462] +/Subtype /Link +/A << /S /GoTo /D (sam) >> +>> endobj +980 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 326.711 287.409 337.559] +/Subtype /Link +/A << /S /GoTo /D (pwencrypt) >> +>> endobj +981 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [231.487 313.483 311.935 324.608] +/Subtype/Link/A<> +>> endobj +982 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 302.746 151.853 311.657] +/Subtype /Link +/A << /S /GoTo /D (modules) >> +>> endobj +983 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [235.611 287.58 321.289 298.705] +/Subtype/Link/A<> +>> endobj +984 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 274.906 224.719 285.754] +/Subtype /Link +/A << /S /GoTo /D (rpc-plugin) >> +>> endobj +985 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [238.904 261.677 335.043 272.802] +/Subtype/Link/A<> +>> endobj +986 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [235.611 249.722 321.289 260.847] +/Subtype/Link/A<> +>> endobj +987 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 238.985 174.989 247.896] +/Subtype /Link +/A << /S /GoTo /D (vfs) >> +>> endobj +988 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [251.081 223.819 315.837 234.944] +/Subtype/Link/A<> +>> endobj +989 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [250.666 213.689 341.574 222.989] +/Subtype/Link/A<> +>> endobj +990 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 199.19 201.218 210.038] +/Subtype /Link +/A << /S /GoTo /D (Packaging) >> +>> endobj +991 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 173.287 195.473 184.135] +/Subtype /Link +/A << /S /GoTo /D (contributing) >> +>> endobj +992 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [235.611 160.058 321.289 171.183] +/Subtype/Link/A<> +>> endobj +954 0 obj << +/D [952 0 R /XYZ 85.039 786.531 null] +>> endobj +951 0 obj << +/Font << /F57 957 0 R /F20 929 0 R /F14 961 0 R /F15 943 0 R /F11 968 0 R /F36 947 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1013 0 obj << +/Length 2400 +/Filter /FlateDecode +>> +stream +xrz +.*w 89JٲcddAԥJ"0r5N\>ekșF7 4G&lA#fz##<5g~<" +.-'XRz1V#p{~x@1 nPHPjp5uxgjOG~@)$m !`l=fkT6H*i"g!F데E6,2kgј ÄGdb>3b>͹wҽ޼^׋¼׋{F'sԽǓǙ{a2W}w{B2쳺3ہ;I/+ + tJDW:HyX:FP"뫓wFṡWmDH _bs6 'xVSGv\"}4Uf"X`5Y"8m lRdjʾh7+%'/#R}' +̾ f_ٛ=~]5/d**3B`5{[^` }ǥ,L_6923x,%W5|G[*\dCc"zxJciO?cf̗zəg@;#2H4X&MiKIV"EQ,f]iMOOg߱=/e5I^*O2p-zB+Ϛ=toX`Uziξop2Τ&\yGD ||vn}q& +LX" e0Κ׈~+C8ߌ!_le*!d/dVA -ּFX!G+Mۼ2ӗx2ϴ'"^y%!%ՀiYmE8N]z:RoKғqgbK ȷc w;LMr2P$1k^#h)Mk<24$&n0DGSOG1 >cl=x<2b)08 t#SFg;vD'$j$߈nsl^$4Ӈ5kuǮO2ֆa Y .q׆9֬T˧V6+풹zFۥXgV2IK|(-Bhil̢>D5_|sԬUz"+톲f!ݸNӻ]'w2C;u@I'ULo}ּT,P.:W@]=Nr5VP' +Ȼ5VGv]MoIz*x3ae0@he`6(ѓmfUn d[6w Yd۲5P?XCK J_ɬ9\cyeNeUR>U_7*5X/C_ɬ6[y`G':~&Yd/dVIMշyXFυ)g^tYn3L [R.]wnM}E5UfX`5+jRU9 gd{m_? +kn@OFuAvVkHf1к`X#=֍5H4ljendstream +endobj +1012 0 obj << +/Type /Page +/Contents 1013 0 R +/Resources 1011 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 933 0 R +/Annots [ 1016 0 R 1017 0 R 1018 0 R 1019 0 R 1020 0 R 1021 0 R 1022 0 R 1023 0 R 1024 0 R 1025 0 R 1026 0 R 1027 0 R 1028 0 R 1029 0 R 1030 0 R 1031 0 R 1032 0 R 1033 0 R 1034 0 R 1035 0 R 1036 0 R 1037 0 R 1038 0 R 1039 0 R 1040 0 R 1041 0 R 1042 0 R 1043 0 R 1044 0 R 1045 0 R 1046 0 R 1047 0 R 1048 0 R 1049 0 R 1050 0 R 1051 0 R 1052 0 R 1053 0 R 1054 0 R 1055 0 R ] +>> endobj +1016 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [504.314 631.159 512.306 640.727] +/Subtype /Link +/A << /S /GoTo /D (chapter.1) >> +>> endobj +1017 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [504.859 617.61 512.306 626.632] +/Subtype /Link +/A << /S /GoTo /D (section.1.1) >> +>> endobj +1018 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [504.859 604.06 512.306 613.083] +/Subtype /Link +/A << /S /GoTo /D (section.1.2) >> +>> endobj +1019 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 590.511 512.306 599.534] +/Subtype /Link +/A << /S /GoTo /D (section.1.3) >> +>> endobj +1020 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [498.314 566.053 512.306 575.621] +/Subtype /Link +/A << /S /GoTo /D (chapter.2) >> +>> endobj +1021 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 552.504 512.306 561.527] +/Subtype /Link +/A << /S /GoTo /D (section.2.1) >> +>> endobj +1022 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 538.955 512.306 547.977] +/Subtype /Link +/A << /S /GoTo /D (section.2.2) >> +>> endobj +1023 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 525.405 512.306 534.428] +/Subtype /Link +/A << /S /GoTo /D (section.2.3) >> +>> endobj +1024 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 511.856 512.306 520.879] +/Subtype /Link +/A << /S /GoTo /D (section.2.4) >> +>> endobj +1025 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 498.307 512.306 507.33] +/Subtype /Link +/A << /S /GoTo /D (section.2.5) >> +>> endobj +1026 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [498.314 473.849 512.306 483.417] +/Subtype /Link +/A << /S /GoTo /D (chapter.3) >> +>> endobj +1027 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 460.299 512.306 469.322] +/Subtype /Link +/A << /S /GoTo /D (section.3.1) >> +>> endobj +1028 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 446.75 512.306 455.773] +/Subtype /Link +/A << /S /GoTo /D (section.3.2) >> +>> endobj +1029 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 433.201 512.306 442.224] +/Subtype /Link +/A << /S /GoTo /D (section.3.3) >> +>> endobj +1030 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 419.652 512.306 428.675] +/Subtype /Link +/A << /S /GoTo /D (section.3.4) >> +>> endobj +1031 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 406.103 512.306 415.125] +/Subtype /Link +/A << /S /GoTo /D (section.3.5) >> +>> endobj +1032 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 392.553 512.306 401.576] +/Subtype /Link +/A << /S /GoTo /D (subsection.3.5.1) >> +>> endobj +1033 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 379.004 512.306 388.027] +/Subtype /Link +/A << /S /GoTo /D (subsection.3.5.2) >> +>> endobj +1034 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 365.455 512.306 374.478] +/Subtype /Link +/A << /S /GoTo /D (subsection.3.5.3) >> +>> endobj +1035 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [498.314 340.997 512.306 350.565] +/Subtype /Link +/A << /S /GoTo /D (chapter.4) >> +>> endobj +1036 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [498.314 316.538 512.306 326.107] +/Subtype /Link +/A << /S /GoTo /D (chapter.5) >> +>> endobj +1037 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 302.989 512.306 312.012] +/Subtype /Link +/A << /S /GoTo /D (section.5.1) >> +>> endobj +1038 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 289.44 512.306 298.463] +/Subtype /Link +/A << /S /GoTo /D (section.5.2) >> +>> endobj +1039 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 275.891 512.306 284.914] +/Subtype /Link +/A << /S /GoTo /D (section.5.3) >> +>> endobj +1040 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 262.342 512.306 271.364] +/Subtype /Link +/A << /S /GoTo /D (subsection.5.3.1) >> +>> endobj +1041 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 248.792 512.306 257.815] +/Subtype /Link +/A << /S /GoTo /D (subsection.5.3.2) >> +>> endobj +1042 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 235.243 512.306 244.266] +/Subtype /Link +/A << /S /GoTo /D (subsection.5.3.3) >> +>> endobj +1043 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 221.694 512.306 230.717] +/Subtype /Link +/A << /S /GoTo /D (subsection.5.3.4) >> +>> endobj +1044 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 208.145 512.306 217.168] +/Subtype /Link +/A << /S /GoTo /D (subsection.5.3.5) >> +>> endobj +1045 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 194.596 512.306 203.618] +/Subtype /Link +/A << /S /GoTo /D (subsection.5.3.6) >> +>> endobj +1046 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 181.046 512.306 190.069] +/Subtype /Link +/A << /S /GoTo /D (subsection.5.3.7) >> +>> endobj +1047 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 167.497 512.306 176.52] +/Subtype /Link +/A << /S /GoTo /D (subsection.5.3.8) >> +>> endobj +1048 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 153.948 512.306 162.971] +/Subtype /Link +/A << /S /GoTo /D (subsection.5.3.9) >> +>> endobj +1049 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 140.399 512.306 149.422] +/Subtype /Link +/A << /S /GoTo /D (subsection.5.3.10) >> +>> endobj +1050 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 126.85 512.306 135.872] +/Subtype /Link +/A << /S /GoTo /D (subsection.5.3.11) >> +>> endobj +1051 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 113.3 512.306 122.323] +/Subtype /Link +/A << /S /GoTo /D (subsection.5.3.12) >> +>> endobj +1052 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 99.751 512.306 108.774] +/Subtype /Link +/A << /S /GoTo /D (subsection.5.3.13) >> +>> endobj +1053 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 86.202 512.306 95.225] +/Subtype /Link +/A << /S /GoTo /D (subsection.5.3.14) >> +>> endobj +1054 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 72.653 512.306 81.676] +/Subtype /Link +/A << /S /GoTo /D (subsection.5.3.15) >> +>> endobj +1055 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 59.104 512.306 68.127] +/Subtype /Link +/A << /S /GoTo /D (section.5.4) >> +>> endobj +1014 0 obj << +/D [1012 0 R /XYZ 85.039 786.531 null] +>> endobj +1015 0 obj << +/D [1012 0 R /XYZ 85.039 656.613 null] +>> endobj +1011 0 obj << +/Font << /F20 929 0 R /F15 943 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1058 0 obj << +/Length 3207 +/Filter /FlateDecode +>> +stream +x[w9)mZ# yp86k;|ZW\" n.'vKU_׾^䨢'd8Ž^ջпCw09h_/kRއrT{?ϗY{1 +'1W;!ޫUYVw8EQ}wk(zjW-8KWQL4!<bXx5>ԟn9 }40߮q-T bi'iʝ01S.ۤ,@NڞZ@3*-8' ׍zZ ^+}L(x]JBfI K^1uO远)k! uk>ZmOӕe3>[\+Bw) +=''Aސ0~3ie~T20NIϟdBCūD-3Ofi;~&讐8wr9VMXP +FjDZ[lAיS3t82禕Ӆi9\o'cIv&βՏ7Rxaj8ׄ32_=Їf4S^u~]!F$0<bkXS\C$׀x8S{Oޛcո%wpWѬ0I&0FX2b!uvmL7jV5wE +(Qѓֈ2P7z~mk33DȽcK[W!D$`!6M*!ORDWr?%[ k4ip> ]F$äZ+(嵆?Ʉ&Z2<;8>K ;6ϻ9~}@r@q5?"I,X#oT9M +΅H;]) i7DXn47C]Y J}:6 nr)Xy`WZ *'?[f-z|SģL}* +5( TKr6ϋjaIIxT]rfIay0׀1m{=fmv.w8?ۼMYW " "!da\\ZN~Ўlq׹!e] + +Hp5PDq"%vM0tG*f$i:WyO[aqYue +`V%Vli摍m5KU+hVBWzЊ#NyoU=5O&Ur1MHҕs4+pN2s9JFJ֑sڙf@S%f׼# ffd#ek`)$bwY83YQu9J5&TK^՚!)6U꨾ya$AW߮Y`K`L5d* 2Gh42}0ɹw]"fI2ay0’׀ +$F78H]!}M=C_0),(3x><~.]-Js]sbkr-lquc"4+I3.k&Lk amN2H&~ V+`U@ ̼ .?}n5yݣW'vjf< oݭfNYoV|; }^1vlͺb +VL1g0;cJos[ȍsGnUC1VfjL|5:BI`*i(Վ@.E+ FE0[},@ :8@?V4+JaXB}j0f,2] E$W0<Pk RKlay3v?0pe v, jiO}գfy{MܓngfLN*m7@‰5$Rbe 5(ͺ-jX9̵SU?[0)lעRwR\n(YT>_gqL2> endobj +1063 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 754.651 512.306 763.674] +/Subtype /Link +/A << /S /GoTo /D (subsection.5.4.1) >> +>> endobj +1064 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 741.102 512.306 750.125] +/Subtype /Link +/A << /S /GoTo /D (subsection.5.4.2) >> +>> endobj +1065 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 727.553 512.306 736.575] +/Subtype /Link +/A << /S /GoTo /D (section.5.5) >> +>> endobj +1066 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [498.314 703.094 512.306 712.663] +/Subtype /Link +/A << /S /GoTo /D (chapter.6) >> +>> endobj +1067 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 689.545 512.306 698.568] +/Subtype /Link +/A << /S /GoTo /D (section.6.1) >> +>> endobj +1068 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 675.996 512.306 685.019] +/Subtype /Link +/A << /S /GoTo /D (subsection.6.1.1) >> +>> endobj +1069 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 662.447 512.306 671.469] +/Subtype /Link +/A << /S /GoTo /D (subsection.6.1.2) >> +>> endobj +1070 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 648.897 512.306 657.92] +/Subtype /Link +/A << /S /GoTo /D (subsection.6.1.3) >> +>> endobj +1071 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 635.348 512.306 644.371] +/Subtype /Link +/A << /S /GoTo /D (section.6.2) >> +>> endobj +1072 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 621.799 512.306 630.822] +/Subtype /Link +/A << /S /GoTo /D (subsection.6.2.1) >> +>> endobj +1073 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [498.314 597.341 512.306 606.909] +/Subtype /Link +/A << /S /GoTo /D (chapter.7) >> +>> endobj +1074 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 583.792 512.306 592.814] +/Subtype /Link +/A << /S /GoTo /D (section.7.1) >> +>> endobj +1075 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 570.242 512.306 579.265] +/Subtype /Link +/A << /S /GoTo /D (section.7.2) >> +>> endobj +1076 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 556.693 512.306 565.716] +/Subtype /Link +/A << /S /GoTo /D (section.7.3) >> +>> endobj +1077 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 543.144 512.306 552.167] +/Subtype /Link +/A << /S /GoTo /D (section.7.4) >> +>> endobj +1078 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 529.595 512.306 538.618] +/Subtype /Link +/A << /S /GoTo /D (section.7.5) >> +>> endobj +1079 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 516.046 512.306 525.068] +/Subtype /Link +/A << /S /GoTo /D (section.7.6) >> +>> endobj +1080 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 502.496 512.306 511.519] +/Subtype /Link +/A << /S /GoTo /D (section.7.7) >> +>> endobj +1081 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 488.947 512.306 497.97] +/Subtype /Link +/A << /S /GoTo /D (section.7.8) >> +>> endobj +1082 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 475.398 512.306 484.421] +/Subtype /Link +/A << /S /GoTo /D (section.7.9) >> +>> endobj +1083 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [498.314 450.94 512.306 460.508] +/Subtype /Link +/A << /S /GoTo /D (chapter.8) >> +>> endobj +1084 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [498.314 426.481 512.306 436.05] +/Subtype /Link +/A << /S /GoTo /D (chapter.9) >> +>> endobj +1085 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 412.932 512.306 421.955] +/Subtype /Link +/A << /S /GoTo /D (section.9.1) >> +>> endobj +1086 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 399.383 512.306 408.406] +/Subtype /Link +/A << /S /GoTo /D (subsection.9.1.1) >> +>> endobj +1087 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 385.834 512.306 394.857] +/Subtype /Link +/A << /S /GoTo /D (subsection.9.1.2) >> +>> endobj +1088 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 372.285 512.306 381.307] +/Subtype /Link +/A << /S /GoTo /D (section.9.2) >> +>> endobj +1089 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 358.735 512.306 367.758] +/Subtype /Link +/A << /S /GoTo /D (subsection.9.2.1) >> +>> endobj +1090 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 345.186 512.306 354.209] +/Subtype /Link +/A << /S /GoTo /D (subsection.9.2.2) >> +>> endobj +1091 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 331.637 512.306 340.66] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.2.2.1) >> +>> endobj +1092 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 318.088 512.306 327.111] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.2.2.2) >> +>> endobj +1093 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 304.539 512.306 313.561] +/Subtype /Link +/A << /S /GoTo /D (subsection.9.2.3) >> +>> endobj +1094 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 290.989 512.306 300.012] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.2.3.1) >> +>> endobj +1095 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 277.44 512.306 286.463] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.2.3.2) >> +>> endobj +1096 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 263.891 512.306 272.914] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.2.3.3) >> +>> endobj +1097 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 250.342 512.306 259.365] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.2.3.4) >> +>> endobj +1098 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 236.793 512.306 245.815] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.2.3.5) >> +>> endobj +1099 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 223.243 512.306 232.266] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.2.3.6) >> +>> endobj +1100 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 209.694 512.306 218.717] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.2.3.7) >> +>> endobj +1101 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 196.145 512.306 205.168] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.2.3.8) >> +>> endobj +1102 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 182.596 512.306 191.619] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.2.3.9) >> +>> endobj +1103 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 169.047 512.306 178.069] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.2.3.10) >> +>> endobj +1104 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 155.497 512.306 164.52] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.2.3.11) >> +>> endobj +1105 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 141.948 512.306 150.971] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.2.3.12) >> +>> endobj +1106 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 128.399 512.306 137.422] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.2.3.13) >> +>> endobj +1107 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 101.301 512.306 110.323] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.2.3.14) >> +>> endobj +1108 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 87.751 512.306 96.774] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.2.3.15) >> +>> endobj +1109 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 74.202 512.306 83.225] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.2.3.16) >> +>> endobj +1110 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 60.653 512.306 69.676] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.2.3.17) >> +>> endobj +1059 0 obj << +/D [1057 0 R /XYZ 85.039 786.531 null] +>> endobj +1056 0 obj << +/Font << /F65 1062 0 R /F15 943 0 R /F20 929 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1113 0 obj << +/Length 3372 +/Filter /FlateDecode +>> +stream +x]KsFWHՆ 38:8Ȏ=$9p%aE2T{vKX21-U!=/G'Zw["9\ߝ47'41 ̊{:VNhC\OzȮ\8}xtӟ;9J Ӕsn&7ƅN;=7vDHNI&&^jW+$Dj^7͠ZV%%ir#)է3ժˋW3F6Mhr~kkbvy'y:ݚw7sdUJt&]WD kNԒ*&pQF)H +:JC6J\UPJNjpՄ`1(6oίVMLㄩdp& 6Bϙ %BfzBy^Yi,o23%b{q=v]tmxwJ*xt=6w4c7xi{+%Y.b|m'],;E} +]Va1n;ZMLVpLfɗ/"5Ij/8MBծMTe.ݑ/v(_}X}O ~ȻS[G&7~)|Ώn vf5m6)m)+B\ Ӊ;(s,rY A!\f5!'aR WoLJ `^׬P+fYzzquܔtnLbf nHd{o%BڪnzAl,C8[j``V[8'E>̖ wde[ +Oa{(cYMqs0uۍcntd8eIf8Q)3ߥ bHn(`R;3 xr8k=Cyyf],1.kV(E{#q~pqWiڿsx77XLq&4zި0eofY0,EfeK-z;͈}*i8[AnuFzwua r=a}+9Sl~cyl.mP}T +aMv)A)T;f58i`џi<RPPC)tb +ޅ*S n +)TuiS(P,;"q7cb;̓qCa (4ChFp(j(C jX3YM]J:~fQ0s+kZĹ w%۾wU^qLWSTNS/mVF|="(rKF%n@IU;'f5%Uk/I~O PJ:صu*wvu Ԩ gWGy¹ wαw @| g,C8k`>cV) |XOƦ_Z"{թMBTڭ'뭿pXwKZ{y&oh7!·vJ%'K\'T~6Fbn_7"0$# ZYQEL&P4҄* ~5O'8De,Y 8r 3f5 6ͪegjR~&*YlRdCV<}g{i~gO߯`~펶؇K̰beXö:A- Y1EOjou=3[\ i3[793;9ZZF>Y~~Hg~jon,4p,dY  Y f5AfC.SQ ePיC~o >Rn(.aƹT;s d4>#å R+@Wn2Lltl&,ZC8j`6aV ml`S; 2M/nnY0ѨeGOQ44h!4¬&qcU}Q; 2F(mZVH9;CXq¬&іtt!p(+C8Tx;n0ZRz#On(`S;p[~a!)< 5(A%On(`S; i߭C?_8ѬSb0eAw8ZMEE;WӔ//:g Xdl1ke1PmQ,՛u8>BcB@ +W;YMPk| a.<W?Om?r0, [FvFgK,CBQi#c™8ppbVF>&<>eJ`  cC`,*$c #f5FޑyOo_%8yf1"00՘Sy@=?B ,@8Q NM`8zэ cC`, +X;ÈYE81¨E4^>Y+G`hX`J@jC)/*cbE`a8k`81 Nt'_VC˜00bVSYO=vpp&ZqlC-b #[;#YM JS>z?,Yv4)˭oXa& aeF1+-(y6Ҿ]Y8bs,c$ okpS*N +CUϠƏ3!pĬ&8eG8Y +cabE@ak`1 +I:^Hu(Wlˠ[lhXDh[QjJLע@9pf1"00'Ds90f1"00TgIX`:{^ g2U)9Wxf1"00՘%gTdCG`,PA$15P=oHORs4:td|F+HJ8?zjWuy=^zEb)<%Q +{Gl&`mP0\ۄ&<_y +NS=BNC3en[O$"XNpVoendstream +endobj +1112 0 obj << +/Type /Page +/Contents 1113 0 R +/Resources 1111 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 933 0 R +/Annots [ 1115 0 R 1116 0 R 1117 0 R 1118 0 R 1119 0 R 1120 0 R 1121 0 R 1122 0 R 1123 0 R 1124 0 R 1125 0 R 1126 0 R 1127 0 R 1128 0 R 1129 0 R 1130 0 R 1131 0 R 1132 0 R 1133 0 R 1134 0 R 1135 0 R 1136 0 R 1137 0 R 1138 0 R 1139 0 R 1140 0 R 1141 0 R 1142 0 R 1143 0 R 1144 0 R 1145 0 R 1146 0 R 1147 0 R 1148 0 R 1149 0 R 1150 0 R 1151 0 R 1152 0 R 1153 0 R 1154 0 R 1155 0 R 1156 0 R 1157 0 R 1158 0 R 1159 0 R 1160 0 R 1161 0 R 1162 0 R 1163 0 R ] +>> endobj +1115 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 754.651 512.306 763.674] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.2.3.18) >> +>> endobj +1116 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 727.553 512.306 736.575] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.2.3.19) >> +>> endobj +1117 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 700.454 512.306 709.477] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.2.3.20) >> +>> endobj +1118 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 686.905 512.306 695.928] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.2.3.21) >> +>> endobj +1119 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 673.356 512.306 682.379] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.2.3.22) >> +>> endobj +1120 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 659.807 512.306 668.829] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.2.3.23) >> +>> endobj +1121 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 646.257 512.306 655.28] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.2.3.24) >> +>> endobj +1122 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 632.708 512.306 641.731] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.2.3.25) >> +>> endobj +1123 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 619.159 512.306 628.182] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.2.3.26) >> +>> endobj +1124 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 605.61 512.306 614.633] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.2.3.27) >> +>> endobj +1125 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 592.061 512.306 601.083] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.2.3.28) >> +>> endobj +1126 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 578.511 512.306 587.534] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.2.3.29) >> +>> endobj +1127 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 564.962 512.306 573.985] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.2.3.30) >> +>> endobj +1128 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 551.413 512.306 560.436] +/Subtype /Link +/A << /S /GoTo /D (section.9.3) >> +>> endobj +1129 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 537.864 512.306 546.887] +/Subtype /Link +/A << /S /GoTo /D (subsection.9.3.1) >> +>> endobj +1130 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 524.315 512.306 533.337] +/Subtype /Link +/A << /S /GoTo /D (subsection.9.3.2) >> +>> endobj +1131 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 497.216 512.306 506.239] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.3.2.1) >> +>> endobj +1132 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 483.667 512.306 492.69] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.3.2.2) >> +>> endobj +1133 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 470.118 512.306 479.141] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.3.2.3) >> +>> endobj +1134 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 456.569 512.306 465.591] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.3.2.4) >> +>> endobj +1135 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 443.019 512.306 452.042] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.3.2.5) >> +>> endobj +1136 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 429.47 512.306 438.493] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.3.2.6) >> +>> endobj +1137 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 415.921 512.306 424.944] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.3.2.7) >> +>> endobj +1138 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 402.372 512.306 411.395] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.3.2.8) >> +>> endobj +1139 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 388.823 512.306 397.845] +/Subtype /Link +/A << /S /GoTo /D (subsection.9.3.3) >> +>> endobj +1140 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 375.273 512.306 384.296] +/Subtype /Link +/A << /S /GoTo /D (subsection.9.3.4) >> +>> endobj +1141 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 361.724 512.306 370.747] +/Subtype /Link +/A << /S /GoTo /D (subsection.9.3.5) >> +>> endobj +1142 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 348.175 512.306 357.198] +/Subtype /Link +/A << /S /GoTo /D (subsection.9.3.6) >> +>> endobj +1143 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 334.626 512.306 343.649] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.3.6.1) >> +>> endobj +1144 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 321.077 512.306 330.099] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.3.6.2) >> +>> endobj +1145 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 307.527 512.306 316.55] +/Subtype /Link +/A << /S /GoTo /D (subsection.9.3.7) >> +>> endobj +1146 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 293.978 512.306 303.001] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.3.7.1) >> +>> endobj +1147 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 280.429 512.306 289.452] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.3.7.2) >> +>> endobj +1148 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 266.88 512.306 275.903] +/Subtype /Link +/A << /S /GoTo /D (subsection.9.3.8) >> +>> endobj +1149 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 253.331 512.306 262.354] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.3.8.1) >> +>> endobj +1150 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 239.781 512.306 248.804] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.3.8.2) >> +>> endobj +1151 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 226.232 512.306 235.255] +/Subtype /Link +/A << /S /GoTo /D (subsection.9.3.9) >> +>> endobj +1152 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 212.683 512.306 221.706] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.3.9.1) >> +>> endobj +1153 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 199.134 512.306 208.157] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.3.9.2) >> +>> endobj +1154 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 185.585 512.306 194.608] +/Subtype /Link +/A << /S /GoTo /D (subsection.9.3.10) >> +>> endobj +1155 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 172.036 512.306 181.058] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.3.10.1) >> +>> endobj +1156 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 158.486 512.306 167.509] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.3.10.2) >> +>> endobj +1157 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 144.937 512.306 153.96] +/Subtype /Link +/A << /S /GoTo /D (subsection.9.3.11) >> +>> endobj +1158 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 131.388 512.306 140.411] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.3.11.1) >> +>> endobj +1159 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 117.839 512.306 126.862] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.3.11.2) >> +>> endobj +1160 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 104.29 512.306 113.312] +/Subtype /Link +/A << /S /GoTo /D (subsection.9.3.12) >> +>> endobj +1161 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 90.74 512.306 99.763] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.3.12.1) >> +>> endobj +1162 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 77.191 512.306 86.214] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.3.12.2) >> +>> endobj +1163 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 63.642 512.306 72.665] +/Subtype /Link +/A << /S /GoTo /D (section.9.4) >> +>> endobj +1114 0 obj << +/D [1112 0 R /XYZ 85.039 786.531 null] +>> endobj +1111 0 obj << +/Font << /F65 1062 0 R /F15 943 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1166 0 obj << +/Length 2708 +/Filter /FlateDecode +>> +stream +xKs7-y 2x 0GYv\:rbqC#+ԺЮܞɉ_\厉:T +5Šy1j@IIZrtD:S*h9}7ۘíqv3],Ft8fl)Ňd4Mc?Dev?>g0;hh,v!z6^zqfVJm+PE~0;J&jJ0Ҙ*Ad2-͞Rx|%83YļF̴bd;87Gc|m%?е1Xcļjl?m/ۙ= ,gM| + Mk!:RhޮS)q{Tԕ^B%Uaw"2l2.cOЕ33a.(@ EkHK1DzT:[ݿ/ML?j^3L>jl2Cf``>ۆ')ӆLfLXgq +E8>BbLfLPc-7M(ӟKKuuZ دKRRMfL_jL'kiT+Uř02'5lZbwq}Ř01!ʎFW)oہ 2T` `Q}J٤Xm(|-d̄q81g+I'p{ Ř02#2Q2=K֜)3$Mg/nOY.;r[O_)ɁIMfb%0qw١K0Npp|W`QcP@jX2CXbepükøL5*ѭ3XNؽIQ 8Z!|0;Lq8}kQ&3e&l e0MkiNV-y/t-d`11!NFp"N_mmfEDz -ThAږ')LfLXgq*JLy 7c2C0f`02l^QJo|荽zFw[?Ix>gWv--}mʦrפr2C(gzK +Q.)c^c*ihʴq*s>:t&6vdzI&;1`q4n2Cf2p`טުQu83YļF%y/t-d`1116VGPʍHa'A|b/-gsrNfLjp )ѴKS ę8saAq^#Ne]Ǟu}k!F+aRFXx ".L(tɜ?毮Sq3tw3J;?Omg4bӻMTzٟ5Nu_/c-d bVCünPř 7i^]š_Po2CfJ|`ȗK2a/vԳڮ5d6=ԢNfLtuQ3F#lˤ7參Wq2CgjK1.c^c'h"YXaӍ@Kߥ86 ۫S;!3ae0okhӬSayXH 7@>[-i )>tGӰ,33t.9@ hk0M`|6|wb3]8FfF4[,_^yJfL9W yh +0Fj!9BNu63_Zl c+a^c>̠pX/LH#Ȣ^Z - ƋyR4D)Y4g<ẍlãXK-!2`je05k̼ugP^\2_Zd A#+a^#22Ȧt3뇧ū`t02׌\FF<0oSi59UʌS6'hc3]LoV}dm!r;_^/F=W:xiޖ) ӟw^J H]G0m7Q'TIɼ|vfB?s]*TԃT ,3Xe`FDFC;}Sxd}op +ʿ8_Zp I(y%¯㙣ҁ{;ܮ܀ԧCpw1Y7C׾U⻏VU/s-dP)N&{՟ӃŨ[vGkU`.|x<h sz6z<]6(u/ Cs"Zƫ}q~v6/&\V1QNm)YM)#V;<{1X塊ayx)9V/s3wt% 9YѶendstream +endobj +1165 0 obj << +/Type /Page +/Contents 1166 0 R +/Resources 1164 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1217 0 R +/Annots [ 1168 0 R 1169 0 R 1170 0 R 1171 0 R 1172 0 R 1173 0 R 1174 0 R 1175 0 R 1176 0 R 1177 0 R 1178 0 R 1179 0 R 1180 0 R 1181 0 R 1182 0 R 1183 0 R 1184 0 R 1185 0 R 1186 0 R 1187 0 R 1188 0 R 1189 0 R 1190 0 R 1191 0 R 1192 0 R 1193 0 R 1194 0 R 1195 0 R 1196 0 R 1197 0 R 1198 0 R 1199 0 R 1200 0 R 1201 0 R 1202 0 R 1203 0 R 1204 0 R 1205 0 R 1206 0 R 1207 0 R 1208 0 R 1209 0 R 1210 0 R 1211 0 R 1212 0 R 1213 0 R 1214 0 R 1215 0 R 1216 0 R ] +>> endobj +1168 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 754.651 512.306 763.674] +/Subtype /Link +/A << /S /GoTo /D (subsection.9.4.1) >> +>> endobj +1169 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 741.102 512.306 750.125] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.4.1.1) >> +>> endobj +1170 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 727.553 512.306 736.575] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.4.1.2) >> +>> endobj +1171 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 714.003 512.306 723.026] +/Subtype /Link +/A << /S /GoTo /D (subsection.9.4.2) >> +>> endobj +1172 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 700.454 512.306 709.477] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.4.2.1) >> +>> endobj +1173 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 686.905 512.306 695.928] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.4.2.2) >> +>> endobj +1174 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 673.356 512.306 682.379] +/Subtype /Link +/A << /S /GoTo /D (subsection.9.4.3) >> +>> endobj +1175 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 659.807 512.306 668.829] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.4.3.1) >> +>> endobj +1176 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 646.257 512.306 655.28] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.4.3.2) >> +>> endobj +1177 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 632.708 512.306 641.731] +/Subtype /Link +/A << /S /GoTo /D (subsection.9.4.4) >> +>> endobj +1178 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 619.159 512.306 628.182] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.4.4.1) >> +>> endobj +1179 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 605.61 512.306 614.633] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.4.4.2) >> +>> endobj +1180 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 592.061 512.306 601.083] +/Subtype /Link +/A << /S /GoTo /D (subsection.9.4.5) >> +>> endobj +1181 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 578.511 512.306 587.534] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.4.5.1) >> +>> endobj +1182 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 564.962 512.306 573.985] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.4.5.2) >> +>> endobj +1183 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 551.413 512.306 560.436] +/Subtype /Link +/A << /S /GoTo /D (section.9.5) >> +>> endobj +1184 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 537.864 512.306 546.887] +/Subtype /Link +/A << /S /GoTo /D (subsection.9.5.1) >> +>> endobj +1185 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 524.315 512.306 533.337] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.5.1.1) >> +>> endobj +1186 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 510.765 512.306 519.788] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.5.1.2) >> +>> endobj +1187 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 497.216 512.306 506.239] +/Subtype /Link +/A << /S /GoTo /D (subsection.9.5.2) >> +>> endobj +1188 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 483.667 512.306 492.69] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.5.2.1) >> +>> endobj +1189 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 470.118 512.306 479.141] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.5.2.2) >> +>> endobj +1190 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 456.569 512.306 465.591] +/Subtype /Link +/A << /S /GoTo /D (section.9.6) >> +>> endobj +1191 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 443.019 512.306 452.042] +/Subtype /Link +/A << /S /GoTo /D (subsection.9.6.1) >> +>> endobj +1192 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 429.47 512.306 438.493] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.6.1.1) >> +>> endobj +1193 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 415.921 512.306 424.944] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.6.1.2) >> +>> endobj +1194 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 402.372 512.306 411.395] +/Subtype /Link +/A << /S /GoTo /D (subsection.9.6.2) >> +>> endobj +1195 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 388.823 512.306 397.845] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.6.2.1) >> +>> endobj +1196 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 375.273 512.306 384.296] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.6.2.2) >> +>> endobj +1197 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 361.724 512.306 370.747] +/Subtype /Link +/A << /S /GoTo /D (section.9.7) >> +>> endobj +1198 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 348.175 512.306 357.198] +/Subtype /Link +/A << /S /GoTo /D (subsection.9.7.1) >> +>> endobj +1199 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 334.626 512.306 343.649] +/Subtype /Link +/A << /S /GoTo /D (subsection.9.7.2) >> +>> endobj +1200 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 321.077 512.306 330.099] +/Subtype /Link +/A << /S /GoTo /D (subsection.9.7.3) >> +>> endobj +1201 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 307.527 512.306 316.55] +/Subtype /Link +/A << /S /GoTo /D (section.9.8) >> +>> endobj +1202 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 293.978 512.306 303.001] +/Subtype /Link +/A << /S /GoTo /D (subsection.9.8.1) >> +>> endobj +1203 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 280.429 512.306 289.452] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.8.1.1) >> +>> endobj +1204 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 266.88 512.306 275.903] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.8.1.2) >> +>> endobj +1205 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 253.331 512.306 262.354] +/Subtype /Link +/A << /S /GoTo /D (subsection.9.8.2) >> +>> endobj +1206 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 239.781 512.306 248.804] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.8.2.1) >> +>> endobj +1207 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 226.232 512.306 235.255] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.8.2.2) >> +>> endobj +1208 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 212.683 512.306 221.706] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.9.8.2.3) >> +>> endobj +1209 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [498.314 188.225 512.306 197.793] +/Subtype /Link +/A << /S /GoTo /D (chapter.10) >> +>> endobj +1210 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 174.676 512.306 183.698] +/Subtype /Link +/A << /S /GoTo /D (section.10.1) >> +>> endobj +1211 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 161.126 512.306 170.149] +/Subtype /Link +/A << /S /GoTo /D (section.10.2) >> +>> endobj +1212 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 147.577 512.306 156.6] +/Subtype /Link +/A << /S /GoTo /D (section.10.3) >> +>> endobj +1213 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 134.028 512.306 143.051] +/Subtype /Link +/A << /S /GoTo /D (section.10.4) >> +>> endobj +1214 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 120.479 512.306 129.502] +/Subtype /Link +/A << /S /GoTo /D (section.10.5) >> +>> endobj +1215 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [498.314 96.02 512.306 105.589] +/Subtype /Link +/A << /S /GoTo /D (chapter.11) >> +>> endobj +1216 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 82.471 512.306 91.494] +/Subtype /Link +/A << /S /GoTo /D (section.11.1) >> +>> endobj +1167 0 obj << +/D [1165 0 R /XYZ 85.039 786.531 null] +>> endobj +1164 0 obj << +/Font << /F65 1062 0 R /F15 943 0 R /F14 961 0 R /F20 929 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1220 0 obj << +/Length 2880 +/Filter /FlateDecode +>> +stream +xs6WJ\&ii4vr7ESKIr| Bf|I\;iE`] xTH2Tj$$GluROb.&眍p Tb?ݬ'~ɳq"ɯRǓJnN(#Q>_ёmwb4%^KVCpe*%"r$dJRx<۬&x\/gO^7wdͪmZUJ(Q]}ً*zs0nMpy[4}p-ЂP LYYϚviSGe1Bھ#:mjJ* +Zk(}(>PɷEayz)PŰbn^(z߸] +Lʑ^F;6Op!*pǡ V.2Ab/fQmΜB$d8vaJoPYzaÄ9]9J[k`%JI^ѣ5R˟6ܯ]t\iS_hq%~200T_Do+j}فsծ O)2p3p +psR\ZJ4p{ w۸ϪS:ד=8Cfa]`9!m?ItI~V@۩[ϵ bɪǑ2w礆.U"d]0ofdKzmY:F *Dc Ĝ0Įw[J A E4ׯj+MѬ]!Eۯk%nɪQk, +IGw9lM*8>rH k 3\Kᾃ`s&kj 9:lqͺ?0>>(3vlUHfdV.2nmf},Ip $(6 4YGc31O, U +C'PP3:Uko+ԧW:6ʺ3ySɟqyM54bL%`*͜T?$Xme4.hM5Cfua]`9i#,2u56\˦+aio B-Wg\c :ң5''¨s-[}Ƚv 7{AߺH$8Lzey}ac ;Y&a d\K$G@jI3Zj?Z THgӵy tY_.[GJ bi-t!ou(,/1# /'5I)" 77̺f37PvY]bEQf%Sٹ雫IttIiw6I-w!ɪϔ{Cfv椆$ Y>=xUL,AEm|8QϾHw5SlX U攓BP˰pߞmV>6{mZN[s&< ƗУz]0+2> endobj +1222 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [498.314 754.651 512.306 764.219] +/Subtype /Link +/A << /S /GoTo /D (chapter.12) >> +>> endobj +1223 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 741.102 512.306 750.125] +/Subtype /Link +/A << /S /GoTo /D (section.12.1) >> +>> endobj +1224 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 727.553 512.306 736.575] +/Subtype /Link +/A << /S /GoTo /D (section.12.2) >> +>> endobj +1225 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 714.003 512.306 723.026] +/Subtype /Link +/A << /S /GoTo /D (section.12.3) >> +>> endobj +1226 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 700.454 512.306 709.477] +/Subtype /Link +/A << /S /GoTo /D (section.12.4) >> +>> endobj +1227 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 686.905 512.306 695.928] +/Subtype /Link +/A << /S /GoTo /D (subsection.12.4.1) >> +>> endobj +1228 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 673.356 512.306 682.379] +/Subtype /Link +/A << /S /GoTo /D (subsection.12.4.2) >> +>> endobj +1229 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 659.807 512.306 668.829] +/Subtype /Link +/A << /S /GoTo /D (subsection.12.4.3) >> +>> endobj +1230 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 646.257 512.306 655.28] +/Subtype /Link +/A << /S /GoTo /D (section.12.5) >> +>> endobj +1231 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 632.708 512.306 641.731] +/Subtype /Link +/A << /S /GoTo /D (subsection.12.5.1) >> +>> endobj +1232 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 619.159 512.306 628.182] +/Subtype /Link +/A << /S /GoTo /D (subsection.12.5.2) >> +>> endobj +1233 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 605.61 512.306 614.633] +/Subtype /Link +/A << /S /GoTo /D (section.12.6) >> +>> endobj +1234 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 592.061 512.306 601.083] +/Subtype /Link +/A << /S /GoTo /D (section.12.7) >> +>> endobj +1235 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [498.314 567.602 512.306 577.171] +/Subtype /Link +/A << /S /GoTo /D (chapter.13) >> +>> endobj +1236 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 554.053 512.306 563.076] +/Subtype /Link +/A << /S /GoTo /D (section.13.1) >> +>> endobj +1237 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 540.504 512.306 549.527] +/Subtype /Link +/A << /S /GoTo /D (section.13.2) >> +>> endobj +1238 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 526.955 512.306 535.978] +/Subtype /Link +/A << /S /GoTo /D (section.13.3) >> +>> endobj +1239 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [498.314 502.496 512.306 512.065] +/Subtype /Link +/A << /S /GoTo /D (chapter.14) >> +>> endobj +1240 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 488.947 512.306 497.97] +/Subtype /Link +/A << /S /GoTo /D (section.14.1) >> +>> endobj +1241 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 475.398 512.306 484.421] +/Subtype /Link +/A << /S /GoTo /D (section.14.2) >> +>> endobj +1242 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 461.849 512.306 470.872] +/Subtype /Link +/A << /S /GoTo /D (subsection.14.2.1) >> +>> endobj +1243 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 448.3 512.306 457.322] +/Subtype /Link +/A << /S /GoTo /D (subsection.14.2.2) >> +>> endobj +1244 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 434.75 512.306 443.773] +/Subtype /Link +/A << /S /GoTo /D (section.14.3) >> +>> endobj +1245 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 421.201 512.306 430.224] +/Subtype /Link +/A << /S /GoTo /D (subsection.14.3.1) >> +>> endobj +1246 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [498.314 396.743 512.306 406.311] +/Subtype /Link +/A << /S /GoTo /D (chapter.15) >> +>> endobj +1247 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 383.194 512.306 392.217] +/Subtype /Link +/A << /S /GoTo /D (section.15.1) >> +>> endobj +1248 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 369.645 512.306 378.667] +/Subtype /Link +/A << /S /GoTo /D (section.15.2) >> +>> endobj +1249 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [498.314 345.186 512.306 354.754] +/Subtype /Link +/A << /S /GoTo /D (chapter.16) >> +>> endobj +1250 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 331.637 512.306 340.66] +/Subtype /Link +/A << /S /GoTo /D (section.16.1) >> +>> endobj +1251 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 318.088 512.306 327.111] +/Subtype /Link +/A << /S /GoTo /D (subsection.16.1.1) >> +>> endobj +1252 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 304.539 512.306 313.561] +/Subtype /Link +/A << /S /GoTo /D (subsection.16.1.2) >> +>> endobj +1253 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 290.989 512.306 300.012] +/Subtype /Link +/A << /S /GoTo /D (section.16.2) >> +>> endobj +1254 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 277.44 512.306 286.463] +/Subtype /Link +/A << /S /GoTo /D (subsection.16.2.1) >> +>> endobj +1255 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 263.891 512.306 272.914] +/Subtype /Link +/A << /S /GoTo /D (subsection.16.2.2) >> +>> endobj +1256 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 250.342 512.306 259.365] +/Subtype /Link +/A << /S /GoTo /D (section.16.3) >> +>> endobj +1257 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 236.793 512.306 245.815] +/Subtype /Link +/A << /S /GoTo /D (subsection.16.3.1) >> +>> endobj +1258 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 223.243 512.306 232.266] +/Subtype /Link +/A << /S /GoTo /D (section.16.4) >> +>> endobj +1259 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 209.694 512.306 218.717] +/Subtype /Link +/A << /S /GoTo /D (subsection.16.4.1) >> +>> endobj +1260 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 196.145 512.306 205.168] +/Subtype /Link +/A << /S /GoTo /D (subsection.16.4.2) >> +>> endobj +1261 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [498.314 171.687 512.306 181.255] +/Subtype /Link +/A << /S /GoTo /D (chapter.17) >> +>> endobj +1262 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 158.138 512.306 167.16] +/Subtype /Link +/A << /S /GoTo /D (section.17.1) >> +>> endobj +1263 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 144.588 512.306 153.611] +/Subtype /Link +/A << /S /GoTo /D (section.17.2) >> +>> endobj +1264 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [498.314 120.13 512.306 129.698] +/Subtype /Link +/A << /S /GoTo /D (chapter.18) >> +>> endobj +1221 0 obj << +/D [1219 0 R /XYZ 85.039 786.531 null] +>> endobj +1218 0 obj << +/Font << /F65 1062 0 R /F20 929 0 R /F15 943 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1267 0 obj << +/Length 2931 +/Filter /FlateDecode +>> +stream +xڍr8TEK̜l'VJ%U9eqC\S:l4F"YFqqϲ0b&:{(H8LGvu0J8r4IĹ3YWgJ0V,+0{&4wd?#4DC6iA1 pqO~ߵC S,ښQM56j(̦-h뭽% #;߼;΄,O,?*<&<~U0YB]|$lG011*ܽ_'-=*=Sع;*H,++hrӠۂĚ?~" +FoxrˑA=,額c 7Ib$(҇@r)t/Q\ zWhO<90 l'QDWC) ($`& ȑ$0qv%iTو%Y{&PJ:%lP[ۉ^||P;ŀg5 @0_2al-%/ՓA<)PAv4|{gJ覊$eBd6;/$l*vRP31S-l'?4 r-B=Qؼ[4̕fɪ:'HE[Z2ҧq+(Bq RCUʼnB_]Ы$qp' )6nS`QjJwSlD*Nȃ>l^zߒw؅  ׂs:@mA|.{ȓ`І3CxZW6Vb MJL[MB@DzgT^ll<8=_6܍ʂ_wѽ] +6Tm]嘞yz +^u`q6lRʎِqg2[wA +=."|׾vx* h ls-V ,0vN*1q:Os:_${л˱vdo. Vs}3w- m5)ߌuv""H7 _3QNSSkA; |Ug:ޯVEJca(ǩaWȉ#ՁlLe5fjc~8W{?}9p?h 66Y3QҧSpB)dYvČuU; 3,f*2Ԏ*.N Av>8zn8⟤o뮥вTsBC;<]l <tUk_4j\!Qsc' 졯Q@0"u7u%zlom|#΀z x,Yn"ʦ^9\-C|$ASΰ]bE=ݙVfT(N`j9bVD2g1eB^51|r%(#l#8TxK[-uLcxEj%eiOr-5 .on?<\zp6T:-X ֮9W%.`a*iP1ԿlK1 +EuNW ضP2N +ǯT`W؈!Zne+$Kp_{ 6˅sgCNd8/dJ*/xQ3[--xŃWdP_Dg#.0uVz^haJ튑ƞl]?J +@F= N]9ֶN5"Gfbv-^S_b`ؽP52WuP5%VLC<&zHܥȼQ5&4w;g ^*hCNx:Uo#kI@_VZX;8rk2/3*RŎ%8 xrD= 1 =Kq(b4,~[&endstream +endobj +1266 0 obj << +/Type /Page +/Contents 1267 0 R +/Resources 1265 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1217 0 R +>> endobj +1268 0 obj << +/D [1266 0 R /XYZ 85.039 786.531 null] +>> endobj +6 0 obj << +/D [1266 0 R /XYZ 85.039 766.606 null] +>> endobj +993 0 obj << +/D [1266 0 R /XYZ 85.039 651.298 null] +>> endobj +10 0 obj << +/D [1266 0 R /XYZ 85.039 651.298 null] +>> endobj +1269 0 obj << +/D [1266 0 R /XYZ 85.039 622.563 null] +>> endobj +14 0 obj << +/D [1266 0 R /XYZ 85.039 213.197 null] +>> endobj +1270 0 obj << +/D [1266 0 R /XYZ 85.039 184.461 null] +>> endobj +1265 0 obj << +/Font << /F20 929 0 R /F15 943 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1273 0 obj << +/Length 3130 +/Filter /FlateDecode +>> +stream +xڭZmoF_ +h8u.9Wz@D]7EٙyG4r=͒4v# o\cQ#Oq4=7jcdylU͇R"IRtY.:zu5_y:۷Gٶ|6^ ;ylri `+7 +3f=~JႿ_ɛ$_.QI3o(rY2v+ҴԀĩrU2S톎]X푬BZu[ԽƢr}sv8͠V2m:ߕ^rƚId9?2E0Rv z'g G2߃ +-Yh+rY;lO l &wA6>9Τ'qӓl&S?]]G^|q?(}!b,&<ٺ%N$ NcmҋcJG3#* +Ve4*86E~AحB@B %+mVH=bm`ΤhOl +dU#bΩNbO\|c25N}3.pkQqqJ3nTg,TdxCQ&jM< 'hsC."Yj92ؘ^!4Yf\̨HqMwHv Ԥv'dÄNϐTfލ e_yj\dHwZo#'4l +X{s_EĽs*`YI]ZYR&Y8T„;E9/N\e=gTtZfM!QhsQ1ezfh^NHzdz:!^0Ak]K4ΤǤhD?gMj1КPsH9g\t2]J6W1&Q:jqI3~*fᇡdB#%@B (BT@Zʫ m' uHBWP +ƖoZF vDxQlzRΤcvMU+{}#Iߢ'~(-:߹ MtnM{'"gvavqmpHR*LG`3P sŦK14^Q7/tw9bS +=d+KnXvyD1n;t!)XM)1&rZ@ 3P }o6![)3h z)E}}r紅 |/ۺvMk}&R%D2*u=G(`J5C.hLl8kd(.3[O6RidNR$ M +F?MT{5P%ڪ9+ ~1n.&IGɹV& +I 7}ܙR&:R0NشXi݌jz>,}eNO&iRtr[U*5R˞}|Q&IPcV@>E2%ODo6(`hdZٽ5{,wVR~Lوk4ڬz2_!-|jLi4p*O7Wa 6ӡw?xs+U&~fz4Z mqCFG9GX8POϿ8t-|*rCi"?WxYLQqfw=q@oGendstream +endobj +1272 0 obj << +/Type /Page +/Contents 1273 0 R +/Resources 1271 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1217 0 R +>> endobj +1274 0 obj << +/D [1272 0 R /XYZ 85.039 786.531 null] +>> endobj +18 0 obj << +/D [1272 0 R /XYZ 85.039 722.931 null] +>> endobj +1275 0 obj << +/D [1272 0 R /XYZ 85.039 696.923 null] +>> endobj +1271 0 obj << +/Font << /F65 1062 0 R /F15 943 0 R /F20 929 0 R /F11 968 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1278 0 obj << +/Length 3154 +/Filter /FlateDecode +>> +stream +xڭnF-0bn>$da/Жh0%z|֫9#Ut_*0*/Pj{|V{C,I4In2FI~Fhl u#,ӫUPjId-PMF9FgYzPvjOzvErhQ:ԹZd50ʔjpXj388 QհўT@Z9a0/AS"@0q:4"??5`[ܡ$t-gZG{bN|\aM?g NZx'|S{עo*q#M[W\{5eSs:׷uD>ᵫ) u! } j$k|ׁ4- Pߏ~f 5* 37tz|.ôH/=2& +39N5Vvk_A 90vG|0h)iu1)TvlA/V;ҝUY%W:-(T8)tU"5Pگ~co)Q2̀WS+ +̰AI/t-V"x1P_ i»YI/^f%Q|H7FO/T 23H6F vSEAcolcm3":c/X2ț؀&l]X͔QIYϕQ|i:W:Sh+Z'4,ၫ>(TZ/9̗{ DŌ_Iu;*ÜCMX<E/[ LΥlYVc.$AޞHVTqh*F! NvVӝ9,5XGb֖qRjh83\eq5vm^2 F\(I6Ca !_#IaO*2nDz f\Q<4qTFԗ 3 պ_s8%*Pc|UsJpRu wjd7:Ϲ0? +88gsCd]BS?2q}#^}ߝ+eb=P3RYnC"T {F7nA2yIc,z&gU>0+!3C}ߣX~;cj;(:IKs"$mVr[YNF{]/)8H86 z +KggF**8.rG9rYv/095rpa']u3ͷ[{wY7}&BoFp~l7fWmmYRH>]58 + hO;j/0"o&ߛږVTךe%_`*KJŽTm<]B Ɓ=NX8{ޭyؽ_"Ai,\<7{I|}f#}!}e ɭ"hzхG|cvl{[d,{rQEֳ5=ı?>)OđpDFx3n ~'.%: Gb`l(n~%\0m+pK X9"[1@8Uہ/۴0if<{^bYFX3*q Z,V|e4Ti.n) whT [ +ly*%v淚gOG.nk2h7{+s' ]5;Q&oB-f4Ԥ =ߠ\+<'zD.CT*o$[1WC,lXq/.6 _V.>w/DTHc0&WW2u7ڕ|9+W95ԉ OQj 5W5i_8Κkj&nL:--NYs]fգVaz'͜2 + +7"r{36=2"$wuX2L;xǣ+m>b7VLu(yEڏ(&y lh~(#uHPR*竺0[]Pjy+@Jo5v|* m'S*=m^oԆ.EqvPsti/{ca(gdrQnQFTPB5rtft;F [xDS&_Z)Ƞ8cl'/iʨH iњSM/p`%d!f_{(\1yW 6tn? T8 !Iw͟`Tvj'528",}\gX9o + ~鹣\ӯ񠪂kMWFB &5KlYfG]_3I 0못vRdYQVC(ߠj!|I^ur]+'KB\wl6p*Ci~> endobj +1279 0 obj << +/D [1277 0 R /XYZ 85.039 781.388 null] +>> endobj +22 0 obj << +/D [1277 0 R /XYZ 85.039 761.463 null] +>> endobj +994 0 obj << +/D [1277 0 R /XYZ 85.039 671.062 null] +>> endobj +26 0 obj << +/D [1277 0 R /XYZ 85.039 671.062 null] +>> endobj +1280 0 obj << +/D [1277 0 R /XYZ 85.039 642.326 null] +>> endobj +1281 0 obj << +/D [1277 0 R /XYZ 85.039 569.47 null] +>> endobj +1282 0 obj << +/D [1277 0 R /XYZ 85.039 542.372 null] +>> endobj +1283 0 obj << +/D [1277 0 R /XYZ 85.039 528.822 null] +>> endobj +30 0 obj << +/D [1277 0 R /XYZ 85.039 498.834 null] +>> endobj +1284 0 obj << +/D [1277 0 R /XYZ 85.039 469.43 null] +>> endobj +34 0 obj << +/D [1277 0 R /XYZ 85.039 291.068 null] +>> endobj +1285 0 obj << +/D [1277 0 R /XYZ 85.039 261.664 null] +>> endobj +1286 0 obj << +/D [1277 0 R /XYZ 85.039 245.795 null] +>> endobj +1287 0 obj << +/D [1277 0 R /XYZ 85.039 218.09 null] +>> endobj +1288 0 obj << +/D [1277 0 R /XYZ 85.039 193.719 null] +>> endobj +1289 0 obj << +/D [1277 0 R /XYZ 85.039 123.852 null] +>> endobj +1290 0 obj << +/D [1277 0 R /XYZ 85.039 96.147 null] +>> endobj +1276 0 obj << +/Font << /F20 929 0 R /F15 943 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1293 0 obj << +/Length 3219 +/Filter /FlateDecode +>> +stream +xڥr]_BU"ȋK^obm9ލ-ÐHX8(>}AR5 +.rb]-*,VWG./rzxR?IŪ{Շ_q{»pwuT >^}X f˿^GЏWƁvwi˼A{ɂO{ke~ H„aa I? ÐeH~d ׏ ㅃ:Ogm .bo3 +X߿q!;X25 +y2ʽ5pR-,U.z3Kt7Hn#W)d&8R-ⵅ!ӄa%DUOҼ`x2ȿ~aJm $nǠ(!њ<@Rl!\/4V끈lr0MYYyIsFk,/(Վ yF r+kg lZ7z4j9 b?5({7BMXsXwfH@ $Q|c Ǧ&A^zt8SW&Bn֣By%Ta1*S,bvJpz}@V(н=/I,eKi<6$I=49/$ /ݞ +8B|ȀP?jmJ$DլI&KiT5>x'k+[Zx_g]F6mbDF ;]-FC?!f}1+FXSQj'5ۻmx*XwbZdxaS%'䃾1HbԦgZ̘NASq?]fy 0 ty%Br:#Fx}ߪͱCu Cpw +J@pȨdfksհ esGdו]%fkAmґIo# +Wh:PtdLG!k⃍4jΌؾT+*&icH(c#({rBR/DRoQw6ff|~VLZ +i_;^j֓3,X 7ygDJj 7K qkףsx9cy8,]4 9mt^>%x^&GDL8avl{jd~DZ':&Q$h YIp aU "q~np)yg+.P$&[f V V:P6spIh~[iNJHHI]Pssg0T'q.$*FK jѷ$ؑfh<] ghjT|83S!18 ?|cNCK|j e#OhDPaJ75t')N}VUn& 90,iۚwt}H5t1VB+NOvT1#x:hMFc솃CC]Šq!RYWn|Īgpݾ9繺?L&{F>uE,wsuh)P轛u#}ѦĿ笻҉h3xAYSbڎrnu~2w. 8}u\n'E'Q"IC>@K\~r`.,HM]BvKᏛ40uZ$ T>5$SCBJ GRQ'&N8;s|] W*)휢F7b8S#8p$@}sSн$;E_W7C@{<]䑷[2yУˠ >|3R Ǯa/( +`̋Ͽ6qpbxج̍jn4eyqflTS7&FQ"(,3U|jG;q9=1AJ*Taћ +j['9#3\L6a>UXl h6>);GĖi`TeK&Sd:3[ӨЎN,Q j崇Cѽ[-,DpSJH S`A.&}\tQ&c Acc FҜpI!Gg΃mr֦giFs;]mqNZ0 +[8-ӡ7^ j7$ tQvf'[r1;qkNL ڌXNҎ|AI ĄflByfU2Tuťۥӊ)KR2tK +{JN{D/wrco J0J%5QLDPɻGm9-dH^.;z=gKKMՎ<>cCgGtv쥎uO 88}݉"*B3.7c_j&LߠMYg5[31F݅^ 5`Qz&7`ezdr5?ij#[[ozR<> )gIf_%Qi-²"?2(?'Kk ;M#ȧ47گ|I߸_KgPGw;yNBq.GZ"pӳjdi,<> endobj +1294 0 obj << +/D [1292 0 R /XYZ 85.039 781.388 null] +>> endobj +1295 0 obj << +/D [1292 0 R /XYZ 85.039 761.463 null] +>> endobj +38 0 obj << +/D [1292 0 R /XYZ 85.039 718.394 null] +>> endobj +1296 0 obj << +/D [1292 0 R /XYZ 85.039 688.99 null] +>> endobj +42 0 obj << +/D [1292 0 R /XYZ 85.039 402.235 null] +>> endobj +1297 0 obj << +/D [1292 0 R /XYZ 85.039 372.831 null] +>> endobj +1291 0 obj << +/Font << /F65 1062 0 R /F15 943 0 R /F20 929 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1300 0 obj << +/Length 2207 +/Filter /FlateDecode +>> +stream +xn_7K5;^@6:8(V) +8@KD]3 9(CB39sjBt'J$ 9Χ AhD0\e IU*LG-gZ(2L)-ҳ( D`js?7ej/&mV-aT W{V׶˫O7f#J$rF؜#b5P(B w3 r{}ywVSL(g\pHe:J'"ciB'naۥGc r&ø%5*ϒ-o'i97L.^>hķp4RȄ&8l24@ny?ך̖Q,#ݦӗ)/.!M~v`׼t׻W}u|fXU'&h,| =¬1GN)1JY +zaS;9w;g~.>/%wNxٍTc~yoLwD##Qǣh6w!Jmd8R,[Q"5C!| +%Fs냃  JQQxvY4rKH,/0/`npSA]3Bl#EI?@,mgVƦCŤHU?~*~fF'vÊfݴ NDO Bu+b!mMu@bh:4QWu("i3P<950 G~;۶Oe}xTن ;D(Nj4HDoht:QBI#4zӨG&R˩~0'ۑnav@JVΡ6C}xb 17l ͘jXq-?bW@~@_GENaS?G,5gUufcℊNok +ТuQmgV_U'u %-y) @n۱9bԺoCϾ9Zt-W#Dk;`J[=i[՜4'{>q=ŕc;Hi_Hew 2ju]5򌂫x,8Pgcx=aU.G +eduQ.u{9Rr'L~5ayV˨J"K)dArWw q 55'hsXKۚ{u(8-}Q:"9$iBa\ѽه7jp[U[$](Nʰ3/:)ߕǀUr(Eh=*gS?]=.T0B0œʋ/QKATh3D. "{L7j $RB0*J#:VSۋk.6v d fQ=y5z^QVtx1[:"0|NWQYr\ESsQU4Hy@FDvL8n7W#|۱D "uq><T}S4㮋fgw5? v u)^V'2nfC7G$; (}:O~W 3d>~˻n$6o~fa,jQBnYh oc]G?7 zGlsYi,'f}z<2oImX6OYSqd&%g+^2 +6:,mg`߆cEo4P hBd\''u8`9rk=#hE;c8,]c]2 2@|gs:;eW +Y¬EA Fȯgن1 tK_ +TJQ1`kuzl/8a*qIaiѫj+,K&2Ll^LHp`\/`2C:/My"esmF8'yE_bz F12\d҃rԜ&_szendstream +endobj +1299 0 obj << +/Type /Page +/Contents 1300 0 R +/Resources 1298 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1307 0 R +>> endobj +1301 0 obj << +/D [1299 0 R /XYZ 85.039 781.388 null] +>> endobj +46 0 obj << +/D [1299 0 R /XYZ 85.039 761.463 null] +>> endobj +995 0 obj << +/D [1299 0 R /XYZ 85.039 667.044 null] +>> endobj +50 0 obj << +/D [1299 0 R /XYZ 85.039 667.044 null] +>> endobj +1302 0 obj << +/D [1299 0 R /XYZ 85.039 639.536 null] +>> endobj +1303 0 obj << +/D [1299 0 R /XYZ 85.039 373.804 null] +>> endobj +1304 0 obj << +/D [1299 0 R /XYZ 85.039 360.254 null] +>> endobj +1305 0 obj << +/D [1299 0 R /XYZ 85.039 333.156 null] +>> endobj +1306 0 obj << +/D [1299 0 R /XYZ 85.039 251.255 null] +>> endobj +1298 0 obj << +/Font << /F20 929 0 R /F15 943 0 R /F36 947 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1310 0 obj << +/Length 2026 +/Filter /FlateDecode +>> +stream +xڭXYs6~ׯxc*c8HtƹL',A2kTx EɒEX,vA9'q 'ug.a@:#hNϣp(d8]l~toӋ?Fcx2 x;s޳ >}G)]>M_.8Apt||$s@:.| ˫㇁vlv{NJׂ!ڧzK1aD"ݙGj BH|-p +?Gj4CM-M +d}Cʥ!SmhH8]'|*]2b |^} g,c "oE2kZ|6Rw|iQ$Y~8܌Tيqp?ڔd-+b|`Px,] )Q+$aLb0],,VDcn2_H̀ l"j;+W1h RqpyƲI/-r^,c^9ZOt^kd'=^MFRO8\{ҖdsJGkx,^/E ]lL`x +S ^-x¢Hݰģj:5'ϺLzA 7UMѡ> ?~pÕ*A~t=#w~f*w:Ɇ()~ySye06QL2vډNfz*IzL½6қ, "Hf1d瘗8ufJQLCzpˢ@@0u.ȗVfMD7ޓ@@Ƅ' KE)iם%64.S~ȶϯx=U;?9ԡwii"F’~20JPjuň42U{7@^>Jܮ$:}SG5@@_Cθ.>yˬ`2 +CֳFyHzo.ĉ78q-}8w5aUmjŖS\fNSb:5R479@]]q?ƒid{ZHok7 lBSԇCƧbrLP:@H7fgP# +Hw5[B;9J3˞fa]co&M17ף2 y4(tvT)BJ +h A Jp!cQ|rǔ)4u+H8|EIk$c)D>|PEĨP\+aPPP 8HےGuCaS]`~) dx"YB +[n\(H0t{^xOmaN%G3*C)qrfKZgË^bgoq*vŝˊ+\EyD{s } H*ݔc'Ys8@rx}IfL\A+vŔaXY*}'c ̗%쁚cFӬ33<{iwf.*ɘof(q)Z޺8nLYTIa5۽|b W zӸaЅHrٹtCV Ff_źnH:RQJ[7e6`#fڻf!c'߶dec;f> l6xxOz]pˊھFLڢ݃TpnV:x@ +$9+G˦ U"ÌK{qs0Ifi ҫo1F7b%]!~̱|aQ'maA;v+Vk᫂.{eu^ɛ0c}JPO0I)h}_N /@N~ ď& jc}_nBYendstream +endobj +1309 0 obj << +/Type /Page +/Contents 1310 0 R +/Resources 1308 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1307 0 R +>> endobj +1311 0 obj << +/D [1309 0 R /XYZ 85.039 781.388 null] +>> endobj +54 0 obj << +/D [1309 0 R /XYZ 85.039 761.463 null] +>> endobj +1312 0 obj << +/D [1309 0 R /XYZ 85.039 736.114 null] +>> endobj +1308 0 obj << +/Font << /F65 1062 0 R /F20 929 0 R /F15 943 0 R /F36 947 0 R /F14 961 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1315 0 obj << +/Length 1795 +/Filter /FlateDecode +>> +stream +xڵikH ,)FG +mv[RْYr%IX;FGluIkͼ'Ɓl@X2/aHh S=+Omv8.{*9Ɵ=?sbJ) iMLo 0w/k\\닿^aw/ӷiNKHѧ/8ߎlKֶ%`{5f,J>h=w̧Do0LZV=캖t=T%3m)%HKNLlczܞZ b..V6 wѼ,PpAѷ_ˠYB9|boD1"NN KdWEAf%o'N`$(3zF'Xò,fΊƌ!jxQ:Иo]FdNQSuCi.+ah?#~,r~EٴB=Wh+Y,֛o +2" EdRkQR>&Դ}ItfH@u9F:d%(pY6rf8m$!xO̜!M MLQU@o>Bj]4L{j]5U1`:4ału4h:ǗƊ͆8D@-۰"1>V* zA82mفO@*qa!'_'"-iYH7?iϊnRVɼm7iVV3! 7ϵ=OP=3?Z`ZnK,M>ԀP!FQJrh# ۊSxdÅ2tetUƫp֦4^`>un@ °kY  +6[IA$N yG3 +8a ̓-eRsqk6R ȗPg\5^yT$7Dc#׺Xւ_Pq++um5B3e9~'-ȵe.۵,"jem3)% + r(^EUp9 ӖVgL󺷃g{M1f ڨRud!Х)N]MEMCD ) .77|v$_2B P#̥QAFVWx?Ŝdc~M-r3[UYM5OT+ԡb/{EWyדɇ\rv(8N;OA89G780NB*8Q{Q4JtFFr0<75yނ: dp-o*a&i*[f$ +*u;5U2AsS:ИNIhRŁ/3 0#>X5[US;&ahMHb'u5_z}/~ؖm0FY"]tachr}?ce<[3KOi8OǑyrr"s58W/Ğkyt> endobj +1316 0 obj << +/D [1314 0 R /XYZ 85.039 781.388 null] +>> endobj +58 0 obj << +/D [1314 0 R /XYZ 85.039 761.463 null] +>> endobj +1317 0 obj << +/D [1314 0 R /XYZ 85.039 736.114 null] +>> endobj +62 0 obj << +/D [1314 0 R /XYZ 85.039 511.057 null] +>> endobj +1318 0 obj << +/D [1314 0 R /XYZ 85.039 478.735 null] +>> endobj +1319 0 obj << +/D [1314 0 R /XYZ 85.039 79.901 null] +>> endobj +1313 0 obj << +/Font << /F65 1062 0 R /F20 929 0 R /F15 943 0 R /F36 947 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1322 0 obj << +/Length 2029 +/Filter /FlateDecode +>> +stream +xڭXY6~ ZسәIɎ Ƀڒmu$9[%vhGX*RMSʼn)Yb~L0ab.$bS7UI\$t:3]TF_1&2leyf*zl~=Ǿv6 ɯ' +vĦȧ/Nb ;k|49;UT:u yn(c4%K`Gi6z"4ϕSLN1"v;Yn8[eyy:ѿfEe S )`\EO6%Hs,r9Yُ=^v^yǮ7(a v+ +ҋCx#w%.8ϗvf6IHtB~ݼ~D춎l^A$"g;8;XH#'+zn\Uqdg{\j23d40Cƙ߸[0$-8-bHB0icEK@`^nn6w.~_P,zfxXD8\uI}1S:S, 31IӺG)oHj80#͕B0 ` +蹥X!U>45/]]x^xDggFNӓ?,kkzg0׶2VEOٞIst^Ar5#'iBQ*:E=Zlp- ?|[@rεN5~ [u4 +gᜮZ^W`ZByAWm|`oDI݆{U`t" {J`P%gw%D=]GsPFH YPY 램fu\v. #lgSRĆB}#C@ 2joe\!a\Ea@)36RzbA K +=:>RǯoeC#< ~8 n`AXgt.%3>ʇ]Q:)`,YW:F(Hsu[=TT2ݲ]]`GkrrŒc[҇TKUB4~)]t5$Ak&8W{JX0 -"fbj웶%t|p. +<uݖ%Yԡ%:-v`@,r+p xض\L.W,%~XT~4êxƩ=WѰ` +څMB@sQ.(jԾbs.Iz^iSimnnꋈy ىhە?>=6[Uk:$.e]r^9*61$߳B>^BQ<׳M>a{+7\=\^$}mTDQQZXmypF'Ca: ÃeWm'.OP&`E 1zS!]&j٦:=#[y7<2}1Ech;$J"5t+bUpe"AD> endobj +1323 0 obj << +/D [1321 0 R /XYZ 85.039 781.388 null] +>> endobj +1324 0 obj << +/D [1321 0 R /XYZ 85.039 761.463 null] +>> endobj +1325 0 obj << +/D [1321 0 R /XYZ 85.039 734.228 null] +>> endobj +66 0 obj << +/D [1321 0 R /XYZ 85.039 690.69 null] +>> endobj +1326 0 obj << +/D [1321 0 R /XYZ 85.039 664.681 null] +>> endobj +70 0 obj << +/D [1321 0 R /XYZ 85.039 664.681 null] +>> endobj +1327 0 obj << +/D [1321 0 R /XYZ 85.039 640.699 null] +>> endobj +74 0 obj << +/D [1321 0 R /XYZ 85.039 557.95 null] +>> endobj +1328 0 obj << +/D [1321 0 R /XYZ 85.039 536.695 null] +>> endobj +78 0 obj << +/D [1321 0 R /XYZ 85.039 453.946 null] +>> endobj +1329 0 obj << +/D [1321 0 R /XYZ 85.039 432.691 null] +>> endobj +1320 0 obj << +/Font << /F65 1062 0 R /F15 943 0 R /F20 929 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1332 0 obj << +/Length 3714 +/Filter /FlateDecode +>> +stream +xڭk +x|?-RpA4(x"%1H_y-E^O켗ʂ*MˍWadnknl|= n&pL MhǦوޱVezܭl1]YgzzL6-Zo\HrAh5 !d %)Em_Nlr?p@~Dyu(T72qO8R֋mwzhBz~j +ٳ2͕- ZdIS<;lpjyRI} * #;e+&-vjAƦRh0G!9|~aC#@W-q r\M seM瑤i|^8@YIN~!!|7i@2DGܑJ(:ۤi:\iE d5_lLW8iGT6[V +04OG('緫,ˤQ1b#:"Y88Д^1|${-8lLŊsR$ӎ ~$wG`۾T} 38G'%uы@j c(YIFaLyONC! +*4W[$,JF=F%I(5תkV_/{+]y}C|44$KW*ѐeUBBmsBL]&(/Pscӏ5rujNS|/*XG3&ǫ 䇡+o5x "w`)q$/(JRQa_+WU.ozNT%('C%dh V<"Rj3TN:ȌhH)(2.݁@Wqd{҂ 29{ԔiXWaz^2A{oUhKRUKhO4UCn-T$]6"*1Oj/hƀRpg5cҌEjJ34j)7X+r&Q] 9&u2kۏ(L=|7ڱh?y+@Zܳ19tym(`H-$:f8#8q` }4Vhz/BYPnBY՞'{RΠX C޴*<ɥ'՘tB}Ȥļo29eSvGYT~r>w9un~HUr_qA,U2HwA~5j9 Ȏ7DvZD|u 0~vҳeԐUP!!.5\&SU>k$pl%2ˎaXgTb2_OVPiK/z2bJ՛S 0C}AE$g0K",RSQ˞OE_hWNoä0I]U %$_"~WAj@%\/)jSe;='=d IGfGDFA.j95귳GJj.Bi?AsǰDKaFJ8|;E -:$wOn5%)}/頄m/E _GcE[SW*+}Oڹo[w?PV?v-j61wyZ,F-Fp<-pendstream +endobj +1331 0 obj << +/Type /Page +/Contents 1332 0 R +/Resources 1330 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1307 0 R +/Annots [ 1334 0 R 1335 0 R ] +>> endobj +1334 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [122.225 464.403 422.032 476.396] +/Subtype/Link/A<> +>> endobj +1335 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [122.225 450.854 364.76 462.847] +/Subtype/Link/A<> +>> endobj +1333 0 obj << +/D [1331 0 R /XYZ 85.039 781.388 null] +>> endobj +82 0 obj << +/D [1331 0 R /XYZ 85.039 761.463 null] +>> endobj +996 0 obj << +/D [1331 0 R /XYZ 85.039 667.044 null] +>> endobj +1336 0 obj << +/D [1331 0 R /XYZ 85.039 286.574 null] +>> endobj +1337 0 obj << +/D [1331 0 R /XYZ 85.039 259.476 null] +>> endobj +1338 0 obj << +/D [1331 0 R /XYZ 85.039 245.927 null] +>> endobj +1339 0 obj << +/D [1331 0 R /XYZ 85.039 220.95 null] +>> endobj +1340 0 obj << +/D [1331 0 R /XYZ 85.039 193.851 null] +>> endobj +1341 0 obj << +/D [1331 0 R /XYZ 85.039 178.181 null] +>> endobj +1342 0 obj << +/D [1331 0 R /XYZ 85.039 150.476 null] +>> endobj +1343 0 obj << +/D [1331 0 R /XYZ 85.039 110.435 null] +>> endobj +1344 0 obj << +/D [1331 0 R /XYZ 85.039 96.279 null] +>> endobj +1330 0 obj << +/Font << /F20 929 0 R /F15 943 0 R /F36 947 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1347 0 obj << +/Length 3686 +/Filter /FlateDecode +>> +stream +xڭ]s6ݿBӗiD\'KIzgw%2'T߯I$tv2b/.?Ů40ݕȻ+_ 4`{/|ͽ|8(_0 Ƚ^i}z;߽{ ??}ᇫF +dr/y + l maxw8 +廾FcтgMm3 +7HznE0/bύH7y0z;?\?\1raY|Dn6oeNu_W^N5@~ +:h5P63 t#/ #E4= VrJ rxS6uU4:}(bdT +yr/ZY +hj@L4@nW,ݲ[iMQ+1UY݀s)Z^mJyP˞;:9]H Ԯ м.( ҅`NDDLr[HnZ3?7S Qf>o +cA<3""GZAW-rC"zJ2ud{lW"?}<,.;Sc/vHsaǑ*@Xt&,t0Y$Yqp- dnMċ'cκ%)pS/k֮pp?;Z{?tݖMHG-c0.ޏJL*H;ZCHr!@ @Y`r7:L - nxɷݺɓ:#b*58v 'c%+YVZ)Nh)F3q 8wV=19K謚@F{rŎ}Þgee73ȬCg@]Ø7Q3㜊;ҡҚ:jP&^-4^옪zu`ÚJV1Z4La@BPCP VPw +ρϪRq_ХȢLDjR'+9Oy/^,QB>!{uɌ!xRGh53rXK: +tBp[ܐC/њpD' !h6DVtH#swfRC>&!?Z9W8O6,9xqhW ~ x_9pt7D̙Im +RH/P#\x]o[ߞE, %x"M 30i…oi?S+!yK +#_=?7P.Yȣ$wv*?Ao~|Whls:;`wv,:$@C)S:d#Mݗ8AFWj#$bՏ& 6r<<+L(S 3A<)h2,R J6+=%+9%©ƕ9Lj=ÙeG Pq\mQFq(;\'j~|CrXX*¨i{(?Q\Xos\3Ks/wdK%g Li nlZZ&!eܖa*:Jc7G 6p7ĐJA6jn%(*')52#٧_ddqD"u6zAX)aDR*3w޸ѶÊsSiECl/0 +AKcQM.Vx¨4~VQ(Ap&KqsGT9g%:VA1TtF';ҢZJp I5yÇNR%-м&+ W0{'c'l''lȐM=[ a2aJTμ*̓I=q ZcjUVj"pqpA"!9ވ؈)1h))~CYh#.߹uK;p=ϹaWc8p42.@{aTAAX[8 >M:>f;s8;ƶEr8U'dJaGy 8& әy&mM7>^I4BhD8a|Bى%6SYsWjjl*xK;YWH{gpZ)5i/>y67rr0eϕlWY oz/Fez!O(Շ@_Q5tQH |*.n,`G +Vgl ī%hZǬ8hQ ^5C-1tƏ +IhHƏbMЪZI <=ߨz((>cy +yԋ<ǰ;H\D%_dz|b0^і1-ZI"XU O +)A9o{]u7T :jX%v5b+"7I/мU+ ً+=j;9j?KqetߊF~ĥ*󃾆oG|})JnkY|fv7\骂CP> +8h'b}*͜`2SȜGQ 'g4b-sD]t-E4npg(Re(+jh«xיe@#J7)d^`yJPf'.dNdJOىoAOV]hcL׀cxP/;+ek83(lKS7)@<::b5XqY<6b?:ۚCzA8BT%# +"4P Pz { +2~WZѺW3$f>h&-\6>u*N8Hc~CK!ȗ5*- ?vŶG'9IH&@P +:`e*L17e_m.Si ȕ? stcs OmT&̃p^Irudn^#l1FaVH33U KtCbET%A$m5W|TWdì 945yd+=vr5Mrd?DQIOeG9 +UO5?ƻIphWc<,^ZHpCw43'L suG LbI~υg:|cLriD;/@NȌeٛzӴʹO;I}(pꟸ!73|)AaKgv=ONMFI5h%mzbd9خfN2RķSIh{uA}zL⛃fL: )j= U3>J?K3XbQ +|G8eq> endobj +1348 0 obj << +/D [1346 0 R /XYZ 85.039 781.388 null] +>> endobj +1349 0 obj << +/D [1346 0 R /XYZ 85.039 761.463 null] +>> endobj +1350 0 obj << +/D [1346 0 R /XYZ 85.039 734.228 null] +>> endobj +1351 0 obj << +/D [1346 0 R /XYZ 85.039 707.129 null] +>> endobj +1352 0 obj << +/D [1346 0 R /XYZ 85.039 680.637 null] +>> endobj +1353 0 obj << +/D [1346 0 R /XYZ 85.039 667.088 null] +>> endobj +1354 0 obj << +/D [1346 0 R /XYZ 85.039 639.383 null] +>> endobj +1355 0 obj << +/D [1346 0 R /XYZ 85.039 601.463 null] +>> endobj +1356 0 obj << +/D [1346 0 R /XYZ 85.039 572.243 null] +>> endobj +1357 0 obj << +/D [1346 0 R /XYZ 85.039 558.694 null] +>> endobj +1358 0 obj << +/D [1346 0 R /XYZ 85.039 530.99 null] +>> endobj +1359 0 obj << +/D [1346 0 R /XYZ 85.039 504.497 null] +>> endobj +1360 0 obj << +/D [1346 0 R /XYZ 85.039 490.948 null] +>> endobj +1361 0 obj << +/D [1346 0 R /XYZ 85.039 450.3 null] +>> endobj +1362 0 obj << +/D [1346 0 R /XYZ 85.039 396.104 null] +>> endobj +1363 0 obj << +/D [1346 0 R /XYZ 85.039 355.456 null] +>> endobj +1364 0 obj << +/D [1346 0 R /XYZ 85.039 287.71 null] +>> endobj +1345 0 obj << +/Font << /F65 1062 0 R /F15 943 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1367 0 obj << +/Length 3651 +/Filter /FlateDecode +>> +stream +xڭnFrC6dwlID[H#Roٔ(1 XdjZir*6EXo|8'>Fk8$ЈrU*O:Y$2_(c"+ml]n~_(MjW"e>"|B+],z"Q!<#nB=,i&NC]-O)  W<U*e(_ p@KHRuA2-H(2 33b zGKxuˉ|~ ԏ24_5I&6.r$)Ic…Ir,A'ɀ$mYHC4֗L ; e84tE-RaƗʑ8t=32[͚:˜R/(fX)S<1B0 +厥 |^dv[~M_fXt^)m.)s@3~;nZ?CqyGAc" "$H \,G0҉]w5E5||Cj&m7i38OqmG1/ƇC:6,vJ aHWׇLK)CPE;l Fʪ^S]tuS x40SuЁgSj Nj`!kņZW s@ov@Ӓ7v50E;I(&n$:Mo0E0'@4{5͑sanSp씀L<簏GAӾNk琵Vk~ cZ㲻PYq ge9RaACoKiۆ2lPZ>/N퍅d&,_-L\i`{OM='A+1 fuW 0")@<A w7r7XP!yDW;تx^D)  h>t<"ɯ.Ď+T$Q_ACwrnI5˸O(9eu[`5<*g{Y9-%@p +;>cozxI/׀mN ƚwbd% ;fI^-p[Ži9&K9# C6tqDuWuX_REKOt6[|'~ٻs}]b¹b : w_|rt-O=uT02M6P!XY巹[&mZEy(?ū](4^ߺ\me9 *J]\6!\8r?>{O*3WOz:0pDžtsv-vڏ ;.i/woy[SQ|~:V!ʀ#".(%=JA/f : \ξQ+ +M7b)'Ԡ0P¤5Ϥ8>d26}D jU&}y!و3y judT/2MЏ"n劸bM˰2%7lbQ:>=Bi{tVУ܅ _pfS$eٷ5 +h5Y;uh|Aus@AW`ӡeӨ,. W<;͢Q~2s] +jWDψGH3c<YtZbq1HI5C> endobj +1368 0 obj << +/D [1366 0 R /XYZ 85.039 781.388 null] +>> endobj +86 0 obj << +/D [1366 0 R /XYZ 85.039 761.463 null] +>> endobj +997 0 obj << +/D [1366 0 R /XYZ 85.039 672.655 null] +>> endobj +90 0 obj << +/D [1366 0 R /XYZ 85.039 672.655 null] +>> endobj +1369 0 obj << +/D [1366 0 R /XYZ 85.039 641.13 null] +>> endobj +94 0 obj << +/D [1366 0 R /XYZ 85.039 531.089 null] +>> endobj +1370 0 obj << +/D [1366 0 R /XYZ 85.039 504.475 null] +>> endobj +1371 0 obj << +/D [1366 0 R /XYZ 85.039 486.426 null] +>> endobj +1372 0 obj << +/D [1366 0 R /XYZ 85.039 459.327 null] +>> endobj +1373 0 obj << +/D [1366 0 R /XYZ 85.039 429.85 null] +>> endobj +1374 0 obj << +/D [1366 0 R /XYZ 85.039 415.695 null] +>> endobj +1375 0 obj << +/D [1366 0 R /XYZ 85.039 377.775 null] +>> endobj +1376 0 obj << +/D [1366 0 R /XYZ 85.039 348.555 null] +>> endobj +1377 0 obj << +/D [1366 0 R /XYZ 85.039 291.979 null] +>> endobj +1378 0 obj << +/D [1366 0 R /XYZ 85.039 224.233 null] +>> endobj +1365 0 obj << +/Font << /F20 929 0 R /F15 943 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1382 0 obj << +/Length 2305 +/Filter /FlateDecode +>> +stream +xڽYK6ϯPT/U g)`\h vS0uFת+aY>y-<@Zfru%L*!=^O /kTR&,?mq@o٭U=Y:Mh Khk^u-L30^$R 2t+T1 yWZn)kzt0tT* D ΝJ~b펿\X)jhSa.h#_VW$c"Φ[4^<1nǹ6}niH&is^ S +TGaWY&MڮqЮC-W4|-||xC[+:Ҹv2OKjJHhĂj]P1(y&@DlαEZHmF)K4 zMчpl|1غ:Bµ"٢v^Jr + _P=qC[r[c2X@FxƝ2x4t gwLʌ;SAB槹N ܧڙ@ɹw&lo|> N_NvpooMAi ,^SŮp^s<m8識' Ŵ=˄ *<s=\N3Xeoy8"r~ x;c&4q?IĽS6 +S*0/Ƙj6\l}ݬ!B +^'4~P(q/n_,.V-9 4KϝTz;; +k]w_ EnWe_zEW +GjMB0Ul~hf :$ڀg!H5=TDk{Q +ŌNx& +m:V AUP5* G|~mN"TUTݢ]f1\^|ITˮg5H nx8D2'&9XG g^1फ़ 3++Ч8Pj g }B)+X ]G_> endobj +1383 0 obj << +/D [1381 0 R /XYZ 85.039 781.388 null] +>> endobj +1384 0 obj << +/D [1381 0 R /XYZ 85.039 761.463 null] +>> endobj +1385 0 obj << +/D [1381 0 R /XYZ 85.039 680.637 null] +>> endobj +1386 0 obj << +/D [1381 0 R /XYZ 85.039 653.538 null] +>> endobj +98 0 obj << +/D [1381 0 R /XYZ 85.039 623.55 null] +>> endobj +1387 0 obj << +/D [1381 0 R /XYZ 85.039 594.146 null] +>> endobj +102 0 obj << +/D [1381 0 R /XYZ 85.039 552.451 null] +>> endobj +1388 0 obj << +/D [1381 0 R /XYZ 85.039 530.59 null] +>> endobj +106 0 obj << +/D [1381 0 R /XYZ 85.039 502.643 null] +>> endobj +1389 0 obj << +/D [1381 0 R /XYZ 85.039 480.782 null] +>> endobj +110 0 obj << +/D [1381 0 R /XYZ 85.039 452.23 null] +>> endobj +1390 0 obj << +/D [1381 0 R /XYZ 85.039 430.975 null] +>> endobj +114 0 obj << +/D [1381 0 R /XYZ 85.039 403.028 null] +>> endobj +1391 0 obj << +/D [1381 0 R /XYZ 85.039 381.168 null] +>> endobj +118 0 obj << +/D [1381 0 R /XYZ 85.039 339.672 null] +>> endobj +1392 0 obj << +/D [1381 0 R /XYZ 85.039 317.811 null] +>> endobj +122 0 obj << +/D [1381 0 R /XYZ 85.039 278.436 null] +>> endobj +1393 0 obj << +/D [1381 0 R /XYZ 85.039 254.454 null] +>> endobj +126 0 obj << +/D [1381 0 R /XYZ 85.039 215.08 null] +>> endobj +1394 0 obj << +/D [1381 0 R /XYZ 85.039 191.098 null] +>> endobj +130 0 obj << +/D [1381 0 R /XYZ 85.039 151.723 null] +>> endobj +1395 0 obj << +/D [1381 0 R /XYZ 85.039 127.741 null] +>> endobj +1380 0 obj << +/Font << /F65 1062 0 R /F15 943 0 R /F20 929 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1398 0 obj << +/Length 2149 +/Filter /FlateDecode +>> +stream +xڵYߓ۶~_ @}:g2{Ծ$O8+%}@s'd| `#1'*Y.00יKtޯg~o\Ƣz7E|9KTbeyZ>|\-~]8W} +?[0Y,T_ Ç,tl?[/cg];XB"5ERZ/L<ӱqJB 8iXjG. +pGy.x '{!;S1L + + N`EGcōgxY;ۃ_#tuydH`EPBihPK,5X{^vsh?{ugf3YJ3B?WRj,rz,E\A' gB[t,:Vo(@o&OŤNepaPqoZaDKã#kikZ(ʞT}uCN B l.8T٭=$d;nwgbT&25MV%B"/d7H :tv$yL4v 0Ѐ ǯ Ni8GPItFyuk&$鄡fFF^ /V)(xF\ +ȉWr[paD ȹ44iWXN()lƼAg" +rF2#\J!_M3wpLdq΢N9g@heO M%!.@J$A5H|8\gncʱFcĝko~ycѕhM +*DT=0UO.3NuzU&*&KO' I".A=9B/!챤cɸǒv . ]V2 ȄHKI_ᑜrNLjFNR e +@(>YG_{hU\AS;NBį<0R [߮}Pp6]wѶ"bش5[ +Ѫ.C +;B O"C fڇEvn?o>sSˇ}w;ܔ{d 6jkCGSît6we=*H$b 4u_;pk⅀Uxgݢ+hYֵe_sƃS+{%Ձcqib=I +it9YBqX%]̼w AfU)d]bҖA'̥dnCoiVp qW BP4ޝ) $:erD UVy%R!F0u}ZVwHQz j-鈢m9IEJ,)wu^c+٩΃Pȇ+ig*ag +xYgOc=;ȐSu) `^> endobj +1399 0 obj << +/D [1397 0 R /XYZ 85.039 781.388 null] +>> endobj +134 0 obj << +/D [1397 0 R /XYZ 85.039 761.463 null] +>> endobj +1400 0 obj << +/D [1397 0 R /XYZ 85.039 740.47 null] +>> endobj +138 0 obj << +/D [1397 0 R /XYZ 85.039 701.095 null] +>> endobj +1401 0 obj << +/D [1397 0 R /XYZ 85.039 677.113 null] +>> endobj +142 0 obj << +/D [1397 0 R /XYZ 85.039 637.738 null] +>> endobj +1402 0 obj << +/D [1397 0 R /XYZ 85.039 613.757 null] +>> endobj +146 0 obj << +/D [1397 0 R /XYZ 85.039 574.382 null] +>> endobj +1403 0 obj << +/D [1397 0 R /XYZ 85.039 550.4 null] +>> endobj +150 0 obj << +/D [1397 0 R /XYZ 85.039 511.025 null] +>> endobj +1404 0 obj << +/D [1397 0 R /XYZ 85.039 487.043 null] +>> endobj +154 0 obj << +/D [1397 0 R /XYZ 85.039 447.669 null] +>> endobj +1405 0 obj << +/D [1397 0 R /XYZ 85.039 423.687 null] +>> endobj +158 0 obj << +/D [1397 0 R /XYZ 85.039 384.312 null] +>> endobj +1406 0 obj << +/D [1397 0 R /XYZ 85.039 360.33 null] +>> endobj +162 0 obj << +/D [1397 0 R /XYZ 85.039 319.781 null] +>> endobj +1407 0 obj << +/D [1397 0 R /XYZ 85.039 288.256 null] +>> endobj +166 0 obj << +/D [1397 0 R /XYZ 85.039 145.739 null] +>> endobj +1408 0 obj << +/D [1397 0 R /XYZ 85.039 126.867 null] +>> endobj +1409 0 obj << +/D [1397 0 R /XYZ 85.039 108.208 null] +>> endobj +1410 0 obj << +/D [1397 0 R /XYZ 85.039 94.658 null] +>> endobj +1411 0 obj << +/D [1397 0 R /XYZ 85.039 81.109 null] +>> endobj +1412 0 obj << +/D [1397 0 R /XYZ 85.039 67.56 null] +>> endobj +1396 0 obj << +/Font << /F65 1062 0 R /F20 929 0 R /F15 943 0 R /F36 947 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1415 0 obj << +/Length 3696 +/Filter /FlateDecode +>> +stream +xڭ[[o~R +X.̛4h&yER".Iq~}J.)JqCٝ\1+U^ԸAo#1BE͟G+㹙u"7c{&'rכ$IOk=ǯhçO|V>2?y6͍Yz>g7 +y>|{+5~s41w0"ύaȍxD( L&XY+]c+܂̍h5AzA7~TO@L++Er#q)2[k1+هє7UNݩw:C .?uGh\8 7sm;·~T/U(P߅n@Yw(<ݖ6b )Ei2m繱A#v Uja6ylLf~x~8خP_vrS4A=S( +wPiӳ뱣ld0Ǎq-2I +Hrz</fkWDO if;uAXQ(fr* 01>rV?BAS45MlR_4 = 2Du>VW)7*u;BY z L8~P{h $Tir"~㎷]YCjHg}b<{${kJb}^p%GtLP6-S[:fqC M|ÿ#qޣ_qRN@vQ쉲HAYR:+bތgB\ńGBV;?r)gCBX ēl#F#|Gp1 "x W$=\n rIcp$- U,0LKt(xAtCOyGUB#){ y&ecG.ȼ䇾Uw;SH|۞,q}h\( +4H-"\%,wX27\۽Wʽcf@:ib'kΞs|(j +3 8,|KGOYOpdBB gl"7=2=(lEc'.Nr(c)6#"B]lNuK?S^ZsjV%=i~0Щǁ?3Ҿ4OcS3JQq&ls׸=(v5CsE {5ź";UEn7IAQ. ^&+bwm;șL}i,_5@ ]@ӟ{kϥ:M͝)3A!InusȄSʑ -n˽27ˮoѼ)bx2713AkHеo4v74Jctd<-|N U!`HX0< +R+z:^ZT{Y r8tve p\5A9[aEk,$!gUiSt +M9=Z9x/8(y7Ԧ_kBՒR&ab1]J%5Ȓ#lSm3lXMehM.3K?d..)QiM`9ZWJD|БXjV>OgDbJsޜ~YR޽pӁ XYSK; =zc}uG}kYKyi[D4r|HHG:ߎADm/Kqs. DXt "bܢ}a>N @k>(yH\?yQUņȉDQ` Jl"g-`DzR+(f:~$C5sl5vnJj~_Ėp[^v0a8Yb0 RgݙSBv a<+E_h0UЃDq{i( ^=Cz.oiX~,Zk[#JJ+*6cB JV(iEZ(6g( ȍX88SYل^&)D-y>.|׼{T#k^O=9 =B)IIKejSIIi~Ό^kn( F׼bl ԓ%c;)ϡ?a2 ._d\t烏]'V {hϛ1}(xfܼZG%`1[- ɦ#WbҕxMl\#?q$Po;a~ endstream +endobj +1414 0 obj << +/Type /Page +/Contents 1415 0 R +/Resources 1413 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1379 0 R +>> endobj +1416 0 obj << +/D [1414 0 R /XYZ 85.039 781.388 null] +>> endobj +1417 0 obj << +/D [1414 0 R /XYZ 85.039 761.463 null] +>> endobj +1418 0 obj << +/D [1414 0 R /XYZ 85.039 748.383 null] +>> endobj +1419 0 obj << +/D [1414 0 R /XYZ 85.039 734.834 null] +>> endobj +1420 0 obj << +/D [1414 0 R /XYZ 85.039 707.129 null] +>> endobj +1421 0 obj << +/D [1414 0 R /XYZ 85.039 647.561 null] +>> endobj +1422 0 obj << +/D [1414 0 R /XYZ 85.039 619.856 null] +>> endobj +1423 0 obj << +/D [1414 0 R /XYZ 85.039 566.266 null] +>> endobj +1424 0 obj << +/D [1414 0 R /XYZ 85.039 552.716 null] +>> endobj +1425 0 obj << +/D [1414 0 R /XYZ 85.039 512.069 null] +>> endobj +1426 0 obj << +/D [1414 0 R /XYZ 85.039 470.815 null] +>> endobj +170 0 obj << +/D [1414 0 R /XYZ 85.039 398.971 null] +>> endobj +1427 0 obj << +/D [1414 0 R /XYZ 85.039 380.099 null] +>> endobj +1428 0 obj << +/D [1414 0 R /XYZ 85.039 360.833 null] +>> endobj +1429 0 obj << +/D [1414 0 R /XYZ 85.039 333.735 null] +>> endobj +1430 0 obj << +/D [1414 0 R /XYZ 85.039 268.716 null] +>> endobj +1413 0 obj << +/Font << /F65 1062 0 R /F15 943 0 R /F20 929 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1433 0 obj << +/Length 1215 +/Filter /FlateDecode +>> +stream +xڥMo6:J(꣗I64h=AiG, ?4bDyf4CQ/$b唰<6EaՊPK‰vǔ{4"ETxݸ' gjѿy das@/KM= O~5xO->~-l""Ƚ7 Oϋ߆\o](BZ"n)%I1&%)4&^#£D!=>߼vtWS}6ptȝiֆ)ʪM/{6GGފFR:[u7_AvO/ᛚ8{-ܴ F٫6V!d2Mg Е~Oe$zVbeAS'E5?ϖ)˅e4Dt!_1')atc m$WXAxgnǹT= +|^UըJq՘E(7XKU( ncody@+P6yL8q90j[1 F8q{`jOv>gf)qS(QY +a9Y9) +Q`E2tN7pÌ XL*V r +1QuU£R0 +eg@: ȉۭnzwlz"U.)k57W|uQS5R岪U[WcK<ίdUjşPȁ_چeg; ۷]={I2Uv<'Dw7i^VqT0eg: Ӊ[={M,AU5:m‘=V!r[<00KaEZeV.;f0Nc3) 4y59؇/4T?ȣ׿j%q|% ƑA(5/IhUݚWR7gߩn Fsw,Ot7776\> endobj +1434 0 obj << +/D [1432 0 R /XYZ 85.039 781.388 null] +>> endobj +174 0 obj << +/D [1432 0 R /XYZ 85.039 761.463 null] +>> endobj +1435 0 obj << +/D [1432 0 R /XYZ 85.039 739.701 null] +>> endobj +1436 0 obj << +/D [1432 0 R /XYZ 85.039 709.614 null] +>> endobj +1437 0 obj << +/D [1432 0 R /XYZ 85.039 693.943 null] +>> endobj +1438 0 obj << +/D [1432 0 R /XYZ 85.039 682.515 null] +>> endobj +1439 0 obj << +/D [1432 0 R /XYZ 85.039 666.845 null] +>> endobj +1440 0 obj << +/D [1432 0 R /XYZ 85.039 652.69 null] +>> endobj +1441 0 obj << +/D [1432 0 R /XYZ 85.039 639.747 null] +>> endobj +1442 0 obj << +/D [1432 0 R /XYZ 85.039 626.197 null] +>> endobj +1443 0 obj << +/D [1432 0 R /XYZ 85.039 612.042 null] +>> endobj +1444 0 obj << +/D [1432 0 R /XYZ 85.039 599.099 null] +>> endobj +1445 0 obj << +/D [1432 0 R /XYZ 85.039 585.55 null] +>> endobj +1431 0 obj << +/Font << /F65 1062 0 R /F20 929 0 R /F15 943 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1448 0 obj << +/Length 2569 +/Filter /FlateDecode +>> +stream +xڕˎPCv`k#l;8GC"$W7I]wmBmDdyLo7'z D1o.*0BcE2q0Wntl7Q&-bxs3H$ j3i mq;tu%9& UYyYͨQǚ%h<؀мp߈o8]bg7 Y]0Eo3ZU5N!OԚ_+1¼ ȣB9ūZZRZQM1$FN9 xbYq|+v7)V%&H8e6! PmX0,!mM3P=fխv`wQL319Nmg[, @Uo.C "6̏}`=MČ2I={b8Tαz!NJnJ'Y$ad?n +f3U:6v}:gJ~y +(; hy,7{ɉ̩I^|ɣUd^+mf@7'{YxY̨~GƢ0ƺLWxD/|E1޸])U(5ɹY<N*`MWf08"3V{΅8oee F`cF{X*̌/FHtpew('+y{bkB@]l2ؾA^n{2 `\+|"S0&%iW@IԊK,"QIxY&1#P=Q{8Oœ9+NQh wڵ~jq0 ׬Ss*pD_'?73c70+K~-}62EM'4yyH9́♪U2@̕ Om=Tm45&}*a$֩ib-eE4XPS]7ef-jup*_ɮ3b?5/sjV< YZY ?m-]]fH+Q?ݻk6Nb_AL00ѲHV'S.칒T/@1B{7oі-*Ϟ%3G9 ~i&e&;W&nZgD3a̚ ?H^ͼ?Xd G '~`ta^|̀MyKD/91?59D=;*\?E=waPC|]cѮ+,'i\G Px~͍ΰk<=rUG7&1 `ew^KfQLg?z~me²N9^"~e3yg;^rԬͨ}<`:e,fh/gswEZZezפg}nqf诵g0뵶6̼?Pkpx/޴e +3/z!_L,`MT3fe%KH T +,DӸ>%׃,悹$N" ]+=ɟ[׺'\Z 1I +W. +1b"FȐBS=PpTRO PG5}8z]`1*!%s5}lӇE0.tmn߿EsE87WWKWg̾*Iٰ>Sy|^Xjn< ?:ipcnKY#f+9+ 'H:4nL]~{ϵ4ù Q$[ zrr 3=y}驾e65G~ns>;U_ӹ޲'@yBP9%NHya'K= .O^:?Y¸ik[ը.33 >%>d]B&LIRAFI|M/1rNendstream +endobj +1447 0 obj << +/Type /Page +/Contents 1448 0 R +/Resources 1446 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1379 0 R +>> endobj +1449 0 obj << +/D [1447 0 R /XYZ 85.039 781.388 null] +>> endobj +178 0 obj << +/D [1447 0 R /XYZ 85.039 761.463 null] +>> endobj +998 0 obj << +/D [1447 0 R /XYZ 85.039 671.062 null] +>> endobj +182 0 obj << +/D [1447 0 R /XYZ 85.039 671.062 null] +>> endobj +1450 0 obj << +/D [1447 0 R /XYZ 85.039 639.536 null] +>> endobj +1451 0 obj << +/D [1447 0 R /XYZ 85.039 609.512 null] +>> endobj +1452 0 obj << +/D [1447 0 R /XYZ 85.039 596.568 null] +>> endobj +1453 0 obj << +/D [1447 0 R /XYZ 85.039 568.864 null] +>> endobj +1454 0 obj << +/D [1447 0 R /XYZ 85.039 555.315 null] +>> endobj +1455 0 obj << +/D [1447 0 R /XYZ 85.039 495.746 null] +>> endobj +1456 0 obj << +/D [1447 0 R /XYZ 85.039 484.318 null] +>> endobj +1457 0 obj << +/D [1447 0 R /XYZ 85.039 470.769 null] +>> endobj +186 0 obj << +/D [1447 0 R /XYZ 85.039 409.747 null] +>> endobj +1458 0 obj << +/D [1447 0 R /XYZ 85.039 388.55 null] +>> endobj +1459 0 obj << +/D [1447 0 R /XYZ 85.039 347.238 null] +>> endobj +1460 0 obj << +/D [1447 0 R /XYZ 85.039 331.568 null] +>> endobj +1461 0 obj << +/D [1447 0 R /XYZ 85.039 304.469 null] +>> endobj +1462 0 obj << +/D [1447 0 R /XYZ 85.039 276.765 null] +>> endobj +190 0 obj << +/D [1447 0 R /XYZ 85.039 248.557 null] +>> endobj +1463 0 obj << +/D [1447 0 R /XYZ 85.039 227.36 null] +>> endobj +1446 0 obj << +/Font << /F20 929 0 R /F15 943 0 R /F14 961 0 R /F36 947 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1466 0 obj << +/Length 1463 +/Filter /FlateDecode +>> +stream +xڵXYsF~_7K.v$@@2~BFb;1ZCRLOOMr៴"_:H +EUp ciX#+b7V׃_xVs˟[,v eF)>8x^9u.V^w/Ĩk W8n` + 4 f/>,̳֜`ԾPJZD6YʷˤHyu:K۴$r,U<+ UUYKڬ*|)TfZ鹡 H,>⨨;h17;UWrCzn2 ҫz# .G@Q]:mP^Z"+8盩ekpbc&OIdB;%cK5ot9ktkZx +QMI /+B%k&Lh%8 պfx̳*֦J%907J +,A3U|\}7xs"۔U5_D\ j̜9I֝/$e' WUQʽAc) cC~w$g/>2rjR!!arX +rs=]_S#ЀP"9Tk9߅L`S/Fǔ2O)a2oڝyG@:$Đ1q()l>u;ў0LߐPh՚/B5Eȝě@vMrYiU{,Vp$,|Bɮ4ʚ|zU:i zu884x CpUdḟMn~y%"=3 qeR_@ +,Ki4|p51hv@ &?&qF^gý9u'''L=5~slG žN!HA&6Zs>[*Q7>2[07={Zendstream +endobj +1465 0 obj << +/Type /Page +/Contents 1466 0 R +/Resources 1464 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1470 0 R +>> endobj +1467 0 obj << +/D [1465 0 R /XYZ 85.039 781.388 null] +>> endobj +194 0 obj << +/D [1465 0 R /XYZ 85.039 635.626 null] +>> endobj +1468 0 obj << +/D [1465 0 R /XYZ 85.039 615.492 null] +>> endobj +198 0 obj << +/D [1465 0 R /XYZ 85.039 135.961 null] +>> endobj +1469 0 obj << +/D [1465 0 R /XYZ 85.039 104.435 null] +>> endobj +1464 0 obj << +/Font << /F65 1062 0 R /F36 947 0 R /F15 943 0 R /F14 961 0 R /F20 929 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1473 0 obj << +/Length 1351 +/Filter /FlateDecode +>> +stream +xڥWKs6Wf*S!gdlm\`8Ȅ8X->t21X.̓Ŝ8vsa7 #ȜgoKYήwWRJ7dE>Ϲ{y}:lmZNϮo<''?<&y8log`4ryW|N31 byxQ.ʅdQ9QMk+jDnrԌNOHjy ^/8oQۼ**?T7rjY^c֮.Ps>i.H:S-sT<_nS@-N|w"ZHq. YetxEBȠ>rIL  M)`_=k#-@K2o ?Qw[7F1"-7]UҌm[g22r;DpR>+q."7r)z@]Z;80S `(B!CpʜqҚEq`m w ai:, a95S^Tev벬G#Z{AVvЏ &Z)Y@a(820&B!4-":e":i":{ +O-ItWBWmA9UE0Vx7JQG*zêm4Ӳdl{1}wID"t\@G;)L@ EIMמּ @_^hZF֔9KIkZk@-;Tj rHbHS t W.7fWό^NuB*ovH8Odؾpb+DW_Om_Xav "FEwKwvxendstream +endobj +1472 0 obj << +/Type /Page +/Contents 1473 0 R +/Resources 1471 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1470 0 R +>> endobj +1474 0 obj << +/D [1472 0 R /XYZ 85.039 781.388 null] +>> endobj +1475 0 obj << +/D [1472 0 R /XYZ 85.039 701.758 null] +>> endobj +1476 0 obj << +/D [1472 0 R /XYZ 85.039 674.053 null] +>> endobj +1477 0 obj << +/D [1472 0 R /XYZ 85.039 649.682 null] +>> endobj +1478 0 obj << +/D [1472 0 R /XYZ 85.039 620.462 null] +>> endobj +202 0 obj << +/D [1472 0 R /XYZ 85.039 563.944 null] +>> endobj +1479 0 obj << +/D [1472 0 R /XYZ 85.039 543.353 null] +>> endobj +1471 0 obj << +/Font << /F65 1062 0 R /F36 947 0 R /F15 943 0 R /F14 961 0 R /F20 929 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1482 0 obj << +/Length 3024 +/Filter /FlateDecode +>> +stream +xڅZm۸_a,Pu(m9Cw|hAY$y7;o([C433/OmFgʏls8 6O0wJ8$8ݦzGjX!χw? +MimB?R&~śߞ&I*o6JW+ǜ6H/#Q5P>H1;-laG:|ST+?HCWL0 +wXϨأZ-x0j6kRo4L*٨LakIS5o81Eqo;HȔ 3p9=<W#丁,o!!::U2!_NRQ}*+hNd4R0j0O ץ2?.Tصޘ*Ql,|R|?3dx<07̋qq%DS9Yd_Y?wK_KOٹlB iGf6`B^iX=[3lHPW~d_!W%W9!ߔcYD%~YةᶣS[35^4树x\A PKSٍxaΒV $.t0˿>SAI&)|}E o Oɓ/; ح:Lo]~a}W[wFQx{ E>'mVW`?\:`( u$EB!e4.X.$bO_p@bzbaXLu*FMquUB͓ _RA &Ɔ`Jv9d_<ހ Vx2MYH52?w@Tf2uRo"񞢤+'[uxh,jхXloS`,F$5[&L86g+(7`)o0 0{&aD_H2 +rU4وŐ|ɽ@j_|g V,άåw"20\(BA2K >ؤ"#5[%g+3ףxtHiuǴ˵eHWviwF;g)qrR"N ٘$t}.ȲK .q/>PX";@x˩:@'I" `ARWc9^15T)1myǑ9 ŌdzCq8Z;*j|YHq? uԵ ct] O8\8FTu0$LC6d;!&'{|(`g@8q\˰NC dJo/8&i M`ʰ0VMŽbdFɸ:CIƉN I.us(1ǴX\8 ' S%?;o+NY<K ZPM"UI"z(01"xW@E65qXB[9X"2}HŎü2) `%0?{w4WyŻُ:6mS7wRdSd\հ NlS,%[J3g QIJ2f>-,wuΑin7h&SsN:8gJ~~DyD@߰mO`s[qR\hpH:3lt/2DCq27"UhP +̩ಙqK&'n%>jlNx(%uޭ=\-Ζnys;vLu1=w>DHV(a5(Xې%,& ~IIolԛ3endstream +endobj +1481 0 obj << +/Type /Page +/Contents 1482 0 R +/Resources 1480 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1470 0 R +>> endobj +1483 0 obj << +/D [1481 0 R /XYZ 85.039 781.388 null] +>> endobj +206 0 obj << +/D [1481 0 R /XYZ 85.039 761.463 null] +>> endobj +999 0 obj << +/D [1481 0 R /XYZ 85.039 671.062 null] +>> endobj +210 0 obj << +/D [1481 0 R /XYZ 85.039 671.062 null] +>> endobj +1484 0 obj << +/D [1481 0 R /XYZ 85.039 642.326 null] +>> endobj +214 0 obj << +/D [1481 0 R /XYZ 85.039 556.019 null] +>> endobj +1485 0 obj << +/D [1481 0 R /XYZ 85.039 529.405 null] +>> endobj +218 0 obj << +/D [1481 0 R /XYZ 85.039 157.959 null] +>> endobj +1486 0 obj << +/D [1481 0 R /XYZ 85.039 129.161 null] +>> endobj +1480 0 obj << +/Font << /F20 929 0 R /F15 943 0 R /F11 968 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1489 0 obj << +/Length 3333 +/Filter /FlateDecode +>> +stream +xڥZrF}W0e1čsqvr$7"@0(Z>=Hjjes.==3=/9?eOgav4Lbv\Jq$w8/4eˑO<~|xirL'Iz'n1wsoy'A}䏇.?3ho. :Oi{jϦ>Mo.D8 +___˲\tU4Nc|?~piji˚b6oxdɪrC+ZE1[&kW]au${dCWW,";nd+ +Ċhk +íܮR]ZErFM9h,|XH"H4YHzS:fIMD0ghA05 kz6D8y^("f) +6fdg]ot?le +w^N7l!O-@ yOS+dc 7J+yf[*zwO5O4T͓dDɛ4Mh|OL:gI8ApFoaǛi΃/?y PD/y"4YV{ )9.;}J;>Bf, EjtTYݧ/h4M^@TW fą5n%'A *T~xM"|P[ x쏵>KÖȠq0vS{|fj@8Hcbc,0Q5Z]#ǬxB,2@K]9̭fG?+{_R_4#lV'%HgJsR]o|^h\G( +( F,Y,ɗk&H$#bY7@FZD5OQ "ȅI4:`m0}2 ~-GFX~*VɉEm)a+! Q1U=bCd 2g4nX3>\!qsH_;*JQjP_$1&ChdM7pQ {ԭjǥȫF)I C{-OF8[GDm!cxD|F +c-o쬫(K5*bǁ(.~ >q׏7wU#zk($S JQv*Мk"Fh^#'N" ÷1Ҝh4 Td2OyP0%dFNtOvLS:`\bneJ<2D+~ [؛QZΤra ;>o<֐'^|gU&<4JS8RHFâhϢo}?Wƀ5 ΄F4mJІD}bg!FaW C_hLXNbP m$sldF_ԊOZx|i<'D]:}X*U8`''BIc 4SV]瘵.Z MN߻ 6M^_R=eݙ.#WGK$4(͎^NуBpIr~qnYKZ5e +5\Z#{gdWNM<:j)HA4vhNӹ (UnDnUyf B]{]jwpyP兣{@˫nJ +N)8>VM䵖 +lڒ oVF%MI +߮Q̺8>Ai^޵ +ҵ Q!_}~M\{38jmЯUYZW]ZےYi-[ù"KjJ~\*QGpNXQu`8R#cֱI*b ۓ-J pEiJa~v[v=iXޖ +}ƱH>_{9^̙KۼBy/ 8E˨\%I/ܾj!-sٜvWqY1l% y'Gtӳf2D}k,wc=܋l.{SE`S#nN;U Ϸ +ju+uydd\iʇ {"GSZ@=xi $5C!|~P~~¹VsnqV'myr`9$bZkN=\Te(쫬k{F(t>!J,u/d*27:!ז$[7I-=9TD[leju]M ڭ!SRj jkUMNk4NUk/4Mt'<,, }}\7p endstream +endobj +1488 0 obj << +/Type /Page +/Contents 1489 0 R +/Resources 1487 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1470 0 R +>> endobj +1490 0 obj << +/D [1488 0 R /XYZ 85.039 781.388 null] +>> endobj +222 0 obj << +/D [1488 0 R /XYZ 85.039 677.747 null] +>> endobj +1491 0 obj << +/D [1488 0 R /XYZ 85.039 651.132 null] +>> endobj +226 0 obj << +/D [1488 0 R /XYZ 85.039 431.455 null] +>> endobj +1492 0 obj << +/D [1488 0 R /XYZ 85.039 399.93 null] +>> endobj +1487 0 obj << +/Font << /F65 1062 0 R /F15 943 0 R /F20 929 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1495 0 obj << +/Length 3666 +/Filter /FlateDecode +>> +stream +xڭZYoH~ +//8RH̻z?".?}+~Ƿ`Ky(>}p1kɾ ޟ#C?+?γ#?p'*~}ϩ:v~Cs?Hұf+w,M? ]R"Il:> Uԟ:J4T/333+0L0 ^Qz>2GܻA <3ʦ,_wU4eA l4fMVP Wl9nZHVnmsac%,q^HBٛ%IpZ~}EI:ӳ^7.^ gC)G$o]}"#|^@!qQV^/`:SNsAlމUA+6^/*yr2z,,5\^?2ӀC7>&u_ĩCk&OoKuA87{-͎87Doht p_v/a2Q _o  +Bf0O3O>\)`cv&'1{ѕuW8gsc7̡!²#Cp1.>n ]eQGBXlC#mNXx8Lhi5-ꄸ +"a8?&XУ-fGPJlU{3FAy58@C~ʧbcWĸUí8E CiP(-7[GiydxRSy)q׎f+;&qt +$re958TNIj=#p(xKӊa`DYlVW,6) n[pח2]Vu/ߙ޹+इ')z 5(PG=w%٬dhVBO0Tfxy[МNP?ђ\\-va\!"dv}8l%:_fn9l%Jx vVt}X$5!.Iѐ@A@I_RV_H^mwQX'm +Ds``MC@֬kJsÈ +l4# cE:cf87(dKٴtt!`?&M$c ;ĵ˴$$$9R0ԏ$lxy #&$EqCAIX39șdZv)t>Qt{"};'8mn ߐEGhd@"hośER䲩WR5 paM-"8&FTHjEȉ%w$t8 +aG{du]98d+V*cΙj`HqW2ڐ`JĘ$! cs-3a\8:-q+HB07x?-ѠOy Ӟ@AZ ǩ'y](j)"+fI+ Y"#sʖM+]d" $tsWũ)>gcDN(eJ3sz\kn[ +Ē?`HcUzmX5 Z: *ѷ;lߓ~QR:H'HXV+U{cY^&,><tM!QAckS`IHt0gWR[XXa™ ݏAǃPILOBF-B ɻWC;$zɕc.;bs +ד*ʄx 1nMĊ#=fCl}82Qg-_9ܐS4Rm'M&̭+ 'PH݋?B! 9цHv .DPqtlCǗdȚFvdi4fi:5(q'vV`GR+A'L&TVxM˰. c?dc-YIK].۬D[ v/Ma/xfYA&\ptG.r$St*|ƒ&Ǘ4mykOr0|8_84|p 4ǻ@cpVT?Մc_?A˩.&"ζT`aips#0Ú Vu5#RI>kEaԊHXQߡ2#hHEbgk`;:&Zo0)l@bPu.¼ʥ<[!<ޱV  5n2{Ɇ/ +/(U@&TCԂ(Ffl8ͫ`QAlIyV!Xzpͳ1{͓A+HGo~NbQ"_1UlQCӔ=M0)m"OCIcm)]I|(c +Z*}88lqG1\?>5S8?I:U wﳛęd!n&endstream +endobj +1494 0 obj << +/Type /Page +/Contents 1495 0 R +/Resources 1493 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1470 0 R +>> endobj +1496 0 obj << +/D [1494 0 R /XYZ 85.039 781.388 null] +>> endobj +230 0 obj << +/D [1494 0 R /XYZ 85.039 761.463 null] +>> endobj +1497 0 obj << +/D [1494 0 R /XYZ 85.039 736.911 null] +>> endobj +234 0 obj << +/D [1494 0 R /XYZ 85.039 586.167 null] +>> endobj +1498 0 obj << +/D [1494 0 R /XYZ 85.039 556.763 null] +>> endobj +238 0 obj << +/D [1494 0 R /XYZ 85.039 446.667 null] +>> endobj +1499 0 obj << +/D [1494 0 R /XYZ 85.039 420.052 null] +>> endobj +242 0 obj << +/D [1494 0 R /XYZ 85.039 158.125 null] +>> endobj +1500 0 obj << +/D [1494 0 R /XYZ 85.039 128.721 null] +>> endobj +1493 0 obj << +/Font << /F65 1062 0 R /F20 929 0 R /F15 943 0 R /F11 968 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1503 0 obj << +/Length 1932 +/Filter /FlateDecode +>> +stream +xڥnFt)D "uu;H$IYIJR1ܯvErs( 33^Si^&i:7_(B\'/.+o5]o|b7:" C'q$I˹/ ߹p˸ϟ7W_q9_A|rmu@ +{7Aw W֞Fn&O):w8L8  `Ğ{Y(X:e)G%/١]tfZ W =1Ͷ- +m9W' /< F1)ú5 q]n V 0GP(5\}b7UQs~ * @^-N'_,BNpF~*4Ys]z9x~?_Gݲ1#SDZP C3;gBZ59.r7qrFFtV]zR +T2ThW0d[^\[^Ƭz!Ȇ-R圤d)M1 W-d1 *( +B%YDCwKba Hz/cFάǻ": w+fbb4L;~OAV݋=NUM˂.8sË`[z@@*kЖ}B|(+`<w,)JT>wK< urKJ/$U#?Px2#-p>R6?U3kJD\-ۦXRQ,bf12C%Bt=b3cُ6'We,8BP!-:pcQݘFU[Cգ[{=_jQ\lً5ھH6 0$>1όa[njy0ލuY4)tNHB_9.UHJQInX1͹Zf4hQ 7R)f!=((d`odGҙ|D0#3~,HI )A]P8aڴ Gh/Lȇ;&jPRBDkiȠc<CRa;ߊjo'F/E[vOAY㑊]LY}FYKni+JxtǯZvaE6 01O@ 殬̔wi ˤAF9/'Z$ R8N!Tǁ7Z½juW6JP8eNo{oLGE_Rxؖ3m>aQ=[|x.hU3 ^U/hXL6E/̶[H /~ ߵķ"tWk VDXX_撐p3?xH-nL"zꚟF endstream +endobj +1502 0 obj << +/Type /Page +/Contents 1503 0 R +/Resources 1501 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1470 0 R +>> endobj +1504 0 obj << +/D [1502 0 R /XYZ 85.039 781.388 null] +>> endobj +1501 0 obj << +/Font << /F65 1062 0 R /F15 943 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1507 0 obj << +/Length 3228 +/Filter /FlateDecode +>> +stream +xڽZێ}߯CV4@q֘A#q$z)Q )ߧNUuu)X`]}:uw,LuWqhn{mhwH3fiJ+K;̓0JseWIcW.<7wwq&N* S=eE㢊^8oKXTku޴XA)VuGn\oQf* +m~9oQXE Yfa~XDq鮛\iLʠљ~AL=~`K./~' r?]7Pfe'TD{uQ#[증vbd1=u]-(x8؄"O鹈 la`\~i>0U0mԼ'9bkN@MHqpԙX_ZGټtA֯*iky$6xN+F29 =NW!-Aw&-Tc}uia%v'#L*ikVowնİt?53MWs1ܧ߿`"Xt +P?*7~Sex%y|i€^e-qW5ARL*//EZcU[%ۍlQ[dyP1yq~ɾ(VWLKzp6OUk~FcwB4-k0)(]fK%›z,*d-:2܀M`e*׶CRj R`7O >Rb gJ9Af|(bF3H7 x\H}q@;S`̢G^V9GHP˂#?UU#z>lV1xK뇩~'7婧G߽<,EY;^p) #:9#9'$x2doȐ,ة`Ag +7/Y$%0h vmXGgOnh7_g\ +`͚| = sMKvWq +ulwθh:V_\^PU΄?>f$2!!tN(geYRV-˭$aRħnwvRMOG1 dHJZ+JLyeQa8xΤd=ش5tIFG2Q-y\|I`,ݯե­$"0lpx6 +Ab4Fvr,Zm .ɂwfYyj༛'xfPf4u`[k? +lJ^Jci>1gai'w#b/ 0q~@yQziY_(WqW%E+tS!sF%ҠROetqW='e&. Q*ĺ1[4Jî;ٓY0w/Dn6xc{IԠH~@O/ 67QD#. k s3IijQ:j+XUh0x G7A΄Q[`0 f&4iB ònh"ፒ,Cؤ{%O4?( +GVbXD쳻ꋋri_(XQ1^ILk`ebREgF7ʓjDE$ze"y3M$XO,7.S)ߪ6 l6{)4<'Gk!k@Xa`B|${m.Z 9iYt*J2}t~̯;ֵǿ`r]^;A:{='z:1ʨ�e؅y9~{>i;Ji=bI$cY(yYx/+NӰ2 "_<3nq E UDǵY&5Qqj,\&v/Z8L¶ȜCéE .Zu([ 鬊n9٢X ap7/&S uJ1yT4O5.}|x}Z(Ҹ`U ?!}/!J\5+Hd:Wid5WN"e+IKJ4wh&껖7g}Fs҇ODBT5 %훧aZ-0=N~YK=Z0Nz8> +k 9 +B"u-ֲ@€D&7\{:^#-V~}x lԉ2 ?AU>Y + O9߃&j:*$3Viab|s JW.Jn4m;p4MUw5窰fv 4;yE&tS^ {34__ApE]Z.P4v2BHW)*d`2^n %IͿ;q3/ꄠ-4YA&>?/3eͳ3endstream +endobj +1506 0 obj << +/Type /Page +/Contents 1507 0 R +/Resources 1505 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1512 0 R +>> endobj +1508 0 obj << +/D [1506 0 R /XYZ 85.039 781.388 null] +>> endobj +246 0 obj << +/D [1506 0 R /XYZ 85.039 761.463 null] +>> endobj +1000 0 obj << +/D [1506 0 R /XYZ 85.039 667.044 null] +>> endobj +1505 0 obj << +/Font << /F20 929 0 R /F15 943 0 R /F57 957 0 R /F36 947 0 R /F69 1511 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1515 0 obj << +/Length 1103 +/Filter /FlateDecode +>> +stream +xڥVn8}WyJEɢv[E,XK%$\HNE8pf̈ Oz: By[mGw#i5|뷓ēa$A(//|J)Z8b~K c)oima*Ooohc;z82 }( T@x;Ȃ$Vv]X{|Ak")RF&a111D؏e"vuˉ8TÆeaWmz= /2>1BgI;}i8JQ۱ Jalz6%^0K$,#Йh*g0?ha'[Kc=;XtQ1ԪiQ)LP)*Rg يZUo%-[38"PK_$ AT)=+LcF"qnk@'W|wؘݎ44 4lM 5T5ibFQ}Yf,M i8y ݎҽQaYxDҞ(Lt Qj̀D;tq|Pz8 Xf +#b,8lRra/tѥ-Ek*(IŢ% z#51y2׬,E$>+#yTXΨ@XߪI3R2 dAR#|nu͚gm++kˋ9R ,=#;MWL9P LnR JՇ)i=i؜G:8 ORhm\fs\[ U:hv~%"Dݕ0 \a|]LBIyߗ<Χ|s66l+ʦ* :`.>/Ee `:NƷYPq\%—S~~ݚ %'2gr5ծ47pc=6;§V?a7MMɄz`(GQ[S5D*T?JSK1kJ>^%Q| `k;K1_z' +.?`o6ԫxPCjendstream +endobj +1514 0 obj << +/Type /Page +/Contents 1515 0 R +/Resources 1513 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1512 0 R +>> endobj +1516 0 obj << +/D [1514 0 R /XYZ 85.039 781.388 null] +>> endobj +1513 0 obj << +/Font << /F65 1062 0 R /F15 943 0 R /F36 947 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1519 0 obj << +/Length 3490 +/Filter /FlateDecode +>> +stream +xڕrF]_K*08rm9UV$ (`P^۷$Hy+sFOwO#gf,-[ų0r,Egy+<Ol."p- 'aEĖquɵgmgZqgAYfy|}{auPA8{pMu̓ϟ`WVÙrF6A=[R{ t,;pMH8n$[}}K$<ۧ= +hs 40Dۊ&70$VۢbHqy=/D%D+E}U ;m%v;iDPd0y901?"D~zǣBfӚgn%䠂p4F @$4q6?o23`O#gjM\}N!$ō/ t<eoy~23!}AWU?Ovډ*gsl&lUE'pjG{jr,#__0-Ўmwؼ'}SE*ByYwۏRvIh8\)[]Б +4o!$p0, +"_4F#`[tWjB.a)G#.-fQ ?fC&QѦ X+ 5RJλ+) +zW;( y=1*id\7riI}9}"ʌ2>6\(0hQ8*|ҙːhxieD-3$hݸ:P +DqI.;^h)䁽`n?ծM˔:-JG%܍t!G#V1TM˚ Ɂ];e]el H'4ٴ Eʹ.i!KbpUyɞ11YEJUtk9, Ԟk +[u9cpTlrr%!mʎ` +O\\{ +00pNI=tyskГɼ7|ı21!  ]?%6ѷG>Ð`d::75k傑\L+UPT93:Plzal8 86@dyֻͧkUQgqhG/o_ /?z|z?a nT~h.ހ[삺)KJfyn|Fޟ$mNJbpA]=@~a1=[`X +t%T2+iD;F0pMt.mr@$?B^:؎U#~_L\SO!Q{2O +7M]ڻ@߀p Kn[~#(,fD৤M@S २^s^1~ YL,<Ɋgٵ%vr11ՄM]/ɓaD/f䈶RRCX: "Úy2xV4)U= +}"L|(l<} HmcCnĒS~N vlֶ? ++Е qwRJ+Dp9Ba`7t%v@g"6jhд~MIdnxLUB:T_wX_qwF\EB7O>\暏-M]!};`n|~V<#Rx,ţDQtq&YwIͪk!1`rM/^d\%TGdh3җAf8x@9/HY{Yya3 +;' /#aAa-ICaǹ +\*6H}#p6_S~{&b6`2ԏ NnEjS+8{8rODJ@> endobj +1522 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [418.678 611.807 512.306 623.8] +/Subtype/Link/A<> +>> endobj +1523 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 598.561 285.125 610.25] +/Subtype/Link/A<> +>> endobj +1524 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [122.225 367.922 512.306 379.914] +/Subtype/Link/A<> +>> endobj +1525 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 356.797 147.672 365.456] +/Subtype/Link/A<> +>> endobj +1526 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [122.225 340.823 353.306 352.816] +/Subtype/Link/A<> +>> endobj +1527 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [306.355 327.577 382.391 339.267] +/Subtype/Link/A<> +>> endobj +1528 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [122.225 300.176 462.621 312.168] +/Subtype/Link/A<> +>> endobj +1529 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [122.225 286.626 347.579 298.619] +/Subtype/Link/A<> +>> endobj +1520 0 obj << +/D [1518 0 R /XYZ 85.039 781.388 null] +>> endobj +250 0 obj << +/D [1518 0 R /XYZ 85.039 761.463 null] +>> endobj +1001 0 obj << +/D [1518 0 R /XYZ 85.039 671.062 null] +>> endobj +254 0 obj << +/D [1518 0 R /XYZ 85.039 671.062 null] +>> endobj +1521 0 obj << +/D [1518 0 R /XYZ 85.039 642.326 null] +>> endobj +1530 0 obj << +/D [1518 0 R /XYZ 85.039 138.017 null] +>> endobj +1531 0 obj << +/D [1518 0 R /XYZ 85.039 121.74 null] +>> endobj +1532 0 obj << +/D [1518 0 R /XYZ 85.039 108.797 null] +>> endobj +1533 0 obj << +/D [1518 0 R /XYZ 85.039 94.642 null] +>> endobj +1517 0 obj << +/Font << /F20 929 0 R /F15 943 0 R /F36 947 0 R /F14 961 0 R /F35 940 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1536 0 obj << +/Length 3213 +/Filter /FlateDecode +>> +stream +xڵrH_ˠ>y̌l'{j2yhKHb#PϹ5 pURWtK;R3, ]/Hgq If7ʯJ |_p<7;'tuW7]~qI"߾o~}=P>{i2{*X_R7ԁ..kzƻX~1 M=9zAhfP9hWIlAIxΕdYVOxkMep͗:_uP۬U9 {oej>nr75$xDPB8 W#f+qN3 /uc,p2. (bgk +|<@!tdp"w9YHSeȀ<EV&:,kMrk%<ax އ]ƛ\@lsپ ݓsJ|]H̭AN%*7E4\#p fH]R5_ܕNJcD"@J`8eQ乞N! |'"9XVeB85pY{ke ^ew&i2/ xU2o.Qg +_G `j>ZmF|ð(']ɎFvޖ{xvsG|PFw' @(_:䇮iyܓZ͞%.e#abNqa~1|Sc`KB}cySe+8}?F !lY8R4beVFqXȿlvnPR'dYq ΋ /OB +"NSݐ8UΪ@ 2#/|Pې|.rD~,R@r eQ<#A.2ק=giK螅HF EՖgZLU|8][ėtst.XaGq]>öҠ191m3IL촙*PT@h6Z'7ّSr(4#åDyƺ i'F oMMǶQIvTwZĨ)zu +Ԗ=YBI.ًs9GVC&WqEΞϳ}ԐѶm` s眖^d.Zu0sl'9ݱu cEYPQ6csBg]vtU8D󯁊NSl@Yi# +C%s6t>i"_ptPI~5t /(Mgw2UZ`-EO6y6( fmd 3PD$By'x8nh<.${B]盅XV'Թ˦/B(7܅ڕ> endobj +1537 0 obj << +/D [1535 0 R /XYZ 85.039 781.388 null] +>> endobj +1538 0 obj << +/D [1535 0 R /XYZ 85.039 761.463 null] +>> endobj +258 0 obj << +/D [1535 0 R /XYZ 85.039 691.864 null] +>> endobj +1539 0 obj << +/D [1535 0 R /XYZ 85.039 673.598 null] +>> endobj +262 0 obj << +/D [1535 0 R /XYZ 85.039 602.015 null] +>> endobj +1540 0 obj << +/D [1535 0 R /XYZ 85.039 583.143 null] +>> endobj +266 0 obj << +/D [1535 0 R /XYZ 85.039 483.287 null] +>> endobj +1541 0 obj << +/D [1535 0 R /XYZ 85.039 456.673 null] +>> endobj +270 0 obj << +/D [1535 0 R /XYZ 85.039 456.673 null] +>> endobj +1542 0 obj << +/D [1535 0 R /XYZ 85.039 435.68 null] +>> endobj +1543 0 obj << +/D [1535 0 R /XYZ 85.039 435.68 null] +>> endobj +1544 0 obj << +/D [1535 0 R /XYZ 85.039 392.911 null] +>> endobj +1545 0 obj << +/D [1535 0 R /XYZ 85.039 365.813 null] +>> endobj +1546 0 obj << +/D [1535 0 R /XYZ 85.039 340.835 null] +>> endobj +1547 0 obj << +/D [1535 0 R /XYZ 85.039 203.222 null] +>> endobj +274 0 obj << +/D [1535 0 R /XYZ 85.039 108.783 null] +>> endobj +1548 0 obj << +/D [1535 0 R /XYZ 85.039 87.79 null] +>> endobj +278 0 obj << +/D [1535 0 R /XYZ 85.039 87.79 null] +>> endobj +1549 0 obj << +/D [1535 0 R /XYZ 85.039 65.074 null] +>> endobj +1534 0 obj << +/Font << /F65 1062 0 R /F15 943 0 R /F20 929 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1552 0 obj << +/Length 2311 +/Filter /FlateDecode +>> +stream +xڽZMsWi+f<3Yo3D[ҬDet 芫R>ݯnlJM"T0"'tO6aEyI)$tΣTb.~~wx;_!f9/̮w/w_&fB?&_t2Df'\S%MLɩ{kD)ɸ.%A eEӀ8Okquw{3gs%DgMiPSq~:׍SP#5'iNdW(}G7R#.hA xЫ\Nf$u]v[C"~w,6"K:)Cp< .z-( z' 쉤n'ޗMt>:D,-4䢼pJQ\\j;+a`}LQ?R3)3r[-gjW@GwpwC∊y '`3G֧gwX&h)L@ ?x<OdppmRw9N]w,juaPWG  Ð#h9}fjFrSf؈-(a}e};ZNT =]k3Ff`Kᚏۂz+!PE{$2M2T4 Q]d3YdLM@qk*?2`nF(TI~f&p¢!P\ +ަWL\zṳ>n$S]} 3-( /h,KIP WUvS>V-(PY 2e9-L|i?DԬgH`ř [l׵oXJ*?ۺ+#Edѯ$12RvJդ-&G" G9f[O]LC\'@|UbIW0j<ڢ~ucۙGSՎ%lp`3yHB^/$$ur +BÒ鍟8z{i?xACP[ψΤ\].2q#endstream +endobj +1551 0 obj << +/Type /Page +/Contents 1552 0 R +/Resources 1550 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1512 0 R +>> endobj +1553 0 obj << +/D [1551 0 R /XYZ 85.039 781.388 null] +>> endobj +282 0 obj << +/D [1551 0 R /XYZ 85.039 694.591 null] +>> endobj +1554 0 obj << +/D [1551 0 R /XYZ 85.039 673.997 null] +>> endobj +286 0 obj << +/D [1551 0 R /XYZ 85.039 533.8 null] +>> endobj +1555 0 obj << +/D [1551 0 R /XYZ 85.039 512.807 null] +>> endobj +290 0 obj << +/D [1551 0 R /XYZ 85.039 512.807 null] +>> endobj +1556 0 obj << +/D [1551 0 R /XYZ 85.039 492.212 null] +>> endobj +294 0 obj << +/D [1551 0 R /XYZ 85.039 463.398 null] +>> endobj +1557 0 obj << +/D [1551 0 R /XYZ 85.039 442.803 null] +>> endobj +298 0 obj << +/D [1551 0 R /XYZ 85.039 413.989 null] +>> endobj +1558 0 obj << +/D [1551 0 R /XYZ 85.039 393.394 null] +>> endobj +302 0 obj << +/D [1551 0 R /XYZ 85.039 348.304 null] +>> endobj +1559 0 obj << +/D [1551 0 R /XYZ 85.039 330.436 null] +>> endobj +306 0 obj << +/D [1551 0 R /XYZ 85.039 298.895 null] +>> endobj +1560 0 obj << +/D [1551 0 R /XYZ 85.039 278.3 null] +>> endobj +310 0 obj << +/D [1551 0 R /XYZ 85.039 178.49 null] +>> endobj +1561 0 obj << +/D [1551 0 R /XYZ 85.039 155.168 null] +>> endobj +314 0 obj << +/D [1551 0 R /XYZ 85.039 126.353 null] +>> endobj +1562 0 obj << +/D [1551 0 R /XYZ 85.039 105.759 null] +>> endobj +1550 0 obj << +/Font << /F65 1062 0 R /F20 929 0 R /F15 943 0 R /F35 940 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1565 0 obj << +/Length 2629 +/Filter /FlateDecode +>> +stream +xZ[s۸~[N%$''v:%Yb,TV98 @d!>ù|?>Kd6KRdO[Yz2/~QXeu?J7pvR3X&I:?_^[|{澂: 1)m`|o/"&t @_]ꊞ3zoNb3 AskY "\1ņ sRh럮K>VdKs[CZ|ӃSyxZm#=3HKe~aW',Iy RKeG@@ +!5q3.r_3NX>vkZD l\.LP+V_;&:BVۤCiÃ5tld8^* qP̳#5~1, w$}P3)ad9i̔JUuw[H}ҸI //5a"I<25+dv#cD4Ӛϼn{Ld:-C׬(~,9:ء֬*8a[Ow΄/&A@۶+|aeĆ <9L^ SUYSsxDss4g-6QJc/d*&2KbR=Bj]ƥxt;*nLJvvU!Y[G=e#I$Oh$'4ؽcJ 8hL^ߦ!r߇EmtAÛە,JxI[N=*JսTdU݉Fy%qOh'4 Kq?OH$Y7o7؟|Y`RDԁ,z2`vf+(x!K:ZWY$ӽ%iu3Vطer߱~%ݯJPs!l3p)fJ5sZwGz"}td &ua{YaD F*1m>'H)Τ#BdB;nCڶݤ= *#ebpz %}1tDW B4/[i^ _<&u'Cl/qka/#wcӄqU1KPE+4] CЕЃ38W;* lkvT:R&L*<oBf#)]_!q,^W}bqdN}qcJԶ]}HttHF@lUϼ~{,d:-ˏY#$UHiVKP@f*,0!"LNF SX0}*ROKfӲ9ֻ+޶9CP3OtBr;leRR6离\Jpq&jOM/>v3#nfeHjco#ʖx*`kc@}-v6'˸FlQK{>*f2Kv{酂4jtMu:쿒uz/w&-{n;i5Mp,4I6Ͽg>&&3Aa?6F9wo٣nrP6jp6'ocwEx:<[Tt!>] { :Rr,!αziݼWN 2/[%GGY>2tۛ x?#o)J+_>-j'1mKz4m7 Qx j%2 떠ۻzq>Ʉ"42:2Zdx~>;E + ɄG12ORAjmMHPp.mQ9Z5s~̋uF?? +V/P>p,*$cAZnARd/endstream +endobj +1564 0 obj << +/Type /Page +/Contents 1565 0 R +/Resources 1563 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1512 0 R +>> endobj +1566 0 obj << +/D [1564 0 R /XYZ 85.039 781.388 null] +>> endobj +318 0 obj << +/D [1564 0 R /XYZ 85.039 761.463 null] +>> endobj +1567 0 obj << +/D [1564 0 R /XYZ 85.039 740.731 null] +>> endobj +322 0 obj << +/D [1564 0 R /XYZ 85.039 695.985 null] +>> endobj +1568 0 obj << +/D [1564 0 R /XYZ 85.039 674.784 null] +>> endobj +326 0 obj << +/D [1564 0 R /XYZ 85.039 642.981 null] +>> endobj +1569 0 obj << +/D [1564 0 R /XYZ 85.039 622.387 null] +>> endobj +330 0 obj << +/D [1564 0 R /XYZ 85.039 577.034 null] +>> endobj +1570 0 obj << +/D [1564 0 R /XYZ 85.039 556.44 null] +>> endobj +334 0 obj << +/D [1564 0 R /XYZ 85.039 456.891 null] +>> endobj +1571 0 obj << +/D [1564 0 R /XYZ 85.039 436.296 null] +>> endobj +338 0 obj << +/D [1564 0 R /XYZ 85.039 337.353 null] +>> endobj +1572 0 obj << +/D [1564 0 R /XYZ 85.039 316.152 null] +>> endobj +342 0 obj << +/D [1564 0 R /XYZ 85.039 284.349 null] +>> endobj +1573 0 obj << +/D [1564 0 R /XYZ 85.039 263.755 null] +>> endobj +346 0 obj << +/D [1564 0 R /XYZ 85.039 136.846 null] +>> endobj +1574 0 obj << +/D [1564 0 R /XYZ 85.039 113.524 null] +>> endobj +1563 0 obj << +/Font << /F65 1062 0 R /F20 929 0 R /F15 943 0 R /F35 940 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1577 0 obj << +/Length 2957 +/Filter /FlateDecode +>> +stream +x[M6ϯa,m,KG2){읙h,Dy>h@9rLx͇FID@L$d&wp 2w0?^lev(t|.WtTcC3#; 0gL^LoY _Ȱ(6D)<,W朣\lw-^<~???t* Mscҍ$`HHilqAnU/>uvkmtjvCc1Kd2q%zsbhX١b#ӡ cJ,CYBp|rC[d%Ux &=baP5řшj5ȣaR(\r?tH)0pQ/}I-q "QWݠZ2#j ZtZ>JiZ)L)؞$!}LEtVJYʃNa"D5#i. +yM-9 EtBŜCM萪q䒎59WFph̟nO8%vN7dص|C^|_H߯5ӯtNHoC(' s܎FMB JakjGR'-w>{U M!Z;M Έ;|o~gk-U_}Jg[mZxk_S8a+DZ9ܾ/㘅<}4tZkզV.wVVa<rcղ[,`Ha\#B Rt^vhjgCC!Hj5ȣ`>*Z)~X R`Ҹ9135||if8|lsKk;e۽g`M{PK# <6XٞEw3KE0\"!Qށ19EAQ H/Zx) C٪22.eVLWPޠ7E+VʧgPs7uK nz<3vO<ԹCpTS]/!Mx劥wC +yܶ*U˵`ZE*/<ٝÜ.f{}^Gj"}nRF2H_H1ShC;bN A܋ !,oCcW7'pU6`> endobj +1578 0 obj << +/D [1576 0 R /XYZ 85.039 781.388 null] +>> endobj +350 0 obj << +/D [1576 0 R /XYZ 85.039 761.463 null] +>> endobj +1579 0 obj << +/D [1576 0 R /XYZ 85.039 740.731 null] +>> endobj +354 0 obj << +/D [1576 0 R /XYZ 85.039 614.69 null] +>> endobj +1580 0 obj << +/D [1576 0 R /XYZ 85.039 593.489 null] +>> endobj +358 0 obj << +/D [1576 0 R /XYZ 85.039 508.095 null] +>> endobj +1581 0 obj << +/D [1576 0 R /XYZ 85.039 486.895 null] +>> endobj +362 0 obj << +/D [1576 0 R /XYZ 85.039 442.148 null] +>> endobj +1582 0 obj << +/D [1576 0 R /XYZ 85.039 420.948 null] +>> endobj +366 0 obj << +/D [1576 0 R /XYZ 85.039 309.668 null] +>> endobj +1583 0 obj << +/D [1576 0 R /XYZ 85.039 287.255 null] +>> endobj +370 0 obj << +/D [1576 0 R /XYZ 85.039 203.073 null] +>> endobj +1584 0 obj << +/D [1576 0 R /XYZ 85.039 180.66 null] +>> endobj +1575 0 obj << +/Font << /F65 1062 0 R /F20 929 0 R /F35 940 0 R /F14 961 0 R /F15 943 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1588 0 obj << +/Length 2719 +/Filter /FlateDecode +>> +stream +xڵZ[s6~[N7^JZu6N7V%xd9HDHTbdbǃs@I$($I1i:Y.-kD!iq]'8BYMSo~_8 )AaB>3Too m Pd?>G5EhN8Bn.qF_MS(F ᓐF(M G1Jy +:5:c(&Bq9Z|$#[ H->NkyxJr Ū$ p٧;e҂< +Zzܝa`=c4dnW(YA`r\Z<%?ڷU?yi?6]Cp!UofH3Y%YcD->^*DXXx_hO)GL~Pgr!qPuUSSe-N3‘E,TYܚ4 $~k xb:Gݫ0\C~-c,ڞg浺>u`ϗWǢćzOKO5; 5[Uh+^jS#tkڛS"Rۼ5~~K,0vGIJ@n lF.X6U,1Y!@4%/Y.ش/9E8 l$Z t>F7)|L`<_oכ\q6tbCu1aXp]9{JQ`\LU" _Qe]ziH(TO~H'pPt{:(.qI@ő] ƳSaN EJjWCt(Qd[^kcn^>ģ-) ƷObt;qڜ*svcNw5NxM;x+W|{M`D!~RX$Aq´-+R5S!4Aendstream +endobj +1587 0 obj << +/Type /Page +/Contents 1588 0 R +/Resources 1586 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1585 0 R +>> endobj +1589 0 obj << +/D [1587 0 R /XYZ 85.039 781.388 null] +>> endobj +374 0 obj << +/D [1587 0 R /XYZ 85.039 719.568 null] +>> endobj +1590 0 obj << +/D [1587 0 R /XYZ 85.039 698.368 null] +>> endobj +378 0 obj << +/D [1587 0 R /XYZ 85.039 490.164 null] +>> endobj +1591 0 obj << +/D [1587 0 R /XYZ 85.039 466.842 null] +>> endobj +382 0 obj << +/D [1587 0 R /XYZ 85.039 421.489 null] +>> endobj +1592 0 obj << +/D [1587 0 R /XYZ 85.039 400.895 null] +>> endobj +386 0 obj << +/D [1587 0 R /XYZ 85.039 260.698 null] +>> endobj +1593 0 obj << +/D [1587 0 R /XYZ 85.039 240.104 null] +>> endobj +390 0 obj << +/D [1587 0 R /XYZ 85.039 129.733 null] +>> endobj +1594 0 obj << +/D [1587 0 R /XYZ 85.039 106.411 null] +>> endobj +1586 0 obj << +/Font << /F65 1062 0 R /F20 929 0 R /F15 943 0 R /F35 940 0 R /F36 947 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1597 0 obj << +/Length 3054 +/Filter /FlateDecode +>> +stream +xڵ\r6}W- +K/ʎ'SKξLA#ilؒWA6IAJ,8@ O2Teg&˻lrr1asu 5zrmG\ů?zn6RNk6e5}}徟yk?\>\vmd,c&_q}L2K~{vyGӔO].撳R\f gTuPSY 2I.&d0}ӫW3>}'W!H 5.EɤS/3QNw[LocIX/z`J(ӂe4^QGVQY[[r&b{,ϊ6-@㵡mzamP;pl)73'wLYdjAL2snQj̀wQ?bއz]At﷛n6fcM^n֋zS &V +y8H^P75 +pp|"<:fX?@8u\Uf&n8I;ާvSbd˜"Dt@;NQ7Q;p  ;Uv؜"lڼph3^.+YP\ٍ`~udgW ǝFwLr"DaEQ7êGVGZ4')Y0"z CY̤c|> 3 KݗaWϐt%/{*"иtZ7a^Z=՗Fu߂lA)%H Kx;._גeEb@quWOJd-a-bbn愁fdpgd+<?ftdFUΊ2F B#ш"m4ꑆ5Bn3Nqҩ:hNiS4"άNb* "T蜔9i:bꓫ2Y&n"^=]a21q*,"00O$1Ϩro=\]1'd̀g̺;O69HfLojA4fbS'6"}Sj:'Oi-aHE06JuBQ=wJlP@7ƔWMgSZJZ!] +㥠̀;BvqIR"~T%U2 ƒFT_Ц/ifURj3-%L= `9z#SPv=Zu(a1Лv3:6yX蜩52Gǩ Fj&6\lz_thn{9j*`fY3/^lK7eժ~|Km"B|6>EYFq=ʮQo̳E9+S$zl]E1]Yߺ]9j]Y.3f]v+^~0V5&n*4n- 湪M~.7&:O{ߎC-;[W4WJ-^Cz0 Bz$> x3.M?H=*Ր?aD(q8C[ KXz6A&'rq\CjFϳ1W[3Jv{?6\>AgPԫ,=E.ڽO0:< VVţGǕ q+O[ +cKOvyțмDy3hNZ5Gr/&i /jV_'{{?!;lHVed7w|>;j71wz;QkEw=WAbM9٘jEWlWQv +:!$i a6xBi3TL!4󠭄eeX]{E;NA=yUjǑDx@+$ZLym 1gIt䵞Eb*O>г{wDs#OiaJ9и)M6SG҈mc0IFwלwc^N^dQ!L܃ze1EnJ(g(Q-+TɆ5 0_@EO'H6,ĥ[LPC{Lj`JީI^ftސyEnqpж?81cxmmJ65EUKƍY&ehÙ_gtm߭V ~/{A_"FʗmSO%ie +tyЏx{tεGR""HPo5'BN^r뾹JVzs' endstream +endobj +1596 0 obj << +/Type /Page +/Contents 1597 0 R +/Resources 1595 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1585 0 R +>> endobj +1598 0 obj << +/D [1596 0 R /XYZ 85.039 781.388 null] +>> endobj +394 0 obj << +/D [1596 0 R /XYZ 85.039 271.839 null] +>> endobj +1599 0 obj << +/D [1596 0 R /XYZ 85.039 251.244 null] +>> endobj +398 0 obj << +/D [1596 0 R /XYZ 85.039 105.676 null] +>> endobj +1600 0 obj << +/D [1596 0 R /XYZ 85.039 84.475 null] +>> endobj +1595 0 obj << +/Font << /F65 1062 0 R /F20 929 0 R /F15 943 0 R /F35 940 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1603 0 obj << +/Length 4286 +/Filter /FlateDecode +>> +stream +xڭ\r7}Weɭ%a$Y(dY<mqC +I~:ӘKcQRai 8rFD/'CLd0LcFIANBd"gwGg?o!Ĩ I}ŵ}}{sOGmiP(?N(E~ESHޯGKS3ylv1a)x7CʈLE f`qPPiڡ H^'IBGO6U͊L Do\'j攒T/_s<'jܼ7 47 %rRg!,EHI:vɷ2-; r6tZH͘|Y'_'^--x>Y-5fCC4%ygLV3 $Hs\_k3N +q0 aåP%&%UK%V˽ %Ң 9xKPwKxP@]nm :lӧ(F ;xB!S]$NRLdB !0e)qu6MS4*\ϪYߢS5~?rwk(rEU # Rq .溽AoO rw?6\))a%)?,ea6ö^nR[I5ea%<{RRT&Hnf7FG:mOUf" sՑ$ |n^9wJe1㉺]YջXW9Kb@(`ͣs+5rܺ5?Ty<|N>GQoӽE4tXߠ{ISړXzą$MA8OY;y.ɒ0u%zѣj}63'{鰵?X?7OZlMgד^_:?dݎ!kmfyg-}Y~?w}_WRrG:yDI< c}Qwݚc@ߐc$hdb@Ƚ;P{\^s~u81 +>OIS|AZ@ +B< jFz~|kG^ +SFA 0V7JM i=YpSWW~~5wDpNdakۃ0Hqb->O@B$G\7`i_O> T \~a֧ߝpѳeV|ZQ5لr5-׺kP䚇~AGU?z{:*IKڻo{3{=jn|o.w8F7C$ՊbW;wi]5jr)u2ȴ2fVTE 0YaRiV_uݴֶUss"܃޻`ϊ 2わNƅzu꺙2CZN$CRq}^BPQwXm7)Ty1iU DZVejPV^ZUi WJ ys`V_!|3+Ȳg^Ε?k-wQ͒H} 8PD>AYyV}3^)lךޥڅK@4BP)縷NZd̤lcgZ&={z}is}-Jt!:PDBDYy!V}8^)D" fyї%gxΎ35Rfan/dnd1yLcz"l24r+]?Faڸ28ۮ6'Ťդ&^Ua[LD(yW~0R7/[V V꽢vjVgv7!{u3ʳ=s%S#Oyc!w+Su(8R(=}HeRjjY[٦&(byO/p]%)W>wʟ.[S_6_9cr}-> KWWZGT"#I + +£8+Uxz>*pz.* 7 ZyNRVOa³0c?94wfrޘc{!->KBY`@("`>NJK л~eItgs3TD+.wjTSZ%Aw]` *"1H25Xb(+/1Ć+%pvef-dwuYִ"NixzΝuR٫Øg"HRR0{B@WeXpzQz^mlwf>LZ§^Kپ;|2rҩӎTE;)̺hk++O˧U +"$Aejp|V}`82Pz>'6{Ԅ(O b@Z pda |n5_v-VeZj@b@@H 8P$*Se镁r~}K3pb&T:@ӝZMæ;/WJ_[yT;Ǫہ"L 7#JyYBdaj +n'Jq֨m +E+25X?(+~+޽|׬&ą=%i8 *M {ޘ}`~g;S}eyAX@ \\Pqᬜ zz^\8=':60Bs0pfzҐYԻ&x&PxL_mgTRm])F/ξelTү@("`飬>N>JKлy5%-[PpΓ,Cn h5"8=!pl"B:"hR V-\h:Z7N26Dԩ/\jdݪk2-r!wDVJ* Pp(h( X¸Ph9]wCyC(5]敷Xd!u= NˡmKƇZ|N@(`ѣ>N=J л:κEXb%JC-<&M *C9p-CAxgpFdBB"!P(+UN @/v9]vkv`¥4\.]ɃMU `8/~SLь, @Ypze@|@zZ&Tڱ`01o '?Li^mZ8?5g)BMqD(WGڌ8$1 ϵ(Y~nx"Y~T`m~ɩ.ry jLQ/7ev2.7UK.ݵM8Vo 8Jż5T~3b헇f@t䣉ūbZ$h?t9endstream +endobj +1602 0 obj << +/Type /Page +/Contents 1603 0 R +/Resources 1601 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1585 0 R +>> endobj +1604 0 obj << +/D [1602 0 R /XYZ 85.039 781.388 null] +>> endobj +402 0 obj << +/D [1602 0 R /XYZ 85.039 761.463 null] +>> endobj +1605 0 obj << +/D [1602 0 R /XYZ 85.039 743.459 null] +>> endobj +406 0 obj << +/D [1602 0 R /XYZ 85.039 554.516 null] +>> endobj +1606 0 obj << +/D [1602 0 R /XYZ 85.039 536.042 null] +>> endobj +1601 0 obj << +/Font << /F65 1062 0 R /F20 929 0 R /F15 943 0 R /F11 968 0 R /F35 940 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1609 0 obj << +/Length 3208 +/Filter /FlateDecode +>> +stream +xZ[s6~vvf%^ӧMwZkyE"Us@P"t_:D򝃃" =_8Jvw/a3)֚d|9].~ |B/bXsy{Z+Zqpxsqݬ>n;{ZDkv᣿aߝJ#}O @~uvsoˊ5u@ /b|/IIG^& B?r#!\"O+&p|NQ$ӥ5U#OZr尅{/pc=wHPnq*Y'ˮo ַ+ x^Sd29=>k5N0_CE͙(IehnOH7$ (j W`Ql>-6T. (mly +%6q(BGh&t` * Rygeak4b1#vloVZx˶lG֑s +HJ84;h: -dFQ IՋ2ph:H(6`Muzs͚@)Ytsۉ|OJTcEZHx΃eǿ$+?l{2#m>?$_TP"FYm϶ [b+c~5X$ +C)x!OǩBE⽙z;DJjxD-qw)(u%UF4D>ì.sy;,O4N ~ěߓ(=*(rK@$8pUζJcj@V@˶3XHAC]1"Plkf hn=H P[pԥ9,(R4" '+z]v(S׀56`ȮW2iR ?"?#?]\nDdUup{NW?qM]:iu|"\D.37 rŵnYq-zkSk#loK0BXϟQBtۆG 8hd+08A{ViYnZ+:eiArα`' &sYG{aN3'&" "BrxR9=yp 3ahv. +O jF7E 7qځA! 6##uq؀BX;E"!NNN?R Tڷm)LLf?hD*5,  ))L裱!.NJBa7V'l__&G -LI uܽ&):0v0R!l`yd?N`=)PdETUc-FyhϲiAjA1w% Y>9`9Е$/Ap(0btmj$@1F~`cп1Vg +C1q,}EanQPݜ&kȌ⡉RaR)P.7 [ZZc <)F#NLLv'LP#hv4Wj =&ks&and<ljhj6D(i5zJHcBҔ 3>v-$?hB4#PDzA]$v [t8NwzA6*Н*[fh ,;t)Y ÿuNQ;q զs/`1~2Yel$<4eۊrAsn1xt B0](tm6 p(+5*f?D `ϻqBcE ERzG36wRrCz @ڰ>R1T%dҤ$@qquOnuE8=icrEef}CG[CWZZ=G,hv$GZ{LcV>rX;)X>nX|8) +}<“;0 LK6v#>|qM+sy>1^rbHFq^. G7Є=rMU:n3٘FHGl?.<)m`-dzv +^g؜B m@Y[ gxg-7p+M{\|)F͐ôJ Tpn[}鋚4͇h 99dt &)!~YN)t[g2k Pz/S41%MxU.0,LEa0\Vv};r5QY5\)t-EN]pK֒];B]%*.HA!Z}װ4p<[J-.LY +_,ve~jQOQhF+ӌmv0,e՟]+r[s;KaߡVd +m9AHR mFj /V/N/J|.wzJ)g=ho#90`-4v&W `ucc2zcp&iLSt EO&#\ı{XA̦*8M +\xoZ=Eyb5{/8I+8$lyvZʳLm/~k]aLFFN|q/߮gHozHYyo.8\ :bCa(-AxL܀`!8VY*OW˄WqaݚWNᶘZ"w@E詳x2V/5I‹CV 38uF@ZANG-t?{=~8NQf6\_{42Ŝ00IzV#(]rZB;pH}Ռde<$Xb\KG@ +I +e&Y\Fʶ?y=`YSˎԉ@a/MPQ"jfO2WNe6e@yJ#PŁ ?~=endstream +endobj +1608 0 obj << +/Type /Page +/Contents 1609 0 R +/Resources 1607 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1585 0 R +>> endobj +1610 0 obj << +/D [1608 0 R /XYZ 85.039 781.388 null] +>> endobj +410 0 obj << +/D [1608 0 R /XYZ 85.039 731.337 null] +>> endobj +1611 0 obj << +/D [1608 0 R /XYZ 85.039 702.539 null] +>> endobj +414 0 obj << +/D [1608 0 R /XYZ 85.039 674.393 null] +>> endobj +1612 0 obj << +/D [1608 0 R /XYZ 85.039 653.197 null] +>> endobj +418 0 obj << +/D [1608 0 R /XYZ 85.039 217.242 null] +>> endobj +1613 0 obj << +/D [1608 0 R /XYZ 85.039 196.249 null] +>> endobj +1607 0 obj << +/Font << /F65 1062 0 R /F20 929 0 R /F15 943 0 R /F14 961 0 R /F36 947 0 R /F35 940 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1616 0 obj << +/Length 3101 +/Filter /FlateDecode +>> +stream +xڽ[[s~ׯ;fXK[g&k+탓(6")-xbϘ`-"Td0"Ygt'8cbIV-o_j`d4[\4("X\m'|r%H2\I^_W7_[rUm lB3JDfg)QRwgr;(#g32Ɖ`|*Jǟ)eQ-W,K֞#$R.HL +5?T'iɒ]~}W,Wz_*c만n^|d)&&GGٜ3<2J)ΈW+s$?qOTpŊT-V }JKu* =FNF;f!'1cҐDel +)YbZ &P8ISj^U>!4 Bv M+Möu(#a@$@j7]LƙOUQ c,HS{@2-Mqr֜6w@qGԔAj/Ƥ^1RY& * jE>+]貤ڭ +Ry 8_YPD7P^A&Ϩ}h…JT8 H(0L0{ `P, \InQnq2ڰ#Xyo`P]G3x0pM* +F'Bv^Y,فfs" +^Dw\xg V,A VqbpSZo9CM۟>@]i^- D,jj|ԫׁly_[Xӄz>dYX!0T/:?-\wo4cq-?Р",/{X`,3S\ǶDvPiH>pS Θ!*ZGniiVJV{Bm{k{'ۣpczQU|.dh+ɦ@t2&`%c\sN m&GIݕU~0\H B`ˏ]cijOi T2>sZe2ㄳOzk3ڌ@vTj*č +[4ING_Rf9aG) +|z0Hhf>P=gXiZjS@J.or"t ->C_lri6 P 6%\^Xe[{KEdK>N+K^~Lk^Wo߾bmt갭s<ɋ/ <[.fsu>7BPendstream -endobj -572 0 obj<>/XObject<<>>>>>>endobj -573 0 obj<>stream -x}W]O;}WR*AJ MJ|^U*ЖTJ]oe^B=3ބU*ڞ3gΌF4= e>M=_ビ?o|8|:єfLG4 hN!]hkq4.޾ 8{_jK(\mRa*M& - -(MV k=hTsrbpzHR- ݋˛#yl|kzu~FiݯbEREqˀʢq$rvPU[ -׬դ+x,Eot8Z,'wP5MxϾ ]=[ pIM6 TnpM2^Bjؙ8 njOkT#5Y1vG-ּK8zi7znPIJ5,K4Lv*ꬴ  -c4o0Ty8U0XS4=^AN RlXMmL3ĻSqB:d{a*ArYG!Et#p䳔hTU5Q{ T5 ^FOy % -ڎ& :.5(P s71LVԟd5hrg/Xd 4*-2NtvcBnKkZ7duH_ -.^ fݭA eiZ`nD$0&ty̗H J]o+)>/XObject<<>>>>>>endobj -575 0 obj<>stream -xmUn6+4lv9&I`C.4HJR6_7j M9o޼yw4~^튲z4Kf/-7k|^1yI9 Ymִ SET|[<Xўgӊ P# JRrk~Mc] Fĉi5d~)SUug4029@%RUm}]PT'J )*Y*+QuQ+`/IRo}$Ɇ)K9=(])TU@{TrTj@;P%Y$ycUS`3[H3o* DG^'5.[͙s/6ɄM+8l -#' e+{L[  (ᥣ -M r)CYG$Ot=2.srhAgN+f?Uhۇ}pmZ}G s.OǺF!2AU_K>nB/!pƽBfׁZH (P{uM@K%m#Fи;_e6&t,5*10 Qz!pMf#ߩ963ըTW:hF -Uާ g ŐLs;Hh8- -~I&"?|B{q&x-2tWo k|hvCqԑIU:[u(c>qX\֍<9@Ѡղ;"|bjDA1H`tΪDS(`BJ  \[bV -IagZiaat欷E,dt URJ8 >< Oa/&0&)г\N>0 !"-jJC#;f -}t¿9Qft2OVnVz4}d]ܴ`͠J -xdWpN(£8lJHJÄ' H.BTNMf%a@>/XObject<<>>>>>>endobj -577 0 obj<>stream -xWko6_q 8NZ`u Mx %Q6H*%)?H}sϽbJ^/(/>.^}zK JY\Ъx2|V4^Zʊ\ 9QgyYS.ʽ\}9MfE CҙiX]_\ޏ``)-ӭF`,SŃ^lO[bd QdT(70Z*Ȃ 3;k76X;G:ƊACYP#[YKm~h!vwBΕ3j(XGk xq >bxD:L9N2NI05(4,;%BU \ -d8$+!b,`kgr>+ݞ`H&\hw)ߵ恬xI=̷+mu`ѱņ`"T3:B"=gBQ ?f# XiT#\ԭWN}"sjV~LXt!lekRjD];4ӀG*̃n*8<,3@і!2qhb:hOO%hcBFz -"ls?=18r¨!>} B34z d.^n)p:2h^ygZD+ < DvLa6 -EºZk P#P8,Am; 3CK@!Zٷ3ț<Ğ%^$۬A&Iee0!/zOT<'O\hICE%]۪|˴GG:Z~]ېU -1.!ϰડˏ 9h-HnA^T uH+McَII肃cLcbk5eSn xd&v P* E~ M;6޿>qE\W0ߎ#0BFi: {x-^Z^gzuLMaUU6@i D&<~:!:ύ3Pǚw -Qɺ~~Iben,oܙ_׋|1Aafl\endstream -endobj -578 0 obj<>/XObject<<>>>>>>endobj -579 0 obj<>stream -xTn8|W,l84)61PÁV1/T|RVaXm4>sZfIe3e3Z,O -9Gӫ紮,Vg3Z[2\G -Up^ [*v"?'IrpJl#Uz[.hHw@H[mь&7YR$ 3&yQO}l{hBKxkٷЙlmGXrsGer]lH}kzƤķ 쫤\!+`i W58}I `ZA;TTk]uA⤲\ dUè;{ōsOdyl+`tf{B43:O&*y+mDuk}=1n{1 X0 }UMS:l9H H;P ɛQ9G<+V`d@jXEZ J¤sf- xZv X2@Ytѣ[#+4@ZX-ZAq;_Ju?6%wڇfWr{V$,F|w2:تaeϸ6ыzaSizjWU-OO)ϋ~:x~F/ &I~2ܝfhl5TaB#H>j8B^]GGQendstream -endobj -580 0 obj<>/XObject<<>>>>/Annots 301 0 R>>endobj -581 0 obj<>stream -xWmOGίK@w>l*BbWi*Kr{3K{;;`Ҵ ^m^yfu/.?F]l_%GQ~DvUЄS8z|6Ev=E'8K'x+>KhHIt^+>}1n5w7r{xG2g?::~= >{?݋FPF9 Ohg_,E奥QDwS`J4ݏ/޺_e2l^vGpx$+G$qsTrեԞ2=;Rznl))yC5+KMx4Q%f+IwHijO~)IK-ѥNo$~"-L3[aϱf3ջ88eie."iH"kdԪ ,x ] 2Ω줓<  ^5uE}ʦD⭣8CJ/>;N9P ]10ޯ+ 衮2Z*_ y]k^MX v5Wø9⒊쁀ԖS%Ba$bȳCv%*Ɍ@Nל -ŀ6dn@%#ˬJ2$$S/}+&kJ!XK01)SpkFbvcНё|}15-&Oa*y} -Ol dn )9dlP);JsTPHOwT8a,ʭ2Z@V.ɵऩ:s, !T2:˫-@xy*Z:v"pHReˀB=* dV0) gBLX`m2\U!S o0 -["d&q?ʛޱs MIG{N, -ԓMJ4Mf -2=mXJFfU~iwj! -(SpQ8A!cbpdɡ`Qt@WkFeZu -lIU^ _#E(Lēt>.wt>vONo϶O?z[3җ3 ձo@˕ݡRiM -xo8[Nt\]M8h(E폒M)n%41@drXJZY=-f, Uiu]K>m:sdK%W0*`6jY?Ц -5fO<|0mNjle2ߋC Lq  l,,Zp@ Sݚ$LꁱKvVv?G24Ѓ u|Xқ[%RU߽!U3WgRX%j HZ<T{6=j)*xTt>E㌕" Lhii؛wWB-lRcv9 ذZ2pURѫ҆Jb c!H8 @8,(( t$T*JބGΆ>`4?]\;5`xY;0aS?7Ldt! ^0lkW'mvzHIcQo]N~5endstream -endobj -582 0 obj<>/XObject<<>>>>>>endobj -583 0 obj<>stream -xWMs8WtN[)ORe;ޕD$I v4~_Ö+Rׯ_7s54xFE}54]99M| K=&ՇigsZ Վ"PhPF5d7ZmuA5>(*\Z^s HĎ;Å-),vNGo;6ͺXެ5{\1E6h:XZ3 \R9}Vj&683m]U{ 9i/vO̪ʱ*g.F|"L8LdwM[0HE9%WvO{xV.9˺7;8V%o\ 2[&69aJJAlFR!SỲjM¼>}dX[WJ`.~]DAV οquChJt -|?Zv,a>6~cs巀i/KAn >DL.za'CԚF }E&+nQvl -N#V}ioXȮ:e]k -eh WFsUJloYů\!{hC2g,u\h8bz08.fkI{,~{߾>l?qX<th;dtԁ|Z~"]Su5@^f_zvd|<ǜ8FK']p i6toy40EÒ+` 9"^Ewn6ڠaPi} %݅Ѽx!ⲙ3ȥ2@6v=] -jMTNo0 #FGP颅roG*>Eߧ>^J`"4 -VDb />8 -܍l0ȂoEL':E-GD5- |ݕi[؉RVQu?2 ܢxC+|Jr;D_~.jn | Uh#^&HRb_ C(]mȤDMvyaS":(UNtNtsj/E}O"PU;9FJڶHʠjj1n>̩T2> SR(ft8 *3`%p@c4۸/iC:S7}'F4<] @`16V4Ĝ+zP 9fWTƒ0Ew:_ۥ`q(=6zaGbГ}ot x~>}nQK qw6,x>]O|>r߯ 2Cendstream -endobj -584 0 obj<>/XObject<<>>>>>>endobj -585 0 obj<>stream -xoo0SK;qxn+Lc(s֬3AO%nY"w*U=?s ? - ,'! 3 ;`!'|2:=+f<CƬ8 -2&% ?Rjf?:Q#)jyw T^(w OXȺ,cni$4|PKp׏zTk?^ hDXSiO9,gϘ1~̥àCgpuơuΎ;N]k'#뛯JW׽-.ߴ[誢8Ui!l\M'NO'^|_Cp[|'Kq[/N=yA}ksSBȺ63Bb?[{a Fy#+k:i;|k$"F amCG]1׶%Npxh=67}LOPg4)pm.b6+KF>bb$L}'1I*u6: endstream -endobj -586 0 obj<>/XObject<<>>>>>>endobj -587 0 obj<>stream -xUr0+t -q5d0X#\$ﻂ6aj_# -6>|\I> e 〒o\pLT͈ӷ@@ }_<}eȃ>D) ۆ(9 -C\|:^^GF[#ի ,V' d*X yZA񤐩%doHʹ<5a#InѢ1l{~R6XEXܵoImKrZ#0Rh  1|:A~iH|(]VJ~spa=2OgtOMr(2PҊ+*JWFmnrkw5%ʜZF`|V;iV%bVwPw(QU)!(6ϬD_+{K~v+q$eÇ^ niq(e?kMW푾Qv\wdnΐpYW -U7 WJQti_-7 Mva4bO{-b:ce -S!, ^]?u6HafQ?c-\A0o'2Qx+W>?endstream -endobj -588 0 obj<>/XObject<<>>>>>>endobj -589 0 obj<>stream -xVr0}+tjշN_NƑ(c,"iIKaݳgw}rƏ ^tѲ c(.~{ ^2 N=|@2EAB=6$!.gzn jΠCgW''-"1Q⹕ٯ͘x +d=]@keYVQn;TِFU5 N&.Rfb)eZŒ=nV_Ti9yʸTqMXz4`aRLrsϑ6A3flc-'q׆K`qM Cr!7:~p"dN-r0J@H9J3XT5xtiLPT+Lh)L#Wּ邿0>ь -hzTRǸJlkt]\pu/(?.8٨]XLӜe|?si3/]al 'AE&)JOf)T6RDk6 _ 癿N֯?+CO-endstream -endobj -590 0 obj<>/XObject<<>>>>>>endobj -591 0 obj<>stream -xV]O0}ﯸ& I=1PR62M-K4w"x@H{s=}ǃ.y /:] a/tC=*ҺnZnBOEqJ~qԸۅo`2Bd nM(m J)J)C,L^ -1Oi0 -L>A825prn2PK%$"5QĆ*_a ~Hz<.iWB -XxH4hy0/T4LJCݵZ`e] b:~0p}z.__Nl?Q &$7$[MYryp($k٤L$Zԃ5"L3UN&{zYm@(1dH-'9J"vV6)#9ktɦ BFח59E -tpJi炬mMr5Wla -c3l(lx - hPL7ALZo7cӬX7K K LDm,cO/@$-RsOШBZ6یn_m_ f`LX*A[ex8';r%9-aK @#%%BGkGoپ`< -~hN'7ȒOLcbo//p0Я -sEgR$hxQ^D݁X[ OW}QFa~JЊ^`#mendstream -endobj -592 0 obj<>/XObject<<>>>>>>endobj -593 0 obj<>stream -xVQo0~WcA,Lh;[IvBckSĿ9 &/4P$wO-l:sMZeؖ ^.>X\vv>8st=#@ !=[յ)Q"jNbA$߈`u\. ~^L:N)->Hg&A6RT|jΆ㋉L!!SKf'cgX-Y-,cD*),SΔnZJ&  渙Ut(i"؉ð92̢6<0Jr V< c?(In.}TV3LIaME -B HO5>@WIД!VN'C[՞&OoZ)$,$aܰQپ@0k@F6̅֘/de3X21Yp>L` -FVی&ܢqKֈ[Ұi\{vP*6sq5,Q}cnj<7UX0T7f. fD@S1aj)-g<f<6Od$0+ )"bU7t$j)8WSVy8h8-JDžyNwL$j(Aupz<+0WFq"cx^<*bgc}cZ `9#C-L@aGξCendstream -endobj -594 0 obj<>/XObject<<>>>>>>endobj -595 0 obj<>stream -xVo0~篸HI iMJ$xKlf'д}g' -A -">ߝsƷ ^Iѳ-!>H?]H -1xN` Z߆w4q 4z;6G(u/dz cT:Nn&ʭ=vHEAN +,nNŇ;4n:,M`J.\2cm_ )!pACV+5"YHff艜^#cz!>L9gSpYb@3`ɘ0=e1y +qΉG?"3I6qZDYvQ 2h f:h=ll('GB|Bp",Ό0ACvx9 +LīnQfwVmQƀy޻X8%XB>#ך&"VG3.UHRT  AOPP_g7hĐKaUԚ͠E`D=mF{㊲8TKfRW9.aq$)L4lE`D=Rt)6CO++fJϡkZ B4s.y}#m]7w=hnwp㹻lłyl槾_MJ49 4D x `tB"Ί R5"Q: [w8pV}^ɐO32ap6'F.1#hsLf*QP.g l"z"d6Lm)p]'W{QؚG 4v9x&E +Bv9Y}wpv<}fɦ ro_UuӾ W-i鈔ޫPIظ#&.ڽW= FQk3*pLuťgIUcuyJS.Z`| ]y6x\şw+r? Z(ݯ=as߬vn'wP?+OK{nJqleuJQ>zs ¾Lzc.<LqDݷ4`Cyj^^]\4&k6riH+kiU--iusZ)ahn9}l^'o;Qd'C؏.qOifBq /=1^˛ NNVulbrwݦ˝&T۟>Z|$dW˟O>qsǚzҼt!h~G{{[ۗ?GMu||BǢ''?ZbG}@Oܫ&?;.E$}ҐnP1soJ֛}YWufj[ޣiD +jԽEQEN f*(+u*=/}vd"/kendstream +endobj +1615 0 obj << +/Type /Page +/Contents 1616 0 R +/Resources 1614 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1585 0 R +>> endobj +1617 0 obj << +/D [1615 0 R /XYZ 85.039 781.388 null] +>> endobj +422 0 obj << +/D [1615 0 R /XYZ 85.039 542.823 null] +>> endobj +1618 0 obj << +/D [1615 0 R /XYZ 85.039 522.834 null] +>> endobj +426 0 obj << +/D [1615 0 R /XYZ 85.039 382.638 null] +>> endobj +1619 0 obj << +/D [1615 0 R /XYZ 85.039 364.164 null] +>> endobj +430 0 obj << +/D [1615 0 R /XYZ 85.039 264.615 null] +>> endobj +1620 0 obj << +/D [1615 0 R /XYZ 85.039 244.021 null] +>> endobj +434 0 obj << +/D [1615 0 R /XYZ 85.039 198.668 null] +>> endobj +1621 0 obj << +/D [1615 0 R /XYZ 85.039 175.952 null] +>> endobj +1614 0 obj << +/Font << /F65 1062 0 R /F35 940 0 R /F15 943 0 R /F20 929 0 R /F36 947 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1624 0 obj << +/Length 3215 +/Filter /FlateDecode +>> +stream +x[[۸~_alj5WEQ$iv$Mhl4fƈ-;CJdRtEƲQggY"Ҍ3e*8!Y:gLXm7NT,gͻ>}zfRsXi6^xӗzxŪ"rh~̳g+b%տڡ3534E%9KE<[ʈeQ²8őjyI.fD^yXX7۪/ kx|H9KNl +ɒ4,H)t ^rX22Wi3]I2Y-D6?!{45/ ^'|Pjk0*pk iԔ[]FLi~mK󐐵jmᢺNѮy*]t]ȱTTmy"HA$1֐8Fl fvOz{6lƃTYHHZC7G=C>s',#W\O7g`2#giwv[#-.h,}Mn6f#zH,?=}L8N\ZjK\l]Y5#:R c53RggWhlDp0%Q!3_)g[CO@tZĠ@_MT F8ip9RXpǹPlZU_+ ?hcl{8&|bwŗ奍џt.+xӥ.N.j|?"ysX\.8 ?5TSiօ0#]d,KҞ.NM +q*t5P#5uM͘)!:fӀTSt/M*>D +0A '9= (WoMiBBE3IW:i,A,f$X\38 P-u$ 1)ږ j;o +vDNOFލD0M~+Z$ԕ]|BƒRWA5d8׻BLND{ }k>e +L(0 MU`]3H *B}h==\5ydҍ:/Gq}8|r/PI2_ +G[hHtkї-g(0Tcr(dX Œ0W J*St)KWյN[,M ZW&H)C'jq@Zת)< QP *IV](y.b +.dd$p|@ו#aֻ*7 Q75Tϟxsm{*Y* ,{~z}g(jwa!]BW1 aK +p۔"uQġ)/ʢKAmK5?`龕ݴ(OO'(`Qv]WkKJfԨU<)5jܩUt|cntkclRR{ : ľnbecb\1pA,fVa{iOcj'-+tPܚS/lCi[yiB)܌BP҉ Ç# c٦a-3b\,YOѭ Z*3,@+<_#РOrW^ /cܯjXճz};xS7qJ5շȯ6a/AEYv4̶](S{UлpSn-o}\'Kdaւ{&`rW+Hm*]e%Lti)IX X}ODt~D7?p|Si?q~ q`Z.y]R@-E]/D"xS~TpSvEZi߲NOڗdW`8~Oյԓl!mU[@gXDrۂ a %>dŒ$Aq_O2}MeS@h-(hŒD H}*3R[ҳxk;Ŀ%J@[R٤qoQ7}o>{3)8<,:r,fdɼl[:!:譶Nwၶd3p [Hkn g+ݹH+Q054j~u΋K$L a]]L1툪>} +ԉR^qB;_+ZdiEgn԰Ȅq%X*XMɸRQz:f3؅bGy+k5 ;+-W.p" B P;o5ZAއ4ͣ-}9\1U{.zKr}Fhf\M( +Vhy#~ЉT>Poާw"ugpZX<.X7殾QsQ}j<|eEwȎciҰL,eMs>Z>Mj֏ !h n+jM脺u"+Mwk=5ѯ丿hvt}_#Z9ƆJEc|OafoAvufe=ϨgJ@}jFTg$>m0 +u4"vFtG+eҳcHT.8=%Ɛbce*qendstream +endobj +1623 0 obj << +/Type /Page +/Contents 1624 0 R +/Resources 1622 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1632 0 R +>> endobj +1625 0 obj << +/D [1623 0 R /XYZ 85.039 781.388 null] +>> endobj +438 0 obj << +/D [1623 0 R /XYZ 85.039 719.568 null] +>> endobj +1626 0 obj << +/D [1623 0 R /XYZ 85.039 701.095 null] +>> endobj +442 0 obj << +/D [1623 0 R /XYZ 85.039 653.622 null] +>> endobj +1627 0 obj << +/D [1623 0 R /XYZ 85.039 635.148 null] +>> endobj +446 0 obj << +/D [1623 0 R /XYZ 85.039 465.732 null] +>> endobj +1628 0 obj << +/D [1623 0 R /XYZ 85.039 445.137 null] +>> endobj +450 0 obj << +/D [1623 0 R /XYZ 85.039 344.982 null] +>> endobj +1629 0 obj << +/D [1623 0 R /XYZ 85.039 327.115 null] +>> endobj +454 0 obj << +/D [1623 0 R /XYZ 85.039 238.994 null] +>> endobj +1630 0 obj << +/D [1623 0 R /XYZ 85.039 220.122 null] +>> endobj +458 0 obj << +/D [1623 0 R /XYZ 85.039 161.22 null] +>> endobj +1631 0 obj << +/D [1623 0 R /XYZ 85.039 137.238 null] +>> endobj +1622 0 obj << +/Font << /F65 1062 0 R /F20 929 0 R /F15 943 0 R /F14 961 0 R /F35 940 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1635 0 obj << +/Length 3170 +/Filter /FlateDecode +>> +stream +x[Yo8~h D=HsKGrxg$c.[vkm뷊Eh]^qSҧbbUṪ,̗,8Q4[] x,˃#3؏gZfJr7'BJl;^ϟS˳_˪J tc˟A>q48<>NV^_|D35et$c1r!|ji_Ao{Bq[nBwwO폊S*DLK2tN֢!9 cRtAmIs0KĽ_^់tQ:Zڶ2#=`1S I)ngnRЯAI6Av5" $%g@^(kC6 Y]I;T|C3Q* 2͕Az՝q PhnXv.cn0am9C^&𺎼 ֕qNdTh$Q{ T̍#C8؁UtgBb\ 0gc'4Z4MhɸU]A۞iD{^Hz# +YY^n"'@Ω}IJs쳈˖-n~еWn 6w߳UP[;{Qa"iZ: `JN2窩_a;wP0O4 B0j.;h\v`J!2G},;v{KFN4շ۴(; +,c9LG9F ri"ˆhv85MDؿ/ p%{&i;EY2h.`žfĜA^`_j<'@[qrr +dXdm@3RqvKO@C/+(wYx1Z PF<~2WH0:( F8f<ғ?hAWERLa95h ,r+\ݒ-0fu$Fp{B?C:r4s9e.}ca: - 5I.>k>}!'\~p|Wq"! )Z0"[Q$!CdhEӺY_ubi n?̰MPܐ+fIn* +#S|2o#YogmT1[SFMLE\ v +.R6?Db&L fx +y,(OrJz`p*I9!+XNJ LcNy [XW +Wf遺Ljg0 wy+.٥ó ;o{XW*+pt'yjFKX<7s:()ÍwfqݘkmEr{yۦ * kz|FԢgrow 1(#ł?:2uإ3wl!ܵKB`)KHs0;CW1U}IJ-r`^p)u!BP {*s5fdims!4`?̈́Y1d_62`4Up `4…8Č0f[NDc{k>9QW,/@z0%k4B͞tK{>Ai\c8LG#2=.9HYL^4@#XPsNK,/p,G{c6Gf W[›!^v3Q7F +CW}jaR<+}""yTab㣳Fn#Y^w{7uẃj^t6rꭡe*容/d*jԗe_QHD&asߪuBŐM `Ř9[=ĕ'h8UbN(Iи^2bq [.OTX~{PfۯC+{lČ-3syt©g6ŘY}P_v{ cZ~{ĎFF ^Eseг"*H+! g?՛_ՇQʁ1# GԾu/2endstream +endobj +1634 0 obj << +/Type /Page +/Contents 1635 0 R +/Resources 1633 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1632 0 R +>> endobj +1636 0 obj << +/D [1634 0 R /XYZ 85.039 781.388 null] +>> endobj +462 0 obj << +/D [1634 0 R /XYZ 85.039 462.86 null] +>> endobj +1637 0 obj << +/D [1634 0 R /XYZ 85.039 439.542 null] +>> endobj +466 0 obj << +/D [1634 0 R /XYZ 85.039 187.299 null] +>> endobj +1638 0 obj << +/D [1634 0 R /XYZ 85.039 163.982 null] +>> endobj +470 0 obj << +/D [1634 0 R /XYZ 85.039 135.371 null] +>> endobj +1639 0 obj << +/D [1634 0 R /XYZ 85.039 114.776 null] +>> endobj +1633 0 obj << +/Font << /F65 1062 0 R /F35 940 0 R /F20 929 0 R /F15 943 0 R /F14 961 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1642 0 obj << +/Length 1710 +/Filter /FlateDecode +>> +stream +xڥY[6}ϯRӨ_xP2twaӾ1)r)0~ؖ[dұ#} 2@1F$ 20F??bL02،gy₍ggfO^M̠T)o|'ogGOfm5!Pi-/#ƈzHpWj*?O,Sb"-$KV@q$!1BJ`$0w:ЄdT*d;rAne %H0ZKhKsO"5E" k4Wz5+1-g0D#>k3,$:1MS9!%&#|qPX,j9;>,dJa)265(6d q9IIҼsAD-7l'uL623kƎW*,u&^?.x5s;C9>DDSGqxD `B 5՗FJ ;H9`d DhK#eڬ)c"e4_lvEʘH)BD)A֠? 1#ZPduP7ah.<8 +:r#C|m ܏U +҆ݕwcʀGTj1k:1BJ$5N68lMb kOS_ؑ*eXm+UJѭ-Lk7 +X|g`خvm}2p]0Tfs$x+ivL{@+S*!Ze;vdl7F #uy*KWD'K7 h1ynEaߎ7[bmҶmkO*)VlD'@mXm+QZ}T! +T +ؖviiNUy[ 2NXdPcH[q]F{gCܙ +9't^Yy;u BN<]2 C 3J" M1^Z@)R6ъ/]M1*PcfM-QFK+Dl7`Ǵ)}ᴞ?x;i> endobj +1643 0 obj << +/D [1641 0 R /XYZ 85.039 781.388 null] +>> endobj +474 0 obj << +/D [1641 0 R /XYZ 85.039 761.463 null] +>> endobj +1644 0 obj << +/D [1641 0 R /XYZ 85.039 741.337 null] +>> endobj +478 0 obj << +/D [1641 0 R /XYZ 85.039 698.106 null] +>> endobj +1645 0 obj << +/D [1641 0 R /XYZ 85.039 674.789 null] +>> endobj +482 0 obj << +/D [1641 0 R /XYZ 85.039 646.178 null] +>> endobj +1646 0 obj << +/D [1641 0 R /XYZ 85.039 625.583 null] +>> endobj +486 0 obj << +/D [1641 0 R /XYZ 85.039 579.625 null] +>> endobj +1647 0 obj << +/D [1641 0 R /XYZ 85.039 559.636 null] +>> endobj +490 0 obj << +/D [1641 0 R /XYZ 85.039 377.924 null] +>> endobj +1648 0 obj << +/D [1641 0 R /XYZ 85.039 356.931 null] +>> endobj +494 0 obj << +/D [1641 0 R /XYZ 85.039 356.931 null] +>> endobj +1649 0 obj << +/D [1641 0 R /XYZ 85.039 334.215 null] +>> endobj +498 0 obj << +/D [1641 0 R /XYZ 85.039 307.522 null] +>> endobj +1650 0 obj << +/D [1641 0 R /XYZ 85.039 284.806 null] +>> endobj +502 0 obj << +/D [1641 0 R /XYZ 85.039 214.477 null] +>> endobj +1651 0 obj << +/D [1641 0 R /XYZ 85.039 191.159 null] +>> endobj +506 0 obj << +/D [1641 0 R /XYZ 85.039 191.159 null] +>> endobj +1652 0 obj << +/D [1641 0 R /XYZ 85.039 170.768 null] +>> endobj +510 0 obj << +/D [1641 0 R /XYZ 85.039 144.075 null] +>> endobj +1653 0 obj << +/D [1641 0 R /XYZ 85.039 121.359 null] +>> endobj +1640 0 obj << +/Font << /F65 1062 0 R /F20 929 0 R /F15 943 0 R /F35 940 0 R /F36 947 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1656 0 obj << +/Length 2353 +/Filter /FlateDecode +>> +stream +xZKs7Wra* ^Ird@St +H&mū\y(-[*#Y6ODӷ'K5 +K:Ȓ`ӹT +4+!CW]F\"!]gHFҔJpM٢ݕ 5)Z2=IR6#*v'[; +pY9h ={Lc%RT%c,I8kv*6€6z$( 6 6ʑ"" 傭ur%iU[/l` 0<ȨKfx&m&,a~m3Ux^ku.D" .F&\ƶ`~hqgPޫ7JJ*CTu&8LRhaW7#T.qMYMnfbn]3Kcו䮙ݵkG-((2L42(h)g-@^(]&4-CZ'.P1]⁔h|9Iηww獅;#%hRTO="d\%|FuIتSv!|`QY!mh?Suw?3_ aaP•^hL9j\ԪrP<$P#5ecx#.;_eL}a +laE \-g6}p* HѶaEc#F/4>ҁN,ҨB}}ҁI='3$ɯIoO̕rW#uOVw.?}N98s`ksv` }\xΞPž^v<(t"$>)CSA &&dz؝q7?xkذ_zz颎{/3S@(X/ԛ'i9Ih/ӃnN'ut> endobj +1657 0 obj << +/D [1655 0 R /XYZ 85.039 781.388 null] +>> endobj +514 0 obj << +/D [1655 0 R /XYZ 85.039 735.239 null] +>> endobj +1658 0 obj << +/D [1655 0 R /XYZ 85.039 714.246 null] +>> endobj +518 0 obj << +/D [1655 0 R /XYZ 85.039 714.246 null] +>> endobj +1659 0 obj << +/D [1655 0 R /XYZ 85.039 691.53 null] +>> endobj +522 0 obj << +/D [1655 0 R /XYZ 85.039 659.727 null] +>> endobj +1660 0 obj << +/D [1655 0 R /XYZ 85.039 639.132 null] +>> endobj +526 0 obj << +/D [1655 0 R /XYZ 85.039 592.912 null] +>> endobj +1661 0 obj << +/D [1655 0 R /XYZ 85.039 569.595 null] +>> endobj +530 0 obj << +/D [1655 0 R /XYZ 85.039 540.984 null] +>> endobj +1662 0 obj << +/D [1655 0 R /XYZ 85.039 520.389 null] +>> endobj +534 0 obj << +/D [1655 0 R /XYZ 85.039 406.685 null] +>> endobj +1663 0 obj << +/D [1655 0 R /XYZ 85.039 386.696 null] +>> endobj +538 0 obj << +/D [1655 0 R /XYZ 85.039 272.73 null] +>> endobj +1664 0 obj << +/D [1655 0 R /XYZ 85.039 249.413 null] +>> endobj +542 0 obj << +/D [1655 0 R /XYZ 85.039 220.802 null] +>> endobj +1665 0 obj << +/D [1655 0 R /XYZ 85.039 200.207 null] +>> endobj +1654 0 obj << +/Font << /F65 1062 0 R /F15 943 0 R /F20 929 0 R /F35 940 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1668 0 obj << +/Length 2926 +/Filter /FlateDecode +>> +stream +xڽZmsF_uM徹IںML$[EGKQ$}N4&,XRNbON2+bOL +eI<O$#Nr`9Nd,86Xa,E/~:yu5=ZGi]˷o/77?e~,@Oblױ0|B57''1324$RD48AJ%T -25=6%?2*t2JL. +UQGՕq"2*䈾 B}_͡VHPD;NL##VCGĊ4"M+B)(2!- XA#I҅^|2&b:Cl6S[0RN))L ǀ[aMN-GRAT`:Q;oشk6\|K5|֥xKT5^vO3˽r9iTp8g Hi|֚XcZ5KlYn.|&IGNOff8\hu^g͎B`Oa|?nͬj(~ei_Rl=gtqw;(vw(=ʡZM(vB4>2(Wh[Aէ ]Ɗ -qH MO}1;&y4"IxyHX|#̟Q) ݊ti-~eqEYSRf"k A{ό8EVϧy~6!mE. ttʺkhl҉iE/;e)HK՚~K(Xd_q_fݎv 6S wRnVk[딒 }&.[1FR-#6}d@-xO\S]t:nv .+`ͲA%=dd.ThIziTt4@ ڴq-@UfP(6=mPzMOHl4`:MzzٚҶ.M[z>Go@3e=~+R +_ƽUo{#d9bs00-}݋b[M04ɐ&rIݰ#*}GRZB)=x$`jåȭm.yu:\ke Ts>%&}5bq*cf*7h(\mj<S ;͢lc|G 7NF :h)hX&7Ut^QBg0 W;~T7/Lr-LfZ' 7Ķ +d\lZo]11XC'<112ޘ,7b&nlK 2i/;aAYMOj98}cآZg[Q44/щ fj+4UąrKxtQnwD*q+OF3b4\?4qbY@qzy.d. T+9S"3(1mL&ZKyY;rܓ$,q3@PlV>g1Vs?g$4#1l&wࣾ _p6x/4}`w:?ubFLdT ^6顺?0>endstream +endobj +1667 0 obj << +/Type /Page +/Contents 1668 0 R +/Resources 1666 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1632 0 R +>> endobj +1669 0 obj << +/D [1667 0 R /XYZ 85.039 781.388 null] +>> endobj +546 0 obj << +/D [1667 0 R /XYZ 85.039 761.463 null] +>> endobj +1670 0 obj << +/D [1667 0 R /XYZ 85.039 741.337 null] +>> endobj +550 0 obj << +/D [1667 0 R /XYZ 85.039 626.197 null] +>> endobj +1671 0 obj << +/D [1667 0 R /XYZ 85.039 594.672 null] +>> endobj +554 0 obj << +/D [1667 0 R /XYZ 85.039 327.223 null] +>> endobj +1672 0 obj << +/D [1667 0 R /XYZ 85.039 306.027 null] +>> endobj +558 0 obj << +/D [1667 0 R /XYZ 85.039 209.064 null] +>> endobj +1673 0 obj << +/D [1667 0 R /XYZ 85.039 189.075 null] +>> endobj +562 0 obj << +/D [1667 0 R /XYZ 85.039 116.019 null] +>> endobj +1674 0 obj << +/D [1667 0 R /XYZ 85.039 96.03 null] +>> endobj +1666 0 obj << +/Font << /F65 1062 0 R /F20 929 0 R /F15 943 0 R /F14 961 0 R /F35 940 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1677 0 obj << +/Length 2490 +/Filter /FlateDecode +>> +stream +xZK ϯ-T%e䵽o8#5(M)>4^;JUrF_4/f6Lbu{,n` )bO4?^] ,W͔?zaK)-ck=x٫4_.~xyՊm evSX_.&tqL+韷jYќZЪ-61X& gV f9˴F5p.baut2ؒGbkD/˘Gbw(W&"h2PLd +$*wX}^jnXj {7o~;_(߭a`6KηfuܺΖĭ PA#s|<6n sW[\ u:rVz Vt@ͩmr&&͘0⼗J&ѸFN MMŝhږ֫1κڿ[?۩ܫܝx4?N)U=VG.Oۣ#Ɲ)hӏ3kOT)Zj{lkO?fȹgY0BqH߄1m5M`kx]PnAX*xP5|-7f*w 1Dl"v64mV#Ѿ^gBəw,@#FAİT2ɘ5 JO(_y >m&WoZ$z7f ,!2<@* iIkFhkXBQbgbK@0Dӧ9|)9-d+2e{쾒TO{?ѾW%\8=%p"\kO/Z=bșT*1:My"DW-ºJ?DC6ϋ4}Ei8 E{EkXW + - U5?η卷/Շ|M/o~$ `fvM`3f4N4-P`nhO3״,a(zW$&K  bʩĄxG/{,A=1R0#*.kM~OQ%xHR\' f hf\N&+o;S ,2eT䜚_2h~Ġ%Sfǚ_rEk~!4drUޗbIAm;,$3> endobj +1678 0 obj << +/D [1676 0 R /XYZ 85.039 781.388 null] +>> endobj +566 0 obj << +/D [1676 0 R /XYZ 85.039 761.463 null] +>> endobj +1679 0 obj << +/D [1676 0 R /XYZ 85.039 743.459 null] +>> endobj +570 0 obj << +/D [1676 0 R /XYZ 85.039 644.777 null] +>> endobj +1680 0 obj << +/D [1676 0 R /XYZ 85.039 624.182 null] +>> endobj +574 0 obj << +/D [1676 0 R /XYZ 85.039 551.126 null] +>> endobj +1681 0 obj << +/D [1676 0 R /XYZ 85.039 531.137 null] +>> endobj +578 0 obj << +/D [1676 0 R /XYZ 85.039 471.368 null] +>> endobj +1682 0 obj << +/D [1676 0 R /XYZ 85.039 450.375 null] +>> endobj +582 0 obj << +/D [1676 0 R /XYZ 85.039 311.046 null] +>> endobj +1683 0 obj << +/D [1676 0 R /XYZ 85.039 290.451 null] +>> endobj +586 0 obj << +/D [1676 0 R /XYZ 85.039 244.493 null] +>> endobj +1684 0 obj << +/D [1676 0 R /XYZ 85.039 224.504 null] +>> endobj +590 0 obj << +/D [1676 0 R /XYZ 85.039 176.163 null] +>> endobj +1685 0 obj << +/D [1676 0 R /XYZ 85.039 154.967 null] +>> endobj +594 0 obj << +/D [1676 0 R /XYZ 85.039 112.807 null] +>> endobj +1686 0 obj << +/D [1676 0 R /XYZ 85.039 92.212 null] +>> endobj +1675 0 obj << +/Font << /F65 1062 0 R /F20 929 0 R /F35 940 0 R /F15 943 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1689 0 obj << +/Length 1988 +/Filter /FlateDecode +>> +stream +xYmo_or$ 8>_,9_IMT"Zwfg)Q")9"A|i_fgfgY 900NSI2|;=Iؠf:md3pc6j8]wnzq; +Re0`<1oߝe2ibe",yO|pl2cl |9 oYўҩ+Js `:R[3H0)!p`f#h&G1EPewsU.RD*5 +$J℺axps毇z D"68zX00l`E1 +eG60_ G2 tAhB5-5`S[{B1V'r`oPIpiZ g~@o][cv $6ٲWC;K*P⸚i:{&ٺETw[J#)"_UQ*! %FS+xdB2[f h +3 PwjܚHx*"|^q U'MJ,_dY4\_Sz36chX,=?"=E#$ݤ*KiЍ)(4ZE^XȘqxM)8ĞngXg}X3F/ipAY2Cx/L #({ g>ޤe'^  +t7wX5T N8oZEC^_[EI4ukӴWt1&rj 1K-Ɛ1u\1XKpA)WW8Z51_w*ZOokdlN[41l|B[On:M5nݔh$trj;#VDJC]TS🦛kXzQ9ͱ "(jmܢv{k0˰<@$}NB&zZml%VhKP)tR&P@H(yш(.\L;XEY/hGz|2,hqTߺ=Fe9^6hR%,IêTCa"oˢ*6۰BL^UQ;8hc}&*|zrٓLvn\4=!!qx̕_mu +q|*6xAE%T.IH̱L+\8A7[_I[ܸxw1s_ TYz+l0kXq,V$@SX> endobj +1690 0 obj << +/D [1688 0 R /XYZ 85.039 781.388 null] +>> endobj +598 0 obj << +/D [1688 0 R /XYZ 85.039 761.463 null] +>> endobj +1691 0 obj << +/D [1688 0 R /XYZ 85.039 741.337 null] +>> endobj +602 0 obj << +/D [1688 0 R /XYZ 85.039 410.584 null] +>> endobj +1692 0 obj << +/D [1688 0 R /XYZ 85.039 387.267 null] +>> endobj +606 0 obj << +/D [1688 0 R /XYZ 85.039 344.5 null] +>> endobj +1693 0 obj << +/D [1688 0 R /XYZ 85.039 324.512 null] +>> endobj +610 0 obj << +/D [1688 0 R /XYZ 85.039 294.83 null] +>> endobj +1694 0 obj << +/D [1688 0 R /XYZ 85.039 272.114 null] +>> endobj +614 0 obj << +/D [1688 0 R /XYZ 85.039 211.171 null] +>> endobj +1695 0 obj << +/D [1688 0 R /XYZ 85.039 178.849 null] +>> endobj +618 0 obj << +/D [1688 0 R /XYZ 85.039 124.401 null] +>> endobj +1696 0 obj << +/D [1688 0 R /XYZ 85.039 103.205 null] +>> endobj +1687 0 obj << +/Font << /F65 1062 0 R /F20 929 0 R /F15 943 0 R /F36 947 0 R /F35 940 0 R /F14 961 0 R /F11 968 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1700 0 obj << +/Length 2343 +/Filter /FlateDecode +>> +stream +xZr8+ U/>zIzf{[JgH-:tExA;T,<8I)B󼠄|0Kp3jK YzfO&4%eZWH"$6xz'%Y,HV_^2o_Y|X6uҶ7Rq~7oP0R"g7w517 +KZI\Vz2Pl˔ThJ"ɂ&R4~9mX¢y(FIA!` iB% ҂TAh06*)i1zNm1g'4c$C:3MɻDU໹>˳ m94OB  '3¾*g=‡j`yr\[#%v,,I"g@QB0Ox6*47q4"#,; F|l$(Nm1g}dF(?Xm Nu[#ksȖH]nxgcu8tjQ9sFr&"rv DN r^') 紘3A\s>w4ɒ\F@4OZ!uWU]@H&O6(u+:,Gju?kƳaa<}Bk+ !up}W!{ڡ'=ɱb,%Yٿ@24]Uf@VƣWjRxH`(#"t D RWK_r͹P޽dKwHRSa6r.9>sFo&M_f δc(zTT OA V +m6Av7Vz YRm>m_~Q2Q[Fm^)Kԧ=4)}XIE_aՠ',@H yzʑuf:N(6a -`&q 8xvXG'GUO}XioVWoPbZaNaP) Oӊ ~Ytt-fĎ2 zc/: Ϋ> endobj +1701 0 obj << +/D [1699 0 R /XYZ 85.039 781.388 null] +>> endobj +622 0 obj << +/D [1699 0 R /XYZ 85.039 761.463 null] +>> endobj +1702 0 obj << +/D [1699 0 R /XYZ 85.039 741.337 null] +>> endobj +626 0 obj << +/D [1699 0 R /XYZ 85.039 616.811 null] +>> endobj +1703 0 obj << +/D [1699 0 R /XYZ 85.039 594.095 null] +>> endobj +630 0 obj << +/D [1699 0 R /XYZ 85.039 466.842 null] +>> endobj +1704 0 obj << +/D [1699 0 R /XYZ 85.039 446.251 null] +>> endobj +634 0 obj << +/D [1699 0 R /XYZ 85.039 376.993 null] +>> endobj +1705 0 obj << +/D [1699 0 R /XYZ 85.039 356.398 null] +>> endobj +638 0 obj << +/D [1699 0 R /XYZ 85.039 177.675 null] +>> endobj +1706 0 obj << +/D [1699 0 R /XYZ 85.039 154.959 null] +>> endobj +1698 0 obj << +/Font << /F65 1062 0 R /F20 929 0 R /F15 943 0 R /F35 940 0 R /F14 961 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1709 0 obj << +/Length 2316 +/Filter /FlateDecode +>> +stream +xڽZMs8W + 沕I<O8YYK#іdiǙ_?/IPU[)h<$ $j"3,,/~Ab ߿ >!)&Gctit&e\/7|uum_fyv[Jz3*|k<^\6e}1# +)a1a𔡔 B(J HA!1q'B$"!ߕwdr+{~3%\ Hg` [vZ͖ +D85l0av;#I%{U7zA*_)ݔfIѯ|hCwiFG/%Xg!Y` 6N+%7zO!vHAKg0F.!.[3 +Pa!@!`{jw?E A2Q^(Y~&| ԅxu Rb tĨ2ءzm~ܳAK +rk0]7*BnW/SU,)0\85lLS՗"w+{k{oxӿ(Kct]W"`g+a}eݾY2osޗA fDZeڴ$xކ <|}, +w\\[Prs[W9.e;W{ڌn2lkmu71wʼ[֯dmGiL" fxrcE.{ eҴ%(#JYhpa GX:fiwWo)ndb׭tܶ'4.CvoTILGץx`&ַc2fs ũE@nsq +rw0(I:iii'n B҉t (t2M46w}M%S㺓&?CV\PV+S#-&%ᇮ;Zꛀ\Sá>f32*^9H盻|z˵® *bΧ)K?įLB#ݦLs];ň +@tL̩1q@A8\95=esy;dDJx8vuM9Y-LG:OS`88^ LIM P$tRmoW{[h[}5X2r/7pۊs,CFj7]NHy9[#@;C׷ufA>%<1Z +Bh^['r$P$H;yYON@_XsI>nlzpuonݺ{G)!dաnl8952?Go-r@ Hf@&N 8DdZSULG96ct +Ⱦåp9Of6O: i7zH% C: +'P!K5)K:a<7M~w> endobj +1710 0 obj << +/D [1708 0 R /XYZ 85.039 781.388 null] +>> endobj +642 0 obj << +/D [1708 0 R /XYZ 85.039 761.463 null] +>> endobj +1711 0 obj << +/D [1708 0 R /XYZ 85.039 736.911 null] +>> endobj +646 0 obj << +/D [1708 0 R /XYZ 85.039 680.8 null] +>> endobj +1712 0 obj << +/D [1708 0 R /XYZ 85.039 659.806 null] +>> endobj +650 0 obj << +/D [1708 0 R /XYZ 85.039 601.166 null] +>> endobj +1713 0 obj << +/D [1708 0 R /XYZ 85.039 581.178 null] +>> endobj +654 0 obj << +/D [1708 0 R /XYZ 85.039 440.375 null] +>> endobj +1714 0 obj << +/D [1708 0 R /XYZ 85.039 420.387 null] +>> endobj +658 0 obj << +/D [1708 0 R /XYZ 85.039 333.519 null] +>> endobj +1715 0 obj << +/D [1708 0 R /XYZ 85.039 312.526 null] +>> endobj +662 0 obj << +/D [1708 0 R /XYZ 85.039 281.59 null] +>> endobj +1716 0 obj << +/D [1708 0 R /XYZ 85.039 260.996 null] +>> endobj +666 0 obj << +/D [1708 0 R /XYZ 85.039 217.765 null] +>> endobj +1717 0 obj << +/D [1708 0 R /XYZ 85.039 195.049 null] +>> endobj +1707 0 obj << +/Font << /F65 1062 0 R /F20 929 0 R /F15 943 0 R /F35 940 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1720 0 obj << +/Length 2244 +/Filter /FlateDecode +>> +stream +xڵYYo8~`[\2NJ'10۱Xtu,Ve[<7>o뿮~Lif۰m6kdcdVߠm2Ӈ0em~6{ي9X™V˙Z̲]TY\=di+=[4 n7_bW4 !a&uH9_'yFa +myMִĖ;s8NGb0O[$f׈2vVTKx2):x%{w1R/_-.,&hs05ܷsQ%;?^|(yX >d1[x 8R@aSJ4mzp<>mѸak"pmz4 k!&;o}Q + 攑ӧepaI${A/%4u;ma}"ж&B:2gTH"'h]ٖApj>Q-@` E4M +AN$=3Ai3j{D\}\z/H"^!z,ޡiz[dwwm!*%i1L p-*L-%#P7D t G!}, #H-ꠐB@~̲QW$~koE9nxo꣊ ~;:E <C1d7HCf}T[D!-2 on"tpODW\Y+ط^n6VT @4ō{F昘m̄ +T/ߡ̪4bJ4sM,w՞w1ͽUm{u`dQA :,`1ռ޴ZD㦫:~hl8L4MpylY tdZrl9jAdO 0T 9AGF\ݵ)@-O 4o^@ѰhLy]ŏ|FZ&5 8 *2 B(`HgQQMM+TVKZin 4/V,=n.UN= +z_w >LBȨ)R͖V!%ӯ+s},T:I72uh:mtrMa}6ѷˎ=)`uh]v$o!},J?(4b@QP[wF [ZQ=NFqAHfB;qӿBA\G$zi&{U^8;9¡C, l 3YjѝՅQ-Q/:j:J~UxzT+ZA>6SttTΙ~NbWA}k72]{d:qz +0|c?R{\SAa[#Gxps5ԗ|cP$lendstream +endobj +1719 0 obj << +/Type /Page +/Contents 1720 0 R +/Resources 1718 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1697 0 R +>> endobj +1721 0 obj << +/D [1719 0 R /XYZ 85.039 781.388 null] +>> endobj +670 0 obj << +/D [1719 0 R /XYZ 85.039 761.463 null] +>> endobj +1722 0 obj << +/D [1719 0 R /XYZ 85.039 736.911 null] +>> endobj +674 0 obj << +/D [1719 0 R /XYZ 85.039 736.911 null] +>> endobj +1723 0 obj << +/D [1719 0 R /XYZ 85.039 718.708 null] +>> endobj +678 0 obj << +/D [1719 0 R /XYZ 85.039 522.193 null] +>> endobj +1724 0 obj << +/D [1719 0 R /XYZ 85.039 503.321 null] +>> endobj +1718 0 obj << +/Font << /F65 1062 0 R /F20 929 0 R /F15 943 0 R /F36 947 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1727 0 obj << +/Length 2623 +/Filter /FlateDecode +>> +stream +xڥZYsF~ׯD`p*[r($H< dbE4Jѿ>fp]3=_=̆rzV,Pa8Kv t!5B,Z4Y]GߛI[Dv4[=5xlͺB)eEbк_=?\[Xrêf[,"?ra WB +U}{o}35$Bᅪ/[2J%Y³]r|9iYn{c򎧾eƅ_ɷn(^Ua))˫;:",$Ju9*ۥȥUWZ`<,*py[|)4CRfpVz3>&%9Љpm2Z4(Jy^Q|GA4,KK϶RPHCC@7౾|N[-L]S&řTO?JpYWNhO$8.pv>҇n[x90#OJ W\}@ʱA ޣޕ9LM9!f)azgĜ+nM[~{F% %#eAX|GAmOeF%)p2E<@Q[UL4IH߉%%kq I ~yRѴNv(1"|HA6?N<p9KhӀF`M|Ö)#7EU1|0/'`!*UnLٕƐ5l&RDTڐYnЩ ``V!Zyͤ1/I"_{U 8!X5odvm[6\Ugx d z}i=t 鑔Iq,єrq`@Y[xAW6JA㟡?@:mtO.:)= VsjJHD] +~9 Dhp7a:̩U1kdʜCXyMg]q T}Zۡ,괜TmMFoxk +/tLHP@ qG@X]uLw#Y f_effLk?C`51x&0YS07_Z[m'W&Tn:6 +Yލj%z}scK,MPzm'GzWc}d#?&9R󬟋dєG^ K[d3:G"E0qNu' +dWHq~$Wp͕ +y(EM0+kzRhWm&XW?roT+8L guTWwbnڡO Z4%ws%%PbǠzl #3N!kьZW'HʹG=b[Vw 4ktNEбbrĶ:ywn1|X52L f#:2"<ܝU<nz?(BEsV_ + aFh JXDŽ )N٫h1Ƣt +Sak:NHprD"^E,ӗJpXvW8sÑDiODobR\zz#39eRg +CmpHјȋ`\y|IS^[+SC9o;ªNv:pXc;‰IH G/cڐP.|_9]4DD,{%†>t`GBB(A*S> endobj +1728 0 obj << +/D [1726 0 R /XYZ 85.039 781.388 null] +>> endobj +682 0 obj << +/D [1726 0 R /XYZ 85.039 637.406 null] +>> endobj +1729 0 obj << +/D [1726 0 R /XYZ 85.039 616.413 null] +>> endobj +686 0 obj << +/D [1726 0 R /XYZ 85.039 408.163 null] +>> endobj +1730 0 obj << +/D [1726 0 R /XYZ 85.039 381.549 null] +>> endobj +690 0 obj << +/D [1726 0 R /XYZ 85.039 276.284 null] +>> endobj +1731 0 obj << +/D [1726 0 R /XYZ 85.039 258.018 null] +>> endobj +694 0 obj << +/D [1726 0 R /XYZ 85.039 258.018 null] +>> endobj +1732 0 obj << +/D [1726 0 R /XYZ 85.039 237.423 null] +>> endobj +698 0 obj << +/D [1726 0 R /XYZ 85.039 108.048 null] +>> endobj +1733 0 obj << +/D [1726 0 R /XYZ 85.039 90.181 null] +>> endobj +1725 0 obj << +/Font << /F65 1062 0 R /F36 947 0 R /F20 929 0 R /F15 943 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1736 0 obj << +/Length 2455 +/Filter /FlateDecode +>> +stream +x[r8}Wm;}rYRjvjv&QŖ2M$hTblvn4D(e#XF#:WΎȼIؼV#FINڏ"RN2!8';ϧחW/o̪Cc?~(}cJ\~8DI?MUrՕFZiè&VYDQYՁӠq"FX$cD׉58c0s!G6o`Ze4coI@Q${o_wn[%[E^Wz^?W?0i=^=^C3v7-1r "/mZ%`uy]2[2ˉQvdQdlXoDhXo +ۤ̉!a|mo:'F|Q)b\PpAǀ&f~0G:xܭW ڮbN +ծ8B)mZ4#y3'R)&&RFgQ^uۮ$)3<p¤`3Wٿ_z06}eٔ 3N_-/unt MiMaB4u7 [nCU"eFe]^`Ԅ[vέ,"KbM V>Ԑy"o|(G*s]M]DH7'Rt3b|ZW_s8wHZs b`!0xqmǷ}Xng!~=o6>7݄wgex~_FyqTߝb'ݥcrwOx +npEXn>P+ &cpeF(S܊?lP/Ԅz?NG;Y+ u(y#C ]q ]hP MMaZC%ɦFXmds~sBarc& :kEۼJ!TxoOظ6ny|O &pV7._5aYlM=)[qNdj8Ie[7Afv@k蜧('\l3QϫoPZ +K2{2f+?°W8Z59kx-qre< 8kp&Ce)0k0q7^}脊hO;%27ވ~Õҥ6`['>exe08p Ndpgp.$Jǁyaզ.3bH$V=S4 5G*Xih9ϭ9[toximӿHlX=d4E$r[\nZS2\} 3imD`РXv]0u, ! D$EH썞F*G$HXE(0^w.1>q:i+f{ŕ8[E5CU7:gaC,F_ӎ#M$,f$\4G|k QM$4'ƲD~Ɇ_OzDS@AlX^G`4(xw,Q9r#$~ va7fo +h{{`1U7 +˳7b%mhؾo,_o4*F9bMoo6LMT!Ibrh&E*"FMoo,*Faynq3i#L3W Û_!:@Ph V; ,J`QhN`R urE|լ%3 >f`K_q97>#JsX~6u?S0}@W#T4" 4Yh +""KYYk 2{sF(cKG'!J7ŵeY$S[0HeÉ2"mWBgqyaqV+ +͉+W +X\7ТIW2ހR-),6򃾩"rMYDXhXX)UŠBs +ńV%(,/k SHutU:DKՖ^ +:\IJZѰR@I+JZQX^Z!7ދbu> endobj +1737 0 obj << +/D [1735 0 R /XYZ 85.039 781.388 null] +>> endobj +702 0 obj << +/D [1735 0 R /XYZ 85.039 610.569 null] +>> endobj +1738 0 obj << +/D [1735 0 R /XYZ 85.039 592.303 null] +>> endobj +706 0 obj << +/D [1735 0 R /XYZ 85.039 534.269 null] +>> endobj +1739 0 obj << +/D [1735 0 R /XYZ 85.039 515.796 null] +>> endobj +710 0 obj << +/D [1735 0 R /XYZ 85.039 471.311 null] +>> endobj +1740 0 obj << +/D [1735 0 R /XYZ 85.039 450.716 null] +>> endobj +714 0 obj << +/D [1735 0 R /XYZ 85.039 394.804 null] +>> endobj +1741 0 obj << +/D [1735 0 R /XYZ 85.039 376.33 null] +>> endobj +1734 0 obj << +/Font << /F65 1062 0 R /F20 929 0 R /F15 943 0 R /F35 940 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1744 0 obj << +/Length 3124 +/Filter /FlateDecode +>> +stream +xڭZmF>ʗQݧlrL"% c<&pfGWo 8F#]OWUW E؎JQ*Yg"5+|FAa;@x@vY7릭Ӭ$Lw7X {EqXGT+/F:-0+nlQ]le ]B_ #Ibip7zSq t N^;HKuOٱVoqo&W/*ɇeWJ|MNY] }-]0TdF\qQ6o˳Aќ6瓌ee `A Ƴ +f\Vl@9VoF8 t"$KG ^*b.S}Kd0#S%Byc\6$`s[m\ltK9܏v˜[dM;TGR=w#Uk{^r-Nf6ݢ klTHLPG&_Wm*:,qd!i!pEaUh.(X(ʎH2Q\'Ce%H>:D!ng^ Utq8@feHpCI!;1:|U @cUbq0Wm]h(]sV;O]Ŋ ?SS~/A'p_,e5g +g 4ε pdJ#=hs +$= $Bt 91IH ~5_:="?1?Rٞ{ h$!C Ҙ$HM^歉~%?7Ǔ6֓v+u4305xfitF&陝۔ϯx'֯ +D3 5j&a3WC׌V-ubhr  (DcDלb]@uB~ŷŗZ}ݭÚTLL5 &7OȬ:?.YeH auǺ7I)Vt Ķgn]>sMtgʙ:s_g=tuWᐒe: zLĆ)Uͣ|JGNա,ΨpOSGJ2'>6wľW.h|137y>TfZl֗?`ygPHBM +YN2!F;v}G!DT>ҝn`b;NG)quM\'P?uNJ)$\2.`T:TL`/<^{(w65h.JE:Wy<'ӭo}jҦT9){y9⪳\9gU':y:鬟b#)2)1@$BRDsqyg%s|p>Nr($!*Yd8\2isrQsYZ$m<&`{ҍfݚ&4O u/0n|_H|kV]7`ϴVmsw?*RSQUp"GHQ[AP( 73Rɪ ?"b\yDl'W:w{pHZ_t*>Ntju1o +}RenaQ_nق+ Jц4;%FM<;jZpT_kI("2L`,NH}vc-~KV'peV9bzu0kQޭTP#+9 χԣ_77ීxώ&bl%ʛVZKMnwX@g1r_F>Y늄kn֌ jhW`WQHАEך^v \ɣ;r^r zLFJ JGODv(s< +zôM[~(8Zyg;0Kȩ qO!$Q+(k-C~~l+` IJUVb ikV pڡzy+E 7`aBZWJ@aw E2χich cy*a+f zМb QJ] 2dFqsUmFEt3`tڰM7c~A灕VbS +پ:Ň{~x{/#uE$` ۻ` yZgǑ?;̷z'[ IÂh]U5])X-mb y/sU˴{FXFүQ-RϮ/+dZSVZ)=JSz@׎UiGֻ-0 +9n$G/'[qWR7ar[ 2>Љ8ı`{Ԫ_k?wW*`H5itpKwc;NXu'Zr L1j#oYכ ZΧB#<31J×jiP5J^*w:: erLQ=&A k~h%pJ>]Yh3HCzg_@)OuQ-0t|@s1Wxl.Rh +2YSD:G]9+ .5'DK%%Oο +/ +ARB/rݺF$O%2\„? 4zE Zk#,OVWȏvW bM7UpOKux}NG]ߐziwiTVQg,:ۉ9z9\t߲AyʀO.5:Ol2 zF;?iaRwz*˱2=t:n<7@9b-1 /N5~3*=;;hM9qWA(>`/P23gendstream +endobj +1743 0 obj << +/Type /Page +/Contents 1744 0 R +/Resources 1742 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1749 0 R +>> endobj +1745 0 obj << +/D [1743 0 R /XYZ 85.039 781.388 null] +>> endobj +718 0 obj << +/D [1743 0 R /XYZ 85.039 761.463 null] +>> endobj +1002 0 obj << +/D [1743 0 R /XYZ 85.039 667.044 null] +>> endobj +722 0 obj << +/D [1743 0 R /XYZ 85.039 667.044 null] +>> endobj +1746 0 obj << +/D [1743 0 R /XYZ 85.039 642.326 null] +>> endobj +726 0 obj << +/D [1743 0 R /XYZ 85.039 583.118 null] +>> endobj +1747 0 obj << +/D [1743 0 R /XYZ 85.039 553.714 null] +>> endobj +730 0 obj << +/D [1743 0 R /XYZ 85.039 352.231 null] +>> endobj +1748 0 obj << +/D [1743 0 R /XYZ 85.039 324.708 null] +>> endobj +1742 0 obj << +/Font << /F20 929 0 R /F15 943 0 R /F36 947 0 R /F14 961 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1752 0 obj << +/Length 2945 +/Filter /FlateDecode +>> +stream +xڭioF/!9ëYWXh(D*"e7-3CR<"s7޼yȝ8N"vD< #Q4YlO-x*5`'OرOzߖ̗X>}3|; !,0uzo^ͧ3׺z#BO.Hǧ_~s&Kc8C۱]ޞ!/oNOk99U}Ed[s^lXNB߱}G|ϷVgxX d[˴\]U_wǰYgSd 9s1m^a.d_kEV(nkҥb#1aau(0y}jG(|Pf' +;F9]ؚL6}(yH]?laU,ۛp]w0~Xd։.Sݤjj#9elo_Gi.oe&~y6z +窱FPd;xz{R˩>9gͰpcAjn;JJMfaVCGm?!=PetDaJ%{P /.:|Rez-@ F^k_4~Tke9Ba^fɧ^lU1Ӽ,T]20d=.(yJspۿ:# 0F0˚ĮxH2r7"n_&``56#_ %D=|ysb  aj#;a_]]]yܖID/].ݯ5u~=-͈eKZk&xwڮPp }hfW8k ڐʋPܦv@;)kجGICOJIf \7!Lac˰E|IaəV˖jE-SwJ|J)еΌs@@r@ yC8Ni86Ml/El{l3>T؍'DFGG)Q/'V`qshr8U`.Eg͂vEQ|DMnQOT.-g]#9Ǧ*6i00YNoo@!{aCH(@LE .r9W0:W 뜂A\΍R:7JYtc̖2MIި F5k)7~$"EWBi9p#m%RN32˨FnC!CcaLSi9a釡Cuw!9`j) kQ.6C\;󮗅/3Q !L(u +> endobj +1753 0 obj << +/D [1751 0 R /XYZ 85.039 781.388 null] +>> endobj +1754 0 obj << +/D [1751 0 R /XYZ 85.039 417.956 null] +>> endobj +1755 0 obj << +/D [1751 0 R /XYZ 85.039 377.915 null] +>> endobj +1756 0 obj << +/D [1751 0 R /XYZ 85.039 350.816 null] +>> endobj +1757 0 obj << +/D [1751 0 R /XYZ 85.039 337.267 null] +>> endobj +1758 0 obj << +/D [1751 0 R /XYZ 85.039 323.718 null] +>> endobj +1759 0 obj << +/D [1751 0 R /XYZ 85.039 146.47 null] +>> endobj +1760 0 obj << +/D [1751 0 R /XYZ 85.039 131.709 null] +>> endobj +1761 0 obj << +/D [1751 0 R /XYZ 85.039 118.16 null] +>> endobj +1750 0 obj << +/Font << /F65 1062 0 R /F36 947 0 R /F15 943 0 R /F11 968 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1764 0 obj << +/Length 2959 +/Filter /FlateDecode +>> +stream +xڥZmo_ow^DS*"(qe".H)!0<󲳣 ٓ7-7Ctp_YGXyweK$i4WW/b[fdEն7=ߝәPNgyhxysxUY?\bISfL\lyrY9'om1uGfxpgOaDYEmiAo|4&9t6 < K_Fd# 5F3n*lO$GBW Ov^z1zy[q|}1&?uB Ux\&Z$DӠ !^<+L+++nAQTkiK\%e'YL%6L%q]ڱgz&`_.!b|VO-(v%y{!s#C셸cN7qRIYB BmWb"JJaF*Cz9?e㘊@>֜Lj'0umu /Ǫ9B;I856|bzυH*"C傪0I^b<:>ToڕN U T*!m S7(-4&dzEKNt%NҦpsD:ȑ<ӊW0!L8{A)8YJx,g )N$:4ug\+)Ei3B 2-n,!P)ibTAA8ɥn 公{*eyC&ݻt3sҊ* jN ypP43O +O?) ABO8BYb2)F~Ӿ58ipʺB$Rƀam'-u}T͢= +ga^%:$9 +>A85~'pފouۉ+^܅o [Uϙ3_Kt>It s |}~i$h|8`xB}CAJ_ tLs 3p=ftk/yL{ F}A*!0..p:,XYv +n  < ۾^- `RΕgy|-MW +Nop.O /cQ!!|W#VH/Vh5sTE5"7wzjxrcsR<\'1,E;wx r"3 +g,"˚}ev^H|V_,^@]9AG8i8_`.֑]#dϊWgA<% 64n',߼%Kq\koPha,~w+1@` Y[j޴׃P[ *%%_Yk08V`nHp%l0Rh"@qP%$sC|nCel^O"·d_i]`U;]l%{mۻ~[nn>bצ=I42B 8'jE+ȕ}s.GJd#~AnOQ(.C,T)qҎ29|A2Y݊[UilG&.䵸VƦxW2eTa{J*mmNfN(?1}hF<ɋLBWNWy p֕FSFs~<ٷF=X=~Տ{K5Rوp …s?=/LkHć=) ?Cendstream +endobj +1763 0 obj << +/Type /Page +/Contents 1764 0 R +/Resources 1762 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1749 0 R +>> endobj +1765 0 obj << +/D [1763 0 R /XYZ 85.039 781.388 null] +>> endobj +734 0 obj << +/D [1763 0 R /XYZ 85.039 650.202 null] +>> endobj +1766 0 obj << +/D [1763 0 R /XYZ 85.039 621.404 null] +>> endobj +738 0 obj << +/D [1763 0 R /XYZ 85.039 591.638 null] +>> endobj +1767 0 obj << +/D [1763 0 R /XYZ 85.039 562.043 null] +>> endobj +1762 0 obj << +/Font << /F65 1062 0 R /F15 943 0 R /F20 929 0 R /F14 961 0 R /F36 947 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1770 0 obj << +/Length 3868 +/Filter /FlateDecode +>> +stream +xڭks6{~3SzP~6v\37JV\IN%axv6HAYYDe{"ˋ^<g@de[}{ Ƕb;^[<|o|yK<_a|,/n?^W ^]|| +  #?ٖGhۖOg+OgiPZ#o^`|㸖縋з-Vߝ|_SndmRK/<-f𷗗7[A -'r+%&e!jAX|KJge3Mԝ<2yO_/ˇ11TuyԇRMlA]ٮ#~aV# NвxL1=H{W}I0e4VSC8yT߻ހ,fI.7&%6MUS/UV]Mϋ*)](Ri]klec{U .V +I鮍֏ UԘ . Ycu,ڎǤaڗsVFy(>IS}I$d%eKNk{SPtYIB&uc,v#+XpN. D߃,M-\/?^} {%Eڗ%Jଡ଼ag(MYwW˽=</H^:f\Bqc+]"Mv<5c܍5Ga +sB49w"]6 04*Ƀ뇐5 s|JƒƵ2QnQ8!HqIs`BqTfcȣixeT3ƑBcⶀM=6`pIì &ɍ Lp@SMd!=C/ۗdrb]ʡk2I.4C-QRleIT̹vhEaN3oEE`^;m/q{@32IPe@o^Lz|ؚF"f#t:5' +(VaOpͰ 7j&+V ,em[)[QNl̡0]K7SVρ'E|=MB@ߴYBj\" _Lrט_VvɓA>"ј0 3 ll>d+@큐&: +87P +sBd*A9C% K* +P3lC*:3- ,籍#\QѪ00Yx +`"HA< YhO;h;,˼Hpt3pmS Td}OGiDC |V\,`϶%dbϘ0a.{;q$ݐkL[J}zyK.ܶ2Br pgm^P÷z2y1?Iб= kPAwm\; K$i\] )P LȴQd)ۛ\3Ǩh\}<׶\4׸\RMc=<\3 *ȹz =`\p}rllUeh:I}l蠃h8TR{.D73ݪrF +vR#3wC#SMfO-jklЏ l8C习:cK~KA 5 +Y%0A 04ϰ,7^xQlvjer"?qʇm睆Y5íXt5wek:;1lqM A])#WG'OpUԡW +",wPQncXŘ +.ʩLIismLx s\Œ>i;A:K +s:>*(NMV-o.DVm@fAhM7 !a7? + XH>쑠[' R0/4GI'^GvK}QVx_&߇R=%opn Ae + _?zkiF"0`;k7e$)mS%e26K +g,771 `}&['[|fy0fQ<ZcR"SpDf/i$A) 荕LzM9 P2v5  +V:Ӓ ͇^NŲȿ([(-uҒxW +K=clz*D3l&)@sʜ"٧7LA˱ D~,fxC+9Uy^s?X~5j|6As8G|R:i_H%;!A֋x'`TzbGGpӍ +63LX5mg=bfp_7nVoP$ i7DE 軧`Lf U&c.Ѡ%Pͻދ}v1d;qC+Nϴ{WVWz@.sϔ8̉Mq} +lVd 4Q۵@O̵ˍgt ixY ["~Z;c.‰jG@ǝM im]6eTJ'U\F2xC-{j6$\*N@ +9L +UAOy8hk|J-(-ՙy+yK1H8m1 9 YwS +__:\RcQ׸Q +ֿ眄7k7ӕU& { w Nkh > endobj +1771 0 obj << +/D [1769 0 R /XYZ 85.039 781.388 null] +>> endobj +1768 0 obj << +/Font << /F65 1062 0 R /F36 947 0 R /F15 943 0 R /F14 961 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1774 0 obj << +/Length 723 +/Filter /FlateDecode +>> +stream +xڥUMs0+8JqtR7MuҘ0`Ԇp2ɯ'vsxlVoWo?-#Hsb;$WQdg;K\Zrp <>} -El'7}$g_gqR "7 #t$}?![X]-ǕjqI-fߖCrm͓) ?s\ő ; +Wzk-|vj[H-*(mZp-|x +m!{l+vtf>!T^B\Z-%F~ 郕ᾴGꦆ*`tx![! -,ڂo_(Ͼ+:吨3{Ь)#`0 Wb#VZ`}|0I0$_d&7Gr"zB cʌݑLc8]3v ,h9ͱT8S}OUfL28&Ֆ)2a'b-SÛa<W¥G:8)1="a"Ą]@QFs>NH!N^|QXWVѳƑ-"IiL!7}I63c\\]` @焭!C׷7 @)LitAdY_pAHtEl0zWߴgብfC#@IO,'b܋O=|zN ⑊OG{!j}+޿pendstream +endobj +1773 0 obj << +/Type /Page +/Contents 1774 0 R +/Resources 1772 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1749 0 R +>> endobj +1775 0 obj << +/D [1773 0 R /XYZ 85.039 781.388 null] +>> endobj +1772 0 obj << +/Font << /F65 1062 0 R /F15 943 0 R /F14 961 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1778 0 obj << +/Length 2123 +/Filter /FlateDecode +>> +stream +xڵXߏ ~_aKhaK-M]C0kɶP[r$9?~,-Xϐ!HMIRi:Y_y q޿RF"7 +C0g;} Qcc +2o^qLR(C7 2(5E,QOgA;%]uw?^]v9h#o27HݍzwWx._skx7Utnx.5:ɰW*(ϝ{W~&I^-9 +Ʌ˩:D822h<?q*&5,?!뉳 Qhai+vl&xFQDXa+yiUHH9v [x8V׹ 5~rɁ}ZӾBMѴn +bhd\j3htЏzG:*gzG еqr_y +8R] GԟP\/@=}Y}×>|U|?Y_yX +ld5͈JYx/~^޾3 +&"|S,efeInQnF3CU61E@a~ N;CwAY\JϷiD+2z%aimrtf}?mvգ14L.,LNSDN3ɱ9]BnioF.~_ +yrY'>XieBn){c=X|:fMa:/" RG)q +#=yY4NB8nƚ2Y7+.l9q:{gu}{6~2`z0)hv\Rr Ae{l1lK C]IIh!>hX-k& 8~̇nۈ\ F@ +F|ꩱ?Hzؽ> endobj +1779 0 obj << +/D [1777 0 R /XYZ 85.039 781.388 null] +>> endobj +742 0 obj << +/D [1777 0 R /XYZ 85.039 761.463 null] +>> endobj +1003 0 obj << +/D [1777 0 R /XYZ 85.039 671.062 null] +>> endobj +746 0 obj << +/D [1777 0 R /XYZ 85.039 671.062 null] +>> endobj +1780 0 obj << +/D [1777 0 R /XYZ 85.039 642.326 null] +>> endobj +1776 0 obj << +/Font << /F20 929 0 R /F15 943 0 R /F36 947 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1783 0 obj << +/Length 3445 +/Filter /FlateDecode +>> +stream +xڭ]s۸ݿBo3C|t\kikgڙ$ԑP@J}$X,{ +gY*fY*gU0_B'q  ;H#?Icap(Ej4 Wa4K؏U<{X"Ia[^/Ty_ U/zޔ~"p`2*i1a JO~Q!!\\Gjd^^|G_/% `שu Dl/(,#b?7LGz>$΍-ͦ ak5Oޮ +σKB8ׯs%Vs;>~qI{]{25< [خbKW Zv[KѢ@{D&a|v۽Dg'~`- UWA1*kg9|voA<ݙr=hQ_A@ICfV4Vş-`d5o1quW6(X}t0;iC DJQ2ئk^DJ "VMLMVKrFʈ#z€X~\D,ICp7`"={E1])?_?eq-F&|C>ټT߂$+ul#`8̅!{$ ++`(A ,Ae Q7Uk-Bx-z!JRD1;+ E߰Se7Ue#U)&$(l7Zb([ZGH[P@E'lhK fV|-#nx ir޷?t$kgD*<}rz)#H<. 0eBv?|?<&M'NzD SZ6P5FE.Ӣ9'u 1۝dǃ }ow?}7Rpb\r8H\tFĤ8p˧OjζIK Z\C6ŇQ:›TcփuP š{ÑCo ߂0F;]nG9*"2|~<񓨤`x1u\D +8Hrk1B6)_Cw7)DdL'Ӎ+="%r6{v6v'sQ>}7*R'hw{͑TCT7P8cqVDa{Nmg좾<4jiʟ_|h$چzgk,^ +k0nu7 !'lqL&P5sy_K*`D ='/Kآ'spiB?,QV0͜NnJQys@tp1$B;Eúwd\85I)4WPuNr +-A]RaBُЖe-UJdͭ %9yɗ. $a&iÇ% 6,T؂a<>8 +3 ia9␢:W`Kb $AX]YtQvfQT` bp8-xM1R:ℯ{*q;s-*#^b\KP;3lCڛFWv-?Mg4/;QHTReGM H >"^s ԗ1s>R;F5"dƹdu5b벩Dm~OH%#\I(uୖ< +;.hljf E +óF*UNxO朧Ӿ6eSgK A6%Ϟ&LzZ=5 ~L +lq-F.%'b\ή8JuG~QA,w!Aqχ#_Jc yrd@*ke>̯]@bN"#>Qc7b/.n%ME6/#~tkI4兏dos$ח(ws28[u8]3MRE"Uc7ebuG*L}v?jP`21F_cLDIf{:d\û%7ktWnFWҿ!g|($blApl<* /.Oqe(.]T|PQyZvvI+O~qKIMsP%zȽ^%yZT̎ؒ+Jњ aF'Ci;ô K._pS~#jjm\zGr{d骣*PiM9(5Iz"Hd-Oqo'5S'0_~^돃 U +2Q(H1rv;endstream +endobj +1782 0 obj << +/Type /Page +/Contents 1783 0 R +/Resources 1781 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1786 0 R +>> endobj +1784 0 obj << +/D [1782 0 R /XYZ 85.039 781.388 null] +>> endobj +750 0 obj << +/D [1782 0 R /XYZ 85.039 761.463 null] +>> endobj +1004 0 obj << +/D [1782 0 R /XYZ 85.039 667.044 null] +>> endobj +754 0 obj << +/D [1782 0 R /XYZ 85.039 667.044 null] +>> endobj +1785 0 obj << +/D [1782 0 R /XYZ 85.039 639.536 null] +>> endobj +1781 0 obj << +/Font << /F20 929 0 R /F15 943 0 R /F36 947 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1789 0 obj << +/Length 3542 +/Filter /FlateDecode +>> +stream +xڭZKs6W&jjĐڛ3$NeةV-RT<ʯ~,NUR@~uY*NWYv^k*,/ﯾ:σ~5}Wݷ7?ݿ8_(04ͼos?C|z?Bpi@~{+] VQ?~=.A_?Zwsuwoˊ5:Xe~HQ^qǁ]iL{o(ɽyzcmpG\WmK1>|G~dvW70ӽEqgxoC<. |'G8pS8P(oA!~rJN?eɕoSX3&^. $w{nUvhP C*+\|&h9-xs}`m0aGXw-ڻ!rG(;mPQٵ~_D8YF0}>Fiޠ+/8FP̢Z@zb+~sI4hђ4#h?"j0݊E7ұAh 4f1DMAj69r2Ki;!)FVN:PD֥T(iDyf'K\Ags[4 >Q`#'od0ט#?Y,ðgƃh]w5?x;iuwR NY+NUo4f@Dx(cɋd(ݟuO5 sg ÐPpmr[Mmu(ވ3P_n1 J]Csٻ ƒֻ)n߂7 F*z## &Vbw7(,eׇ}>w}8̢5|Z 7̵T[#c 0D"d,;j^ RSH11s q.+ ޲׭qCg#B-;[&U&Z Nqx7>O<8sP,omFv2SЂ{s3&0|Y@0,LQf؇Ky`qogu<~z:5.mGH5tm/=ѱ* CA/AךQx7 -0NE >N~ a LQ:%Pk-hV!o8núm*iXJ'҈`;]Ɇ{c*@T;Wi-i@vO={$EX9}!C˰+ k5t93N8ТKc ^d! lr`;BM[o^# S/\PYr0yąrX pS5Dd7wTj +U4Z,`9}1_{n\Cx3ªL$ &,XF[!ҏ +N/nCl4H Bnk|g5&* LDyA,E,l +4H󁜖䂈 +*K0 YINx-fgJrAQbWꅒ_ :)$Sx"gZr[֨e!Nx"]}PW=~/%囗"oN&hah=)djX*>pm/𤈲n;q[7M#c,FH̍0LhN&BL~ Kn OrvS C0HL85nL85 <O\N[J^ֶ_rrJ~N! +Nɝwɹ.6`f,.{G +Kz7LRk~^'"܍L,%sY<02ep«SE# Qi,i؞C)eF\(D s)Cۄ cK42-oSQ:4, F[B`7+3) w:2i>QĐߞ䓌[\uV'6=v?R1ZдRƦ5d<X#^94kDT#\#r=sYK (6΂A9FҎqNFD YNGvTPY%A_yLwh.צ"i98Y[I% 8lVt@ 9ƚDn#%ɽ)7hC6 +j[Hrj#%WNC=@<ֱwt .o&6Rq wШY`{+[6a[,M=.5POe@lфr؍'7==S,09"j$%+ćEth.H]ɑLnn۱0/$|^hl&aج#:G&4\Y;̘KDDn/,Mş> endobj +1790 0 obj << +/D [1788 0 R /XYZ 85.039 781.388 null] +>> endobj +758 0 obj << +/D [1788 0 R /XYZ 85.039 718.394 null] +>> endobj +1791 0 obj << +/D [1788 0 R /XYZ 85.039 691.78 null] +>> endobj +762 0 obj << +/D [1788 0 R /XYZ 85.039 578.375 null] +>> endobj +1792 0 obj << +/D [1788 0 R /XYZ 85.039 551.76 null] +>> endobj +766 0 obj << +/D [1788 0 R /XYZ 85.039 299.875 null] +>> endobj +1793 0 obj << +/D [1788 0 R /XYZ 85.039 270.47 null] +>> endobj +770 0 obj << +/D [1788 0 R /XYZ 85.039 270.47 null] +>> endobj +1794 0 obj << +/D [1788 0 R /XYZ 85.039 249.942 null] +>> endobj +774 0 obj << +/D [1788 0 R /XYZ 85.039 196.354 null] +>> endobj +1795 0 obj << +/D [1788 0 R /XYZ 85.039 175.361 null] +>> endobj +1787 0 obj << +/Font << /F65 1062 0 R /F15 943 0 R /F20 929 0 R /F14 961 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1798 0 obj << +/Length 3224 +/Filter /FlateDecode +>> +stream +xڥZ[s۶~ЛLĒ}scu9:홶$ E*go!rL3"X]̃?FYJfw3_8²x[}}|ͼllj0RݏW,J)2IRg%S~w@L=}^re$2s쏿DsUΞ>4@7 +ԫ۳-qkYwX Y|PYyn䅤" .,S-QQ8vzICLEwJ2⫢<$oo-Șa>X,(1|bMυ 7"HrTXQHxU 3˦fm.h*hEВpPh"H)p}_"ecՠ꘵A1K7tA\"C9Q:%|)k5VN[|XW#m +V$AXD_YaG#pH(*{MИ Ѻ=RVX\W†467=p\JFuT98 +X@GEry4lrأqz4<ǟ^9-T}n?rIaBSUv; %ή!eC%ouOq,L8TSFx%9m8t?!Kw۶奔o.S|WXŖbt=yTsΤ/DC}ŃZ{`1nG䝩*q4ɴ]ca-;:[=ʍ=*(Z<CW qIk4TL'|,|4ғ߉nf9Ikqp]/IbSաJa+Вw/Wĩ VYMzۥki v}7 rymקynǯ+p92n?xQ?*Hã5لs 4,@,3"~9kl b`oʏy mo (>2 RyG`Bu\?zE|ut1J[¸*مG .{ZaUlUT* G+D*7LEO@0&c`P*yQM2`qt7T@9bEGe泇= a +c8`.4^Ms][48hf vʨ9󀶧Q)G&H8@e| lZ=j5R%B0 %<#-~ +ۜ+B7k_uq+CR+{X|gJNjw.wt] J̀ҷ"&>h]q&MՏ1@Uw=F}[;_V_;x86w%ԍ'u,+8z*8Un|;`:,d +Uх vc3mJsW"ΒE/}h}Qs(hj8y:ך$Sᆴ^GW4&UՁ(Y-NJD@ Ԯo _E`%TNj#{LL"C/ q5AK"& ӘD1%V7F!v{N9rEӞ+/tk1,[ dJ'B#fOgh=~s:CSaA#1 +E0|Sa+ia‰|]Α+Wn"TuP9*f,S_5P$*u8tk냔_3d8ޱ ?|QSk0Z@0)eSf±kho2`c +~ss'$tZڔ[{0POYf w3T49ELlGnͧ~ 8`& &a:udmG:kMFfĶFΘk?群oލWDPkh#KW|Eigd# P؍/ aj2y_!s}oNdb&[lHr){D\ 22@ v1>UK66$Hq +i /\85÷H׸/"cz ;;F1g¶Dv/ +3gf2ޠ9}+'R;H"@Q`FNྐྵلK~aLcNWR)w2"l+n3彄*Նl*jZ11ߌ-B>>&9Qlr-mx OF +`>FAӞǞ@6BlN|pWzܚRz݊FH ++AAtG0,5)7LYM'u"`.9$69?C +IvbzY O|ҩ̷&`/o#bO4NtҀ3g`sA_ 2 *`~n:jW7I^r*-._1 4JU_V7?_~ZW]w7Z߿ywn+vw7wWjGP"ߜzRʺWp{f ]S"?ٗιDvʊ^yͯRhsr<ЩslMdrSuDAI(bRHncy-;endstream +endobj +1797 0 obj << +/Type /Page +/Contents 1798 0 R +/Resources 1796 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1786 0 R +>> endobj +1799 0 obj << +/D [1797 0 R /XYZ 85.039 781.388 null] +>> endobj +778 0 obj << +/D [1797 0 R /XYZ 85.039 761.463 null] +>> endobj +1800 0 obj << +/D [1797 0 R /XYZ 85.039 743.459 null] +>> endobj +782 0 obj << +/D [1797 0 R /XYZ 85.039 643.603 null] +>> endobj +1801 0 obj << +/D [1797 0 R /XYZ 85.039 616.988 null] +>> endobj +786 0 obj << +/D [1797 0 R /XYZ 85.039 616.988 null] +>> endobj +1802 0 obj << +/D [1797 0 R /XYZ 85.039 593.671 null] +>> endobj +790 0 obj << +/D [1797 0 R /XYZ 85.039 524.412 null] +>> endobj +1803 0 obj << +/D [1797 0 R /XYZ 85.039 505.54 null] +>> endobj +794 0 obj << +/D [1797 0 R /XYZ 85.039 367.158 null] +>> endobj +1804 0 obj << +/D [1797 0 R /XYZ 85.039 335.633 null] +>> endobj +1796 0 obj << +/Font << /F65 1062 0 R /F20 929 0 R /F15 943 0 R /F36 947 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1807 0 obj << +/Length 1818 +/Filter /FlateDecode +>> +stream +xڽXYoF~ׯCSE$Nc;hE+PJ.w]@"\;ͬq蛖gma8Nv#k;oG*iuz4p0PZeWv Jp0cRQaW˾$ PXR9G!TuG>+v| +ёZD7ThcǍ<xtȥW\Ckx ht[ḡ@(58 +H[')ru u!@̏g"嵪w(F(i.Xw<t<~<9o=g:Ђ`>gp2,|;c%b;_e:UaPQ٠0`.j ؐ~݆;K,Ru(nj}"׆hEB8 NDɃ)Kh`Fo?7<ŲHrK.{ERR΁S +e)] SK7P|9w;A؂#%jθ[eSHt= wO7* q=ETYtw R×~_s3t<ϘƊgXۃTlF͗P&f =%`Lrcd׃"mU7LHxJ 8dN^TΒxI;9"Nn 5~a +֣L7 @_X3sU_ߺhU ;rL;Mی:q +@fLǢDj>\W 'R.OXYϯܑE^ ] +BB= gy8蒮! +{ 9K|o~U__^E-L3IQ6=z~1_s)ZN3n`uCj{wv_~Z4'*bzxBW,rzl`Ep.kt(yjU*+(WTW֙.:#8N X'zwQfFoߙS喙-|*\endstream +endobj +1806 0 obj << +/Type /Page +/Contents 1807 0 R +/Resources 1805 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1786 0 R +>> endobj +1808 0 obj << +/D [1806 0 R /XYZ 85.039 781.388 null] +>> endobj +798 0 obj << +/D [1806 0 R /XYZ 85.039 579.046 null] +>> endobj +1809 0 obj << +/D [1806 0 R /XYZ 85.039 547.521 null] +>> endobj +1805 0 obj << +/Font << /F65 1062 0 R /F36 947 0 R /F15 943 0 R /F20 929 0 R /F57 957 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1812 0 obj << +/Length 3168 +/Filter /FlateDecode +>> +stream +xڅZK6WLbjM괵8YoNj=)gkq- +Iy<>u7@!h1M@MAɋЏf{|#C}T=FZ)YlpA!PMqZxXG0>b{nW2Zmx1B?V_Vi敇zWr]p69-Yܫ@cϺ^WK9gw)Ϣ}&?@]~?cׂÓoϢv+s}c cOnuM#O$ذv(w[ógJc#=-mV >b2smh'tPԨ{IFKc^FU +*ק=]: bV ٓ ]%4pb=7< +ޜ`[}f?4&(#8{S?"yE|IWW"bE猃;<(P O\U.F}i\noTAyB{b(|Whs{+uT|4dJ_>@M^-\hDwH(zH?[D'?;q?HĪ>SߖD5)HӀxHlnBR2!CLǷOj譏T^ߥ?KoG8?R⢰\:R>a6c=`8Rof1nٟ "uytxh8ha?qN*b[2A4{c g:@1<4@v +'̿jt S2'Ŷ6ԃJ18ꉳba:Hl)txE 0dqk X@ErvK *y|gJl2^n"%mu2=S@tz +.Ke%)ivm Xym}e DJ:C}/W*\Jl|h3Ú,sCJfGC=Oz ̠z?]ֿU碎@=Ԋ8}{'QӰQ+bem#觙b'le7^ P +5(U=W*IXk̮cO8,χ%HW 쾒Dt{f18t$h,/zJ[So(΋Ld׆ 3f 1Ղe|-\=o֌Rhg ͺ@٢;^A':A,z  +˦mVf[O.5łCRJ`sM*%"g#nv=1丌,kCgzAb6.r»ןٖ p#`fyCo_ $~d|&Mu+ %t-N6*A%&% gՔFdD}OF%="6#K誓$JE}@JWsy=d?ZE .ON#s1nvª=^ٰ
nf=`;h99BU(ޔ x_>h=.ųaD +Ui+vUX91rN#fIjjrckAL!ut,#86'nc0 Զ6!#`ˆ0k@D}{CM2)vZ_z[;s=Eh6VsGRjMĀ}W)K 4-]SsہoM"EB ޹e?S⻢wpPx?ı#*+kQr">u9DL:ԇ/;JG-z >"%h wSu~g^%\upk2YƷgVhN1X-5&\`UXtV9-BqS{|lXp~qM ʑ>Z>T飫ғDYnĎX+0g +N/1U/@!|Xw%.JOw +˵^2 +T!6XLP%`f:H)|(ͳ`1 kɢHӽV3@\pĎOi/>X r-I98^2^80̬Uh:'S}(`T2KԸN|0Ag~1SFZP:\,r\:N\vG+lJ-a Qii\[˵ske`Wj|2c VI~3Le6\09st'nܕkz~-r*JD🟆DҪNS0Ad8K k0e\9 m#&8Pg\ĦHL'KR'>6C+νTt8+#EyҜiո@ - \> endobj +1813 0 obj << +/D [1811 0 R /XYZ 85.039 781.388 null] +>> endobj +802 0 obj << +/D [1811 0 R /XYZ 85.039 761.463 null] +>> endobj +1005 0 obj << +/D [1811 0 R /XYZ 85.039 667.044 null] +>> endobj +806 0 obj << +/D [1811 0 R /XYZ 85.039 667.044 null] +>> endobj +1814 0 obj << +/D [1811 0 R /XYZ 85.039 642.326 null] +>> endobj +810 0 obj << +/D [1811 0 R /XYZ 85.039 542.47 null] +>> endobj +1815 0 obj << +/D [1811 0 R /XYZ 85.039 515.856 null] +>> endobj +1810 0 obj << +/Font << /F20 929 0 R /F15 943 0 R /F36 947 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1818 0 obj << +/Length 3279 +/Filter /FlateDecode +>> +stream +xڭkoFq8 ]>C;>'m>P-H菿y- 1;; ௺L#?0e*ߤr{\aJ 2w`|zG* ||02q1SƟ͓$n9S=n@>t}/~xsogq@t@˟/~\F^ghG~upa+ /yQ"QjN\(}e~D]u3xMC_x ܲ/x`wBEW{Yu <wiٺozFۖ}owkzcw5'3H}R.|>yWk'R,m9rz90 o&!ͣ(&Nn ,I+)PaUA+2?8I}mu[HkeU{jZF!"0TwGbЗrY3|9J}Ln0Kk*٥}(o3nJ: +p;'\Q D$ FeF%t *3d_thB4q̀9['J%G*&󾫟ѶGhWy :u{n!r|TSMcTZTx%#ͼ 4"iל- %D.i +JRkrR1::qXTrH/Eߖ͈ + DU|}+^_g)ځWX/Z|zm 0= +fk!XtϜGM?( }N&MXvI&,0m NIRѠ4q4:8{DlxmYY[:/c@s ,Vdt8|ⲇʀv ]hw"T޺{"# f34B"*KX '_1c |0qU+z`6O ׂ!xy x]7| t`@^~tZ/4E޾GTeJh7yrb?@!1,v-YY4 +$CV.X'r +Һ*=`1b?N9,cc>8BhnZ#†{1W_jJB +N\D?ò r=@WjT\+`7e "4ɲEWr:%DjFx%++~#a GY>㔋&b!V$:'"/$CW8U\>uP'o n{F=:CaRKny0 ao^c +^v5 y7`[~l8N)N@G?Ǧ!NAp9eZM1a[uџ;!]`+(vB=z0Q`tr})ԅ-=0Ls?1-WS_[8œtaBK?h4Dy ` |A 8+S5Q(ZaIONIA] )S&3_<mW+fA+v %4m%%!82D\jQ<<ev[2Fqٚ Fup""ΐ/0R Y2.Q-6[&j;@^4F$-7)|dv`:(_ģJ2+9}f(*UI3jKy\wdk^VPX@+ s8%v;&h +I*GBAsqv@R + Q)i0; ++ОQa22#f#~Uc4NO8U8Rd B).L vZT*ɯ᪬eSHleѢA: +#)%9 VbiSy19[ Ue=Z~k݀u, ~[ )W CL#u-<H%9f +d4Xڗ]ߪM^y_n/L yK [I2ՋQNlW!J:FoJJ7s2[#рS6T]rDA8.qM9r]|Gz'%PZ. )NyN,2V[ R*Bf<&6,IY{?LEɰk^X%:GχN\ 3ō%Nn6_EKdb"U{B;3CH^bi '҇zF4{YN1>: ȵ .ӦAT`a)vʕ\BJhR:کٖ+t§e' R=PM kKL@KZӫu#-e#0-)&s-p+}T~m9( G`.؋~_m'! 9s951FgSsאs,jDAˎ +PRYyjq|ïl$Y2oM_ݞ8Σަ49 + 8~Yr(tQ p\3 WR+~ +iPd? JSJi1'$P bM'2Sr$269ZnbKt!p z jSEloԆ(Lh'\kYI!/|Q$eC|U,˭"huw`1gA̔1PJD!R\;"6#KF*RyL`x(5c3cyRPۊ$=yU!"4sDzL~aʁ`-g<dDZ#)z92@ǯ̒bUZCU$L|g +|չH-v`"&ӄOqJ܁f!] :RC+]qDgдܿÇDT$~cVlKB!N1t~7=˪> endobj +1819 0 obj << +/D [1817 0 R /XYZ 85.039 781.388 null] +>> endobj +814 0 obj << +/D [1817 0 R /XYZ 85.039 718.394 null] +>> endobj +1820 0 obj << +/D [1817 0 R /XYZ 85.039 688.99 null] +>> endobj +1821 0 obj << +/D [1817 0 R /XYZ 85.039 688.99 null] +>> endobj +1816 0 obj << +/Font << /F65 1062 0 R /F15 943 0 R /F20 929 0 R /F36 947 0 R /F57 957 0 R /F11 968 0 R /F35 940 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1824 0 obj << +/Length 1308 +/Filter /FlateDecode +>> +stream +xڥWKoFWH@N ٵER2QtI*}%+Z;>h'o2'I2il`י OTλc9W9N8}~c\mKzeC?b<5<9R^nq;[~]̟g7p*C/=>N }ds4lfঊB#ahBO]JJdRmV4+:0*Di ѵ{\7*DnBxUt~Vޭ;Y˶0MUئᐨ VoN0!eJ,00ʒL˼ڵ e35I֡}5-/N:bjJPg+۳xsYRSmhoFf?_ }FI}\HdC`Et~T +U!IHE|in?n( e%%5fÊmSlBhB8A-}w)s0x]mcZGUA U=QgUU+'2I[2ms q# {?VІ s`THl&jv)E~ےEݤ)Ț +#(x+x*BpAV~ ;mI>J“|96nܔ+7"H۪T|Ӥs2!vxK`Z"Yyo"/͘ +Y!^K?ZgLtL>R6{/]~_5=TN0}!^.|i )4 +KYWP\Q^V*U?x~_٥'3re>7; +t=Nݵ7 "tendstream +endobj +1823 0 obj << +/Type /Page +/Contents 1824 0 R +/Resources 1822 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1826 0 R +>> endobj +1825 0 obj << +/D [1823 0 R /XYZ 85.039 781.388 null] +>> endobj +1822 0 obj << +/Font << /F65 1062 0 R /F15 943 0 R /F57 957 0 R /F35 940 0 R /F36 947 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1829 0 obj << +/Length 2522 +/Filter /FlateDecode +>> +stream +xڭYm6hZEowR吢W{"-y-Ty!)i-9wI p8y!W"'VYF*_UvǛh#VB*ƍnF:klRJ V2 +D+!d\%ҫ@&_z8e{V6~HT^5.IE%rl`n21v+dn `Ny(,G} ^,JDa diJ`EtpZ*8dZE<ăS)M]7kTxqv 6חvW¦f+El!*0*,3֙ +Z]>mi-( hLQJʠsכq)(l?9g:5ӟFi웖Yz}*0xW^5[0 so4V$t4PO>aX]F݉6:2ۻQoOA;O  zd(Ǯq6]s98͇X."ŧ;pŃV]cL=@_=x{ {+%vkKC~qYH*[=΁څbkgP#;nqVCfLGf]8_s?У\Lєc.GO0ʆnM],!.i 3xWMJCEqcl!Nơ}agcv/Ѫ/|w-VOЎB +eICS)1qSذhs\_f#6LN'6hv-=e*\e#e!B +Gb$Yr Jb8#Ue^A:M5lDdv%$6GLgWcE9o`8NzXv,|*x%4ggNN-cUhlU>r2u #DRK +솭x}~D,a.cHznҎv\aI7VQe)l%ٟ K\QJvrN8'RNTIK5%E2k%zz>KlPY"48͈|c53ΘC`&L"P)kƷoU2vRQes5ma/hm?$=w-E o~.`."S$[(K맃_qu"B`x"h!&Vc^ }~1_hfeW:we 8"W2f%ڳ+px:{nZĎ,`PUYJ`mg,)<̔ +#eD( %wVQoӿ|,ASzպAfEpd;,"bYXcS݇i7eĹ7tU- ʌ$* B6 +Ϳ0jo=huAϠe=z,('@_瀿8J6)|hKQN/nx:a۹Mfuij- Mx^S=,Lqp +z¸fvK' @dKӵ){πi.h=l5#<01I[:#̹Qn¹oqyJ Udkq<욶-mDW,\Gßڍ}V蟿|ۿt@5@r, +q2G>6;%|L*C`LUe;GR +F]D"xu6#e*sL(%a_B뺅Ly/3^=_WziH8cFeZ ΄7"f5: q(0 +1ʒWנWD͠k8Yh}2J ؾ?ub@Y@ETcEF3sL, 镂LϏQ#cQ tdMy$dɐ_n\vz49»Aɟg_LzÁ8p+IrXeaAyendstream +endobj +1828 0 obj << +/Type /Page +/Contents 1829 0 R +/Resources 1827 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1826 0 R +>> endobj +1830 0 obj << +/D [1828 0 R /XYZ 85.039 781.388 null] +>> endobj +818 0 obj << +/D [1828 0 R /XYZ 85.039 761.463 null] +>> endobj +1006 0 obj << +/D [1828 0 R /XYZ 85.039 671.062 null] +>> endobj +822 0 obj << +/D [1828 0 R /XYZ 85.039 671.062 null] +>> endobj +1831 0 obj << +/D [1828 0 R /XYZ 85.039 639.536 null] +>> endobj +826 0 obj << +/D [1828 0 R /XYZ 85.039 525.326 null] +>> endobj +1832 0 obj << +/D [1828 0 R /XYZ 85.039 496.528 null] +>> endobj +830 0 obj << +/D [1828 0 R /XYZ 85.039 356.132 null] +>> endobj +1833 0 obj << +/D [1828 0 R /XYZ 85.039 335.139 null] +>> endobj +834 0 obj << +/D [1828 0 R /XYZ 85.039 189.833 null] +>> endobj +1834 0 obj << +/D [1828 0 R /XYZ 85.039 170.961 null] +>> endobj +1827 0 obj << +/Font << /F20 929 0 R /F15 943 0 R /F36 947 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1837 0 obj << +/Length 2882 +/Filter /FlateDecode +>> +stream +xڭks~'`pF8^x4_";r$\j'd8 I@HۚN{w RJ#Fp ~(,(I9i:Zl΢-[Ђ=Wӳob=ˢl4hM_08Wl&I.'ߦ?]NA [4*"&t#a{s0}^MQ=52ocA5ܭp9Ky7e re aĜXH #Ov텕⡊},c~lb2SOD:~Qp5 'u[c):$, " ^Eg;Ԋ\@Pi [E]q[ƮD zž \"ch7o1 pH"GqWK+!;c:?ZD-{ZiQj :> ܒqb5SQ)pq"w!Up`[w>֍{˶Y\E|vQrX ! ~:^L'P6uabY^H۾E>,U]8XOvY< +`JD‚O4Umr8FZ,<ڊP4Pօ&.4vטM* :OG:Klp=dǝ9q@Hd,S=  8 w#OQrlw RVٺyUYxpBBde4~Cp!1 kx0yszcl.19+q][&Tcp*eӸ8Hsw]+{L<k0q-DFB.O-Um5J '"y,G=ҎfLr(5_U't+u0_őB?5R|֔fvm1G$.&_޾^~|srˏW͡P}sAʮDuX=YO{ݩ<)wTәom? LƏ&l=u +eG d )/'|i8\sAaÎ3׷;JĽNq$A: aom~Rc$ESyU^cم5_j/xXZB0mWNW)!jsXmk1. l,$/ MymjRCM۪ލ6LSRY7|Ջ-TMPT~::"szD]6v (or»=bL-9 L^f{yxDA4t`b@uWCv$sM4&H| э֐wGTzc\"9PW2's[DEj?D\r2Hd`+!;b 4g{>6ƇDfځ3~} X^#m1k8@8qʹvGQi^ LA.GRk +{ȎYTwW@N9:pw\cSW j\YCf5}=S3d(#*Ǥfz'k8Tٙ?Ϩ;;sՖ³+pWz ɔE<,Ϳ/ۆ 9mʩЍ6yTV-kfŕ;V/8?p +bS֖ +vDD2 gFfǤ~7DR=> ag{Bp9q&C_PpXV&#PBDL(FL)t +4e&H€I9pXˑ}s`+!;2$lNkwt9v +SW@mʻu OMrpXbn#,pFUp'zJ_Me q,Fy{~ Q/0"J1b跸#_A q j~TN"*ʌI4R)Zs +m-H( +٦UTj/b?PH,]Xkj{b 9a[0|'Mgcj&Udd`g$%ǖ^a僙4W?ūG}7C8dz${Z\az!UDya_&:mmIZnlLw8 +P\>ak:KY;*D L|fRZ]I?+X(! 4!bO$RD0.I0= @bgq=BB`+6Ǿlʭ1v[my#d/ԡsƃJ7 R$K GDYZ8;$WCES9`endstream +endobj +1836 0 obj << +/Type /Page +/Contents 1837 0 R +/Resources 1835 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1826 0 R +>> endobj +1838 0 obj << +/D [1836 0 R /XYZ 85.039 781.388 null] +>> endobj +838 0 obj << +/D [1836 0 R /XYZ 85.039 761.463 null] +>> endobj +1839 0 obj << +/D [1836 0 R /XYZ 85.039 736.911 null] +>> endobj +842 0 obj << +/D [1836 0 R /XYZ 85.039 444.486 null] +>> endobj +1840 0 obj << +/D [1836 0 R /XYZ 85.039 420.504 null] +>> endobj +1835 0 obj << +/Font << /F65 1062 0 R /F20 929 0 R /F15 943 0 R /F36 947 0 R /F57 957 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1843 0 obj << +/Length 2512 +/Filter /FlateDecode +>> +stream +xڭYm6N."zHM퇶d["[$onoCɔ-kfy'W80Yd^|w%6a<va$("eJ fq3Y~&dJYj-ֿCcxp{s=U7\lY8aև2o-vv3-FY(SE1OЅD !S fiU8mRf&8Ky:/DZڊ~' A!^8? L^M:#J\|˽ϳPPh0>GzQ<˶flj ܉P+mnҢK9-~ƥR C5Ih+")v0kwyD v&HÙݑ-9X3{Ĭ,IlI8M'!4!)tI{&o:k;}Ot_W["n79 x(;鮓H9 rGGv{vI9a eʦ^i_hQuO9)YՍY95 vvH}T\N]6@SBk:bv! 1.Gs9 ͙I$e]^[,)HߏP9f4s(,7 dJD*Y +\>c,#:{ +R4l렭&(l0OӥJYkO˔"8jc6)6_Uz:U1SP q[~7>[ xƜ4m}WwW=Zz<7,bc\|m!4Y$h 09k&n +8CO{ʱQæ_ig]A ǟ +)X p~ꜼQB6MtUIBYlM4N23t +Ɩcf]Ṳ́aF(l*Me{Tf]ct*&}t!"R,;υZmY]U'#X_Q_;KOErTlY#oNcmEjq%jJ{C;jNs`dX*LGE&3'yρW1)QQ +M/!o}G'$'ڼÝ-ŲsO]or0}r\\E15RcbƹN!!I2{2 +6t)c6$:vOҞ=nqn .nDˌxڤQ/qhgT,*OL{6rNuF5u#YSX&/״T %D{NjԼ Ž4Bpp&a? x)3u +kpU6nKu:įp/殃 .4WD. (>$nwl+adMX _3P[Y2# x#vlp:PDmifgڮGA9Zu;zU.+fݑhBw^H3򁌧:3C)v Zkz̫$ZL+L2\N+#:Ts/Y"ŴDGs&˨3REY4 >ZMc5 [rÄV^b=}Ox0K3:&5\wfr);S&ٳbGRx4(wR9|M)4z xUu)P)]@eU9aHi { t[dnԶ_˲/!Ex*z00xɃ Dtc6t)Gt@1CT1?kNrendstream +endobj +1842 0 obj << +/Type /Page +/Contents 1843 0 R +/Resources 1841 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1826 0 R +>> endobj +1844 0 obj << +/D [1842 0 R /XYZ 85.039 781.388 null] +>> endobj +846 0 obj << +/D [1842 0 R /XYZ 85.039 761.463 null] +>> endobj +1007 0 obj << +/D [1842 0 R /XYZ 85.039 667.044 null] +>> endobj +850 0 obj << +/D [1842 0 R /XYZ 85.039 667.044 null] +>> endobj +1845 0 obj << +/D [1842 0 R /XYZ 85.039 642.326 null] +>> endobj +854 0 obj << +/D [1842 0 R /XYZ 85.039 556.019 null] +>> endobj +1846 0 obj << +/D [1842 0 R /XYZ 85.039 529.405 null] +>> endobj +1841 0 obj << +/Font << /F20 929 0 R /F15 943 0 R /F36 947 0 R /F11 968 0 R /F35 940 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1849 0 obj << +/Length 1221 +/Filter /FlateDecode +>> +stream +xWݓ6_#:} $&Ӈ;I/wؓ>5pf Kdj?~ ?bI0 ,! bRZ [pӌ 3=n{aOL bQ:/VJ,B(bZ~!y*zoq9q/7b;r\b2q|XW]4u3[.e (X_}K<{B w5e=TK s|0b +{?AF;%$}; ރD=/3F1, +8У$;z`bӷc2̴ L0(Pa=Ӡ$n(@BꎙJ{ 0$uz] +AZ8"G[:?QcQLV_0b>#nrˑ_9>TDAqKxpmp_OyT p*_B"@!$oAzM6(\CϘ"(Wno<a$؁Ș6 rre^0Uvd,֗s6B[%]v՟pZelZ 7m{F.ڣ*O[b iroYlfzkS/i X3Vdv/*`e%*YXJj^ZyTiQ|B[;HU3F PÀzCQ|(߃@o}=gM< G.-iGHC5OʘKὠ0R𰏣4܎N֐u_c-ޕtPkx׷w;qec^[ЯBh ~."Lbo gw.4o?Uy; /}?s~Bg9yxu=HiFl/WfčX&ƬڦU9lԘ`) SsוN,7UUTMft{S?Fw5)J!ܬhW/j+ǬTOEE?ؒ ,iCD}z)@:f/в/tCJ> ZmX$wtГ,pWD>g>7YQR j?"zҿ:v 2 H>idԢ8Zr˴;0uאb7@ANq㒝/Xendstream +endobj +1848 0 obj << +/Type /Page +/Contents 1849 0 R +/Resources 1847 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1826 0 R +>> endobj +1850 0 obj << +/D [1848 0 R /XYZ 85.039 781.388 null] +>> endobj +858 0 obj << +/D [1848 0 R /XYZ 85.039 761.463 null] +>> endobj +1008 0 obj << +/D [1848 0 R /XYZ 85.039 671.062 null] +>> endobj +862 0 obj << +/D [1848 0 R /XYZ 85.039 671.062 null] +>> endobj +1851 0 obj << +/D [1848 0 R /XYZ 85.039 638.739 null] +>> endobj +866 0 obj << +/D [1848 0 R /XYZ 85.039 638.739 null] +>> endobj +1852 0 obj << +/D [1848 0 R /XYZ 85.039 619.008 null] +>> endobj +1847 0 obj << +/Font << /F20 929 0 R /F15 943 0 R /F36 947 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1855 0 obj << +/Length 1005 +/Filter /FlateDecode +>> +stream +xW[oH~W „"Urbm׍vXkC +$Qws&[هepns3g[ u? =jX~֠0\&C:@hzR "GOO$|+-g{բ[KG_O-='ս,Hd @bjdI\GkhVioJUr@>5TbM?hθ.WΓY2>*Ic*tj}#e¾!j!i +,>=;{( -gH)R2JQܘWU"kkקd4E -B#2`)0 }wq"Jz+IUUy~cDҔ\SJ(kȄ4 -T -/q'>%QE)mD`m5Il8$gHT3aHB)Fu}/kZ :;b1-@ݻPoƓ vjѼ#}(ꞕH^Ɔnfͫr4a3V>oۊt Q cǺM=ҙ.zGϚyM < ގD )U9E:ũ>@CJ] - -)zdz}\ ٜb`͜4hQZZfBi" -l5MvW]:)PL&tؾH~2 Pɨ꠽||x[m KJR*kQs 9kaoS#VT*x[!}'g?qXW\w}+ "dqc~LIendstream -endobj -596 0 obj<>/XObject<<>>>>>>endobj -597 0 obj<>stream -xVMo@+Vծm%"i9@`z UaKwA$-*d ̼_z ;@:~ ^m;np]S -b -8'xup="T,}2ז,gm=$ib"a0p Q\aeJ&rN 9?:=NV"~܈7iW˼gc .l(;u\#dez@ `Y[8h0g|0  kn &mv kCی9p ʤ(nB"EJrPzGSrפm۞m;یR5Ȩ9dfr.ֱa43p,2 -O r 1|T^5Ӛ#אJe7ax8ٟ[1;O i -',yìk(dD8'zLdArZ 5Y, cqU;04WeOjD`_)F}*s)W,1R%^>pQNFW0(\EVhaTZߩ01HLXз » -²7q[7 y*endstream -endobj -598 0 obj<>/XObject<<>>>>>>endobj -599 0 obj<>stream -xo0+m$PVXj%쥚P?w&Vx8 _!M% 8Yq5_OQ ^ņaZɶ g `MsBexک2OYޤ+3(˜@+GHrl88,i4"L0yn6>M>>DfC,\`)A9xsW.:AábU~ѝKQg;!oȓzMSj՜݈9Ow$yg~sB ^4UFIsnɱY-|w!ʅbDhooR6U4QN?OY<Ƕ:\|0UFf/$RPW2 -;*`G;O:؎[K)G;fs`^&"n p<ƙc?J̮n![ZJKO۩c 3-Ma[iE#/ -cb0bۅ޷?Fglendstream -endobj -600 0 obj<>/XObject<<>>>>>>endobj -601 0 obj<>stream -xUS@~_)W>F8-| -i}la8t= a,fn M@[Bt%OmT+`Z~il.G"#06O&s:? pK.+JPnEzE$pJ(UuyOrTlJ iYDEԽR}1ERY`hN!G7?ƥ.1=Axa -+V! -u#yͼu1l%s59 -[{+wclCKۓZ^}2~sUTM`JDvnG_b4mkx-L۬PDUP`:9nSBWLw?&_G轉%ݕLX{ن<2L8 -nw.z3b)1=Z`g~_FM"J9n@,J8%GtX)+4H8V&=ԅ_V^,MnQo\v|윆Ezx$~-CyCv4vQ"npr[]I= rLU;sG5V8v8{endstream -endobj -602 0 obj<>/XObject<<>>>>>>endobj -603 0 obj<>stream -xV[H~Wdd⾁ƴ mO6PScíNf]D8_}:UF6`fd -ik:L ]3gďpdj -䀏Lp>=b//fðؘ`-:ygd)TR4wURH \.LTHG -‘9Z1LeIx%*BctU=v.Y fjmk{ѣ%`&n|Db{"C5_dfȸUhW*lb<E+ -FWfET@_ӹ*L P`=-XR!; #ˎ͈g9(ŏ ]!0," y _DCNef[j )(׶)_ѴF,uY6no -\ffidA!R -9?hE1(Pr;58C7;F־Cn33ur&e -$;ъͲ6t8mQ ;1mմVdv6rE8 -7~Q!}aO^~RE7Ia-1 zOKV[5щ7+mv7W&: F[rf/ h|Faopkz&,-nN{ѪY=l]ߚ{,;1]_'w`jh - Etm.:&Iltv -2f6؞bwXRlwLE,ox9 b)Lւ-ךYljU`ydt?Rendstream -endobj -604 0 obj<>/XObject<<>>>>>>endobj -605 0 obj<>stream -xVRH}+[XlǗGqU Ԧ[X$د3uU톊 q}Nϯb$oSG|/b l%)/:hdY&9 4&~oNu=p.IjW)ii.2wIE`{M"NFӛ/GӋpz#p0i7󞘹PF4TڿDzZȊJQt:I9zYubi?oQYj~'b-etJ43@a*Vbu9K,XJE͔\"̥f>b4\RH[kRIh}K&'&4x_yjJ1PS)E1~֭tUu[GhWVCݡ`Q9APc"UbH 'N7heu":_]~$TB[:]%BHݏz3 X&P>"tx $k4䜚#VR:uK׾q?‹ -aa(tm? -cfV*〴h -IwB5k@xL)wdP~^b];EABp)E<PJYK\zg&z$S@Z{p 1aJB#Z50WKg'rI b -Nyph'~'[oZX -֡y'kmjnt3.@ -UͅWpYDJuG .G[BiJCpYN!cT0e,O2POY iC ^\4mg!ٖnr1\8>]\I[mqabeQxU~ KQek%A޸i;%ƻ nmkw'DjE֢ -:*õtLpA gzByiLq(?|,QX +Xͦ23&Ei|#`Xks V`cpӢ{_ܒ{E?A$ o.GGt"~{v3ly]qvݨ`#;݄CN,endstream -endobj -606 0 obj<>/XObject<<>>>>>>endobj -607 0 obj<>stream -xVێ6}WL>8@ͷf8n>fV&C]҅N -AmXE̙3g );QDm/c?d<}T40p<4'lJThc_|m3%$\$ϬP-9YEvĭiSOvnwҚ7wF{2e@sP:7H*KYə,SفQ8n-9xNKNK,?3\l 56"|"iKe,]-fq_3<:x#++xO\rdhnTjA(~2rP(VUņ=B WVhiA;,A -LsZjE\P~_4tP;3K2 -DEAZRjӀ&h(iҢ%$hhʤg8݆:(xT1Ͷc# 㪳y«d* U[;xm%pI^w~Ϲ{(v[/ -QdM^õu\/TSbZXˡBuН* ӛ\sZ&M!x}@G;K <{@QsfWمS$VxNnȣjjxµ۝t)h,uNߐS<[^Q݇zZ2AM+uMI݈#X|dZ5f=V?ftc[7jo'ߞk=C7ȅȣy"+%1k۳HαyjNߩf;8ק[Y<\>YB>#fI;L ۸p4  z}EoP.;קFΥgn2JpդN6vendstream -endobj -608 0 obj<>/XObject<<>>>>>>endobj -609 0 obj<>stream -xUˎ0-؜f7C\lO,StHliu|A? -0ۀ5YxhRI??:i9Z.NHN:J.KlT4'N9V ^у40p;6rhY#“ -k!Q>@GuߙEclopE6ה/eK(gl>o]makx=PYw* r[5w[1K5ke}~"\endstream -endobj -610 0 obj<>/XObject<<>>>>>>endobj -611 0 obj<>stream -xVMo6W ҤURq*isHM) -Zlm%' )ffm#g8o޼"j<"D_ 7Hh?oO9 ``%^e:ț}.p7M,:?HTJU1Ng쇞Hgn~[İU. 11e6H.gM_Q#DۨΛZACVp{Op.TWR 3am. -̿wz'S -|y% - t8#A*1OC[*Uև#NV)}AZư[klxD"eYdEPdU[y:"$(?%|bk;p, UIJ֥lLmT - 2@`N7 Ƕmԝjs/U2trqkUHP5hԭ%V -0ZeƦ7GMۭަ6U/RcH UÈZDisq<|vml 9Y`KCEg^Ljc#$04'WL /~9 yO!1gN~}Wp:!g[+7?l5rԟ<0+d .ߨ"zPNJe .  )ܜvA,sZI"zd'$q]X1uӗ8.SyaBg>>E=pV?GT-T1fdY @tD@lT[(.n193+WmoPL&@>Udj,M:ubq;_mh tMޝ|HVY>ɝF"IV2;\^$ -hz?MJmUl8acmCĔj:,D$(QBЧb_Q#Fendstream -endobj -612 0 obj<>/XObject<<>>>>>>endobj -613 0 obj<>stream -xVN@+vHiiDRU{fwob BΛy3f{x4ЉOQs|u4 ?-)v'/a< ~00&.euٰ6C}a|0VyR)8-$"-)-4`m7G$fj>noDDX$6pWjCQr0A4Ȁ-L" [HBiDmΐٛ89lOXKcn.~e|d1vbsf.$WPrlɥbeVuTGs Iԃ1$]T3C^jki)*Pt5JU}̸D<7,T-QUeFFv.V֤hD(49pFE4nУj7םЎH1W?M`ݓNL[&P,M,t5{im#eflZi[8):ڜܕvp@ڋSWD`YUtygυB0L)4Ie sDuaH>WIDq#*Рca}5zZKiaɗEkRW5aKex|LE v9w&c3,juG`u-r+W@l)l֔ wFS%=!UJ]:=C8m~!W[??ⵃ{sz1=ϨLƀ. Golcwke'c?È:#toendstream -endobj -614 0 obj<>/XObject<<>>>>>>endobj -615 0 obj<>stream -xVr6}W/rbK))}حx&Q\3-Id{ vT硺(rgpR#GnzaR4MfS\ՒrpD/=OgWǽ7Mh88glJqF}AH拉LVda,Ȯ$UT_r)G@V\29%Qd^YQQoR'9oBs0Dσq0 -f]_׵4Ro"jVE<Xtwd?eclLXA壕%. È*-MZa ScOqSXL4쾖ƶ==T\e}Bo‡9_19.TCbߓ+GcޙLZnt"-_99d/T fz01܂Pt:^n/O>-3g+ ]xQ-a̯gEK[kP&WaysGoYzGL (c]GS --nO/[J˫$Y0Ear<'LrFKVC)>$J*5e%+e+]tq<ŢsHC9ŜHm;g'gmw%P X1.sʕ6`QgpP g$;c?w2gȧzyHWֳ,6W) kۭER'16 "丬QbZ -=#8Rr#qrܷ}M0F;)BܮVEo[ұI,q -[Jl~GBQܾč*&^32%B4=RJiFxi9D-t$O[5KlXƦ~qS阣e1L?ww @ M9 '88Q3UnZa~Wl3Lc"[L`pľ6E/fRendstream -endobj -616 0 obj<>/XObject<<>>>>>>endobj -617 0 obj<>stream -xUo0_qIBHߠ-[%d d;;҂4rw/ zz ^4@ݐ~{)Rp]: ?D0ׅ(3nQ8RD3!-4G13Xb%d&jZ8DOR}ЏBL(4,* -RhOÁf}n02!$\K:.Ϋ$Sa6C` bkojz ֕Y2A YMp 7 9Af nFUHU %)bj=fq c | 6<7S!"FҦs U1SP nc0֒N4IaFjJB0&EoK,P%8o~qAv -K~$,^Z[GVi_\[~{+ Kc%:\eko0*HegbF6]eZ[~wecar?8o^zm[: -'nE!*ɷH7rAƥZ&{Ҫfq(P]yU8tmm dҩܬf86ng&2F_*V#I4$b)+ȳJaw}=a~u\{>_eI߬W7CW3=e~0JVmQ 4endstream -endobj -618 0 obj<>/XObject<<>>>>>>endobj -619 0 obj<>stream -xT[o0~WixqЗvcjwOHIH ^48u@(\}A/ȇA2oxăv;"!qgJ¤2, ^H.C@=2Pv7>wR,T4;$ P7go-aL6VE,r2 -E֣V[~zHKhAgIJFe|e93S0FG@.7SK#Expx%RgJ D:r~ u{(r- Ao]~%0y:6%M0/dy%]d@b޶%\RB?pUUݑ_sPy|*1&35Q-XAm 4NN9El=ZzPڕnGM1}E0QkER%j5K_[NmjՖד'?tШd -W*8^\%P"by޼^CHl0Or!1ս_]J_uPƂ?!]N:YP(9 -ɏsUm,|կ$dUo|[QRa#W\/pńu:sv/OгP 4|)%o+pdtJ.d0 -Ibئendstream -endobj -620 0 obj<>/XObject<<>>>>>>endobj -621 0 obj<>stream -xTMo0 W=1mkŻ4IA=8R*C_?ڲumHy Ir3iNRHyc: >1ɦs1Y9;yScPP*(R NbZq  Qaߥ~U&qCNjXE1N!mڍviMwCh?eGz%TZ@em9ݴv;)e>2zt@ٍ?JG@*L'!aNj[m`%ŝlZaZóQ T` B%WFY쯕꿃-1tG{%1 >w^{X&wWWckJ;aTUJk_bſ6@=*fn碮vwLҎٕQ ޝaø|8{,$+ -rpk۶ -;/ p+5aӱ 3Ӣ뢜}8-endstream -endobj -622 0 obj<>/XObject<<>>>>>>endobj -623 0 obj<>stream -xՕn@sTk@9i-9v$aKX`?$&մReYB93=8´g[lסgNaY8L &i?]8{.=`6+zp!ze=s`2fd>?N03CSYȪtYYĨ ȱeJDPA*ThKI]{!7׸܅hv~MfJTS $Uek(qxxATƣ7"UɰJlA$Ӏ -GeZaA^cZ)^W?p nAiVA)~' rc ͮCԖVa⮻ڡLKL Lr]zF)5 X`paۇX wJ[ᶟĪ&*XG={A>U[ʄ -n[hG(UHQ`Y[&dA -CT ƠG)}t߿? |Of?ʎN\WQ<} ë!ccG`i8Em;h#[u Nendstream -endobj -624 0 obj<>/XObject<<>>>>>>endobj -625 0 obj<>stream -xooH)FU_$xMߜj \pۓ285ήoIpKHE /r<2Jpl`:~~IG)R!;bb}3\ҧKOvc_.u2EK"S K63sg([ƐH.Ԋ<+Rrդ)*YTw; f dB훤5̨k2U]k/,жWJ[L@ -2/W 8ԫBAEH$Y8\Cu$V@*8GCнZ{2>E͈$bz^S?ק @MX%J}2SFk tJ#p5^5Ϯo>Ng uyQ"37?:/ e4 (pw߳maYP*)K7Hib3Yv-v]JRoqӂI!4$hݬ{EO]"U!텼 -aڄ)` -wmy# Sv]-Oa^pj\HZvUDJntha#Lu߅uƵƵ-Kv<8|^&xtu|>!]Gb0=JoR^/02Vhuh{-Me~0hRKGǽ{\kendstream -endobj -626 0 obj<>/XObject<<>>>>>>endobj -627 0 obj<>stream -xVߏ8~ʞ MBB߶m{WSu`ٔf6V:!㛙o>eA1RQ $ߵ$٫ :Ͳa8Ix# -rY^^E.VaB -CXru -!~}MoЧ q5,>b,V+xu|(хZ@&jADPK#%*ޭG4RƷڊPFԏve5J,ζ^l6/f܊S9H~. -vXNJ -eޖvR (m &v's%S7L-3cZ]P2SNmTXk[JhvUSNiL#ɓLFTlƕn}Y""ZYUp/8Fc%zJͅGNH3apO `.]Эnj`UrƂձ (o շT8kIV VJBjyOXH-OL~ޝBr͛Ap SK|tن}{Z\ڷ尴$~ VIQ٨ILsoh: 8?[՞azU3X޽|}{ulH2|ץ}A"R)vgېy=`tV7o.xkPio;_Yy rc=kxf4endstream -endobj -628 0 obj<>/XObject<<>>>>>>endobj -629 0 obj<>stream -xVrF}+W,Y, y·VN(Okz[mY +V[JCaer&BLF8aB/BqI֞s>!CZ:ْvGA%Hu-j]X%HT8ѤA[QJVՖ2eBȵ -%҅.w!>_~kO2iٕpJ#OV%!ƶ{Wz7=­X AH~iHZ/ ?lLczǎ2v[]AO'x3hDW$,Dܺ([[-9εL|H(Y%9DQdbxLhfwZ6HTjI7U= ~#yǝՍW`8و^.}/̏endstream -endobj -630 0 obj<>/XObject<<>>>>>>endobj -631 0 obj<>stream -xUMo@Wѩ–/c*竍:j{,VxYMZw[D=Ujd ̛o>r`@̆ X~8{C,x¡w2wh c ' Q mCgapk^VG7^-7Q6^?Ǘk؟x#d JiUkn"IfT(Ye^_yf-3k.+]\F |4;7gד\o1OyER *a@DP) xf0#MH0#roBdqn(Fl~\y gu>/XObject<<>>>>>>endobj -633 0 obj<>stream -xUQo0~Wc+Ai+ -|` JhMTz<=?~G=T݀:|œ]_`{m7G:ܚPX' Tyf㉼ϒ'YίGW\ 93Nr{|ir2?qvඩ?=; -ԕm"o<[)'^s,EםӀ5n?X8bendstream -endobj -634 0 obj<>/XObject<<>>>>>>endobj -635 0 obj<>stream -xUo0⾵ -C/QnS6&)6Ͷ~g 4TiK*_޽{w~ !/t3rlƱgG!%e}@1U2z!ׇdXAA8= [+$0?m-bL(64]9r+X¶d)X?@ߟA%M+H;Ygps;KxduH:4jPSH]JV^ό<}TIuV%Y1o Ї5:^+)5-5R6Jy:Kܠ9[qDk|wuj*aX ʤd̦d~_MGw64/d!z{B=r'ZbpxA28, 󟬧?;g_uޗ^/@,:LP/N5gT ~`K,+P Xh8rhtֵzyG-WaۥXVƽ8o7Y` 1졗HZ֜?#R܉Gp*+4;_ SCo #;cv}.=BlUY\+tbɏ~a[ x>~{Vendstream -endobj -636 0 obj<>/XObject<<>>>>>>endobj -637 0 obj<>stream -xUMs0+H:ŵc\:.3 iɥt2Xr%9 ]Bca` +=vKo"!Eu\!#z:pĻA8t];|u]눓"σ$qIB?^Q$h<0a@ $Y̦SH& >3\G05RYr %~ ,ﰉ)Öρ] l'躀> -@&][U\\(ԥ-Pү`u80Mϒ@iLۄ'<׊c Sål 2/!)\&R%*kCֱqr}][I^>/XObject<<>>>>>>endobj -639 0 obj<>stream -xVQ8~ϯ>@X &*m&PV+8n],S7f#l80#{>q |v[qض WW /-xG ۛ)8[L&m1%װ՞Wb+_vZn;;)w-8ip -2Ѿφt0HMXw&^ݺ~3AIu8u'C(YvI0mlU)% {>rˇ/e&j,[-aX[O hq1r@ !E~>/XObject<<>>>>>>endobj -641 0 obj<>stream -xVr6|WFN(Ve]<(Lz_*ѓ(0IBEfN;u98= > iא&'t:&Y SM'x?hQwѯg4QFoBbٛ$:?#|Da? .iTA$iQd9z@1rBKTNUfO~͗0} 0 IE2_ݴ紐8O ɷ4\JIT%BS(R$Uƭz# Ǣ}ix!eouIuVf=%Jt!ҿyi9$"w$SƑ$SQ+ʜ jnIHI;ԥ3:ϕB:}L&Dڨ2v@QufNw68lݓȭ&-eehvlIlؙ2:fojchU|Y*CHK@ѫ Aa䈉 -9L!z^ P ߕfLF_-NS DY X+OlRsn:HBt -\ >TY2 ݖ2K'd+h,/ZYuAuK?hRRmڟyyjop'@ lo#q˥h˚gT;y7aʵ^@d^m߈b NOK9GډOCtQ@+ާ_pux:3s\*ON50rKE9Ey T%ΰi 5"L~`ޖC -ޞ|QwZClsUvST`W_ϗhUVh]ǒ^zJnCcҼs@ԼSk H3z~ ,DOeڤ@IHkQf`{(z B_쫂I ѵ+Fp:\eJGfic:48_cZl6JlhPL]6C+/.5-jE nJ%lUt mS',6/ݗ"y1Y ?jB F!>oܫ:endstream -endobj -642 0 obj<>/XObject<<>>>>>>endobj -643 0 obj<>stream -xmo0)%f7NBZUjӭd&!M^0#['wNnȁ%Ӏ؇ |3I>~U.LEABVĐ-9Y>jE \A\)=a)no~Z2u^F,(dk -5f,3`4 | ~Lgˡۢ,"iJI]Yw&Q/=n - UFfcgMD1`JUSs7̄U}~1%4RNWj`ތBv6Fe$~Ik)m [rWglT`Ntrhq\puΥ;6pS`ݬ$֥ ,콮0X V\ S<`*=g2vmӆM/a{0ݞG(fc~V*6}Wu}W-T% ü葴}Q佈q1QZ7.oCAi!o(Eir_H羒h@Rox ת2ZJet3R?̆˺X6#,Nc{~]!H9|P_endstream -endobj -644 0 obj<>/XObject<<>>>>>>endobj -645 0 obj<>stream -xUn@}+ёX22 K\Zl$˅%qkl;kLJb BΙ3s -): Vێj 20)8l,|<0lGO(ہ~4d@)5`eMp,iY*K*'77L2$JZ %ўETUݟ;K_%iI 6NKAյ=b)ֈUaTl[[g`{K]2DUyI]⢄|<)yB^R_` ."vNtsdܛMIX0 Qժ -,>/XObject<<>>>>>>endobj -647 0 obj<>stream -x_K0)|hL4I}I>2Pԏu0 6B8rD@qE %8#e, b"Kt%.Ք|xse_PϚP2A8:{<݅mXLt>m8צMmʴB-QkЎNpܲeUw#`iZSe's>ͣ٤+rY Y .\e8O-jNsFGR$ S@}v0:>/XObject<<>>>>>>endobj -649 0 obj<>stream -xWMs6W%ӒZv{1!(mр ("! -k%[$dF$x`BcMh>8/glJ9~O**#狃g4Ӣ)- -1ѫJt^Y3$\Хխ.Zv_<8."tݫ>)S\MOtG8V0190D=XZy6TZӄxJf >yq>o4g,47lf0-_Ye1I7]XK -d) - ZVY-$5dhڸtX"79l\! tV*U`@Z8ELзw9X%c.z2؄~lyB]!p08+Zl#A Ig%JY-.REE JUm;+l'rqBqB:], -0[QPQ2uPDU1 v7dwo]J l%ٰ&vȺ/`%,!ѐ8oQcSbYGd ܒW7[xx"|`sPwW®F9plYcECGoOw1?fY6?91cfq,n@endstream -endobj -650 0 obj<>/XObject<<>>>>>>endobj -651 0 obj<>stream -xWnF}W ٰdIQ$')ZZ%&ؐ -ݕd9$Ϝ9s׭ӡA^))G[{mzC)nKJVݦQҠ -=UwC6T4c'Nͭ3sC;{ۣ[]beF -.s.WzKSU>Man8"!S]2u9<TPfQVDCheE!QwqZ@OAs5^AEWO3uUO\Bj8t8Z9|@7-g2M13v(FLp)LDV ? [f^'$>%@K j¦FJu:>ē,YBl93kbΙNT*3i4bYbTjCp&=~tjt/; l¼英 $.lb\dα.ί|r.JSeWXYas+I7h+[=|Ж)R e"Nv\j]t\1I -5*ta;-o[޾"B#-*X6ݐԋ/ -Y\ 8yn!'Sa\y,2TXbU_7kt0P^^NNk -I8{P|]1h'3f&PҾ;BsUD ,k])3o*48k%׵bYP=r|J^K^:ל!cC\ -ţ3 RBh6j),qfM&_kEnUSD͙o;qҿ,48=Ʋ0r' :Pqs Y8UZ:!ƥ{xcM3SUc96J$ Y5|-bzT&4M) vfNaV _εyoY 㯀͵5ft`bK4J -'#΄C\Oq%VM,Kj|'$r/{aw7 }up~xrb+r{}3>q4Ss1]bHBĨܱlA5h믭endstream -endobj -652 0 obj<>/XObject<<>>>>>>endobj -653 0 obj<>stream -xWoGb>$5gpTJ*ⓢTrM[{g}11""7͛7÷6M([zg;ZItԥvb}JsBVҬ1)=hr!*]{y2IM.I +9mTUEI_ܑ*\ɷJVSQN!ڋQ [92R֬I'_dVf)CL+ʹJ:A uf/p2lsjR.yMJ C-UqCfAW\!\ cWTlvI{5j!ZUBTqzs/)`Oدw!گHr')Z\,I{JC4,rȖr `_g *8yRcZ&[!@hHU.t (A@YTzI0E(#-C #*ge(FrG6CdzmDpdOn -IDY2\S)P:@T8`4Rnչ5 ᥍tzA)"’勆;sVk-W<8Ou͹+xSB]#(t+0HAw4kt4i.~2`l:>[xH5w?4~n&.gOZF&ʵe<DPs6 +}mb3H@9F `ĭPZ`ɦsB}~Z;ljbnm3~K5H(K5~Ny̺Va!)o(f[ -LW<\d;CY3NyK1W + ,vewL}ɤ\bF9 h ɡnB17.8̈́j^Zo"7oaPR*`y\-:۹5_]h'uV2` S*᡻igD/X9?ZמG0 F~ -Z;!׭o./&]"fyO@)A -nbŽk@4p2AwdsDt5Iz9*q*+%أ}]Z|f &mL&>Uꅃ[3>Y8cagrY9L*h80e#P Fj,CI|fmO=2o/Z: W_EYVo=BPp|1ah#cZ;qCnzzK`Lq9rU]+oݣMto8N !Z؃T Yf -^ ,([sOjI߲bo?{ߩլo -& \^W "={_endstream -endobj -654 0 obj<>/XObject<<>>>>>>endobj -655 0 obj<>stream -xX]o6}ϯb-q5@dhD$;,ى4i_K{ν~c]a8NMx0ᇌun˦i#k00#\ -˞[37oze~}3_]L/_MF0 T :VK%2&a칡q {ɀ cxKaj%N.eʝԊ,LZ&BʁSd{Mwֽ"V{@ڊ;#f֙0O1CR>'+2MI{%[]!et*@Հ5w҈GV("- -n9`L1"u&@RTPJw|2ZB{bun?_?\͎N2 lز2f=BmH]`^TO'g cwLSVX:i[6.t/(=+d?x!T]_U:Iɚǹ-έ+3zh6soI8&#>,<Oz@x(7]T}*ZI1[,2_iBXtVK -$aTX=ؚÅ3\B: 04,4Ldv$O?B<臈s(LtdPL lt"6O{@OGОDb tҁ/E+Z9Vjk%ƐR!*w !k6͇qmPvp!ʺT 2ȶ^j܉6ACr A QFL -xM,,;c@";t7f>/XObject<<>>>>>>endobj -657 0 obj<>stream -x5n0E@"ibї C\~}'h57*1IJ&:>v8endstream -endobj -658 0 obj<>/XObject<<>>>>>>endobj -659 0 obj<>stream -xVmO6ί8˸7k˕Pv/S 6>i%v=NhZƄƋ9˱o:QZ~?JF4<\N.hУy%az#+QyiOV AϮni1E> 0`#,0R¬sث;#̝$R&Hj2NReG'J,T3yC5_ZSWLC9i' On%PԔG1?-J*cJ-(pY*h:À3Eͯ qXQ*a1qڋ'R =:k+&Co_n~Ln)M3vN&nv9|cu󜦟?}O|+0Oxy8'U=,7 {yc΢9yo&܂]Od7䲫ܠ)9UV$$'d(h- -Q}=j}- [`w7; &נ|UK3# mW2+-3R:@*;ۭ ɕsj = ^#‡-P᷇ ME1A36j0i#U.ћDl -s^X_WǤ9* -˲B-qj,osZ2.:M&\銼X.h2iqӐ[;^ښB{i:Mꌬ[ Е2yqlh'4"sC,lftLgh\3m[7xPe*EKVV*9|݋>"/;$!ïFZֱ̚^Seg@#t!S0\a͕jLV-a"9$=vN#.C`H^"W/>d0hW%Ti$jrj&X(̆= -aqBPts֬lZW0ofнrc-sH/(wbvG5])aZ|P^xv `"t0hx -8pPnMIHf'$7dZ%k VĒi1| -LIq -luLUn1աJaH/3Peck iboObxG9Eyz%t0{UsD)rCz}v -[ԫV{O* {=*tMl86\Ja2Mpmi40_[ueendstream -endobj -660 0 obj<>/XObject<<>>>>>>endobj -661 0 obj<>stream -xW]O*I}WۨAtd_\ͺ]0wLH3S@_g%fctǩSף! 7]\Q^6;:J͖xruf ɏoתh8lTfEӛ?i󁫓ُhbxL]\G0r;>M9o;҆,dr;K.i8lWr0e<Ы@+O[T+iO:dxj9{O5R.ጢL9m$ /R@*D-׾GGkXsdF7^2JT%UUj\g96UR 0b_߰ۑgmmlhr Zm\ v^(AT5-zt6rAMݧה@ Qa>{c<@=%9.yLx>wH;UBp\4 Ĉ](F3S=.V\: {uql-XHI6el*F =Ǯx@x^v+.xA -4j[*ސg*i}mG.,huՔAOa`ip*asA4mb#C:~.z5$YUz+JPe'GDvv\[8[FD0"8cZ-P>d`s#B7zUzjZPG`{!lє&c&Lx8S ,ffTyed*@Zi-oT#]E%L"^9aZhT#,),a#0 V013 4MRJ{vza6sxA@-rpMKY7 l\QF#8xx 6"GF - cw4Fr`'},jTJh]dB@QK~2O!x 09da$xm|R,d+Ȑvaܶ 9.kծV&J;:ntL}E(v yn}8k, д=o6u`:gQ|E}`pώ:^>/XObject<<>>>>>>endobj -663 0 obj<>stream -xVn8|W웒VlǰMs>D٬)RGRq7KNš-چrwvfv=4dh6^ 8Iu<ή78u0nJ1-k<>Ӳ"<<Ѳ/24j?V/vOe5 ;U=@:P:~[ѵ`\WWʗ F2`,UkSdP欅@4fsN MX+95ֺMN7I>b:)=Wzd#K+ڷSvmZBJ+YKHS W9 ,,BV}=Ge!-|f2 59D+ -W@I=a^d9Is`*c ̱ d -U%p/m%VR[V+aYhkU~$(Un<5[Pl#]BXn38z+NWGڷΚ pMm^)%EЂ`9cP)w|PHNߐ̞ Tx#nM6 O[>WVa5ēpH>,c$? -զHEXİG9ڜ`ɾ]M?;^k]rd[K?YnjFT> -RdQ{Ls ʚ ɥ%=.:B"^(< 3vWBwmS»G,+R%ˇWd3[;P Lfs@/9i~zz߿\/HxS` -輸g$d뇳] uTJ:h*ivX6Rz\_)mm Kᚫ@ -Z3\kNE4Ob'pkZZFi𷶅"j#X&KƞK`VS*꘳e\\E53ok+t>+옸:q˓N-endstream -endobj -664 0 obj<>/XObject<<>>>>>>endobj -665 0 obj<>stream -x}W]o8|ϯ7'+vron;hp=@_ D٬%RGRv|fIjдIj;;;;fDC|L0l2|0`2gӷ>=>z4ҲD~(CZ淣q6}]гҖ"w84(8t*Gˊz]V^XeZG[J}k뇏7ҿwғ5WZ:2oXWKv]`4_hgDnQZőV^Jy -d£sr}2TRw2p*N tP\YɂSd!R"i^Z;kS@46NpoK{ֶ mYoD%Xs7(؂!:z!\mP=aX>b󈤪4JIhÞ$%ҭ@,[/H@E ķBxqa12bGz@竻0݂1eq\wysY =ڧ]$N]!bzݎˈc`p2Je! pb7xO罕"sg]EA{#Cs*|ERZ;61ʐc2j$k#}Z`*I+v w1 -e0T}(I;z,PGb>[uQd( -18b<rc\VN`Q3^gX%zQIHOt+`-0?&JN?C1έiMX1aUcJ19dH-%@  b\Qh<8'sRafB4hP<u1W]_ue"knbd=-<=6$YB}|Y$KLD³%qB?\S4:礂89,4?`[X=uYnC` 4T@CjȨ"x+Uh2[v IUK>T:m%h/`A[(OUu§d*ǰ' -&S]| 7vP@8 /@/@Ы/]R7?dGdÂb9|4``#>iyͿÜendstream -endobj -666 0 obj<>/XObject<<>>>>>>endobj -667 0 obj<>stream -xVNF}+RB$&JB-1}m1l:ہb -!ʻ;s93u4>~4阢i4CM'Xkrcr*_G'# (LjP.ãߏendstream -endobj -668 0 obj<>/XObject<<>>>>>>endobj -669 0 obj<>stream -xW]o7|X% ˖<͇ -y(;Bwv;Ig@aO$wvvv`FίhNtyjzAs|>ß״:x88yEgXa%a)Go*Fiv>?,)[>6Ηٗrl;>#M齍ޕ]]zAY^z6^/&V+M~еkm#U[M` kZͲVӝjjB& d݆1` <{UREM]@Yl cITE[Pz$HBCd8AivvVPxԁ*>~6U; { JqN~*NE\0vѣ"k$ f7uu e*pڪ (|u.:G~|!/g+]?\)6J%$Y2vkLcj9Ϸ>\*3u]*X7KQBKVMYJt" F]=uϕQ0ߚ9JL0#Z@)lfJlUYo,JeyWNx@GW4q;׏X(_4jmͺ!9.lkSbBt>-ӤEerKMkp8n. -GF&4(.$d 9ħw| @,gePupԊG{8hL Sa^O4CIdѷmLb_ͻ .Y;[~Хԍ`j$W*yl)*.$K1!XV.ڬk %lDW阺[Onލlerzɑ囄;[kTj[ҵuB]3 -wP+8!<8>km09(>6f$.)kⱯ۱B2aQ㠞 -%U -݃5wV!: -6Ăv܅XEy.g C-e|β1\ 7ص_A ƨP[ -ϴ45&.7(ΧDc*:l"GY8zgztڣC $1Pt5 ,0` QԈLj==hE1 ^贒f+'b:yJsoKb:/σoendstream -endobj -670 0 obj<>/XObject<<>>>>>>endobj -671 0 obj<>stream -xWnF}W Xl4uaIZi\yX+ik..II 'u^̙3z0 i: ,tGo$-g4|#ItJp`0yGWlvnZTŘp7F\M" -k r8pTN; imӱNI9 -WRɇRX ݕ8v%zi!-P@GlzdN - dDspEi%ae_p)K"u.i#JoE;s(mVekm@錒}S 7Gz?0C V-Y ☳l۱ΝPʗ07j?Ǡj|4j;b7HG:l]$Epq7Zٺ$AŘUTG'X` KtBۣv^{A|:E9W.2wN>AmS4<#/5*y)(b$RsV]B+DOBX7Fpe% :e* V2w$0Vo0= -tVOP5_r'?/Tr~ kiGU?gq̄˵r~˼s*+/eϩL>( faw< R-nKVEO-7l|_#N6w3u@j cjU\-T,@2_x ýQտ\_m<dž|3q,WNBjDaU x\[_z-bVY4P)8Lc*QNO&&rg ֲ݄Y;PC1޷+c u>/XObject<<>>>>>>endobj -673 0 obj<>stream -xm[oH +*Ȏk;(Ƌ-Pa$і0/9%F~14!`D~c'!)c6r2[̱ʑI`E4Փ!Ffh -“~u\i=H9(=|S9+-\SwsksXG򑰼Z ṇ4JG-I_ۯ/=˗^>1&}ǛH <6pd-dm/Lht305XmHtFqU롧Fw'~UFX'7rG?h|O4x+Rta; -;O5Jn)#9dq[/W{UYO^G&\N*1P+(H<!:,:;Whmm*To -T $2vBVePF՘l -u괃EnKw d{֩<^#g{]5㍢R6g"h_tܤ,}9S 9y%_jP-t fژ4׋7rژ6yJb (ZK?gyI!sGuW?;-O,+E/¢ދAC9$`L&Mq:~,#f. -12㰎19nG{K5gl -[#U>KBa"z)d*yC8'!긮Lϧו?ѣ-vntMMvLE9\xv{tt!<}[ڑ' ent;'dHvMגд4 Wj?}endstream -endobj -674 0 obj<>endobj -675 0 obj<>endobj -676 0 obj<>endobj -677 0 obj<>endobj -678 0 obj<>endobj -679 0 obj<>endobj -680 0 obj<>endobj -681 0 obj<>endobj -682 0 obj<>endobj -683 0 obj<>endobj -684 0 obj<>endobj -685 0 obj<>endobj -686 0 obj<>endobj -687 0 obj<>endobj -688 0 obj<>endobj -689 0 obj<>endobj -690 0 obj<>endobj -691 0 obj<>endobj -692 0 obj<>endobj -693 0 obj<>endobj -694 0 obj<>endobj -695 0 obj<>endobj -696 0 obj<>endobj -697 0 obj<>endobj -698 0 obj<>endobj -699 0 obj<>endobj -700 0 obj<>endobj -701 0 obj<>endobj -702 0 obj<>endobj -703 0 obj<>endobj -704 0 obj<>endobj -705 0 obj<>endobj -706 0 obj<>endobj -707 0 obj<>endobj -708 0 obj<>endobj -709 0 obj<>endobj -710 0 obj<>endobj -711 0 obj<>endobj -712 0 obj<>endobj -713 0 obj<>endobj -714 0 obj<>endobj -715 0 obj<>endobj -716 0 obj<>endobj -717 0 obj<>endobj -718 0 obj<>endobj -719 0 obj<>endobj -720 0 obj<>endobj -721 0 obj<>endobj -722 0 obj<>endobj -723 0 obj<>endobj -724 0 obj<>endobj -725 0 obj<>endobj -726 0 obj<>endobj -727 0 obj<>endobj -728 0 obj<>endobj -729 0 obj<>endobj -730 0 obj<>endobj -731 0 obj<>endobj -732 0 obj<>endobj -733 0 obj<>endobj -734 0 obj<>endobj -735 0 obj<>endobj -736 0 obj<>endobj -737 0 obj<>endobj -738 0 obj<>endobj -739 0 obj<>endobj -740 0 obj<>endobj -741 0 obj<>endobj -742 0 obj<>endobj -743 0 obj<>endobj -744 0 obj<>endobj -745 0 obj<>endobj -746 0 obj<>endobj -747 0 obj<>endobj -748 0 obj<>endobj -749 0 obj<>endobj -750 0 obj<>endobj -751 0 obj<>endobj -752 0 obj<>endobj -753 0 obj<>endobj -754 0 obj<>endobj -755 0 obj<>endobj -756 0 obj<>endobj -757 0 obj<>endobj -758 0 obj<>endobj -759 0 obj<>endobj -760 0 obj<>endobj -761 0 obj<>endobj -762 0 obj<>endobj -763 0 obj<>endobj -764 0 obj<>endobj -765 0 obj<>endobj -766 0 obj<>endobj -767 0 obj<>endobj -768 0 obj<>endobj -769 0 obj<>endobj -770 0 obj<>endobj -771 0 obj<>endobj -772 0 obj<>endobj -773 0 obj<>endobj -774 0 obj<>endobj -775 0 obj<>endobj -776 0 obj<>endobj -777 0 obj<>endobj -778 0 obj<>endobj -779 0 obj<>endobj -780 0 obj<>endobj -781 0 obj<>endobj -782 0 obj<>endobj -783 0 obj<>endobj -784 0 obj<>endobj -785 0 obj<>endobj -786 0 obj<>endobj -787 0 obj<>endobj -788 0 obj<>endobj -789 0 obj<>endobj -790 0 obj<>endobj -791 0 obj<>endobj -792 0 obj<>endobj -793 0 obj<>endobj -794 0 obj<>endobj -795 0 obj<>endobj -796 0 obj<>endobj -797 0 obj<>endobj -798 0 obj<>endobj -799 0 obj<>endobj -800 0 obj<>endobj -801 0 obj<>endobj -802 0 obj<>endobj -803 0 obj<>endobj -804 0 obj<>endobj -805 0 obj<>1<>5<>6<>9<>11<>13<>17<>19<>24<>27<>31<>33<>67<>72<>73<>77<>]>>>>endobj +j*on$;؁4F :?#pG/OػYn/QlD)v@Cyqt=YT;r_kmbȗc;"֋>Tv_pc]Q r^endstream +endobj +1854 0 obj << +/Type /Page +/Contents 1855 0 R +/Resources 1853 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1826 0 R +>> endobj +1856 0 obj << +/D [1854 0 R /XYZ 85.039 781.388 null] +>> endobj +1853 0 obj << +/Font << /F65 1062 0 R /F36 947 0 R /F15 943 0 R /F11 968 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1859 0 obj << +/Length 2352 +/Filter /FlateDecode +>> +stream +xڥYmoF_T*WI v-pV"%H;/)QEQk;;;/lك3- 6E+kOW)QGؖY`8LI7OHaؾ9Ah6뼊 ЁUیU{ʻ[~2 .Y#kj23sjKa1oN]?%NL9a=Mw!Vf8v.Cdd{x[?GL{q Lfq +>! +pokq1+mVGdxP}Vi[c6`WyK#;kZAKNIC]EםvHN1@ѩ8ZlbLJ3lǨ6=yH%(BK'$<'MP-st"QbOОsWb0NeU,X﵅ur@|7O,CQ$:N$K_ Iy6;9ҭ0t-"P9WBdw0:.t^1k6Qkur 1hfQ(W:=L+ HzIdsoc MixaL0q()J|6,i]%٢#盇D{$CQxy(9eپWlews, Ӎv#ZI(?}}>u}/O,5]48Ҏz&1Ow ։cxr +T1xQBbU{zeRQ\za̿Ux:TPKTD)HcCmgFQL%=Hљ Ci^El\h#+lLN?ypyh4.'L׊zј+ݐ:vK9?<`̰?0^OZoUy Cv3a}n[`F_Ḃi;S9&[}-\+m.|fw9TW*ꩴJ*9_gt׵?Мr,? +T\uKN}.gjGyUcTݳM.^mZ0On&_ƇHВ%Sx,wEJό?6x(uoL恆nxdrlBN.U>U9[$=ZϦeGcKsu}jPOM=KZΝUo7}Ӟ^AsfdCz?+_|i2+PD U8W͉Sǚnendstream +endobj +1858 0 obj << +/Type /Page +/Contents 1859 0 R +/Resources 1857 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1864 0 R +>> endobj +1860 0 obj << +/D [1858 0 R /XYZ 85.039 781.388 null] +>> endobj +870 0 obj << +/D [1858 0 R /XYZ 85.039 681.042 null] +>> endobj +1861 0 obj << +/D [1858 0 R /XYZ 85.039 657.724 null] +>> endobj +874 0 obj << +/D [1858 0 R /XYZ 85.039 288.342 null] +>> endobj +1862 0 obj << +/D [1858 0 R /XYZ 85.039 241.673 null] +>> endobj +878 0 obj << +/D [1858 0 R /XYZ 85.039 241.673 null] +>> endobj +1863 0 obj << +/D [1858 0 R /XYZ 85.039 218.355 null] +>> endobj +1857 0 obj << +/Font << /F65 1062 0 R /F36 947 0 R /F20 929 0 R /F15 943 0 R /F11 968 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1867 0 obj << +/Length 2336 +/Filter /FlateDecode +>> +stream +xڭZmo8_aKf7Qb?]綋&nC0R`[^Ii,odʖK$̐| +C$>*`9_a_gR,ȡy;;{}IGݞ$Bl{z68 pT}Rt^^Dv6Bkv B}og>Q8xO( o@$5+3&fVD19qh~@B.HH_Ի|g(eS6p%yfR!mjiRw bݯacfX%?>ubreZ@PO.@BYpTI*^a ]ϧ#p8ϢXū[1G$RQCS8@Ro<=~79SIBYOS`M~"[q=umI$G%Z#M Mڐp^Z⣨~ĴJ_࡭5yAQՔuZh08ZrB*>%ۿ\p/vheaf6wesP8 uR&uaCRL n!Hd,q:!'!e=Q,Q  WMQqQ <;wZ%s!C+˩G+pʑ{['pcH$6\ ^xhX>s!£*Fd:C^0b="E>^W^\,$2!A1Ko$(,ZV=D6rVyԲzBL ٺ]&!.te/KbyiB)_B}?Pe 5@䡦Is̴+[YTb>CTM=}:s!F[>w+CDK)-:. تfFx WeV2e~(M{3vs%L_Z0U![. M{|C Y,C]GCR7Xs8P9rHuf{ 9=;YCaaLj»C(lֺ2vpW/>Wv^EYUw2o\&О]ul%Kr{ђs5u4Grx4hvU#dDjm=R =[Qnjj_;JUeޜLpl&\4tmR^f觖T`dnBP`\jz^3sO5#E&SWÞnj:)ȇ'7xz{=Lg?^'.ӢS/oXZv +"lA&0_Np@*y zɁ(6嚭2V]L>fgw#0Əy?|t1n2q:{Ӳv6}MJ Y6@S˓>,wWg1Eun2[WS _:aPWсɀ +v} qhB>0#g*Ư܃!a .1 }!op`oڡ GsX#,t/2>L9ӴxjFL1 _⭽n&Q tc@w^]dZjgWujrKR|9a.C}Td~#$_PV{Ruiyf-%xq'8~YgyI LiV"H*C>8zjwwM1[[i VSX>UWԈPl+/(M;9:ϱjIАIc SEWe[{cOOb9}[N8y_u42B9pӪg]@{zwtwprP߷|<#> endobj +1868 0 obj << +/D [1866 0 R /XYZ 85.039 781.388 null] +>> endobj +882 0 obj << +/D [1866 0 R /XYZ 85.039 256.633 null] +>> endobj +1869 0 obj << +/D [1866 0 R /XYZ 85.039 233.316 null] +>> endobj +1865 0 obj << +/Font << /F65 1062 0 R /F20 929 0 R /F15 943 0 R /F57 957 0 R /F36 947 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1872 0 obj << +/Length 2351 +/Filter /FlateDecode +>> +stream +xZ{oFߟBR07E#'-H-- Vlrzfv!ʵu8yogצN$U'(Q/-|8³$Cs<:xsUg4DHM~| zK0tڣݡx~lp0B v @?~L@|UcP^H"+3':fUS2OH4P? 'xRF8eyU, !xn'Am^iZ`wZ뺦DQUwIn:Ѐ1ewE%WO + cڵd "R%-{d^=Gkq챨g0 fK:MW5=fÜ\S,` ikvii:^  WV} jH^ U: +a—Mɤ H()_ s5DBD1UHܖ,TD(,Eufsx9ͬcS| +)azmYi +6͑3srb"N'4*E|b|6jT'>0;bN!/0:f*IPcwP)o_ +;!|¬1>[% jg=<;eD8].k98犨 ,=^MZkm]nE],̭ɿkW%ty %a mOHt #hhijk ;ܽ92 Nx''=Ϣ]:Gm4UC9v/ Ͻw}/486L̗DP# #]2FZvQ41/Ž"h$ĤADDe@taZEB_A*,/aPt!Ƒ#a򤪨ZЇCќWB0"XPRd/b4=~X#6$3 Z%jAe/[ .@|&)Fd2Ua6O#$رCmhZРqU|{ 2jW +v:+*h%NB8T "=,@if'ůg!=emgZESNU7V(SjԹʰmMo_e)Eu8/QQhlG4.168h)zؘ%4"E5oYy^ % (g+X\84x!{\`jfmw Xֿ̃9/aPV9Z9aYv0o=TێB)pڶ3br]RA%Nxt.,>ة nn/ ~ѥx*Wھj7Ӡz N.$J&㛟N77QW_ d:po*Y)5/6_!lji_?Z;$I Ga,E2š?gflLɩyb415^7G'//n'WJo+%%O# XR;=|Jq .Z,D.#Z2ϒ&jXydǷq_o+OJ65q6 mL&N{x۴m |feFӫRZϮ&_o染 %3? Z o}Lq2!lM0h +P ê #}JBԔRG-kbJA"JuUa"؋9v pJOHtWƙ|)9ƨsSd{"Pz-pܣ!ە$"T c?zV;ԊrHHȽ(jP2IāZb-]8sO6z*lL:s{aYÕȀ>f WcP{V%ڒDCJ%/U $ ^ty(xh4Wix$!c-޼94ln{>YmӍқe>  6 "o6E:qڌe4!!-zwqkMa{VGnHVVs_jؓ@KȊdJ}USuxfI7A f˕I? }TM'/{@WauABY#^;_Yendstream +endobj +1871 0 obj << +/Type /Page +/Contents 1872 0 R +/Resources 1870 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1864 0 R +>> endobj +1873 0 obj << +/D [1871 0 R /XYZ 85.039 781.388 null] +>> endobj +1870 0 obj << +/Font << /F65 1062 0 R /F20 929 0 R /F15 943 0 R /F11 968 0 R /F36 947 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1876 0 obj << +/Length 1115 +/Filter /FlateDecode +>> +stream +xX[6~`/dnldv6l _ecΎH:: ?@iv]mAS 1kc^M5=-H8 ~ӿabudtW40>w7 cx|_1vz`6 bPU}ћ>TPh.)vuqBl,DYC!dƆI-On_=|L>cR/$R(,BUL$_&\ 9f"Nq _0_N45_c}18 @4ZE@c96A %j4pM'MI5ݬE|S6eeGUN|U$BU68Ɨwg+P. 4Ѹ5;G7Czҷ&*[V3U:->yF|q +/tD5BFU"u]P=!# 7ICB l|мשa9z_3Rb6eI>I5b+b䖕[+9Xf 7̜qj6M.CLa!fS;;FA)VD %b +F-Q\8_n-< ]nendstream +endobj +1875 0 obj << +/Type /Page +/Contents 1876 0 R +/Resources 1874 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1864 0 R +>> endobj +1877 0 obj << +/D [1875 0 R /XYZ 85.039 781.388 null] +>> endobj +1874 0 obj << +/Font << /F65 1062 0 R /F36 947 0 R /F15 943 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1880 0 obj << +/Length 2487 +/Filter /FlateDecode +>> +stream +xZoB'J6%%mrAJ-DR|g!Eb-ݙsI6 "Tc&+:'ba8LxsVFIJ@Gf%y~yp,H&ñ16ǻ!K>|WooLAs+LWaL +`Izq=)L:1KIU4#R8NBk@Z73pɨPINnm +Hs +%b5 +sD&*N\CS&q\[ziRlx%h2*A#Q&Mw]ɐ[",a|Lm5"kj d8Ł <G.yzd*MՀ -1ڂH/aBkOJ@K|Vsl{j&_$ՊOHJAxw;a ^tIc3TZ4_g@{`s=QQ>ĈZPFhAR+^3B#y+An8X<jcɉgP9h(TkuQ\]I(o.Zمꢝ[.~a C` եrJl.t@D}r}ą"*e@ : Kl͖\{{cU ': U#vȂAw3)V![Ձ N-`[OLP(]񙋐Z, JLR@cɭa&5ǒD ݉j.h&=y?lP;l~Gޣ2COU!?Kmy([WDAՐ}Z(NgaB[cJJadiKo/Ljx|!Iu ӒL%duN͡?,@fSg9edKJ!j^M/DGpR.IY4 mb- %n7dxf,2F5)#zZ9OܰTJ,$kCt{PWHC\Ry"vyV"OCA}?&)uಌFtZtx?"vdjbYXs46"ؼm1mTt6&| xZh_+!忧5.Q}I klIu`[R?oNRt`V2#޾0RZq?U)asYiRs.leB.krY;X3>>$}0f816l2Lp d- 8VTX+}y( څB.+Ym%%],@f%VN'PZlCo ]I^"@.4mՊk\)FZDӹ +>EZ v2*Ȏ"TR NM^C&2 +6Ԃ>؅GָDrrؔ l1,.kXmt) @ b**YeT{QSw}.MjIaʠd$[$Y↪Z< +l]'U{[{a?n觾>/]/8_3*%i.=vH*񰣬fq=[nj_~K [~ZX%nE +*6 !eBlgJ-ʔv'R}fhKj$/ .@]q0&l[Fkbؗ6jG%]Z +X @Z-@_>]]d>V(]9ҷ%[SnMsWp*?sf׎G~O7?Zo§[K+"cann?tmqxRG&Ԁ߿ ɬAx3į Wyq"ϦZ~kXӬby>bۗũ拼z|PXendstream +endobj +1879 0 obj << +/Type /Page +/Contents 1880 0 R +/Resources 1878 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1864 0 R +>> endobj +1881 0 obj << +/D [1879 0 R /XYZ 85.039 781.388 null] +>> endobj +886 0 obj << +/D [1879 0 R /XYZ 85.039 761.463 null] +>> endobj +1882 0 obj << +/D [1879 0 R /XYZ 85.039 736.911 null] +>> endobj +890 0 obj << +/D [1879 0 R /XYZ 85.039 736.911 null] +>> endobj +1883 0 obj << +/D [1879 0 R /XYZ 85.039 716.383 null] +>> endobj +1884 0 obj << +/D [1879 0 R /XYZ 85.039 716.383 null] +>> endobj +1885 0 obj << +/D [1879 0 R /XYZ 85.039 661.784 null] +>> endobj +1886 0 obj << +/D [1879 0 R /XYZ 85.039 634.685 null] +>> endobj +1887 0 obj << +/D [1879 0 R /XYZ 85.039 607.587 null] +>> endobj +1888 0 obj << +/D [1879 0 R /XYZ 85.039 580.489 null] +>> endobj +1878 0 obj << +/Font << /F65 1062 0 R /F20 929 0 R /F15 943 0 R /F11 968 0 R /F36 947 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1891 0 obj << +/Length 1026 +/Filter /FlateDecode +>> +stream +xڭXoX_G nttw'V;N4dU4M=pƨpw^p.D!fj1Vg @C!^%Ϯr14J0rћ T7._ӈzeahSx5r;We@w?{`W#pBH VϕmJ UJ9ș=dfCMdjq86rǷǞ)ŇB[LyB :682ПD!̼ey$olkCLϕl&" Nw1j;>B1 +TGKeϫU^@NsƟQ;.>D³yeA.xxY8;qYةC]k j7RA8!Au>M{3aps`@GmI4ah0>u}(ğZ!j+v)æӓՁ]E&cW]G5*vehxPkhzaq8?˕,) m$&QT"Ā[_ҁB#ekM4d#* (VKP *,e1[8-8;хVK)bl 6yJDmGf ?3L,:Ⱥe]7 @m2]=Nek繍)iMlC%%%͜dppϴ–@}s"=Sendstream +endobj +1890 0 obj << +/Type /Page +/Contents 1891 0 R +/Resources 1889 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1864 0 R +>> endobj +1892 0 obj << +/D [1890 0 R /XYZ 85.039 781.388 null] +>> endobj +1893 0 obj << +/D [1890 0 R /XYZ 85.039 121.263 null] +>> endobj +1894 0 obj << +/D [1890 0 R /XYZ 85.039 104.987 null] +>> endobj +1889 0 obj << +/Font << /F65 1062 0 R /F36 947 0 R /F15 943 0 R /F11 968 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1897 0 obj << +/Length 2723 +/Filter /FlateDecode +>> +stream +xڽio/h¹x4h6m]l-Q*RN}o 5):+Ek8ͻ! |ht'$'V~8bhAǯ"=!Ktp5Li9dz^]|8J)a'Wg<ɷ_~|sa>FxO~%LOB&d!㰼8#V>O.OU55]] j0628:bqb2*&P &)*ߌnPo>~xŇ=:Ϳf&8a%,f',mY6:\ܮK8Jyjt~(d ֖ѲlkdR,a $6"G5.UuRb0M 4b2g*Ca+q Hy}"v;jVrAH#TwP*CT)eh=X!PJجuBKNDXwzl4 ;cNLwĬH6Az^O޽V`LdJL~ +B[c-ؚr` ^Y;^W?uNX-k$J5ߣ 44~}\ءd\_0jDPfVg;c蓼Ѩ'(wy.x:>D[\rSQTr|0P$y $R <*iRy%wQ*,vHNYi(?-WGNuCVsh T2xXfΎ4mӇ b|&^&A,uyL9.g7f$.(.6JdGy7B|B7+-ȫvOHM+g% /YTHkڦ|'3c3ʸ{W<9M9TrTYe38Tf %2!x)|쯡`TcltOaZ\CY4d! Uء%oo__zKi.y!ѰqrYvN36txV^sr_/5% 5RB"Z,oWldęF/d3Y-/ B- 2Ve&L:O Rh}SD'1K:*JNH˧}>'=:bzXE_*Qr*PUP$`N%Ͷ\6J3p +̯iiL!sȰ_M(ǗWt2]k+`lh/njStA`/E"°&`b~.am7: +Y< )ju[UƃfqA >+gPۚһj7:D= W?JB+ÛmCJYPZ\wPcaҤ0.kU +*~,;(KM\L3^h,VeN~)ɛ 3Lob@LBK >x1A=mg`/$(m(* +obi{2f'<[R F2Cq%4To@W?wJFL]wng iMz2E|𒈧 "MwCwvFfowtG*PcB=4 p&UDzgҐyLPWτl+㼗>^IZ'Q՞bfF9=l Z`Z}0 ^vN.*(#v]}  CۓY*+^Ms(ܪat *3:v@uρC0F$u!T:`6h&敓h#IIDzyVLwکH4gG?nr" M:"sEZ"W +* Vv4a<,Q&I0ؚ^N"|Z?J]d}e_tW0b/yni7t\xaR2u$+c䇎ܦSEiҠYʭQAL(F"l|M? }OXC:/iwCn 9/W|͓*^Xz|xҡ&ݟC6.$Z͘(nr7*+JhKbŒUŘw9ohf=7ג> endobj +1901 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [248.685 543.543 326.185 556.444] +/Subtype /Link +/A << /S /GoTo /D (modules) >> +>> endobj +1898 0 obj << +/D [1896 0 R /XYZ 85.039 781.388 null] +>> endobj +1899 0 obj << +/D [1896 0 R /XYZ 85.039 723.406 null] +>> endobj +1900 0 obj << +/D [1896 0 R /XYZ 85.039 625.834 null] +>> endobj +1902 0 obj << +/D [1896 0 R /XYZ 85.039 530.99 null] +>> endobj +1895 0 obj << +/Font << /F65 1062 0 R /F36 947 0 R /F15 943 0 R /F11 968 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1906 0 obj << +/Length 973 +/Filter /FlateDecode +>> +stream +xڵWko0ί`%Qplڤ%,:M&4H d@=>7i$s)!CTMY7P CʅElQj{Nmd>2l 4ʶapbڶUUh +w!󫅕?_J]-&E >ER@5 !@ty+ѐkxH+M銯i2KP2Dx +. ՃŠ0U<宾&YVGOuhdmvq'M/?f~~ܛ sꂁc2P'QZpUvY\NU*Fr"-'sTihh蜙iϯĠ*J mwBE lq#:&:0or(6cqcH8>Nfs˙==it#{8p&+ocUwf,LŴv^Kr-Qy_'%cl6ߛ6ػW>nA}q(DxPO +Oeo .qG祜j{74Y7SLuM`a ؆[wnendstream +endobj +1905 0 obj << +/Type /Page +/Contents 1906 0 R +/Resources 1904 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1903 0 R +>> endobj +1907 0 obj << +/D [1905 0 R /XYZ 85.039 781.388 null] +>> endobj +1904 0 obj << +/Font << /F65 1062 0 R /F36 947 0 R /F15 943 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1910 0 obj << +/Length 1702 +/Filter /FlateDecode +>> +stream +xڭXnFP ql$ l@PBR>P;,JQ)sC e~|=7pj5I͋B+N9N'O'L!=62}?0޿q/ޞ;dZ+Ł5~|d b" wT2z ԢW] ײ=s-G!3 tm׈ӸUՋMF"*#ZWb8@u5ZΊ2"}F8Zl7-ךgij>_l^ޏ(9Jf$niGrߊ#l+' yʼn\|I}`rYnxLMa8l9gq=C弌l#ә==(]"*gSⴔyt@d"#b1LS)526r/4D\rlh[Ȯ48Qdnj{dixdL7`\QFRF^뒫/fO.'tvv2=Aq||w~>uhILǬ$]Et9k:;}{y99` s9LJf;vQQϫydDubF*gm3:nY׋،^.ĥUvc5qySUqy먪l+U#y+HήY5+KXI׾+q\P_S/MxGJÞRiH/ޗ1[D%Y8'Z: +ø8HCap;ꦣ@AdzCف!iC~aˍxփ6q)YЩaXFy4x`mx@vndP`<4pc"(5 *Pm=}ŝ "7 "[2G04/Ȋ=]@{+Ǒ$T+|..5+|9}0a^ŦQ I>(#56^:x„$!{-@wJ;Y-mB),qu=V@=`BA):3)>g &,udе*ϠɄj +r!s. +&Rq=@shwd,]`_d{L)ӱm7ptN!A>_vLkV&0} <*TPf]CS8<%xY 1um>;9,<$:"QϜ;I?r'Qt=/NW8G5Ye{Qx@bo>ttw\X"wB`i+QX?`Xc=jdƊmj̅X?`n\MX d ak? MTG~R3xSߢnzC<,h|K|} 48> endobj +1911 0 obj << +/D [1909 0 R /XYZ 85.039 781.388 null] +>> endobj +1912 0 obj << +/D [1909 0 R /XYZ 85.039 286.843 null] +>> endobj +1913 0 obj << +/D [1909 0 R /XYZ 85.039 176.328 null] +>> endobj +1908 0 obj << +/Font << /F65 1062 0 R /F36 947 0 R /F15 943 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1916 0 obj << +/Length 1349 +/Filter /FlateDecode +>> +stream +xڥWmo6_K!fIQˆ}H[k&m"Pl*QkK$' 'r2`(jwǻ^?Dq;a$"gq8FJLȤ'|>zv(Gpؙ|%⏣DJ銀'aOofuf4F[u` F?F_rg ތ8q7gdʗvFZU:5`#11=p@A3!<&焊3}pOX\Bd<nQjV@9|YPbvz6]@Ah_# \!kB>xdޏc=Ϗ 1=?E6_Pw{$a?:W]WLqt="ȖTc7%⨳!2 *4WY+B~v,52NlapCL֛>_Jqů*ɗ@rrvi.?6wtKP()YB򷡉aޖ9{~xv~2s~lva6oFd@?\FdA"0^6!Q֤oKR'L5UWcu),{Q0tQAGC@cH~@)p5 +c_S0ba>*SD nkbᶲ *p͑1ddZdjhefE;K&[muUxFפl g1g'ZCZ6Q74ANhעjC1Qʒ qì5^wJiE_wZM1oT (66뫤IU)ECQD +4t)\F(VqsV0R4Xzmg'x&I\$&ݸÊ Xke$MVߜIaaY۔j"N.PZVS bQ.,߭e{{%$宁fci{ Mݥ %`_ǑgBhXT*VO5qMlWKڶCqX16&WVfԃ{σJ a0ov@1!I{*c6H0Ӧt#DrƣGHd_!"ϵIخJߋbje#7=^&}5=a^Nz.~˓|s&"CqMs?0==ϟѳ{ :;-ӓ_!k2R j??_ /_HyU+xo Ȼ WɈH/nendstream +endobj +1915 0 obj << +/Type /Page +/Contents 1916 0 R +/Resources 1914 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 1903 0 R +>> endobj +1917 0 obj << +/D [1915 0 R /XYZ 85.039 781.388 null] +>> endobj +894 0 obj << +/D [1915 0 R /XYZ 85.039 761.463 null] +>> endobj +1918 0 obj << +/D [1915 0 R /XYZ 85.039 739.701 null] +>> endobj +898 0 obj << +/D [1915 0 R /XYZ 85.039 739.701 null] +>> endobj +1919 0 obj << +/D [1915 0 R /XYZ 85.039 716.383 null] +>> endobj +902 0 obj << +/D [1915 0 R /XYZ 85.039 592.928 null] +>> endobj +1920 0 obj << +/D [1915 0 R /XYZ 85.039 571.731 null] +>> endobj +1914 0 obj << +/Font << /F65 1062 0 R /F20 929 0 R /F15 943 0 R /F36 947 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1923 0 obj << +/Length 1066 +/Filter /FlateDecode +>> +stream +xڅVnF +x|)(Т@i[-Ėt5R}ȱ;Eσ<"2)-z,A$; [c`C,W\NrɵaDsk|i&YU1Yލi&YL9;\ ֻs%sz?_~^FRp#oI4ׅt9- _,H$\dM6N+HN*|)@Tɋ@8ѽay HMpӧ*Y;7qOIA +y(B/1U["rC]< 3]B`wӰM9LUx!|O/4|HADR2ɴ2yI$'1* ƃv(2*N4ӹ?\,JEp C:Aӡ7淟x׹?X h9OOPek;> endobj +1924 0 obj << +/D [1922 0 R /XYZ 85.039 781.388 null] +>> endobj +906 0 obj << +/D [1922 0 R /XYZ 85.039 761.463 null] +>> endobj +1009 0 obj << +/D [1922 0 R /XYZ 85.039 667.044 null] +>> endobj +910 0 obj << +/D [1922 0 R /XYZ 85.039 667.044 null] +>> endobj +1925 0 obj << +/D [1922 0 R /XYZ 85.039 639.536 null] +>> endobj +914 0 obj << +/D [1922 0 R /XYZ 85.039 528.054 null] +>> endobj +1926 0 obj << +/D [1922 0 R /XYZ 85.039 499.318 null] +>> endobj +1921 0 obj << +/Font << /F20 929 0 R /F15 943 0 R /F36 947 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1929 0 obj << +/Length 3214 +/Filter /FlateDecode +>> +stream +xڝۮ۸=_#*un +)6(>ز-DCsr;7RNApHs&ڤli FN šdG%*Q0XoB_pg7lTEQ}h+_Cٜ;޾ggocr&8D6* %~4kmykU@ 5l“ |N]0~#\4v9bbhyd7^h+my_g / +}6; Ƿ =!ga;ކkǽ +#CT ,Gxpe]3Ή8Ep7{<_^ +b?M& 8 +$A%90{ (4CPl&| &K`"5EK׎HWv_\8qïHY22fS:NTy_{,(8яTlAb,awܪuwIRH co2AM,YޭƸw/ؒ' c2熌y@&0/@-8,z (|PE0vLzWx+Ed2@^4w-=D!'ify*ˇ`f8=4۰ LGfڙT@E,1ys 9X.cGǑ;qV(~GfvEN'Vg$朙`qԬ!.['My4Mm*IϯeUCGG(HN!$FR%;E#&z.ۀF6, 5'$JQp2eÃR'^ ),ϣ;cucĤ"QL㉜GNc:q6uİ׆R{3N +sePrY`cka7hMN!QU"GԞJՖ6y?cyA +՘iÞ M-XHy[}ݞN"2_D,w+?7.k0T!&%q}D#*ev0LYUc+> *3~=T[9Bފ˅nZ:$6uZVFuC>Zʎn +,E̲=90{b ۀlxZydux @m_Y=qz_"%r@"in1底j2I(+"9*<18L… HOҜzPFBV4xN~yLt"uA)>wW/+ը$:P(f11auYH*0fV剝+|ᡆUϓ̻#o(b^ 9e Y cVr2^m46ET0iF;Fd +'yk(S3rQg5$ĉ$`3|*|[1{$R^+K)ʬ8h Yz*P[hMWkD}^1uu^Vl۫9gyyL?MmR'Nfr.Bz>+zHdL_|6ƞz 1Q“T'0>(z70*.G9ܴ,K*p 6Q!q> endobj +1931 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 252.502 213.733 264.192] +/Subtype/Link/A<> +>> endobj +1932 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [313.424 225.404 447.309 237.093] +/Subtype/Link/A<> +>> endobj +1930 0 obj << +/D [1928 0 R /XYZ 85.039 781.388 null] +>> endobj +918 0 obj << +/D [1928 0 R /XYZ 85.039 761.463 null] +>> endobj +1010 0 obj << +/D [1928 0 R /XYZ 85.039 667.044 null] +>> endobj +1927 0 obj << +/Font << /F20 929 0 R /F15 943 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +1933 0 obj << +/Type /Encoding +/Differences [ 0 /Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi/Omega/alpha/beta/gamma/delta/epsilon1/zeta/eta/theta/iota/kappa/lambda/mu/nu/xi/pi/rho/sigma/tau/upsilon/phi/chi/psi/omega/epsilon/theta1/pi1/rho1/sigma1/phi1/arrowlefttophalf/arrowleftbothalf/arrowrighttophalf/arrowrightbothalf/arrowhookleft/arrowhookright/triangleright/triangleleft/zerooldstyle/oneoldstyle/twooldstyle/threeoldstyle/fouroldstyle/fiveoldstyle/sixoldstyle/sevenoldstyle/eightoldstyle/nineoldstyle/period/comma/less/slash/greater/star/partialdiff/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/flat/natural/sharp/slurbelow/slurabove/lscript/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/dotlessi/dotlessj/weierstrass/vector/tie/psi 129/.notdef 160/space/Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi 171/.notdef 173/Omega/alpha/beta/gamma/delta/epsilon1/zeta/eta/theta/iota/kappa/lambda/mu/nu/xi/pi/rho/sigma/tau/upsilon/phi/chi/psi/tie 197/.notdef] +>> endobj +1510 0 obj << +/Length1 777 +/Length2 1024 +/Length3 532 +/Length 1587 +/Filter /FlateDecode +>> +stream +xR{8TiT#OH2f0.c/nHc7pReGPZit_JF.Vk"TZn{h{zk=~~? Pw>Np\> r 8' J^ +1`g8N|< i"ƈ)`#9w $QJ %PPBB* 1 (d`A2ƌ`|+b lx88NGʡq]ƫB9IB!:wXBBFMB)7)MbڤP~qq<MdĢ""= Bm3 f<$Xݨ.ٗғC͟uWOqi?nz|CwbޓψT]u\/q(n4uIָ;z.[ZK%}_mimߒv@dzS¬VyVm5Y<>V=:9QvrO\BN~ cFW_68gӯ Wδ70Iӧt˝Ϝ~-C=_9q,r֕xu5\Lg޻iyLzhߍqM0/\=KK] +V X.ӕaoJz#2dNʯhbERUXٗo"nun^c' V^pa"a+qF)-A43 HsL`dmDI~ +VY4# K]OVWOK ]e^)6jBncO˴FB{RMlk"QDgH +* +7VIq5W%WØsjZ>M6R֡^yĈevIhE/UgO*8|^螢 ۚ'VvjI9#M|l㴌M0U~^&]U8~MĜ}:w}{xG`f8b}qj]A/]5zhv9 g*v\:T6k8>5K߫6SK9}eۓ 'W{s u!^ވ*0!Mjg_}ԤLlWa&Xcg+yNz]6?~r0;g ǰt:JX/<"[s=%TS%mS W6;׹Kɦb$xysT}aRj?֍}4ŵeÇB@AI@Zendstream +endobj +1511 0 obj << +/Type /Font +/Subtype /Type1 +/Encoding 1933 0 R +/FirstChar 62 +/LastChar 62 +/Widths 1934 0 R +/BaseFont /CVDNVO+CMMIB10 +/FontDescriptor 1509 0 R +>> endobj +1509 0 obj << +/Ascent 694 +/CapHeight 686 +/Descent -194 +/FontName /CVDNVO+CMMIB10 +/ItalicAngle -14 +/StemV 113 +/XHeight 444 +/FontBBox [-15 -250 1216 750] +/Flags 4 +/CharSet (/greater) +/FontFile 1510 0 R +>> endobj +1934 0 obj +[894 ] +endobj +1935 0 obj << +/Type /Encoding +/Differences [ 0 /Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi/Omega/ff/fi/fl/ffi/ffl/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/suppress/exclam/quotedblright/numbersign/dollar/percent/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/exclamdown/equal/questiondown/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/quotedblleft/bracketright/circumflex/dotaccent/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/endash/emdash/hungarumlaut/tilde/dieresis/suppress 129/.notdef 160/space/Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi 171/.notdef 173/Omega/ff/fi/fl/ffi/ffl/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/suppress/dieresis 197/.notdef] +>> endobj +1061 0 obj << +/Length1 1365 +/Length2 8247 +/Length3 532 +/Length 9097 +/Filter /FlateDecode +>> +stream +xUXܶi)Z6x)ww/NbwRRR)PݡXa^׾<<';ƘcJEEf :Y|qE50fщ;@0[ #' :\| >6x@f5pg+ jq, 63Lj0(ɝ jm Pk#@qpSbEH GK.G)IFܢ)` +1C*Zp)gkk%#Kkj0;g'@f +qT-?)BL6*dd 55XxY9:JA *P' #8? {%y)տUNv)o?1GP7.1I[)>\##wt| @mM!n17`s@Rٹ@S_x@{g{7axv)z@`OV-_ \9pp[hs~Rd.:›/3b;-ߌp7>|ş^ qˑz"x1O/DU>\OzOSz"Dp'+=IOVOWz"uE`ZO0 +7Z 6`n,\l6lnNL԰;Cd%3q5qvp:wd3(B ni eRmpdh!#yJ~`~%Wu#3܏"C +IW,n/&>cvʱɾ6s7꘎i.]Zv9$a/ +fX̽L6LDlRHh,y{ ˅^=̑t.[-`g*"NޣV_^i36L. M"J$dXsY/C &S\PQBMr h }nz>FՒץ7HoFsn!M5ΆÖx#Kx\/rx1?PiY)_iUS- MMU=c֧2-b&j߀v\eVQ +;]ʟzK:iJ+T0q$#'ޖH/FF9V+6jկc򇏲F }Ÿ +?0 +ѵΊ@ +G 6eJ.;rq,T^Мe/]5^B t lŭToL.9s9c` +Jʲ= Zn&kCGgğхySKUC/隒HiKc _.eM]~. ;ͱYncsյ2I1FwS80~ajZ1KUd[7TѺ Zb]pz'Y'~7KPgjyEP.c8¥RqNVT Xb5jyDLLthQ7ݯϑ̦YHߘң^lu>0|zys1}oK Po0ۉb:fRz봍pn:M+O<#6Izg(=yUq̔&r-ߤ̾\H`}5Au\ski0Ċ4gi/DW;KiϷ;xa$}+EB)YϘvb zbʅ=6 +YSq+1hҷZͪZ]w$!bk1*jh -aCl-дKRvAc=ȍ7;(g^(r-5`*&` ;R:1o']g쾦rmK\-gWLZ,ky~PcyU pG 1,퐯.tq+.?6ޏpA -§9K<-*RU4RͤUhAV _ZU wcuToH^E&{rt ^TR`"goqX *Jơ6rx \}oa,; 6jq̹jl|'DTy^riDϋ] 4F촎32axm5WOhE+wh7 }:O,%LJHE&8jϑp~%݆Bi(ݡDZt}kr6Evz@a^+Vq;MTЄDɷ9!%{}c`C^":#Mz`Ͻo>gRʌž5ge#Ь@őqq*wNV}j}$Qx#igq: Ӡ5 zz=g󥩈`йIc~=&ro4:ʅn[ʐ>8FX|Nht S͉:Р-YςG݃BKwt,78gG/ cAeK4HYtlO.kF7wȩt~ 9JHկL(@B?i +*fDFzrp=F)䛙#[G^dBB!i~UQj~Nhh~8}lXc5 Qǣ}-c?Jaa &- o?pܩknp@v",KSihGWDgEVmKx?AJ\^)U;T7aս7sn8DŮhG o=eoF:x>,TYQ6$G0b JJ= eh4c~lT\;PԓѧzS={f,ls$ }mЈ3Z`ڷK4WTG=_ΔfrA%" %x&&s;-̓nrIɾt|u6n~p~@]/vKhVVnюmس#Y=9i]QGcYm_B4 WYi:سrfqLe2_"IHFYK؂/ a RC[[#5 0FZwoN:40$)q,7lu=?%(ܰ|}Rv򃤶6?bGt1S~PS曔 KA8Ba-yzc7ϼqΑ-cX5?(Xx^ϔ'}&ʍ52Nl[P +3d$t??!P5w_v +7yUY ;X嶗s?_wF9S +.Lky!:|I"Q/7̡GG;Pˍ<'iWYx)c5xH;|q`;N| G.tT٢1ͧjEMT'-z-Nv12#wq;^]d}kNu`$@!L;1{Lb "†ŗHVuϑoNz)(w9t69u0['[jL%#5ӷDD?8`uN hҺ]]YN:7jŇlWe{\Ft#]rD%+ỳ+:_ ʯя7 m7T3ݳw@{Utηv$gbm|]$H*d O4ӯ_EU &F@]*syLw/Ax̩G_" +װQ:Z!p(£Vv=4A|6p#2=IFyKxSⴲh paŝ]ߌgӗdO\}0Zᧁo<ŚF[蓊:MFïUkaD<E3Yxd!%swFAّ#^=IYRbQ.8؝= #*BGӝꯞ!#M:1L2-J?h͵GMF|RSz5@y37>lhJ$s!dQ S&>)7Gk}{~nle5/i) gfx62M>QQ!IN%|;LN 0^ 5/l=2h/gC&\1@(`Gs 4USƱqD/6F箔1EJ5jqc)jP>rE2kBWe{a0)pn=!7716TKqіa8av9~U[@8Fov'e 6vo4H?#Lv=DQϰ[١Kf`5J.x&EZ, c紼"E 6ԟ~  dX&*o"]gRR]:^CDE٢ށ'F8.k{EfOPYVY +] +>X/݋2+޻=W~GZUr@~W#6=+/0ZRj~ ^:zS^֖E]8>aO`iN*ױOe3BWi{(*ы|o{XܪRi.~/VJ'$%YaGcGH.R,Gk:Wq.l;保.P~Mn!]Iۿ\э,|'(ES@QLAԧz@iێd)x!VוȂ:aoN4~z k"Ap>s"&_')L;BMR eb-)|6RM >$/ڣиAm9lLt*I̖z6s:gtIKhͶ ghQ:ǘ9Օr!!r_LXwϦ?BH_q ~O8GFCi\sNMyk0NԎLzyПl[ji:ǩ +JHz;lk%Mڹ6;P7XFpLE޴-d8f)xQuO||+m&8)\84S%U!߼n+Tum?h 2dG$!%d)Q_͹>hG5"3@e/kq,KR\~]*): 3x7M qaxMt=;4A]PK"XZ >4:I,h+Ylq*6ZyPWwY -? _d=D$:E}*٣DC1ZY|>ۉYHb֪<~]@ܾƙ^Gs}neM%ilfq)۷K,=?&OL Kpiw^5i_R%2վ} R2gE"'Y觔 TpN:|0@&UO| 9IYs4EJQlcFR|? MY N_skRMgxKӊU9XJQ +3?L!FN0#+u"Jendstream +endobj +1062 0 obj << +/Type /Font +/Subtype /Type1 +/Encoding 1935 0 R +/FirstChar 36 +/LastChar 116 +/Widths 1936 0 R +/BaseFont /WOZNKF+CMSL10 +/FontDescriptor 1060 0 R +>> endobj +1060 0 obj << +/Ascent 694 +/CapHeight 683 +/Descent -194 +/FontName /WOZNKF+CMSL10 +/ItalicAngle -9 +/StemV 79 +/XHeight 431 +/FontBBox [-62 -250 1123 750] +/Flags 4 +/CharSet (/dollar/quoteright/period/zero/one/two/three/four/five/six/seven/eight/nine/A/B/C/D/E/F/G/H/I/L/M/N/O/P/R/S/T/U/V/W/X/Y/e/n/o/s/t) +/FontFile 1061 0 R +>> endobj +1936 0 obj +[500 0 0 278 0 0 0 0 0 0 278 0 500 500 500 500 500 500 500 500 500 500 0 0 0 0 0 0 0 750 708 722 764 681 653 785 750 361 0 0 625 917 750 778 681 0 736 556 722 750 750 1028 750 750 0 0 0 0 0 0 0 0 0 0 0 444 0 0 0 0 0 0 0 0 556 500 0 0 0 394 389 ] +endobj +967 0 obj << +/Length1 793 +/Length2 1151 +/Length3 532 +/Length 1727 +/Filter /FlateDecode +>> +stream +xRiTS2j=,4#P"aAb ^@R*ʲETXURKB 8V +,kUp*ޯ9ww6)\Cz8H&L V(HXBXEp"/1?'d5 \]'I T`@ հT@+ԳEi` 0ĢqB$X'#=Ip xCԷtHD) pLioȚ^S12@t poO ӚI0%!X2= z5DT\`Rfa8I]3@6 +Mo`'O$L;0y|g'9$Fb-, |ݓ?*cPQU4 `%tWzmdm59Σi Koi?dkc[m?A|ņT>)q1Sckvp'@98RY[{6=suJH̚7^>Igr*%Gz +7U_+vw-LfqNAOYl)f/U^v*in +>{U8Tn4/88Z9hfTM7[׶h| R;yE=5I/,1I^-NfgDyMwqvm-~ftUK}{V4?g5@zÍ#9x{qekݾn2̄+vŰכt&ۥچU3MUKf=~|z͵FNӅn]},;c"/~,46Xc9yAN噞[ Mwz֞0~?o^("zoʱm#=GYgS%dmuk6+XDVg|ՙ6>xtsŢh"!=Uiq-=AZ+[IS{ {}p`كZg2r5g䠱n RS/)]LF'9հ-dzy83س:V)Kf3n{\8tj|'{"|hń m呂OTq=IUz]缌6:˖g~┡q<"L}cnvJp9Z=;ӑgnv*:}fXZ7W\:wdŌw\K%ůcDvz EEDiDVUò㻬s7ZcO+\sNu6;[ŅjJ>1T(>|Ww,F<>SR|P{ڳH:|S|u7 m.-[c CEWmw7ӗ/^ŝ\>mxa[F6_VnԯubCǵܟHy}jnd.ۧmXh1Wb?&Z00v^Ғp;/L lׄB\͟gZ$#P^. OP qH Ȓendstream +endobj +968 0 obj << +/Type /Font +/Subtype /Type1 +/Encoding 1933 0 R +/FirstChar 60 +/LastChar 62 +/Widths 1937 0 R +/BaseFont /WLXTNY+CMMI10 +/FontDescriptor 966 0 R +>> endobj +966 0 obj << +/Ascent 694 +/CapHeight 683 +/Descent -194 +/FontName /WLXTNY+CMMI10 +/ItalicAngle -14 +/StemV 72 +/XHeight 431 +/FontBBox [-32 -250 1048 750] +/Flags 4 +/CharSet (/less/greater) +/FontFile 967 0 R +>> endobj +1937 0 obj +[778 0 778 ] +endobj +1938 0 obj << +/Type /Encoding +/Differences [ 0 /minus/periodcentered/multiply/asteriskmath/divide/diamondmath/plusminus/minusplus/circleplus/circleminus/circlemultiply/circledivide/circledot/circlecopyrt/openbullet/bullet/equivasymptotic/equivalence/reflexsubset/reflexsuperset/lessequal/greaterequal/precedesequal/followsequal/similar/approxequal/propersubset/propersuperset/lessmuch/greatermuch/precedes/follows/arrowleft/arrowright/arrowup/arrowdown/arrowboth/arrownortheast/arrowsoutheast/similarequal/arrowdblleft/arrowdblright/arrowdblup/arrowdbldown/arrowdblboth/arrownorthwest/arrowsouthwest/proportional/prime/infinity/element/owner/triangle/triangleinv/negationslash/mapsto/universal/existential/logicalnot/emptyset/Rfractur/Ifractur/latticetop/perpendicular/aleph/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/union/intersection/unionmulti/logicaland/logicalor/turnstileleft/turnstileright/floorleft/floorright/ceilingleft/ceilingright/braceleft/braceright/angbracketleft/angbracketright/bar/bardbl/arrowbothv/arrowdblbothv/backslash/wreathproduct/radical/coproduct/nabla/integral/unionsq/intersectionsq/subsetsqequal/supersetsqequal/section/dagger/daggerdbl/paragraph/club/diamond/heart/spade/arrowleft 129/.notdef 161/minus/periodcentered/multiply/asteriskmath/divide/diamondmath/plusminus/minusplus/circleplus/circleminus 171/.notdef 173/circlemultiply/circledivide/circledot/circlecopyrt/openbullet/bullet/equivasymptotic/equivalence/reflexsubset/reflexsuperset/lessequal/greaterequal/precedesequal/followsequal/similar/approxequal/propersubset/propersuperset/lessmuch/greatermuch/precedes/follows/arrowleft/spade 197/.notdef] +>> endobj +960 0 obj << +/Length1 795 +/Length2 667 +/Length3 532 +/Length 1237 +/Filter /FlateDecode +>> +stream +xSU uLOJu+53Rp 44P03RUu.JM,sI,IR04Tp,MW04U002225RUp/,L(Qp)2WpM-LNSM,HZRQZZTeh\ǥrg^Z9D8&UZT tБ +@'T*qJB7ܭ4'/1d<80s3s**s JKR|SRЕB盚Y.Y옗khg`l +,vˬHM ,IPHK)N楠;|`{8kC,WRY`P "P*ʬP6300*B+2׼̼t#S3ĢJ.` +L 2RR+R+./jQMBZ~(ZI? % qЩI9`aL99WTY*Z344S077EUYX`j```apriQQj^ 8aOwjjEj2k-Yӷs]|a>k_d?nvfJm@%>wX,iG /vRfǝ%ش9QDod;U? ^VNvK{~/t-798 mi"6=!y:I_K-,1{).o +*[mF%s_-j(ls~gغ|K~#ﵾӷ&g]p_!GrnM`v^Dl>Z`,&7{طeY/-pp3LXc:s٧Oy1#u,U)MPPQSiމ_]7`tlx~FqFI8>yj&/E텏Z [%IZҼ/y-ɝ#ߘU))wpxk>Wõ-T2~U]gXZjEO-Z_Ȭ?֌J +vMO7J]8f풻v_ք7xht*̀B5j0 9'5$?7( 䄫endstream +endobj +961 0 obj << +/Type /Font +/Subtype /Type1 +/Encoding 1938 0 R +/FirstChar 15 +/LastChar 110 +/Widths 1939 0 R +/BaseFont /JTBOLG+CMSY10 +/FontDescriptor 959 0 R +>> endobj +959 0 obj << +/Ascent 750 +/CapHeight 683 +/Descent -194 +/FontName /JTBOLG+CMSY10 +/ItalicAngle -14 +/StemV 85 +/XHeight 431 +/FontBBox [-29 -960 1116 775] +/Flags 4 +/CharSet (/bullet/backslash) +/FontFile 960 0 R +>> endobj +1939 0 obj +[500 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 500 ] +endobj +956 0 obj << +/Length1 1430 +/Length2 8484 +/Length3 532 +/Length 9359 +/Filter /FlateDecode +>> +stream +xeX[֨wb;Ž$Cq +]S\;Zܵpn9?uzkw9W5:)$ 8pr$u8h_K؃`(DppAư G[5@jf6pK0كMdaCM G7V5@;j 3Ȕ` +6q4 fP߿¦Nr;k2`PdƦ N@ݩڀ'jc(AMALKNj_9&bsk_!4dv4@AT5o6M)eyӿU`?e9~3;`W>;DWc2)  1p@74\ W1+k j׆r؀6;`pA~xl40,>5wVdA!{?2lf`?ܰY`an ?` gV+lMs"Zb f/D~lTaR` `ƿ eqn49aa> - l%?kœ@aV?fe46i80 ?4\~#'l^.qq a,# gjBvN 9Iةcg_Q'{{o4أo6td6? 5 +L*/Fd7oR? o]0`ǸRsWC@:"}k4a'ŽL,Em>vKɕ8ݼlzI]%jN}^>kjZ.j5$O.8q1ϗ-QONxw(YFp&H?;sLϫiE+h3c4nTc[oAZեfs-ݦ@ P/jML Kfr4Wd((;n[x@JX.QH|qj/Vxd&j.vh}uD=tܫ(;x8cY{[ڝ\v69gzDVѷ=hF:8x?+ @\А(@Ysoa+;ëU&QO]XVs; ̞~:}9;Foe\b 8*qo8 ;~DDBK$4\oer z̜Ԫ ~C$}CohY@=X栖|9cVϒұ~J`&v*,_mqpIZյ8vܸ5 FÚҢR[T3Fw:< ~}TĴ$p7N/uLsB)O-9_2`\w᫒d34+o쬲@-*`Rk^- P.'c.W֢ͭvp\7+e]n#KNGfL& ) pSʎ*77r}HqH2(- |` \F/.i+,#٧/$ PƱE]= As bNFqSa2Ko%J<YZ?Ry݉+Ou׊k|-,j9|á-淡夂:6G{D2tݢuR_/5CؒArer'u\4Jxװ"׌zK`O.g@=vAN&rVp@e0DԥId\hYT~* +ϩk@ZY[uYbR*h"SNL_ +ԛ;qKdA-q+1@!jNhv#1|eG%=5&WY0Ig{=}1{rZ< As2L|4vlB ՞K hwYH4$ijEzKmY,Jqd]TPl'[QV&Eyު5yq~Mq_ʸ^ }! yܵ(殽ӥ,]|']27ŤnL9{O;T_}[lj>fQ)S6<_SNz +~]y힟ʩG쯐sRIh[7?8v/8 _´'3}Fю:1#m _!Xx#%iBʢ*'q8910cV2btgC +?Jaq\eHֺ~A1i;x}!짬 +!jfxM? ?9CqѢ5,p~$b1hEQb%Ϣl:{q .tFʈjSm3W8uEFU +3C@A9`_"pcB/R/= }SLWy]1j"6`SC;YnZbПRD/h""d +hi'"ɡ@ TC[xd{ ]7x5mF!5*.+5Qs=] ƀ8;|/rå`օ4P!H)ɖ%I赔 @1I''E5D,g:lty>vBN[I }LW)x| ) >m# | J1=/}_*281!3p.#R6>UQ +7Z +5CVOo/E^#q5VP(a_o>)Et?Qqp<*..\L}|}6TB8d?y.Ēf(FC)iX hӎrf`ot;uȩ( *2mf>.aYD*n\%-s(8($ʣib()\|6Њظ6KYQMĴZ!=Mw&Q&bkڨ~iudՂS$u%1T*[NX/>41Q+T`4azz2lTjκEsWa+(_p6O~;DnHID#"P<&|r~~Znvo*I(3 +: }u"Iۗ{ ++ԿwRbБ>=DL +mp$4 7\n?Q rvTN>rKA)\9A-s_:e%'Zd?}xW0ˢ^u +xlVGkrX%FU(OIΐ*cz3}\>]63\Gw,?@ 7D6㓐ֈ8Ꮷ5"@D9g2fP5 4b芹# @'VלKlc:83(Բغ˴BּE!p I%zԘg<&~/&5s?O݊S~ ydx[堚dp\[-*RXxqߕ! #Y)U+Fzĭ`晝1et/P)? ̺pb@ಖR7M q|t⡲P[#NiV"J-$ a׃O-3ñk;ye%?UŔ:#r_3Y̖ūPl[vFU?NxaWd'tT ŗOn/RoRMx)i, V³Ǯp };DEq;4`*A5}[\%^'3w+{۷qn/]QN.3/sEnIGc9E奔(F$f;ܢe?V^UȘwoL;T@4=qG6iW ޸wtX(8rG6v#Yёvpgcۥd؞u#)р~,u@z,{^Bm3uh .h[: +r f^5_"C,( D2vK2t;=ߕ-YM}N(dS:ĘaHū ,{=%֘5lL9HAN\[%X-M@|Wr$Jey)mʽXk~s?W77 Re w9crX<挵 +ذZ?R*ڋodBw~]"!W<咕kL?>]?{sʜNI wE5;ytEu3:[>B6Fّqa=鏅p{5ڄJ,R!sT9?qLb1߲'%A-Wz$^?Ƨ LЃ,9)lLMANo)0wv6 wi`5ݙE%Ք3m"GU>"Y ѼݺxE }s\ԣ]RڲjKsZrW"5>gځ Istj?N~~_qWb-RPw ],ũ&rt:[ [EP1贒kUG hJ#3=bz ЗH&&1a@M?4kBOQ瀻-2$⢏mg:e"`@ջMJh)?䅒4Gm&N'y:2Fj25yX2{Rpgv^62 .WOIE_6L! rp]õ?etCC`W. ݗo1Uc8)rk&FmJHjTXڠ +˿pptSVs}꒷n21O.KP>6\F4>5g&#ߪӴXK}Z{PFl65DZMAw,QB{3쎾[Zo>` +WW fƾ&/QnqI}֥̂{H^V)52zqvda[lUH q|`z !&eMZI?`1 RD:ħ3|U6ڀBW8\*rp'wBSRdk'"6Fst^jWiW/|ffF8mR.8hDr +ƱɜT9ĥtHRCX׈H/hUHN8^[3ymVw0s)ST 4HD^l"?"݌zOSYL:|'lDόә:ȭs1>ϋn'++w> +(_> + 93sS_K`#bx+|nhFdtSLxr6oF&c~SNmny<_qnn9%8T hLr&dKt[ '[Hz4jVnm[nAE=TS\?a=C@ͽ\ UtfeO+ٓ9hzٸ34\V 0)o|-ZXwZN֋\u +d->ki0!ʵz6ѿE;:\In΄E(6r,K!#ޡ*ˢ jQhP攭Ugxeƒʃ1^p-3d173tWC~kYvw,[6;IoU&rQ*/ "SK`9B *8⾇aӝy(k+srޠCLvM7G #QF؞T_3pY 49U볯STq٩[nm\G -Ҕ̽dزl)@j1<ƚ׆x.%0}Lk@yZx>6dwl6@f &%w0@ږ+WooQ ea'S8URjm g~eDa:npC=^f+l)Feʴ¦ӵf{Y⹾DLk2W:9yDxm/NSE'gd4f׀ݤSs5J}QU0WHG;">3g\x:gPQ?_!@GGPoiAzYo5}b 5h[/endstream +endobj +957 0 obj << +/Type /Font +/Subtype /Type1 +/Encoding 1935 0 R +/FirstChar 38 +/LastChar 121 +/Widths 1940 0 R +/BaseFont /PUENXJ+CMBX10 +/FontDescriptor 955 0 R +>> endobj +955 0 obj << +/Ascent 694 +/CapHeight 686 +/Descent -194 +/FontName /PUENXJ+CMBX10 +/ItalicAngle 0 +/StemV 114 +/XHeight 444 +/FontBBox [-301 -250 1164 946] +/Flags 4 +/CharSet (/ampersand/hyphen/period/slash/zero/one/two/three/five/six/seven/eight/semicolon/equal/A/D/I/L/N/P/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/r/s/t/u/v/w/y) +/FontFile 956 0 R +>> endobj +1940 0 obj +[894 0 0 0 0 0 0 383 319 575 575 575 575 575 0 575 575 575 575 0 0 319 0 894 0 0 0 869 0 0 882 0 0 0 0 436 0 0 692 0 900 0 786 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 559 639 511 639 527 351 575 639 319 351 607 319 958 639 575 639 0 474 454 447 639 607 831 0 607 ] +endobj +1941 0 obj << +/Type /Encoding +/Differences [ 0 /Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi/Omega/arrowup/arrowdown/quotesingle/exclamdown/questiondown/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/visiblespace/exclam/quotedbl/numbersign/dollar/percent/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/less/equal/greater/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/backslash/bracketright/asciicircum/underscore/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/braceleft/bar/braceright/asciitilde/dieresis/visiblespace 129/.notdef 160/space/Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi 171/.notdef 173/Omega/arrowup/arrowdown/quotesingle/exclamdown/questiondown/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/visiblespace/dieresis 197/.notdef] +>> endobj +946 0 obj << +/Length1 2258 +/Length2 14796 +/Length3 532 +/Length 16037 +/Filter /FlateDecode +>> +stream +xUXͶp;^]`];+Y<<`̮9j&'VP634ugf`|UQaf0301v41p5p60ss,f&69ೝ33?86&FYgsFe;# g5@;J&N&& pc #g-?NRv +%WG'_Q\ZU뺁wq6q8j&%'kblbJ9X[ ۚY+d$nnb`ldpvt1W;+/F yaen.*X:x{F0<-&`}J&fkdglak`a8:x^ [cw;Px X#?ee0/[OhbcOl9vBF{G#[?1. 0dֿv٘8Ze)vq.Os{s?kaC6Z D+4q.wvslh˟uM-\u u2qkF(;PolmMLccQӟbqM\ 4hlIdG8s:  8qY}?!8h'f$e0?.0 ]+!`v?̮PC@?t.j.&n`vCG#+x6oFC`?*7G3 q NFv6 |fp= ,_ώ !//XX@'(e[#/Z@+h\B_r,@+h<qhdalam_-M""v^lz L>9LpK3&&.VE\oaS +neΈercpXt$ YS\}\|r,uѨfsy:!!+ӏvo CW4<4Y{S3vPͱ̫\*Q#ub-׆i֪!AuJ()l!n( qS!0ʹk]Оar@¿d-7MYrmh=mD|u1WVϷڮ=vM(x̿L }vR;.GT8kEr bb)NL?7 ,H,i@ $4i0ƷKW!-#w-O.Vzu :!xf߳C{JNBK5ΞyO$b#|b}ÈR90=W EGYiC.Rl'"j٬4ӊ-f!# /vEdO.@Qdi.սӞmsG+j6Vg]d6>c@'!8bMɕhJw5FiB`SyїjfX5 +r@ 0c4c$$Y#G+Nҫ= Zj?_%q,$kQ sHOL% ;E<`8KdbCe:Dv]pb2]0ɣ21!J2;WYٮAw`ÚnJ!HM9Y5iVOy*tPN1LST-I G+$ \s? ppHT] l,wKS$0;ù:C^%]`:Ai"~sQNv^"vdԧvT5LԽ]#}IIw/mIAEF LHZ*c]̪z8kCQ).uyiTleAtSNL45:=wγzv-PٵuN-g=Q}DroKg ti;0~3.Ѫ?ie%i*9ҝ^ IӬzb18;|~冦EʿTuH25:10s +bMÅ{72 9# Ǔ,O$E^㰡I P+\#Nm_G[GODsڪX V<2_f? MϧɣMQ|~tc dr 4 ;ۈ :7 Av- 3n+6ToӟESM=>Yn&UNH G0֚%h.)PCR(Lt5r> 6ח.0S媯mgK+#Yqp–ꘁ8 !5FWJ~vuKkLM?jdh@‘EkV+d"wh=P#‡ %[ +^^|,"2=H.~\E2`<Hjk{SCykw5g6{)鈌<*ٍԕ|a Wu;!z4w셿6Llyޗ><0pv c. n w#>gʍe|iwE݃ه1C.$Fƨ43zdx&{ءߝ{M%&F4yQ\!qVrwޘ/ +gQt5#a{DZR{Yb},deKlPӭA +^qw}@.6mazJR-'Eq #Ȋ.lFJ}4&FlU(btn&F T ۧ +0nrRpd݌5fCls/3cRm-V˸VbFADV~ɟW=WDB*XTtzgt%,~MFE0#+Z^qF3XnS,N?!m[tAss)"9Gcԡb. D +嶽:;-~y'\_`x/?4<}r5SO<0Eu+3?\ +%Yz6Ĩ*efbОQqC RMEtt(2<"ٲeWg-JGQcL%N~ؔA5O]mHb 7Ѓ'Ǯ 6 ߐ ؃LJB0;^ HzC4&'~*X!x& L#GRS?\iz=~)A2s}cH.v&ÖdW֋=0^C!hH< ,?ޙ+P#k Qt$`AI%y٫p*?7S%~Ց:8pޡz9ަ -O梳_TTwp RtJ:ÒɢsN~ODA2$8TKZU [N"h=i0OsX@t)Pss}}.DtC;#ԟғ@t +l|:i+IzyEqߕBFk,_Е%R2 A,#2G$}RIYh bb[ WLn}D1wŲ~Ju[n2y-J\ߑD@RI{fЋv.ŧ–3n$늲;.Siמ + ~5vіt@d2D28p|AiayŰhCɨo};B+~]ݺfQ!z/0XҺ}UHTv\ ІNMlsmGW %WxF|X fot'}j R%DStwLN>D/ m糆~vY§TEcF2OʛjT`oh! "4"6Ęqw2v Rbl  \y"oJQ{DI%Xw(pEB`(RnNQFrZ]Rާ*:Կg98l| It/Tf(3$H<`ע;ɜ/Fbaw=](F ՞s9ƠZ= +%Ln 79%5 50Tf6^mJ{w +K磏Q{<-UOqy|~Έc0?X-QzeZ # +{' q,¯ŜM񳂐gm[3 JhӅxsh57 ]#e{4$שw틒Jd퉉c/jmONP}gLZ!9 nPhǫ]!(.eeOMxbM^f'VCMQw}IF02Q~ hSyNJޭeȔW5'RW44V25fbP9nu(t/> +!e}df--q OrK8Xsp) Nw`5{+z0!_/^Hef]hP=dԨL>ˠc(@KG(~"rWV/\Z-BA iȞwpeo -Nw(b䆢bG11Y{EzwBtgrږ]n]Ҿ!EUu<'i0=6]d:DD:ʬMYoc`XaZ +RU~4F\z-߶s_ZiР2Ɏ\QuD0{,cq6Y0gLyyj[o +h"%"gb_](`el9H~9o] $D~tu }5aE VB& $ rCbvU~yCccȚۍF~D>eqp2'݇g;i4%wız-7(W_?<< =,'TAF&RXAF:lRI<3CZXNяߜeRJZ8Ծx5=ZI᫬v'4 LxQqmah6,zGSl$$W!pA'd73 W[Cow%ƨy凂-FA떌1VX5!„l[|q*Oe?/SHq2>HdI])ȧ67HAr +ցi尺\@f'6qWǎ9N&{1yat(^Ka-tzU$#Oame|]Oz,մxuC%W~/`jlw/p' +T=a(OmX 3.!9XeQrE= A/_u-Č-!Yd*w5+^6jF +(lvR1`;dOL{r|W iR4ƉM}\h,\@}.{Y\?W}I&y=dm0ln+z 8%)C'7{9C Y0P{_,KjJrPȪ2_7K=C=Q:ƃcSɱD K`މT>Ý,XG9._u-$a$3h,HnQq~1\ 3ВC1ʓvy7t23J(9-k܇T5r_W`:ޣG[ KIËsUD oC57/^GLКSm u]r,5Zb:D,ȅ%X^3W&ȟ^\!g Y+j8^0GbC2 +W]2tWsT hMr5S3<j "~͎V\kIfq2/y&B7K~UX1I@.1{uVƸMn lT--]9A^j{O]8C GT٭ُ6" Kыk j<|wuHX8%;AbsI9 P #rMKuZȶDkWHɐߙK̈́PTsӪ"V,IrvOI6zb 5jG2:-9+=VϴYbST:Itn9 Ve׶Vb*FfGS*5v)ɳd6 +YݜN-."l|XDs0C^ݼs\- 9_dlMڈ34/_gc! jȂN 62U"zRFC8f4lanΚaܔ^p~Mg-.J#&'lza0֦ҊfdURcDnUVra4؉'W.7;9Q=HsokKH-.E gΟi^q::y92{JW:4VC ˳D]\!1rzIBT8y["j:7MTcvV͡I1e^ܳ>kxqw.sdz!B`t(i9hG88r~JڍOH߾΁Y{(}э MZnpvy\rif7VVpן~{`b#ެxB}`ryN1cy8l#? P^̾;a(|b#""ԺoIjR 69EjGbY!.MR6wۯ%aGm+wqs 4^HV \E}h1 ZTUvGB=J{ws;۠D"B!_YE. @5c@EvEQ-G*Tdy+/S-s5&rlwy֫mtE< $AϗB*:=$;jf %@1\+qIfِ1NΓu2Ym6s;] kא9k$QwR0 +r,ӣ ɘd# ="܀`0-S 5',uMi'hoF$c-T8O]HZWYGi/9Ѱh0uԃxM7(Tt)12* O ;t njIϩB~(ȏGΉUQG6)̑@}Qe8qq[I ;9Eh9[F pͧvTc@I.#m~`אf;_?8ߠd6*|HQ.+:L&&>jBhPz[ = 8岌ldqo=mND y%s,u5OK+~bF_H-_w!>ʛUZ*`U]״:o0,O$eoəCMSG+'[QdJU2^ h迤uMpY]c9 \ +d %F \8ToR-6"*FϿ)$礛5bB|}/QkAk*&@ +G J~;!54EC-l0C.*)r1$'"eO.o}Ye>R'ȕ@:Ӣgv&*Ԉr@L[?ee/nOZ1D-nn +AG [=%r{>_ܼ^Zf]9h~Z ]o޽!DbqKhI^ixQ9HJ'sy@ʱel.p@f㈢OHNw NպԞ]hu ۧr*qY-Ap(ϝj,O'NrV Th7^GuE @l;౺%>k +=-2y +_ Mfn-[Eҝ !:mcv8!prLQ^=Pd7Og0Ջf7|=-"̷qP~f9%:8|e{MώG?|Vsv+}Fm]xR=Yj,TB~j~ӕJ/? .1 +R`1\K~z~}=;Vȷxܠ-U2p+@O QA&EbN k -Lis5[6{֭H˼kAgF\d:0iאk=Q5MdץB4K*>> Dp)T5l| MƷa@G{K!f=4*1Y9GYTH:qШV_ZAw]IحŐ a`lQC}HlHfw.pͣRҞxl5Zг735b8D5֔`6gXď3vttRMǺWBkep,p}, YH+mz#nsaT<ԗ'w+^uWXVr*d}~]05 +3."Wuܢ V$߾y;ܡwq0c:\:;Lh>Bޮ*9pL )[![W*Ym--T,!}nxsH"ڇ8>UQϳv Fl,؈{u!ygj͘oh)PW]x tMq8"Hq b, _(B7;OqO^OvU6WOSQP* &3.ؖpA92\="5)9…ܚJ tĩBu#L*i# +Ak$or bK3''s+PGG}+}=)8Z+gH(VL]M3p +I3EuAo__rWU_q|h`wxFC)(m.Κ6)NvDc6㊒&G" ?: rg Cz$c DG6/1>!njbd䛢 y#g)N*2uQQ&g .;3i~_px/Ī'/ n(uΏ/=K |%_ DO"uLq[1w\}e=$bKѿ7Ki |?ĐQxA`0~!Z-Θ+e5b%bИZXT:mtõ)krOFlҀ +dH#AOcŬ>\U//q]Dt\GE!Z~C"Nx1BE NzlaO]ֈ֛ߘCJw AQ8,#5~"-4np%ke|c˭nU/'.AIqӏ@>"g@Ŋ.?4(y;ť1+˵^ fg<ef+#%YE%/4E~R5"42Z3284#Ï/qRyX4["{IxhxUłnA(-b4h@"\ m\#iH L4HM Ed7o[URTqr 9y:hDc x60䜏̢mor!xkw!lԡKGLTo Ǻ*>f ;>뫚[\oE5 P<$bo:N( C,23]T _ٴP)$-,T~j؉հ1DST$}%UY\N ky}b|$bZ/M?_d+/^>bMY~øiYC+de)%Ǩ#C bk C^:"cAwH4B]UIWGNeFT3=&uO^nG4͚[aK1φtG`{ E-!z4.1!NbdQf]IիSEG 10'ݸHs==mv2O ~lKbpUhY~47CtꥦĉwqmOGP0xtm{̊WW@AMvHطr]i 22Ֆ" VLV p/Zj6g S"'tyԍ4gs;k] (-/dJy{{6V SdXӭDZO8qEBEG1)?O1a,%d80Ɩ͝뎨iJ_Ѭ`upv,~kjkˑxO6!(õd2vR #N&*NP`"_*{jEdpPn^"Wqd}ȵX:J#;f ,nlϚ?8l|]Ɩ_뵢dq %$E(BGx=eޖ%~Zb$*HTVlLCZ , \6̦cK53gXM4}li17 }՘9c+tn MU*+ބr]8C^[Hיx2ͱgVG2Gakc>N}-$IĶa%t[;/zQ~lMe,VoɊ(OՊcVP󅨽be+ݨj FOǽNi /(9.g"3&F3;0cw8W H?T'L'|H, +o6&0g+<5#ل懌C+ SjȸeKMI\gRBINx-ًb#?eUL2n g%IHf eE^_nwK ?;{7\PfK۱MY5*gO>,M9[<rxA@yu[a8q$Y9*8$N(Y̼zlWqCKEbťס.NvAӑQBd`d&֭}:2M7L ؞iBdY"pV;Cȫ2, T4K̍ MEhEehX B +$, +,VaH]|Q̤?'vh9(a*=?5€|@9F;đГ 6I{Zj}hQnhZLB,ho@n$i?Tan}FS(o􈊯<Τr&5ِ +itJY_߹w=bHRAHq ~0,Sc!B9g(}]# B/L~0D ^2gwPz8gc +ƈUXyƽuQЖ t*cca%ݏ8Oħ]a*P{t +".NNdc;;F`bEߊN5Dݢ0QG{oP yg?9M0R柊aEsܷS5Wt^rΐ9g{) f.ȄKV*K&ԿL`e~$!g]DmsinrNNj}Þˡ O.vM4wߠL/sU=DpGȟU(a UVB"OuXµڞf9'J kX ?kX<i#v U9VmѴ lwSNPBF|3e~ 6z%*։ڷ 6Ji;т,唁"a.tEWϭcOEK= hG2[ݭy8x SZiXQ+dˋv3D;~Ait  &U!_V]~X1r`F`x +x7;si敯28! Cv3O$iEITQk20X_ I%Df߃N sVRM]f}^+Ga"#kX`x< K +EQ&싷aD BMeԵiF7E\~/Cyl <" $m(*qVyU νdp?F َ;H0H_EcE<0ُŷ0AuA@0ڨ7̃,mhVa:ހdbI=F䫕8vgr8#C`S4+fb^S ihD 2Z.FV:gٔ?T@iWt9U /yIGix㚵y-J=<*W-Zm7γބ=:p@ 6g& !q ԍTY&)cbkiL\`Ƿ"uo< +vȋ֮|"~֭ 4y$&PH#s_hNy =Mk͕_+vd/{c! ܑcTyk2*ENvh,>fd64~\iZx*v ^`+&V ݁"k*`ݖE4??'&061pt1p?_Hendstream +endobj +947 0 obj << +/Type /Font +/Subtype /Type1 +/Encoding 1941 0 R +/FirstChar 33 +/LastChar 126 +/Widths 1942 0 R +/BaseFont /GBOASB+CMTT10 +/FontDescriptor 945 0 R +>> endobj +945 0 obj << +/Ascent 611 +/CapHeight 611 +/Descent -222 +/FontName /GBOASB+CMTT10 +/ItalicAngle 0 +/StemV 69 +/XHeight 431 +/FontBBox [-4 -235 731 800] +/Flags 4 +/CharSet (/exclam/quotedbl/numbersign/dollar/percent/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/less/equal/greater/question/at/A/B/C/D/E/F/G/H/I/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/bracketleft/backslash/bracketright/underscore/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/braceleft/bar/braceright/asciitilde) +/FontFile 946 0 R +>> endobj +1942 0 obj +[525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 0 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 0 525 525 525 0 525 0 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 ] +endobj +942 0 obj << +/Length1 2203 +/Length2 16804 +/Length3 532 +/Length 18067 +/Filter /FlateDecode +>> +stream +xڬeT\Ͷp{k!K\BpwwwMpw%8_?{s߿ߠUsU^Ċ*¦@ {;zff23I\ hbio'f0ss$Ơ/;; 9@@%JO'N- gbabdP7x2ml< P:܀ SK1%);3{ætrII IxLfـ ?66F B?F67:߮M-]mo T`fd Whg%@+/F9iuaY ,\T=3?:N&2:K0rr2Dv@$`gzZ_? +sF, lt +jmcd'j45hjk109 qN&@0قFOfؘ@9lfE':R6rgg?APf6LmmD@Xx:X/qK?l\m-D@x@I {? o '_=%{?+>Y :Aa3/WiaBT,'gg[rF +?tr LRC ?RC ?rqKL$h>!H!!! @.J@.*@.j@.@.Z!n;X]fO_ +PfsԹA!D&jh&ӿsTBЄ!(s_Ň _r AR&&՟2 *v!/Y9׿d +dB_d( .yQڬH31o3> !8&{ + ;#X>YP)#)ecg7+c;1F ]mD{2lj+}S(2+ +EdCHJY8/`/ #x O +S0/&H-ԑW5L)826ۯFtNQo/޷R3g[Ul}S؊D5K8 5`D@*'h^uQkA6WA +ME)L,$̫6dOب@#b0 o 0T}8H[`{&Lo^x/Wu(*uK,CyA&LgLm_Xfo$$ɫ~`J uٖm'뚘zF^[{h7MA;4Ҩ"z/w5s.!hEA]fy12 Ź]a +]`(oƒ_Hzra%+f{(Ժ +fmv%pd~9a rg9 ƽܶeQ)6&(ӚbqQi>?cqe &oU_M M,Qu*[ ȳtm$%*G֯b3b'g2Ξoo%ĽVHxe)௎J\ ک+$˟#\ 4%(jڐIwCnJd +ҙ!X f{P-n<#D9 _eCpTgD'>e͸gc+"S ZzF,@m9 + ɻCԀ}I +s8Px6ֈVG)"']7H';G\gU +> +TMTrZ;T91;.'@G>s72.DL<7 ō6&6pTSGW_P$c?\doXBhR :\ ~U8IFyk; rAr-5jptUQ olU#)JoDIlJ~HDqgM1)x&ʜi{1;W 3U0D)\o9{kwxm=uv]mzHjJkl dxJW ͍LQ )MZͽN"#{{f)s(n }O4V/J6X:v(rU0`?H7xnlJp ё%J;N/-dp'o87#0Gp+bMo I%ˇTJ4JáF>e- t=lOZKL;B!YhE28GC|k[˕ސի/&}ݜmĺTZU>U`N:ɕr mrC(^'=BJIțapjPf3;lwd]%b&pɆ|L(mRvlG#O8#<~!a<1Lt#dW9Mz Rߓֲ6XحWrWI\']L~8ϱT=8-̬fX!e]+K h"_ߜbyaS~\ :TGobGGeyк4[3(|=ōn} _{eGRB=⻚> %=kB`^5$ʶDw3{,UvcQ}@KR]3gclh|USɧ r<\ٟ|*fz=]+,ΰ$˲$MQ9(mtܞΗIvQTMb!V{[0i5yK"]>TzT,c[.K͑ϤY[SU^yTczE_o2dt_.d=+%x|$3*İбZB!*koPj:=`xWtsom3 K_ʷ{ Ȧg~ K4#s3e-◣J '_ +Eu&~[;L'eDw-v\>hK!t߭kzm>SZJ;yP6lL:0$*H< p7oؽy!cծ w4o+rn&̅${QI/ܾl]e+$$$fO r&l*z_3f.xqt7Z_g>*."bRգ"ywiOf" . @s҅~~uJoέZ +c-xZ <#pͣ _kll&P)N-C^Zۂ<VVqV7i\T9YNk3DV"+7U|!?_^󫿠9b]qULEM.`jVI^_a Z,Ӑ]B"7D8hM Fб0z{X#R`}|C}52  emVshV `YG4Dz# ֞̐Н-–75/lUijLgp/V [Ro=)|9sPW;,}9 ׺BuY}t +⃯9M08$_<Z)E=LCϡ()XXУ +߾'G=L!No;UY(Su.ʝUPni- +Hv+N7vJm.GJvDUks Yr0em1Ԧ7\F{jN B #LjN("9 (6frUXg68{3Aw:|~WsohLA1G\|;?"Qȁ<[/s8h}fmͼLbVy=ҀK#ǨϜ#WG6|}325U=0NS7& +-/T/jL$B;&gz6W/q 6ѿWY},̆KF@A }MtApHe:לOCK,q`٩ rg$ ޝE'_LGBɟ1yk +$:66,jܮ!!6UwfxHwEI^FQ%KX0m֠maKs2br2Ks:UM7VNj1(jUA]hi:vJ +ibE6pƕktirԻQi>6h9+TM!;>J[pB8٬hύJ\@>j8vT.mMIFΏj=xc>bwgCf!>,R-!ƷC$d ?FBk-:E''TG.khbɻbuf(Krv9<")XgrÌ +mPqWIo˅4fET$MAN ͋kH&ټ?5n[zH݄=?\8takF p .|1-'X[8K;D֔:XiMO:l}!@z8l[تKxzXjI|XF㝆R,~7]w1.}[>yE+ j$JLgA6o;+(YUnp|tES58PFLϢpM!]Fo;1ʖWJ+f;#J#6*a6BSC/M\5SS60'N)9;'$ G"\0~~GC#j yS*Dc#:JݛTX>ش_2'̰,N}ȎLdb6>eNnEQ8E$he| +6or|@pUi5ԑD@P_u;tUE`Ahs#|ěLT'dC'] y)'o,׿/{;PCԆGo-NY.=H:z3v]-&M7CIHG+Gj?4}opO0YN%HiэI8dTE[P6bcXI,ϩ:ufm(5rlŸ@Cڍm$eJ <~ֻ@ +7` )(6Q u>Qߞ1<1vO,J\B>4(.2RN`SdpnWUX5gC faP6%#7-@}s׺VkJCJC͏2 9ǃܑA.;Kw2*5M K#bػɐԡꢉav ?Df"TC+{$U4,Gg2J+ 0ES}H$ FFѩݰ;o;n<DBUZe W¥rhٍ֗_Ks%2 cErT[@nfͿ|U1Z K&S>m. +k8eneAM2V㥈/z"TҐTJ[\o6 x)L-Jk`HGōκG+zϊI.$^){-U +3ݞOo!S6YRf\ꔰɠlRi(dEnT +䰇xu/FK ] GNӯ9B2}W˔*wfA Hir.Uw8& +x2=*wm[{8ERk4}Kw NjUL]}?:l?} +5 fĽ$KX=?QI0N )0ܘ;A’đ$αq6H7tm?~KQ9k$ +՚\{X50;{?x8J<}4OJ$67 <9CjvU_갷yNicG|RpOEfn59&#kg0RSydӋ80# 3un%Jνz2 dfdIdY\-B<T}࣯tʘZEK2q71|iBTp~>8Wsd#o @/;4#Z]*zw;03t'N'[s6ձv >:`IƹCϻFoFBMh,8:TZzεf^n^UXK!#9;EH Ғxʣ$lϿ-I2EOm|=$G-|Wv9IJ3Z xx. ](g9$6p%\ M|\r-ۥ~a:IKbJ "D̦D>3]e^3toЌ;INWyyb +>$XT4DpHRʂ_)G8!B8P簺uTݻ2 k\+ٱc:ۚRTd"U"ŋ,@(ci,OH?Ӳ F,ZbnGdqՇ'[T2EW~_@LW(V(&SN»WGb3P>ׂ#줝`˿VBKԓͶlͣBJg+0kQR{HTP҇"ᱶjH/>PMnmq-G @585,Cv]ڐsN=_r9Id* AgH7v|o5Pˍ1BAZ +0~ -[?p顗p~x B4aS⳿@pA/+&xtL)v{SX\ V>am$'?GJn"N=Lh}V袔I&I52I{֧9re-5?(Ev5SmǼ"b2jy{ <7|b-L;Yfh(.z"12e;+Fd B%p{ |Y\6tL79;\K!7:#+]aO u#ץoĔn}kOUn/Qd>9,{|CUT0ON!' +|d'ZP= bd1F2`3]RtB'TP4J'(mjH|X x1aST/ 1YOq~WM6o:>Юlg $ iNɒʹC'4>:IX ɂ D}ʬZfraD/!p{LI3wi{ P»CP)N"5ξٍA3da`{c=af̩eOpF lDT:#gE.SxOP̌Ob߮ G* I<*PS-SRJ2ӬNrVfn& +Hos.#o`r5DpW;OXw] +Iwd!6~&1J:|_-?; +-U4?|*1׮zrѯsdaI0Md!7 +}zqQSLd$$F{gT bc1,&ҽmACօW)swHgpK°,XuZjbm>`>zZHb@N{j%L!a|{A?OC.Ijo`fy#I /B +\dނ)t*P\{+fhX#n~|a&|FXpasqV,]uye8_Óx?D d~>K2-/ን +#]OHO59VA9s1цwѴĹ>1dd0š/\uv]\]>o=HT8ƀϥʔ"|T3}J:?Nݬ{NHuǑk115mj^ё +~m +0p"r3v tFVrekڍF$/h2$H[|EHïќ&RAd*eBU=Z2Vg;SX0R5~m3J5[9CGʢ3.}4RO4o˽ݭDt?w+qK<P]GCǷh.n-\aʳTzYbYYCYQ۰u˶*ye=ObIHT^R >P +hj^qj[=DGkIӘX\G[r"JOtev4!.:Ws1LgKcǼT j=@wxEڏ١u2R|%S Vb^ ~ +Dj AY[MA?/8/qY"ɒz6^ HK"i e# p~!ڭw Zh:*pg݇%lHt^IJĶ{xѹ#KK 7ɉ`JOm tX/glyc%2PV(zZ2:J\ݱ*dfdX(:3Talv$FJ[MtNլԃ +QcQtp=Ă0soK?-p@#Iuۆ#%[`Ѐ|먞w/O_f*/T'D $ #:FUVqr>sA$KB>QAqɘcZŶ_6>AZa&ȩN +R,0i<LSkJ,v/#3@8-ܖے%ۓjQZ\?~p w *18)(.iL}KT&!3Rȹbgz|:NvX׌䇥K|asT;>x(3&– t7_2FW5)~J2KO_@7g78n 2q1RZ~U E"f vHa[>#~^{Pj/uCt=}*l8+:08t_ln~+LՕӅ+L%3n47ժXXМa"8;siq }M \jz*:v:9u].$4Yodj:H}6|%YCs&vnͬɲ(a&3~+B7Ѫ,sq*dGTAsƠg!oG,Q-HnNϠG 5>Jeaou<Aa-|!:?uu~n/PZgT=V,+D:n+!kSGWk:pJrPn#̊)l;mm>L)#*M/Fsh2ξ>^} +ǒ;S+@xkA4ߒ&3J<^2El68ɲ]'f2sU0n3})J1"DHeM,"#<&4 s-y5ޮnSVWʌǗ0Dt5dbYBw[PKzôz*Qd[I i'ǯ"$Bcj@:u@"7tQX8'ۄw ݢ5cܨ}y Y>Sp%*O|N9~w9LlBc/hlwǘ~NY-AwREլu:=*lvQLE iUG"uXC,Oz%ԩ> >S v;qR=;rq8 S acvpYp}/<ɥЮy?xTqOٮYK7KV/Kn^g%C]d@YNv* qg2O RJ+$^z|"hOOkU, +-Di'#q!(b/ˍRܢ cn4++HHimj!ݩrC:+/aybk8;]=s~?:[ x6\.sq?ZV,NƕI2w2 2,$Gf]3ŋ9]8w:;;mS~wO?mxws0{+㵔šϬ=MDǁQl[{cZ4}7CqvFo v| L9YRf2V2bj\6Hdy,T|r2/ӟ"O3:ɭUNQs@oO(:gΙîmg%h$KIӵ^P JrZ~$&uCud\9F?OHѻ'Iڂ7ydxLH[#L&;Z[9rNEݒ0."yې\]`*ys-<5ӚF f6Y]]t#r42Taw;RǵXp:*L[◡3{Zg X!{9{݂o:vej460֓J:3<Ϣ6kS&}lq:im&U U~J* +R _MOJ>5X 1ί~I(wz!8`.dN~>Z|ֽigѽ|[|p|OhwYhwpKjy/ㅀCDk@5p&ni)+mRyދVv^T6u4-~1'7er&LKT<\ˆS Z8*z`Q/fU AV(pqH(EDʟ`H#g`E%IacŷxпԠ9 {k }2obT˖9|v-; ٽs'> S0kb0 +=%OVZ>p= b.^%Cyi\63+?홮P^hBd(x ZӁa $1%Zۤv3V~iľ `߅Q, naoMK(7֢}x {YPg ͍#LJl"0O'vx7Aa-ynFH݊6M(VSyV'&17Qu&%&u[ +`$]բPSR,XRjHjd9N%0ق%g4O˖%XDPW +kzT}q;U?#=wZxXg~~*)Y!#ʰ +GĘj.8*3C bDb2/P3'u?;57ss]28QJ2d命/qx?c<(`XJx ǮѢ>xl&Y9Ujc2M}…vͿy9PGĮ`&Aވ]?-nS%{8;߱e9 ؚ +Յmw\㗹4cüD0]9෇J{T>ꫢ1^T Cb]}uxe^omwU.] +̭g6SOW vK${PJ aYZ_ls2J.XQ0ե%Io6>,> Ji<-!IZJ-+h1zx2㪟sw/|ho/ߊ,c +^6##A _\W_5-7D#hd̕S\mPA,:^`onw?"挲yR/]v:廸\I.#.fXڜCWTo'( +Jf0fT bR=)EW240Whts^Z}+sƁdgBX\pMrsKZ{k2$R&sŨ&5[WӲG+|%X&$y5sʜ5ޢ\H"-W%]SR|к4?,K $H3A+H{|?MӒj?J1\둄dw*L*?!еA=tY'moP"V?!X e}} iYs[]̅"gcҸ$OhZR߭JjZ Mz +s/1+(TWQw"?RpEA _Q.7ksyi[1)cwSm07 +oBVUo~uBK +Z[{QmefA?p,IʼnG׎+ .[,jvV}c\g^:|iao/AV;6R= 7R~kvg^Ό>#EN9[ |ҬeAǹkWf}L+ĈC"h!%>ԃp~(\<%m۞ELt-G(NRku]tyS7re}^WbA=VMOeed095cZ~rdP sှ^YxwŨ?>uzrz^<LzleՃ ?vӤ8#d$/ӜJ[ǐzc'em.;(SNvv5N/WxeX;z)YW[*.A"֏ +AJbs\%ԺrdM ߹ɋ "^?2c4G|g΂V*ݲwm yQs^^"ojI *Oncgh}]gbљIZŦeP7(cÝk 'KZ^-X59;):YyEyucnsW~9_eĄ̫r`C|.9<@ |/ǪMN5OK׽V>^|kb iwlMO/xA&^Au˫fn`46bM@ߛ\%mn,Lcbq- +liHn1t }p@NI 1g$FŋZendstream +endobj +943 0 obj << +/Type /Font +/Subtype /Type1 +/Encoding 1935 0 R +/FirstChar 11 +/LastChar 124 +/Widths 1943 0 R +/BaseFont /MJVALF+CMR10 +/FontDescriptor 941 0 R +>> endobj +941 0 obj << +/Ascent 694 +/CapHeight 683 +/Descent -194 +/FontName /MJVALF+CMR10 +/ItalicAngle 0 +/StemV 69 +/XHeight 431 +/FontBBox [-251 -250 1009 969] +/Flags 4 +/CharSet (/ff/fi/fl/ffi/exclam/quotedblright/numbersign/dollar/percent/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/equal/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/bracketright/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/emdash) +/FontFile 942 0 R +>> endobj +1943 0 obj +[583 556 556 833 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 278 500 833 500 833 778 278 389 389 500 778 278 333 278 500 500 500 500 500 500 500 500 500 500 500 278 278 0 778 0 472 778 750 708 722 764 681 653 785 750 361 514 778 625 917 750 778 681 778 736 556 722 750 750 1028 750 750 611 278 0 278 0 0 0 500 556 444 556 444 306 500 556 278 306 528 278 833 556 500 556 528 392 394 389 556 528 722 528 528 444 0 1000 ] +endobj +1944 0 obj << +/Type /Encoding +/Differences [ 0 /Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi/Omega/ff/fi/fl/ffi/ffl/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/suppress/exclam/quotedblright/numbersign/sterling/percent/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/exclamdown/equal/questiondown/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/quotedblleft/bracketright/circumflex/dotaccent/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/endash/emdash/hungarumlaut/tilde/dieresis/suppress 129/.notdef 160/space/Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi 171/.notdef 173/Omega/ff/fi/fl/ffi/ffl/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/suppress/dieresis 197/.notdef] +>> endobj +939 0 obj << +/Length1 1836 +/Length2 14873 +/Length3 532 +/Length 15918 +/Filter /FlateDecode +>> +stream +xS|߶IǨضmض;VG۶mFV'Xokｺz/Ϲ:SUs7'&OtvΟ]9KOo!'ZAO72\M k} +u1g{ sw7p461+H`o'OS2 gOY;?!vOӯɿӨ۟vc'O,\isSG٘?GOs^sJBs6SF}J?'!>,>e%ЧTC +rSA>gɔЧ,>5Чv8?3 gџi/tjWӬ_i/ta~ڰw_i/a3O j+ӕ_/t~ߗ-e<2l>;SsK|*&E\?O~g>oaSfuΈ;2)W4 78h+!'7ʂc r0E9R҅t%)6V2} +0<en2љHPMf*}3ݖkx #{EXۭշUc$vDsq| ;U9 Tٲ ;0VY5 GtK ++rHxs1lYۣ* ntc3 ÿp wBu2ƱAA'c`LKU뙞Xr ̰sV~iBk@LPIoS:^MczESbȗP]Βn8?VҊN2'ޟL|x.!5Kia vBtC5';):Zhb * 4424xfqKEDZ[ +Vj + RF1YovcEYfXr3@ݰr1*8n;a( 6md_ZğY!5jgO$= ;~xJ +5>0ߌosa.:輪%"m7..R m<O&Ȯ3[1D9Q&2z0^I6$% "wO 黳܏389τf~fl5Uٲ P-< ݟ,,·cNŻ[|0tq#~;1! h:W{:Bfv _ 0?RGXg%Nt۾TN$L ;%[H5pU/zr>60=XeKT)KI '**gHuB:Osw=. cؕ7]]S2H1GBTֵr ۾2n ^}gc^D+2;N]Ȉzଡ଼z]3395+kQ/F@_h,\i8_0ݓ{ȿhțP~m=Ր>/\qKZɟPNV˥bp لlH^B_PU3jx| !s<wl\4JJI~HI~>@@ӠS0i\q/w4Y#mm5E=T/qhŨz#O*, ?,O~X NbV;7m:HL) ՗ m #ͪv>WX>0%{QANÂ@/6֌v3*kw>fP&͟O\x۩de+1L>|wB~{7ZxsADPU>DӀwkdCpv҄&lP8ބ^O(f)ܷ2QPPk}8ou~w +)|б5r~zB2Jɧa.vw C׻dk[n~SUـiqmyWv[B ZI3{;[iC;5a +IX˕m* 5X1_ +2-X@Y|P.)Qbǭđ)p619/#@ANÃyUlIS_<b!EPjܙ98_F2U 'O489QasLރ&X3Ru|uݬPR~qVe++KbA'r}AЈx`?( +dxc'_mo]89|̾>WV/bUKѵZj!}1Fy `^aW-L00ww㦹,'$-JP,;s,JsOf5A?ٰL~KuI;u`XHzArlK݁=jTg%6s0NDz_on), 硠_%G2g1IŸ~výsظGG)׆DOk(@ކ@Wtj1_A,weJZƲfHy_F }n(1R8,H ^`|IftoB)~ jBxEA[`Гva@jz}B{%EѸ?ԕMmoZ~oa@/yN)_ZsQACG<='l}Ns/$2N_??(=fI̎@á V ?Dc {_KU84y(C}pK]fGTYLlT皐jDˆPPItB> +'Zy~. {N>sTtbrս ezZ9PE4E`wpyd e^*}[:3^){R!eǚ`'v(ZS} Љ*)$90ޭzݸnO. +NC9&Zbfwwp \LZBmvSy.ئBNNd-$}G)KoBvJB+$3un |!fmrsH9mv';ٮ ΂9ü +.,$+_MS6sLI,Ҟ^nzUlex*UO4# [u2y{O;~5sϪ1riaӢ]zЋB43^ +)lfqn?0mΣ>M-{.I]ΐ@>|a[ w׾0 +[! 5t@eTWN3A6omNžt lUndŹ؃/U"@榱]/'W*4us"4bsD| +1WfhuzXxh1lLjؘ?7=˴FE-ɮݖ5tz<|W¶\7:ںsv#'Pgr1FXC;Hz&y.v&N)gԥ|4. $lw!qX@˜:h+uoRzNh Nb;SJb!Bf^joKOc1*櫟6L[SŨX+~MYy%e2WQYN*u~՞`7h_c4]X=cTKٱj 9B` 3h߽,(ђRd +LU5#"X̭&K,՚:5w`Lr`yݤ kȑʒ试|po 0D5i2Vkp0=xָgH5D+~%j#m 4+_le |x0a1F|]}PMޖ.V諰ҝw繇UFOU 7oJ_&e:^7O: *Wdt%;^j{.C0=ϵCLP\ӰQv>s#GoP9TVW0ird}Uo Bf<,#}%\x YG%S: EtW|^_F؝޽uվ(e]Ln˲Kr Ȓ1cU%я!jC{+t:Vs% @"w9 ;Սm1e ]$wD(d<[6P]"ocQXJK 2vJL/.>(0:21o_wHv4gV#^E7Wxsݵ~G3x ϳCso)%pÏi˴0-GC{!;j}`10#kxB,RwBYSHjRLMXY4O)FH&Mf;:Rq(0U,ߋ'!ؓKӅRQ< ɍ1Gؗ%aT-<J;{Cd;8~kgТ:Aߝrh }+/HM# m7e͢rJ2(! `%>V0V:c"8Id\evގn8kظ-WSzP\rH0!+P欓o3zsZfܡ<16ְ AJSɚ8cBTIB,*;6^N +VWmGx{JNkC~{:I]VFCٜt/5 D)ȫ`&k5#XS1`EGŦ˜ ~AT~NkGu'Gܾ?}z*&C:SvK[xk<d +v9Le +bt”zҀN>nCIk)q7Ck}Pޟ~}2vc4Nn-ҫ^N': +@0ORш'|IrNHb&E[lc +OVw[(cR}wvHD9xl' #t޴:a *xQP4V_AY/?s-khԌmuRe`+nADy1FOXM1Z$sYu9x`_[R+mUp0jILK٪ Vt/͒eWS:3C¬U2e?>o<}T`L{3%5#X,^L$0LGoG42MW=To5xw1dDo9:Wf`GYҁݝy1b&R]^~DBnB_'rjܼhO/p+0e&m3R=#sએ1Mf[X$zBH=A~ !ܑx2.%BaICOL?bGwUG3h[P Ɇ/.h_ i.䕈̷Kx?׮gu,WP"]XVDzb^RgO"=bu S1, _QΙIq*j 1 6i +wo9&EDD&Upg7dpr$d"D[ݞB﯑sHum5fv(G0w^CI' Hb5xK97}!J/-M +hY "2~AWy|i [SI/E{RqEu7]c{-9.pe%:>_9ٳIk++t)r jࣗ +vpxooʊEts7 2A1S:w Kbhb.*}ȳVlUE _PQIV` ҳ!!Q ihmNCu;ddp3)xmQ5-1l:Sqt!%5/}~Mγ8=&z1$»k7 s:wXw2K hƫS GfD˃} {2"7 j#x|&ߔTY4uݘ׵ڳȰpkq'y_ĵ +b3@o4;nmL0A7>Fo!0(Phܨus&|>ˏbyB^džUE%LD cM!P\c +&37s6bȾmLuOXG|y#L6u-qjTR1rg> +ogD#,Lĝbʬ+iESZX4٢Et!,mē(ݽ-Zܶ`MТp?źh#8^j8&S`һՙ#?ύV@/?L%GYP !wbhCZIT\GaJ$\uI4__FV!|9jT/ 㻸M O\Ưw`qr1lgQhI6@FEnR^wc0[ht t56~GYT}}H9g1 $m>)GDvaB;^:SK&{W.b\2eí3p*48|Q+vmk+-G\c; ^5̹+/(G=1 ?Uz 2Bhx}ߺJP'Lsx};;Idrl;$_$'uev5#Љ&w"$la%w8詝 $h+A5ɹREå9s,CQoK7oMTfO '}`X.raZ.&ՎrD ׹:#{H\,0m[^~1_)\` 4M;]@^ŵmB|GIy㛙ص>m\Vvr88|O_t'+AC]VPo\w#.m?zfez/]/Gޮ}khHԥ#i& e5#1]\Ar钒&:F> p 'Ed#d\P@my g>$z%EvtL6jYϨ$1{oTnL )4V͓jH:xDyoAc/?*wC"H @d8Lu>%Sª;cl4XDM:C [dUԠtd FR V!.21,LpԘ6:rLƭ2¤ͧ*\t`!.Hp@ILR2~Zc1h2̷ܝ'g`<%4B_% U5DOX~u0gsHͻ oq7"3w+qj#ʽ2I¬ـƇ}xY2֦^Y**/杖Sv2ve ߕ3F`E.tvg^a6qIM/5.H<=Y\]Hf+ cʐ?SDHBiEj^Fw.S2?`7WES.y ' +5G7ϖB!PW\?a&Ѽoܰ4j2HRcqIRZۺ3ɓB)f Q,v[DdyY13^ˁ DBdނݳ2%AT+ 8d1w!&f;h t¾yD_Yyi%L W|ϗjy1T;D٨R8'G";MEDywQ~cx}K\)ӧF~_ĝw?wCҗK.gYp6YFb˭Ԉы05KT^Fziӿc򈿲 ]jfvu +|82 |Z)E!8?/@N ÷*|`<,nM]=SjDD`q" +Q6yZ&ήiTr(Y趸+^-{,Z+ @Qte'r-;(Obߒ6Z;w(,>K~4}5 nW^v#$Qӌִ\"t\u@)&Q5wmRM;lRtttBF+߄P׶p.qiFIw]Y_]J' 6]td(C(2,6+M3xZ*MgJXRO)G*0jLHQzg%PI%~8'$I +׮pytMWO Dn j:dl氒''{]F[ sNKGMtob97K +>MyqVD"c8SwիM&X=_Tj5mẒW/|k;܍Pȋ޷^"'*b釰@!9 7f ݖE$1 +_S݊CSRLWQ[fh*f_tTE믦yp7*Adp%ElPY]*CT/i(n +<AEIk9saKa.UtgÄ`KYAK&RBKm:mG\;B$\jh>6S'D1~ cU( vbgñ@[[ptGrhU/X8ocHg\I_(-E\+V ,{sTW<{Qy +{X5=JYNw@A*v/sdq59DUkhE+(X`cU;df׼t`X$7sSCA@Ε^%xÂ{F)gWNc1̼ #$=ֵ.`>J(+e6/YVјUR*G!1Owl+/ )~#1q;+ׄhA.N>3;C؀rxlq[PEDNl;Ss^Z#:_ 9*ƯFo_Jٕ,5 f4Q7.IvMIXU2]b"rjeʩV>MpR/)朳؇.9xc!DvgB)@!r VsRO_%&Mߨ^!&"NEi|qt.<B#@P/$8:g#V &LSoCQ{wdDgTNF%(+%K *'!S uu@S\3kh4'ֆPi]LV/%&$;z}7]Xs"iEk=!k4fgsӗlʃ-!xNS$`soI)-O`JYU nLGH'֭l~uY5k%宱5zuRi"!wbE K\ DPU^>0 4LW\)rJ#嫨n|ics/Q1>7.!}r)p(L>eL?!Y#t9qtW D&6Q{Li۵egh09yյ| ++řhF@S^pJ]Ih~Vvw-Jީu ;,hhz&Dss9 XYUCSA +^ v/C7b<.z~U<ǻ!R& N^2]]a13ވEq$Z[%) ݠ v˻ Y![DESq괊҆o]r{ޒ{/c˭X/O `dmblgchuendstream +endobj +940 0 obj << +/Type /Font +/Subtype /Type1 +/Encoding 1944 0 R +/FirstChar 11 +/LastChar 122 +/Widths 1945 0 R +/BaseFont /KWCOEW+CMTI10 +/FontDescriptor 938 0 R +>> endobj +938 0 obj << +/Ascent 694 +/CapHeight 683 +/Descent -194 +/FontName /KWCOEW+CMTI10 +/ItalicAngle -14 +/StemV 68 +/XHeight 431 +/FontBBox [-163 -250 1146 969] +/Flags 4 +/CharSet (/ff/fi/fl/quotedblright/numbersign/quoteright/parenleft/parenright/plus/comma/hyphen/period/slash/zero/one/two/four/five/six/colon/semicolon/question/A/B/C/D/E/F/G/I/L/M/N/O/P/Q/R/S/T/U/V/X/Y/a/b/c/d/e/f/g/h/i/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z) +/FontFile 939 0 R +>> endobj +1945 0 obj +[613 562 588 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 514 818 0 0 0 307 409 409 0 767 307 358 307 511 511 511 511 0 511 511 511 0 0 0 307 307 0 0 0 511 0 743 704 716 755 678 653 774 0 386 0 0 627 897 743 767 678 767 729 562 716 743 743 0 743 743 0 0 0 0 0 0 0 511 460 460 511 460 307 460 511 307 0 460 256 818 562 511 511 460 422 409 332 537 460 664 464 486 409 ] +endobj +931 0 obj << +/Length1 998 +/Length2 3745 +/Length3 532 +/Length 4425 +/Filter /FlateDecode +>> +stream +xyLxRҋ\yo*g&?4w3=j,dFf8㛱. >6紜Ao{UfM#_2͚23F<&lv-=>{`F=|[>4H GULwWm%V"{^K~X2NFyNq. 7]uQ&'f%,D:j45vO-+%M􋝖^`Wd6~GޅY&̧ih ZoA>rL${ke&O-D#V}6ivG9sW$;{GJMIG2D_4ĦjsjnSw<7'ك*l?(7k  Fql|HKfZW +E~VMtUMIzHXJ?o(FbYisc+TqkWhBOG 20WP4/A辿8t #7&_Ju4X6cmSlGȿƫ (%>vp5A+6iqmM+֏D8_mrjY0I{t<9i5`E5H3\K[Z^˴Hgshxŵyf8 =sq+3 >m,N|]bB<|; cݵhT踖Y8jP:{ǚaK1b7$FfquMa4O5v8?M Kv;?sC|~DVB ذ2kvIN?'s;F uyTF۳Ơ?[N;Wۻ5egȯDTSgF1Xdf:ۘQv `8~H-)ݏ|PX&I>Vv ++λ޻ ޒՇ,Zk-~l/wV@I>W0 )&0Ά\tbr>%={<:0B[#$%nڧ>U7 ) '4Q, +CeIuߐ;) ] ]s uf1;{Y"kWNlBgyC(Mg:?0cz&4O=twVorch͆8E/ Ĵ(oa((mj[0r/?)׋&6 Y˻+RX |2f 'dQN]Za/"9쪭}seQlseO\&)J{[ѩFlw(MBTff,N }PTQ+~< Z?g I.rQ[&'~ ڨsÈnZU~s&Fʧ̈́Vw% +77<&@u^ sK'4>*["#GtGOhwVg/ЙΟs93vd[tP^zw+-U,v/}5Y+C}noS=˕l C)oh3Nf$Ϝc0+7/V;[kxg/αFqֽ3񤥸D}bO^R_!4}w}nKM#tv37j8G^2ҹ}TFXGϑ#Κ|Q%9UG\#2굝,lTMIvNƪ`ƦW`!WĤϻdZ-/3JPﺮXZRXxd VߊԼQ ^ CV9jQ*/ߥ?}뛞W7`f{d_ڠSӭsa8a CM~p1(m2RhE> |{E]1lT\TT۸xD:,@ v,PdR1ڳcc +'dQZ+ O21 PNܩEa]I6t!ޅ25{]:ǨJ+{;y/z)ROhpϢgDڒx8y ZkskP+dyH]ę"-пٜtCK)%q7Z Yba&h*CecfmY[ڴ>|$ZQڵ?Z +ԍ KWhǴ-w<Ԡ_͂XQZ?BD6AMk>~w΄C3W6·;do=?:>pF[CϜ1:dQ/zW{{цLoC]@' !r Hާ$N҂rVochqcTxq~ +[9 +Á\̮{v.z_|{@VʶZa,0bb"z; )ﵻ]3+ɡFntł#+TkэOGժ1wʨ^&IN^ϚMVO#,;{CDdԙQ˳/]%ԯ(O[lrSۜ%A\b&fxi{\,Mekx}09:L˚٨rHH㿽U.Zt;`<>MCBD JXLNBx[/4@M]]ēUlrwADYhG]lMe]Vכ y.S%5c~.M2yc<7AU//Hk +o$~rsQX$i+w)uuԊr*lzY4Ʋ//}(ڐ0\6!P*a:NTB;OāN<|- Q~V ~WfJbfoY)s-؋KMHyj! + zS'an=b]fj:1X%MlXbvT聦Жu#}nՇSWM?s~-a_aǾlFGG +ņbI+ y-1׊$}|j+1{ +]/p>C>$J][b1,cJӵLVaӸh{ +MCS.).#9|z$,${^~W)l!Y[٥*RR)չt73zn]Ш-w3emJ +d T\=#N*N Ǻ"q!Ʃvendstream +endobj +932 0 obj << +/Type /Font +/Subtype /Type1 +/Encoding 1935 0 R +/FirstChar 48 +/LastChar 117 +/Widths 1946 0 R +/BaseFont /LCCXJT+CMR12 +/FontDescriptor 930 0 R +>> endobj +930 0 obj << +/Ascent 694 +/CapHeight 683 +/Descent -194 +/FontName /LCCXJT+CMR12 +/ItalicAngle 0 +/StemV 65 +/XHeight 431 +/FontBBox [-34 -251 988 750] +/Flags 4 +/CharSet (/zero/two/three/six/A/B/J/M/S/T/a/e/h/m/n/t/u) +/FontFile 931 0 R +>> endobj +1946 0 obj +[490 0 490 490 0 0 490 0 0 0 0 0 0 0 0 0 0 734 693 0 0 0 0 0 0 0 503 0 0 897 0 0 0 0 0 544 707 0 0 0 0 0 0 0 0 0 0 0 0 490 0 0 0 435 0 0 544 0 0 0 0 816 544 0 0 0 0 0 381 544 ] +endobj +928 0 obj << +/Length1 1972 +/Length2 11871 +/Length3 532 +/Length 12951 +/Filter /FlateDecode +>> +stream +xUX\]h; + \w` ݃Hp <;wwS:ϡns=sɦ&WRe6%@NLXy",,HԢ@C' #+@ `eB,̝tL, mN@pcCk* lm P G +4 +00v,lq5#ll_C.@G,I+l&@S$f]@R3?Ok9; z" "i'Ck ca[3k ?Bn@% 'cs#_qT7_Zb* ^ +Z:;?Ŭo @ +x"_}5X؂7' ; dXؚ@73[)S?K +^ufh`7sAN@#X|ϑ`0:mEY3?&mO +G -v0E8v@۷)p"[hmh0{@op [࿙l6 v2w5v4`]GR@\ oZ-O֠7--F"o)Fbo[ Z5K^7KHR7ȾE.ovQx#⿉F`7E.jovQ#]>E.Z&l`hlto|1mƏ Fo`vX+2 %:,,B_ V6omB/[llB_r V.!lBǿ_"" 7O&eb`p{OTi1!gaVr|Z?@iaddR#^0^KH^4\ִC3Ң#XĔsAثS9x./CPWwN_MVٖ]#"K;l>+w>qL󥏕r v +җVdjÑ$P_7ekej5cdFH9bRj2'j{6$϶A==4S[\q2!D.qPy̖޾wY>n-bm?q )UDY=̜%bZ٪ gDZ +oBU&VF_5Y.-SM'q:\fxSVpَ#:T[ +kUÕ"OjRd|d@s#'zrpOJ?|4TNKPK|`7`ϙRK(͸6ӷSeNQP5.krI*~/*(^&^f6&rf1y2S_pSC# ORQ}b=drJ:fyU_,b]I;-gHQJpn62 +SHOߩ&}|5&YG)#CE`eY)RCTdpQK/%_EQvSTJbgb.CN\ꣁv17> + kB}&qb |Tȷ-+Ѳ!2'(\wHxV?ijWd>g/mJ3g ]"f7@Ȳ$̟(_|{,C't +h&nf+mDŽv3ڪR?h7V0;tӪ$'J@%bڍq$)°6M"9=LC5t ]ԛu9P$ө}60d!"Gn,,:XzC4L DAۉxz+I-0a+AzdmRs훫eSc2Br2Z,mďJ~2vzhjO (fK'?oe+[W"rlƆ#[Jݞ@{hNBfg7dK} =dAܔ(ecl8{%'_3jHP9m?Omx(2͛} *c%̔$cXY_Ѯ<$$c $Шorrh2/2eLZXnkDBGE56!2"$-%vI +p/ O#jQQ>:?|K4|{"c|h3KWra3Ax8 +D-b|0E]WjB8C+F}rVpa!V SC!Ge1Ia_1zy:(+^@Ls׻֍3-~X/^FdQc,J8-ָR㊥y)ka`KNi`uQ!#:!z'xå2y*!m.wB>5ٵj͗. )0GAsxz .c;㖍-#j`TX[tinP9MZOCգ9H0e2ɯxAVaQ&mT4>SQ,6gP.l . P7@c#~Y{2ptӠ(\t-[ʽR3X,H` H*Fpˑ +4ܨVò%JfwSuC[r}ӵ k1j;rȮ]Q/g7$I@Ӧ R X_YM2c>R~h;cbE 9*Ete%״5aVJd5Q:_;2h:\`PX°|JXtV[xfŪ]sl!iK +Asj+geUgO3Uyu߅Vr$OgdiyD+|:YYIcZ<>ܩJs;Y#B?9-T/< q<bbc\]~L\u + -/S-"'L ;^osb<"|0Oh"jnA rP`_tEމ[A6ųc1.Y^i(e.810LVI0:ʔd5%8cE]}w\MXRF?\ +ac/Kּv΀ic?}jDmy_Ӧ0xF]z 8eb]g`WI~sj; ,E[ӻ(DKAB{֔ +;M +nGaVxqS_ۛĕGA6|p#$3~~☜93hō67SE{uڴR@ qQF EM(v3t +acIR;5aqApKov&cH.W:8G{*E"OkP6i:k6 +R|"h|q8$5ff灴3‘Ù[>]\fd)n}՞!_#${f+֒Ͽyol"Wfu)۹oƆ~Kp] _ PI]_ۙˆn_T{7rur<,P+8\e!$pc>5~(*ǼwjZNE ޙ 8-I%Iɮ<،7QC5OGéA73yN}&ND>:^*Ye_f"w*p͋ۨ[8MTc"l|8*։,p&S3l]k$p [/!#̇_dU&` ;B5u!8!dD_W:jh`"Puņ% WTFzįuNcbV+B-jf L_tK 94LT7PY4 |`&ۆ.;ի]J;Z색$Tj2qlomQ"IaA_=ğ>3<4x.7$b|tPa)PNB$'M|{ +₍(aqH6 ےAM7|Fi!Hx&cbgv5 K9w6jThork'm<# 4(8BmpXU% |g=@zhx'LJҎL q6ZwdyU@9FN;gX-z $/cBDv"rW>}9&V*k3#jDzHwC*Et/U(XfX>]`dKlYӈY1(K.)MI :9̓Q}}Cxi Z.=NTg ]XMF,5аn9,Tn*U(ժIZCCQ {]s׷{cjpvZZwu.N–6K>Th7}=4netnKϋ.+]S9Y Sf=r+)= /3^B~N{ }['.Om>i-&TU& qծU̜:&^?i"5 +SS<({e;<͟|3.ƍUg層|Klٟx>ˆ} tN˸T:74IF8(;iؽmYaB| mWcrz2/ 3s/.c|'~QGeci=yk;a9!B)WB.|h~u#gѭ%ra}#'=/IAޑ$ڈKu4|ZA:=.T[Avǯ&wl^˱KoY×rh / ax4'NCYQ쾅}6ۇEQŤ\ݷ#rn?N B긨S} ;e8d17'U0b_ԓվJvz_Pp?Mھ%rGU@1GNM 5]Ŕk xR~=ޠ{ϲ& +HvE QtYn]\#yɴ$a#N+]Nܵfܛ 6}=/o?f ;5gj*eCYtP~x9bta:,m~QSi\V=gBЦ[Y-VC~JQ|%q|Kr xCHO 9\碷EU'tgvy[΢'&+ 9cYWS縯Z> DL~`?aXϝ}$20^-VNҍ/p(BEp`T|Z _!q,@Ɠ텬蝦9j6̦QIRtmG9珘Q0h˓< AϡxI:nEU;I-r>Yy!w||ZLQn+/Z.F'Dvyy.@㚾%o+ noݩ:MLj)%ړGY 67n-v?鹢i·ϊua.\& x8ԙfGQ~ON81%Ԧ[˚4jH!:Bqx@wak|d@OE~ }*K"@aAc[B#`g6m󰘜dx0dھVPLIJR8Y.9c"px{i0Ue |2ʮԌ)щC y;W!U3c9Q}SoH-xtѐXh> K3pX+Hpd߭@RJn\Бf$d}W4"1*|O$I/lяdG\ld1zxҶ}Tj-'}KfҒ(<{pXg!Ln(-ǣvm +GKp3%ʉSVKv柶W -vE+J{?(C'3`j F8+p0TYY/䷺RnΏH1~!MLw z.Ώ4=g?p [+@l¡#$ѴAsͱ׫ၖ! cB> +R +mˤH[]Xc+98aa^Rv%{K6ѝ'jA'~d\Yc)15񠋮>Q1>Q}^r`|4vd]R@:}e^ /pZ&R@'S kj`t"Tn#I&<:9IK~\1F+7SDTv[aezb+`sũ:;r#Mu2 Ȭ?d=5n</^(֌Xh2p̂' + UX3 #=@6 ݄ϬM'[&,hz/,dpNq}?Ǵ #wY\.*˨}+vcï./~TlS›X2hNOejCOWT}O0<&Şui%Y~:n|a&!Nc^]e(i!Rw)М3"lNv&U~/B] ,Mκv{ mWpϕF/IYf-J&1/em[6W>zSLCΕ+}la yTB T]PU!t~9!XaVlְm,3cyl5[tChue%oI..xK+`D4JҴ*V5V`= `*Co_48It_V0δ`JG$Vo~Q5/&W@47~25ͭsoQ mr̵2?uQ^^bR:d~~=ݼvLmuS)Bښ{Ry)k+5|?zRb2xM;KK/_)yK*,˙{dͤ>tkh' 07irN5ϥ؞)0l^| F(:\xFx\]){@͐YMjzTxg з mݘCي/)z~j_~H3ocU'dv+%huUgԪ >T\grz)IH]_K4?1UPֶD3%&ܻb$ܶCɎW1L)&i0+C?!q#,cvҳQVϯơ6)uZvdc3 +q+dFBc5v|}ljJ5~J6Qf!0'E'+Iu "}Ltp +}M߄gyQcLoebt<&!4ܽ 1i=5:[RXmIݶ/xa GP@ ~b jUWuH ҟA#Y h^whʯ< 1 +rټ ̡nJvȆ:S1(-K#vStf- +}3<;b?=)!aJSA +b %Wql A"汗>Dk[H_D6QpL_pB#?nKL%| n\4gBQM=n'u,̈nNL).C+1 B Ee8O&sIo^Rn3ee8??:i5ca'Zo׍QUˑˊi"rRGQ{0ɚS@ O*PPcژ8(?]3 ~w%lgHn +Cvf ˷J03.(7/R44"Mam'B|cj$ ,U@N(DeNmnelrV& >)>e6a./n Cc89m]81Q\~02qC^&en}ZF魗.ڗU(K$gE0/V~v;׳8_h~7e-Afrc-I걡z`#=-ifգiC >C%Fcܗ_D=CvvN)"铮Pxq+>! T i%hf6*j;q|E9(obJp/9@ЄDlVaB=y +~X/uf}#k*?ADٯ̀r";2j2d @nSff/b +Yr%9y[sCbpz5+mdTI7c߅3zdtaTE*/f1{p8&E\X=yԦ_!Rf/F(ہRӉ'Vu#OwLM Nh59_^%"kYK gs~7^%ls.# # j-.)`!nй4i;@qc\`?MYo_@[sBbِVe,_+[ @6VH+endstream +endobj +929 0 obj << +/Type /Font +/Subtype /Type1 +/Encoding 1935 0 R +/FirstChar 11 +/LastChar 122 +/Widths 1947 0 R +/BaseFont /USYDRZ+CMSSBX10 +/FontDescriptor 927 0 R +>> endobj +927 0 obj << +/Ascent 694 +/CapHeight 694 +/Descent -194 +/FontName /USYDRZ+CMSSBX10 +/ItalicAngle 0 +/StemV 136 +/XHeight 458 +/FontBBox [-71 -250 1099 780] +/Flags 4 +/CharSet (/ff/fi/fl/quotedblright/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/question/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/bracketleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z) +/FontFile 928 0 R +>> endobj +1947 0 obj +[642 586 586 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 558 0 0 0 0 306 428 428 550 856 306 367 306 550 550 550 550 550 550 550 550 550 550 550 306 0 0 0 0 519 0 733 733 703 794 642 611 733 794 331 519 764 581 978 794 794 703 794 703 611 733 764 733 1039 733 733 0 343 0 0 0 0 0 525 561 489 561 511 336 550 561 256 286 531 256 867 561 550 561 561 372 422 404 561 500 744 500 500 476 ] +endobj +933 0 obj << +/Type /Pages +/Count 6 +/Parent 1948 0 R +/Kids [922 0 R 935 0 R 952 0 R 1012 0 R 1057 0 R 1112 0 R] +>> endobj +1217 0 obj << +/Type /Pages +/Count 6 +/Parent 1948 0 R +/Kids [1165 0 R 1219 0 R 1266 0 R 1272 0 R 1277 0 R 1292 0 R] +>> endobj +1307 0 obj << +/Type /Pages +/Count 6 +/Parent 1948 0 R +/Kids [1299 0 R 1309 0 R 1314 0 R 1321 0 R 1331 0 R 1346 0 R] +>> endobj +1379 0 obj << +/Type /Pages +/Count 6 +/Parent 1948 0 R +/Kids [1366 0 R 1381 0 R 1397 0 R 1414 0 R 1432 0 R 1447 0 R] +>> endobj +1470 0 obj << +/Type /Pages +/Count 6 +/Parent 1948 0 R +/Kids [1465 0 R 1472 0 R 1481 0 R 1488 0 R 1494 0 R 1502 0 R] +>> endobj +1512 0 obj << +/Type /Pages +/Count 6 +/Parent 1948 0 R +/Kids [1506 0 R 1514 0 R 1518 0 R 1535 0 R 1551 0 R 1564 0 R] +>> endobj +1585 0 obj << +/Type /Pages +/Count 6 +/Parent 1949 0 R +/Kids [1576 0 R 1587 0 R 1596 0 R 1602 0 R 1608 0 R 1615 0 R] +>> endobj +1632 0 obj << +/Type /Pages +/Count 6 +/Parent 1949 0 R +/Kids [1623 0 R 1634 0 R 1641 0 R 1655 0 R 1667 0 R 1676 0 R] +>> endobj +1697 0 obj << +/Type /Pages +/Count 6 +/Parent 1949 0 R +/Kids [1688 0 R 1699 0 R 1708 0 R 1719 0 R 1726 0 R 1735 0 R] +>> endobj +1749 0 obj << +/Type /Pages +/Count 6 +/Parent 1949 0 R +/Kids [1743 0 R 1751 0 R 1763 0 R 1769 0 R 1773 0 R 1777 0 R] +>> endobj +1786 0 obj << +/Type /Pages +/Count 6 +/Parent 1949 0 R +/Kids [1782 0 R 1788 0 R 1797 0 R 1806 0 R 1811 0 R 1817 0 R] +>> endobj +1826 0 obj << +/Type /Pages +/Count 6 +/Parent 1949 0 R +/Kids [1823 0 R 1828 0 R 1836 0 R 1842 0 R 1848 0 R 1854 0 R] +>> endobj +1864 0 obj << +/Type /Pages +/Count 6 +/Parent 1950 0 R +/Kids [1858 0 R 1866 0 R 1871 0 R 1875 0 R 1879 0 R 1890 0 R] +>> endobj +1903 0 obj << +/Type /Pages +/Count 6 +/Parent 1950 0 R +/Kids [1896 0 R 1905 0 R 1909 0 R 1915 0 R 1922 0 R 1928 0 R] +>> endobj +1948 0 obj << +/Type /Pages +/Count 36 +/Parent 1951 0 R +/Kids [933 0 R 1217 0 R 1307 0 R 1379 0 R 1470 0 R 1512 0 R] +>> endobj +1949 0 obj << +/Type /Pages +/Count 36 +/Parent 1951 0 R +/Kids [1585 0 R 1632 0 R 1697 0 R 1749 0 R 1786 0 R 1826 0 R] +>> endobj +1950 0 obj << +/Type /Pages +/Count 12 +/Parent 1951 0 R +/Kids [1864 0 R 1903 0 R] +>> endobj +1951 0 obj << +/Type /Pages +/Count 84 +/Kids [1948 0 R 1949 0 R 1950 0 R] +>> endobj +1952 0 obj << +/Type /Outlines +/First 7 0 R +/Last 919 0 R +/Count 18 +>> endobj +919 0 obj << +/Title 920 0 R +/A 917 0 R +/Parent 1952 0 R +/Prev 907 0 R +>> endobj +915 0 obj << +/Title 916 0 R +/A 913 0 R +/Parent 907 0 R +/Prev 911 0 R +>> endobj +911 0 obj << +/Title 912 0 R +/A 909 0 R +/Parent 907 0 R +/Next 915 0 R +>> endobj +907 0 obj << +/Title 908 0 R +/A 905 0 R +/Parent 1952 0 R +/Prev 859 0 R +/Next 919 0 R +/First 911 0 R +/Last 915 0 R +/Count -2 +>> endobj +903 0 obj << +/Title 904 0 R +/A 901 0 R +/Parent 895 0 R +/Prev 899 0 R +>> endobj +899 0 obj << +/Title 900 0 R +/A 897 0 R +/Parent 895 0 R +/Next 903 0 R +>> endobj +895 0 obj << +/Title 896 0 R +/A 893 0 R +/Parent 859 0 R +/Prev 887 0 R +/First 899 0 R +/Last 903 0 R +/Count -2 +>> endobj +891 0 obj << +/Title 892 0 R +/A 889 0 R +/Parent 887 0 R +>> endobj +887 0 obj << +/Title 888 0 R +/A 885 0 R +/Parent 859 0 R +/Prev 875 0 R +/Next 895 0 R +/First 891 0 R +/Last 891 0 R +/Count -1 +>> endobj +883 0 obj << +/Title 884 0 R +/A 881 0 R +/Parent 875 0 R +/Prev 879 0 R +>> endobj +879 0 obj << +/Title 880 0 R +/A 877 0 R +/Parent 875 0 R +/Next 883 0 R +>> endobj +875 0 obj << +/Title 876 0 R +/A 873 0 R +/Parent 859 0 R +/Prev 863 0 R +/Next 887 0 R +/First 879 0 R +/Last 883 0 R +/Count -2 +>> endobj +871 0 obj << +/Title 872 0 R +/A 869 0 R +/Parent 863 0 R +/Prev 867 0 R +>> endobj +867 0 obj << +/Title 868 0 R +/A 865 0 R +/Parent 863 0 R +/Next 871 0 R +>> endobj +863 0 obj << +/Title 864 0 R +/A 861 0 R +/Parent 859 0 R +/Next 875 0 R +/First 867 0 R +/Last 871 0 R +/Count -2 +>> endobj +859 0 obj << +/Title 860 0 R +/A 857 0 R +/Parent 1952 0 R +/Prev 847 0 R +/Next 907 0 R +/First 863 0 R +/Last 895 0 R +/Count -4 +>> endobj +855 0 obj << +/Title 856 0 R +/A 853 0 R +/Parent 847 0 R +/Prev 851 0 R +>> endobj +851 0 obj << +/Title 852 0 R +/A 849 0 R +/Parent 847 0 R +/Next 855 0 R +>> endobj +847 0 obj << +/Title 848 0 R +/A 845 0 R +/Parent 1952 0 R +/Prev 819 0 R +/Next 859 0 R +/First 851 0 R +/Last 855 0 R +/Count -2 +>> endobj +843 0 obj << +/Title 844 0 R +/A 841 0 R +/Parent 839 0 R +>> endobj +839 0 obj << +/Title 840 0 R +/A 837 0 R +/Parent 819 0 R +/Prev 827 0 R +/First 843 0 R +/Last 843 0 R +/Count -1 +>> endobj +835 0 obj << +/Title 836 0 R +/A 833 0 R +/Parent 827 0 R +/Prev 831 0 R +>> endobj +831 0 obj << +/Title 832 0 R +/A 829 0 R +/Parent 827 0 R +/Next 835 0 R +>> endobj +827 0 obj << +/Title 828 0 R +/A 825 0 R +/Parent 819 0 R +/Prev 823 0 R +/Next 839 0 R +/First 831 0 R +/Last 835 0 R +/Count -2 +>> endobj +823 0 obj << +/Title 824 0 R +/A 821 0 R +/Parent 819 0 R +/Next 827 0 R +>> endobj +819 0 obj << +/Title 820 0 R +/A 817 0 R +/Parent 1952 0 R +/Prev 803 0 R +/Next 847 0 R +/First 823 0 R +/Last 839 0 R +/Count -3 +>> endobj +815 0 obj << +/Title 816 0 R +/A 813 0 R +/Parent 803 0 R +/Prev 811 0 R +>> endobj +811 0 obj << +/Title 812 0 R +/A 809 0 R +/Parent 803 0 R +/Prev 807 0 R +/Next 815 0 R +>> endobj +807 0 obj << +/Title 808 0 R +/A 805 0 R +/Parent 803 0 R +/Next 811 0 R +>> endobj +803 0 obj << +/Title 804 0 R +/A 801 0 R +/Parent 1952 0 R +/Prev 751 0 R +/Next 819 0 R +/First 807 0 R +/Last 815 0 R +/Count -3 +>> endobj +799 0 obj << +/Title 800 0 R +/A 797 0 R +/Parent 751 0 R +/Prev 795 0 R +>> endobj +795 0 obj << +/Title 796 0 R +/A 793 0 R +/Parent 751 0 R +/Prev 783 0 R +/Next 799 0 R +>> endobj +791 0 obj << +/Title 792 0 R +/A 789 0 R +/Parent 783 0 R +/Prev 787 0 R +>> endobj +787 0 obj << +/Title 788 0 R +/A 785 0 R +/Parent 783 0 R +/Next 791 0 R +>> endobj +783 0 obj << +/Title 784 0 R +/A 781 0 R +/Parent 751 0 R +/Prev 767 0 R +/Next 795 0 R +/First 787 0 R +/Last 791 0 R +/Count -2 +>> endobj +779 0 obj << +/Title 780 0 R +/A 777 0 R +/Parent 767 0 R +/Prev 775 0 R +>> endobj +775 0 obj << +/Title 776 0 R +/A 773 0 R +/Parent 767 0 R +/Prev 771 0 R +/Next 779 0 R +>> endobj +771 0 obj << +/Title 772 0 R +/A 769 0 R +/Parent 767 0 R +/Next 775 0 R +>> endobj +767 0 obj << +/Title 768 0 R +/A 765 0 R +/Parent 751 0 R +/Prev 763 0 R +/Next 783 0 R +/First 771 0 R +/Last 779 0 R +/Count -3 +>> endobj +763 0 obj << +/Title 764 0 R +/A 761 0 R +/Parent 751 0 R +/Prev 759 0 R +/Next 767 0 R +>> endobj +759 0 obj << +/Title 760 0 R +/A 757 0 R +/Parent 751 0 R +/Prev 755 0 R +/Next 763 0 R +>> endobj +755 0 obj << +/Title 756 0 R +/A 753 0 R +/Parent 751 0 R +/Next 759 0 R +>> endobj +751 0 obj << +/Title 752 0 R +/A 749 0 R +/Parent 1952 0 R +/Prev 743 0 R +/Next 803 0 R +/First 755 0 R +/Last 799 0 R +/Count -7 +>> endobj +747 0 obj << +/Title 748 0 R +/A 745 0 R +/Parent 743 0 R +>> endobj +743 0 obj << +/Title 744 0 R +/A 741 0 R +/Parent 1952 0 R +/Prev 719 0 R +/Next 751 0 R +/First 747 0 R +/Last 747 0 R +/Count -1 +>> endobj +739 0 obj << +/Title 740 0 R +/A 737 0 R +/Parent 719 0 R +/Prev 735 0 R +>> endobj +735 0 obj << +/Title 736 0 R +/A 733 0 R +/Parent 719 0 R +/Prev 731 0 R +/Next 739 0 R +>> endobj +731 0 obj << +/Title 732 0 R +/A 729 0 R +/Parent 719 0 R +/Prev 727 0 R +/Next 735 0 R +>> endobj +727 0 obj << +/Title 728 0 R +/A 725 0 R +/Parent 719 0 R +/Prev 723 0 R +/Next 731 0 R +>> endobj +723 0 obj << +/Title 724 0 R +/A 721 0 R +/Parent 719 0 R +/Next 727 0 R +>> endobj +719 0 obj << +/Title 720 0 R +/A 717 0 R +/Parent 1952 0 R +/Prev 251 0 R +/Next 743 0 R +/First 723 0 R +/Last 739 0 R +/Count -5 +>> endobj +715 0 obj << +/Title 716 0 R +/A 713 0 R +/Parent 703 0 R +/Prev 711 0 R +>> endobj +711 0 obj << +/Title 712 0 R +/A 709 0 R +/Parent 703 0 R +/Prev 707 0 R +/Next 715 0 R +>> endobj +707 0 obj << +/Title 708 0 R +/A 705 0 R +/Parent 703 0 R +/Next 711 0 R +>> endobj +703 0 obj << +/Title 704 0 R +/A 701 0 R +/Parent 687 0 R +/Prev 691 0 R +/First 707 0 R +/Last 715 0 R +/Count -3 +>> endobj +699 0 obj << +/Title 700 0 R +/A 697 0 R +/Parent 691 0 R +/Prev 695 0 R +>> endobj +695 0 obj << +/Title 696 0 R +/A 693 0 R +/Parent 691 0 R +/Next 699 0 R +>> endobj +691 0 obj << +/Title 692 0 R +/A 689 0 R +/Parent 687 0 R +/Next 703 0 R +/First 695 0 R +/Last 699 0 R +/Count -2 +>> endobj +687 0 obj << +/Title 688 0 R +/A 685 0 R +/Parent 251 0 R +/Prev 671 0 R +/First 691 0 R +/Last 703 0 R +/Count -2 +>> endobj +683 0 obj << +/Title 684 0 R +/A 681 0 R +/Parent 671 0 R +/Prev 679 0 R +>> endobj +679 0 obj << +/Title 680 0 R +/A 677 0 R +/Parent 671 0 R +/Prev 675 0 R +/Next 683 0 R +>> endobj +675 0 obj << +/Title 676 0 R +/A 673 0 R +/Parent 671 0 R +/Next 679 0 R +>> endobj +671 0 obj << +/Title 672 0 R +/A 669 0 R +/Parent 251 0 R +/Prev 643 0 R +/Next 687 0 R +/First 675 0 R +/Last 683 0 R +/Count -3 +>> endobj +667 0 obj << +/Title 668 0 R +/A 665 0 R +/Parent 659 0 R +/Prev 663 0 R +>> endobj +663 0 obj << +/Title 664 0 R +/A 661 0 R +/Parent 659 0 R +/Next 667 0 R +>> endobj +659 0 obj << +/Title 660 0 R +/A 657 0 R +/Parent 643 0 R +/Prev 647 0 R +/First 663 0 R +/Last 667 0 R +/Count -2 +>> endobj +655 0 obj << +/Title 656 0 R +/A 653 0 R +/Parent 647 0 R +/Prev 651 0 R +>> endobj +651 0 obj << +/Title 652 0 R +/A 649 0 R +/Parent 647 0 R +/Next 655 0 R +>> endobj +647 0 obj << +/Title 648 0 R +/A 645 0 R +/Parent 643 0 R +/Next 659 0 R +/First 651 0 R +/Last 655 0 R +/Count -2 +>> endobj +643 0 obj << +/Title 644 0 R +/A 641 0 R +/Parent 251 0 R +/Prev 615 0 R +/Next 671 0 R +/First 647 0 R +/Last 659 0 R +/Count -2 +>> endobj +639 0 obj << +/Title 640 0 R +/A 637 0 R +/Parent 631 0 R +/Prev 635 0 R +>> endobj +635 0 obj << +/Title 636 0 R +/A 633 0 R +/Parent 631 0 R +/Next 639 0 R +>> endobj +631 0 obj << +/Title 632 0 R +/A 629 0 R +/Parent 615 0 R +/Prev 619 0 R +/First 635 0 R +/Last 639 0 R +/Count -2 +>> endobj +627 0 obj << +/Title 628 0 R +/A 625 0 R +/Parent 619 0 R +/Prev 623 0 R +>> endobj +623 0 obj << +/Title 624 0 R +/A 621 0 R +/Parent 619 0 R +/Next 627 0 R +>> endobj +619 0 obj << +/Title 620 0 R +/A 617 0 R +/Parent 615 0 R +/Next 631 0 R +/First 623 0 R +/Last 627 0 R +/Count -2 +>> endobj +615 0 obj << +/Title 616 0 R +/A 613 0 R +/Parent 251 0 R +/Prev 551 0 R +/Next 643 0 R +/First 619 0 R +/Last 631 0 R +/Count -2 +>> endobj +611 0 obj << +/Title 612 0 R +/A 609 0 R +/Parent 603 0 R +/Prev 607 0 R +>> endobj +607 0 obj << +/Title 608 0 R +/A 605 0 R +/Parent 603 0 R +/Next 611 0 R +>> endobj +603 0 obj << +/Title 604 0 R +/A 601 0 R +/Parent 551 0 R +/Prev 591 0 R +/First 607 0 R +/Last 611 0 R +/Count -2 +>> endobj +599 0 obj << +/Title 600 0 R +/A 597 0 R +/Parent 591 0 R +/Prev 595 0 R +>> endobj +595 0 obj << +/Title 596 0 R +/A 593 0 R +/Parent 591 0 R +/Next 599 0 R +>> endobj +591 0 obj << +/Title 592 0 R +/A 589 0 R +/Parent 551 0 R +/Prev 579 0 R +/Next 603 0 R +/First 595 0 R +/Last 599 0 R +/Count -2 +>> endobj +587 0 obj << +/Title 588 0 R +/A 585 0 R +/Parent 579 0 R +/Prev 583 0 R +>> endobj +583 0 obj << +/Title 584 0 R +/A 581 0 R +/Parent 579 0 R +/Next 587 0 R +>> endobj +579 0 obj << +/Title 580 0 R +/A 577 0 R +/Parent 551 0 R +/Prev 567 0 R +/Next 591 0 R +/First 583 0 R +/Last 587 0 R +/Count -2 +>> endobj +575 0 obj << +/Title 576 0 R +/A 573 0 R +/Parent 567 0 R +/Prev 571 0 R +>> endobj +571 0 obj << +/Title 572 0 R +/A 569 0 R +/Parent 567 0 R +/Next 575 0 R +>> endobj +567 0 obj << +/Title 568 0 R +/A 565 0 R +/Parent 551 0 R +/Prev 555 0 R +/Next 579 0 R +/First 571 0 R +/Last 575 0 R +/Count -2 +>> endobj +563 0 obj << +/Title 564 0 R +/A 561 0 R +/Parent 555 0 R +/Prev 559 0 R +>> endobj +559 0 obj << +/Title 560 0 R +/A 557 0 R +/Parent 555 0 R +/Next 563 0 R +>> endobj +555 0 obj << +/Title 556 0 R +/A 553 0 R +/Parent 551 0 R +/Next 567 0 R +/First 559 0 R +/Last 563 0 R +/Count -2 +>> endobj +551 0 obj << +/Title 552 0 R +/A 549 0 R +/Parent 251 0 R +/Prev 411 0 R +/Next 615 0 R +/First 555 0 R +/Last 603 0 R +/Count -5 +>> endobj +547 0 obj << +/Title 548 0 R +/A 545 0 R +/Parent 539 0 R +/Prev 543 0 R +>> endobj +543 0 obj << +/Title 544 0 R +/A 541 0 R +/Parent 539 0 R +/Next 547 0 R +>> endobj +539 0 obj << +/Title 540 0 R +/A 537 0 R +/Parent 411 0 R +/Prev 527 0 R +/First 543 0 R +/Last 547 0 R +/Count -2 +>> endobj +535 0 obj << +/Title 536 0 R +/A 533 0 R +/Parent 527 0 R +/Prev 531 0 R +>> endobj +531 0 obj << +/Title 532 0 R +/A 529 0 R +/Parent 527 0 R +/Next 535 0 R +>> endobj +527 0 obj << +/Title 528 0 R +/A 525 0 R +/Parent 411 0 R +/Prev 515 0 R +/Next 539 0 R +/First 531 0 R +/Last 535 0 R +/Count -2 +>> endobj +523 0 obj << +/Title 524 0 R +/A 521 0 R +/Parent 515 0 R +/Prev 519 0 R +>> endobj +519 0 obj << +/Title 520 0 R +/A 517 0 R +/Parent 515 0 R +/Next 523 0 R +>> endobj +515 0 obj << +/Title 516 0 R +/A 513 0 R +/Parent 411 0 R +/Prev 503 0 R +/Next 527 0 R +/First 519 0 R +/Last 523 0 R +/Count -2 +>> endobj +511 0 obj << +/Title 512 0 R +/A 509 0 R +/Parent 503 0 R +/Prev 507 0 R +>> endobj +507 0 obj << +/Title 508 0 R +/A 505 0 R +/Parent 503 0 R +/Next 511 0 R +>> endobj +503 0 obj << +/Title 504 0 R +/A 501 0 R +/Parent 411 0 R +/Prev 491 0 R +/Next 515 0 R +/First 507 0 R +/Last 511 0 R +/Count -2 +>> endobj +499 0 obj << +/Title 500 0 R +/A 497 0 R +/Parent 491 0 R +/Prev 495 0 R +>> endobj +495 0 obj << +/Title 496 0 R +/A 493 0 R +/Parent 491 0 R +/Next 499 0 R +>> endobj +491 0 obj << +/Title 492 0 R +/A 489 0 R +/Parent 411 0 R +/Prev 479 0 R +/Next 503 0 R +/First 495 0 R +/Last 499 0 R +/Count -2 +>> endobj +487 0 obj << +/Title 488 0 R +/A 485 0 R +/Parent 479 0 R +/Prev 483 0 R +>> endobj +483 0 obj << +/Title 484 0 R +/A 481 0 R +/Parent 479 0 R +/Next 487 0 R +>> endobj +479 0 obj << +/Title 480 0 R +/A 477 0 R +/Parent 411 0 R +/Prev 467 0 R +/Next 491 0 R +/First 483 0 R +/Last 487 0 R +/Count -2 +>> endobj +475 0 obj << +/Title 476 0 R +/A 473 0 R +/Parent 467 0 R +/Prev 471 0 R +>> endobj +471 0 obj << +/Title 472 0 R +/A 469 0 R +/Parent 467 0 R +/Next 475 0 R +>> endobj +467 0 obj << +/Title 468 0 R +/A 465 0 R +/Parent 411 0 R +/Prev 463 0 R +/Next 479 0 R +/First 471 0 R +/Last 475 0 R +/Count -2 +>> endobj +463 0 obj << +/Title 464 0 R +/A 461 0 R +/Parent 411 0 R +/Prev 459 0 R +/Next 467 0 R +>> endobj +459 0 obj << +/Title 460 0 R +/A 457 0 R +/Parent 411 0 R +/Prev 455 0 R +/Next 463 0 R +>> endobj +455 0 obj << +/Title 456 0 R +/A 453 0 R +/Parent 411 0 R +/Prev 419 0 R +/Next 459 0 R +>> endobj +451 0 obj << +/Title 452 0 R +/A 449 0 R +/Parent 419 0 R +/Prev 447 0 R +>> endobj +447 0 obj << +/Title 448 0 R +/A 445 0 R +/Parent 419 0 R +/Prev 443 0 R +/Next 451 0 R +>> endobj +443 0 obj << +/Title 444 0 R +/A 441 0 R +/Parent 419 0 R +/Prev 439 0 R +/Next 447 0 R +>> endobj +439 0 obj << +/Title 440 0 R +/A 437 0 R +/Parent 419 0 R +/Prev 435 0 R +/Next 443 0 R +>> endobj +435 0 obj << +/Title 436 0 R +/A 433 0 R +/Parent 419 0 R +/Prev 431 0 R +/Next 439 0 R +>> endobj +431 0 obj << +/Title 432 0 R +/A 429 0 R +/Parent 419 0 R +/Prev 427 0 R +/Next 435 0 R +>> endobj +427 0 obj << +/Title 428 0 R +/A 425 0 R +/Parent 419 0 R +/Prev 423 0 R +/Next 431 0 R +>> endobj +423 0 obj << +/Title 424 0 R +/A 421 0 R +/Parent 419 0 R +/Next 427 0 R +>> endobj +419 0 obj << +/Title 420 0 R +/A 417 0 R +/Parent 411 0 R +/Prev 415 0 R +/Next 455 0 R +/First 423 0 R +/Last 451 0 R +/Count -8 +>> endobj +415 0 obj << +/Title 416 0 R +/A 413 0 R +/Parent 411 0 R +/Next 419 0 R +>> endobj +411 0 obj << +/Title 412 0 R +/A 409 0 R +/Parent 251 0 R +/Prev 267 0 R +/Next 551 0 R +/First 415 0 R +/Last 539 0 R +/Count -12 +>> endobj +407 0 obj << +/Title 408 0 R +/A 405 0 R +/Parent 287 0 R +/Prev 403 0 R +>> endobj +403 0 obj << +/Title 404 0 R +/A 401 0 R +/Parent 287 0 R +/Prev 399 0 R +/Next 407 0 R +>> endobj +399 0 obj << +/Title 400 0 R +/A 397 0 R +/Parent 287 0 R +/Prev 395 0 R +/Next 403 0 R +>> endobj +395 0 obj << +/Title 396 0 R +/A 393 0 R +/Parent 287 0 R +/Prev 391 0 R +/Next 399 0 R +>> endobj +391 0 obj << +/Title 392 0 R +/A 389 0 R +/Parent 287 0 R +/Prev 387 0 R +/Next 395 0 R +>> endobj +387 0 obj << +/Title 388 0 R +/A 385 0 R +/Parent 287 0 R +/Prev 383 0 R +/Next 391 0 R +>> endobj +383 0 obj << +/Title 384 0 R +/A 381 0 R +/Parent 287 0 R +/Prev 379 0 R +/Next 387 0 R +>> endobj +379 0 obj << +/Title 380 0 R +/A 377 0 R +/Parent 287 0 R +/Prev 375 0 R +/Next 383 0 R +>> endobj +375 0 obj << +/Title 376 0 R +/A 373 0 R +/Parent 287 0 R +/Prev 371 0 R +/Next 379 0 R +>> endobj +371 0 obj << +/Title 372 0 R +/A 369 0 R +/Parent 287 0 R +/Prev 367 0 R +/Next 375 0 R +>> endobj +367 0 obj << +/Title 368 0 R +/A 365 0 R +/Parent 287 0 R +/Prev 363 0 R +/Next 371 0 R +>> endobj +363 0 obj << +/Title 364 0 R +/A 361 0 R +/Parent 287 0 R +/Prev 359 0 R +/Next 367 0 R +>> endobj +359 0 obj << +/Title 360 0 R +/A 357 0 R +/Parent 287 0 R +/Prev 355 0 R +/Next 363 0 R +>> endobj +355 0 obj << +/Title 356 0 R +/A 353 0 R +/Parent 287 0 R +/Prev 351 0 R +/Next 359 0 R +>> endobj +351 0 obj << +/Title 352 0 R +/A 349 0 R +/Parent 287 0 R +/Prev 347 0 R +/Next 355 0 R +>> endobj +347 0 obj << +/Title 348 0 R +/A 345 0 R +/Parent 287 0 R +/Prev 343 0 R +/Next 351 0 R +>> endobj +343 0 obj << +/Title 344 0 R +/A 341 0 R +/Parent 287 0 R +/Prev 339 0 R +/Next 347 0 R +>> endobj +339 0 obj << +/Title 340 0 R +/A 337 0 R +/Parent 287 0 R +/Prev 335 0 R +/Next 343 0 R +>> endobj +335 0 obj << +/Title 336 0 R +/A 333 0 R +/Parent 287 0 R +/Prev 331 0 R +/Next 339 0 R +>> endobj +331 0 obj << +/Title 332 0 R +/A 329 0 R +/Parent 287 0 R +/Prev 327 0 R +/Next 335 0 R +>> endobj +327 0 obj << +/Title 328 0 R +/A 325 0 R +/Parent 287 0 R +/Prev 323 0 R +/Next 331 0 R +>> endobj +323 0 obj << +/Title 324 0 R +/A 321 0 R +/Parent 287 0 R +/Prev 319 0 R +/Next 327 0 R +>> endobj +319 0 obj << +/Title 320 0 R +/A 317 0 R +/Parent 287 0 R +/Prev 315 0 R +/Next 323 0 R +>> endobj +315 0 obj << +/Title 316 0 R +/A 313 0 R +/Parent 287 0 R +/Prev 311 0 R +/Next 319 0 R +>> endobj +311 0 obj << +/Title 312 0 R +/A 309 0 R +/Parent 287 0 R +/Prev 307 0 R +/Next 315 0 R +>> endobj +307 0 obj << +/Title 308 0 R +/A 305 0 R +/Parent 287 0 R +/Prev 303 0 R +/Next 311 0 R +>> endobj +303 0 obj << +/Title 304 0 R +/A 301 0 R +/Parent 287 0 R +/Prev 299 0 R +/Next 307 0 R +>> endobj +299 0 obj << +/Title 300 0 R +/A 297 0 R +/Parent 287 0 R +/Prev 295 0 R +/Next 303 0 R +>> endobj +295 0 obj << +/Title 296 0 R +/A 293 0 R +/Parent 287 0 R +/Prev 291 0 R +/Next 299 0 R +>> endobj +291 0 obj << +/Title 292 0 R +/A 289 0 R +/Parent 287 0 R +/Next 295 0 R +>> endobj +287 0 obj << +/Title 288 0 R +/A 285 0 R +/Parent 267 0 R +/Prev 275 0 R +/First 291 0 R +/Last 407 0 R +/Count -30 +>> endobj +283 0 obj << +/Title 284 0 R +/A 281 0 R +/Parent 275 0 R +/Prev 279 0 R +>> endobj +279 0 obj << +/Title 280 0 R +/A 277 0 R +/Parent 275 0 R +/Next 283 0 R +>> endobj +275 0 obj << +/Title 276 0 R +/A 273 0 R +/Parent 267 0 R +/Prev 271 0 R +/Next 287 0 R +/First 279 0 R +/Last 283 0 R +/Count -2 +>> endobj +271 0 obj << +/Title 272 0 R +/A 269 0 R +/Parent 267 0 R +/Next 275 0 R +>> endobj +267 0 obj << +/Title 268 0 R +/A 265 0 R +/Parent 251 0 R +/Prev 255 0 R +/Next 411 0 R +/First 271 0 R +/Last 287 0 R +/Count -3 +>> endobj +263 0 obj << +/Title 264 0 R +/A 261 0 R +/Parent 255 0 R +/Prev 259 0 R +>> endobj +259 0 obj << +/Title 260 0 R +/A 257 0 R +/Parent 255 0 R +/Next 263 0 R +>> endobj +255 0 obj << +/Title 256 0 R +/A 253 0 R +/Parent 251 0 R +/Next 267 0 R +/First 259 0 R +/Last 263 0 R +/Count -2 +>> endobj +251 0 obj << +/Title 252 0 R +/A 249 0 R +/Parent 1952 0 R +/Prev 247 0 R +/Next 719 0 R +/First 255 0 R +/Last 687 0 R +/Count -8 +>> endobj +247 0 obj << +/Title 248 0 R +/A 245 0 R +/Parent 1952 0 R +/Prev 207 0 R +/Next 251 0 R +>> endobj +243 0 obj << +/Title 244 0 R +/A 241 0 R +/Parent 207 0 R +/Prev 239 0 R +>> endobj +239 0 obj << +/Title 240 0 R +/A 237 0 R +/Parent 207 0 R +/Prev 235 0 R +/Next 243 0 R +>> endobj +235 0 obj << +/Title 236 0 R +/A 233 0 R +/Parent 207 0 R +/Prev 231 0 R +/Next 239 0 R +>> endobj +231 0 obj << +/Title 232 0 R +/A 229 0 R +/Parent 207 0 R +/Prev 227 0 R +/Next 235 0 R +>> endobj +227 0 obj << +/Title 228 0 R +/A 225 0 R +/Parent 207 0 R +/Prev 223 0 R +/Next 231 0 R +>> endobj +223 0 obj << +/Title 224 0 R +/A 221 0 R +/Parent 207 0 R +/Prev 219 0 R +/Next 227 0 R +>> endobj +219 0 obj << +/Title 220 0 R +/A 217 0 R +/Parent 207 0 R +/Prev 215 0 R +/Next 223 0 R +>> endobj +215 0 obj << +/Title 216 0 R +/A 213 0 R +/Parent 207 0 R +/Prev 211 0 R +/Next 219 0 R +>> endobj +211 0 obj << +/Title 212 0 R +/A 209 0 R +/Parent 207 0 R +/Next 215 0 R +>> endobj +207 0 obj << +/Title 208 0 R +/A 205 0 R +/Parent 1952 0 R +/Prev 179 0 R +/Next 247 0 R +/First 211 0 R +/Last 243 0 R +/Count -9 +>> endobj +203 0 obj << +/Title 204 0 R +/A 201 0 R +/Parent 199 0 R +>> endobj +199 0 obj << +/Title 200 0 R +/A 197 0 R +/Parent 179 0 R +/Prev 183 0 R +/First 203 0 R +/Last 203 0 R +/Count -1 +>> endobj +195 0 obj << +/Title 196 0 R +/A 193 0 R +/Parent 183 0 R +/Prev 191 0 R +>> endobj +191 0 obj << +/Title 192 0 R +/A 189 0 R +/Parent 183 0 R +/Prev 187 0 R +/Next 195 0 R +>> endobj +187 0 obj << +/Title 188 0 R +/A 185 0 R +/Parent 183 0 R +/Next 191 0 R +>> endobj +183 0 obj << +/Title 184 0 R +/A 181 0 R +/Parent 179 0 R +/Next 199 0 R +/First 187 0 R +/Last 195 0 R +/Count -3 +>> endobj +179 0 obj << +/Title 180 0 R +/A 177 0 R +/Parent 1952 0 R +/Prev 87 0 R +/Next 207 0 R +/First 183 0 R +/Last 199 0 R +/Count -2 +>> endobj +175 0 obj << +/Title 176 0 R +/A 173 0 R +/Parent 87 0 R +/Prev 163 0 R +>> endobj +171 0 obj << +/Title 172 0 R +/A 169 0 R +/Parent 163 0 R +/Prev 167 0 R +>> endobj +167 0 obj << +/Title 168 0 R +/A 165 0 R +/Parent 163 0 R +/Next 171 0 R +>> endobj +163 0 obj << +/Title 164 0 R +/A 161 0 R +/Parent 87 0 R +/Prev 99 0 R +/Next 175 0 R +/First 167 0 R +/Last 171 0 R +/Count -2 +>> endobj +159 0 obj << +/Title 160 0 R +/A 157 0 R +/Parent 99 0 R +/Prev 155 0 R +>> endobj +155 0 obj << +/Title 156 0 R +/A 153 0 R +/Parent 99 0 R +/Prev 151 0 R +/Next 159 0 R +>> endobj +151 0 obj << +/Title 152 0 R +/A 149 0 R +/Parent 99 0 R +/Prev 147 0 R +/Next 155 0 R +>> endobj +147 0 obj << +/Title 148 0 R +/A 145 0 R +/Parent 99 0 R +/Prev 143 0 R +/Next 151 0 R +>> endobj +143 0 obj << +/Title 144 0 R +/A 141 0 R +/Parent 99 0 R +/Prev 139 0 R +/Next 147 0 R +>> endobj +139 0 obj << +/Title 140 0 R +/A 137 0 R +/Parent 99 0 R +/Prev 135 0 R +/Next 143 0 R +>> endobj +135 0 obj << +/Title 136 0 R +/A 133 0 R +/Parent 99 0 R +/Prev 131 0 R +/Next 139 0 R +>> endobj +131 0 obj << +/Title 132 0 R +/A 129 0 R +/Parent 99 0 R +/Prev 127 0 R +/Next 135 0 R +>> endobj +127 0 obj << +/Title 128 0 R +/A 125 0 R +/Parent 99 0 R +/Prev 123 0 R +/Next 131 0 R +>> endobj +123 0 obj << +/Title 124 0 R +/A 121 0 R +/Parent 99 0 R +/Prev 119 0 R +/Next 127 0 R +>> endobj +119 0 obj << +/Title 120 0 R +/A 117 0 R +/Parent 99 0 R +/Prev 115 0 R +/Next 123 0 R +>> endobj +115 0 obj << +/Title 116 0 R +/A 113 0 R +/Parent 99 0 R +/Prev 111 0 R +/Next 119 0 R +>> endobj +111 0 obj << +/Title 112 0 R +/A 109 0 R +/Parent 99 0 R +/Prev 107 0 R +/Next 115 0 R +>> endobj +107 0 obj << +/Title 108 0 R +/A 105 0 R +/Parent 99 0 R +/Prev 103 0 R +/Next 111 0 R +>> endobj +103 0 obj << +/Title 104 0 R +/A 101 0 R +/Parent 99 0 R +/Next 107 0 R +>> endobj +99 0 obj << +/Title 100 0 R +/A 97 0 R +/Parent 87 0 R +/Prev 95 0 R +/Next 163 0 R +/First 103 0 R +/Last 159 0 R +/Count -15 +>> endobj +95 0 obj << +/Title 96 0 R +/A 93 0 R +/Parent 87 0 R +/Prev 91 0 R +/Next 99 0 R +>> endobj +91 0 obj << +/Title 92 0 R +/A 89 0 R +/Parent 87 0 R +/Next 95 0 R +>> endobj +87 0 obj << +/Title 88 0 R +/A 85 0 R +/Parent 1952 0 R +/Prev 83 0 R +/Next 179 0 R +/First 91 0 R +/Last 175 0 R +/Count -5 +>> endobj +83 0 obj << +/Title 84 0 R +/A 81 0 R +/Parent 1952 0 R +/Prev 47 0 R +/Next 87 0 R +>> endobj +79 0 obj << +/Title 80 0 R +/A 77 0 R +/Parent 67 0 R +/Prev 75 0 R +>> endobj +75 0 obj << +/Title 76 0 R +/A 73 0 R +/Parent 67 0 R +/Prev 71 0 R +/Next 79 0 R +>> endobj +71 0 obj << +/Title 72 0 R +/A 69 0 R +/Parent 67 0 R +/Next 75 0 R +>> endobj +67 0 obj << +/Title 68 0 R +/A 65 0 R +/Parent 47 0 R +/Prev 63 0 R +/First 71 0 R +/Last 79 0 R +/Count -3 +>> endobj +63 0 obj << +/Title 64 0 R +/A 61 0 R +/Parent 47 0 R +/Prev 59 0 R +/Next 67 0 R +>> endobj +59 0 obj << +/Title 60 0 R +/A 57 0 R +/Parent 47 0 R +/Prev 55 0 R +/Next 63 0 R +>> endobj +55 0 obj << +/Title 56 0 R +/A 53 0 R +/Parent 47 0 R +/Prev 51 0 R +/Next 59 0 R +>> endobj +51 0 obj << +/Title 52 0 R +/A 49 0 R +/Parent 47 0 R +/Next 55 0 R +>> endobj +47 0 obj << +/Title 48 0 R +/A 45 0 R +/Parent 1952 0 R +/Prev 23 0 R +/Next 83 0 R +/First 51 0 R +/Last 67 0 R +/Count -5 +>> endobj +43 0 obj << +/Title 44 0 R +/A 41 0 R +/Parent 23 0 R +/Prev 39 0 R +>> endobj +39 0 obj << +/Title 40 0 R +/A 37 0 R +/Parent 23 0 R +/Prev 35 0 R +/Next 43 0 R +>> endobj +35 0 obj << +/Title 36 0 R +/A 33 0 R +/Parent 23 0 R +/Prev 31 0 R +/Next 39 0 R +>> endobj +31 0 obj << +/Title 32 0 R +/A 29 0 R +/Parent 23 0 R +/Prev 27 0 R +/Next 35 0 R +>> endobj +27 0 obj << +/Title 28 0 R +/A 25 0 R +/Parent 23 0 R +/Next 31 0 R +>> endobj +23 0 obj << +/Title 24 0 R +/A 21 0 R +/Parent 1952 0 R +/Prev 7 0 R +/Next 47 0 R +/First 27 0 R +/Last 43 0 R +/Count -5 +>> endobj +19 0 obj << +/Title 20 0 R +/A 17 0 R +/Parent 7 0 R +/Prev 15 0 R +>> endobj +15 0 obj << +/Title 16 0 R +/A 13 0 R +/Parent 7 0 R +/Prev 11 0 R +/Next 19 0 R +>> endobj +11 0 obj << +/Title 12 0 R +/A 9 0 R +/Parent 7 0 R +/Next 15 0 R +>> endobj +7 0 obj << +/Title 8 0 R +/A 5 0 R +/Parent 1952 0 R +/Next 23 0 R +/First 11 0 R +/Last 19 0 R +/Count -3 +>> endobj +1953 0 obj << +/Names [(CodingSuggestions) 996 0 R (Doc-Start) 926 0 R (Item.1) 1281 0 R (Item.10) 1303 0 R (Item.100) 1543 0 R (Item.101) 1544 0 R (Item.102) 1545 0 R (Item.103) 1546 0 R (Item.104) 1547 0 R (Item.105) 1754 0 R (Item.106) 1755 0 R (Item.107) 1756 0 R (Item.108) 1757 0 R (Item.109) 1758 0 R (Item.11) 1304 0 R (Item.110) 1759 0 R (Item.111) 1760 0 R (Item.112) 1761 0 R (Item.113) 1884 0 R (Item.114) 1885 0 R (Item.115) 1886 0 R (Item.116) 1887 0 R (Item.117) 1888 0 R (Item.118) 1893 0 R (Item.119) 1894 0 R (Item.12) 1305 0 R (Item.120) 1899 0 R (Item.121) 1900 0 R (Item.122) 1902 0 R (Item.123) 1912 0 R (Item.124) 1913 0 R (Item.13) 1306 0 R (Item.14) 1319 0 R (Item.15) 1324 0 R (Item.16) 1325 0 R (Item.17) 1336 0 R (Item.18) 1337 0 R (Item.19) 1338 0 R (Item.2) 1282 0 R (Item.20) 1339 0 R (Item.21) 1340 0 R (Item.22) 1341 0 R (Item.23) 1342 0 R (Item.24) 1343 0 R (Item.25) 1344 0 R (Item.26) 1349 0 R (Item.27) 1350 0 R (Item.28) 1351 0 R (Item.29) 1352 0 R (Item.3) 1283 0 R (Item.30) 1353 0 R (Item.31) 1354 0 R (Item.32) 1355 0 R (Item.33) 1356 0 R (Item.34) 1357 0 R (Item.35) 1358 0 R (Item.36) 1359 0 R (Item.37) 1360 0 R (Item.38) 1361 0 R (Item.39) 1362 0 R (Item.4) 1286 0 R (Item.40) 1363 0 R (Item.41) 1364 0 R (Item.42) 1371 0 R (Item.43) 1372 0 R (Item.44) 1373 0 R (Item.45) 1374 0 R (Item.46) 1375 0 R (Item.47) 1376 0 R (Item.48) 1377 0 R (Item.49) 1378 0 R (Item.5) 1287 0 R (Item.50) 1384 0 R (Item.51) 1385 0 R (Item.52) 1386 0 R (Item.53) 1409 0 R (Item.54) 1410 0 R (Item.55) 1411 0 R (Item.56) 1412 0 R (Item.57) 1417 0 R (Item.58) 1418 0 R (Item.59) 1419 0 R (Item.6) 1288 0 R (Item.60) 1420 0 R (Item.61) 1421 0 R (Item.62) 1422 0 R (Item.63) 1423 0 R (Item.64) 1424 0 R (Item.65) 1425 0 R (Item.66) 1426 0 R (Item.67) 1428 0 R (Item.68) 1429 0 R (Item.69) 1430 0 R (Item.7) 1289 0 R (Item.70) 1436 0 R (Item.71) 1437 0 R (Item.72) 1438 0 R (Item.73) 1439 0 R (Item.74) 1440 0 R (Item.75) 1441 0 R (Item.76) 1442 0 R (Item.77) 1443 0 R (Item.78) 1444 0 R (Item.79) 1445 0 R (Item.8) 1290 0 R (Item.80) 1451 0 R (Item.81) 1452 0 R (Item.82) 1453 0 R (Item.83) 1454 0 R (Item.84) 1455 0 R (Item.85) 1456 0 R (Item.86) 1457 0 R (Item.87) 1459 0 R (Item.88) 1460 0 R (Item.89) 1461 0 R (Item.9) 1295 0 R (Item.90) 1462 0 R (Item.91) 1475 0 R (Item.92) 1476 0 R (Item.93) 1477 0 R (Item.94) 1478 0 R (Item.95) 1530 0 R (Item.96) 1531 0 R (Item.97) 1532 0 R (Item.98) 1533 0 R (Item.99) 1538 0 R (Packaging) 1009 0 R (SMBPASSWDFILEFORMAT) 1821 0 R (architecture) 994 0 R (chapter*.1) 1015 0 R (chapter.1) 6 0 R (chapter.10) 718 0 R (chapter.11) 742 0 R (chapter.12) 750 0 R (chapter.13) 802 0 R (chapter.14) 818 0 R (chapter.15) 846 0 R (chapter.16) 858 0 R (chapter.17) 906 0 R (chapter.18) 918 0 R (chapter.2) 22 0 R (chapter.3) 46 0 R (chapter.4) 82 0 R (chapter.5) 86 0 R (chapter.6) 178 0 R (chapter.7) 206 0 R (chapter.8) 246 0 R (chapter.9) 250 0 R (contributing) 1010 0 R (debug) 995 0 R (id2735646) 1302 0 R (id2735784) 1312 0 R (id2735988) 1280 0 R (id2736040) 1284 0 R (id2736078) 1285 0 R (id2736152) 1296 0 R (id2736220) 1297 0 R (id2736369) 1269 0 R (id2804957) 1270 0 R (id2804986) 1275 0 R (id2805766) 1369 0 R (id2805792) 1370 0 R (id2806193) 1317 0 R (id2806237) 1318 0 R (id2806344) 1326 0 R (id2806351) 1327 0 R (id2806370) 1328 0 R (id2806393) 1329 0 R (id2807044) 1387 0 R (id2807796) 1450 0 R (id2807889) 1458 0 R (id2807945) 1463 0 R (id2807968) 1388 0 R (id2807982) 1389 0 R (id2807996) 1390 0 R (id2808009) 1391 0 R (id2808025) 1392 0 R (id2808039) 1393 0 R (id2808054) 1394 0 R (id2808068) 1395 0 R (id2808082) 1400 0 R (id2808097) 1401 0 R (id2808111) 1402 0 R (id2808126) 1403 0 R (id2808140) 1404 0 R (id2808154) 1405 0 R (id2808169) 1406 0 R (id2808185) 1407 0 R (id2808221) 1408 0 R (id2808372) 1427 0 R (id2808457) 1435 0 R (id2809220) 1484 0 R (id2809245) 1485 0 R (id2809473) 1486 0 R (id2809510) 1491 0 R (id2809548) 1492 0 R (id2809604) 1468 0 R (id2809702) 1469 0 R (id2809774) 1479 0 R (id2810165) 1521 0 R (id2810487) 1497 0 R (id2810517) 1498 0 R (id2810542) 1499 0 R (id2810588) 1500 0 R (id2811189) 1539 0 R (id2811222) 1540 0 R (id2811261) 1541 0 R (id2811268) 1542 0 R (id2812031) 1548 0 R (id2812038) 1549 0 R (id2812113) 1554 0 R (id2812244) 1555 0 R (id2812251) 1556 0 R (id2812263) 1557 0 R (id2812274) 1558 0 R (id2812287) 1559 0 R (id2812299) 1560 0 R (id2812394) 1561 0 R (id2812407) 1562 0 R (id2812463) 1567 0 R (id2812505) 1568 0 R (id2812533) 1569 0 R (id2812575) 1570 0 R (id2812661) 1571 0 R (id2812754) 1572 0 R (id2812781) 1573 0 R (id2812867) 1574 0 R (id2812937) 1579 0 R (id2813037) 1580 0 R (id2813114) 1581 0 R (id2813155) 1582 0 R (id2813238) 1583 0 R (id2813290) 1584 0 R (id2813461) 1590 0 R (id2813564) 1591 0 R (id2813603) 1592 0 R (id2813746) 1593 0 R (id2813859) 1594 0 R (id2814422) 1599 0 R (id2814517) 1600 0 R (id2814559) 1605 0 R (id2814728) 1606 0 R (id2815194) 1611 0 R (id2815207) 1612 0 R (id2815308) 1613 0 R (id2815498) 1618 0 R (id2815632) 1619 0 R (id2815658) 1620 0 R (id2815697) 1621 0 R (id2815838) 1626 0 R (id2815878) 1627 0 R (id2816028) 1628 0 R (id2816100) 1629 0 R (id2816180) 1630 0 R (id2816226) 1631 0 R (id2816405) 1637 0 R (id2816570) 1638 0 R (id2816584) 1639 0 R (id2816654) 1644 0 R (id2816696) 1645 0 R (id2816710) 1646 0 R (id2816749) 1647 0 R (id2816803) 1648 0 R (id2816810) 1649 0 R (id2816823) 1650 0 R (id2816894) 1651 0 R (id2816901) 1652 0 R (id2816913) 1653 0 R (id2817004) 1658 0 R (id2817011) 1659 0 R (id2817038) 1660 0 R (id2817070) 1661 0 R (id2817083) 1662 0 R (id2817182) 1663 0 R (id2817280) 1664 0 R (id2817294) 1665 0 R (id2817407) 1670 0 R (id2817504) 1671 0 R (id2817666) 1672 0 R (id2817698) 1673 0 R (id2817768) 1674 0 R (id2817800) 1679 0 R (id2817831) 1680 0 R (id2817900) 1681 0 R (id2817948) 1682 0 R (id2817987) 1683 0 R (id2818029) 1684 0 R (id2818063) 1685 0 R (id2818077) 1686 0 R (id2818105) 1691 0 R (id2818176) 1692 0 R (id2818191) 1693 0 R (id2818218) 1694 0 R (id2818268) 1695 0 R (id2818285) 1696 0 R (id2818299) 1702 0 R (id2818426) 1703 0 R (id2818547) 1704 0 R (id2818575) 1705 0 R (id2818758) 1706 0 R (id2818873) 1711 0 R (id2818918) 1712 0 R (id2818939) 1713 0 R (id2819064) 1714 0 R (id2819137) 1715 0 R (id2819150) 1716 0 R (id2819192) 1717 0 R (id2819254) 1722 0 R (id2819262) 1723 0 R (id2819424) 1724 0 R (id2819521) 1729 0 R (id2819570) 1730 0 R (id2819609) 1731 0 R (id2819617) 1732 0 R (id2819744) 1733 0 R (id2819924) 1738 0 R (id2819939) 1739 0 R (id2819988) 1740 0 R (id2820047) 1741 0 R (id2828369) 1785 0 R (id2828567) 1780 0 R (id2828607) 1746 0 R (id2828623) 1747 0 R (id2828877) 1748 0 R (id2829086) 1766 0 R (id2829100) 1767 0 R (id2829776) 1820 0 R (id2829894) 1791 0 R (id2829928) 1792 0 R (id2829996) 1793 0 R (id2830004) 1794 0 R (id2830020) 1795 0 R (id2830047) 1800 0 R (id2830069) 1801 0 R (id2830076) 1802 0 R (id2830094) 1803 0 R (id2830133) 1804 0 R (id2830223) 1809 0 R (id2830816) 1831 0 R (id2830864) 1814 0 R (id2830889) 1815 0 R (id2831484) 1845 0 R (id2831502) 1846 0 R (id2831716) 1832 0 R (id2831749) 1833 0 R (id2832690) 1834 0 R (id2832718) 1839 0 R (id2832779) 1840 0 R (id2833588) 1925 0 R (id2833621) 1926 0 R (id2833795) 1851 0 R (id2833802) 1852 0 R (id2833917) 1861 0 R (id2833989) 1862 0 R (id2833997) 1863 0 R (id2834188) 1869 0 R (id2834432) 1882 0 R (id2834439) 1883 0 R (id2834980) 1918 0 R (id2834987) 1919 0 R (id2835012) 1920 0 R (internals) 997 0 R (modules) 1006 0 R (netbios) 993 0 R (ntdomain) 1001 0 R (page.1) 925 0 R (page.10) 1274 0 R (page.11) 1279 0 R (page.12) 1294 0 R (page.13) 1301 0 R (page.14) 1311 0 R (page.15) 1316 0 R (page.16) 1323 0 R (page.17) 1333 0 R (page.18) 1348 0 R (page.19) 1368 0 R (page.2) 937 0 R (page.20) 1383 0 R (page.21) 1399 0 R (page.22) 1416 0 R (page.23) 1434 0 R (page.24) 1449 0 R (page.25) 1467 0 R (page.26) 1474 0 R (page.27) 1483 0 R (page.28) 1490 0 R (page.29) 1496 0 R (page.3) 954 0 R (page.30) 1504 0 R (page.31) 1508 0 R (page.32) 1516 0 R (page.33) 1520 0 R (page.34) 1537 0 R (page.35) 1553 0 R (page.36) 1566 0 R (page.37) 1578 0 R (page.38) 1589 0 R (page.39) 1598 0 R (page.4) 1014 0 R (page.40) 1604 0 R (page.41) 1610 0 R (page.42) 1617 0 R (page.43) 1625 0 R (page.44) 1636 0 R (page.45) 1643 0 R (page.46) 1657 0 R (page.47) 1669 0 R (page.48) 1678 0 R (page.49) 1690 0 R (page.5) 1059 0 R (page.50) 1701 0 R (page.51) 1710 0 R (page.52) 1721 0 R (page.53) 1728 0 R (page.54) 1737 0 R (page.55) 1745 0 R (page.56) 1753 0 R (page.57) 1765 0 R (page.58) 1771 0 R (page.59) 1775 0 R (page.6) 1114 0 R (page.60) 1779 0 R (page.61) 1784 0 R (page.62) 1790 0 R (page.63) 1799 0 R (page.64) 1808 0 R (page.65) 1813 0 R (page.66) 1819 0 R (page.67) 1825 0 R (page.68) 1830 0 R (page.69) 1838 0 R (page.7) 1167 0 R (page.70) 1844 0 R (page.71) 1850 0 R (page.72) 1856 0 R (page.73) 1860 0 R (page.74) 1868 0 R (page.75) 1873 0 R (page.76) 1877 0 R (page.77) 1881 0 R (page.78) 1892 0 R (page.79) 1898 0 R (page.8) 1221 0 R (page.80) 1907 0 R (page.81) 1911 0 R (page.82) 1917 0 R (page.83) 1924 0 R (page.84) 1930 0 R (page.9) 1268 0 R (parsing) 998 0 R (printing) 1002 0 R (pwencrypt) 1005 0 R (rpc-plugin) 1007 0 R (sam) 1004 0 R (section.1.1) 10 0 R (section.1.2) 14 0 R (section.1.3) 18 0 R (section.10.1) 722 0 R (section.10.2) 726 0 R (section.10.3) 730 0 R (section.10.4) 734 0 R (section.10.5) 738 0 R (section.11.1) 746 0 R (section.12.1) 754 0 R (section.12.2) 758 0 R (section.12.3) 762 0 R (section.12.4) 766 0 R (section.12.5) 782 0 R (section.12.6) 794 0 R (section.12.7) 798 0 R (section.13.1) 806 0 R (section.13.2) 810 0 R (section.13.3) 814 0 R (section.14.1) 822 0 R (section.14.2) 826 0 R (section.14.3) 838 0 R (section.15.1) 850 0 R (section.15.2) 854 0 R (section.16.1) 862 0 R (section.16.2) 874 0 R (section.16.3) 886 0 R (section.16.4) 894 0 R (section.17.1) 910 0 R (section.17.2) 914 0 R (section.2.1) 26 0 R (section.2.2) 30 0 R (section.2.3) 34 0 R (section.2.4) 38 0 R (section.2.5) 42 0 R (section.3.1) 50 0 R (section.3.2) 54 0 R (section.3.3) 58 0 R (section.3.4) 62 0 R (section.3.5) 66 0 R (section.5.1) 90 0 R (section.5.2) 94 0 R (section.5.3) 98 0 R (section.5.4) 162 0 R (section.5.5) 174 0 R (section.6.1) 182 0 R (section.6.2) 198 0 R (section.7.1) 210 0 R (section.7.2) 214 0 R (section.7.3) 218 0 R (section.7.4) 222 0 R (section.7.5) 226 0 R (section.7.6) 230 0 R (section.7.7) 234 0 R (section.7.8) 238 0 R (section.7.9) 242 0 R (section.9.1) 254 0 R (section.9.2) 266 0 R (section.9.3) 410 0 R (section.9.4) 550 0 R (section.9.5) 614 0 R (section.9.6) 642 0 R (section.9.7) 670 0 R (section.9.8) 686 0 R (subsection.12.4.1) 770 0 R (subsection.12.4.2) 774 0 R (subsection.12.4.3) 778 0 R (subsection.12.5.1) 786 0 R (subsection.12.5.2) 790 0 R (subsection.14.2.1) 830 0 R (subsection.14.2.2) 834 0 R (subsection.14.3.1) 842 0 R (subsection.16.1.1) 866 0 R (subsection.16.1.2) 870 0 R (subsection.16.2.1) 878 0 R (subsection.16.2.2) 882 0 R (subsection.16.3.1) 890 0 R (subsection.16.4.1) 898 0 R (subsection.16.4.2) 902 0 R (subsection.3.5.1) 70 0 R (subsection.3.5.2) 74 0 R (subsection.3.5.3) 78 0 R (subsection.5.3.1) 102 0 R (subsection.5.3.10) 138 0 R (subsection.5.3.11) 142 0 R (subsection.5.3.12) 146 0 R (subsection.5.3.13) 150 0 R (subsection.5.3.14) 154 0 R (subsection.5.3.15) 158 0 R (subsection.5.3.2) 106 0 R (subsection.5.3.3) 110 0 R (subsection.5.3.4) 114 0 R (subsection.5.3.5) 118 0 R (subsection.5.3.6) 122 0 R (subsection.5.3.7) 126 0 R (subsection.5.3.8) 130 0 R (subsection.5.3.9) 134 0 R (subsection.5.4.1) 166 0 R (subsection.5.4.2) 170 0 R (subsection.6.1.1) 186 0 R (subsection.6.1.2) 190 0 R (subsection.6.1.3) 194 0 R (subsection.6.2.1) 202 0 R (subsection.9.1.1) 258 0 R (subsection.9.1.2) 262 0 R (subsection.9.2.1) 270 0 R (subsection.9.2.2) 274 0 R (subsection.9.2.3) 286 0 R (subsection.9.3.1) 414 0 R (subsection.9.3.10) 514 0 R (subsection.9.3.11) 526 0 R (subsection.9.3.12) 538 0 R (subsection.9.3.2) 418 0 R (subsection.9.3.3) 454 0 R (subsection.9.3.4) 458 0 R (subsection.9.3.5) 462 0 R (subsection.9.3.6) 466 0 R (subsection.9.3.7) 478 0 R (subsection.9.3.8) 490 0 R (subsection.9.3.9) 502 0 R (subsection.9.4.1) 554 0 R (subsection.9.4.2) 566 0 R (subsection.9.4.3) 578 0 R (subsection.9.4.4) 590 0 R (subsection.9.4.5) 602 0 R (subsection.9.5.1) 618 0 R (subsection.9.5.2) 630 0 R (subsection.9.6.1) 646 0 R (subsection.9.6.2) 658 0 R (subsection.9.7.1) 674 0 R (subsection.9.7.2) 678 0 R (subsection.9.7.3) 682 0 R (subsection.9.8.1) 690 0 R (subsection.9.8.2) 702 0 R (subsubsection.9.2.2.1) 278 0 R (subsubsection.9.2.2.2) 282 0 R (subsubsection.9.2.3.1) 290 0 R (subsubsection.9.2.3.10) 326 0 R (subsubsection.9.2.3.11) 330 0 R (subsubsection.9.2.3.12) 334 0 R (subsubsection.9.2.3.13) 338 0 R (subsubsection.9.2.3.14) 342 0 R (subsubsection.9.2.3.15) 346 0 R (subsubsection.9.2.3.16) 350 0 R (subsubsection.9.2.3.17) 354 0 R (subsubsection.9.2.3.18) 358 0 R (subsubsection.9.2.3.19) 362 0 R (subsubsection.9.2.3.2) 294 0 R (subsubsection.9.2.3.20) 366 0 R (subsubsection.9.2.3.21) 370 0 R (subsubsection.9.2.3.22) 374 0 R (subsubsection.9.2.3.23) 378 0 R (subsubsection.9.2.3.24) 382 0 R (subsubsection.9.2.3.25) 386 0 R (subsubsection.9.2.3.26) 390 0 R (subsubsection.9.2.3.27) 394 0 R (subsubsection.9.2.3.28) 398 0 R (subsubsection.9.2.3.29) 402 0 R (subsubsection.9.2.3.3) 298 0 R (subsubsection.9.2.3.30) 406 0 R (subsubsection.9.2.3.4) 302 0 R (subsubsection.9.2.3.5) 306 0 R (subsubsection.9.2.3.6) 310 0 R (subsubsection.9.2.3.7) 314 0 R (subsubsection.9.2.3.8) 318 0 R (subsubsection.9.2.3.9) 322 0 R (subsubsection.9.3.10.1) 518 0 R (subsubsection.9.3.10.2) 522 0 R (subsubsection.9.3.11.1) 530 0 R (subsubsection.9.3.11.2) 534 0 R (subsubsection.9.3.12.1) 542 0 R (subsubsection.9.3.12.2) 546 0 R (subsubsection.9.3.2.1) 422 0 R (subsubsection.9.3.2.2) 426 0 R (subsubsection.9.3.2.3) 430 0 R (subsubsection.9.3.2.4) 434 0 R (subsubsection.9.3.2.5) 438 0 R (subsubsection.9.3.2.6) 442 0 R (subsubsection.9.3.2.7) 446 0 R (subsubsection.9.3.2.8) 450 0 R (subsubsection.9.3.6.1) 470 0 R (subsubsection.9.3.6.2) 474 0 R (subsubsection.9.3.7.1) 482 0 R (subsubsection.9.3.7.2) 486 0 R (subsubsection.9.3.8.1) 494 0 R (subsubsection.9.3.8.2) 498 0 R (subsubsection.9.3.9.1) 506 0 R (subsubsection.9.3.9.2) 510 0 R (subsubsection.9.4.1.1) 558 0 R (subsubsection.9.4.1.2) 562 0 R (subsubsection.9.4.2.1) 570 0 R (subsubsection.9.4.2.2) 574 0 R (subsubsection.9.4.3.1) 582 0 R (subsubsection.9.4.3.2) 586 0 R (subsubsection.9.4.4.1) 594 0 R (subsubsection.9.4.4.2) 598 0 R (subsubsection.9.4.5.1) 606 0 R (subsubsection.9.4.5.2) 610 0 R (subsubsection.9.5.1.1) 622 0 R (subsubsection.9.5.1.2) 626 0 R (subsubsection.9.5.2.1) 634 0 R (subsubsection.9.5.2.2) 638 0 R (subsubsection.9.6.1.1) 650 0 R (subsubsection.9.6.1.2) 654 0 R (subsubsection.9.6.2.1) 662 0 R (subsubsection.9.6.2.2) 666 0 R (subsubsection.9.8.1.1) 694 0 R (subsubsection.9.8.1.2) 698 0 R (subsubsection.9.8.2.1) 706 0 R (subsubsection.9.8.2.2) 710 0 R (subsubsection.9.8.2.3) 714 0 R (tracing) 1000 0 R (unix-smb) 999 0 R (vfs) 1008 0 R (wins) 1003 0 R] +/Limits [(CodingSuggestions) (wins)] +>> endobj +1954 0 obj << +/Kids [1953 0 R] +>> endobj +1955 0 obj << +/Dests 1954 0 R +>> endobj +1956 0 obj << +/Type /Catalog +/Pages 1951 0 R +/Outlines 1952 0 R +/Names 1955 0 R +/PageMode /UseOutlines /URI<> /ViewerPreferences<<>> +/OpenAction 921 0 R +/PTEX.Fullbanner (This is pdfTeX, Version 3.14159-1.10b) +>> endobj +1957 0 obj << +/Author()/Title()/Subject()/Creator(LaTeX with hyperref package)/Producer(pdfTeX-1.10b)/Keywords() +/CreationDate (D:20030606214800) +>> endobj xref -0 806 -0000000000 65535 f -0000000015 00000 n -0000000243 00000 n -0000001809 00000 n -0000001883 00000 n -0000001962 00000 n -0000002044 00000 n -0000002122 00000 n -0000002199 00000 n -0000002278 00000 n -0000002361 00000 n -0000002438 00000 n -0000002520 00000 n -0000002579 00000 n -0000002680 00000 n -0000002782 00000 n -0000002883 00000 n -0000002984 00000 n -0000003086 00000 n -0000003188 00000 n -0000003290 00000 n -0000003391 00000 n -0000003493 00000 n -0000003595 00000 n -0000003697 00000 n -0000003799 00000 n -0000003901 00000 n -0000004002 00000 n -0000004104 00000 n -0000004206 00000 n -0000004308 00000 n -0000004410 00000 n -0000004512 00000 n -0000004614 00000 n -0000004716 00000 n -0000004818 00000 n -0000004919 00000 n -0000005020 00000 n -0000005122 00000 n -0000005224 00000 n -0000005326 00000 n -0000005428 00000 n -0000005530 00000 n -0000005632 00000 n -0000005734 00000 n -0000005836 00000 n -0000005938 00000 n -0000006040 00000 n -0000006142 00000 n -0000006244 00000 n -0000006346 00000 n -0000006448 00000 n -0000006550 00000 n -0000006651 00000 n -0000006751 00000 n -0000006851 00000 n -0000007161 00000 n -0000007262 00000 n -0000007364 00000 n -0000007466 00000 n -0000007568 00000 n -0000007670 00000 n -0000007771 00000 n -0000007873 00000 n -0000007975 00000 n -0000008077 00000 n -0000008179 00000 n -0000008281 00000 n -0000008383 00000 n -0000008484 00000 n -0000008586 00000 n -0000008688 00000 n -0000008790 00000 n -0000008892 00000 n -0000008994 00000 n -0000009096 00000 n -0000009198 00000 n -0000009300 00000 n -0000009402 00000 n -0000009503 00000 n -0000009604 00000 n -0000009706 00000 n -0000009808 00000 n -0000009910 00000 n -0000010012 00000 n -0000010114 00000 n -0000010216 00000 n -0000010318 00000 n -0000010420 00000 n -0000010522 00000 n -0000010624 00000 n -0000010726 00000 n -0000010828 00000 n -0000010930 00000 n -0000011032 00000 n -0000011134 00000 n -0000011236 00000 n -0000011338 00000 n -0000011439 00000 n -0000011539 00000 n -0000011639 00000 n -0000011964 00000 n -0000012066 00000 n -0000012169 00000 n -0000012272 00000 n -0000012375 00000 n -0000012478 00000 n -0000012581 00000 n -0000012684 00000 n -0000012787 00000 n -0000012890 00000 n -0000012993 00000 n -0000013096 00000 n -0000013199 00000 n -0000013302 00000 n -0000013405 00000 n -0000013508 00000 n -0000013611 00000 n -0000013714 00000 n -0000013817 00000 n -0000013920 00000 n -0000014023 00000 n -0000014125 00000 n +0 1958 +0000000001 65535 f +0000000002 00000 f +0000000003 00000 f +0000000004 00000 f +0000000000 00000 f +0000000009 00000 n +0000092072 00000 n +0000477437 00000 n +0000000054 00000 n +0000000130 00000 n +0000092194 00000 n +0000477365 00000 n +0000000177 00000 n +0000000207 00000 n +0000092318 00000 n +0000477279 00000 n +0000000255 00000 n +0000000295 00000 n +0000095925 00000 n +0000477206 00000 n +0000000343 00000 n +0000000378 00000 n +0000099583 00000 n +0000477081 00000 n +0000000424 00000 n +0000000463 00000 n +0000099706 00000 n +0000477007 00000 n +0000000511 00000 n +0000000546 00000 n +0000100018 00000 n +0000476920 00000 n +0000000594 00000 n +0000000641 00000 n +0000100141 00000 n +0000476833 00000 n +0000000689 00000 n +0000000726 00000 n +0000104213 00000 n +0000476746 00000 n +0000000774 00000 n +0000000811 00000 n +0000104336 00000 n +0000476672 00000 n +0000000859 00000 n +0000000893 00000 n +0000107034 00000 n +0000476546 00000 n +0000000939 00000 n +0000000982 00000 n +0000107157 00000 n +0000476472 00000 n +0000001030 00000 n +0000001070 00000 n +0000109925 00000 n +0000476385 00000 n +0000001118 00000 n +0000001160 00000 n +0000112237 00000 n +0000476298 00000 n +0000001208 00000 n +0000001253 00000 n +0000112361 00000 n +0000476211 00000 n +0000001301 00000 n +0000001346 00000 n +0000115082 00000 n +0000476100 00000 n +0000001394 00000 n +0000001430 00000 n +0000115205 00000 n +0000476026 00000 n +0000001483 00000 n +0000001519 00000 n +0000115329 00000 n +0000475939 00000 n +0000001572 00000 n +0000001607 00000 n +0000115452 00000 n +0000475865 00000 n +0000001660 00000 n +0000001712 00000 n +0000120078 00000 n +0000475776 00000 n +0000001758 00000 n +0000001797 00000 n +0000129827 00000 n +0000475648 00000 n +0000001843 00000 n +0000001879 00000 n +0000129950 00000 n +0000475574 00000 n +0000001927 00000 n +0000001968 00000 n +0000130073 00000 n +0000475487 00000 n +0000002016 00000 n +0000002056 00000 n +0000133547 00000 n +0000475358 00000 n +0000002104 00000 n +0000002149 00000 n +0000133670 00000 n +0000475280 00000 n +0000002203 00000 n +0000002244 00000 n +0000133794 00000 n +0000475188 00000 n +0000002298 00000 n +0000002339 00000 n +0000133919 00000 n +0000475096 00000 n +0000002393 00000 n +0000002439 00000 n +0000134043 00000 n +0000475004 00000 n +0000002493 00000 n +0000002534 00000 n +0000134168 00000 n +0000474912 00000 n +0000002588 00000 n +0000002629 00000 n +0000134293 00000 n +0000474820 00000 n +0000002683 00000 n +0000002725 00000 n +0000134418 00000 n +0000474728 00000 n +0000002779 00000 n +0000002821 00000 n +0000134542 00000 n +0000474636 00000 n +0000002875 00000 n +0000002921 00000 n +0000137183 00000 n +0000474544 00000 n +0000002975 00000 n +0000003021 00000 n +0000137307 00000 n +0000474452 00000 n +0000003076 00000 n +0000003124 00000 n +0000137432 00000 n +0000474360 00000 n +0000003179 00000 n +0000003227 00000 n +0000137557 00000 n +0000474268 00000 n +0000003282 00000 n +0000003325 00000 n +0000137680 00000 n +0000474176 00000 n +0000003380 00000 n +0000003423 00000 n +0000137805 00000 n +0000474084 00000 n +0000003478 00000 n +0000003526 00000 n +0000137930 00000 n +0000474006 00000 n +0000003581 00000 n +0000003629 00000 n +0000138054 00000 n +0000473876 00000 n +0000003678 00000 n +0000003723 00000 n +0000138179 00000 n +0000473797 00000 n +0000003777 00000 n +0000003813 00000 n +0000143258 00000 n +0000473718 00000 n +0000003867 00000 n +0000003905 00000 n +0000145154 00000 n +0000473640 00000 n +0000003954 00000 n +0000003998 00000 n +0000148843 00000 n +0000473508 00000 n +0000004045 00000 n +0000004084 00000 n +0000148967 00000 n +0000473390 00000 n +0000004133 00000 n +0000004173 00000 n +0000149533 00000 n +0000473311 00000 n +0000004227 00000 n +0000004275 00000 n +0000149909 00000 n +0000473218 00000 n +0000004329 00000 n +0000004384 00000 n +0000151875 00000 n +0000473139 00000 n +0000004438 00000 n +0000004488 00000 n +0000152000 00000 n +0000473021 00000 n +0000004537 00000 n +0000004567 00000 n +0000154121 00000 n +0000472956 00000 n +0000004621 00000 n +0000004661 00000 n +0000157663 00000 n +0000472823 00000 n +0000004708 00000 n +0000004753 00000 n +0000157787 00000 n +0000472744 00000 n +0000004802 00000 n +0000004838 00000 n +0000157912 00000 n +0000472651 00000 n +0000004887 00000 n +0000004920 00000 n +0000158037 00000 n +0000472558 00000 n +0000004969 00000 n +0000005007 00000 n +0000161861 00000 n +0000472465 00000 n +0000005056 00000 n +0000005089 00000 n +0000161986 00000 n +0000472372 00000 n +0000005138 00000 n +0000005169 00000 n +0000166143 00000 n +0000472279 00000 n +0000005218 00000 n +0000005252 00000 n +0000166268 00000 n +0000472186 00000 n +0000005301 00000 n +0000005338 00000 n +0000166393 00000 n +0000472093 00000 n +0000005387 00000 n +0000005423 00000 n +0000166518 00000 n +0000472014 00000 n +0000005472 00000 n +0000005515 00000 n +0000172537 00000 n +0000471920 00000 n +0000005562 00000 n +0000005610 00000 n +0000179693 00000 n +0000471787 00000 n +0000005657 00000 n +0000005694 00000 n +0000179818 00000 n +0000471669 00000 n +0000005743 00000 n +0000005779 00000 n +0000183861 00000 n +0000471590 00000 n +0000005833 00000 n +0000005866 00000 n +0000183986 00000 n +0000471511 00000 n +0000005920 00000 n +0000005953 00000 n +0000184111 00000 n +0000471379 00000 n +0000006002 00000 n +0000006046 00000 n +0000184236 00000 n +0000471300 00000 n +0000006100 00000 n +0000006131 00000 n +0000184674 00000 n +0000471168 00000 n +0000006185 00000 n +0000006223 00000 n +0000184797 00000 n +0000471089 00000 n +0000006282 00000 n +0000006327 00000 n +0000187597 00000 n +0000471010 00000 n +0000006386 00000 n +0000006431 00000 n +0000187722 00000 n +0000470891 00000 n +0000006485 00000 n +0000006521 00000 n +0000187845 00000 n +0000470812 00000 n +0000006580 00000 n +0000006614 00000 n +0000187970 00000 n +0000470719 00000 n +0000006673 00000 n +0000006705 00000 n +0000188095 00000 n +0000470626 00000 n +0000006764 00000 n +0000006797 00000 n +0000188220 00000 n +0000470533 00000 n +0000006856 00000 n +0000006890 00000 n +0000188345 00000 n +0000470440 00000 n +0000006949 00000 n +0000007012 00000 n +0000188468 00000 n +0000470347 00000 n +0000007071 00000 n +0000007113 00000 n +0000188592 00000 n +0000470254 00000 n +0000007172 00000 n +0000007232 00000 n +0000191726 00000 n +0000470161 00000 n +0000007291 00000 n +0000007372 00000 n +0000191851 00000 n +0000470068 00000 n +0000007431 00000 n +0000007484 00000 n +0000191976 00000 n +0000469975 00000 n +0000007544 00000 n +0000007613 00000 n +0000192101 00000 n +0000469882 00000 n +0000007673 00000 n +0000007736 00000 n +0000192225 00000 n +0000469789 00000 n +0000007796 00000 n +0000007858 00000 n +0000192350 00000 n +0000469696 00000 n +0000007918 00000 n +0000007979 00000 n +0000192475 00000 n +0000469603 00000 n +0000008039 00000 n +0000008128 00000 n +0000192600 00000 n +0000469510 00000 n +0000008188 00000 n +0000008252 00000 n +0000196062 00000 n +0000469417 00000 n +0000008312 00000 n +0000008390 00000 n +0000196187 00000 n +0000469324 00000 n +0000008450 00000 n +0000008525 00000 n +0000196311 00000 n +0000469231 00000 n +0000008585 00000 n +0000008648 00000 n +0000196436 00000 n +0000469138 00000 n +0000008708 00000 n +0000008799 00000 n +0000196561 00000 n +0000469045 00000 n +0000008859 00000 n +0000008958 00000 n +0000196686 00000 n +0000468952 00000 n +0000009018 00000 n +0000009098 00000 n +0000199922 00000 n +0000468859 00000 n +0000009158 00000 n +0000009237 00000 n +0000200047 00000 n +0000468766 00000 n +0000009297 00000 n +0000009347 00000 n +0000200172 00000 n +0000468673 00000 n +0000009407 00000 n +0000009472 00000 n +0000200297 00000 n +0000468580 00000 n +0000009532 00000 n +0000009619 00000 n +0000200422 00000 n +0000468487 00000 n +0000009679 00000 n +0000009740 00000 n +0000203994 00000 n +0000468394 00000 n +0000009800 00000 n +0000009894 00000 n +0000204119 00000 n +0000468301 00000 n +0000009954 00000 n +0000010036 00000 n +0000208909 00000 n +0000468208 00000 n +0000010096 00000 n +0000010150 00000 n +0000209034 00000 n +0000468129 00000 n +0000010210 00000 n +0000010260 00000 n +0000212760 00000 n +0000467996 00000 n +0000010309 00000 n +0000010363 00000 n +0000212885 00000 n +0000467917 00000 n +0000010417 00000 n +0000010454 00000 n +0000213010 00000 n +0000467785 00000 n +0000010508 00000 n +0000010540 00000 n +0000216642 00000 n +0000467706 00000 n +0000010599 00000 n +0000010693 00000 n +0000216767 00000 n +0000467613 00000 n +0000010752 00000 n +0000010804 00000 n +0000216892 00000 n +0000467520 00000 n +0000010863 00000 n +0000010906 00000 n +0000217017 00000 n +0000467427 00000 n +0000010965 00000 n +0000011010 00000 n +0000220750 00000 n +0000467334 00000 n +0000011069 00000 n +0000011114 00000 n +0000220875 00000 n +0000467241 00000 n +0000011173 00000 n +0000011218 00000 n +0000221000 00000 n +0000467148 00000 n +0000011277 00000 n +0000011322 00000 n +0000221125 00000 n +0000467069 00000 n +0000011381 00000 n +0000011426 00000 n +0000221250 00000 n +0000466976 00000 n +0000011480 00000 n +0000011510 00000 n +0000221375 00000 n +0000466883 00000 n +0000011564 00000 n +0000011609 00000 n +0000225062 00000 n +0000466790 00000 n +0000011663 00000 n +0000011714 00000 n +0000225186 00000 n +0000466658 00000 n +0000011768 00000 n +0000011809 00000 n +0000225311 00000 n +0000466579 00000 n +0000011868 00000 n +0000011903 00000 n +0000227539 00000 n +0000466500 00000 n +0000011962 00000 n +0000011998 00000 n +0000227664 00000 n +0000466368 00000 n +0000012052 00000 n +0000012099 00000 n +0000227789 00000 n +0000466289 00000 n +0000012158 00000 n +0000012193 00000 n +0000227914 00000 n +0000466210 00000 n +0000012252 00000 n +0000012288 00000 n +0000228039 00000 n +0000466078 00000 n +0000012342 00000 n +0000012397 00000 n +0000228164 00000 n +0000465999 00000 n +0000012456 00000 n +0000012491 00000 n +0000228289 00000 n +0000465920 00000 n +0000012550 00000 n +0000012586 00000 n +0000228414 00000 n +0000465788 00000 n +0000012640 00000 n +0000012681 00000 n +0000228539 00000 n +0000465709 00000 n +0000012740 00000 n +0000012775 00000 n +0000228664 00000 n +0000465630 00000 n +0000012834 00000 n +0000012870 00000 n +0000231535 00000 n +0000465498 00000 n +0000012925 00000 n +0000012961 00000 n +0000231660 00000 n +0000465419 00000 n +0000013021 00000 n +0000013057 00000 n +0000231784 00000 n +0000465340 00000 n +0000013117 00000 n +0000013154 00000 n +0000231909 00000 n +0000465208 00000 n +0000013209 00000 n +0000013251 00000 n +0000232034 00000 n +0000465129 00000 n +0000013311 00000 n +0000013347 00000 n +0000232159 00000 n +0000465050 00000 n +0000013407 00000 n +0000013444 00000 n +0000232284 00000 n +0000464932 00000 n +0000013499 00000 n +0000013542 00000 n +0000232408 00000 n +0000464853 00000 n +0000013602 00000 n +0000013638 00000 n +0000235839 00000 n +0000464774 00000 n +0000013698 00000 n +0000013735 00000 n +0000235964 00000 n +0000464642 00000 n +0000013784 00000 n +0000013840 00000 n +0000236089 00000 n +0000464524 00000 n +0000013894 00000 n +0000013941 00000 n +0000236214 00000 n +0000464445 00000 n +0000014000 00000 n +0000014035 00000 n +0000236339 00000 n +0000464366 00000 n +0000014094 00000 n +0000014130 00000 n +0000239345 00000 n +0000464234 00000 n +0000014184 00000 n 0000014228 00000 n -0000014331 00000 n -0000014434 00000 n -0000014537 00000 n -0000014640 00000 n -0000014742 00000 n -0000014845 00000 n -0000014947 00000 n -0000015050 00000 n -0000015153 00000 n -0000015256 00000 n -0000015359 00000 n -0000015462 00000 n -0000015565 00000 n -0000015668 00000 n -0000015771 00000 n -0000015874 00000 n -0000015977 00000 n -0000016080 00000 n -0000016183 00000 n -0000016284 00000 n -0000016385 00000 n -0000016486 00000 n -0000016855 00000 n -0000016957 00000 n -0000017060 00000 n -0000017093 00000 n -0000017148 00000 n -0000017235 00000 n +0000239470 00000 n +0000464155 00000 n +0000014287 00000 n +0000014322 00000 n +0000239595 00000 n +0000464076 00000 n +0000014381 00000 n +0000014417 00000 n +0000239720 00000 n +0000463944 00000 n +0000014471 00000 n +0000014520 00000 n +0000239845 00000 n +0000463865 00000 n +0000014579 00000 n +0000014614 00000 n +0000239970 00000 n +0000463786 00000 n +0000014673 00000 n +0000014709 00000 n +0000240095 00000 n +0000463654 00000 n +0000014763 00000 n +0000014802 00000 n +0000240220 00000 n +0000463575 00000 n +0000014861 00000 n +0000014896 00000 n +0000242712 00000 n +0000463496 00000 n +0000014955 00000 n +0000014991 00000 n +0000242837 00000 n +0000463378 00000 n +0000015045 00000 n +0000015085 00000 n +0000242962 00000 n +0000463299 00000 n +0000015144 00000 n +0000015179 00000 n +0000243085 00000 n +0000463220 00000 n +0000015238 00000 n +0000015274 00000 n +0000243209 00000 n +0000463088 00000 n +0000015323 00000 n +0000015381 00000 n +0000243334 00000 n +0000462970 00000 n +0000015435 00000 n +0000015474 00000 n +0000246221 00000 n +0000462891 00000 n +0000015533 00000 n +0000015568 00000 n +0000246346 00000 n +0000462812 00000 n +0000015627 00000 n +0000015663 00000 n +0000246471 00000 n +0000462694 00000 n +0000015717 00000 n +0000015752 00000 n +0000246596 00000 n +0000462615 00000 n +0000015811 00000 n +0000015846 00000 n +0000246721 00000 n +0000462536 00000 n +0000015905 00000 n +0000015941 00000 n +0000249555 00000 n +0000462404 00000 n +0000015990 00000 n +0000016040 00000 n +0000249680 00000 n +0000462286 00000 n +0000016094 00000 n +0000016134 00000 n +0000249803 00000 n +0000462207 00000 n +0000016193 00000 n +0000016228 00000 n +0000249928 00000 n +0000462128 00000 n +0000016287 00000 n +0000016323 00000 n +0000250053 00000 n +0000462010 00000 n +0000016377 00000 n +0000016422 00000 n +0000250178 00000 n +0000461931 00000 n +0000016481 00000 n +0000016516 00000 n +0000250302 00000 n +0000461852 00000 n +0000016575 00000 n +0000016611 00000 n +0000253051 00000 n +0000461720 00000 n +0000016660 00000 n +0000016730 00000 n +0000253176 00000 n +0000461641 00000 n +0000016784 00000 n +0000016821 00000 n +0000253301 00000 n +0000461548 00000 n +0000016875 00000 n +0000016909 00000 n +0000256429 00000 n +0000461469 00000 n +0000016963 00000 n +0000016997 00000 n +0000256554 00000 n +0000461351 00000 n +0000017046 00000 n +0000017083 00000 n +0000256679 00000 n +0000461233 00000 n +0000017137 00000 n +0000017178 00000 n +0000256804 00000 n +0000461154 00000 n +0000017237 00000 n 0000017290 00000 n -0000017377 00000 n -0000017444 00000 n -0000017530 00000 n -0000017632 00000 n -0000017735 00000 n -0000017838 00000 n -0000017941 00000 n -0000018043 00000 n -0000018146 00000 n -0000018249 00000 n -0000018352 00000 n -0000018455 00000 n -0000018558 00000 n +0000256929 00000 n +0000461075 00000 n +0000017349 00000 n +0000017395 00000 n +0000259888 00000 n +0000460957 00000 n +0000017449 00000 n +0000017490 00000 n +0000260013 00000 n +0000460878 00000 n +0000017549 00000 n +0000017597 00000 n +0000260138 00000 n +0000460785 00000 n +0000017656 00000 n +0000017705 00000 n +0000260263 00000 n +0000460706 00000 n +0000017764 00000 n +0000017814 00000 n +0000263891 00000 n +0000460573 00000 n +0000017862 00000 n +0000017909 00000 n +0000264016 00000 n +0000460494 00000 n +0000017959 00000 n +0000017992 00000 n +0000264141 00000 n +0000460401 00000 n +0000018042 00000 n +0000018106 00000 n +0000264266 00000 n +0000460308 00000 n +0000018156 00000 n +0000018198 00000 n +0000271556 00000 n +0000460215 00000 n +0000018248 00000 n +0000018323 00000 n +0000271681 00000 n +0000460136 00000 n +0000018373 00000 n +0000018433 00000 n +0000279660 00000 n +0000460003 00000 n +0000018481 00000 n +0000018524 00000 n +0000279785 00000 n +0000459938 00000 n +0000018574 00000 n +0000018612 00000 n +0000283721 00000 n +0000459805 00000 n 0000018660 00000 n -0000018763 00000 n -0000018866 00000 n -0000018969 00000 n -0000019072 00000 n -0000019175 00000 n -0000019278 00000 n -0000019381 00000 n -0000019484 00000 n -0000019586 00000 n -0000019688 00000 n -0000019791 00000 n -0000019894 00000 n -0000019997 00000 n -0000020100 00000 n -0000020203 00000 n -0000020306 00000 n -0000020409 00000 n -0000020512 00000 n -0000020615 00000 n -0000020718 00000 n -0000020821 00000 n -0000020924 00000 n -0000021026 00000 n -0000021127 00000 n -0000021228 00000 n -0000021557 00000 n -0000021660 00000 n -0000021763 00000 n -0000021866 00000 n -0000021969 00000 n -0000022072 00000 n -0000022175 00000 n -0000022278 00000 n -0000022380 00000 n -0000022483 00000 n -0000022586 00000 n -0000022689 00000 n -0000022792 00000 n -0000022895 00000 n -0000022998 00000 n -0000023100 00000 n -0000023203 00000 n -0000023306 00000 n -0000023409 00000 n -0000023512 00000 n -0000023615 00000 n -0000023718 00000 n -0000023821 00000 n -0000023924 00000 n -0000024027 00000 n -0000024129 00000 n -0000024231 00000 n -0000024334 00000 n -0000024437 00000 n -0000024540 00000 n -0000024643 00000 n -0000024746 00000 n -0000024849 00000 n -0000024952 00000 n -0000025055 00000 n -0000025158 00000 n -0000025261 00000 n -0000025364 00000 n -0000025467 00000 n -0000025570 00000 n -0000025673 00000 n -0000025776 00000 n -0000025879 00000 n -0000025982 00000 n -0000026085 00000 n -0000026188 00000 n -0000026291 00000 n -0000026394 00000 n -0000026497 00000 n -0000026599 00000 n -0000026700 00000 n -0000026801 00000 n -0000027226 00000 n -0000027329 00000 n -0000027432 00000 n -0000027535 00000 n -0000027638 00000 n -0000027741 00000 n -0000027844 00000 n -0000027947 00000 n -0000028050 00000 n -0000028153 00000 n -0000028256 00000 n -0000028359 00000 n -0000028462 00000 n -0000028565 00000 n -0000028668 00000 n -0000028770 00000 n -0000028873 00000 n -0000028976 00000 n -0000029079 00000 n -0000029182 00000 n -0000029285 00000 n -0000029387 00000 n -0000029490 00000 n -0000029592 00000 n -0000029695 00000 n -0000029798 00000 n -0000029901 00000 n -0000030004 00000 n -0000030107 00000 n -0000030210 00000 n -0000030313 00000 n -0000030416 00000 n -0000030519 00000 n -0000030622 00000 n -0000030725 00000 n -0000030828 00000 n -0000030930 00000 n -0000031033 00000 n -0000031136 00000 n -0000031239 00000 n -0000031568 00000 n -0000031652 00000 n -0000031738 00000 n -0000031812 00000 n -0000031898 00000 n -0000031931 00000 n -0000032009 00000 n -0000032096 00000 n -0000032202 00000 n -0000032288 00000 n -0000032360 00000 n -0000032446 00000 n -0000032505 00000 n -0000032592 00000 n -0000032683 00000 n -0000032769 00000 n -0000032840 00000 n -0000032926 00000 n -0000032991 00000 n -0000033025 00000 n -0000033059 00000 n -0000036406 00000 n -0000036449 00000 n -0000036492 00000 n -0000036535 00000 n -0000036578 00000 n -0000036621 00000 n -0000036664 00000 n -0000036707 00000 n -0000036750 00000 n -0000036793 00000 n -0000036836 00000 n -0000036879 00000 n -0000036922 00000 n -0000036965 00000 n -0000037008 00000 n -0000037051 00000 n -0000037094 00000 n -0000037137 00000 n -0000037180 00000 n -0000037223 00000 n -0000037266 00000 n -0000037309 00000 n -0000037352 00000 n -0000037395 00000 n -0000037438 00000 n -0000037481 00000 n -0000037524 00000 n -0000037567 00000 n -0000037610 00000 n -0000037653 00000 n -0000037696 00000 n -0000037739 00000 n -0000037782 00000 n -0000037825 00000 n -0000037868 00000 n -0000037911 00000 n -0000037954 00000 n -0000037997 00000 n -0000038040 00000 n -0000038083 00000 n -0000038126 00000 n -0000038169 00000 n -0000038212 00000 n -0000038255 00000 n -0000038298 00000 n -0000038341 00000 n -0000038384 00000 n -0000038427 00000 n -0000038470 00000 n -0000038513 00000 n -0000038556 00000 n -0000038599 00000 n -0000038642 00000 n +0000018706 00000 n +0000283846 00000 n +0000459726 00000 n +0000018756 00000 n +0000018806 00000 n +0000287879 00000 n +0000459633 00000 n +0000018856 00000 n +0000018901 00000 n +0000288003 00000 n +0000459540 00000 n +0000018951 00000 n +0000019008 00000 n +0000288127 00000 n +0000459408 00000 n +0000019058 00000 n +0000019089 00000 n +0000288251 00000 n +0000459329 00000 n +0000019144 00000 n +0000019182 00000 n +0000288375 00000 n +0000459236 00000 n +0000019237 00000 n +0000019277 00000 n +0000292104 00000 n +0000459157 00000 n +0000019332 00000 n +0000019370 00000 n +0000292229 00000 n +0000459025 00000 n +0000019420 00000 n +0000019456 00000 n +0000292354 00000 n +0000458946 00000 n +0000019511 00000 n +0000019567 00000 n +0000292479 00000 n +0000458867 00000 n +0000019622 00000 n +0000019659 00000 n +0000292603 00000 n +0000458774 00000 n +0000019709 00000 n +0000019751 00000 n +0000294926 00000 n +0000458695 00000 n +0000019801 00000 n +0000019833 00000 n +0000298612 00000 n +0000458562 00000 n +0000019881 00000 n +0000019937 00000 n +0000298737 00000 n +0000458483 00000 n +0000019987 00000 n +0000020024 00000 n +0000298862 00000 n +0000458390 00000 n +0000020074 00000 n +0000020116 00000 n +0000302631 00000 n +0000458311 00000 n +0000020166 00000 n +0000020209 00000 n +0000307459 00000 n +0000458178 00000 n +0000020257 00000 n +0000020287 00000 n +0000307584 00000 n +0000458099 00000 n +0000020337 00000 n +0000020372 00000 n +0000307709 00000 n +0000457967 00000 n +0000020422 00000 n +0000020462 00000 n +0000307834 00000 n +0000457888 00000 n +0000020517 00000 n +0000020558 00000 n +0000307959 00000 n +0000457809 00000 n +0000020613 00000 n +0000020654 00000 n +0000311332 00000 n +0000457691 00000 n +0000020704 00000 n +0000020744 00000 n +0000311457 00000 n +0000457626 00000 n +0000020799 00000 n +0000020865 00000 n +0000314487 00000 n +0000457493 00000 n +0000020913 00000 n +0000020957 00000 n +0000314612 00000 n +0000457414 00000 n +0000021007 00000 n +0000021037 00000 n +0000314737 00000 n +0000457335 00000 n +0000021087 00000 n +0000021128 00000 n +0000316475 00000 n +0000457202 00000 n +0000021176 00000 n +0000021210 00000 n +0000316600 00000 n +0000457084 00000 n +0000021260 00000 n +0000021314 00000 n +0000316725 00000 n +0000457005 00000 n +0000021369 00000 n +0000021417 00000 n +0000320953 00000 n +0000456926 00000 n +0000021472 00000 n +0000021528 00000 n +0000321078 00000 n +0000456794 00000 n +0000021578 00000 n +0000021666 00000 n +0000321203 00000 n +0000456715 00000 n +0000021721 00000 n +0000021779 00000 n +0000324057 00000 n +0000456636 00000 n +0000021834 00000 n +0000021903 00000 n +0000331288 00000 n +0000456504 00000 n +0000021953 00000 n +0000022012 00000 n +0000331413 00000 n +0000456439 00000 n +0000022067 00000 n +0000022135 00000 n +0000342125 00000 n +0000456321 00000 n +0000022185 00000 n +0000022220 00000 n +0000342250 00000 n +0000456242 00000 n +0000022275 00000 n +0000022333 00000 n +0000342375 00000 n +0000456163 00000 n +0000022388 00000 n +0000022441 00000 n +0000343946 00000 n +0000456030 00000 n +0000022489 00000 n +0000022530 00000 n +0000344071 00000 n +0000455951 00000 n +0000022580 00000 n +0000022615 00000 n +0000344196 00000 n +0000455872 00000 n +0000022665 00000 n +0000022697 00000 n +0000348288 00000 n +0000455792 00000 n +0000022745 00000 n +0000022785 00000 n +0000023169 00000 n +0000023410 00000 n +0000022837 00000 n +0000023288 00000 n +0000023349 00000 n +0000452673 00000 n +0000439434 00000 n +0000452507 00000 n +0000439000 00000 n +0000434292 00000 n +0000438837 00000 n +0000453546 00000 n +0000025543 00000 n +0000024625 00000 n +0000023495 00000 n +0000025482 00000 n +0000433471 00000 n +0000417267 00000 n +0000433307 00000 n +0000415331 00000 n +0000396979 00000 n +0000415168 00000 n +0000024788 00000 n +0000395993 00000 n +0000379670 00000 n +0000395829 00000 n +0000024959 00000 n +0000025129 00000 n +0000025300 00000 n +0000033568 00000 n +0000028610 00000 n +0000025641 00000 n +0000033507 00000 n +0000378034 00000 n +0000368390 00000 n +0000377870 00000 n +0000028973 00000 n +0000367958 00000 n +0000366438 00000 n +0000367794 00000 n +0000029123 00000 n +0000029278 00000 n +0000029426 00000 n +0000029586 00000 n +0000364538 00000 n +0000362528 00000 n +0000364375 00000 n +0000029738 00000 n +0000029918 00000 n +0000030067 00000 n +0000030218 00000 n +0000030368 00000 n +0000030517 00000 n +0000030684 00000 n +0000030852 00000 n +0000031013 00000 n +0000031163 00000 n +0000031310 00000 n +0000031455 00000 n +0000031607 00000 n +0000031770 00000 n +0000031920 00000 n +0000032083 00000 n +0000032236 00000 n +0000032402 00000 n +0000032566 00000 n +0000032712 00000 n +0000032872 00000 n +0000033037 00000 n +0000033188 00000 n +0000033343 00000 n +0000092132 00000 n +0000099644 00000 n +0000107095 00000 n +0000120139 00000 n +0000129888 00000 n +0000148905 00000 n +0000157725 00000 n +0000172599 00000 n +0000179755 00000 n +0000263953 00000 n +0000279722 00000 n +0000283783 00000 n +0000298674 00000 n +0000307521 00000 n +0000314549 00000 n +0000316537 00000 n +0000344008 00000 n +0000348350 00000 n +0000043076 00000 n +0000036186 00000 n +0000033705 00000 n +0000042950 00000 n +0000043013 00000 n +0000036680 00000 n +0000036833 00000 n +0000036987 00000 n +0000037141 00000 n +0000037296 00000 n +0000037449 00000 n +0000037604 00000 n +0000037759 00000 n +0000037914 00000 n +0000038069 00000 n +0000038223 00000 n +0000038376 00000 n +0000038531 00000 n 0000038685 00000 n -0000038728 00000 n -0000038771 00000 n -0000038814 00000 n -0000038857 00000 n -0000038900 00000 n -0000038943 00000 n -0000038986 00000 n -0000039029 00000 n -0000039072 00000 n -0000039115 00000 n -0000039158 00000 n -0000039201 00000 n -0000039244 00000 n -0000039287 00000 n -0000039330 00000 n -0000039373 00000 n -0000039416 00000 n -0000039459 00000 n -0000039502 00000 n -0000039545 00000 n -0000039588 00000 n -0000039631 00000 n -0000039674 00000 n -0000039717 00000 n -0000039760 00000 n -0000039803 00000 n -0000039846 00000 n -0000039889 00000 n -0000039932 00000 n -0000039975 00000 n -0000040018 00000 n -0000040061 00000 n -0000040104 00000 n -0000040147 00000 n -0000040190 00000 n -0000040233 00000 n -0000040276 00000 n -0000040319 00000 n -0000040362 00000 n -0000040405 00000 n -0000040448 00000 n -0000040491 00000 n -0000040534 00000 n -0000040577 00000 n -0000040620 00000 n -0000040663 00000 n -0000040706 00000 n -0000040749 00000 n -0000040792 00000 n -0000040835 00000 n -0000040878 00000 n -0000040921 00000 n -0000040964 00000 n -0000041007 00000 n -0000041050 00000 n -0000041093 00000 n -0000041136 00000 n -0000041179 00000 n -0000041222 00000 n -0000041265 00000 n -0000041308 00000 n -0000041351 00000 n -0000041394 00000 n -0000041437 00000 n -0000041480 00000 n -0000041523 00000 n -0000041566 00000 n -0000041609 00000 n -0000041652 00000 n -0000041695 00000 n -0000041738 00000 n -0000041781 00000 n -0000041824 00000 n -0000041867 00000 n -0000041910 00000 n -0000041953 00000 n -0000041996 00000 n -0000042039 00000 n -0000042082 00000 n -0000042125 00000 n -0000042168 00000 n -0000042211 00000 n -0000042254 00000 n -0000042297 00000 n -0000042340 00000 n -0000042383 00000 n -0000042426 00000 n -0000042469 00000 n -0000042512 00000 n -0000042555 00000 n -0000042598 00000 n -0000042641 00000 n -0000042684 00000 n -0000042727 00000 n -0000042770 00000 n -0000042813 00000 n -0000042856 00000 n -0000042899 00000 n -0000042942 00000 n -0000042985 00000 n -0000043028 00000 n -0000043071 00000 n -0000043114 00000 n -0000043157 00000 n -0000043200 00000 n -0000043243 00000 n -0000043286 00000 n -0000043329 00000 n -0000043372 00000 n -0000043415 00000 n -0000043458 00000 n -0000043501 00000 n -0000043544 00000 n -0000043587 00000 n -0000043630 00000 n -0000043673 00000 n -0000043716 00000 n -0000043759 00000 n -0000043802 00000 n -0000043845 00000 n -0000043888 00000 n -0000043931 00000 n -0000043974 00000 n -0000044017 00000 n -0000044060 00000 n -0000044103 00000 n -0000044146 00000 n -0000044189 00000 n -0000044232 00000 n -0000044275 00000 n -0000044318 00000 n -0000044361 00000 n -0000044404 00000 n -0000044447 00000 n -0000044490 00000 n -0000044533 00000 n -0000044576 00000 n -0000044619 00000 n -0000044662 00000 n -0000044705 00000 n -0000044748 00000 n -0000044791 00000 n -0000044834 00000 n -0000044877 00000 n -0000044920 00000 n -0000044963 00000 n -0000045006 00000 n -0000045049 00000 n -0000045092 00000 n -0000045135 00000 n -0000045178 00000 n -0000045221 00000 n -0000045264 00000 n -0000045307 00000 n -0000045350 00000 n -0000046037 00000 n -0000046195 00000 n -0000046362 00000 n -0000046552 00000 n -0000049149 00000 n -0000049340 00000 n -0000052448 00000 n -0000052639 00000 n -0000056177 00000 n -0000056368 00000 n -0000056827 00000 n -0000056985 00000 n -0000057214 00000 n -0000057414 00000 n -0000059219 00000 n -0000059391 00000 n -0000061477 00000 n -0000061649 00000 n -0000063568 00000 n -0000063735 00000 n -0000065380 00000 n -0000065547 00000 n -0000067089 00000 n -0000067256 00000 n -0000068990 00000 n -0000069157 00000 n -0000070893 00000 n -0000071069 00000 n -0000072334 00000 n -0000072510 00000 n -0000073721 00000 n -0000073897 00000 n -0000075145 00000 n -0000075312 00000 n -0000076222 00000 n -0000076413 00000 n -0000078380 00000 n -0000078537 00000 n -0000080320 00000 n -0000080487 00000 n -0000082471 00000 n -0000082638 00000 n -0000083374 00000 n -0000083550 00000 n -0000084592 00000 n -0000084759 00000 n -0000086395 00000 n -0000086562 00000 n -0000087186 00000 n -0000087362 00000 n -0000088690 00000 n -0000088866 00000 n -0000089940 00000 n -0000090107 00000 n -0000090708 00000 n -0000090875 00000 n -0000092661 00000 n -0000092828 00000 n -0000094545 00000 n -0000094712 00000 n -0000096561 00000 n -0000096718 00000 n -0000097833 00000 n -0000098018 00000 n -0000099625 00000 n -0000099791 00000 n -0000100680 00000 n -0000100880 00000 n -0000102605 00000 n -0000102781 00000 n -0000104608 00000 n -0000104784 00000 n -0000105395 00000 n -0000105571 00000 n -0000106346 00000 n -0000106522 00000 n -0000107279 00000 n -0000107455 00000 n -0000108294 00000 n -0000108470 00000 n -0000109306 00000 n -0000109491 00000 n -0000110331 00000 n -0000110507 00000 n -0000111267 00000 n -0000111433 00000 n -0000112058 00000 n -0000112243 00000 n -0000113011 00000 n -0000113187 00000 n -0000114149 00000 n -0000114334 00000 n -0000115669 00000 n -0000115854 00000 n -0000116872 00000 n -0000117038 00000 n -0000117618 00000 n -0000117803 00000 n -0000118862 00000 n -0000119038 00000 n -0000119916 00000 n -0000120092 00000 n -0000121186 00000 n -0000121371 00000 n -0000122257 00000 n -0000122442 00000 n -0000123219 00000 n -0000123395 00000 n -0000123996 00000 n -0000124172 00000 n -0000124834 00000 n -0000125019 00000 n -0000125996 00000 n -0000126172 00000 n -0000127179 00000 n -0000127355 00000 n -0000128349 00000 n -0000128534 00000 n -0000129366 00000 n -0000129542 00000 n -0000130275 00000 n -0000130451 00000 n -0000131133 00000 n -0000131309 00000 n -0000132138 00000 n -0000132314 00000 n -0000133302 00000 n -0000133469 00000 n -0000134905 00000 n -0000135090 00000 n -0000135823 00000 n -0000136008 00000 n -0000136635 00000 n -0000136801 00000 n -0000137199 00000 n -0000137385 00000 n -0000138913 00000 n -0000139088 00000 n -0000140802 00000 n -0000140988 00000 n -0000142570 00000 n -0000142746 00000 n -0000144513 00000 n -0000144680 00000 n -0000145058 00000 n -0000145234 00000 n -0000146531 00000 n -0000146707 00000 n -0000148414 00000 n -0000148591 00000 n -0000150343 00000 n -0000150510 00000 n -0000152404 00000 n -0000152589 00000 n -0000153859 00000 n -0000154035 00000 n -0000155763 00000 n -0000155975 00000 n -0000157598 00000 n -0000157782 00000 n -0000158672 00000 n -0000158728 00000 n -0000158827 00000 n -0000158980 00000 n -0000159059 00000 n -0000159162 00000 n -0000159360 00000 n -0000159454 00000 n -0000159571 00000 n -0000159670 00000 n -0000159830 00000 n -0000159929 00000 n -0000160053 00000 n -0000160167 00000 n -0000160281 00000 n -0000160379 00000 n -0000160543 00000 n -0000160647 00000 n -0000160766 00000 n -0000160888 00000 n -0000161010 00000 n -0000161146 00000 n -0000161246 00000 n -0000161358 00000 n -0000161468 00000 n -0000161592 00000 n -0000161749 00000 n -0000161854 00000 n -0000161971 00000 n -0000162129 00000 n -0000162233 00000 n -0000162350 00000 n -0000162472 00000 n -0000162589 00000 n -0000162706 00000 n -0000162824 00000 n -0000162942 00000 n -0000163064 00000 n -0000163186 00000 n -0000163310 00000 n -0000163434 00000 n -0000163553 00000 n -0000163672 00000 n -0000163796 00000 n -0000163907 00000 n -0000164064 00000 n -0000164163 00000 n -0000164264 00000 n -0000164371 00000 n -0000164530 00000 n -0000164669 00000 n -0000164780 00000 n -0000164911 00000 n -0000165024 00000 n -0000165153 00000 n -0000165243 00000 n -0000165408 00000 n -0000165507 00000 n -0000165616 00000 n -0000165730 00000 n -0000165839 00000 n -0000165946 00000 n -0000166056 00000 n -0000166169 00000 n -0000166281 00000 n -0000166387 00000 n -0000166519 00000 n -0000166676 00000 n -0000166811 00000 n -0000166907 00000 n -0000167003 00000 n -0000167159 00000 n -0000167253 00000 n -0000167367 00000 n -0000167466 00000 n -0000167633 00000 n -0000167733 00000 n -0000167841 00000 n -0000167947 00000 n -0000168068 00000 n -0000168195 00000 n -0000168312 00000 n -0000168435 00000 n -0000168566 00000 n -0000168683 00000 n -0000168795 00000 n -0000168913 00000 n -0000169019 00000 n -0000169187 00000 n -0000169297 00000 n -0000169417 00000 n -0000169542 00000 n -0000169657 00000 n -0000169760 00000 n -0000169922 00000 n -0000170024 00000 n -0000170122 00000 n -0000170284 00000 n -0000170387 00000 n -0000170495 00000 n -0000170677 00000 n -0000170777 00000 n -0000170887 00000 n -0000170984 00000 n -0000171120 00000 n -0000171224 00000 n -0000171328 00000 n -0000171495 00000 n -0000171591 00000 n -0000171731 00000 n -0000171849 00000 n -0000171998 00000 n -0000172121 00000 n -0000172284 00000 n -0000172372 00000 n -0000172538 00000 n -0000172651 00000 n -0000172772 00000 n -0000172905 00000 n -0000173048 00000 n -0000173149 00000 n -0000173265 00000 n -0000173366 00000 n -0000173514 00000 n -0000173630 00000 n -0000173727 00000 n -0000173845 00000 n -0000173940 00000 n -0000174103 00000 n -0000174203 00000 n -0000174321 00000 n -0000174427 00000 n +0000038840 00000 n +0000038995 00000 n +0000039150 00000 n +0000039310 00000 n +0000039470 00000 n +0000039630 00000 n +0000039783 00000 n +0000039936 00000 n +0000040091 00000 n +0000040245 00000 n +0000040400 00000 n +0000040560 00000 n +0000040720 00000 n +0000040880 00000 n +0000041040 00000 n +0000041200 00000 n +0000041360 00000 n +0000041520 00000 n +0000041679 00000 n +0000041839 00000 n +0000042000 00000 n +0000042160 00000 n +0000042319 00000 n +0000042479 00000 n +0000042638 00000 n +0000042797 00000 n +0000054751 00000 n +0000046450 00000 n +0000043162 00000 n +0000054688 00000 n +0000361936 00000 n +0000352551 00000 n +0000361770 00000 n +0000047016 00000 n +0000047176 00000 n +0000047336 00000 n +0000047491 00000 n +0000047644 00000 n +0000047799 00000 n +0000047959 00000 n +0000048119 00000 n +0000048278 00000 n +0000048433 00000 n +0000048593 00000 n +0000048746 00000 n +0000048901 00000 n +0000049056 00000 n +0000049211 00000 n +0000049366 00000 n +0000049521 00000 n +0000049676 00000 n +0000049831 00000 n +0000049985 00000 n +0000050140 00000 n +0000050292 00000 n +0000050444 00000 n +0000050599 00000 n +0000050759 00000 n +0000050919 00000 n +0000051074 00000 n +0000051234 00000 n +0000051394 00000 n +0000051558 00000 n +0000051723 00000 n +0000051883 00000 n +0000052048 00000 n +0000052212 00000 n +0000052377 00000 n +0000052542 00000 n +0000052707 00000 n +0000052872 00000 n +0000053037 00000 n +0000053202 00000 n +0000053367 00000 n +0000053533 00000 n +0000053698 00000 n +0000053864 00000 n +0000054030 00000 n +0000054196 00000 n +0000054360 00000 n +0000054524 00000 n +0000066954 00000 n +0000058304 00000 n +0000054851 00000 n +0000066891 00000 n +0000058879 00000 n +0000059045 00000 n +0000059211 00000 n +0000059377 00000 n +0000059543 00000 n +0000059709 00000 n +0000059875 00000 n +0000060040 00000 n +0000060206 00000 n +0000060372 00000 n +0000060537 00000 n +0000060703 00000 n +0000060869 00000 n +0000061035 00000 n +0000061190 00000 n +0000061350 00000 n +0000061510 00000 n +0000061675 00000 n +0000061839 00000 n +0000062004 00000 n +0000062169 00000 n +0000062334 00000 n +0000062498 00000 n +0000062663 00000 n +0000062828 00000 n +0000062988 00000 n +0000063148 00000 n +0000063308 00000 n +0000063468 00000 n +0000063633 00000 n +0000063798 00000 n +0000063957 00000 n +0000064122 00000 n +0000064287 00000 n +0000064446 00000 n +0000064611 00000 n +0000064776 00000 n +0000064936 00000 n +0000065101 00000 n +0000065266 00000 n +0000065427 00000 n +0000065593 00000 n +0000065759 00000 n +0000065919 00000 n +0000066085 00000 n +0000066251 00000 n +0000066411 00000 n +0000066574 00000 n +0000066738 00000 n +0000078356 00000 n +0000069830 00000 n +0000067041 00000 n +0000078293 00000 n +0000070406 00000 n +0000070566 00000 n +0000070731 00000 n +0000070896 00000 n +0000071056 00000 n +0000071221 00000 n +0000071386 00000 n +0000071546 00000 n +0000071711 00000 n +0000071875 00000 n +0000072035 00000 n +0000072200 00000 n +0000072364 00000 n +0000072524 00000 n +0000072689 00000 n +0000072854 00000 n +0000073009 00000 n +0000073169 00000 n +0000073334 00000 n +0000073499 00000 n +0000073659 00000 n +0000073823 00000 n +0000073988 00000 n +0000074143 00000 n +0000074303 00000 n +0000074467 00000 n +0000074632 00000 n +0000074792 00000 n +0000074957 00000 n +0000075122 00000 n +0000075277 00000 n +0000075437 00000 n +0000075597 00000 n +0000075757 00000 n +0000075911 00000 n +0000076071 00000 n +0000076236 00000 n +0000076400 00000 n +0000076560 00000 n +0000076725 00000 n +0000076890 00000 n +0000077055 00000 n +0000077209 00000 n +0000077365 00000 n +0000077521 00000 n +0000077675 00000 n +0000077831 00000 n +0000077987 00000 n +0000078139 00000 n +0000453667 00000 n +0000088774 00000 n +0000081430 00000 n +0000078469 00000 n +0000088711 00000 n +0000081952 00000 n +0000082106 00000 n +0000082262 00000 n +0000082418 00000 n +0000082574 00000 n +0000082730 00000 n +0000082891 00000 n +0000083052 00000 n +0000083213 00000 n +0000083368 00000 n +0000083529 00000 n +0000083690 00000 n +0000083845 00000 n +0000084001 00000 n +0000084155 00000 n +0000084311 00000 n +0000084467 00000 n +0000084623 00000 n +0000084777 00000 n +0000084932 00000 n +0000085088 00000 n +0000085249 00000 n +0000085408 00000 n +0000085563 00000 n +0000085724 00000 n +0000085878 00000 n +0000086034 00000 n +0000086190 00000 n +0000086344 00000 n +0000086499 00000 n +0000086660 00000 n +0000086821 00000 n +0000086977 00000 n +0000087137 00000 n +0000087298 00000 n +0000087454 00000 n +0000087615 00000 n +0000087771 00000 n +0000087932 00000 n +0000088093 00000 n +0000088247 00000 n +0000088402 00000 n +0000088558 00000 n +0000092442 00000 n +0000091886 00000 n +0000088874 00000 n +0000092009 00000 n +0000092255 00000 n +0000092379 00000 n +0000096049 00000 n +0000095739 00000 n +0000092528 00000 n +0000095862 00000 n +0000095986 00000 n +0000100578 00000 n +0000099397 00000 n +0000096162 00000 n +0000099520 00000 n +0000099767 00000 n +0000099830 00000 n +0000099892 00000 n +0000099955 00000 n +0000100079 00000 n +0000100202 00000 n +0000100265 00000 n +0000100328 00000 n +0000100390 00000 n +0000100453 00000 n +0000100516 00000 n +0000104460 00000 n +0000103964 00000 n +0000100664 00000 n +0000104087 00000 n +0000104150 00000 n +0000104274 00000 n +0000104397 00000 n +0000107533 00000 n +0000106848 00000 n +0000104560 00000 n +0000106971 00000 n +0000107218 00000 n +0000107281 00000 n +0000107344 00000 n +0000107407 00000 n +0000107470 00000 n +0000453792 00000 n +0000110049 00000 n +0000109739 00000 n +0000107632 00000 n +0000109862 00000 n +0000109986 00000 n +0000112547 00000 n +0000112051 00000 n +0000110175 00000 n +0000112174 00000 n +0000112298 00000 n +0000112422 00000 n +0000112485 00000 n +0000115576 00000 n +0000114770 00000 n +0000112660 00000 n +0000114893 00000 n +0000114956 00000 n +0000115019 00000 n +0000115142 00000 n +0000115266 00000 n +0000115389 00000 n +0000115513 00000 n +0000120766 00000 n +0000119471 00000 n +0000115676 00000 n +0000120015 00000 n +0000119624 00000 n +0000119825 00000 n +0000120201 00000 n +0000120264 00000 n +0000120327 00000 n +0000120390 00000 n +0000120452 00000 n +0000120515 00000 n +0000120578 00000 n +0000120641 00000 n +0000120704 00000 n +0000125822 00000 n +0000124632 00000 n +0000120865 00000 n +0000124755 00000 n +0000124818 00000 n +0000124881 00000 n +0000124944 00000 n +0000125007 00000 n +0000125070 00000 n +0000125133 00000 n +0000125196 00000 n +0000125259 00000 n +0000125322 00000 n +0000125385 00000 n +0000125447 00000 n +0000125510 00000 n +0000125573 00000 n +0000125634 00000 n +0000125697 00000 n +0000125760 00000 n +0000130700 00000 n +0000129641 00000 n +0000125909 00000 n +0000129764 00000 n +0000130011 00000 n +0000130134 00000 n +0000130197 00000 n +0000130260 00000 n +0000130323 00000 n +0000130385 00000 n +0000130448 00000 n +0000130511 00000 n +0000130574 00000 n +0000130637 00000 n +0000453917 00000 n +0000134667 00000 n +0000133172 00000 n +0000130786 00000 n +0000133295 00000 n +0000133358 00000 n +0000133421 00000 n +0000133484 00000 n +0000133607 00000 n +0000133732 00000 n +0000133856 00000 n +0000133980 00000 n +0000134105 00000 n +0000134230 00000 n +0000134355 00000 n +0000134479 00000 n +0000134604 00000 n +0000138552 00000 n +0000136997 00000 n +0000134767 00000 n +0000137120 00000 n +0000137245 00000 n +0000137369 00000 n +0000137494 00000 n +0000137619 00000 n +0000137742 00000 n +0000137867 00000 n +0000137992 00000 n +0000138116 00000 n +0000138241 00000 n +0000138304 00000 n +0000138367 00000 n +0000138429 00000 n +0000138491 00000 n +0000143572 00000 n +0000142442 00000 n +0000138665 00000 n +0000142565 00000 n +0000142628 00000 n +0000142691 00000 n +0000142754 00000 n +0000142817 00000 n +0000142880 00000 n +0000142943 00000 n +0000143006 00000 n +0000143069 00000 n +0000143132 00000 n +0000143195 00000 n +0000143320 00000 n +0000143383 00000 n +0000143446 00000 n +0000143509 00000 n +0000145907 00000 n +0000144968 00000 n +0000143672 00000 n +0000145091 00000 n +0000145216 00000 n +0000145279 00000 n +0000145342 00000 n +0000145405 00000 n +0000145468 00000 n +0000145531 00000 n +0000145593 00000 n +0000145656 00000 n +0000145719 00000 n +0000145782 00000 n +0000145845 00000 n +0000150033 00000 n +0000148657 00000 n +0000146007 00000 n +0000148780 00000 n +0000149029 00000 n +0000149092 00000 n +0000149155 00000 n +0000149218 00000 n +0000149281 00000 n +0000149344 00000 n +0000149407 00000 n +0000149470 00000 n +0000149595 00000 n +0000149657 00000 n +0000149720 00000 n +0000149783 00000 n +0000149846 00000 n +0000149971 00000 n +0000152125 00000 n +0000151689 00000 n +0000150145 00000 n +0000151812 00000 n +0000151937 00000 n +0000152062 00000 n +0000454042 00000 n +0000154246 00000 n +0000153683 00000 n +0000152251 00000 n +0000153806 00000 n +0000153869 00000 n +0000153932 00000 n +0000153995 00000 n +0000154058 00000 n +0000154183 00000 n +0000158162 00000 n +0000157477 00000 n +0000154372 00000 n +0000157600 00000 n +0000157849 00000 n +0000157974 00000 n +0000158099 00000 n +0000162110 00000 n +0000161675 00000 n +0000158261 00000 n +0000161798 00000 n +0000161923 00000 n +0000162048 00000 n +0000166643 00000 n +0000165957 00000 n +0000162210 00000 n +0000166080 00000 n +0000166205 00000 n +0000166330 00000 n +0000166455 00000 n +0000166580 00000 n +0000168955 00000 n +0000168769 00000 n +0000166756 00000 n +0000168892 00000 n +0000172662 00000 n +0000172351 00000 n +0000169042 00000 n +0000172474 00000 n +0000351369 00000 n +0000349495 00000 n +0000351203 00000 n +0000454167 00000 n +0000174158 00000 n +0000173972 00000 n +0000172788 00000 n +0000174095 00000 n +0000180193 00000 n +0000177829 00000 n +0000174258 00000 n +0000179630 00000 n +0000179880 00000 n +0000178036 00000 n +0000178229 00000 n +0000178423 00000 n +0000178646 00000 n +0000178869 00000 n +0000179058 00000 n +0000179234 00000 n +0000179442 00000 n +0000179943 00000 n +0000180006 00000 n +0000180068 00000 n +0000180131 00000 n +0000184919 00000 n +0000183612 00000 n +0000180318 00000 n +0000183735 00000 n +0000183798 00000 n +0000183923 00000 n +0000184048 00000 n +0000184173 00000 n +0000184298 00000 n +0000184360 00000 n +0000184422 00000 n +0000184485 00000 n +0000184548 00000 n +0000184611 00000 n +0000184736 00000 n +0000184857 00000 n +0000188717 00000 n +0000187411 00000 n +0000185019 00000 n +0000187534 00000 n +0000187659 00000 n +0000187782 00000 n +0000187907 00000 n +0000188032 00000 n +0000188157 00000 n +0000188282 00000 n +0000188407 00000 n +0000188529 00000 n +0000188654 00000 n +0000192725 00000 n +0000191540 00000 n +0000188830 00000 n +0000191663 00000 n +0000191788 00000 n +0000191913 00000 n +0000192038 00000 n +0000192163 00000 n +0000192287 00000 n +0000192412 00000 n +0000192537 00000 n +0000192662 00000 n +0000196810 00000 n +0000195876 00000 n +0000192838 00000 n +0000195999 00000 n +0000196124 00000 n +0000196248 00000 n +0000196373 00000 n +0000196498 00000 n +0000196623 00000 n +0000196748 00000 n +0000454292 00000 n +0000200547 00000 n +0000199736 00000 n +0000196936 00000 n +0000199859 00000 n +0000199984 00000 n +0000200109 00000 n +0000200234 00000 n +0000200359 00000 n +0000200484 00000 n +0000204243 00000 n +0000203808 00000 n +0000200673 00000 n +0000203931 00000 n +0000204056 00000 n +0000204181 00000 n +0000209159 00000 n +0000208723 00000 n +0000204356 00000 n +0000208846 00000 n +0000208971 00000 n +0000209096 00000 n +0000213135 00000 n +0000212574 00000 n +0000209285 00000 n +0000212697 00000 n +0000212822 00000 n +0000212947 00000 n +0000213072 00000 n +0000217142 00000 n +0000216456 00000 n +0000213274 00000 n +0000216579 00000 n +0000216704 00000 n +0000216829 00000 n +0000216954 00000 n +0000217079 00000 n +0000221499 00000 n +0000220564 00000 n +0000217268 00000 n +0000220687 00000 n +0000220812 00000 n +0000220937 00000 n +0000221062 00000 n +0000221187 00000 n +0000221312 00000 n +0000221436 00000 n +0000454417 00000 n +0000225436 00000 n +0000224876 00000 n +0000221625 00000 n +0000224999 00000 n +0000225123 00000 n +0000225248 00000 n +0000225373 00000 n +0000228789 00000 n +0000227353 00000 n +0000225562 00000 n +0000227476 00000 n +0000227601 00000 n +0000227726 00000 n +0000227851 00000 n +0000227976 00000 n +0000228101 00000 n +0000228226 00000 n +0000228351 00000 n +0000228476 00000 n +0000228601 00000 n +0000228726 00000 n +0000232533 00000 n +0000231349 00000 n +0000228915 00000 n +0000231472 00000 n +0000231597 00000 n +0000231722 00000 n +0000231846 00000 n +0000231971 00000 n +0000232096 00000 n +0000232221 00000 n +0000232345 00000 n +0000232470 00000 n +0000236462 00000 n +0000235653 00000 n +0000232646 00000 n +0000235776 00000 n +0000235901 00000 n +0000236026 00000 n +0000236151 00000 n +0000236276 00000 n +0000236401 00000 n +0000240344 00000 n +0000239159 00000 n +0000236588 00000 n +0000239282 00000 n +0000239407 00000 n +0000239532 00000 n +0000239657 00000 n +0000239782 00000 n +0000239907 00000 n +0000240032 00000 n +0000240157 00000 n +0000240282 00000 n +0000243459 00000 n +0000242526 00000 n +0000240457 00000 n +0000242649 00000 n +0000242774 00000 n +0000242899 00000 n +0000243022 00000 n +0000243146 00000 n +0000243271 00000 n +0000243396 00000 n +0000454542 00000 n +0000246846 00000 n +0000246035 00000 n +0000243611 00000 n +0000246158 00000 n +0000246283 00000 n +0000246408 00000 n +0000246533 00000 n +0000246658 00000 n +0000246783 00000 n +0000250427 00000 n +0000249369 00000 n +0000246972 00000 n +0000249492 00000 n +0000249617 00000 n +0000249740 00000 n +0000249865 00000 n +0000249990 00000 n +0000250115 00000 n +0000250239 00000 n +0000250364 00000 n +0000253426 00000 n +0000252865 00000 n +0000250540 00000 n +0000252988 00000 n +0000253113 00000 n +0000253238 00000 n +0000253363 00000 n +0000257053 00000 n +0000256243 00000 n +0000253539 00000 n +0000256366 00000 n +0000256491 00000 n +0000256616 00000 n +0000256741 00000 n +0000256866 00000 n +0000256991 00000 n +0000260387 00000 n +0000259702 00000 n +0000257166 00000 n +0000259825 00000 n +0000259950 00000 n +0000260075 00000 n +0000260200 00000 n +0000260325 00000 n +0000264391 00000 n +0000263705 00000 n +0000260500 00000 n +0000263828 00000 n +0000264078 00000 n +0000264203 00000 n +0000264328 00000 n +0000454667 00000 n +0000268217 00000 n +0000267529 00000 n +0000264503 00000 n +0000267652 00000 n +0000267715 00000 n +0000267778 00000 n +0000267841 00000 n +0000267904 00000 n +0000267967 00000 n +0000268030 00000 n +0000268092 00000 n +0000268155 00000 n +0000271806 00000 n +0000271370 00000 n +0000268330 00000 n +0000271493 00000 n +0000271618 00000 n +0000271743 00000 n +0000276067 00000 n +0000275881 00000 n +0000271932 00000 n +0000276004 00000 n +0000277170 00000 n +0000276984 00000 n +0000276180 00000 n +0000277107 00000 n +0000279910 00000 n +0000279474 00000 n +0000277270 00000 n +0000279597 00000 n +0000279847 00000 n +0000283971 00000 n +0000283535 00000 n +0000280009 00000 n +0000283658 00000 n +0000283908 00000 n +0000454792 00000 n +0000288500 00000 n +0000287693 00000 n +0000284070 00000 n +0000287816 00000 n +0000287941 00000 n +0000288065 00000 n +0000288189 00000 n +0000288312 00000 n +0000288437 00000 n +0000292728 00000 n +0000291918 00000 n +0000288613 00000 n +0000292041 00000 n +0000292166 00000 n +0000292291 00000 n +0000292416 00000 n +0000292541 00000 n +0000292665 00000 n +0000295051 00000 n +0000294740 00000 n +0000292841 00000 n +0000294863 00000 n +0000294988 00000 n +0000298986 00000 n +0000298426 00000 n +0000295177 00000 n +0000298549 00000 n +0000298799 00000 n +0000298923 00000 n +0000302817 00000 n +0000302445 00000 n +0000299085 00000 n +0000302568 00000 n +0000302693 00000 n +0000302755 00000 n +0000304544 00000 n +0000304358 00000 n +0000302969 00000 n +0000304481 00000 n +0000454917 00000 n +0000308084 00000 n +0000307273 00000 n +0000304670 00000 n +0000307396 00000 n +0000307646 00000 n +0000307771 00000 n +0000307896 00000 n +0000308021 00000 n +0000311582 00000 n +0000311146 00000 n +0000308183 00000 n +0000311269 00000 n +0000311394 00000 n +0000311519 00000 n +0000314862 00000 n +0000314301 00000 n +0000311708 00000 n +0000314424 00000 n +0000314674 00000 n +0000314799 00000 n +0000316850 00000 n +0000316289 00000 n +0000314987 00000 n +0000316412 00000 n +0000316662 00000 n +0000316787 00000 n +0000318221 00000 n +0000318035 00000 n +0000316949 00000 n +0000318158 00000 n +0000321328 00000 n +0000320767 00000 n +0000318334 00000 n +0000320890 00000 n +0000321015 00000 n +0000321140 00000 n +0000321265 00000 n +0000455042 00000 n +0000324182 00000 n +0000323871 00000 n +0000321454 00000 n +0000323994 00000 n +0000324119 00000 n +0000326926 00000 n +0000326740 00000 n +0000324308 00000 n +0000326863 00000 n +0000328434 00000 n +0000328248 00000 n +0000327052 00000 n +0000328371 00000 n +0000331853 00000 n +0000331102 00000 n +0000328534 00000 n +0000331225 00000 n +0000331350 00000 n +0000331475 00000 n +0000331538 00000 n +0000331601 00000 n +0000331664 00000 n +0000331727 00000 n +0000331790 00000 n +0000333398 00000 n +0000333086 00000 n +0000331979 00000 n +0000333209 00000 n +0000333272 00000 n +0000333335 00000 n +0000336861 00000 n +0000336315 00000 n +0000333511 00000 n +0000336610 00000 n +0000336673 00000 n +0000336736 00000 n +0000336459 00000 n +0000336799 00000 n +0000455167 00000 n +0000338214 00000 n +0000338028 00000 n +0000336974 00000 n +0000338151 00000 n +0000340409 00000 n +0000340097 00000 n +0000338314 00000 n +0000340220 00000 n +0000340283 00000 n +0000340346 00000 n +0000342500 00000 n +0000341939 00000 n +0000340509 00000 n +0000342062 00000 n +0000342187 00000 n +0000342312 00000 n +0000342437 00000 n +0000344321 00000 n +0000343760 00000 n +0000342613 00000 n +0000343883 00000 n +0000344133 00000 n +0000344258 00000 n +0000348413 00000 n +0000347715 00000 n +0000344420 00000 n +0000348225 00000 n +0000347868 00000 n +0000348044 00000 n +0000348499 00000 n +0000351579 00000 n +0000351604 00000 n +0000362264 00000 n +0000364749 00000 n +0000364780 00000 n +0000368173 00000 n +0000378376 00000 n +0000378651 00000 n +0000396590 00000 n +0000415889 00000 n +0000416318 00000 n +0000433911 00000 n +0000439239 00000 n +0000453146 00000 n +0000455292 00000 n +0000455417 00000 n +0000455543 00000 n +0000455633 00000 n +0000455715 00000 n +0000477547 00000 n +0000492615 00000 n +0000492656 00000 n +0000492696 00000 n +0000492927 00000 n trailer -<<37e21dd5bf11a0bb7770129df9f0d2ea>]>> +<< +/Size 1958 +/Root 1956 0 R +/Info 1957 0 R +>> startxref -174907 +493083 %%EOF diff --git a/docs/Samba-HOWTO-Collection.pdf b/docs/Samba-HOWTO-Collection.pdf index 449b529f39..8d758a44dc 100644 --- a/docs/Samba-HOWTO-Collection.pdf +++ b/docs/Samba-HOWTO-Collection.pdf @@ -1,6694 +1,44784 @@ -%PDF-1.3 -% -1 0 obj<>endobj -2 0 obj<>endobj -3 0 obj<>endobj -4 0 obj<>endobj -5 0 obj<>endobj -6 0 obj<>endobj -7 0 obj<>endobj -8 0 obj<>endobj -9 0 obj<>endobj -10 0 obj<>endobj -11 0 obj<>endobj -12 0 obj<>endobj -13 0 obj<>endobj -14 0 obj<>endobj -15 0 obj<>stream -xUQ+1ʑkGl;2"c#X$G`Iwف(qO%sN o$Q4F۾Qz'`/~L,vuGo ujc\߱XI3+cEdJk{Q[^XRo8z͑u(d*Gs(y xދYg({E䢡 {_3^Sd8<##~$:s0B39dendstream -endobj -16 0 obj<]/Interpolate true/Filter/FlateDecode/Width 24/Height 24/BitsPerComponent 8/Length 223 >>stream -xUQ0 58@4wo%wR+8C+N"]ׂ*W ,D1|Ši"%~0)܁1lN!31T4HԆ<<~Z>yn.H>LKb؎џ'4Y}-?f&tA{27L}On4KI" PBhïG]z$>.mcoendstream -endobj -17 0 obj<>endobj -18 0 obj<>endobj -19 0 obj<>endobj -20 0 obj<>endobj -21 0 obj<>endobj -22 0 obj<>endobj -23 0 obj<>endobj -24 0 obj<>endobj -25 0 obj<>endobj -26 0 obj<>endobj -27 0 obj<>endobj -28 0 obj<>endobj -29 0 obj<>endobj -30 0 obj<>endobj -31 0 obj<>endobj -32 0 obj<>endobj -33 0 obj<>endobj -34 0 obj<>endobj -35 0 obj<>endobj -36 0 obj<>endobj -37 0 obj<>endobj -38 0 obj<>endobj -39 0 obj<>endobj -40 0 obj<>endobj -41 0 obj<>endobj -42 0 obj<>endobj -43 0 obj<>endobj -44 0 obj<>endobj -45 0 obj<>endobj -46 0 obj<>endobj -47 0 obj<>endobj -48 0 obj<>endobj -49 0 obj<>endobj -50 0 obj<>endobj -51 0 obj<>endobj -52 0 obj<>endobj -53 0 obj<>endobj -54 0 obj<>endobj -55 0 obj<>endobj -56 0 obj<>endobj -57 0 obj<>endobj -58 0 obj<>endobj -59 0 obj[17 0 R -18 0 R -19 0 R -20 0 R -21 0 R -22 0 R -23 0 R -24 0 R -25 0 R -26 0 R -27 0 R -28 0 R -29 0 R -30 0 R -31 0 R -32 0 R -33 0 R -34 0 R -35 0 R -36 0 R -37 0 R -38 0 R -39 0 R -40 0 R -41 0 R -42 0 R -43 0 R -44 0 R -45 0 R -46 0 R -47 0 R -48 0 R -49 0 R -50 0 R -51 0 R -52 0 R -53 0 R -54 0 R -55 0 R -56 0 R -57 0 R -58 0 R]endobj -60 0 obj<>endobj -61 0 obj<>endobj -62 0 obj<>endobj -63 0 obj<>endobj -64 0 obj<>endobj -65 0 obj<>endobj -66 0 obj<>endobj -67 0 obj<>endobj -68 0 obj<>endobj -69 0 obj<>endobj -70 0 obj<>endobj -71 0 obj<>endobj -72 0 obj<>endobj -73 0 obj<>endobj -74 0 obj<>endobj -75 0 obj<>endobj -76 0 obj<>endobj -77 0 obj<>endobj -78 0 obj<>endobj -79 0 obj<>endobj -80 0 obj<>endobj -81 0 obj<>endobj -82 0 obj<>endobj -83 0 obj<>endobj -84 0 obj<>endobj -85 0 obj<>endobj -86 0 obj<>endobj -87 0 obj<>endobj -88 0 obj<>endobj -89 0 obj<>endobj -90 0 obj<>endobj -91 0 obj<>endobj -92 0 obj<>endobj -93 0 obj<>endobj -94 0 obj<>endobj -95 0 obj<>endobj -96 0 obj<>endobj -97 0 obj<>endobj -98 0 obj<>endobj -99 0 obj<>endobj -100 0 obj<>endobj -101 0 obj<>endobj -102 0 obj[60 0 R -61 0 R -62 0 R -63 0 R -64 0 R -65 0 R -66 0 R -67 0 R -68 0 R -69 0 R -70 0 R -71 0 R -72 0 R -73 0 R -74 0 R -75 0 R -76 0 R -77 0 R -78 0 R -79 0 R -80 0 R -81 0 R -82 0 R -83 0 R -84 0 R -85 0 R -86 0 R -87 0 R -88 0 R -89 0 R -90 0 R -91 0 R -92 0 R -93 0 R -94 0 R -95 0 R -96 0 R -97 0 R -98 0 R -99 0 R -100 0 R -101 0 R]endobj -103 0 obj<>endobj -104 0 obj<>endobj -105 0 obj<>endobj -106 0 obj<>endobj -107 0 obj<>endobj -108 0 obj<>endobj -109 0 obj<>endobj -110 0 obj<>endobj -111 0 obj<>endobj -112 0 obj<>endobj -113 0 obj<>endobj -114 0 obj<>endobj -115 0 obj<>endobj -116 0 obj<>endobj -117 0 obj<>endobj -118 0 obj<>endobj -119 0 obj<>endobj -120 0 obj<>endobj -121 0 obj<>endobj -122 0 obj<>endobj -123 0 obj<>endobj -124 0 obj<>endobj -125 0 obj<>endobj -126 0 obj<>endobj -127 0 obj<>endobj -128 0 obj<>endobj -129 0 obj<>endobj -130 0 obj<>endobj -131 0 obj<>endobj -132 0 obj<>endobj -133 0 obj<>endobj -134 0 obj<>endobj -135 0 obj<>endobj -136 0 obj<>endobj -137 0 obj<>endobj -138 0 obj<>endobj -139 0 obj<>endobj -140 0 obj<>endobj -141 0 obj<>endobj -142 0 obj<>endobj -143 0 obj<>endobj -144 0 obj<>endobj -145 0 obj<>endobj -146 0 obj[103 0 R -104 0 R -105 0 R -106 0 R -107 0 R -108 0 R -109 0 R -110 0 R -111 0 R -112 0 R -113 0 R -114 0 R -115 0 R -116 0 R -117 0 R -118 0 R -119 0 R -120 0 R -121 0 R -122 0 R -123 0 R -124 0 R -125 0 R -126 0 R -127 0 R -128 0 R -129 0 R -130 0 R -131 0 R -132 0 R -133 0 R -134 0 R -135 0 R -136 0 R -137 0 R -138 0 R -139 0 R -140 0 R -141 0 R -142 0 R -143 0 R -144 0 R -145 0 R]endobj -147 0 obj<>endobj -148 0 obj<>endobj -149 0 obj<>endobj -150 0 obj<>endobj -151 0 obj<>endobj -152 0 obj<>endobj -153 0 obj<>endobj -154 0 obj<>endobj -155 0 obj<>endobj -156 0 obj<>endobj -157 0 obj<>endobj -158 0 obj<>endobj -159 0 obj<>endobj -160 0 obj<>endobj -161 0 obj<>endobj -162 0 obj<>endobj -163 0 obj<>endobj -164 0 obj<>endobj -165 0 obj<>endobj -166 0 obj<>endobj -167 0 obj<>endobj -168 0 obj<>endobj -169 0 obj<>endobj -170 0 obj<>endobj -171 0 obj<>endobj -172 0 obj<>endobj -173 0 obj<>endobj -174 0 obj<>endobj -175 0 obj<>endobj -176 0 obj<>endobj -177 0 obj<>endobj -178 0 obj<>endobj -179 0 obj<>endobj -180 0 obj<>endobj -181 0 obj<>endobj -182 0 obj<>endobj -183 0 obj<>endobj -184 0 obj<>endobj -185 0 obj<>endobj -186 0 obj<>endobj -187 0 obj<>endobj -188 0 obj<>endobj -189 0 obj[147 0 R -148 0 R -149 0 R -150 0 R -151 0 R -152 0 R -153 0 R -154 0 R -155 0 R -156 0 R -157 0 R -158 0 R -159 0 R -160 0 R -161 0 R -162 0 R -163 0 R -164 0 R -165 0 R -166 0 R -167 0 R -168 0 R -169 0 R -170 0 R -171 0 R -172 0 R -173 0 R -174 0 R -175 0 R -176 0 R -177 0 R -178 0 R -179 0 R -180 0 R -181 0 R -182 0 R -183 0 R -184 0 R -185 0 R -186 0 R -187 0 R -188 0 R]endobj -190 0 obj<>endobj -191 0 obj<>endobj -192 0 obj<>endobj -193 0 obj<>endobj -194 0 obj<>endobj -195 0 obj<>endobj -196 0 obj<>endobj -197 0 obj<>endobj -198 0 obj<>endobj -199 0 obj<>endobj -200 0 obj<>endobj -201 0 obj<>endobj -202 0 obj<>endobj -203 0 obj<>endobj -204 0 obj<>endobj -205 0 obj<>endobj -206 0 obj<>endobj -207 0 obj<>endobj -208 0 obj<>endobj -209 0 obj<>endobj -210 0 obj<>endobj -211 0 obj<>endobj -212 0 obj<>endobj -213 0 obj<>endobj -214 0 obj<>endobj -215 0 obj<>endobj -216 0 obj<>endobj -217 0 obj<>endobj -218 0 obj<>endobj -219 0 obj<>endobj -220 0 obj<>endobj -221 0 obj<>endobj -222 0 obj<>endobj -223 0 obj<>endobj -224 0 obj<>endobj -225 0 obj<>endobj -226 0 obj<>endobj -227 0 obj<>endobj -228 0 obj<>endobj -229 0 obj<>endobj -230 0 obj<>endobj -231 0 obj<>endobj -232 0 obj<>endobj -233 0 obj<>endobj -234 0 obj[190 0 R -191 0 R -192 0 R -193 0 R -194 0 R -195 0 R -196 0 R -197 0 R -198 0 R -199 0 R -200 0 R -201 0 R -202 0 R -203 0 R -204 0 R -205 0 R -206 0 R -207 0 R -208 0 R -209 0 R -210 0 R -211 0 R -212 0 R -213 0 R -214 0 R -215 0 R -216 0 R -217 0 R -218 0 R -219 0 R -220 0 R -221 0 R -222 0 R -223 0 R -224 0 R -225 0 R -226 0 R -227 0 R -228 0 R -229 0 R -230 0 R -231 0 R -232 0 R -233 0 R]endobj -235 0 obj<>endobj -236 0 obj<>endobj -237 0 obj<>endobj -238 0 obj<>endobj -239 0 obj<>endobj -240 0 obj<>endobj -241 0 obj<>endobj -242 0 obj<>endobj -243 0 obj<>endobj -244 0 obj<>endobj -245 0 obj<>endobj -246 0 obj<>endobj -247 0 obj<>endobj -248 0 obj<>endobj -249 0 obj<>endobj -250 0 obj<>endobj -251 0 obj<>endobj -252 0 obj<>endobj -253 0 obj<>endobj -254 0 obj<>endobj -255 0 obj<>endobj -256 0 obj<>endobj -257 0 obj<>endobj -258 0 obj<>endobj -259 0 obj<>endobj -260 0 obj<>endobj -261 0 obj<>endobj -262 0 obj<>endobj -263 0 obj<>endobj -264 0 obj<>endobj -265 0 obj<>endobj -266 0 obj<>endobj -267 0 obj<>endobj -268 0 obj<>endobj -269 0 obj<>endobj -270 0 obj<>endobj -271 0 obj<>endobj -272 0 obj<>endobj -273 0 obj<>endobj -274 0 obj<>endobj -275 0 obj<>endobj -276 0 obj<>endobj -277 0 obj[235 0 R -236 0 R -237 0 R -238 0 R -239 0 R -240 0 R -241 0 R -242 0 R -243 0 R -244 0 R -245 0 R -246 0 R -247 0 R -248 0 R -249 0 R -250 0 R -251 0 R -252 0 R -253 0 R -254 0 R -255 0 R -256 0 R -257 0 R -258 0 R -259 0 R -260 0 R -261 0 R -262 0 R -263 0 R -264 0 R -265 0 R -266 0 R -267 0 R -268 0 R -269 0 R -270 0 R -271 0 R -272 0 R -273 0 R -274 0 R -275 0 R -276 0 R]endobj -278 0 obj<>endobj -279 0 obj<>endobj -280 0 obj<>endobj -281 0 obj<>endobj -282 0 obj<>endobj -283 0 obj<>endobj -284 0 obj<>endobj -285 0 obj<>endobj -286 0 obj<>endobj -287 0 obj<>endobj -288 0 obj<>endobj -289 0 obj<>endobj -290 0 obj<>endobj -291 0 obj<>endobj -292 0 obj<>endobj -293 0 obj<>endobj -294 0 obj<>endobj -295 0 obj<>endobj -296 0 obj<>endobj -297 0 obj<>endobj -298 0 obj<>endobj -299 0 obj<>endobj -300 0 obj<>endobj -301 0 obj<>endobj -302 0 obj<>endobj -303 0 obj<>endobj -304 0 obj<>endobj -305 0 obj<>endobj -306 0 obj<>endobj -307 0 obj<>endobj -308 0 obj<>endobj -309 0 obj<>endobj -310 0 obj<>endobj -311 0 obj<>endobj -312 0 obj<>endobj -313 0 obj<>endobj -314 0 obj<>endobj -315 0 obj<>endobj -316 0 obj<>endobj -317 0 obj<>endobj -318 0 obj<>endobj -319 0 obj[278 0 R -279 0 R -280 0 R -281 0 R -282 0 R -283 0 R -284 0 R -285 0 R -286 0 R -287 0 R -288 0 R -289 0 R -290 0 R -291 0 R -292 0 R -293 0 R -294 0 R -295 0 R -296 0 R -297 0 R -298 0 R -299 0 R -300 0 R -301 0 R -302 0 R -303 0 R -304 0 R -305 0 R -306 0 R -307 0 R -308 0 R -309 0 R -310 0 R -311 0 R -312 0 R -313 0 R -314 0 R -315 0 R -316 0 R -317 0 R -318 0 R]endobj -320 0 obj<>endobj -321 0 obj<>endobj -322 0 obj<>endobj -323 0 obj<>endobj -324 0 obj<>endobj -325 0 obj<>endobj -326 0 obj<>endobj -327 0 obj<>endobj -328 0 obj<>endobj -329 0 obj<>endobj -330 0 obj<>endobj -331 0 obj<>endobj -332 0 obj<>endobj -333 0 obj<>endobj -334 0 obj<>endobj -335 0 obj<>endobj -336 0 obj<>endobj -337 0 obj<>endobj -338 0 obj<>endobj -339 0 obj<>endobj -340 0 obj<>endobj -341 0 obj<>endobj -342 0 obj<>endobj -343 0 obj<>endobj -344 0 obj<>endobj -345 0 obj<>endobj -346 0 obj<>endobj -347 0 obj<>endobj -348 0 obj<>endobj -349 0 obj<>endobj -350 0 obj<>endobj -351 0 obj<>endobj -352 0 obj<>endobj -353 0 obj<>endobj -354 0 obj<>endobj -355 0 obj<>endobj -356 0 obj<>endobj -357 0 obj<>endobj -358 0 obj<>endobj -359 0 obj<>endobj -360 0 obj<>endobj -361 0 obj<>endobj -362 0 obj[321 0 R -323 0 R -325 0 R -327 0 R -328 0 R -329 0 R -330 0 R -331 0 R -332 0 R -333 0 R -334 0 R -335 0 R -336 0 R -337 0 R -338 0 R -339 0 R -340 0 R -341 0 R -342 0 R -343 0 R -344 0 R -345 0 R -346 0 R -347 0 R -348 0 R -349 0 R -350 0 R -351 0 R -352 0 R -353 0 R -354 0 R -355 0 R -356 0 R -357 0 R -358 0 R -359 0 R -360 0 R -361 0 R]endobj -363 0 obj<>endobj -364 0 obj<>endobj -365 0 obj<>endobj -366 0 obj<>endobj -367 0 obj<>endobj -368 0 obj<>endobj -369 0 obj<>endobj -370 0 obj<>endobj -371 0 obj<>endobj -372 0 obj<>endobj -373 0 obj<>endobj -374 0 obj<>endobj -375 0 obj<>endobj -376 0 obj<>endobj -377 0 obj<>endobj -378 0 obj<>endobj -379 0 obj<>endobj -380 0 obj<>endobj -381 0 obj<>endobj -382 0 obj<>endobj -383 0 obj<>endobj -384 0 obj<>endobj -385 0 obj<>endobj -386 0 obj<>endobj -387 0 obj<>endobj -388 0 obj<>endobj -389 0 obj<>endobj -390 0 obj<>endobj -391 0 obj<>endobj -392 0 obj<>endobj -393 0 obj<>endobj -394 0 obj<>endobj -395 0 obj<>endobj -396 0 obj<>endobj -397 0 obj<>endobj -398 0 obj<>endobj -399 0 obj<>endobj -400 0 obj<>endobj -401 0 obj<>endobj -402 0 obj<>endobj -403 0 obj<>endobj -404 0 obj<>endobj -405 0 obj<>endobj -406 0 obj<>endobj -407 0 obj<>endobj -408 0 obj<>endobj -409 0 obj<>endobj -410 0 obj<>endobj -411 0 obj<>endobj -412 0 obj<>endobj -413 0 obj<>endobj -414 0 obj[363 0 R -364 0 R -365 0 R -366 0 R -367 0 R -368 0 R -369 0 R -370 0 R -371 0 R -372 0 R -373 0 R -374 0 R -375 0 R -376 0 R -377 0 R -378 0 R -379 0 R -380 0 R -381 0 R -382 0 R -383 0 R -384 0 R -385 0 R -386 0 R -387 0 R -388 0 R -389 0 R -390 0 R -391 0 R -392 0 R -393 0 R -394 0 R -395 0 R -396 0 R -397 0 R -398 0 R -399 0 R -400 0 R -401 0 R -402 0 R -403 0 R -404 0 R -405 0 R -406 0 R -407 0 R -408 0 R -409 0 R -410 0 R -411 0 R -412 0 R -413 0 R]endobj -415 0 obj<>endobj -416 0 obj<>endobj -417 0 obj<>endobj -418 0 obj<>endobj -419 0 obj<>endobj -420 0 obj<>endobj -421 0 obj<>endobj -422 0 obj<>endobj -423 0 obj<>endobj -424 0 obj<>endobj -425 0 obj<>endobj -426 0 obj<>endobj -427 0 obj<>endobj -428 0 obj<>endobj -429 0 obj<>endobj -430 0 obj<>endobj -431 0 obj<>endobj -432 0 obj<>endobj -433 0 obj<>endobj -434 0 obj<>endobj -435 0 obj<>endobj -436 0 obj<>endobj -437 0 obj<>endobj -438 0 obj<>endobj -439 0 obj<>endobj -440 0 obj<>endobj -441 0 obj<>endobj -442 0 obj<>endobj -443 0 obj<>endobj -444 0 obj<>endobj -445 0 obj<>endobj -446 0 obj<>endobj -447 0 obj<>endobj -448 0 obj<>endobj -449 0 obj<>endobj -450 0 obj<>endobj -451 0 obj<>endobj -452 0 obj<>endobj -453 0 obj<>endobj -454 0 obj<>endobj -455 0 obj<>endobj -456 0 obj<>endobj -457 0 obj<>endobj -458 0 obj<>endobj -459 0 obj<>endobj -460 0 obj<>endobj -461 0 obj<>endobj -462 0 obj<>endobj -463 0 obj<>endobj -464 0 obj<>endobj -465 0 obj<>endobj -466 0 obj[415 0 R -416 0 R -417 0 R -418 0 R -419 0 R -420 0 R -421 0 R -422 0 R -423 0 R -424 0 R -425 0 R -426 0 R -427 0 R -428 0 R -429 0 R -430 0 R -431 0 R -432 0 R -433 0 R -434 0 R -435 0 R -436 0 R -437 0 R -438 0 R -439 0 R -440 0 R -441 0 R -442 0 R -443 0 R -444 0 R -445 0 R -446 0 R -447 0 R -448 0 R -449 0 R -450 0 R -451 0 R -452 0 R -453 0 R -454 0 R -455 0 R -456 0 R -457 0 R -458 0 R -459 0 R -460 0 R -461 0 R -462 0 R -463 0 R -464 0 R -465 0 R]endobj -467 0 obj<>endobj -468 0 obj<>endobj -469 0 obj<>endobj -470 0 obj<>endobj -471 0 obj<>endobj -472 0 obj<>endobj -473 0 obj<>endobj -474 0 obj<>endobj -475 0 obj<>endobj -476 0 obj<>endobj -477 0 obj<>endobj -478 0 obj<>endobj -479 0 obj<>endobj -480 0 obj<>endobj -481 0 obj<>endobj -482 0 obj<>endobj -483 0 obj<>endobj -484 0 obj<>endobj -485 0 obj<>endobj -486 0 obj<>endobj -487 0 obj<>endobj -488 0 obj<>endobj -489 0 obj<>endobj -490 0 obj<>endobj -491 0 obj<>endobj -492 0 obj<>endobj -493 0 obj<>endobj -494 0 obj<>endobj -495 0 obj<>endobj -496 0 obj<>endobj -497 0 obj<>endobj -498 0 obj<>endobj -499 0 obj<>endobj -500 0 obj<>endobj -501 0 obj<>endobj -502 0 obj<>endobj -503 0 obj<>endobj -504 0 obj<>endobj -505 0 obj<>endobj -506 0 obj[467 0 R -468 0 R -469 0 R -470 0 R -471 0 R -472 0 R -473 0 R -474 0 R -475 0 R -476 0 R -477 0 R -478 0 R -479 0 R -480 0 R -481 0 R -482 0 R -483 0 R -484 0 R -485 0 R -486 0 R -487 0 R -488 0 R -489 0 R -490 0 R -491 0 R -492 0 R -493 0 R -494 0 R -495 0 R -496 0 R -497 0 R -498 0 R -499 0 R -500 0 R -501 0 R -502 0 R -503 0 R -504 0 R -505 0 R]endobj -507 0 obj<>endobj -508 0 obj<>endobj -509 0 obj<>endobj -510 0 obj<>endobj -511 0 obj<>endobj -512 0 obj<>endobj -513 0 obj<>endobj -514 0 obj<>endobj -515 0 obj<>endobj -516 0 obj<>endobj -517 0 obj<>endobj -518 0 obj<>endobj -519 0 obj<>endobj -520 0 obj<>endobj -521 0 obj<>endobj -522 0 obj<>endobj -523 0 obj<>endobj -524 0 obj<>endobj -525 0 obj<>endobj -526 0 obj<>endobj -527 0 obj<>endobj -528 0 obj<>endobj -529 0 obj<>endobj -530 0 obj<>endobj -531 0 obj<>endobj -532 0 obj<>endobj -533 0 obj<>endobj -534 0 obj<>endobj -535 0 obj<>endobj -536 0 obj<>endobj -537 0 obj<>endobj -538 0 obj<>endobj -539 0 obj<>endobj -540 0 obj<>endobj -541 0 obj<>endobj -542 0 obj<>endobj -543 0 obj<>endobj -544 0 obj<>endobj -545 0 obj<>endobj -546 0 obj<>endobj -547 0 obj<>endobj -548 0 obj<>endobj -549 0 obj<>endobj -550 0 obj<>endobj -551 0 obj[507 0 R -508 0 R -509 0 R -510 0 R -511 0 R -512 0 R -513 0 R -514 0 R -515 0 R -516 0 R -517 0 R -518 0 R -519 0 R -520 0 R -521 0 R -522 0 R -523 0 R -524 0 R -525 0 R -526 0 R -527 0 R -528 0 R -529 0 R -530 0 R -531 0 R -532 0 R -533 0 R -534 0 R -535 0 R -536 0 R -537 0 R -538 0 R -539 0 R -540 0 R -541 0 R -542 0 R -543 0 R -544 0 R -545 0 R -546 0 R -547 0 R -548 0 R -549 0 R -550 0 R]endobj -552 0 obj<>endobj -553 0 obj[552 0 R]endobj -554 0 obj<>endobj -555 0 obj<>endobj -556 0 obj[555 0 R]endobj -557 0 obj<>endobj -558 0 obj<>endobj -559 0 obj<>endobj -560 0 obj<>endobj -561 0 obj<>endobj -562 0 obj<>endobj -563 0 obj<>endobj -564 0 obj<>endobj -565 0 obj<>endobj -566 0 obj<>endobj -567 0 obj<>endobj -568 0 obj<>endobj -569 0 obj<>endobj -570 0 obj<>endobj -571 0 obj[558 0 R -560 0 R -562 0 R -564 0 R -566 0 R -568 0 R -570 0 R]endobj -572 0 obj<>endobj -573 0 obj<>endobj -574 0 obj<>endobj -575 0 obj<>endobj -576 0 obj<>endobj -577 0 obj<>endobj -578 0 obj[573 0 R -575 0 R -577 0 R]endobj -579 0 obj<>endobj -580 0 obj<>endobj -581 0 obj<>endobj -582 0 obj<>endobj -583 0 obj<>endobj -584 0 obj<>endobj -585 0 obj<>endobj -586 0 obj<>endobj -587 0 obj<>endobj -588 0 obj<>endobj -589 0 obj<>endobj -590 0 obj<>endobj -591 0 obj<>endobj -592 0 obj<>endobj -593 0 obj[580 0 R -582 0 R -584 0 R -586 0 R -588 0 R -590 0 R -592 0 R]endobj -594 0 obj<>endobj -595 0 obj<>endobj -596 0 obj[595 0 R]endobj -597 0 obj<>endobj -598 0 obj<>endobj -599 0 obj[598 0 R]endobj -600 0 obj<>endobj -601 0 obj<>endobj -602 0 obj<>endobj -603 0 obj<>endobj -604 0 obj<>endobj -605 0 obj<>endobj -606 0 obj<>endobj -607 0 obj<>endobj -608 0 obj<>endobj -609 0 obj<>endobj -610 0 obj<>endobj -611 0 obj<>endobj -612 0 obj<>endobj -613 0 obj<>endobj -614 0 obj<>endobj -615 0 obj<>endobj -616 0 obj<>endobj -617 0 obj<>endobj -618 0 obj<>endobj -619 0 obj<>endobj -620 0 obj<>endobj -621 0 obj<>endobj -622 0 obj<>endobj -623 0 obj<>endobj -624 0 obj<>endobj -625 0 obj<>endobj -626 0 obj<>endobj -627 0 obj<>endobj -628 0 obj<>endobj -629 0 obj<>endobj -630 0 obj<>endobj -631 0 obj<>endobj -632 0 obj<>endobj -633 0 obj<>endobj -634 0 obj<>endobj -635 0 obj<>endobj -636 0 obj<>endobj -637 0 obj<>endobj -638 0 obj<>endobj -639 0 obj<>endobj -640 0 obj<>endobj -641 0 obj<>endobj -642 0 obj<>endobj -643 0 obj<>endobj -644 0 obj[600 0 R -601 0 R -602 0 R -603 0 R -604 0 R -605 0 R -606 0 R -607 0 R -608 0 R -609 0 R -610 0 R -611 0 R -612 0 R -613 0 R -614 0 R -615 0 R -616 0 R -617 0 R -618 0 R -619 0 R -620 0 R -621 0 R -622 0 R -623 0 R -624 0 R -625 0 R -626 0 R -627 0 R -628 0 R -629 0 R -630 0 R -631 0 R -632 0 R -633 0 R -634 0 R -635 0 R -636 0 R -637 0 R -638 0 R -639 0 R -640 0 R -641 0 R -642 0 R -643 0 R]endobj -645 0 obj<>endobj -646 0 obj[645 0 R]endobj -647 0 obj<>endobj -648 0 obj<>endobj -649 0 obj[648 0 R]endobj -650 0 obj<>endobj -651 0 obj<>endobj -652 0 obj<>endobj -653 0 obj<>endobj -654 0 obj<>endobj -655 0 obj<>endobj -656 0 obj<>endobj -657 0 obj<>endobj -658 0 obj<>endobj -659 0 obj<>endobj -660 0 obj<>endobj -661 0 obj<>endobj -662 0 obj<>endobj -663 0 obj<>endobj -664 0 obj<>endobj -665 0 obj<>endobj -666 0 obj<>endobj -667 0 obj<>endobj -668 0 obj<>endobj -669 0 obj<>endobj -670 0 obj<>endobj -671 0 obj<>endobj -672 0 obj<>endobj -673 0 obj<>endobj -674 0 obj<>endobj -675 0 obj<>endobj -676 0 obj<>endobj -677 0 obj<>endobj -678 0 obj<>endobj -679 0 obj<>endobj -680 0 obj<>endobj -681 0 obj<>endobj -682 0 obj<>endobj -683 0 obj<>endobj -684 0 obj<>endobj -685 0 obj<>endobj -686 0 obj<>endobj -687 0 obj<>endobj -688 0 obj<>endobj -689 0 obj<>endobj -690 0 obj<>endobj -691 0 obj<>endobj -692 0 obj<>endobj -693 0 obj<>endobj -694 0 obj[651 0 R -653 0 R -655 0 R -657 0 R -659 0 R -661 0 R -663 0 R -665 0 R -667 0 R -669 0 R -671 0 R -673 0 R -675 0 R -677 0 R -679 0 R -681 0 R -683 0 R -685 0 R -687 0 R -689 0 R -691 0 R -693 0 R]endobj -695 0 obj<>endobj -696 0 obj<>endobj -697 0 obj[696 0 R]endobj -698 0 obj<>endobj -699 0 obj<>endobj -700 0 obj[699 0 R]endobj -701 0 obj<>endobj -702 0 obj<>endobj -703 0 obj[702 0 R]endobj -704 0 obj<>endobj -705 0 obj<>endobj -706 0 obj<>endobj -707 0 obj<>endobj -708 0 obj<>endobj -709 0 obj<>endobj -710 0 obj<>endobj -711 0 obj<>endobj -712 0 obj[705 0 R -707 0 R -709 0 R -711 0 R]endobj -713 0 obj<>endobj -714 0 obj<>endobj -715 0 obj<>endobj -716 0 obj<>endobj -717 0 obj<>endobj -718 0 obj<>endobj -719 0 obj<>endobj -720 0 obj<>endobj -721 0 obj<>endobj -722 0 obj<>endobj -723 0 obj<>endobj -724 0 obj<>endobj -725 0 obj<>endobj -726 0 obj<>endobj -727 0 obj<>endobj -728 0 obj<>endobj -729 0 obj[714 0 R -716 0 R -718 0 R -720 0 R -722 0 R -724 0 R -726 0 R -728 0 R]endobj -730 0 obj<>endobj -731 0 obj<>endobj -732 0 obj<>endobj -733 0 obj<>endobj -734 0 obj[731 0 R -733 0 R]endobj -735 0 obj<>endobj -736 0 obj<>endobj -737 0 obj[736 0 R]endobj -738 0 obj<>endobj -739 0 obj<>endobj -740 0 obj<>endobj -741 0 obj<>endobj -742 0 obj<>endobj -743 0 obj<>endobj -744 0 obj<>endobj -745 0 obj<>endobj -746 0 obj<>endobj -747 0 obj<>endobj -748 0 obj[739 0 R -741 0 R -743 0 R -745 0 R -747 0 R]endobj -749 0 obj<>endobj -750 0 obj<>endobj -751 0 obj<>endobj -752 0 obj<>endobj -753 0 obj<>endobj -754 0 obj<>endobj -755 0 obj[750 0 R -752 0 R -754 0 R]endobj -756 0 obj<>endobj -757 0 obj<>endobj -758 0 obj<>endobj -759 0 obj<>endobj -760 0 obj[757 0 R -759 0 R]endobj -761 0 obj<>endobj -762 0 obj<>endobj -763 0 obj<>endobj -764 0 obj<>endobj -765 0 obj<>endobj -766 0 obj<>endobj -767 0 obj<>endobj -768 0 obj<>endobj -769 0 obj<>endobj -770 0 obj<>endobj -771 0 obj<>endobj -772 0 obj<>endobj -773 0 obj<>endobj -774 0 obj<>endobj -775 0 obj<>endobj -776 0 obj<>endobj -777 0 obj<>endobj -778 0 obj<>endobj -779 0 obj<>endobj -780 0 obj<>endobj -781 0 obj<>endobj -782 0 obj<>endobj -783 0 obj<>endobj -784 0 obj<>endobj -785 0 obj<>endobj -786 0 obj<>endobj -787 0 obj<>endobj -788 0 obj<>endobj -789 0 obj<>endobj -790 0 obj<>endobj -791 0 obj<>endobj -792 0 obj<>endobj -793 0 obj<>endobj -794 0 obj<>endobj -795 0 obj<>endobj -796 0 obj<>endobj -797 0 obj<>endobj -798 0 obj<>endobj -799 0 obj<>endobj -800 0 obj<>endobj -801 0 obj<>endobj -802 0 obj<>endobj -803 0 obj<>endobj -804 0 obj<>endobj -805 0 obj[761 0 R -762 0 R -763 0 R -764 0 R -765 0 R -766 0 R -767 0 R -768 0 R -769 0 R -770 0 R -771 0 R -772 0 R -773 0 R -774 0 R -775 0 R -776 0 R -777 0 R -778 0 R -779 0 R -780 0 R -781 0 R -782 0 R -783 0 R -784 0 R -785 0 R -786 0 R -787 0 R -788 0 R -789 0 R -790 0 R -791 0 R -792 0 R -793 0 R -794 0 R -795 0 R -796 0 R -797 0 R -798 0 R -799 0 R -800 0 R -801 0 R -802 0 R -803 0 R -804 0 R]endobj -806 0 obj<>endobj -807 0 obj<>endobj -808 0 obj<>endobj -809 0 obj<>endobj -810 0 obj<>endobj -811 0 obj<>endobj -812 0 obj<>endobj -813 0 obj<>endobj -814 0 obj<>endobj -815 0 obj<>endobj -816 0 obj<>endobj -817 0 obj<>endobj -818 0 obj<>endobj -819 0 obj<>endobj -820 0 obj<>endobj -821 0 obj<>endobj -822 0 obj<>endobj -823 0 obj<>endobj -824 0 obj<>endobj -825 0 obj<>endobj -826 0 obj<>endobj -827 0 obj<>endobj -828 0 obj<>endobj -829 0 obj<>endobj -830 0 obj<>endobj -831 0 obj<>endobj -832 0 obj<>endobj -833 0 obj<>endobj -834 0 obj<>endobj -835 0 obj<>endobj -836 0 obj<>endobj -837 0 obj<>endobj -838 0 obj<>endobj -839 0 obj<>endobj -840 0 obj<>endobj -841 0 obj<>endobj -842 0 obj<>endobj -843 0 obj<>endobj -844 0 obj<>endobj -845 0 obj<>endobj -846 0 obj<>endobj -847 0 obj<>endobj -848 0 obj<>endobj -849 0 obj<>endobj -850 0 obj<>endobj -851 0 obj<>endobj -852 0 obj<>endobj -853 0 obj<>endobj -854 0 obj<>endobj -855 0 obj<>endobj -856 0 obj<>endobj -857 0 obj[806 0 R -807 0 R -808 0 R -809 0 R -810 0 R -811 0 R -812 0 R -813 0 R -814 0 R -815 0 R -816 0 R -817 0 R -818 0 R -819 0 R -820 0 R -821 0 R -822 0 R -823 0 R -824 0 R -825 0 R -826 0 R -827 0 R -828 0 R -829 0 R -830 0 R -831 0 R -832 0 R -833 0 R -834 0 R -835 0 R -836 0 R -837 0 R -838 0 R -839 0 R -840 0 R -841 0 R -842 0 R -843 0 R -844 0 R -845 0 R -846 0 R -847 0 R -848 0 R -849 0 R -850 0 R -851 0 R -852 0 R -853 0 R -854 0 R -855 0 R -856 0 R]endobj -858 0 obj<>endobj -859 0 obj<>endobj -860 0 obj<>endobj -861 0 obj<>endobj -862 0 obj<>endobj -863 0 obj<>endobj -864 0 obj<>endobj -865 0 obj<>endobj -866 0 obj<>endobj -867 0 obj<>endobj -868 0 obj<>endobj -869 0 obj<>endobj -870 0 obj<>endobj -871 0 obj<>endobj -872 0 obj<>endobj -873 0 obj<>endobj -874 0 obj<>endobj -875 0 obj<>endobj -876 0 obj<>endobj -877 0 obj<>endobj -878 0 obj<>endobj -879 0 obj<>endobj -880 0 obj<>endobj -881 0 obj<>endobj -882 0 obj<>endobj -883 0 obj<>endobj -884 0 obj<>endobj -885 0 obj<>endobj -886 0 obj<>endobj -887 0 obj<>endobj -888 0 obj<>endobj -889 0 obj<>endobj -890 0 obj<>endobj -891 0 obj<>endobj -892 0 obj<>endobj -893 0 obj<>endobj -894 0 obj<>endobj -895 0 obj<>endobj -896 0 obj<>endobj -897 0 obj<>endobj -898 0 obj<>endobj -899 0 obj<>endobj -900 0 obj<>endobj -901 0 obj[858 0 R -859 0 R -860 0 R -861 0 R -862 0 R -863 0 R -864 0 R -865 0 R -866 0 R -867 0 R -868 0 R -869 0 R -870 0 R -871 0 R -872 0 R -873 0 R -874 0 R -875 0 R -876 0 R -877 0 R -878 0 R -879 0 R -880 0 R -881 0 R -882 0 R -883 0 R -884 0 R -885 0 R -886 0 R -887 0 R -888 0 R -889 0 R -890 0 R -891 0 R -892 0 R -893 0 R -894 0 R -895 0 R -896 0 R -897 0 R -898 0 R -899 0 R -900 0 R]endobj -902 0 obj<>endobj -903 0 obj<>endobj -904 0 obj<>endobj -905 0 obj<>endobj -906 0 obj<>endobj -907 0 obj<>endobj -908 0 obj[903 0 R -905 0 R -907 0 R]endobj -909 0 obj<>endobj -910 0 obj<>endobj -911 0 obj<>endobj -912 0 obj<>endobj -913 0 obj[910 0 R -912 0 R]endobj -914 0 obj<>endobj -915 0 obj<>endobj -916 0 obj<>endobj -917 0 obj<>endobj -918 0 obj[915 0 R -917 0 R]endobj -919 0 obj<>endobj -920 0 obj<>endobj -921 0 obj<>endobj -922 0 obj<>endobj -923 0 obj<>endobj -924 0 obj<>endobj -925 0 obj<>endobj -926 0 obj<>endobj -927 0 obj[920 0 R -922 0 R -924 0 R -926 0 R]endobj -928 0 obj<>endobj -929 0 obj<>endobj -930 0 obj[929 0 R]endobj -931 0 obj<>endobj -932 0 obj<>endobj -933 0 obj<>endobj -934 0 obj<>endobj -935 0 obj[932 0 R -934 0 R]endobj -936 0 obj<>endobj -937 0 obj<>endobj -938 0 obj<>endobj -939 0 obj<>endobj -940 0 obj<>endobj -941 0 obj<>endobj -942 0 obj[937 0 R -939 0 R -941 0 R]endobj -943 0 obj<>endobj -944 0 obj<>endobj -945 0 obj<>endobj -946 0 obj<>endobj -947 0 obj<>endobj -948 0 obj<>endobj -949 0 obj[944 0 R -946 0 R -948 0 R]endobj -950 0 obj<>endobj -951 0 obj<>endobj -952 0 obj<>endobj -953 0 obj<>endobj -954 0 obj<>endobj -955 0 obj<>endobj -956 0 obj<>endobj -957 0 obj<>endobj -958 0 obj<>endobj -959 0 obj<>endobj -960 0 obj[951 0 R -953 0 R -955 0 R -957 0 R -959 0 R]endobj -961 0 obj<>endobj -962 0 obj<>endobj -963 0 obj[962 0 R]endobj -964 0 obj<>endobj -965 0 obj<>endobj -966 0 obj<>endobj -967 0 obj<>endobj -968 0 obj<>endobj -969 0 obj<>endobj -970 0 obj<>endobj -971 0 obj<>endobj -972 0 obj<>endobj -973 0 obj<>endobj -974 0 obj[965 0 R -967 0 R -969 0 R -971 0 R -973 0 R]endobj -975 0 obj<>endobj -976 0 obj<>endobj -977 0 obj<>endobj -978 0 obj<>endobj -979 0 obj[976 0 R -978 0 R]endobj -980 0 obj<>endobj -981 0 obj<>endobj -982 0 obj<>endobj -983 0 obj<>endobj -984 0 obj<>endobj -985 0 obj<>endobj -986 0 obj[981 0 R -983 0 R -985 0 R]endobj -987 0 obj<>endobj -988 0 obj<>endobj -989 0 obj<>endobj -990 0 obj<>endobj -991 0 obj<>endobj -992 0 obj<>endobj -993 0 obj<>endobj -994 0 obj<>endobj -995 0 obj[988 0 R -990 0 R -992 0 R -994 0 R]endobj -996 0 obj<>endobj -997 0 obj<>endobj -998 0 obj[997 0 R]endobj -999 0 obj<>endobj -1000 0 obj<>endobj -1001 0 obj[1000 0 R]endobj -1002 0 obj<>endobj -1003 0 obj<>endobj -1004 0 obj[1003 0 R]endobj -1005 0 obj<>endobj -1006 0 obj<>endobj -1007 0 obj[1006 0 R]endobj -1008 0 obj<>endobj -1009 0 obj<>endobj -1010 0 obj<>endobj -1011 0 obj<>endobj -1012 0 obj<>endobj -1013 0 obj<>endobj -1014 0 obj[1009 0 R -1011 0 R -1013 0 R]endobj -1015 0 obj<>endobj -1016 0 obj<>endobj -1017 0 obj<>endobj -1018 0 obj<>endobj -1019 0 obj<>endobj -1020 0 obj<>endobj -1021 0 obj<>endobj -1022 0 obj<>endobj -1023 0 obj<>endobj -1024 0 obj<>endobj -1025 0 obj[1016 0 R -1018 0 R -1020 0 R -1022 0 R -1024 0 R]endobj -1026 0 obj<>endobj -1027 0 obj<>endobj -1028 0 obj<>endobj -1029 0 obj<>endobj -1030 0 obj[1027 0 R -1029 0 R]endobj -1031 0 obj<>endobj -1032 0 obj<>endobj -1033 0 obj[1032 0 R]endobj -1034 0 obj<>endobj -1035 0 obj<>endobj -1036 0 obj[1035 0 R]endobj -1037 0 obj<>endobj -1038 0 obj<>endobj -1039 0 obj<>endobj -1040 0 obj<>endobj -1041 0 obj<>endobj -1042 0 obj<>endobj -1043 0 obj<>endobj -1044 0 obj<>endobj -1045 0 obj<>endobj -1046 0 obj<>endobj -1047 0 obj<>endobj -1048 0 obj<>endobj -1049 0 obj<>endobj -1050 0 obj<>endobj -1051 0 obj<>endobj -1052 0 obj<>endobj -1053 0 obj<>endobj -1054 0 obj<>endobj -1055 0 obj<>endobj -1056 0 obj<>endobj -1057 0 obj<>endobj -1058 0 obj<>endobj -1059 0 obj<>endobj -1060 0 obj<>endobj -1061 0 obj<>endobj -1062 0 obj<>endobj -1063 0 obj<>endobj -1064 0 obj<>endobj -1065 0 obj<>endobj -1066 0 obj<>endobj -1067 0 obj<>endobj -1068 0 obj<>endobj -1069 0 obj<>endobj -1070 0 obj<>endobj -1071 0 obj<>endobj -1072 0 obj<>endobj -1073 0 obj<>endobj -1074 0 obj<>endobj -1075 0 obj<>endobj -1076 0 obj<>endobj -1077 0 obj<>endobj -1078 0 obj<>endobj -1079 0 obj<>endobj -1080 0 obj<>endobj -1081 0 obj<>endobj -1082 0 obj<>endobj -1083 0 obj<>endobj -1084 0 obj[1037 0 R -1038 0 R -1039 0 R -1040 0 R -1041 0 R -1042 0 R -1043 0 R -1044 0 R -1045 0 R -1046 0 R -1047 0 R -1048 0 R -1049 0 R -1050 0 R -1051 0 R -1052 0 R -1053 0 R -1054 0 R -1055 0 R -1056 0 R -1057 0 R -1058 0 R -1059 0 R -1060 0 R -1061 0 R -1062 0 R -1063 0 R -1064 0 R -1065 0 R -1066 0 R -1067 0 R -1068 0 R -1069 0 R -1070 0 R -1071 0 R -1072 0 R -1073 0 R -1074 0 R -1075 0 R -1076 0 R -1077 0 R -1078 0 R -1079 0 R -1080 0 R -1081 0 R -1082 0 R -1083 0 R]endobj -1085 0 obj<>endobj -1086 0 obj<>endobj -1087 0 obj<>endobj -1088 0 obj<>endobj -1089 0 obj<>endobj -1090 0 obj<>endobj -1091 0 obj<>endobj -1092 0 obj[1085 0 R -1086 0 R -1087 0 R -1088 0 R -1089 0 R -1090 0 R -1091 0 R]endobj -1093 0 obj<>endobj -1094 0 obj<>endobj -1095 0 obj<>endobj -1096 0 obj<>endobj -1097 0 obj<>endobj -1098 0 obj<>endobj -1099 0 obj<>endobj -1100 0 obj<>endobj -1101 0 obj<>endobj -1102 0 obj<>endobj -1103 0 obj[1094 0 R -1096 0 R -1098 0 R -1100 0 R -1102 0 R]endobj -1104 0 obj<>endobj -1105 0 obj<>endobj -1106 0 obj<>endobj -1107 0 obj<>endobj -1108 0 obj<>endobj -1109 0 obj<>endobj -1110 0 obj<>endobj -1111 0 obj<>endobj -1112 0 obj[1105 0 R -1107 0 R -1109 0 R -1111 0 R]endobj -1113 0 obj<>endobj -1114 0 obj<>endobj -1115 0 obj[1114 0 R]endobj -1116 0 obj<>endobj -1117 0 obj<>endobj -1118 0 obj[1117 0 R]endobj -1119 0 obj<>endobj -1120 0 obj<>endobj -1121 0 obj<>endobj -1122 0 obj<>endobj -1123 0 obj<>endobj -1124 0 obj<>endobj -1125 0 obj<>endobj -1126 0 obj<>endobj -1127 0 obj[1120 0 R -1122 0 R -1124 0 R -1126 0 R]endobj -1128 0 obj<>endobj -1129 0 obj<>endobj -1130 0 obj<>endobj -1131 0 obj<>endobj -1132 0 obj[1129 0 R -1131 0 R]endobj -1133 0 obj<>endobj -1134 0 obj<>endobj -1135 0 obj<>endobj -1136 0 obj<>endobj -1137 0 obj<>endobj -1138 0 obj<>endobj -1139 0 obj<>endobj -1140 0 obj<>endobj -1141 0 obj[1134 0 R -1136 0 R -1138 0 R -1140 0 R]endobj -1142 0 obj<>endobj -1143 0 obj<>endobj -1144 0 obj<>endobj -1145 0 obj<>endobj -1146 0 obj[1143 0 R -1145 0 R]endobj -1147 0 obj<>endobj -1148 0 obj<>endobj -1149 0 obj<>endobj -1150 0 obj<>endobj -1151 0 obj<>endobj -1152 0 obj<>endobj -1153 0 obj<>endobj -1154 0 obj<>endobj -1155 0 obj<>endobj -1156 0 obj<>endobj -1157 0 obj<>endobj -1158 0 obj<>endobj -1159 0 obj<>endobj -1160 0 obj<>endobj -1161 0 obj<>endobj -1162 0 obj<>endobj -1163 0 obj<>endobj -1164 0 obj<>endobj -1165 0 obj<>endobj -1166 0 obj<>endobj -1167 0 obj<>endobj -1168 0 obj<>endobj -1169 0 obj<>endobj -1170 0 obj<>endobj -1171 0 obj<>endobj -1172 0 obj<>endobj -1173 0 obj<>endobj -1174 0 obj<>endobj -1175 0 obj<>endobj -1176 0 obj<>endobj -1177 0 obj<>endobj -1178 0 obj<>endobj -1179 0 obj<>endobj -1180 0 obj<>endobj -1181 0 obj<>endobj -1182 0 obj<>endobj -1183 0 obj<>endobj -1184 0 obj<>endobj -1185 0 obj<>endobj -1186 0 obj<>endobj -1187 0 obj<>endobj -1188 0 obj<>endobj -1189 0 obj<>endobj -1190 0 obj<>endobj -1191 0 obj<>endobj -1192 0 obj<>endobj -1193 0 obj<>endobj -1194 0 obj<>endobj -1195 0 obj<>endobj -1196 0 obj<>endobj -1197 0 obj<>endobj -1198 0 obj<>endobj -1199 0 obj<>endobj -1200 0 obj<>endobj -1201 0 obj<>endobj -1202 0 obj<>endobj -1203 0 obj<>endobj -1204 0 obj<>endobj -1205 0 obj<>endobj -1206 0 obj<>endobj -1207 0 obj<>endobj -1208 0 obj<>endobj -1209 0 obj<>endobj -1210 0 obj<>endobj -1211 0 obj<>endobj -1212 0 obj<>endobj -1213 0 obj<>endobj -1214 0 obj<>endobj -1215 0 obj<>endobj -1216 0 obj<>endobj -1217 0 obj<>endobj -1218 0 obj<>endobj -1219 0 obj<>endobj -1220 0 obj<>endobj -1221 0 obj<>endobj -1222 0 obj<>endobj -1223 0 obj<>endobj -1224 0 obj<>endobj -1225 0 obj<>endobj -1226 0 obj<>endobj -1227 0 obj<>endobj -1228 0 obj<>endobj -1229 0 obj<>endobj -1230 0 obj<>endobj -1231 0 obj<>endobj -1232 0 obj<>endobj -1233 0 obj<>endobj -1234 0 obj<>endobj -1235 0 obj<>endobj -1236 0 obj<>endobj -1237 0 obj<>endobj -1238 0 obj<>endobj -1239 0 obj<>endobj -1240 0 obj<>endobj -1241 0 obj<>endobj -1242 0 obj<>endobj -1243 0 obj<>endobj -1244 0 obj<>endobj -1245 0 obj<>endobj -1246 0 obj<>endobj -1247 0 obj<>endobj -1248 0 obj<>endobj -1249 0 obj<>endobj -1250 0 obj<>endobj -1251 0 obj<>endobj -1252 0 obj<>endobj -1253 0 obj<>endobj -1254 0 obj<>endobj -1255 0 obj<>endobj -1256 0 obj<>endobj -1257 0 obj<>endobj -1258 0 obj<>endobj -1259 0 obj<>endobj -1260 0 obj<>endobj -1261 0 obj<>endobj -1262 0 obj<>endobj -1263 0 obj<>endobj -1264 0 obj<>endobj -1265 0 obj<>endobj -1266 0 obj<>endobj -1267 0 obj<>endobj -1268 0 obj<>endobj -1269 0 obj<>endobj -1270 0 obj<>endobj -1271 0 obj<>endobj -1272 0 obj<>endobj -1273 0 obj<>endobj -1274 0 obj<>endobj -1275 0 obj<>endobj -1276 0 obj<>endobj -1277 0 obj<>endobj -1278 0 obj<>endobj -1279 0 obj<>endobj -1280 0 obj<>endobj -1281 0 obj<>endobj -1282 0 obj<>endobj -1283 0 obj<>endobj -1284 0 obj<>endobj -1285 0 obj<>endobj -1286 0 obj<>endobj -1287 0 obj<>endobj -1288 0 obj<>endobj -1289 0 obj<>endobj -1290 0 obj<>endobj -1291 0 obj<>endobj -1292 0 obj<>endobj -1293 0 obj<>endobj -1294 0 obj<>endobj -1295 0 obj<>endobj -1296 0 obj<>endobj -1297 0 obj<>endobj -1298 0 obj<>endobj -1299 0 obj<>endobj -1300 0 obj<>endobj -1301 0 obj<>endobj -1302 0 obj<>endobj -1303 0 obj<>endobj -1304 0 obj<>endobj -1305 0 obj<>endobj -1306 0 obj<>endobj -1307 0 obj<>endobj -1308 0 obj<>endobj -1309 0 obj<>endobj -1310 0 obj<>endobj -1311 0 obj<>endobj -1312 0 obj<>endobj -1313 0 obj<>endobj -1314 0 obj<>endobj -1315 0 obj<>endobj -1316 0 obj<>endobj -1317 0 obj<>endobj -1318 0 obj<>endobj -1319 0 obj<>endobj -1320 0 obj<>endobj -1321 0 obj<>endobj -1322 0 obj<>endobj -1323 0 obj<>endobj -1324 0 obj<>endobj -1325 0 obj<>endobj -1326 0 obj<>endobj -1327 0 obj<>endobj -1328 0 obj<>endobj -1329 0 obj<>endobj -1330 0 obj<>endobj -1331 0 obj<>endobj -1332 0 obj<>endobj -1333 0 obj<>endobj -1334 0 obj<>endobj -1335 0 obj<>endobj -1336 0 obj<>endobj -1337 0 obj<>endobj -1338 0 obj<>endobj -1339 0 obj<>endobj -1340 0 obj<>endobj -1341 0 obj<>endobj -1342 0 obj<>endobj -1343 0 obj<>endobj -1344 0 obj<>endobj -1345 0 obj<>endobj -1346 0 obj<>endobj -1347 0 obj<>endobj -1348 0 obj<>endobj -1349 0 obj<>endobj -1350 0 obj<>endobj -1351 0 obj<>endobj -1352 0 obj<>endobj -1353 0 obj<>endobj -1354 0 obj<>endobj -1355 0 obj<>endobj -1356 0 obj<>endobj -1357 0 obj<>endobj -1358 0 obj<>endobj -1359 0 obj<>endobj -1360 0 obj<>endobj -1361 0 obj<>endobj -1362 0 obj<>endobj -1363 0 obj<>endobj -1364 0 obj<>endobj -1365 0 obj<>endobj -1366 0 obj<>endobj -1367 0 obj<>endobj -1368 0 obj<>endobj -1369 0 obj<>endobj -1370 0 obj<>endobj -1371 0 obj<>endobj -1372 0 obj<>endobj -1373 0 obj<>endobj -1374 0 obj<>endobj -1375 0 obj<>endobj -1376 0 obj<>endobj -1377 0 obj<>endobj -1378 0 obj<>endobj -1379 0 obj<>endobj -1380 0 obj<>endobj -1381 0 obj<>endobj -1382 0 obj<>endobj -1383 0 obj<>endobj -1384 0 obj<>endobj -1385 0 obj<>endobj -1386 0 obj<>endobj -1387 0 obj<>endobj -1388 0 obj<>endobj -1389 0 obj<>endobj -1390 0 obj<>endobj -1391 0 obj<>endobj -1392 0 obj<>endobj -1393 0 obj<>endobj -1394 0 obj<>endobj -1395 0 obj<>endobj -1396 0 obj<>endobj -1397 0 obj<>endobj -1398 0 obj<>endobj -1399 0 obj<>endobj -1400 0 obj<>endobj -1401 0 obj<>endobj -1402 0 obj<>endobj -1403 0 obj<>endobj -1404 0 obj<>endobj -1405 0 obj<>endobj -1406 0 obj<>endobj -1407 0 obj<>endobj -1408 0 obj<>endobj -1409 0 obj<>endobj -1410 0 obj<>endobj -1411 0 obj<>endobj -1412 0 obj<>endobj -1413 0 obj<>endobj -1414 0 obj<>endobj -1415 0 obj<>endobj -1416 0 obj<>endobj -1417 0 obj<>endobj -1418 0 obj<>endobj -1419 0 obj<>endobj -1420 0 obj<>endobj -1421 0 obj<>endobj -1422 0 obj<>endobj -1423 0 obj<>endobj -1424 0 obj<>endobj -1425 0 obj<>endobj -1426 0 obj<>endobj -1427 0 obj<>endobj -1428 0 obj<>endobj -1429 0 obj<>endobj -1430 0 obj<>endobj -1431 0 obj<>endobj -1432 0 obj<>endobj -1433 0 obj<>endobj -1434 0 obj<>endobj -1435 0 obj<>endobj -1436 0 obj<>endobj -1437 0 obj<>endobj -1438 0 obj<>endobj -1439 0 obj<>endobj -1440 0 obj<>endobj -1441 0 obj<>endobj -1442 0 obj<>endobj -1443 0 obj<>endobj -1444 0 obj<>endobj -1445 0 obj<>endobj -1446 0 obj<>endobj -1447 0 obj<>endobj -1448 0 obj<>endobj -1449 0 obj<>endobj -1450 0 obj<>endobj -1451 0 obj<>endobj -1452 0 obj<>endobj -1453 0 obj<>endobj -1454 0 obj<>endobj -1455 0 obj<>endobj -1456 0 obj<>endobj -1457 0 obj<>endobj -1458 0 obj<>endobj -1459 0 obj<>endobj -1460 0 obj<>endobj -1461 0 obj<>endobj -1462 0 obj<>endobj -1463 0 obj<>endobj -1464 0 obj<>endobj -1465 0 obj<>endobj -1466 0 obj<>endobj -1467 0 obj<>endobj -1468 0 obj<>endobj -1469 0 obj<>endobj -1470 0 obj<>endobj -1471 0 obj<>endobj -1472 0 obj<>endobj -1473 0 obj<>endobj -1474 0 obj<>endobj -1475 0 obj<>endobj -1476 0 obj<>endobj -1477 0 obj<>/XObject<<>>>>>>endobj -1478 0 obj<>stream -x+2T0BCs#c3\..}7K#4K=3cS`g`NvurT(JM.QpO.M+I, r -endstream -endobj -1479 0 obj<>/XObject<<>>>>/Annots 59 0 R>>endobj -1480 0 obj<>stream -x[rG}WLe==WiKl|'EYI_~n4Co[Ttx4@c&}ΒJG //闤*F2GڃE2~d2g2qv`E`Ir3aVH2W0๚ DT9es줴9EC-`D9 3|#tH\II$嘔O+@ sL$)#pEr^Nh>[Fe$4@ -@` vTX~)Z 6A' vVP,Pf`+:nqf>y9' 8a0-?I ,JvyA蹚2m[6r~Tb#="k.J{0g+} DU<'+g`PE9Qŏ+iYQ%1E`r`qdʊ4s ͔30((9G%wTD%g\5DF)D@8F5,|3`(|Jk0XԏV`awX܎ܯ$ՙ-*Je1/JX"wZD}j!Y@2"8b=rRDΪ`>"G#r OB $iF- +U32y'YV$VzI g 4I5YNZ vDr:3Z@ -h+b=,P"tXY'pqb cEAIUȊ~l(ʼn-B0ߜZ}$J"q RR(xIFJ"K -%1B=K"DX98> y!j0NdNw:2shD!I*m -:PP]r'd7.8?dܡd 8sZcKI"-<0@d ;Z'"-2&Ueý"GBO`(ˢ"`8,k13[ ²Qk0tv#˦@&h!ʰ5f$:>l׍\K&|_%#k,r:`Y𯗳l,goM2_mbnßSb&jn/vp\yjb&=j5p$D8<:n#L-+>d{f~l 8+ǽE 3ި8B=6|ڢ[4njMOɇ٦]촻u?Z!%ܿ8JĉM%!qŏ^v]`TͶ9o;E RvI}Uߵ~uQ/MU~U~nF_h=;5>Jk;t> -_ѹEÌה^//>C(p5 ^x ߏ_?swZ>_M߮9.u 98 eO~Y\(5*.r̗u|iSQܫჅv"eiPC3dKY\*ozzsWzƻZMa;ʧvrzI_tT9G6|_t BHxrwI{H^P-ٔC-^rgD?z]Qyg҆_BY+A)DdPj0s{0>*`;]lxeN"j'=-07yɡoc Ëg6Ywُ8C3^ԃcfr3i쩰om}ePCgH8kgm)>,uûYN yB^]ԸfzH=~i ƔVЍOÞ^2/l:oACݮ;3(`*G\x-ﲂ0CIϿ6k~Vis 9>Ș|Rޱzv& N5_w{~$dE,U/~v>3Kzhu:ɣnendstream -endobj -1481 0 obj<>/XObject<<>>>>/Annots 102 0 R>>endobj -1482 0 obj<>stream -x[]o[}C<$RJlR>((C!8=gvwf.Imi 8<<ܽ;W?)/~Um6?{9oyV {E;_n󬨪1;mT `G -rRd#˲@60rE1Y\m0WJdž0V=4rZ%e`3lq`:0qEއ}s`}XY4lC=Xc8JH`D(j>TI^X)رcI4cU=rvYUAP) 8γ8Bс+jP٠5m#0 6l` -7R}˵:8\ ss "`C s - sj8Fc2NBP1SPc;0XiZ,Q7hN!r:r*?$ #*Pc,WY1gT `9I.1ضmhxdY쑑 PA>r()ZüX6W--D~IcE\ju,kj ӊ%N8ёAeÇqrE+ei=FTB1غ1X6pi Mz ;3!X"IqAa9 %|RcȪ}: f: 9ڵٍ,CueIccœ -tK\oOyD CUE1!6r!փ* F.Tc*zulôXJHu4 -ԙÂN4Ul;ar⑒lXXaXi+bIXj?aCq0,)hzL;cu`؇i}(7qEmWc]aquX6I:3q"WjH`D"C=X{a.0u;ˊ N'r"%%=Ƃ!Eم3a}V4uDZCX>3ǖM8H @=6qr2A<y:Y8 D5$ BR -EbYT"s3:c.IƆ` Lb) &E\Jznu\.c =ix6ˤ3a0TA.)1Xb`*6aZgNQ68[àP9n!^I1m.`@?cxMʒ(s!]R8-ذ46DXJUQ+K1@pcf*b-`LETcYK> -Ygy0‰=RPP:3S؄g=*Xv̬Yq9 >A8q\7suw % >=*qC= )E= CI<1X)m`aXþ%}}KVEj=F1XXg%<>UcBoP#yd_k<lȅBȰ9]d#'8iѧ<`0&ca cXn1XgEDŦs%̢=5|3%FKxRRNC3q!׵3H:VdAp&nyq"] -( 3 Rpvf3q&<'fJ3)Nl(c!3pN ` C[̏3K99'KgrkqƭA7KVST峪22@KPӣ20*fK)b:qOйOpꧻg4 GߔEx| άM60؈BpRN8\$F&V s~Bp4 8"•'g.2A_1eHUAp0"0ጋ:U9ОƑF9PW DChr{~ yvv)GԼ~]=%?=&2;Z.6fٯQpOvPrӣfoXD$Oǯ0$7j..h3].cDa? mF$<cx8tPb%c(Μv:.oНh5bx:*ms-:2~;#lQѤ 7u9]EqVƽ{%w]wu\w O(5FS8̟1M( q$}[ *~5YWQ2 6LL&Ne_fG&d'[,v\pIJ,Ur._"r}ԲfbcIN7K2`/ιj|7?ǯD!ǛTT`=I^w/8ND#U\~b\ > -`qx=@Mf8觨qIettތf3KhS1; -r(;Ȯ)vń^lVˋ۱_'=U.R4( -^/ءە(z)Ug(vvt#Uhu) $0-KU5>{@/ɃZ<݌UMΖ`CW8yq?dl%H{@s -?,HT uǓy>oyIa>qK`EgLt݋UmhZfQDtJ|l˴>U,;і@0n}+MCh~.*NeH ڳV8U::m嗧zC*?NG!([O8 l>p ;31=Gjުj -^]kc*57H.6p5Sp曆7.+y=2(ɉ%=\7|A!;ym_s3A% hB#jwΊwcp}zA_Njy\տyE%Z/}mr+΀怪r4OwRW#pQ'BoԡLtwco_ћgo߼m-6Lvu2gbxSLN7WuVQŐttko -zU0Omu0|ω|%XB&n8'fqKxP -FHcWڢ⡡w̶u>LNƬuL͝;טmqU6YFS;dv]Cp{ƫp>G `!-Jwukz*m2g*{B*JAUԋ\_O%'JvE-8h=],C3/Q;$G@-\BvbAbm< hVZ'] zxjKߦGTnr}w=Yhk~J5G1⚤br!u =U|ڿwQmw9 -/mB^X ptjb'c#Buj~&ಡV;>Eaa@ {\zlGyyI5̝,ːTjrc(}}θk4uOb(z4·tߎ\710-mr率k Lmk$%l|w<{q/! b"ߕěًu2 oqnF&BWrxOtendstream -endobj -1483 0 obj<>/XObject<<>>>>/Annots 146 0 R>>endobj -1484 0 obj<>stream -x[vG+zYHfs1hdbe2[-"[#N~.PUmtzBϏl-fG <ɚYٟf\fd\f]}^P;ˬo;.|2 cdԔ1Ffm /"-uF8F$62q1d^ʐF2~*f Ѡeg`0EI.L#h-0aq cl&-VdlfaF 4 )deNk[NNM9tR6"aN,$Q+!#Ux92DV ,a]>bkBLZL  j$c9aS^#N!'N!A X4- өJ7ZO'r]'+m f2XldzƆ!ܸ5Ymx6%롮5iFJOiSOTAȠIƢ^׹tT۶Ig /(e neQUV,FLZAU\K,ⶄEGm m% ha 6 -]۫%v*$cN׺e,”8-aFLgtiet#׊c#㕍AE I`Kq Wڠr.KNt-c8gU)**=꥙q }v -OJf#qA j"w% 3jKXLzGԩ 3Ϊ}m;[$C\h7ch;.rphgAQlC'6)c!%, --H,ab3cM. -qdP}S%,Šo$0X#0&<(ۆ)a4 >)b hC )t6 Z(>A_U=ĆnЌPF.G~U31Ş`6tD7Vw XTTذ+jl@tvEѫqѩdN2lmMXb(Gg`g``Dm c ĞEOx_b /\Y`qzV#L._iUGP'71XD,XYg +ng Cy!j21ز,-a x3aLX`X"`5UĈ .v IƲrK, -"ʙ%, $LXHLgG,% E*:cSO)@L V),*Y`D,aV6=qO mxjUjѨoSHdԆqih(च8 -9$ѿmh8JC$7 \2n-d`վCєdxƩ/ZVСMF5[-J!:8UR(]ZhRPsDd)sg$NBz fo4ήkWӫy6ɞ |'ȥՙhvVHL#trU֝#4 ty5՗bU饩 .HZLd 9CJ(J~~t3P+ٰ[h]qYOl>kVoww`\tfֿ ;H$c}6v> 7$yMsu+38S?ھVLRشw#9җٰ[C:-3qd Ίwf~?z=ZQT'y6kw9ߨ֥Pcun_q"E2ڍ7N$|8`]w`˳1Yp׎=fy5]g)i0 55~%5Z,Fu0Td ^]VҨ%2m❼N?%ڪS/ql(* 7:+! R`bs,=:QFfA9? 9*65 :>JCJ\x5lQNgAV%!+OEFqw#bo~}:[j']:7!`|m8֎MGf>ۭ[ iG;i+#׺M~ZO4Eypz..Vf(iI2 ow¢0\m2!n,jw4 ePT0ˏ ]y bJ. $*my/ކ i|~X ٧y~|xCϫf?.ڂ\?y;_]BoRY j $Ovgvߡ/<|S%iw[>Qf77j㗋W ꩀSߝ$(P;GX2ۚ PBy鯱QԃVt4,/~,W.t{ -YE6:td:b- u -W Ʀ. ֓ƥt·D|^svXk.G[<$+5>89{CEJY)}kMxʧIn>ɾ[?aeχntduw:|?X,dS*endstream -endobj -1485 0 obj<>/XObject<<>>>>/Annots 189 0 R>>endobj -1486 0 obj<>stream -x[r }WCp=SD)Kňt)U< Krm.)fv)ɒvR3 43,I,i򤨓Y:I藤.;w$ >x"I8I[O*9H2lYc^$y l Y٤t3{ ;u`z sQ -C`VA(?I`5aXd0:;c2T;d۔Ca2{,s ``\P]IƊ)XQXƊ)ؠC٢3a2EMg0E)KqUu)(h\E8KFNe`vv`:a肙Hmf%RyL(aS& #@&rqBմ,s,Yw[2pYҴJ쑅`_eeڪ6ׯشk)s=Ez[jli7OyӔeD20 xr.VAzAQcUF.dp!΄z 6oc=[W :`^*~iJױz?2UT!Q3J#))HN8; !E"EX7BD,I\1 ^ၸ-F2ڜ$C@2KHlCMqhlnRNJMP%bRfq5"}ml K=%Oư_m!~)İH8z>]6HUW{/CQMyf;[(P -=w8\ur9rR 1\X8PC;G:8+qlZ"U SێNp>!I^M{X wQ3ȭF|ҭtC)5Zya/M(T'G|v0{[ip '}Ai\!=?Ӣn ?@uE~ -j3;@jA*>-\̶Qip9M5EĊVCpHᘌB^Fh7sJ 0D1Z1jp5ww>( ů`hEg+3`%O|?{sFX5 -|x5Q!|S$y`WeƩjuىP35y챎f'ɋww= 2ԜCyH+y޺E>&ı~eS垧>z -X%m%ƌdsoYc>刺-ێ!;u&*垒i79fqŹMXkC~rmϡnɋ9:^)A9cԍ<*i3l.W4Aj2PB:[vR`^›ΣnmОE8QB&*2;p >/G25QU۟ -.xǺJ9>Ġ9/-WO@'n &D&$<ěV -Z9Vf#IVϏaW@aGAI_COt R]3.N_??M׫gmrh Ԭhx|f?{;endstream -endobj -1487 0 obj<>/XObject<<>>>>/Annots 234 0 R>>endobj -1488 0 obj<>stream -x[Ms9W1{:m9&I^RDR{ayH-9*v*$A %uU2YHG)IRcHy0O._HrTE2G \$.O`k7*LSIA[Ր5lYjӳ`zTZ`,[=cX0/G LX6 -ȄLCNe1< EIi!ch 6\SМ)g ,lUӐڴ,V9&/y@C6`RaYVT5ĉIKDbҰIErMDM8 Ub U5lY5,`eY!p80($lJZL"-R,iF[^s..$yLvhFc [CaX֥ P] -'") + -D!sh Ұ$ Ćs0{JZL#7`k -?>` m=äDRfCCh`v%I q@Iz i#i1YF4`{`y#mYͼ)yR#\IѭذmGVRIA=F$[34(-(` yudE$@;gEg33z륤Ť'Eb`#m,ϳ>Рd҆Loi1 ȸ5,63hd 7 h[">#e`Ml[v2ѢP@RI6kXb!vl1ؚgNYEgȧ*^\!lB`# #ӀgV&$Z*8>re")ʄaYeYx1,+y%ejg 2SHZ ; n-[`UEn QȲ ^=WE *9^9ѩ(`Y"h,k0 gˊ)1(g H\4ϑ3C"Gb`Ȋ@Mh @M0Sbm{ CM W}f9 B;!3 -ƈYM#jN55S!0n9I_3%-F=`p*̋A&}S82$"qҐG< >@ y *aGõ$7Ćs36[Al9nsIE)m`s %y?: oi1XlaZ gG +& &#~hmGАAl9(VȡHZ~eUze"P$2[`*r$:V<ã*I|0&"F 9dP]+M7u~-g7no&~Ƀ@q:-#_ +J~񰦲jp,O"`J v=[SƅH[5-X.Ҫa9dq[) J^7va igݾs~+t9T"*qܬv<}-7 -`Z?Je]ES_7fN$f,EE f+FU Up*~Z(~G"NZ'.[/p~MTcuT}W_d+uPn<#vkgl O]T[f gZṂ4tFdA?)ȃ(ԕf&~'8 [=&~17ϴQĖ0@ %v? !æ@'.g?Fu?_LU3' jq\'[q/٤ ;@ӷ2Kɟq)BOxbԙ)*noylqX.9hǟ%uJI*!8)}ѭs LXL^;QVTQCա O jt\oJDG>5nofە617 {3U!й -48X>/?܋pxk?8g:g;n :8(pE~Ȣ;Z?^X^%_olJr11.yyvj CߪyaXœ9o78u'g:|cwggQҜ8ieF奓\pIas LuKOqۢA [9S N+*i=\|*DP˅GlV+;-s&~k+;eH\+ٌMљ1Fg5"3)CHPcQc'N"Hdy*|RC\df68TDF_ipKUUy#lQ;W &SieqDEu1.D:XjzĉtOz[~vs٘>ɰfvy'6&~Jҏ❦M؟>\ -3{l;V aw'%~ͿVV:OI*|Uogzp.3q-"7CWڊn68ǒ^Qp5W>a ehg_lWq;ು?}~:,zijҸQ(2~A5@" &%ICREc| ^{=ftB67oZ_EUznd"vsR8(*^.[S5^ iאT"C ܩ?P3O(#h`#J)GHNO䩼Ul?ش#f\ZfE C;kg7_ww1K1BP̞k ]w5^+k+zXO%Gx v99oyq߇_?_s:y尧33QR^Ӧ{$Mj.'*l l23Ƀ+R&(9 :}gIA>˄uȿ-\/TzSMTbgB|4IQ}W j?yOtv9.\ ytL?d^]bendstream -endobj -1489 0 obj<>/XObject<<>>>>/Annots 277 0 R>>endobj -1490 0 obj<>stream -x[MsW!UBj0sJiثGL9ރ/#rdq#re{@PtB*IՖ֓̐U&8i-\]Z Q3r)K3 rg1rI6!a@ Ɗ˷$ S>v3pt>rR \? Y`F%Ehm@zL>h;ayrb0+i1XtY%sp2r&$dfC@C8pvaK"-&i=5,Nc[r%IJ=E9萃 C?,&bUIL4Q2O;%ڱy~^ i T6NGa#FF9Hq~TII"4N#$UV.FBppCfZN!<:_vWSg'#@p0cg 8xn 8L*8)pe!E*)RJb;a,?6,DLhXψa#e`0rlЎ-`XذX2r*dž _0J -B+iy* 03:0r -SN!Sm)|O!3 Kql''ɼy"ixVXAe)ɰ\)$5B2,N!RD2>aHƣS @LɌ N?a2m;9f,(2ÉǕYj2 D9r -xHáyHƣB2m[)$Q5+r2.kiRN!&Cj p3` Mtcu dirq$+ºH.\ӋOlXoohmQo6ɨӳvo7K@,)}CE,|uˎoa8Ų2wwn0rutEU+|w} aj"en/jIcd4IUt*:꾲JuGrZ>>`^Or/'}:-j. ?77kNX龐JaSթ-?>׋WS3jv3Q(F`,C\rBbG2[9JӬYc;ޯk!5Rv69\?mU6٦^;Y\w/7-M-d 72ދlypu8wFD9y6F릢uܶ?,׋ {*Tm-o}(dMPͲA9x=~K49HdtLzL7QqW?-= b!u8% 躯wF\T1C4"d=U^tak\Pv3\˔!-T]e$+ʬ]_%vd`!u+ v ɯ˞S]ʡfy)lQQbú [׷njInf(bdl7ibP7V;0fXϷaM EBh;;o pJ;^k9V&]/j{ -@ Q{6v٠(uYa7jK86WTPݲJ؈Bh܆Ɛy_>bps AEzkS.o=-Hbs8-5ȍS bnwL{i-B0fT1xbnRv~]/%H -Evg{p^>\wLQyg® Q1J NGN4?%BzOUȖǚl.9QvIu6#xi7yk@e6?ؾ/ic_/_tCG=:|+֌Gb?0e1 v˛6&BIߠuR=oJ5ՙhPk1;{CJi_hƠ -2UGzJ4;lZ7c%vҲwgD/~Y:6~ׯ.79aa̩c!+zoEfo԰Ooz2GqF kS9wxLܧR6jSݗy+v3!\e{e\BV2lfwtsvbbonnNpʚ#O+gB$=_uskRcdsU4d"YRѭsoA->]ro>> M崱*KFpS˄=6Φg}Mpڰ\Y('9^ZӒ?LPTb'ů3FD %>\pQo;ofsC3'X-S,R6%j}+/mAlN>_ r2Ճh_OD[( -]l+Ip j2l?(k_W?'/JۿzgPZ{vwп!X&χ -9(Sl#_Ӗ|^x'hendstream -endobj -1491 0 obj<>/XObject<<>>>>/Annots 319 0 R>>endobj -1492 0 obj<>stream -x[KsGW-كy?er"LSC1!tZ$YNM4@>˒fI'EVg$Г.;w$ `\9JjR;Uҥq,&#=94`z$c]7&QE!PU@r4tMaYKbYmj2G٪yY%mI MZslYd0؎=l^%yVM -7cuFX1'& \MR+1ӌYV$ߍul&a(zLdlNђD.+25cR0&M -KcS)pYKC%lY(l`yY0T(،7mT -ĬcR.qÌ|=VCIJ;(N@ -Nt#=&KD",8E FI!6ௌulM0!Km`;RCǵ)Bx "N4A+u`JƊkQ47W ̵CB ) " Jz 2aR0leyree)7ZNCےű -(XaKJ6I박D.K1&E,z,*B-"ɍu.Ia1XDaYVXzV\4E\8prE(6FYQE k4%eV#=[Pqäe: 1%K. d@J8.Y%%=ؒCXvʤQ[M8?pClC}cK6V̉A Ru"Uc~^ّ$mЖ-rŒV$ĵ8#G7m ^2[0p4Ah:C(+^Nn߆ +b&ȜN_d= }~xlعŗuB47+]0fX>qchq/8Yzmqѭ0I4mhl$4lKT+B|W~`Nْ7|_,5X6n p~cz'ju;NȲ&䟺⧮=hCUQ4MNdR.b&9Y9$FcgH/4op؃8m>  dauLϑzJWo~}b3/޻f-ejM8x3[ޠ؈VN:-=a qlaW0^e_p;f:_WYϽS3¡ {fvaMJ><&Կ.uEt-vv,sꖺɰbJ% mٳGۑbAj3[COPbW"'Sg=P܇]www>N'g^Y%áǹAOx~w3˦)i^eCӎ֛%3nqԥSAlѱgYq#~eP4pӸz3W(|.jn\7BpţHs؍ |N 2W>^Ϩzw)8ҍzaS h&~oRzI:Z.xќIjQ7ޑ5yyĴ-~)視{DuP9hadjf؈Yh/hc}m1}].t=] --*.`n9 G>h8ǧQkܺK  ȐN]sOUFEΝyie+d|92AZ :?ie|8Zq6! 8ia -5uķG!'Σ G etB ed'ۓ(,TfӤuo=*:{vdjXpX}c|ES?iG?%~_0\-UxI;z~ ~}yvendstream -endobj -1493 0 obj<>/XObject<<>>>>>>endobj -1494 0 obj<>stream -xA0 g;Gz3Ѹ?@H$"oN^LӤ{k_AR s"MpA[XlDŽf i+A/GBhrPC8$yײm'R?Us跡F.]Ƃ jq?xyƜ;endstream -endobj -1495 0 obj<>/XObject<<>>>>/Annots 362 0 R>>endobj -1496 0 obj<>stream -x}YrH+2|9‚rˌdf,RX,"=*rO$ M(+O|'_?AM(O|4Ŗ itvYN2 l &Gj 6w?`gSoX'8" IAXaVŎU|sHª5k"E< VaH(LY+H_HA"0hw`u`g1_XO(YY{XUK0FYq7BI{9wG6d* Pa/$ -ŵfQ@1*i&#^܎6C eZ0 k0sVvwd5fgx* ⍬%E uMBNx`g؊U؏3j 6 -0Oۺk$H¬0BFlcL8UyS*aNQ%3ii 6)~jGRc* kR -jWcU3+±x:Gv;4gR’QokW$ )*̊yf+VaȇUކ<1XEGYk2߶(H܌^>XrdC~b):XYQCiqEV"iVaVqNœw愜* 뜬`FVB -mtyX$1BK 蒩f+SZŨ'F655``c;g)NJEB9e7=9rL2:'* Ocx 8u8m(9=u(r^!մHUJ:KSu=4=z5iztM]ʇMv^7M=hw֥ҴL)f ?kEiZi#ʣ%/kߘ - &{:wp`(Y}&Xu?_^^=f{[ŢwWwKƣ¤@C/?LӼkTI5|2Ei @#$5#ZHl7l*Ӥ="&G`7ߏ =@w]$Pʫ9/y$oɌaurRxY#aT,*nȼH]uF?>$8矰ftUc]uIN,xUۡ8%¬[Yp)_S"K:[\^^K2rx ޘ)ɷ}EpT!n Wؠ3*oW/ʊ1;/94uAqu@-ϫ/q_tyJ[&=xޠaSKWubϳgmK~U.e}Z۬oyX _y =d;}5e*̋hR̬h2Q1U4 -?^-R;X]zXWv4@1yt.8?k2C8 =WE/St9ʀupMiM :x2^PrW7]}ضt -!Ud-\Ҷ}YwM)9>hD8NGsuydpsupԣŗ#b[`zE]os[G 8F1n;)7n`v nD-EZs|ݚ. -ތa(»nMpUxh=3{;7(FF߂'ƑM%)?!">[ƼQ3=4ybk4>osW1.C(.L->/XObject<<>>>>/Annots 414 0 R>>endobj -1498 0 obj<>stream -x[o+S>ex+P4*bYoňISe8oC -5>闋QQdVۋ`O?qX a aF8MP ; f -]m\dNaӾm=aѫ++#ѫ=acC5"d3G1T[6-TSSY;FDdfj#Z3r`3ji gYz+GŌ@tTX8ra 2eYfؼͬ`fV a3¢hdgV5b26&}V0,!YV%hcN FF-1fȖXO®6agșL)*&`dV5Ԋ*aaNlQXΚd67oR ˙U[9T ;[n2+v: -]^1 p,괲bKY -]{V)&㢷bX)fm(FŤkqQRL]caYl9})#$0u -V0,mX(+@ mʲ-6Il) &`X\++8@gRC5c0X8vLߺ^848*6w? \X^c4bfV/vE#udm0u&cO -=aV -q(,XfLHUlI/lN>V6,Vly9&IP16sa.l v#ύ`D o - -M,U JD"a63M&%>M̬drfG٣ULl4$Xĺ(y!"7Y0F̱Fyql;#\t1V0s(a$F (VXL`.lSY!+QmSpj?c Tf[Ʀ6ͨEj'Bmo,Eo3e -"l\5laW|'8 -2$罟9XCtɌkpOa BYS^Y0YI3(M*#،6V0,QOV5]lV03 BYaC SZ_(:1,{ -FeV0bB +IV1m2򭊅GNgl&v'`؉ \ar -6H+ٕ*Ű1IV1.(C/k-L3NL@L-̤D238{ԛ#WZ +"aHX;qf[$E \-?rh"2#l=aڰ҉幁PdV0 ˬ`XnB-Ÿ*AGXL١ -8N,łQl[X%A#*e“ -ލClY! -+0铸GQqȷaCfV1ok -e3`Xo `+ZU V6+e[`nNX)z)ud_mogRٔM3g`rV3$غĎ -%$-!`XLYs{Yđ\dbXz8Hq|] ie{m8aAѳ*:*GXؑsaO'̤bˏ]5 ˀ״b'V1,GqYQoeŰTbˏgZ9ƉG P Nɬ`XFkOV9dǩbX09yP"{U" &X6z]Y1,=JfYVpvl vp7NKG*1_lmY[`+VMX rV}UsUIY \cKVӘǠr(77,$]}m/ē -E~Y"—{_HKK{ۺ! <$ QmX{qmZs9qr6<-~&A#eh򡺯W5?Y:8@x^/J -.6 6$+BOlFO,8q)qMhdR:xmE| 5=u_mݽXWWW鹫] 2U/w ꮫ{ ֫7]O3_VURSz`b>yL*즥i-ݶ :˨夤몟 ~ĽTV-iIbo|piG{<MmE-T 1|ww1endstream -endobj -1499 0 obj<>/XObject<<>>>>/Annots 466 0 R>>endobj -1500 0 obj<>stream -x}YMWH+궳diXzx;4ؽU4m[^I)Ҙ7p("?*$sE.], B2sHe n]%A<[Y ve ;aqs:N#8-s6+ @@**h(O"(?25 &$#."J&d2AlrULǢ޳ςuqf G-[mg {AZ9 I -p f@9JoXU2l)yĔ k0Lm ޺$&V%`7$ ,f6c`̘(d $i1XqH9l4rck1Ù3ɳ`33 `SƲZLd1 %\Ι OF& -nIeen(qZ`#6dGiHX86g +gqertHLcXY"UhW=ָRAS,$)tb:B:"5`g|VyGC&)1X5,Zk|vP q VGgS1ǯa FwYΧ ]6Sg4+':l :j;rD#FԳ-g`y[)YZx!ȈYY>pY9KVMq)5$cUUS\G9.#A07ϪF$Ș(;Y «\'NZӒR0ZZy#A|cpaxCpsˉ֓åq .c(81OOyN799޷D㞓ˑvg raV 0g;Ap()&56COs\˧-W $ r7}[-fUߗ\>,|0 U]>Ȟ[gmK{v~ߴ݃Qnv}۬nvW |msx~qͺ:ZwR;j@BU[Vm]U؎moz$kw>bs>VIOeXUvߚVm}fnޭ$pjS1k\\({7dcƲ5ͮsUVUq%u)z;`2;_(c׷=21#^o\k6=д?N*Wr)%#e{x -)iqGw4 nQᇽ+ׅC[CZ<< G"`xw/w߿!{jvuw{q6DZwݴ+&ZM e~Nfy&M_9,T^+kMQ]BA \(Q2b ݃l_55N@MiGI`WvkYoDOqR2VG{׻ݻ㻗[ h-ǜIYxle[wG͢Yz~gNy?X9Jendstream -endobj -1501 0 obj<>/XObject<<>>>>/Annots 506 0 R>>endobj -1502 0 obj<>stream -x}XnF}WCy<$ƍE[L(R%)'%C-9>s٥YyGOALa:.~3vKq灼sմ/A -bRcaxU,"*| w)ʜغNl:ŖU=aְ exb ('N1o R'0%[Vai0uSnЬkBmaĤ JaO$ 376G VQad- AU* 6TH60o5ADLP0R404␭n~bnˁIvLQG lBw<<1dI?15$HU85z< }dĀ  -C5J9^*g2fV)OT4 K$TS"%Ԙ)sUDh厎];!LU3c^+N9=V]-"+tp+iW6?Xjp S8u~"+TE+`/dP@(ovt2G9ƥM:vx,]<ݐo$E`sçŮN>w8~ǽ-c{TwöC NЎcj~/a_vtwfME] sСyIi$vQU<NT5[OmGק=w}Eׯ.e\a+REޘw7Z*ñKZ߼a39{SeߏS<\ty-u{bNhDTQE4q8gsnOU-G VMUf&y7̾۝n#oOOӌY8Jsmٔ]^S< $2Du\D(^Kn-ԝw/Z~,բC)U?3p|OeoNRSU5g -s^txi/Te>k`8pBddXf]^Hr!4_@Do՟!:3endstream -endobj -1503 0 obj<>/XObject<<>>>>>>endobj -1504 0 obj<>stream -x+2T0BCs#c3\..}7K#4BHP$YSO=5/(1G!3$1''$3?O3$ BMr = !)f \CT&lendstream -endobj -1505 0 obj<>/XObject<<>>>>/Annots 551 0 R>>endobj -1506 0 obj<>stream -xYr}WtKU+ Re;dJy$m}g/ӷi@ebIg/&?GLh"q4V֒Ql8k3;%3E 38΢Z vG Nh*yvAN jՓQfY.#l`4,xPEj1lB="D0"5szX.& S`Qs2ɏdY'$NJh'E_ dB=i1X`` $)Y&#,;xYwؘi8VA8IL=i12h: FQN5N.41sBQ@w L+Y=,jf~=TmxEg/$ӯVU/d6CQ5\_Q_;CH>=0 UgOM?9:*bI 'նR]_\J#Yu/^Eui/ew>s*`)QpG5<_)mMBn>-'OJI!?Q嗦 -?> -ym6}};}9ihJ8ц޵oФAćmgP_ھ)=z=-?u~}tYg47UkE^+kYC)WMu[,Q)|i%,fo?.O!Jpn_ʟ?]r|X2DHbsBH>$sG>uw*vttuOnx( 2_] E3GĶv&/^N"Pz c,?\fݽK4msY:r,۸"qMOm02$)sGib3!)G2tOp>_WӦIvrퟫwopNrٵ}jF@RoSgab̿gZd>gt7cZ]- CW=Yq--<84-p,w(7ő4O:~xY~;O3>>/XObject<<>>>>/Annots 553 0 R>>endobj -1508 0 obj<>stream -x=n0 ysc aPUk+Jy &˖>[>>/XObject<<>>>>/Annots 556 0 R>>endobj -1510 0 obj<>stream -xV]OF}ϯڗ 8 Iԇ6jZT;w&;*+$sϹg^HC i67 fKlt8 -TP8< f{q:lgoNN& FR5d6 &Q0:<8_Wg42E?ٜkji( GZӢseBKik|}h|I? zB̜E$°͂)R-U"^LZҩw fUM"A"/4*~VeBC^(Q6*jjˀ+ Gvdu!9N±vJ< (iMJWpPK6b(tV7TJź\]w] WcbyLJkPTѕQFezc?qLa0 -B~gQ<Rlk6e<40o+ cU@8moAo}F=h:y#WGqzxcQTאLÂFb2ODѥdK^0U2#BLַсLW$LFF'nl؉TĀx#v`(f B xNơ' CݸD+\px;K8[I#1F_<XO8D22[F6vL6R+Y-x҆ia3&VJZ8 a2f_W*Ø ;h3֓=o73n]%fQ^cwn"bKA 5WkN:x:]C+6覢/(zg~#lk+ya%ޙ%cFM}yՎ#$F $іW±q%xBXi9nw4 :([id4kS%H;〞7eʮ:Owꤊ%*w/nKݍj&N"qCe.)?:$ ! ȟusc,aġ}$st^vW CPNI}͕Qմ̾wET7lk+TeKd*=B4pkۃNJߑ aWWA@D.$"~qYBaECvrb R vm)dyȉ_^<-̙W=. vFS7)Ӣ -eҦX$Gd]"W-_C.XbTnWT*“ciJ{OW}i! -ʵGSro 3.Zc9i-DW">g'w ctϩHd`jtPo>&s/9Cܯ3kpendstream -endobj -1511 0 obj<>/XObject<<>>>>>>endobj -1512 0 obj<>stream -xVko6_qWl IJe~Àl]}m >mH\Rrl'%Hk}{ιz)F4RV] !MgdD G6`X3qL;Hd~~bp34٧-sBᐖY܉#hZ؊V(MBjڛB譤/CIf&^Nb~vd_^>3)Gvr_ 'sRK$_O,kBnmZTmIOkIARK(x#e:HZ^=To.ix~PKjMs)Qf%x*6RfZJo/yQBr8%16TLc36 -]*E"@H_0"K`B@윴jIyBW`PLqj1L]LƱnt/t3>o|Тo00&\:tȃb3Al(tFH - {伉ӻ<-3UEi^vaۛJd *4jjTpnglNN9*ᢣ*K&[fi<GNȈ IFZ=y^|頂ơvz"LLI`  T\c}g} -)Dg]!@pWi+!S㺙?kN]Nn􏞻PK%=eP:3bhx?jCH a̜9]M` -=qd8RnzUvRR)d286ɕÞn5,[K8\GfpQY9/'mO7o=Lt=9e" d];2b Wݟ%򼣰=˨ E% Z<à|(`I~'rݭ^.$jH_k5_z>e08>_r_+6x}գSɺ(=ZcfSxty pB!(#d]吹wH`vXS_zۀJ! =+&l__ͺ -R4ɑR_x9  W`L(5א -{8W-=W.#'zRQnqc?n7O.n/} -*x"qltInK>KD%Q -Ϩ2)W!/7juOwOn%d$ϤVrg秪U:*h`:{|L".?_gkEdM(P\c{?.xgNfd6}_]ᾰ`endstream -endobj -1513 0 obj<>/XObject<<>>>>>>endobj -1514 0 obj<>stream -xW]o6}ϯKS Vbdzݐ4 `]ƛ1(@ITZ"UsIqn%ޏs9z0S|Bg3ʪfdJ9>O#dg''7>E$9-rBSZdGo^V?o/_8}>N.~řE~J*k7~E+geM6ZTkcJBe2Bd'ՍҎ -UJNBNcUBRpLCV*Iզq4F l'k趠ZKFp4qn2Ofb-5mMKzX;95rqGZN6tă6VY_p>>/0UTY6sMΎ3L9+JH;ղikZlH$z{y-x%eBJT"mLZ[eADYʜ$ukZnd:Ӕyrm UbSI%I'Y+5T7&-e6)?@ 3mnrД -mQ w,w7Ճ.z-Y9į".>q{9HKv)1$:%ː - >="ҲAC܀Nc43kZyʌڂhKHACJK72ND?Nt`3U 7/nw,^T6zn8c!h "y/=26l& y ]|xG291H joP=eT8ae&0ac"w $/[leT3gg2y r:02BlaH-пٹylX &tliz1N愠T>CƉE#ze^;bHeP2H|K -R쭰*B ^#~4Yv*6qC(#T~Ώ ,,੩+z8\ aȴ+WGpk[+8 -~Ž dN (i6K1hƘ-ʄJ!J^_ 1J)xPȞ/Ez2\Ϗ|! -9'&lrϳ1 YPuwtqn4Ŷ5/x.'bߌCmU,/-XF~b,R,..1(AP9R=Fxދx<!iԘ:|9IvLf&~e0qz[s`ތGB^{G ,]c@ &*Ls -z?1"ǻ0Nr^A 6vq-[>@ٷ79a&ۏW+3@kp Z$ Z![s~PОyD U{so?5y,rLɳԯXQVƯ[fҒj -Q;Y 6zJl°O|;ȶG?2¤j*q*g /NNc17r.U&TShWw/b޻_6Z+q?kGR_LAB?\YwP>걵{]W Ķc2{rs/~ll_KzF7t>Mr<0oMްendstream -endobj -1515 0 obj<>/XObject<<>>>>>>endobj -1516 0 obj<>stream -x]R]o0}WePH,D%[ire16".T|;#[cBvAFH(\#3^M}8F0$3T5x_zS8 ϧD^JcgL'U}0 q{l1ʼ8i$Yfi?4>U= .Vendstream -endobj -1517 0 obj<>/XObject<<>>>>>>endobj -1518 0 obj<>stream -xWMo8W zi 4Nqvovئڋ\z%bCZoHJ/ @"͛ѿgsϜV >]ǫZެN.ϖ緛hqIL]nhS\IS% зVYin t+%/ɺ罳m3۷|nIyry-¦RJ[4|e[]V"~Q2TX5EPAj+LI8 !)TH[@ ]S9UFKYltD1KOle;<.m-aMHo%{Vκ_'mLAk2kDYJl>|_d#+I+B6G:)<vY>CPeMOʔ1>0Z0 -alTdCeWBWb6g{d/T[ͮ9;|$ RsqH8 -[Tz-g[m)OJ>=Iٱ췱: -Nmۆw|U8oQBGl-s%K =˃r6؎ɏiAƉ;0P7ِ!k8Y ̸ -Zc8>$8uHC\5C|MqW5؝=AB_A z5za,IF87+v-CMs -g ->zQb1(jt =̺ sA8Z}d#WX͜B+$fL)kK "9|OJbE D2SwYTjiEm$S1BHYR/τ#Ó -$?%2HE9kwYT]]8Ñ@Ɖ[OEaL"ƀA꘏PcєarEDbfHƣmrZ{ gG8sPh [nuP=z-P$&q44v - ;N5u*%d!#x2HV<V?w<*Pn+NaZ j>('Y)Kfch1F1T}=w431#;Kaxe6DG+&1c ʀ rDtrR}t#'b* JHH lfGahM)Lq Ad x7EgVfJ]#1c=ո~1EK!o>cPP&B_hи,Be -[`~*q3ML $+Cm_"(-2yK/ TBw0@ }̤.,`9J`Mh1͢񝐚UXEo.kR#Pڿ%_H#Xs-f #?NC;1j),Nk`nH5Nj%xvTbEKbEaB"e0_Ʋ5F8VC\T=t$4i_((_!Qd✿~E%3 )XX3vDl th^ i׋>T>j9[]<~9v(endstream -endobj -1519 0 obj<>/XObject<<>>>>>>endobj -1520 0 obj<>stream -xWOH_1Y$$)}]{BWפB6&b僚6iY+E -xAL~bi48DDHi<N*F'|qpSZ`k2iD-á -7UaKEg$ m*;Z|1Űé|~Mb)kVHCKEW)V%zH_!2%<\zN=YCCx$بrk=.5Y PB AߙR~gJڟFMv ᓚ;IEJ*kGBo?/u)&:NIi{Ii0ƅR}<Ï69]Jй[]|"Ny>tVG5zUcrkuw`Jn(L"޶[ɶ -Ó -h`I!=i(3Rh#A7{uxc%Z ^SrЁ2ehYsLj^¡^VQjzAnC -݊>xPנK=q9G-AvSjk$k_;[mꢃ -~D+ي!h%e|[9*di,b(XrkYS`-^ pHCj c󊡠PÑZbS6"5r5NLYMW3BM:n*/QLlFB0H!o|.~:h~+!syA!OJl:"ZrgtX -PjUO{5v1nG:t?Ϣ) 46I xnIAGZм.2A^g( (w -gҫmlrQf_`]id0wz$ûrQ -aya ?p:a>39k >e"BIUFCV$8A޾h, *cX`.M!\#a%4|pa䅼LBDm6}f{Âzuaoch=pi[gi ###8NB7>ɤ\uK!n t;D= Vw?^<%N%')ƪkqfvB"xKߦ0Fw|2} e$1y *z{MWi#ڀұ {a;f#L"1cř]'gM1a|s^L#~Ob:c6~q3#Wendstream -endobj -1521 0 obj<>/XObject<<>>>>>>endobj -1522 0 obj<>stream -xXSF_/!U X~! sT{k$vHｖBl0f_~vfr?39?3)PO/98G -Vd^ŹKC=HaZ|ZheKLl46|MplɕmSdmڄ^j\֦Ͽ8;]:5QO(hU>Wbz@ɾl/Ru2'qm)>Ƒ@^4`:|fZИ9Sn ɕ(g_}ńLܢC],}LTFlhӁ]dL3C5y 3ؐGa5 ]XyT đ5>M[,o]7b&(S6QX.2vi^˗741|yVK[HC-(h6wQ`%)\43CAD pjR[}[er ]Bo%7w?MxW TK +A~qm n.X7$LM{HZq!A,N8DlU^TY -}LL4%lEU6nzQ˭E>=p~¨:5EwnFҠK^߁j)rz> -f `P -j{_c6rUxak1P)J@ =xŻAH^Q׋VVYB([I6+Zփ0+a'yB,@2+MAUTqZsFy0Mn_eJHڵQbZXwM TEs|F"mc?8+w5 Oo:xDІ񾫥#/E7sR9p'+0JtK(N0u+B$%ѸS՞ дMBZvĴH>Ka-~|ҏ4i Tη>o}ȣJv|7-0/ym -nj~|^C{ J5yBڨi}P0io>=--<NeCL:ik1`9ɾ1UkSiKgEp0~ _`X MZi,C%+(4g&v.mhǁ[{R:"x]oq ;QiM ArF*]THD즋` {.;^awKpإwBH5V_$ VJ -&~J6I4:/GcP7:D.CؖԔ=,: F:r^jr߼dF`OKZ6 &4ͼq$^x'X6Fr!x{(h/ ~%m7tFBPGۺQyM~eյ:lEǪ|w!Jިd}sJkɾ9#q!"FL◛¶hw}sx8v'{r= GITAF$S_6p27{z#q黺d4~߉_RL|]Ю:ļO,F 8$^@U4Y7XpO]{ ӕZ_dK <O]ndj<@-ϹK$`xâ0;ű0n>oEǝ^WM^?wGRu99?.0asvJW;/.endstream -endobj -1523 0 obj<>/XObject<<>>>>>>endobj -1524 0 obj<>stream -xUmO0_qSh!)HhH@4MBBn4~wN eMZۤi{^AF)M/ BH4!ge8T~!> υӼ7dLփ^}3"1k4k-0ųAgN`w8^1+*dCtRvPE o$qU(#6,Eɉ߃3&^(pr7;xe$8>֭[%Uoa)0U3= o{ms)Յw}׻wRbt)5Ŏw<bUxzn ?DV~V'+xC$b~qNSǺيrpxn͚U%Y:~3MUy`neReAf+P+]ՆxG$Yp?=:=r3]$bg2BIY:F)!彯߉/9endstream -endobj -1525 0 obj<>/XObject<>>>>>endobj -1526 0 obj<>stream -xWn8}W pjE/liBKŵD*$WgHɱU/(93gΌ.&4ƿ -4[PZ]1ͧdA%~OJ/hL8$7xGpdA }}G1s^,oh$XKK;U:7^Mb#|'ؘ,,$Y{k&+&tqhtfRI93K4yS-92ψWLATAД2'oZJm[{& NV$&5U-,劼 -rX!'5D}ٜ.9{=!X{ǥ3W(K<"t,8՚ػt?ޜ;B$K R1YZ'? WeIFm\X92e0>$3F9FJY*mK -ORd6 -E|i#Q"{tRҙX S_Oi/C<6O9 -賁B<ܹCTr_HVL\d (SyS3I5Bi#Ai~dM ܔ\h%Z*[SB֥Ic, 宑. -AC`ا}}ִ[%Ӫ҉4O+SHwW }4U**nhq3p#k} hq ъ{j#=;3iS`1{1 Jt}Ӱf{ϯo{VTb=V &fU^{Z2mU0QnPsAhzαn{Z=50\+r - -u/Qa( bcJYGщ] Ig[+8KֵO4qP:F47"9᮷8O}k8HXdz}Ea{Zy c 3&2tFϢdD7SnסB?VItwW(/Gc ȤU,XL yi0rkpK{ -0*R»8Yж,K"Mڳ'`cE2r_hH>pv1m /DCr>{LYHk㜂D$\A A;DC*3cgs -(#e&U{*1S4ۂقx0NxdfVUVYlXCͱ,?*uͰa -*\4T$#ѡqΆ0OT0ˮoċc@U5~9S6a3G wE fWG;سJg~Y?^jx,Jd=TŬh̐ҝJq&(F5S"8YMHYid2On}0FB=rG8ajjД7hT0C7Ԕ-X(aEV~Vh^=畖u(ҟX=Zݯuu5&$#;|U7f;UpT - @am䯕>E2^贃3+ב[|o«,Yt5_|Of t' aqiX_|% endstream -endobj -1527 0 obj<>/XObject<<>>>>>>endobj -1528 0 obj<>stream -xW]S6}Wܷ/7BLXN-'Zd˕d v:0Ėt?9W`H i6` h<G#g<Ÿdp<Gi'p|L˔i0e<::ӟNq`@4LynJ-fFY4_nRUE -mš6keW/wd]`[[`|?zq/5מGUCіHl$ 8vH@)om@w(PXKZ5h5 MjvWq ;BIR:3yT_.em`$NJb_[:n1=2o[Y[OzFR;["NW \stц쾰K `M4~#0 |K6g{JM"5* -?,|p{lR +WV}0672-}m}ny;o?;|LI4ӫO|$UI.-lp&l:Ǘbyendstream -endobj -1529 0 obj<>/XObject<<>>>>>>endobj -1530 0 obj<>stream -xV]oF|X-ZdEn6 -ȓy1uwv%I`Hُ/'9M✦s*6'lBg =ǯ״Y6C>f^/O\Pr -KBɄ(lV[®|*(V -U+SRtTTk@'cK tF2niC]-08F^itA!8(\zQkQҟFZ{2kj]C -cIY6" ^f]9Aԥ#Xr':Q55}n*[M%bPq%\e  Cӱ%}xz,.H Uh4rTa[XGxǝvCQnNݲ0P"0dG>ؽVH? 0ϳOd?H{xVh;JH*iՖ y]t -XL.+1 Jb4{zv\Sťk1]u*G, IDJյ @ԙv4v>J (}hwL gF,:DfN)lua-w {c6`fӋO:xgn\\ RXOrnl **]<N{EJ: d(QAr:<#.TY CvP#wޢ؈3AB6 -rtrl3~}3Н?|GP1)fX7o@M2l& {k(lVvAUSmEƚhPԶWcjOgiOYF5xwĜ~_ Fkh To#J#6#ZCtk\V -zj)8sp6233As] Z}gg зPuyʋ$Oi&(&NyhF/8%<hsjh y04mRe +]KUw|z҇n/06D$.JW?be?I%jq$N<3zwN 4WP( -]!CH -KX<9` 4yKqp VȏX^YkntqX@9{kjG+B)Z{+6bp|*l$vbt%êad%k_TYR9uǢᔶn?`k\iXyy治 9n)4>z.\QpJ8u4`\qh,[/__˓N.!,endstream -endobj -1531 0 obj<>/XObject<<>>>>/Annots 571 0 R>>endobj -1532 0 obj<>stream -xXn+ -ތ H M<1$psڴȦct7T7)r2@ S9zbZi2E#|r"|9FT8DSNW,8ZbuO:EsOQ4nxXPAx6q|أY4ix/MX.{#)͒lΗ.cO3.bj3V#9 >MFK?N _\ R&̗ ڤ.#$O,VkxQ!T#Sڝ~_DizJ{?nP{d AM~_=?u!JT[̊2/pA,xNs,ptF92S:8XZPvP{K1!u; 38{=}y!=f6FO}CgW\ײL̩rT k$5G6xzl e*}-I]$Hnєg(pEj` |Dj8U\ -e[vRTtoA 8 8ݍ[L{E +!@HwaEicn(w 9Q.3YY;X0xnoefM/>5p!Qm;iQbF׹Od[*c,J!Ee$fN6cJGL#)b11#VfpQ`n3XKȓ,p( HgʰUF>+@,?]+6{!1gV< ţYMܣM)Yхh<,8$U xa>xɓN=3ns=p>yߥ۷7DĺЪ}'mlҢKx#g>H*II;+jyh ]q/hl{[qc -#~26Ԁ P g8F\9/((~^ -79ۑRd G@|Ko]]ӏUE屉> u8x~c3I]~\,eS&Tioӵ~TR<^;2@2]&6c׫0046o4]1 -枥%Tr%v_]F¤żkݖ^í+*;5.&SW ul̋Ĩ䡍[d4Cz9Fzx~`Xu5Us3YeVy\QgȓyۮD_?SS+062鹀waV+l},F4]L|.^ oNendstream -endobj -1533 0 obj<>/XObject<<>>>>/Annots 578 0 R>>endobj -1534 0 obj<>stream -xWr6}WL3cyƦudI-y$! 1IhE߳)SƑlJٳπCM(ɏQ?hJ$SNSFs^O()/ WW#|6b/#iu4i8Ēlew+i%H=>-(DUYjdJf_i.͓4d 4g)6Y1%: - F#ZDR&4KIfI˾*59R{p @)8N2% G0Jڈ -PntpH"$9M[mi܆(履22q8=|GQoޜRZyHI|jZ |8pPXWf$K0mwW|\havP[L -؁'[5NeT -l发X"m/W|9t6{8&䁋\%N^nTNlpԟR~$Ȏ{ZsI##RL'f$ vQ=]Ȑ=grCĊEt I2a-)KkVڸjdޱu6.5L.P/c+W|qpx^(qCΚ/0_0R)!ɋ!^X_+ -PnOºtLuP(7/8ɯZ2zTɣ?ڍ(n6XseY${T2;7dmkfpVibT8 pc4s(<8跁UAXX `tUAs".OBsgټJ:Kw_ng1P5h"!öJ6LEƵ ɀ َ*Δt/3Έ²{uх=Az(47:dl[ŹrFSRڮ`APGwj[C``adr"E,*`($OmQܢe2G`|!{8s`7|taٝB;³òuBko@m6ڈP7@lCuxfZ@]8Jn.S -=b,mbDN O- ˞ z~HL)ӕqWp`#rQj]4 H4χB|yݰO9Mplpx0k fX^2Z:~ױc\~v~ =)wA;M="pYf?t<9%"N6WYzRf (+|w -2Pӳmxv_&Bիvs8V](v>3S+W'٧39ZdB@`'4JS%程ntRpB@~reSҏ`8`>/XObject<<>>>>/Annots 593 0 R>>endobj -1536 0 obj<>stream -xVMo8W IJ%;|H`7&z$aK(GIf8ސ#f) h$ͼ" -9_ig ͗\zKrBhh[ޢ٢f -x͢km%2U<{[vc:[4G~gk:?-\y>\5slo~T27ՌV١R۫mMyLUsb%+R/Q|m4I#MjvgvBrMqJkQ#|jYmH'N9 ~Ni䜧S%il$ΫW"oJ T*w%y%=sA-7=p␳l;~A@EwXp+6fš/awLD#9u!547$S -Q&ŠJsl[uRгmżvo۶$o)ZM?]+LN[vν̣b_ۢ6Üa3S d0ԕ`BXZ],DЀ2Ř&\ cL#Sk;SN:U &SKZ7qQ'W  !=jߩA^hon' {#$<74$ gRdV'7%`{1G0sUQ1 -*x>p<#:pꂘ&A2{63ns"J3Ǯ^:v}w{nN9Kԣ9-ð׿_R>6 V e >i&<͘y477 Q 0_}ڌ HJjendstream -endobj -1537 0 obj<>/XObject<<>>>>/Annots 596 0 R>>endobj -1538 0 obj<>stream -xWn8}W Rb@K.BKT"U3|m&)Μs8vң.~z4`DiqM4N 'c㿕 $Y@[><:bcAdLuNӓza2/tntI%Ɯh]-(D <2RXQH/;=t,>ɥҒZ;*'iJgJ3^͔7Ox. h)XUC6BEL> d|DbyBu!QF ΍i9ZMX댏󁎧 -1K|%~\Phx2ӧ$Jn8Bz%E,Ǯ@% -h88cr ڋ\tEb!VhTW4e./0vuZkt\)S|gn왣q^64oʽcI/0rZ,"7~"Szet$Ac;z9?r ?@0DQ25[::'yỸu$ > ʐۺ`"7t:TP`ҹjTߙr˰Ҋ<)`Acj3yyRZ2G$͡H45CK a=6A2O::T"H:QfH=lamǼڱ?ZlyAk[5 =TyFX}s}[A0VXɃ3)r(V-*/AgZ.;D -VǦq#;p`6Q#@|@@@7wr)-NJIf6- Rڡ DLEv2J?`;󖇝cxKxB|}U -@'ƺu*K#}auqb7{Q4=nvɲ$]Nd<w=;/ V?#XQi4ЌB - :k>/XObject<<>>>>/Annots 599 0 R>>endobj -1540 0 obj<>stream -xX[oF~8pV)$ZIŎU$@#r(1!gؙ )ɔݦ"kօswnh@}h<Q?Y43RGO|AY4&!׳3 hBh2Yo,L+̓4]eJmm%9MJn_0n]MH~sR%2!]J#\eʟ/sKҩ?wэz1rԧ̒ P,FW$uFe$XB6G Z<+dnC<~YQ9]@s.6w/ڄ(:cncCTts!p^AEdT[J\=3}Ib6`,o0a!P-,gD#[Fo8ōӳ_6Zm+0v2t4x>O[<Y~4[V0 h]K)yޖIFx79tg4WEaxoǃ}$o4 3fv(^endstream -endobj -1541 0 obj<>/XObject<<>>>>>>endobj -1542 0 obj<>stream -xVo6_qUiO*! ! H϶R^2mӺ&16vJٴ}6)mھi {l7$N ٺ{>tȋ!J|'),Y= `%q,0˚ Qb@l^jr(-$a -"9d(ʵ[ؑ{R\VN,4Om!ZĚiGJ$7aVB l^X -}!VXe -S/Ș'L4 wT8 %Aۜ!ȃŚrV;|4UƳTL==T.+淘~V`ZmO}Û>,тux ϔU`VXx*v}/5(9R,C؏GA؋dE t;QR[日#{IQ8z1O5S)AP {~wd}|^dzE99Qr%%+ W>/XObject<>>>>>endobj -1544 0 obj<>stream -xWn6}WLqHl}^.v.b((DG6 )9A\ϜOblD)eIF4)%Gk$ncґ$xqO,ys'MY #E9(E6'ãnKQLwWlv$ﯯd|vvU0up҇͗ϿmƂq@;87*sU/\Bqɍ1,4,Av%i]KUS^|҉wRUyw1ehک(350m29<U#3 邌RA2QikCG8i"(9ez]jJ >F҃mH7m^T;U%.+ !e?aRMg4ΰ5 ](6ױw1 -m#Ts2saE*܏#r ~J2Q5{ߐ~@EZJDYLPE% MD}dЍtV0Gޞ!TjB&CZBw|[F(u) #`üAP -sRqd7L#[xr:.d2)hzڣ5x:\ic -vAm5;|L/]ޫZP hm.ԲmWtMM ]IZjSa]ל,p nA -2ӉWyNQ\sRFݞC4ʡ]p3UG[v Fo}k+}^g5 -ö@g*GB9i3̋.q,vVg%x -n -g' -M;"F"vm"g%j)]vpaUQ75͞,Jk~0!yj4 gn|]:7d ;u'.A6~{rORO%;b#Lŵg%9fc>Po͘3Kۚg_xM_NUǴ>"͌Mc7غ-15(I&c7(۝ﳾs.]Q`ztك3x u| FSXJ׸H|Y+a|{  ~,(nh~ UzU' z洹f~C?w nNp͚* t z% \۳it^Fe)-r_`  -\k4ܩe%ЕWk`rV^{ZC‡c*^!tu*4v0Lp գ*zBpQ;ޏ L/w﹵nN}])ޫc$a40~>5;x/J;/_^rYΦs`k?,2endstream -endobj -1545 0 obj<>/XObject<<>>>>>>endobj -1546 0 obj<>stream -xWmO8_1R6ZtwRIKgm3Ni5%gfyVzۇc߃t`4Ⱦ 'ҟlzp Uz "*1i8&P+SU{pq:.<,Ζ?Z={VQ,roH3a+0)o@R$2iƦ."-BH/Vm+ou֬)kHͱ'/n 6P>4Fv®EwͪS%-(ՏƥlFfA` :8ze>/ -BfXT/0#d8l*@i4!{-<9$M#Mq:偈ta,>@ qAv7^ ްwa |Lйga6v;0HɭjHSS Bޜ.?*qB>_>>/XObject<<>>>>>>endobj -1548 0 obj<>stream -xS]o0}WG* F&m^*Mjw5P!$K{>qdqT9V%1XYohD5x MX8Aiw<'xW1ESjƠq Z=N ,Ȑ% TqC0[X?mND)]Pl6Zbb+H"/8(x6v*}vs@'azk;u/|g(V9Yw{$d `NR)TR;$GR+i٦m:ylz=IoƸ*,{! 9¦ޝR$}Mp~-=~ԁƇ5]tZ5;``r];d*!_=֌~6J)irMxIϣ^kV}5tt~$i3Aɹ!ub`UYz^/M#}endstream -endobj -1549 0 obj<>/XObject<<>>>>>>endobj -1550 0 obj<>stream -x+2T0BCs#c3\..}7K#4BHP$YSO! U!?M!3$1''$3?O3$ BOzs=s3 -!)F #\C&endstream -endobj -1551 0 obj<>/XObject<<>>>>/Annots 644 0 R>>endobj -1552 0 obj<>stream -x[oG+yX89^-/"Yki9&9pdG~S=.I,,<QuXΘ˨z,g9a9ChrW&5d&;p\Mǰ\Ȭ2J%Xaڱ+#hHyɔ83$sð339: ;73발1Q1,W%6VPQXY/& Xe ecXF|ǰt|BX[\̭lcceve e{_&:NYeN&:LL31,4{ KhI 4S۞aə:ɜXa20̒(c2=Kr: K^{Ye%1:VKsl$A{Kdf+9o vsx/vce"da20,/ *a:4;wfa(nLC΋<+, mVgجY-4CڬD#9)}g6B@F&==0,#Գ+jY -ci

8&A8{' 2c.NVzcr gX)gۀgJJYN*$栌4qH91ɽ9{#0t67+o/ﺶY=.umbzﻧ֛_ƩSG/oƁ|ZF_UVafOmz&_>Պ,^W/q:aqlwG oښ#.ݴ.Z.YۛO٬wzf ]J<26vQM^9}+s8q얱S}Vqə-_ x׶Mk?Ӿ٬:>z+ |`Q̓sȲUmxw|r·N]pPND3s뺳|y|j~p|A[~H[yV-o1#]8曢jdW lD/$埔$G\_)H)3cQjjYN.4kq[2$=-y ֫ze?s]-6|L IcT`~xOKqz{iJ'oo*Nw O`fWW>*P`T«gn|z^\VZ*&*e5^q/T jm}lR'_X~g Tv>yQxyl˺[N$jujѻK?v:c?ݼ$]ƛLWbpbŬ'J ^ 'G..vԣh-.Gq_K.S fJό:-Hz1s/~u*3;Q79'Yik9|,endstream -endobj -1553 0 obj<>/XObject<<>>>>/Annots 646 0 R>>endobj -1554 0 obj<>stream -xUQN0+X5~$s@q@jsI]5I YC\Yv<;/&!HXmLpA/Պ0p>b*\{H.YXbbغ0.1h=P_nՖۂXC*g)eKϮ Ag7s}wDw@R -Chإ#n(!^=_pJlx^.}hvÐ֩,KCQ܊&? )Oh'8*ZfͽgEqendstream -endobj -1555 0 obj<>/XObject<<>>>>>>endobj -1556 0 obj<>stream -xWn8}W IH]Ih[]!)_^Mju֧~4꬗ht=̮ht5ZIp0Y=.`r|Eӂ`oX{iiуKkX4 Ht|'̌ߏf.W:7EVxc?urkYxozּ!p0J/񷕒 -Ԟ<|_ .x ))Y"gW\4\ .tw8c跦Jӽ,f7[SҶCvG>~? Mz>w"^o7gb81wӿuP &Dە!h!*U*ai$#_*oZZ87d,ո9\FYr?zV0 }f +LWRH>8qa8e~cASfD r"<!hLtC)Ė%٨BRirQ*^<gOc3Db#T)%ƚwMK#BN3\w0%# -\8x4"QnK:| !;DRЃL$@AlLvJɇ/ ۟ym0y Zry -zKa H]+{ȋ g˂PX殭D1R7֝P^}r+<"@ثl D5!1tDh@В= w` A1'#\0;a\ V75b0oeȑ$73jMQASm/G[)\Tq: 3F/;MW UA=:e\ݜu)Xԯ4(GB DY+XnkyQo' aؕmԻk߂V_qDݻf8O|:fGzxDEPwt(N@ٲPilOu5O^5]ƣl|yN쏳endstream -endobj -1557 0 obj<>/XObject<<>>>>>>endobj -1558 0 obj<>stream -xV]O8}ﯸ iG-VEZiafծi$NkHN%h(-=ss4 ~|Ai9DZWъgbMbގ.ocNi#bmFH06=W:7^ ;a3w7GR+$(3PJ?e"-9ixGGYĪhB2ZbnEwR闀^pN8?nQUqUY#ј݆Q:3GG9exϝ7/SJjO>`)⃸ -#B92k[VҔ / ~8T Y7,1A9o\ZzMeBF+I?5"j4A=^E+{hްb]B֎=*,*hٛ+VO 2Nro!=odZ[βNh<Z{pѶ"YPI2:+XA͕I/(£gp+C(, -\G鴨wFntD:XxZn_zD\^SgZ\= 8%,ὡ# Mw>Χ,?`覥tv}TD ,+GĜOgUTj !LP5%\^9_7]nfCmo{ίwW *eO҃'o&Z:B$pPԕ(XC YhwمA&K'w%wD0#n - R CPOS"hː/"xuCv-ي]Pxv{*2>뀾=,B1\` LfCiӐUV] Q9D5dlǷ[ -*H=k>/XObject<<>>>>>>endobj -1560 0 obj<>stream -xXMo7W t ز-;[/.%1%7$׊} K{(;o޼5]k_/OhY -oUszRJ --/>Tj -ڿl.0q3U7qO~|b0_+dU(n56mhŇ١H&o5v3V9w\oILʬ &g-Imk-5ID^ڼ@jEL~5[TtZMΜtHiX;m=mg3Me"z`^8p2! DFӪֈIFi4ީVʇ=< WX -vIѻ>s?z.gsP ̉I(^ԪBexoRWQUvw^wsawXPx4~$rMd1 A# \ # yW'c[8Ud10FF 2S -a|)00[ RQ&w ^,N ^^"⟰ ᯆmudJLԅ9Z-JR{8I+Qs -0 dxinLԽ㟓 C.GI <Nj^7>ɞI -R3HJ_Cҏ8MHJl8g@v-$!a|Gq,P>YQ'\[ܡ ^^"IO):!luFr<g3KEU4ĝeU>N*4hnKzf'.^ْۛ6(ˠ@1/'3J:78@B{ROvXjt0w1g3P}e;Vo~$*g1K-i*6N&0N -|9G$ɐi|`IaiB<ښyj=713dDALL8;Q I3{&k4"v; !Hn U:[ך\u^kUٹXKBܦ AOb=NY$/d V42E|El|#ȫlg-.y&Idn:q @p9OoiI -D  ;/[]睋] ZWcO(󳱋u})vaz653ys42jwhRyûev6_Ue ӡa{:G WQen6hi<{0m2 MxI8H=\1dC螲ǷoLz43ZE˔L{Ë7'.'$\/z5xܢG!i?KnmYmxْG1d\9r6(tmZ$IRa5΋(ȳ.Q}ؓK@=Zp9~.!W8,<^RGg^93߷5x1IUn4y\n* iSVoIY!7PEph~)MPD:upB@IxzКq{cLMn7b@QkZu jsX\ rmyE@_5]pw2s]2]#]ng{>̑-J&q]/%£naMN@̔{2*\5~:L. I/(}zVωAܪW1R9{0:rs=dO1Bv~n:7_'!,endstream -endobj -1561 0 obj<>/XObject<<>>>>>>endobj -1562 0 obj<>stream -xTn0+>%@Hczh*zɅ(D*|w(-b(ܙs#㗣aD'Y%h2~X Q6|\(k0XykM@+^dҞ N -/ hT'SedtF 9HwDU^%>LQFs`eZubѱVǗޞvr(t0X!9h.@E&l ksRph1 Ma^$P!u|ü[|:\L]ߊ!IvkauFӬmxqHh⓳:I1Xro2 oendstream -endobj -1563 0 obj<>/XObject<<>>>>/Annots 649 0 R>>endobj -1564 0 obj<>stream -xVr6+樭h%G6J묕J@ (aM\VުxS.% zz[g@} h6єd'}<ٿ|3$CLɜ -LF_d|!~,|0E Ȑy:" Dvoע4'Q, GŘu9|G aw_;} н3%ݚ[h0z#.ߜ&!UjWETxbLAsb8K|Fewڙ$Vc8Cڑu_P+Eq̯gHS \V5OKln5j3+GNٍ\L`Iim 2D'"-tcX ƦX])9@5Z9D[,s,wxKE!% m+yN?e%V*O:6M .+׀׫QȞy =&BbHPzi-/0fSrwOP - A1L_NTr {Z?,|CRX -D+?k(OO -Yyڶ?]*kdq᝶JzcwoW#w1`i[[ Z)J(k>/XObject<<>>>>/Annots 694 0 R>>endobj -1566 0 obj<>stream -xWYoF~QQ<$Jn>$X@QyX+)e~3K ͵z!E1%ʼnxI8 љRAazӆO}p $7 &q f7n*IM}x6 Pt :ҳx3x(c!:^cvltDNj9ND8#.!/A''Ď.Gt?p$!,'hBtBxA<9鈎1039hBtZ`^;Xpq!u1?]Q0R>͓AE]V2{ܘ|$tPYLk< tMk*m0235A(1ZYVh[SzwuIYMMj2keT-^Q]?<U+~(EMaJzaYbVc?85;ح6v1`q`3VKZWYiec#tV-{=5YmqI'sKu56k#Vey$\)uV7meǿno-r?N]> =],xl#s@,>2_a;]Z:OӇ> -vk]ϬL)3& MXѫKrj\$ɪMM7݂.xssU}%|bn3a4d {h1kD-rR1_tg/̳!_YDé{R؛3\!MY'0 endstream -endobj -1567 0 obj<>/XObject<<>>>>>>endobj -1568 0 obj<>stream -xXے9} p3L {PU ]Hj=) -c.݀*/'OL͘F33*v7lD,b'k%oޯn4jgg9JшVE^eoW_n|0e8QrAS1뵴f^xe4ƚzO;+\ti[0KV/nD4𸣧*GRTՑ~^ ɗ}%&r[c=(ېHr ۘ V=Y[%l<-l#B~P'ho%}0;#%|p KP52!S -|n qx>=Řx6oO6097(sS M -¹%_^+ - -,6AQwWkNtP~Ο >ɽޚVMRHkM#{+#FfPUT֏;II$/:Ґ)C7 sŔ> cK4vY3i2h"uQuja_׾{BC,~cIPgԅ\/+pZ<$.ǫP\Y@71.У෵-(M1mʼn -$\6伱G!2uM 7y{h{h0%6$*gBh"n `r5ԎrAy%)ׁDʥ0GC)s+ ̒:*6.-]=D=$ -W(EkXCteԨ,-duLtӔg65 -G:Q}u+!\F r=Ţ?Dhg{ĈP@p^M :Rb> +endobj +8 0 obj +(I General Installation) +endobj +9 0 obj +<< /S /GoTo /D (chapter.1) >> +endobj +12 0 obj +(1 Introduction to Samba) +endobj +13 0 obj +<< /S /GoTo /D (section.1.1) >> +endobj +16 0 obj +(1.1 Background) +endobj +17 0 obj +<< /S /GoTo /D (section.1.2) >> +endobj +20 0 obj +(1.2 Terminology) +endobj +21 0 obj +<< /S /GoTo /D (section.1.3) >> +endobj +24 0 obj +(1.3 Related Projects) +endobj +25 0 obj +<< /S /GoTo /D (section.1.4) >> +endobj +28 0 obj +(1.4 SMB Methodology) +endobj +29 0 obj +<< /S /GoTo /D (section.1.5) >> +endobj +32 0 obj +(1.5 Epilogue) +endobj +33 0 obj +<< /S /GoTo /D (section.1.6) >> +endobj +36 0 obj +(1.6 Miscellaneous) +endobj +37 0 obj +<< /S /GoTo /D (chapter.2) >> +endobj +40 0 obj +(2 How to Install and Test SAMBA) +endobj +41 0 obj +<< /S /GoTo /D (section.2.1) >> +endobj +44 0 obj +(2.1 Obtaining and installing samba) +endobj +45 0 obj +<< /S /GoTo /D (section.2.2) >> +endobj +48 0 obj +(2.2 Configuring samba \(smb.conf\)) +endobj +49 0 obj +<< /S /GoTo /D (subsection.2.2.1) >> +endobj +52 0 obj +(2.2.1 Example Configuration) +endobj +53 0 obj +<< /S /GoTo /D (subsubsection.2.2.1.1) >> +endobj +56 0 obj +(2.2.1.1 Test your config file with testparm) +endobj +57 0 obj +<< /S /GoTo /D (subsection.2.2.2) >> +endobj +60 0 obj +(2.2.2 SWAT) +endobj +61 0 obj +<< /S /GoTo /D (section.2.3) >> +endobj +64 0 obj +(2.3 Try listing the shares available on your server) +endobj +65 0 obj +<< /S /GoTo /D (section.2.4) >> +endobj +68 0 obj +(2.4 Try connecting with the unix client) +endobj +69 0 obj +<< /S /GoTo /D (section.2.5) >> +endobj +72 0 obj +(2.5 Try connecting from a DOS, WfWg, Win9x, WinNT, Win2k, OS/2, etc... client) +endobj +73 0 obj +<< /S /GoTo /D (section.2.6) >> +endobj +76 0 obj +(2.6 What If Things Don't Work?) +endobj +77 0 obj +<< /S /GoTo /D (section.2.7) >> +endobj +80 0 obj +(2.7 Common Errors) +endobj +81 0 obj +<< /S /GoTo /D (subsection.2.7.1) >> +endobj +84 0 obj +(2.7.1 Why are so many smbd processes eating memory?) +endobj +85 0 obj +<< /S /GoTo /D (subsection.2.7.2) >> +endobj +88 0 obj +(2.7.2 I'm getting "open\137oplock\137ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs) +endobj +89 0 obj +<< /S /GoTo /D (chapter.3) >> +endobj +92 0 obj +(3 FastStart for the Impatient) +endobj +93 0 obj +<< /S /GoTo /D (section.3.1) >> +endobj +96 0 obj +(3.1 Note) +endobj +97 0 obj +<< /S /GoTo /D (part.2) >> +endobj +100 0 obj +(II Server Configuration Basics) +endobj +101 0 obj +<< /S /GoTo /D (chapter.4) >> +endobj +104 0 obj +(4 Server Types and Security Modes) +endobj +105 0 obj +<< /S /GoTo /D (section.4.1) >> +endobj +108 0 obj +(4.1 Features and Benefits) +endobj +109 0 obj +<< /S /GoTo /D (section.4.2) >> +endobj +112 0 obj +(4.2 Server Types) +endobj +113 0 obj +<< /S /GoTo /D (section.4.3) >> +endobj +116 0 obj +(4.3 Samba Security Modes) +endobj +117 0 obj +<< /S /GoTo /D (subsection.4.3.1) >> +endobj +120 0 obj +(4.3.1 User Level Security) +endobj +121 0 obj +<< /S /GoTo /D (subsubsection.4.3.1.1) >> +endobj +124 0 obj +(4.3.1.1 Example Configuration) +endobj +125 0 obj +<< /S /GoTo /D (subsection.4.3.2) >> +endobj +128 0 obj +(4.3.2 Share Level Security) +endobj +129 0 obj +<< /S /GoTo /D (subsubsection.4.3.2.1) >> +endobj +132 0 obj +(4.3.2.1 Example Configuration) +endobj +133 0 obj +<< /S /GoTo /D (subsection.4.3.3) >> +endobj +136 0 obj +(4.3.3 Domain Security Mode \(User Level Security\)) +endobj +137 0 obj +<< /S /GoTo /D (subsubsection.4.3.3.1) >> +endobj +140 0 obj +(4.3.3.1 Example Configuration) +endobj +141 0 obj +<< /S /GoTo /D (subsection.4.3.4) >> +endobj +144 0 obj +(4.3.4 ADS Security Mode \(User Level Security\)) +endobj +145 0 obj +<< /S /GoTo /D (subsubsection.4.3.4.1) >> +endobj +148 0 obj +(4.3.4.1 Example Configuration) +endobj +149 0 obj +<< /S /GoTo /D (subsection.4.3.5) >> +endobj +152 0 obj +(4.3.5 Server Security \(User Level Security\)) +endobj +153 0 obj +<< /S /GoTo /D (subsubsection.4.3.5.1) >> +endobj +156 0 obj +(4.3.5.1 Example Configuration) +endobj +157 0 obj +<< /S /GoTo /D (section.4.4) >> +endobj +160 0 obj +(4.4 Seamless Windows Network Integration) +endobj +161 0 obj +<< /S /GoTo /D (section.4.5) >> +endobj +164 0 obj +(4.5 Common Errors) +endobj +165 0 obj +<< /S /GoTo /D (subsection.4.5.1) >> +endobj +168 0 obj +(4.5.1 What makes Samba a SERVER?) +endobj +169 0 obj +<< /S /GoTo /D (subsection.4.5.2) >> +endobj +172 0 obj +(4.5.2 What makes Samba a Domain Controller?) +endobj +173 0 obj +<< /S /GoTo /D (subsection.4.5.3) >> +endobj +176 0 obj +(4.5.3 What makes Samba a Domain Member?) +endobj +177 0 obj +<< /S /GoTo /D (subsection.4.5.4) >> +endobj +180 0 obj +(4.5.4 Constantly Losing Connections to Password Server) +endobj +181 0 obj +<< /S /GoTo /D (chapter.5) >> +endobj +184 0 obj +(5 Domain Control) +endobj +185 0 obj +<< /S /GoTo /D (section.5.1) >> +endobj +188 0 obj +(5.1 Features and Benefits) +endobj +189 0 obj +<< /S /GoTo /D (section.5.2) >> +endobj +192 0 obj +(5.2 Basics of Domain Control) +endobj +193 0 obj +<< /S /GoTo /D (subsection.5.2.1) >> +endobj +196 0 obj +(5.2.1 Domain Controller Types) +endobj +197 0 obj +<< /S /GoTo /D (subsection.5.2.2) >> +endobj +200 0 obj +(5.2.2 Preparing for Domain Control) +endobj +201 0 obj +<< /S /GoTo /D (section.5.3) >> +endobj +204 0 obj +(5.3 Domain Control - Example Configuration) +endobj +205 0 obj +<< /S /GoTo /D (section.5.4) >> +endobj +208 0 obj +(5.4 Samba ADS Domain Control) +endobj +209 0 obj +<< /S /GoTo /D (section.5.5) >> +endobj +212 0 obj +(5.5 Domain and Network Logon Configuration) +endobj +213 0 obj +<< /S /GoTo /D (subsection.5.5.1) >> +endobj +216 0 obj +(5.5.1 Domain Network Logon Service) +endobj +217 0 obj +<< /S /GoTo /D (subsubsection.5.5.1.1) >> +endobj +220 0 obj +(5.5.1.1 Example Configuration) +endobj +221 0 obj +<< /S /GoTo /D (subsubsection.5.5.1.2) >> +endobj +224 0 obj +(5.5.1.2 The Special Case of MS Windows XP Home Edition) +endobj +225 0 obj +<< /S /GoTo /D (subsubsection.5.5.1.3) >> +endobj +228 0 obj +(5.5.1.3 The Special Case of Windows 9x / Me) +endobj +229 0 obj +<< /S /GoTo /D (subsection.5.5.2) >> +endobj +232 0 obj +(5.5.2 Security Mode and Master Browsers) +endobj +233 0 obj +<< /S /GoTo /D (section.5.6) >> +endobj +236 0 obj +(5.6 Common Problems and Errors) +endobj +237 0 obj +<< /S /GoTo /D (subsection.5.6.1) >> +endobj +240 0 obj +(5.6.1 I cannot include a '\044' in a machine name) +endobj +241 0 obj +<< /S /GoTo /D (subsection.5.6.2) >> +endobj +244 0 obj +(5.6.2 I get told "You already have a connection to the Domain...." or "Cannot join domain, the credentials supplied conflict with an existing set.." when creating a machine trust account.) +endobj +245 0 obj +<< /S /GoTo /D (subsection.5.6.3) >> +endobj +248 0 obj +(5.6.3 The system can not log you on \(C000019B\)....) +endobj +249 0 obj +<< /S /GoTo /D (subsection.5.6.4) >> +endobj +252 0 obj +(5.6.4 The machine trust account for this computer either does not exist or is not accessible.) +endobj +253 0 obj +<< /S /GoTo /D (subsection.5.6.5) >> +endobj +256 0 obj +(5.6.5 When I attempt to login to a Samba Domain from a NT4/W2K workstation, I get a message about my account being disabled.) +endobj +257 0 obj +<< /S /GoTo /D (subsection.5.6.6) >> +endobj +260 0 obj +(5.6.6 Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable") +endobj +261 0 obj +<< /S /GoTo /D (chapter.6) >> +endobj +264 0 obj +(6 Backup Domain Control) +endobj +265 0 obj +<< /S /GoTo /D (section.6.1) >> +endobj +268 0 obj +(6.1 Features And Benefits) +endobj +269 0 obj +<< /S /GoTo /D (section.6.2) >> +endobj +272 0 obj +(6.2 Essential Background Information) +endobj +273 0 obj +<< /S /GoTo /D (subsection.6.2.1) >> +endobj +276 0 obj +(6.2.1 MS Windows NT4 Style Domain Control) +endobj +277 0 obj +<< /S /GoTo /D (subsubsection.6.2.1.1) >> +endobj +280 0 obj +(6.2.1.1 Example PDC Configuration) +endobj +281 0 obj +<< /S /GoTo /D (subsection.6.2.2) >> +endobj +284 0 obj +(6.2.2 Active Directory Domain Control) +endobj +285 0 obj +<< /S /GoTo /D (subsection.6.2.3) >> +endobj +288 0 obj +(6.2.3 What qualifies a Domain Controller on the network?) +endobj +289 0 obj +<< /S /GoTo /D (subsection.6.2.4) >> +endobj +292 0 obj +(6.2.4 How does a Workstation find its domain controller?) +endobj +293 0 obj +<< /S /GoTo /D (section.6.3) >> +endobj +296 0 obj +(6.3 Backup Domain Controller Configuration) +endobj +297 0 obj +<< /S /GoTo /D (subsection.6.3.1) >> +endobj +300 0 obj +(6.3.1 Example Configuration) +endobj +301 0 obj +<< /S /GoTo /D (section.6.4) >> +endobj +304 0 obj +(6.4 Common Errors) +endobj +305 0 obj +<< /S /GoTo /D (subsection.6.4.1) >> +endobj +308 0 obj +(6.4.1 Machine Accounts keep expiring, what can I do?) +endobj +309 0 obj +<< /S /GoTo /D (subsection.6.4.2) >> +endobj +312 0 obj +(6.4.2 Can Samba be a Backup Domain Controller to an NT4 PDC?) +endobj +313 0 obj +<< /S /GoTo /D (subsection.6.4.3) >> +endobj +316 0 obj +(6.4.3 How do I replicate the smbpasswd file?) +endobj +317 0 obj +<< /S /GoTo /D (subsection.6.4.4) >> +endobj +320 0 obj +(6.4.4 Can I do this all with LDAP?) +endobj +321 0 obj +<< /S /GoTo /D (chapter.7) >> +endobj +324 0 obj +(7 Domain Membership) +endobj +325 0 obj +<< /S /GoTo /D (section.7.1) >> +endobj +328 0 obj +(7.1 Features and Benefits) +endobj +329 0 obj +<< /S /GoTo /D (section.7.2) >> +endobj +332 0 obj +(7.2 MS Windows Workstation/Server Machine Trust Accounts) +endobj +333 0 obj +<< /S /GoTo /D (subsection.7.2.1) >> +endobj +336 0 obj +(7.2.1 Manual Creation of Machine Trust Accounts) +endobj +337 0 obj +<< /S /GoTo /D (subsection.7.2.2) >> +endobj +340 0 obj +(7.2.2 Using NT4 Server Manager to Add Machine Accounts to the Domain) +endobj +341 0 obj +<< /S /GoTo /D (subsection.7.2.3) >> +endobj +344 0 obj +(7.2.3 "On-the-Fly" Creation of Machine Trust Accounts) +endobj +345 0 obj +<< /S /GoTo /D (subsection.7.2.4) >> +endobj +348 0 obj +(7.2.4 Making an MS Windows Workstation or Server a Domain Member) +endobj +349 0 obj +<< /S /GoTo /D (subsubsection.7.2.4.1) >> +endobj +352 0 obj +(7.2.4.1 Windows 200x XP Professional) +endobj +353 0 obj +<< /S /GoTo /D (subsubsection.7.2.4.2) >> +endobj +356 0 obj +(7.2.4.2 Windows NT4) +endobj +357 0 obj +<< /S /GoTo /D (subsubsection.7.2.4.3) >> +endobj +360 0 obj +(7.2.4.3 Samba) +endobj +361 0 obj +<< /S /GoTo /D (section.7.3) >> +endobj +364 0 obj +(7.3 Domain Member Server) +endobj +365 0 obj +<< /S /GoTo /D (subsection.7.3.1) >> +endobj +368 0 obj +(7.3.1 Joining an NT4 type Domain with Samba-3) +endobj +369 0 obj +<< /S /GoTo /D (subsection.7.3.2) >> +endobj +372 0 obj +(7.3.2 Why is this better than security = server?) +endobj +373 0 obj +<< /S /GoTo /D (section.7.4) >> +endobj +376 0 obj +(7.4 Samba ADS Domain Membership) +endobj +377 0 obj +<< /S /GoTo /D (subsection.7.4.1) >> +endobj +380 0 obj +(7.4.1 Setup your smb.conf) +endobj +381 0 obj +<< /S /GoTo /D (subsection.7.4.2) >> +endobj +384 0 obj +(7.4.2 Setup your /etc/krb5.conf) +endobj +385 0 obj +<< /S /GoTo /D (subsection.7.4.3) >> +endobj +388 0 obj +(7.4.3 Create the computer account) +endobj +389 0 obj +<< /S /GoTo /D (subsubsection.7.4.3.1) >> +endobj +392 0 obj +(7.4.3.1 Possible errors) +endobj +393 0 obj +<< /S /GoTo /D (subsection.7.4.4) >> +endobj +396 0 obj +(7.4.4 Test your server setup) +endobj +397 0 obj +<< /S /GoTo /D (subsection.7.4.5) >> +endobj +400 0 obj +(7.4.5 Testing with smbclient) +endobj +401 0 obj +<< /S /GoTo /D (subsection.7.4.6) >> +endobj +404 0 obj +(7.4.6 Notes) +endobj +405 0 obj +<< /S /GoTo /D (section.7.5) >> +endobj +408 0 obj +(7.5 Common Errors) +endobj +409 0 obj +<< /S /GoTo /D (subsection.7.5.1) >> +endobj +412 0 obj +(7.5.1 Can Not Add Machine Back to Domain) +endobj +413 0 obj +<< /S /GoTo /D (subsection.7.5.2) >> +endobj +416 0 obj +(7.5.2 Adding Machine to Domain Fails) +endobj +417 0 obj +<< /S /GoTo /D (chapter.8) >> +endobj +420 0 obj +(8 Stand-Alone Servers) +endobj +421 0 obj +<< /S /GoTo /D (section.8.1) >> +endobj +424 0 obj +(8.1 Features and Benefits) +endobj +425 0 obj +<< /S /GoTo /D (section.8.2) >> +endobj +428 0 obj +(8.2 Background) +endobj +429 0 obj +<< /S /GoTo /D (section.8.3) >> +endobj +432 0 obj +(8.3 Example Configuration) +endobj +433 0 obj +<< /S /GoTo /D (subsection.8.3.1) >> +endobj +436 0 obj +(8.3.1 Reference Documentation Server) +endobj +437 0 obj +<< /S /GoTo /D (subsection.8.3.2) >> +endobj +440 0 obj +(8.3.2 Central Print Serving) +endobj +441 0 obj +<< /S /GoTo /D (section.8.4) >> +endobj +444 0 obj +(8.4 Common Errors) +endobj +445 0 obj +<< /S /GoTo /D (chapter.9) >> +endobj +448 0 obj +(9 MS Windows Network Configuration Guide) +endobj +449 0 obj +<< /S /GoTo /D (section.9.1) >> +endobj +452 0 obj +(9.1 Note) +endobj +453 0 obj +<< /S /GoTo /D (part.3) >> +endobj +456 0 obj +(III Advanced Configuration) +endobj +457 0 obj +<< /S /GoTo /D (chapter.10) >> +endobj +460 0 obj +(10 Samba / MS Windows Network Browsing Guide) +endobj +461 0 obj +<< /S /GoTo /D (section.10.1) >> +endobj +464 0 obj +(10.1 Features and Benefits) +endobj +465 0 obj +<< /S /GoTo /D (section.10.2) >> +endobj +468 0 obj +(10.2 What is Browsing?) +endobj +469 0 obj +<< /S /GoTo /D (section.10.3) >> +endobj +472 0 obj +(10.3 Discussion) +endobj +473 0 obj +<< /S /GoTo /D (subsection.10.3.1) >> +endobj +476 0 obj +(10.3.1 NetBIOS over TCP/IP) +endobj +477 0 obj +<< /S /GoTo /D (subsection.10.3.2) >> +endobj +480 0 obj +(10.3.2 TCP/IP - without NetBIOS) +endobj +481 0 obj +<< /S /GoTo /D (subsection.10.3.3) >> +endobj +484 0 obj +(10.3.3 DNS and Active Directory) +endobj +485 0 obj +<< /S /GoTo /D (section.10.4) >> +endobj +488 0 obj +(10.4 How Browsing Functions) +endobj +489 0 obj +<< /S /GoTo /D (subsection.10.4.1) >> +endobj +492 0 obj +(10.4.1 Setting up WORKGROUP Browsing) +endobj +493 0 obj +<< /S /GoTo /D (subsection.10.4.2) >> +endobj +496 0 obj +(10.4.2 Setting up DOMAIN Browsing) +endobj +497 0 obj +<< /S /GoTo /D (subsection.10.4.3) >> +endobj +500 0 obj +(10.4.3 Forcing samba to be the master) +endobj +501 0 obj +<< /S /GoTo /D (subsection.10.4.4) >> +endobj +504 0 obj +(10.4.4 Making samba the domain master) +endobj +505 0 obj +<< /S /GoTo /D (subsection.10.4.5) >> +endobj +508 0 obj +(10.4.5 Note about broadcast addresses) +endobj +509 0 obj +<< /S /GoTo /D (subsection.10.4.6) >> +endobj +512 0 obj +(10.4.6 Multiple interfaces) +endobj +513 0 obj +<< /S /GoTo /D (subsection.10.4.7) >> +endobj +516 0 obj +(10.4.7 Use of the Remote Announce parameter) +endobj +517 0 obj +<< /S /GoTo /D (subsection.10.4.8) >> +endobj +520 0 obj +(10.4.8 Use of the Remote Browse Sync parameter) +endobj +521 0 obj +<< /S /GoTo /D (section.10.5) >> +endobj +524 0 obj +(10.5 WINS - The Windows Internetworking Name Server) +endobj +525 0 obj +<< /S /GoTo /D (subsection.10.5.1) >> +endobj +528 0 obj +(10.5.1 Setting up a WINS server) +endobj +529 0 obj +<< /S /GoTo /D (subsection.10.5.2) >> +endobj +532 0 obj +(10.5.2 WINS Replication) +endobj +533 0 obj +<< /S /GoTo /D (subsection.10.5.3) >> +endobj +536 0 obj +(10.5.3 Static WINS Entries) +endobj +537 0 obj +<< /S /GoTo /D (section.10.6) >> +endobj +540 0 obj +(10.6 Helpful Hints) +endobj +541 0 obj +<< /S /GoTo /D (subsection.10.6.1) >> +endobj +544 0 obj +(10.6.1 Windows Networking Protocols) +endobj +545 0 obj +<< /S /GoTo /D (subsection.10.6.2) >> +endobj +548 0 obj +(10.6.2 Name Resolution Order) +endobj +549 0 obj +<< /S /GoTo /D (section.10.7) >> +endobj +552 0 obj +(10.7 Technical Overview of browsing) +endobj +553 0 obj +<< /S /GoTo /D (subsection.10.7.1) >> +endobj +556 0 obj +(10.7.1 Browsing support in samba) +endobj +557 0 obj +<< /S /GoTo /D (subsection.10.7.2) >> +endobj +560 0 obj +(10.7.2 Problem resolution) +endobj +561 0 obj +<< /S /GoTo /D (subsection.10.7.3) >> +endobj +564 0 obj +(10.7.3 Browsing across subnets) +endobj +565 0 obj +<< /S /GoTo /D (subsubsection.10.7.3.1) >> +endobj +568 0 obj +(10.7.3.1 How does cross subnet browsing work ?) +endobj +569 0 obj +<< /S /GoTo /D (section.10.8) >> +endobj +572 0 obj +(10.8 Common Errors) +endobj +573 0 obj +<< /S /GoTo /D (subsection.10.8.1) >> +endobj +576 0 obj +(10.8.1 How can one flush the Samba NetBIOS name cache without restarting samba?) +endobj +577 0 obj +<< /S /GoTo /D (subsection.10.8.2) >> +endobj +580 0 obj +(10.8.2 My client reports "This server is not configured to list shared resources") +endobj +581 0 obj +<< /S /GoTo /D (chapter.11) >> +endobj +584 0 obj +(11 Account Information Databases) +endobj +585 0 obj +<< /S /GoTo /D (section.11.1) >> +endobj +588 0 obj +(11.1 Features and Benefits) +endobj +589 0 obj +<< /S /GoTo /D (section.11.2) >> +endobj +592 0 obj +(11.2 Technical Information) +endobj +593 0 obj +<< /S /GoTo /D (subsection.11.2.1) >> +endobj +596 0 obj +(11.2.1 Important Notes About Security) +endobj +597 0 obj +<< /S /GoTo /D (subsubsection.11.2.1.1) >> +endobj +600 0 obj +(11.2.1.1 Advantages of Encrypted Passwords) +endobj +601 0 obj +<< /S /GoTo /D (subsubsection.11.2.1.2) >> +endobj +604 0 obj +(11.2.1.2 Advantages of non-encrypted passwords) +endobj +605 0 obj +<< /S /GoTo /D (subsection.11.2.2) >> +endobj +608 0 obj +(11.2.2 Mapping User Identifiers between MS Windows and Unix) +endobj +609 0 obj +<< /S /GoTo /D (section.11.3) >> +endobj +612 0 obj +(11.3 Account Management Tools) +endobj +613 0 obj +<< /S /GoTo /D (subsection.11.3.1) >> +endobj +616 0 obj +(11.3.1 The smbpasswd Command) +endobj +617 0 obj +<< /S /GoTo /D (subsection.11.3.2) >> +endobj +620 0 obj +(11.3.2 The pdbedit Command) +endobj +621 0 obj +<< /S /GoTo /D (section.11.4) >> +endobj +624 0 obj +(11.4 Password Backends) +endobj +625 0 obj +<< /S /GoTo /D (subsection.11.4.1) >> +endobj +628 0 obj +(11.4.1 Plain Text) +endobj +629 0 obj +<< /S /GoTo /D (subsection.11.4.2) >> +endobj +632 0 obj +(11.4.2 smbpasswd - Encrypted Password Database) +endobj +633 0 obj +<< /S /GoTo /D (subsection.11.4.3) >> +endobj +636 0 obj +(11.4.3 tdbsam) +endobj +637 0 obj +<< /S /GoTo /D (subsection.11.4.4) >> +endobj +640 0 obj +(11.4.4 ldapsam) +endobj +641 0 obj +<< /S /GoTo /D (subsubsection.11.4.4.1) >> +endobj +644 0 obj +(11.4.4.1 Supported LDAP Servers) +endobj +645 0 obj +<< /S /GoTo /D (subsubsection.11.4.4.2) >> +endobj +648 0 obj +(11.4.4.2 Schema and Relationship to the RFC 2307 posixAccount) +endobj +649 0 obj +<< /S /GoTo /D (subsubsection.11.4.4.3) >> +endobj +652 0 obj +(11.4.4.3 OpenLDAP configuration) +endobj +653 0 obj +<< /S /GoTo /D (subsubsection.11.4.4.4) >> +endobj +656 0 obj +(11.4.4.4 Initialise the LDAP database) +endobj +657 0 obj +<< /S /GoTo /D (subsubsection.11.4.4.5) >> +endobj +660 0 obj +(11.4.4.5 Configuring Samba) +endobj +661 0 obj +<< /S /GoTo /D (subsubsection.11.4.4.6) >> +endobj +664 0 obj +(11.4.4.6 Accounts and Groups management) +endobj +665 0 obj +<< /S /GoTo /D (subsubsection.11.4.4.7) >> +endobj +668 0 obj +(11.4.4.7 Security and sambaAccount) +endobj +669 0 obj +<< /S /GoTo /D (subsubsection.11.4.4.8) >> +endobj +672 0 obj +(11.4.4.8 LDAP special attributes for sambaAccounts) +endobj +673 0 obj +<< /S /GoTo /D (subsubsection.11.4.4.9) >> +endobj +676 0 obj +(11.4.4.9 Example LDIF Entries for a sambaAccount) +endobj +677 0 obj +<< /S /GoTo /D (subsubsection.11.4.4.10) >> +endobj +680 0 obj +(11.4.4.10 Password synchronisation) +endobj +681 0 obj +<< /S /GoTo /D (subsubsection.11.4.4.11) >> +endobj +684 0 obj +(11.4.4.11 ldap trust ids) +endobj +685 0 obj +<< /S /GoTo /D (subsection.11.4.5) >> +endobj +688 0 obj +(11.4.5 MySQL) +endobj +689 0 obj +<< /S /GoTo /D (subsubsection.11.4.5.1) >> +endobj +692 0 obj +(11.4.5.1 Creating the database) +endobj +693 0 obj +<< /S /GoTo /D (subsubsection.11.4.5.2) >> +endobj +696 0 obj +(11.4.5.2 Configuring) +endobj +697 0 obj +<< /S /GoTo /D (subsubsection.11.4.5.3) >> +endobj +700 0 obj +(11.4.5.3 Using plaintext passwords or encrypted password) +endobj +701 0 obj +<< /S /GoTo /D (subsubsection.11.4.5.4) >> +endobj +704 0 obj +(11.4.5.4 Getting non-column data from the table) +endobj +705 0 obj +<< /S /GoTo /D (subsection.11.4.6) >> +endobj +708 0 obj +(11.4.6 XML) +endobj +709 0 obj +<< /S /GoTo /D (section.11.5) >> +endobj +712 0 obj +(11.5 Common Errors) +endobj +713 0 obj +<< /S /GoTo /D (subsection.11.5.1) >> +endobj +716 0 obj +(11.5.1 Users can not logon - Users not in Samba SAM) +endobj +717 0 obj +<< /S /GoTo /D (subsection.11.5.2) >> +endobj +720 0 obj +(11.5.2 Users are being added to the wrong backend database) +endobj +721 0 obj +<< /S /GoTo /D (subsection.11.5.3) >> +endobj +724 0 obj +(11.5.3 auth methods does not work) +endobj +725 0 obj +<< /S /GoTo /D (chapter.12) >> +endobj +728 0 obj +(12 Mapping MS Windows and Unix Groups) +endobj +729 0 obj +<< /S /GoTo /D (section.12.1) >> +endobj +732 0 obj +(12.1 Features and Benefits) +endobj +733 0 obj +<< /S /GoTo /D (section.12.2) >> +endobj +736 0 obj +(12.2 Discussion) +endobj +737 0 obj +<< /S /GoTo /D (subsection.12.2.1) >> +endobj +740 0 obj +(12.2.1 Example Configuration) +endobj +741 0 obj +<< /S /GoTo /D (section.12.3) >> +endobj +744 0 obj +(12.3 Configuration Scripts) +endobj +745 0 obj +<< /S /GoTo /D (subsection.12.3.1) >> +endobj +748 0 obj +(12.3.1 Sample smb.conf add group script) +endobj +749 0 obj +<< /S /GoTo /D (subsection.12.3.2) >> +endobj +752 0 obj +(12.3.2 Script to configure Group Mapping) +endobj +753 0 obj +<< /S /GoTo /D (section.12.4) >> +endobj +756 0 obj +(12.4 Common Errors) +endobj +757 0 obj +<< /S /GoTo /D (subsection.12.4.1) >> +endobj +760 0 obj +(12.4.1 Adding Groups Fails) +endobj +761 0 obj +<< /S /GoTo /D (subsection.12.4.2) >> +endobj +764 0 obj +(12.4.2 Adding MS Windows Groups to MS Windows Groups Fails) +endobj +765 0 obj +<< /S /GoTo /D (chapter.13) >> +endobj +768 0 obj +(13 File, Directory and Share Access Controls) +endobj +769 0 obj +<< /S /GoTo /D (section.13.1) >> +endobj +772 0 obj +(13.1 Features and Benefits) +endobj +773 0 obj +<< /S /GoTo /D (section.13.2) >> +endobj +776 0 obj +(13.2 File System Access Controls) +endobj +777 0 obj +<< /S /GoTo /D (subsection.13.2.1) >> +endobj +780 0 obj +(13.2.1 MS Windows NTFS Comparison with Unix File Systems) +endobj +781 0 obj +<< /S /GoTo /D (subsection.13.2.2) >> +endobj +784 0 obj +(13.2.2 Managing Directories) +endobj +785 0 obj +<< /S /GoTo /D (subsection.13.2.3) >> +endobj +788 0 obj +(13.2.3 File and Directory Access Control) +endobj +789 0 obj +<< /S /GoTo /D (section.13.3) >> +endobj +792 0 obj +(13.3 Share Definition Access Controls) +endobj +793 0 obj +<< /S /GoTo /D (subsection.13.3.1) >> +endobj +796 0 obj +(13.3.1 User and Group Based Controls) +endobj +797 0 obj +<< /S /GoTo /D (subsection.13.3.2) >> +endobj +800 0 obj +(13.3.2 File and Directory Permissions Based Controls) +endobj +801 0 obj +<< /S /GoTo /D (subsection.13.3.3) >> +endobj +804 0 obj +(13.3.3 Miscellaneous Controls) +endobj +805 0 obj +<< /S /GoTo /D (section.13.4) >> +endobj +808 0 obj +(13.4 Access Controls on Shares) +endobj +809 0 obj +<< /S /GoTo /D (subsection.13.4.1) >> +endobj +812 0 obj +(13.4.1 Share Permissions Management) +endobj +813 0 obj +<< /S /GoTo /D (subsubsection.13.4.1.1) >> +endobj +816 0 obj +(13.4.1.1 Windows NT4 Workstation/Server) +endobj +817 0 obj +<< /S /GoTo /D (subsubsection.13.4.1.2) >> +endobj +820 0 obj +(13.4.1.2 Windows 200x/XP) +endobj +821 0 obj +<< /S /GoTo /D (section.13.5) >> +endobj +824 0 obj +(13.5 MS Windows Access Control Lists and Unix Interoperability) +endobj +825 0 obj +<< /S /GoTo /D (subsection.13.5.1) >> +endobj +828 0 obj +(13.5.1 Managing UNIX permissions Using NT Security Dialogs) +endobj +829 0 obj +<< /S /GoTo /D (subsection.13.5.2) >> +endobj +832 0 obj +(13.5.2 Viewing File Security on a Samba Share) +endobj +833 0 obj +<< /S /GoTo /D (subsection.13.5.3) >> +endobj +836 0 obj +(13.5.3 Viewing file ownership) +endobj +837 0 obj +<< /S /GoTo /D (subsection.13.5.4) >> +endobj +840 0 obj +(13.5.4 Viewing File or Directory Permissions) +endobj +841 0 obj +<< /S /GoTo /D (subsubsection.13.5.4.1) >> +endobj +844 0 obj +(13.5.4.1 File Permissions) +endobj +845 0 obj +<< /S /GoTo /D (subsubsection.13.5.4.2) >> +endobj +848 0 obj +(13.5.4.2 Directory Permissions) +endobj +849 0 obj +<< /S /GoTo /D (subsection.13.5.5) >> +endobj +852 0 obj +(13.5.5 Modifying file or directory permissions) +endobj +853 0 obj +<< /S /GoTo /D (subsection.13.5.6) >> +endobj +856 0 obj +(13.5.6 Interaction with the standard Samba create mask parameters) +endobj +857 0 obj +<< /S /GoTo /D (subsection.13.5.7) >> +endobj +860 0 obj +(13.5.7 Interaction with the standard Samba file attribute mapping) +endobj +861 0 obj +<< /S /GoTo /D (section.13.6) >> +endobj +864 0 obj +(13.6 Common Errors) +endobj +865 0 obj +<< /S /GoTo /D (subsection.13.6.1) >> +endobj +868 0 obj +(13.6.1 Users can not write to a public share) +endobj +869 0 obj +<< /S /GoTo /D (subsection.13.6.2) >> +endobj +872 0 obj +(13.6.2 I have set force user and samba still makes root the owner of all the files I touch!) +endobj +873 0 obj +<< /S /GoTo /D (chapter.14) >> +endobj +876 0 obj +(14 File and Record Locking) +endobj +877 0 obj +<< /S /GoTo /D (section.14.1) >> +endobj +880 0 obj +(14.1 Features and Benefits) +endobj +881 0 obj +<< /S /GoTo /D (section.14.2) >> +endobj +884 0 obj +(14.2 Discussion) +endobj +885 0 obj +<< /S /GoTo /D (subsection.14.2.1) >> +endobj +888 0 obj +(14.2.1 Opportunistic Locking Overview) +endobj +889 0 obj +<< /S /GoTo /D (subsubsection.14.2.1.1) >> +endobj +892 0 obj +(14.2.1.1 Exclusively Accessed Shares) +endobj +893 0 obj +<< /S /GoTo /D (subsubsection.14.2.1.2) >> +endobj +896 0 obj +(14.2.1.2 Multiple-Accessed Shares or Files) +endobj +897 0 obj +<< /S /GoTo /D (subsubsection.14.2.1.3) >> +endobj +900 0 obj +(14.2.1.3 Unix or NFS Client Accessed Files) +endobj +901 0 obj +<< /S /GoTo /D (subsubsection.14.2.1.4) >> +endobj +904 0 obj +(14.2.1.4 Slow and/or Unreliable Networks) +endobj +905 0 obj +<< /S /GoTo /D (subsubsection.14.2.1.5) >> +endobj +908 0 obj +(14.2.1.5 Multi-User Databases) +endobj +909 0 obj +<< /S /GoTo /D (subsubsection.14.2.1.6) >> +endobj +912 0 obj +(14.2.1.6 PDM Data Shares) +endobj +913 0 obj +<< /S /GoTo /D (subsubsection.14.2.1.7) >> +endobj +916 0 obj +(14.2.1.7 Beware of Force User) +endobj +917 0 obj +<< /S /GoTo /D (subsubsection.14.2.1.8) >> +endobj +920 0 obj +(14.2.1.8 Advanced Samba Opportunistic Locking Parameters) +endobj +921 0 obj +<< /S /GoTo /D (subsubsection.14.2.1.9) >> +endobj +924 0 obj +(14.2.1.9 Mission Critical High Availability) +endobj +925 0 obj +<< /S /GoTo /D (section.14.3) >> +endobj +928 0 obj +(14.3 Samba Opportunistic Locking Control) +endobj +929 0 obj +<< /S /GoTo /D (subsection.14.3.1) >> +endobj +932 0 obj +(14.3.1 Example Configuration) +endobj +933 0 obj +<< /S /GoTo /D (subsubsection.14.3.1.1) >> +endobj +936 0 obj +(14.3.1.1 Disabling Oplocks) +endobj +937 0 obj +<< /S /GoTo /D (subsubsection.14.3.1.2) >> +endobj +940 0 obj +(14.3.1.2 Disabling Kernel OpLocks) +endobj +941 0 obj +<< /S /GoTo /D (section.14.4) >> +endobj +944 0 obj +(14.4 MS Windows Opportunistic Locking and Caching Controls) +endobj +945 0 obj +<< /S /GoTo /D (subsection.14.4.1) >> +endobj +948 0 obj +(14.4.1 Workstation Service Entries) +endobj +949 0 obj +<< /S /GoTo /D (subsection.14.4.2) >> +endobj +952 0 obj +(14.4.2 Server Service Entries) +endobj +953 0 obj +<< /S /GoTo /D (section.14.5) >> +endobj +956 0 obj +(14.5 Persistent Data Corruption) +endobj +957 0 obj +<< /S /GoTo /D (section.14.6) >> +endobj +960 0 obj +(14.6 Common Errors) +endobj +961 0 obj +<< /S /GoTo /D (subsection.14.6.1) >> +endobj +964 0 obj +(14.6.1 locking.tdb error messages) +endobj +965 0 obj +<< /S /GoTo /D (section.14.7) >> +endobj +968 0 obj +(14.7 Additional Reading) +endobj +969 0 obj +<< /S /GoTo /D (chapter.15) >> +endobj +972 0 obj +(15 Securing Samba) +endobj +973 0 obj +<< /S /GoTo /D (section.15.1) >> +endobj +976 0 obj +(15.1 Introduction) +endobj +977 0 obj +<< /S /GoTo /D (section.15.2) >> +endobj +980 0 obj +(15.2 Features and Benefits) +endobj +981 0 obj +<< /S /GoTo /D (section.15.3) >> +endobj +984 0 obj +(15.3 Technical Discussion of Protective Measures and Issues) +endobj +985 0 obj +<< /S /GoTo /D (subsection.15.3.1) >> +endobj +988 0 obj +(15.3.1 Using host based protection) +endobj +989 0 obj +<< /S /GoTo /D (subsection.15.3.2) >> +endobj +992 0 obj +(15.3.2 User based protection) +endobj +993 0 obj +<< /S /GoTo /D (subsection.15.3.3) >> +endobj +996 0 obj +(15.3.3 Using interface protection) +endobj +997 0 obj +<< /S /GoTo /D (subsection.15.3.4) >> +endobj +1000 0 obj +(15.3.4 Using a firewall) +endobj +1001 0 obj +<< /S /GoTo /D (subsection.15.3.5) >> +endobj +1004 0 obj +(15.3.5 Using a IPC\044 share deny) +endobj +1005 0 obj +<< /S /GoTo /D (subsection.15.3.6) >> +endobj +1008 0 obj +(15.3.6 NTLMv2 Security) +endobj +1009 0 obj +<< /S /GoTo /D (section.15.4) >> +endobj +1012 0 obj +(15.4 Upgrading Samba) +endobj +1013 0 obj +<< /S /GoTo /D (section.15.5) >> +endobj +1016 0 obj +(15.5 Common Errors) +endobj +1017 0 obj +<< /S /GoTo /D (subsection.15.5.1) >> +endobj +1020 0 obj +(15.5.1 Smbclient works on localhost, but the network is dead) +endobj +1021 0 obj +<< /S /GoTo /D (subsection.15.5.2) >> +endobj +1024 0 obj +(15.5.2 Why can users access home directories of other users?) +endobj +1025 0 obj +<< /S /GoTo /D (chapter.16) >> +endobj +1028 0 obj +(16 Interdomain Trust Relationships) +endobj +1029 0 obj +<< /S /GoTo /D (section.16.1) >> +endobj +1032 0 obj +(16.1 Features and Benefits) +endobj +1033 0 obj +<< /S /GoTo /D (section.16.2) >> +endobj +1036 0 obj +(16.2 Trust Relationship Background) +endobj +1037 0 obj +<< /S /GoTo /D (section.16.3) >> +endobj +1040 0 obj +(16.3 Native MS Windows NT4 Trusts Configuration) +endobj +1041 0 obj +<< /S /GoTo /D (subsection.16.3.1) >> +endobj +1044 0 obj +(16.3.1 NT4 as the Trusting Domain \(ie. creating the trusted account\)) +endobj +1045 0 obj +<< /S /GoTo /D (subsection.16.3.2) >> +endobj +1048 0 obj +(16.3.2 NT4 as the Trusted Domain \(ie. creating trusted account's password\)) +endobj +1049 0 obj +<< /S /GoTo /D (section.16.4) >> +endobj +1052 0 obj +(16.4 Configuring Samba NT-style Domain Trusts) +endobj +1053 0 obj +<< /S /GoTo /D (subsection.16.4.1) >> +endobj +1056 0 obj +(16.4.1 Samba-3 as the Trusting Domain) +endobj +1057 0 obj +<< /S /GoTo /D (subsection.16.4.2) >> +endobj +1060 0 obj +(16.4.2 Samba-3 as the Trusted Domain) +endobj +1061 0 obj +<< /S /GoTo /D (section.16.5) >> +endobj +1064 0 obj +(16.5 Common Errors) +endobj +1065 0 obj +<< /S /GoTo /D (subsection.16.5.1) >> +endobj +1068 0 obj +(16.5.1 Tell me about Trust Relationships using Samba) +endobj +1069 0 obj +<< /S /GoTo /D (chapter.17) >> +endobj +1072 0 obj +(17 Hosting a Microsoft Distributed File System tree on Samba) +endobj +1073 0 obj +<< /S /GoTo /D (section.17.1) >> +endobj +1076 0 obj +(17.1 Features and Benefits) +endobj +1077 0 obj +<< /S /GoTo /D (section.17.2) >> +endobj +1080 0 obj +(17.2 Common Errors) +endobj +1081 0 obj +<< /S /GoTo /D (chapter.18) >> +endobj +1084 0 obj +(18 Classical Printing Support) +endobj +1085 0 obj +<< /S /GoTo /D (section.18.1) >> +endobj +1088 0 obj +(18.1 Features and Benefits) +endobj +1089 0 obj +<< /S /GoTo /D (section.18.2) >> +endobj +1092 0 obj +(18.2 Technical Introduction) +endobj +1093 0 obj +<< /S /GoTo /D (subsection.18.2.1) >> +endobj +1096 0 obj +(18.2.1 What happens if you send a Job from a Client) +endobj +1097 0 obj +<< /S /GoTo /D (subsection.18.2.2) >> +endobj +1100 0 obj +(18.2.2 Printing Related Configuration Parameters) +endobj +1101 0 obj +<< /S /GoTo /D (subsection.18.2.3) >> +endobj +1104 0 obj +(18.2.3 Parameters Recommended for Use) +endobj +1105 0 obj +<< /S /GoTo /D (subsection.18.2.4) >> +endobj +1108 0 obj +(18.2.4 Parameters for Backwards Compatibility) +endobj +1109 0 obj +<< /S /GoTo /D (subsection.18.2.5) >> +endobj +1112 0 obj +(18.2.5 Parameters no longer in use) +endobj +1113 0 obj +<< /S /GoTo /D (section.18.3) >> +endobj +1116 0 obj +(18.3 A simple Configuration to Print with Samba-3) +endobj +1117 0 obj +<< /S /GoTo /D (subsection.18.3.1) >> +endobj +1120 0 obj +(18.3.1 Verification of "Settings in Use" with testparm) +endobj +1121 0 obj +<< /S /GoTo /D (subsection.18.3.2) >> +endobj +1124 0 obj +(18.3.2 A little Experiment to warn you) +endobj +1125 0 obj +<< /S /GoTo /D (section.18.4) >> +endobj +1128 0 obj +(18.4 Extended Sample Configuration to Print with Samba-3) +endobj +1129 0 obj +<< /S /GoTo /D (section.18.5) >> +endobj +1132 0 obj +(18.5 Detailed Explanation of the Example's Settings) +endobj +1133 0 obj +<< /S /GoTo /D (subsection.18.5.1) >> +endobj +1136 0 obj +(18.5.1 The [global] Section) +endobj +1137 0 obj +<< /S /GoTo /D (subsection.18.5.2) >> +endobj +1140 0 obj +(18.5.2 The [printers] Section) +endobj +1141 0 obj +<< /S /GoTo /D (subsection.18.5.3) >> +endobj +1144 0 obj +(18.5.3 Any [my\137printer\137name] Section) +endobj +1145 0 obj +<< /S /GoTo /D (subsection.18.5.4) >> +endobj +1148 0 obj +(18.5.4 Print Commands) +endobj +1149 0 obj +<< /S /GoTo /D (subsection.18.5.5) >> +endobj +1152 0 obj +(18.5.5 Default Print Commands for various Unix Print Subsystems) +endobj +1153 0 obj +<< /S /GoTo /D (subsection.18.5.6) >> +endobj +1156 0 obj +(18.5.6 Setting up your own Print Commands) +endobj +1157 0 obj +<< /S /GoTo /D (section.18.6) >> +endobj +1160 0 obj +(18.6 Innovations in Samba Printing since 2.2) +endobj +1161 0 obj +<< /S /GoTo /D (subsection.18.6.1) >> +endobj +1164 0 obj +(18.6.1 Client Drivers on Samba Server for Point'n'Print) +endobj +1165 0 obj +<< /S /GoTo /D (subsection.18.6.2) >> +endobj +1168 0 obj +(18.6.2 The [printer\044] Section is removed from Samba-3) +endobj +1169 0 obj +<< /S /GoTo /D (subsection.18.6.3) >> +endobj +1172 0 obj +(18.6.3 Creating the [print\044] Share) +endobj +1173 0 obj +<< /S /GoTo /D (subsection.18.6.4) >> +endobj +1176 0 obj +(18.6.4 Parameters in the [print\044] Section) +endobj +1177 0 obj +<< /S /GoTo /D (subsection.18.6.5) >> +endobj +1180 0 obj +(18.6.5 Subdirectory Structure in [print\044]) +endobj +1181 0 obj +<< /S /GoTo /D (section.18.7) >> +endobj +1184 0 obj +(18.7 Installing Drivers into [print\044]) +endobj +1185 0 obj +<< /S /GoTo /D (subsection.18.7.1) >> +endobj +1188 0 obj +(18.7.1 Setting Drivers for existing Printers with a Client GUI) +endobj +1189 0 obj +<< /S /GoTo /D (subsection.18.7.2) >> +endobj +1192 0 obj +(18.7.2 Setting Drivers for existing Printers with rpcclient) +endobj +1193 0 obj +<< /S /GoTo /D (subsubsection.18.7.2.1) >> +endobj +1196 0 obj +(18.7.2.1 Identifying the Driver Files) +endobj +1197 0 obj +<< /S /GoTo /D (subsubsection.18.7.2.2) >> +endobj +1200 0 obj +(18.7.2.2 Collecting the Driver Files from a Windows Host's [print\044] Share) +endobj +1201 0 obj +<< /S /GoTo /D (subsubsection.18.7.2.3) >> +endobj +1204 0 obj +(18.7.2.3 Depositing the Driver Files into [print\044]) +endobj +1205 0 obj +<< /S /GoTo /D (subsubsection.18.7.2.4) >> +endobj +1208 0 obj +(18.7.2.4 Check if the Driver Files are there \(with smbclient\)) +endobj +1209 0 obj +<< /S /GoTo /D (subsubsection.18.7.2.5) >> +endobj +1212 0 obj +(18.7.2.5 Running rpcclient with adddriver) +endobj +1213 0 obj +<< /S /GoTo /D (subsubsection.18.7.2.6) >> +endobj +1216 0 obj +(18.7.2.6 Check how Driver Files have been moved after adddriver finished) +endobj +1217 0 obj +<< /S /GoTo /D (subsubsection.18.7.2.7) >> +endobj +1220 0 obj +(18.7.2.7 Check if the Driver is recognized by Samba) +endobj +1221 0 obj +<< /S /GoTo /D (subsubsection.18.7.2.8) >> +endobj +1224 0 obj +(18.7.2.8 A sidenote: you are not bound to specific driver names) +endobj +1225 0 obj +<< /S /GoTo /D (subsubsection.18.7.2.9) >> +endobj +1228 0 obj +(18.7.2.9 La Grande Finale: Running rpcclient with setdriver) +endobj +1229 0 obj +<< /S /GoTo /D (section.18.8) >> +endobj +1232 0 obj +(18.8 "The Proof of the Pudding lies in the Eating" \(Client Driver Insta Procedure\)) +endobj +1233 0 obj +<< /S /GoTo /D (subsection.18.8.1) >> +endobj +1236 0 obj +(18.8.1 The first Client Driver Installation) +endobj +1237 0 obj +<< /S /GoTo /D (subsection.18.8.2) >> +endobj +1240 0 obj +(18.8.2 IMPORTANT! Setting Device Modes on new Printers) +endobj +1241 0 obj +<< /S /GoTo /D (subsection.18.8.3) >> +endobj +1244 0 obj +(18.8.3 Further Client Driver Install Procedures) +endobj +1245 0 obj +<< /S /GoTo /D (subsection.18.8.4) >> +endobj +1248 0 obj +(18.8.4 Always make first Client Connection as root or "printer admin") +endobj +1249 0 obj +<< /S /GoTo /D (section.18.9) >> +endobj +1252 0 obj +(18.9 Other Gotchas) +endobj +1253 0 obj +<< /S /GoTo /D (subsection.18.9.1) >> +endobj +1256 0 obj +(18.9.1 Setting Default Print Options for the Client Drivers) +endobj +1257 0 obj +<< /S /GoTo /D (subsection.18.9.2) >> +endobj +1260 0 obj +(18.9.2 Supporting large Numbers of Printers) +endobj +1261 0 obj +<< /S /GoTo /D (subsection.18.9.3) >> +endobj +1264 0 obj +(18.9.3 Adding new Printers with the Windows NT APW) +endobj +1265 0 obj +<< /S /GoTo /D (subsection.18.9.4) >> +endobj +1268 0 obj +(18.9.4 Weird Error Message Cannot connect under a different Name) +endobj +1269 0 obj +<< /S /GoTo /D (subsection.18.9.5) >> +endobj +1272 0 obj +(18.9.5 Be careful when assembling Driver Files) +endobj +1273 0 obj +<< /S /GoTo /D (subsection.18.9.6) >> +endobj +1276 0 obj +(18.9.6 Samba and Printer Ports) +endobj +1277 0 obj +<< /S /GoTo /D (subsection.18.9.7) >> +endobj +1280 0 obj +(18.9.7 Avoiding the most common Misconfigurations of the Client Driver) +endobj +1281 0 obj +<< /S /GoTo /D (section.18.10) >> +endobj +1284 0 obj +(18.10 The Imprints Toolset) +endobj +1285 0 obj +<< /S /GoTo /D (subsection.18.10.1) >> +endobj +1288 0 obj +(18.10.1 What is Imprints?) +endobj +1289 0 obj +<< /S /GoTo /D (subsection.18.10.2) >> +endobj +1292 0 obj +(18.10.2 Creating Printer Driver Packages) +endobj +1293 0 obj +<< /S /GoTo /D (subsection.18.10.3) >> +endobj +1296 0 obj +(18.10.3 The Imprints Server) +endobj +1297 0 obj +<< /S /GoTo /D (subsection.18.10.4) >> +endobj +1300 0 obj +(18.10.4 The Installation Client) +endobj +1301 0 obj +<< /S /GoTo /D (section.18.11) >> +endobj +1304 0 obj +(18.11 Add Network Printers at Logon without User Interaction) +endobj +1305 0 obj +<< /S /GoTo /D (section.18.12) >> +endobj +1308 0 obj +(18.12 The addprinter command) +endobj +1309 0 obj +<< /S /GoTo /D (section.18.13) >> +endobj +1312 0 obj +(18.13 Migration of "Classical" printing to Samba-3) +endobj +1313 0 obj +<< /S /GoTo /D (section.18.14) >> +endobj +1316 0 obj +(18.14 Publishing Printer Information in Active Directory or LDAP) +endobj +1317 0 obj +<< /S /GoTo /D (section.18.15) >> +endobj +1320 0 obj +(18.15 Common Errors and Problems) +endobj +1321 0 obj +<< /S /GoTo /D (subsection.18.15.1) >> +endobj +1324 0 obj +(18.15.1 I give my root password but I don't get access) +endobj +1325 0 obj +<< /S /GoTo /D (subsection.18.15.2) >> +endobj +1328 0 obj +(18.15.2 My printjobs get spooled into the spooling directory, but then get lost) +endobj +1329 0 obj +<< /S /GoTo /D (chapter.19) >> +endobj +1332 0 obj +(19 CUPS Printing Support in Samba 3.0) +endobj +1333 0 obj +<< /S /GoTo /D (section.19.1) >> +endobj +1336 0 obj +(19.1 Introduction) +endobj +1337 0 obj +<< /S /GoTo /D (subsection.19.1.1) >> +endobj +1340 0 obj +(19.1.1 Features and Benefits) +endobj +1341 0 obj +<< /S /GoTo /D (subsection.19.1.2) >> +endobj +1344 0 obj +(19.1.2 Overview) +endobj +1345 0 obj +<< /S /GoTo /D (section.19.2) >> +endobj +1348 0 obj +(19.2 Basic Configuration of CUPS support) +endobj +1349 0 obj +<< /S /GoTo /D (subsection.19.2.1) >> +endobj +1352 0 obj +(19.2.1 Linking of smbd with libcups.so) +endobj +1353 0 obj +<< /S /GoTo /D (subsection.19.2.2) >> +endobj +1356 0 obj +(19.2.2 Simple smb.conf Settings for CUPS) +endobj +1357 0 obj +<< /S /GoTo /D (subsection.19.2.3) >> +endobj +1360 0 obj +(19.2.3 More complex smb.conf Settings for CUPS) +endobj +1361 0 obj +<< /S /GoTo /D (section.19.3) >> +endobj +1364 0 obj +(19.3 Advanced Configuration) +endobj +1365 0 obj +<< /S /GoTo /D (subsection.19.3.1) >> +endobj +1368 0 obj +(19.3.1 Central spooling vs. "Peer-to-Peer" printing) +endobj +1369 0 obj +<< /S /GoTo /D (subsection.19.3.2) >> +endobj +1372 0 obj +(19.3.2 CUPS/Samba as a "spooling-only" Print Server; "raw" printing with Vendor Drivers on Windows Clients) +endobj +1373 0 obj +<< /S /GoTo /D (subsection.19.3.3) >> +endobj +1376 0 obj +(19.3.3 Driver Installation Methods on Windows Clients) +endobj +1377 0 obj +<< /S /GoTo /D (subsection.19.3.4) >> +endobj +1380 0 obj +(19.3.4 Explicitly enable "raw" printing for application/octet-stream!) +endobj +1381 0 obj +<< /S /GoTo /D (subsection.19.3.5) >> +endobj +1384 0 obj +(19.3.5 Three familiar Methods for driver upload plus a new one) +endobj +1385 0 obj +<< /S /GoTo /D (section.19.4) >> +endobj +1388 0 obj +(19.4 Using CUPS/Samba in an advanced Way -- intelligent printing with PostScript Driver Download) +endobj +1389 0 obj +<< /S /GoTo /D (subsection.19.4.1) >> +endobj +1392 0 obj +(19.4.1 GDI on Windows -- PostScript on Unix) +endobj +1393 0 obj +<< /S /GoTo /D (subsection.19.4.2) >> +endobj +1396 0 obj +(19.4.2 Windows Drivers, GDI and EMF) +endobj +1397 0 obj +<< /S /GoTo /D (subsection.19.4.3) >> +endobj +1400 0 obj +(19.4.3 Unix Printfile Conversion and GUI Basics) +endobj +1401 0 obj +<< /S /GoTo /D (subsection.19.4.4) >> +endobj +1404 0 obj +(19.4.4 PostScript and Ghostscript) +endobj +1405 0 obj +<< /S /GoTo /D (subsection.19.4.5) >> +endobj +1408 0 obj +(19.4.5 Ghostscript -- the Software RIP for non-PostScript Printers) +endobj +1409 0 obj +<< /S /GoTo /D (subsection.19.4.6) >> +endobj +1412 0 obj +(19.4.6 PostScript Printer Description \(PPD\) Specification) +endobj +1413 0 obj +<< /S /GoTo /D (subsection.19.4.7) >> +endobj +1416 0 obj +(19.4.7 CUPS can use all Windows-formatted Vendor PPDs) +endobj +1417 0 obj +<< /S /GoTo /D (subsection.19.4.8) >> +endobj +1420 0 obj +(19.4.8 CUPS also uses PPDs for non-PostScript Printers) +endobj +1421 0 obj +<< /S /GoTo /D (section.19.5) >> +endobj +1424 0 obj +(19.5 The CUPS Filtering Architecture) +endobj +1425 0 obj +<< /S /GoTo /D (subsection.19.5.1) >> +endobj +1428 0 obj +(19.5.1 MIME types and CUPS Filters) +endobj +1429 0 obj +<< /S /GoTo /D (subsection.19.5.2) >> +endobj +1432 0 obj +(19.5.2 MIME type Conversion Rules) +endobj +1433 0 obj +<< /S /GoTo /D (subsection.19.5.3) >> +endobj +1436 0 obj +(19.5.3 Filter Requirements) +endobj +1437 0 obj +<< /S /GoTo /D (subsection.19.5.4) >> +endobj +1440 0 obj +(19.5.4 Prefilters) +endobj +1441 0 obj +<< /S /GoTo /D (subsection.19.5.5) >> +endobj +1444 0 obj +(19.5.5 pstops) +endobj +1445 0 obj +<< /S /GoTo /D (subsection.19.5.6) >> +endobj +1448 0 obj +(19.5.6 pstoraster) +endobj +1449 0 obj +<< /S /GoTo /D (subsection.19.5.7) >> +endobj +1452 0 obj +(19.5.7 imagetops and imagetoraster) +endobj +1453 0 obj +<< /S /GoTo /D (subsection.19.5.8) >> +endobj +1456 0 obj +(19.5.8 rasterto [printerspecific]) +endobj +1457 0 obj +<< /S /GoTo /D (subsection.19.5.9) >> +endobj +1460 0 obj +(19.5.9 CUPS Backends) +endobj +1461 0 obj +<< /S /GoTo /D (subsection.19.5.10) >> +endobj +1464 0 obj +(19.5.10 cupsomatic/Foomatic -- how do they fit into the Picture?) +endobj +1465 0 obj +<< /S /GoTo /D (subsection.19.5.11) >> +endobj +1468 0 obj +(19.5.11 The Complete Picture) +endobj +1469 0 obj +<< /S /GoTo /D (subsection.19.5.12) >> +endobj +1472 0 obj +(19.5.12 mime.convs) +endobj +1473 0 obj +<< /S /GoTo /D (subsection.19.5.13) >> +endobj +1476 0 obj +(19.5.13 "Raw" printing) +endobj +1477 0 obj +<< /S /GoTo /D (subsection.19.5.14) >> +endobj +1480 0 obj +(19.5.14 "application/octet-stream" printing) +endobj +1481 0 obj +<< /S /GoTo /D (subsection.19.5.15) >> +endobj +1484 0 obj +(19.5.15 PostScript Printer Descriptions \(PPDs\) for non-PS Printers) +endobj +1485 0 obj +<< /S /GoTo /D (subsection.19.5.16) >> +endobj +1488 0 obj +(19.5.16 Difference between cupsomatic/foomatic-rip and native CUPS printing) +endobj +1489 0 obj +<< /S /GoTo /D (subsection.19.5.17) >> +endobj +1492 0 obj +(19.5.17 Examples for filtering Chains) +endobj +1493 0 obj +<< /S /GoTo /D (subsection.19.5.18) >> +endobj +1496 0 obj +(19.5.18 Sources of CUPS drivers / PPDs) +endobj +1497 0 obj +<< /S /GoTo /D (subsection.19.5.19) >> +endobj +1500 0 obj +(19.5.19 Printing with Interface Scripts) +endobj +1501 0 obj +<< /S /GoTo /D (section.19.6) >> +endobj +1504 0 obj +(19.6 Network printing \(purely Windows\)) +endobj +1505 0 obj +<< /S /GoTo /D (subsection.19.6.1) >> +endobj +1508 0 obj +(19.6.1 From Windows Clients to an NT Print Server) +endobj +1509 0 obj +<< /S /GoTo /D (subsection.19.6.2) >> +endobj +1512 0 obj +(19.6.2 Driver Execution on the Client) +endobj +1513 0 obj +<< /S /GoTo /D (subsection.19.6.3) >> +endobj +1516 0 obj +(19.6.3 Driver Execution on the Server) +endobj +1517 0 obj +<< /S /GoTo /D (section.19.7) >> +endobj +1520 0 obj +(19.7 Network Printing \(Windows clients -- UNIX/Samba Print Servers\)) +endobj +1521 0 obj +<< /S /GoTo /D (subsection.19.7.1) >> +endobj +1524 0 obj +(19.7.1 From Windows Clients to a CUPS/Samba Print Server) +endobj +1525 0 obj +<< /S /GoTo /D (subsection.19.7.2) >> +endobj +1528 0 obj +(19.7.2 Samba receiving Jobfiles and passing them to CUPS) +endobj +1529 0 obj +<< /S /GoTo /D (section.19.8) >> +endobj +1532 0 obj +(19.8 Network PostScript RIP: CUPS Filters on Server -- clients use PostScript Driver with CUPS-PPDs) +endobj +1533 0 obj +<< /S /GoTo /D (subsection.19.8.1) >> +endobj +1536 0 obj +(19.8.1 PPDs for non-PS Printers on UNIX) +endobj +1537 0 obj +<< /S /GoTo /D (subsection.19.8.2) >> +endobj +1540 0 obj +(19.8.2 PPDs for non-PS Printers on Windows) +endobj +1541 0 obj +<< /S /GoTo /D (section.19.9) >> +endobj +1544 0 obj +(19.9 Windows Terminal Servers \(WTS\) as CUPS Clients) +endobj +1545 0 obj +<< /S /GoTo /D (subsection.19.9.1) >> +endobj +1548 0 obj +(19.9.1 Printer Drivers running in "Kernel Mode" cause many Problems) +endobj +1549 0 obj +<< /S /GoTo /D (subsection.19.9.2) >> +endobj +1552 0 obj +(19.9.2 Workarounds impose Heavy Limitations) +endobj +1553 0 obj +<< /S /GoTo /D (subsection.19.9.3) >> +endobj +1556 0 obj +(19.9.3 CUPS: a "Magical Stone"?) +endobj +1557 0 obj +<< /S /GoTo /D (subsection.19.9.4) >> +endobj +1560 0 obj +(19.9.4 PostScript Drivers with no major problems -- even in Kernel Mode) +endobj +1561 0 obj +<< /S /GoTo /D (section.19.10) >> +endobj +1564 0 obj +(19.10 Setting up CUPS for driver Download) +endobj +1565 0 obj +<< /S /GoTo /D (subsection.19.10.1) >> +endobj +1568 0 obj +(19.10.1 cupsaddsmb: the unknown Utility) +endobj +1569 0 obj +<< /S /GoTo /D (subsection.19.10.2) >> +endobj +1572 0 obj +(19.10.2 Prepare your smb.conf for cupsaddsmb) +endobj +1573 0 obj +<< /S /GoTo /D (subsection.19.10.3) >> +endobj +1576 0 obj +(19.10.3 CUPS Package of "PostScript Driver for WinNT/2k/XP") +endobj +1577 0 obj +<< /S /GoTo /D (subsection.19.10.4) >> +endobj +1580 0 obj +(19.10.4 Recognize the different Driver Files) +endobj +1581 0 obj +<< /S /GoTo /D (subsection.19.10.5) >> +endobj +1584 0 obj +(19.10.5 Acquiring the Adobe Driver Files) +endobj +1585 0 obj +<< /S /GoTo /D (subsection.19.10.6) >> +endobj +1588 0 obj +(19.10.6 ESP Print Pro Package of "PostScript Driver for WinNT/2k/XP") +endobj +1589 0 obj +<< /S /GoTo /D (subsection.19.10.7) >> +endobj +1592 0 obj +(19.10.7 Caveats to be considered) +endobj +1593 0 obj +<< /S /GoTo /D (subsection.19.10.8) >> +endobj +1596 0 obj +(19.10.8 What are the Benefits of using the "CUPS PostScript Driver for Windows NT/2k/XP" as compared to the Adobe Driver?) +endobj +1597 0 obj +<< /S /GoTo /D (subsection.19.10.9) >> +endobj +1600 0 obj +(19.10.9 Run "cupsaddsmb" \(quiet Mode\)) +endobj +1601 0 obj +<< /S /GoTo /D (subsection.19.10.10) >> +endobj +1604 0 obj +(19.10.10 Run "cupsaddsmb" with verbose Output) +endobj +1605 0 obj +<< /S /GoTo /D (subsection.19.10.11) >> +endobj +1608 0 obj +(19.10.11 Understanding cupsaddsmb) +endobj +1609 0 obj +<< /S /GoTo /D (subsection.19.10.12) >> +endobj +1612 0 obj +(19.10.12 How to recognize if cupsaddsm completed successfully) +endobj +1613 0 obj +<< /S /GoTo /D (subsection.19.10.13) >> +endobj +1616 0 obj +(19.10.13 cupsaddsmb with a Samba PDC) +endobj +1617 0 obj +<< /S /GoTo /D (subsection.19.10.14) >> +endobj +1620 0 obj +(19.10.14 cupsaddsmb Flowchart) +endobj +1621 0 obj +<< /S /GoTo /D (subsection.19.10.15) >> +endobj +1624 0 obj +(19.10.15 Installing the PostScript Driver on a Client) +endobj +1625 0 obj +<< /S /GoTo /D (subsection.19.10.16) >> +endobj +1628 0 obj +(19.10.16 Avoiding critical PostScript Driver Settings on the Client) +endobj +1629 0 obj +<< /S /GoTo /D (section.19.11) >> +endobj +1632 0 obj +(19.11 Installing PostScript Driver Files manually \(using rpcclient\)) +endobj +1633 0 obj +<< /S /GoTo /D (subsection.19.11.1) >> +endobj +1636 0 obj +(19.11.1 A Check of the rpcclient man Page) +endobj +1637 0 obj +<< /S /GoTo /D (subsection.19.11.2) >> +endobj +1640 0 obj +(19.11.2 Understanding the rpcclient man Page) +endobj +1641 0 obj +<< /S /GoTo /D (subsection.19.11.3) >> +endobj +1644 0 obj +(19.11.3 Producing an Example by querying a Windows Box) +endobj +1645 0 obj +<< /S /GoTo /D (subsection.19.11.4) >> +endobj +1648 0 obj +(19.11.4 What is required for adddriver and setdriver to succeed) +endobj +1649 0 obj +<< /S /GoTo /D (subsection.19.11.5) >> +endobj +1652 0 obj +(19.11.5 Manual Commandline Driver Installation in 15 little Steps) +endobj +1653 0 obj +<< /S /GoTo /D (subsubsection.19.11.5.1) >> +endobj +1656 0 obj +(19.11.5.1 First Step: Install the Printer on CUPS) +endobj +1657 0 obj +<< /S /GoTo /D (subsubsection.19.11.5.2) >> +endobj +1660 0 obj +(19.11.5.2 Second Step \(optional\): Check if the Printer is recognized by Samba) +endobj +1661 0 obj +<< /S /GoTo /D (subsubsection.19.11.5.3) >> +endobj +1664 0 obj +(19.11.5.3 Third Step \(optional\): Check if Samba knows a Driver for the Printer) +endobj +1665 0 obj +<< /S /GoTo /D (subsubsection.19.11.5.4) >> +endobj +1668 0 obj +(19.11.5.4 Fourth Step: Put all required Driver Files into Samba's [print\044]) +endobj +1669 0 obj +<< /S /GoTo /D (subsubsection.19.11.5.5) >> +endobj +1672 0 obj +(19.11.5.5 Fifth Step: Verify where the Driver Files are now) +endobj +1673 0 obj +<< /S /GoTo /D (subsubsection.19.11.5.6) >> +endobj +1676 0 obj +(19.11.5.6 Sixth Step: Tell Samba that these are Driver Files \(adddriver\)) +endobj +1677 0 obj +<< /S /GoTo /D (subsubsection.19.11.5.7) >> +endobj +1680 0 obj +(19.11.5.7 Seventh Step: Verify where the Driver Files are now) +endobj +1681 0 obj +<< /S /GoTo /D (subsubsection.19.11.5.8) >> +endobj +1684 0 obj +(19.11.5.8 Eighth Step \(optional\): Verify if Samba now recognizes the Driver) +endobj +1685 0 obj +<< /S /GoTo /D (subsubsection.19.11.5.9) >> +endobj +1688 0 obj +(19.11.5.9 Ninth Step: Tell Samba which Printer should use these Driver Files \(setdriver\)) +endobj +1689 0 obj +<< /S /GoTo /D (subsubsection.19.11.5.10) >> +endobj +1692 0 obj +(19.11.5.10 Tenth Step \(optional\): Verify if Samba has this Association recognized) +endobj +1693 0 obj +<< /S /GoTo /D (subsubsection.19.11.5.11) >> +endobj +1696 0 obj +(19.11.5.11 Eleventh Step \(optional\): Tickle the Driver into a correct Device Mode) +endobj +1697 0 obj +<< /S /GoTo /D (subsubsection.19.11.5.12) >> +endobj +1700 0 obj +(19.11.5.12 Twelveth Step: Install the Printer on a Client \("Point'n'Print"\)) +endobj +1701 0 obj +<< /S /GoTo /D (subsubsection.19.11.5.13) >> +endobj +1704 0 obj +(19.11.5.13 Thirteenth Step \(optional\): Print a Test Page) +endobj +1705 0 obj +<< /S /GoTo /D (subsubsection.19.11.5.14) >> +endobj +1708 0 obj +(19.11.5.14 Fourteenth Step \(recommended\): Study the Test Page) +endobj +1709 0 obj +<< /S /GoTo /D (subsubsection.19.11.5.15) >> +endobj +1712 0 obj +(19.11.5.15 Fifteenth Step \(obligatory\): Enjoy. Jump. Celebrate your Success) +endobj +1713 0 obj +<< /S /GoTo /D (subsection.19.11.6) >> +endobj +1716 0 obj +(19.11.6 Troubleshooting revisited) +endobj +1717 0 obj +<< /S /GoTo /D (section.19.12) >> +endobj +1720 0 obj +(19.12 The printing *.tdb Files) +endobj +1721 0 obj +<< /S /GoTo /D (subsection.19.12.1) >> +endobj +1724 0 obj +(19.12.1 Trivial DataBase Files) +endobj +1725 0 obj +<< /S /GoTo /D (subsection.19.12.2) >> +endobj +1728 0 obj +(19.12.2 Binary Format) +endobj +1729 0 obj +<< /S /GoTo /D (subsection.19.12.3) >> +endobj +1732 0 obj +(19.12.3 Losing *.tdb Files) +endobj +1733 0 obj +<< /S /GoTo /D (subsection.19.12.4) >> +endobj +1736 0 obj +(19.12.4 Using tdbbackup) +endobj +1737 0 obj +<< /S /GoTo /D (section.19.13) >> +endobj +1740 0 obj +(19.13 CUPS Print Drivers from Linuxprinting.org) +endobj +1741 0 obj +<< /S /GoTo /D (subsection.19.13.1) >> +endobj +1744 0 obj +(19.13.1 foomatic-rip and Foomatic explained) +endobj +1745 0 obj +<< /S /GoTo /D (subsubsection.19.13.1.1) >> +endobj +1748 0 obj +(19.13.1.1 690 "perfect" Printers) +endobj +1749 0 obj +<< /S /GoTo /D (subsubsection.19.13.1.2) >> +endobj +1752 0 obj +(19.13.1.2 How the "Printing HOWTO" started it all) +endobj +1753 0 obj +<< /S /GoTo /D (subsubsection.19.13.1.3) >> +endobj +1756 0 obj +(19.13.1.3 Foomatic's strange Name) +endobj +1757 0 obj +<< /S /GoTo /D (subsubsection.19.13.1.4) >> +endobj +1760 0 obj +(19.13.1.4 cupsomatic, pdqomatic, lpdomatic, directomatic) +endobj +1761 0 obj +<< /S /GoTo /D (subsubsection.19.13.1.5) >> +endobj +1764 0 obj +(19.13.1.5 7.13.1.5.The Grand Unification achieved...) +endobj +1765 0 obj +<< /S /GoTo /D (subsubsection.19.13.1.6) >> +endobj +1768 0 obj +(19.13.1.6 Driver Development outside) +endobj +1769 0 obj +<< /S /GoTo /D (subsubsection.19.13.1.7) >> +endobj +1772 0 obj +(19.13.1.7 Forums, Downloads, Tutorials, Howtos -- also for Mac OS X and commercial Unix) +endobj +1773 0 obj +<< /S /GoTo /D (subsubsection.19.13.1.8) >> +endobj +1776 0 obj +(19.13.1.8 Foomatic Database generated PPDs) +endobj +1777 0 obj +<< /S /GoTo /D (subsection.19.13.2) >> +endobj +1780 0 obj +(19.13.2 foomatic-rip and Foomatic-PPD Download and Installation) +endobj +1781 0 obj +<< /S /GoTo /D (section.19.14) >> +endobj +1784 0 obj +(19.14 Page Accounting with CUPS) +endobj +1785 0 obj +<< /S /GoTo /D (subsection.19.14.1) >> +endobj +1788 0 obj +(19.14.1 Setting up Quotas) +endobj +1789 0 obj +<< /S /GoTo /D (subsection.19.14.2) >> +endobj +1792 0 obj +(19.14.2 Correct and incorrect Accounting) +endobj +1793 0 obj +<< /S /GoTo /D (subsection.19.14.3) >> +endobj +1796 0 obj +(19.14.3 Adobe and CUPS PostScript Drivers for Windows Clients) +endobj +1797 0 obj +<< /S /GoTo /D (subsection.19.14.4) >> +endobj +1800 0 obj +(19.14.4 The page\137log File Syntax) +endobj +1801 0 obj +<< /S /GoTo /D (subsection.19.14.5) >> +endobj +1804 0 obj +(19.14.5 Possible Shortcomings) +endobj +1805 0 obj +<< /S /GoTo /D (subsection.19.14.6) >> +endobj +1808 0 obj +(19.14.6 Future Developments) +endobj +1809 0 obj +<< /S /GoTo /D (subsection.19.14.7) >> +endobj +1812 0 obj +(19.14.7 Other Accounting Tools) +endobj +1813 0 obj +<< /S /GoTo /D (section.19.15) >> +endobj +1816 0 obj +(19.15 Additional Material) +endobj +1817 0 obj +<< /S /GoTo /D (section.19.16) >> +endobj +1820 0 obj +(19.16 Auto-Deletion or Preservation of CUPS Spool Files) +endobj +1821 0 obj +<< /S /GoTo /D (subsection.19.16.1) >> +endobj +1824 0 obj +(19.16.1 CUPS Configuration Settings explained) +endobj +1825 0 obj +<< /S /GoTo /D (subsection.19.16.2) >> +endobj +1828 0 obj +(19.16.2 Pre-conditions) +endobj +1829 0 obj +<< /S /GoTo /D (subsection.19.16.3) >> +endobj +1832 0 obj +(19.16.3 Manual Configuration) +endobj +1833 0 obj +<< /S /GoTo /D (section.19.17) >> +endobj +1836 0 obj +(19.17 When not to use Samba to print to CUPS) +endobj +1837 0 obj +<< /S /GoTo /D (section.19.18) >> +endobj +1840 0 obj +(19.18 In Case of Trouble.....) +endobj +1841 0 obj +<< /S /GoTo /D (subsection.19.18.1) >> +endobj +1844 0 obj +(19.18.1 Where to find Documentation) +endobj +1845 0 obj +<< /S /GoTo /D (subsection.19.18.2) >> +endobj +1848 0 obj +(19.18.2 How to ask for Help) +endobj +1849 0 obj +<< /S /GoTo /D (subsection.19.18.3) >> +endobj +1852 0 obj +(19.18.3 Where to find Help) +endobj +1853 0 obj +<< /S /GoTo /D (section.19.19) >> +endobj +1856 0 obj +(19.19 Appendix) +endobj +1857 0 obj +<< /S /GoTo /D (subsection.19.19.1) >> +endobj +1860 0 obj +(19.19.1 Printing from CUPS to Windows attached Printers) +endobj +1861 0 obj +<< /S /GoTo /D (subsection.19.19.2) >> +endobj +1864 0 obj +(19.19.2 More CUPS filtering Chains) +endobj +1865 0 obj +<< /S /GoTo /D (subsection.19.19.3) >> +endobj +1868 0 obj +(19.19.3 Trouble Shooting Guidelines to fix typical Samba printing Problems) +endobj +1869 0 obj +<< /S /GoTo /D (subsection.19.19.4) >> +endobj +1872 0 obj +(19.19.4 An Overview of the CUPS Printing Processes) +endobj +1873 0 obj +<< /S /GoTo /D (chapter.20) >> +endobj +1876 0 obj +(20 Stackable VFS modules) +endobj +1877 0 obj +<< /S /GoTo /D (section.20.1) >> +endobj +1880 0 obj +(20.1 Features and Benefits) +endobj +1881 0 obj +<< /S /GoTo /D (section.20.2) >> +endobj +1884 0 obj +(20.2 Discussion) +endobj +1885 0 obj +<< /S /GoTo /D (section.20.3) >> +endobj +1888 0 obj +(20.3 Included modules) +endobj +1889 0 obj +<< /S /GoTo /D (subsection.20.3.1) >> +endobj +1892 0 obj +(20.3.1 audit) +endobj +1893 0 obj +<< /S /GoTo /D (subsection.20.3.2) >> +endobj +1896 0 obj +(20.3.2 extd\137audit) +endobj +1897 0 obj +<< /S /GoTo /D (subsection.20.3.3) >> +endobj +1900 0 obj +(20.3.3 fake\137perms) +endobj +1901 0 obj +<< /S /GoTo /D (subsection.20.3.4) >> +endobj +1904 0 obj +(20.3.4 recycle) +endobj +1905 0 obj +<< /S /GoTo /D (subsection.20.3.5) >> +endobj +1908 0 obj +(20.3.5 netatalk) +endobj +1909 0 obj +<< /S /GoTo /D (section.20.4) >> +endobj +1912 0 obj +(20.4 VFS modules available elsewhere) +endobj +1913 0 obj +<< /S /GoTo /D (subsection.20.4.1) >> +endobj +1916 0 obj +(20.4.1 DatabaseFS) +endobj +1917 0 obj +<< /S /GoTo /D (subsection.20.4.2) >> +endobj +1920 0 obj +(20.4.2 vscan) +endobj +1921 0 obj +<< /S /GoTo /D (section.20.5) >> +endobj +1924 0 obj +(20.5 Common Errors) +endobj +1925 0 obj +<< /S /GoTo /D (chapter.21) >> +endobj +1928 0 obj +(21 Integrated Logon Support using Winbind) +endobj +1929 0 obj +<< /S /GoTo /D (section.21.1) >> +endobj +1932 0 obj +(21.1 Features and Benefits) +endobj +1933 0 obj +<< /S /GoTo /D (section.21.2) >> +endobj +1936 0 obj +(21.2 Introduction) +endobj +1937 0 obj +<< /S /GoTo /D (section.21.3) >> +endobj +1940 0 obj +(21.3 What Winbind Provides) +endobj +1941 0 obj +<< /S /GoTo /D (subsection.21.3.1) >> +endobj +1944 0 obj +(21.3.1 Target Uses) +endobj +1945 0 obj +<< /S /GoTo /D (section.21.4) >> +endobj +1948 0 obj +(21.4 How Winbind Works) +endobj +1949 0 obj +<< /S /GoTo /D (subsection.21.4.1) >> +endobj +1952 0 obj +(21.4.1 Microsoft Remote Procedure Calls) +endobj +1953 0 obj +<< /S /GoTo /D (subsection.21.4.2) >> +endobj +1956 0 obj +(21.4.2 Microsoft Active Directory Services) +endobj +1957 0 obj +<< /S /GoTo /D (subsection.21.4.3) >> +endobj +1960 0 obj +(21.4.3 Name Service Switch) +endobj +1961 0 obj +<< /S /GoTo /D (subsection.21.4.4) >> +endobj +1964 0 obj +(21.4.4 Pluggable Authentication Modules) +endobj +1965 0 obj +<< /S /GoTo /D (subsection.21.4.5) >> +endobj +1968 0 obj +(21.4.5 User and Group ID Allocation) +endobj +1969 0 obj +<< /S /GoTo /D (subsection.21.4.6) >> +endobj +1972 0 obj +(21.4.6 Result Caching) +endobj +1973 0 obj +<< /S /GoTo /D (section.21.5) >> +endobj +1976 0 obj +(21.5 Installation and Configuration) +endobj +1977 0 obj +<< /S /GoTo /D (subsection.21.5.1) >> +endobj +1980 0 obj +(21.5.1 Introduction) +endobj +1981 0 obj +<< /S /GoTo /D (subsection.21.5.2) >> +endobj +1984 0 obj +(21.5.2 Requirements) +endobj +1985 0 obj +<< /S /GoTo /D (subsection.21.5.3) >> +endobj +1988 0 obj +(21.5.3 Testing Things Out) +endobj +1989 0 obj +<< /S /GoTo /D (subsubsection.21.5.3.1) >> +endobj +1992 0 obj +(21.5.3.1 Configure and compile SAMBA) +endobj +1993 0 obj +<< /S /GoTo /D (subsubsection.21.5.3.2) >> +endobj +1996 0 obj +(21.5.3.2 Configure nsswitch.conf and the winbind libraries on Linux and Solaris) +endobj +1997 0 obj +<< /S /GoTo /D (subsubsection.21.5.3.3) >> +endobj +2000 0 obj +(21.5.3.3 NSS Winbind on AIX) +endobj +2001 0 obj +<< /S /GoTo /D (subsubsection.21.5.3.4) >> +endobj +2004 0 obj +(21.5.3.4 Configure smb.conf) +endobj +2005 0 obj +<< /S /GoTo /D (subsubsection.21.5.3.5) >> +endobj +2008 0 obj +(21.5.3.5 Join the SAMBA server to the PDC domain) +endobj +2009 0 obj +<< /S /GoTo /D (subsubsection.21.5.3.6) >> +endobj +2012 0 obj +(21.5.3.6 Start up the winbindd daemon and test it!) +endobj +2013 0 obj +<< /S /GoTo /D (subsubsection.21.5.3.7) >> +endobj +2016 0 obj +(21.5.3.7 Fix the init.d startup scripts) +endobj +2017 0 obj +<< /S /GoTo /D (subsubsection.21.5.3.8) >> +endobj +2020 0 obj +(21.5.3.8 Configure Winbind and PAM) +endobj +2021 0 obj +<< /S /GoTo /D (section.21.6) >> +endobj +2024 0 obj +(21.6 Conclusion) +endobj +2025 0 obj +<< /S /GoTo /D (section.21.7) >> +endobj +2028 0 obj +(21.7 Common Errors) +endobj +2029 0 obj +<< /S /GoTo /D (chapter.22) >> +endobj +2032 0 obj +(22 Advanced Network Manangement) +endobj +2033 0 obj +<< /S /GoTo /D (section.22.1) >> +endobj +2036 0 obj +(22.1 Features and Benefits) +endobj +2037 0 obj +<< /S /GoTo /D (section.22.2) >> +endobj +2040 0 obj +(22.2 Remote Server Administration) +endobj +2041 0 obj +<< /S /GoTo /D (section.22.3) >> +endobj +2044 0 obj +(22.3 Remote Desktop Management) +endobj +2045 0 obj +<< /S /GoTo /D (subsection.22.3.1) >> +endobj +2048 0 obj +(22.3.1 Remote Management from NoMachines.Com) +endobj +2049 0 obj +<< /S /GoTo /D (section.22.4) >> +endobj +2052 0 obj +(22.4 Network Logon Script Magic) +endobj +2053 0 obj +<< /S /GoTo /D (subsection.22.4.1) >> +endobj +2056 0 obj +(22.4.1 Adding printers without user intervention) +endobj +2057 0 obj +<< /S /GoTo /D (section.22.5) >> +endobj +2060 0 obj +(22.5 Common Errors) +endobj +2061 0 obj +<< /S /GoTo /D (chapter.23) >> +endobj +2064 0 obj +(23 System and Account Policies) +endobj +2065 0 obj +<< /S /GoTo /D (section.23.1) >> +endobj +2068 0 obj +(23.1 Features and Benefits) +endobj +2069 0 obj +<< /S /GoTo /D (section.23.2) >> +endobj +2072 0 obj +(23.2 Creating and Managing System Policies) +endobj +2073 0 obj +<< /S /GoTo /D (subsection.23.2.1) >> +endobj +2076 0 obj +(23.2.1 Windows 9x/Me Policies) +endobj +2077 0 obj +<< /S /GoTo /D (subsection.23.2.2) >> +endobj +2080 0 obj +(23.2.2 Windows NT4 Style Policy Files) +endobj +2081 0 obj +<< /S /GoTo /D (subsubsection.23.2.2.1) >> +endobj +2084 0 obj +(23.2.2.1 Registry Spoiling) +endobj +2085 0 obj +<< /S /GoTo /D (subsection.23.2.3) >> +endobj +2088 0 obj +(23.2.3 MS Windows 200x / XP Professional Policies) +endobj +2089 0 obj +<< /S /GoTo /D (subsubsection.23.2.3.1) >> +endobj +2092 0 obj +(23.2.3.1 Administration of Win2K / XP Policies) +endobj +2093 0 obj +<< /S /GoTo /D (section.23.3) >> +endobj +2096 0 obj +(23.3 Managing Account/User Policies) +endobj +2097 0 obj +<< /S /GoTo /D (subsection.23.3.1) >> +endobj +2100 0 obj +(23.3.1 Samba Editreg Toolset) +endobj +2101 0 obj +<< /S /GoTo /D (subsection.23.3.2) >> +endobj +2104 0 obj +(23.3.2 Windows NT4/200x) +endobj +2105 0 obj +<< /S /GoTo /D (subsection.23.3.3) >> +endobj +2108 0 obj +(23.3.3 Samba PDC) +endobj +2109 0 obj +<< /S /GoTo /D (section.23.4) >> +endobj +2112 0 obj +(23.4 System Startup and Logon Processing Overview) +endobj +2113 0 obj +<< /S /GoTo /D (section.23.5) >> +endobj +2116 0 obj +(23.5 Common Errors) +endobj +2117 0 obj +<< /S /GoTo /D (subsection.23.5.1) >> +endobj +2120 0 obj +(23.5.1 Policy Does Not Work) +endobj +2121 0 obj +<< /S /GoTo /D (chapter.24) >> +endobj +2124 0 obj +(24 Desktop Profile Management) +endobj +2125 0 obj +<< /S /GoTo /D (section.24.1) >> +endobj +2128 0 obj +(24.1 Features and Benefits) +endobj +2129 0 obj +<< /S /GoTo /D (section.24.2) >> +endobj +2132 0 obj +(24.2 Roaming Profiles) +endobj +2133 0 obj +<< /S /GoTo /D (subsection.24.2.1) >> +endobj +2136 0 obj +(24.2.1 Samba Configuration for Profile Handling) +endobj +2137 0 obj +<< /S /GoTo /D (subsubsection.24.2.1.1) >> +endobj +2140 0 obj +(24.2.1.1 NT4/200x User Profiles) +endobj +2141 0 obj +<< /S /GoTo /D (subsubsection.24.2.1.2) >> +endobj +2144 0 obj +(24.2.1.2 Windows 9x / Me User Profiles) +endobj +2145 0 obj +<< /S /GoTo /D (subsubsection.24.2.1.3) >> +endobj +2148 0 obj +(24.2.1.3 Mixed Windows 9x / Me and Windows NT4/200x User Profiles) +endobj +2149 0 obj +<< /S /GoTo /D (subsubsection.24.2.1.4) >> +endobj +2152 0 obj +(24.2.1.4 Disabling Roaming Profile Support) +endobj +2153 0 obj +<< /S /GoTo /D (subsection.24.2.2) >> +endobj +2156 0 obj +(24.2.2 Windows Client Profile Configuration Information) +endobj +2157 0 obj +<< /S /GoTo /D (subsubsection.24.2.2.1) >> +endobj +2160 0 obj +(24.2.2.1 Windows 9x / Me Profile Setup) +endobj +2161 0 obj +<< /S /GoTo /D (subsubsection.24.2.2.2) >> +endobj +2164 0 obj +(24.2.2.2 Windows NT4 Workstation) +endobj +2165 0 obj +<< /S /GoTo /D (subsubsection.24.2.2.3) >> +endobj +2168 0 obj +(24.2.2.3 Windows 2000/XP Professional) +endobj +2169 0 obj +<< /S /GoTo /D (subsection.24.2.3) >> +endobj +2172 0 obj +(24.2.3 Sharing Profiles between W9x/Me and NT4/200x/XP workstations) +endobj +2173 0 obj +<< /S /GoTo /D (subsection.24.2.4) >> +endobj +2176 0 obj +(24.2.4 Profile Migration from Windows NT4/200x Server to Samba) +endobj +2177 0 obj +<< /S /GoTo /D (subsubsection.24.2.4.1) >> +endobj +2180 0 obj +(24.2.4.1 Windows NT4 Profile Management Tools) +endobj +2181 0 obj +<< /S /GoTo /D (subsubsection.24.2.4.2) >> +endobj +2184 0 obj +(24.2.4.2 Side bar Notes) +endobj +2185 0 obj +<< /S /GoTo /D (subsubsection.24.2.4.3) >> +endobj +2188 0 obj +(24.2.4.3 moveuser.exe) +endobj +2189 0 obj +<< /S /GoTo /D (subsubsection.24.2.4.4) >> +endobj +2192 0 obj +(24.2.4.4 Get SID) +endobj +2193 0 obj +<< /S /GoTo /D (section.24.3) >> +endobj +2196 0 obj +(24.3 Mandatory profiles) +endobj +2197 0 obj +<< /S /GoTo /D (section.24.4) >> +endobj +2200 0 obj +(24.4 Creating/Managing Group Profiles) +endobj +2201 0 obj +<< /S /GoTo /D (section.24.5) >> +endobj +2204 0 obj +(24.5 Default Profile for Windows Users) +endobj +2205 0 obj +<< /S /GoTo /D (subsection.24.5.1) >> +endobj +2208 0 obj +(24.5.1 MS Windows 9x/Me) +endobj +2209 0 obj +<< /S /GoTo /D (subsubsection.24.5.1.1) >> +endobj +2212 0 obj +(24.5.1.1 How User Profiles Are Handled in Windows 9x / Me?) +endobj +2213 0 obj +<< /S /GoTo /D (subsection.24.5.2) >> +endobj +2216 0 obj +(24.5.2 MS Windows NT4 Workstation) +endobj +2217 0 obj +<< /S /GoTo /D (subsection.24.5.3) >> +endobj +2220 0 obj +(24.5.3 MS Windows 200x/XP) +endobj +2221 0 obj +<< /S /GoTo /D (section.24.6) >> +endobj +2224 0 obj +(24.6 Common Errors) +endobj +2225 0 obj +<< /S /GoTo /D (subsection.24.6.1) >> +endobj +2228 0 obj +(24.6.1 How does one set up roaming profiles for just one \(or a few\) user/s or group/s?) +endobj +2229 0 obj +<< /S /GoTo /D (subsection.24.6.2) >> +endobj +2232 0 obj +(24.6.2 Can NOT use Roaming Profiles) +endobj +2233 0 obj +<< /S /GoTo /D (subsection.24.6.3) >> +endobj +2236 0 obj +(24.6.3 Changing the default profile) +endobj +2237 0 obj +<< /S /GoTo /D (chapter.25) >> +endobj +2240 0 obj +(25 PAM based Distributed Authentication) +endobj +2241 0 obj +<< /S /GoTo /D (section.25.1) >> +endobj +2244 0 obj +(25.1 Features and Benefits) +endobj +2245 0 obj +<< /S /GoTo /D (section.25.2) >> +endobj +2248 0 obj +(25.2 Technical Discussion) +endobj +2249 0 obj +<< /S /GoTo /D (subsection.25.2.1) >> +endobj +2252 0 obj +(25.2.1 PAM Configuration Syntax) +endobj +2253 0 obj +<< /S /GoTo /D (subsubsection.25.2.1.1) >> +endobj +2256 0 obj +(25.2.1.1 Anatomy of /etc/pam.d Entries) +endobj +2257 0 obj +<< /S /GoTo /D (subsection.25.2.2) >> +endobj +2260 0 obj +(25.2.2 Example System Configurations) +endobj +2261 0 obj +<< /S /GoTo /D (subsubsection.25.2.2.1) >> +endobj +2264 0 obj +(25.2.2.1 PAM: original login config) +endobj +2265 0 obj +<< /S /GoTo /D (subsubsection.25.2.2.2) >> +endobj +2268 0 obj +(25.2.2.2 PAM: login using pam\137smbpass) +endobj +2269 0 obj +<< /S /GoTo /D (subsection.25.2.3) >> +endobj +2272 0 obj +(25.2.3 smb.conf PAM Configuration) +endobj +2273 0 obj +<< /S /GoTo /D (subsection.25.2.4) >> +endobj +2276 0 obj +(25.2.4 Remote CIFS Authentication using winbindd.so) +endobj +2277 0 obj +<< /S /GoTo /D (subsection.25.2.5) >> +endobj +2280 0 obj +(25.2.5 Password Synchronization using pam\137smbpass.so) +endobj +2281 0 obj +<< /S /GoTo /D (subsubsection.25.2.5.1) >> +endobj +2284 0 obj +(25.2.5.1 Password Synchronisation Configuration) +endobj +2285 0 obj +<< /S /GoTo /D (subsubsection.25.2.5.2) >> +endobj +2288 0 obj +(25.2.5.2 Password Migration Configuration) +endobj +2289 0 obj +<< /S /GoTo /D (subsubsection.25.2.5.3) >> +endobj +2292 0 obj +(25.2.5.3 Mature Password Configuration) +endobj +2293 0 obj +<< /S /GoTo /D (subsubsection.25.2.5.4) >> +endobj +2296 0 obj +(25.2.5.4 Kerberos Password Integration Configuration) +endobj +2297 0 obj +<< /S /GoTo /D (section.25.3) >> +endobj +2300 0 obj +(25.3 Common Errors) +endobj +2301 0 obj +<< /S /GoTo /D (subsection.25.3.1) >> +endobj +2304 0 obj +(25.3.1 pam\137winbind problem) +endobj +2305 0 obj +<< /S /GoTo /D (chapter.26) >> +endobj +2308 0 obj +(26 Integrating MS Windows networks with Samba) +endobj +2309 0 obj +<< /S /GoTo /D (section.26.1) >> +endobj +2312 0 obj +(26.1 Features and Benefits) +endobj +2313 0 obj +<< /S /GoTo /D (section.26.2) >> +endobj +2316 0 obj +(26.2 Background Information) +endobj +2317 0 obj +<< /S /GoTo /D (section.26.3) >> +endobj +2320 0 obj +(26.3 Name Resolution in a pure Unix/Linux world) +endobj +2321 0 obj +<< /S /GoTo /D (subsection.26.3.1) >> +endobj +2324 0 obj +(26.3.1 /etc/hosts) +endobj +2325 0 obj +<< /S /GoTo /D (subsection.26.3.2) >> +endobj +2328 0 obj +(26.3.2 /etc/resolv.conf) +endobj +2329 0 obj +<< /S /GoTo /D (subsection.26.3.3) >> +endobj +2332 0 obj +(26.3.3 /etc/host.conf) +endobj +2333 0 obj +<< /S /GoTo /D (subsection.26.3.4) >> +endobj +2336 0 obj +(26.3.4 /etc/nsswitch.conf) +endobj +2337 0 obj +<< /S /GoTo /D (section.26.4) >> +endobj +2340 0 obj +(26.4 Name resolution as used within MS Windows networking) +endobj +2341 0 obj +<< /S /GoTo /D (subsection.26.4.1) >> +endobj +2344 0 obj +(26.4.1 The NetBIOS Name Cache) +endobj +2345 0 obj +<< /S /GoTo /D (subsection.26.4.2) >> +endobj +2348 0 obj +(26.4.2 The LMHOSTS file) +endobj +2349 0 obj +<< /S /GoTo /D (subsection.26.4.3) >> +endobj +2352 0 obj +(26.4.3 HOSTS file) +endobj +2353 0 obj +<< /S /GoTo /D (subsection.26.4.4) >> +endobj +2356 0 obj +(26.4.4 DNS Lookup) +endobj +2357 0 obj +<< /S /GoTo /D (subsection.26.4.5) >> +endobj +2360 0 obj +(26.4.5 WINS Lookup) +endobj +2361 0 obj +<< /S /GoTo /D (section.26.5) >> +endobj +2364 0 obj +(26.5 Common Errors) +endobj +2365 0 obj +<< /S /GoTo /D (subsection.26.5.1) >> +endobj +2368 0 obj +(26.5.1 My Boomerang Won't Come Back) +endobj +2369 0 obj +<< /S /GoTo /D (subsection.26.5.2) >> +endobj +2372 0 obj +(26.5.2 Very Slow Network Connections) +endobj +2373 0 obj +<< /S /GoTo /D (subsection.26.5.3) >> +endobj +2376 0 obj +(26.5.3 Samba server name change problem) +endobj +2377 0 obj +<< /S /GoTo /D (chapter.27) >> +endobj +2380 0 obj +(27 Unicode/Charsets) +endobj +2381 0 obj +<< /S /GoTo /D (section.27.1) >> +endobj +2384 0 obj +(27.1 Features and Benefits) +endobj +2385 0 obj +<< /S /GoTo /D (section.27.2) >> +endobj +2388 0 obj +(27.2 What are charsets and unicode?) +endobj +2389 0 obj +<< /S /GoTo /D (section.27.3) >> +endobj +2392 0 obj +(27.3 Samba and charsets) +endobj +2393 0 obj +<< /S /GoTo /D (section.27.4) >> +endobj +2396 0 obj +(27.4 Conversion from old names) +endobj +2397 0 obj +<< /S /GoTo /D (section.27.5) >> +endobj +2400 0 obj +(27.5 Japanese charsets) +endobj +2401 0 obj +<< /S /GoTo /D (chapter.28) >> +endobj +2404 0 obj +(28 Samba Backup Techniques) +endobj +2405 0 obj +<< /S /GoTo /D (section.28.1) >> +endobj +2408 0 obj +(28.1 Note) +endobj +2409 0 obj +<< /S /GoTo /D (section.28.2) >> +endobj +2412 0 obj +(28.2 Features and Benefits) +endobj +2413 0 obj +<< /S /GoTo /D (chapter.29) >> +endobj +2416 0 obj +(29 High Availability Options) +endobj +2417 0 obj +<< /S /GoTo /D (section.29.1) >> +endobj +2420 0 obj +(29.1 Note) +endobj +2421 0 obj +<< /S /GoTo /D (part.4) >> +endobj +2424 0 obj +(IV Migration and Updating) +endobj +2425 0 obj +<< /S /GoTo /D (chapter.30) >> +endobj +2428 0 obj +(30 Upgrading from Samba-2.x to Samba-3.0.0) +endobj +2429 0 obj +<< /S /GoTo /D (section.30.1) >> +endobj +2432 0 obj +(30.1 Charsets) +endobj +2433 0 obj +<< /S /GoTo /D (section.30.2) >> +endobj +2436 0 obj +(30.2 Obsolete configuration options) +endobj +2437 0 obj +<< /S /GoTo /D (section.30.3) >> +endobj +2440 0 obj +(30.3 Password Backend) +endobj +2441 0 obj +<< /S /GoTo /D (chapter.31) >> +endobj +2444 0 obj +(31 Migration from NT4 PDC to Samba-3 PDC) +endobj +2445 0 obj +<< /S /GoTo /D (section.31.1) >> +endobj +2448 0 obj +(31.1 Planning and Getting Started) +endobj +2449 0 obj +<< /S /GoTo /D (subsection.31.1.1) >> +endobj +2452 0 obj +(31.1.1 Objectives) +endobj +2453 0 obj +<< /S /GoTo /D (subsubsection.31.1.1.1) >> +endobj +2456 0 obj +(31.1.1.1 Domain Layout) +endobj +2457 0 obj +<< /S /GoTo /D (subsubsection.31.1.1.2) >> +endobj +2460 0 obj +(31.1.1.2 Server Share and Directory Layout) +endobj +2461 0 obj +<< /S /GoTo /D (subsubsection.31.1.1.3) >> +endobj +2464 0 obj +(31.1.1.3 Logon Scripts) +endobj +2465 0 obj +<< /S /GoTo /D (subsubsection.31.1.1.4) >> +endobj +2468 0 obj +(31.1.1.4 Profile Migration/Creation) +endobj +2469 0 obj +<< /S /GoTo /D (subsubsection.31.1.1.5) >> +endobj +2472 0 obj +(31.1.1.5 User and Group Accounts) +endobj +2473 0 obj +<< /S /GoTo /D (subsection.31.1.2) >> +endobj +2476 0 obj +(31.1.2 Steps In Migration Process) +endobj +2477 0 obj +<< /S /GoTo /D (section.31.2) >> +endobj +2480 0 obj +(31.2 Migration Options) +endobj +2481 0 obj +<< /S /GoTo /D (subsection.31.2.1) >> +endobj +2484 0 obj +(31.2.1 Planning for Success) +endobj +2485 0 obj +<< /S /GoTo /D (subsection.31.2.2) >> +endobj +2488 0 obj +(31.2.2 Samba Implementation Choices) +endobj +2489 0 obj +<< /S /GoTo /D (chapter.32) >> +endobj +2492 0 obj +(32 SWAT - The Samba Web Administration Tool) +endobj +2493 0 obj +<< /S /GoTo /D (section.32.1) >> +endobj +2496 0 obj +(32.1 Features and Benefits) +endobj +2497 0 obj +<< /S /GoTo /D (subsection.32.1.1) >> +endobj +2500 0 obj +(32.1.1 Enabling SWAT for use) +endobj +2501 0 obj +<< /S /GoTo /D (subsection.32.1.2) >> +endobj +2504 0 obj +(32.1.2 Securing SWAT through SSL) +endobj +2505 0 obj +<< /S /GoTo /D (subsection.32.1.3) >> +endobj +2508 0 obj +(32.1.3 The SWAT Home Page) +endobj +2509 0 obj +<< /S /GoTo /D (subsection.32.1.4) >> +endobj +2512 0 obj +(32.1.4 Global Settings) +endobj +2513 0 obj +<< /S /GoTo /D (subsection.32.1.5) >> +endobj +2516 0 obj +(32.1.5 Share Settings) +endobj +2517 0 obj +<< /S /GoTo /D (subsection.32.1.6) >> +endobj +2520 0 obj +(32.1.6 Printers Settings) +endobj +2521 0 obj +<< /S /GoTo /D (subsection.32.1.7) >> +endobj +2524 0 obj +(32.1.7 The SWAT Wizard) +endobj +2525 0 obj +<< /S /GoTo /D (subsection.32.1.8) >> +endobj +2528 0 obj +(32.1.8 The Status Page) +endobj +2529 0 obj +<< /S /GoTo /D (subsection.32.1.9) >> +endobj +2532 0 obj +(32.1.9 The View Page) +endobj +2533 0 obj +<< /S /GoTo /D (subsection.32.1.10) >> +endobj +2536 0 obj +(32.1.10 The Password Change Page) +endobj +2537 0 obj +<< /S /GoTo /D (part.5) >> +endobj +2540 0 obj +(V Troubleshooting) +endobj +2541 0 obj +<< /S /GoTo /D (chapter.33) >> +endobj +2544 0 obj +(33 The samba checklist) +endobj +2545 0 obj +<< /S /GoTo /D (section.33.1) >> +endobj +2548 0 obj +(33.1 Introduction) +endobj +2549 0 obj +<< /S /GoTo /D (section.33.2) >> +endobj +2552 0 obj +(33.2 Assumptions) +endobj +2553 0 obj +<< /S /GoTo /D (section.33.3) >> +endobj +2556 0 obj +(33.3 The tests) +endobj +2557 0 obj +<< /S /GoTo /D (section.33.4) >> +endobj +2560 0 obj +(33.4 Still having troubles?) +endobj +2561 0 obj +<< /S /GoTo /D (chapter.34) >> +endobj +2564 0 obj +(34 Analysing and solving samba problems) +endobj +2565 0 obj +<< /S /GoTo /D (section.34.1) >> +endobj +2568 0 obj +(34.1 Diagnostics tools) +endobj +2569 0 obj +<< /S /GoTo /D (section.34.2) >> +endobj +2572 0 obj +(34.2 Installing 'Network Monitor' on an NT Workstation or a Windows 9x box) +endobj +2573 0 obj +<< /S /GoTo /D (section.34.3) >> +endobj +2576 0 obj +(34.3 Useful URL's) +endobj +2577 0 obj +<< /S /GoTo /D (section.34.4) >> +endobj +2580 0 obj +(34.4 Getting help from the mailing lists) +endobj +2581 0 obj +<< /S /GoTo /D (section.34.5) >> +endobj +2584 0 obj +(34.5 How to get off the mailinglists) +endobj +2585 0 obj +<< /S /GoTo /D (chapter.35) >> +endobj +2588 0 obj +(35 Reporting Bugs) +endobj +2589 0 obj +<< /S /GoTo /D (section.35.1) >> +endobj +2592 0 obj +(35.1 Introduction) +endobj +2593 0 obj +<< /S /GoTo /D (section.35.2) >> +endobj +2596 0 obj +(35.2 General info) +endobj +2597 0 obj +<< /S /GoTo /D (section.35.3) >> +endobj +2600 0 obj +(35.3 Debug levels) +endobj +2601 0 obj +<< /S /GoTo /D (section.35.4) >> +endobj +2604 0 obj +(35.4 Internal errors) +endobj +2605 0 obj +<< /S /GoTo /D (section.35.5) >> +endobj +2608 0 obj +(35.5 Attaching to a running process) +endobj +2609 0 obj +<< /S /GoTo /D (section.35.6) >> +endobj +2612 0 obj +(35.6 Patches) +endobj +2613 0 obj +<< /S /GoTo /D (part.6) >> +endobj +2616 0 obj +(VI Appendixes) +endobj +2617 0 obj +<< /S /GoTo /D (chapter.36) >> +endobj +2620 0 obj +(36 How to compile SAMBA) +endobj +2621 0 obj +<< /S /GoTo /D (section.36.1) >> +endobj +2624 0 obj +(36.1 Access Samba source code via CVS) +endobj +2625 0 obj +<< /S /GoTo /D (subsection.36.1.1) >> +endobj +2628 0 obj +(36.1.1 Introduction) +endobj +2629 0 obj +<< /S /GoTo /D (subsection.36.1.2) >> +endobj +2632 0 obj +(36.1.2 CVS Access to samba.org) +endobj +2633 0 obj +<< /S /GoTo /D (subsubsection.36.1.2.1) >> +endobj +2636 0 obj +(36.1.2.1 Access via CVSweb) +endobj +2637 0 obj +<< /S /GoTo /D (subsubsection.36.1.2.2) >> +endobj +2640 0 obj +(36.1.2.2 Access via cvs) +endobj +2641 0 obj +<< /S /GoTo /D (section.36.2) >> +endobj +2644 0 obj +(36.2 Accessing the samba sources via rsync and ftp) +endobj +2645 0 obj +<< /S /GoTo /D (section.36.3) >> +endobj +2648 0 obj +(36.3 Verifying Samba's PGP signature) +endobj +2649 0 obj +<< /S /GoTo /D (section.36.4) >> +endobj +2652 0 obj +(36.4 Building the Binaries) +endobj +2653 0 obj +<< /S /GoTo /D (subsection.36.4.1) >> +endobj +2656 0 obj +(36.4.1 Compiling samba with Active Directory support) +endobj +2657 0 obj +<< /S /GoTo /D (subsubsection.36.4.1.1) >> +endobj +2660 0 obj +(36.4.1.1 Installing the required packages for Debian) +endobj +2661 0 obj +<< /S /GoTo /D (subsubsection.36.4.1.2) >> +endobj +2664 0 obj +(36.4.1.2 Installing the required packages for RedHat) +endobj +2665 0 obj +<< /S /GoTo /D (section.36.5) >> +endobj +2668 0 obj +(36.5 Starting the smbd and nmbd) +endobj +2669 0 obj +<< /S /GoTo /D (subsection.36.5.1) >> +endobj +2672 0 obj +(36.5.1 Starting from inetd.conf) +endobj +2673 0 obj +<< /S /GoTo /D (subsection.36.5.2) >> +endobj +2676 0 obj +(36.5.2 Alternative: starting it as a daemon) +endobj +2677 0 obj +<< /S /GoTo /D (section.36.6) >> +endobj +2680 0 obj +(36.6 Common Errors) +endobj +2681 0 obj +<< /S /GoTo /D (chapter.37) >> +endobj +2684 0 obj +(37 Portability) +endobj +2685 0 obj +<< /S /GoTo /D (section.37.1) >> +endobj +2688 0 obj +(37.1 HPUX) +endobj +2689 0 obj +<< /S /GoTo /D (section.37.2) >> +endobj +2692 0 obj +(37.2 SCO Unix) +endobj +2693 0 obj +<< /S /GoTo /D (section.37.3) >> +endobj +2696 0 obj +(37.3 DNIX) +endobj +2697 0 obj +<< /S /GoTo /D (section.37.4) >> +endobj +2700 0 obj +(37.4 RedHat Linux Rembrandt-II) +endobj +2701 0 obj +<< /S /GoTo /D (section.37.5) >> +endobj +2704 0 obj +(37.5 AIX) +endobj +2705 0 obj +<< /S /GoTo /D (subsection.37.5.1) >> +endobj +2708 0 obj +(37.5.1 Sequential Read Ahead) +endobj +2709 0 obj +<< /S /GoTo /D (section.37.6) >> +endobj +2712 0 obj +(37.6 Solaris) +endobj +2713 0 obj +<< /S /GoTo /D (subsection.37.6.1) >> +endobj +2716 0 obj +(37.6.1 Locking improvements) +endobj +2717 0 obj +<< /S /GoTo /D (subsection.37.6.2) >> +endobj +2720 0 obj +(37.6.2 Winbind on Solaris 9) +endobj +2721 0 obj +<< /S /GoTo /D (chapter.38) >> +endobj +2724 0 obj +(38 Samba and other CIFS clients) +endobj +2725 0 obj +<< /S /GoTo /D (section.38.1) >> +endobj +2728 0 obj +(38.1 Macintosh clients?) +endobj +2729 0 obj +<< /S /GoTo /D (section.38.2) >> +endobj +2732 0 obj +(38.2 OS2 Client) +endobj +2733 0 obj +<< /S /GoTo /D (subsection.38.2.1) >> +endobj +2736 0 obj +(38.2.1 How can I configure OS/2 Warp Connect or OS/2 Warp 4 as a client for Samba?) +endobj +2737 0 obj +<< /S /GoTo /D (subsection.38.2.2) >> +endobj +2740 0 obj +(38.2.2 How can I configure OS/2 Warp 3 \(not Connect\), OS/2 1.2, 1.3 or 2.x for Samba?) +endobj +2741 0 obj +<< /S /GoTo /D (subsection.38.2.3) >> +endobj +2744 0 obj +(38.2.3 How do I get printer driver download working for OS/2 clients?) +endobj +2745 0 obj +<< /S /GoTo /D (section.38.3) >> +endobj +2748 0 obj +(38.3 Windows for Workgroups) +endobj +2749 0 obj +<< /S /GoTo /D (subsection.38.3.1) >> +endobj +2752 0 obj +(38.3.1 Use latest TCP/IP stack from Microsoft) +endobj +2753 0 obj +<< /S /GoTo /D (subsection.38.3.2) >> +endobj +2756 0 obj +(38.3.2 Delete .pwl files after password change) +endobj +2757 0 obj +<< /S /GoTo /D (subsection.38.3.3) >> +endobj +2760 0 obj +(38.3.3 Configure WfW password handling) +endobj +2761 0 obj +<< /S /GoTo /D (subsection.38.3.4) >> +endobj +2764 0 obj +(38.3.4 Case handling of passwords) +endobj +2765 0 obj +<< /S /GoTo /D (subsection.38.3.5) >> +endobj +2768 0 obj +(38.3.5 Use TCP/IP as default protocol) +endobj +2769 0 obj +<< /S /GoTo /D (subsection.38.3.6) >> +endobj +2772 0 obj +(38.3.6 Speed improvement) +endobj +2773 0 obj +<< /S /GoTo /D (section.38.4) >> +endobj +2776 0 obj +(38.4 Windows '95/'98) +endobj +2777 0 obj +<< /S /GoTo /D (subsection.38.4.1) >> +endobj +2780 0 obj +(38.4.1 Speed improvement) +endobj +2781 0 obj +<< /S /GoTo /D (section.38.5) >> +endobj +2784 0 obj +(38.5 Windows 2000 Service Pack 2) +endobj +2785 0 obj +<< /S /GoTo /D (section.38.6) >> +endobj +2788 0 obj +(38.6 Windows NT 3.1) +endobj +2789 0 obj +<< /S /GoTo /D (chapter.39) >> +endobj +2792 0 obj +(39 Samba Performance Tuning) +endobj +2793 0 obj +<< /S /GoTo /D (section.39.1) >> +endobj +2796 0 obj +(39.1 Comparisons) +endobj +2797 0 obj +<< /S /GoTo /D (section.39.2) >> +endobj +2800 0 obj +(39.2 Socket options) +endobj +2801 0 obj +<< /S /GoTo /D (section.39.3) >> +endobj +2804 0 obj +(39.3 Read size) +endobj +2805 0 obj +<< /S /GoTo /D (section.39.4) >> +endobj +2808 0 obj +(39.4 Max xmit) +endobj +2809 0 obj +<< /S /GoTo /D (section.39.5) >> +endobj +2812 0 obj +(39.5 Log level) +endobj +2813 0 obj +<< /S /GoTo /D (section.39.6) >> +endobj +2816 0 obj +(39.6 Read raw) +endobj +2817 0 obj +<< /S /GoTo /D (section.39.7) >> +endobj +2820 0 obj +(39.7 Write raw) +endobj +2821 0 obj +<< /S /GoTo /D (section.39.8) >> +endobj +2824 0 obj +(39.8 Slow Logins) +endobj +2825 0 obj +<< /S /GoTo /D (section.39.9) >> +endobj +2828 0 obj +(39.9 LDAP) +endobj +2829 0 obj +<< /S /GoTo /D (section.39.10) >> +endobj +2832 0 obj +(39.10 Client tuning) +endobj +2833 0 obj +<< /S /GoTo /D (section.39.11) >> +endobj +2836 0 obj +(39.11 Samba performance problem due changing kernel) +endobj +2837 0 obj +<< /S /GoTo /D (section.39.12) >> +endobj +2840 0 obj +(39.12 Corrupt tdb Files) +endobj +2841 0 obj +<< /S /GoTo /D (chapter.40) >> +endobj +2844 0 obj +(40 DNS and DHCP Configuration Guide) +endobj +2845 0 obj +<< /S /GoTo /D (section.40.1) >> +endobj +2848 0 obj +(40.1 Note) +endobj +2849 0 obj +<< /S /GoTo /D (chapter.41) >> +endobj +2852 0 obj +(41 Further Resources) +endobj +2853 0 obj +<< /S /GoTo /D (section.41.1) >> +endobj +2856 0 obj +(41.1 Websites) +endobj +2857 0 obj +<< /S /GoTo /D (section.41.2) >> +endobj +2860 0 obj +(41.2 Related updates from microsoft) +endobj +2861 0 obj +<< /S /GoTo /D (section.41.3) >> +endobj +2864 0 obj +(41.3 Books) +endobj +2865 0 obj +<< /S /GoTo /D [2866 0 R /Fit ] >> +endobj +2868 0 obj << +/Length 235 +/Filter /FlateDecode +>> +stream +xڍMk0 ::keαeP a44-e0|yze3P9 ) I1)a [q^EZ15H#FAГUP8Ux[GU+pL?l6U5}rSVSdackneJeu=iY|ռ%-2E;CUj.!$|X_endstream +endobj +2866 0 obj << +/Type /Page +/Contents 2868 0 R +/Resources 2867 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 2877 0 R +>> endobj +2869 0 obj << +/D [2866 0 R /XYZ 85.039 786.531 null] +>> endobj +2870 0 obj << +/D [2866 0 R /XYZ 85.039 766.606 null] +>> endobj +2867 0 obj << +/Font << /F20 2873 0 R /F21 2876 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +2880 0 obj << +/Length 1458 +/Filter /FlateDecode +>> +stream +xڍWK8ϯp%*fϤr=l &8_0Ɖ'*Kj[XD, #/l&R,]Λ;8T"D)es,L2XM${M$ y/6^K,MwWr%$.WqX4=b" N oG߾_6{^4%O}X-,)+.,<D>9{8iX;8 d^jg0[ 3' f'(ّ@mJVĚ`\Mmp@i2voJ>[j_9Q'p3)_DIZpk?ѽ-z +;u\ҙvW~WOqpsv0. 2O 1Y4h`vL]OъM=b:8X$wށhv]_= [(J /8 .T -Kju3Fq,D"H8cŁq1 yϽSie5p:^:an"\ҘY{ ,Hkr +qO>&RTUhtJ!1+}[-bƥ JPQ׽SJ9Yˋf8W#9S6;t¤\0b3F\pgO;z0_#! eqE߁Қ~,5hj*l5;UXI-PIHendstream +endobj +2879 0 obj << +/Type /Page +/Contents 2880 0 R +/Resources 2878 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 2877 0 R +/Annots [ 2885 0 R 2889 0 R 2890 0 R 2891 0 R ] +>> endobj +2885 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [210.406 518.803 332.67 530.796] +/Subtype/Link/A<> +>> endobj +2889 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.346 504.951 215.702 517.852] +/Subtype/Link/A<> +>> endobj +2890 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [220.377 504.951 304.46 517.852] +/Subtype/Link/A<> +>> endobj +2891 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [319.468 504.951 425.172 517.852] +/Subtype/Link/A<> +>> endobj +2881 0 obj << +/D [2879 0 R /XYZ 85.039 786.531 null] +>> endobj +2878 0 obj << +/Font << /F15 2884 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +2894 0 obj << +/Length 3972 +/Filter /FlateDecode +>> +stream +xڵ\ms_Lu>Nrve73I>@$$1H$wea4&G E2c<&E,&3>_."sΒw|̇3y>sU,:>woENzS8OXQf󄳲Lu-RV"X~ss,Tʓ$.9xan?Oz5;OdiG弙zMoX".;$qʨyԢl sn[ ,nfq9丞tW5Bi]v] {NB"zѴxGyY7 \[j9W Ss .3L"鯯^=??۴V@ml_?w\B~|LHcQˆX +Ԑ,A <$2+'y:xd,RO~/!ɹfIFV: }޵ <|T$jRArI<q+E9'}hIˁ}jӜE>Q$ +[w4dd{SHk9+0V5&%6OD11A"ZR^\$bERzS t!Z xꚚ9r~ZG+UIs0MijX(f߽χKd`ɟ +%|z-3:4Mj)8i +M$Evp/%n( RnگbVGۓ6[nv&|ĒO.x.Rm9 + +j Utf(L03[Df]9#i*Eñ+ej:_! +TWХW|F+>}+>TcG- . ܚ%oa^//V^,J3*S+>PLAvAi ~Et蒽4j8)Q`$Z.>}C~Kx- )[$^BJ_ѥ{\Ʈ?*Z9Жc@qh@S6t` 1rDsxѩsl<*G 9brpFŸ#0")%dx3Gul⼑s|{%^ًMذr ƇER"aqi|`2%Еx %f˟LCG2OL#d8I&*n}2Yɤ&S\R/cWM#UfVt߯D.}?Oߊ1\7YRT(&-靹&-"Lz1"kPMG5c csF,fYhH0AP{] +d"k4bFKY +#y' +wɍV0tz6> endobj +2899 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [156.148 700.189 341.202 711.314] +/Subtype/Link/A<> +>> endobj +2900 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 675.66 216.99 684.571] +/Subtype /Link +/A << /S /GoTo /D (IntroSMB) >> +>> endobj +2907 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [230.74 660.927 316.059 671.775] +/Subtype/Link/A<> +>> endobj +2908 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 650.068 262.89 658.979] +/Subtype /Link +/A << /S /GoTo /D (install) >> +>> endobj +2909 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [237.686 635.335 317 646.183] +/Subtype/Link/A<> +>> endobj +2910 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [235.611 623.38 316.308 634.228] +/Subtype/Link/A<> +>> endobj +2911 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [228.194 611.424 294.197 622.273] +/Subtype/Link/A<> +>> endobj +2912 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 586.673 237.255 597.522] +/Subtype /Link +/A << /S /GoTo /D (FastStart) >> +>> endobj +2913 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [228.194 573.878 294.197 584.726] +/Subtype/Link/A<> +>> endobj +2914 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 561.082 266.57 571.93] +/Subtype /Link +/A << /S /GoTo /D (ServerType) >> +>> endobj +2915 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [237.686 548.286 317 559.134] +/Subtype/Link/A<> +>> endobj +2916 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [235.611 536.331 316.308 547.179] +/Subtype/Link/A<> +>> endobj +2917 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [228.194 524.376 294.197 535.224] +/Subtype/Link/A<> +>> endobj +2918 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 513.517 186.188 522.428] +/Subtype /Link +/A << /S /GoTo /D (samba-pdc) >> +>> endobj +2919 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [228.194 498.784 294.197 509.632] +/Subtype/Link/A<> +>> endobj +2920 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [227.821 486.829 302.181 497.677] +/Subtype/Link/A<> +>> endobj +2921 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [229.606 474.874 321.068 485.722] +/Subtype/Link/A<> +>> endobj +2922 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 462.078 223.714 472.926] +/Subtype /Link +/A << /S /GoTo /D (samba-bdc) >> +>> endobj +2923 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [228.194 449.282 294.197 460.13] +/Subtype/Link/A<> +>> endobj +2924 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [237.52 438.874 364.24 448.175] +/Subtype/Link/A<> +>> endobj +2925 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 424.531 208.447 435.379] +/Subtype /Link +/A << /S /GoTo /D (domain-member) >> +>> endobj +2926 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [228.194 411.735 294.197 422.583] +/Subtype/Link/A<> +>> endobj +2927 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [231.487 399.78 297.241 410.628] +/Subtype/Link/A<> +>> endobj +2928 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [227.821 387.825 302.181 398.673] +/Subtype/Link/A<> +>> endobj +2929 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [237.686 375.87 317 386.718] +/Subtype/Link/A<> +>> endobj +2930 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [235.611 363.914 316.308 374.763] +/Subtype/Link/A<> +>> endobj +2931 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 353.056 206.025 361.967] +/Subtype /Link +/A << /S /GoTo /D (StandAloneServer) >> +>> endobj +2932 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [228.194 338.323 294.197 349.171] +/Subtype/Link/A<> +>> endobj +2933 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 325.527 310.315 336.375] +/Subtype /Link +/A << /S /GoTo /D (ClientConfig) >> +>> endobj +2934 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [228.194 312.731 294.197 323.579] +/Subtype/Link/A<> +>> endobj +2935 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 299.382 333.736 311.337] +/Subtype /Link +/A << /S /GoTo /D (NetworkBrowsing) >> +>> endobj +2936 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [228.194 287.139 294.197 297.988] +/Subtype/Link/A<> +>> endobj +2937 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 276.281 257.687 285.192] +/Subtype /Link +/A << /S /GoTo /D (passdb) >> +>> endobj +2938 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [235.611 261.548 316.308 272.396] +/Subtype/Link/A<> +>> endobj +2939 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [227.821 249.592 302.181 260.441] +/Subtype/Link/A<> +>> endobj +2940 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [231.487 237.637 297.241 248.486] +/Subtype/Link/A<> +>> endobj +2941 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [228.194 225.682 294.197 236.53] +/Subtype/Link/A<> +>> endobj +2942 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [261.348 213.173 347.359 225.129] +/Subtype/Link/A<> +>> endobj +2943 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 200.931 297.054 211.779] +/Subtype /Link +/A << /S /GoTo /D (groupmapping) >> +>> endobj +2944 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [227.821 176.18 302.181 187.028] +/Subtype/Link/A<> +>> endobj +2945 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [228.194 164.225 294.197 175.073] +/Subtype/Link/A<> +>> endobj +2946 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 151.429 303.302 162.277] +/Subtype /Link +/A << /S /GoTo /D (AccessControls) >> +>> endobj +2947 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [228.194 138.633 294.197 149.481] +/Subtype/Link/A<> +>> endobj +2948 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [231.487 126.678 297.241 137.526] +/Subtype/Link/A<> +>> endobj +2949 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 113.882 223.728 124.73] +/Subtype /Link +/A << /S /GoTo /D (locking) >> +>> endobj +2950 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [231.487 101.086 297.241 111.935] +/Subtype/Link/A<> +>> endobj +2951 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [235.611 89.131 316.308 99.979] +/Subtype/Link/A<> +>> endobj +2952 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [228.194 77.176 294.197 88.024] +/Subtype/Link/A<> +>> endobj +2953 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [221.386 65.221 310.94 76.069] +/Subtype/Link/A<> +>> endobj +2954 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 52.425 186.7 63.273] +/Subtype /Link +/A << /S /GoTo /D (securing-samba) >> +>> endobj +2895 0 obj << +/D [2893 0 R /XYZ 85.039 786.531 null] +>> endobj +2892 0 obj << +/Font << /F56 2898 0 R /F15 2884 0 R /F35 2888 0 R /F20 2873 0 R /F14 2903 0 R /F11 2906 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +2972 0 obj << +/Length 3970 +/Filter /FlateDecode +>> +stream +xڵ\YsF~ׯ# 7؛ÉHIyHbD + _=0ar,9:jV9:[l +Jhv*w^{4[͛+'="f۫4KH&ߛ ^wlpeID,S MrxvSdӂ}p74UʓÇMspϔ#Z\_7QgLe6vL TzvyMM25x\f+:*R1f>a"e2E̾حOveb7]n v_obI[(J*vݦ# wHWq!!&,3!Z7eH?8+I^ɑH܈+l8dAxyE\%$(7eccЮtE%(EaI3=+dEgXrg!őv+aofZѼ;Z<{ϟfSïO뗽 :lt_@ R.i %-C Kl8Ay>06"çFa.Yzޙ`=z4yF1=2 u eR-ʆAv% +boY\MXa>Ȃz _?f)>Yn/̸\ +O_vJ:tq` 3-I:cl^' I嗓!'==+kY➄~` ݈ Rb@Em 1bFʭFћ.Y\0r> 64*HRXtmMsUe & +vKWLݺUj2D~zw-J 캪dY(r%+6vV]F|~ደ឴MoM%$J;llX#f19 +_G#4[:Zv|ʹpy/u4W +%ĭEIR>]eT QХ&-5\d̆Ó,Ț\EVM w5;Ǻ/i ܮIWO5N5M/~3qn++Hrl{AD2 20 bk5k 5k,Úfcw%I!!&,3!Z@^~{ '?1FS~nHk?)Եhc-+j.X !Mф*Z4${/M͓h*MG)vR/Öemǟ-JSИ=t[:&$͗_V@Tʗ_ٹe(\WM8Ъ +/(v4_~X^fL@ )f)c +aL08W05>uwBm(FtG{g8F/I X43Z5~-?bLh1>6lܴiNc ];߶z]34,ebi1up=Ua_ ombo!V>CebjxǭK%/&gAOȣF4דcKW?q! '@$yC48J|?zN){y^~#7NNE#RLf4.75f0i`f?^endstream +endobj +2971 0 obj << +/Type /Page +/Contents 2972 0 R +/Resources 2970 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 2877 0 R +/Annots [ 2974 0 R 2975 0 R 2976 0 R 2977 0 R 2978 0 R 2979 0 R 2980 0 R 2981 0 R 2982 0 R 2983 0 R 2984 0 R 2985 0 R 2986 0 R 2987 0 R 2988 0 R 2989 0 R 2990 0 R 2991 0 R 2992 0 R 2993 0 R 2994 0 R 2995 0 R 2996 0 R 2997 0 R 2998 0 R 2999 0 R 3000 0 R 3001 0 R 3002 0 R 3003 0 R 3004 0 R 3005 0 R 3006 0 R 3007 0 R 3008 0 R 3009 0 R 3010 0 R 3011 0 R 3012 0 R 3013 0 R 3014 0 R 3015 0 R 3016 0 R 3017 0 R 3018 0 R 3019 0 R 3020 0 R 3021 0 R 3022 0 R 3023 0 R 3024 0 R 3025 0 R 3026 0 R ] +>> endobj +2974 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [237.686 752.714 317 763.562] +/Subtype/Link/A<> +>> endobj +2975 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [228.194 740.759 294.197 751.607] +/Subtype/Link/A<> +>> endobj +2976 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 727.807 258.955 738.655] +/Subtype /Link +/A << /S /GoTo /D (InterdomainTrusts) >> +>> endobj +2977 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [228.194 714.856 294.197 725.704] +/Subtype/Link/A<> +>> endobj +2978 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [238.932 702.901 318.799 713.749] +/Subtype/Link/A<> +>> endobj +2979 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 689.949 386.292 700.797] +/Subtype /Link +/A << /S /GoTo /D (msdfs) >> +>> endobj +2980 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [227.198 676.998 308.477 687.846] +/Subtype/Link/A<> +>> endobj +2981 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 664.046 231.549 674.894] +/Subtype /Link +/A << /S /GoTo /D (printing) >> +>> endobj +2982 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [218.149 651.095 297.352 661.943] +/Subtype/Link/A<> +>> endobj +2983 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 638.143 284.75 648.992] +/Subtype /Link +/A << /S /GoTo /D (CUPS-printing) >> +>> endobj +2984 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [218.149 625.192 297.352 636.04] +/Subtype/Link/A<> +>> endobj +2985 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 614.178 221.19 623.089] +/Subtype /Link +/A << /S /GoTo /D (VFS) >> +>> endobj +2986 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [235.611 599.289 316.308 610.137] +/Subtype/Link/A<> +>> endobj +2987 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [228.194 587.334 294.197 598.182] +/Subtype/Link/A<> +>> endobj +2988 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 538.517 300.145 549.365] +/Subtype /Link +/A << /S /GoTo /D (winbind) >> +>> endobj +2989 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [215.935 525.566 317.305 536.414] +/Subtype/Link/A<> +>> endobj +2990 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [237.686 513.61 317 524.459] +/Subtype/Link/A<> +>> endobj +2991 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [247.04 501.655 347.303 512.503] +/Subtype/Link/A<> +>> endobj +2992 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [235.611 489.7 316.308 500.548] +/Subtype/Link/A<> +>> endobj +2993 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [228.194 477.745 294.197 488.593] +/Subtype/Link/A<> +>> endobj +2994 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 464.793 268.173 475.642] +/Subtype /Link +/A << /S /GoTo /D (AdvancedNetworkManagement) >> +>> endobj +2995 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [228.194 451.842 294.197 462.69] +/Subtype/Link/A<> +>> endobj +2996 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 438.891 245.414 449.739] +/Subtype /Link +/A << /S /GoTo /D (PolicyMgmt) >> +>> endobj +2997 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [228.194 425.939 294.197 436.787] +/Subtype/Link/A<> +>> endobj +2998 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 412.988 247.578 423.836] +/Subtype /Link +/A << /S /GoTo /D (ProfileMgmt) >> +>> endobj +2999 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [228.194 400.036 294.197 410.885] +/Subtype/Link/A<> +>> endobj +3000 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 389.022 291.45 397.933] +/Subtype /Link +/A << /S /GoTo /D (pam) >> +>> endobj +3001 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [228.194 374.133 294.197 384.982] +/Subtype/Link/A<> +>> endobj +3002 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [245.297 362.178 344.038 373.027] +/Subtype/Link/A<> +>> endobj +3003 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 349.227 328.574 360.075] +/Subtype /Link +/A << /S /GoTo /D (integrate-ms-networks) >> +>> endobj +3004 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [228.194 336.275 294.197 347.124] +/Subtype/Link/A<> +>> endobj +3005 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 322.771 194.618 334.726] +/Subtype /Link +/A << /S /GoTo /D (unicode) >> +>> endobj +3006 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [235.611 310.373 316.308 321.221] +/Subtype/Link/A<> +>> endobj +3007 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [275.268 298.417 388.51 309.266] +/Subtype/Link/A<> +>> endobj +3008 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 285.466 235.816 296.314] +/Subtype /Link +/A << /S /GoTo /D (Backup) >> +>> endobj +3009 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [228.194 272.515 294.197 283.363] +/Subtype/Link/A<> +>> endobj +3010 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 259.563 227.265 270.411] +/Subtype /Link +/A << /S /GoTo /D (SambaHA) >> +>> endobj +3011 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [228.194 246.612 294.197 257.46] +/Subtype/Link/A<> +>> endobj +3012 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 233.66 310.307 244.508] +/Subtype /Link +/A << /S /GoTo /D (upgrading-to-3.0) >> +>> endobj +3013 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [235.611 220.709 316.308 231.557] +/Subtype/Link/A<> +>> endobj +3014 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 207.757 314.693 218.606] +/Subtype /Link +/A << /S /GoTo /D (NT4Migration) >> +>> endobj +3015 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [228.194 194.806 294.197 205.654] +/Subtype/Link/A<> +>> endobj +3016 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 183.792 324.816 192.703] +/Subtype /Link +/A << /S /GoTo /D (SWAT) >> +>> endobj +3017 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [228.194 168.903 294.197 179.751] +/Subtype/Link/A<> +>> endobj +3018 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 157.889 206.518 166.8] +/Subtype /Link +/A << /S /GoTo /D (diagnosis) >> +>> endobj +3019 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [237.686 143 317 153.848] +/Subtype/Link/A<> +>> endobj +3020 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [235.611 131.045 316.308 141.893] +/Subtype/Link/A<> +>> endobj +3021 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 118.094 288.048 128.942] +/Subtype /Link +/A << /S /GoTo /D (problems) >> +>> endobj +3022 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [227.821 105.142 302.181 115.99] +/Subtype/Link/A<> +>> endobj +3023 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [235.611 93.187 316.308 104.035] +/Subtype/Link/A<> +>> endobj +3024 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [229.606 81.232 321.068 92.08] +/Subtype/Link/A<> +>> endobj +3025 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 68.28 184.052 79.129] +/Subtype /Link +/A << /S /GoTo /D (bugreport) >> +>> endobj +3026 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [235.611 55.329 316.308 66.177] +/Subtype/Link/A<> +>> endobj +2973 0 obj << +/D [2971 0 R /XYZ 85.039 786.531 null] +>> endobj +2970 0 obj << +/Font << /F14 2903 0 R /F15 2884 0 R /F11 2906 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3049 0 obj << +/Length 1545 +/Filter /FlateDecode +>> +stream +xڵYMs6WH_8N&tXK-ђRKt))bIԸxK(Q?8%4L8Zl'IROMF$,A4ɧITI3M]'gY0NgT?Ln'vVg,Lnf,!uA$%b0M$ Q'?,Ph~a*CibO /.#ÖPc\pS$+m-]tF)SIjxU˪y[^чÏqQqC>I4K}9b\5C*j.>3DTϐ$ 5 ߗSTćwQn̓[4C3Po=B8o"j 1C8Qɐ`,UHo+ۡO!a[@D5,nv*Xe-rH)k&R3PON"BU"^ ?e? Ko1uۻ4w=_T(ɧ@RisJpd%BiuScwX]?T0$$ SÒhAΖZ)è&HFIp0n-`6ZjUHʞak5, n-(]+;|{+|y[r$V +l/eQ[`ߴ\*A3~fUh1ca ǡ'3L/'TG3#2ŭ '3LÙzȌpfh Pz 'cuX7?X- +ƙZCՉ\suM/"[̨{[}j7!!D6cB(99(O +% +A +јQv +b8ʡ}ZMQI{9zT2rM_*կfy]enkwKe;2DcF$RX;k>δ('; NP8;-m\5\RmjZendstream +endobj +3048 0 obj << +/Type /Page +/Contents 3049 0 R +/Resources 3047 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 2877 0 R +/Annots [ 3051 0 R 3052 0 R 3053 0 R 3054 0 R 3055 0 R 3056 0 R 3057 0 R 3058 0 R 3059 0 R 3060 0 R 3061 0 R 3062 0 R 3063 0 R 3064 0 R 3065 0 R 3066 0 R ] +>> endobj +3051 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 739.762 226.786 750.611] +/Subtype /Link +/A << /S /GoTo /D (compiling) >> +>> endobj +3052 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [235.611 726.811 316.308 737.659] +/Subtype/Link/A<> +>> endobj +3053 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 701.904 160.078 712.753] +/Subtype /Link +/A << /S /GoTo /D (Portability) >> +>> endobj +3054 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [235.611 688.953 316.308 699.801] +/Subtype/Link/A<> +>> endobj +3055 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 677.939 250.345 686.85] +/Subtype /Link +/A << /S /GoTo /D (Other-Clients) >> +>> endobj +3056 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [239.015 663.05 319.38 673.898] +/Subtype/Link/A<> +>> endobj +3057 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [235.611 651.095 316.308 661.943] +/Subtype/Link/A<> +>> endobj +3058 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 638.143 239.724 648.992] +/Subtype /Link +/A << /S /GoTo /D (speed) >> +>> endobj +3059 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [230.879 625.192 330.118 636.04] +/Subtype/Link/A<> +>> endobj +3060 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [235.611 613.237 316.308 624.085] +/Subtype/Link/A<> +>> endobj +3061 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [228.194 601.282 294.197 612.13] +/Subtype/Link/A<> +>> endobj +3062 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 588.33 283.767 599.178] +/Subtype /Link +/A << /S /GoTo /D (DNSDHCP) >> +>> endobj +3063 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [228.194 575.379 294.197 586.227] +/Subtype/Link/A<> +>> endobj +3064 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 564.365 195.697 573.276] +/Subtype /Link +/A << /S /GoTo /D (Further-Resources) >> +>> endobj +3065 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [235.611 549.476 316.308 560.324] +/Subtype/Link/A<> +>> endobj +3066 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [230.74 537.521 316.059 548.369] +/Subtype/Link/A<> +>> endobj +3050 0 obj << +/D [3048 0 R /XYZ 85.039 786.531 null] +>> endobj +3047 0 obj << +/Font << /F14 2903 0 R /F15 2884 0 R /F20 2873 0 R /F11 2906 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3075 0 obj << +/Length 2716 +/Filter /FlateDecode +>> +stream +xs6WhRj&B {KjgeGr%:,LCX\"t:R%Y5J ]“mKFJzÉ{:ɹ1'\qlsxr"9N.Fb$RN^-vڴ'?9FRAN+W05SW;[L(:OU Te!i2# JeO"kz>0!wͺkvlQV#?y_BIFDb{X?Na!H!nhJ["BѤ6'U^tPZ +H3; ׋u_W0gRqZ­:YD@ö( eUZPXFY. :ƅ>]`-4eӳg,vZ{Zp&A>ӫ/@m. ǽOƊeb,,/o>x୚q}SvsSn3 Au/<~;82 r} *EisK0"qMۏhI\'Ne(i-A:yQHNڑ.JRQaI+`;7:ga3 U%%@#ė@jn `@,]._+?3N_{f^c#z}B!b3UFۍR(q%A(FZ4Qr;X! 5\nGkqdݚȆ*m UMF/"#:j[F%'  Of _si+?5$[\߸4uPo7-tֆDjrȉ8Z6AԮW!cM Cmnmh#%B6QzSĻ^ ꣼{q'MKȜKR Z{u7 Sc@tm0'2CF)cLJZ<] +p:;Xʦ=6zיj0_y^Hۛ}|PmQX}RvFW +Fw|:%{N~yOrCūqܩY/jn,7 scG Gk +ԙ|p檳`F֝Wo|摚-|}PQ}|S:b$6%6m6 oe:6v1}̾ٴAl+#|nq!@or֎HImK5y^0/̏ڴ~1}a~^bkTUzO^rS=w TĨ(Mb9l k ?9~f(I%Âneji_2M-Kuӏ:L7n݅('B\ۯ1!|kc1,?aAib([-6rm_8Ԭ[rY6"]ޠ-eo׬+maJ>$SP[z*/@zjVM`Ut7n# (QYE|)| +kFτ S_A2zh7; 2J/@`j֎ 4tFݷ2n}Y^i(tԶDI qd 'R/p -)$ƚ_P7^fy5(Ͷ,@OӍMϮ.?Ÿ9 tD̏%? ƪձ؄f4v*as[c%h `oVlgmW5clpngqݍN;Y4-dn3q.[72_b` y0|_+zl2#?-["' k%XuL׹z hM!BWVz7|Ĵi#5@=jbIFӘZ@њؤ XQ*Jh$֦+D ,U.hsJjv[B oyb/Q"oLmQh0\Vߏ1-GSk`L'R{Fo~sP:%ֈZ~A<- VxQvvr̭E6Ю_d7W4Fٵ悺nݘG&83u"/5F;U =(\LO=`0TCw&І6P'<}YUSssNI\-B!i$g>λchXLތq2.Ug坊AP@#9kOuyDY$"[\ \>=N[ut;TC8Ԭ.A _@.~}D쿧Alj?|}@q}S#bya?<2$"ek()-A*y!@Tjs_}@R]YY6qWԤ:,h0S'薀97߿ȓՙEIXS]FQ /ʨ=j2җzg +o+e ,`!{z'e7yjܣ(1M_IMlK$lKt!D5rQDAҥXI8l?+>mP?:a8Sˍ8endstream +endobj +3074 0 obj << +/Type /Page +/Contents 3075 0 R +/Resources 3073 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 2877 0 R +/Annots [ 3078 0 R 3079 0 R 3080 0 R 3081 0 R 3082 0 R 3083 0 R 3084 0 R 3085 0 R 3086 0 R 3087 0 R 3088 0 R 3089 0 R 3090 0 R 3091 0 R 3092 0 R 3093 0 R 3094 0 R 3095 0 R 3096 0 R 3097 0 R 3098 0 R 3099 0 R 3100 0 R 3101 0 R 3102 0 R 3103 0 R 3104 0 R 3105 0 R 3106 0 R 3107 0 R 3108 0 R 3109 0 R 3110 0 R 3111 0 R ] +>> endobj +3078 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [497.163 617.124 512.306 627.419] +/Subtype /Link +/A << /S /GoTo /D (part.1) >> +>> endobj +3079 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [498.314 592.666 512.306 602.234] +/Subtype /Link +/A << /S /GoTo /D (chapter.1) >> +>> endobj +3080 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 579.116 512.306 588.139] +/Subtype /Link +/A << /S /GoTo /D (section.1.1) >> +>> endobj +3081 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 565.567 512.306 574.59] +/Subtype /Link +/A << /S /GoTo /D (section.1.2) >> +>> endobj +3082 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 552.018 512.306 561.041] +/Subtype /Link +/A << /S /GoTo /D (section.1.3) >> +>> endobj +3083 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 538.469 512.306 547.492] +/Subtype /Link +/A << /S /GoTo /D (section.1.4) >> +>> endobj +3084 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 524.92 512.306 533.942] +/Subtype /Link +/A << /S /GoTo /D (section.1.5) >> +>> endobj +3085 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 511.37 512.306 520.393] +/Subtype /Link +/A << /S /GoTo /D (section.1.6) >> +>> endobj +3086 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [498.314 486.912 512.306 496.48] +/Subtype /Link +/A << /S /GoTo /D (chapter.2) >> +>> endobj +3087 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 473.363 512.306 482.386] +/Subtype /Link +/A << /S /GoTo /D (section.2.1) >> +>> endobj +3088 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 459.814 512.306 468.837] +/Subtype /Link +/A << /S /GoTo /D (section.2.2) >> +>> endobj +3089 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 446.265 512.306 455.287] +/Subtype /Link +/A << /S /GoTo /D (subsection.2.2.1) >> +>> endobj +3090 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 432.715 512.306 441.738] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.2.2.1.1) >> +>> endobj +3091 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 419.166 512.306 428.189] +/Subtype /Link +/A << /S /GoTo /D (subsection.2.2.2) >> +>> endobj +3092 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 405.617 512.306 414.64] +/Subtype /Link +/A << /S /GoTo /D (section.2.3) >> +>> endobj +3093 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 392.068 512.306 401.091] +/Subtype /Link +/A << /S /GoTo /D (section.2.4) >> +>> endobj +3094 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 364.969 512.306 373.992] +/Subtype /Link +/A << /S /GoTo /D (section.2.5) >> +>> endobj +3095 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 351.42 512.306 360.443] +/Subtype /Link +/A << /S /GoTo /D (section.2.6) >> +>> endobj +3096 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 337.871 512.306 346.894] +/Subtype /Link +/A << /S /GoTo /D (section.2.7) >> +>> endobj +3097 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 324.322 512.306 333.345] +/Subtype /Link +/A << /S /GoTo /D (subsection.2.7.1) >> +>> endobj +3098 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 283.674 512.306 292.697] +/Subtype /Link +/A << /S /GoTo /D (subsection.2.7.2) >> +>> endobj +3099 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [498.314 259.216 512.306 268.784] +/Subtype /Link +/A << /S /GoTo /D (chapter.3) >> +>> endobj +3100 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 245.667 512.306 254.689] +/Subtype /Link +/A << /S /GoTo /D (section.3.1) >> +>> endobj +3101 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [497.163 207.173 512.306 217.468] +/Subtype /Link +/A << /S /GoTo /D (part.2) >> +>> endobj +3102 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [498.314 182.715 512.306 192.283] +/Subtype /Link +/A << /S /GoTo /D (chapter.4) >> +>> endobj +3103 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 169.166 512.306 178.189] +/Subtype /Link +/A << /S /GoTo /D (section.4.1) >> +>> endobj +3104 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 155.617 512.306 164.64] +/Subtype /Link +/A << /S /GoTo /D (section.4.2) >> +>> endobj +3105 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 142.068 512.306 151.09] +/Subtype /Link +/A << /S /GoTo /D (section.4.3) >> +>> endobj +3106 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 128.518 512.306 137.541] +/Subtype /Link +/A << /S /GoTo /D (subsection.4.3.1) >> +>> endobj +3107 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 114.969 512.306 123.992] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.4.3.1.1) >> +>> endobj +3108 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 101.42 512.306 110.443] +/Subtype /Link +/A << /S /GoTo /D (subsection.4.3.2) >> +>> endobj +3109 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 87.871 512.306 96.894] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.4.3.2.1) >> +>> endobj +3110 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 74.322 512.306 83.344] +/Subtype /Link +/A << /S /GoTo /D (subsection.4.3.3) >> +>> endobj +3111 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 60.772 512.306 69.795] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.4.3.3.1) >> +>> endobj +3076 0 obj << +/D [3074 0 R /XYZ 85.039 786.531 null] +>> endobj +3077 0 obj << +/D [3074 0 R /XYZ 85.039 656.613 null] +>> endobj +3073 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3114 0 obj << +/Length 3503 +/Filter /FlateDecode +>> +stream +xs6dnLO:^k:ڽMؼJt!Qk#ra4U"luR/?pn&^|#ZGsZ.?6 }&^~wr~vhIAx]кND +˓gIk7ʤT?T娔(Qv‰ iɔs>b2;Ʒ71~7./ݿign_l]Vw#X#3Sv{TXE~ +]HDAC{^ܗS4Ƥ\j@)G+'nkUETF`]"ITۡ}Ѭo +]ru5wtӲdk((!،~pR9vPQR\bunE$u2Wɜ)ZV3.'E +4e&ő+#i ΧK6 %D2tN+ũ`("%C1Z)fN9/̔osA +wV7kWTOﵞUBzP\ RvѢ8v`FRQ(ތtfZR earOx{ SA~(V?=R/vC|ٸ@8qB)tL.0:^K̈WੂT؟Ĭ-7ut6>3W7 +o7br?-hPZQ,C+[Wh0)-~ىݬ׈F 2G3hPrQ,C.!J_\Nk ge,w]KX.|ٵ+] IS#6Fk]~M("yC@S‰b8P8 +=uLGxG-SUԄ Ɗ eZ)LLdtddrJ=ؙ>YV]V=j nbX|P +)JsKVh'kIT](L*:pٵ5tSkmu>i$bpؖk_ !+;g,3Z~CG ԂcKȺ}&!ui3Y71=q| 4XfbWf8͜@S1]D>|5 Wy_fx/-zxCE ĒB`崆VP"eb +vyӬnq/t_LN|l#BBdxq,VZRkw+!`((W`)#T/) +HlqQ}ңkʻD<= O2S洆 Pk$3vOđ:㞿33V~ԡX^bF^8Vs'bg{5T"Jm:RTVk UjwD[ ŀ"o쑔Ŭm bf_9+0Q6࿟߾ݬ@|n7-lrƇ5~?1G*?5_r=˜r=F߸DfL,Xu-&e$V+i(Γ#[?;rxdKEϚ]珟IRx((aZK0sB TNsܼ\`ad5N>Pd2bu< +LsZ_ҚHiwY[o:WԮgK銿dӍW̸="XCE Ԑ(~p|9_HQTK|| 1{E]<١ܺf]4s31?KX5힜yaKw910!EF\L)l +%L_%}1۹/Mq5Bflf=ΟMq gB56U-j@^iw]بtMguko!jw +۔un{.W%#0ܘr:0GҮ"jws$l^mMY"å|Fn5pK8\)&!Z|9ğJV%l`&&mOx/ҀiH2n~^{K HA/ }AqwK5^7F\YK's _Nus_\|l87w=B K ٌjѹH,e 1+u\.a܄C$)I"w7Sb&*Y=o2USpV봙qg,N7٣[9lm%Zlh'BmM,~$%;2L哬f<݇JFOQ,O G+Y;gD5`w;?fç~V_ !C>ţ+bUЉBbm%v>Hp9aBzPzvM v6݋ApIUЦTQ'QfX!)w`DnT!kP4A*&IJ MO;&]E6>xֵ! h\fwx_f%b8Ԅ(#@epee#?1Ͳ 䵘#N}b̥xM.mS3)~}=C E V8~pB9B>w?p^4}\C~Ҳh }XsvhӌjQ#hPFQ,(N*(TR¨F!iJۿ"޴7:twlB6}dI}"E2zduI +Zb~pmypo4fTno޵{Xha טp'v@׎>қD*gbdhYp=yy6not7ߋ7]f_;'1F)cbSc_;12_FЃ~t$ ;3]É'#<~nD]>? y>e׎5p 6ݭ?ÖH]aXsU#.noQE'eendstream +endobj +3113 0 obj << +/Type /Page +/Contents 3114 0 R +/Resources 3112 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 3164 0 R +/Annots [ 3119 0 R 3120 0 R 3121 0 R 3122 0 R 3123 0 R 3124 0 R 3125 0 R 3126 0 R 3127 0 R 3128 0 R 3129 0 R 3130 0 R 3131 0 R 3132 0 R 3133 0 R 3134 0 R 3135 0 R 3136 0 R 3137 0 R 3138 0 R 3139 0 R 3140 0 R 3141 0 R 3142 0 R 3143 0 R 3144 0 R 3145 0 R 3146 0 R 3147 0 R 3148 0 R 3149 0 R 3150 0 R 3151 0 R 3152 0 R 3153 0 R 3154 0 R 3155 0 R 3156 0 R 3157 0 R 3158 0 R 3159 0 R 3160 0 R 3161 0 R 3162 0 R 3163 0 R ] +>> endobj +3119 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 754.651 512.306 763.674] +/Subtype /Link +/A << /S /GoTo /D (subsection.4.3.4) >> +>> endobj +3120 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 741.102 512.306 750.125] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.4.3.4.1) >> +>> endobj +3121 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 727.553 512.306 736.575] +/Subtype /Link +/A << /S /GoTo /D (subsection.4.3.5) >> +>> endobj +3122 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 714.003 512.306 723.026] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.4.3.5.1) >> +>> endobj +3123 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 700.454 512.306 709.477] +/Subtype /Link +/A << /S /GoTo /D (section.4.4) >> +>> endobj +3124 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 686.905 512.306 695.928] +/Subtype /Link +/A << /S /GoTo /D (section.4.5) >> +>> endobj +3125 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 673.356 512.306 682.379] +/Subtype /Link +/A << /S /GoTo /D (subsection.4.5.1) >> +>> endobj +3126 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 659.807 512.306 668.829] +/Subtype /Link +/A << /S /GoTo /D (subsection.4.5.2) >> +>> endobj +3127 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 646.257 512.306 655.28] +/Subtype /Link +/A << /S /GoTo /D (subsection.4.5.3) >> +>> endobj +3128 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 632.708 512.306 641.731] +/Subtype /Link +/A << /S /GoTo /D (subsection.4.5.4) >> +>> endobj +3129 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [498.314 608.25 512.306 617.818] +/Subtype /Link +/A << /S /GoTo /D (chapter.5) >> +>> endobj +3130 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 594.701 512.306 603.724] +/Subtype /Link +/A << /S /GoTo /D (section.5.1) >> +>> endobj +3131 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 581.151 512.306 590.174] +/Subtype /Link +/A << /S /GoTo /D (section.5.2) >> +>> endobj +3132 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 567.602 512.306 576.625] +/Subtype /Link +/A << /S /GoTo /D (subsection.5.2.1) >> +>> endobj +3133 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 554.053 512.306 563.076] +/Subtype /Link +/A << /S /GoTo /D (subsection.5.2.2) >> +>> endobj +3134 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 540.504 512.306 549.527] +/Subtype /Link +/A << /S /GoTo /D (section.5.3) >> +>> endobj +3135 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 526.955 512.306 535.978] +/Subtype /Link +/A << /S /GoTo /D (section.5.4) >> +>> endobj +3136 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 513.406 512.306 522.428] +/Subtype /Link +/A << /S /GoTo /D (section.5.5) >> +>> endobj +3137 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 499.856 512.306 508.879] +/Subtype /Link +/A << /S /GoTo /D (subsection.5.5.1) >> +>> endobj +3138 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 486.307 512.306 495.33] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.5.5.1.1) >> +>> endobj +3139 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 472.758 512.306 481.781] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.5.5.1.2) >> +>> endobj +3140 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 459.209 512.306 468.232] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.5.5.1.3) >> +>> endobj +3141 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 445.66 512.306 454.682] +/Subtype /Link +/A << /S /GoTo /D (subsection.5.5.2) >> +>> endobj +3142 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 432.11 512.306 441.133] +/Subtype /Link +/A << /S /GoTo /D (section.5.6) >> +>> endobj +3143 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 418.561 512.306 427.584] +/Subtype /Link +/A << /S /GoTo /D (subsection.5.6.1) >> +>> endobj +3144 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 377.914 512.306 386.936] +/Subtype /Link +/A << /S /GoTo /D (subsection.5.6.2) >> +>> endobj +3145 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 364.364 512.306 373.387] +/Subtype /Link +/A << /S /GoTo /D (subsection.5.6.3) >> +>> endobj +3146 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 337.266 512.306 346.289] +/Subtype /Link +/A << /S /GoTo /D (subsection.5.6.4) >> +>> endobj +3147 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 310.168 512.306 319.19] +/Subtype /Link +/A << /S /GoTo /D (subsection.5.6.5) >> +>> endobj +3148 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 283.069 512.306 292.092] +/Subtype /Link +/A << /S /GoTo /D (subsection.5.6.6) >> +>> endobj +3149 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [498.314 258.611 512.306 268.179] +/Subtype /Link +/A << /S /GoTo /D (chapter.6) >> +>> endobj +3150 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 245.062 512.306 254.084] +/Subtype /Link +/A << /S /GoTo /D (section.6.1) >> +>> endobj +3151 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 231.512 512.306 240.535] +/Subtype /Link +/A << /S /GoTo /D (section.6.2) >> +>> endobj +3152 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 217.963 512.306 226.986] +/Subtype /Link +/A << /S /GoTo /D (subsection.6.2.1) >> +>> endobj +3153 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 204.414 512.306 213.437] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.6.2.1.1) >> +>> endobj +3154 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 190.865 512.306 199.888] +/Subtype /Link +/A << /S /GoTo /D (subsection.6.2.2) >> +>> endobj +3155 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 177.316 512.306 186.338] +/Subtype /Link +/A << /S /GoTo /D (subsection.6.2.3) >> +>> endobj +3156 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 163.766 512.306 172.789] +/Subtype /Link +/A << /S /GoTo /D (subsection.6.2.4) >> +>> endobj +3157 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 150.217 512.306 159.24] +/Subtype /Link +/A << /S /GoTo /D (section.6.3) >> +>> endobj +3158 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 136.668 512.306 145.691] +/Subtype /Link +/A << /S /GoTo /D (subsection.6.3.1) >> +>> endobj +3159 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 123.119 512.306 132.142] +/Subtype /Link +/A << /S /GoTo /D (section.6.4) >> +>> endobj +3160 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 109.57 512.306 118.593] +/Subtype /Link +/A << /S /GoTo /D (subsection.6.4.1) >> +>> endobj +3161 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 96.02 512.306 105.043] +/Subtype /Link +/A << /S /GoTo /D (subsection.6.4.2) >> +>> endobj +3162 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 82.471 512.306 91.494] +/Subtype /Link +/A << /S /GoTo /D (subsection.6.4.3) >> +>> endobj +3163 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 68.922 512.306 77.945] +/Subtype /Link +/A << /S /GoTo /D (subsection.6.4.4) >> +>> endobj +3115 0 obj << +/D [3113 0 R /XYZ 85.039 786.531 null] +>> endobj +3112 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3167 0 obj << +/Length 3203 +/Filter /FlateDecode +>> +stream +xKSI +ŜAM׻1a7l 6bvBȠ$$aR3ʬ&U͚Ҳ &;!.%%i코|@ꪩPNSW_.~v;~8TMbo fXẮH w`}9w(nj0bu5LCU!*U*B+F'¾jw$9,dzI5|KS o(lTh,CܼuBoW+٪-0*+V22PT UqZNJ r1> s&^&a8QNu~<`{<5 BjIs<\$[vn@ KZ5`O:o,@9d@# p#c55h1;.ӥ-x_/fn`]͆˛٦|6҈b_h1[Z"-r-f+pK$n@[5";&8N0&cl7 TU"v[;  3,DMݸ:HzBN!4YZ +LWCcb_7Q'ֶ[s\B +塵V5@jDw'(/V̳Z_VS kںdWFa'7zW8+V߾cD'X5Vb=dn4{ɃU MjylP@cD瀶Z5$ӕ7GSsBɲ7NVvőuV k3=Z+dC(ٳ@w" =f+@Oğn@z֠ j*@\|s{^~\MMo++U_N1[S"hOAp"I};)e' c/ RicgbTt1K_1[t"r h@tVa yurTXd/iL +>N+an^x?^}lxP C-ICHzM{<)Jj(}./LcDy䙖j Se݉/=w4cJB:1>6qXlXBP7m@'n6_܀siokm}>W"h?I)voD#\^RPEZQ+yYYRxqM:hax)SM/d˫f +$?B hRѨoXf2^Qyd#T F'AkPl3Jղk)ai6ueIJƨJX? ֻ`5-%6%XLȗ geM,M$6󥳟.6b > zUK +*ART b*n #?p m[@/0ɖ)h@vEZ5p`R:'`Y'EnE93c~Wܝr +*р,=߂{_1[f":kupHPίοT<1ҾIlmA }i| w}=oDoT:Sw8Ko!Xfxcr5yM;>K> endobj +3169 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [498.314 754.651 512.306 764.219] +/Subtype /Link +/A << /S /GoTo /D (chapter.7) >> +>> endobj +3170 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 741.102 512.306 750.125] +/Subtype /Link +/A << /S /GoTo /D (section.7.1) >> +>> endobj +3171 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 727.553 512.306 736.575] +/Subtype /Link +/A << /S /GoTo /D (section.7.2) >> +>> endobj +3172 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 714.003 512.306 723.026] +/Subtype /Link +/A << /S /GoTo /D (subsection.7.2.1) >> +>> endobj +3173 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 686.905 512.306 695.928] +/Subtype /Link +/A << /S /GoTo /D (subsection.7.2.2) >> +>> endobj +3174 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 673.356 512.306 682.379] +/Subtype /Link +/A << /S /GoTo /D (subsection.7.2.3) >> +>> endobj +3175 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 646.257 512.306 655.28] +/Subtype /Link +/A << /S /GoTo /D (subsection.7.2.4) >> +>> endobj +3176 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 632.708 512.306 641.731] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.7.2.4.1) >> +>> endobj +3177 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 619.159 512.306 628.182] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.7.2.4.2) >> +>> endobj +3178 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 605.61 512.306 614.633] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.7.2.4.3) >> +>> endobj +3179 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 592.061 512.306 601.083] +/Subtype /Link +/A << /S /GoTo /D (section.7.3) >> +>> endobj +3180 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 578.511 512.306 587.534] +/Subtype /Link +/A << /S /GoTo /D (subsection.7.3.1) >> +>> endobj +3181 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 564.962 512.306 573.985] +/Subtype /Link +/A << /S /GoTo /D (subsection.7.3.2) >> +>> endobj +3182 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 551.413 512.306 560.436] +/Subtype /Link +/A << /S /GoTo /D (section.7.4) >> +>> endobj +3183 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 537.864 512.306 546.887] +/Subtype /Link +/A << /S /GoTo /D (subsection.7.4.1) >> +>> endobj +3184 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 524.315 512.306 533.337] +/Subtype /Link +/A << /S /GoTo /D (subsection.7.4.2) >> +>> endobj +3185 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 510.765 512.306 519.788] +/Subtype /Link +/A << /S /GoTo /D (subsection.7.4.3) >> +>> endobj +3186 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 497.216 512.306 506.239] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.7.4.3.1) >> +>> endobj +3187 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 483.667 512.306 492.69] +/Subtype /Link +/A << /S /GoTo /D (subsection.7.4.4) >> +>> endobj +3188 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 470.118 512.306 479.141] +/Subtype /Link +/A << /S /GoTo /D (subsection.7.4.5) >> +>> endobj +3189 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 456.569 512.306 465.591] +/Subtype /Link +/A << /S /GoTo /D (subsection.7.4.6) >> +>> endobj +3190 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 443.019 512.306 452.042] +/Subtype /Link +/A << /S /GoTo /D (section.7.5) >> +>> endobj +3191 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 429.47 512.306 438.493] +/Subtype /Link +/A << /S /GoTo /D (subsection.7.5.1) >> +>> endobj +3192 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 415.921 512.306 424.944] +/Subtype /Link +/A << /S /GoTo /D (subsection.7.5.2) >> +>> endobj +3193 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [498.314 391.463 512.306 401.031] +/Subtype /Link +/A << /S /GoTo /D (chapter.8) >> +>> endobj +3194 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 377.914 512.306 386.936] +/Subtype /Link +/A << /S /GoTo /D (section.8.1) >> +>> endobj +3195 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 364.364 512.306 373.387] +/Subtype /Link +/A << /S /GoTo /D (section.8.2) >> +>> endobj +3196 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 350.815 512.306 359.838] +/Subtype /Link +/A << /S /GoTo /D (section.8.3) >> +>> endobj +3197 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 337.266 512.306 346.289] +/Subtype /Link +/A << /S /GoTo /D (subsection.8.3.1) >> +>> endobj +3198 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 323.717 512.306 332.74] +/Subtype /Link +/A << /S /GoTo /D (subsection.8.3.2) >> +>> endobj +3199 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 310.168 512.306 319.19] +/Subtype /Link +/A << /S /GoTo /D (section.8.4) >> +>> endobj +3200 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [498.314 285.709 512.306 295.278] +/Subtype /Link +/A << /S /GoTo /D (chapter.9) >> +>> endobj +3201 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 272.16 512.306 281.183] +/Subtype /Link +/A << /S /GoTo /D (section.9.1) >> +>> endobj +3202 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [497.163 233.667 512.306 243.962] +/Subtype /Link +/A << /S /GoTo /D (part.3) >> +>> endobj +3203 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [498.314 209.209 512.306 218.777] +/Subtype /Link +/A << /S /GoTo /D (chapter.10) >> +>> endobj +3204 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 195.659 512.306 204.682] +/Subtype /Link +/A << /S /GoTo /D (section.10.1) >> +>> endobj +3205 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 182.11 512.306 191.133] +/Subtype /Link +/A << /S /GoTo /D (section.10.2) >> +>> endobj +3206 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 168.561 512.306 177.584] +/Subtype /Link +/A << /S /GoTo /D (section.10.3) >> +>> endobj +3207 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 155.012 512.306 164.035] +/Subtype /Link +/A << /S /GoTo /D (subsection.10.3.1) >> +>> endobj +3208 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 141.463 512.306 150.485] +/Subtype /Link +/A << /S /GoTo /D (subsection.10.3.2) >> +>> endobj +3209 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 127.913 512.306 136.936] +/Subtype /Link +/A << /S /GoTo /D (subsection.10.3.3) >> +>> endobj +3210 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 114.364 512.306 123.387] +/Subtype /Link +/A << /S /GoTo /D (section.10.4) >> +>> endobj +3211 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 100.815 512.306 109.838] +/Subtype /Link +/A << /S /GoTo /D (subsection.10.4.1) >> +>> endobj +3212 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 87.266 512.306 96.289] +/Subtype /Link +/A << /S /GoTo /D (subsection.10.4.2) >> +>> endobj +3213 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 73.717 512.306 82.739] +/Subtype /Link +/A << /S /GoTo /D (subsection.10.4.3) >> +>> endobj +3214 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 60.167 512.306 69.19] +/Subtype /Link +/A << /S /GoTo /D (subsection.10.4.4) >> +>> endobj +3168 0 obj << +/D [3166 0 R /XYZ 85.039 786.531 null] +>> endobj +3165 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3217 0 obj << +/Length 3421 +/Filter /FlateDecode +>> +stream +xIs"u+/qTĒ+F$mEoHviŒS.ai40ēZQMդq'Y=y|3,ٷZM.q%&_'to?}wƔBY{RqF,wMP)8K/Y1~N#I9Wh:BT/vFY^MgvsL)] WlЧroO.NV?׵`JeGk)~@DƱ=u&ܕ^j]ylJY,Aݭe #U![ d}Xݘrk XPwMKpw3x3Mba}`%/ѭx=[Km~mkk7PtOE +`ena aFXl%Gz~!BCJ9#]|Hc0HְD#&MHF~9q9sƟ_V," sg=su[wQ?̭]C1s-J%za~I S81ľY],uZ8}$Ȯ5u f#Afb0ܭ( YF Cxz5o+S$ +bPXcPI!}`%iHC<}?~ϻ[>QK.C0l+\ -i 㥞l Y+r}Vc];?DWEÊ~K>g `}`%ISYg0; XاQtv8Z5 +3WKZ#@R#yvn}ki;d/E +Sg 'K2Hf> "7&Y;Z ?l|'|9ZMû6MRI;~,TVkjL w[zwÒVkn*R[; {Me!!Fo31ֆv^ ADw?a:HWmLR2 7٪mzUŪGvkhݔʨVg-OݩOfj +ɞgeOhWк~4水Ԕ1="8T2ךۃk>Yd0hJM&>`Һfw+n$L ƕ;NAZ#.P-2\aWfoú?&KBNbșa}`%rS#E<䵁XʜeXrorrIkC.&0s蛸ʻOOMl;b/XNI)j N}`N%ay) /KnؗeI:,W7]Q:BY]~f] n7_lefWݙHsnVZ}k[T'D!)F';3B7WzꅅYT/K?ۿ˶&.w/X\I+s0ֈ&9u]w_*^>0pM@,ŗ4Q* JR.vPAeB@zv9vlkyߺ?R,XY&ݞ4hÀ a9.(ŜR}ٵ~̑/X*I@%wO mHRR0'T,q`U`afG + eے/XjI@-wLoL6Rc攚Ԏ}Eh~p`t{ fs̶X46᫚%K$䮩 DJj#QM |!nF맧fuHL$HXnj5oX$I$ o6"!COݵ k{3Ifg߲ۮ1!0)8 `N%S E)'l9Lū.^WkO4ˍEK3hni-iԆ2kټpuO&[! ;d$$] t*k$1ޔ|-ugZ?>Z|FJR0k5W* DH#OHX1 >I/IrOwFf#+i}qDJB[N~u"Fƃ^o{2#3endstream +endobj +3216 0 obj << +/Type /Page +/Contents 3217 0 R +/Resources 3215 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 3164 0 R +/Annots [ 3219 0 R 3220 0 R 3221 0 R 3222 0 R 3223 0 R 3224 0 R 3225 0 R 3226 0 R 3227 0 R 3228 0 R 3229 0 R 3230 0 R 3231 0 R 3232 0 R 3233 0 R 3234 0 R 3235 0 R 3236 0 R 3237 0 R 3238 0 R 3239 0 R 3240 0 R 3241 0 R 3242 0 R 3243 0 R 3244 0 R 3245 0 R 3249 0 R 3250 0 R 3251 0 R 3252 0 R 3253 0 R 3254 0 R 3255 0 R 3256 0 R 3257 0 R 3258 0 R 3259 0 R 3260 0 R 3261 0 R 3262 0 R 3263 0 R 3264 0 R 3265 0 R 3266 0 R 3267 0 R 3268 0 R 3269 0 R ] +>> endobj +3219 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 754.651 512.306 763.674] +/Subtype /Link +/A << /S /GoTo /D (subsection.10.4.5) >> +>> endobj +3220 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 741.102 512.306 750.125] +/Subtype /Link +/A << /S /GoTo /D (subsection.10.4.6) >> +>> endobj +3221 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 727.553 512.306 736.575] +/Subtype /Link +/A << /S /GoTo /D (subsection.10.4.7) >> +>> endobj +3222 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 714.003 512.306 723.026] +/Subtype /Link +/A << /S /GoTo /D (subsection.10.4.8) >> +>> endobj +3223 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 700.454 512.306 709.477] +/Subtype /Link +/A << /S /GoTo /D (section.10.5) >> +>> endobj +3224 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 686.905 512.306 695.928] +/Subtype /Link +/A << /S /GoTo /D (subsection.10.5.1) >> +>> endobj +3225 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 673.356 512.306 682.379] +/Subtype /Link +/A << /S /GoTo /D (subsection.10.5.2) >> +>> endobj +3226 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 659.807 512.306 668.829] +/Subtype /Link +/A << /S /GoTo /D (subsection.10.5.3) >> +>> endobj +3227 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 646.257 512.306 655.28] +/Subtype /Link +/A << /S /GoTo /D (section.10.6) >> +>> endobj +3228 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 632.708 512.306 641.731] +/Subtype /Link +/A << /S /GoTo /D (subsection.10.6.1) >> +>> endobj +3229 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 619.159 512.306 628.182] +/Subtype /Link +/A << /S /GoTo /D (subsection.10.6.2) >> +>> endobj +3230 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 605.61 512.306 614.633] +/Subtype /Link +/A << /S /GoTo /D (section.10.7) >> +>> endobj +3231 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 592.061 512.306 601.083] +/Subtype /Link +/A << /S /GoTo /D (subsection.10.7.1) >> +>> endobj +3232 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 578.511 512.306 587.534] +/Subtype /Link +/A << /S /GoTo /D (subsection.10.7.2) >> +>> endobj +3233 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 564.962 512.306 573.985] +/Subtype /Link +/A << /S /GoTo /D (subsection.10.7.3) >> +>> endobj +3234 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 551.413 512.306 560.436] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.10.7.3.1) >> +>> endobj +3235 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 537.864 512.306 546.887] +/Subtype /Link +/A << /S /GoTo /D (section.10.8) >> +>> endobj +3236 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 510.765 512.306 519.788] +/Subtype /Link +/A << /S /GoTo /D (subsection.10.8.1) >> +>> endobj +3237 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 483.667 512.306 492.69] +/Subtype /Link +/A << /S /GoTo /D (subsection.10.8.2) >> +>> endobj +3238 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [498.314 459.209 512.306 468.777] +/Subtype /Link +/A << /S /GoTo /D (chapter.11) >> +>> endobj +3239 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 445.66 512.306 454.682] +/Subtype /Link +/A << /S /GoTo /D (section.11.1) >> +>> endobj +3240 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 432.11 512.306 441.133] +/Subtype /Link +/A << /S /GoTo /D (section.11.2) >> +>> endobj +3241 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 418.561 512.306 427.584] +/Subtype /Link +/A << /S /GoTo /D (subsection.11.2.1) >> +>> endobj +3242 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 405.012 512.306 414.035] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.11.2.1.1) >> +>> endobj +3243 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 391.463 512.306 400.486] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.11.2.1.2) >> +>> endobj +3244 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 377.914 512.306 386.936] +/Subtype /Link +/A << /S /GoTo /D (subsection.11.2.2) >> +>> endobj +3245 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 364.364 512.306 373.387] +/Subtype /Link +/A << /S /GoTo /D (section.11.3) >> +>> endobj +3249 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 350.815 512.306 359.838] +/Subtype /Link +/A << /S /GoTo /D (subsection.11.3.1) >> +>> endobj +3250 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 337.266 512.306 346.289] +/Subtype /Link +/A << /S /GoTo /D (subsection.11.3.2) >> +>> endobj +3251 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 323.717 512.306 332.74] +/Subtype /Link +/A << /S /GoTo /D (section.11.4) >> +>> endobj +3252 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 310.168 512.306 319.19] +/Subtype /Link +/A << /S /GoTo /D (subsection.11.4.1) >> +>> endobj +3253 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 296.618 512.306 305.641] +/Subtype /Link +/A << /S /GoTo /D (subsection.11.4.2) >> +>> endobj +3254 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 283.069 512.306 292.092] +/Subtype /Link +/A << /S /GoTo /D (subsection.11.4.3) >> +>> endobj +3255 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 269.52 512.306 278.543] +/Subtype /Link +/A << /S /GoTo /D (subsection.11.4.4) >> +>> endobj +3256 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 255.971 512.306 264.994] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.11.4.4.1) >> +>> endobj +3257 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 228.872 512.306 237.895] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.11.4.4.2) >> +>> endobj +3258 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 215.323 512.306 224.346] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.11.4.4.3) >> +>> endobj +3259 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [499.405 201.774 512.306 210.797] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.11.4.4.4) >> +>> endobj +3260 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 188.225 512.306 197.248] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.11.4.4.5) >> +>> endobj +3261 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 174.676 512.306 183.698] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.11.4.4.6) >> +>> endobj +3262 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 161.126 512.306 170.149] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.11.4.4.7) >> +>> endobj +3263 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 147.577 512.306 156.6] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.11.4.4.8) >> +>> endobj +3264 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 134.028 512.306 143.051] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.11.4.4.9) >> +>> endobj +3265 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 120.479 512.306 129.502] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.11.4.4.10) >> +>> endobj +3266 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 106.93 512.306 115.952] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.11.4.4.11) >> +>> endobj +3267 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 93.38 512.306 102.403] +/Subtype /Link +/A << /S /GoTo /D (subsection.11.4.5) >> +>> endobj +3268 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 79.831 512.306 88.854] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.11.4.5.1) >> +>> endobj +3269 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 66.282 512.306 75.305] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.11.4.5.2) >> +>> endobj +3218 0 obj << +/D [3216 0 R /XYZ 85.039 786.531 null] +>> endobj +3215 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3272 0 obj << +/Length 3486 +/Filter /FlateDecode +>> +stream +x[s۶+tޤc&q&8ͩ[Yԡ8mH"a4v'EQ\.X,II)IƫIQDr:ߞdk˳8uFxy,*&o}*\.~>n63VN~饿qro~& UN2«rr3Bjr{"$'Rp}}rq/XZH^Y~5A˒E>)$(L=(%H2SNfws>ݮCֻN]馵KFAQmbXvvZU|4,SGF U؃_"ci$712q\ 9P>{iZg C1x캕!9ͩhV_kEm/ݍt~c62PL~1FUa, /N%*+bR0G +Tre__(Ut>/ +h;ӌcg/N;2# [csqڶѮ9ʾ=`ȕ}" `sV1;s<8"L/ޙ.uiTk4m7u\ÓpjO{ tܸ~q宼Pշ3VLJ\`_XV^*+!N Phdžխஔ60ኋ^v{tꢏqQx6 pUuXNQ" _ԯyU9XP"1ׁP^%@%zb \@;bS6&4-벻i sHq&wlSi?2;+v`TXjl^j=d$b:c OsQl,S \dʦzc_bƎ$363G~L6 {덾5~&m퓜+N= VF(K9O(9 >L)gRXQΝ)[0s +uji +Xig_MM#E3jg @ԟP)ſ!pC~ wYEC16TV]08G>QA5cIؤ4HKLw$*d܏7#`V0ธk9+N v:Q؜R@ PIRYT58E};Ύ JY cspmzf~}jUry/;aK m#GR%UT;Ih(Q~vPZv ~ڎcK%V [x{zoXA,=?e~ p)o%2@ 'TW4QfW;Z>\5X ̋3=֍z (C oVURQ]Tz6zشuġ6 +>W ~JL~XA,#6N_/K ɌQtb.2e61t2'v9L2dz>%.nL~~ϗ;4Rs Q,G3rDɚcFwJX2G$3u;;QVq#tDHGpG< >%@ǤZ t%9"fn#d[Ȥw~=~Nݶ {@XA,;:& R })!ɣ\9t{Gt]X1sd_^i-o@ MԼެ>أ3}!WG$Aq +Q|6WTXJlJ8ZOET5a +D(nWkJuw`6+~Y{Z cRlk8ȔZKR:0 0ZSu>Y4@~􍫝Tw죋eެvѓd_X,A,%u ǒR뱰pɏeJo'{*7WK R;A|} iO ծ0 + ٴSm ;:GYI`vcr (,aYFXB6^翺]v=y{ ݘYZ^elĜY9QHnuB\4\b Yp4Rj+sRdyCwޮg.gbť_IyBo)W'o5 -áXa%@%zh'TF4v <ܘgʈzC:XA,73_oJ++gE+> ;L4sW3h:r̪on, [/,bF&rXa( *و:_KȰYRj=>Έ̪#|M0 =D7YK m#GRHZ*%Đn/.}Crh, /=;b.'Ǿ9+ nW&5w`g' r-XA,3*_fJ))aTSy7 kzDw/'k(:m}X QD! +1jkᔙ X۲7`%Տ<*3QG)l;:O*ce=cs]@1Z0:DR͌i^;-koq/eHn$xE 6P.\ n"L&!oe9; I˦w.@3v$|tGkMl7ӗAe'~0`H#+H}.%Nf% Ow?Hc(zJgx8#!ͫ7/7f# xa4;3!r?W*N |^[T}K +A*`TV(> endobj +3274 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 754.651 512.306 763.674] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.11.4.5.3) >> +>> endobj +3275 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 741.102 512.306 750.125] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.11.4.5.4) >> +>> endobj +3276 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 727.553 512.306 736.575] +/Subtype /Link +/A << /S /GoTo /D (subsection.11.4.6) >> +>> endobj +3277 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 714.003 512.306 723.026] +/Subtype /Link +/A << /S /GoTo /D (section.11.5) >> +>> endobj +3278 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 700.454 512.306 709.477] +/Subtype /Link +/A << /S /GoTo /D (subsection.11.5.1) >> +>> endobj +3279 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 686.905 512.306 695.928] +/Subtype /Link +/A << /S /GoTo /D (subsection.11.5.2) >> +>> endobj +3280 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 673.356 512.306 682.379] +/Subtype /Link +/A << /S /GoTo /D (subsection.11.5.3) >> +>> endobj +3281 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [492.314 648.897 512.306 658.466] +/Subtype /Link +/A << /S /GoTo /D (chapter.12) >> +>> endobj +3282 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 635.348 512.306 644.371] +/Subtype /Link +/A << /S /GoTo /D (section.12.1) >> +>> endobj +3283 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 621.799 512.306 630.822] +/Subtype /Link +/A << /S /GoTo /D (section.12.2) >> +>> endobj +3284 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 608.25 512.306 617.273] +/Subtype /Link +/A << /S /GoTo /D (subsection.12.2.1) >> +>> endobj +3285 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 594.701 512.306 603.724] +/Subtype /Link +/A << /S /GoTo /D (section.12.3) >> +>> endobj +3286 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 581.151 512.306 590.174] +/Subtype /Link +/A << /S /GoTo /D (subsection.12.3.1) >> +>> endobj +3287 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 567.602 512.306 576.625] +/Subtype /Link +/A << /S /GoTo /D (subsection.12.3.2) >> +>> endobj +3288 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 554.053 512.306 563.076] +/Subtype /Link +/A << /S /GoTo /D (section.12.4) >> +>> endobj +3289 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 540.504 512.306 549.527] +/Subtype /Link +/A << /S /GoTo /D (subsection.12.4.1) >> +>> endobj +3290 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 526.955 512.306 535.978] +/Subtype /Link +/A << /S /GoTo /D (subsection.12.4.2) >> +>> endobj +3291 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [492.314 502.496 512.306 512.065] +/Subtype /Link +/A << /S /GoTo /D (chapter.13) >> +>> endobj +3292 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 488.947 512.306 497.97] +/Subtype /Link +/A << /S /GoTo /D (section.13.1) >> +>> endobj +3293 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 475.398 512.306 484.421] +/Subtype /Link +/A << /S /GoTo /D (section.13.2) >> +>> endobj +3294 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 461.849 512.306 470.872] +/Subtype /Link +/A << /S /GoTo /D (subsection.13.2.1) >> +>> endobj +3295 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 448.3 512.306 457.322] +/Subtype /Link +/A << /S /GoTo /D (subsection.13.2.2) >> +>> endobj +3296 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 434.75 512.306 443.773] +/Subtype /Link +/A << /S /GoTo /D (subsection.13.2.3) >> +>> endobj +3297 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 421.201 512.306 430.224] +/Subtype /Link +/A << /S /GoTo /D (section.13.3) >> +>> endobj +3298 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 407.652 512.306 416.675] +/Subtype /Link +/A << /S /GoTo /D (subsection.13.3.1) >> +>> endobj +3299 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 394.103 512.306 403.126] +/Subtype /Link +/A << /S /GoTo /D (subsection.13.3.2) >> +>> endobj +3300 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 380.554 512.306 389.576] +/Subtype /Link +/A << /S /GoTo /D (subsection.13.3.3) >> +>> endobj +3301 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 367.004 512.306 376.027] +/Subtype /Link +/A << /S /GoTo /D (section.13.4) >> +>> endobj +3302 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 353.455 512.306 362.478] +/Subtype /Link +/A << /S /GoTo /D (subsection.13.4.1) >> +>> endobj +3303 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 339.906 512.306 348.929] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.13.4.1.1) >> +>> endobj +3304 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 326.357 512.306 335.38] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.13.4.1.2) >> +>> endobj +3305 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 312.808 512.306 321.83] +/Subtype /Link +/A << /S /GoTo /D (section.13.5) >> +>> endobj +3306 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 299.258 512.306 308.281] +/Subtype /Link +/A << /S /GoTo /D (subsection.13.5.1) >> +>> endobj +3307 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 285.709 512.306 294.732] +/Subtype /Link +/A << /S /GoTo /D (subsection.13.5.2) >> +>> endobj +3308 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 272.16 512.306 281.183] +/Subtype /Link +/A << /S /GoTo /D (subsection.13.5.3) >> +>> endobj +3309 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 258.611 512.306 267.634] +/Subtype /Link +/A << /S /GoTo /D (subsection.13.5.4) >> +>> endobj +3310 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 245.062 512.306 254.084] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.13.5.4.1) >> +>> endobj +3311 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 231.512 512.306 240.535] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.13.5.4.2) >> +>> endobj +3312 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 217.963 512.306 226.986] +/Subtype /Link +/A << /S /GoTo /D (subsection.13.5.5) >> +>> endobj +3313 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 204.414 512.306 213.437] +/Subtype /Link +/A << /S /GoTo /D (subsection.13.5.6) >> +>> endobj +3314 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 190.865 512.306 199.888] +/Subtype /Link +/A << /S /GoTo /D (subsection.13.5.7) >> +>> endobj +3315 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 177.316 512.306 186.338] +/Subtype /Link +/A << /S /GoTo /D (section.13.6) >> +>> endobj +3316 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 163.766 512.306 172.789] +/Subtype /Link +/A << /S /GoTo /D (subsection.13.6.1) >> +>> endobj +3317 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 136.668 512.306 145.691] +/Subtype /Link +/A << /S /GoTo /D (subsection.13.6.2) >> +>> endobj +3318 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [492.314 112.21 512.306 121.778] +/Subtype /Link +/A << /S /GoTo /D (chapter.14) >> +>> endobj +3319 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 98.661 512.306 107.683] +/Subtype /Link +/A << /S /GoTo /D (section.14.1) >> +>> endobj +3320 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 85.111 512.306 94.134] +/Subtype /Link +/A << /S /GoTo /D (section.14.2) >> +>> endobj +3321 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 71.562 512.306 80.585] +/Subtype /Link +/A << /S /GoTo /D (subsection.14.2.1) >> +>> endobj +3322 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 58.013 512.306 67.036] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.14.2.1.1) >> +>> endobj +3273 0 obj << +/D [3271 0 R /XYZ 85.039 786.531 null] +>> endobj +3270 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3325 0 obj << +/Length 3302 +/Filter /FlateDecode +>> +stream +xKs8:lJU+ $yJd'3v0;ZRlVdKR/ހ5\H5VG?ǧjLz~,e~9*{@'WGSG'G2c#uVW4Q7pU!QI9  O YUOmިO sիr6LO.Nާ/n:IV5fSd^Vף~gcV3TП2|xI#Vֶx c$})#sk^G*$]D":n?'ډhځi?ZzJ?VTwl, [ Sa9XYX')ɛ를vvݭmsnB|5(xFͯYAñ= 'eV-z8.gfFX͠a4yO0KɈd9Stvd UJ#,, +ah̤8_vW^f;d9ʰ H +QtDUKxZi=X+t֑mUfVja/BN?h#Eb0Uɕ QNU܃r]qpp\)f6K D;ɡ];~*y[ fX4W7b3lrbA`i `9(PU=[ھo„p];H6n/.mDg9oAT9b;2M˰I[ɩIJa%"96*&s@Fr [5kZ; /vfq6iYƢ b)Ц-bq.E9T,"rͩsDd3ybDO˺$i=dːMJD2mL2;PR I<ց}sם7f梊⾓K.e&ɥ-zr@9u]֎ve@XWc;3O I[ɩu)*O +2=z [TJMP+ զmHhBGUEHѿVIf䓈$vLG9@@ @bYnUexQbnU{mv[o.\:w2ͯ[[*DyXA,C36+-!i `9Mbi$1w1c5 6J%| ]ktXnlfnnN V1CmLĮSF3ԼA1MbḇiaN[cΩi*KF0+V6.2#0N @ܭk\؃Nw@Wjs>POm?fMKkghNRTii}[O|+]9gXA,<< X2xgh$E<*0JݤۦV@l v04WMj6ZKߜo(-[EOJψ@$_\a.ǵTi[ܺՄ1&ޙӢo*g*gx-hV@n8;Aq:SЭlg؆6;[+2c00Z $p1鬒qI[Cg5InoKK>bhv،gn4vM;j.XA,2)2m2R2tYunTϛ2N2\ԻXA,16(1m1s5Ua TZ_)BbTv0ZV#s?lbFc 00Z C%ڞjO["=t*Us$.63eXawX[]E˰_'>~rcƫ#1>2c{sj=Fy3,`t;חvUf\4϶)>W)75fs ;NuE+_u?gf8ZPSK[pˉK?q!@eTvݤ&̉k]n`>[J!_7=p*5/dDcOt/zRTdOeHnIÓ"̽494rEb!g̪yK5 +M;^7d[_֥7v ̷Fv!Hmᵶ7ev-zL• OGh{)ݵS)3N3PNϾkec ~ *=[NW%4x+ +ӡ:bM22 +>U~P]$p A&c 800ZW 0Vi$>bWc*ԋSQrJ>~Gn"ZZ&05>Wo< esL}{uPoM=J$ݑ(8b3A*3=D=<3:[5F| K2{/'>?7F6[)q?vL ;`V&jN]"`wz3}bMu?X|A,/#/m/L-n1se2b11K[3˩NcD0s~pa6=eg+5ZcϩSHl=7/GiX nاBpǞļ:NhY8˱X\lA\ڂOKa&ݶҤ~ި[7vmzWHf0W]:|#uuw]Ië ԣ}WЭVFv$TzG} 9Ŭ%h ADOJo,VTTx5ܩR<c[`ZLP!G Q'>F/zoDdd+؄]11cZe)j|*endstream +endobj +3324 0 obj << +/Type /Page +/Contents 3325 0 R +/Resources 3323 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 3164 0 R +/Annots [ 3327 0 R 3328 0 R 3329 0 R 3330 0 R 3331 0 R 3332 0 R 3333 0 R 3334 0 R 3335 0 R 3336 0 R 3337 0 R 3338 0 R 3339 0 R 3340 0 R 3341 0 R 3342 0 R 3343 0 R 3344 0 R 3345 0 R 3346 0 R 3347 0 R 3348 0 R 3349 0 R 3350 0 R 3351 0 R 3352 0 R 3353 0 R 3354 0 R 3355 0 R 3356 0 R 3357 0 R 3358 0 R 3359 0 R 3360 0 R 3361 0 R 3362 0 R 3363 0 R 3364 0 R 3365 0 R 3366 0 R 3367 0 R 3368 0 R 3369 0 R 3370 0 R 3371 0 R 3372 0 R 3373 0 R ] +>> endobj +3327 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 754.651 512.306 763.674] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.14.2.1.2) >> +>> endobj +3328 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 741.102 512.306 750.125] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.14.2.1.3) >> +>> endobj +3329 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 727.553 512.306 736.575] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.14.2.1.4) >> +>> endobj +3330 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 714.003 512.306 723.026] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.14.2.1.5) >> +>> endobj +3331 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 700.454 512.306 709.477] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.14.2.1.6) >> +>> endobj +3332 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 686.905 512.306 695.928] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.14.2.1.7) >> +>> endobj +3333 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 673.356 512.306 682.379] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.14.2.1.8) >> +>> endobj +3334 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 659.807 512.306 668.829] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.14.2.1.9) >> +>> endobj +3335 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 646.257 512.306 655.28] +/Subtype /Link +/A << /S /GoTo /D (section.14.3) >> +>> endobj +3336 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 632.708 512.306 641.731] +/Subtype /Link +/A << /S /GoTo /D (subsection.14.3.1) >> +>> endobj +3337 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 619.159 512.306 628.182] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.14.3.1.1) >> +>> endobj +3338 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 605.61 512.306 614.633] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.14.3.1.2) >> +>> endobj +3339 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 592.061 512.306 601.083] +/Subtype /Link +/A << /S /GoTo /D (section.14.4) >> +>> endobj +3340 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 578.511 512.306 587.534] +/Subtype /Link +/A << /S /GoTo /D (subsection.14.4.1) >> +>> endobj +3341 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 564.962 512.306 573.985] +/Subtype /Link +/A << /S /GoTo /D (subsection.14.4.2) >> +>> endobj +3342 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 551.413 512.306 560.436] +/Subtype /Link +/A << /S /GoTo /D (section.14.5) >> +>> endobj +3343 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 537.864 512.306 546.887] +/Subtype /Link +/A << /S /GoTo /D (section.14.6) >> +>> endobj +3344 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 524.315 512.306 533.337] +/Subtype /Link +/A << /S /GoTo /D (subsection.14.6.1) >> +>> endobj +3345 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 510.765 512.306 519.788] +/Subtype /Link +/A << /S /GoTo /D (section.14.7) >> +>> endobj +3346 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [492.314 486.307 512.306 495.875] +/Subtype /Link +/A << /S /GoTo /D (chapter.15) >> +>> endobj +3347 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 472.758 512.306 481.781] +/Subtype /Link +/A << /S /GoTo /D (section.15.1) >> +>> endobj +3348 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 459.209 512.306 468.232] +/Subtype /Link +/A << /S /GoTo /D (section.15.2) >> +>> endobj +3349 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 445.66 512.306 454.682] +/Subtype /Link +/A << /S /GoTo /D (section.15.3) >> +>> endobj +3350 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 432.11 512.306 441.133] +/Subtype /Link +/A << /S /GoTo /D (subsection.15.3.1) >> +>> endobj +3351 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 418.561 512.306 427.584] +/Subtype /Link +/A << /S /GoTo /D (subsection.15.3.2) >> +>> endobj +3352 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 405.012 512.306 414.035] +/Subtype /Link +/A << /S /GoTo /D (subsection.15.3.3) >> +>> endobj +3353 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 391.463 512.306 400.486] +/Subtype /Link +/A << /S /GoTo /D (subsection.15.3.4) >> +>> endobj +3354 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 377.914 512.306 386.936] +/Subtype /Link +/A << /S /GoTo /D (subsection.15.3.5) >> +>> endobj +3355 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 364.364 512.306 373.387] +/Subtype /Link +/A << /S /GoTo /D (subsection.15.3.6) >> +>> endobj +3356 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 350.815 512.306 359.838] +/Subtype /Link +/A << /S /GoTo /D (section.15.4) >> +>> endobj +3357 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 337.266 512.306 346.289] +/Subtype /Link +/A << /S /GoTo /D (section.15.5) >> +>> endobj +3358 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 323.717 512.306 332.74] +/Subtype /Link +/A << /S /GoTo /D (subsection.15.5.1) >> +>> endobj +3359 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 310.168 512.306 319.19] +/Subtype /Link +/A << /S /GoTo /D (subsection.15.5.2) >> +>> endobj +3360 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [492.314 285.709 512.306 295.278] +/Subtype /Link +/A << /S /GoTo /D (chapter.16) >> +>> endobj +3361 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 272.16 512.306 281.183] +/Subtype /Link +/A << /S /GoTo /D (section.16.1) >> +>> endobj +3362 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 258.611 512.306 267.634] +/Subtype /Link +/A << /S /GoTo /D (section.16.2) >> +>> endobj +3363 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 245.062 512.306 254.084] +/Subtype /Link +/A << /S /GoTo /D (section.16.3) >> +>> endobj +3364 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 231.512 512.306 240.535] +/Subtype /Link +/A << /S /GoTo /D (subsection.16.3.1) >> +>> endobj +3365 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 204.414 512.306 213.437] +/Subtype /Link +/A << /S /GoTo /D (subsection.16.3.2) >> +>> endobj +3366 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 190.865 512.306 199.888] +/Subtype /Link +/A << /S /GoTo /D (section.16.4) >> +>> endobj +3367 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 177.316 512.306 186.338] +/Subtype /Link +/A << /S /GoTo /D (subsection.16.4.1) >> +>> endobj +3368 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 163.766 512.306 172.789] +/Subtype /Link +/A << /S /GoTo /D (subsection.16.4.2) >> +>> endobj +3369 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 150.217 512.306 159.24] +/Subtype /Link +/A << /S /GoTo /D (section.16.5) >> +>> endobj +3370 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 136.668 512.306 145.691] +/Subtype /Link +/A << /S /GoTo /D (subsection.16.5.1) >> +>> endobj +3371 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [492.314 112.21 512.306 121.778] +/Subtype /Link +/A << /S /GoTo /D (chapter.17) >> +>> endobj +3372 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 98.661 512.306 107.683] +/Subtype /Link +/A << /S /GoTo /D (section.17.1) >> +>> endobj +3373 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 85.111 512.306 94.134] +/Subtype /Link +/A << /S /GoTo /D (section.17.2) >> +>> endobj +3326 0 obj << +/D [3324 0 R /XYZ 85.039 786.531 null] +>> endobj +3323 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3376 0 obj << +/Length 3923 +/Filter /FlateDecode +>> +stream +xݜs6W2 $yoti.v/i9D%o" qn:). x(,/7'R^y~K{2O Y9;)3K1;[?n R[q3H4T=?'of+'e1e9ۜ0Ng^?\c3Sj,+lI3TlL +$r!9,U%YTU M@e eW|˳u7R>Vlí7%|PI{P?&+T;spvcsbY| d-B3E8`  QR80rjpӣkM`]k A;l͸vɳLNIqF5Kp sjsMu ™Jmd=bֵsxF7-h9[UG̍~\%sNTXclPN!C `)?E]o= L30z/튬AndNl}zuI9ZjSib Z`ZC `Z).WǍxcz=+ʻ:Wۉb0%y:PgE膻+䭲}W~6VIxSkLCظ0ӡ0ӔXTpT)czL!y]֘ +8K-KPpJ?+`y3u8R 3SkgKeDqQR +9puTD%=զvPh߸(C&M#m<%ַqZB&F.qM ,.{_˘a*X_*520u WaדRz3q.+;kv)̿\șZBV k>}٩&8 TXGlG4z$\DX$!6;\&A~u;Ê}S;?ٷ#[ͩB؄8hKus/V`ONع׋"dxٞ۸ X?3DQ1kihrMu +K +ؓK;˶ٞ֝5Z3KvV?="DTx6۽fzc)٫ 2"l@A +9K@ CjCNs0f~8J\Wc[BWoZ ȶShQDgpK[BvJPh#Kx, s]]mzG鬷Dh^}Uuy<c(8Ƙ122,O_;w8}q㼓 '%TXglX!C `)'yjVN.h; 9wf/ <4KG~i+=c(T@K #Sb}8*pvx dfNgC"051zw(10PiW~|: +VZbL[ys _X DbPz}DHJK"!*lZ^d0zCy^f .%T6~Wy*@ؙ*ʇr4Y>04Nߩs#$=*(+qw'w;uI /Fg/>Yv(%1TThdZ@<3!B<]v/jگz _mOns3|(^!3yd\]&lzvʡŃ @:IONQFIJO8c"2G_h1[ws +5K@C  `)*/+>x6LɈM:W~~|NwMu/VngSkmuCyya+ /[Bp00XaQI=҆n﹞ǘ');Y[ewv>KB#SbRhzp]8TW,~Uޥq#=5//cd+4Q(` f4f>׬ڮdKkݱ||19Υ>u0K ZFfR^98GGF~/߇ +7*l +z6F4Q:T%F9)ߌ{+%m/<Ǯrܟyna}]dhx|}%l&R `(=@LA$)qr^DDܾG +>Wc~檎BI6(E?*E9_*E؞P> endobj +3378 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [492.314 754.651 512.306 764.219] +/Subtype /Link +/A << /S /GoTo /D (chapter.18) >> +>> endobj +3379 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 741.102 512.306 750.125] +/Subtype /Link +/A << /S /GoTo /D (section.18.1) >> +>> endobj +3380 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 727.553 512.306 736.575] +/Subtype /Link +/A << /S /GoTo /D (section.18.2) >> +>> endobj +3381 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 714.003 512.306 723.026] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.2.1) >> +>> endobj +3382 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 700.454 512.306 709.477] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.2.2) >> +>> endobj +3383 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 686.905 512.306 695.928] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.2.3) >> +>> endobj +3384 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 673.356 512.306 682.379] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.2.4) >> +>> endobj +3385 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 659.807 512.306 668.829] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.2.5) >> +>> endobj +3386 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 646.257 512.306 655.28] +/Subtype /Link +/A << /S /GoTo /D (section.18.3) >> +>> endobj +3387 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 632.708 512.306 641.731] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.3.1) >> +>> endobj +3388 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 619.159 512.306 628.182] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.3.2) >> +>> endobj +3389 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 605.61 512.306 614.633] +/Subtype /Link +/A << /S /GoTo /D (section.18.4) >> +>> endobj +3390 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 592.061 512.306 601.083] +/Subtype /Link +/A << /S /GoTo /D (section.18.5) >> +>> endobj +3391 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 578.511 512.306 587.534] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.5.1) >> +>> endobj +3392 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 564.962 512.306 573.985] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.5.2) >> +>> endobj +3393 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 551.413 512.306 560.436] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.5.3) >> +>> endobj +3394 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 537.864 512.306 546.887] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.5.4) >> +>> endobj +3395 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 524.315 512.306 533.337] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.5.5) >> +>> endobj +3396 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 510.765 512.306 519.788] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.5.6) >> +>> endobj +3397 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 497.216 512.306 506.239] +/Subtype /Link +/A << /S /GoTo /D (section.18.6) >> +>> endobj +3398 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 483.667 512.306 492.69] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.6.1) >> +>> endobj +3399 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 470.118 512.306 479.141] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.6.2) >> +>> endobj +3400 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 456.569 512.306 465.591] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.6.3) >> +>> endobj +3401 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 443.019 512.306 452.042] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.6.4) >> +>> endobj +3402 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 429.47 512.306 438.493] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.6.5) >> +>> endobj +3403 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 415.921 512.306 424.944] +/Subtype /Link +/A << /S /GoTo /D (section.18.7) >> +>> endobj +3404 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 402.372 512.306 411.395] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.7.1) >> +>> endobj +3405 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 388.823 512.306 397.845] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.7.2) >> +>> endobj +3406 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 375.273 512.306 384.296] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.18.7.2.1) >> +>> endobj +3407 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 348.175 512.306 357.198] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.18.7.2.2) >> +>> endobj +3408 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 334.626 512.306 343.649] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.18.7.2.3) >> +>> endobj +3409 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 321.077 512.306 330.099] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.18.7.2.4) >> +>> endobj +3410 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 307.527 512.306 316.55] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.18.7.2.5) >> +>> endobj +3411 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 280.429 512.306 289.452] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.18.7.2.6) >> +>> endobj +3412 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 266.88 512.306 275.903] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.18.7.2.7) >> +>> endobj +3413 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 253.331 512.306 262.354] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.18.7.2.8) >> +>> endobj +3414 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 239.781 512.306 248.804] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.18.7.2.9) >> +>> endobj +3415 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 212.683 512.306 221.706] +/Subtype /Link +/A << /S /GoTo /D (section.18.8) >> +>> endobj +3416 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 199.134 512.306 208.157] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.8.1) >> +>> endobj +3417 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 185.585 512.306 194.608] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.8.2) >> +>> endobj +3418 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 172.036 512.306 181.058] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.8.3) >> +>> endobj +3419 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 158.486 512.306 167.509] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.8.4) >> +>> endobj +3420 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 144.937 512.306 153.96] +/Subtype /Link +/A << /S /GoTo /D (section.18.9) >> +>> endobj +3421 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 131.388 512.306 140.411] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.9.1) >> +>> endobj +3422 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 117.839 512.306 126.862] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.9.2) >> +>> endobj +3423 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 104.29 512.306 113.312] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.9.3) >> +>> endobj +3424 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 90.74 512.306 99.763] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.9.4) >> +>> endobj +3425 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 77.191 512.306 86.214] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.9.5) >> +>> endobj +3426 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 63.642 512.306 72.665] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.9.6) >> +>> endobj +3377 0 obj << +/D [3375 0 R /XYZ 85.039 786.531 null] +>> endobj +3374 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3429 0 obj << +/Length 3742 +/Filter /FlateDecode +>> +stream +x[s6+~YjBpeIƝ뭝CFRlmdQ\~qpH av;Xd?2)¬e#\;ϏI13IfA'WG|B0p5z0U>Z4)-R즿\}we&A ,d;ˆU \^hZV"Q~5Ad>E^L +!P UR +h:cy=~ iV)V錗"7Kv:#Y_FPAl7Wi6ϘV~fөɳd2V#NWt +yڮd&pKȽDE2YjqwsZQx>)8Ex ǠUXY oyVAd(A5i(/Zi9(Lȳ+hv۪hx5 ΠwM6s#;%sOu4%5Xhw⭼BCTC ٷY14Q!Wb,Z-ESPbxHj'R00Ʋ/[}m``WIB=oBd&J#dc9КE]O}_B%DL#L×v@`Gkt8ޮc|JT1AFr*Z9mC.ڌ eL;ƍ2 4ֺNyQcJxj48F;طoP îMg.˾o-w=L͝B5;x #("Lb `˕1`ā:`@Tp5,)MÉѮD\b=[kXrUrq)2C.|} FUX ɺީITg^T5Ծџ+g d(?X^,c(~ ,SjK*&\~V0 ݳkH|>WyQۥTi/&O M>XT^,*Yc%JupJhT'A +:Tj'.;Z 2A%xPnX^,6plq)uCXX-8خ;G d%2 2qt607KE:s< /Vx$@,ΰc(ÁD&:E.&FpH7?w*Mo{2n+i.nCo]v:v +Z&]z0ܖ,{ozQj=ԙ63ȽٙRW"ԁXDi.+)(G\ oie&8A~8l҃ cr!0\¶J˭9\v mJ6Ht!}ŨgtI33S5+BbLih!PIo V!VT]B$ְrԗ]w}qgf"7 LHghl7#zDGp~ sHJC1́mgzCR Ia!F-b ;GKǛRbJ<^j[wەN|g+6V ڋ%@w,/AtJyY hj'M^dn7T&zk\>]+,Ykd8ٮcdJ%Tk0/ Y;Bok=6į";ok$? dL=ԋ%vKcL%3MuLs(/ۗ_΅#?dP_.{FL>`4uы%0v/AcJscdZzօw;gR8L"b d۱~ Rj<"؆j0'/NE.}[YatJr2kXr+by^O +uWrS +\cu^Hp>jBgv/T +BDS?d+y1X^,c(~ `SjYAPIim/1`翾;֫u@}F@]WuYE6MCw^2-/'wCSļXXt%Kl]wNTخW:3uYmy[u.4/!o#8o^aJy༗+aQMT \TI7]m&>Rm淞{䭛2QAFGD4>8%7ΔZ7$qU3ۅG}У-86"WL ڍ:(AXJFDx`ΌW& +8tLOu1c3qQIc֡~d!Ģ=3G!p  گܭ2Bh;K 2_8”ZH#>vdt}MpP0I꾟ҋ%Xv;n;P8˔ZR z!+r7c^6EX3gZxvaJQ"3z.sQ=+SEqT^cQyfǎE *֡r5KJ*Ow3'.U:XmRT~#30S sݨ_cyz6hJR +yaR?bRS)u'B˸{Å'vU8}DLb "i( N$!L){DxvۑqK~g]c@3w2zEt SXW`~ RjmAB!N“(Vk9C39tޜ8 ocPT7niO}hB 3xSXVÅޫB졛 Q{~$@,N3,ű]Dy&:=z@S[xNEDy_;X^,5.űmġ:9)g]wneU[!&KՋ%82P8ՔZGHUroNjRЯ5X^,:0zuq)5SYەvoNɽ>`ˌS(AvJM v[c"/|1b )\JRU4|mau[5/} +uTWw,B/@ؒXuq)… ;i.Ӷ4fPQ_Ʒ'MGRq]40S:-,^IoԺFE"/3@RGtu!ZALw]Qѳ-jpím|u]$&L&tL[x7oڌ~Jwى}֡ˌ>,3R{YUYðy'̬_((%J]endstream +endobj +3428 0 obj << +/Type /Page +/Contents 3429 0 R +/Resources 3427 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 3478 0 R +/Annots [ 3431 0 R 3432 0 R 3433 0 R 3434 0 R 3435 0 R 3436 0 R 3437 0 R 3438 0 R 3439 0 R 3440 0 R 3441 0 R 3442 0 R 3443 0 R 3444 0 R 3445 0 R 3446 0 R 3447 0 R 3448 0 R 3449 0 R 3450 0 R 3451 0 R 3452 0 R 3453 0 R 3454 0 R 3455 0 R 3456 0 R 3457 0 R 3458 0 R 3459 0 R 3460 0 R 3461 0 R 3462 0 R 3463 0 R 3464 0 R 3465 0 R 3466 0 R 3467 0 R 3468 0 R 3469 0 R 3470 0 R 3471 0 R 3472 0 R 3473 0 R 3474 0 R 3475 0 R 3476 0 R 3477 0 R ] +>> endobj +3431 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 741.102 512.306 750.125] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.9.7) >> +>> endobj +3432 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 727.553 512.306 736.575] +/Subtype /Link +/A << /S /GoTo /D (section.18.10) >> +>> endobj +3433 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 714.003 512.306 723.026] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.10.1) >> +>> endobj +3434 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 700.454 512.306 709.477] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.10.2) >> +>> endobj +3435 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 686.905 512.306 695.928] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.10.3) >> +>> endobj +3436 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 673.356 512.306 682.379] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.10.4) >> +>> endobj +3437 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 659.807 512.306 668.829] +/Subtype /Link +/A << /S /GoTo /D (section.18.11) >> +>> endobj +3438 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 646.257 512.306 655.28] +/Subtype /Link +/A << /S /GoTo /D (section.18.12) >> +>> endobj +3439 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 632.708 512.306 641.731] +/Subtype /Link +/A << /S /GoTo /D (section.18.13) >> +>> endobj +3440 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 619.159 512.306 628.182] +/Subtype /Link +/A << /S /GoTo /D (section.18.14) >> +>> endobj +3441 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 605.61 512.306 614.633] +/Subtype /Link +/A << /S /GoTo /D (section.18.15) >> +>> endobj +3442 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 592.061 512.306 601.083] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.15.1) >> +>> endobj +3443 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 564.962 512.306 573.985] +/Subtype /Link +/A << /S /GoTo /D (subsection.18.15.2) >> +>> endobj +3444 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [492.314 540.504 512.306 550.072] +/Subtype /Link +/A << /S /GoTo /D (chapter.19) >> +>> endobj +3445 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 526.955 512.306 535.978] +/Subtype /Link +/A << /S /GoTo /D (section.19.1) >> +>> endobj +3446 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 513.406 512.306 522.428] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.1.1) >> +>> endobj +3447 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 499.856 512.306 508.879] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.1.2) >> +>> endobj +3448 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 486.307 512.306 495.33] +/Subtype /Link +/A << /S /GoTo /D (section.19.2) >> +>> endobj +3449 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 472.758 512.306 481.781] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.2.1) >> +>> endobj +3450 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 459.209 512.306 468.232] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.2.2) >> +>> endobj +3451 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 445.66 512.306 454.682] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.2.3) >> +>> endobj +3452 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 432.11 512.306 441.133] +/Subtype /Link +/A << /S /GoTo /D (section.19.3) >> +>> endobj +3453 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 418.561 512.306 427.584] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.3.1) >> +>> endobj +3454 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 391.463 512.306 400.486] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.3.2) >> +>> endobj +3455 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 377.914 512.306 386.936] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.3.3) >> +>> endobj +3456 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 364.364 512.306 373.387] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.3.4) >> +>> endobj +3457 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 350.815 512.306 359.838] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.3.5) >> +>> endobj +3458 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 323.717 512.306 332.74] +/Subtype /Link +/A << /S /GoTo /D (section.19.4) >> +>> endobj +3459 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 310.168 512.306 319.19] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.4.1) >> +>> endobj +3460 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 296.618 512.306 305.641] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.4.2) >> +>> endobj +3461 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 283.069 512.306 292.092] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.4.3) >> +>> endobj +3462 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 269.52 512.306 278.543] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.4.4) >> +>> endobj +3463 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 255.971 512.306 264.994] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.4.5) >> +>> endobj +3464 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 242.422 512.306 251.444] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.4.6) >> +>> endobj +3465 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 228.872 512.306 237.895] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.4.7) >> +>> endobj +3466 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 215.323 512.306 224.346] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.4.8) >> +>> endobj +3467 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 201.774 512.306 210.797] +/Subtype /Link +/A << /S /GoTo /D (section.19.5) >> +>> endobj +3468 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 188.225 512.306 197.248] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.5.1) >> +>> endobj +3469 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 174.676 512.306 183.698] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.5.2) >> +>> endobj +3470 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 161.126 512.306 170.149] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.5.3) >> +>> endobj +3471 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 147.577 512.306 156.6] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.5.4) >> +>> endobj +3472 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 134.028 512.306 143.051] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.5.5) >> +>> endobj +3473 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 120.479 512.306 129.502] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.5.6) >> +>> endobj +3474 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 106.93 512.306 115.952] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.5.7) >> +>> endobj +3475 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 93.38 512.306 102.403] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.5.8) >> +>> endobj +3476 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 79.831 512.306 88.854] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.5.9) >> +>> endobj +3477 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 66.282 512.306 75.305] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.5.10) >> +>> endobj +3430 0 obj << +/D [3428 0 R /XYZ 85.039 786.531 null] +>> endobj +3427 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3481 0 obj << +/Length 3914 +/Filter /FlateDecode +>> +stream +xݜYs7+Xz" r${ƫrd4M$!,FoвNDI*{yru]31R}HyA҂wAS *'Q$-IJ(%~1rY=,'t,⥼PF16&i$Ee_hRRdnFsdU+5Eb]~7XQv؄TYiA5$rXxL\+P}8`cX0tpa10s[0׀OW-@>)rnjj~}7ewIRb):', .YrY3J3VXW]@(z eF)4áHZԾ0*(D`Fft 6nlSVD~aQmg\S\m[ [j|Zуfb#ABe( 'Ĩ1cd"(Bi4o 勍7XMoDNjv"̷06/ÊXN+d@lmVrBn$4pME-dZ{e s\#a8'IV;7Fe8]q>Y.O!c=-Z739R}wX `cas!rV:&wJ9.CizMdVFn 4cjM +D4^44Ђk/` 0\|ܙek蟙"?"CzPdYFn @cjP-M㍁[{}]oق_EL/1XO8X'+yga1TY.u.Ɣ 1~f* ~7Ml^,K/Up>oFN:+Kw!Cz\dn pcj\M2"yTgɤMҳ壟aLٲv)@EmZnWaY.ŗfz7C ,KK妹 LX^|.vfeVŖYR!Y %5@H,8̵AQk.Wʤ\'[v!P^,Y"ۂ0̘ZdYJcKed<\#ݮ/gWr#569(Lo2ˋEx!Exu[S&_ʈHJsƫU)7eZf|D2 +ƋE Et[Sbkn:U3O.Xߺ,܁,aުDF (-] +IEycEuԇ Et:ORy@!O|q9ntp;x;Nۚ1:~R/[)q6OxY[)3`wۅ~؇Ɏ%%&ⷵݷԥ؇S 'y68"CܤnoLu/,̏^@= (wֱ1 Vd鷤f8 S SiAZTVeScY*Wf8PCP L-֮"R,J^O +.}^WK`oQ|} -^k_$rMBbȚ%!!ԺDFs(ǣVci@J^ у@ zYO_/B<՗g^[uS{}E5Y.V: q2ɋE8!E8u[S8 AyNE Ddi66b07&9;fkR? UIeWu[} M2bfxf:fc~<=hCxd B=-3u xJ2Sw\6wk0j*l> ${IzQP^,Y1mAlLIrbG׻z}4oLU?yWuUiOj;=pDe,Tӂ0ǘZ1)Hh*(stqMElj±8Q8YNTHAvR s)wHGu]?>">2{È({CFk0yИs"r + uo@d[ϥ{mH,<۰m ` 8ۢj҂0RS|$牉.%o~Pz +B!]bSdBoP@‡:ɛ#Hc4i fP +;lѠ^8:<& &sLSLL |oWjʿ̮TnB*ʖN/^!A0q>jmχbȪ{ZS` +2Ҵ 7 >Z(_Pb^,B P=NO bj1pq^U{J ~"{:|(L/*_C0-Ìu0{0]Ԫ+DUA<[]o:]&w b JLBbHZ2=-CurĈkF&ɥՌЋs(:٥{9`PC(<-I8x=YIC +!@`j0* SciAkTspكاm[-Bw+Mu{C![5V*# "!e{ZS%Ş74GM=I٦n뙭͊cϻB=!4Cxdn hbj 2))GC rϼ +'.;~ɯ~;_JBo1,ҿ6Lgb~Ȑ=zZSg3?{ jW_n&JL3[ *Xq 1P^,B7Bۂ0՘ZG)j?r˴F=B0MχbȪzZS`&)aO Mlgr-* wS!?{j}?:w?^sCyy/dn ¼bj-8̛ZcVApe3z3l.}ލkan|^Q~ $ 'v1t9YWlxިkU)ϹTs{OM`6+Mn[4#Z\??:4=2'y|㡃":ia,"HƋ.cJg~2!TuZ +OqK`X{VwJL{wo0Jg}Xc}¨;3uFHX=^W _aQlSA!F<%n2<܄Z?endstream +endobj +3480 0 obj << +/Type /Page +/Contents 3481 0 R +/Resources 3479 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 3478 0 R +/Annots [ 3483 0 R 3484 0 R 3485 0 R 3486 0 R 3487 0 R 3488 0 R 3489 0 R 3490 0 R 3491 0 R 3492 0 R 3493 0 R 3494 0 R 3495 0 R 3496 0 R 3497 0 R 3498 0 R 3499 0 R 3500 0 R 3501 0 R 3502 0 R 3503 0 R 3504 0 R 3505 0 R 3506 0 R 3507 0 R 3508 0 R 3509 0 R 3510 0 R 3511 0 R 3512 0 R 3513 0 R 3514 0 R 3515 0 R 3516 0 R 3517 0 R 3518 0 R 3519 0 R 3520 0 R 3521 0 R 3522 0 R 3523 0 R 3524 0 R 3525 0 R 3526 0 R 3527 0 R 3528 0 R 3529 0 R 3530 0 R ] +>> endobj +3483 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 754.651 512.306 763.674] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.5.11) >> +>> endobj +3484 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 741.102 512.306 750.125] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.5.12) >> +>> endobj +3485 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 727.553 512.306 736.575] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.5.13) >> +>> endobj +3486 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 714.003 512.306 723.026] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.5.14) >> +>> endobj +3487 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 700.454 512.306 709.477] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.5.15) >> +>> endobj +3488 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 673.356 512.306 682.379] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.5.16) >> +>> endobj +3489 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 659.807 512.306 668.829] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.5.17) >> +>> endobj +3490 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 646.257 512.306 655.28] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.5.18) >> +>> endobj +3491 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 632.708 512.306 641.731] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.5.19) >> +>> endobj +3492 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 619.159 512.306 628.182] +/Subtype /Link +/A << /S /GoTo /D (section.19.6) >> +>> endobj +3493 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 605.61 512.306 614.633] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.6.1) >> +>> endobj +3494 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 592.061 512.306 601.083] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.6.2) >> +>> endobj +3495 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 578.511 512.306 587.534] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.6.3) >> +>> endobj +3496 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 564.962 512.306 573.985] +/Subtype /Link +/A << /S /GoTo /D (section.19.7) >> +>> endobj +3497 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 551.413 512.306 560.436] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.7.1) >> +>> endobj +3498 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 537.864 512.306 546.887] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.7.2) >> +>> endobj +3499 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 510.765 512.306 519.788] +/Subtype /Link +/A << /S /GoTo /D (section.19.8) >> +>> endobj +3500 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 497.216 512.306 506.239] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.8.1) >> +>> endobj +3501 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 483.667 512.306 492.69] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.8.2) >> +>> endobj +3502 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 470.118 512.306 479.141] +/Subtype /Link +/A << /S /GoTo /D (section.19.9) >> +>> endobj +3503 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 456.569 512.306 465.591] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.9.1) >> +>> endobj +3504 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 443.019 512.306 452.042] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.9.2) >> +>> endobj +3505 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 429.47 512.306 438.493] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.9.3) >> +>> endobj +3506 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 402.372 512.306 411.395] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.9.4) >> +>> endobj +3507 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 388.823 512.306 397.845] +/Subtype /Link +/A << /S /GoTo /D (section.19.10) >> +>> endobj +3508 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 375.273 512.306 384.296] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.10.1) >> +>> endobj +3509 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 361.724 512.306 370.747] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.10.2) >> +>> endobj +3510 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 348.175 512.306 357.198] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.10.3) >> +>> endobj +3511 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 334.626 512.306 343.649] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.10.4) >> +>> endobj +3512 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 321.077 512.306 330.099] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.10.5) >> +>> endobj +3513 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [495.133 307.527 513.49 316.55] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.10.6) >> +>> endobj +3514 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 293.978 512.306 303.001] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.10.7) >> +>> endobj +3515 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 266.88 512.306 275.903] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.10.8) >> +>> endobj +3516 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 253.331 512.306 262.354] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.10.9) >> +>> endobj +3517 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 239.781 512.306 248.804] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.10.10) >> +>> endobj +3518 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 226.232 512.306 235.255] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.10.11) >> +>> endobj +3519 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 212.683 512.306 221.706] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.10.12) >> +>> endobj +3520 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 199.134 512.306 208.157] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.10.13) >> +>> endobj +3521 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 185.585 512.306 194.608] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.10.14) >> +>> endobj +3522 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 172.036 512.306 181.058] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.10.15) >> +>> endobj +3523 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 158.486 512.306 167.509] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.10.16) >> +>> endobj +3524 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 144.937 512.306 153.96] +/Subtype /Link +/A << /S /GoTo /D (section.19.11) >> +>> endobj +3525 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 131.388 512.306 140.411] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.11.1) >> +>> endobj +3526 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 117.839 512.306 126.862] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.11.2) >> +>> endobj +3527 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 104.29 512.306 113.312] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.11.3) >> +>> endobj +3528 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 90.74 512.306 99.763] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.11.4) >> +>> endobj +3529 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 77.191 512.306 86.214] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.11.5) >> +>> endobj +3530 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 63.642 512.306 72.665] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.19.11.5.1) >> +>> endobj +3482 0 obj << +/D [3480 0 R /XYZ 85.039 786.531 null] +>> endobj +3479 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3533 0 obj << +/Length 3696 +/Filter /FlateDecode +>> +stream +x՜[s6)4 7ܷIvڝi@K̭lK/8L=qs +r崚@(7<¦Ye8;p]T9U1;[wsRfCl翜}}]8hS +_JvѪ9U5:b"Ψ9:=]Kf֡D< \Lp +&} +a8Y8|A*;yT9ϻЪF/8JD./p)}|xRi^C*n}  +5AJsG}|Z_z(Ȑ[>:XP$ FP~imEPmLy`4B~.rcufHXJ\gmuE1@l{qNz[H3s%4׾o"zUʲyطF{$4UZJBVj\NrWSJz=/YzKAjͿlA7uW1n7ȠʆN:^*6n BЇ(dj,י-VDvQ%+C}q-:{0x= VDX140˦7Nj]үRmM<^x;%{Ǔj)rTtO.0xɳtԗ~pY6pH`tPC7^ͻ%ourİ03BzbÀ^$÷XR){ &l,},M!-KqYuRg'@BcPn#Xɍ3C`N1w2X)g܃8TA#Jl}gR727fB#Ag_ B + ;: +p +$Ri @d}j }Bwk܃RZ}񊢜J;v + BTfzx8]uep~{6:Z7"^EũJ;`R%`H Y#1.*AuP-.1[HKH@K6$VpTr_bCXF%4u"~P.\ȇRD!jËm2m̔kZ +CoМ/޵2 bTj Bwm܃R:HgXsz;ű&|j3|dğ:c.ńO񁈈efh^Tz#̑ͻvi<۷Z+WWKbZBWUոq]uE1 +11=hh:C|N̾.csiR} LEy]OП)l84G9vixLEPkl+QAu`LǔMkDPGm|33Ԧr'qBT&<|x5_(:Z8zL=A =z=fe=0x\.9c#Ҟ +\5׫f0R8w+ Pp=5$ 2 `z<X<a܃8TsA!']CQ%#<{#?~UɁ5l`N7漯sޏriIxL<,edj Bw(l܃RbN@{}8إ^tvݶ]=#8ͽO%pvM 3,&aI>/ :r25&Xo_P-qm30=AwY7|q*U)۶ޘ/j's^/{in~*O_-30lqfϜ"ZOy~^׽_"]Ϗ 71TZl`qdSZP,dqO *'jo"ѠZhh8=M6눊2 9~[ps寻Oqt-XOT Z xFhӮhAd胝^k=9؊pO8."dQ56\Lٻ +WK ,9AgY7(Bf1uQtV0ڷ&QۭznfL @h7ZEOq^TZb`Mh qfmʄR؃adrٍ.;5<ۀYj=YT~Z_`qR:~\}~zn#ga@Nxu?=ܭ C_PXOe%XFI "լcςao9@*M}6ϟcnp*3_-,0a,l܃8Tgw0/w7N7 FMnHSdch^EƷ=hZ?Ѓ:122+ϐG8/gv~Ή8xUYڟs̖*rPϻƑ ]#z vB&IsSIj I ?Ѓ8Td!P)}zod/ĐCn1Q%ԇݒ!ǩ|~ lıu8C4 6Xjk\k/ Nm%N*l^o_-Cl2# uV+c4f쮔SnKU;4?蝟8}#!&j BZ@zPY' "!վ;<*lUs usRCra10'e܃8T64'D!B, e Ƹ^!$~ +eEݐM% J@ )լM}RC + ש| |uxXZ0Ū;Wb3&> p;.ՂfǤo ?aroåW`}*_-#KǸqfQECQ}7.*Aca.62*RA7zot΁Um1$qL;5A\\f(Ad.pmopЯ\YZ,({3TZk`_c; 5լÊKTR`5/U` eߤXR/T%H<S^_SL%fN N7լsDcoPzە~Mu0~Zl!l#sqfm[a$O1rXAްu/hCӫs~@3LDk 7j%¥[;Ht /M3wH_ke:({ZE0ͭ}`ߩj%~[.qoJio!QZL[X Pxީ'ϩ%8Hv@V\/Q4KlO8k b˩aYBۉDU{9%@/49endstream +endobj +3532 0 obj << +/Type /Page +/Contents 3533 0 R +/Resources 3531 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 3478 0 R +/Annots [ 3535 0 R 3536 0 R 3537 0 R 3538 0 R 3539 0 R 3540 0 R 3541 0 R 3542 0 R 3543 0 R 3544 0 R 3545 0 R 3546 0 R 3547 0 R 3548 0 R 3549 0 R 3550 0 R 3551 0 R 3552 0 R 3553 0 R 3554 0 R 3555 0 R 3556 0 R 3557 0 R 3558 0 R 3559 0 R 3560 0 R 3561 0 R 3562 0 R 3563 0 R 3564 0 R 3565 0 R 3566 0 R 3567 0 R 3568 0 R 3569 0 R 3570 0 R 3571 0 R 3572 0 R 3573 0 R 3574 0 R 3575 0 R 3576 0 R ] +>> endobj +3535 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 741.102 512.306 750.125] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.19.11.5.2) >> +>> endobj +3536 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 714.003 512.306 723.026] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.19.11.5.3) >> +>> endobj +3537 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 686.905 512.306 695.928] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.19.11.5.4) >> +>> endobj +3538 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 673.356 512.306 682.379] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.19.11.5.5) >> +>> endobj +3539 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 646.257 512.306 655.28] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.19.11.5.6) >> +>> endobj +3540 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 632.708 512.306 641.731] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.19.11.5.7) >> +>> endobj +3541 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 605.61 512.306 614.633] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.19.11.5.8) >> +>> endobj +3542 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 578.511 512.306 587.534] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.19.11.5.9) >> +>> endobj +3543 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 551.413 512.306 560.436] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.19.11.5.10) >> +>> endobj +3544 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 524.315 512.306 533.337] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.19.11.5.11) >> +>> endobj +3545 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [529.014 510.765 547.37 519.788] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.19.11.5.12) >> +>> endobj +3546 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 497.216 512.306 506.239] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.19.11.5.13) >> +>> endobj +3547 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 483.667 512.306 492.69] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.19.11.5.14) >> +>> endobj +3548 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 456.569 512.306 465.591] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.19.11.5.15) >> +>> endobj +3549 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 443.019 512.306 452.042] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.11.6) >> +>> endobj +3550 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 429.47 512.306 438.493] +/Subtype /Link +/A << /S /GoTo /D (section.19.12) >> +>> endobj +3551 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 415.921 512.306 424.944] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.12.1) >> +>> endobj +3552 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 402.372 512.306 411.395] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.12.2) >> +>> endobj +3553 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 388.823 512.306 397.845] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.12.3) >> +>> endobj +3554 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 375.273 512.306 384.296] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.12.4) >> +>> endobj +3555 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 361.724 512.306 370.747] +/Subtype /Link +/A << /S /GoTo /D (section.19.13) >> +>> endobj +3556 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 348.175 512.306 357.198] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.13.1) >> +>> endobj +3557 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 334.626 512.306 343.649] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.19.13.1.1) >> +>> endobj +3558 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 321.077 512.306 330.099] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.19.13.1.2) >> +>> endobj +3559 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 307.527 512.306 316.55] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.19.13.1.3) >> +>> endobj +3560 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 293.978 512.306 303.001] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.19.13.1.4) >> +>> endobj +3561 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 280.429 512.306 289.452] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.19.13.1.5) >> +>> endobj +3562 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 266.88 512.306 275.903] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.19.13.1.6) >> +>> endobj +3563 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 239.781 512.306 248.804] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.19.13.1.7) >> +>> endobj +3564 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 226.232 512.306 235.255] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.19.13.1.8) >> +>> endobj +3565 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 212.683 512.306 221.706] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.13.2) >> +>> endobj +3566 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 199.134 512.306 208.157] +/Subtype /Link +/A << /S /GoTo /D (section.19.14) >> +>> endobj +3567 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 185.585 512.306 194.608] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.14.1) >> +>> endobj +3568 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 172.036 512.306 181.058] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.14.2) >> +>> endobj +3569 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 158.486 512.306 167.509] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.14.3) >> +>> endobj +3570 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 144.937 512.306 153.96] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.14.4) >> +>> endobj +3571 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 131.388 512.306 140.411] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.14.5) >> +>> endobj +3572 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 117.839 512.306 126.862] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.14.6) >> +>> endobj +3573 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 104.29 512.306 113.312] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.14.7) >> +>> endobj +3574 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 90.74 512.306 99.763] +/Subtype /Link +/A << /S /GoTo /D (section.19.15) >> +>> endobj +3575 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 77.191 512.306 86.214] +/Subtype /Link +/A << /S /GoTo /D (section.19.16) >> +>> endobj +3576 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 63.642 512.306 72.665] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.16.1) >> +>> endobj +3534 0 obj << +/D [3532 0 R /XYZ 85.039 786.531 null] +>> endobj +3531 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3579 0 obj << +/Length 3396 +/Filter /FlateDecode +>> +stream +xKsFy, ;N^KYmU6$)B!A;.;zlRHp3<)ԿxRrTj"K8œI1Vp]+2O|w~WMp_T╘/3RN~?pD5T~/&KeO'U9W jr{8EQ}urvp/XcOixIyXG +9#y\!,A3LflE^[vl^bfs^?oG|o)~@U UL/ {y"6ή '&ptĂ!Y[46e*D"XjUV]):zS`vS7uAxK&%IcIF ĥSdN-&%RU9IfōkmjD"̅Tu"/Q%]6շ1unZΥ_ߪBeT@q66X& 8ZANmu@iczߺ+|V]*0 +oӀV­|3`v +Tƺtmcwi.V{_V{6WrKDY=ئ:a, !ݛ9PHE)%0u;~e}o/\iN{GC~ܩXTx1n"M= =b76 QNtdY)?7e&Zͩݭ* V=S̈T-R>pv߮?e' g0PDJ]'3c7[JTҍ63NA8ʩ1xBӥ2)^ 7kHR.:2Tf-T-R[~%uk=|C*v}Sx {(XeS9rh26$œ'(]= +B%Nn M?>ڥWr?HԔVGO=,k:%e5'GUDNG#1 UcJrc|h-R(VWDP-5G+(*Lh=us|l>>Msj9l}BM ݶƅ9\"K]He`@ &sDxݏ\W19C/&J)BƶB'YLgO˕F'_[nlAެ Mἕw4FJh$iF"R-rt|͹*͂J`W{nOsIOWK\땉<2)%%̪ Fc'v2W&mu1V_c eG0C0zXaO$8CzXiK?1C uAn嫺Нbb)~Nma$M>bZL*E/(10Jȝ"baC `9yQӈ8~yhQOnPw7IݭɽF=C$y6f4qѨyޟpcDHߛ9 1<ٱHTlTWy&|ړQc"0{G,#06DT}rSG si(W'3/,3RbaC `9PN#u =+#c!G 00Z?Q3R$𐙛Ď·WcvU%df. I `獱XpipNmTL +iKUu-xv7eв `9/ _?'`3PZ%;ό2SðsjCk]T]k3έ|[lLS~h,(>˖lhUlWl\c 6}sZҶ +?w&Js^mU]_%srO?Z6\˙ID ~"OE(b/mK#k["׶=pH -٬*I&SԔHD}'+;f'Vna_IiObb̩0-1Ԇ)*>?R{.LuT =65yŸj[3y O}#Z#ϩ 5( y|m+W]iY0MljA!TVcE ԅ00ZOI'iN}k7 Zz)`w}]3OzJMu.I й.eХ> -tL_uZF{Ӝ۱g/Ukvh;_y0eΔph060 cVSz?Ngz^6UK8e - +/&mu iH}mL–)c8e2HDa1yiH6hZJ<sXA*8q6 x +R$^9^IutJx[FRN`{./  @Y,[ Mda rcOnYꝫ|dƒbaC `9.L{dT7լ{(jiޅ]ӔW$wߊ{TXJJNm1"P!5YoM%o{ӗ#]rdrtLeu?KfM۸yaل)㉴ǟmzg+[UsJ +#*3X&\!F#aSˆ01?#藳3 {!f7>}o=b{ĢXX:XNm .q!Lsl}ZtkU+`_o,(!yXN'VIT`y;`?uڿ`鵝y )FTⲻݥY>EQ>I Ճ r:="&q8Onփ^0[[somټ*{L$dd陈 +UtL^LƮVq<3;=5:6U'A*e%޴z='Ss.ҊV8}_s,>A*s<2U)qlT*8SGf?a?(+QUA}\H61^7|8rW(endstream +endobj +3578 0 obj << +/Type /Page +/Contents 3579 0 R +/Resources 3577 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 3478 0 R +/Annots [ 3581 0 R 3582 0 R 3583 0 R 3584 0 R 3585 0 R 3586 0 R 3587 0 R 3588 0 R 3589 0 R 3590 0 R 3591 0 R 3592 0 R 3593 0 R 3594 0 R 3595 0 R 3596 0 R 3597 0 R 3598 0 R 3599 0 R 3600 0 R 3601 0 R 3602 0 R 3603 0 R 3604 0 R 3605 0 R 3606 0 R 3607 0 R 3608 0 R 3609 0 R 3610 0 R 3611 0 R 3612 0 R 3613 0 R 3614 0 R 3615 0 R 3616 0 R 3617 0 R 3618 0 R 3619 0 R 3620 0 R 3621 0 R 3622 0 R 3623 0 R 3624 0 R 3625 0 R 3626 0 R 3627 0 R 3628 0 R 3629 0 R ] +>> endobj +3581 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 754.651 512.306 763.674] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.16.2) >> +>> endobj +3582 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 741.102 512.306 750.125] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.16.3) >> +>> endobj +3583 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 727.553 512.306 736.575] +/Subtype /Link +/A << /S /GoTo /D (section.19.17) >> +>> endobj +3584 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 714.003 512.306 723.026] +/Subtype /Link +/A << /S /GoTo /D (section.19.18) >> +>> endobj +3585 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 700.454 512.306 709.477] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.18.1) >> +>> endobj +3586 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 686.905 512.306 695.928] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.18.2) >> +>> endobj +3587 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 673.356 512.306 682.379] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.18.3) >> +>> endobj +3588 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 659.807 512.306 668.829] +/Subtype /Link +/A << /S /GoTo /D (section.19.19) >> +>> endobj +3589 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 646.257 512.306 655.28] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.19.1) >> +>> endobj +3590 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 632.708 512.306 641.731] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.19.2) >> +>> endobj +3591 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 605.61 512.306 614.633] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.19.3) >> +>> endobj +3592 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 592.061 512.306 601.083] +/Subtype /Link +/A << /S /GoTo /D (subsection.19.19.4) >> +>> endobj +3593 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [492.314 567.602 512.306 577.171] +/Subtype /Link +/A << /S /GoTo /D (chapter.20) >> +>> endobj +3594 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 554.053 512.306 563.076] +/Subtype /Link +/A << /S /GoTo /D (section.20.1) >> +>> endobj +3595 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 540.504 512.306 549.527] +/Subtype /Link +/A << /S /GoTo /D (section.20.2) >> +>> endobj +3596 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 526.955 512.306 535.978] +/Subtype /Link +/A << /S /GoTo /D (section.20.3) >> +>> endobj +3597 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 513.406 512.306 522.428] +/Subtype /Link +/A << /S /GoTo /D (subsection.20.3.1) >> +>> endobj +3598 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 499.856 512.306 508.879] +/Subtype /Link +/A << /S /GoTo /D (subsection.20.3.2) >> +>> endobj +3599 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 486.307 512.306 495.33] +/Subtype /Link +/A << /S /GoTo /D (subsection.20.3.3) >> +>> endobj +3600 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 472.758 512.306 481.781] +/Subtype /Link +/A << /S /GoTo /D (subsection.20.3.4) >> +>> endobj +3601 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 459.209 512.306 468.232] +/Subtype /Link +/A << /S /GoTo /D (subsection.20.3.5) >> +>> endobj +3602 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 445.66 512.306 454.682] +/Subtype /Link +/A << /S /GoTo /D (section.20.4) >> +>> endobj +3603 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 432.11 512.306 441.133] +/Subtype /Link +/A << /S /GoTo /D (subsection.20.4.1) >> +>> endobj +3604 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 418.561 512.306 427.584] +/Subtype /Link +/A << /S /GoTo /D (subsection.20.4.2) >> +>> endobj +3605 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 405.012 512.306 414.035] +/Subtype /Link +/A << /S /GoTo /D (section.20.5) >> +>> endobj +3606 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [492.314 380.554 512.306 390.122] +/Subtype /Link +/A << /S /GoTo /D (chapter.21) >> +>> endobj +3607 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 367.004 512.306 376.027] +/Subtype /Link +/A << /S /GoTo /D (section.21.1) >> +>> endobj +3608 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 353.455 512.306 362.478] +/Subtype /Link +/A << /S /GoTo /D (section.21.2) >> +>> endobj +3609 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 339.906 512.306 348.929] +/Subtype /Link +/A << /S /GoTo /D (section.21.3) >> +>> endobj +3610 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 326.357 512.306 335.38] +/Subtype /Link +/A << /S /GoTo /D (subsection.21.3.1) >> +>> endobj +3611 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 312.808 512.306 321.83] +/Subtype /Link +/A << /S /GoTo /D (section.21.4) >> +>> endobj +3612 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 299.258 512.306 308.281] +/Subtype /Link +/A << /S /GoTo /D (subsection.21.4.1) >> +>> endobj +3613 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 285.709 512.306 294.732] +/Subtype /Link +/A << /S /GoTo /D (subsection.21.4.2) >> +>> endobj +3614 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 272.16 512.306 281.183] +/Subtype /Link +/A << /S /GoTo /D (subsection.21.4.3) >> +>> endobj +3615 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 258.611 512.306 267.634] +/Subtype /Link +/A << /S /GoTo /D (subsection.21.4.4) >> +>> endobj +3616 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 245.062 512.306 254.084] +/Subtype /Link +/A << /S /GoTo /D (subsection.21.4.5) >> +>> endobj +3617 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 231.512 512.306 240.535] +/Subtype /Link +/A << /S /GoTo /D (subsection.21.4.6) >> +>> endobj +3618 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 217.963 512.306 226.986] +/Subtype /Link +/A << /S /GoTo /D (section.21.5) >> +>> endobj +3619 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 204.414 512.306 213.437] +/Subtype /Link +/A << /S /GoTo /D (subsection.21.5.1) >> +>> endobj +3620 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 190.865 512.306 199.888] +/Subtype /Link +/A << /S /GoTo /D (subsection.21.5.2) >> +>> endobj +3621 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 177.316 512.306 186.338] +/Subtype /Link +/A << /S /GoTo /D (subsection.21.5.3) >> +>> endobj +3622 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 163.766 512.306 172.789] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.21.5.3.1) >> +>> endobj +3623 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 136.668 512.306 145.691] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.21.5.3.2) >> +>> endobj +3624 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 123.119 512.306 132.142] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.21.5.3.3) >> +>> endobj +3625 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 109.57 512.306 118.593] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.21.5.3.4) >> +>> endobj +3626 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 96.02 512.306 105.043] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.21.5.3.5) >> +>> endobj +3627 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 82.471 512.306 91.494] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.21.5.3.6) >> +>> endobj +3628 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 68.922 512.306 77.945] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.21.5.3.7) >> +>> endobj +3629 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 55.373 512.306 64.396] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.21.5.3.8) >> +>> endobj +3580 0 obj << +/D [3578 0 R /XYZ 85.039 786.531 null] +>> endobj +3577 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F66 3248 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3632 0 obj << +/Length 3156 +/Filter /FlateDecode +>> +stream +x_S9~H=]aݽrU{`b0g|tT*evZ-ـlJB4mM$g=:+c߲Z %eET|zTԽGyL5|&ڄ_(0W{Br"/]' +["[^6ɬjIԃFJRƶb&JӤz[%׾x׵fB DOl>HgbwU&HƈaA݊EE<y_ j\闵U+G}'1{{iAh~D PoXF4y`Y =ֲJHtDwûgåyz.׳IL7m_4u,w}BNSIT5"g~`H2*4?||bh3ܚb8^63oKꛋ3量qĐ8 ]^1|m2Wo.&}I_NF&szެNyA 9!oyaU!75 sQ~Y8zԟsF3x@l#Mb0-ԺA]s"tٚmt kMj"!_6 dy<0㰾&6jz84}$1M#MiSN(Ҫv':h/m&k9 k/X;ل@%s<7NbӪ11xM pÉm\TݘiWޫczۥI6[ѱ(f^]L>_C~TWZKG}'1{{i--j 7Y۸[\}\oi"ܭ2Ю8/$zkC6Cjv0C X^f&}m7:J7}S*}+h M~_bv[Rxx"pEF #&|XbXM"z {ڕ-L'\Qĩ͙!Mgitz2+ؾ/w$̯懩 Y ی_r^g4P|Ԫ.Rs^YCLbܩX,1IH(+ɹHşq*їV sM /J!2' +09D'k "dž&EZv1DFp9_%N\ Q1!sYZd J(3MѬ P㱢Խiy9.NZՑmG7/$*-iajcQNtNE+ʆ܅1v+se'@#KCX0!#PW^X򊫛U[yB)_ Гl&rjdQaxMMlH7W՛/f5G8 ţ| }&1k`wXsFuEP3\=|(@}rLbܡ0#6rT,Ȼl'0gTbҗqCΆ1qv4"V?Ǹ6lfRT;8_Dt_ݮ|z7W-},n}%1[@[i S;*rх/$`)aSd6a)nr5G.Cd Bnάg9{_śa[A|Uۮ:+~M1;R?Y؝ >&ퟰ5}· aٗ2^=GyC5.\}_3zU&UNਉeCh8%*&d ÿb K;!3#K `ژ0GraEhekɳ=&\l>q᧱-{-#Myi}i%1V6ViL SRD:`hCD* *!2!J `PDw>|~_'ʋ+JG[XCe:a SъU=o) B6v`^jмݫ֝q\b M4 .soCf.Tpѻ:](܄w . ]j$iBQ*v!|=~O*>2+TIխ[nL=~86!}$1M$MiSҜH +O/wdvgsgsEDW/7/$0ɜ)L01^~ Pݳ=μlac9} %1P*PiLS qIP;,&zm1POkQ:FN8"vXsFNJ zp1c-]0 XaehKhC-ƧLec]6Ҳd67RrH|ڷY%<\o eRHD>LwcU5L r&c?U:kG2∰ӱIs>9#7c{<> endobj +3634 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 754.651 512.306 763.674] +/Subtype /Link +/A << /S /GoTo /D (section.21.6) >> +>> endobj +3635 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 741.102 512.306 750.125] +/Subtype /Link +/A << /S /GoTo /D (section.21.7) >> +>> endobj +3636 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [492.314 716.643 512.306 726.212] +/Subtype /Link +/A << /S /GoTo /D (chapter.22) >> +>> endobj +3637 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 703.094 512.306 712.117] +/Subtype /Link +/A << /S /GoTo /D (section.22.1) >> +>> endobj +3638 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 689.545 512.306 698.568] +/Subtype /Link +/A << /S /GoTo /D (section.22.2) >> +>> endobj +3639 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 675.996 512.306 685.019] +/Subtype /Link +/A << /S /GoTo /D (section.22.3) >> +>> endobj +3640 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 662.447 512.306 671.469] +/Subtype /Link +/A << /S /GoTo /D (subsection.22.3.1) >> +>> endobj +3641 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 648.897 512.306 657.92] +/Subtype /Link +/A << /S /GoTo /D (section.22.4) >> +>> endobj +3642 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 635.348 512.306 644.371] +/Subtype /Link +/A << /S /GoTo /D (subsection.22.4.1) >> +>> endobj +3643 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 621.799 512.306 630.822] +/Subtype /Link +/A << /S /GoTo /D (section.22.5) >> +>> endobj +3644 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [492.314 597.341 512.306 606.909] +/Subtype /Link +/A << /S /GoTo /D (chapter.23) >> +>> endobj +3645 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 583.792 512.306 592.814] +/Subtype /Link +/A << /S /GoTo /D (section.23.1) >> +>> endobj +3646 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 570.242 512.306 579.265] +/Subtype /Link +/A << /S /GoTo /D (section.23.2) >> +>> endobj +3647 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 556.693 512.306 565.716] +/Subtype /Link +/A << /S /GoTo /D (subsection.23.2.1) >> +>> endobj +3648 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 543.144 512.306 552.167] +/Subtype /Link +/A << /S /GoTo /D (subsection.23.2.2) >> +>> endobj +3649 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 529.595 512.306 538.618] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.23.2.2.1) >> +>> endobj +3650 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 516.046 512.306 525.068] +/Subtype /Link +/A << /S /GoTo /D (subsection.23.2.3) >> +>> endobj +3651 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 502.496 512.306 511.519] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.23.2.3.1) >> +>> endobj +3652 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 488.947 512.306 497.97] +/Subtype /Link +/A << /S /GoTo /D (section.23.3) >> +>> endobj +3653 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 475.398 512.306 484.421] +/Subtype /Link +/A << /S /GoTo /D (subsection.23.3.1) >> +>> endobj +3654 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 461.849 512.306 470.872] +/Subtype /Link +/A << /S /GoTo /D (subsection.23.3.2) >> +>> endobj +3655 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 448.3 512.306 457.322] +/Subtype /Link +/A << /S /GoTo /D (subsection.23.3.3) >> +>> endobj +3656 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 434.75 512.306 443.773] +/Subtype /Link +/A << /S /GoTo /D (section.23.4) >> +>> endobj +3657 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 421.201 512.306 430.224] +/Subtype /Link +/A << /S /GoTo /D (section.23.5) >> +>> endobj +3658 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 407.652 512.306 416.675] +/Subtype /Link +/A << /S /GoTo /D (subsection.23.5.1) >> +>> endobj +3659 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [492.314 383.194 512.306 392.762] +/Subtype /Link +/A << /S /GoTo /D (chapter.24) >> +>> endobj +3660 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 369.645 512.306 378.667] +/Subtype /Link +/A << /S /GoTo /D (section.24.1) >> +>> endobj +3661 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 356.095 512.306 365.118] +/Subtype /Link +/A << /S /GoTo /D (section.24.2) >> +>> endobj +3662 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 342.546 512.306 351.569] +/Subtype /Link +/A << /S /GoTo /D (subsection.24.2.1) >> +>> endobj +3663 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 328.997 512.306 338.02] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.24.2.1.1) >> +>> endobj +3664 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 315.448 512.306 324.471] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.24.2.1.2) >> +>> endobj +3665 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 288.349 512.306 297.372] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.24.2.1.3) >> +>> endobj +3666 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 274.8 512.306 283.823] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.24.2.1.4) >> +>> endobj +3667 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 261.251 512.306 270.274] +/Subtype /Link +/A << /S /GoTo /D (subsection.24.2.2) >> +>> endobj +3668 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 247.702 512.306 256.725] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.24.2.2.1) >> +>> endobj +3669 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 234.153 512.306 243.175] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.24.2.2.2) >> +>> endobj +3670 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 220.603 512.306 229.626] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.24.2.2.3) >> +>> endobj +3671 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 193.505 512.306 202.528] +/Subtype /Link +/A << /S /GoTo /D (subsection.24.2.3) >> +>> endobj +3672 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 179.956 512.306 188.979] +/Subtype /Link +/A << /S /GoTo /D (subsection.24.2.4) >> +>> endobj +3673 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 166.407 512.306 175.429] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.24.2.4.1) >> +>> endobj +3674 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 152.857 512.306 161.88] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.24.2.4.2) >> +>> endobj +3675 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 139.308 512.306 148.331] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.24.2.4.3) >> +>> endobj +3676 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 125.759 512.306 134.782] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.24.2.4.4) >> +>> endobj +3677 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 112.21 512.306 121.233] +/Subtype /Link +/A << /S /GoTo /D (section.24.3) >> +>> endobj +3678 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 98.661 512.306 107.683] +/Subtype /Link +/A << /S /GoTo /D (section.24.4) >> +>> endobj +3679 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 85.111 512.306 94.134] +/Subtype /Link +/A << /S /GoTo /D (section.24.5) >> +>> endobj +3680 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 71.562 512.306 80.585] +/Subtype /Link +/A << /S /GoTo /D (subsection.24.5.1) >> +>> endobj +3681 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 58.013 512.306 67.036] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.24.5.1.1) >> +>> endobj +3633 0 obj << +/D [3631 0 R /XYZ 85.039 786.531 null] +>> endobj +3630 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3684 0 obj << +/Length 3301 +/Filter /FlateDecode +>> +stream +x[w+!\w}ɱq[-9I(XKKdwpWYɉI.0feFcV*ik\9OL#왇G{?r(Tb=or1m_Ŋ3LS~NA_(]wJ֣=QR/rȕk-Q6 if(EjvpId<u]==O!WcVr̛zm.ّ [Q-Wpz3)h(j?_7?{X|RKe1|侼̌JMb]#m(UA1FC]xQ\ld'9x?vҷpm_/ڏ7W>f**/jPe%ubSIh`.%t.W L\jed^Sm4{*`/,ajPƎA W#rIVW.~'pavW`lؾq5S5s8wS&/C=gy|upP{whxp>]V]Mf56n`rڮg}童fxRؒWRF씱[\#쑈u%2dS={~l?^3~sXY d{+M)*Ѡ 6\L-\xxˍM{}C04y(T ՠCQB``0OC:0&Q7NsԌP> +Y +ebyAT}qUl{rml 5pNdFgdTSpCW՘?ݮ.X- f| Ve>iJ7M7&XV3?M.lڻ04Dk~ߒ`1!1@ܡAFFG܃?2sىC]nb +@lV&Qk}O3`S1zf}e8\RM0n;R }\p>9;oǓCoPB03%BA &.lVf7`0yyn` 93?s_eahsXr>rlin(o +H*+V&L0] գA*6Ě 6 +Go߄FCJgWҁX4`\,+ZhP|/5 01(oK˿([C+/0pqe-q4|JTT] ʨ0W⽨"҇Utdf;j ɠ_RnhL|UnD1qY+n{{ggZ.Nz`ݭjPvLlHonK~(udt)YTk}W"C!b%27D+J$lz'Q0Ob~[c{,PҌD|C2I*.] d0 DRب8{N,|_M'F|⺫|&g5dh2*QkUkךfw{m;h>$K:XcvvSZѠ:8SJZ%nN{ u?~^k|g mnO^R1CfeA tSc|fJ=ޅv D+mTFӣA *6iUrhU[G)zk%=u A e$9C bTX{4(FB5%Blu )|V~:*cF_~d +k?H*,jP +R8~P=?A;&6Rh5>ĉTcP$%gP|͵ SͭK\BpqGJ.10+}u5eZג—lAw:jy_ Ѽ/}7d T 9D]EĘ@V)mVԾiX0vH=*Swŗ9EK~6Dmn ɽyKnH$XM ?a4kendstream +endobj +3683 0 obj << +/Type /Page +/Contents 3684 0 R +/Resources 3682 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 3478 0 R +/Annots [ 3686 0 R 3687 0 R 3688 0 R 3689 0 R 3690 0 R 3691 0 R 3692 0 R 3693 0 R 3694 0 R 3695 0 R 3696 0 R 3697 0 R 3698 0 R 3699 0 R 3700 0 R 3701 0 R 3702 0 R 3703 0 R 3704 0 R 3705 0 R 3706 0 R 3707 0 R 3708 0 R 3709 0 R 3710 0 R 3711 0 R 3712 0 R 3713 0 R 3714 0 R 3715 0 R 3716 0 R 3717 0 R 3718 0 R 3719 0 R 3720 0 R 3721 0 R 3722 0 R 3723 0 R 3724 0 R 3725 0 R 3726 0 R 3727 0 R 3728 0 R 3729 0 R 3730 0 R 3731 0 R 3732 0 R ] +>> endobj +3686 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 754.651 512.306 763.674] +/Subtype /Link +/A << /S /GoTo /D (subsection.24.5.2) >> +>> endobj +3687 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 741.102 512.306 750.125] +/Subtype /Link +/A << /S /GoTo /D (subsection.24.5.3) >> +>> endobj +3688 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 727.553 512.306 736.575] +/Subtype /Link +/A << /S /GoTo /D (section.24.6) >> +>> endobj +3689 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 700.454 512.306 709.477] +/Subtype /Link +/A << /S /GoTo /D (subsection.24.6.1) >> +>> endobj +3690 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 686.905 512.306 695.928] +/Subtype /Link +/A << /S /GoTo /D (subsection.24.6.2) >> +>> endobj +3691 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 673.356 512.306 682.379] +/Subtype /Link +/A << /S /GoTo /D (subsection.24.6.3) >> +>> endobj +3692 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [492.314 648.897 512.306 658.466] +/Subtype /Link +/A << /S /GoTo /D (chapter.25) >> +>> endobj +3693 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 635.348 512.306 644.371] +/Subtype /Link +/A << /S /GoTo /D (section.25.1) >> +>> endobj +3694 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 621.799 512.306 630.822] +/Subtype /Link +/A << /S /GoTo /D (section.25.2) >> +>> endobj +3695 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 608.25 512.306 617.273] +/Subtype /Link +/A << /S /GoTo /D (subsection.25.2.1) >> +>> endobj +3696 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 594.701 512.306 603.724] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.25.2.1.1) >> +>> endobj +3697 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 581.151 512.306 590.174] +/Subtype /Link +/A << /S /GoTo /D (subsection.25.2.2) >> +>> endobj +3698 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 567.602 512.306 576.625] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.25.2.2.1) >> +>> endobj +3699 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 554.053 512.306 563.076] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.25.2.2.2) >> +>> endobj +3700 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 540.504 512.306 549.527] +/Subtype /Link +/A << /S /GoTo /D (subsection.25.2.3) >> +>> endobj +3701 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 526.955 512.306 535.978] +/Subtype /Link +/A << /S /GoTo /D (subsection.25.2.4) >> +>> endobj +3702 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 513.406 512.306 522.428] +/Subtype /Link +/A << /S /GoTo /D (subsection.25.2.5) >> +>> endobj +3703 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 499.856 512.306 508.879] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.25.2.5.1) >> +>> endobj +3704 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 486.307 512.306 495.33] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.25.2.5.2) >> +>> endobj +3705 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 472.758 512.306 481.781] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.25.2.5.3) >> +>> endobj +3706 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 459.209 512.306 468.232] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.25.2.5.4) >> +>> endobj +3707 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 445.66 512.306 454.682] +/Subtype /Link +/A << /S /GoTo /D (section.25.3) >> +>> endobj +3708 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 432.11 512.306 441.133] +/Subtype /Link +/A << /S /GoTo /D (subsection.25.3.1) >> +>> endobj +3709 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [492.314 407.652 512.306 417.22] +/Subtype /Link +/A << /S /GoTo /D (chapter.26) >> +>> endobj +3710 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 394.103 512.306 403.126] +/Subtype /Link +/A << /S /GoTo /D (section.26.1) >> +>> endobj +3711 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 380.554 512.306 389.576] +/Subtype /Link +/A << /S /GoTo /D (section.26.2) >> +>> endobj +3712 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 367.004 512.306 376.027] +/Subtype /Link +/A << /S /GoTo /D (section.26.3) >> +>> endobj +3713 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 353.455 512.306 362.478] +/Subtype /Link +/A << /S /GoTo /D (subsection.26.3.1) >> +>> endobj +3714 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 339.906 512.306 348.929] +/Subtype /Link +/A << /S /GoTo /D (subsection.26.3.2) >> +>> endobj +3715 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 326.357 512.306 335.38] +/Subtype /Link +/A << /S /GoTo /D (subsection.26.3.3) >> +>> endobj +3716 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 312.808 512.306 321.83] +/Subtype /Link +/A << /S /GoTo /D (subsection.26.3.4) >> +>> endobj +3717 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 299.258 512.306 308.281] +/Subtype /Link +/A << /S /GoTo /D (section.26.4) >> +>> endobj +3718 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 285.709 512.306 294.732] +/Subtype /Link +/A << /S /GoTo /D (subsection.26.4.1) >> +>> endobj +3719 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 272.16 512.306 281.183] +/Subtype /Link +/A << /S /GoTo /D (subsection.26.4.2) >> +>> endobj +3720 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 258.611 512.306 267.634] +/Subtype /Link +/A << /S /GoTo /D (subsection.26.4.3) >> +>> endobj +3721 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 245.062 512.306 254.084] +/Subtype /Link +/A << /S /GoTo /D (subsection.26.4.4) >> +>> endobj +3722 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 231.512 512.306 240.535] +/Subtype /Link +/A << /S /GoTo /D (subsection.26.4.5) >> +>> endobj +3723 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 217.963 512.306 226.986] +/Subtype /Link +/A << /S /GoTo /D (section.26.5) >> +>> endobj +3724 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 204.414 512.306 213.437] +/Subtype /Link +/A << /S /GoTo /D (subsection.26.5.1) >> +>> endobj +3725 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 190.865 512.306 199.888] +/Subtype /Link +/A << /S /GoTo /D (subsection.26.5.2) >> +>> endobj +3726 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 177.316 512.306 186.338] +/Subtype /Link +/A << /S /GoTo /D (subsection.26.5.3) >> +>> endobj +3727 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [492.314 152.857 512.306 162.426] +/Subtype /Link +/A << /S /GoTo /D (chapter.27) >> +>> endobj +3728 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 139.308 512.306 148.331] +/Subtype /Link +/A << /S /GoTo /D (section.27.1) >> +>> endobj +3729 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 125.759 512.306 134.782] +/Subtype /Link +/A << /S /GoTo /D (section.27.2) >> +>> endobj +3730 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 112.21 512.306 121.233] +/Subtype /Link +/A << /S /GoTo /D (section.27.3) >> +>> endobj +3731 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 98.661 512.306 107.683] +/Subtype /Link +/A << /S /GoTo /D (section.27.4) >> +>> endobj +3732 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 85.111 512.306 94.134] +/Subtype /Link +/A << /S /GoTo /D (section.27.5) >> +>> endobj +3685 0 obj << +/D [3683 0 R /XYZ 85.039 786.531 null] +>> endobj +3682 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3735 0 obj << +/Length 2691 +/Filter /FlateDecode +>> +stream +xK6+tB qʉgẃ5ZKH`ĸ\++Tj$FFNr0 +r'%+p\䓥x3Sdy6L`x'wʋN˺ZMt5t 1qNE0gs P?][ZC 9cd D e!J)(H醊`"!BrtIvSmn eZq:كSzq]XA8Nv9GNKzТ_ +A}R|@'f$ +'ꌂK@.@AENг #3DךD~b%MS4ݭ/%Nd&SFZZN= +#j0&YpL=݊gÿsHgdfo4HK&I@({D5Zk{Zv^ISg}njQ78ͦ=hQk4[JYv9i*jL٣jmϑ V2iu@̿acDDVB2*<1a{WJC[d/4YղՎX~!=Ň72ٝx]5 +V @RtZ6&QLaD,jܡoڟ2J\7˶S|6n7B緕Okr*Μa  8/.%~{Z8qD<ޠp֘rޮVe'Xˈo3Ǩlo-} !d[7 \x@7 l΁f]Nfk"c[uJy4P6 +!OQXZj8վqn-U +=Tz-S Nq(?7T)*ZN%/ۖFRũ?J}@3URAF/sur5X~~YY9XZ:hQ+[Օ¢ +8VvuV[yE؞ەNAo:"w(J* hdj ߗ fBAY)%fʠ,E\"1iAB̍2CǙ%3Ou 1la&ƳͦZU%Rc'0?u3͌q,6_--1l} R:l9ؐvS>[r拏nk6*+<_kOÌq83p|PKq8} pRZ88y,6fʕAK94Ύr$ZܞI7 A\[ V#ܵ [e\ךϫ8~wUv%1 WK 5ӗ &խS \fv/DًE˅ +\G}<5q <C҃J +>*ѧ " G21Mg|zCݚu.e f*SwzcYZ ^Ic>2ѧP@M3kT}UhY;b339ThOqS!:խ[TΑgm7C{w,奖)_a,Z_-6qm_8T-Ā:\mj.) /7zXU2ȞWI4OXZ`Jb< +T(q*j )ِvQv)usfoIuʣE0Տr2u[:%F6H~4hr-5h~4OFe\$qI:Rn-H ōr@|:%d֭f3v(H~U) Qة0%8Dx']YG3kZ*2LCƙ%3Mu0.=ST֋vC(@;8]&v77ԡډ3WK Icw$KuaJ}E]I{N +yТk:S_L{2Ep]>L9oxcu7SjK|OP٥'٭tW.rl"ÿ#z}A}_8T=.&Ģo縘]٩-;WKL] > RݺI VS; jmҴzG!\%> endobj +3737 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [492.314 754.651 512.306 764.219] +/Subtype /Link +/A << /S /GoTo /D (chapter.28) >> +>> endobj +3738 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 741.102 512.306 750.125] +/Subtype /Link +/A << /S /GoTo /D (section.28.1) >> +>> endobj +3739 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 727.553 512.306 736.575] +/Subtype /Link +/A << /S /GoTo /D (section.28.2) >> +>> endobj +3740 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [492.314 703.094 512.306 712.663] +/Subtype /Link +/A << /S /GoTo /D (chapter.29) >> +>> endobj +3741 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 689.545 512.306 698.568] +/Subtype /Link +/A << /S /GoTo /D (section.29.1) >> +>> endobj +3742 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [490.587 651.052 512.306 661.347] +/Subtype /Link +/A << /S /GoTo /D (part.4) >> +>> endobj +3743 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [492.314 626.594 512.306 636.162] +/Subtype /Link +/A << /S /GoTo /D (chapter.30) >> +>> endobj +3744 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 613.044 512.306 622.067] +/Subtype /Link +/A << /S /GoTo /D (section.30.1) >> +>> endobj +3745 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 599.495 512.306 608.518] +/Subtype /Link +/A << /S /GoTo /D (section.30.2) >> +>> endobj +3746 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 585.946 512.306 594.969] +/Subtype /Link +/A << /S /GoTo /D (section.30.3) >> +>> endobj +3747 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [492.314 561.488 512.306 571.056] +/Subtype /Link +/A << /S /GoTo /D (chapter.31) >> +>> endobj +3748 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 547.938 512.306 556.961] +/Subtype /Link +/A << /S /GoTo /D (section.31.1) >> +>> endobj +3749 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 534.389 512.306 543.412] +/Subtype /Link +/A << /S /GoTo /D (subsection.31.1.1) >> +>> endobj +3750 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 520.84 512.306 529.863] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.31.1.1.1) >> +>> endobj +3751 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 507.291 512.306 516.314] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.31.1.1.2) >> +>> endobj +3752 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 493.742 512.306 502.764] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.31.1.1.3) >> +>> endobj +3753 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 480.192 512.306 489.215] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.31.1.1.4) >> +>> endobj +3754 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 466.643 512.306 475.666] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.31.1.1.5) >> +>> endobj +3755 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 453.094 512.306 462.117] +/Subtype /Link +/A << /S /GoTo /D (subsection.31.1.2) >> +>> endobj +3756 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 439.545 512.306 448.568] +/Subtype /Link +/A << /S /GoTo /D (section.31.2) >> +>> endobj +3757 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 425.996 512.306 435.018] +/Subtype /Link +/A << /S /GoTo /D (subsection.31.2.1) >> +>> endobj +3758 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 412.446 512.306 421.469] +/Subtype /Link +/A << /S /GoTo /D (subsection.31.2.2) >> +>> endobj +3759 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [492.314 387.988 512.306 397.556] +/Subtype /Link +/A << /S /GoTo /D (chapter.32) >> +>> endobj +3760 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 374.439 512.306 383.462] +/Subtype /Link +/A << /S /GoTo /D (section.32.1) >> +>> endobj +3761 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 360.89 512.306 369.913] +/Subtype /Link +/A << /S /GoTo /D (subsection.32.1.1) >> +>> endobj +3762 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 347.341 512.306 356.363] +/Subtype /Link +/A << /S /GoTo /D (subsection.32.1.2) >> +>> endobj +3763 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 333.791 512.306 342.814] +/Subtype /Link +/A << /S /GoTo /D (subsection.32.1.3) >> +>> endobj +3764 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 320.242 512.306 329.265] +/Subtype /Link +/A << /S /GoTo /D (subsection.32.1.4) >> +>> endobj +3765 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 306.693 512.306 315.716] +/Subtype /Link +/A << /S /GoTo /D (subsection.32.1.5) >> +>> endobj +3766 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 293.144 512.306 302.167] +/Subtype /Link +/A << /S /GoTo /D (subsection.32.1.6) >> +>> endobj +3767 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 279.595 512.306 288.617] +/Subtype /Link +/A << /S /GoTo /D (subsection.32.1.7) >> +>> endobj +3768 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 266.045 512.306 275.068] +/Subtype /Link +/A << /S /GoTo /D (subsection.32.1.8) >> +>> endobj +3769 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 252.496 512.306 261.519] +/Subtype /Link +/A << /S /GoTo /D (subsection.32.1.9) >> +>> endobj +3770 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 238.947 512.306 247.97] +/Subtype /Link +/A << /S /GoTo /D (subsection.32.1.10) >> +>> endobj +3771 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [490.587 200.454 512.306 210.749] +/Subtype /Link +/A << /S /GoTo /D (part.5) >> +>> endobj +3772 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [492.314 175.995 512.306 185.564] +/Subtype /Link +/A << /S /GoTo /D (chapter.33) >> +>> endobj +3773 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 162.446 512.306 171.469] +/Subtype /Link +/A << /S /GoTo /D (section.33.1) >> +>> endobj +3774 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 148.897 512.306 157.92] +/Subtype /Link +/A << /S /GoTo /D (section.33.2) >> +>> endobj +3775 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 135.348 512.306 144.371] +/Subtype /Link +/A << /S /GoTo /D (section.33.3) >> +>> endobj +3776 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 121.799 512.306 130.822] +/Subtype /Link +/A << /S /GoTo /D (section.33.4) >> +>> endobj +3736 0 obj << +/D [3734 0 R /XYZ 85.039 786.531 null] +>> endobj +3733 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3780 0 obj << +/Length 3097 +/Filter /FlateDecode +>> +stream +x[s۶+($q^:N&$iN줝i@˴%9˿/7IZI&㐢rX"I)frR9Lf=<9W<#ľ-yx9$3j9e氞uOAՄ1?“S/{1YN>s ˽{Hm{ +ҵ3ʒo-Ch"W*yQ :qYG}ɳeui=ly>gyUSs^]T-N*jHLI:rb`/.wfi'UpI6$Ǜ +B6"Bo" Esi-SHkZK9ϫ2j j38SYRŊlu>̔!-۾8Gw<Fj?Rؼ ~1`MW᫣rVm)8SG̈́*Ѝ0HP*KW3+F$ ܯ5bp~ˬ߾^*gq/bW()Hqo ae4J쟓Aq:,%s IݶstC:W ʜ9Y@jL]- h}L1l G3s pzjǂ:}Fus5 ?1a=<[(f3c۰XԝXuhP5f%E9**U S?C~WH&L QD^B[I6hbF%!`74#zcCC3ltNO]o"/8WqƸ;l^vcW'h^! 5j;P +݁qrY7 y< ÷ K)5OUc(|?O~]C w*eXBqjwT(s xV7zph oq5 -D'U$Fx8@oG.I +$pRuNE=4ciwb ڡ㴇i )~ v UnwdcKxA#C @it=S1I ARp: +fobBdWВaNOTzl QIPWhtZ{Ѻ[&Tn5gjzZMVŊ+d6ӧj^uBu[UjaPƶ.<xJbޚTyFXXeϨQC ,SՒv"X1(I͖rk_V>Q'N*-4`YN+7%{'~1ž9 ’2>}/PGhؠG_ZjuQQ +v俁J?k+K@YA7/yyj=TuAui7'ncSoوwR}xҢ/VUd9-vd KY9 +wAnZQẔk46ׇe7LQ~9g8cзhETG;nRh0YEB~_r fƸyvUlzkZ5t O7X' 3]#6 N,U XG j7<[JArcaK@mo"Ϫp=d{"ިdc%Ӊ%L%3 N&U'#r| +2ɞVH/df,N,g(q@jg;ݢtTUF`D}u"KcXܝXw2{AwZ?Qpm340t#S4[-ϔbrDz,{Fjgֳ$IQv,]Vh}A){zܦ {ykۯ洪u"oˮK Xvo .Uv1E[ݵB: -`ގ~9h,N,=P/KBI/@BF7rj6i"AMXeLqGVlxp/Ye@ s+c|,"w=]srٜxs꣈Ph/{\Bѯ!0;k;(qj=`m}q;,x=@z@' 5{@ZT‚;p y .3sM_HmN,.oQvAH/|ۗa^& pEj#bq}ƨn J5Ykݤd`O͂|T\y`[wA' 5AZߺsK̾ 1_\j7E0CXXnQC pSz"G\ "2̃).vNwxWXXlQC ,EABsY֬4:ڋ1{6X/KrX2Gwh '[lI2[ϫĴU L?´?2Z3v9]?Z犡i~}a5^ iw&KKq5{@Z7(JB;'pO(0K9%OL״@c\zٕ KvG%9T0"a.Tיy8:\|S-B +4CCendstream +endobj +3779 0 obj << +/Type /Page +/Contents 3780 0 R +/Resources 3778 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 3777 0 R +/Annots [ 3782 0 R 3783 0 R 3784 0 R 3785 0 R 3786 0 R 3787 0 R 3788 0 R 3789 0 R 3790 0 R 3791 0 R 3792 0 R 3793 0 R 3794 0 R 3795 0 R 3796 0 R 3797 0 R 3798 0 R 3799 0 R 3800 0 R 3801 0 R 3802 0 R 3803 0 R 3804 0 R 3805 0 R 3806 0 R 3807 0 R 3808 0 R 3809 0 R 3810 0 R 3811 0 R 3812 0 R 3813 0 R 3814 0 R 3815 0 R 3816 0 R 3817 0 R 3818 0 R 3819 0 R 3820 0 R 3821 0 R 3822 0 R 3823 0 R 3824 0 R 3825 0 R ] +>> endobj +3782 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [492.314 754.651 512.306 764.219] +/Subtype /Link +/A << /S /GoTo /D (chapter.34) >> +>> endobj +3783 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 741.102 512.306 750.125] +/Subtype /Link +/A << /S /GoTo /D (section.34.1) >> +>> endobj +3784 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 714.003 512.306 723.026] +/Subtype /Link +/A << /S /GoTo /D (section.34.2) >> +>> endobj +3785 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 700.454 512.306 709.477] +/Subtype /Link +/A << /S /GoTo /D (section.34.3) >> +>> endobj +3786 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 686.905 512.306 695.928] +/Subtype /Link +/A << /S /GoTo /D (section.34.4) >> +>> endobj +3787 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 673.356 512.306 682.379] +/Subtype /Link +/A << /S /GoTo /D (section.34.5) >> +>> endobj +3788 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [492.314 648.897 512.306 658.466] +/Subtype /Link +/A << /S /GoTo /D (chapter.35) >> +>> endobj +3789 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 635.348 512.306 644.371] +/Subtype /Link +/A << /S /GoTo /D (section.35.1) >> +>> endobj +3790 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 621.799 512.306 630.822] +/Subtype /Link +/A << /S /GoTo /D (section.35.2) >> +>> endobj +3791 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 608.25 512.306 617.273] +/Subtype /Link +/A << /S /GoTo /D (section.35.3) >> +>> endobj +3792 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 594.701 512.306 603.724] +/Subtype /Link +/A << /S /GoTo /D (section.35.4) >> +>> endobj +3793 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 581.151 512.306 590.174] +/Subtype /Link +/A << /S /GoTo /D (section.35.5) >> +>> endobj +3794 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 567.602 512.306 576.625] +/Subtype /Link +/A << /S /GoTo /D (section.35.6) >> +>> endobj +3795 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [490.587 529.109 512.306 539.404] +/Subtype /Link +/A << /S /GoTo /D (part.6) >> +>> endobj +3796 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [492.314 504.651 512.306 514.219] +/Subtype /Link +/A << /S /GoTo /D (chapter.36) >> +>> endobj +3797 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 491.102 512.306 500.124] +/Subtype /Link +/A << /S /GoTo /D (section.36.1) >> +>> endobj +3798 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 477.552 512.306 486.575] +/Subtype /Link +/A << /S /GoTo /D (subsection.36.1.1) >> +>> endobj +3799 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 464.003 512.306 473.026] +/Subtype /Link +/A << /S /GoTo /D (subsection.36.1.2) >> +>> endobj +3800 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 450.454 512.306 459.477] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.36.1.2.1) >> +>> endobj +3801 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 436.905 512.306 445.928] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.36.1.2.2) >> +>> endobj +3802 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 423.356 512.306 432.378] +/Subtype /Link +/A << /S /GoTo /D (section.36.2) >> +>> endobj +3803 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 409.806 512.306 418.829] +/Subtype /Link +/A << /S /GoTo /D (section.36.3) >> +>> endobj +3804 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 396.257 512.306 405.28] +/Subtype /Link +/A << /S /GoTo /D (section.36.4) >> +>> endobj +3805 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 382.708 512.306 391.731] +/Subtype /Link +/A << /S /GoTo /D (subsection.36.4.1) >> +>> endobj +3806 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 369.159 512.306 378.182] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.36.4.1.1) >> +>> endobj +3807 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 355.61 512.306 364.632] +/Subtype /Link +/A << /S /GoTo /D (subsubsection.36.4.1.2) >> +>> endobj +3808 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 342.06 512.306 351.083] +/Subtype /Link +/A << /S /GoTo /D (section.36.5) >> +>> endobj +3809 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 328.511 512.306 337.534] +/Subtype /Link +/A << /S /GoTo /D (subsection.36.5.1) >> +>> endobj +3810 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 314.962 512.306 323.985] +/Subtype /Link +/A << /S /GoTo /D (subsection.36.5.2) >> +>> endobj +3811 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 301.413 512.306 310.436] +/Subtype /Link +/A << /S /GoTo /D (section.36.6) >> +>> endobj +3812 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [492.314 276.955 512.306 286.523] +/Subtype /Link +/A << /S /GoTo /D (chapter.37) >> +>> endobj +3813 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 263.405 512.306 272.428] +/Subtype /Link +/A << /S /GoTo /D (section.37.1) >> +>> endobj +3814 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 249.856 512.306 258.879] +/Subtype /Link +/A << /S /GoTo /D (section.37.2) >> +>> endobj +3815 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 236.307 512.306 245.33] +/Subtype /Link +/A << /S /GoTo /D (section.37.3) >> +>> endobj +3816 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 222.758 512.306 231.781] +/Subtype /Link +/A << /S /GoTo /D (section.37.4) >> +>> endobj +3817 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 209.209 512.306 218.231] +/Subtype /Link +/A << /S /GoTo /D (section.37.5) >> +>> endobj +3818 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 195.659 512.306 204.682] +/Subtype /Link +/A << /S /GoTo /D (subsection.37.5.1) >> +>> endobj +3819 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 182.11 512.306 191.133] +/Subtype /Link +/A << /S /GoTo /D (section.37.6) >> +>> endobj +3820 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 168.561 512.306 177.584] +/Subtype /Link +/A << /S /GoTo /D (subsection.37.6.1) >> +>> endobj +3821 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 155.012 512.306 164.035] +/Subtype /Link +/A << /S /GoTo /D (subsection.37.6.2) >> +>> endobj +3822 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [492.314 130.553 512.306 140.122] +/Subtype /Link +/A << /S /GoTo /D (chapter.38) >> +>> endobj +3823 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 117.004 512.306 126.027] +/Subtype /Link +/A << /S /GoTo /D (section.38.1) >> +>> endobj +3824 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 103.455 512.306 112.478] +/Subtype /Link +/A << /S /GoTo /D (section.38.2) >> +>> endobj +3825 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 76.357 512.306 85.379] +/Subtype /Link +/A << /S /GoTo /D (subsection.38.2.1) >> +>> endobj +3781 0 obj << +/D [3779 0 R /XYZ 85.039 786.531 null] +>> endobj +3778 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3828 0 obj << +/Length 2292 +/Filter /FlateDecode +>> +stream +x[s۶+VjBp'9uNt4CZM$1_ŕ(eTuN<G-oX\H + HQ *Z"H1\b w {d=ų#Uq}Q %Oeк/n7GUt^ .71UwpQ\p̝/.~e{RB _5Sɪ@W=@¿ɔIY~ꗹL9fl2%e'|]7'Ϙ塃ϽԼlٟжs0ʓrsAq\ED?-71%(O+R=WtQfBF}1*YcÕNď+xo.SO=x9FbC8.8D%U MNi0tDh(c?ds×Ҹޞ|>~M_ lu;}ޯO.&v^0"ǽX=6q6Kˮ=h6T]Gc'cZ Xo4 + OB¢[7.K}Z L7]`k7Vݵ9o i_q, /jP}VNL\"=1I?_c>\[ k^/\t6:S6_PoApRH/HI )VhR2c5Pg5E!.}*@8U8v BRZn +xylnW FTm;$4[\O)v9(3מ5$nDk:eƾi8Vp@(!(R~ 8A›lC?t]!|4AqƘ2Q^(Onp\wMW8 +)AOV;?" { ؘiC szLQ3Rm=&|j"7nS'B#Gbi~BH 5xɯn5t^U2> +ɲbD{x B/G;= ԛŮ=t.V}M%rzhMFS&KJGԑ.#H96"d&nNYSX9wVX&",jdoJxo'u[&1~tb>#?#٬f>im3mYqv = ;WMk_nnJѧxH,1 w 9ًOCokB^+4qf;>:LܧH?Zendstream +endobj +3827 0 obj << +/Type /Page +/Contents 3828 0 R +/Resources 3826 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 3777 0 R +/Annots [ 3830 0 R 3831 0 R 3832 0 R 3833 0 R 3834 0 R 3835 0 R 3836 0 R 3837 0 R 3838 0 R 3839 0 R 3840 0 R 3841 0 R 3842 0 R 3843 0 R 3844 0 R 3845 0 R 3846 0 R 3847 0 R 3848 0 R 3849 0 R 3850 0 R 3851 0 R 3852 0 R 3853 0 R 3854 0 R 3855 0 R 3856 0 R 3857 0 R 3858 0 R 3859 0 R 3860 0 R 3861 0 R ] +>> endobj +3830 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 741.102 512.306 750.125] +/Subtype /Link +/A << /S /GoTo /D (subsection.38.2.2) >> +>> endobj +3831 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 727.553 512.306 736.575] +/Subtype /Link +/A << /S /GoTo /D (subsection.38.2.3) >> +>> endobj +3832 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 714.003 512.306 723.026] +/Subtype /Link +/A << /S /GoTo /D (section.38.3) >> +>> endobj +3833 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 700.454 512.306 709.477] +/Subtype /Link +/A << /S /GoTo /D (subsection.38.3.1) >> +>> endobj +3834 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 686.905 512.306 695.928] +/Subtype /Link +/A << /S /GoTo /D (subsection.38.3.2) >> +>> endobj +3835 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 673.356 512.306 682.379] +/Subtype /Link +/A << /S /GoTo /D (subsection.38.3.3) >> +>> endobj +3836 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 659.807 512.306 668.829] +/Subtype /Link +/A << /S /GoTo /D (subsection.38.3.4) >> +>> endobj +3837 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 646.257 512.306 655.28] +/Subtype /Link +/A << /S /GoTo /D (subsection.38.3.5) >> +>> endobj +3838 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 632.708 512.306 641.731] +/Subtype /Link +/A << /S /GoTo /D (subsection.38.3.6) >> +>> endobj +3839 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 619.159 512.306 628.182] +/Subtype /Link +/A << /S /GoTo /D (section.38.4) >> +>> endobj +3840 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 605.61 512.306 614.633] +/Subtype /Link +/A << /S /GoTo /D (subsection.38.4.1) >> +>> endobj +3841 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 592.061 512.306 601.083] +/Subtype /Link +/A << /S /GoTo /D (section.38.5) >> +>> endobj +3842 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 578.511 512.306 587.534] +/Subtype /Link +/A << /S /GoTo /D (section.38.6) >> +>> endobj +3843 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [492.314 554.053 512.306 563.621] +/Subtype /Link +/A << /S /GoTo /D (chapter.39) >> +>> endobj +3844 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 540.504 512.306 549.527] +/Subtype /Link +/A << /S /GoTo /D (section.39.1) >> +>> endobj +3845 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 526.955 512.306 535.978] +/Subtype /Link +/A << /S /GoTo /D (section.39.2) >> +>> endobj +3846 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 513.406 512.306 522.428] +/Subtype /Link +/A << /S /GoTo /D (section.39.3) >> +>> endobj +3847 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 499.856 512.306 508.879] +/Subtype /Link +/A << /S /GoTo /D (section.39.4) >> +>> endobj +3848 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 486.307 512.306 495.33] +/Subtype /Link +/A << /S /GoTo /D (section.39.5) >> +>> endobj +3849 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 472.758 512.306 481.781] +/Subtype /Link +/A << /S /GoTo /D (section.39.6) >> +>> endobj +3850 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 459.209 512.306 468.232] +/Subtype /Link +/A << /S /GoTo /D (section.39.7) >> +>> endobj +3851 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 445.66 512.306 454.682] +/Subtype /Link +/A << /S /GoTo /D (section.39.8) >> +>> endobj +3852 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 432.11 512.306 441.133] +/Subtype /Link +/A << /S /GoTo /D (section.39.9) >> +>> endobj +3853 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 418.561 512.306 427.584] +/Subtype /Link +/A << /S /GoTo /D (section.39.10) >> +>> endobj +3854 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 405.012 512.306 414.035] +/Subtype /Link +/A << /S /GoTo /D (section.39.11) >> +>> endobj +3855 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 391.463 512.306 400.486] +/Subtype /Link +/A << /S /GoTo /D (section.39.12) >> +>> endobj +3856 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [492.314 367.004 512.306 376.573] +/Subtype /Link +/A << /S /GoTo /D (chapter.40) >> +>> endobj +3857 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 353.455 512.306 362.478] +/Subtype /Link +/A << /S /GoTo /D (section.40.1) >> +>> endobj +3858 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [492.314 328.997 512.306 338.565] +/Subtype /Link +/A << /S /GoTo /D (chapter.41) >> +>> endobj +3859 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 315.448 512.306 324.471] +/Subtype /Link +/A << /S /GoTo /D (section.41.1) >> +>> endobj +3860 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 301.899 512.306 310.921] +/Subtype /Link +/A << /S /GoTo /D (section.41.2) >> +>> endobj +3861 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [493.95 288.349 512.306 297.372] +/Subtype /Link +/A << /S /GoTo /D (section.41.3) >> +>> endobj +3829 0 obj << +/D [3827 0 R /XYZ 85.039 786.531 null] +>> endobj +3826 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3864 0 obj << +/Length 241 +/Filter /FlateDecode +>> +stream +xuPN1 +<&CLN"L  ZTR U28{=,@ʊ׆lZQ%_g,1'1d:*C=@ȄHPL<dFޜgXY2h:bʩ]*"_~<Vnh7[qZ9gz5aѰonPB< FNӳWdQX8=}׉]_27`endstream +endobj +3863 0 obj << +/Type /Page +/Contents 3864 0 R +/Resources 3862 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 3777 0 R +>> endobj +3865 0 obj << +/D [3863 0 R /XYZ 85.039 786.531 null] +>> endobj +6 0 obj << +/D [3863 0 R /XYZ 85.039 547.583 null] +>> endobj +3862 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3868 0 obj << +/Length 3458 +/Filter /FlateDecode +>> +stream +xڅZo EX+z?<6w.6`bl+[rG/_3c%bp8Gj3gYza~fb;[O|Ѝft<8 "7"乞} s$<=~~pl/wG8wjFciFsHKgx߳4: +F{ZxHK?>=7#-aI9o"*H-Y3 Rp9ydR^q1yOzjȦ1,ݡFwؠρ΋f.9(iGӞ ۾cR07 a=h"XtVLʬG6kaWK,H^5?3*ey#˸ ғmKg 1fIk.]"QLu=)YfU(~{4r5{͂HJ7y +]2q@W?.O82s) VPȼ@7Kߗ%4s6~+f^lU#Dc@CQLP$vhfc$8BɅ 4ZQ+6E_dfW&rJطQBBY\F!gfaaF%n(EsM]+cP!\?Wy;}0\0'+4!FxӍĎwωLw64:Z*Jz +t7qgkOEgxLV8<'ϵıslw{m6P>QH$ےSWm %9AvSLK,`j{pr=0SwpNV8΄PCO\bA#:0 |2 +H7 $om6ϏpsLï^=# ;ttIԎK\.t,*a _Ԑ MmR>S'>]yG'ʠ1?gtxS`N668yRލ/ߵ8gY\P pi>ؔ(RC׻@J)$!A˲5zUKp$Må,1e!'"HE$9Vd>לSEdҵ[l>!hx}PMsd#\?$dL g% +]{c9 yw=C=\j9aP-슖#-e?/H5֥$rЂM;E%coy)a[˜?"ID.7|1XmbB!^ {[)Y㟛S@)>1YPItz!GvrTJjbjt3bmԥ3KPtaAZDM-Euܷz(Y A=909MU}{3EpʹB 3]u/|7>|S&J[@T޼f`2]mI*U)FÓ-!tQ˻$-;˜*qpmUI[` VĴ.Kc{)…K1!p~Ew#U7(M%l΃2pH vNKkKO ?O`I5U9fAm)o4lD7Xh'+|6NtvmMPҸd%K<0ҁiEU#[$u]f+C0^۲6&bpA^)vwzx)ūUYr8-"p1beFDl8Zv,.4 {5-~$:K3J5m'dKuRӭ;ڎdJjFkQ-[MOƫ(:Ot< ۊ.9J17 &$PCJznE*C #N7=38w̎m?qV|ؐSlcA6q7&0^ Be8¢ˣw`zP-9W5IR/v2-Ow@}ʭ3Wo-` sl( WlJ6yn GD۱e%n'Fn=_/wΚ͑endstream +endobj +3867 0 obj << +/Type /Page +/Contents 3868 0 R +/Resources 3866 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 3777 0 R +>> endobj +3869 0 obj << +/D [3867 0 R /XYZ 85.039 786.531 null] +>> endobj +3870 0 obj << +/D [3867 0 R /XYZ 85.039 766.606 null] +>> endobj +10 0 obj << +/D [3867 0 R /XYZ 85.039 766.606 null] +>> endobj +2955 0 obj << +/D [3867 0 R /XYZ 85.039 676.205 null] +>> endobj +14 0 obj << +/D [3867 0 R /XYZ 85.039 562.8 null] +>> endobj +3871 0 obj << +/D [3867 0 R /XYZ 85.039 533.396 null] +>> endobj +18 0 obj << +/D [3867 0 R /XYZ 85.039 192.444 null] +>> endobj +3872 0 obj << +/D [3867 0 R /XYZ 85.039 163.04 null] +>> endobj +3866 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F66 3248 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3875 0 obj << +/Length 4019 +/Filter /FlateDecode +>> +stream +xڥRHp*IkHef l0yl+d;?-ɖMnQrtv'8L8Nf#gq* =eO\Nd2]up2a]דS'Q[W7ӯ'^l}t1:9u/'u@5wag?5Ԑ#U +q_dr*'/vl7I&#?Pv+GwG6k?{EP(zr=8 C?2b;‰qʇMzk"d]|AJ n/ޟz!묮J+%tv%KJ +F *cMfLpmPϾwx=D0_dfO5 DYV-/ +ǫ6Be랓W,޶%wIWqb%4³Rp7^h'?.x[䑲h\PW\ +iӒF}8PK0/ةȨ-ϚG +<#lVTOZHpQ7M5wR-sG +7Xa>t<5pcF +WKD5{wH/ fNɝ!>b^W>2ڌqJ"OtyS+I:pͮ;G[O@tcwU +nsqG.Yd&jdk[sdQTڴL1OYtj^VbRưg:; #Kl.rV6Sǁ={!|7F6p{" +0x˔Ё)?Կ))Q9_1p!$4LtxW4s{p I61$ ٔѨ-kv|iW8OW|~v[=~K"ϵouݜc$ qX!֙yG ^0& x,YfJR'Wr +E۱ +aHl4#Ic~w  4U>~r2vn% /O͙Z`j]i-p5\zs ̐ہ N47ZZQLS֋BFΝc' +ݵ!ڥ=ɹZdƐGbbghfKCR5(6W;`USХ Ӫd4O6Lsukq&uXT)=pw"JrњB>IJ$>,U%Vz:%W)]gE jq3 F4=HܷB?%,p׏1 c^@@!К@$bO2H*zNj8Sڦ~dHȳ؄aM*:]3u^wvhu^ ΋\SKPwpRj>2\npdB>< +]YEٌ]'٤roa@ OUlDp82#! +4]Itd R0|Ƶ%CЉ ҉s 6kH'w\q.Z8%Q xٺ@àf8@t6Dw%+ŜD 9@~$ +=!z#8PB|c!G7|7x\JCa[ +Yw& +@Evpھ w@NX:C o=o+T~C%6b\r,NNqw\^tfCFŤScbռ{a.׬F[޴/>-7U%/LŕS#ߎ08 +NK@G&ҵ^^^丼_rHčDn9LJrdLxʳ> endobj +3877 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [173.74 248.031 284.915 260.933] +/Subtype/Link/A<> +>> endobj +3876 0 obj << +/D [3874 0 R /XYZ 85.039 786.531 null] +>> endobj +22 0 obj << +/D [3874 0 R /XYZ 85.039 232.98 null] +>> endobj +3878 0 obj << +/D [3874 0 R /XYZ 85.039 204.182 null] +>> endobj +3873 0 obj << +/Font << /F64 3118 0 R /F14 2903 0 R /F15 2884 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3881 0 obj << +/Length 3973 +/Filter /FlateDecode +>> +stream +xڥZo8 Ԫ$fwY4iɢ8.jd+Mr߼HѶA`>p8Pă?FIn|}M_(fB2hߞ)'f^67devsϷLgJ)w$I/ u>t;sDsoί=OíabW +߽sUN~M'a(TRNnNnp£ԍRuy?6 IEn&_椴 Ţp)M<%NoSrݽbU2Xk*O&+ib>c]YXE +kL;I8*[RUp*/ "^q)P U/c[0Ŧ bKg.f |cۋ˟nq^ZXBݮ + )&n'l05V rAv)Sð6"v]hWE`YU}%$N|X;ڥP|lY䇶N7+)J<71L7m >~$7Qifш{ +37M<­jf|1 +^fg9a'2ד4Ќ}if75HՉ/?~ƂSJ5_~:_L'>qY,fQ''t32T(@V}W_)pZrՃ4c`-kÑg$^|C8CV" W$Wd\~Wlcd<&g~s9 'Py@ʖe>=]XYʼLٌ+C'" ?!+:'؂ )oES,V{\7B@ d sY@ =ٝ c,3RVh,YAef Uv-Υ-z#Q&Z}!|Dj&|Ś9K_ĕXT']U B}w5 RWz YDl·&$+"dƂ({S +j@]Ѕק=ßd\DftGrgn"pY/U # *reUoFmFH=7rn &DK s_oܬNwLRpsܧ R-kx~!:9 +wO/]d9; Sīܣ@Z"G)˜I&WǠt+t$cbtM,~@D93!-l (p`6Ž +8 QG)b3~Q-㪨^QUo{TNi`I/Bw7z>8"s%4,|<hd4,܏6Y 7!Δ}Ab/:0Q:۪bmj\ eTr!wfy|Vkf2xA|$ٹPv j߃Z@-^b!zM_ZPkzZlg5q,ESCÀ#ΦocItCM81)Jy1BK0~:;Rn SYD4Ey$; +*v hT?)!#ll"(y)@w $ޔC,ч gNI(6`r" oK! M1xd)SQ4T%6Xv3w4ۃqEnR7JB=G{s4”>=rr8o rc$!N(sFp5 2L_X! 4#vw\3I\%)>X쎛9;ŊD@f^!FNiJn M 5{$y4%P^6wd{T_lك8C}1=Oapn$I6mqlhՃ p _ِNaC$|fǶjWyMgȱIiZ s]>iVpBCMqe: +!5iHpoKSq܉IV)V1E{?|6tC>wИb_򙞳4f'u(?ʛHDoiێB(ߋ?i9t3,ܒ +ڒV; VYA)//HD\ÛAX%]}FI2s2|,O"L7Xt^PA=kl_+zZ& g`p ~F`rw~ItgCgy._ cI'lQ<3ג.f,%9Ֆ +A k2P]4ژ"-\ U+/oi„`].Y!c&'8ä|.lw杆bP!B%"'zav *FbAc) 2dw;|9ˢ 6 QE *1Ƶv*KS2OvB.K6LiW%:Az5g_&[ꑄ}ZaqM#d,BDC^+}Z3j`?$V!ɬh*c YCoj0CHW Ʊl\җ-f0WfMǏ2yEGBE}l0uW=Qqjf ha !;endstream +endobj +3880 0 obj << +/Type /Page +/Contents 3881 0 R +/Resources 3879 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 3889 0 R +/Annots [ 3883 0 R 3884 0 R 3886 0 R 3887 0 R ] +>> endobj +3883 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [481.98 668.246 512.306 679.935] +/Subtype/Link/A<> +>> endobj +3884 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 654.697 146.975 666.386] +/Subtype/Link/A<> +>> endobj +3886 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [404.926 305.462 512.306 317.151] +/Subtype/Link/A<> +>> endobj +3887 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 291.306 153.369 304.208] +/Subtype/Link/A<> +>> endobj +3882 0 obj << +/D [3880 0 R /XYZ 85.039 786.531 null] +>> endobj +26 0 obj << +/D [3880 0 R /XYZ 85.039 639.254 null] +>> endobj +3885 0 obj << +/D [3880 0 R /XYZ 85.039 609.849 null] +>> endobj +30 0 obj << +/D [3880 0 R /XYZ 85.039 262.92 null] +>> endobj +3888 0 obj << +/D [3880 0 R /XYZ 85.039 233.516 null] +>> endobj +3879 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3892 0 obj << +/Length 1474 +/Filter /FlateDecode +>> +stream +xڥWYs6~ׯLDϾtr7NcNR"-!d[Kc ]a(4e9΋,He4^Gx WILHlt2KQa9]z0Hl| 9I|}kp( dYw,Q M۷.%c>u*TAZGQQ2yYSUMq ` farTm絞OR(54z ,ƉMW"cUmZ>}k3I!`DkR$BoY`QugU8s*D@V55x'4BJ +wnz8PFbR +:/kR4M.秌XP8'k-^lD4喕 +8)w]3,T0搰{LD:/VcF5;C4/qzϘZVR͑+߸v0$imt c0+Y\Y)b&LywQ[dԅKh kiC3iQŜ<2hA}jIXa(YyWyj޾mXkǧ-G`cbyTHkbt @I7=Q-FѰIX"}f|/"ĦYDP0UvmX9.xB+ofx4lɇ )G6Lh.>"/!r,r$x UPba!a7MCu̧ 0Mme)&Xprd*9cp|q,]X"J_SCS5=j`S(O(o\j1fsdg$DZYp7Xev;ڗK^6xS4HF 53ʇMA'8s~-gendstream +endobj +3891 0 obj << +/Type /Page +/Contents 3892 0 R +/Resources 3890 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 3889 0 R +/Annots [ 3894 0 R ] +>> endobj +3894 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [131.316 644.136 458.066 655.826] +/Subtype/Link/A<> +>> endobj +3893 0 obj << +/D [3891 0 R /XYZ 85.039 786.531 null] +>> endobj +34 0 obj << +/D [3891 0 R /XYZ 85.039 628.693 null] +>> endobj +3895 0 obj << +/D [3891 0 R /XYZ 85.039 602.079 null] +>> endobj +3890 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3898 0 obj << +/Length 2659 +/Filter /FlateDecode +>> +stream +xڕYKFWhs X`q֛:'( 18 LoIJ`aT]UUUS-"S,#/, cëh^)ᰱ cka<3rDMgydUmh3S_O~)~W: N %5fƷ_nyxWcc;=:&c(|= sXC!4/Z( 5pM¸>׿@')cZ,s U!* Hu  Y"wNwH0ɱoLgYA$M__Su&f1L>"?M'Nֻ!N2'ex.|?.b 8ДIxy,WU7dTBrxTfNKS%U'c&ho#KTUu9_&6ӓD ;+h\WK(&]Qztp,iT6..KR_]?J_>,,>#0!EPsɃ)&f|'}(jKDkZ*"Jl[o|+ +}K s)c8$ 2ڸ&'JYvT,֮f"}j"m\;757ڼ\9Oi_TrRwcW*ʹUF2&qq+p5ύWQe`' 3gƚy~aendstream +endobj +3897 0 obj << +/Type /Page +/Contents 3898 0 R +/Resources 3896 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 3889 0 R +/Annots [ 3901 0 R 3902 0 R 3905 0 R ] +>> endobj +3901 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [313.377 617.253 415.127 628.943] +/Subtype/Link/A<> +>> endobj +3902 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [367.537 603.704 509.276 615.394] +/Subtype /Link +/A << /S /GoTo /D (compiling) >> +>> endobj +3905 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [169.225 164.014 247.309 175.704] +/Subtype /Link +/A << /S /GoTo /D (securing-samba) >> +>> endobj +3899 0 obj << +/D [3897 0 R /XYZ 85.039 786.531 null] +>> endobj +38 0 obj << +/D [3897 0 R /XYZ 85.039 766.606 null] +>> endobj +2956 0 obj << +/D [3897 0 R /XYZ 85.039 676.205 null] +>> endobj +42 0 obj << +/D [3897 0 R /XYZ 85.039 676.205 null] +>> endobj +3900 0 obj << +/D [3897 0 R /XYZ 85.039 644.68 null] +>> endobj +46 0 obj << +/D [3897 0 R /XYZ 85.039 547.614 null] +>> endobj +3903 0 obj << +/D [3897 0 R /XYZ 85.039 517.412 null] +>> endobj +50 0 obj << +/D [3897 0 R /XYZ 85.039 449.416 null] +>> endobj +3904 0 obj << +/D [3897 0 R /XYZ 85.039 428.219 null] +>> endobj +54 0 obj << +/D [3897 0 R /XYZ 85.039 149.745 null] +>> endobj +3906 0 obj << +/D [3897 0 R /XYZ 85.039 129.151 null] +>> endobj +3896 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3909 0 obj << +/Length 3087 +/Filter /FlateDecode +>> +stream +x]۶~ 5c@qqƱun:Ix%H|~%꒙db/ZZhH؏Z7b3Q7Y]o:6#/7?y\^/WIz߾[w27o+XRy@W~N(_o~%XlL Ɓ]nLh.on~hY9+e}Fϋ.8х0|E(:B_pDd 0ER{XlHʩel8Ć lh46NIazz$2Lq3Y7#nfsv<>#f}u](S# [> 9nO{2#x9R!e{YQf% B"#1["ZʩABemn/Uy'RH8Y"Xp?Ez\X:cg@YaOH+x@',>Jv/TT>`?ÙxhȖkD*iZ6Ȃz + S 5O$F O44HkϠ;FQ _=~7u4 ǀB4  :6<8%^]Tb+N}vMPElo+8G Aݻ}Ne㗷$ڕRM&-uVMeCXOx8+iQ½Ѧ~̏% kZNۀu.j/ z]?V:Ύ~0 %*U^*csoO߁!P;֠U_.Ft" +M7Jӥo޼+w8g돂ɪ)/2k\SfW\^=5 cջsPSЬ_4m,#}fB|0=oDO,%q9\Gb49S/ ěL\.g4pŃ &[O<^}`%$2>f-ʺL[`1 ~fH>ڴ3!(K6GO}L ^\[*ȱ. -vy0\͆VWҗf/#ʐC_M^"%%Ҙ> Svc *(71Aϖ'm2Qԃ@ƨMЎk#~xQj=98|8`VnvL#? KHj,,z[sz:uqha+"pxĐIA B Q(7K2,fZ4C~e>Y̧\pƜ#NPcSW_,QZ>5rȻ`Nõu4oϒױ\PTGnr.JDiu'e/΍!\B24p#Hh H ɐ1WcQAR d f;7B"P9'' P՜5FҫQ<=C_棻.rZa +(("Q1gzR`"K(TnS?jQ48'(GƆ1 +\ ^( aB;Cq4}n +\nJhtE +'V|XDnW(}A{;VBr7n)޶Z%af E[b + M eF<8h}e`- +}k!fHMBaW3ÙQQVenY J WkLbM~ۈtjuVZ.Kf 镀gs=J%⛹/" "$V"y,T'YNWݵشeĹ .~{Fuz]K"b=籀A"@dJ +.g7&}#Ti8YX3E+Bkl!\@Aylr?fDH𱾃 @Z^K}hK':0~ƃ}팙맃mJ11ak$ܪZ]qjxΊB1S: 9Ӿ>u RI1#0"?Uuǡi VNLyp3J#и%|Q^|I3h.3gg%ŲޡM'C0%Ou8&_Έwf&Q7W|m|xppЦ~l-%ԁ^C >lvqzR>wBF$oC)a1Bo0I|<zM0}?cS J^76CDt7Sf‡oӰA]?~ US2J]!N}lbT'̱HfHnˤ=IKkR81p +יO4|v(W:MһS >(5PKbr)U75tlq$q9'T?Ž(ÅH" n@jz^}'Wu`>Psp Ei.7q{pe4քy$a7AIӸBq ]6CkO5܇{_&U!sƊc%.+qgh_!atG9}# |eĹcKzTe#;I+3S46$p5$i1>{B@͐ijqK0/Th}koJWh"/+*>¬yP_oGIA ^vtJa3]<zzPRAh&}zݿ!TcZ,kZ(QK# kw~2ZJ}ԿB󓒕躡K)@_Ǩ:!+H6 g=r͵ݿrBtJ ozaRxPt=Tݵ7# F^vǼG4voRߦDPƉ陡3ԏR=endstream +endobj +3908 0 obj << +/Type /Page +/Contents 3909 0 R +/Resources 3907 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 3889 0 R +/Annots [ 3912 0 R 3913 0 R 3918 0 R 3919 0 R ] +>> endobj +3912 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [470.223 690.985 512.306 702.977] +/Subtype/Link/A<> +>> endobj +3913 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 677.738 193.489 689.428] +/Subtype/Link/A<> +>> endobj +3918 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [293.723 140.375 341.14 152.065] +/Subtype /Link +/A << /S /GoTo /D (diagnosis) >> +>> endobj +3919 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [225.07 126.826 427.223 138.516] +/Subtype /Link +/A << /S /GoTo /D (problems) >> +>> endobj +3910 0 obj << +/D [3908 0 R /XYZ 85.039 786.531 null] +>> endobj +58 0 obj << +/D [3908 0 R /XYZ 85.039 766.606 null] +>> endobj +3911 0 obj << +/D [3908 0 R /XYZ 85.039 748.602 null] +>> endobj +62 0 obj << +/D [3908 0 R /XYZ 85.039 610.22 null] +>> endobj +3914 0 obj << +/D [3908 0 R /XYZ 85.039 578.694 null] +>> endobj +66 0 obj << +/D [3908 0 R /XYZ 85.039 453.924 null] +>> endobj +3915 0 obj << +/D [3908 0 R /XYZ 85.039 425.126 null] +>> endobj +70 0 obj << +/D [3908 0 R /XYZ 85.039 313.904 null] +>> endobj +3916 0 obj << +/D [3908 0 R /XYZ 85.039 266.376 null] +>> endobj +74 0 obj << +/D [3908 0 R /XYZ 85.039 183.05 null] +>> endobj +3917 0 obj << +/D [3908 0 R /XYZ 85.039 154.252 null] +>> endobj +3907 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F35 2888 0 R /F56 2898 0 R /F14 2903 0 R /F11 2906 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3922 0 obj << +/Length 2306 +/Filter /FlateDecode +>> +stream +xڵko6{~/kE,pX5E]Ul--4d9b9MXNc$&JN 1Yʿ.dWߙt"E섛?t37ΔRQOgYf?L}doSdc:?_Np~s:E*|~b~rvcK&ۋTX*7iZ:]cj0f.UgLlUjԠLb%IulҌt(L.zWm qU&u5U"S*g;R,ٳd8M~:Kl}BV6 +P0[;{4K.4K$Q·oyPrΫpIvTɷ$r^fπ6Es_ZA.@-3ft$fʉd|JWmZNfHjohI#D9ٳћۼ| س ¸ "qmQ B(NdL;eInRmy#M], bf9p_^ C#}Z)q+ٕR [ӬctT+9jd&e_ƼO|lM[V: X2eM'7 +Qml%&zԅ#Yvf9~@vD],AK'{ҽ _.z`%GO_6X%55 +Suuɩ;8;m>[k@cK9ՉhnvMnCP$jb { WUWxYZ9 9q6<%vex`B l ڲuN>>:mUž ee ;4$j<IS[r6@EZ@^|,nO6R'7{bч)9}8h*yæJϗ_U&bG>9Hut f% +EgK]k38IpjCL`2]27ŷ_۫C+ orvՉT8ã'V1z~y|)&p!]]h.R8/"7i4$ܟ7 ܬPoQ;ԱԙL:C&Ԯe0k>N >P + +H'L8ZZZ,v*IyH(@tRǴu*H.8&!쥙;^G\?kĥxT'ĥӬ6yjVY2F;{P/ъlĭKq#: SdkE\fFxpi;~6YqgIvps2y=mŨzgN/I^vz(/KD'iN#Sq^-%'N?W-^O_:6o@woJF뛑g *L.<%x.^3p"A@}J[1tƠF ghz\qV%XN]h^tDd;zw%֚ͰPWh-CPȩETEV[l ]E,5|ħ+x '@ѮYشy։s amмa +9O?^]Ve +ÜEr72 DbM S5TQv*6FP}.yiRU)IFe 74*@yXJŽGk݁&G#{@uJSקb6aR rV +뻢 !5 +([lA(UK"tߧqn]i[JeG~"򩞎;Oax69uG@3OO#6/|ҙYy_̈M97\i1CWSt;X]cpYAhr rPan1 ;b3jdysK S X| G) ـ3 J!|m +{ć,) /pPw#=eX+kF8 endstream +endobj +3921 0 obj << +/Type /Page +/Contents 3922 0 R +/Resources 3920 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 3889 0 R +>> endobj +3923 0 obj << +/D [3921 0 R /XYZ 85.039 786.531 null] +>> endobj +78 0 obj << +/D [3921 0 R /XYZ 85.039 766.606 null] +>> endobj +3924 0 obj << +/D [3921 0 R /XYZ 85.039 744.844 null] +>> endobj +82 0 obj << +/D [3921 0 R /XYZ 85.039 700.36 null] +>> endobj +3925 0 obj << +/D [3921 0 R /XYZ 85.039 679.163 null] +>> endobj +3920 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F56 2898 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3928 0 obj << +/Length 647 +/Filter /FlateDecode +>> +stream +xڭMS0.oaYRoBŝN&$2ݵ7@(j#D MA+NNqS zw7|a.n8vilhtDRIbc,;e߼1,NOat~{D`H0t W3yd'8n""  $ࠜ W D+Љ*Fqb;f^qYxm~j3~_ж\rHvq[Ghk(ZPB^E^MIQ}$1@,7M\Q;_5Ţʗ.|)e[;_g'tVE)ʼstȅ޸#.dS׏pK݀GY$HA@\OEU* ++*+Z7hU]mR7Ml)_81MvN*cS^w; ,h1 oR]9գۑki 5Z W`,h( qTendstream +endobj +3927 0 obj << +/Type /Page +/Contents 3928 0 R +/Resources 3926 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 3889 0 R +>> endobj +3929 0 obj << +/D [3927 0 R /XYZ 85.039 786.531 null] +>> endobj +86 0 obj << +/D [3927 0 R /XYZ 85.039 766.606 null] +>> endobj +3930 0 obj << +/D [3927 0 R /XYZ 85.039 732.329 null] +>> endobj +3926 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3933 0 obj << +/Length 409 +/Filter /FlateDecode +>> +stream +x}R=s0 +8Pڻ$]-AHW[/Iq> " C H +y V ++Bu:_I6lcHb*Gu|oWdJ CT@ s]p# 1 Q4dqN w |L~zh?UA60dE@Nzj m/ʩ#Ϭn-e.S0d`'x + c~,-_0,n?/XoIDqH~[vK5)'~e(s,'"t%S^1 .vޤm :K#ҩ2J>=AH47A4]͡τJV1e!_JC;+endstream +endobj +3932 0 obj << +/Type /Page +/Contents 3933 0 R +/Resources 3931 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 3936 0 R +>> endobj +3934 0 obj << +/D [3932 0 R /XYZ 85.039 786.531 null] +>> endobj +90 0 obj << +/D [3932 0 R /XYZ 85.039 766.606 null] +>> endobj +2957 0 obj << +/D [3932 0 R /XYZ 85.039 672.187 null] +>> endobj +94 0 obj << +/D [3932 0 R /XYZ 85.039 672.187 null] +>> endobj +3935 0 obj << +/D [3932 0 R /XYZ 85.039 647.469 null] +>> endobj +3931 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3939 0 obj << +/Length 252 +/Filter /FlateDecode +>> +stream +xuPN1+\[vm (N!D)HK% 9,\R@.&erˏݺ w M Q)A YdҩDĕ蛫ۀ. ]Li0B{-ZF?ڎ-`C?4bU@D^Qi5~ڎX%_/H<Άf=:E{W 1e-4e RGshjn.7xm,t dendstream +endobj +3938 0 obj << +/Type /Page +/Contents 3939 0 R +/Resources 3937 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 3936 0 R +>> endobj +3940 0 obj << +/D [3938 0 R /XYZ 85.039 786.531 null] +>> endobj +98 0 obj << +/D [3938 0 R /XYZ 85.039 547.583 null] +>> endobj +3937 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3943 0 obj << +/Length 3124 +/Filter /FlateDecode +>> +stream +xڍZKϯh E0PC{٘YؽYG؃-! 7h;_UHAUVeVV>L:| +_~VOi +6f! ++?'&fvD~IL#L#?~(D=wOa*ʏi2hb[/V~+:-?s[.B_;~Co /k+Ȗb?NJ?a*X-$@¯%EfO=N-IQ"5=./B-y{ޤ?2R +/pP !:9sڌ_^yKhcexWyW7RX +xx+]ϣxf"s\}|kTA)A^@_eVcb,tQpN;w> j$#*yBE"ZDj־>/B +*K4#x Y &sَ/ uQy A 'V;mېjQE +DilGc*&rZ@Z, J"]Aw!0F6m&Uv`l-rDX GXb8ylȂɿU퐤ްW!_ LOݨm>/+anhA70?SevF.Zp D.k Q(M jUf o&yJoeqt@ԛYuE01RbI$Qh'be-òrS7C3zdđ8$xº":^DB?Cq웹/ekWβK4yh\-@f_%bG[@-j~̻7{c?}J4ٙXܐv{e{?YQ"j0tlF#cxr(¬Fc09.r-*']M蝒YQ=phqIJaS+GU bDg]}X8p2;.rh t"(t \}Ó/;=yK}CҌ(cѯa7{&@#rgx` uy}i&I%+:1BrZ3l%cݐCoe9w‹; +Epn,pdloMWYor.@DlpbP3[*KΆ#TDm-b +$|•7 M&U'0Jy!%o"Ec:!7RB +^Q=Nb= +SE ‡ӂ *\o$ prP0Ø`U8lfkkٷZ=VT\ݝ-Lð +skpVBTn&JgTᐻhgAdNd,:S00sʽM^ +q.!ml BRշe,Xv.o{#̖PI ?P,BjmڜTmZhl+"[{"8>C5>|oS2 Mgs5GdE7TnEipýRB*);W8T0vc")|OUqО[s Y-Jw-eJvcxt\#ԍy +Tཬy"#dCT0G'|幷 )(mMMiƋ` cY<+#Q:H3(1~"[>ȳsIwn,PnDg:G%~{J2mqeu-`0<?MCtn5A%&v'T-ᨠQ2-QV~#~6*.ӆ0zF*$_m=qmyO c*SϦK 6U59}'ꁾ;Gߤ~#}SCW+;븪,Fu0nˌ\&-)|E"_Kgr߶9b ?L*UvJ` XZfgj-}ژbG2b? X={ \ߍwX noiI0swB?NRCk~t`ꀘ@YۉN h00tGSVi &Uz8S N_n{1dK9j«sɎ0MM(`P Z1 ´mׅ+$o)ѼrX )Kq^紩GQϻ/O8 +X c5,$((d쁦;Ghߤ~QB4g$Iiq; 02 )N:8' f}䊛bR( QtbyL#D# :W=Od8XNa,PB^[L +炯cvO'6̌+J)尰.tͷ|<w~ȍThWk=|!6~ڗ8t`.P0u0p湎$f(}#gc?84_0 U&_0" g, xF@aݗilAg)&?_d k\pSxE=Vm>k%CsiLq.&Ah棬<If6bf9? rFj5*fi Ll)u2VHp1yendstream +endobj +3942 0 obj << +/Type /Page +/Contents 3943 0 R +/Resources 3941 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 3936 0 R +>> endobj +3944 0 obj << +/D [3942 0 R /XYZ 85.039 786.531 null] +>> endobj +3945 0 obj << +/D [3942 0 R /XYZ 85.039 766.606 null] +>> endobj +102 0 obj << +/D [3942 0 R /XYZ 85.039 766.606 null] +>> endobj +2958 0 obj << +/D [3942 0 R /XYZ 85.039 672.187 null] +>> endobj +106 0 obj << +/D [3942 0 R /XYZ 85.039 508.603 null] +>> endobj +3946 0 obj << +/D [3942 0 R /XYZ 85.039 481.989 null] +>> endobj +110 0 obj << +/D [3942 0 R /XYZ 85.039 123.831 null] +>> endobj +3947 0 obj << +/D [3942 0 R /XYZ 85.039 92.305 null] +>> endobj +3941 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3950 0 obj << +/Length 3740 +/Filter /FlateDecode +>> +stream +xڝZ[s۶~[&7t'v}`$f#*IͿ?{JĢBE"OTdE*1z^Dυ+! +h]\څT{OHw?/ջ+cҪ˫,˗z cZ寯-߼}8J/yw|KWw@m E5EL/9R( X#7{]9*`D*a$6AIRy$ЪNm`h[k'')QKLD<=oiuD۳7gy(l]6TpH D6L #&Q$zĽvCnO?$8Q=QkV~ǔgV%#&w26@a*IHw8b_Yzʉ31={3[T x$om9"ˎJ_;U m),W_ ؂E=.=ӾJ|=%rxtޣ Of?&"ffjOqGr=#ZU^+i0Z}9C*0uCZ/dm%۲f!F/+jLI}x)8O[ѭVku"JrHBäUƦ +IfTBk/ޗS]=\ROi7c  ^ +kp/.$ge"S6ٓGWf0gD LA^]wZХ0\nf p>N~ /8W;"ڥ$Ժ\i( "앍c2`\XrVvTnx}!,塝>J\lhD$?h##x k)l*tx3N0(YJSS35%'.ly! 9f2ʦ!.C +XY^2#=Q_ Sbė/Uj0Rk)KZApXȑ9KQB@H!u5ZY\ЋbMBİ"$ +M4,rVlfG3Qb]^8w[3A8ɣ/3 =e ? UX]w_g%9$wvdtcx`M'lyN[X"~pE3(Grid>x)yϧ*pBͦg*AjM=vd'bf8(pb +a-rrGNé(x}NAUD05^;t[s()#d +\T:G6%}2 W{.Wf3FwLh@|_Dfr87\fϓ%$fZpPj_:t789%y"Kq2X[E-E8Aܓ kJsZ,yU+鐖ĕ# x)?6]Eɏ +_gHd$&3ajF$)RP$m$2c6<1HQ䁎xƃf@[?p+XF3,p} + +7C}^Vk==I< +x]gII#jj.%9ƩIM[3ߟ1qa*Itszt # +Lv +׽t`tgʲl0M +{OڛzGw- Q}:e$:߃ hN8ck#Si<r|+Wo\'QQc~۔\_σ-ӏܸf42S uJBKL=:Ak)m.q0{M].Uh.SFj ŸmHGNAF\FfաnYyQQj` +$Y"I<}qkJHWEdx)X XdnsL`ܪ4KLd)Q͒08,99xQͤ!}-?1- u \> endobj +3951 0 obj << +/D [3949 0 R /XYZ 85.039 786.531 null] +>> endobj +114 0 obj << +/D [3949 0 R /XYZ 85.039 589.64 null] +>> endobj +3952 0 obj << +/D [3949 0 R /XYZ 85.039 560.235 null] +>> endobj +118 0 obj << +/D [3949 0 R /XYZ 85.039 276.776 null] +>> endobj +3953 0 obj << +/D [3949 0 R /XYZ 85.039 253.458 null] +>> endobj +3954 0 obj << +/D [3949 0 R /XYZ 85.039 169.378 null] +>> endobj +3955 0 obj << +/D [3949 0 R /XYZ 85.039 155.222 null] +>> endobj +3948 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F14 2903 0 R /F20 2873 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3958 0 obj << +/Length 2940 +/Filter /FlateDecode +>> +stream +x˒6>_#UaH#U>$T&Fu8b"'$}>$r[Vn4Fs*ߤ85jwW@06|{uC_~餾iwoo_cP7qxuZ޿_Øw-ζϯxŗM^q۞Uc?~_J?^ʤƾ +tu +Q642/Wi1,\9X(Kv$ z[0&ڼc~xqn(x| ەE^!y;pb#M +^r\;tʮx!Zwr.Zj^̿t-#1-\sR;eu:ݷ0W:JV3./Pu< 힧`B*{!EjN $Pg*́E~ % Ypm-JwcjB M(N 3ބb:AM]88ݴ hN褱 +:Zk淋q;5(i4R0`2E6:UjOō{?3Gl"c3~{`[lNlxgp1tDqZʮ6#OCnp]%ieɀ@'Z7@N7zlM5(~D"b<-1y&eV7P5JqNyހhBo!P}S aDsy¢3 K;/C0jZtL zn:yCp^Qzo:x,RDŹgP됏H.jVΔJ'g<5S/}.xt :o af; iGXD(Z){Ğ;.UVNO2]ѡq,M' q^|tܣ|pON88qš3}Mb_072$όDb\'̩ts}gYpڦ;ؽсGm { .1N=ty0xS]TXko9HسQv5y+iloo'a=I ϷSV:YE֓w¤ +Юs$4h d yBZ ; +3{tGNF$Z^ˌ˨l/usVoy0Y>WFrm|HOb1ADnU2k D+ 0 40V[; ى;<:~y[zfebtKzU¦4'=~F)V3V$*PvPQ|,3MDqul0P6Jf|1 +XqB)qȇ!c*v ñy5LK44RshciaG"+,-2{O +<@`KE)u=ߤoTpP0 +-j,. :j: vM`'SO\|n?;f{*-,$*Lxɑ-\a2&]˕w^\jN.|g]5KߧoN-U*Iop[SUD߯X$}~UW:LhZ"_mrXJ5o˾kbɤ70}I 5;?ih$kD3{Ǿ_}%g\󖲐uQ/+Xɸc3Yad%.bHQ(tVB,Cظ`)I:rnBU9>~*⏼.`krE>3S.~ USygKjI 2%U\ mq(TO q7x +8mB]3]wR:`QR}rPڴr4F)LZElF +!`(=2'84&LGzx!"Ppb7&ӤXH۲o0"*4GGsy- ۤCXSK]FV'@iG(G '4Ӿ8ʀWݹ~.ߐ>d^>º^8\wߎ͓Ȳ`f?ep~1O\oR,"m]g3oY,)D6k՛R 4Os.iבs5cE7D-KN bOń֓8/K&Th_0|TYُ?Ho!<=f}:fycvPr_Z,endstream +endobj +3957 0 obj << +/Type /Page +/Contents 3958 0 R +/Resources 3956 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 3936 0 R +>> endobj +3959 0 obj << +/D [3957 0 R /XYZ 85.039 786.531 null] +>> endobj +122 0 obj << +/D [3957 0 R /XYZ 85.039 724.106 null] +>> endobj +3960 0 obj << +/D [3957 0 R /XYZ 85.039 704.117 null] +>> endobj +126 0 obj << +/D [3957 0 R /XYZ 85.039 615.128 null] +>> endobj +3961 0 obj << +/D [3957 0 R /XYZ 85.039 593.932 null] +>> endobj +130 0 obj << +/D [3957 0 R /XYZ 85.039 323.557 null] +>> endobj +3962 0 obj << +/D [3957 0 R /XYZ 85.039 300.841 null] +>> endobj +134 0 obj << +/D [3957 0 R /XYZ 85.039 184.754 null] +>> endobj +3963 0 obj << +/D [3957 0 R /XYZ 85.039 162.893 null] +>> endobj +138 0 obj << +/D [3957 0 R /XYZ 85.039 107.848 null] +>> endobj +3964 0 obj << +/D [3957 0 R /XYZ 85.039 87.253 null] +>> endobj +3956 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F35 2888 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3968 0 obj << +/Length 3060 +/Filter /FlateDecode +>> +stream +xڥko8{~dbEz-p8u68WBDm$Aʔ%{W)r8{I@e$Ed9 &i |;0'/D" |ed{wS_)i1$҃9)70e?ů+> +'_O}];9ͼ#ԹT +rd W$*K'0̲DGJDZɿ;\'k+JE![TEF)3It(@liŮ.ۧYV/m]{?lMZ}?ޗ?Ip_i*Aīj`ᲨkU ڻHMo`oi*0 /`&/])l!L!ks˭%`>vI|s}aDWn0_zZGo\6aۂwfrULpP# $NP# ;@G=Q0;Lx/)A۞=Aq@i Ap_ cā +hxk4^T[i +.gޮ) 9誨Yqj^;= +d|Ě6EEJβ^ P/61:Bk\2zmhG寵=# =9xl#0yI|$yyjZbІi̔b?,ixl]UF|[X٠ToQ'K>ĿӳC~0D z:ID}ΞaߥT"2TG?K-\nz q8 4.`P``G?xQ, 䈰3%(_d-Zf>oH1P?zЋ֪}CbRAD w_H9TQz4&TB1<+<<<vRdx#LDI>nȐbxUQ(4(0|Ha1]`1xyYNz2^AjҨXd:D1g2.ȫV{OH{d'ƟG#(@;Y>Uts AbM/3*aӎs"i#ҍ/g4D Qr;Tt.VchI6 _~dӦ^{rzӆ/"t/BIW8%S̃M?Ͽ8b!9{g$38vQ.>(bL23c*WOtKr2>NH̔t8Q ~_4|+L~$-15.!~^. %~;q?V*+Ԓ Rj!JZ+l u$JbiH:W#ک3!°sW5$V87~`J~ L~%:6i{@8^ĉ<`MSz]VSץe*.ԄxHFwZ"fPO&DFN5iOBbn D&b%_҅2=uksWdk:ܔi,Kތ cYS#)aD] b 4T9.BwƙY# 3h53YSE0Wg53ϝ +Qǚ aT-cAJ$'a;"gK)޹;#'҉ noLΥײx4RIAwc""9CgZqȯ14զES}(A G3t~g +"ܱS'@w cCSVH H"8g%Xϱ|R[0,*ԚZk3kQI]^Pl; d>Ns~zEvB0Y8Ӵ%ѮuQRj\o]ʳ;Kh']O.j D E"K% +'CH!IYendstream +endobj +3967 0 obj << +/Type /Page +/Contents 3968 0 R +/Resources 3966 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 3936 0 R +/Annots [ 3978 0 R 3979 0 R ] +>> endobj +3965 0 obj << +/Type /XObject +/Subtype /Form +/FormType 1 +/PTEX.FileName (./xslt/figures/note.pdf) +/PTEX.PageNumber 1 +/PTEX.InfoDict 3981 0 R +/Matrix [1 0 0 1 0 0] +/BBox [0 0 27 27] +/Resources << +/ProcSet [ /PDF ] +/ExtGState << +/R4 3982 0 R +>>>> +/Length 3983 0 R +/Filter /FlateDecode +>> +stream +xeU9,Ge@@Q !%bd(dʤ( +$T)_acڿG=1Fl]tquݦ5<8Ǘ:\;&Ї h:X=&02oC eD3PMt1CrZb7}tmAd'W!KO(ԤtKb^ *BFmY`UՐ -nܞ `*Tޣjg=sAR? =}ځl +ϒig٥C6u&\ GTMKlFyu|?%iȥKNq{v*JE]8hp0R$(+ nN +qѫ^>> .13ׅӃ!3SAՔihŨ^(<m䦽lL7aƴd 6(WںK +г2"E9~ +n*1xƈp&XîÜ\D0}#X>#^V|2i9΁r)`Xh&hbHe"ʱ~ϓatZD!#Zk!e'j=_ts٬&N@i3t%kЁE\HYZx/U@iW H +rGX58ժOt$yBқ5/vpo`kAr 4N.4&FTG%V'R5Bԋ`qUv-U=Qv2_ qq~r5JhPkڏ>D oiCrT]MJֹ;Z [-Bxp|endstream +endobj +3981 0 obj +<< +/Producer (AFPL Ghostscript 6.50) +>> +endobj +3982 0 obj +<< +/Type /ExtGState +/Name /R4 +/TR /Identity +/OPM 1 +/SM 0.02 +/SA true +>> +endobj +3983 0 obj +1049 +endobj +3978 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [191.71 248.336 283.127 260.026] +/Subtype /Link +/A << /S /GoTo /D (winbind) >> +>> endobj +3979 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [394.643 234.787 476.35 246.477] +/Subtype /Link +/A << /S /GoTo /D (domain-member) >> +>> endobj +3969 0 obj << +/D [3967 0 R /XYZ 85.039 786.531 null] +>> endobj +3970 0 obj << +/D [3967 0 R /XYZ 85.039 682.791 null] +>> endobj +3971 0 obj << +/D [3967 0 R /XYZ 85.039 657.814 null] +>> endobj +142 0 obj << +/D [3967 0 R /XYZ 85.039 209.09 null] +>> endobj +3980 0 obj << +/D [3967 0 R /XYZ 85.039 185.108 null] +>> endobj +3966 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F72 3974 0 R /F18 3977 0 R /F20 2873 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3986 0 obj << +/Length 2895 +/Filter /FlateDecode +>> +stream +xڥZY8~_G7V$1g2v8#?ƉA-U-oI9u} sQ )v^F6:]%t!Q~Qp+bI;bQ tN*JC/JRbγ̅f3?K}ux^>}6ڞ5R`򽑩7-=Qಬ_ Y!#w8Juu>!7u_pEw$Khb]ഁGcr>깷u[@#OI/)x~XqC,G>Mu07A5Yo%bo8e{|B7>tXfDj < ȃ%0yZf9x& I$Zk :Y + +bE^YN,[nxdz"n贶,z61rNtHY"kTɮ]#tu?P2p]t6Bc/L8BWL@JIáH5%QD @{{n k|^l(8,Z֚Jϲ+f-o\CꢓxM&L5IbRl: 8LI3 5}w138ؕ% ![A*-Ϙ8m8s]Hɦ`ri%J`CX:aK/! Rp觬 +x Z;|& +\~^ +H0!a[sF~zaCz5_I& \lLB&'OJAH(>NB9R3u4/q`48>'nq@ֈ,hIʴg,rgزʁ@!"] xXʼcoz\i`M4մ&79#VJN -r6⻔(xz+y&20IˤLw15 ڂN +ژQiLj5#A9WFoM~˭g !m_egSu!kag=IfmϭgY=cx1L')h"wYG'F*E }wj2w+αuZ×BPMes0X<}qF"cNtLӛ f!pNF\3 8wYB‚.MEgR"74:XvPYI `/(WNX XM+cA=n9X,,ygpQ%E8W)t(LJ ;|;Iբq5c/[B-@G7Z3$Զ0SKzualY!p֜L0M@/B`$0hVę2˨뢢Lj.gO\_|9Mh +{%Aіo ?`a\lTr22aAf.T/NÃ~iSoRv$&>!=hoze¾Yœb$ ly7߻0olSڏfCi߂(4 "C6'ܥD]sǼz+,FnMC*/N3ўG}w3 (NdҝilRQGkP̬b9b+s$}hle5!5@o"/@M"q@&x1p& 1}oKԁ)MJ=JY%Lv5ܩ+-&΅0 MDA.mj̭I͡X_=le\xm9fexǛɠ+ْaZfDT> endobj +3989 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [209.297 585.761 309.974 597.45] +/Subtype /Link +/A << /S /GoTo /D (domain-member) >> +>> endobj +3990 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [330.926 585.761 472.531 597.45] +/Subtype /Link +/A << /S /GoTo /D (ads-member) >> +>> endobj +3987 0 obj << +/D [3985 0 R /XYZ 85.039 786.531 null] +>> endobj +146 0 obj << +/D [3985 0 R /XYZ 85.039 738.261 null] +>> endobj +3988 0 obj << +/D [3985 0 R /XYZ 85.039 717.666 null] +>> endobj +150 0 obj << +/D [3985 0 R /XYZ 85.039 557.943 null] +>> endobj +3991 0 obj << +/D [3985 0 R /XYZ 85.039 536.082 null] +>> endobj +3984 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F35 2888 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +3996 0 obj << +/Length 3214 +/Filter /FlateDecode +>> +stream +xڥ]oFݿBD Kr靋A[DIl(R!8%e"|ffi:4cfE0?/`,e1yxcTgA6[n,,-׿z_ 1w3WR#og0K |\-?1K}śct$zl "t:Kgw0|eEk?̫;ZxהV0Cp8gBőQ:+:pe#▍@&Vp6L"sqgM*pq7W>S'R7hw5J@+-+'3Rd`,7&ffe?Ph* Ld=C&e0IqaY/:}feޛPI.H T=yo}7OsPKL$q>teEHw7H~naKS/rr|5 ՍS|qi46%^ uw`a2`EB9* .{f@V)v iMzB9퐘Ǣ(Rb_5fBfT/@eԣOq "^{1Pt]Ӯ;?@9gis>A|vgLgrG|#C:gqL98P^/4W 2 ͽIr+0Aq/f1s +a R\BardIl=os(Dbf4dP6sV0䪺g +eKm؁4r {]ȩP<{]Seǜ[^*eْn9IZ++=%;#qwXt$MxINٴ:E'&ևNq6G2*oAGk-2 g!@i +?[q`Gs1RuW= mjyJ*Ф]Ccvq@Ax$;Nנ2,m\U4[[} +Sn_8xLoT웞@ }&/gX m:\VJQLJuвOqi a&GJKfw\;Q1 )S(f8rX±62)~5F06j3s^"\~JBahn+~ q>rsJ:td;1!ỡ]+&c.tŰT:Ph9!JTY1᪚s jyDH% SIReКQmoMh[q0-:61]SVqyLq/ GQ^~" 9nwpRs#hVeȤ^Fy2KjTZigxݸ/\^Ыo&,yUrÕOaC;=Yp\_G?Jl_ICrS +5t$)]Q`!#0|k&+Vk_!>?Cn[WLIb"?1OXp]1h`B"u-ihٶqS%#`K 'Ŵ5/Og!!wR 6)5i(W.; _:nt:0(z"r@߂8/wڷSR{Ϲ"ܣh*r~SRo'Z.hͽ`|4CQz\ ;諞ѺEѱT:nsL(8+a` n>8Q9Ko*alx3u"H,.UKn@;_ZRP&)cv&} bh_5Uڽ25Q.^t#yrNh8Y cfYiE㧌g {6}L2q;H),/C/5Sk=SLtRMUG$$>>. ?kZHpUI&#jġ{c +S뉣$DJ?} w*ti|rK1wzvYkr@; +`rϋq٥a:j&8r8 w'*w]1q]%Hu]Ohy5:OB%]t(.MA!(/0tK TIOi\;f$ݏ~rGOE{[S_;|~__ʨeA6$oIjXPϓ2TBQWo2:2<}a}r#O^xru'ߚx|i\S/ۆĝ9^lo3g }* ж^ީESf7{Sۼ~7Wy +Ìo,u7Pf R/yz}pj85jcY=GO>с 4["3> endobj +3997 0 obj << +/D [3995 0 R /XYZ 85.039 786.531 null] +>> endobj +154 0 obj << +/D [3995 0 R /XYZ 85.039 590.863 null] +>> endobj +4001 0 obj << +/D [3995 0 R /XYZ 85.039 573.124 null] +>> endobj +158 0 obj << +/D [3995 0 R /XYZ 85.039 295.394 null] +>> endobj +4002 0 obj << +/D [3995 0 R /XYZ 85.039 263.868 null] +>> endobj +3994 0 obj << +/Font << /F64 3118 0 R /F72 3974 0 R /F18 3977 0 R /F73 4000 0 R /F20 2873 0 R /F66 3248 0 R /F15 2884 0 R /F35 2888 0 R /F14 2903 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4005 0 obj << +/Length 3335 +/Filter /FlateDecode +>> +stream +xڥ˒6>_#Ue1$-?&I֞ěJrHk%)_A[.!th"4Tʋ,LUo c#(w?dzGaG´Vw??z +ty|Xq~ c_F~|M<7O7wQ(Ro;ZH?D*0.F*L͇9Z +^$TaZKĩ'8NB'ѭ"x38η}=ebX NdWYBi*u%%ihvybٟ +|4wcp*xxz ͥ5/Y$(t +\oId}wp1 @)'r;3 +ZS4@ݝj_vcpG55$^cF!D;0J,FMwe"q8ZXp(p"+p&~WkܻF3 ß=G̝(7CzL̴M=W&uBWiv8QEĞ᪋|F}QvlX;ĴsoUZGg;RP%rO[<<[$.qyMg+:pn o+&) K͂2P耥 z[#h(9tL l\Ӫ, +OP$^/]<_@/[UzcJW(:pp.,8O*H_(pԉ~QTf1P8ܛg=1^qȧs7E <}% ~QV)6+wRI4q. &d?8zs@f`MעOtjH)IJ6rN + 2nw4_#=K"u}_U|W= +OSj6VvY7z "O6{.Nl]@>Lc:8;WdԐss [MVa9R? +N@e_Op4V7&:.weP8TCvviwKqZ?KW[1iRҸkmY8fV8p(>3ˆsf_ 6wbæil9E z"esw)qt+:Qmճ~^l U!#u-%{!Zsp̴,& 6;,5T02pj&"r;,BT#`Iڽ۪W^$$j`kK5DxZ624IpdwSiI1]ᨽԃs$ʛIR,>x8ΑTJg;GakS2x6u}*_eg¹hIu9%byg0}M̐ގL +_>񗫣oy!//,|C(>pQ&lOF_19!l] @GLF'/0;RHj)3O$aFz@w':p,TZVU뎗5UWR~bĩJ2 tGVMc_t $fuN{Ҹ^SL%u]? 5#ZΟ`;F =e_0餾I/o-JaW{4?^]rʢ_Dak%ӻTrA9AmHޙV={SJ]sQ=BNrK{'nepXsf"Ytu["NYx) q,e)MbꎶFv3s͆#QkӶ^De^2nP\ڟ̞|HI>[4gǍ^Dzlw]OIquυ\Yx^E0ęzQuKyS7%wt7$ t~ص<38.H'_ DFGYAL +{U|IF!ׅ8sƯlU~') gIPaY+']d_=˛< 楦 +U!P(ѫ煶¤=j_ؗir`y + sSMoD*xyTnL inS'׉n0q1w} {y]> }ms!L +抢4EzY2_9mɲIw-3x> endobj +4006 0 obj << +/D [4004 0 R /XYZ 85.039 786.531 null] +>> endobj +162 0 obj << +/D [4004 0 R /XYZ 85.039 283.986 null] +>> endobj +4007 0 obj << +/D [4004 0 R /XYZ 85.039 257.371 null] +>> endobj +166 0 obj << +/D [4004 0 R /XYZ 85.039 118.042 null] +>> endobj +4008 0 obj << +/D [4004 0 R /XYZ 85.039 99.17 null] +>> endobj +4003 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F66 3248 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4011 0 obj << +/Length 1937 +/Filter /FlateDecode +>> +stream +xڭXYoF~ׯ`Jі܃CjI $D[%!k)ʖ- 99q_dNE&,Qb3+Xy1b&$͓đʣ<_|H< Oӗ͟Ό1UYf4a.0e?÷s&~qt5ȓgo1 Hӗ(XJ'2y8RquF9k}=995CVq&S.3YX+ uN%6%t%*~,,[ ,|]f_xE%.ڰt6Sy~Ə~U_D_WL)󴅜x^lPv[h]q2RıJE~g}}SHHfevZM%e1>g@"F 7I^Gr".Jj.|ە~v'F\{4_jjanRNT`;7;XYHoA4BETtԀπ.iIBg9QV5O=6Y>:qRq'V:Id1*M`\ES_Uy1E8 ss;/>DzوE`P ul7oaz,kaK +K]IlVA$`Z4c\{:10|<tç !X *+9 nފ:<./H+&#V^D~jLmR}Rv8Y,zP3()Scή+CCbɤ`@$E]iۖ R(6:i1n3q|-, AK[A뵥 C uD1T1KU#Dzو>$D톴 7=^xx˜Zȱ04.(s|Z%E`iyAP2.QIftt%r8]jTO#̹\E2+ ыx|G\_rAm I% a.,:z;5$.%7=-X*܈x>٦1V,G2 pwG8rav]󚍘P%*ܞ*ߦJʺZEY=gt %% (~U ;輽ٶ4ɶf/b}ir]u+BSUzมȰ)3{i㛂 ee#,$f_x+~`On60n;PF"Wnڨѣ7a7ܷd+Tڋ뽕uhɢS)$#I!O I8.Quhk?!9 +I7$ pWCTr橂)Uk@;`1|:}{RX >siђrZw +}E 4KU֝,5jך]+A[ U @?ˌSSXK3}N*N.+dx_+endstream +endobj +4010 0 obj << +/Type /Page +/Contents 4011 0 R +/Resources 4009 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 3992 0 R +/Annots [ 4015 0 R ] +>> endobj +4015 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [285.267 598.718 366.899 610.408] +/Subtype /Link +/A << /S /GoTo /D (domain-member) >> +>> endobj +4012 0 obj << +/D [4010 0 R /XYZ 85.039 786.531 null] +>> endobj +170 0 obj << +/D [4010 0 R /XYZ 85.039 726.833 null] +>> endobj +4013 0 obj << +/D [4010 0 R /XYZ 85.039 705.84 null] +>> endobj +174 0 obj << +/D [4010 0 R /XYZ 85.039 661.355 null] +>> endobj +4014 0 obj << +/D [4010 0 R /XYZ 85.039 642.483 null] +>> endobj +178 0 obj << +/D [4010 0 R /XYZ 85.039 573.021 null] +>> endobj +4016 0 obj << +/D [4010 0 R /XYZ 85.039 549.704 null] +>> endobj +4009 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F66 3248 0 R /F20 2873 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4019 0 obj << +/Length 3251 +/Filter /FlateDecode +>> +stream +xڥے۶_y +5I(}v:IVJRJR{n)R;쌈p`ӛқ2)zA%7*\<<ݤun2Ίa(YD۝u4j:/wm3tmO~x1~kL`,Ix,0rALVI}D(VlO Ke57l.c)vVm^eb#~q]-Tmyu 8Vr@vtVP/pI}qlu@\7ZC=PQܱƪmVM3yxD˨ZC/g63K<4l& 0:~r_Wt$R0C3C x&3W0Ŏ']?X e5YȤ^Ue/xid[\{@*E$^4RJdh.y` ؋ŋ'8+p=m _4~^d ᮶^z(&0AήE޴V01^w`Vʲ ;|mAJp`a>v,nA?t^y֌E) (mT4+פDz{loM ہ{ۑ5Hha%P7=Z E;-^v,^24qA*/(/ԠH̒FɆ'yH?Y > CJˌ@6'FpRh6 =@kgIDI\ a&lc#̲ڎK?̎$G-DmPt;1KFI6>*ڀVٍ[Z)4QurSAl8CT#bh뺿hL?,JprXg6Nj$;Qt672VxDe<֌/Ow9Rq+elqd`X7]U>AAZ/RԳ^ЌqX(H>vi؋`W̢%1 +Jߝ>02^\2ҸL iQMjHhdY8~zy$;~l|Nviبa\B~ǻ{MbRI."mT\{˯0_2lh!&DžY2i + CmnQ_$P"@3Օ'J(zBNo; TN(VK-Mo~qqo"QĸMtA7̬ >ZlU:OѳJmw[;qƵVajxG݋&λvde۹`Gcf!)Cf3-M2]zϽ}tG/O92I=/,x9Pgzۃ(_]F3tZL QN`~BFPMt_|NQw ùFP&\?1N\LGWrbU2 o WW\榒g=.G1MTsʅts(.ݨb-@jQIRqGGNMWS@;%Q"eŦ(9Df+.rB-EZl ɞT8ݐ,X`)P^eg5Z#/5kX"ϰ@\YBNsXmg.0qn@sQPe5$FFeS9y 5P + 4`%{Yyh.DZD!e=t[Ϩ#4=:Q}6?.MXO۩׬De{zvGRZ-b+F`DGNJ )P0V\դ 8M1M-uglڐ(VlFgX!G9) +t-[ADLLx ^ ŞPPNs]B0NCi%!oBAV30f֝`;l0, $XirN5֊/h)1QW_&0m ɧ/Z +RZJUeaÁr3*4Rex[5oq ;*rp^e +Uf> yآJL#y>Q+HV}$^&u0B`+ʤ?<R{~=>2H=g7 7 s$.`^,CASn  ΰhk(MCw"H +`YWKEY3"Jzh_aƔc1`e]+"}e w` +,ubQ`76ΟDl7<q2Vma[%e-?u<)/‚6aa7&@'kczv(7KN(T>i&VEN,h/CciV~_~w0 C az}$@T%u:@.VjX 7 >_QI7f(R/+) Ӊf>?JͨA qޱ`ې Ƚ” +Cs WѨ2:=N 'U~]?5D'l41j> endobj +4020 0 obj << +/D [4018 0 R /XYZ 85.039 786.531 null] +>> endobj +182 0 obj << +/D [4018 0 R /XYZ 85.039 766.606 null] +>> endobj +2959 0 obj << +/D [4018 0 R /XYZ 85.039 676.205 null] +>> endobj +186 0 obj << +/D [4018 0 R /XYZ 85.039 231.642 null] +>> endobj +4021 0 obj << +/D [4018 0 R /XYZ 85.039 205.027 null] +>> endobj +4017 0 obj << +/Font << /F20 2873 0 R /F56 2898 0 R /F15 2884 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4024 0 obj << +/Length 3693 +/Filter /FlateDecode +>> +stream +xڭv6_ΩhonN6q6M67/߹$J~ !5 e|fk5+Wgf~9SI4S?Γwͯo~/^iyʻxwo >~ogoo, Jk$%Y<=A;UVgQ8o>hƫ؈,^N9zj`PQ'iz + .RU8[$Aab! gJy5(I0X=\[3ր'qg qv} s0N0߭Jg;2ޅU#3*N!r ;}up&b-Fu$x'# k<9~hT ;4)4MBƺc[k .-H~#{8+Z:= 5G%m1:!3;^?kC[-HpNm}|zW!Lʹ>I2 +ffÆxk +R+ +=PhzMOmhzIv{ǧ.6FAK!z6$<($ ml춷n8h. +1+F*h. ph-kqf\ޟw/Gy‡"ׅ''tNXq7UxZć(i5ϿyU1:/b;U;:7 +$%d4(G0HyJ|Qsd`,;˺(ͼ1HLcjԥ"9 y@ k\alQ=Wi5akdvlJŜޭ@'8dɧ$m`'RDbAEivUGd0^Ț*#k!#]BMXLBd62 %m4a̹f bӷj7"=(˂;⩻vۦgpηeQsB?yܾq6KAd@+.a2~|l"g0w#_֡S-Y⁴IDXg` 7^ sXt4ʒZWK^P`)t|qM6xz2%?8Xj| x[fC8l d'7>-.\`w6]B˘X.ET)\7^{W/@] 7y~%V?2l\JwR")[\s&?m!^^"oH%_ +/"2ie.-Ѕ(¯8d2Ro`w^X|xKu(%0t"ڞSƓh$yQ#i%\mo֤_A]1fh0%uj۱T(0r88M $qD-L"?S vD2LL),V:.41l`+?K]{ +~8}61D׉Mc`Rֺ^9jW)LU;m";1[KS:Xmw%^sTu_pr,pƐ VVJ/5%ԙyW醐vہW ǣ؇ pc/\ 1QS O[@N8#F?WR>Sg5n _WyY,w 18۴98c7_xRj5[\;Vܱ;(3B) q/f.uII`20zI]A<IYkc(3ƸYU-(gVHo"u)h#?׫s_Y9*)P*&nk=c12HSag"X|8|XsI7kWr+ [XE#|QiH̝{[$X#ʂ㜼A"Z iԊ*ٗ2@!8-x Fzc…Ma`=U0\sVUg*[{ٗ7#? +LeApc}x_̍-W",*uCXlq i2k~$;d|8@Q*I|62..Sqp*jE H> endobj +4026 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [387.747 631.127 454.872 644.029] +/Subtype /Link +/A << /S /GoTo /D (domain-member) >> +>> endobj +4027 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [155.951 618.184 190.52 629.874] +/Subtype /Link +/A << /S /GoTo /D (domain-member) >> +>> endobj +4028 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [253.407 177.601 331.566 189.291] +/Subtype /Link +/A << /S /GoTo /D (groupmapping) >> +>> endobj +4025 0 obj << +/D [4023 0 R /XYZ 85.039 786.531 null] +>> endobj +4022 0 obj << +/Font << /F64 3118 0 R /F72 3974 0 R /F18 3977 0 R /F15 2884 0 R /F14 2903 0 R /F66 3248 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4031 0 obj << +/Length 3639 +/Filter /FlateDecode +>> +stream +xڥr6_f"[ޜNztv>PeH@B%L'sYYfIgM0{݄?c3 ? f~ųoާ?uZ{?_$I2/OE:WO?~a !2 ?&u^av7&~do7p*450a|*`JI.SBq,r LNj97dOg~FGepG .ruxDPBezK[y/WsxOxgE wZ@UY N} _[d~tJpL(߷9'd9#?ӑ@-V֯* 2##Q\q7g,fd&oTj)GK.eR(} `Nʺ@zk6LpcvjI [Y^rYq~kʞg#tuɂK6nTFѪGoP"\ *Wf::),ۜ/:n_,_x8}6a!{< 5: R{dvu\hw Fy}.B:< +#:2/=WDnd ckUU]`ʸyW=5]b41K貱@o˫ٛG@ ;;w9֮]Œʎ\xwbYWwkGP\ +O8u8]E'M[Dg?"m~bw!&qDˆq`OǸ& GEVy޴!]. N$#O$9eFݞ%lYb&!a8~GJRž 2do!dZ"+xOJ<wU|[4p ~t4lϔe+9Tj.i$@b{)8zJْV s)םL~ПXu(*J~/(R0k 1ٳFD+T,GE* +1W{F]NO}K\.ל ;N=GF'aS08zTkҀ.iVb!x)8ﱀۢd\599CIpw(_3 ':sί7>B~~5 +nX|~Dn*I|'#\[?BYz!XbF Dbzyendstream +endobj +4030 0 obj << +/Type /Page +/Contents 4031 0 R +/Resources 4029 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4036 0 R +/Annots [ 4033 0 R ] +>> endobj +4033 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [241.412 559.852 391.634 571.542] +/Subtype /Link +/A << /S /GoTo /D (passdb) >> +>> endobj +4032 0 obj << +/D [4030 0 R /XYZ 85.039 786.531 null] +>> endobj +190 0 obj << +/D [4030 0 R /XYZ 85.039 344.408 null] +>> endobj +4034 0 obj << +/D [4030 0 R /XYZ 85.039 322.646 null] +>> endobj +194 0 obj << +/D [4030 0 R /XYZ 85.039 264.613 null] +>> endobj +4035 0 obj << +/D [4030 0 R /XYZ 85.039 243.416 null] +>> endobj +4029 0 obj << +/Font << /F64 3118 0 R /F14 2903 0 R /F66 3248 0 R /F15 2884 0 R /F72 3974 0 R /F18 3977 0 R /F35 2888 0 R /F20 2873 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4039 0 obj << +/Length 3892 +/Filter /FlateDecode +>> +stream +xڭZKs6WG䱳2]5$H%PIݚh:uHyZUt_B1G8 +˨~|rQqGpǟ~͕Rgˡ^ +q ,;Rߕby洨*M:كyxB$̈́ZԮ"hs1 3N'|M4KW#g+bUˬyetUfBEDG7 TBK>vj \]4-kDcYMgcI6Z=DzY5 C˿ւǪWZ$־$jJ Yض 8U6T!'Q#-Ifyl;:X[?qu6ήmj2M}fbL81>giIBO4Pi9#&s\,$I+Go %" +-hrؘK.@T?2͖{4_ұ/Sb%ͪ +쏠)~Yi(z`tqvh߷H(#<ؾ_kև +t&zOKL4gs@> Ԅu1wLNгlu(njJ* ܎ڢγN0@d>@BۏЪ^Z!p>mEv#<} =G d׀tjM≭ @+=߉Ė;5~a누Wzώn$H +K&g0iQqn&_XQH`!̡>Ku.5Gɕznl}PVJDvH:zLh%3*+FDXY .pпp +֠/@5v , +=<0!lCDI@) քCsFbB(;&ESX* @b2 EjtJ ys> ~Y_{TcK +ƂbP"L~$Eȕ {lJzo,A~(=D~Y;,gr}| i52$څ-10;F.`v}̜ Y &sW/-`Z@ q E59@Xmg,vlL *C85Y=(72c-_Q=>csH0Uj-,FAFV flD;94m\æ@JfMIɳޜv.T@a$ p!F_pXN8G=Ns3:9 +f5蘶NCav +p)Ei'i|Q!J Dừ]/̓#)#PGDP͹5[Rhn*(f]IlM֪ZHI_?'E&SiW1)#2ԅ}j a2RkUjwXP>.9o/fHiC%X$Ay]8KU^%Z𛖎J$a䣗rNb0[PwB'9UNJ($(]B!A [z iAyb.}_mՂ8- $'<Љ74C c24ſQ&E2ƴֹ .ufWd|c]Z1#Z yC_1L~޻L/vkmҚkIMrj(A"izg- =^BzЪ i= tw f3YTR:=Ozgm̍l _w14r + ]wuo$MX;?p3Ij³.Ec@@Iucgv3Pe?~f]Y~*zt-Av|3IESpT U$c ȸTl˭,r;D\W MycmlhutCjG+c:J/%oϿ,i #y-EŚgB\lqPi(l+EExziW-cUwҦ`bW)Zs@ ?A i$hNm{.7n,Zt ++d[nk|62Ͱ;rI KgUߗaEh@8.(.l%f(&%CҕnJ3݈wO%tpsEROzpA='`̮tS447)q]eʔU&R?|-[ +RKNZDrj`%̞4^d!c$e!fuJeG6U[Apka'yhw.0,3Z8uMܥΛa˾uȌ#4X J"5щydih7t%\/~Lgŭyd';9 *+(3s !eZ^I3Ĥ+(V\q +Y<Uynf> endobj +4040 0 obj << +/D [4038 0 R /XYZ 85.039 786.531 null] +>> endobj +198 0 obj << +/D [4038 0 R /XYZ 85.039 149.668 null] +>> endobj +4041 0 obj << +/D [4038 0 R /XYZ 85.039 128.471 null] +>> endobj +4037 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F66 3248 0 R /F14 2903 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4044 0 obj << +/Length 3358 +/Filter /FlateDecode +>> +stream +xr6PTՈ&>Sv2N2Si;!x~>$J\ve@wߠ;qϝDxFkwX9%t +L@f=g?u؉'vر8?˷wLkmtu~Z.nnr:s-캝c~"ӿ?][zHZ#˙ghmvx>|m_Z~buNMF4Yx$0$0J{87.@WWXWtic?ǎDI%`k"e>M>kVSJ"NWH %e*tFY@q:[:nDxlY7|oXc=nVc,( ?$E ܻ̐ +Dy:Pf`bSoKFHb˗+knEgFfeifgᥨN# jgj1o],| }߃sBE`?d%c8vĺTD" 2$[JR=ram k}v|θ;)_L[lkҚW1Dp8X0F 412 ;HہW,VH`оK]R ,$m B&<6 CCc@a"A>JɂX$6B޳ +Lk3\Wꝲ }R~ϻ#JXQTA%F(]zO #tO LCP>T + ۥ6*e8ƗVolZK +%v`AFw5N@v$/9?Ō}Ka!;"Uh +:t|'I2iBKl` v+8 d$17W6dj@ͳWq-MG˞L{b}Y-_hMj؇m^k|Y.6ܙcW9i ƌ|;!)"&ڏ)Shvùr`n1Ygf˵#_qaA Ў Bjo+fDiCR |;did{1eΠMtQڝ\Ud,;-yOwiĐH8h\F?R-Is%vt=E +)>w)Kc9*2&q󎂅X5$9+Jgb yVбg5+Ib݋rcߤK(G5ao YsSBCGi/XחÌktq9t<"0dF`BoW <-.x%z>AStxt`#E и$!KO.?x-%C:[&ԙo? G\'FP핒,FmG yv5u8HoӦr1Pi>cе}L |WAwgm tW7tQ.B &1< +aKBqU4MR2 +1웺.5 ʩ5Cp-4 B)/#ށ;A۹Ǎ"OD*`%>W5A7 á8gqWВXE[5RD}e՞킬wG̏|Un+b7x,% $DFb*2|":vd^9NN |Hctt0A uM9bj%=jN}ElBF :Hz/%'CwE\!xx$1M B?o&ke>V3hJgW%D7&ݸ:}Nj7a!ٍ˕1~04R\P=ȥfPz$KI̐򃕳?]~GG{C1Nz @0>\ٚCb&xeHgJ)`,=7tߛF+ـ\>R +䫓 > HRl" ]OZ`gs[ wRվQ7}~am@BmAZ<a>^Sendstream +endobj +4043 0 obj << +/Type /Page +/Contents 4044 0 R +/Resources 4042 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4036 0 R +/Annots [ 4046 0 R 4047 0 R 4048 0 R 4049 0 R ] +>> endobj +4046 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [372.214 454.382 454.872 467.283] +/Subtype /Link +/A << /S /GoTo /D (domain-member) >> +>> endobj +4047 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [155.951 441.438 176.004 453.128] +/Subtype /Link +/A << /S /GoTo /D (domain-member) >> +>> endobj +4048 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [430.884 336.518 476.755 349.42] +/Subtype /Link +/A << /S /GoTo /D (NetworkBrowsing) >> +>> endobj +4049 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [138.589 322.969 301.915 335.87] +/Subtype /Link +/A << /S /GoTo /D (integrate-ms-networks) >> +>> endobj +4045 0 obj << +/D [4043 0 R /XYZ 85.039 786.531 null] +>> endobj +4042 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F66 3248 0 R /F72 3974 0 R /F18 3977 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4052 0 obj << +/Length 3078 +/Filter /FlateDecode +>> +stream +xڥ]s6ݿBLE܃c'M:C%^(Q%);_H&ө,,֮&(6Y9f+X,8?5=7CO'\}s" CGEw\|f|;y;7?{߳0`Cdys$=s$mΔ]BWgwgi)yU` AqpߍSP/]^_WzfPay(gQNUA ]qC+@o 7f= nQ]{]fQ\ꄌ<^Ae::K"J ԬZ_iS D{S0G_gEd5-v !l=Hf1`Ɓ  MxTES%axM Ƚ-4I[sHZ*O ; hNNw}.hcۭ˖ +lojԜ5EWk#Hq;(2wqf4Td%:`TFf)۫K-0l=˄C X URlYnYcaXg(ea9jH2x$w]BEE+^}UqEBaB7FY+[ȔƦ*>RK1S*w_ޝ_~p3)袱KE^GFpk"SBE z@NΛꔆ}%WH;T.jRUkC.@^TIRe +=ΛzZ# zY:{掑棪9G,lf tjDwyfŭ0&T}5Z-l0h9 ˪0{!@ai gOW +P j2P??]v#TQ[f`x\u}T͎3"vDe8y=(编5%Id=.e(Y*o{2 c:%3hxDKTj^l"\yU_P.5L kA^b^:@+T@) =_Ae<ė:?2(Na%RUY|_c6EʣK et7;_IC9RVc,x(Ha`US| ']/H(? f E7Due= ^Q{Z SC,,-G*bX_;b$kqT˧rxȔ*aXͽS}R"M%/]jXTn rF$⃡|K1&r.*t뮱l%.H7;gC榊l]Ab ^b3ѹZ1"ÁvO* gw> endobj +4054 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [380.998 669.256 454.872 680.945] +/Subtype /Link +/A << /S /GoTo /D (ProfileMgmt) >> +>> endobj +4055 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [155.951 655.707 181.035 667.396] +/Subtype /Link +/A << /S /GoTo /D (ProfileMgmt) >> +>> endobj +4056 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [203.943 655.707 296.401 667.396] +/Subtype /Link +/A << /S /GoTo /D (PolicyMgmt) >> +>> endobj +4053 0 obj << +/D [4051 0 R /XYZ 85.039 786.531 null] +>> endobj +202 0 obj << +/D [4051 0 R /XYZ 85.039 316.95 null] +>> endobj +4057 0 obj << +/D [4051 0 R /XYZ 85.039 285.424 null] +>> endobj +4050 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F72 3974 0 R /F18 3977 0 R /F14 2903 0 R /F66 3248 0 R /F35 2888 0 R /F20 2873 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4060 0 obj << +/Length 799 +/Filter /FlateDecode +>> +stream +xڥVQo0~W2-11[WmmeJ@Il,~6 F"}gFvN\=;),`/i G8 Skep#v(t68:^C'8vS/onjt?çu9Bh TX'`\ZE]X>.փsW-ڪ/^C0D=4v}!wU)- 4F"z|Z6ȤS (Ic3\ !+dؘYz(J.Y;mӝXxMxtP0*LY UTփ2cDCSR8Ey\梅5I/F-~Պ2mLnN%Glp# Yep<1[LҧW,[=ݍ7T+a2JB^/-iRD_2˙fY +ZmSVW^cE d@/ TuF4MN̲QZ7a٪SywO#40bK~ K7#XTȞLN|&FlnR3Wݱ%ylytJyk3 H JhTlTxg#Kc]#zZHO6GDiD5ňKFU=n I+8!G?]ݲgwt͂ڬnW|jumނЍN5Hu +E?;uendstream +endobj +4059 0 obj << +/Type /Page +/Contents 4060 0 R +/Resources 4058 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4036 0 R +>> endobj +4061 0 obj << +/D [4059 0 R /XYZ 85.039 786.531 null] +>> endobj +4058 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4064 0 obj << +/Length 2697 +/Filter /FlateDecode +>> +stream +xڥks۸9!ăv67&tnr@K EH*>w I6q,}YPg$El +g[X땴 p^^L" ~"j9:|$i|?߯2fnW88Wi׫I52/l| +'Bflwe"-"tרX +pq2zɤ(s +]YHjD$̐""435K@0J GNJu豉Ɉ28ޘ#;9[6Y2|FFL2KT*d(\h%wD͂H;/¼c]QhK7ϓy_Uս8N?&"=z)2$a%Ő}nuJ֪ [=X(E8< ʂ"cސZ1!7SmK'倅j3"b́bR'@  $''j%rzށ!42{v wi3_i v'Sn8,ah22 +X/5퇄d98N<kc״6EUڰs3!/2Pv?Mg[6aױ2 +P[[?je䅇=CC}ϮU}ߴ.؝1˼nMǞS/0Yzlxù1%dC#{twi<|;o8t|̺*iDyIgAs,r-ÐWcFÐ6) J2t8y8<;cح)R + Aġj'IkK!]毲^WW=5C9zwH?KhA}@%b_{8 +V&k2eDrɂO.z||r=]n +ooE>Gr|ЮE\Ɓ;]`( ʎayEd!s5OjZAW<.9]mTڞOFv_S7G"*=DD`Xs||90 @|iRGF9wUGZm7e-p$܋F1_FT^Q`zvI-#PZ<A) bk hX)[t~ޕP)ҡYqj,"xgwb;4p-v\n耪f26-,R8@a;=?@;|k> +e$6 ^DwW3 f=o +ed By/+LlP1G6|ُ }O7š@v\)ݮ)X˝'%:d:)Օ˫[M;ywAIbR_|J[F(zϗ. dŒ/]*5"N-]-]D!C-QT +pp[s]|wf,i|5{vFJf8 +!"^F`t2\}#dCˇ8~gɐtiEw}#|Yh +,*]&1F7mK!k> endobj +4066 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [177.134 510.155 365.46 521.844] +/Subtype /Link +/A << /S /GoTo /D (passdb) >> +>> endobj +4065 0 obj << +/D [4063 0 R /XYZ 85.039 786.531 null] +>> endobj +206 0 obj << +/D [4063 0 R /XYZ 85.039 442.636 null] +>> endobj +4067 0 obj << +/D [4063 0 R /XYZ 85.039 413.9 null] +>> endobj +210 0 obj << +/D [4063 0 R /XYZ 85.039 300.495 null] +>> endobj +4068 0 obj << +/D [4063 0 R /XYZ 85.039 271.091 null] +>> endobj +214 0 obj << +/D [4063 0 R /XYZ 85.039 229.396 null] +>> endobj +4069 0 obj << +/D [4063 0 R /XYZ 85.039 208.199 null] +>> endobj +218 0 obj << +/D [4063 0 R /XYZ 85.039 141.062 null] +>> endobj +4070 0 obj << +/D [4063 0 R /XYZ 85.039 118.346 null] +>> endobj +4062 0 obj << +/Font << /F64 3118 0 R /F72 3974 0 R /F18 3977 0 R /F35 2888 0 R /F15 2884 0 R /F14 2903 0 R /F20 2873 0 R /F66 3248 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4073 0 obj << +/Length 3051 +/Filter /FlateDecode +>> +stream +xڥYs_3!VkF8$ @@+ݽ(n'ݽc8 _8?I$'U0YWR̔d6s3 ?~'_o_}a:K,M3͇iVQ}~wW7NaCWLV$wWƁd{eOLߎDV;og~ŧс(Mn&8Ŀʾn7`~;LlrOgIxm?5LrޕjY2˾7G,u]-b( \NwoX\vgvZSW<`yA~ՏF4(58&sE4EB?"'"< SnO+UQ2^])AhSE|vfJ :Qh߂iՕ7(IMIԏRwט90GЎH̬ZgIOB?0y hbm8yӐ#alĘ%e<%I'IaI}֔RI.&e[#ꀢ(zo +|хF.ٳ"a{S LƓU)5AA >:myh Sa{b'wdG13OGpGohES[`U!3Y=@LțIjT8\5heي3̩ gYUa|T윛: QtI#C9RN@>z9ǚA`H Q`0E&t2sg㘧(踎~9"vF[p  hJ޻=$Pd +rX hV|{M'8T(5$PiUbZחfz@+PSNF'͊=< |'_ciJVlG\I[$oMѫm*uJ$ǩ 6zd ܃(.:xjvGRS|kU+ox$hKZf:ϥ7vsbѢq󙊭?J4rQ&6Z}>ѱ=%Zh7V%tGdn*!oC2{<wZC"X,,j;Dm七lMmk*@^}yLYA3 4g=PcGz GPx\ҿXn6@BrT<`E1ږcj'vf6&EO9dihSƕ9 9rI3sɐs$@(d +zFjeX7ŊUP4E9Gnur% yV&qZ\٢Q_Hc An|bt'hVZYDž֨ojqbU-Z"oэ9e\9.y;kIt.R<(ERM3(TJ); V׊,0#ZZĚGU~.8lc!30$XJ_jcts|ˁ`)`ŸMΌu]}q"_Eu@WwxV˺r=!ue7B\Ԫc[0V{L +=#mϺ)YV+h7F$?JPdu}ʡ+/e/xp_e{j-QaJ(ģbk/mf5Ima^ (DrGإy%("wTr낧>a)Ÿ`QKl,vBm¹._*2[ +Y&4x 4g; 8uk6;4qpܝXB}|\GH#K蛾mo8"@;{-+:rm.;5Ýjx9>#%AJks +V$ #@ +*Vj[^r]";+>QMXT3|dsnӹjkrm-|]YhiHR}]o)&;g!auU)e(Nh{8iaF?~W(W6dE.pe3_B&Ж;^Oi``c]JzWtWVB~PR]/ɵGLGq(/JDWnxDHlޡ◷ČY{Q_ rr.Z1%~HiJl:WџQ&Gg%̈́C21]&~=,Cɢѓ2H {+ب'T$e7a,)_';%IZ3n7ԘVLYlʼn8AE۪)rym B]ɇ= &it٥ƅnc5k޽sM'~wOVp$Jyj0_ +l??3endstream +endobj +4072 0 obj << +/Type /Page +/Contents 4073 0 R +/Resources 4071 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4077 0 R +>> endobj +4074 0 obj << +/D [4072 0 R /XYZ 85.039 786.531 null] +>> endobj +222 0 obj << +/D [4072 0 R /XYZ 85.039 659.087 null] +>> endobj +4075 0 obj << +/D [4072 0 R /XYZ 85.039 636.371 null] +>> endobj +226 0 obj << +/D [4072 0 R /XYZ 85.039 398.984 null] +>> endobj +4076 0 obj << +/D [4072 0 R /XYZ 85.039 375.662 null] +>> endobj +4071 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F20 2873 0 R /F72 3974 0 R /F18 3977 0 R /F15 2884 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4080 0 obj << +/Length 4115 +/Filter /FlateDecode +>> +stream +xڥ[o6p2Hy.$~w]ɕqw^( C3yOf4?VjwA˷'P ɹCsqsDƎ~'7럽W߽pٹRʋ4ͼB;~uvzXKϢ{ٯ7ߟSp&*_5LWyvtwcZɿXܦOzcq΂0Uq':RhMRm VX(خ}S ٚ]_=wԱsyKiJW;LOUnWa]+Wy絛CSJz{+nҥoz.ط溂Iͮd^sۺA^ \7=W?Pm c9\Vc؊ +)p-M ƼkjZl09\< QHCX_$+<;l@' /As[Nz`]pPS聘h [ m3yDFM *J^2"NS7d;!Q2#BҀ%13T`ɫh5ZmksEwLKtd@қ t[$2R^tأ٘!T3z[*U et`tHc<zj +#|o's ź kn~Of7t@ϒ zg#1́!DgA*E?̜Ii#=ݰ \{XJ*o[(<-8e%m7 +ޣ:ulEGl1(FXgk;+^_hh,+;g O `3#Tw,u([3@/ b9]%ف/?tj3yӐ!e-+>[wrIԌ`7~͡`Č/B +4L !;qGs*, ,6qB~VzJ|Dv&?%YsFRc5R +i{<\#>0r7q"T2"(R<@L 8}g25'. gg :"?BVs܌8X~|=(;`>Hn/&P戭>o`LaŻ%%cE iVV Ofab! 57e˜_<8#̏C|gN(;9t]nzJ K%{b/Kޝ9Ϣv4ֲh嬍0p#**1S%Wmf3ɷ/{Ceͫ-^`o$3fr-fX.2{C6 3 #^nz0 ƻ2TϲM&q#Q!eUP30Q!ŋpQ܌*8q,XT¬i ^/ !6YrN{hi4qT3C_/shiUc}89MSRN^|Xtbr) :[f!ƒ L:D\xP1{ A6qcLj9UÒI +QV8\:a7I%d Gs>{Nc7в\fj?I9/O\ Bj-nώs_cIXՖi2G,4>2<"ܠd x8Mcxc4QSH0jIpb PJ2$rª0(h$KqL.bV\i8rV(XwM7m ~#&y?VCl0x&0Tr!P2p5ʞDs}Vbn šT!p$y_#J}f@@t:.B1v:r3pc&EM# +E(6"E*f96-H4hbH48X? +5ay<Vdkޗ@"č|N10g1{2k Üky2\KdI6E&nb\6'&I`CP&#|a1PBgGaC#ܷOg}ٷ,a!8aj_ʈYG +pfs괟@Gw[2sNN " {繗| +" R%'Vv+3)Of)CgUkL.(СU6y|.-,3km5+p=/GQ-/AHa5!^T8Sp gZU7q3~}z%߷ظȎz3=0Ar6d8qIB m"l*d?_\龒Bx@`e:/;>K_[_-.Vz9>is-neo-q.%[^O6fń re\W=ia Qrss/Fy gt4X@g05·?wLlP +AR]Ϭ̽Co\JV,3|)3 &Va_~' t zAL/< ogƈ? c([@~0Oa䊁^Q%7P҇a0a8yCr;@[5JV HhInY.XeLC + !6 ꜊p򘽼(7׭B{[qϤs*DvgX\Ա}QW>ޢ'5ЖSj_6 *'G䦙QiUÃ, T6T_V2 Pp*5 48J$f2 8Eendstream +endobj +4079 0 obj << +/Type /Page +/Contents 4080 0 R +/Resources 4078 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4077 0 R +>> endobj +4081 0 obj << +/D [4079 0 R /XYZ 85.039 786.531 null] +>> endobj +4082 0 obj << +/D [4079 0 R /XYZ 85.039 695.734 null] +>> endobj +4083 0 obj << +/D [4079 0 R /XYZ 85.039 641.538 null] +>> endobj +4084 0 obj << +/D [4079 0 R /XYZ 85.039 614.439 null] +>> endobj +4085 0 obj << +/D [4079 0 R /XYZ 85.039 587.947 null] +>> endobj +4086 0 obj << +/D [4079 0 R /XYZ 85.039 547.299 null] +>> endobj +4087 0 obj << +/D [4079 0 R /XYZ 85.039 493.102 null] +>> endobj +4088 0 obj << +/D [4079 0 R /XYZ 85.039 438.906 null] +>> endobj +230 0 obj << +/D [4079 0 R /XYZ 85.039 251.478 null] +>> endobj +4089 0 obj << +/D [4079 0 R /XYZ 85.039 230.887 null] +>> endobj +4078 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F66 3248 0 R /F11 2906 0 R /F14 2903 0 R /F35 2888 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4092 0 obj << +/Length 3362 +/Filter /FlateDecode +>> +stream +xڥZsq1aKtRebٍt|8: 3=vۅ݅Eڎ.$C]d g/\X ʠ\. +cN< bb]ͻ+^8-_/WClÏ6?\ ,L qo"fpl?Mvl7M 0_]]{؋7;LS|Ev$m?.W^Z*[z {7< +n]AvI3ojq-R%vRϝi]_r.ɪ=meZR5wic ceg=,Vr +o2%ɿ]'W{GQd<iVobeMRǶyeG*!|Ӷsgӳ>/RU*pQN"k˦Vqԭ^äMӘPy'T&sB=6{a8\֚VV.#OӂN + +:&!.:!̙5O?,syS&zG:݃}|84 2C-MC:M +W&dxv|9tEMǷ@'o ]g=TUѢ9p^Ak]QѪyJ\p57$ +ѶYȶ`K +mQ#=|zA#4) B d8| dN`>PSA`:;M FU*Nz%f  5cz\4!C| hҧ~p yNl<80b|CBdKNol@d]U_3tDHݚ]qSޠ3r$0>SbrRz=샣Wxచ:1;hSι=X4i5ogD/!ctXtm\\Tx8MY,K^ G˚can"I\z0~t=wEo3`n4l߉s~׶ҧ`)gO9`Q, q\;‰bE~<[UgebǼ8KRHY`"X# byx>MK C%ykٗh!"d9Qj7Vtq$B`bĈO qգqzAUɺw hu>fGSk<Ďn_q⁏E'nМMّ.ɛƦm!o+e"؅BJ5H3mIYsFmdy@x( ];Mh)@⬌Nb_q9Ա*PK⸮)eRx8v?1=:kHä[|[_`jBu.\Qz|(&<}|K1XB Q"kD}7;"l"ѤTTOs^Flyj ?;>LPd*_# MwIQY:L-n/R[9zIyӲ Ry6FXTZYyhRCf-fH7Y$6RlEpW5g~F\!AnW‘рNP&!?rX|l^ +KĂiO3>nںacUi:>Ap gU-͇;J6a.~4B7}P-@.q47mVJ2alq ~_}댏bA +pq|e }^ٖ}i/4h+:t#s YTbTX OYضi<)E_52?o߾wy.a?L_h%v +, +ns:յ endstream +endobj +4091 0 obj << +/Type /Page +/Contents 4092 0 R +/Resources 4090 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4077 0 R +>> endobj +4093 0 obj << +/D [4091 0 R /XYZ 85.039 786.531 null] +>> endobj +234 0 obj << +/D [4091 0 R /XYZ 85.039 588.18 null] +>> endobj +4094 0 obj << +/D [4091 0 R /XYZ 85.039 561.565 null] +>> endobj +238 0 obj << +/D [4091 0 R /XYZ 85.039 561.565 null] +>> endobj +4095 0 obj << +/D [4091 0 R /XYZ 85.039 539.908 null] +>> endobj +242 0 obj << +/D [4091 0 R /XYZ 85.039 430.597 null] +>> endobj +4096 0 obj << +/D [4091 0 R /XYZ 85.039 379.384 null] +>> endobj +246 0 obj << +/D [4091 0 R /XYZ 85.039 223.271 null] +>> endobj +4097 0 obj << +/D [4091 0 R /XYZ 85.039 201.411 null] +>> endobj +4090 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F35 2888 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4100 0 obj << +/Length 2025 +/Filter /FlateDecode +>> +stream +xڥr_l*sL`S+96>PD@sk@R0wӟϟ'Zt' +?T0B_"3W*]vTFuwwY,^8N  _,}Aָe$,~_<{D kwy<[)&#WOy53VѲ/gO g|{C0(8 Udbzq40:y}ll^D*NDCRUgR7IB +SaÕ{y +@Բ[4P4Z6fW^+UmjsEs묁BX#M?G]V(((j: *:<\jBQT'jrDCo7P;DǘX{1o)#& M-i : 1貮yə 0"A m:i@'u&wmX=SBhEE!@ɢڈE􏢓e#% X YxQ |Kú;M ?bk@xan}n9ا{ȁG!ע~a1DEoKb( £F}}pysms^:'02^\I0v{0wlL9vnis5W ;FP`QJY2l5+6|=o +vn܁A/3q3ڎYz}#xAɉɷgw2'k)^Ԕ_+!jzQDD~%ɸ$:M7m~%A֖7fDAjGg}TҊ=Wemsg]$#?4 _VfD3ZYkI`+!,zSTt#"*X!n}8:9X +)Bn,3{J @ +=e'X>+P#'Y9VgJ!C:_#zFNKyVTI|,zb7'nE Tx^Gqd|苒+ip7Σ|C;Zxn]䕈o%BYWǏO `r(?w?~8Q5-z +J ʑmB< #e!kķX]7G&JTcT` z(7 D;w|A +m%5)*`!-g,493\k󓮈s2?5hٗH.0I) CΌ +ءAhD\;oLVr7ڥqƬ$;4S-?ŗCQg`VPip,N"FJo졓Go/:>ty@³J$1JM%&z򶮟pĽD;T[ 73g@?B>S˘8E9楨ϡO<*t5ˈxbr" i޼lKH#n')Z~\DL!iٴ/ilBVIQ&С(+2 AD3=H(#n:ǁx(>,4I.(<1DBf>*xx#/ 1UE( c d`=nᵎh4+_*uhCI4H;FޖTr<9UQ8QOvS2!eYA3O%7.<ɩ]ph%2Y_}SmS'H-Jq&T_}M#i֑|]; e|pGqIV@ؚPorF4„6,js\x$q'< +톟/ l)c ECwEy&*s> endobj +4101 0 obj << +/D [4099 0 R /XYZ 85.039 786.531 null] +>> endobj +250 0 obj << +/D [4099 0 R /XYZ 85.039 726.833 null] +>> endobj +4102 0 obj << +/D [4099 0 R /XYZ 85.039 691.892 null] +>> endobj +254 0 obj << +/D [4099 0 R /XYZ 85.039 486.938 null] +>> endobj +4103 0 obj << +/D [4099 0 R /XYZ 85.039 449.673 null] +>> endobj +258 0 obj << +/D [4099 0 R /XYZ 85.039 409.634 null] +>> endobj +4104 0 obj << +/D [4099 0 R /XYZ 85.039 374.693 null] +>> endobj +4098 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F20 2873 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4107 0 obj << +/Length 3319 +/Filter /FlateDecode +>> +stream +xڥZY6~_aee`DVLA; alIZߺHQb@"dXW%>o}'*# +E(?ch . Vid]~çQ?Mih湟d]ޭ.^7;fvzztrt}lㇿ?X4O$}ř8 My/8@VC3R^7roi.U&D*z5# $;5vA=JhDzu6z麰}'bi]TLy9@,cƽ%R%Y A;$٤q(&Bs/5|Mcv +T<0)wpgIj*dݠdЬrؿfa c_4shq}ު8zӖ`i+Tqƞ.{3uM+E=1 w@QSv۽xT 4bcM!'/ GGF4f7qp'Q~D>`:-\ =#Ydž.cWI9 I]rz#<ؤwGq7jq̂ڟrb͒;d ,gF4oWEgƐ72e7ԋ >(~F~y_=(,C)귂x75yCU;8b94$ +;G-ӳJBd|dZ' +< q|\ٖm>4d`&z!{8[aѾ:2 pG3ژj}tlVcFh75%w=/.gh~8[I 1t),E} ዸX%-P<%1J!n%9kAˎx,A`ցt;vȻhUq/nM| 1;2{ZQapƞr?; } pTѰ;-!S,q$?p_7m 9gEdmٷDs>6Y;sPss-AB+t?I<'4'fp특<]$PL +@)2>-8#5j+[^)8*Q$ql },c h"-!Fl8Ayţ;uAFl%҉Ր}ZC62drV(+EPi| E<@nIr5"B2RY-ge'&(;GmI`.bȂG"`4ُ-6- si^^g@}. +^tADŽ,M7l6!&U: 2fxWK/SUWK ^Vy<C R.10 :'YHq9< R˅ t\DbQE$Y:IPqΨ0<xQ" .4k~tE/Pg@`I[/ɸs^VQ'9:BGbجԌ I.).:'~^*H2pYGBt2QGS2D0Zs+ZIgtI:&;Eco-Zt|f16B<6*(#ug~#o0V  + {%Ů{Ǘ1}ѐ_E,5©}vt)]$"r=m@])`xlbh=LQqcb[R ֖Ѳ`=T%6ּ%_cTyPYc2*MXtMzgȝJM}6SM6OXMqN7~$õc\ /ڢ[-IA |";e*eԚR4t K7]j_5ȜR2i!|`+P{"a6U ´3yόJvp:ʵ鮯f=qOr)[=PRي"jLAa8oFXTD_wVf G0|? !2S*iڕDcU_ݐI.[|R~%kWăDY㵠s'SmieKJE3Y4:+w˟4Ƭiΰ-OR#Ա })RKY8V.?IцK'92"3 s1dj5gg_qsFQ;<`5eY +9o)3;"Df)mh,|UKqL)snD"ϱ| À$B :2N|g5u䎾8qw +SmcwOw iIEbv^2^K _3&[d_FMl4墖p+m]Hc}4uL zk)\ w\KipY2jeeN{XOA  `4RϥF6GS9Y"~'c xAeOG0'5R8" )C%~kW1| R_%Ye-נR6hHendstream +endobj +4106 0 obj << +/Type /Page +/Contents 4107 0 R +/Resources 4105 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4077 0 R +/Annots [ 4109 0 R 4110 0 R 4112 0 R ] +>> endobj +4109 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [432.259 645.989 512.306 657.679] +/Subtype/Link/A<> +>> endobj +4110 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 632.44 152.127 644.129] +/Subtype/Link/A<> +>> endobj +4112 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [249.04 478.871 330.742 490.561] +/Subtype/Link/A<> +>> endobj +4108 0 obj << +/D [4106 0 R /XYZ 85.039 786.531 null] +>> endobj +262 0 obj << +/D [4106 0 R /XYZ 85.039 766.606 null] +>> endobj +2960 0 obj << +/D [4106 0 R /XYZ 85.039 672.187 null] +>> endobj +266 0 obj << +/D [4106 0 R /XYZ 85.039 616.997 null] +>> endobj +4111 0 obj << +/D [4106 0 R /XYZ 85.039 590.382 null] +>> endobj +4105 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F72 3974 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4115 0 obj << +/Length 3554 +/Filter /FlateDecode +>> +stream +xڥ]6}~WeX@ o_weګJÍ οOIݕ˅ZVE8 βT>Y'*-wWl# +Z@׋Wx~ڮ~7?n>-2VJy?:^̣{_?qۏл0;zn:j^掶{jA%fm,z{wny +^ڱ lUٍ,XuGW,Y,s c&t=` +&ov8^ָ߾358=VB\DNe *`ز ggB),Kdc:y IlzPɦ;V(jp{{}EP +qGޒ 8_a7H/ +E^{KZ>x#iWZ`'4"Y>bkXkt-MI^<"̈́z&<[;< nGg+٬x~|IX||Exdb@dZ wEYug>W#1S,Wx(:ǹX -t==J1wcD|<;09]wkNwCiEռ8LJG5&HΡқD`q0@*'[q8`_aPOs-ʊ=m-#Dca~0J/VZ=k6ۦ붑V |3"Q4;v=Jœ1Ne!z0ɿ夘viCFh8%#3" d4@p{~u71L5M׬OеiA06xCn*]㔦D; ^}pPB{e~m56~ӰN4mr7?+JcvE΁ a ěa5^6FσiuPº4 @ w[-ۦko)($X]7 /@ {uɐSYs ܞlq0 qŞdQm+yhZpAY @)7gOHe!-YH9jMmr1^OnY)6NN??}׬[({n~&]1U3Cqe~6 @qc-N%iDVQ ^+ 1=?@.1>IS0ipҽL9% _F;9Y+k :S-t#uh+bll0f|7 #^qQȺsdL9RGO]2Ngȸϐ?FY/ә_;TɲȾm;q@{8NEpX;x9*R&ERh{{ ,ȱ9z ow 4<^?vE }/D*u;2vƞN\^wlI,kB/uiH3g$2mclg7&>*5i4K!T W;V~bUCʦp]kXyYp~E3$k+)#jdb(#'?4=1IZ%,*wIT×cx]W66-#3WrY8\xsQ"ZrȽѴ$HҐxM[>C#0[U;L +B7fݩ㱹ەSLeMTyZbЁA,a +`q4c?z1*Χ5Fg>D.ę&٤ؔ +m'ݺ5Վ9%b1*!*{0*i-ƄXeCU .GǬB\S>TѡV&62 Q0`̜*М!2oKf3]f0@ī=G@PyQG_%h" @A[~c˝&։? $a]mdHe~@*,2%JQv*#D#1ʜ@bر@$5!W^13δP!Wю:G|$oe4鰟PRkJ&7iZzf/9}~`.\CKũfE?۷a -'I8Z8iV"4:~R®^,,2e6aat (^D(_P]i0 AҨ8ȜqIלV_K u8TL^ cÈ\rF@ ΍?a +)-K7V0?wz%VއG셅KKЦ훎{S@l8OA_pR'Ljd&HFW> endobj +4116 0 obj << +/D [4114 0 R /XYZ 85.039 786.531 null] +>> endobj +270 0 obj << +/D [4114 0 R /XYZ 85.039 630.814 null] +>> endobj +4117 0 obj << +/D [4114 0 R /XYZ 85.039 599.289 null] +>> endobj +274 0 obj << +/D [4114 0 R /XYZ 85.039 449.2 null] +>> endobj +4118 0 obj << +/D [4114 0 R /XYZ 85.039 428.004 null] +>> endobj +4113 0 obj << +/Font << /F64 3118 0 R /F14 2903 0 R /F15 2884 0 R /F20 2873 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4121 0 obj << +/Length 3511 +/Filter /FlateDecode +>> +stream +xڥk۸ +:IԳH{6E +pHr;/R-(9  yXdy'*\Wb + +b) Kvu_x~ճS~Rw/K,˽ۛ(:n_/C#O}:ʼO믫ޭ,9RH̷/_*U/^`aQ,Wq$V]_=^xxԏ2x& #_(I4άBW@ai. JA[8dow<ޘhi٤7 {+r1+g]j{+aeU\5)y]CF˟n_ǁBY/4~>uƛJbA2h?NM&Z ƺ# Ü)A@Q,6x + v6m_*1^keBpDʆ?ĺ6Vm"[38ȍ9B^fGKNS._zhᏘ~qpZ2=۶fCCꄆT7?'xJ(n +b)+P`$I#)DMWZʣQK(w< ug}b4Dqq%E$R헪;\XǸXv"SnS[Um?J!fqὃtQiwm%QbHU M"n!2 LB"U2<"?b M:o$U +rjP]V`IbB̏'!qz jt+ԣ{L\h[TB7繏XDAx{* ZVhTa:q+'XdP;QHӐGIhb&ut8L0wK| WGb;1;(wV6E9yO>TYsIvljw=##oMSN~?s.$s~n r~xTa۵X7%QL6Zl{-Dm:}/CjB 7H@t)6[FO-Ԧf//:y"Q`L~Zw3O25ǔfvbefT``Ӛa`C LM/f8Y&,y-fISXд5*(leqC@s3:vv:##SLk5zu){)qCOC]۶yv#|`SPezAzVKӷK2 + ? +՛aȁ2 T1 EAݕxihȿ馝0o)IIFPA!MTUÊeFbz_gҟ)FX ӕT mo(8chyYq<%@xQ:oci~U#(vtB;1ҏ/8p[mhbR1q"9+zmwr# )<.S5jƉ=- + c'7x'9"*b>q@$xl?[N&IJ/u#CSt"Z+aƏVNE +zI{S3.И! +PVySyrG!!G ?WEC̵ 8oGJ+ Ә-LT+K`MN|F7 癟 y +AJߍʹ8ŧmvCdoؿ5rEO)K!7۹ +}!hךv9/(!ʼ@y]rX%^Cr`o$ ]1BMс~s?Mwwz +Si=畧|~Q0V>}xNX&8BDER"m$QYlAD~ U覙endstream +endobj +4120 0 obj << +/Type /Page +/Contents 4121 0 R +/Resources 4119 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4126 0 R +>> endobj +4122 0 obj << +/D [4120 0 R /XYZ 85.039 786.531 null] +>> endobj +278 0 obj << +/D [4120 0 R /XYZ 85.039 410.091 null] +>> endobj +4123 0 obj << +/D [4120 0 R /XYZ 85.039 389.497 null] +>> endobj +282 0 obj << +/D [4120 0 R /XYZ 85.039 219.213 null] +>> endobj +4124 0 obj << +/D [4120 0 R /XYZ 85.039 198.016 null] +>> endobj +286 0 obj << +/D [4120 0 R /XYZ 85.039 103.781 null] +>> endobj +4125 0 obj << +/D [4120 0 R /XYZ 85.039 80.463 null] +>> endobj +4119 0 obj << +/Font << /F64 3118 0 R /F14 2903 0 R /F15 2884 0 R /F66 3248 0 R /F20 2873 0 R /F35 2888 0 R /F11 2906 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4129 0 obj << +/Length 3487 +/Filter /FlateDecode +>> +stream +xڵZmo6_> ZI$!ݶfsMl+f~)ʖE ː3 _F_4Tq,LU|9\DK"L=뇋f2"*.][tBUg(Ga\ 0JO_򨱽ʄQǛSoq*N.4 3g-pߔyýu7MͿt>UX6 'S)5\PzMĨM<FpMxfhA9 lfqX{I(C"$4^S8p*I9&҄ {~("GasQT>ӣ꼩;ܵ=.zOs]di B֯(3qsG(}\x4I}4iiZGֵ^u{%0Ga7S7.=-@ R2948:TPkM'+m/?aK,cQH2Lc6 OHWnZ&{y&Itp{*JJ3lBېX\+gaରx+3XkHmкme89$Q=".9ߤ +"m>#N3͟"dߥ)O#Q)+޺jSIhL}#,9v2JVXV̘#~lEy9UoyB-`+Qwֽ˥k*)k۸;U ѺY6҅.3=L +˅f)(̭U'Ow ;]Jlulw=6Y5U!Mm̬؞t2@ ha +m x#~gy!`ԣqAJgMI.A߲{w tdy7-@3:3=:طLYiN]05;J":rQKœe2~duCݪ&@6eL="_fyfBAnъJC~~A&9^o /U@ )\&R r) 6dӤ l\#B:0Y%nFnSH&&l]2SY$daْUsRw! !18!y d}dC m-ݳHeÔRt2SyTdSqJ8ra5h?BV!L ~Y܍gt" DǛP'{V @"3<5"O%iР/ׅ4-TfLIR|ETWjY&,Ž $ x䍴"76^(8TDbZS|߉zUWZNye5+Y Yz$?a}UkuyD%zϝ]Pzc~_uT>sɃ`9(l3\{/5AXE@lצּQc#sܡqgq| f t`ŋ'13\Zu[  %ۻ$cH(q"vnנvfc{(0 F~].?aɘ@9,gG+ ۘl#dIm:LOı-ĥ3@]:MBg36''F--]Xq&0oo1L݃y僙;̴>8(«{$mpj!Ȓa>Ơp +s13 t<(Z96,uDmRL/e\6"9 Ŏ;f{ RĆʝ@?.,"B{(NCy6~vA1Gp=T0 mT‚[ ]XC0$y6HH6;_/0)rzl+lMtoC-_<{ +UK~Ef+yiZ`h`YEJ]}[aލ&e:᚝׼ KwnAyjUmw&t6Qh$Ơ3#p`bqva4L`z?624JrxzX@Pʆ#=0Br-%\H^sޮf}#K Z3f V +9!w3@!)tU3 >v!Ypv{>K(Lxw$2vx +by{%>JrmIq3ӜN&̰[ +Hz=Ub,e} +BДa3>궣lXH"~*֬jlFk~oQ al0ډpy|"@JoԋE^;V7/!ӳRF^Yj)?IZ(enAz{DDvЈ<4X@6pԏ#QŹќOcw_X{P_(ߔ IYH(t#6k$3R7> endobj +4130 0 obj << +/D [4128 0 R /XYZ 85.039 786.531 null] +>> endobj +290 0 obj << +/D [4128 0 R /XYZ 85.039 686.185 null] +>> endobj +4131 0 obj << +/D [4128 0 R /XYZ 85.039 665.192 null] +>> endobj +294 0 obj << +/D [4128 0 R /XYZ 85.039 538.238 null] +>> endobj +4132 0 obj << +/D [4128 0 R /XYZ 85.039 508.834 null] +>> endobj +298 0 obj << +/D [4128 0 R /XYZ 85.039 220.265 null] +>> endobj +4133 0 obj << +/D [4128 0 R /XYZ 85.039 199.068 null] +>> endobj +4127 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F11 2906 0 R /F20 2873 0 R /F14 2903 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4136 0 obj << +/Length 3099 +/Filter /FlateDecode +>> +stream +xڥko~8*8\.@6N. J,"T|.W+P9ΛVS,,cf*=?`,e{?h??ΓCwÇ Ef޻yy7?|+vPg|͆y+} ֿ +!XostXmT<y)4+Y@Im*rPwawnEkZ$:(@W}¡a5u+wQDg(3u;qA]a:|>$ʊ,K/^#aD' PIv/iV\Ix r|Xr:6qXd@EwülAFAC4 wAuxnkh;Ýf乯G+-Js[~-c+ufϬZs{0*Ӎh>s'#1QB@N6abw^ ǡx ؄f۲dنz|3xBTQy #L ,Dҥ\/AMtij .u6'xcd6bY (ڒ] HǜXRɌ2N"x.lh؈N0,n)\|]*F<4q( gu_v`ۭKw=ң8VnԫR(ґ^F9 ASMvYA&9$K8~Ǫ< Ęes<|&屟'n"J"pA;RLH#\`!X˃e Q@EB_|~xp\VOt| Jc_'zSh}^;eQ˹H1f;B0 ׈aA48!m^{6gVRyFq +ʣ݁ᑵoCMr(|Ag[*N@R7fTGaH5IY80>ybG-M*LcOOw\v޽&ES=TMA +ջp%v'lTC*%-7s%ڴߙ[()5nr덢X^V[6?EpdXbr h_}#:8s +_LhI&~3G;X_Tl7F<<4K$+Vre~Eo5TqSa>Z=~gmʥSWFtjK +E"Q۴RÂg~0e2P@Aۡњ?Ht(gчvP,Bi'/ؚt>ZߑS`T&C' & ,Vaj)MNIiSnc(_QQHߢ>w}SPk/uUQ oympO3my> endobj +4137 0 obj << +/D [4135 0 R /XYZ 85.039 786.531 null] +>> endobj +302 0 obj << +/D [4135 0 R /XYZ 85.039 723.537 null] +>> endobj +4138 0 obj << +/D [4135 0 R /XYZ 85.039 696.923 null] +>> endobj +306 0 obj << +/D [4135 0 R /XYZ 85.039 652.438 null] +>> endobj +4139 0 obj << +/D [4135 0 R /XYZ 85.039 631.242 null] +>> endobj +310 0 obj << +/D [4135 0 R /XYZ 85.039 507.786 null] +>> endobj +4140 0 obj << +/D [4135 0 R /XYZ 85.039 486.59 null] +>> endobj +314 0 obj << +/D [4135 0 R /XYZ 85.039 363.135 null] +>> endobj +4141 0 obj << +/D [4135 0 R /XYZ 85.039 341.938 null] +>> endobj +318 0 obj << +/D [4135 0 R /XYZ 85.039 204.934 null] +>> endobj +4142 0 obj << +/D [4135 0 R /XYZ 85.039 186.062 null] +>> endobj +4134 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F11 2906 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4145 0 obj << +/Length 3053 +/Filter /FlateDecode +>> +stream +xڅn:_'8V$En ,}PmV+K$ߟ,AH"g&&@7i +o67f&+?&fvD~EN#L#ۧ7& +$Q7O7a*n<4yjǁ=*Z%w_+|^ӿɢIqrH +0 ~DtDijzU!=#T=? ~}bVnp`I R QEm#Vv;JG)8zwLĥH,󵖷`Pmc1M:Dt6*B~'z^VKFĵ΂8[N"8piW:0xŕ9[4h<5'O`#tMq>qJjP;ySB~(6_nT +i$'P3o&^;!5?2 h=6-)F QJOxxj⭚x6A:9oM*x9RR&r@Qr4ۚ7"S_A4$@hwDlڑaAPl`CAf-օi)ނ=xJl_H9Hљ  ~Tuoh6+{KZOql͏F=yӓf[~DAsAۧP\l7"?;qK0qڅXr<,>ֺc??;pk8 )BQ-筜,!BaT 6ܓ8L)=1`{xn_e.1`jж^j V_N}@Urr-Uߧ'ƞBd~%;ܴ\a0G{YJD( |EF+J$@)5F-*ɑs X"ѕ<4T&ߒOMp$FJ?3}i/8v8dS('S.A$`B E > endobj +4146 0 obj << +/D [4144 0 R /XYZ 85.039 786.531 null] +>> endobj +322 0 obj << +/D [4144 0 R /XYZ 85.039 766.606 null] +>> endobj +2961 0 obj << +/D [4144 0 R /XYZ 85.039 674.702 null] +>> endobj +326 0 obj << +/D [4144 0 R /XYZ 85.039 525.576 null] +>> endobj +4147 0 obj << +/D [4144 0 R /XYZ 85.039 498.961 null] +>> endobj +330 0 obj << +/D [4144 0 R /XYZ 85.039 139.947 null] +>> endobj +4148 0 obj << +/D [4144 0 R /XYZ 85.039 96.006 null] +>> endobj +4143 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F66 3248 0 R /F14 2903 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4151 0 obj << +/Length 3915 +/Filter /FlateDecode +>> +stream +xڭZYs6~ׯʜ"[oV%y 3䄜@l@_7/|F5c'% w,Ķu[e^\} |+b*?VPnJes_\:ny+9W>U;hqnW !ͶqTU:GׇfWmЖH` &i`kD,7moGsS<ߺ0'y.f<)>R*E&dȼq}'2T +uCPsma|Wןh{źŹ/㎦.*wz2y~oN[šKдjks0,}e p/({7K@ T +Kܒ0h*~%(ŜdDnBXPo+6qYV*_–+J4䨾8욻⛫s!A#_b^! +AJD +~sn!^y#_*}@8!XMrxtE +p-ad4\aRPOwhDSKV:lGJ XR+i;[yr%L3YX`p; +f-iw%)V!ͱ|k,hLz$W,COeYԖaެeC}wAƚR.~Éq|;R@Um' :ְ֤LU MTxv,gF8:cLj: v<3r-t>IK*$}k~ {F`_)&ʒe+WflWi<,W{]J Pi2~`+thbk#M$?E:GIY6M(o#Ur|Yg%VvかsWrk >pЋbz5^$ +Blldjq׭ ]yHz̷*]/z뎞4IAfhq60sbMJ\>b8v^([PYH8({lif,Z"eXBEf;.Q8 +v՘ s;lNRŰ{āN/<=0$<$$ASX=K,Y5gS?$4| ?Nz5Vz쬥b\()- W*#K|K@3MMHݴ + HKBg(y} DX^yRnlJȰF\G1ayܛMr럏mȯAF.CD_(%1%`5&T]^I]m.9ЙS^t$ֽ]!Z/VqQ/Fv;!88@Emkg2`[:֋ iE I MQF ?4O &I?[Vd33 0 6lZGtad",? B&aBϵ& +~D@ D|/+/{m ъ֚7H2}9qi}V25J)7T:_F<~ǯ='AƍGeYlCMsL.^ZY]|*1+|.Kjw|uOaI:tOc#x XpY~xL:},5$aL>LsGn&H/|%LB?7XeGK`޿{&á&tTGxw5z[mȇBIIsby| |6tRgDʩ>R1?uL|tO 9ѱ|"$fysn]vE:ث,BPl[`EzdvVq]>vwxtj^_#е8 53(3]r݃6endstream +endobj +4150 0 obj << +/Type /Page +/Contents 4151 0 R +/Resources 4149 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4126 0 R +>> endobj +4152 0 obj << +/D [4150 0 R /XYZ 85.039 786.531 null] +>> endobj +334 0 obj << +/D [4150 0 R /XYZ 85.039 261.05 null] +>> endobj +4153 0 obj << +/D [4150 0 R /XYZ 85.039 242.178 null] +>> endobj +4149 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F14 2903 0 R /F35 2888 0 R /F66 3248 0 R /F20 2873 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4157 0 obj << +/Length 3510 +/Filter /FlateDecode +>> +stream +xڥk +5 P +xPiv}:E<'1'gp}˥D)) gpp'~Y~,`og@,d:;Ƴ0ugW7D?\8_DQe|e<.}/|za^pF_Y pg0P,N"?#yߜ]xƻnDuĹn*? +,&o}ӳ$Hl[,uSMys<;bor-Uʼv*: [g +_2 7wi- 3],'" Gd60*( +Løh%YIx/e#Q5א8Xl;s9$򖛺"lp+_/@:U QO4؁pķv{w㞖:zYP$9! +E)?L#įZ8&D%~D ,N$yjjϓ/r,jhoٯe$0!TH} gd|6bK-u8.Q3X8d)(HyW7~(޻~8-30ݝy eU2!.?pb@~-x`tAgS^ Pjcr +|W{[VuQc  L)[2ng}q\5޵PEلS˶*͜mb7t경3/A28ڰ4IE_` +j˅֟A*;VA jQ쥗dI"ܻ.uƋ1KE[fKQmVQfmX, oHr]lnSʹy|((Ob3ۮdܻBH½c0'V!jk4 +! J >:@/prI8}xvnLx,$A}8`|1qqI'#2ж `NJA +1q$[[zƩ( FYG׶Ah*;_4K~]Ӧ:W8 'r뉜g0Gͦrc_C)pAp"Թ 'f$):"sr̔'`!JᮏA)fJ"*H2)i ;7ţkC +8)z'"zz?nLcu97 9#=< b0(BXRwi vG PEV թLžFmz"Sf1OHJ? Aڈ8缠1&4%1-&I +< 2 Ag!)30G1VSWnۭjAVVY lԱ"\t7T 1[‚<&E0 H 6cfUo|nsC%{1MxXkyl# ` +a7+(RUrm ox Dj%ǃDt:(K 3$!ˇǗUPu *VU~KO S־ʨ zJ8i>4dk&Yd&t(@xaxs(ڜ+4 _7r:c1qmAPÔ% +(1fMR0]h;ȉ|@Ĩ!כJзC*5DFafaf &Yײ}3,i(Y5d+;[Ц z+czqAn6nD/ӮvB8([{7>NdS,lÝ +*yn%e*zOK/  + ; y)rg*6Um8ßĿ9-c ]$h mOq+8|'~ElB\>unBy!~';~d6`9GAj0KiΊ̻(Z]0_̹,b:eKqnPůWIZao6HX\LbSn*Htw؁H'*}rz[C©tҿ%KLQ/&lV)be%bST~qɮSM +@FOR PCOMCRa 7S08i*Pkp^`:WAtLr~,{ו^'$cel~{خS~$L9f}i?tuք29߼~GI7&j$vot sᨺd6RdX~`mRgv#s)5Ph 0ǕH`:KTQAQW:D`j.ciO cI&1(Hz<,?8'ONqYɓG '.O 6L1>ꮲ>͝8w IqYG wR'\vKS1\$cM{]A8ZA@-U' reA?A\<­@8@/C.coy$FIT{nk`q֭3SʷIyqZ$C%5M8:ӣj.RD9pRvqp5*3++8Hw ſ+GlYմV' +*,6Đ&R?}endstream +endobj +4156 0 obj << +/Type /Page +/Contents 4157 0 R +/Resources 4155 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4126 0 R +/Annots [ 4159 0 R ] +>> endobj +4154 0 obj << +/Type /XObject +/Subtype /Form +/FormType 1 +/PTEX.FileName (./xslt/figures/warning.pdf) +/PTEX.PageNumber 1 +/Matrix [1 0 0 1 0 0] +/BBox [0 0 31 31] +/Resources << +/ProcSet [ /PDF ] +>> +/Length 557 +/Filter [/FlateDecode] +>> +stream +xmIn1 EOPwu$Ig0ľ6V5 oʯsO #h8:5?Ơ[IL~F PYdzZ8򑖌f(E#@xoL ۹[ + +6\>RgbWj[ +WϢ{6;F])/ԬMu;pk;̩dh> +>> endobj +4158 0 obj << +/D [4156 0 R /XYZ 85.039 786.531 null] +>> endobj +338 0 obj << +/D [4156 0 R /XYZ 85.039 318.107 null] +>> endobj +4160 0 obj << +/D [4156 0 R /XYZ 85.039 287.816 null] +>> endobj +4161 0 obj << +/D [4156 0 R /XYZ 85.039 165.873 null] +>> endobj +4162 0 obj << +/D [4156 0 R /XYZ 85.039 150.203 null] +>> endobj +4163 0 obj << +/D [4156 0 R /XYZ 85.039 138.775 null] +>> endobj +4164 0 obj << +/D [4156 0 R /XYZ 85.039 109.555 null] +>> endobj +4165 0 obj << +/D [4156 0 R /XYZ 85.039 96.006 null] +>> endobj +4166 0 obj << +/D [4156 0 R /XYZ 85.039 84.578 null] +>> endobj +4155 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F56 2898 0 R /F11 2906 0 R /F72 3974 0 R /F18 3977 0 R /F20 2873 0 R >> +/XObject << /Im2 4154 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4169 0 obj << +/Length 3201 +/Filter /FlateDecode +>> +stream +xڥko8{~dV$cn]\v{M=$ؖW߼(Qp(RRp8Λ -4 +E\X/ςlqsd7+Uߖwݯ<| +ZB t>\/onzCp?/>}E,]M|׸n (Tָ(Yz9nK ._#Bט'WM`gC=^ +{jY&2&"M 1Jw:[WAyhMN$Ej _ B΀=Ix PLk'n \ȎV4[D`"$ZqZ^ >8VBSs(kHPUX7՞ *08Sxd -ytxLWGB)!˷]S ״[8~p-08t&K اybwu" /7?amVϮ M>bd-@[3-d8ҍ^Dz1??zK(*?w57S,~;gEw'{Tn[M + etog&=4"D;[ aϛ|[ve't!6^\沽v)~Jˢr;l62|m2 +b{VW0(H"|etGqZZbњw rHY_{je?`$\vn$s V@GJyd:%"-Wsb8 ́ ذ$L -ɼ}SYq:Wk$AK#M[ȵ4`Q77X8nQ" <Ѥc/KTg#~<0 l8*֭era#MA6Hyj)s}^OnJsY8D9` G1+s~I ʶeo( R>˘֑pa36QmJ_w-u5 KL߃QE m싃2YVMI3>+{ g,$ @hK89+N1I_a1Q}S7\mPR{iJ4YjXnUO:gݑoxv︛NsX=q9b(ЩhDf#_{iJYP@l11zG kaNK[*P6W;<8'h)-t.czQр}4J@$h[ 5 +pE>xhbY? +Zl+N%,%ᩘHObէ&Ì#"m,ʎrX\z-"$0;`(@/G)$YvtKa{KAS0>\dge' EQzroĶO$MVo!NږCQBOCƢvAӊuR~D9qDI`L-Wڊo1|Ugzli- 8Pa5C ?~yin.̄x2 ܞnNn8ah31+9߳K:V|U~N0팡&IJ/h{{3b׫lAwTE;pkg[ܭgTdI a(]Q"if"MC҂ކǔ ŭɆ+Dh1iqb]4hesH(ݖVtOj̀ABNW+`̫QcO*V`2YKYnjߤNQHKX WLxK("TwZVQ YY7í>%g[ᖥ4V/˃},Jd7ϣ B-vC^lYq3R]@ő9oW33;{%Ny ?)$ˆ8㰚X:f@+GgVP 6_pE=bvC3|L%r84 x5@O1"/^;t_':N,zN# gIe\*zO!ϚEe|&%_AJ`@'7Qlj qxLQ)5Ajendstream +endobj +4168 0 obj << +/Type /Page +/Contents 4169 0 R +/Resources 4167 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4178 0 R +/Annots [ 4172 0 R 4177 0 R ] +>> endobj +4172 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [211.976 664.189 306.903 675.879] +/Subtype/Link/A<> +>> endobj +4177 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [386.74 69.841 468.915 81.53] +/Subtype /Link +/A << /S /GoTo /D (domain-member) >> +>> endobj +4170 0 obj << +/D [4168 0 R /XYZ 85.039 786.531 null] +>> endobj +342 0 obj << +/D [4168 0 R /XYZ 85.039 766.606 null] +>> endobj +4171 0 obj << +/D [4168 0 R /XYZ 85.039 746.277 null] +>> endobj +346 0 obj << +/D [4168 0 R /XYZ 85.039 554.208 null] +>> endobj +4173 0 obj << +/D [4168 0 R /XYZ 85.039 519.268 null] +>> endobj +350 0 obj << +/D [4168 0 R /XYZ 85.039 476.904 null] +>> endobj +4174 0 obj << +/D [4168 0 R /XYZ 85.039 456.309 null] +>> endobj +354 0 obj << +/D [4168 0 R /XYZ 85.039 249.234 null] +>> endobj +4175 0 obj << +/D [4168 0 R /XYZ 85.039 230.761 null] +>> endobj +358 0 obj << +/D [4168 0 R /XYZ 85.039 104.375 null] +>> endobj +4176 0 obj << +/D [4168 0 R /XYZ 85.039 86.508 null] +>> endobj +4167 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F35 2888 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4181 0 obj << +/Length 3150 +/Filter /FlateDecode +>> +stream +xr`n,A#cO2b2}HH  +YmR.C-ظJQF[|X Ȫ~sP/|MdkI<$b޹zJ)DrEZΧo/yӇO0\|wͷ7>lZz(J9GoT?yJ3=OLd^ݜ=􂿚BMs#a^r$]*"G|?p,"cPGĒUg${90r.-⭛c̑KNbɯVnv˕g_.WAC\)Ԉ`mĖ:i q,d:1#miiKpP z.- Ngpdd?!>{V>J;!r$cHؒoax՚n>U7 %p~m@:Ke4҃Lo{_| ~XʭğIZ.?Y^"ʈ Cȱ4t?CE!P;r:4 +oۻӢxsvqxxuТ&Uv +lplUרcg)/5\m[qG.u/t.7%1`08cѻ,9m|EBH/򠳼`'QUqLqĎ_A+V;$!W4Gy!F. #?xڻ~* "P׾֋}^;օ8j&>'HtnF\#s ) . +9pSYÐPFYBb/YK gɣ#ߦ+u:A^CnӬ-J"(kS qdYaD|[E>L +R<#`iX( D2 I9>P1&7|Fp~‘!l@ 9􁣓1 9c0zFlfИ,SkSFfX)H|xHka #PaAǡ=.^ݰ}Wc4(jk:#71҇,_CeC21\6Bc괔#Wd>#Fhz7?.)[yp__}:*l %f]b6 tq]r`^=7GVNܻBhi# ++H1zfkx[vK<ʓU-TE +Ij ߆r"8!oWH >/ @r#nBdtu^q? X~$nx&O x Gjx[$&[w[B: '5Zశjs+H2PVѾV~J˙PiHcu`6_=Dcޥ4ReC*A< ~a2e`4VDz҈Aoњ JC%o%9++ +n7m09P# +"oS<tQhd/۴3Lť~̓/)ἀהh2nQd;(.:VQ\{/jh v-EZ{#ΞO`\uãRPYHV;)e Tza>X ܙ:u%>g6xQlUzGHCIWWHC(pl  #mAz +`gendstream +endobj +4180 0 obj << +/Type /Page +/Contents 4181 0 R +/Resources 4179 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4178 0 R +/Annots [ 4184 0 R 4188 0 R 4189 0 R 4190 0 R 4191 0 R ] +>> endobj +4184 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [215.483 606.235 334.938 617.924] +/Subtype /Link +/A << /S /GoTo /D (samba-pdc) >> +>> endobj +4188 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [226.58 380.651 265.633 393.553] +/Subtype/Link/A<> +>> endobj +4189 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [203.74 321.487 256.096 334.389] +/Subtype/Link/A<> +>> endobj +4190 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [289.289 249.077 378.732 261.07] +/Subtype/Link/A<> +>> endobj +4191 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [250.286 221.676 327.4 234.578] +/Subtype/Link/A<> +>> endobj +4182 0 obj << +/D [4180 0 R /XYZ 85.039 786.531 null] +>> endobj +362 0 obj << +/D [4180 0 R /XYZ 85.039 766.606 null] +>> endobj +4183 0 obj << +/D [4180 0 R /XYZ 85.039 744.844 null] +>> endobj +366 0 obj << +/D [4180 0 R /XYZ 85.039 551.795 null] +>> endobj +4185 0 obj << +/D [4180 0 R /XYZ 85.039 530.598 null] +>> endobj +4186 0 obj << +/D [4180 0 R /XYZ 85.039 516.864 null] +>> endobj +4187 0 obj << +/D [4180 0 R /XYZ 309.697 522.837 null] +>> endobj +4179 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F66 3248 0 R /F56 2898 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4194 0 obj << +/Length 3581 +/Filter /FlateDecode +>> +stream +xڥk +Ea x|? +c;.u$V$% I|咢>h9;[ViAJ؉onfz VPη7sV{C's(W߿f:q6$Io~xw3wfw6>p0`.ϿXu,]=u,[n(p0υ+~kiQ:Q\n׋z~JȉÄp6 GQx QVunIi' * -#3:SKH P'+j?%LwPꫭp롘ɶ\=e?uYa1ҵ56qg2OwyTAHF + Ϸ]Qr,.w녈 ( jhgdOy1 ][ *+AN4R߂VtْBx` gzV3S72_{Z8Q'܎~sV{R$#ہݙƔqtR gp +iJvfѺ)XÛUq:5ݟU?,hIE4BdpT]B-jت;lHG|y-TvoZ8]6q$Gh͍#NvFNih(Ekm`QȧKW}Fr59CA_ +a`s#I_{o⎲BЅ zU[υ=Bjư\lL3Gؗ(zX.3c\r CKܙ.qm΢猝ďd 5-wO2_߾ۻ n=|upg,y0ĩ!ڂdgZ Ea@^YNthw{k_ws5yR.ٍ<2K/s^OJ" +>)Eڳ0cf?Bn9?v Nb <9T;fp숛Q?:~]55kA t%um;f6(kі(*l O D[XJ=sD̜A`'r(L')1L1$6O]֌Ϯ6?wM' +p0 +/^I+`"LX\t4F/4NHKE)cc\:ۚTGez]SAWw$37ilj.$D@RoSFFR(QHK LJNF-\2u5zOX2<܍Kk H8>#_+tςR57j¡ćYЮ[xx*SK8KhP|:♃ƨD)u.VʎÑ#`?Z홁0yb(uqzz{aB?j``;}6X~8x<,f cn᱿xbY/Lbfi?9YBakSބ5c֍s?5(/ |acfr?OQ +i%&gx7o vrwZF8-kUIRݫQL4q9.tذfwR_ʥfH䄑.](suE 3Һ( f F^jՈň)]9b]:՘gPZC)B%HSO'ƚл ѯRN:S3D0gHHʪAKq Y hHނ_$O}ujο!{i-t0D/.K8pR/[i{`o-RwFsg,pͽɬp\΋a:osJKfXrnQhr82 -HwdǶ]^e0yL=D[FQT0w@үLJV4a5%4r-%_"xJwǪf׋EOch Hk[$ʏ|'; [ }f4O\4*]G>y\wٕJ4͌@KnNX$DaK?:7rnܧ?BpCd#݇-V*6yZ87 .0UNmA^]Vs"_JLŽQ&]" &>1o%4bw3 Cc-> u]ulHUYhKjzd7=H;`p&7,ťI9C>P_fUY[{ %@,Y_4$;/}Ӟ~#Ƶ_KjH贵{Ct_^ndf76lGqZ) {d&dz 梙|eB/]t |V =ϊYJ͕> endobj +4196 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [285.619 542.708 316.703 555.61] +/Subtype/Link/A<> +>> endobj +4198 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [262.823 290.269 345.582 301.958] +/Subtype/Link/A<> +>> endobj +4199 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [215.436 249.621 289.861 261.311] +/Subtype/Link/A<> +>> endobj +4195 0 obj << +/D [4193 0 R /XYZ 85.039 786.531 null] +>> endobj +370 0 obj << +/D [4193 0 R /XYZ 85.039 380.004 null] +>> endobj +4197 0 obj << +/D [4193 0 R /XYZ 85.039 358.808 null] +>> endobj +4192 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F20 2873 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4202 0 obj << +/Length 2082 +/Filter /FlateDecode +>> +stream +xڭXYoH~R@ĞόE0恖h0%*$Gu4i:l>Z* i N" +a'Kx JT]O*Kf9|Ǜb4$<0R{Xиrqד^ΊPzKgxɼ--(\Fx +̕;2ZIWy(;q99%I-֩jZSGGWN +X <| B4}*t \@+(;r2J{7h؈ъ1Z)E^JIeJ\gx'D!EF&05}:@\ +"{MMDRǚVPܜQYD0˵+{a 5D)Ǣ> O v:%/O&3GZJs]EZzv> |97%VY2o4^R%=Htqco- y<_~1P?4Pl r\7 w&[f2Z?COAZByݽ'H#FAJ1}Wuw2T`xtHG +kBk j'~\Pk6P\5,l|k ,ZD`[,p-4}X,G)}/S"N4=`VaѪQCR,jG_(Kő;6CxS씴6̽Co4L9eb9?]8xRde{Oky=Qh zHR+"x~dQX|o9JxJu=~ԎX /[+=(;9&vO( 3~W|οӪ;T+bX\2AL~݊7^ 9%KӶk*b5ñZsOm+8<_@ARٶHRA<Wg@2]dBe2O brł2 ؎"ʪ,@@iJ:W44hL&.|(z\_ⷋ& K='[ fW`6{;^rmŶSsw5?ZPendstream +endobj +4201 0 obj << +/Type /Page +/Contents 4202 0 R +/Resources 4200 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4178 0 R +/Annots [ 4204 0 R 4205 0 R ] +>> endobj +4204 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [201.985 624.519 255.917 637.421] +/Subtype/Link/A<> +>> endobj +4205 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [319.668 624.519 442.172 637.421] +/Subtype/Link/A<> +>> endobj +4203 0 obj << +/D [4201 0 R /XYZ 85.039 786.531 null] +>> endobj +374 0 obj << +/D [4201 0 R /XYZ 85.039 584.069 null] +>> endobj +3993 0 obj << +/D [4201 0 R /XYZ 85.039 559.517 null] +>> endobj +378 0 obj << +/D [4201 0 R /XYZ 85.039 519.943 null] +>> endobj +4206 0 obj << +/D [4201 0 R /XYZ 85.039 496.625 null] +>> endobj +382 0 obj << +/D [4201 0 R /XYZ 85.039 174.763 null] +>> endobj +4207 0 obj << +/D [4201 0 R /XYZ 85.039 154.767 null] +>> endobj +4200 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F72 3974 0 R /F18 3977 0 R /F20 2873 0 R /F35 2888 0 R /F73 4000 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4210 0 obj << +/Length 3110 +/Filter /FlateDecode +>> +stream +xڭZYoF~ ,V +V摧8qfر"-6cԐ_Uu(eYQ]]]WEGN]ONDVܜy7 Cp{(t|MԹȹ]:ՇB)5"廹?{s~V\?Ƈ` t"Q>\&3=OSgsjP/ Y5uZW'kFa罝'j78K;_^:{ɬ[Vo1hfw4m[Xˢ-pL.|4a;v݋1|0]MW>МPu?EѾ4V|:ғc }ut Z8@O7qqFBTO"M-dDN%f99qCy}&ݑ'^Jkܪ,9pܡ +fAxcM1ΦJ\LN ))u7O{5 XW|6O|gaŢV{P0Yܐ|G`92Z9bŽ Vi#炭p(rEJ=/fč3*A`2/w@_7HǖJ: 47Kt*,[7Z zb0/y~.~DR:+2N>cYvIoofmtiU)} &+GJ B%^'+b0YTǹX8:Sy /Rl j%P&FgC=L=,H^OQwxwlK IwJKGυƺcմ=gKrJ4W&+Jigm-q5 +GFZ~c 9'[ð]@BS:x9!E_P 0(DXŀ0<(Dljpt1UǗaZaN7QCPA8YG4(HqljC8%2Yr2{6[X~kD.hўJk79yWBqZR R(oJ.R{0. JHuΆ!ۦEXi]w-N~@O-vAD{kTK;r̒[SIl']#δDa4ml̆ń"v6ZY0k:O|Q W%0@1p+B"{ -gt ^:z#|r=@Av&Z c=L`#6;3Nb2Gb:h,%Tbqz'ۼn iyz<3d~W+c/Ћf +l͂o.nj=мx>1F̢C ;> +;áG0tt^َSIj\L~*e)EѠ" bmzmJ;~ZovTsSќAMF'U@90q$v~ґ(0xH lP> endobj +4212 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [489.95 414.026 512.306 425.715] +/Subtype /Link +/A << /S /GoTo /D (ads-test-smbclient) >> +>> endobj +4213 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 400.477 183.828 412.166] +/Subtype /Link +/A << /S /GoTo /D (ads-test-smbclient) >> +>> endobj +4214 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [214.276 400.477 356.796 412.166] +/Subtype /Link +/A << /S /GoTo /D (ads-create-machine-account) >> +>> endobj +4215 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [380.57 400.477 476.48 412.166] +/Subtype /Link +/A << /S /GoTo /D (ads-test-server) >> +>> endobj +4211 0 obj << +/D [4209 0 R /XYZ 85.039 786.531 null] +>> endobj +386 0 obj << +/D [4209 0 R /XYZ 85.039 372.659 null] +>> endobj +4216 0 obj << +/D [4209 0 R /XYZ 85.039 351.462 null] +>> endobj +390 0 obj << +/D [4209 0 R /XYZ 85.039 270.776 null] +>> endobj +4217 0 obj << +/D [4209 0 R /XYZ 85.039 250.181 null] +>> endobj +394 0 obj << +/D [4209 0 R /XYZ 85.039 150.632 null] +>> endobj +4218 0 obj << +/D [4209 0 R /XYZ 85.039 127.314 null] +>> endobj +4208 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F72 3974 0 R /F18 3977 0 R /F35 2888 0 R /F20 2873 0 R /F14 2903 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4222 0 obj << +/Length 3381 +/Filter /FlateDecode +>> +stream +xڭZo6_aKeV%RG_l@vsMC$Ȓ+ɛEJe.Qp8$7#fIF,=?BXbDq4 ? w_ Eyݜ_x?_4~v/gWNָgV /gt +l>M:;cьgM7>nhF CPc8JhjP*-<=6b/\ )p=?6HV~o"uZNMzȹ+ْLo" 9UvP|spQY^0GfG~)G-P͢l'kxlbĀ&wMcneC%n'9v +QStRW=B^ci=qn;u]c {@hk + oڶkyp8qnBM\(fi? +A%>^&c4x vw^qrveլRY#qXr˺iHeܝp'EG6{BЏ+e*VMT#iÅd[|W}_ln"1.1q=5|m .羲&o 3-7έcPc `5h=j:buHjOu\>lT6!+[i!< +IMPUbl yt*+7 %x+KHJD| "{DU(-!>;~(Ih]>@=~$7wL]$ qMgug}CE.[B8 K +*m*̹L +^4Fӂ x X[8`!H⸛.zUָIŞ5;xtL<p]鴫*'90LV.;-b?w + #$Bv9" p><45VHۺX!*1$ +`r0Dw ̍HߦqMx#?AJ'3@+m=Ft2| E$d3{*ZA#?|bg~",tA] :Bw銯eGGcb7O;*[/ BG)2$׮ѿ'Љ C0x$3$A~/gCaC- 9CnMFγi>OwL* #AGGX,+F,":[ĎvP%f6*DH+~# +c%`Zh*pС)#VةG"0TTESbSNHa +Xung'IO6BX@# {EݎRT)`:z123njT ٝ ^ [E(d .sβ{q&P}t E4j!H0@joQF`l @Y!-}ֺ V3AB4Z >A2Hfw⩻a/p&ס8- l\&U~6a9_M($$J}0}G69XNG~Oh bjƋ1-76Ȥb~U7#:|ĂVzhͱy~a@?h%D #tGigD˷|ސh)u0\@}5"5/d6SLѯb0?_17H-̼F6&Ë`*1(t\I߷\{lʎs]c;W1[6j%8~CDoЏ&k;UF7Q[WAp]j?PFS }eo!p:)I-$#_w~=h}Y7iT^-.x_`۳Cn^endstream +endobj +4221 0 obj << +/Type /Page +/Contents 4222 0 R +/Resources 4220 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4178 0 R +>> endobj +4223 0 obj << +/D [4221 0 R /XYZ 85.039 786.531 null] +>> endobj +398 0 obj << +/D [4221 0 R /XYZ 85.039 726.833 null] +>> endobj +4219 0 obj << +/D [4221 0 R /XYZ 85.039 703.515 null] +>> endobj +402 0 obj << +/D [4221 0 R /XYZ 85.039 649.927 null] +>> endobj +4224 0 obj << +/D [4221 0 R /XYZ 85.039 628.934 null] +>> endobj +406 0 obj << +/D [4221 0 R /XYZ 85.039 556.177 null] +>> endobj +4225 0 obj << +/D [4221 0 R /XYZ 85.039 529.562 null] +>> endobj +410 0 obj << +/D [4221 0 R /XYZ 85.039 405.903 null] +>> endobj +4226 0 obj << +/D [4221 0 R /XYZ 85.039 384.91 null] +>> endobj +414 0 obj << +/D [4221 0 R /XYZ 85.039 247.702 null] +>> endobj +4227 0 obj << +/D [4221 0 R /XYZ 85.039 224.385 null] +>> endobj +4220 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F66 3248 0 R /F35 2888 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4230 0 obj << +/Length 820 +/Filter /FlateDecode +>> +stream +xڥUMS0Wh"O܀3‰rPC<8vj; Jr֮>,&𣡖$YjE$a f#&2agɥ!MHde'KT8?EWgw}lQd4yh"5<;G589zDT7W: cy{p|w~t}Q3=(%MR@aa' \6-nc#?6[yO]=%/ Vr(G…ϖи-ѫg'!ʇKg`ެA ÉOt\4RYTDeq +,ˢ!(Lϻ3pS*{ܘ'T{ nH5$z|9Tm a7̖ mz<֭ࣅ8qVjա( RP@mzo|6ʫ4ف؞ "Wk>!MۅD əf$Kh%o5z< Zf%ɤDZ BbF6eUH/`ÀA7Sz+[G:Wn0hW95y_ibB+cǿӒp/!Y\ +k#$xnendstream +endobj +4229 0 obj << +/Type /Page +/Contents 4230 0 R +/Resources 4228 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4232 0 R +>> endobj +4231 0 obj << +/D [4229 0 R /XYZ 85.039 786.531 null] +>> endobj +4228 0 obj << +/Font << /F64 3118 0 R /F14 2903 0 R /F15 2884 0 R /F35 2888 0 R /F66 3248 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4235 0 obj << +/Length 3070 +/Filter /FlateDecode +>> +stream +xڍZKs6WHUy(>V"rH WrDֿ~GA hU«<񃸸O< 0wH$234,R|w) +O* #?($ˮ߽ܿ%IMvm׻8M;zß0^>d1820 +~`i~3[&&˽Qvs:3O2ڠdUw8UE'Q,YbmEi2>e#!)yOxyY$8.*,PןQ}2֎*GL{gʩʹhm']=~'>Wš{;8bo^XSI=|{O. iSv_0O4Hw㱆gl.49!#kjQ^z~վ Fy@k`-vH^-|&4~\\p}8ml1ԺjZ.&}Ny1fnfJo,c"T~R7<8U}ymҌ &wق92Бm@ʂKR~bvAѣ;V_ GjIO5\c= fyxZql}O\B`xj< @~SRM\=Lm1åxڳ&l%R^Eü%q_2`>f$KacGfRt-̤hڕ ǚ9N/]ԝbu k - B2׃#/T+7rb+&~hʫ=6 VXyǾ=rv=cs.h\? ^cD)Y-ΑGD)-:.EZďA@`&CA.o3h4Ʀ۷"Y:@~Պ̂S0Jɂ"b91. AHc޴; Di=.03HfmH_H,oM-Pem''(@Q3K궜/I*!7O"<_L)v/7VqgBj?`#{p|w{ HEOMlS8+< "GB?p%b>϶,<|{6Oœq J|)My +:Ŀ(&J=܂XO ;2Q09Lzb\y`ے 9QM|)`Ox)pՔ d8s,Jg =1}'qQ='ТLp%`Hȉrs:f9%|JVܒ:ƕJ5εȜїdR$gTq+b+*^}>TĈ?Hǚ7hﾇ A.B8PpNA)E$n( GA@U7Ell 0!3;I-b_Q(%KmJGh}* +] ))RNS0˕MˠuGw\rQ2_HEFΥ4Y +N`wWODى: O<ļ0!3*6"4 4 +TEK˜.ՌTM>$4N#1#ݔQ=D#l7>i]\".Mq\ vwkGh1\iAfYmvIE/z̓PFlp),Sࡗ*`®[RQd]bQ$(]1OkXv/dLQ*z(C Ԛ9KSnPXV Z9A1B| ;˴3IԜ2z'cvD,æx{5e9NWW$.`D&kA|U]S0gf|#ʒv([֐^c\:2&&6Whqn#Dgc' -KhqZ"jZ$-'$-b{NWq _w̟Q +wR3~F5:ՙ3%݃!fKpʢޅK+Z5jRO_"{.^ԳSr;-"Q˯A\9OE^J|a}06fUc3)Xvq*W r#}KF?iNmy O[@ӝԅM')(u{_A9~?5]h3Us3x;>70)-EG5.֘c)snσA? }9.w0ˡDnB "" }@_yg*(F9ۦs0GYنXp*(*]gv0-)؅B/1 ++jլw;O$bS-Q~fiS7AK?v|ȹ}USyCʪb@Yh?hyGYR:t?)®?eP 5#*}<9#jJȲ%:ӏ8z49!TFr_74-c0#$~DKpyq%}e'>d)m+?AMp +kWq얯XVu bP٨J%k +endstream +endobj +4234 0 obj << +/Type /Page +/Contents 4235 0 R +/Resources 4233 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4232 0 R +>> endobj +4236 0 obj << +/D [4234 0 R /XYZ 85.039 786.531 null] +>> endobj +418 0 obj << +/D [4234 0 R /XYZ 85.039 766.606 null] +>> endobj +2962 0 obj << +/D [4234 0 R /XYZ 85.039 676.205 null] +>> endobj +422 0 obj << +/D [4234 0 R /XYZ 85.039 603.448 null] +>> endobj +4237 0 obj << +/D [4234 0 R /XYZ 85.039 576.833 null] +>> endobj +426 0 obj << +/D [4234 0 R /XYZ 85.039 395.682 null] +>> endobj +4238 0 obj << +/D [4234 0 R /XYZ 85.039 366.278 null] +>> endobj +4233 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F66 3248 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4241 0 obj << +/Length 2675 +/Filter /FlateDecode +>> +stream +xڥYKs8Wf/TUSÜsXJ)?ׇ߮R)՗$qrJ ]!d%_jqߞ5D$^p*a(B7/U$ +% +l3n%蝃 ȹ]wMMg)`Ι"DėehH6X7˦d{xQw^ ׼`?;h 2oq-p҆uqCź3jE`vEjwS/vSaEkqj-R=luy/ޟ-D3Ox nSNi~FgGU]l䣹x/ Vňlʙ 3Rmа;O?\;$;P{rR6GT9 j/FW~_I{) FHbt$b?p1ojTvuky%H(@s 6fhGD`/&Qb fu7^&`=@p`b!&>hE9j_KPg7ei("`>j.׎蚒df P%о=/_;nɧ{ӱki;{#oTRba$p5+I\PxM~5[LW9Ȟ( omJ3uF(+#!cpsu/^-eZx6&c&ʯDK|[7n˼?|~{?HˢnJ־o>6{vMn#gfKYo9f.kz>(D`-{LʞntǛ)H}qS@+jd}X>ge!W=T#lXR%Ѯ+#l#JWkhfz0Pyq|!'DqppS->,hv1;Z vH~~C 9Cz _6@tUqƐO3NcC&!a5P!= RcOb\E( 0#8u^!P * >n?-(M +)C=;(.xRm'V&E5X~6$"A0N~4ZAEԥ .fevརRpyxQ DIOd`/ ?CTzC7-UKI%~geS7/KҼM=uM7tE~:Gm?ha7{|^-(5-&LK~F>:\VkWg? $#kE"|# *&C|F$Zendstream +endobj +4240 0 obj << +/Type /Page +/Contents 4241 0 R +/Resources 4239 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4232 0 R +>> endobj +4242 0 obj << +/D [4240 0 R /XYZ 85.039 786.531 null] +>> endobj +430 0 obj << +/D [4240 0 R /XYZ 85.039 766.606 null] +>> endobj +4243 0 obj << +/D [4240 0 R /XYZ 85.039 742.055 null] +>> endobj +434 0 obj << +/D [4240 0 R /XYZ 85.039 686.81 null] +>> endobj +4244 0 obj << +/D [4240 0 R /XYZ 85.039 667.938 null] +>> endobj +438 0 obj << +/D [4240 0 R /XYZ 85.039 321.515 null] +>> endobj +4245 0 obj << +/D [4240 0 R /XYZ 85.039 298.197 null] +>> endobj +4246 0 obj << +/D [4240 0 R /XYZ 85.039 256.885 null] +>> endobj +4247 0 obj << +/D [4240 0 R /XYZ 85.039 241.215 null] +>> endobj +4248 0 obj << +/D [4240 0 R /XYZ 85.039 213.511 null] +>> endobj +4249 0 obj << +/D [4240 0 R /XYZ 85.039 187.018 null] +>> endobj +4239 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F35 2888 0 R /F72 3974 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4252 0 obj << +/Length 1504 +/Filter /FlateDecode +>> +stream +xڥWo6_!t{1EkmWtm8B,ѕG)RdÆ 摼oGqǃ?DDqM9-켞p1,ϯU(KM'X*v_\-әtE{5j ow/hj)X^MNΉ\tdۉD;G=Ɠ)'2,wɟ.ړIE,cq,Gy8>%X(.-,Be¼|x8>.$t$s{AߞHX{|:^~ +H{ 4FwKf4Mqz?VS_at, !q5pP2 UqICA.Êܽ"=uj$o1V:3G * ǝ搢 ̉H#u7W,'+9U7;*=E凰@bN >uFwUZ]h@>T q4څpq7:H ن:uJ+xh^`EoɨB;GL9xFy1YB٧uIYc{a[{^PeNLIk*n@G CL:IIY9]eФ_!k9E-Ca- N_.=:R1X|o$y7sFr +8; h~czZg Z;7z}{DQ5ށm ax[lp閦 )v;GYFt#RW+ (ﲢ&r~fnޤ:'UNJH MW2`?G%$,TVZC334'׃lzk<ǎ`zH Uׅ0M'wZ^}Z&O73bX&u˫l =/BZǚ O|Øqmnm2LPEy|2]y/v.hDp!B Ec}E5P5b@s>ZK[ޢX77KXV% +}]cy^=a!>J&dhzl>tL"f}0U!hEzYwxFZZԦ_ ]KTwH+eaPw\lFDe"4u6;;Zmi>ui ۂƮP4}oZMeAߟMMi FhM`{J`@Ɲ\Vi4=jKH{F'AL7Z +}v%cxAPHa$[g0ב@# endstream +endobj +4251 0 obj << +/Type /Page +/Contents 4252 0 R +/Resources 4250 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4232 0 R +>> endobj +4253 0 obj << +/D [4251 0 R /XYZ 85.039 786.531 null] +>> endobj +442 0 obj << +/D [4251 0 R /XYZ 85.039 269.569 null] +>> endobj +4254 0 obj << +/D [4251 0 R /XYZ 85.039 240.833 null] +>> endobj +4250 0 obj << +/Font << /F64 3118 0 R /F14 2903 0 R /F15 2884 0 R /F56 2898 0 R /F35 2888 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4257 0 obj << +/Length 439 +/Filter /FlateDecode +>> +stream +x}RM0Whb<W@b/D&D&UP +mU)ϛV* NZ(LJ(1_5HSTټJ:2-4s!H=koȊ2i߼oPVpHڔDw-ph܅H+@2t\2Px`WA* #yOB|h\쓒c;ލL"[K*X$tq^Nquk j1.תîM,S_(sBu sW&V#כ~CvSA> endobj +4258 0 obj << +/D [4256 0 R /XYZ 85.039 786.531 null] +>> endobj +446 0 obj << +/D [4256 0 R /XYZ 85.039 766.606 null] +>> endobj +2963 0 obj << +/D [4256 0 R /XYZ 85.039 651.298 null] +>> endobj +450 0 obj << +/D [4256 0 R /XYZ 85.039 651.298 null] +>> endobj +4259 0 obj << +/D [4256 0 R /XYZ 85.039 622.563 null] +>> endobj +4255 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4262 0 obj << +/Length 249 +/Filter /FlateDecode +>> +stream +xuPN1+^v~AEqPDQpcÑ%gvbȆ$Rh°~xf j/A2͋ě&,s5t (0BH ,DL0Ov^}=踳exQRL95%_2T`fV?WS٭MM0Lۏ_*jw3# 4&,1,j'-Uʩ 6PD3DVn]=p-cendstream +endobj +4261 0 obj << +/Type /Page +/Contents 4262 0 R +/Resources 4260 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4232 0 R +>> endobj +4263 0 obj << +/D [4261 0 R /XYZ 85.039 786.531 null] +>> endobj +454 0 obj << +/D [4261 0 R /XYZ 85.039 547.583 null] +>> endobj +4260 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4266 0 obj << +/Length 2993 +/Filter /FlateDecode +>> +stream +xڥY[s~ϯy<+k6N:qfe['x%9i}$-'NC'3 :T1OT8[5lK#^fF(?cj\EAcXdQy9W_`~fhd~|$<|̻-j\|zwW3 +YOA{uɶ 彮yD UxhuE;ZiF:$C'sX0nEPh2? ~WA8HEy+h(yj=^0}l k" +6Nl ߨ*=y?0r-FeIoy!_5΄7WAA +K(N^Z_|-̓^(;vGTC' `,=<"(vlzi(E""!"gcbCTiB{Ժ \|N3 =쿮ppH$B26/2,p>2T: #RO^"&aYeSO}tむ:𡷱+pNrۖ P rpt\c: 31bԂ$O:cBoM +'E4(bX30դN^AjG=GZHi Ccs aWٝ` TMYRNO.FF!fVF$ӯ_`/rh0%Δhw+NX兠۳oK+JT`jic] +H +9>/aCFP^qqic璴ėpbO\ڂݠ2Ka-&5Yz4Ҕ=Rt\<1hOL㤄؍ mł%ʦ +̰z4zڦf'W+@38qA6)%F(1L5;r2[j݃{ɐn +3a +rhןūZ/+pU&gׂVmyh.%؍ seiL&}p7Z2pCL#Mߙ~a/?&ޠ1e@`3CM>XN v;Є|mgyĕFծ9_B,FpA:gpiUzZfy{ԬF ,>8} 3ZqaEbBJKb e."∇A ^  yZA<S؉&,d>a +݋.3h0{$ GZ^Cvzi ٵf~w;;$m]t7$mݺ.dv[lr S@UV]Li^zHCg_e;I~8+u1yXv2SBᲝ99ucbŏ/4G8MzbMb w#j(QِlMƙ߸Ψ%19R2I!Wa 6:Xl[u-Iq>1XJJ P}#X~1[sL_"f /9W@:lҹԓMq5%!L:ęwt_ 'Y{jencܹO+i˜\rp4Lq#04/(5*@r#?}75)M5}߭~ zm_]'^e21 g aI& ' B Ex/"U K#?&DJBu `QΦֲ(^tK X="aꘉw[Gn3d"{SOhEb.ׄIp$fݓZK)ROR)seU~rDF&iu.IV`ɛ> endobj +4267 0 obj << +/D [4265 0 R /XYZ 85.039 786.531 null] +>> endobj +4268 0 obj << +/D [4265 0 R /XYZ 85.039 766.606 null] +>> endobj +458 0 obj << +/D [4265 0 R /XYZ 85.039 766.606 null] +>> endobj +2964 0 obj << +/D [4265 0 R /XYZ 85.039 647.281 null] +>> endobj +462 0 obj << +/D [4265 0 R /XYZ 85.039 405.033 null] +>> endobj +4269 0 obj << +/D [4265 0 R /XYZ 85.039 383.271 null] +>> endobj +4264 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F72 3974 0 R /F18 3977 0 R /F66 3248 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4273 0 obj << +/Length 2229 +/Filter /FlateDecode +>> +stream +xڭY[s۶~[NEy_OM1'/{#Dɔ'@`wa$ ]O8PI>&KtDb&"cL^:vR h2_w3Y'T9.aw 87gd†Ei+\ C6ڕa=ϚB.A(3*+@8@|5Kp+[^*Sti -ڥ~_M `G?2aѪ\*R4A"XW~2YZZnݣd;_ i6HTK#Ӻh{3\ aZD Ϊ=g1!$5z }&*Q*@ UN)u +%kh'AT/DRL |;,`\P6=$E)͍hA9¨¸(jZ) Q׆ݼw`ǾN*Tizv/%BUMAHZvlKB8Ir|`WYga50kHAtdkpi v/'B{%PIbL,z&Z*[gwTEq (^@8?F/ϳꀣvTf*{<1 ϯeƭ@aףű_@O妶wc|fl5B(P'up*|@(!+ TuVgKwG(Fs@B)K!V{ܱGqV0Bh[.:LR7!h^߉^}Z,*aiS , `7UPćN*"T2?ҹ7!lrա ߈ 3\=F;F*ak7Ҽ#;mߎ?fGjO;1oU*7~([YJ<}DYC9uULɴR4 Ψ {W&s[Dfa| ;;Ĵ Y+|UA oz)_fk }Mvg,Y;X D㽣Eq4O#V/l87<"lL Npe =ӗ\/=;mmy92 D=FlȶC=h烗txѽx5(a}~^\TPB]@-z7߽F>W+<m=?\;|?b > endobj +4274 0 obj << +/D [4272 0 R /XYZ 85.039 786.531 null] +>> endobj +466 0 obj << +/D [4272 0 R /XYZ 85.039 668.735 null] +>> endobj +4275 0 obj << +/D [4272 0 R /XYZ 85.039 639.937 null] +>> endobj +4271 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4278 0 obj << +/Length 3677 +/Filter /FlateDecode +>> +stream +xڥZKsWfʢ~m%YkSe@PZCR!9ߧHpTT%h{gy%n;|ŸT ՏIt{nvs<9O\\aefw>|ȹ/A|]aWo\"]O|t_>['GÐox:_<7̳Wj{YnߝaXtYK\̍M~P=uazY8€F#7  XXH iq;4~{VĤ +2✾$O<+ftQ" I̺ DkHki ,+?co(u +kboe`j GaR&S);1ipm0h xd.}֏\8:Y3 +yy,!Q~ٕذa׊\Zm7p}t(f`>I7#ȝ~B/B\,z ➮oazhf>5vmpQ9~)q]5YYA 6W +[^|EWN;b~!ўu-yR^f@ӖCwM#V QiW`9Xb ;Lrsa}CG9N)+WyEhp(dHnI8`ݶ]Mh@ ڱ +dYf, txm8Tp%p V.%Ȁ.L; `[2=vSNὟlA=#mQj"o~ &zv2+EHroy//R^C{rY/ܚOn1"->qm#`X+Rk$u<.Iő88_q|r/&iHDkb7*d_t,'5, BFHCIaK)NP`Ū:Vl1#4$0q9wh}zìm!ھ\a|8t4QqW.\zBAJe6fUv`Ѷ='VsėՕת_ rkAC5B_-,tkZns.بpwl*I$VW%2bXXX)꜑xKęoK [mOy51,$-lCͣV %kDD-,ee ӜS&1OsUXG.،1+ 0,ʾ@0.*K# &')GPcA=~O9Q$cIleW6e)Dc񕼡}dd)kDZ5'7. 9G^{ S :}\NT*I,lGb`9C 뉂YAlEZ| * +cTS% &涄QΡtin`}45 r[@HR7tҒK/Ń,ȁObs  _N ;U]Mn +*؂rPI4cu7RD$iҬm |a)K߉H!>*_]rPÔ\,OMr2 40t6RLߋ, )Y 5 OJeZqidU d0u}@Қ\ƗYnzSĉHO=./_4B)=rbV Rܘզ,g ]+ [H<}y@ogBCzZ߸RZO沕JFqЦ4ФӹrmsPC/Cǵ{S䲫$i.R1>R?S@CQP xiu∽d@>]r UsQ¼7~M?qpWEH-9"ri G=]8J`r׌ Ǻؐŧm,qHDBYM]S`*'ݼ( +ę']y +Ah}5HErU>/E?| zlh^DymbѬ9Ơ+>=fNlBQ{yGp $u49QO]x6k,ƖDG,5͊JԥlH^1z]X^؞j: +Ɍ0l ]Y )쯴\ +zWMJ@Iv` @{: +~Ί2#Z31l1i'1Sm,do-Ζ&01ە9|KDI"N4XoeDaRHP ݦTL,'K y kP4>Pk(SЎω8' +!H;Q2&)7mXY(n܄b4Ŭ1}p,&5;d롂Zcʹ5ѳ!_ۃBǾh!Cj㚢iV9 Z6'Cr3ؒL;dFE= +͢SXڊN,NQavC ;Rns}ǍIc=Jg+&._"&Ф51V6hPZN#<.0`bV̥@`䓿jjBʑUgf w!x DnWMMP@!9Ă)BmAFKQGf~[X6tSgO27E~E}Y0{E}|#rɟIV4PnW"'%uooy? WMC3cr ܿН`o;LXѧTD]mсaԿɋ,Yi>aHq'ñ_jF԰ECIΒ#6~!Ӹ%X>0TtvKJQf=W尾bKo-R$4gU⹏H>PJ[ +RpD.ڥLBij7xцslq]FdlW!L> endobj +4279 0 obj << +/D [4277 0 R /XYZ 85.039 786.531 null] +>> endobj +470 0 obj << +/D [4277 0 R /XYZ 85.039 737.087 null] +>> endobj +4280 0 obj << +/D [4277 0 R /XYZ 85.039 710.472 null] +>> endobj +474 0 obj << +/D [4277 0 R /XYZ 85.039 638.889 null] +>> endobj +4281 0 obj << +/D [4277 0 R /XYZ 85.039 617.028 null] +>> endobj +478 0 obj << +/D [4277 0 R /XYZ 85.039 128.409 null] +>> endobj +4282 0 obj << +/D [4277 0 R /XYZ 85.039 106.548 null] +>> endobj +4276 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F56 2898 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4285 0 obj << +/Length 3696 +/Filter /FlateDecode +>> +stream +x]s6ݿo'D4Iط$NSjǍ@K͉$$Hʽ&]b./8Gd{ +#  yw}tcKή^&z{ytt$4=䄡WNn.N?MoĻ8gy㗳߯>pmw(lqt~c x}#EZW1'HͽhD T'Q:!9mvRɧ`RҰ OnP y2KjTn>t+]MU+g%wrvɋWcR^\#׵٠֓O?XxkΗKd}q%Odqu|!.&B[ +J%{y0a;" |,'d@Gd ̚kY <6rHS2r I s,I]] ^%Bq-ِЅ\sEXZT,tKMP]S5fsOac`!VlW­='cT +FuSP"!G'?*My0R +ZuHU腉$gM9"|8 +dM.R/6= 4y?uU`-<MY${,b\ͮUسvuӪWu273 / *\{ipH[E$$*9ȣԌ";NK]˯UAH#$dM +b(5#ZEH.ŝO &[ t[lPj}@6-҈l Ճ#gd3Jơָ$&܉VL7!1թʄ-|oH\ٛ@g:~,஬Ȇ&= +FGٚX|ffY!P!dv'-.zY{ox27eU70?,^VQw.H̐jtn ݨ +%FtcŲx8'gxvaS.|2~|=+=ϝN9"]ȁ.a@Ƿtr&@ ^[Ȇ0o+xrYo-BܻLd/twRdO )lER[ND@@.yplOm[IcN$AVˊ7uvEٕWbJ~V vJה +l^P +"u589DMxuLuk)l:e#Ñk̴ra,i]2QÐ=ID`PӀ`.NSK5 1gsϸʗ +ޚS-LHHr E\@&f~*QT < գk5} +9uZzNE06)~q96zN jP>GmTC)͢2ZT|c݃$2 !rL))j xyh^g֫u_}|Zpm.wҊ=yUpU/ʟY&xPՆWi)D7aK⺢Ky_+Ja7hQv): I>W"g|K:K$˻FqvCk%kQrA ^?{vcR麨lP%{7oL,s$e8J/ QQH9 Ýl+2% +=]C>&J1HD5[X1[ %`*J1J0ԣ<}æ{ec%TP`/1 @-Q^bCKN8AyY%8HǐGisFI'e~\Y΀R{CsQK8RnMeG6چ@-6R&Da$LV&%>}ND.Sۃ4L8BXWc;P,;2=#k[VKiP4r?흅rL`gvEZSh"Aە' eF^@Q퇞~,оb5{yBIq;ww$,=l˅hP}6vȉȔNuf-ZFt3kJćʺ̭JڴL`VE5kƻ<}4NV!d*H<,:H#J,Hx*.ϽJ|P_AG3Jp*J|=MrQ~R"jjZʬշUL.3ɗ{s[ gWAM/9&;HÚlhW=4&; ~&s'rܣ)/EӧAimTC$䉚Mv_fhx'lӔˊ}t֫ڛ4w\1$I蹞JoIw +[U!ѸH#/HT.Ͻ|P_AG3pTщvtuѫi)_0Hu\۵*I +iQA-VQqOQqiѕO`)x٤YkΕe:s#0Gzqt i8q |]8G+(w8^>~9b;d R=H13 g};7(45Bm`lPcØˇqdDTpù):N'`\:=M^6ʫp#eT/(mq-M@Tݦiy A:`~#_x3?C,7ΝKj -~?wpڐEu0LuTRCkTZ7 ӝ[ OJjf8O)햢yWYCOhk̏m xpsm{C)7{JG i4n#}/Ri4֋a?rWX ӟ}=?~8-p&Ndj*4Q8$O +@ _hYȐtI +W?qz+/1rp677{Yrj +#sVc(73!65[̮恍f?>Wm ІKeB'35`W[UfE@Ms<Îaڿ4M9TEC~ENvC"p|XϲiHҶ(L k F2ljfvD'endstream +endobj +4284 0 obj << +/Type /Page +/Contents 4285 0 R +/Resources 4283 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4270 0 R +>> endobj +4286 0 obj << +/D [4284 0 R /XYZ 85.039 786.531 null] +>> endobj +4287 0 obj << +/D [4284 0 R /XYZ 85.039 709.89 null] +>> endobj +4288 0 obj << +/D [4284 0 R /XYZ 85.039 695.734 null] +>> endobj +4289 0 obj << +/D [4284 0 R /XYZ 85.039 682.791 null] +>> endobj +4290 0 obj << +/D [4284 0 R /XYZ 85.039 671.363 null] +>> endobj +4291 0 obj << +/D [4284 0 R /XYZ 85.039 655.693 null] +>> endobj +4292 0 obj << +/D [4284 0 R /XYZ 85.039 642.144 null] +>> endobj +482 0 obj << +/D [4284 0 R /XYZ 85.039 474.243 null] +>> endobj +4293 0 obj << +/D [4284 0 R /XYZ 85.039 453.652 null] +>> endobj +486 0 obj << +/D [4284 0 R /XYZ 85.039 136.345 null] +>> endobj +4294 0 obj << +/D [4284 0 R /XYZ 85.039 106.941 null] +>> endobj +4283 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F14 2903 0 R /F56 2898 0 R /F20 2873 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4297 0 obj << +/Length 3950 +/Filter /FlateDecode +>> +stream +xڥ]sFݿ({[Ǜswo< [(vJLOLOwO ee/l'*/x +RP2 -{zO B]ƹЏ|XŇGCsP)$_.pğ._7h~8Q~+1kX|ɳ渔O25eS8l +Wat&SӮ(5xbzeà+Uw 6=`Ky=!w v bg T$f"Z3Š=g˽TtD4B^Ӄʡ'ΖŞƣ.gz"J^9E!Cmik$ ۑgXFVX{UvŪob(F vZ)j,^Zr@s1J#j*JXX?2ـ"~kXLhHF|L72l;wkhD(NՀ |?s5\$ޡk%f''c! +BWfo kOJ.x~o{4yHgavZYCx\pZȩj~m1#ӣW ;BCJuG@fa}vfGt މ{B66[^I/ hWF-Hc_VXZcUiA-mML9Pt + eg-өaāX# ΥKG!d'tJ 2#t]Bc/ q! +JR>N,Z"9hrk6%NLV<9+d*g +%ts&^-$I0avb25 tOQz_ +ql岟ݺX3yJգ[p%[,Ѧv'n8N=vYAoȁҶ-c@xXRPBSe_{ՙP~|i8Ɯ%twFn&U'xG[$0fC Wbv2QP0H;tZF;^`. +uDb ʡ@W*D3OA&]U3:nDr_ I!0)QT +F4ǖV8[1}ok6ƶڶI4IcXC-+ݵ։oY^&?OI dUBPUUg z ڿqn"7D8vT"4 :86 +q_GIhthZY5oB?W!薰iNrvfQfM%k M#'ɰ{yeM RIIX=8S:U+ƞHVZ.ydkBz| +nnFQG~*ծa ~jwZue^h#ppؿ:Ы{BWHe +|6><{(.0ߧ +x|3A  j+T[ Da T,VtdgSǗ.6x:4I V5^o82.*JunBU6Tfr~> ,&Mؠ?INItGX7[?VJ?˪ZE$}<)ӧ(yDRiF* ;][Yhfu2,A^'NzSdwT}&d|6UVtb8aƩY6Ɏ QحPXW_cbCCpý1i€5G=g7rM>҃.@uo\ʷ&PV:"\HJ+iu]p9WE9[܀Y<8"P'x54D1-du1㓄?)Ei92j6ա0o8@*voL(S)|[(}r1`Vl~mGw +SwvjS{5L6ZT]/$Ⱦ$xgâ3Nh9;XeUC6Aă<$yh#;T{ Ym46,G/o2NK`.=gT#7|U@u$3ge-w)]j@\Qt8_SMjMsݧm*aP+0 .Nz@)> endobj +4298 0 obj << +/D [4296 0 R /XYZ 85.039 786.531 null] +>> endobj +490 0 obj << +/D [4296 0 R /XYZ 85.039 250.49 null] +>> endobj +4299 0 obj << +/D [4296 0 R /XYZ 85.039 229.293 null] +>> endobj +4295 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F56 2898 0 R /F35 2888 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4302 0 obj << +/Length 2410 +/Filter /FlateDecode +>> +stream +xYo8_ᷓZ)kw@Ҵi! t [-,e%yw>HvC~99|3~b'(›ma݅ ͲxoC5xl$$l}v^ͧ}8(p__!Y9<y0pwog&\.޽c޼YtfoRM>n_Y*t~Ϟ"If n|///15YSV + bL~`IUEJHB;e>-"O.oO<-jvV؂+#X ,w9X# L 2 Ь +chŧ6MlwwӲY#P|7MBg-d9w:7@#kZ;խPR[(:[h-mn)P}XU wK[=V7 ͮo"c`tzFad^+X{4|/xl"-UH]^{u7 <FnG W6Q@i_=J8rI‡A@S/JeFh##.^8nyė}PLg|5^g9ZpgVhӽn2k+4GS L޳|p +rq<{5Ecq١\9(`@7CCuK;=`V:1:RN}@0w`YS[[M-QғYɲGSÓ!ӳ }-%0bpsU\~Q<Сg8vą.0rKyI(2VA2 P` +C#~9![(K<(&) _KK:ݙz.. %;yǍ&SZ5{ef1!P $a#ih-#Oip.~,Zd5{=zyR:g؀!ǾYMIH1 +9V){"4 W_๗ٱ8 N}<`ǜWd'';i(q_/i);wUF鮪 EɀyhgFGPexyMQ) & (3Yw0`h8f!P<pӉ2aTt; VWFSPS@y2ѴgzD$&kM0>08yqsC1E9}W6r9L$/=SU֤Hs 1No"p=1^ К5cǙ64r1Lv8eG -z;-=I40ʩP0>+ 5SAJ[o8 $ng?wG`Ir>hiZ= [tHCJE`D)$jH7I03vjj0/{*J +\ݠ1;-G;sW0BVauY`  "B2n::S!}\ &O\5рm N/qS͹c`yl_T2hB⻲TdI7L\>LNv09|yOID}70 MhIׇMUD*+1' Q0r({|@-4xB#U?ɜ '5xH.z Z9HZ&R4W"ڱA0 +Iʆ d +}sl9 +snH_Ng!c!hq_=24Ck BAG|B'RYAq=O(כ9!An8n 5ҕ)Ԋ_tJusHLr4i\o @B*vAw +mpuOأ[)zA+[(&ܵp'Қ|[c0n"8((wz+kyw}AK Q L@]؞:8c .oH[;rW_#uyMf. _DȕYP!1e NȄy +-m B&a:E!m· F"*\dNqGoK~AOXn L^n-G/7$?VCd؇mzQm9g]vę +ZX>`1@r0ABpľ7TbVXMOMq oBDUIh$yۑ35$<. >ľP1L] #e6 ?Ow7F6endstream +endobj +4301 0 obj << +/Type /Page +/Contents 4302 0 R +/Resources 4300 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4270 0 R +>> endobj +4303 0 obj << +/D [4301 0 R /XYZ 85.039 786.531 null] +>> endobj +494 0 obj << +/D [4301 0 R /XYZ 85.039 198.294 null] +>> endobj +4304 0 obj << +/D [4301 0 R /XYZ 85.039 174.977 null] +>> endobj +4300 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F20 2873 0 R /F11 2906 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4307 0 obj << +/Length 3102 +/Filter /FlateDecode +>> +stream +xڥZY6~_}"8xm>7N9&!DP,Iy2~ --F_7V!Q4 +B4"VMzoople񼽿yMlW* 0[u0xue݇6IǍZvGz6:]?|䁻wLx[~m~qhn~5\݄ @etc#DHxa-+$ȤALI,]%V!r77HGSEO#[{hNע[m΋hZ`U|* {!om` LZn)֚3vuȽac<)9|OH|nW[;TĞi(R.b#F'k.kmHb崕cRΏ5+܄xnr+w:?0$q$T4g2_p]XZ߾W˦Ľ>1YvܙĖ3ł99Zus_&D1S{nUyOhͩ`b 0+5MjY"+ _Տ+wVY21٤L>54Z˪2)|Q§f"3LpdFipIvM%*FCӊ8b* [URnL3 τ"{Q2U%AVr\n/D̴Vī`E ec]WWU^C 1ÖZNl)z$׎GNöTKe/#K \ v}t i;)9 {YRMwg`(W\p8%`jwe +#9OH[ѩR5XBd<پhqJ4LR< J m1~ΓrY&0Gk&QH<=>, p(‡P [Tir9|Zv>WMX!aTnt mm5(_oP $&C8 =4A _Npk١Y6F4HG6*%>@zmZ61XsGz~Yb$$|mtZFZ +g&0 g/;;6&IƟ J݆KBDqgShz$C n^H1~YVVx!on@trѐX9eEC +;F[c3QYxc!7]τ}9W{fD>f'x CiUg0ǝ`&$;ek?(ШLO9D(I/xJ +?;vUê-~ِJ06(eτo9~JA.jRø4 )s!Ť/tbde@ptɁ(\xK?U F]vhd(Pl$ؔJqő,7/KJfbdEM=z/6M~kt3(8b3Fr3pO0f89%q}Ù)R]j f_^IzWKN_W\[9lܲ'6ZkRݐ#<'EA)⯗Bz' S:,h/a !)3' |,\)Įo:(F^w .ʴMU]\qJ1owQPu>"\_h V''& +:c,+Ia/%DL! $_VM_%xҞkoÙImbR_?Q<|%epH4L`&~yϒbL;P0 ,rvuC&]ʟ +ʥbi6б@hfIɯ@L;rkKXd([=/LPUdTAN[*mjkaufl].tin%׿ ":ybv^.вywZ9J$aX#%`9KQWaGoT`+H#K82)o/ãPi0 YWXNQagA;>QZ%5Rب$t۱fbL D29U*^ 4c;NaMbRL7;%kFos՘YJ6jY8 я.,ė%C 9ӆhG㴥]Rpb;5/Y2p͎-V_'EH$[ +.#W]ØSe'W"G|yp+唖n&B'<8ZLPK!0q2jn/C^M%Od}Ma!TzT^WcY)^*퍮 +ٍL#tYDO.) +8,{bB.˔)6USj2usɋ` I rar:?4ex^ދgףmy cnF3qse4a=fMОAY_57FFNzxuXဎ`[&/m3#ꌖ/{̟7KixC°2;g\FPû %ꖲTvW,ݜ8@x xRPJ8U<)$oxB{p*9|B2IJd\B8 +._Պ#P2HN > endobj +4309 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [311.198 627.598 512.306 639.288] +/Subtype /Link +/A << /S /GoTo /D (browse-force-master) >> +>> endobj +4308 0 obj << +/D [4306 0 R /XYZ 85.039 786.531 null] +>> endobj +498 0 obj << +/D [4306 0 R /XYZ 85.039 463.421 null] +>> endobj +4310 0 obj << +/D [4306 0 R /XYZ 85.039 440.103 null] +>> endobj +4305 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4314 0 obj << +/Length 3318 +/Filter /FlateDecode +>> +stream +xڭ]o6=K`HQn{ٻMVl!MoHQ=盎f!f B, fU8[/W`,e<\9gQa>{xva`dc~ 0iﯣn> 8揷w?}V>>vmH/[Xt|y4N?mV6w뱐"&:+?ot;ٜIxODO} +FB 2%y:RWsܭ{蚸תIpxP& 2XG{ 8Gg5+ W+|KFpi3I|] R9=eXhQDX +pb"M|HH`%mYdi_ȂgEHJAN@-B-p_ V$Ԡ% +M-V%Z~~Jھ1ʑ1Zk:_:X>VvjE-P̪߳!2XM.ey݊z_0J!4̒b[r+bȂk.QZ6D2d It,>|9S2-&>2$ #;ƎȞq +c9DU+e䖑#Zz{D NvTY2o:Ֆ,YT$ibp"x%|u@fKc-:VN"T,q;VYi9x˶-iX81̈́q5o&,tDŞt])ho:P$FLVHY /Z?t=+"-::2q 3D5^㊢L%\nF e]6djq0R#nq|yo[v3|q+3,2؆d&1 wl4;:9ٿ?7vešڻ4 6n?IG"Z5Pvi+΍?/60* 2L&0g!Md0 +ĭDWp!|c7vLfFyb^*Yñ{7NlU쐟/(. rQl uNӬ/[Qv*DLrq; 4ǗET49EIa cӃ"FAòtAd Ί̥\͊[AS, +qS87b%h2 $v(=5/nNk b>1G3 *QC;PzY.)!CIWxmLM"Qsd!`BvJ) +LLZC<17l0Lx8_06)#SRHR0=5i9U+v;Gl{Fip^}/1E;,]7D W1Ykj?aK/,J5Ki%)(y9fU#o+WLm8&CNIFj4"WxƉ2jr^V.os||` +GB*Mj2^8h=5R/rK@X-9:h9K<[\jfbpܵyS \OΊ9UW&x8U]?ľCbM@4wDbyV$)p++uV_{ +=Omq9!&K8}#ƭJEBp~~*QU +oRdn.lDHc4[RdEyHNKcM֎->U1,RZh?vn +dmc4ebG"F|卓 q^y ك*Zv.Q=\QG=%:Hx]hDb$˭sv[Jo_\cZE^O@_FG6bǏ4De#<5G)JT_s&G?zm+ގboZV_1uVf9NQJɓO?uIjEn(! p|ߡ%( W$crm4>yׅJ \9R<.`rгP==x~kzZ0T^F!Z{? +0V u 8>6AsE +NlaZ kMp&Ӕ8ɨ `ؒ |ӯm =I6`gxm<endstream +endobj +4313 0 obj << +/Type /Page +/Contents 4314 0 R +/Resources 4312 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4311 0 R +>> endobj +4315 0 obj << +/D [4313 0 R /XYZ 85.039 786.531 null] +>> endobj +502 0 obj << +/D [4313 0 R /XYZ 85.039 766.606 null] +>> endobj +4316 0 obj << +/D [4313 0 R /XYZ 85.039 746.277 null] +>> endobj +4317 0 obj << +/D [4313 0 R /XYZ 85.039 540.254 null] +>> endobj +4318 0 obj << +/D [4313 0 R /XYZ 85.039 513.155 null] +>> endobj +4319 0 obj << +/D [4313 0 R /XYZ 85.039 452.981 null] +>> endobj +4320 0 obj << +/D [4313 0 R /XYZ 85.039 412.333 null] +>> endobj +506 0 obj << +/D [4313 0 R /XYZ 85.039 342.872 null] +>> endobj +4321 0 obj << +/D [4313 0 R /XYZ 85.039 324 null] +>> endobj +510 0 obj << +/D [4313 0 R /XYZ 85.039 254.538 null] +>> endobj +4322 0 obj << +/D [4313 0 R /XYZ 85.039 231.22 null] +>> endobj +514 0 obj << +/D [4313 0 R /XYZ 85.039 177.632 null] +>> endobj +4323 0 obj << +/D [4313 0 R /XYZ 85.039 154.314 null] +>> endobj +4312 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F35 2888 0 R /F66 3248 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4326 0 obj << +/Length 3615 +/Filter /FlateDecode +>> +stream +xڭ]o8=o+kYk65)>(4Ϳ"EJ.Tp8M E(mE*1b?ы-? c%(+/i*tut +"]\m~ 7}^1`.WY0x ~o\XFyp}ﮮ 8L]9;_޾[qɻ+ǸdϓЋ lL/UXIF˓8Z</x)%&WIn$1Q"^dq4Ps};TU%A4C?nZm^])|ԭڪ(,^KReJxWus u$_E<$m݆2a(ᚸ\]rt*0n >wE:RE\ț9mrQh ou\Qw:q!( >2: +$q]xcӮEI}Vu0%䁳O-7ήꭷ$l$ʨ83G,Ԗ5"Ztz%†$poae#v_x؄Amzܘ@TDs"RaPgFF bM=|AH!WqgȊ9#N&>,r=Joa:iA ̊pY!NHT6YϨn鴂:CInl~S_\сH` =C֚  +`oɭ 8)KseV +Q&m<_ksW HlI"۰YtرF!_iVW;$|=mM(}9k9Ϟբ{g#.zQ>d YvGFnߣp7j/K +`s^A$\j[;sQτ DI{8NCU#u=2KY@brD_z4c/l| m e/˧f}H^"МؼgZؽ(4^2E <Ƥlܗ̸ S@q4E(@8ƕ=ms;'ZY.xd`/6`pd%sF'cD9Ms ԩ?7yGӈFܟznW)}O41v9!H9((HZg/-j΂<˽eSeI{)yHypŝ v 4x`"X9PʦjݓvtDjΞ±.،lq^b^lmIVʕO&<ߘ`K=w ( 'h +; zGU7s5-I>eDű>Tu4 $͑< +Gl>\4t+H♭aWeMp/3JM)MY&]&c$@qapp\i +œ JS5 +*a 1YRJ VU{$5:,I>/=M,LHEq+Z;i:Sa)ٺzu/yf]':ޠ՛NץYWLt6kPfMUITJ@"a_R +&SI$8J&,z$@ ؄u)ap<‚w7-{'V7hO%7BwůIب!s)$NJyAraȏߊH ,sp@GGe4į8B\ine 24ʱ}`Cx7VTI%C8=IaCmug|I)^ScᶥdI>\n [fAOJla!E < wkaUU)|#M\w|ֈs~w4[zTA,IdO+ezDpOEMUg ;:;Zd;}ŕI@k.|9[ڧLyQJBoP3߻޷q 5)y\)".bePcZRG0ΠƂ3_H4d&;^dV|H+ NUL bXzm@U-=4VG0W!+?ϔ:c,$T(RU%27cS%;Ġ V< 4L;( eFdFNb$NsB\1Ow lB%w/sj5˞e͹g{̏jӨ}i_j?|> endobj +4327 0 obj << +/D [4325 0 R /XYZ 85.039 786.531 null] +>> endobj +518 0 obj << +/D [4325 0 R /XYZ 85.039 542.595 null] +>> endobj +4328 0 obj << +/D [4325 0 R /XYZ 85.039 521.398 null] +>> endobj +522 0 obj << +/D [4325 0 R /XYZ 85.039 363.693 null] +>> endobj +4329 0 obj << +/D [4325 0 R /XYZ 85.039 334.288 null] +>> endobj +4324 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4333 0 obj << +/Length 3495 +/Filter /FlateDecode +>> +stream +xڥks6Sf|3Iܛ(XmZ %$U (RM:X,$՞e$=ʟl`䇫@feܙvyXMl\[<,,_~yq6h +3g$I`7V<,Lx`qŀs?0nng?^.-т(B?)?^^gh^eґU$ 㒎ROѐMv$ڋUB|zu[`g ipaS zS͗MSULu'sm1n+g]n焾  ,Lϭ tD'37py0E̓t(h@5 v)e +AJ8o +h~"fLjebKo=gixQvvi 6ʑCwHq؍x[ ^_|#6@?owoqo=B_+k섂oʆ#ʀ]-Gh7y]۱vwyU؏E &?x?MSTle 8ȂJ:"[MS:@M]uv[~Uծ4L{"p0N[W!Z"pKf Msk8nf$z -g@yx)d9ȑ=hs B2c0*ļNe!d "i9m:|x}&75?QIh}¦e8s]wܟ KM(l#/p,\ =N2Ѐ~wg&긃C |R4c'1t₇!!Ϯi!W pkJH924`ƣ)SXy7yd?aOye E2L]'VRU2[j*<Z ޏz"/ru!)xԔah عKَ1[(hehcE5(Q@Q# XńU2ekOK&ߗRL+5eUlhMHO\Bg,(6S lZWCBD /|Ȑ8xACseJ e'\TB\{lJI26ԡj E"U\IEs4x'2 ~l<|}Cl$Z=C0ܖ&еX8_LjޟYryjdt)bj ~{ءrppP{{ T#)?7 ™6W62>wo|f eر]/GHcK%p@)E/ e-8($lA9KwldX@I*>3r*vgB1vz* f !t(& 6ޣVH- ^9Uټ<Cp &61Wwj8lS7%9IblzT+ t "2o:ȼ; 9e7K|wOޑ.^G![)(3 Bx9*WjKP!nA($\AږRh9GS v\q{2kJsfmN@N#hT˸CeՔOg!G|9xT1 LUs)tGq]޴2ɼ0[)1A,Z,>\ = ̛ECN ˆ;{U}=ڊFD鈈fl!g$2*KBňwnd}u;?~:jk +H%}?ŔLh5@D'A8v*&%*Қ_'F^']}4H,BWV>Ay~|zx] 9{ctV|UC7gWTj0 oŸ|w?c%BpP8zqE);B H~p^L'} +7l*yzzp Y5"s=?@;1?f_qکRzYuxq 14<'mH ?5endstream +endobj +4332 0 obj << +/Type /Page +/Contents 4333 0 R +/Resources 4331 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4311 0 R +>> endobj +4330 0 obj << +/Type /XObject +/Subtype /Form +/FormType 1 +/PTEX.FileName (./xslt/figures/important.pdf) +/PTEX.PageNumber 1 +/Matrix [1 0 0 1 0 0] +/BBox [0 0 31 31] +/Resources << +/ProcSet [ /PDF ] +>> +/Length 557 +/Filter [/FlateDecode] +>> +stream +xmIn1 EOPwu$Ig0ľ6V5 oʯsO #h8:5?Ơ[IL~F PYdzZ8򑖌f(E#@xoL ۹[ + +6\>RgbWj[ +WϢ{6;F])/ԬMu;pk;̩dh> endobj +526 0 obj << +/D [4332 0 R /XYZ 85.039 444.341 null] +>> endobj +4335 0 obj << +/D [4332 0 R /XYZ 85.039 425.672 null] +>> endobj +4331 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F72 3974 0 R /F18 3977 0 R /F20 2873 0 R /F11 2906 0 R >> +/XObject << /Im3 4330 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4338 0 obj << +/Length 2983 +/Filter /FlateDecode +>> +stream +xڥYs۸_R3C\:7'u\(9ᇎ Y;M&&Xow!Zl6F>\(X \_1* [ux.z՗r$wT޻zox-~ww}R-\/LB]湾^Z~[|qwA-Xpğ/d ځl\H״ uJKI(5jR&o^$QaBz\AEJyÀ;cmP-@m=Hq<뾫kvKxOU +h5v}о>&ߘ0۱ZJIL5Û{`R<4۵x0L|*YgEۉWF:ы$=0#Ҡ$P*oC7%7;K/\B_Oȶa#c Ŭa5J39'J0dѩ!atI] +[eT:%R~۽w*+{`q%{0$ [Xڲ4H|G;RT`@?WkQi%9M7ӤStPؙ;;7'+LSM4vlZ'~KyܕɎ݈S.B`\X#4% +h7:rԃ{6C B +%`<;F,a ZNԵ;2(~@fu.ۡ>tbt* l +L J5t@IԾJjBKmP `JN7~1G_Mk?mM2mW +VlI} cQ @8,.ykRv&EsLX) q'4P眥ؓip.cj! MGU̫$$#N)*6>P/s}'0y$ C&:@2#HvG2 8@jǾ*sz +6P~rYQ*2@C12uLۼKA(va W2*uN7U:3DѶ~6$}8PQlI\W2> +V QM>RD %Rpy=t[:P?3m}N@:]Y1RU8eK&H{ _l?zf.W[L'*qm H֞~+Et?@Kl6Z RK]UuuQ4Am5!_:qJZI3RL$wSl8%"852sg7L&]\F.̼ƲfjsXgI +jWeycܹ2k=,yJ2`_CCQr\ƶ9ܞ +k.58)?24n<k[}c9Q13nR]>04[Qi X4\ٱ{t_'ջrxLG~(~lOGT`T)J>CS38$ɩC_I |WweWw$w~2UVVc+A-d^}ď3+|FBuo9~x;G%)9w8JB!9m:|6"n}.$uW쵩QgaPTK T=RzhBԴֵB-(,8l)!v7 +8 m8 Eesa 9tm |.=_y؏#/+-]>Q7MCx9 } NX <;ze30/[;ԣ /a)g|E2@Y oZ50I^a_aQyUQhןnsnlba>ENUN+d-۬qG/!,%yҹ PQ8x}\ :$;޴AN<)?Ƈji%rmMPFmþ=gt0ϊ )_/v[ʋ5G`a9hg{hֶ%lJ ֐9mӓǿъ!~>TNùB;c "}M)v22駗|S֎y]P=nS)fT9M, Y# +hT_ӏ}WgJ~ 8 0xԼ,Kendstream +endobj +4337 0 obj << +/Type /Page +/Contents 4338 0 R +/Resources 4336 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4311 0 R +>> endobj +4339 0 obj << +/D [4337 0 R /XYZ 85.039 786.531 null] +>> endobj +530 0 obj << +/D [4337 0 R /XYZ 85.039 545.565 null] +>> endobj +4340 0 obj << +/D [4337 0 R /XYZ 85.039 522.247 null] +>> endobj +534 0 obj << +/D [4337 0 R /XYZ 85.039 453.261 null] +>> endobj +4341 0 obj << +/D [4337 0 R /XYZ 85.039 434.389 null] +>> endobj +538 0 obj << +/D [4337 0 R /XYZ 85.039 348.355 null] +>> endobj +4342 0 obj << +/D [4337 0 R /XYZ 85.039 318.951 null] +>> endobj +542 0 obj << +/D [4337 0 R /XYZ 85.039 277.528 null] +>> endobj +4343 0 obj << +/D [4337 0 R /XYZ 85.039 256.331 null] +>> endobj +4336 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F11 2906 0 R /F20 2873 0 R /F56 2898 0 R /F72 3974 0 R /F18 3977 0 R >> +/XObject << /Im2 4154 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4346 0 obj << +/Length 3262 +/Filter /FlateDecode +>> +stream +xڭkoH{~7_NjE3gl{5k\r,D\YhEyp8$$\$(bsM`z0Dyn%Óxn}Ό1@NgQ;S弹<þsƳ멎[z7G2{}_O;{)cO˛,O<$dmUI2ٜqH8=O R`b7PL*Iij&Ql:#d4h< j:n85 N'qifFڶjpY۪7X#6LebhQjhh=2k`71 3Kۼd:qԧj9ȼkv)Loʟ;F$Qz^iO=ij ='-qĥ?p37bڵ׸}f{00ycYb&x䞴@08B[9^)Ep./=/3•/C1K=A88<2LAdt,Oe +FA f HȾr*A<`e.U8_|uhL̕>dR= +V"y ^p D[@]ڪa0heiZ }IBP/n> otPQSݑj2lpl<*2nYӒk'chҴi+wv'3},ڈf3ʓsQj.b9rnعOXLbG9+\޲ &V`"~[r7w݊}t٤țv2{^14I1lX kk;L1'4R @7*^Vdq$8WL@WY-{XACVf}Iʳ 2| +y=Y_Ooi"2^p``؞ +}8yt?ўgm;D|Pl}5;d@oHo#+;qaWA DLb|$0KUYz`7ۖmju=q{Osʼ鎗O QR&?}ƢD:ۖ pWۅР5!a'6e_ی@ܢ*q#*kq#76Ҫ2X_b)Y٢I"7<c8!WsnyOfa-ƒ"KǶ Q}iȆЭ%I"kwuҩ[a + ]_ռGroM4t<6tQ$tȰ]b 7X-G7cgcgM6o[t ^X8E \a?ݾ>FW p4/G2 01/&=j4*7AP5JOH%t,un(+Yʝ3E"0#%RA>("#D`iWp~*ax =Ω` % 0.1 ocoJ -eD!VA]DNCӖÐndžyXw;%=!mxX+-R  ނKA y~po1n%G Oۑ<[!$UUozQZ[}C>2j*昢*Lf#j7n +.0~-'chԠis◣G `peēIBl§ HW/S$)tpQMŸo;tH5VakLXve]e%Wg\)lJY N^U#:Toa#y4怄̕p5t!å/DDsTҫp'\lCGJ%M,f7N~Ժthf9?ٺjfR"@#kv!}}%zWRIPx{=pՁnkCRDӢz.~}2|9.~+v_0:A]bӔ ^/=kpR.WN4.(z1(fc'}5Zx˔ +%JF8UV2k. 5 +9G |Fǜ¸Üv*`.yNZ9;Zw{&0)$W!BcC">צ= 2 mW4 O'"*XΊ'iupxN q~l~0|eq]ŔL4T7u:pF;@SC"ev>ZyPp C z} gXڈ7RH+@՚kQe!w̧ b] йBrb7tXi3`(ys(:3~=ʎb.?K'w:H:#?^6;QHY07z2R{Іv +rN{r.goلj*Ǐ 1?C-lG[;4Eʟ =v [70<31D:A72H2a,V9:|A)1!T!Fb癐 lEeqk`0(@ʲ*7̼b#(SE;_t5LPo{v ]^UЂSQQs!r3U |cc?7!h)묥 ^CP"">ZThg ܡ'|#\^ &mRY>$Rb&p}3Z,eObM#0-1(NАUendstream +endobj +4345 0 obj << +/Type /Page +/Contents 4346 0 R +/Resources 4344 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4311 0 R +>> endobj +4347 0 obj << +/D [4345 0 R /XYZ 85.039 786.531 null] +>> endobj +546 0 obj << +/D [4345 0 R /XYZ 85.039 550.693 null] +>> endobj +4348 0 obj << +/D [4345 0 R /XYZ 85.039 529.7 null] +>> endobj +550 0 obj << +/D [4345 0 R /XYZ 85.039 149.712 null] +>> endobj +4349 0 obj << +/D [4345 0 R /XYZ 85.039 119.095 null] +>> endobj +4344 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F66 3248 0 R /F20 2873 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4352 0 obj << +/Length 3629 +/Filter /FlateDecode +>> +stream +xڥZYs6~[*&9uv3;<$y%Zb EjIj $QԦRh4F_7f!fY&YFVpP,dѼY^D3yϖώOq̖_o~i3Efk5-~x_=r_y ?~L]G׿-ztmU<@; TvWQl82үx\4USRMę9=1), RS]"U=-Ȩ^yV4{*׼ I^]57Pp{ueY6H?xmhlbYY.OP0W͆Eo7KdPd9qOrX?PG'jw%<;S(OWİE"5m:: *P@XX58l: C&(`x'@p7 YR 0eR:O +B T;gyCtJXD'nqxs0Zv.&N {S|N'eʎGo?΢y_eí+|gs셠JH^܅P@5ph, B߻j1+YzW"{@ ;ݧۻw$X3wXəC\*&,Ȣt6k8ӑ_hp3aE/ڷxĆgh +&qAMa 3;H+VtFf AC}eT (*/:i) v'}`_w5&(B&'#˷H OIAquh5D@ۀ`1ka oL83%^\4ߝ~kqB7`k{ۖ<8 /c@KlH3WdBJV C88:XZNM:~;)sVu%}YHZ{x0t?Swۉ1AFLis0$0iP9K.pUár'[d,]X;rN ;{8ߪYMp%$.hHfUx*ܙG Ncv&D܂ wQ$ɼ?/2PM8C꓀⑪~eAnߣ +hZϟUUWmh#LmiNPrd!yg=W Z!:zvß'8_[02Ȏo-jufMa{jbA~q^G ,WyĦ=g;l@BṶZ {BƏF!z5oҗ7:4[ G$ϭ4 +t}[iƷXHR"gĺݱC6d6b/x?|5xj'8ۯj c/l$l!0xfŞ MXw+e?0k3b';3Tt5Q"Y(M`P[/ÃDaL4/pۂ=x|;]`-&̡uAcApkj + +ow'bjQHPga4}Jd=+fВ:&Sm;p[r:G9J$L*W6}V~5*r/7'b`@6R1IƬFŘ$E: {E|m;?@.udxP_,JXWSetN f7 AQl<]K~8)`hvS{'2DŽzSC\:øEaE"Ωx:R(:ȇV[$5ZX$WAD\Mx#u +9\rg0צka2߅ǘQt8L:]b1>sETAr~1UhW:'s,fqsGŻP^+U/j#vE޽N :\ y/K* +2W#SBBp;4_<6leGEj8TaNfb%A3\2V5ѱ_OWèwW-U)S+za:~ 1D{2)5!~']b疷oRsI6<ͷk] j)0oHp~$p.me-tR9\""X+qƯ 9Ћ2 3XW޵}|-HCY,*y$*ai2Yh SS :r6;[.]q[ v)#elU=v1)(Y n +lVf ّ`ш &:t +YxR@8 +.{!cTK I6i*E"\^c]D9!XKnݕAV!cYk}QӔTI 'qȢ;#qE}#;:$,dgl@UL2)jWTI%tqI%ʂ)Li?¾c@c4'X!uWf%agk,}t؈cN¾"[ SͤxŒ13YCOP?N3 ]Bin @<ߋ0AzI)J) +9(ơM/O๭' Ͳ?aynw7bS^+qjGsڮ0Hjj}rӏ.mNx~ws#ZSbc.8X\ +pG0u9h/*uә8Jkࢁg5z)Kuy}wJ_ؠ֜D,'.D<ٽ;.˧Æu9Vf-ݎ RNیY4Ѝ +{۸;=^s*lzN)ȴ:oqp*YW[ +`^C=.-=:uƺXd#Cr=aF%A맮}`b_jC$ DYz p?w=e H8ڂA 7J7͝VZ53>H?Op+\RpGE)${gl +Kb՘,3ˇKjT{>-6.lL\vA"~B~*,Tc\yg 8oN0RKG\9'u$id7" ۿ;nendstream +endobj +4351 0 obj << +/Type /Page +/Contents 4352 0 R +/Resources 4350 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4356 0 R +>> endobj +4353 0 obj << +/D [4351 0 R /XYZ 85.039 786.531 null] +>> endobj +554 0 obj << +/D [4351 0 R /XYZ 85.039 602.769 null] +>> endobj +4354 0 obj << +/D [4351 0 R /XYZ 85.039 581.572 null] +>> endobj +558 0 obj << +/D [4351 0 R /XYZ 85.039 152.579 null] +>> endobj +4355 0 obj << +/D [4351 0 R /XYZ 85.039 133.707 null] +>> endobj +4350 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F35 2888 0 R /F72 3974 0 R /F18 3977 0 R /F14 2903 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4359 0 obj << +/Length 3177 +/Filter /FlateDecode +>> +stream +xڥkoFP(4Wb;M"Vmq%Z&" +I0Z(7Krwvvv=$t'5OVޟ(8NTA:=vth2[]|x{3{w;=5x9=Ļ*~ï/?Mu=?ʀ[2{/'f)c_N+,_NߤƁt>Ckd:;wGwI)4&PL*I)'qINiꑿu^VV*fz'euNcv*eJT5Qfzc/Gjgl Nq5( |̊/#lp Ot ] gO ȇ![1rˬlNUx^[bt&wB38#/[0. uFa<ҫq{gaWqQ%K-H (tPġ!l\.b>a{AQYaUSo+/;H8:W%i'MQ]\+x#…CԈ0aH`$qz3@A#lio9!UP 1@,LShؗ$4/BU,pL W4dX[YjV!=*ԄM ]@pklKF#j0FͅbT'`ZxǕ%<IL]+΁#eAa3#|ǂaGdX *w3SAv%`\@;c.vs!ziN ;  G|ET+ +!Kg;)"ԼRls$w-jW*Q p@N + c+ehӀ<ّKYpOR8.'@ZOE#8D)}Q/%?x͹vw8xCJ){qSmL%@5#EW< "sQ|K^ń[Wvt<pBo0pBYpUɖr#8Z]l@H:#g&Q )bGJp/$<W ǚ \2s| +NyL|wRmを'YPE: (iyU>҆~\:^8FUd^8TiXU~6{!ũtQx1XkQ(ˡ #py]plJ.m#w *yiCk.!NsTR,~'a+k! YŒXmȢg1$0؈#RA-Lz˞Zw/Po^Hm|śU5&1Ǵ##bdV/!Z+qeFTGWґsiA` +I%ˣ L 8\upBbJ}Ks&G-=QH@o Ɏ{Os;,aH1--5R4J/Um s2+oz5BuUqCrnk]kp>kLHg郼#Fu f8Y?cadY;?¶7iuMS+]2d`4ɠ,DB:N`2N`ַ{iW %P_]1] HG7YƜe8gG1+V O@U%Zjfv0PaS { Ă,y_6+ lƦB9$".X!YFJJ...p[^%S +qT7b]a.oiõnyk-qEPpp5aH B"'w-r/M69mU9ꨊS) _+>I5wD +XzZos DSm]kh$LD+FpWRJuVƧI&NKN\ix屮<*NcS+փFb8 1HxY8j$8ܞֺ0,h ׌;(ty+p'5tAToW(qR~\wt*yC (l:Od70]*vmIMOt; w:jt,3@Ej$xSBK#5EJ"&*RՃ}b]a`׮+䐧h'G&=D׌ H"Tܒ wva&cܷaԛY~鏲aqL ,xZ=ŮyE@t ~"xXQ1ֻPaTnmey i[e{FP.[蓕3Ԇ& +GF1@]p1ͮ#EgaL2Hz̴GJ^)`GTdG5Xvkp[$.>mh.^ٮ!F[?ѫ=zd-J~^aҀD;2(Q"1?t6!&if0r{i*c9H {: (04k`>oq33foZo]NQK&i<͊dl2GѪ-|^껺m +R8j:XB#W BlN&jGb2x•++6N/G`8*L >wY]e&.qUU +AX`Yݿa$#vBL* =@c +>P)ʕzi~T=Ŏs e%yM n8i/)8*j|30xwp?=Vj 4Uҏ~2x0:4ZԮ?!V4@ҏЏu4o > Ƈ'і&&#~?Z^8߷-vtGaxvmiL +؆Sc3^HaX> Y;ƒG,;%o7w3Bߚѷw_K6DgP~[w3/ 7xendstream +endobj +4358 0 obj << +/Type /Page +/Contents 4359 0 R +/Resources 4357 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4356 0 R +>> endobj +4360 0 obj << +/D [4358 0 R /XYZ 85.039 786.531 null] +>> endobj +562 0 obj << +/D [4358 0 R /XYZ 85.039 602.163 null] +>> endobj +4361 0 obj << +/D [4358 0 R /XYZ 85.039 581.572 null] +>> endobj +566 0 obj << +/D [4358 0 R /XYZ 85.039 324.746 null] +>> endobj +4362 0 obj << +/D [4358 0 R /XYZ 85.039 302.031 null] +>> endobj +4357 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F66 3248 0 R /F35 2888 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4365 0 obj << +/Length 4442 +/Filter /FlateDecode +>> +stream +x\Y6~_7SUC\Urm-׾:X\q#}.zO\_}ūx44e OF3YjrYjΤy_\|Wuv_ Iə2uɸHLJ̔sin ӍHCe.ǫ%/Kè)Ɇl͚+`ٚКDlit1Z\wFɑ +bZ &QtyZ܏66SX v x#OËx: +~WSK\޷Cը-DW\(Ix5sYuAߟp"1XX6^"8En!&6pHhi8#5Wаe@>gIl&}^sxIZpq|ມ9"=vJϚp@+(pr TVOy oVy6A/`> $SM\a^^K( +v< +H[ҳ=6a|MkU6hi97V3kB/5,ttcO?ՕCSz&IxC.X'tCX]eݸsA`J@c9U;;ʾ7RY3XT,c,~Oy>`ۘhOPcoA2;@ ybuU%3/.}q܎w~CH2Zm糆`_{d=";+hi~C$W<#FdU/ \)4;t%[TdIe״!uUHa 8m4Tyi񞆴p +V^[v+?Koi >Ҧew0.uH!6n럥d&J7e[mjqW,͋TKZgGT;?nu(2$IQ<4w+Z(0JV$eo.OEt8gԢ*Zg[N\E@w<%vUD|]uW*N+ +yyyJ^0#UPbH? y +֤U;:Uř'_#۵חGs_Ÿu?Z\{{oN:`jxQm xO7s :NoQ=Z=%' jF|5G=ɟވy=xO7Q𞁿xO===9}|h7Nz^-([1Vk3w<2GP2şeMmf@ rpIbYܲF| +45]8J0?d9ύ?I%qgU6Hk4(~3WR܏nr#U4W[VzZ +Dž9'|&>t_ +&"{|K.95.A26g\c\XWq#GhDwC eP=ۧX"2v4&y-j0 ZGYSk˗ e f].\]AI߃YִތoPdG}C| 4OÔ0(J A[iUrIj,%hȁCHwAʕJ~~mrU'ʔRNm-& +P9\XUQ͊ \*gmU JnrQIpCW>fD$Ld-k}bO I v4~½y +oV'-8"ϫn>DT.Ldbtȍ.ϻWQpvwؐ$s0rE WzyY8 5K¯loKB[S; 3/u5s_%|endstream +endobj +4364 0 obj << +/Type /Page +/Contents 4365 0 R +/Resources 4363 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4356 0 R +>> endobj +4366 0 obj << +/D [4364 0 R /XYZ 85.039 786.531 null] +>> endobj +4367 0 obj << +/D [4364 0 R /XYZ 85.039 342.26 null] +>> endobj +4368 0 obj << +/D [4364 0 R /XYZ 282.773 348.233 null] +>> endobj +4363 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F56 2898 0 R /F11 2906 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4371 0 obj << +/Length 3926 +/Filter /FlateDecode +>> +stream +x\]s}ׯ# |7IvR!%Q]^|- Zft.3 mN~ޅSn\63CZ~ě?ORb4&OOG'3FF ō c!lD[M!Z`S"th0җίV_luyɱ4zCT$Glz(;9;ng>"LzK?j{Tƪ!=K"+#"RɉeC +6nܗ(G륭NTfpF$0p0!tWa$p;c v}>謌KY';0G=w'!na ;]wtV-2 ߠBɬ SI5T:+!9k;Z4IxSb(S.a\q: SY: p3k9)tp]*Jc8KExE_xI%of:}' iX?C,F:#$vhCS^pUF8%VW *\!xhedN'ul22!QFHU_G*8|gPE1 `V@8k@[ u|4 4ԺV +Yܸʣ@a@#@2.;@_%cG8epxHCG)N)L'ϸDqU:+P (ũ(N1^TW[JJJ$Õ(85%S)NޟQS_8E|d.F)Nx%{& 11*d3D( ̰"DH qHIU FO%Hmċ!fc?!,B{.Yfq*(2J\3M5jjL6YM5DM'!QV:XXMe5iXM(ՔXM1^TW[HJJ$u+H5guDbjgR_G\w^sܖW}w!rK[_p3;dEG8t@܆^ӻˆ)`3qSM6l`߬gGg.>e{GTh!ix;7;\'5}Fe{kqM;rdZ{mõ\[n]S{-3_b&ܕ- +4U"nfi:{ۙP #>¦;AÀ|M +Ԉeq +zעf%O)o}v N<.̸dY8r\Ù-UE2&> B1b3A}YfiZ)&/aAɩ={dWא~k PɀNY:u8:L~,Ԙwx+h&^!_FƂYlbmS8?YC*h->خӫO;_6ϕ`wQ5qr~\o0 +?| Lxƛ7Ef۔S7 Sdzv:DX;AH+#YнYl 5 K7ʡ aftލ5$ O"! 1,]xiy=%X%mF*x{P!o9WaGF$d"eE ?*!O,G$dh\B&-!KQJrϔ1 1 Yc Oe DsVeGY'丼4YOe\a>[AVwZ)⎋09 +}q&* z{5X"<-E9'*2Gr3bs\A,Df"s\ +*Jc4񊋇5" 9 +*j_^WUWj'ߎ)j۫Etq{5GU7Ve32} + + +Sd5&YhP@_ BL͞9+dA0)d3P( UlЁ- \UF_e Tгt@I2bB:adc +Hy:JcDWl+X W(& dzqcTB#>i9.T4c淂豈2 1U䭯qJ@JXe9r0-*$ɧ30pU~:+ רJ)+1bR5╪I+1rjK4/ _":bN_:ES^";%tyt2tUY!#SN F} +ݩ;%d@_Hw8=?UIx:DQPH;8;l'Bcˏ5"Ըcчrn uY!!#^~/?A׼t ˏEq1z| +qUsBxSVsa2L^ɫTJ^ CG1nAUqݶMI@CmWmI>XI(ՁOԷ :VL@jbgDo/nv/VNDV' ?T(G)mG ~ϋx8x?NW0-@/TzWQDCFq>crj5 + }wk5%^e +UK.ۿ[ GRc[,s6 +G4,0T°mL墭4 r A k5ތ ~w/ +w~'3#41˩U(2QBUc!J 1ՏۘpӼ$w3{z}F* +ݐ/sr'gH5؅5|8yipĊ) ]o1ԍ72404 +N͗9 r߆Po֣3қ ԆYغv]ȟM=0.hlV+E_O{mzӯrrPMf/E~լ([o%9 [/ET~<#W"V39nyzH#*WsE(WQrA={u-QOppCe~nzТ_įj{+mLyM`4 y $Ip/Y[\YT·yȢ!lG"B ?J=JI l|lmdvy +?BxSendstream +endobj +4370 0 obj << +/Type /Page +/Contents 4371 0 R +/Resources 4369 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4356 0 R +>> endobj +4372 0 obj << +/D [4370 0 R /XYZ 85.039 786.531 null] +>> endobj +4373 0 obj << +/D [4370 0 R /XYZ 85.039 738.781 null] +>> endobj +4374 0 obj << +/D [4370 0 R /XYZ 282.773 744.755 null] +>> endobj +4375 0 obj << +/D [4370 0 R /XYZ 85.039 454.842 null] +>> endobj +4376 0 obj << +/D [4370 0 R /XYZ 282.773 460.815 null] +>> endobj +4377 0 obj << +/D [4370 0 R /XYZ 85.039 83.572 null] +>> endobj +4369 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4380 0 obj << +/Length 3648 +/Filter /FlateDecode +>> +stream +xڵ[]۶}_KNtk'ݴ^x:IwF7$IX$pqqpqpq%,b ,I@K1[3|w%Ҙ,;6W|,fOO:g7{χ7?,R9X.Ib+,Vo=Fw-t+dJi|"aH􀶜ϦD" $"3f4~FIOϊr/:ʻ,O֙Lj 1 PP@@QRLfH*f:Klp~Sua1:SZ6D*u(AG=o'=}@AuKzDL&"DCcy} +F{AZ9} +N: } +=%x/СDA}.y܋9ߜx^H)s!' cL+Ś5[qs($_>/U)f/[P"}䛖; P`Hn8BKL +P]I|ǕEG6;x.wyC\~ኻƂwPu?0F^`*<6[!X,ST8+&9\W›r %^p(<G'a漲^CDFW +ZG_#.dY +`i(2){ +=No\1x8h"2NosXXoG˕ٖiձwId_Z9emf#uqZynm AvEB!N1Ha"i?jXC |+"ep dvVvi*܉в >/[UU8cS)lx)wa XZd} x)a? 7}7{O \wCpPyEqe?-2ډʦ# +?;6"A@-ȫt1HwFd_,7>MkhaKNpqsw܄1va|e|Lj605uL +79->jc eر_?P|O"!oo?k,J kI6x[rS;Sㆆ8^J69msOxamBf$}3o.@\hqǍRd"SW`Mʼn+^|Xw mH ;X7N*Mwr#ˎo^xAi`Ű)@1 X̖zmO+9ҎYx*Hnw a<+StcMi=_;9YحL=>IxϬRQn0ǡq͘ FiroGnl-kvz!^<X6@W, ´=&EE6H&v2 lZI=$'n-LУ|@;maс3.#k`Q2 +=d`:6㲄36!%.cEi$9T!gieqrT(` +;A.1ʣMXH rl{IjLnnB! A#Q/z&'9 \;s9l +Ji)y1D=qmf xwu麰{[۲ %oz?@UF3F/()_OAR8!#J8Q O_Csp endstream +endobj +4379 0 obj << +/Type /Page +/Contents 4380 0 R +/Resources 4378 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4356 0 R +>> endobj +4381 0 obj << +/D [4379 0 R /XYZ 85.039 786.531 null] +>> endobj +4382 0 obj << +/D [4379 0 R /XYZ 85.039 763.817 null] +>> endobj +4383 0 obj << +/D [4379 0 R /XYZ 282.773 769.79 null] +>> endobj +4384 0 obj << +/D [4379 0 R /XYZ 85.039 538.727 null] +>> endobj +4385 0 obj << +/D [4379 0 R /XYZ 85.039 512.098 null] +>> endobj +570 0 obj << +/D [4379 0 R /XYZ 85.039 443.583 null] +>> endobj +4386 0 obj << +/D [4379 0 R /XYZ 85.039 414.847 null] +>> endobj +574 0 obj << +/D [4379 0 R /XYZ 85.039 356.813 null] +>> endobj +4387 0 obj << +/D [4379 0 R /XYZ 85.039 321.669 null] +>> endobj +578 0 obj << +/D [4379 0 R /XYZ 85.039 170.51 null] +>> endobj +4388 0 obj << +/D [4379 0 R /XYZ 85.039 138.296 null] +>> endobj +4378 0 obj << +/Font << /F64 3118 0 R /F56 2898 0 R /F15 2884 0 R /F20 2873 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4391 0 obj << +/Length 3100 +/Filter /FlateDecode +>> +stream +xڥYKoFW9Q@D|؃I`IDܡDbo}U$%у.c62Ei5*X,W+b]t4[[?vw0&^σa<f-[+\ElhP<,;(}"źQ MEH m'oBR2".S^8Sf6[h20sB n;2Ub2lW`@=k]aYmzYCʽd'k#w(dw+[*m' E]7ymA(Qf*T2m˧{q*'΋^=@S')bǔh-XU&[گu5kQ9?W߃-_abgLsLj +.X_Mj蛾iߖY䑁#k :6vsR4V`>JuE>xdw#XbV~73=бD᥌w 3+8ϛx hq$rsl;dHtX7w +NɳSbB((4,SEhde<ޔFѨՌ?lpPr[B+\ c;-z\i.z"!nd|Mr/&p(GNQ yhUZnOBi_j2=/ 2̺ /ҝnoI2 :66~n!GĽ( Nïb@G72FtpPq #vtCC#,M`Mq88A$zrhŞ\@P .ܺUד4,ͫnm[~xs_v*W62{z(NU~ȗ.`S? R͇A9@p 4UGc0^MHuxa$w7ذ o@NK ?&2Ms(KnD~J{S-%E?_>Ɓo|b}5ud3ΚNLc8ŷi)<Y#̙o$9A Q3F⯕9XԴa5q=k7:9R 8&7 +> x6SHݮH j/ҐAh6o|j }n5|Mm/4s@M5;U互i!L+>fSJ_tx粁{ضI#ÆI3&dRxQ|D.ӈ%cX*1dcCu PŮPpl_iA(k引a8#J8j\'#B- +yh#WR/!cg"Q"gcI yss<Nĉx @WKj$ˑv3?$0$諭>Q:=dʱ&,w'>E#ZM-GȮ0ܗ&k*#0δl+`Af҆["Jh#+D~ 8鰑6h4Wņ^2f@uRيn{n$0R@ +;8")AJ dtpA1LBi.8 YB~…KD x;ٓ^}!=׋"}R:8 ❁8حJԲǵ*r< +hbSwZB4ƥ; ɼD -L>dfx_<[Mze48yu h^g@~ uW(Wz.%/0AMX/R7gsB[)yu籤'o$˜];k`mȼ03y(7tHNFg7ٙW( +T2sș<ѳ05J!3!L|4᜝_m11 Q? 4׊A[?!!*DT∘R|4ran薛L38H{g|ˏ}S ڦdFF+3,`z(io4 &mI!~ª݆+Z[D.EXޥ/"yXM*vl\Y磛=? [;9Nh2l-*YK3-Q[ Rw՞̍$FC\x%7iةbi9gyvDY봕3ʢ{}؏˺2PZ +”@yp~dlQگ!Fendstream +endobj +4390 0 obj << +/Type /Page +/Contents 4391 0 R +/Resources 4389 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4356 0 R +>> endobj +4392 0 obj << +/D [4390 0 R /XYZ 85.039 786.531 null] +>> endobj +582 0 obj << +/D [4390 0 R /XYZ 85.039 766.606 null] +>> endobj +2965 0 obj << +/D [4390 0 R /XYZ 85.039 676.205 null] +>> endobj +586 0 obj << +/D [4390 0 R /XYZ 85.039 329.547 null] +>> endobj +4393 0 obj << +/D [4390 0 R /XYZ 85.039 307.786 null] +>> endobj +4389 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F66 3248 0 R /F72 3974 0 R /F18 3977 0 R /F35 2888 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4396 0 obj << +/Length 3995 +/Filter /FlateDecode +>> +stream +xڥnF_! ,8dΛN0Wb@J%f(QCR߾uu)QbQu7Y^͒4vw7l3b! ͻ8ylhdelY_ w$I۹JϿ~ZL>ql8?=X,q|0O7?. I @*7+D?xn'h{eMnүon~6x.)&*-Mpb7R\q)+7L!"?tp|wzJ)KW+E'cpCqEVBT<~x-V=μJz?0q 8ah# ؋G/e[MJ9Uǿ9 +X4WӴ0P5}Eq,<[$N!'QX2BzXU5" ="u:=v~ĭ nW3귂窃}%e>|Y:@* |ot؀D{>E);ْ, +[@"d#"*9CϽ`PF=8*-mʪCK !rTjUԤ)tft6k:M=nRRf+"Idxmw*#TDjM dGD5^Mb_].^l|j{4oNtSUKEm^iqBEI$uޗ*nn}$e"[%oBX %>6@2*!z'<]]G=7("ۊh! +anOI6hگkc)ZNȳ_*G-1Q.TTKᜥZ * RGc8#nޝ5vHXA;;A9p +9#VY~N@ݻkYE5}`3<9bQM"A &{0aaiEUޕ̹dɄaL"/Zen^:PKigs)uCmٱ0PlL@GkyupN&ƝԐY3t/|X% ~KaVϠ$z9dҥv[oHZ +6$4jH APʝUNs JxB4 ,~і͎&I@ׅzzE= & 'Q5<e9,'rU~O +(i^4w +{b6Y\7d>w:ژ8?; ߒT䘩~Iaض ̉BGo_+ոjȋjOdd`g|ic`CfVdVL`_%0 +=Х^خɸs'{x1>|n&8q\nH@K㲰aXw]:G9ebVٴ%pI0F^&* DTD^Cz2𠤞Gmb@:$18~;lL֓H\*yÜ&:KGgUv-75w#:#0YEN 7umKUL#YW JK\\'^7Κ.Jb5`.k wHHm॑Շ :/͹@ )5r5)#LՍ[PbK8'¯Q }Z,t^2~P)BCO*Сr[Iu6O'w9)N#H^`(y[AVխ湓z&7Mc.`Oi2~BY/}O*'p8_)F4qP?)VS\<&ՕwM}Ŋ){$yYۍ"T.6{Үl-1zg&@\8SYL~DL+!?C B.<4ne_7:rx_eBm\=("ڄ)m:!$`,NR4 DGC;ޣzI+3JM&xWXak&^qF>&ht Qa{3}^t,!&W=tٵh <þBqݥLRtu{9~&LI,v>,c$) +V;!N.sڏ.< TAFR_PJRi~o_>k ,18b)0(thB`3VbB?Ϯ~!i`o |?p9t\o=b # U y)kNRY47*tTQwCgH!ПjЕPsD+PcvTȱ5s_Z&;[ [6IQb{<`^pAc4*<6+/XL#<[Be(-fL_ +L^0J=LӺAu'#-5~ḩ`1h]Ɵ?EC D )|׷ƺjڸD*q$]d)Q^. &([Pendstream +endobj +4395 0 obj << +/Type /Page +/Contents 4396 0 R +/Resources 4394 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4399 0 R +>> endobj +4397 0 obj << +/D [4395 0 R /XYZ 85.039 786.531 null] +>> endobj +590 0 obj << +/D [4395 0 R /XYZ 85.039 149.719 null] +>> endobj +4398 0 obj << +/D [4395 0 R /XYZ 85.039 123.104 null] +>> endobj +4394 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F72 3974 0 R /F66 3248 0 R /F35 2888 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4402 0 obj << +/Length 3382 +/Filter /FlateDecode +>> +stream +xڥZ[۶~_a%Z Vt!uA)MusAe[Xr$9}FJ^K[`133gv0IП+o| |bqMf^:[l:4-֟=x< Cy' q^)y{>j:n +)0-09C/l ~a̾Cs4UWJV˫۫?ZLS35f&NKz`fnb2˪9@.G]֠g9m5[$NiI689stЩf(YgZfךڧsy*s&ʤ]^4<ɷ:tS}4XJ +v.,;yv|eȻ~K_ء%t<r9hLj%݊a5D(_ J6A(<YǑCxG>4h[oҾwN;5Ove{t \G܅HeˌGf`vikiݘ]>ػ>vrw+%^7wF.pz߲Dm +7#p :)-$4 5]Ufܳ=UC{¬PbԈ_(QVoc`ȏ۬Bhk +,_- +` +qʗKdt +|2\t.^2"pL )e]U>"'!}PY#}k&&AFBL;1?AbRJ. %'ٔ91&";Yl䯤%[1 + nCqψ#cI̸-ĢJ2t Dd[Э¹ބ I BmtW~|g@J f :PCLbD%ϴCdU N 8J}8P}7E'ܗ4j¦Ю H؞b|\G!cSt84N75LC4SA%NQEaܾ@n0 8E* ގp#Z@mN;^eL^! g904?/v ˂4pA(9=f`D!oq2r$$” =ÉbLP`4 e?30*󬹌Mv=5!CS}cY wf-V[ +.[QHRP0', IƝ|q0\hp~@ Mƪ$al1үC<[Y\w #\ZS6ZtD_%%g0+zt!+ ,0ֳ\_iݻ୬y#ox_ˣb1oC;{0GQpÏl~иAM E?#CV#ûwŻ&:CȹacԹ| +Т YC?E\|Gm*_ +\= UǍ69L ^?vl^9@Y*96ty-XͿ}m׻6beRxTDJ @,%C΋ hsdYx{驌U-eE3F\Hd q&##R%6θ q +!Xif#kh+f6Kסl9@}=M],5U}Nók@tX'jغ_d髚5r᳒‡$} @MNR@D6DYr(Bnzc1AIvMcE?T#E0uu&h,+orH !F;h@Sh7=V`]4|H̟'mnǏ]? X"@58L%G +08(Qqܡ(2YDk7[Ei" חIaUO@Xa}>),ѿauJ 0"x +&I,->_end=7gU$48d&sE]aיz*MCI^-xgjtv&,;, HGni7>6igSG&ơ7ё7A-b /׍!3Ew,Vяz[ Bj.?;azl$}wg1~y@h֒{|Ӈ}WxCqZsWܙM\ t4rU0.TY/IXBA,a`X.%>trcK- w*`tOG> +| +)) 9t=J~oR3kB8pBӧ)!X̏VpA?)*|ik:7gT )l_)CpT'cOԩ7M&M~ڧ}ߵ]Jq&endstream +endobj +4401 0 obj << +/Type /Page +/Contents 4402 0 R +/Resources 4400 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4399 0 R +>> endobj +4403 0 obj << +/D [4401 0 R /XYZ 85.039 786.531 null] +>> endobj +594 0 obj << +/D [4401 0 R /XYZ 85.039 602.769 null] +>> endobj +4404 0 obj << +/D [4401 0 R /XYZ 85.039 581.572 null] +>> endobj +4400 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F20 2873 0 R /F72 3974 0 R /F18 3977 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4407 0 obj << +/Length 3728 +/Filter /FlateDecode +>> +stream +xڭ]s6ݿBoGT IxtlNc"DldR%8_!o#X,߻II@4K|,`dzP f2s`ߟē0 ?Z{OP)gL@Ogl||kXl~/ cJ%~BC~c0QgaͱaT$N-SC05T3=1@/U /Kl3FM] dFF@bUFk8Jm. YbG5<p6](s$I,J1nLgQ5+=L|jQH } +nOL>r"Ǭb]<^>E.yKLy4VhR]gX2?-<rCO]oqxW]k/-7{ϭ[gD]CeDP3&bizn/q=muݽz\𕱒<K@d 2Tݕ}ő6^KqVĺ$Uu 0@mͳ i Wh]V#= $HF{>&#?M̏m'I5s8wevEYKU϶Jb"ٓ*9,N")eJ +zI:Zi}DWѸE{:^*rnwpRmv)r.KPTޗ-)9d4gK + 8lS-6DsٮN3 4 fCNPo_+A!WX6L/gt5ğtw঱;r>1 'N8L$|mEGDOÎ|'.x!g`UԵznٮE*#G˪DW J}VF%mHjp@R@ǂȳAޜ84ʔ(q{lDw,+M4K4K_n?]ԙw-OSp!;_/KHudp`(D݆hЏtL[2!a/?UI)O*J]z҉%wMUޛ748cT )|JrBKD^~!`Qe~&[ur8Xorp׻C&M=S0ŎݰGHauC5:A,  5~~fk8na֤ߜ#< +EV$ÑEQ ]MFՑ,@ +UCrŠ0Im${nwDXkE I @'MҷS }_oTߜ}#&qɃw!lA뛶5,!AYQFƹNz\AapjA#FG|Β gBs&fW_ F4Βq?(C^U6V86( 蘴'֑Gr,:J(6;-6 8)"\\*U`CnWh1#Z,왶۲<3sI |#8K2 X3{!d!Q& ]^{y ls<=ЖFɂÁ9^p,hFo)$S60kWh͡O*}\uޘr9 &~4 ʻѳye-fxVS!D-ZHdQ8} d,;LR\$˴fy=^ +r,JI9yS1P*˚b:&K:{(VWߏPFI7ԧiWN.Y@C2q8x>Rq\d(q4חhb^4$|'_wstx̍wwnqm"`H b3H!޼ .\s m:D͙(_pψ%7(VYDٛ=g!$^j0\tArDĸtU<L6;fWxcfG_rf\~q91A'w<4_pa5NiY<[H{8cKl/nZYjCSb*擁 g7[:W#՟)F0x @dVs$`!pwe*Y,G +F̂Bb 'QElVQ{n>7kݩiƂvt*.E!`CzŞwИkR?jt&qB/(IaLU,+KwH5G"l~6.}0+A YQ.fᝠҹZ%ZH?)$ AXyjɨw"0 a@.[vu =hįyhr'&dL|08< +J^-)2ۢ<>cސ)AfϓtW|b7d֔t!|IkDJyxdzDg04e؏a%C-l~b7NjdoLO9沱r*7rQS  9߼Y;.#?'wj!gis7 ]:8J8{/=}[Eg.Lk=l=]dވR'.T(#7g:}? pZ^x7X?=/Zʸ ΃P8 ~eՏ9l;|9oB"+S9A@[kwҠwŃrD}3y8<;RO2P7ULeendstream +endobj +4406 0 obj << +/Type /Page +/Contents 4407 0 R +/Resources 4405 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4399 0 R +>> endobj +4408 0 obj << +/D [4406 0 R /XYZ 85.039 786.531 null] +>> endobj +598 0 obj << +/D [4406 0 R /XYZ 85.039 574.803 null] +>> endobj +4409 0 obj << +/D [4406 0 R /XYZ 85.039 552.087 null] +>> endobj +602 0 obj << +/D [4406 0 R /XYZ 85.039 400.724 null] +>> endobj +4410 0 obj << +/D [4406 0 R /XYZ 85.039 380.735 null] +>> endobj +606 0 obj << +/D [4406 0 R /XYZ 85.039 311.274 null] +>> endobj +4411 0 obj << +/D [4406 0 R /XYZ 85.039 290.077 null] +>> endobj +610 0 obj << +/D [4406 0 R /XYZ 85.039 113.372 null] +>> endobj +4412 0 obj << +/D [4406 0 R /XYZ 85.039 81.847 null] +>> endobj +4405 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F66 3248 0 R /F20 2873 0 R /F14 2903 0 R /F35 2888 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4415 0 obj << +/Length 2797 +/Filter /FlateDecode +>> +stream +xڵr6_)51k7Ml,Ow$7T=7"QNf'3~CăjIDnd&kXB L@f=7`<7='0&o?_4i,O˛9;a`5~ 9.~3-1ųG? +(suL`*M'ۋ nh..n/՞kw1%ԉ&+*qE)ʟaFALlH90 Z6%iJqn{^w0Ռ'ˊ!n03zo: |ϙon= xE>( Z__PBfD\T%i5sX"?Ob,+P,*y?/͚,s3ٔ=Iԡ@n<HҨY=iiÛ] ++B@zD"!=*+2Sv5 +CDs&Ƨ"qw0>*7 þGij څkѮP4LGSoav'*j+^,b E5JcSO;yčE2nE{Ya@ -y9NB4 |^ +m'Qȗ¨c7S1ۛyb%vU hYqo}zXq[+Էueқ Zy@ݯֽmٍ!S3`C%D?%o>/,W8Dˊlw~T+9Z1='Ղ7-a[Mc6O()ncleDU'C|CF^ AEZ<@K]kV|h#I70'&C=b}JʪGij";2t|w12vee=ay7Y~L c,6&(ӀU* }2kF4{: _<1K>9;!ġ39g^d EWz6.Qq@+3}n2]Glj8Ue,r{:.J^i9cB~?Vm2UDk˭%VK=Ig= 'v,¼:E; T(zi1l+Đqd-bWXhcaSicT{9ٰ#ɇ& 6}ٚVX/+%&EDB杨nDAWR5s!舴9#Dh๐W?n +R̢H=:Ɉ8M>oP"5PJ? AE?AʨJ8;1g=4$!.?R'![z w b" +W|C*$5ha$<^mNUWةSS=my^^TX#Q@oP,<Ori:ZR Igm?O E^76=zG/F,Qtο| uel,"}EèGʛz q'."ĥ1b?Aendstream +endobj +4414 0 obj << +/Type /Page +/Contents 4415 0 R +/Resources 4413 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4399 0 R +>> endobj +4416 0 obj << +/D [4414 0 R /XYZ 85.039 786.531 null] +>> endobj +614 0 obj << +/D [4414 0 R /XYZ 85.039 711.163 null] +>> endobj +4417 0 obj << +/D [4414 0 R /XYZ 85.039 689.966 null] +>> endobj +618 0 obj << +/D [4414 0 R /XYZ 85.039 155.045 null] +>> endobj +4418 0 obj << +/D [4414 0 R /XYZ 85.039 134.455 null] +>> endobj +4413 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F56 2898 0 R /F66 3248 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4421 0 obj << +/Length 2297 +/Filter /FlateDecode +>> +stream +xڵ]o8= ">C$t&׸>P,('Ϳ e;V{(A13 $?1Il,`GR,l"&" 9Y,̋o޻7әŸΒ$Na{w1w?_M`S/?1 1ysD΀o烝;;R9=G/tp,4G]{Ÿh\cNQ2U*"ԎWD(0D)?rDӏ/TC +?"YCSU {#80tjk$W +O ~<[D{f[ Y#^TЋb `Wlp$:0Oԫ5~j{BaLffLBB KyI](~I^y]Z{umX 쐴h$#fh+4S I"m<Vp-ښLVO(}pT\ԄDfK{m(SƭZw6ֈF7R@f78cE)IFQ 3/i(@Z̕ǭN7ղӔQ`%M~)"ci)̫Qwmpa-_-Dfpx R @(یPmP$n,w[b$~0[NSu ԇEDΟWރH^'[ H +Kݚ-&6dw6(v^eY;{[/`{X29~˟Yז UGAy 3.kʻEqY YWg+ f4;ld=e o#EGD"~]]޹mX:R(TX\4ߠ:/wDF!2Mg*T޺ȩ^Џ)eUd4x[˴4}maMMY\jZb W}EW @zwO*HvWEڊ :DD'Abj~?ŏ +ho*HSkcm~8@w"oر tZ8Doښ٠NG(f~W +BBb|DKN&]Mnlh$4`8 Aa^žj@22Y`%%nb-3%4B͜EnXvK{^rڿxغ4408rSzOdNv{5pL\13*4K8e}F6IUKg ;xUMaUE M ;f8C =M4& +F5 BP◎RBk!v yA_ێYwɁ50NDR>⡄1z }DR+0IQ'3{e6OxG$gh0z?~Wfq/1suc9ۺp/7_(BJ?zZݡgۂ+ڹ +9H1 CEVЫmi^Np}`iD;И!"i\нd9lG|Pĵp!ИCС0N0&> endobj +4423 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [437.587 698.333 464.58 710.022] +/Subtype /Link +/A << /S /GoTo /D (XMLpassdb) >> +>> endobj +4422 0 obj << +/D [4420 0 R /XYZ 85.039 786.531 null] +>> endobj +622 0 obj << +/D [4420 0 R /XYZ 85.039 329.743 null] +>> endobj +4424 0 obj << +/D [4420 0 R /XYZ 85.039 301.007 null] +>> endobj +626 0 obj << +/D [4420 0 R /XYZ 85.039 133.712 null] +>> endobj +4425 0 obj << +/D [4420 0 R /XYZ 85.039 112.719 null] +>> endobj +4419 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F56 2898 0 R /F35 2888 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4429 0 obj << +/Length 3885 +/Filter /FlateDecode +>> +stream +xڥZo8_aem`H"&^mkbɉoHI<9$Ù|P̅,W%(@y=Aχ O(Bм{93u7=<I8{~_RjybEj_??`~~ZxghzX=_`'R2/xgdЁr佼GM %PX*^0YN#KZvy],hRur_WuA._!YgH{^/`E2L;Rie[Zw_f1-Pt?x?C%˼[]nӶgL;N: +af&$P5-U#6@]VwYڗ#M˺c7/H.Y] ÿ]}rNi l4^I` z pAQTa4_O8_mGqӗr)hX/jP >KĦ,iNwx)2&E-P#c⁚gxK$֧]Ctȵ&%v5b;':؀^ȏwp8'MN^5OYݣMƺ=? vDk̮s} lCsW0CƼ"{4 z*6ͣ^OXRy10(Ji +PF`O4"C;cxmú + +Ano +~Ę7840eA\@R-%l\;l8S<2#U]2k!ms>q~Dq7pϛ8'2bt@sZ :r$ يx9~fABBO(:j{6 SHFeid׽qЎ9y2ma"B@@NJ/ :5:zצUff8r+9},-DC1* /Ϗ0 +LrъJC\t~A&9^o*'zMu!H}q>5F8۞b{"2 RlYI6{@7L|^.j + +Vu0c ШFf ʙ J Wb[PbPyM#jyDM+vT 0!T5CȒ#M2$HUDC|6Oō0Eb!!zSv֘zq}ϦojƎBip;ˉۤՊ4(ua_Zw@4I7h ')frwΘ2ҫ qyt1Mĵ<2ـԂO 3gdgvb<.4aIh^As (.6I4 +=ֲPrdThi( )8h#39ۢG7,Ȅ7ΖF4dIc=؅nL ,b|Q!ݰ5LNǒYK+N XqE Vʖi[*1*x̑Z!y'CK4xNpQ>(H8fj0#{'2hբޘȐ37>kkWfb۵-+=!z-hpIwE$ɋ%̯ 6slDb.06LG2BIR.!(V565 ƽoF'aihq׻9Z/N2ͳU1d2OJ{̿o [OD;*^jG)rƠ_&.:n3:;$88 +j TDu'Mwnݕ7@"RkYK +9abjGW@W!(ui%lŸI r n⎬al )6dm˅$ JP(ȿeei*/Uya^ &< {&[G@!\#jnCO*P3qJ:P@4,L(b"+RGlakcĨk" e^>E,K(n0#k]xXܘEkLZFz 8P-Oڞw!8Lp2fmJM?ø:E+@d$]h42KLmmE)w%t:uW+xQԏ~R~[,l}ZNZ8xfKH֞LU7 Nuʺcmݞ֫ub4*H׋Gz%z8 dYzӥubGjlB~,yN]EB2ImJ3b0lk~r +5!w\N= /(g=N$Ut l!Tqw?M P9Ra8CIޫcӎ=kKHLJ)<)Ҕ[krMOnp|m2z7vdfؔT eh- y$oĨ> *nD||JH>OQqv |]&؎w0% +ٱprw/th} +(?_Z4\~08Ėa.'"R>g 4+#ynSSE,EKiIyq|NU$@сkneͶATevJgkkQ-B+[t"MM颹"ws)À*א5=/޹qiex#M b0i$hExI憑t%Eva*`KMg.c@si)9--NxM|VdP'\}jx@sNٚ2EBO$XuhSӃ[Cm9$zDK/biXz|nkfu4BDSli3T7LP~Vn*'ӀtR|:֛*> ׻b4`Y0̸}CMը+9 sFj'x>/\0JC9N&G,.M+_A Ug9_n{|)r[MqwKjuHam)#\rէ3ȣ_<7tt^IFPΉRzK"v~wiV:zsyqDz ҒLhh !iRuMRaWjL?|kbm~QlSCUaDkNT +_'f}߆UX??MZʔi Ρ_WqmtQj #÷p˃Ɉ hwu s?nME0pքxSO|6|R:ЖB2G寮~n0H|4o,zkBrc&N!ǒĞ듟(j2&?>C_mb|~+#z0'G2s??ˠendstream +endobj +4428 0 obj << +/Type /Page +/Contents 4429 0 R +/Resources 4427 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4399 0 R +/Annots [ 4432 0 R 4435 0 R 4436 0 R 4437 0 R ] +>> endobj +4432 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [268.283 689.173 403.2 700.863] +/Subtype/Link/A<> +>> endobj +4435 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [470.223 102.775 512.306 115.677] +/Subtype/Link/A<> +>> endobj +4436 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 89.226 187.762 102.128] +/Subtype/Link/A<> +>> endobj +4437 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [236.019 62.128 466.92 75.029] +/Subtype/Link/A<> +>> endobj +4430 0 obj << +/D [4428 0 R /XYZ 85.039 786.531 null] +>> endobj +630 0 obj << +/D [4428 0 R /XYZ 85.039 724.409 null] +>> endobj +4431 0 obj << +/D [4428 0 R /XYZ 85.039 703.515 null] +>> endobj +634 0 obj << +/D [4428 0 R /XYZ 85.039 370.844 null] +>> endobj +4433 0 obj << +/D [4428 0 R /XYZ 85.039 351.972 null] +>> endobj +638 0 obj << +/D [4428 0 R /XYZ 85.039 226.193 null] +>> endobj +4434 0 obj << +/D [4428 0 R /XYZ 85.039 204.996 null] +>> endobj +4427 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F20 2873 0 R /F14 2903 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4440 0 obj << +/Length 3802 +/Filter /FlateDecode +>> +stream +xڝ]s6ݿB7yI}:N.9ϒ}%JbC:")y& bwgd?gQ|saV0 G &21`~]\} +c[fOl[~f?7f/'JX0חn4y|y7{]_.xvc8}x׿\Nf +~8k48qB*{_hza[*Fhۖǣͅ+|Ӌ4x!*HTǵB߷/$č&[?YV-߶hq(ʔ[ +cwo/,YH{ g؛Uu@zb̠GA3 0qPJ1qŚzbeW)-c_ZZ.B1Ybw("I"J+읗%s (i ( > *v-u1)-V(7X5*F튿& x 0Y ͇z %[n&,PlO!ٛ p!b 1튧⯡f1]] A ։N/ooÖcRm'|0ZPBΜ y.P>#^k_>+~I=4ftIVUFFKDtqCOwdBe0r'W / 2t޺"o Լ㭮4C+rAa&er + {+*Β 2Hc@pXG=呬PGt%ŵ+cZp\ ijAL8u]~:VK"YEң<ۏU(LSXº *X/{BOi*!lY|NMg0 8} +tc}vpvDyKyZ ߺy!7a,uFZ_B@ߘљPgYG3do^+91&Qz@T }ҫށعN:K; uL:cI[PtwA6֛ eÌNڥ~gN\}Jh8f=cVgšay:"jd%t*鸋mōUaulT"d œyxέ&]ltr&ʉǔ/g+#PN4֡;C +\"b zP%ɾx}gT 4 +-/V:h&%mQa5"ŷ :ZLJH6q`؎P|UjC;ͶVh TLq}Op䶠@훂77}uMTm":FRCbv큤ڇ س`Q0f!OHEa?eMB U }t3 +"BP1:NM, +گm$nyF7F`] " Z]#&x(tm_)Fl *)wiQVΙ 9x[x*HZBx"-Y.e1W{Zi+1P)ayG1 ~w0s#-L +HZ8K3D7J^HK& Q + rKK^`.WQ6  Zb`[HU]hK]O(ښAduTRSX,%@U#/ȟ*0O =1{~pRT2gyVJ{oGd r$B`Ë4] !~ ):x`qiio֮C^e?bOq(ˎᴅ9=t?_A;ȚS?Ės`="v;tfp?~z%Ug3.rƚ.N'aT0m(lvyZ]^?]}Mr;0TM(c ς#BP<9 樌㚄z^' +p?R!#q*UbNQbY#N2ˎ8-^i%^wѳ6KYX&=\ȭ$&17}yF.6_]?Ntݶf̶tqz#Ofdy }5t%-)7Ղp\Ey9IUOZb")VvmR݋x":-&|߆ad{N}U$y)OVIH[!Vm^?5tܖ$> (Lb ǯ?zʳ)2&oT5{l&/HvwGC hC_'e.*Aؤ,[t +!j`0UMNjL(4m{}ȕ]=:0Үxw\ǁM99x{I@&kڣ؊s³~-3L16 qgop ^x2\&"b9 WIطCyusQsMc9`oC2譐5;zk#n˒Iҗpɜv,}Gp=E5WuI0Ծ7-^Y B-'.+w+B4o^mXޏ0fSz<3zmC77kل$sPHh(4F;{w|QJl>ϹEtOJWTn* *j- +%Vb 8$ $TSA*(Y^jܥvFؓ+ANCs'F&A+?kP*y']|@{2>~͇)7L26bЍOG=2i7'ߢG ׹lQ7_*+5m7Sͳm[D"Ჶ yibw׭_)U*endstream +endobj +4439 0 obj << +/Type /Page +/Contents 4440 0 R +/Resources 4438 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4450 0 R +/Annots [ 4442 0 R 4443 0 R 4444 0 R 4445 0 R 4447 0 R 4449 0 R ] +>> endobj +4442 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [205.71 654.394 345.156 666.386] +/Subtype/Link/A<> +>> endobj +4443 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [265.68 640.844 479.579 652.837] +/Subtype/Link/A<> +>> endobj +4444 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [161.013 608.071 303.763 619.761] +/Subtype/Link/A<> +>> endobj +4445 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [290.138 594.522 335.01 606.212] +/Subtype/Link/A<> +>> endobj +4447 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [405.626 490.917 509.276 502.606] +/Subtype /Link +/A << /S /GoTo /D (bugreport) >> +>> endobj +4449 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [232.649 245.841 313.884 257.531] +/Subtype/Link/A<> +>> endobj +4441 0 obj << +/D [4439 0 R /XYZ 85.039 786.531 null] +>> endobj +642 0 obj << +/D [4439 0 R /XYZ 85.039 566.704 null] +>> endobj +4446 0 obj << +/D [4439 0 R /XYZ 85.039 546.11 null] +>> endobj +646 0 obj << +/D [4439 0 R /XYZ 85.039 476.648 null] +>> endobj +4448 0 obj << +/D [4439 0 R /XYZ 85.039 456.053 null] +>> endobj +4438 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F14 2903 0 R /F35 2888 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4453 0 obj << +/Length 1778 +/Filter /FlateDecode +>> +stream +xڭXo6_aI}>Mۥ蒬qb%:&K(-#e˶lͻOS4+i̗|'v>N[br!eOe~L7ow_fs)90r.g"r޽zϹ/8FY\ޘ+,pl<~ci~s 9ÝfѧdM`2%=iߋ䏍.MXRz9Y,Ӊ &q$s$Y9H HIȚ-^CR\G W3xj:iU~w5I90T$"8}I^U )Qtʔ!k XDTMk6VUi `\ʙ+S-!7vc$y5LgSRwf7fV͋5M7oMHҜCf|S[ں 7k{1o.vb:[ubP_aj X$& $4n Nݞ8-!aԢѧY" Qa^ 0 +I)o)@ܤ wVQi +}܊gw3p ^|;pƅ7мzNu+8Gީ0b0c[J5}^{&G+62fZziপ7Pw<*;51 զU"K s1] ߨrP9ݡ`Q mnv<IȴMO2Pa`9z](@C]C $"~4[..ksL1s_9qxq8IcҚDDHr ͑mm4)k&<5]l8q6pa{Jjiw + V6AVp + o;} +S!'@Pcy`IyFz)AZbaLZRIc@m$4h*xnǗDL``v 1+e%ylL@% +0Gvb>mfQd ]3]bXp\ˍJz(DZ[~=L=;Ia9NswQ\wȸJL议_ljb}IV{.;PG-2Reϵwy >"iI`ZܵuN7; `D8?lXT['U6v[/܀aoc& +ٿbI 2mk +%5:i^(g$Y\.7E!c1 b9Sg~駮=^Qb^ G2b~$G<?1Sendstream +endobj +4452 0 obj << +/Type /Page +/Contents 4453 0 R +/Resources 4451 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4450 0 R +>> endobj +4454 0 obj << +/D [4452 0 R /XYZ 85.039 786.531 null] +>> endobj +650 0 obj << +/D [4452 0 R /XYZ 85.039 766.606 null] +>> endobj +4455 0 obj << +/D [4452 0 R /XYZ 85.039 746.481 null] +>> endobj +4451 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4458 0 obj << +/Length 1510 +/Filter /FlateDecode +>> +stream +xڥW_o8 ϧ0pvio-k=(zVu}#EIu$E?,1+ +׏Q4tBYIsH110*-itXub7N:a{ջ)JYW7o oOϮ.I6F {t&x2N[0G/t-\Ǐ#k 8^N;Mzo[[$ ,ZJGNp 1k0,UUJ۔)5q7b0;SH5V]@OmFsXϲ2+ڃ9"[8,dn7}k7ډ"-_ͩW%Jk*pWxEx|jB?S|( oɘ.Ahn "QI~Sfe]aC2>zWttUx6s|YCS3>2.ǿ5=B{@ڂ+>o^By lt:ʺ t: GY +R$WTi $=х,W%꩚X:2Nפ!]l-5<ћ"f@0`AK.D*Npǂ RrGu +V Yb#מ?9.RAp1>;>,7+t?iZp]؎4uMv0%tf F*j|pC7Ӭn._N FxVYc>:T!&_ӻWՂw2ȓeEĄ3N1V~|Ar\O2=ZVm9&*y]7fW_5rWQղVo 2UkY}2I-q6U ߵ?.jH|2o=F%Ļyz/!PduGoxi4)_bu,_˒ٓP zI6Z-M%S8h)ZzyJHsQr Q+L.`.̴/\brQ*w墍Ot+π/_Vgs4YU?gBkX}+7:2+U0qx?'}ڄ75^4xUx~x9mB*HG7%_1}g "kZ̝[{s"@9rK=kuxn 'p`7d3 +/ +.9a -%7J F͋ =[s#Ȅ4p oU{ތQ橠g8~j~ُt._c=R ݿH 6Ϟʌ?05s=@g3'nV~SFѳ׺:MZSp~Yl3һ&͍ff2'>Mzp߃ޔֺuEKM\DԲaיduL~? 8zu?3owy?{6 endstream +endobj +4457 0 obj << +/Type /Page +/Contents 4458 0 R +/Resources 4456 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4450 0 R +>> endobj +4459 0 obj << +/D [4457 0 R /XYZ 85.039 786.531 null] +>> endobj +654 0 obj << +/D [4457 0 R /XYZ 85.039 636.571 null] +>> endobj +4460 0 obj << +/D [4457 0 R /XYZ 85.039 615.977 null] +>> endobj +4456 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F20 2873 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4463 0 obj << +/Length 2167 +/Filter /FlateDecode +>> +stream +xڥY[s~ׯKUf0\m㭬cLG7_< К.=TYǯw?'r9ؾ&"Sq_pO?'1w<ʼnd@i Q3˱#0vCk5rdʕFitќkW}cdžbΛ*s,K*pJ0OQO1Dy +8R6,a\D+2U\4z(H$f`"$ +flgK343fФiAW$H,7be|Gcl=i:ۀTB*PI5֝VCܠk +WE#H(BmUDGfnGg b$\n û ,"ћMq;*hd&.9?s%D־3p0M"?(]!+94ųylҁAՉ{#Fl@Bs 'S:`мִEtcQ)5L% pMWtn7&|wZ -]}6*fRSXq}+Lۓ+F`:C:G^ץꥮC]XBq8;?;!v_ z99.eU/-T X=lp}n PB?F{]xx{I)( +Oõa,.˙A#tKsd9C^Ӆ,B#aUlvE# =Op] p-ܒ\u\R͖n@] EҚӎ˙~5E%/hjwaAG: yS5-㞑[EF:zedoOS LXGUlx`T;BTEMTPk/pъ R@5yS-en&(b7V/Ǝw )4y;tЋm='$:߿ͦ,n|7%qne~^Ճg4E/= *v9"v~+zTټح+X/wqS )岸%t{,||ppױC"֭"N)1tat/Rl|z0yC5/qFY-,dM@PݲxmhkPLkÓ'eZmĀcʤjQm4Miځz`W385X]oi{NR*/ETS_pܮT[Iמ/cļv:ex`/Q_Fw zUz)jk&d=NyvkFu]:[G`#/ߝNO}qҕnC(eo Ds/WuTQaJz<m +Xip 7Z8m.K 0WW808 #{ >endstream +endobj +4462 0 obj << +/Type /Page +/Contents 4463 0 R +/Resources 4461 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4450 0 R +/Annots [ 4466 0 R 4467 0 R 4468 0 R 4469 0 R 4470 0 R 4471 0 R 4472 0 R 4473 0 R 4474 0 R 4475 0 R ] +>> endobj +4466 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 505.905 286.551 517.595] +/Subtype/Link/A<> +>> endobj +4467 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 492.356 176.46 504.046] +/Subtype/Link/A<> +>> endobj +4468 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 478.807 210.278 490.497] +/Subtype/Link/A<> +>> endobj +4469 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 465.258 190.036 476.947] +/Subtype/Link/A<> +>> endobj +4470 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 451.709 187.278 463.398] +/Subtype/Link/A<> +>> endobj +4471 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 438.159 232.763 449.849] +/Subtype/Link/A<> +>> endobj +4472 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 424.61 213.157 436.3] +/Subtype/Link/A<> +>> endobj +4473 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 411.061 208.46 422.751] +/Subtype/Link/A<> +>> endobj +4474 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 397.512 223.49 409.201] +/Subtype/Link/A<> +>> endobj +4475 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 383.963 204.975 395.652] +/Subtype/Link/A<> +>> endobj +4464 0 obj << +/D [4462 0 R /XYZ 85.039 786.531 null] +>> endobj +658 0 obj << +/D [4462 0 R /XYZ 85.039 581.826 null] +>> endobj +4465 0 obj << +/D [4462 0 R /XYZ 85.039 564.087 null] +>> endobj +4461 0 obj << +/Font << /F64 3118 0 R /F72 3974 0 R /F18 3977 0 R /F35 2888 0 R /F20 2873 0 R /F15 2884 0 R /F14 2903 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4478 0 obj << +/Length 2807 +/Filter /FlateDecode +>> +stream +xڥYYoH~] +3<987R0Xd@- E*cI8e_g?'J)u$bz˗?pƷnO.ʚ|W8c5É?Y/$R(友/_Q'z*Gvl7IF ?Pv+ӋxSJ Tl:֊ +Zq}h( +;#R?Ɠ l_/M&s{.2,6~_<'e_^l&.ʝ>#eWӢahUdUְ" F{򋿙.tݮ6֏Cb3=H~tKhOd\NL A[𙧍[ql}<Ώ;woo]t#Fڵmk\4ZHxD2tMr2-H 246$ #dd>(.(Αr# M30"8޿d%ߑwxɉ POI'=멩qt75{U_^PaF"_^dšאz&-4@IJNý)I/m6t_zqHZGsqZ# pE,)~irW% G-<Q5B+ޅBe6u{(*pŃFޝ I䜲DxTBH;g^"$z͘AzUwRP 0Zc@;Cshd2xm#Oz-y2qn9( -js] $֙ˍY 񍋟ȴn<0x Ckz硟^Yy\"]Hzהnf4tS6y}}\/|*wZ)wL.|ŏTy 0ި' @n`WΕye5矀1aw1aI` ~<n{wc6jendstream +endobj +4477 0 obj << +/Type /Page +/Contents 4478 0 R +/Resources 4476 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4450 0 R +/Annots [ 4482 0 R ] +>> endobj +4482 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [362.773 145.808 512.306 158.71] +/Subtype /Link +/A << /S /GoTo /D (passdb) >> +>> endobj +4479 0 obj << +/D [4477 0 R /XYZ 85.039 786.531 null] +>> endobj +662 0 obj << +/D [4477 0 R /XYZ 85.039 469.398 null] +>> endobj +4480 0 obj << +/D [4477 0 R /XYZ 85.039 446.682 null] +>> endobj +666 0 obj << +/D [4477 0 R /XYZ 85.039 295.319 null] +>> endobj +4481 0 obj << +/D [4477 0 R /XYZ 85.039 275.331 null] +>> endobj +4476 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F20 2873 0 R /F15 2884 0 R /F14 2903 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4485 0 obj << +/Length 2766 +/Filter /FlateDecode +>> +stream +xڥnH_!x08d<dXE&IY)RKRV[GE9,@l|m2yki錢=zw'ib~۵Fmv0/[:m/wTJ9vk2<|>OsQtā]_n?Lq~1= '_翟-=I)|jbے?ڶ OV|g''ni!h[ڗZqtO+rGjTdl{\@} E]LRVMD!u1Js]፟fQ2XЭO밄zToHߣmꠂ('xrņMʰN ܁W e7!*))d'7޸ƻ@2 S,(kfyIʁr{bYKd^G MpR.Vm4``TF(ZwdPS`ՈC%!,m8fK@ 7d<| o)%t^l}gؔ GQYl +qX& ݙJ^L*JI;U&#ֶK4k *IDDtZC|HEbgjCnJҊ0gQTOn>+_,ّ ҡra,ZDBaWYȗŴg O̷k GҶl/LZqeŎݸ8pc5F*\EQRUocv?*yJg}eՐ2sqauYe뻰vEfIo#xn;;pr)gdɛ8:da+h]F]{=Ni-ūɹCiH4KhOY-zHX)1Vc] Sa-;:LQ{YL$GD<uAxgV >40̢FTJh+V# XM9ds0B %l>Ѡʼʲ]|G9qS7 +]r:f}IY/&!2xz? +\s"]I3ÊwB)p}i]k`LbA:$Q1{dHaY3C|HDP\(*+QKh#f ~"SRb3C0,y٧4AW˶Iˠȩj2DY}co_\>XPC6'w|X٣#Y`-t{ lur'Z?Sw DoT l;|WGT v_a !Y@fx;ΘV~+$dlxU69|Ы&qtP9Nv&I=h *Ay : Qqx>sId-p,]ŎhJˉevE<~~mj@avʇ{@mn4x|OLyc5ϘHF}D %{ A5 \uQL'џ9V" b_oh+pC튥tekjxTFcXW58`ڶlx֋c6xx[[X&قBlӟH)WB 5ZɫӪ)@rj)w5 7:l 5:X"t Fn8pFehITW1>)!W`[lq@-(C8g&iIzTBx߹]3ڟ,钏C&RSmK0Ƀ4BI+Yi32rF`/AZtZo#7cQL0t]L c~ P'I`-6…&+ͨVM]LOD]] ,˹ts4NMK޶xtUaFzҲy5vm|2@o>4ڋo/3@F~&Y$@,13&ck2<>EZ:O_8̨h \}fӘЦjބ\d0ф'd;Pr)ۛ|) +lAH۠q4MkC8ͣl[4pc$#cyݹ?.<ܦ0&>ٍ4 A|(=\۽:yJͮKo(w۪\CbGyʇ0x{we|2'a;4E` p,ί䅒B;OfanªO*y#6yn$De\g "?֡iX,_UaEu>4/`Lv2qc N'?@Vpl!( eb-^r/Tqendstream +endobj +4484 0 obj << +/Type /Page +/Contents 4485 0 R +/Resources 4483 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4450 0 R +/Annots [ 4488 0 R ] +>> endobj +4488 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [234.557 523.386 421.201 536.288] +/Subtype /Link +/A << /S /GoTo /D (samba-pdc) >> +>> endobj +4486 0 obj << +/D [4484 0 R /XYZ 85.039 786.531 null] +>> endobj +670 0 obj << +/D [4484 0 R /XYZ 85.039 588.352 null] +>> endobj +4487 0 obj << +/D [4484 0 R /XYZ 85.039 565.636 null] +>> endobj +674 0 obj << +/D [4484 0 R /XYZ 85.039 286.353 null] +>> endobj +4489 0 obj << +/D [4484 0 R /XYZ 85.039 266.364 null] +>> endobj +4483 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F20 2873 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4492 0 obj << +/Length 2352 +/Filter /FlateDecode +>> +stream +xڭYY8~_GS+UVLt@bkI73'6 ||ҿ[l-#pk2y/ZJ9փ,*& xOhqnM7ETI7dɫxfEi\jިJiBY,Y)X:ǨEM(F>-[2!TۻV\KTݍؔ:*obywk0Nhn@C<<ŢϢe+}}Ao<~SzoL VzR:ECkm!͟VIM4GjLsr8 ]6t +1}TOIR~^lNjU۴(}#Au,.OTUÝc^Peң=߿ %o Dx}l*`t'񉀠OB$8& =::Ql '<ߩbUyZEuA:?ŭp 0^iH5Oxdx/)w`U +Lu8`L`ft,#Fub09R +%UI'3 T1Y +l0.P#9F knN\46SܑG _pJ XZRnPKܓK㊖B**BeY l~g֯dhs/+<6ٵlV]-ijS +ڲC܁ENm6m+= + =M  ` WƠ*bt5HNns<6^[ T0O8wcN`th@(۪'<{ :px(PbZSϯR;؂m@c `bԅM\Vra*>R)+_ _ҮJJ2`m(؆"~8q0d$aaԮD `W -bhN,fpޑ94@>d{Mǵ G(j̄gG-HXim(qц:(8 '=b'!'' {z^n"di,BLWڢ\aSMfm}Jg73u4ICr}EI +MUF<8ifQ4k"lJ|=WtJKM"u5RD§ hHehhb# us{"rwY? TO஡u;\qyI([ lzl=|߾簐,=*z}''|XغN5|LaeBvR[.\GƉ0Ŗߦ2%wlti֭ԇ  дx>\(ہ|LRօ4K`a9 M:uX]&Umߘvxà`6tQfT|%4fSy\7g9;`NL?W)1[cqD`%]59Y㏽e=Ş>#=BB0= WZXRH~Hh +MTP'%WSl\^ffP.0Rq]z?,ۆqb1/p{Ù]o1A4A$nW]&09mi:6KmyϛJӯO0Dz}92fӮZjo|ZW(zjjJŧfY]U>|gY&0OvfIv\eڡT`6Sx88|:V-{&pپ z_+"v+ơ4j3a1ߺ)+qwTJw1ψo%5*l>jTsXZfISqq'!hendstream +endobj +4491 0 obj << +/Type /Page +/Contents 4492 0 R +/Resources 4490 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4499 0 R +/Annots [ 4495 0 R 4497 0 R ] +>> endobj +4495 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [306.528 189.845 350.4 201.535] +/Subtype/Link/A<> +>> endobj +4497 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [130.104 126.887 173.975 138.577] +/Subtype/Link/A<> +>> endobj +4493 0 obj << +/D [4491 0 R /XYZ 85.039 786.531 null] +>> endobj +678 0 obj << +/D [4491 0 R /XYZ 85.039 368.576 null] +>> endobj +4494 0 obj << +/D [4491 0 R /XYZ 85.039 345.86 null] +>> endobj +682 0 obj << +/D [4491 0 R /XYZ 85.039 175.577 null] +>> endobj +4496 0 obj << +/D [4491 0 R /XYZ 85.039 154.982 null] +>> endobj +686 0 obj << +/D [4491 0 R /XYZ 85.039 112.618 null] +>> endobj +4498 0 obj << +/D [4491 0 R /XYZ 85.039 91.422 null] +>> endobj +4490 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F20 2873 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4502 0 obj << +/Length 3180 +/Filter /FlateDecode +>> +stream +xڥZ68`e֊z+io\rm68|-y-ly%7/R-9@1p8̓ffizA6K؍5[mo#rb!$ LJp<7<7Cyyx|;_$I꼞͇Op&tC~\l8O8c/#8#(/ެzAΎ\eMnүo>fx\8UcJԍR+*ʟ%QaBjY~┸mP >`"8(̿.!Fy(ADhq5#ERЭS'jS#F ]\ rG.)*#IxzAWeݐ= |v`^DX .8RJHpC+G|v?Q q%p#Bj9(=^ez"ܠ\t_*]_+c"Rbk%vpvꅼd&HL~bXc@@ pP+גF%!Mhj=1ӑ̭ ĩ$ +L>ňU INѶ nbf4q;ET}[Kh4Lv~\\| ,tGA̱b4=ň G)]7wnrz"Sa +#, ؏Kb6SaC.L[>jFpMu'Hg2!0) +6C|rѾm4'&WDƟgy1\]' X (ߴ3AKXTY` 1!<8ϏuC“7p+váSeT 39ĞbC<`->7\ lҺÉ@$n E~h;Qpx;򣗡Ycd<{d*Ěgih~~j@ىwa1櫖'n&~$\p&EhPpI7Z0kR|Ñ+vOSXXBYņ@{8 RRjL7/"sH<+%9嘚[؟M @m%qj @\?K=E׾~kM@&nB; H\BK# DT2:39BY&mME 'GM(eLh)oh/8A0AfDelayN1R g烿-G]Ϸ:ZK\-dr~()+YߛX +t} &./ +b*Oi><^fVC6ڛT-ZL:\KρF9^Z (w?4 VPqlGZSX *W5:XDB6N?=QN^ǠHo@-/JwnhN UY>x7]kտxJxyeWqϢxL, CA_X ٛba*f[S]%oR +uӆAvT٥b}{.cE 䕘 +#~:A$le\| 槏V?pn93}f|;e ̹6saf[G0dP^x.Kx{endstream +endobj +4501 0 obj << +/Type /Page +/Contents 4502 0 R +/Resources 4500 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4499 0 R +>> endobj +4503 0 obj << +/D [4501 0 R /XYZ 85.039 786.531 null] +>> endobj +690 0 obj << +/D [4501 0 R /XYZ 85.039 684.064 null] +>> endobj +4504 0 obj << +/D [4501 0 R /XYZ 85.039 663.47 null] +>> endobj +694 0 obj << +/D [4501 0 R /XYZ 85.039 577.167 null] +>> endobj +4505 0 obj << +/D [4501 0 R /XYZ 85.039 556.875 null] +>> endobj +698 0 obj << +/D [4501 0 R /XYZ 85.039 218.06 null] +>> endobj +4506 0 obj << +/D [4501 0 R /XYZ 85.039 197.465 null] +>> endobj +702 0 obj << +/D [4501 0 R /XYZ 85.039 100.299 null] +>> endobj +4507 0 obj << +/D [4501 0 R /XYZ 85.039 80.31 null] +>> endobj +4500 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F35 2888 0 R /F72 3974 0 R /F18 3977 0 R >> +/XObject << /Im2 4154 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4510 0 obj << +/Length 2235 +/Filter /FlateDecode +>> +stream +xڭYIoHW0)fṲm %'T˙_?o)Rdjyz''N'q dQ_gDž%_f?‰ DxNFYٻo?ړRL8NJO3 qᏏS fyk7Í_><׋ȧ#vK0A_/dq dNhaBmYNcJ1:&чZъTZ(%'1" +cR{iR+P׬~@&\FzQfTlŃHz\jR/ dX`iV.X{Z+Xߡzo"k%"HJf|of&xomavX$a4!,9oH*B/T(חhؔh.qK u*d8CjH~H{uȿ4^8ʖlP2BϑmqN=.KX̋B1m*F Jkǰ^֗ͪc]"k=xQ0SOw11BWǢ%sDn-ֵx'Cq c %x^gva-G8S4ѡ! +ؕ"5,,RM"( 0xxwz4Gp}d-Kkg2.*5uW[|[#Z%9*uE\DhoNJoVUENr=[ZRZG{1HQ< P/5Ux!ZW(3Qg}zn]o3TD^G㇡MrV^HM[쓋fW<[s:Nw+E wu#NQuU+-(^5+Fj ).@6ˢfA*8ShL HcV/++Hkh,85Le $;m +h!ՐMF(FĄOv`-"&U"faА bHDJ1` +S囹kػmfNc9RCp>f:o iJOxC|Cl".U<2L+nR=f<돧Sp伀[!JOi\3h^ Bzf/w Z[e5ww_`J7 .v bvgc@^bJuF65V'˦EE C_8M4&PhM$ò>8DQyy.-EЁy+g=%yFw>~(=94FHA!<{*6 ZtNJ]By[pĆ.[w %^P%ͼ*:LJ +&i3ϢYsx<* RJ扆WbH6B¬rnYͻles'QOXF9hd([~yVu_6E#,x:7ʐW'?I6Avv.ct ip p a6'Yǫ6vo.xtC'C-v=>b6(3/vBФ"A19PmS*mmMJEᖿ$l)?EۺֶmIX uհ-BʑKn7Γ xaԚcz ;(݇=s^͡9qV!jq$Xr~vܛӱL`Iڌ)gҜΙl Ç'DW<6+a!RGgdÞ',3[,m]2kb vHve̙DAc)/0$c'|ƍ%/V.D43ߢ#ñc庴O\*gwdsSVyT*EWN=4l{ؕ%TJ7`ap`] L9aɡ: yix=q{j)~wh. qcpcͱ칻wّ0Vw?!bTZm"u^) s< +Hendstream +endobj +4509 0 obj << +/Type /Page +/Contents 4510 0 R +/Resources 4508 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4499 0 R +>> endobj +4511 0 obj << +/D [4509 0 R /XYZ 85.039 786.531 null] +>> endobj +706 0 obj << +/D [4509 0 R /XYZ 85.039 697.613 null] +>> endobj +4426 0 obj << +/D [4509 0 R /XYZ 85.039 678.741 null] +>> endobj +710 0 obj << +/D [4509 0 R /XYZ 85.039 592.435 null] +>> endobj +4512 0 obj << +/D [4509 0 R /XYZ 85.039 565.82 null] +>> endobj +714 0 obj << +/D [4509 0 R /XYZ 85.039 565.82 null] +>> endobj +4513 0 obj << +/D [4509 0 R /XYZ 85.039 542.503 null] +>> endobj +718 0 obj << +/D [4509 0 R /XYZ 85.039 502.464 null] +>> endobj +4514 0 obj << +/D [4509 0 R /XYZ 85.039 479.146 null] +>> endobj +722 0 obj << +/D [4509 0 R /XYZ 85.039 226.903 null] +>> endobj +4515 0 obj << +/D [4509 0 R /XYZ 85.039 205.91 null] +>> endobj +4508 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F56 2898 0 R /F20 2873 0 R /F35 2888 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4518 0 obj << +/Length 3307 +/Filter /FlateDecode +>> +stream +x[[6~_aee fŋ(oLNѤdh=co|,g6~υdY RmK!9e"CϏSL<ɤAwX؍n*>.O/޼|7h#)xYb`߼¦_߽Kttsh3 va<@/^Tr6V"F)x4| J;ņϥP`}-Xr<G!qAJ|Z I\TwŜX7Do7i0r*i׭2 *8Gc!%Y=_43 `}ȋNJr9) i%r5*GIJ_8 +3&4Xb> aNS3rj4>qV>&H<sLΚ_+Cu`plN(u>Kl9|hu1Zr0 9~| -`'<~Ux oرpZ[ N2\.}?>jC%a7>"~]| o׷uG + kGt|DGCƯ! lH + :^p4 GCI5s<`velYKYjH-=,ѳwaNCJr<1q#T ~nƝ!6mF+N߈g)XnfQ(Oz}ʤ}_r-fWN3#:zX̱*? / ²؇ >$;^ gXk#wU{Xj|~F ?7򌛨,&s:w]>WHA +e;LHjoa{ro)EmT{8"ԢZ8w>i"2d?-mgjC|&) WĥIP`,Х]ݱe(]jRB)Sr`v5[ſWK)zp;HM4WϙLPǩEX~3`XMI_ࡲcRyժ=~NjA +aK-zWб.\.ByO}ȋ 3tG yCQ4l3lS|E[y">֖Z15VL;QӃhz:ʚilE>8WP\V7BCaDzyr&{Ҡ'匐1Ġwjr*+ +5% Km:Bnpس b2 Z4jrjC/:vRIqjujK#'oەGԥ:`c2Kˠ\^b=Ee`Pc0Ed/z$=P(CP7LQ+ aa0x#hD5ơ:>`/$*sLޣ ȝmhӥ5 Z-ٺ!9Fgx휃z +ǶRTu3N6^ÝBfqY?܊O`Oh#ttKI༃ʄ& :J0F)V_>փutDuIB!bE^U{_N0.^W%̪Q&]spbE"vOS}6D"Vf콩[3rRu_2Ū 6g{c7]R-hct|xb=rHi)bgor,Uou9Z|k$a[2M L`aP/g@AiNw_ղ-:E;s-i éats6ɔBj.϶| k^xÖ`d|%eof{C,jװ.: qFv4C~ ,ǟ%J %M!m1%T *uKendstream +endobj +4517 0 obj << +/Type /Page +/Contents 4518 0 R +/Resources 4516 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4499 0 R +>> endobj +4519 0 obj << +/D [4517 0 R /XYZ 85.039 786.531 null] +>> endobj +4520 0 obj << +/D [4517 0 R /XYZ 85.039 763.817 null] +>> endobj +4521 0 obj << +/D [4517 0 R /XYZ 217.712 769.184 null] +>> endobj +4516 0 obj << +/Font << /F64 3118 0 R /F56 2898 0 R /F15 2884 0 R /F35 2888 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4524 0 obj << +/Length 958 +/Filter /FlateDecode +>> +stream +xWMsH+1=ߓػImMLNWd%W*~@X8%U.Myozf LU,.4V3% 4?=%eɥ!̥.m2tnN.>Ɖ"`qbNcnOWYdꒆ?VD+o{CQFӳ8At?g٩ ?i8Ê)Ά?9e\LIQCd:4)G"3 n?q'v|isJe8sq2beS +AjYlSX8eYtOV4sVqKPfR;Gs``e㳇QH,/rUI)6-;\njZl}b6CD(h[ԊimW@e Z>諘T2TTS2)7LQaS8J@>̕\ (( LY\W{&PSx v<&04(vka;Gm 0 &qHfҶgsFYaJa*MrC"hޖo +r~ZGW~1}eǐP):T*wָN* ?^n|+yE3;WU|(h-!uLsVyQ $澿l]x1ǣ˽(ˈA33GCQy0’,YzfE@hTPK|M~.Q +x WAg,/I{d c d[* nBa`V#~"قC$C%"4!Rݫ1`=S'}ZUh3HdoKgWRi۔ʫ/7wKP~ygAƨsduf6xBc{X ?̼qpHRs( ^ endstream +endobj +4523 0 obj << +/Type /Page +/Contents 4524 0 R +/Resources 4522 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4499 0 R +>> endobj +4525 0 obj << +/D [4523 0 R /XYZ 85.039 786.531 null] +>> endobj +4526 0 obj << +/D [4523 0 R /XYZ 85.039 472.12 null] +>> endobj +4527 0 obj << +/D [4523 0 R /XYZ 221.091 478.093 null] +>> endobj +4522 0 obj << +/Font << /F64 3118 0 R /F56 2898 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4530 0 obj << +/Length 2696 +/Filter /FlateDecode +>> +stream +x]s6+tWB(EɗIS+^(bk"K^I_aY<tH|_xp22iə|pu{ ݕĸ,2Nʼ|Ϙ`%fL|09|'oCh\fr$O^?SmU#õ7pŝS \xj4ve.]&D.%ٟesYƤ5w1nLiɴxpM ·UJUbl~e1g֊CO2S{`tFi< Vܘ^:Oګ,Tl>~^B]js/뜩ܺ^7kMDcUGٿn|`z6Bs̟Jjzwo]OoMY? PvU?2/*speaUrNAnVA1)B1bLs8\Z.Vg2cO7#ÇF)\x +P3s4r-ߪcka0Y a[oR|H3NuBs 79hz/oh僚F)9J{UՅnWU:poZhHdP ukj +5ԘubS5n2Dj>wl#p4~q 0? on \d)|5Vڶ]p{fH+©vL7`boHu)4CtWu39:܇\Woqc"۲y9vm}92PZ5v q/ڍM|-8!h M\RU +k[7 \##։u@__=TH3]i#vz)UެGk&;n[WeLg{2QG^#nSh;9D +Jzd!}*KM:6OKl6AR=MHD >hh +KʤOTNUkTX NUWA>E!Sاj~mjbPN =Pc%0+CwgDqtgs"SI!˱.Ç': G]G۝'G5GjbDWg0xԍnhO؆S +NƐ"*xS\ËiM5X ~yk +=Պ\"(ShҜŬjV| +17N7)4c#Ɖ + L!SU"2kŌ9Ewzh.j)B q< s +5yy|UϷopSf}KwV +!x-`sQmwMoK8C1c"뉷nShY4G͇YwMa]IS<4SNAxf,~SifiwvC:f.:tLs=|G"w'{s:S7wr^c8C]‰6kLQsߏܵ)H5:U37zD"7OsWX\C*X`&R( ƌESg'@LS!N>f7KQ L3m lm{Bz/A-f)bz:[ +5҈m1#M<࿦`[mEߔ|.q=aU"X\6uwJk`1Di3zHr(JܚgULPK`3YM*ҚULid5Q>&@h#`7on]Wd71vBkt1Zh{r)d YrnƟ#]o?Hi7KCH 2Ds<3JYJ$Oendstream +endobj +4529 0 obj << +/Type /Page +/Contents 4530 0 R +/Resources 4528 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4499 0 R +>> endobj +4531 0 obj << +/D [4529 0 R /XYZ 85.039 786.531 null] +>> endobj +4532 0 obj << +/D [4529 0 R /XYZ 85.039 700.264 null] +>> endobj +4533 0 obj << +/D [4529 0 R /XYZ 228.576 706.237 null] +>> endobj +4528 0 obj << +/Font << /F64 3118 0 R /F56 2898 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4536 0 obj << +/Length 2856 +/Filter /FlateDecode +>> +stream +xڥYnF}Wh(`DmߒLf0d $y%ZE*$5֩&)b0R]]]S% +Ϭ|fGf==ͼ1JaȏnlHgl6]Ohu2&#<4]~hh6^q:U~jv:2zc^f'T4'bdCA@ߞO=&o~U^W3xe:"N UC_Ih#hS4 &kGwfN;07vڦ17{ɪo똄TKZn!&J4AgQ/v^+=@Z2X;6 pDJoY]+d3M~[+\ڿ|o!|HUC9m0$m#P0,Kv%t*r}YJQd ty:8;XQпҺh<{!g*T1BϛV;n?ʳ#xdyͿ T:_܇W>g"B^!( c?c1Or= FɎ.꾺&4˱OLnf[Lp%vW˾bS0waxv 'B~Vl&'+tOz\,ν4l{RŅ|`bX܏068;*1ysMaܰԅ]yl:Ԗ?%T֓^6h?Mm+VejJsgwztyвjMY1fwH'~NYk)T#l3 Szi@YpG;˄HiBp,Yl!R2Zh~@L .=i&3똏S^5)Ε,iy Vay)|vq'hWJ ୞d(`tw髮yw>UVJ0WX@y|%.mU%qw(;VЖ-\礃D[L+ameSE{{` *[i)@6Y/l.善Ftp]$l8.}F!aUN@b-:{uw`[ ΎgE0, o83ڌa9T@ ߙ1<;GD5DF|&ӉcH4D^;i"vkM5ymEz$P˙]9aU4&I^>%/,#rc|ZA&w팑'v 6Ķݷm^L!kZE}wCkȠ "'\hM!z˥ɝ wcᔗ x10i<I,dqd!Bl:`Xv 5dJZe ıx .V>(R^,c U]\ 0P9?O=El.ֶ|Pt0Ȍ墈1'cQ$Ԣ[3EjK2Ѽ\ Kq k4t L6+*GJ#|3a3{kG +=P{A)8.xgA(zݹv!,%fupp]IqϨDž2 +DN^ FAM%?؝V)#8Ql5FFS@W}e,h2{\;*9nvG]p`sR `)$D~y╔.|S6sS싪?^k~D~۱ 3㈌'^9Kendstream +endobj +4535 0 obj << +/Type /Page +/Contents 4536 0 R +/Resources 4534 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4540 0 R +>> endobj +4537 0 obj << +/D [4535 0 R /XYZ 85.039 786.531 null] +>> endobj +726 0 obj << +/D [4535 0 R /XYZ 85.039 766.606 null] +>> endobj +2966 0 obj << +/D [4535 0 R /XYZ 85.039 647.281 null] +>> endobj +730 0 obj << +/D [4535 0 R /XYZ 85.039 432.131 null] +>> endobj +4538 0 obj << +/D [4535 0 R /XYZ 85.039 410.369 null] +>> endobj +734 0 obj << +/D [4535 0 R /XYZ 85.039 134.374 null] +>> endobj +4539 0 obj << +/D [4535 0 R /XYZ 85.039 107.759 null] +>> endobj +4534 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F72 3974 0 R /F18 3977 0 R /F35 2888 0 R /F56 2898 0 R >> +/XObject << /Im2 4154 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4543 0 obj << +/Length 2776 +/Filter /FlateDecode +>> +stream +xڥrF]_>! U-Tx-y$Q @HkP鬷\2黇j?5dšk-owJ 2pup6 fs/]x5I8~s^?p\k(=GQ|r.>._#?ve.ѻ˧G\xgwt!52?Ysu`*IfA`k-z\Ԕl]m(3k"c0H:7\yUtx'Ut5vV\Ɖ0dV0(n6})VH'pd x @"Gu-#3YL C$u|'kVȺBj)T!\0pY tŪ-B"(*SKXDcTWw9 wySt bh#{z} Y%.HbASe A0 hh52&/)"-`& n7c!J5=];d%^c95.my/LRy@KK!HZ2:9fN;bKk# jYDX;Wx&`=i(卬.BHgU/ԋ}v`j/tb_<Ɖ ^ iNkБGOq_T&S!OXPv`y@͗KUA &;$|3'D!v`şVȭ7]lz U4YqXh{LȔrtU٠,{P|ޝB#wA`Fr['omfI-N8&rBbr,Vwě./YL;texF@ue=]&S;ԞscF(@дiǓKO j}F%ۣ8H~D҆0Q2O׻׽U[8oUѨM!Gu1,gD[MA(&Lzx (ȇZ|ʗ>9`6נߘ}|x5]:[j:0߰hU wZ>r֪RV=s&Kf/YxdVjo0~r>Ct"Qj9L E3 3[0v\IN+C榮Ʃdp%JgƫEM +NU0"mOgx,K)K:!/z4E r哂ʩ )Ph*[K)jĵrڈ.yբCƠ i)M(s"5oUGCjdCs_ y;^|bDo :ąXPn7=I`3+ 8QhN}q33m㐄IZc}}05e#߶g=Hmq%z/9G; 4|_y&5-{=Tؗ)WCwE:p<.T m'0$Gs6BQHdƥg<ȭfG H )(·ŲW\>)o!,6l3T=ݔt3@KߠA1Ay/c=EOUUZ4F,W &a4͊j-lFC`C$C⪵iiߋ7G1İT 7lhȁ +=XIJyŠ!K#Nrw(1 W&\d7} +҂XLȘǺLݚ"5V--jy*W)ymL^ܶ&F')aW#&;]._Z.snݎQR0Jo +#:dEDTAw 5">*7A^zTK+|s$gRL[+gnX@;8/dOQ*'nVV> endobj +4544 0 obj << +/D [4542 0 R /XYZ 85.039 786.531 null] +>> endobj +4545 0 obj << +/D [4542 0 R /XYZ 85.039 615.045 null] +>> endobj +4546 0 obj << +/D [4542 0 R /XYZ 85.039 600.89 null] +>> endobj +4547 0 obj << +/D [4542 0 R /XYZ 85.039 529.894 null] +>> endobj +738 0 obj << +/D [4542 0 R /XYZ 85.039 199.481 null] +>> endobj +4548 0 obj << +/D [4542 0 R /XYZ 85.039 178.285 null] +>> endobj +4541 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F20 2873 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4551 0 obj << +/Length 1713 +/Filter /FlateDecode +>> +stream +xڵXo6ߟ:@jZDI f)t@[MB,Q:wGRltQ|{{2G!#A4amo&y ~vӛCu-0Br@ӛ1R\cX7_\]zo:Nt:w7۷׷5Ɓ"?{>m&.hۄrOzs \{k1gu!ave P%Cc7гd3EW$[R`g{(20}r_T7) v6u 4Jk3txdHFpu6z"/bqY?r1 G.d| S;6Pm3T\JtZ C}sw4 v .{ Q"m#&@"Tsf^[&e!́DƏ!ס;5A@x5@{U&(F1c03tl )U k\&X&!X/ "GS897A<0+n n) 9~i@ކI*#MjkRU~c8 |abz E1v F8M";́(NYxH (l8]f* ǢI:rE鐩vdR&"lXij_x|$jckZLf31wvɕܘQ{IYVP7fdGc|3)̢Hʷ\RãOF,skz (yw3݈6r5zo(DJ:N#K:]69} MNmǂE&s:y\ĺP"=ugHKQ-A=NZ +sSh5R5_+@9LP+ʨԓ,׵I9^2t8>q},헆~YT.?3f d*bT?-pm+Ni\q*bPQ|F_6B|S.xw8ovJq||/J΢mRM=k!y%ajt7-+zCT2kEW +FqU/S֯ [2FcڪTp\2n% +Z)8Q)'%waϖޥf 9#RP{Է Uo?8+_-xn2dZdiU)WkI0Б)Fw|Ycw|-8r"gOG*.<*eQr)'}[ v)TOr]ɝ}0UY9&}Uп*v=D6Xendstream +endobj +4550 0 obj << +/Type /Page +/Contents 4551 0 R +/Resources 4549 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4540 0 R +>> endobj +4552 0 obj << +/D [4550 0 R /XYZ 85.039 786.531 null] +>> endobj +742 0 obj << +/D [4550 0 R /XYZ 85.039 736.632 null] +>> endobj +4553 0 obj << +/D [4550 0 R /XYZ 85.039 707.834 null] +>> endobj +746 0 obj << +/D [4550 0 R /XYZ 85.039 665.684 null] +>> endobj +4554 0 obj << +/D [4550 0 R /XYZ 85.039 645.094 null] +>> endobj +4555 0 obj << +/D [4550 0 R /XYZ 318.781 623.298 null] +>> endobj +4556 0 obj << +/D [4550 0 R /XYZ 85.039 380.01 null] +>> endobj +750 0 obj << +/D [4550 0 R /XYZ 85.039 295.967 null] +>> endobj +4557 0 obj << +/D [4550 0 R /XYZ 85.039 272.649 null] +>> endobj +4549 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F56 2898 0 R /F20 2873 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4560 0 obj << +/Length 2003 +/Filter /FlateDecode +>> +stream +xڭX[o8~0f^dR%QyδivtXrBn+QM\HY(C3"_6"ZUUd9|x[~MQa{0v+x?v/8iy7wu{ mȻs$w7|ęn~ŧwwd՛ݤ̠HT?/_u +gGXAzHD}t%kZY 3q!gΉzT`䝦4_һ۱Uǻ-׍~m˞i~1< ɏ ePiuScк|,M^zݴu 'ɼI1+ +e83쨳Ga虧X2ov̍3H'oYb{ rx03·ܕl};4W")#=ggA8ޔej3]Z7`zeڞYuUn3 +AL˟ÈDÛ +,G-O1d{Mx6tsZ6H˼W=)3y(y1HC=0/v< + szJLY|{4VưumtU}y(I:ZvjzV Sep4 +dXgTVPS\[@tEh@&Ϻ)hRli4Dl@Tȹʮk1Qߎ=7آG(Q=؊^;<jX[^s 8xsC1aJ +KҒ +FWo?O5Oo9s+7RE1 q2wר]V62pCc,} 2&!6i)ϋ 8%NHDm4bJa.( +r+P_(} F6HځV[q\r xe/ 2Ӝ) IuəޡH,X41ǷQ_3Oi\xf;!>{KnIx|J9n4p>={W7qJ1{M8gÝ3N*)Sy61 Fqg( RŊeu"̈WXTWo)vSхJ۱`aųT;'}ExT5ٙ.y4wݥAKD2—AK" |Њ-,Ծ!q6u]S0ٽ!SD|\8Nq.r" +"_f<90>f<}'/0VWp R|1};zÔ. < +hys~4 +o90q-F[ m29"$bɅo~A[c&eQ\cQQendstream +endobj +4559 0 obj << +/Type /Page +/Contents 4560 0 R +/Resources 4558 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4540 0 R +>> endobj +4561 0 obj << +/D [4559 0 R /XYZ 85.039 786.531 null] +>> endobj +754 0 obj << +/D [4559 0 R /XYZ 85.039 571.508 null] +>> endobj +4562 0 obj << +/D [4559 0 R /XYZ 85.039 544.893 null] +>> endobj +758 0 obj << +/D [4559 0 R /XYZ 85.039 486.859 null] +>> endobj +4563 0 obj << +/D [4559 0 R /XYZ 85.039 465.663 null] +>> endobj +762 0 obj << +/D [4559 0 R /XYZ 85.039 315.109 null] +>> endobj +4564 0 obj << +/D [4559 0 R /XYZ 85.039 293.912 null] +>> endobj +4558 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F56 2898 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4567 0 obj << +/Length 3124 +/Filter /FlateDecode +>> +stream +xڍYn}#4$׼m f7  C[XPv>uD VV]S]H]BSEKMt? "HRK+[׻]<6]R$qx,3w_(ޙ(r} 26MCn5Y ~7& v4>DP}=0i[z߬5˓]Gogljһ(ʋ|'%}mfW:~6i+>4M\O#hYp&(,·Ɨ 0`j_d~c?*~:?F 5.jeFshXVEXG5Xډ~玂 ~?{w.L喪[cq+IXߠoW G t<:p/B8 {<WNY?d$pNIRǭwUXpEq, |NV^NS*nQ wjNO,?Uટw'.kA0TS8@r}ՏO _Es SzM.®}$+-{pXm"];JC AElhfX 4mT/F< k4p64B?H3gqT%!+CIȋ2^rCcĄ3*eݳ*VWuDx3Tcة]$kuo&Mq2QH2tԶFad i2 F>/%5k'qGDؿt$c'8dCK trcj]Iz(V2ײK(^z$9g_D|Ut/pN9HHGtI4 +/'b%W/_@ 4,TXxJv3k3due-O76 +pp)Fy@#  '!mnO 1M4HDUVXr@'a=OqP?M |ލ3a{\J.Xm!?e42N:dP0BVu (yU;q~/L1#ܹRAaeyij2; +2i+p}誝(]怏OKKrȐ5vj8@-S9Ѓ4É]g9?;?pi/莺 W_@ͭ*\ޤ-iBz+ҩL99y3W%xaL\d^qۈ_wfo {M8H=KV6&4*~'tVB|Ҷ:!؈Z0b-L}(a$h/ +5&\Z3JINfarN 7?}(1E yjڌN8xAq9"vh_yj&EYfbJ&()ӌ'%: eOBB_ZZ+t_wT$ڕ&~q Q3Iq" >ـy)a?]t˅W'o-N~r%ȱw&v-)}m?);!x.dm*C +)mgD4;|e )woΜi;<ǙЀDOIRj-_Kj?ۘ+4ϒ}!3ÇMDՂ'ǾyW!vax &Qd߸eyg†M +zY\ϔH/֣^/0ɇ5~"Ƥ\=# 6(|W^_$Y- H`控>.㭸D(w|Ɍl+%%M|_&z:lxD;8 +Qz_GtZw&,#Dp JᡄVkyɎ*)E_XlU=I( +bt[uҹP'$ڝ%'@{,F%OF7ߵx_}8ϞK-ZFD|:(~ gFCkHCbkП91) +$~ n@vwpa +9TsQ\?N7r 1rQKWSȐ(gdĝ305U4$g\xFQMKZD-hz/݊+^W}cw7Ei^oa$ZFLs ޽LKYƋWaz|^OǠ,2kbX'endstream +endobj +4566 0 obj << +/Type /Page +/Contents 4567 0 R +/Resources 4565 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4540 0 R +>> endobj +4568 0 obj << +/D [4566 0 R /XYZ 85.039 786.531 null] +>> endobj +766 0 obj << +/D [4566 0 R /XYZ 85.039 766.606 null] +>> endobj +2967 0 obj << +/D [4566 0 R /XYZ 85.039 651.298 null] +>> endobj +770 0 obj << +/D [4566 0 R /XYZ 85.039 241.932 null] +>> endobj +4569 0 obj << +/D [4566 0 R /XYZ 85.039 213.197 null] +>> endobj +4565 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F72 3974 0 R /F14 2903 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4572 0 obj << +/Length 3875 +/Filter /FlateDecode +>> +stream +xڥZr8}W葪M$;;ٚZ%HbOw.j+l4 qœœ2 #3ef&7dI-RY.=\~8 +glrs̢0哛o۟\ݼ:4 EQqaz+iwoo|&| /ipMl?NӤ ޢ[/o7\qhrfVN= +lH3f?,iK'jI&(,,O'Z, pKK'e2aMx~IibOr2^YxvAE˜YO5ni=Ԣd#zXև2M0oFw.ti@MU[jY8kD셽aI0X+c|eԄE6#L I3ڸP>hRƶIC&, $?x4P釮ڎ/95>Dvt'IBˮYXq0jhQH?HnzIpS7BT;\\wwUN{ W>]Y٤Q-G/͟o乷k\wR?x{1WiĶDb4"ah7=PJP'!8J՚,p4:6]AGQKq9ZVM{6o"t|sBͪf.666l )7|p*R}QdaI3ن'ihyiH?;xgAy&o?Ͽ8i"2v"X{7$hҙbHs&+O1pvp('}mQ`87*NVڰn.y"a&+ZׇЧk'Bju| ьGa!varM_#RH +wռYtLW21(Gi՛cGD^["[; {̕. Z$CKgs.z/ߣ,98 ;AL +89:P+=3$S7QeVA!hnvd4. Q{a4$EyH_HR -$w>] |•vˡg@( @ Ê/WBmVWE@yC PNJ%c+ኤ}|IbR=~cxxQa 䦗Í/?jÌ<Rlu~Y1(4yHh@QfwëcB-$86# oC+>3޺²"%n&ŐfIvu^`RJZ0xul/ t[BԌ; "鞍Ó XY1,2"q^0G%"]f&ݶ^[V\mxbuߪnSa/U`)Xj}̔ތu6:W%z%- GˉCz4m -.gUo ,C[$ 9n;*mTq̺mꁦf+ȀLd f،LyA=e=V/Ӝ]NZEHEiEp$s#o}Ng?+h9p JJl$7fҒb[m*%HC=OCaJ = )x,Golq |kA$M ^c֛l9ez1[phfmҫ($4l>.U8ShA*zs#|R2Kˑ_Da %$^{VDR-/K(Î A.|-K)NWN!I=P+E^h e@*9tJK]L" >io_BYIuP_NWOBG2 x:FgCPUUʐ 5CCrHfQ> endobj +4573 0 obj << +/D [4571 0 R /XYZ 85.039 786.531 null] +>> endobj +774 0 obj << +/D [4571 0 R /XYZ 85.039 493.201 null] +>> endobj +4574 0 obj << +/D [4571 0 R /XYZ 85.039 463.797 null] +>> endobj +778 0 obj << +/D [4571 0 R /XYZ 85.039 381.454 null] +>> endobj +4575 0 obj << +/D [4571 0 R /XYZ 85.039 360.258 null] +>> endobj +4570 0 obj << +/Font << /F64 3118 0 R /F14 2903 0 R /F66 3248 0 R /F15 2884 0 R /F35 2888 0 R /F20 2873 0 R /F72 3974 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4578 0 obj << +/Length 4080 +/Filter /FlateDecode +>> +stream +x[s۸_K虈!>u/I6zHY)RGRqw?(%3?" @8Pj{,/gP, ҡH/DAY|hq]o7o>/RP2ޝ/ ^rw\\}:O W]||]_/>12.%˫7o7?&LQ(~o"x*MP|je볿M/j*D.*p֫aBN/?| +_x |"e%R9_B~%>"34uN2:} Soʎܢ \΋uǁz⫼Mc&;\~XJifM]6Ojon-T?W)kIW,iAvᄇ6EFj[,q"JKV*W-f&Μ}ox\ -0Ao#Tw\M{b}m%1 +P(/Z`f&T˪ qnD' F:CxPvI~tsEIrs[:z=z\+cLU_޾{ƿ jg}x|[V{ijI²np[UyNw5f)b-lIZJ-$yԪ^Znvr5mQ`[Fz I$/($)X?/#!p# ~sJP=[euMf L$k0J쫜y7kr ZsMkg^Ȁ͚H{%dnd;T֣QsU_HC(:]% +[`3h/[RnBS]z.ͨA_)`e +XѕXe5⡒` 8K',eTSM͕ 929}TJZ#{UZM@Ϟf)+ת'-V*ZV[2ΰՂ+ڏI ɁPBL"} B$."5 6[C͒&Pe݆^s6 $TL } /x̌g^& +K2D)Kp'WT I K<1񗝓O*k%)PeD ދW/gf8 SKB +R7} +j~EI028,m6g?F =1: 8tTTA|["Z]^}ȶb>H|ʓ"Yz/ D${@9LB!`~՛Iv;ߦQS%m4{!̽ WLMF|%sE Cɵ)v{;-ewϥ!{_dlIڱ!ېC}@"#d=\j3㴭::!96P,6LW8r@ +{gPJ %:o}vh]lrpXf]?H= +vfB 'T1 6Q{hJ 1:]$'sGeO)0Qa:e*"l1jxQd_g:!lE$-e;n"P|Nk{:qB}ǨVMc2 =z:Ağ N7Z7v1}8Ei̅4ֿƲmSycu#&[9>949B] mqqp"-My9& p9TȆy q*{JLԺuaKX68ɤCvD+8GK'bbK63q +~ |(u1.|>2d70%M*ǃ9Qjet,|!8Dqኽͽ[dBd6}?~I,́HObPWODb_n*T +|9`]PsL`:E/q{ڨ︙J67LD: zW~*c9 (`Ȇ%mh#ˠו`M۝@2^sJx/H7A!L.s`#MPa+C4C7&UOAkֿdĦYg*9pFc9j܉ǚB ]}2ay fM im?DGLrHKp#qL*G=yij(1͠?f/ZY6p|Yܳ+a!]ϼ2{A!E=vl2 4xov@SR8%7nti &3\C [|E0 LHj萩ѧ2uj+šIj"t!5F[ǧFb>ĬʹbP!B,; h~ +z$j7ARA$Z@wͪJyD8J9Z,BFNVh^cx$Vz)ִEeEZ|I+u8ޗ_@sSIl`Ͱ`NOX%I盾АMEx皃c"rPޑGj`I]`,Ƿ̜WmFK!";79ku ޖz9 SԠѽ1X$%,}V"\!@!_[Kd>'&ˢ;&f(=)H3sco C?c=Թï۬mz`VI1d! Nh+L*L"D 6Y}q)/b5ng2吭</[8[ +-:xK -ce zG.1 %;/hiPY"bfz"nD"_GY31/x0a)N^QH +r7ff 7;u;@Ɯ))LMA,D`EE|.E*&}PPÑs)Etk" owTS芻ϵ9$c$;of zlwLGfϡD@6rykzaNA=CQ=O?(?%W>\ Ve}; "Td U0t-0ٔILސ̋ +"i;}TGA!Ӓ4CSYs.zvZ%1>93>dm9񄍥M'^;ѤRe qKtPĔGΘǔ'A"inUGAjޭ7r¾b%0p9giM +aZcOLϦ!e7CfF򇓄{hg10J$^9ೞ_е^`pۄ9a]ǻdx%blk%)t%O 6sf~1 E`dc%^A<|L&,F':rhB)})aE8("ɺ#endstream +endobj +4577 0 obj << +/Type /Page +/Contents 4578 0 R +/Resources 4576 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4587 0 R +>> endobj +4579 0 obj << +/D [4577 0 R /XYZ 85.039 786.531 null] +>> endobj +782 0 obj << +/D [4577 0 R /XYZ 85.039 287.543 null] +>> endobj +4583 0 obj << +/D [4577 0 R /XYZ 85.039 266.952 null] +>> endobj +4584 0 obj << +/D [4577 0 R /XYZ 85.039 238.862 null] +>> endobj +4585 0 obj << +/D [4577 0 R /XYZ 236.167 244.835 null] +>> endobj +786 0 obj << +/D [4577 0 R /XYZ 85.039 128.42 null] +>> endobj +4586 0 obj << +/D [4577 0 R /XYZ 85.039 107.224 null] +>> endobj +4576 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F20 2873 0 R /F14 2903 0 R /F56 2898 0 R /F74 4582 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4590 0 obj << +/Length 1772 +/Filter /FlateDecode +>> +stream +xڽY[S6~ϯX 3)eYe(NlgBo9:I nh֋#}"[duvD Bߖwӽ;h0–t~wv};rn'rl~ri|?:1!ŅcAZ=nNZOΏgPXh!V<>q /.H|pMgQv`E.sytpcDZEv<'-=aEz,jԫ)ZR pq.][pHi^5,S-AQaSt->ES|q_w6Lb +"'lLt(ħsR*J*1 N41(zԽU|8ip][du +:+e0 2ט{Fזdd,kXK)S[ f3_zups[:~uq|WkG+|QY"`ȍVt Sa?^)]!Wߚ/BDbV̵ًnzûcCHe_DA tDӘ| 1o4 |<e$yNkHrh%NI7O\wv3 y^^DiVvYXq8 /ns2$6JTofvSHΧ&ݿ !(}PiMMuv2HSZ7Fҩqjܪث`+zk>]ȧnkjaܙ1h|DSCɑ +5_we|}ka6N*Gt8WU^pOkH1fݔL?(XohKͫ8OY-6^<0*VC~on67Ǹdƃ"φUD' mkFHx񀖸t_s&XnZLQmѕu\kk@=kvDbg&, ax +T#C}18O+jTyڧ^ +Y#D @jJu8gN wTǃ9xҲu?ѧyiQSAc2s૕ x,RLs\QW~; +dt5Oi%b`=uL~wh qI仑FT`s:A}jsƑeC⟚!<=A )/QM/_,o/Pvˇ !m[lQB; +um`8->~<7_I8endstream +endobj +4589 0 obj << +/Type /Page +/Contents 4590 0 R +/Resources 4588 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4587 0 R +>> endobj +4591 0 obj << +/D [4589 0 R /XYZ 85.039 786.531 null] +>> endobj +4588 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4594 0 obj << +/Length 3509 +/Filter /FlateDecode +>> +stream +xڭZY6~_7SUC<ؓĩz&leSB$eyIvhF_7G-"yFXdy&F-h3(X jBWߦBEaۧ¤H߃߿re ,˃o*x\[hw?ݾi<;l}ӭ /uoqN}n7+*cGUBS#Pb'&Lb#n/jNZb08sv8.ZTXz$$,LtJqxqK,ICT%K~Q{_TW_壴XL`ҼN/m͝s^rƑ'LyR*WҪ?~W_VpdISUU~Wq;UEIt~˖}Un^sc%K>t= f%S;0S4'vs_;%QꟻVv:{nl:Gawܪ+f ^+,AovVP%z^ j:)$=cФ:փZ 8Q59Py1QQ5vmsKxb;.Qʼn {٩f}cFBNQ^S!>еH-,&QdI "EqYI늸x~7Mh Y_I3̹]DI++n=Tj/ u J;;6W±W&i y*Y2yf&E2`rT!*2{Dq۞[YdFx gbd=F]/uH6"YNgB)~٣|*Щ1*ӎ0P""Z-Rܫ#iN/TM==}Ԣ/iwrIKs܌-7rtvUxEG<^AvA69]cb M<# {L,XK 1+rʼnCnF^ŧ[JQ<gt~zka];wUy{hXm*mr$ȴh(p+49}ܑ!hpQvr jAS*{马˓XGS ;yZ2WBcQπ f:8IQS+q2Mkj-N2fIG97>= ,M8uV@9Qig`5RĵtWV(;UZ!Δa+@bzlASP#ۅ\E_ HRKYиuVKлد;Wz( 0sX1:BT6'un?NR+ Dq1ZӰ@S=[ϷbQ+ $;/D5eh=zc Flv̾ ~6:>p\E<^͒O؋__gℜǖi?F\4[JOjm^)Կ Pܣq*e^h)z[TեIJt}<395$`4x[|v܃`oP3_^I/\ i! 똶(O HkHҾo8{>K.>3Ļϖ*x z7XP/'y!MIћQ%{,=kq\7',`(b_;d I +Q5#sRՏ WH n'c Bͮ?ƿd91 fWk-Ppނu3"'i U%06WE.8ʟ$ZZ9f\Tvqb0 ;;endstream +endobj +4593 0 obj << +/Type /Page +/Contents 4594 0 R +/Resources 4592 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4587 0 R +>> endobj +4595 0 obj << +/D [4593 0 R /XYZ 85.039 786.531 null] +>> endobj +4596 0 obj << +/D [4593 0 R /XYZ 320.069 769.79 null] +>> endobj +4597 0 obj << +/D [4593 0 R /XYZ 85.039 675.543 null] +>> endobj +790 0 obj << +/D [4593 0 R /XYZ 85.039 379.216 null] +>> endobj +4598 0 obj << +/D [4593 0 R /XYZ 85.039 353.208 null] +>> endobj +794 0 obj << +/D [4593 0 R /XYZ 85.039 295.174 null] +>> endobj +4599 0 obj << +/D [4593 0 R /XYZ 85.039 273.977 null] +>> endobj +798 0 obj << +/D [4593 0 R /XYZ 85.039 109.874 null] +>> endobj +4600 0 obj << +/D [4593 0 R /XYZ 85.039 88.678 null] +>> endobj +4592 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4603 0 obj << +/Length 3184 +/Filter /FlateDecode +>> +stream +xZI6Бhb67$N%ǭd*΁-լHb?o@H"[<[1'fYF*YJVhXGjyDDQ>[޹q(d\\B)i?Ef/~L妗oǂn짗^̂kwo/7??_^xKJ!_g4[RBgG(GJ*2տXܧgnYT<5өtl!MF*L3(qJexGi,r'Aqō/a3:Q[{_G:a>_g!$E:8Мqy4H8om 6bYsǦ>@khKIps]SoSL!ϘW: +%lcqc=2 e&G"Kx^eJ7^YRH3uܽv=nf;LW6{!gT_ηlqHqeUIo@vXeeV-t<[8EUD(,u<D6|xsjhHAb@]ev%l11aJ h8gc$֌dA`F#I +iPnfq.a}uuL8xI4 |U ZaUl+`в;$-n䞮u̓ =ḨbV(˅3/sR2D]XLt\ >Hդ>JT&һOfe=B+yL'3|9N$bBXptﷷo~ǒ `_Jn'?p(+[npRj{m٣YDT: P2ʻ5:k]<7a OQV). +J8[u|I%⑤?\u*9m!bmD:<=& _ΰIx,OF*Ilkʬ qwmƎfdh TZ^2|ݡPwL35MłI|牆b_cAǒ%Vt`,-什;V!49-GFBn^~B]>PK.hTcPucnim6A/c$IeN"QlP7l$N=>ߠb?xxoLF=X(j/S3ɾYѶs ~#Nj>Te;Ѡ{F8?U[;Ǧ4&h/k/UH!Yy +츥X5s\XzdF]LC=&=IY2)=:KCMgRn}SU9(N^3ѯN:93:6\ Z%[s?ڌ҇ePCV<|A98x7a๭TI~-%ߴZ8Q񸞞y_S:HzExd<ޗ}`[j +ߞ]EIEV2CnTmlCL[^(z $g;#z +4Ni*ꈍ|SkoGp,:Np1;tXy'%.BK1=w9wxaP}2hm]sWĽWT!L[ϕJi;qk-;Ke (Ydo~!<6:d|A m+$X`P`ʼF"Ca&KP<&x&رV^.]X*$ +^X򻁋MBCTRvPLرK~nex達3.=\sp&2IoU8lC=xyͅ/وVLVb?,qi} eG`/f\X.q߰\,E%aZ/o xZ ;86_[0?XEXݮİTkyA Wt/0%-'F&o{?@y^~L:y\'}ցVρ. K^zM +!4+/]F] a|f#0aDqBT')YA VESS 8^s MC^)j2fԿ 7Ȯ +C{n50 j 4 .V2^R4^#9UL+rGpmAD"̂j-`s=453͹Kڶx6G;~ӏmGt4}K1<titi++w[և 'rw,H>rE7*.#.T8 +PƉ9$m "O ~d6ūf1(_jJp/yEq=P?obѣ?q,)y}+]=w,x(CcYv%Lp0OH2@~uBo\ɯMjG#BwsQGfyi;f@4G.^D9p= -K6s ++Hwt ~wd[z߼Z}6 + 뻁HD Xp`)2،/yP0A^#qRC2E @nDS!^ҖԗI7\fP^(bQ$c仧02ITEk h(cY:ӡ떦䮛bܚutg H52oVeҡ~6Tp6s.4iҖ. E{߉AGiOP6$ bO5 ~ N9,PR"rL ?i2endstream +endobj +4602 0 obj << +/Type /Page +/Contents 4603 0 R +/Resources 4601 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4587 0 R +>> endobj +4604 0 obj << +/D [4602 0 R /XYZ 85.039 786.531 null] +>> endobj +4605 0 obj << +/D [4602 0 R /XYZ 85.039 763.817 null] +>> endobj +4606 0 obj << +/D [4602 0 R /XYZ 266.917 769.79 null] +>> endobj +802 0 obj << +/D [4602 0 R /XYZ 85.039 209.51 null] +>> endobj +4607 0 obj << +/D [4602 0 R /XYZ 85.039 190.639 null] +>> endobj +806 0 obj << +/D [4602 0 R /XYZ 85.039 131.43 null] +>> endobj +4608 0 obj << +/D [4602 0 R /XYZ 85.039 104.816 null] +>> endobj +4601 0 obj << +/Font << /F64 3118 0 R /F56 2898 0 R /F15 2884 0 R /F35 2888 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4611 0 obj << +/Length 3254 +/Filter /FlateDecode +>> +stream +x[[6~_᷵Z/66θhmdY3*۳=RmIMSc1X,yDw.$GLBOLL*$&"%&*<@߯['XODa:Yܷadyz돋\)5*͓Ll.ͻۛŇۙQqoAO@׷7x&-V}wW7vR~5`]J @ds#DZm[\'Ul9 D4ݩYwd.4}=bi`Y(}V5A'IRw+J:)'K4[V8̸U8ӯފ>q +g_.T*0x +idδ<%mYX?M]YlAY/rԽ%>db|(mokrWUt$4u6<Hiq(БHYEam: }B3d[,L)TDf +İ)&g>g4ESOT BN\oظ**Iq@GHӂcz]C:IL ̈p&epD†GS +`|Avv\xH޿K'|^-BL͜j% AWP&{lU"kY^L$j5qqL_B02,'9:9Tn?:#]@ޙuG-|P0pwg sh/^!(Hӈn1)"f~rS6؞RU!WcXiX^@"E.ktx7.'Ҟm,Xu/> GP!S-30vM{efQoVUm"kk:Tswϯr0 +Dh|*ϻmw. trogv0 +kb8I/<'\FxMҗKp@T~HnݓLiSO'Xv֩ilt!~8v q+P9 XqzJݥ" M-v( ms[Eu79=Jxu]<{n ,bm+-#܋/i8'M;'4W*I94.In[{(p̙Sv\ܲjr%jNYsai]K(Aqg=懻bo/ {b@ڹZq0%*{nC;\g[薏x5fl?hmxEαZx3&GG#Nٷ(EPz/fjrqbUڴو3gwb DW3gFh;FkeBM}X{`\!8]-Wcd;D5R ,$ime.ߵk,#.0>=9H%;ҞFmF Ali{)9n@"S6=&Zv'Y=iɷlSK:lZ 2+7xD&kk5֓I?6#YDq0&9?dc xE KU`AQ"#ӏ3Rօ_㿜wʼnJ3ۚI#d#cπjmTbE@*w9|a5de$@'}.[2snxc]>QQ|;~n9svSZhT~Og7.xp6pJIIa2;Q=*?endstream +endobj +4610 0 obj << +/Type /Page +/Contents 4611 0 R +/Resources 4609 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4587 0 R +>> endobj +4612 0 obj << +/D [4610 0 R /XYZ 85.039 786.531 null] +>> endobj +4613 0 obj << +/D [4610 0 R /XYZ 85.039 763.817 null] +>> endobj +4614 0 obj << +/D [4610 0 R /XYZ 233.803 769.79 null] +>> endobj +810 0 obj << +/D [4610 0 R /XYZ 85.039 114.268 null] +>> endobj +4615 0 obj << +/D [4610 0 R /XYZ 85.039 93.071 null] +>> endobj +4609 0 obj << +/Font << /F64 3118 0 R /F56 2898 0 R /F15 2884 0 R /F35 2888 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4618 0 obj << +/Length 3420 +/Filter /FlateDecode +>> +stream +xr6_BKR'٦سmXl)Ku=&L&C3xp;,| JQ +zw/ngX9UoC|zΓ$zw7+(\EQ]޻*޿֏ݧ7~gЫ+@է7wq/>^®W?9{sn@)$g/6_|xm_I؝i}gWgi>Qcj0VEIS˩*I"V +L""aq&2R0ĄB(M;A³^&gord| +,D5F r8Q(?z9Xp&\[yW:((u "ȉ(9ǼKx҈8E6B}NC dr4rY:Vit&^Dʐ,7,rfR&-DN#-t7 N+p]fpu WlU^@X$;GbbT,XfGx؁6UkBK8x$9 PD*q H¯a}[*PdRJM[hǼftLPUlUN'ų)ŀ Amy +,T$\ˀ>g{ ;[ssntr{ow)r/a>e͘Fy'Nxg;>GǠ[ +;V6Q  +74nuAxM'nP'r07v2eS k|@0"=M*[YvPLHى|5IO ᆖ! Cp 2H<[?Oji7i=oO,P 9eM U yWt8!A-BA0b_i)c$v6D!B1Hrҵ]((N,$=%>3 EYAhh:# +]3[Vyo&E[ۉDzV{dV _Ku}fuAjgW4viȳVs2(U3HAE?)7;GRG,8x7 bYЖ]1aRJ8&4sZOqj`7a$@v$Pr_!a[g;gpJ"ڠG +'Ԡ[Z0G}}9DF9Š?0%?3c,6  z{4!XՈeN s[oV=ڜ?FI'ܐM6ۃZD8lH|r& )1|?v6AE/4XZя= pFZ$g=ʶk?sC=V_b<-]Y3nfU ~5Deq42NYOM| +#>谤No +N$˚>BXJ^ L%aĎSn?JE "Y`>`H[K&V(o-q{ ^26I!Uah=YJ/֜Oz^1'l[Y[M:$YCB.@[tP[먫0&mog0r 0j&q4'q0<{h +>4Od  U :2V B\%sM ȦU1W[kwb/d +?O9gDP ?H\푂y.l>t'Tg*{{&^p$stی=OcwCuk Ȝ&;1(>xoe8cӛ pX .Ҍ0X2f[rFq]Q7t3pl?DCxbk$@U 2D~tWEy^m]ʿ/cg^! > +q ~]ffݾ%p*pBGޮQ 1mLUiDե("lg"{u D V{o9ǚnNF5$S]37j=҃< iwu]/.g+4ޖebWuEGFbrA M +e{xS;,zg㤅gH՝]*^p|ΘG+T|xٕg4:bR#4CkI[ш^Jƽ]SC(;WK3HEuIϜk +FaOcop+f;*"GE<-J(N,[=~fioX#1 )?ʞ]\DZ.QJ5[pDu caq:tC2A?d +G:59=[ܕ삎62d{lءL <\,}p9A8$;6'S] `.X\xIff+\5.eO#-cb^xU-Var7} >jZ.o*EC۷8jKʁ'F0{Kav4$1sa#rBZ< ̿*bH)dCR.ljIhTendstream +endobj +4617 0 obj << +/Type /Page +/Contents 4618 0 R +/Resources 4616 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4587 0 R +>> endobj +4619 0 obj << +/D [4617 0 R /XYZ 85.039 786.531 null] +>> endobj +4620 0 obj << +/D [4617 0 R /XYZ 85.039 763.817 null] +>> endobj +4621 0 obj << +/D [4617 0 R /XYZ 307.409 769.79 null] +>> endobj +814 0 obj << +/D [4617 0 R /XYZ 85.039 294.572 null] +>> endobj +4622 0 obj << +/D [4617 0 R /XYZ 85.039 273.841 null] +>> endobj +4623 0 obj << +/D [4617 0 R /XYZ 85.039 208.822 null] +>> endobj +4624 0 obj << +/D [4617 0 R /XYZ 85.039 166.053 null] +>> endobj +818 0 obj << +/D [4617 0 R /XYZ 85.039 110.14 null] +>> endobj +4625 0 obj << +/D [4617 0 R /XYZ 85.039 88.94 null] +>> endobj +4616 0 obj << +/Font << /F64 3118 0 R /F56 2898 0 R /F15 2884 0 R /F20 2873 0 R /F72 3974 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4628 0 obj << +/Length 3113 +/Filter /FlateDecode +>> +stream +xڥr۸_Gj!>t8]Nd@K EzE=7PH9mw2c$ oID*z؞5L L@f=goGD*|՝*L|ջtfUY'3}^}wb4޿y~9|)SxǛg\vmcǢ7V=M}t= Bwyv{,^ &kLZMTءtFYm&q(I^Zoҡ@>K^LM}ٺvA @e|S\D+;Na3(E}oFC*o7Ll{ּ=+1;8ݐWqy-l.U3BH8B@xs@Nf6KHL㥦WWX_ +5Sy3f  %XKމ B_ek|'|RW#AI4 3xu$:Z#5Cڀ(DhNa0:<VjɃ2kl%6gn{]<$ځFRZ\ 1xǻ\gHV&3fCDb+ZƆ-π5[;YdjTYnK9?/G+F3 D n^>scw @z`=tck\3 پE1A-;$ 4)rDko:PF;#;_nh]9:9@pjA:¥2X?V62GP#eL+9W055{Xz88y%fcCԝDh5gkc`)ĭ*x4ȊTּ@FPzCD ɮ{'^o~/VQL#RϡY7<\ |;r¾~Õ;: tFE:F^DX@X 6Ϟ!M-urXγdBIzqvB 8 t6-X!z 1HA Sz3Ip/k\H=bUF{=N"NиMrta􇯃Ps#z*.yB12,An,aFq,P[DžN>Vp#z;uNeMe[tK +$DcƂ۶#b4r-h 5m~/8di&p6߉iOrajƯiP }ױ c##L.1 -yReNa e&ᴬMIݑT87v^\MCoRrM dDtGܞ{v.u::P*ۊGW8X _JSF,0f)Dwė%OLqqFލբȔPdRjqOW$*ӾۘOUQϭd=!l'QvGG*I / "o>M QU*H%Iz#Q5!1VL$%P#|7H yp8S=NSN;*H8uGzQ fO:9G*6zѸT`)`wWaiS #I?iVHKk|;BRa:,/85 f60 +9k7Ls"JYOWݨM\DXS#wHUTBw.? ґ[q7ph!Z.e Y{7dAlD^\E.,N%T2N |Bpǹ=ptr;8ɧK;r,d%9c5-,jP޸)jnaϓJ# 5&SB 6j^t3U&JaJ۱'J.'G} !:uV).lb H,Pz/S#֜ve(81Rd]Ν$|ɤ 骔|vX2"c_1Y6dՙ[[*C8nDgnAZXSij)qy-OG)иs.[8s@WtbEO}dp {L ;e^q(o:x2rV)eZ +Z]REޡ` m~Kƭ2׊Y/ -Z8c 䴍r +WzG')pX+F!M(88}yEG$vd8cUk%_͟ %I!5;]ĺAbB`ǀq{*X23UR* Sc>( u fj,k N^@݈@ ³;Ujw7TZr h§S`'(ݕ/  +vuQO8ΐtm'鬅y8ْo/j\n{/v]'sYY€'7XAHD #"^0*^6jᗷb{ Kb:Nq 0&wym/:BIJz͟wqϼ G\y,'4iXW/]σ //_ܫ.UgA98>wSS+b@FjSEY.9PI`z1脚2WyI·݋Cą!h9n>> endobj +4629 0 obj << +/D [4627 0 R /XYZ 85.039 786.531 null] +>> endobj +4630 0 obj << +/D [4627 0 R /XYZ 85.039 674.352 null] +>> endobj +4631 0 obj << +/D [4627 0 R /XYZ 85.039 604.485 null] +>> endobj +4632 0 obj << +/D [4627 0 R /XYZ 85.039 563.231 null] +>> endobj +822 0 obj << +/D [4627 0 R /XYZ 85.039 333.848 null] +>> endobj +4633 0 obj << +/D [4627 0 R /XYZ 85.039 291.364 null] +>> endobj +826 0 obj << +/D [4627 0 R /XYZ 85.039 291.364 null] +>> endobj +4634 0 obj << +/D [4627 0 R /XYZ 85.039 270.836 null] +>> endobj +4626 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F66 3248 0 R /F35 2888 0 R /F11 2906 0 R /F72 3974 0 R /F18 3977 0 R /F73 4000 0 R >> +/XObject << /Im2 4154 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4638 0 obj << +/Length 3721 +/Filter /FlateDecode +>> +stream +xr8_ʓT1cƘ2jJ-߭j ^w\l>|ZefO_Ɔ]^?Jg |r >Z&`tDe ?Y<[<@;T/g֙Y#a- 5-HЀc;rbvbtƝ\fŰ>YgҋubȦ&\bJEsxJQE +]Jx{dx=faXsyaQ0u .&DF\6]pb;"Wk P[$z[sdp=TW /ط%} +n,kUř k =2&' +=e{Z +S;\p[P@ Ggm;jY_h\;FqGThdksq)f1 sd7jk<  T=/VIK5Տ2~@e˖qFkĩ髛1n`ɔ#CʯUM ?ʭ^!P`,^:VeV9- :YII)Ce%G *0asĄ/XkZ<ʢ^氳З] mOϾ~"$W'-rFnog i1r#Tu A7l]MJU '֕mp YW4\s|PM.ߢZcw T!m_vm«?9/V&=8~D`76r"Q-*,4:uˢ]^n:Jq귏 U٠/QL1Hm]ɖ1~sIu2 9+k 5bKQf7vnFwx!]IJַb=ul?i6žb:WŇ%Ka%OtmX?_^pQ"`{܃ 2|0f}G32SUx>h>KuD8c^ $ +,#aO$ƹ(ZGޢV%7x}J,lr\PˍWdUBc0C@dp,w^)ENq vޒsJ[^ _kU3Չ =zs/glmqfǛ<Ơy(X|O2.ÇH#rxOdd"`mf%# s;@g|ңaX&6ćdR:Ri"(h SatfIN$w62Y. ;FteU/99edt/) A3-wRbHxTEF0/k#hc؃3 + L5&Qk픸 !i$jjcdh:tFIF1 4{V=wFmjuͱtN|(^쐡1DS 8+gت$/{1cV;?ūpSFw /֟I"qe~v d7. )G8.ZgA&c +j%YDʲ֬oPm_*jpjD+swE^B>SJ4$6L]9qIbU-%`sV &|DYX<4lB;2,#"A L`-PKY)rGB@ҲNDfQoF#5)`Ok3^Sf%ҍ4҇韣(o8!؈a1SfU\\saՓXM1i㇔Xu@V 1vjr0+ $p~C-pNJp Yd #M6{.6 ( O с;cNd|{ +ːV +'+X2̪(?N7!!“Pub"_GTqMUJD?h_rwԪػx(JOf]M,Bp͟JoA"D:T<JrVϗ~1NGE΅ '!un~rIX$ϓrzFTwMx xGQ. O=N +y\jh_Mt1y76ӹR +dFE#Q}c9Eힻ_uq -rRr9{SLё P?`,# XǽI^b(I4q8S ߱0??aoc۔/sMid6Vl>U7'%eHiwYǎA&,V 㲸O28Y@%A/űͭ䄁Ct .AE)N(ړ!hYB)#:|_>@kWEe IqHY?@1BaOL):|ZﺩO-h=~A>Iu-pϩd !3\:T@Sq$Y|)l"LMXC8g 'x"y5`MQFY@y<(Cyɠ1ؓ*wҹoNPlOsL$1)擸@њI5 r=IsiݎCKMߊhշWKl99&WԌ,SM)G=wUz5Hwc8 o0XWT(:?pOC?3X|Tۜ'Hph?> endobj +4639 0 obj << +/D [4637 0 R /XYZ 85.039 786.531 null] +>> endobj +830 0 obj << +/D [4637 0 R /XYZ 85.039 617.717 null] +>> endobj +4640 0 obj << +/D [4637 0 R /XYZ 85.039 599.048 null] +>> endobj +834 0 obj << +/D [4637 0 R /XYZ 85.039 448.857 null] +>> endobj +4641 0 obj << +/D [4637 0 R /XYZ 85.039 427.66 null] +>> endobj +838 0 obj << +/D [4637 0 R /XYZ 85.039 128.427 null] +>> endobj +4642 0 obj << +/D [4637 0 R /XYZ 85.039 107.23 null] +>> endobj +4636 0 obj << +/Font << /F64 3118 0 R /F72 3974 0 R /F18 3977 0 R /F20 2873 0 R /F15 2884 0 R /F56 2898 0 R /F74 4582 0 R /F35 2888 0 R /F66 3248 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4645 0 obj << +/Length 3750 +/Filter /FlateDecode +>> +stream +xڥr6_ҋ骈Cxfg'XVZ,HBx~HJ'[[.p4Fߠfi:%iGZV`3](XȢTgA6[n,,-׿z7_|jIzﯔw{Pއwg~zwtj^xpS! z/w(57(An͠p:MQ둳s$?:7-lo +Pם@BL@f`.jעԦAfYH %uAݒf)Cx% ( SV/!9R¬f4+m,I88;,F{FF%=aWYf1Ea>lj|06 `D5qt:jLǣM'8_%qܖ8OX |^"bTqok7 t˞e'H,N-VU] 'Z"_Q͟j <7 I Ip.)Nѿ`Q9p)`~I^+о(#rVmmbWð~Ȥ$ǃF\$bԻ/%IZc4|%Vg>'Td6ۃ3ԬH0JtE來E9OIzcrc|nQ؈QD8:=wRq}Uxɇa2Owx#pt# N@9YhM8 VЌ0`"verd<p\EDLm.]U)Ch #=:{mցἅ;/\qhlcRe?W~)W!fMgZWPX -zB48$6vB ac._| T#qMF%&"J!)piPK]ceiA~ ( rk>AuB:Fi [Y9cq[+T`y[p+Y>jD"m)=c+dliRkUָsR"sYH/EQ g;%%&%sT? H~Z10]DĴ)`cW0iM.P΃aV؆r#]$eWAUcU<^2ʝ%Ոv϶b[[Qɜ 5yvЁLtڄ'PJo1),V`4t^8[ ;M_))@. :dO%m㲑B~% PLB͋+| r'uklo%X`2+Z6"rg–_=wj}vNY h]ȝn \vKʝ@dг.C8TTS%c"Cb?VMRuܱ S@7 " 䓙r+ϋ,P}Hlo=[C *rq<RbO\Wg_-TY}b2TJ=:M2HӚ^%K$3;M:#w Զ˶K M_^51YVnT=r ٌ%#5}q<Ű ^vRz01 l3Lڳ=ۇdi.C`rkjlEbve1Rb_^?:%V&;yOTRbKP<3ցO-e) M="YQ]'QWa]ǔ|W*dG:z_=kVl݄Et^vH&mu0, !=Ȁ];$s_2ubWJ;[ЫO>bm!RFa]}82Tm1D IEdqaP@ s,1C+j-Ч~e\#"K{)1p11[8 + +֥QT\~QW7:} }ukj}uѯnp4u1\M|u}uNJD O™ [zҶCX[ x,OlRz;v6\JH fbhd¾z@Ud(,>]3xΎ2#VHV>m//ktO>S;>9jxZO6!v.70R;HF" r*̸u9lWzt:` F.* 07ugB(_* k3]vM^z18J.!+8ק.0թ( P9b( +)s mendstream +endobj +4644 0 obj << +/Type /Page +/Contents 4645 0 R +/Resources 4643 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4635 0 R +>> endobj +4646 0 obj << +/D [4644 0 R /XYZ 85.039 786.531 null] +>> endobj +842 0 obj << +/D [4644 0 R /XYZ 85.039 643.417 null] +>> endobj +4647 0 obj << +/D [4644 0 R /XYZ 85.039 624.943 null] +>> endobj +846 0 obj << +/D [4644 0 R /XYZ 85.039 390.77 null] +>> endobj +4648 0 obj << +/D [4644 0 R /XYZ 85.039 370.175 null] +>> endobj +850 0 obj << +/D [4644 0 R /XYZ 85.039 207.99 null] +>> endobj +4649 0 obj << +/D [4644 0 R /XYZ 85.039 184.672 null] +>> endobj +4643 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F20 2873 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4652 0 obj << +/Length 3828 +/Filter /FlateDecode +>> +stream +xڥZs_K䙈&@o]sIi;Ih8Dc} (rz@`..C.82͒ bw^oJ(B2hzq11* 0_|0~~zELE@[n݇wY4W }T_l_pwtӗ_p/["o?^.a?\AgP痻 GAl"^|Gϋ%VeAER'.t)}qUSW +䕄~S,ò&u(7'XY߾JwYJ6RX slkrfesnࣶg.QB䴚\32aj۪t,\bU2K*lY[u͟ĶƁ_@B&6 !\p-hίҁQh~Ƨn Z6nF(L]ELpղk݆ ӿ42hFK P +dY?ѸЭiD5^maYYcWzj{FߢٺnUhYrw\:6%Mw VMc;4Uq^Ѫu˄9c{ +}ut$!<7eύ`^7uhm '`4h?2k +nu—ծ%!aC'S[b,"R@5qEtL!6:9'+ Bo#TbVNh۵bmqO_P{U>3]MmGN\.`L94ʷ^1Lm^gk +hϱh3AhzAYen# 2/5c2Czqzpsa;@6 xzNTLxoJ"ؿ `xĉaF~5eu.yZ2"͑,[㈲dTsǦyBr<͈PX^|婁fKεJm>E MACssf 4u6D>M0!N!F6~ZOvUd&iS6Wtnf Q_j),CFvH;bsBLm+˧NM,ܑLB[O~Tk2wgT[MRP ˣ jl*-1 O Z8c^,:yYԶJ.vP|S0M( +4zSeBI$ p4)*clhK^Š Mc Fr ìz+Iv2gEpb#p-b\"E2eԺx`ljGiQicdb(˱{yA%S6EE`˹dSлfq?V;F0EX,C񟘥fB\ +7h-˩a O/(F> @7$ο~ %щFǻb.% -֭딎NC?NYEc-u DxO"TK N%R de0tc'\?V@f]-r8XJ.:Q?x7ո#:I(>Aul۠E12IP[;h-hs]3u3I]n^O%7 8Jz 0Rs:絶n࠳ , F5ǔ|_UzPPcjI>֎xb V[kPR=St̓,G#ܦQCloٙ,ҩtLE=> endobj +4655 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [288.461 336.894 356.594 348.584] +/Subtype/Link/A<> +>> endobj +4656 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [452.526 282.697 512.306 294.387] +/Subtype/Link/A<> +>> endobj +4657 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 228.5 206.209 240.19] +/Subtype/Link/A<> +>> endobj +4658 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [427.522 174.304 512.306 185.993] +/Subtype/Link/A<> +>> endobj +4653 0 obj << +/D [4651 0 R /XYZ 85.039 786.531 null] +>> endobj +854 0 obj << +/D [4651 0 R /XYZ 85.039 480.826 null] +>> endobj +4654 0 obj << +/D [4651 0 R /XYZ 85.039 459.63 null] +>> endobj +4650 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F56 2898 0 R /F35 2888 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4661 0 obj << +/Length 3157 +/Filter /FlateDecode +>> +stream +xڭێ}Bȋ ə-E:qحw HܐT6 sr$Q4) /g̹̹t6K؏t8[=|u +BP_^, ,fwa,,ݭw7 jH{=7E}{x՛7wSA_}_\5 ~=Nv7W7wOW 7Wtl2#彺ǰϙVS?JQW*_jDUv,pW<߂LN~GWq>M5˶XM4v8 Th^_>*ʰQ1 dR"?O Cws}#˙,ݕ$sW6B-r|X{ vte Al$ʀ-&$Xv$UgΏ[79y[ULy۲٣˪m*lP'=L@yP_)(o-^z$8bqe S6(Ff/Jƿ=OE̠WhPl7FrA}5c3VOakGVjvTEYsG:=*ɍBg4 +HdgvOt9|ԋ I뛤! kl.S/zCe4R\K`N +gզ~< kOBG04tJ|&{<; `+`kFUAT 0A5D B½X\Nlce=Vl'*~;ϏM1ԢB? SNPn~" rS4qX۷dC6.~df`@$Yu'a_`[㜦-Gaھ`hpV0O3 8$upD\qiTC+s&%^%zupH a˲(1 n Q@ +'ܺt;ɕy\KSL81ljw9Hy5ls8vC e- (kj4$CDfgޚ ?1lX4%V^l= + +ly:EᪧO9dDkHmN,)meaI  T0Q;raS%d}J0%mtuޚH A +NXLKbM)H0~ԭ!`e!IptK" QW=>Gu9>PeơnE cr +m! C;۫y[edRTJS+<9 +8+N26<7yE;2\6\!'iوֲJ!Y1TXݘxً,%g;@+MneJ ^oT)Sڶ4hk*$e\WPrȗшeL}5&[Qz<Ӿ.2X)rrahzL2Rm 34 =U ˳qbHz!ћE'&rV [b~8عEͤ? ?ݦVf(.鳫4lԏFƺuH#3 0`\=6+UI)ǎv@;&D# +`pD=,s& 6Ԗ]#?듨'Іp@IC!**:%SsBAhjK̍Ul9" +4 'C>E i?+(֢'~uGkby` d;[ 91pZ]aAO4.6 b ,tљq()h-&<$J1( @J< ҵӤ⨗x2hOÀa s'pe6WksS)[l!`LTr׫X'~Xh[&gVO25mP+n/M fGI(0=$~꾐F2!Et-zjD41DK34d&v{~*|ɼfaif;=Ïls|oZϸ8u,a-Rk Q YjJ,ff9l8 4d7b;w+vyY 7^IQfIp3uwkVʦ|PY?|6(-xm+wܰ*UܚӨU|Cc%B(ck &J|[čp}Gp7=TDFA`Fرގs>Lql3_kq䶌*@fڹ9k*mO2*uN.-`"Y\%ʉ ,m;$~ L߼ A +B ;QJ:Ir\_&.ת%޿y +rs0ycxRv5Y5Ɓ5H(H(:K/Rjtr[ŝÏGBfb;Rj{Hڲ%_+q@NB~ Kf,1tE*^m:w ]OoQi8\m`t}a {P_N$k'Itf\" D'R(NMN;gϪդ~iU80CqNE__Vendstream +endobj +4660 0 obj << +/Type /Page +/Contents 4661 0 R +/Resources 4659 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4635 0 R +>> endobj +4662 0 obj << +/D [4660 0 R /XYZ 85.039 786.531 null] +>> endobj +858 0 obj << +/D [4660 0 R /XYZ 85.039 586.231 null] +>> endobj +4663 0 obj << +/D [4660 0 R /XYZ 85.039 565.034 null] +>> endobj +862 0 obj << +/D [4660 0 R /XYZ 85.039 372.659 null] +>> endobj +4664 0 obj << +/D [4660 0 R /XYZ 85.039 346.044 null] +>> endobj +866 0 obj << +/D [4660 0 R /XYZ 85.039 301.56 null] +>> endobj +4665 0 obj << +/D [4660 0 R /XYZ 85.039 280.363 null] +>> endobj +4666 0 obj << +/D [4660 0 R /XYZ 85.039 187.843 null] +>> endobj +4667 0 obj << +/D [4660 0 R /XYZ 85.039 172.173 null] +>> endobj +4659 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F20 2873 0 R /F72 3974 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4670 0 obj << +/Length 1441 +/Filter /FlateDecode +>> +stream +xڭXSF_DL(܇LaX-9eh A{ +q'0(,3JDŀGw揁gIGVGhsfr?GD) ņIfۡφ/Nޞ] :wGק~{(>]㫫tq pQ(|ȣ\=p,Z͙h1F1_76蝎Ԯh>] d:$Sr:%s0W;A Q{[J"TLfjl6)Le$ˍ +YnMʔ\/=y5M EH0\O@;6":i(4MXxfRF): La"Ӹ׫j>*9epM`għG:p[-,ֲJdn'=^68v+d|=)JK$"'w>"kE7(~JF݄YAYrVxbgQg̿@wQٴ|rϢ못:1 z^bN夤u.>ji늌zfas^![Ю]B=5fJOLN\Z}հ֩`WRPZRGɦY|#03 Au0KMY # Z~+{i5V= PeHzX^;Od+#%:>7hѾ*m3J ag~&FxM-% ~*s F4g?DJhc9^kcb6iL32h73Hy +.eH-nq?Ȣ;)\ +ي@^FݦM2>/ƨT-)"i>'p9ջ`UV!MWa_*`! ẍ́.ؾޫ~mCm[\Ք'ԎR-nٸ; sӞoڴ~nƏYGU7=ve9IYoϢ p> endobj +4671 0 obj << +/D [4669 0 R /XYZ 85.039 786.531 null] +>> endobj +4672 0 obj << +/D [4669 0 R /XYZ 85.039 634.82 null] +>> endobj +4673 0 obj << +/D [4669 0 R /XYZ 85.039 420.461 null] +>> endobj +4674 0 obj << +/D [4669 0 R /XYZ 85.039 303.495 null] +>> endobj +4675 0 obj << +/D [4669 0 R /XYZ 85.039 134.927 null] +>> endobj +4668 0 obj << +/Font << /F64 3118 0 R /F72 3974 0 R /F18 3977 0 R /F15 2884 0 R /F35 2888 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4678 0 obj << +/Length 1129 +/Filter /FlateDecode +>> +stream +xڥVKoFWlO!ro. N [[@P9eHmwfgIѶ)G;oK[.trՒ-v3nLF,d泷aRBl±sreiyOޥ29K3|<g➜]/.S \x*1_]Y/$E5m`KHLp]x(nfxήfgiB yXowZ+awwU3AIS+޲YÅwc sŤ䅵XBi /eʹ:{z D-dߘ& ߧ.ޞ$;i R6 6&COMzÕbPP)Fa:T4p26ijĬ +eF|ԥ6+y#HeZ()òq9OGVs~ +쓖$)QDU=^{ "Z Xd94-tlnwM=T@sa P`z^Yu[L:>WM ,fKԯOz&*Ot}.^$IfPilUmVqYHY+M'.c]X5v^{^FQ+ݒ]ի-BISK}aW00>?j-ch^R KN>_2 N >+IjXtl7r65e%`~f6@dF +Fm؆'*jsv;ݱ3p;"&i|ÓѦ# *7@#-N5o`f +'nfe]vġ' > endobj +4679 0 obj << +/D [4677 0 R /XYZ 85.039 786.531 null] +>> endobj +870 0 obj << +/D [4677 0 R /XYZ 85.039 567.21 null] +>> endobj +4680 0 obj << +/D [4677 0 R /XYZ 85.039 532.27 null] +>> endobj +4676 0 obj << +/Font << /F64 3118 0 R /F72 3974 0 R /F18 3977 0 R /F73 4000 0 R /F15 2884 0 R /F35 2888 0 R /F20 2873 0 R /F66 3248 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4684 0 obj << +/Length 2983 +/Filter /FlateDecode +>> +stream +xڥ]o=B}V"u{{ޢ_ +(6c +KYIN%ʖs@19gIE^'A / ё=ޅV~ F c/,:UAg8r:Sq1|ܽBOAjoE +t($˼7?:IBcڬ:MY#Ǔ_̶]hѷٯtȎpIo;QEaPŌ];$dKGqegfIJ7===t8l;s9a˙gpRvXYCWm'$QY2Am۾!fJÀ @|х?u췏`fi#` \rgי󌐝!?vÔyd{^lLǐAP)ۆ֍+pjwL'D#4Ҹ?r8u#dbLc~xo(q¹mI:W}yD%=1P!ڹʆqekV7&{ѹ`^PK6jK4ʁ>3h͎x÷,Kb+Vzx:L3rΩ&{Qae'׻?˺o]젯U\LS, dFJ35D,C3yXiZ.|ua\TEA!B,7{@ HScyP!s8K޾sZ-rVo;p(tn +)x5Bo$o'YN]GI<}!򂍼0,ggh7.t 1G \4r ܯlˆ!]5[A%Łx_JҾ+0zL"$նseuNWTNy +y1"7I1;c?cv3;ܜJ<*svrVb%kY/1`x;M5C),M;RN#;J3GpO$nMRreS_T!F͹LZ|nI3"FsEWC

SAx~\pyN.|^ǒ3bE܏#)ǖ3>\GqkS,}^(zrUD/ĥa~qZGґ"KUgeZ e֔Bu^p7 ? o dm DEtra}MԞ]arW.k-/\rȇ)18'^H'ˇu$3!S Lp _u,kϑ agk%t!ay!FRӴeiL/8,t#df!v8&p> 9ծ Б0$aʅ@F2> ORAq{! h"i\Ϧgb-rm #d5B!}.QnVGL|N1"2z>$?0չh\XP:y2q뒈.WU&)AYB\IXP9i{VM}h²D&wN\3 1)"L1'jyƢudea0$M '*A[ +?a἗8JNulJ-uZJun`ZDǹϤZ}q{au 1,yAFo'BX&BNLAG&M!CխiԈشҘtHơ-ԏS1)\ ?G.ϲ uBR=o{Ma115`KOjX cEQ)8UT[b6r)t ~+3b!dx:B dOi/ ]! >b0HCs^P傅N.@^)]% zA,TC7ZLt>RQO>%pik?^-WhS*`(;zQc!q-2#DjsMᧇ*x9 <mKyqdK2tIX>eƘ8d,iA38fBCZb~/f5[y.s= Z߹yDjRtk#Fu&\;Ix^;l;\NqX1G 0/![c-1k2$XEqV,rG*Tc<1 q pr#VqXGʯ\Gz\.X퓴5..!r(g ez-&-}λ[ӯ U1u:גT}hƻ;;,ӑH*E~ raW p=97ĭwpT`qZO){!\Hf:%?c 4&0i~#u潤?=T'r&מ]|A}^?lȽr!Kg{asC$kdgFQDr*tk;NlO^|}Ͼ~YNz%b_BI=o#%qV]3lRaFyŻ1}z*u񳽞_+W~ޠ,27g4l[E\Pm/Adzn|]:~\H ;[ɍ Yߛ5eHxe}׮&Ye܊ETP BRYcRoyCN}QRN1=NG WZ?RYVj'[]/7)J" 1{ M5'qg)cgB.Q-yjiZs)LIy)Aobzy'-j.Sgꚜt7 k§>$z/\}M$>ґB Q/8zY,y1qٽO=Q.pGo;;v,3z_iEX7~xɅצg`|pVxkڗb; {JuT:=6ra#'9aGQwm'*_xc朷M) w F,|wI5+~ }8;0SÒ[S2\ '5R~ҳ}P$R,0teiҒOExQ>y\K֯Z<e 5>^zjfJS~F6RFՄkܾXXB@Dmٸ)a$Jh֌s{}{9vIR6Pn1RX4J +d^=NWۃ{!9L3_N/ +L(w˅n~_uHP5ԹPW/ް_e@JŪ;t\ʰR@"$_;}HbڂM vݛi3SRA9giz_r!&ZDCVjs o%)X{n77pN{L0Ԓ֟j s|0$&0y_- L!V+qFGD#jL? 9$!cץT07sa)_EK/0ۤj>6 ʋ+(uHdrac+hM>އ ̞uxmrБ̤̒1 +3R+AeWX`vq$/VWdP, +л!L|JGҼ>"ЄF/4bz] _ kCExIIoFiE>L2ݏmf,"(69iWvUC,DX[o;zG伉`.4 iNa!_C +\H U[<~mGCM[A*u$x~bEwԑҵ b)W`!fu:1_,/r~i+(-=ss!jэ֊{e;س +3/$oЖC}A^5o90N(u:n|=xĞ\WK4F  1J^P0njmEƥk۰ +X442د 0ݶ({8SѤ>Tg xO6\G[X i_K6|,b 0Ց'ЙB{BlS} ˱ o}"ӌ^4؛ Y  E+ ߬J0m/&^ SَMR٢!P<!XhO``C&ۖ}/ ",OaB%.CW?+Ǧ>F#OT|!$T/T'_i, rHMIlF*Q$95l_ YʹMH7ƨEi⬾%dgHmI:MfZ'$|&%y(Pf&>4.?wn2$xbbcSELXG'BV5٣{`CƳ0iܤ0#ZLo_pݹrez*b*:i)~c?icW \k\ݘye蟅Spj4[!Xs ڷ]!WZo%GQ>P"osX N?웧h췞VcߟWmgה}O߼%3'x~9B)^^Xի=/qg$ {a 󑞷J ȵx;zAKr5r<=8i?OGM~GϤo(^^(~#;u5QpWSw -/NnG ^Ȇl8(-فt(dT4oo]g[bDyeYb/\f0*b!e'?uTvGƻX*iklX>"t> Q233^^}r֑;;g6"}`AL7>U9dYs2\3 9)t0_*DS%ymZ%鐛N'OF\p1D~5=D-Ʌi/ѕg& )EouCjETClh0۵V\pXN{ae^H DebWb0y 2!D--`*t4ap)4Rzz ./s/ 7])/]?HV˷ 783i(FЂ𫌋Bݪ[tB%W[\/8zY{!ɛ4^=qXvܹ\0yLL/5}/nACb24Fʲk8=aGR?7W$чOEshMuSl/y&70e^aPm.=q:\Чչ;L_޷OkR$f(kӪ]^} _s +iu~ˮk946jv#Aֵ9?Q|i,|*&`-Q_ T]a| BnW9=[菑=IKOluvx^EOuGO}YS\|!4WaA|wc͓δ묻#Qr6厕C^EJ+8)K֟#Ul28l=C86j?t$勞ۨfS?G)S^9rXpa#GN %ek8#tGΧz .gbmXprGN.8,8rXTq T&yspp4taFT2aGV )̯FܳS W Sr8ٮ/ҹ U=D(l>\s} L[H\"wt87] )A`_& <:vy up8sM*MiZ5]Ͷ ;}}wF1~#&>ag6j}mz~æxd;u?'-{GoiUɷ}ƚ ZAeOcsnypxSL2;i^xiּ1wC/SᦼxC0ԢlHoLF럶L1lXD\RZ}N%+FaXPaWbO2p'v0Գxw|Qf/UG%O %h5|ȥy +=M4LBcD:tX_-qg\>r!!#rAs,E,tc?'.۶o0/42أkɅp]8]rjvV ]jjN;vm}ؼ1W޿}k+\|(2'M.|T8c,=zPrC2Rcf{ +'،tqM8k3t Y 1@#*NGfM2F0,ٝ[N'U|MLJPt!uY  #a Q. +Ӈd~0/&ޫ& 1ix3꼑7 +@**ba!Q.\X2m=zf|ڞ.Qt74h8.PCH>jm尰o (o?vFH\oA`O"݅۫O+7AeX..q} }\h`=ŝ[=`Hj^`1$:bR0a{ +ۼITaPiO5ĭVf OϹ\?_-$7d 0qt.C&07tvIHs}Ѐf!L>Y`BB2?|[&143*/v*OƝUեNNQASIQ0Ƕ(:I1L0&&.Fĝ|/yó)ANSǒ\"nvUת_/ ^Qqiƛީ#7࿸t}۶51A7H,vνK9{m.`5,<gоv/!s.@$<<`wH8Qg1ɆSE7c)$MQ>U2eq/#9N 7 x{9U&qbzbyWfxH9Gl$~e? /_گ>SԼo|`2g5Ǡ{tXV=]X0{]| $V(b0^ܰV2 8{qrkNa` 7GTwM.oo8B>Վ߲g51L +~*`t.(CbN"LֲS^V*??qɪǢdĎ +g1ܔ Ԓ.v&#[mp6w˄^;|;XFwӈ%B`81*z/.ΡTE + +4ސ>MloJ'Q01,oe}kÓ:X,V.$E70HX(- $;X>x-\- ,1,(KhN$֚0euG˃6LE;ÒpZ߬^$'Ɲ\0,K,Tcf fI+!2k&+մz.cո['&&}vɳgF:NiM3zXroa<`ֽ ޛlX9|eq#P#awQ9\%V {k[`(Ѫ# 4A r +sV]zwB؝N@@3(ώQ @}{hCk.ϣcdp,`*;<e.y^L~\>7/9M/}\ͫͭxXQvBw0YMr0naaٳO&z>I?m3>f606}+CD<[*a_8Zik 6;AIv tO9^3-O>~w# %h)l^d$vNE"N% kl'M'Y%~{uq{ +HЭE W1XrBpѲ̂Ozsb;[g0jHdG<<'^x[9d\€6Mb̳#1^U6ni$G +c0 b;p$;Db<`*7a8 ;/[L d^aU'r;`jM!;0ǡ(8<Bv&<8Uڸ*V,6H3rAeˋqK-3,sX3O?^`[g϶!@zLg')@)no`iAs]*HB#Ŭ>Dʚ;ug}^wа>l)4:G_#Fd"bo y (^R*ŰqrFvͩSKy=5xd;!6} 6lZ#آ`{ {h'TqvοT.\q>eJjq5t=F^AU5KHE+bNH+hTzn-5?N. sbV0ye2;Td ^qh[֫ZP@U΢ [!]4-d/Ovr Q G>>*ttrP!#U_ v4WޭGfiܼkX˳IYq\FAem08g5:Й;cxC.UG^g3rt;L}UjkC]Us;-n$Ai̧:/)k!o?Y *Ԓv=uȈV<;[| s0)om`b5XHY6КCbcm-rW-& +o-ɮ;Xۅᕘ-3c7?ڈ7pw^SvO7 w#8r%ڲ)͏zXpq/6Jmʂ57F#˘[8g4TWQ<| wtZQ0Y51mPϵiL]t^L?ϻұg@֧ZU냱vfݴpDY,lo3:^l>>LZ 1 +3ƞk +aN[u~ Y-AAYVo3]v:UȈM8eanKNjBkĪqX3e~?W.dRұ)sofq8Mі+àF'ǘb骣8l6u@Y%$[o!8;<X| x́ڹPO챾uVkNj+TA|ae-oy ~-<>iy2c{N4aA{}0ւ&4GgK Ѯrm1qj[^[c]|Wc(js꾅e+ +.!U'8$Yv +"?9~UNq-/jI0Wk0.Ԧp~p:h+NV7 `JΖpq_c͡2"KKyw2[_ͮvߨkqE#lT[2G ŵvb aBmI}yvl#9`'kЏPk٩vr? ǃ0m3wPRbBV]Vzmq5N+- {ʖ9jϕ] 3<z5$cܒ]H!\Ԃ[~áٮ+y{Y~\Po8;9^Ǔ4ɫήfy2ݪ9@𠾴hzr-fE_dL|> Swk6&)V?17wLT k1ͩ VgUp(4%WCӡɅNJ;S%ɷK2% ltaWW[|jn6Z΃p$âۛchtyI޵(*aPQX. +g7l7MMA {l^.TD+VыJÏH__緮ƝB-@vSK[830˭SR)\‚- e"@laǧ O yTa ɘs:40-8Qm2> +7Z_B-CJj:7(w̅ɞn- C$:)uƝ+GgTK)RS'EvZSbYBcƕm!a: F Y Gr iShlheC 0'yYt/Bz]P9kGW.|YyP#NjÒw]]`$]ȹH_4W/Gg-\rr.4c͛b)F/+nw Nv!L%B=BeCSMd>hAVb!^ċ~/s- p ?ēh̅c*%֧Ȱs!uew8j }8I:Fٚ]X Wr.Вes&J f6{?eW0ZΟ#U}g ZSTx\ŸU(3.h^/T.{>a;ٝqʅ߮4\?߽cY\(<(hC +{!mMw@ۅ1\5yߙ-+\x|(q5SsaoN&zqOŧ8y#2V'=~Ep` +?w:T!&ݓQbkp fS&KkH{.E7Ǹ$]ƮR\(nt x RLdh$eZ9a'$@\4҆ f\Vw*jcT<Il:ŏZx;*b<WoYIqjl|-fi,/Ф.Cb~ɑnE\P"j2*irǕą+EFdG?bT}pa1'1` g&3sw%4-qXH:&m7w&l2Lr'^ h\oƼ{tK5BPsBPPrWp]7 eNs" 3uLNhD8WA[Ig'gi rfjoG! z`Yp q@"~HÕtٺrp$A`wڅ~]׺~!V.BI6sa u"΅v A*\bd.^Uއ] 5Vœ#nR8‰{2 ~5v.p] 5{ՌEj*9HinD=" k& V,O(S]dpi47C4i[=tE5Z؃J +\.!]X<24@R;W.:.,QplB `}/}\HJx(  <:.\fTyQ lW"Uǡ +cx7`NRAj[bD.2 G]\ud]SӺ >.Hcth,~mFM.m4 ?!4Sgۥ{OyO0SM,Yxd-of[n83ʅW-z鉎.4m4Gv2 2a(eIN%~t>)bp=wǝX;?#$Mo1q=[3ea[ R;ہ4ofy੝mF +{m;pi0e-Lm/A aGT"Z s5C-!O}fjjX_4(Č_>l끠nFsv. h`.fq9bf9O"c^?pTnϋv(sѕFX`#S-iz ?%ڷمoJ.wZa% 0\h-LAqٝR?pA?p='k ?.?o(]` ϩdNG]v_o >)=fBuQ'だ}FRŬ`a<7$ vQ`/sG;nO +eԀ"S +ZNrgAk7Dp97 t<E> +stream +x`ұfffVVV٣FFF666&&&uuuީ >endstream +endobj +5259 0 obj << +/D [5257 0 R /XYZ 85.039 781.388 null] +>> endobj +5260 0 obj << +/D [5257 0 R /XYZ 85.039 758.673 null] +>> endobj +5261 0 obj << +/D [5257 0 R /XYZ 85.039 758.673 null] +>> endobj +5262 0 obj << +/D [5257 0 R /XYZ 244.345 359.014 null] +>> endobj +1450 0 obj << +/D [5257 0 R /XYZ 85.039 221.947 null] +>> endobj +5263 0 obj << +/D [5257 0 R /XYZ 85.039 200.751 null] +>> endobj +1454 0 obj << +/D [5257 0 R /XYZ 85.039 117.943 null] +>> endobj +5264 0 obj << +/D [5257 0 R /XYZ 85.039 96.082 null] +>> endobj +5256 0 obj << +/Font << /F64 3118 0 R /F75 5167 0 R /F56 2898 0 R /F15 2884 0 R /F20 2873 0 R >> +/XObject << /Im12 5246 0 R >> +/ProcSet [ /PDF /Text /ImageC /ImageI ] +>> endobj +5269 0 obj << +/Length 4426 +/Filter /FlateDecode +>> +stream +x;koF+ 〥b?p7Lgso}[`i)D-)jO9̇`L%u?u~`8QI* `eyx>* ~\鄾 o޷?q67x*g8No?ϔ~yШO,1##r?]}xl8mxRdW{p)t&M_=wWZ#5fטTBabbQaK,Ji(}Re1l/gs-aK=4+CsF]>~(n hk]ˑ{`B+l|%ȉGd;\Ѻ/o=+XJv6^'u`z Ҭph+ ye%]3WjffռZ8=0aPleIxM9(;5 D^y)z`K%kV[y`R H;㻩P;dܾ"%MD[y @0a/[zLקLަ=ռ~@iQrDl$4܎ @ ; w.&h`I8S!]_poVǟ0Q%¡}Es؞>0*Z0 @ D>[>`OҠS q P~ *AݏW8/\K.] O^W}*[٭-"-PjB ƻyB ٣ހ{$s;Ɉ:5/>0rf`blW ;4F/ ۛ|^q)>C9UvI3٥ܭ 'OY?ӨTPSW,{YBc`:Uu~ 9T%X mq5#ad[ ~8A 9Y2e o&&eݪWn*ZlY&KuNs>Rlɺ4C cN;5k-hŠb,(gsčHQytXl. 6 O#AͲSoOڹlD& 0`OXm=LYk~Y3r$/%ȳi*'GdHT7ڌlqC fr({XM7E()سJKX554s! E2W"yhk2;j/B.ګ/gAw֨i!{%i8uAl`u +DfNI#?wNaFc  i IGj mQA@+f\f_>ʧ<lNrw*$LCJţ[HM1p >Ou+ 3?@u{ܐe0@`W٘T +Ň 9+h]K="QC#V>-&aG`C`9+>6}qnkZ+rH$Z.\/eQIM ?PrF)&r8LB}yLU*J;cv:~X lC'h3xֆ.?D2{Imr`Zy'4CIj3!i\:4ANkb.-& dGA$3i]0\xphv.h /k4cn.23RrΠU6P a]˅-mi,(]!4@v{<`|l bQ(k÷NO׼pA"85 |Skۭoje+5b:cmP3$󆁎~GG=|kw 7r( +N;3ԯ\T? 4)}N~J/ MGHk8ڈsZ DV"$r#!ƢAauXT3R&,%0y-y7 $͈᦬ΌS|΄ADob S)ѥD0(.3ڷiaOcz0D7X0n`p4mp @ݓG>'@3|9P= O"gdǾiߒ40웞ݏ\qq(0t82 +^id>/ر%TDŽۢnCv$!ձZNlݹf#}ߋ8ߋp"u l:LbxSSLrv\)|enS5G08yCHZ-,6\Pp~.3m; 4 XEM4ĄYhԒPtHfTCLRC{:TꪣzxQ(')f4LB?Qߢy:VR BQV(fci[гgCmƧB_.qt hx®Oּ̟Elh9 (iFr쐉Lh];Z7 h] [kwAXPH}ޘب%#LoҴpHx;Q7/DQgLqI4,T0$ jƓ9ˆ*]{W&=|t*)xDaʉa0ܹ t3Cq>PS6 uk頭d)DL8$" L dtXb r[#Ԟѯuغz0*JP=*Nr + ٭64̠=)0XG)䷩Уrw#l&0CKX[:͔|*mvzuՠg!>(zBȸ@FJ[ifۮ:X(YbowJReCT U#L>W"Uޔ҉9/ +/rQkR#Þ*J `㢠ͧ- Q%<gXɍ84lv +}Q%*CCw VBq կB1z[t +(ly!Ҝ`d^M}YQ7p\ -#5(:6b +/(9% u +p;evܖ8X'0mIXf='ƼOvXFFޯ3Z.ϲ<+~}re҆)Y8V~+5LN7ul}ͰZz#ljy:ٞmƪڶrP]G GU}ތ0n چ 7Vc/ ll8<w'ܐ5An-͡-]E4#8Bx9V_=#K K%Vr͢Sŵ +=aLdoйSGXxwCj)!b\C Hegq:CF !XəWIvj,1~>\rI2"7EAqߢJs;քXR7 ݹ\^kMFkʑ(p7fᠩY?,A@sOӞQ/*upd)u.?WH͍/Mv6$rvy >&~5,o>4Q<}P:E~uq3ΎAv9uQw6ssbж ΙTg߇cƩ~޺4wRT"XYQ7A]v? jE(t!PGz-> endobj +5270 0 obj << +/D [5268 0 R /XYZ 85.039 781.388 null] +>> endobj +1458 0 obj << +/D [5268 0 R /XYZ 85.039 691.864 null] +>> endobj +5271 0 obj << +/D [5268 0 R /XYZ 85.039 673.598 null] +>> endobj +5267 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F35 2888 0 R /F66 3248 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5274 0 obj << +/Length 3118 +/Filter /FlateDecode +>> +stream +xڥYY~_!S ~I.G%\) p&>}\rJ9zzzzz\͒qt''lS߸̼{Bzum^Nz(g;pۜj'15gvk3ָ5Akem#{ 'kڗH͡fcʝx1E/D;co!dxfe^7,!ABWp0T^<ְ8dS}n$~Cկ{l[ Eíĵ~R +nśJF&u+~m(Gq&'lB:H2|7ne$YLQ=U퓑3nyLsP.i|QN1'klG+A-Qi2Bj|]$ba9id Ɵ ĉ+kΫ莃 d5Ȑub6vV(:DB!itCc_"}ç}Im/R^u]ț3vm-o1ѮsXjSK[ZwܣBGUe>zᏱ '~ e2ӳ۱]A{c8>ltc]C-T5 NhWe3v## )GK$]_$g]0r +%&2eLdqSOILK-!v2.gCUn(zlr)=<Tm_u &KFU^:F 3I5 wS).s۷f_ G>|#Ϫ@<Ö/{H|= ?=7& E2& ?LE `ָ˩gJp}͞c?+`ڬ`#0u {(&\E8Q~l:lpHIbRF'8oŃe\=sm¹j!GI=2,uQKBQp7F $wtRj 0tqӱI}>T&P$4E IUgFoaqhMCwP-%JF4FG``z]"Ғ@( ;&>CLr$5"{&hNx2*"`_m`g'i )z:@iKVE1Ix]/zQjk:W0V%(qx!jG-¼ ߀6f &@=r]]@jݝˁww%IAFSJl|iuS,bsϪ^Nڽh|O[9Vh'H3& ݓ4Z9 +DMTm&>?I؜BG+M ̯9?MUucbO~TvRczCL\a{҈ u T7'5d몸-&1]</j!p!T^{(Oe T4JI$A"K"]E4(FTk]g|[x<\)}fRr 4ASds #0EnF5ls9L" zOc/k=ao(wsbqqoOTs',uIVoiLT<46XM{t`}# S -g0&w ;'LRw5Fk/[PfϏR3{̠#zgeֺ5//X/5Qnl|G6x_I]du5T !Jg嚢ۼrmkGI VS =)$'n|#2Tr9|b6 џ60?_\NRW mһL{%uTz%RR3?T<- jEysy endstream +endobj +5273 0 obj << +/Type /Page +/Contents 5274 0 R +/Resources 5272 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5277 0 R +>> endobj +5275 0 obj << +/D [5273 0 R /XYZ 85.039 781.388 null] +>> endobj +1462 0 obj << +/D [5273 0 R /XYZ 85.039 623.857 null] +>> endobj +5276 0 obj << +/D [5273 0 R /XYZ 85.039 599.875 null] +>> endobj +5272 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F66 3248 0 R /F35 2888 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5280 0 obj << +/Length 3224 +/Filter /FlateDecode +>> +stream +xڥr8_RUM&Yo\8նk'+X)˵=9YWi2Yz| EƖb'V"W5wdNhn- 7|;v_ @yۢ%; KyVه|O$4QoY-#?=)!9G%!xt6cS6#cC7]!Eg&Q LH:NýDX4 +O"F֌;^7Md?PR\f@;̳ eZ/b/"6pĴqROL-{r,2xBkṟwLvФ" +NA2 w 5 K~FNWO]oYUv<8\aFP#}=qo'9j1=K!m>zjNt1u'a(x`0"F'~?$[$!0;Kv@G}JgZjHŒ(]NBo'9#?QMMK;ϔ<g4&Ƈ jgop6a.G9$g !^*8c&ŠXRa-ip{O+e4 Q +{>qg&amou^A &k:a+9L1("dGR2JtJ&j'd.aC C>yEm'^[#s(0łc!J0u/\%tl^A4Z@ea_M?oJ%܀Vp3*iRc8G(R<27N)^EwpjO~7ayT΋m9߳Z|2N6:~x(҃E b65w[R +Fhڒ2%&#.:FfF>fXTTgGB$rEWī1oB9wgK'bV/7::UPM糑 ~ ao~pꃏ|ȂiI5b{?/#u/Z=]yEyg+J͇lݘ}uxԷ+-'{2>C2h<槼ʝ''qHAA5MK90˷p/:) %$-SW˨RKq~\R;riΰxPvs qPq׹e#'qFK Q\*52|Z=*K_<[z"1$JynjfG/Rx@ɡֵA}k 5Vp1O?pe¾-ہ9G(͹W +8^w)^ UP69e~) >J'7I۱eߍ[AѰҜE-4;05}o荢}YaeEH:eUIP~R2Fy]bo6׸ SdI(Irl#ws b*Bo)M*4 +^Owj䌺W!$kh4:Pw0kQ> endobj +5281 0 obj << +/D [5279 0 R /XYZ 85.039 781.388 null] +>> endobj +1466 0 obj << +/D [5279 0 R /XYZ 85.039 761.463 null] +>> endobj +5282 0 obj << +/D [5279 0 R /XYZ 85.039 741.134 null] +>> endobj +1470 0 obj << +/D [5279 0 R /XYZ 85.039 698.974 null] +>> endobj +5283 0 obj << +/D [5279 0 R /XYZ 85.039 680.102 null] +>> endobj +1474 0 obj << +/D [5279 0 R /XYZ 85.039 408.518 null] +>> endobj +5284 0 obj << +/D [5279 0 R /XYZ 85.039 389.85 null] +>> endobj +1478 0 obj << +/D [5279 0 R /XYZ 85.039 124.319 null] +>> endobj +5285 0 obj << +/D [5279 0 R /XYZ 85.039 103.064 null] +>> endobj +5278 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F72 3974 0 R /F18 3977 0 R /F35 2888 0 R /F56 2898 0 R /F66 3248 0 R >> +/XObject << /Im4 4874 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5288 0 obj << +/Length 2638 +/Filter /FlateDecode +>> +stream +xڥYrF}WV#َUxmyH +Jۗ`(B&[. s9s),i&βz-#B;$Ƽ_]\}JBF"n j[oﾬ>~]Z@bi|e)ogh/e}~kZDW\|\:V9oG l闋H<[_> +ÓYejY;  %&hyse) ~U@tq.{ےßPz{Cy(`KslCuO\})"U"4Z$:%ݾ7m K`mn]庣Q00Mk}1e.)T )EBZ[֟BMiYcT5[m{Y`)-J`5JD"CػzG +.xrS-qUp􎏦t- p6yԏ碌B…JnL #THdӳR 9[i']j}EkLz9hpmJ{T#b3 +x+v({Wn^2rL|dPB3jffwߌ5-H XMG&j?.K42i_l(՗ t T| %j +y;D12d6Dc ~I M@ hz&eJpHMS+:g*\- D8pr"9<ݨn.XH<<+Ӷz/?DYzgMtx̰qSqtNziwϞ2 8,s̬e i Yڙ12&bes +Λd+s(R6wݺY + +"'H]ϼft;)z.KrDvp5JPI㭒9P1oȵ]2>y+JɅ&vYZۮ=IFN,b2>+ļ|}8@8fipC[eO W2Ea Xॢ0Η^)0ỈCMi Ѧ4M.[B#5|[qnV^==~Jʺ:aIȂMn'geHßhv/X/y8So')G1(yҺ=6c3B@r8!Ck2eCq~VYR-ڮ\ CAffS*;*(XǞ ,$T9)i{2,]RvʮPNB"Xs !4 .7 2FB]oS zuBWnnS"]Hѯ&PuR߁k#rlT +';Ql s +};pT-? wE1h(kTVKO P\T@na!0>Z&9d)Zj lc;ygi%sOiĐCPC˽er=SG(.}7N,eb< 4aKk7iSewrܶ> endobj +5289 0 obj << +/D [5287 0 R /XYZ 85.039 781.388 null] +>> endobj +5286 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F14 2903 0 R /F66 3248 0 R /F72 3974 0 R /F18 3977 0 R /F73 4000 0 R /F56 2898 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5293 0 obj << +/Length 3463 +/Filter /FlateDecode +>> +stream +xZs6_}S1$C8;M݇D[L(Q!)_Ejڛ8vb?< ]Oq:IΗ3ZޞBEً7Qp{nw8nǗ7wW/ZkOE'Ϋ_n.}ko>^~_nD;wLto~]ή:I;@r +ә49м990]ݞۂsu C*G. r +Z}7 CD}uzAc.Lׇa97w]ŮA˅PضXknz7@;mTmn =z(AmA)H{+,kW3A Hz2u5p.mVBzP)3y<_Q: m媶{!j7m_W- eA""@ua9?u6NF"wqx>O SX% g?K괠X^;7`LP,+&T+{-Q vs50u)mWWğ4 =2Y Bgꈑɝ,.YN$=Q;-N-B֝Q/ :R38vs.#%Eř$`V6" jH.iܗ-2:H_s!* }3̢g5@Srh)YCUoņqc(k2)طomA̝]XeI8b^ }rA7kx g dd0+KbMu9#j;80y1?3b?\c[/W\uo\R7`O]h&tFf>v{rhc̣й@]u ЬU}f{Qv$wPOa G,Z"kށ.)JįΜfYW(ABgZ%Dm_%-L4qȕRC?@& PhEصK|HV +RP +iiN(-FcձMpHh;VXN[ ϝReBb}ɞO Tv'8e."ˇąP:J=ʷx[VA!^ %Qg$imZ^ [a+.8)K)l0¸ !,#җ|}㱒=C>#m~}~vGQ&%[Zo{1i20.8ŁmLfMV5e?sᱛNoKǧP NC!j t{}Lh%쪚fpv.=dR!u1sA" Kq_xw0DŽmr)JBt$@]\1 +%]&nf00e=HJ@ KsAPmc-r օsqҢ4oT|/r09)D\:zbhQw4S1D*o>&5E;< +nyYf$~'NHYrupQ?֜4h4 H7; +{֧M|}ޞh^!ëN0B3fo00ܺ;Qs8v_NrG t{t\1!SWձ.4#4mĪwj_Sp%QfP"+56uw6̅fD2ڙU+wHrat +֞hV!`U4qqՌW'U.育Dgrz^Ipmi0C'c +Oz,(Q,GK{sռ D1`t6t AVB"kן{q7o.׃̕Rɝ}:mn 񀫢鮒9W"apiy-#~~A ivz,ONTo,L^4NEm* o܉ʇCx;ְh(OCU:||ݤSYLrԘ8OVU^,_> endobj +5294 0 obj << +/D [5292 0 R /XYZ 85.039 781.388 null] +>> endobj +1482 0 obj << +/D [5292 0 R /XYZ 85.039 761.463 null] +>> endobj +5295 0 obj << +/D [5292 0 R /XYZ 85.039 740.47 null] +>> endobj +1486 0 obj << +/D [5292 0 R /XYZ 85.039 215.786 null] +>> endobj +5296 0 obj << +/D [5292 0 R /XYZ 85.039 180.641 null] +>> endobj +5291 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F35 2888 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5299 0 obj << +/Length 3765 +/Filter /FlateDecode +>> +stream +xZs6_3!M$isM}-Q/TJܙǛLLX o? u?u'AY(/F>\(wh_Ɨ* _$AD߼w?ڏSEpgYZyw{>[ |G=}4~_?]ZKOa@ 8v*/SIB?@@WO5`Iq.|Zf jBi)Rhkƚ7DT?u5cz +&k9K UfwyO +5w2\V" cidoF B>G5B@j>"汞5ei5 +͖q1KW'JC*%Z(^l@{Qxp_ʮb-PM<H`Kbr" pC{ 9 6lނ`2FՊYn\]3V @E0S5-bD|H#7Sn7h4Ϩbź߉mjP(hem}@`C.{bi&`EfY =7 Z5vGkBT`e0#ek0Ć<&Ỉ +iH{;n?Y|7fT܁ q(qO;l:{TӴWfe:v\zJO&ERB.fS ,!K]nMܗN՛Tf2)5!l :flaj=$f#㟜/+z΁80[UD&}g#)qiAt^۽|'IĹc}y鈂ruBcJ<%R+؝A=#re3\F$n҉Fg׬( ey2Pʾg6 ' !8 -9T&0眡$-?19_},a'j̓.t\+5H@POɯ^C(M`K%Q%]ؕ}o|4,_^lk (+]u%S`6FGInB<+Ivm_^%X_Ňq~J8FZ\IYfE¯O? uّ*Prp@t;{K*Q4uK/"j$]Uͳ ;{SЩ"x>:=b:7tT.^Gb-60ži!h!B8qdA79 X uqÉIJLtBB%"'e;AL}5"}VPDè + +DB@H+o +ݺ)5pg|CK>?VdqZpH ~la"O0l-IqpF=-YU9PpbwYhFkZ;r"829Ƈ +ەι7mL:Y*)0t,U\A*>KM|whC[_kk?75Z-LzKÝοšk6yb2'P.udxAȠf'J&O|D4*.*S;XWa->@^!^w6gvD P5BC;Dl",3 gG+Lr#<'7zڝ?=cp(%7[Qk)H)Vq)H-o/$-P~e:%1r.7D!$k|7Hme軓@?e=$s Y7+kgH6NMo4Ld3'iNlS$t;2j&GfrՅ +Ҹ8/W\ r=h9j=@ueJЍ^4'K~`{O1U@i*DCg%ٍ 64 H9tY ?3Ft{[Aq{ZI~3jf/N.b15TQaC;7),ETgh5G6WVnp4ƁNYHRW?֜THP|ڎ"^ KvtnAcGڑ=vc$,\#8e*2$v)+`҉Վq^k؋Jiah+ڡHj0"1HN BA`:{hP'cI͹(~m v@_o斫۔\ͤe+-l`Qd95ƚ +%k2F[l,ڮ3gAWKeەؘ +Lr ͖zR-)*Ge]y?K/IEقanEwD*9 y$ќi-V︼\r {w34gA/ *@ςCt `wvA]o [9|1 'X*WOsX|8RAVCI",թЕF:"ֲ.dS1Qq؋Ly?0LhOlꮋ ϘDY~ q*ξ=!igs)bRXu.|Y!^ǡ3+%} Y/ǿfL'ʮy6*%WO?(<41Ph^s .6b/|+|H9 +=^qSeDƛhhexMjk~|endstream +endobj +5298 0 obj << +/Type /Page +/Contents 5299 0 R +/Resources 5297 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5277 0 R +/Annots [ 5301 0 R 5302 0 R ] +>> endobj +5301 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [418.678 719.682 512.306 732.584] +/Subtype/Link/A<> +>> endobj +5302 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 706.133 216.896 719.034] +/Subtype/Link/A<> +>> endobj +5300 0 obj << +/D [5298 0 R /XYZ 85.039 781.388 null] +>> endobj +1490 0 obj << +/D [5298 0 R /XYZ 85.039 434.632 null] +>> endobj +5303 0 obj << +/D [5298 0 R /XYZ 85.039 414.041 null] +>> endobj +5297 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F66 3248 0 R /F35 2888 0 R /F20 2873 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5306 0 obj << +/Length 3754 +/Filter /FlateDecode +>> +stream +xڥko8{~E/k5#.p@n8`w?(k+[$-߼(Q,_q(RSg87//@9^rZyq|X_80B LPf΋78CN[1yNtETOn:t[|'84&wt~~9?yʙu뻖Ӗ*A6^s-v(//0vߓR<_[CRP %H9E|sNYl/s =0Q{h ʬ5gdbɤW(8ټ&OxqrI9cop=c.$.追YHaDLt%mńUG<.tf}x-X! 31x E4XUKulXF~(w OxD_)S_4σ9)]0wyou3۪ӊ1HPi;0.Ի Bz@9Ee6ᾬNOg,,Lprb.KRV7f][MN?'6d#An40pH\ܚxh @ڑ +dz!i-wբMxy~ːeCW)_8-ʀ=0GXjaM]0 /j1:>[O?宦SaVDİz M UPXG.)WFc1"3u(3MJFb@n$ +XjQ8xؐMk 5Ti_vSF laT@\sP7"0fNyw/TB: >BVi +գ|\ gKi96ٰDeZ7(gWW=hjeWIW8]^Qwu/U4.kAߔ8JсGzU iR i*%o0k =o,jIGk}&x~c+ ->Fa$J HC +=EKF +*~ {x7F=ۘ+}g[>)w }S)+uШZ {CW=9\;摑ܤ x8yʿ/k3n>lƷ;:۲H+i:p7tzv a/-uR>/eC 4&#⸖ZBs\0jpKuyKU#2y`)Ȯ8徾QTe 邑eXX+o/ଲbHme2 }L;+AjxgCdt?󢔊hm>uZiwƽwH#]ι1tQ b$O >C`M6B2U8`AAmzQRQN[b3EV*M Qqv;p.?]usBrbC#-#L-ǝw8ẖ0,D:0ia8g,R,<yE(&An/, zo-%T^"-Rۿ%+ Kt\ /.eOfpzٸ>D$9g.- q#2> endobj +5309 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 389.924 387.717 402.826] +/Subtype/Link/A<> +>> endobj +5310 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [157.067 308.629 429.341 321.531] +/Subtype/Link/A<> +>> endobj +5311 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 267.982 343.884 280.883] +/Subtype/Link/A<> +>> endobj +5312 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 240.883 508.187 253.785] +/Subtype/Link/A<> +>> endobj +5313 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 186.686 338.269 199.588] +/Subtype/Link/A<> +>> endobj +5314 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 146.039 400.551 158.94] +/Subtype/Link/A<> +>> endobj +5307 0 obj << +/D [5305 0 R /XYZ 85.039 781.388 null] +>> endobj +1494 0 obj << +/D [5305 0 R /XYZ 85.039 471.827 null] +>> endobj +5308 0 obj << +/D [5305 0 R /XYZ 85.039 447.845 null] +>> endobj +5304 0 obj << +/Font << /F64 3118 0 R /F14 2903 0 R /F15 2884 0 R /F66 3248 0 R /F35 2888 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5318 0 obj << +/Length 3265 +/Filter /FlateDecode +>> +stream +xڥks6LEGSWI_\Z,PD93^ULOLR2$eN`r+΄ŘY8ςl2_(?Rr2/~zt&DOgIzo^Ow/W˫8(׸4ޜ.v˯5ϤL<{79y2d,eNag"iٿzRMxثDa B 'U,=.WNiiSdxd̄}),NUN3PTB$~$JLD$+ k3ᕇڣ/iNODY&g0&w"ZLjt,ӝ "PE$ (VJWSs&M׹a,L=0i'»GH-5/f>BmLML! +)PU&#e[6~`dVv< aE[z+ު+iKuN,8/;>a{SZݐOElZGo]v$kC+@-ECY2V( +bAz{FGg೔AK&Q5d'4B݈ﱂ'ecv/J,jc*B?qq8ކ- @uG֐xv!I!6m g{Aw3h|'DWNϙRnߣbPLhG*:Gr0Pv!oX/M0+;2[_hg3!ͬY|{'T =4l6G'KՌ.ː;D|Ҟ|:ޟKAu.?7Xؽ79*ٷi oktI`#uYO !XkQ*@v t[_)!~rc2( N8'nHU+#Ra%(ެ iTш̦Jx=gR sٿU+{ /pb8_W}mg_*l2 +P.ޫxe#2}? 2ColxŘr92?ј6ԛX*Py 7xo^ܗ n"WVbՅKHf +rGшE@VVr*N|p? ^jͶ2,6if +3PX)6XEǧiq2BE﬎MkbWȚ׺s6y7Pҭl8!3m˳ݳq،^n(A, ܵqWh|X)בv9.cd6?  .o-v +:+uXy#r~ږ-ќXh7_eI+DI#ġa?6(w,5o3 J:i. +;e;R=Gq@/2f*n OQ5wV׳^'{B/k ++o&'/Olt\RBN@)" +*N_u"2ʮ/b,\+3S uT`vŶ@Cʀ|IR,,o-钋P}#(vxS7/pNzR(?8r\Uݐt JsBJ8+7Ha +^krwX2+zbzs*Ȍ25X wyՒ$6ZP-c;0 pLZqNN`cL.۾clצ$'cxice' +0*a!{i u_+T3 +L),iS'az +?llƕ>+|N+:!$W_(#H_>Qۓ'nlj9)a9*18#.xEirF ^2Do JckxoxOpwR<zF'?T>za5s*԰Y +^ lD^8ŋZ8:oL/u;١آ4,v.y̙忀v(?ڪە"8z|TEIr8]40QO<ΦÈѼ=KǚҖ2+s6Î$+ؠ#5x 淐&#WI~.$ɉC^*.g2f5h;[m~QTQL98åOppy!{*AhToa 6Z/@DaC<Ű=Ew8Cgpاv닼ob% +@KPRw +g,7!Rem$Ϲyx3Z (NX-W+ i$J6cvg}K,3ɘfZlWk~k&'͛ӝ.lD{ԩ羏 J4*/tpz1z^&Q(VFď#.S1qj vcAӘ:ԑ\bA>XЄNmQAVHQtZQ][б羽!`p 7kZG utctKS/1@\޺+)ί(X>7S[mϿJL?Y+v@(_`&]r-Gnҷ<@X#`ךßqiIl,S|CJ=j$Tf^UA + J%> endobj +5321 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [309.861 384.459 512.306 396.452] +/Subtype/Link/A<> +>> endobj +5322 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 370.607 273.67 383.509] +/Subtype/Link/A<> +>> endobj +5319 0 obj << +/D [5317 0 R /XYZ 85.039 781.388 null] +>> endobj +1498 0 obj << +/D [5317 0 R /XYZ 85.039 654.087 null] +>> endobj +5320 0 obj << +/D [5317 0 R /XYZ 85.039 635.418 null] +>> endobj +1502 0 obj << +/D [5317 0 R /XYZ 85.039 355.164 null] +>> endobj +5323 0 obj << +/D [5317 0 R /XYZ 85.039 325.569 null] +>> endobj +1506 0 obj << +/D [5317 0 R /XYZ 85.039 271.122 null] +>> endobj +5324 0 obj << +/D [5317 0 R /XYZ 85.039 252.25 null] +>> endobj +1510 0 obj << +/D [5317 0 R /XYZ 85.039 147.591 null] +>> endobj +5325 0 obj << +/D [5317 0 R /XYZ 85.039 128.719 null] +>> endobj +5316 0 obj << +/Font << /F64 3118 0 R /F72 3974 0 R /F18 3977 0 R /F20 2873 0 R /F15 2884 0 R /F56 2898 0 R /F35 2888 0 R /F14 2903 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5331 0 obj << +/Length 3538 +/Filter /FlateDecode +>> +stream +xڥnF_aaKpxY i.;<msC +I1{nC%J.b̙s?gS:;OR4=_m΂;y{b) Ko\~d׷>Ə>^^Rk_,$^}\(G/_x{ *%N~j.ލ/%,>_zztͯg>kүgځ`zsx&үή5ls9ѩoR}He(Z |DDnBEzb<46-7>;#t!m//ao*n/͎@ūafzA^ch^z @>Ȗ,jr HTHь(`aV\awb:b^w}^U45hUɋ.~1g|!~0̘ ?Onp 7&~ȳ8^/V$|h\1rIG0fF^[io +@'v(C"ۖEwU󔻜XU"5b7ʕ=k3* DԢ/07@uSAazxn"n8<1)`λG:9W]b0lypM_Ǒ.zeG_\cn<82DZ7m?{ @8TD+#Sw_ho@vID.`;XJlnKQ]&d9 Е֤Di3J2H<| 0囂 2 +ſmEG JD[˖t7HIYh +̿ v7Jz +@:"8%,ngMfwl'uol»J,>"Eކo@%n-K_蚊) GCCWb @(PWn? 'aV$ 0ܠn{Oc2`촡w`:]CoGL )R#{/iF~atٖu_wd +ĊX??|sMLs H[bu#qg ;+UfYl0QL:/!{ `D0u^CGG~,Q +fJbb;K! QGÔlUޣ[l3bRg%}k[];I+ۉF<ܣY֬SbQTbs$a|q#bF8Բ#DhZ5Pnjb'o:M db1HCB}̆%v4830{UJğ!-. dF97c`[RixHgOL]!IDW; HQD.A$N' +kaJ9fܗwAF +Y:@,ăd;InC2yәoR39﷢g:foi-[8 &gvKR!}D'z'7GvY?EjX(_b& WQFV1M`Y+٬ Լ wDyK/kt*Wղ-hp]l" I໳s7~ 0uLt-.ӬJɝRc%'Z/ n>mHNxWW]#4'+oR9^O3`⇹Re%3l Kدϩ!6{E=4v!дBͩvb\lmN!}*M?)n~y6{v~R6)el[|%ګ8>&q!h1->_P _[bv0"/ĊˆO(TOec;Ή5d*n=Vّqmȅ<ؒ?yߪr8Q>b$+XJ|/)-ňw }>gZ',Jdk-o .nv ( w\s 8ߖը4_! +㱢i~CvjTKr%njv8j<(.v`c!d!8]eo˒+aֆyX!huPT@ Kz5뤎qsEK|3QDq-6EbTokT#kf"=A/ilu@~]n ZQsgMyJ@Yܟ]Á8*v"u-ۋt4N*i@3󮱯de9lB<}HHяz8qKN%:eɤDJ)QXHox676stٷG,#G o(2~✦JEw7ĸ7s/c{0 ݸŦI԰; Ҽۥl=7nPr0!*օs} +C%& <`qg4紋%]%ʫ ɇ ?v"gI8;y*E,lgD2іiH>qvذ d(W8>"{1::^Վ~X!I lm{9qziexZkz+gKx ?gbV;> endobj +5332 0 obj << +/D [5330 0 R /XYZ 85.039 781.388 null] +>> endobj +1514 0 obj << +/D [5330 0 R /XYZ 85.039 721.69 null] +>> endobj +5333 0 obj << +/D [5330 0 R /XYZ 85.039 700.697 null] +>> endobj +1518 0 obj << +/D [5330 0 R /XYZ 85.039 587.292 null] +>> endobj +5334 0 obj << +/D [5330 0 R /XYZ 85.039 539.158 null] +>> endobj +1522 0 obj << +/D [5330 0 R /XYZ 85.039 471.161 null] +>> endobj +5335 0 obj << +/D [5330 0 R /XYZ 85.039 449.301 null] +>> endobj +1526 0 obj << +/D [5330 0 R /XYZ 85.039 164.907 null] +>> endobj +5336 0 obj << +/D [5330 0 R /XYZ 85.039 144.317 null] +>> endobj +5329 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F66 3248 0 R /F14 2903 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5339 0 obj << +/Length 3756 +/Filter /FlateDecode +>> +stream +xڭZs6_Q7MS49ZW8δ}%Z"U $QNg& `Xv2eAT\fyGy~^kp +\Hͷw2 "(.y?N˻կY}q6 6ϲ{y1 Oܺxs{wsk14vqG܎o~ "?~wwSpU \{p-}Q_>A9C^~GR/>]N}%J~Gb G,a(TYI\4l@޲ngk^U7ںj`k&wzYr΀^sU7+.|QP5?`YeӇH{e >T 9x +4^\:.W>,x@=ܼiU#~M ?C +m\ZBɼ{[83SW['nB/5"k(hѧ{4-ԬBnvoN١qKBv/Z(*ggNׄ譌$U1 =.HI̧á=WC2RM'.%rԉU^HEOA%q0,;P|tp;$"Hω; u.uxUװ1Wqjx14' ~ U"$0 HQװEqavhs;ߧ + LfVaL(4=# )Y3^cMX« " ]$Y>sXlFx^ڤ]3l4q7 +H kɁĎGpA$كIVq64e7;{X”qZ\KkRbvB{1\ˇ灌8=P}ynr't]=apM{k-GcR3h+f|0T'cEJ`asx*%ll#gsP $/$Y X؟HًpAXN>C7GŹ  5֯cp,* +?PCcc/Pc8( +' =T$ <7*XC`!eJAs~[˹/nf9[~$,T!8 WWJ c sAҨ 5 smZ=7GO5'!2! +H)FUdl3gz5iS@﫚s@q)Il 1usÁ (bҠ͞q˘ẋ~`nEL$[QuAsN|.r2nj&R5hcɈ1,\ ׊{N SːGZOeBiyp;_"^\)N;Q'y.FCJ|x|R*ySxJP0hVmݛul)$:KzIzNܸ5rkߩph+΂Y#ߊ{ භ^zDg0I^ӑ"##yK/6#b# ˗'D#rnMD"g n<;|ˤ},c8ΉHV`,+u=!]IQ2q+El=i(Ԭ,kIR M\m:~Pqq8 _Tqg c8NzVݮ'*ðΝ.!RBWSeL, ǁkځ  g#uѽ~B7,{#"}#1*IgªDbT}}.jmqC_ Kendstream +endobj +5338 0 obj << +/Type /Page +/Contents 5339 0 R +/Resources 5337 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5326 0 R +/Annots [ 5342 0 R ] +>> endobj +5342 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [277.578 480.435 451.387 493.336] +/Subtype/Link/A<> +>> endobj +5340 0 obj << +/D [5338 0 R /XYZ 85.039 781.388 null] +>> endobj +1530 0 obj << +/D [5338 0 R /XYZ 85.039 664.197 null] +>> endobj +5341 0 obj << +/D [5338 0 R /XYZ 85.039 616.861 null] +>> endobj +1534 0 obj << +/D [5338 0 R /XYZ 85.039 399.026 null] +>> endobj +5343 0 obj << +/D [5338 0 R /XYZ 85.039 380.154 null] +>> endobj +1538 0 obj << +/D [5338 0 R /XYZ 85.039 213.727 null] +>> endobj +5344 0 obj << +/D [5338 0 R /XYZ 85.039 194.855 null] +>> endobj +5337 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F35 2888 0 R /F66 3248 0 R /F56 2898 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5347 0 obj << +/Length 3607 +/Filter /FlateDecode +>> +stream +xڥZYsF~ׯPJ{!%DIh-$p0(Y~-9?4\/Nw4=]5'#p BHͻ?f^v|։0 +N/o:_A{Hywny0;opOi,z{\e_'N<7h{ Fa ?f) O9*vUs4}EyoW'&B tZLr^Q|l[pY/|U\e83aZu"e g͹a]G^qg0D)M, >(BF}B$xYwEYDD1jWƵJÀ57f{<穁VU[tc8}jrȹ7nE'OT Qi^&@Y4 +fC7cz8QnŴ1%%'R  <πax^m?Eyw[xLLpYoi ӉfƾNC/\9n7mrɜA^ J>UJ/*("<7PhX_ HX2AA& h+w0ĉ[gCҾ;N|ӖeaDpfi-nam[  L/XфiHW?)0uꯃoY+D{ @|[~hX s \,gt:Ϣ.a7Hج>{TI^ܦ3V% TVX3v{x +^B!|]!81QXEc0w(-/JRW1#Ds$(Ň} Nm[v-ό8m) 6|&N9˒o Dowc%@Т9>QȂ>Ȑ8}⩠{FG-G&dN7Li ?0&ʒ) ?akM  lWA=%EG{\s| 00c,ڌ!+DNƊ_Csӎzj i_0v[OzL- mKu=iC~ ķ4 ?7ةl}^"V'`4 ~Oot]_u #ՠ,ל o{|,^6 ݼgw'7 EjRu-E 0:tVK)5_(-Blˠ`ʰn;F$r"0,/YUGI hR{')!}XB(>tTwL=!~NCTV!@I !MNcpVgV{9A+X=rR88HD@Za^m :O1jҼJg:Is(;[Nv&_7ܹ,{(`]A 6uhh}V}7@H8q-e?L0)4&Qguut謩Wі;_I@و"|eWLd כgo|O#ZuĬԃdYXR0JYh2\5 HJ$lVh|ueEHJ׉]pSAjecq|%̸W~^ #L1@'LT&5) dz 6Ӑy8@8ΪS>W:#9 +A,1p~ƾQᢒӾSս }@n1"~>gyߠc*i#Jc@˷EsS$rrI gSΐGLɮLMvF[}w$p}/~߉Px TH +sDs[/x +# l>]6i0Rpm=LK,|PCI+?@3v3ˆXE„:@8%jfCWrqc.OW70|T; _jK8#=2ۡ.?r-w^Sζ(/%E(w| 3}@(~_J|],33PNF>+t1 Xw*Z#KId\y}@Q(!yY\HJMDaeX.^&'zVjs=1l)ӹXcxT|tq殊[mQXᴞ75'gK˺N8 i:"/pߔ-,]8M䛦dV{W@IZuuwg0u)fzk)K1۫MC;yT2']U] ^o}g1 3/c; 3)RWtLn߅ ƟËxC+lᡷo@fjtu4`)#@`:=%{k’P+sc 6 z87(JwqxSz$/dp]\;Ɩ#e1UE1c~H7U HT"\k^l:u_n Tendstream +endobj +5346 0 obj << +/Type /Page +/Contents 5347 0 R +/Resources 5345 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5326 0 R +>> endobj +5348 0 obj << +/D [5346 0 R /XYZ 85.039 781.388 null] +>> endobj +1542 0 obj << +/D [5346 0 R /XYZ 85.039 688.307 null] +>> endobj +5349 0 obj << +/D [5346 0 R /XYZ 85.039 658.106 null] +>> endobj +1546 0 obj << +/D [5346 0 R /XYZ 85.039 590.109 null] +>> endobj +5350 0 obj << +/D [5346 0 R /XYZ 85.039 568.913 null] +>> endobj +1550 0 obj << +/D [5346 0 R /XYZ 85.039 404.81 null] +>> endobj +5351 0 obj << +/D [5346 0 R /XYZ 85.039 383.613 null] +>> endobj +1554 0 obj << +/D [5346 0 R /XYZ 85.039 286.651 null] +>> endobj +5352 0 obj << +/D [5346 0 R /XYZ 85.039 266.06 null] +>> endobj +1558 0 obj << +/D [5346 0 R /XYZ 85.039 129.056 null] +>> endobj +5353 0 obj << +/D [5346 0 R /XYZ 85.039 96.236 null] +>> endobj +5345 0 obj << +/Font << /F64 3118 0 R /F14 2903 0 R /F15 2884 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5356 0 obj << +/Length 3200 +/Filter /FlateDecode +>> +stream +xڥZo_a,3ErqK㪱Ҥ偒hTI*>|r%QCa\~of/=/Tvr. _82x~_%/}ͼr0a.{WR3w2Myi6;>B Χv$UΜݯ>ߔMx37;5{]e\.W o ڞCFf* /yԘV"QGZ|?p\&F^Hz +&0ȜsY_Xy[p㪩V fw/Q +1i$N./]^L^<4mq (pLjH3HjC'zss`_M\ +hPy9)1A>y Lۀe͍Ӻ\5vQ)X(N#I;yY91i+C| ifV$[v̅.\*]^qGk[ ^VD,dy6f.vJS/a{vy 30U6jí SU& `D)V #1rҹYQg=?Y$뢔qq|EnGD]9)nDT&H+R8kSl"4c xSrx(_cU- W4[m0 fs‘+f^YhLJ#m!E3ҧ1 ,,!$BOt"_Uv}^lJ(d\ ]f%6hCܐF ->Yi*biq4YxuȾi_a6(BfHÞv1I+fr^N@=C3ڱ#6goIei/QF8"0AL9R )g=zCNl,tw 9 LA +) +YՏ8qv[~JHcX-W N!x&_!|7<+8Eq*SJx>r0MtFC0EI(뀰ژzv]zdKö-x ɂRJ'8h)H |<_;]XTtzD1afqOz)W̹lAuYK9%<Ѧc(w[}c{Qb,5I jWM[!DA8![Y],2/Sg%QG&4Ϊr!;ƞ61ɈAT0կ)LG?sfZf8 r `sו5+gatS#?3y_*`'7w8 N%Upƞ喤ǎ0K8<ݵx n18 w(nU%e&`XC}b1?hG|>%C +2 <10#@5\4kVQ +:|kR(+E7vϲcqi|Ax k~u>ɴC/a $ls܃qA!©' pF|eQ1GN }NZG Mco:螧uIKV-lDSN'c*aMWco 3  0; T:# eH:zoaRHX 4tT&5-_1U,Z[+Eqj (e=X٢`hLI/t Cbc>v9b O$QV%UtY.(>%tDzK[x5Zg<&$߰QFb7>%n//x=P `4`1\EHۆ-%xg O%ܻ PjuӏOPs,Bhfj%Z*d;;\B]",0/v,t@LD|9&uq ~af_aIk QlЫ U2<  n/xcEMvfzCP҆~JrK^dC p +$v2Ŷ5>_ɿnfvfm.("Iw#`U)+r`>.,=x Fn,^%-fYHY?j= ΨV~s j7Zk]PSk#j{cW@<Ѕ)A>J5I5pJb:f5]P|ޘH~I|s3LFJϜζtmAzmBb 3)Ppd5{#)N9489D3 ~P*v)e]TJ>~@W;x +t怭%$n&<ˤ@2|m $A+wHm@ɾOÛSH2 +aIO%Tj)L 8Wsrb?A^y|HfFdU;*4n:r_3]G",=ĜoJ9ΤU#eWٲs4&*//Ra!/.=@yT?6$kd~Yzn.I&3oH M]Y7r Z/b*hN˿>1B3Lubmga䦾ipcc,+YLa.Q@/7~<ĵXK(ĺ̷ؠ[^Ɛytrf)~oW3ؘiƍOA␍ +ׯc"~*({A?ܯц%=endstream +endobj +5355 0 obj << +/Type /Page +/Contents 5356 0 R +/Resources 5354 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5326 0 R +>> endobj +5357 0 obj << +/D [5355 0 R /XYZ 85.039 781.388 null] +>> endobj +1562 0 obj << +/D [5355 0 R /XYZ 85.039 610.001 null] +>> endobj +5358 0 obj << +/D [5355 0 R /XYZ 85.039 580.597 null] +>> endobj +1566 0 obj << +/D [5355 0 R /XYZ 85.039 497.648 null] +>> endobj +5359 0 obj << +/D [5355 0 R /XYZ 85.039 477.057 null] +>> endobj +1570 0 obj << +/D [5355 0 R /XYZ 85.039 212.132 null] +>> endobj +5360 0 obj << +/D [5355 0 R /XYZ 85.039 190.936 null] +>> endobj +5354 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F66 3248 0 R /F35 2888 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5363 0 obj << +/Length 1666 +/Filter /FlateDecode +>> +stream +xڥXnF}WnȠ\qwy Ї\⪶H@Kk0E*$%,ias/3Ù33g?܊Ċbd[ijVakDܞdG[cX';i͗wϯWJi9nkZ]]\/.?̇Enp+'..|zfyJo_=k !}xL&u8lo&' |izwg|P d̂X",<,"+ +<xe6k D`N>,innS ^r!:UyUz#͢nlq$`V;U7_ޟA/PɊMjem4 R*U.FM=ݡʚʊSA(}Ye|V D%)xn ckJPpJ$K\ pGy9(& p7o>M} r0wPXBnU +9;yN c(:47Ō8u.ޭ`_v0w4 #cax#ˊI =G9zBxm~()?l!> endobj +5366 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [354.8 480.691 512.306 492.684] +/Subtype/Link/A<> +>> endobj +5367 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 467.445 136.217 479.134] +/Subtype/Link/A<> +>> endobj +5364 0 obj << +/D [5362 0 R /XYZ 85.039 781.388 null] +>> endobj +1574 0 obj << +/D [5362 0 R /XYZ 85.039 518.654 null] +>> endobj +5365 0 obj << +/D [5362 0 R /XYZ 85.039 494.672 null] +>> endobj +5361 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F20 2873 0 R /F15 2884 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5370 0 obj << +/Length 2137 +/Filter /FlateDecode +>> +stream +xڥXs6_=5Bϼq]Vڛis5HK;x2t|N +_NHYm.|V>_Hob) +OQN(P;w3OkT̼8N_ngҽg3 J-.z7K`L mŠh^|;9Ӆ/t8{Baͼmkûy%ԉ}"Z*'}3/T+ݶlDYw}VUh#c!x*>[ +V}Ǔ[H+V֏,k}=fRͳ~}(Gۢݔ]W6uw~ݮ}ۦ=/QVf prS3 UkIEB@H$h}R.l-IfUNf9p۝ݧܞej7Z[>T-ۗn+PBǴFa`'׮X()>u[ýЕs8h9U+ȒiaroS;Dv G}*dzJyA4C +%8E1?f@uF~'= FiIe@'chW\63јz#LƑF" b' )`%d#@7ß]μԆpUiG-aCeᶐ%/"/Jy7I.Ǻ R$Ij :H(.((pR`S'U8`)ܜ<9Sd`+@SRM+׬0WIn b 4uFYo$%|2%gi 9T*4p \m \ Vs+06qp<4d@E6T`{byɤ[!Q%#бkPqrUgHRs1y˛&D _}BG PMcm: P{69w-+s WX [ +x< 0tBz _P0JR I<Vxƞq-3KR(jV$_AZD&%?zrPbJ+iʮY\E#$ZH?1JY˄A^x"x"ɒ~.3 Thd///Q&` YmBjd+>d'oCifv/$>Ƚ y4v#( #ؑ=L_a> M۱[&XWP9QזK}T2p_7 Fw8}tͮ]Y_Hܐ,>ak C7γ{#EQ}bdp̋2Y`ChplLoj~cbs 38F!&Oo/*iNЄ0| "3nqF$Q^24t A2ŒA#ˢbX gLΖձwٖEGo_V)4APF>WK'"$ }X55't4M(x\>Ѥ$TR ^2's93_^$i$>/;^EZSg[+Mkz+MS 9QM#: i2 o©%65f+$i<`Y̕ݎ`* wgP R7 +fo,śa54"KEn1Y_Gx%лNB6Pg,S+reb>J +|2dlYR ˸Q\"Ch@,űiLeJ3A'.N.~͍9jx |në{zUiwh\R",/C +l;5b]} +xȦi<u{&iK[4lf%o˕JZ]rx=~> endobj +5371 0 obj << +/D [5369 0 R /XYZ 85.039 781.388 null] +>> endobj +1578 0 obj << +/D [5369 0 R /XYZ 85.039 290.091 null] +>> endobj +5372 0 obj << +/D [5369 0 R /XYZ 85.039 269.5 null] +>> endobj +5368 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F72 3974 0 R /F18 3977 0 R /F20 2873 0 R /F66 3248 0 R >> +/XObject << /Im2 4154 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5376 0 obj << +/Length 2819 +/Filter /FlateDecode +>> +stream +xڥn8=_a Ԍ(56I'&&v>(l %ג{.űY(LɁ5W R(k?X30Fey;=@"t1B5?{~OWÑRʓz>N{dnzsw8Uޔn1_]M[N[v?HBv/$πOar-)>uJ+FYa:V2=P kAd|a|Mz_^M-JFWG-._?LdžN/'Ӈ@L&'.߼pV\~ptx{מV(:@ϟb^ƻE[&Ŝ86Elm_wtB8+lvw)d00&Z"Iςnd- :b|zR"F'H1$YJz8^z,*(* @ +_DZbޚ#Z.Ktp,`Þۃc Bl֛n!W+pj2sXeBt~K9_^h ^|ȫ??;ކ^ UJDWj +% 0>p!iE,!KVJB6d:PY,yK- S1RƵM)0G;pԙ!a +}c>Qs;8,> B3ףbCh| T%HJy1n7«$Tg-l]`[ww5A(]bw(SP\CRPU(9 AEl/n037,,(6ɎuI̥vTtGL2:PA/qHlv\z*6.qd ]$]7))#y"iқAGz 3ckA}u ~ L<;ZmrVOW)b!(A!|6DQ҈Xm~1%`펓Um_6MsŦP )f'#tA]]`]1J Qe"wdZ8KR n55bzmJrGJ6EJbᗴrN+#\g,G'cB">+*:G-`HL@txstŗ "R3rQ'# Zmn1Z# ]heo<7>]x6fB6pǨ)c>-БL$wbόYEYct';V ͧUwcgP|1 RJwH!Q>PZK M76ku.neP_XA#]1N:ۜmUb(ݥ>d{ + rU" +>Yfև^sCD[橋#ۂ$e-rg eUʘ%:1gYQ"[r_XH/97 1nZvNP .gx6C%7E+v`ßVmG}]q(_r[1k( eK;bSL='B>/ET=ƚ_>qݔGt(:p^j?Rʵ`z:t+|C0pK|:irw72mQ/tNT4Mѡ/l v0]?& asq Q%j7#;M!#Voˇ>UPហFN%q#V9?:XbszќSUzZ8G  x endstream +endobj +5375 0 obj << +/Type /Page +/Contents 5376 0 R +/Resources 5374 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5373 0 R +/Annots [ 5380 0 R ] +>> endobj +5380 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [306.831 175.625 509.276 187.617] +/Subtype/Link/A<> +>> endobj +5377 0 obj << +/D [5375 0 R /XYZ 85.039 781.388 null] +>> endobj +1582 0 obj << +/D [5375 0 R /XYZ 85.039 408.185 null] +>> endobj +5378 0 obj << +/D [5375 0 R /XYZ 85.039 389.517 null] +>> endobj +1586 0 obj << +/D [5375 0 R /XYZ 85.039 251.906 null] +>> endobj +5379 0 obj << +/D [5375 0 R /XYZ 85.039 216.704 null] +>> endobj +5374 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F72 3974 0 R /F18 3977 0 R /F20 2873 0 R /F15 2884 0 R /F66 3248 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5383 0 obj << +/Length 1554 +/Filter /FlateDecode +>> +stream +xڥWnF}WArlrqcNiD*d,)Ғs/3g\$2H : Dr$r3켝H/zp b>Q OEoz gW֚ɔO8NˏWSɮi-"Xn0M4q_/Ls1:7y=-mR4Wһ:MDד߽*ڋ:uN"Re~ 1ؑNX^wBD:ZmSg@.{"\"h)VfɐIUYwh:UmēGzΪhc|QSIXy^nO]$1&{ T` ?:f(xUHSQJk,O8BR TV-:fZ* +ʜfPh8nj͵ )JԺ +f'^K^j1;b"6b7S:-{dYW\4)%JH m|Ek+;u_s,خjj:.MtXj{w-V*/qKxam&o! +(tF[ֵ垼ӈ9a|SwF|qM3˦6EEOIPJ +J_y(P+ +XTnW,-JGJ0BTw|2ݺ ]E +WgCVQPl&vSV3RV{US|r+W$Ep'&C x'8A_>J(c}jWD@K2҈JIswGNkB@kRVj\$ktZ8wO$=;<Cr,0{Ys +,i#?2" +f@L}}r]u9_5ZpM#O"E':= wS<脛DpCendstream +endobj +5382 0 obj << +/Type /Page +/Contents 5383 0 R +/Resources 5381 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5373 0 R +>> endobj +5384 0 obj << +/D [5382 0 R /XYZ 85.039 781.388 null] +>> endobj +1590 0 obj << +/D [5382 0 R /XYZ 85.039 761.463 null] +>> endobj +5385 0 obj << +/D [5382 0 R /XYZ 85.039 743.459 null] +>> endobj +5381 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F35 2888 0 R /F66 3248 0 R /F56 2898 0 R /F72 3974 0 R /F18 3977 0 R /F73 4000 0 R >> +/XObject << /Im4 4874 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5388 0 obj << +/Length 3613 +/Filter /FlateDecode +>> +stream +xڥio6{~7@Q+⥣Xl):3&tXŖa#Rmx||||7-FQjHe$J"-a a!&d +o_)i2$/E9(TY:B; +L?\W7Q!h2N,4Y<]84FC"-g" @UC#TY fe q&GNLhw5ODPՁ, e ѧ#ea6`w0z F/kt#Ve4H4 L z„&Iӈ=D@9 <a#~RJ݇Ot9C^eʱXA]}ݱL?Vw_pO0=Δͬ)ׄ$Pz3"mD6A kܪx"A` KdK0ZHUFAWơ ]Vg^&BP*4NYz[k:[7ɱHX4gE:- 'E~N"o(3(oω ޠ[7Apժ_#xfZl^/gA LEЫQ?؞vH@A]Y1 Q4t_m檽ϛjYWhlګhlq@̬cmإnf*eF&Ԣ&64K"_#-AȀ儿3L+@n:jw5WhpQ^]pĒ3|&K9#r 2^vEI܁%3ݟ{0V{@!ޟXnP +,VYlY3ʢ" .̑-40R~im0I0ˬHw<Ѐ`Pvzyb#?1X lQJGK;[v_[ou!S?ƆAX]0[ڏpj|3WџV FM1`:e(ưń ӁSF_b魘ܒNPnD$n(Nמw% uvoR:uL<$ektkA:P-L]DgL [KES +Ae8#J,Nݶ1BF2iʅT7,h:^񇵴ƒW2AP_#,i|B 񽨫tzU:A"3@*]ĔnNG*م6 ?ED Hg`)NwAg#/.}\6SQ:IEbB=pKa/&sPHe += h[ ýXy\[n^2Lmxբ Ͳ\g0|ɱmh--]~gO }2yYEs%}&-x wPp@b"+wΉZy)Qa䂤{Hq$e#[J 1Sp=og*#vҾFvl&"&r_*ɓ* "Uk \ٮo{baWndf.q2k֜B"Yq+:K{/y|8M.;90:J퉹Gdv&2Iv_B/ LSqp 8(i%$dL]ʪl1[C{]NQ(ˢ=uHC oJ'R(t +倐}2:K)jFu/m\>c.6+}0g\d>C -W?%Rk2GԵC',>dؖޡџebMtx}0Oq#mM~tɘr7I6,$[ܶzQp DIeOLtZ99߽Gp/j,g}`_W_:7^v޶?#y0UQHC?~8-ȋ w1{MgTta +g*;ch-Z|:JU}l>Ebr2a5 +[0qNXuCe,Pȅ\)WJv-Bm* VMf\zȫ9yä!g佷|#8鯿)]|Jٗ=՚uc?)I 3 +)f|&y\+AIvH%s@/9aE1zSNv$C_ot*K3މk(߶<WɥNC\kɨ qTRlToN={ p 9څA!h 2yJ@:aOf΋ɐkB*JKerb!8I8E/SHb+ڳ!x+ ^Sp8 +U.vŀ> +i w^Atu@t΀ `tpC_/FGv1EpB9Jq)QI-5'ґK_e,$߇5ٵ{~nl&%̽N•:uV|`(ٯD@DsgL[s2Va("= Ԩ0L"9bQ% %@`yT=S I\{[ ܣCޛgS[!Y7Dڗ1,ۮ^c~=[oqm@ CqhFGrroUҨ?b73`n2h/Ǟޭam޾y W^/ ?uUzh<(%zl([igT]D2)=ܝ16]44irϢ~"ꄷ3RR8ZN2>׀"T?!endstream +endobj +5387 0 obj << +/Type /Page +/Contents 5388 0 R +/Resources 5386 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5373 0 R +>> endobj +5389 0 obj << +/D [5387 0 R /XYZ 85.039 781.388 null] +>> endobj +5390 0 obj << +/D [5387 0 R /XYZ 156.947 730.534 null] +>> endobj +5391 0 obj << +/D [5387 0 R /XYZ 156.947 686.358 null] +>> endobj +5392 0 obj << +/D [5387 0 R /XYZ 156.947 613.958 null] +>> endobj +5393 0 obj << +/D [5387 0 R /XYZ 156.947 376.847 null] +>> endobj +1594 0 obj << +/D [5387 0 R /XYZ 85.039 243.395 null] +>> endobj +5394 0 obj << +/D [5387 0 R /XYZ 85.039 210.114 null] +>> endobj +5386 0 obj << +/Font << /F64 3118 0 R /F72 3974 0 R /F18 3977 0 R /F35 2888 0 R /F73 4000 0 R /F11 2906 0 R /F20 2873 0 R /F15 2884 0 R /F14 2903 0 R /F66 3248 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5397 0 obj << +/Length 3651 +/Filter /FlateDecode +>> +stream +xڵZm۸\Zz4wW$:iPȶ֫,9wHѶvs@[.!93US,0,wl #?\(X¡y>f* -ub?r{㋛wE"M3n+N彿ͳ[2qś/+OSp#/>| f8Oځ`xw|qw}q{wE35%88 ŢbG,*́*qADr %Bޮr//tklWE#kn sy_(p [BO@}] +\o`[}lc1ǭc{U8>Qa b<vˮ23`:SBls0Mb3GsW=[(HNukL]5SIS?]/EwUx-H_HVT $aqm +0'ukaZ8E G &dvGd[8 +pM; :#5[}2RB٬{/o,\\H@X:hp)o*=8J|0wb-{|jhSZi y ޡw.Q[m :kdaCѠ݆MO ا:CgIaNCp-ROĮĦҳW2~Snϸ!ދMk嫓t,ϰıg=Oaυ~ZoA]/B8\ۃUK&rݮi{p?D-+Q +EOW9Q:7'}&^PW!],s+jDžr+xX ٿq[{ws;nߒ)? 3ΕE)hC +9+qwLpBVRu$;d-Q wBYuFrg\GvTi:ȥH`%a)VPaL@еع=TÓ>i˵4O.|n͘fV;nf%IEqфbY<'/za$bG^wEuAM]=Ϡ{+cQ@W9J5B"ny؛nR[#̱!^Բ J5%&@=9'!tYIu0noݕtWi{zx\!uAN+ OQd>qP#]yh:u08:e5xyԦba$mrPf}vp?B>z4νȽw_Q !ۍ k@ѧI u GO}`#wSxGz yՒυ 5\ =PDP mK( 3H 6XE1r2_Ղ*ilQj,ǭ(S}q~}Ռ].2A2}'J3ԚLuiA(C53nE+Npp+yyEg`.s.H}%:ɀr>2#hCW*JCx1D:On(AlgYhDhrc'H-ëT.!jK5Ô.fƢßՒpr +.ǧ[hSz&!0#7Q4?1%A A\J #Z'as2:h[*;w榢f:/ L̷`rk`ǵ oCOZ_6}h|U?."[M=n6mIC+1"ISV0`+xh8VWnjtdߜW=nVm]i*uBQ!J망C2DpBOn(Nl)'g 5FTvpkϖ?nhFS$*avA1&1Hm23TK0(3è3ǒt\Ui'ܨABz@$Q .Ja*: fuYڲ#n= ʬk 1,d[Vˍ0zĭ 9ʗ I +J k9/n|M)G^ʢrԓ~ Qw@2\Er]|[8w V|A n$χ ϋyZzH ̈́؏ؖS1Hp3*KJ(fԚ6{k0+Z'_nJ!7hcdˣ_)nbǏiȩ|̮J +0PQRM{V)ӠO'#f\=3SCjN&lTyo& GVIj(:[+Xؾ"lw5 j`cYG7z"}^5x}LS5u!7sc3%nu +r`ރ} IY ZC#6L-nOnRLrCTdG ռi'<fqRUH˄1R\n3 x0hAxcu;]Cap= [*ݧ5N#i9w1HsnU.G XlJOk¦` a[wD-Fx76 c'as9<"mQwe- +-ؙcZM5">s v1%.>JIX@\ ,Sxmi O5OB~ڸ0(k'o߼Mnwa/U?+g'VWNU_eZAb^J R=E?؆^qRXz-y% ue!5loF?u\{REbwPu}N\͑()ЕRo.]==$'P%.12 \2US>HMpbtdeO}9=C +G KŚzD$v싎e:Ћ񙟯Tgf@k +NOy$g/TZ@ @3wZ?}.%\csT +LK5@4'y ;p +DT[1 *>xgI#s?~N&I'0=d|/ D+0Tb} /(Xj/mendstream +endobj +5396 0 obj << +/Type /Page +/Contents 5397 0 R +/Resources 5395 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5373 0 R +>> endobj +5398 0 obj << +/D [5396 0 R /XYZ 85.039 781.388 null] +>> endobj +1598 0 obj << +/D [5396 0 R /XYZ 85.039 407.331 null] +>> endobj +5399 0 obj << +/D [5396 0 R /XYZ 85.039 386.076 null] +>> endobj +5395 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F66 3248 0 R /F14 2903 0 R /F35 2888 0 R /F20 2873 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5402 0 obj << +/Length 1921 +/Filter /FlateDecode +>> +stream +xXmo6_WDjZ$Exy֋vc{tȖ%$'Ϳ Gefspp̐67,ㆧ%}8gLg{q3J]:G6|7Ʒ+l%qxmz4]RJv]<9"!78=lyR>8>dVٸ̯{_,#J,&}x8LNlYo5敥FB93ۑr+\0Ʌ*)֮Lp-϶RyH67ya1>NN (sOڏQ ,3+"R,.=]uR+MF8ԤO" 5lLI[mlA')~$)3jpnF}PFC߼Fw4gg^%}i?R;И`uJ[oy5,c6'bhq NBf1ןx3t9tlIOF~)hq6V5 $NK{1k(JH}16Z*ńtfZ)4ݮ '(В`l1W'kQ,|af$qmFFy^RL)`pi%aq{&œQ@y p,jFAg8򨻙QLpʒT>S,~ы,v6PKʵWaW&9>XnC=Ms T%jřs6Xi$Vܴӛ 4s5 5ro#SٺH ' ꊂ]tt@cM*ij,C4@o+AS6@t}4(:"J+q@[IdY]iGi9\ڟhGp˓pJ!+N|뗌r`xB~#vMCL,\=؃fջjA~=n+0r|)M轓AwNwЬ޷Tbנ kᇃ-x V zmŸٶ +dkv-'wd/mAmګǔ'_2B6endstream +endobj +5401 0 obj << +/Type /Page +/Contents 5402 0 R +/Resources 5400 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5373 0 R +>> endobj +5403 0 obj << +/D [5401 0 R /XYZ 85.039 781.388 null] +>> endobj +1602 0 obj << +/D [5401 0 R /XYZ 85.039 761.463 null] +>> endobj +5404 0 obj << +/D [5401 0 R /XYZ 85.039 741.134 null] +>> endobj +5400 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F14 2903 0 R /F72 3974 0 R /F18 3977 0 R /F35 2888 0 R >> +/XObject << /Im2 4154 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5407 0 obj << +/Length 2522 +/Filter /FlateDecode +>> +stream +xڵko8{~/Cd %RIwS$/q t"ɍPYJr7Jr{-Tp8XY +o hqd>GiQhε)3k:5OgwÑRʰ1yo}-㞡ӻj3lZo2ft5Y/߼9嬕 +Pߏ>~21*06ˋ#S8-)^kU WfQN,Ts1mrUiy8rc,kXeQdhb9VI?e fxt-W21^u1yq\ͤhgF*5g-^:ygwz +{ +˄ՋXTwٽywӧ + +(ׇMzn~\ T}s9u!rq||۴r=}UEm ;hNiW]9+pDsqq}ݧ +9N`W;QI7l sf{XK|wzC- }VX,<>Y,MYSQh'eQL {1[<.1la)juρʕ?,gJu}MϺκt[/ݝؠ}MKxy :i7SO;}|ξ1:^7'bF em=8Sf۵ZCL1E`]R(*^,E#!Kł^c ʭ ul:>Mj&{vOF 1$Yu]F6k˫9VxJ(VTF搌Q|iXm"4hwXI18"D,p+!5CD!f !񩞇Qb^{,רJWL:Γ<*_J X#"D2F@i&Hll!FL6ls'Z/ dUO I-SRjR[=1L5)4dalCAwc/Kh(`>m,kO l5FbtڈVˑ)Cft|ߑ1p)#A dnxIc}Ze6\::@&7;R}$Ӵ^ \p9uam&\ie"Za@٦GD`-&S] dYkM^"z^ 9FhA8ʒxpI@@T  +@pDOpBDsWd[)$p +$]4bHǣOry' +1=ؘ xwqQz m΄fiٰq<8HBsa +>"hO+ΦݨoP?58CJG4H杈6QX0;Fyܠ.7W޺C),TZ5!\!meq[K~_SۮPŦ czX4(vÅn`*%L.]s}z|>]|UxZ95m,.ʐ]?.HONȧX(KL/xNot0}l+ ,6^@kxsmZvyϽIBR~XVWsEV# 2ؖkendstream +endobj +5406 0 obj << +/Type /Page +/Contents 5407 0 R +/Resources 5405 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5415 0 R +>> endobj +5408 0 obj << +/D [5406 0 R /XYZ 85.039 781.388 null] +>> endobj +1606 0 obj << +/D [5406 0 R /XYZ 85.039 268.85 null] +>> endobj +5409 0 obj << +/D [5406 0 R /XYZ 85.039 248.26 null] +>> endobj +5410 0 obj << +/D [5406 0 R /XYZ 85.039 220.497 null] +>> endobj +5411 0 obj << +/D [5406 0 R /XYZ 85.039 191.278 null] +>> endobj +5412 0 obj << +/D [5406 0 R /XYZ 85.039 177.122 null] +>> endobj +5413 0 obj << +/D [5406 0 R /XYZ 85.039 137.081 null] +>> endobj +5414 0 obj << +/D [5406 0 R /XYZ 85.039 109.982 null] +>> endobj +5405 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5418 0 obj << +/Length 2757 +/Filter /FlateDecode +>> +stream +xYYsF~ׯ:Jm9>beˊ֒Nl?HPĚ$hV)JO[. s|}R$S +iQ*at4Y r})\)L- )ld|qryn+FjH*֤¦XE)-ңJaeDr4(7p wcn5Y gnqx0 +MA4!W-n`p/ڗnˮiËthŻV5#ڬQ/aÐ3n@}AfEQKE0Wجk7ko [_:n?41.*VM^2?tIDأGCaVھS %+7HPyš*7Ϝ7;`7&rț|ʳ5nPhLmP5a+;Z:6=k +Q-uT;{c2C9sO2@X[%Wi%!Ac(xB!?ڶAԻVDJ: +_GRE -Wd@$\MFM*ABfX"ߛ%P]Je&y-M=U$Ӭ}pj-T {DVQD* g"i;R&fwN`=WLBr7b&[|=4\wFou{m䮬y!FsF=_XdWuYݦb@PZȫlk*JlQ4c3O?1iw@_~`tt^4U AF +RDG H!x{ CwZA۶2c;{g^[ vOT@xGx߻^A`h{G RVo?G@ }ӌ>@2 ^l8 +B8pKt4Ax{ wtXr6 >PHUT#`9?b? {ba ¯y^a 3Sk!)"ˆ۹E{'b.s9#pt5ٌO/߶KkT@o}56µ 8\ ݼ %s_,HPa5Dn$Cwi +<~ss7+Pu .=HaD8`jdet<87y3@ʧMAi3v8Ndz85z)}Y[w5߅΋b5p*o]Ԩ7| ,,~ȉBAK{>>4;I_" 8`"M?/YL.%196*246 -e v}E%#C=Cl( .ոPTaPߚJ& +Ԧ{$r7dńg"71TW= +yC刾i%y Aj5(yJ$Uy\S2 UD^H`-?;?gHwUMoHs 8_c勇*;4KJTe)Z/\$! `U`mf]1@g'0X Zga/E%Y6Y7azQ t?Us Ҭ4:oq |8 b-OWqU'9PWqlh\-x/\vY{.Z+wfi,2AJFeScO&n⢘RR7Bx#ٰf4#vbxqQk8]}wXG|lfakw70V |Row^ m 0d9w`DR j-jyycv:uendstream +endobj +5417 0 obj << +/Type /Page +/Contents 5418 0 R +/Resources 5416 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5415 0 R +>> endobj +5419 0 obj << +/D [5417 0 R /XYZ 85.039 781.388 null] +>> endobj +1610 0 obj << +/D [5417 0 R /XYZ 85.039 637.475 null] +>> endobj +5420 0 obj << +/D [5417 0 R /XYZ 85.039 614.157 null] +>> endobj +5421 0 obj << +/D [5417 0 R /XYZ 85.039 584.309 null] +>> endobj +5422 0 obj << +/D [5417 0 R /XYZ 85.039 556.605 null] +>> endobj +5423 0 obj << +/D [5417 0 R /XYZ 85.039 529.507 null] +>> endobj +1614 0 obj << +/D [5417 0 R /XYZ 85.039 298.378 null] +>> endobj +5424 0 obj << +/D [5417 0 R /XYZ 85.039 279.71 null] +>> endobj +1618 0 obj << +/D [5417 0 R /XYZ 85.039 109.129 null] +>> endobj +5425 0 obj << +/D [5417 0 R /XYZ 85.039 88.538 null] +>> endobj +5416 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F20 2873 0 R /F66 3248 0 R /F72 3974 0 R /F18 3977 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5428 0 obj << +/Length 3700 +/Filter /FlateDecode +>> +stream +xڥZYsF~ׯ`PUc.Γb'Y2R*"! 1 (뷏@TjS{Gbb0R,IEtܜELX%h={Cg" +(P5]sT b$iŅnwG)8E[&/?~w_*.~[R8Uzl,t*KgЎBÛ38gh볛xLx֔T8ˤ9-X:V^rFEBJYbDDkh_a@lD|Tm(BcŅAv7˦v)uſ9E%a$u$;[OC 3 +ϛ̸ xp8`BO= +Zvs!GUz]Y]؈Dr!Ӡ5Lj'^23nۼ)V97tم o7h dAw +(DZ$ЖznP{Y~|K0 KEYr&iY"|ͷ4.NP&jRu|@ĺ;hBa~%H$;* +uzC&9od+* MjF%H|mBa$lp}]ѴL7G0kQeI=%[vk6?\R(玎 HWimbg:^mC ' IhbMLGtXH[gw "<1C?~|ź6E[~*[OSpE^G)#A5H8sg"$ 5f {K$~Wuq@%M6 PR-oWMޡS:%sNJ|֓R'Uk衇c 'hN + %Qʲczw(%gm%ؓ v RC}7j}:mG/S_\ᘑ`Aha˺a* +9C,pF`Q7~ 7#홥kR;ΖcM)57fOhrԍ{~o7m*ݪϡx6a_ >^d} C_4qL$9<m'q7Hp{K?$| wUl`@0*!+Z ? ;a[؅tL-dox`-"b 6?}yhfCuTIFW ^~W9 VbH]_םσ"hNIsl,*c鳽b2AmLú$rP˶vgV( [d8"lvE.S +.Ȕr;\k@]mQ)A&1X! U+4b$95CLlb.re!5We88!KHcMuf;|qx*Ϊ0*}/(cb00nwhH0Bp_Tn®tlz&Au1?֭]>@$G<7ߊW+7݄MD5(pzMoOrrraO;p[zv-rKݻc!M8*4 :*^y:}:oUh?N#QꚓWXvpg5X qq|v* 7nr +j@j٧U{#ǀenTP)a.%S;0&9΍Iy\jS?uwt +&VP!µUp_Ip$&!, aii묥yEeOf5v)l rT$_b iroO\UsUTKzQӱ3 h$Sg8a*G|O&9e2&I6x>ZWz):]z zei^ѮSYlJ}OFtj~RF}B}{$As̘;^lyy,LR·T `yh8νo}.FPj9wС'KC*Xq"3 +ĽNM,+C߃?%/ί άEzbIi76E^!${1Nk,P6vXY/ƥ,SEL>SŤ[y25pRЃ:rUTendstream +endobj +5427 0 obj << +/Type /Page +/Contents 5428 0 R +/Resources 5426 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5415 0 R +>> endobj +5429 0 obj << +/D [5427 0 R /XYZ 85.039 781.388 null] +>> endobj +1622 0 obj << +/D [5427 0 R /XYZ 85.039 761.463 null] +>> endobj +5430 0 obj << +/D [5427 0 R /XYZ 85.039 741.134 null] +>> endobj +1626 0 obj << +/D [5427 0 R /XYZ 85.039 255.079 null] +>> endobj +5431 0 obj << +/D [5427 0 R /XYZ 85.039 234.489 null] +>> endobj +5426 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F14 2903 0 R /F66 3248 0 R /F35 2888 0 R /F72 3974 0 R /F18 3977 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5434 0 obj << +/Length 3328 +/Filter /FlateDecode +>> +stream +xڭZoFB(T,gPu&=.zhPJRq߼ZY}7C3YNgq:If͙7[OgP,dapwݏQ0=7~ B=s.ޝ_߽/֎E'/s߹Ww~^5N'ڹcW?sO <W)ox4=Bs}ޜnhWgg`ƫƤ },?Yzn$Jom;|7mgw/}5ua8ʒYXD̒RJ(=?>:QdFE`wn Bǂ.E +l-Hq;S1_灧<F~đ9""MXcu f9*'xm?uu[ޫh0 +_ W~ɋ Yk.TE#([JнU j;O\ǓŏD]H"{@Iڃ5=^s]ޠGHEw ,Ñ'"J 8UeϿp M9+qJ X92-qH2[Ud%x{Ҫbʀ4rOEtڀ 4yycdwlܐ Th +eVK&+8mpJ@m߄uEz%Qef\TcB`:-*ԂҨwUW0m b#7ۧQ CQ#,d]@==H4e~aWT~ͮIkϩC鮹 Y9m r ;\b:fk778UCYԊ{T07sxՃ(/RmmCZJ<1KW[r!S]N&E=0›|$!lՉsٰa# +@<4 .)l[`Fs3a~Ah6pi  b,q>JAd`l;oBﲩѠW#i%ǰ<_K0>4emM<ϯ-x3KO@%qFij( KiXZbuP锇d}/Q\}\5pbas5 CBJ}|ajYN1XSJ :vXt$C#/-}{m v5jهF>V˟8kCgj+pVJZpa IB  \?=DW1WBA]~!ٍ`iΊ;zuC92h]-{A7ᇆl +A#d0ᯂ f!k0:;W ׿Cz :Є 'd}5MPfŻ~ Q)?4u7_ps4_Lv*3+Ɯa" ca-p^*[ƔB8`lIsDV)p%U_"[W %TթB5=q4िٺ&J ZV6"h3{CsXLtV㎕-ʽzجˬc|d7d3Fe$nB0as8% ɰQх?qga#IJV&ۢKK+Z  kt6kgĦ!x]qE+FY߼_:ϞFѳ7qO 6`@>C\7P\$;b¯[endstream +endobj +5433 0 obj << +/Type /Page +/Contents 5434 0 R +/Resources 5432 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5415 0 R +>> endobj +5435 0 obj << +/D [5433 0 R /XYZ 85.039 781.388 null] +>> endobj +1630 0 obj << +/D [5433 0 R /XYZ 85.039 636.493 null] +>> endobj +5436 0 obj << +/D [5433 0 R /XYZ 85.039 588.965 null] +>> endobj +5437 0 obj << +/D [5433 0 R /XYZ 85.039 548.915 null] +>> endobj +5438 0 obj << +/D [5433 0 R /XYZ 85.039 519.09 null] +>> endobj +5439 0 obj << +/D [5433 0 R /XYZ 85.039 505.541 null] +>> endobj +5440 0 obj << +/D [5433 0 R /XYZ 85.039 491.991 null] +>> endobj +1634 0 obj << +/D [5433 0 R /XYZ 85.039 368.071 null] +>> endobj +5441 0 obj << +/D [5433 0 R /XYZ 85.039 344.753 null] +>> endobj +5432 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F14 2903 0 R /F66 3248 0 R /F20 2873 0 R /F56 2898 0 R /F76 5444 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5447 0 obj << +/Length 3169 +/Filter /FlateDecode +>> +stream +xڥZmo_a(LkP9%A⸶ܴ-S.IJAp_fyf؃?qNwu#F~9Eb."ϋF﹩/{=x9wv͵֎y'wn/@^Y >|Of->],J`U)._󎗰Gxmax}t@suts7ǂc5u*N0/վ:C SSNʮM#嶄?f*qwdt=S;;RmIJ%pfs.fEKVmiV5vAWjIҼ4SZBi8Үy¾*xVV(0ۢ[FK\343 }ׇyBua,- hm uQ w' I +"R\/V+ MF~D⛹|R +ąI7Ewe6S <^_Q*y9^-5B|!3mΖYg ]Xc[2[y 2؏⠔%kg[ʈnHyM-8N7t((c/-w8M +]%"uÆzON̛[Y|ǥO8MR֌ǫTCWAqstۣʷ-ACY@e}C]b=4 `rset *XǞ$lyS@0|pdyI#In+]H"Z3>W+0z 0X.[p) fEq}58Qϧ=,Ve3S8oYM85B2ܚnozЊ:%sl˃wO"*ܚhxH0u.ROh͎2uc(^"DV +K7@'-F{:M52&oy`& y q]F~~<{is ×!QlL;_fI`^fE)G}?x JesDyf-ǖ%82SDR1zB2~BN牵[=?T%U FGѡfņo~[a6 +svِ݈>{͛M +z]Z.>d/C:'g|UvE }u@ cWjۓMRu5Λ|滢P*Ǭ~؁]Fl,65>c_pp2ŻIh_Ȕ ¯X$ AT !@xMWHwf~y^k\؆J0JduCꯞu7Ch&x(f1xHX ~9=rGoVT=Mrٌ4( !pf0t&48tud.6QJ* ^QS%MchcC0/gHeu1AI=;a&CJM8qQ:%aOr`LcO7G&g,~OClY`mw^ d4DT k`DdWh{apğK ) +Lq]<X H;,nPϞ;2_qBXA*H]1x#D <ܘ`&Z@aF >O6N> S +""pKw*"h+~"Wfk L7^B㌛ؙYM{ P<e&,&68h)矪! +{;oPt?B~;-ߨlgx&XM"IOH7 y#cvm xE)qJ-qxv}5`ysM@N@&EF `P(e-!6hO4D +5x5mH`&Rl4% +%K%<3 z! 3y'nQD"%fpQykeQc`輳sPY!7q $KƇ}-jilV}&*v'TfΎ*()[@Lu=3Ty|jh =|-2i0k|O;3|n2+$8y_pbM&J'i^h*4т+*R2Ȑe \ O5sp8|:cH$Z{Uѯu8;{n5]7ga(+8Flw倊 c{Pm rCr +JQYkGr<";1DdS">#GCB^k?DR66~sU:}u_["(\Fi koւ{QZ?__ /8Vsendstream +endobj +5446 0 obj << +/Type /Page +/Contents 5447 0 R +/Resources 5445 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5415 0 R +>> endobj +5448 0 obj << +/D [5446 0 R /XYZ 85.039 781.388 null] +>> endobj +1638 0 obj << +/D [5446 0 R /XYZ 85.039 651.823 null] +>> endobj +5449 0 obj << +/D [5446 0 R /XYZ 85.039 630.626 null] +>> endobj +1642 0 obj << +/D [5446 0 R /XYZ 85.039 245.88 null] +>> endobj +5450 0 obj << +/D [5446 0 R /XYZ 85.039 222.562 null] +>> endobj +5445 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F56 2898 0 R /F76 5444 0 R /F20 2873 0 R /F66 3248 0 R /F14 2903 0 R /F35 2888 0 R /F11 2906 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5453 0 obj << +/Length 2915 +/Filter /FlateDecode +>> +stream +xZYsF~ׯr%ʄ1}P$+V"\JD @ee1Dr*zؤ3=# /L̯BS5ɸEͩ2+W>9/GXJi=7/#axtzq6M~ŞAa\NqȗƜ&ч_'Mkt=ݼ +PoW` G2em (V<O+MǗjNK-Bئs,ӱc;FY,8JK/Ok!}:$mT.{hU6+(\sS042ʇܓcz7 r[M(M͑i@# xB~,$n;]IT"砐+4sᓡ\khqGr@C9 eJJ@8JL JjJ,"7@P:l+;Xh2*YԲPGm +%^ZY A`b9RpzkF+$=X0r5cH++\(`ר':j=A Tّ8IIC'Cn.@OQ +{  U>6 +3@i* uR`3@pe[euo nѷma ^rpA#;I5 +(YhItC.Q|5Ǯ(Тܓ7%WyFp*tp xMx;oa sKm%ʈg[?mKũUO\7]Gb)@'RjװmpΜ6l}^ Ba4)nLc\Ŏޠ\g:JSъP8 ʼ 㔩YFɪ,ox }mmKVƚba{3 $ uz +RvRh)K& wB:lduX*H*7 ՝ެmx ߐx U!Oh-ۗHGN[]i;2mq  +w>6#U吨Mma +JZ?+dkF2L%-Ρօg6eEXeIB9u_&6y4դ2=h1伊MNm7uRFT&l+L8o]TL'ǻf"bk_ NOpr?C&ׁX†J1 ?H+e&)b!OilTK 6ϨJRJJh8QfUvcQW;yT]!n:R\cPoz最6 l5oq "c0w2͍-W,F?!D]Oh|K=v`녷9E> [Fqiۄ(&"+ $ k]' Չ'@NwnPdJi#?45?i ўHDE>U=i-~ld۶!& #6V8\g+ :SAGyMXDۻut샏۴|ճJ>K=EW':uٖiY J $dR*䁲;UnEWG$E +΁i] t =u,qpJOgEXoD7o{հi)N_hPV +EU'Eڛ7$DBh(7 +LG,H{E.+]vG;KͿ.ҏ_6X +uD x؁`ۺyԚK Y[b޵95'w6#0 "%W8ie鲳7Y`ˁ!6;qZfI!IgXٝ?Iˇ'M g Ӧ4Ϙv7mLbVWlJc{a&@Wgm|եD]~,Ɨ`jǴ U{(qTUB֏npgtm^3 +1{_]A34ӵ܁ Ǘh?7{^P?"~p9{, ޯ(g_@jbdKr2<>~?&*,~ +A'X tWA]܂z_뺒/~E8mڢ`KX;Nnendstream +endobj +5452 0 obj << +/Type /Page +/Contents 5453 0 R +/Resources 5451 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5415 0 R +>> endobj +5454 0 obj << +/D [5452 0 R /XYZ 85.039 781.388 null] +>> endobj +1646 0 obj << +/D [5452 0 R /XYZ 85.039 350.751 null] +>> endobj +5455 0 obj << +/D [5452 0 R /XYZ 85.039 329.555 null] +>> endobj +5451 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F66 3248 0 R /F20 2873 0 R /F56 2898 0 R /F14 2903 0 R /F74 4582 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5458 0 obj << +/Length 2498 +/Filter /FlateDecode +>> +stream +xYYoH~X4orzmc`(%qkH*㷎n  fꪯāb#I [F$-Ϝ +f> -1"/7;dmϗy`]z{;7I)-YF۩yGy0(8i$9 |Nܓ3}>{?,lb4Gg>93[tyvھ'u8?Ǡ u+l?n-B OB߱}#4-l$nd݄w +Z,PIEәS_+?Yv66j*]kS6mN-0vvFnW2'ڟ}&37m~ iL J9mt +DJ'VQ >rf&גIi'gra~K׬hiei67,Y־Pdu%6;2c)DM{TG[gy%т-KU*gƌ 2F떇Q< +[V'j ܻSWjd%xmQI.c Obw )fji0,Xq?:qahnVm_^=>EJ~.<ǣC\b 퇐S}0cWDܑ A Ž-µp'AN( kRm>5(ZTeE^zɟоAo^wGYWЇer^ԳOkTzx|Iǵ9~/ EzA[Qg$BW3\[z&᯿8Qd{Apr'#ډ<ξڑƯoM7ؙ5,_rw}ӚIW[a )b8Z~r]iiR4£[pځ 9% +&i|س-p cJJʂ1+A`QV5z߼2(t_ZW7t$%^{Q;'lNf3.dHWXy ZD49`> F.LVUi -KC˛[P!U5-&/%&P,yAأe$u/hlRs$M</4y2MF2ރ:]m}_3|ɏ-v56=){uVȂ|oc2.CV7Pcxԫ*CeS. I xeHD$%|w "mE^'׶=󍪸:MuwÏU4ͮ}Pˆ[wEdβHVՃ#rqC,z&25[}Vx<6o0Fş.PϮ^˽B#腐kE]9"T  +0D B=q乪F;X8}l }6.qXauF>3UbfyNLSa] r2U81mWW*sCL2)6 +;C)% "D3v*s#ۗV56^l*$ A̴tb[=ŅJ߷%W^ccj2sY֗Wvt 9A"Li #硣-#ƟtE2%* g0LM4\HӡIE^rSdF"+#e 0VKnb"aY% ,Pg/xI0 OC9|CtȒz\3Bo@HqhX|Xsv*^,O^b2e `1v4r:*phva@el?TW{Ka΃]yU123{m?RsI5YɝA͍B!>g=~7SR5ݹƥ]@.hăbptOu}> endobj +5459 0 obj << +/D [5457 0 R /XYZ 85.039 781.388 null] +>> endobj +1650 0 obj << +/D [5457 0 R /XYZ 85.039 678.921 null] +>> endobj +5460 0 obj << +/D [5457 0 R /XYZ 85.039 657.724 null] +>> endobj +1654 0 obj << +/D [5457 0 R /XYZ 85.039 602.015 null] +>> endobj +5461 0 obj << +/D [5457 0 R /XYZ 85.039 581.42 null] +>> endobj +1658 0 obj << +/D [5457 0 R /XYZ 85.039 454.773 null] +>> endobj +5462 0 obj << +/D [5457 0 R /XYZ 85.039 433.572 null] +>> endobj +1662 0 obj << +/D [5457 0 R /XYZ 85.039 171.433 null] +>> endobj +5463 0 obj << +/D [5457 0 R /XYZ 85.039 140.016 null] +>> endobj +5456 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F56 2898 0 R /F20 2873 0 R /F35 2888 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5467 0 obj << +/Length 2017 +/Filter /FlateDecode +>> +stream +xڭX[s6~ׯxcjWmJ3N&C E* ~HűVW+Uו%M1N,E  \KoW"E-?uU5珪aoy׷^v_hO8D fF S+pDS VyFdYլVª $LѬ@ieFl6i<5}|钤gckdDQծ0ZN&H9'b׼7Ưf֍Bۙ'!" 'JŃJ3 93F`h5QpS hMa&C!5uliQ)PW+ kLfojq~a;E'56?˺IBegΉNڀʷ˷)'6XO73Bkdzdݙ̅qlO1k W^id7E:!-OFn`z-E'XQЌ46*P{R(B:wpN[wEP<Tg"PÃl*3uSzC zfkJIwaYWm=n;0~V՝W(@aj=nO4N)L~Ar?C<-u|"WrjY<(2> +-xaK*F* aP?|/PE%q4{ N?(>6WJ((OK@s%W^g&C@-d2BE(!xqx Ƃ)(c5O|͠Cȋ1E];+Ijf#p&d +^  +7|=Cg]';YO3H|p`>ō&ư_t)*1uJ4кj~~Ssܒ@;WEKlO]Xٟz"=֤5KK \b_$]^Cԥ*>LF7bfC| ÷Z{D !#  %.2r]逕HT*̮БR4s2#a@fzd 6L4}31w,֦ ^O@Fu.T"ytAUM+tfj3LW1œ5C*4VI7g;/G! 'Z[0p:endstream +endobj +5466 0 obj << +/Type /Page +/Contents 5467 0 R +/Resources 5465 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5464 0 R +>> endobj +5468 0 obj << +/D [5466 0 R /XYZ 85.039 781.388 null] +>> endobj +1666 0 obj << +/D [5466 0 R /XYZ 85.039 501.248 null] +>> endobj +5469 0 obj << +/D [5466 0 R /XYZ 85.039 480.047 null] +>> endobj +1670 0 obj << +/D [5466 0 R /XYZ 85.039 247.068 null] +>> endobj +5470 0 obj << +/D [5466 0 R /XYZ 85.039 226.473 null] +>> endobj +5465 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F20 2873 0 R /F14 2903 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5473 0 obj << +/Length 1928 +/Filter /FlateDecode +>> +stream +xڭkoFm T)}.EeHLXs~IݺMt|㑔؇l/q3O8[P^p-;y: ^'|'d ƳyŻ+pXM(g&yOسw'WI@2}73# cO.fG/f `Uf9:9z{"7=),\ޏ~UMIjWT:K´,+v;”uӪ*r78zɆgx,pu"hHqs7ᱣ AYZ@U ֋U饑P9g8囧%faKԺ- kdmMnvƘFŚыBdl(!9q-QMЎ越m50(#E!fA bj%RyH@B" cXK"sk^BTnmw/rsv'2ǓMP̒S[MmƒkUn'Zjfq fQtSU`3!~J:gΦK)@ +G}a??IYnEϣBgGp/#?ڣOG&C!h<ںZm"Y2m㶍 SgP90N󥹰!do ,N9> endobj +5474 0 obj << +/D [5472 0 R /XYZ 85.039 781.388 null] +>> endobj +1674 0 obj << +/D [5472 0 R /XYZ 85.039 761.463 null] +>> endobj +5475 0 obj << +/D [5472 0 R /XYZ 85.039 740.731 null] +>> endobj +1678 0 obj << +/D [5472 0 R /XYZ 85.039 492.747 null] +>> endobj +5476 0 obj << +/D [5472 0 R /XYZ 85.039 472.152 null] +>> endobj +1682 0 obj << +/D [5472 0 R /XYZ 85.039 196.464 null] +>> endobj +5477 0 obj << +/D [5472 0 R /XYZ 85.039 175.263 null] +>> endobj +5471 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F35 2888 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5480 0 obj << +/Length 1571 +/Filter /FlateDecode +>> +stream +xX[o6~ E`iӮ)KvEcaUwIي-[aXD㹐a;r7|fiS׮0E+0 +xE^9],_]M9a瓗sFuqy~<g[ϗsb:-T8˷W˭[4[][F [z;(|eOjVZC>u|~ w0ǧcQ iMv#~&mMYᴪӢG_CߴM[],ήpdq/uz#QW5]J,&ɪjfCL. +WAvMF$[Rjaݤ0i`{$2@:4˺zEI٩I V (R✔ Bk$ojbNw/)-O]TaSC0 +GQryCP`UD9F%JU-0@S([)rPKvI$Y芀278ZQ<2ulk:̦ن= &*'p"T + .027!=rI#-h#B:pjCU\m Yh9g)M!h38;t<@ 7H]EQ&.O"}$S5T1w)RVFa)VbP 2jA)aEQ4.Pߖ؇ɑ +Pۏ̣#VX.UJ`x&թ$,D{P+PPRZmX2PWyR nfOե T3a3fZ(=LV&v18n#*KEABUUk +XUHvlj!PFM;*} tKqK`j=^dqYH5GS7z(}mI=ռ\B-%l~FսTc*ڍjW@6,.e'f0"Y@ϹXř|\ ] NC"QDP$r'*o$ǂa +]F}}]_Mڪأ>Fr1,GajvԭۈRvt}MRo74rmk&e%ׇE@Agmu"8~"^s8/ZEd1NVc'ꭳĦKϔ>-$+C}D5إkCZ}/wǶy2.{E-k{(㈥~c*/(56iDmWoeɾvay6wO&-j>Gy 4`}mHFNendstream +endobj +5479 0 obj << +/Type /Page +/Contents 5480 0 R +/Resources 5478 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5464 0 R +>> endobj +5481 0 obj << +/D [5479 0 R /XYZ 85.039 781.388 null] +>> endobj +1686 0 obj << +/D [5479 0 R /XYZ 85.039 649.169 null] +>> endobj +5482 0 obj << +/D [5479 0 R /XYZ 85.039 614.419 null] +>> endobj +1690 0 obj << +/D [5479 0 R /XYZ 85.039 434.517 null] +>> endobj +5483 0 obj << +/D [5479 0 R /XYZ 85.039 400.373 null] +>> endobj +5478 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F20 2873 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5486 0 obj << +/Length 2425 +/Filter /FlateDecode +>> +stream +xڭkoFWpH.P+|ɵDX>dQNўgwޙ9OBvT4 Bi0%ʼn3[×N 5~uқIǎh*?_\XJ)!#{aA(.>]/a˫(ŧkEĊ.?+e;/NޯzN{3KAN[E -sq|ھ:?9WOy35_C(黶Y;x2k va/n(@גxlDh}4nyۣ~E!Ki >.=w>C(@c4,%$'/ +HИjD-HVTBVyHH]ӶmԏYҹA6<;}L_;羮.ЎyɌncrxE72^ +($#aaK۲8y[cY%][paόOmXХy=ҷAf3{dzD2G8c83 PHq,Un7ZkP`&v&͏)[r1MA4K1:1%2sf2\KJ \$R&6CtM3fX_}@c\3^* 2>Xd&C*՟镃TF̬uGU;PdzG ,3=L~$R AW`wQ6S3Bdaۿ15ٌ@fqɠチ G췘TK*ϰX .WA( J}*iMWurLvV +=5jwAen%eOw2R=7N?4q️w%r7p#V%xoŀsL\]f.ߗmmFgÞ_ֺ^nhZ+#b4#=;jJ\FSv [~;goZXR uSS(Tq":.5>קZׅšԢ~:[ꎞ +7/q/dn_a\ov^5rܿ {{K>oʐIa^eΫGO-$)hP=n}%%BWP{خnNH5gf_ EPEL@//WE/q +rendstream +endobj +5485 0 obj << +/Type /Page +/Contents 5486 0 R +/Resources 5484 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5464 0 R +>> endobj +5487 0 obj << +/D [5485 0 R /XYZ 85.039 781.388 null] +>> endobj +1694 0 obj << +/D [5485 0 R /XYZ 85.039 554.519 null] +>> endobj +5488 0 obj << +/D [5485 0 R /XYZ 85.039 522.496 null] +>> endobj +1698 0 obj << +/D [5485 0 R /XYZ 85.039 228.95 null] +>> endobj +5489 0 obj << +/D [5485 0 R /XYZ 85.039 207.75 null] +>> endobj +1702 0 obj << +/D [5485 0 R /XYZ 85.039 108.73 null] +>> endobj +5490 0 obj << +/D [5485 0 R /XYZ 85.039 88.135 null] +>> endobj +5484 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F56 2898 0 R /F20 2873 0 R /F66 3248 0 R /F11 2906 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5493 0 obj << +/Length 2087 +/Filter /FlateDecode +>> +stream +xڵXo60DjVÒCmbCcѶZYrg`AJm(D=~wOC_nB)0=7=i8eṜ^y}iȎ^/<{kfvu;kH AZ㻛L̮'opQZw7 t3]O./x +{iw5k5mu"T[ݏJzp-$,{=޴g+׼>:f f~,q~ Bl\kT< BϺ I>dZ>y {0jتZd<3C>g@f>&,6_dK8jDJ=+?47J4ODYb>pkު@B.V: Ǜ t!NnFbd'ðCv쮽#\GA(dq'}!=BPz=pm+Ju +ִevz@S'| 6 C`C^M qY+ԥ{#A\o- í=DZF+:$-g VSX1yY-2w$bGYX,LpX Ja* h~w{ uyvgAg՘LD M1qћc|dzW +1 *_q2hɘ5xE`Q"moejmZ*Mn *[#Q!:ه8!u7f<~ 1ɴ~g Wg< +1-+|XL/LXtTIäb\Pfىl#Lol?D o Y@gٟ?`0&Knr)X!JYWZa L<`ks +Ui>bg ]纤;a^]4<{#W\8JR  +D+#g[$ˆȄ9pef<,Wk̼L^7Ibӷ1Zphٯg-8P^TcjV B[*֚H%Mr")>0/"s@*P ތ/.<(9ud%Tǂ749#LQō 39uXjTQ<2rdsB 6p,T-8Q6OS>*TɖoT\CiܔUbgˣδV# ]XMA[U`2<]&ӻj:}}v3_r,9i3MgOѨ#|Pn*4`XqJ# պG΁v  !>τ[;vh ɴr-,n$Eoǔi.sF5{TM| \Czy2;"slAZ4Y9aMb|g|Ϧĭd(ilv70=]kMpv^daF8@5`H:`xRj \/0.0_y]#g skB?49yzۏtf>O +k])'{w^yk煮 qs 7p`Y@B߁,P>Na?{ftd\<;7L+€_X 0}.lCE'5gj[clKcϥ6ݾq~vmDǚiO?[rWnt#G8x&6?(/endstream +endobj +5492 0 obj << +/Type /Page +/Contents 5493 0 R +/Resources 5491 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5464 0 R +>> endobj +5494 0 obj << +/D [5492 0 R /XYZ 85.039 781.388 null] +>> endobj +1706 0 obj << +/D [5492 0 R /XYZ 85.039 689.601 null] +>> endobj +5495 0 obj << +/D [5492 0 R /XYZ 85.039 668.4 null] +>> endobj +1710 0 obj << +/D [5492 0 R /XYZ 85.039 599.602 null] +>> endobj +5496 0 obj << +/D [5492 0 R /XYZ 85.039 578.401 null] +>> endobj +1714 0 obj << +/D [5492 0 R /XYZ 85.039 498.176 null] +>> endobj +5497 0 obj << +/D [5492 0 R /XYZ 85.039 474.858 null] +>> endobj +5491 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F35 2888 0 R /F66 3248 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5500 0 obj << +/Length 3238 +/Filter /FlateDecode +>> +stream +xڭZms6_˗R&${8I_ؙܻ&L!8Ix߾iQd `X,v]JL+&I2ĉeLY0YAϏgŽ!ޘg?h5n'U$'wދ.o=I)=Y'ދ7S0ի۫W?\cnyի}//Mgvv2T)ٻd [,eL3ӏuOMx֘V"Q""ZDBN(@Zr:yf5u7Xh&P&m̪]9 χ!)o޽Rῶ6eSdf;ќe,|Uyr}~9*ly|;xn,U6/_^X^ ʛIE͙yF!` +h0 K-Ӕk2l^ Y}Oq )G=oؒ^L< x,{FyBG2-yDx /D-Gh3Rލ)67jԴ(LUq)r4uWv# O(l#=pJi# /;v[k%GxďCD^noU*NPƓHk?QɗC2sf=fA%cխ]WN)once&cEAivey -1'hZ|0ex8ZE1 +X`PAT}Z0P.G{7CpA!ZF-N6 )a0!$L.ݹgK +0 v٨'&m3h-{@k +B'K J6[w,QzsVIВVLvqGb^ڵ%cgU1PbgVIHCc(d5*)s($& !B  +~!!IVv6AGCD^E-6s#P@LZQR"!|LXVF_^?q!"= =zc#%辴E))=K3š@E@D?1#9'~ ~ C BA@jFu>d0&#+R{ A]šA +][{r"{u6VEÖJ +[JsId(e<@c(, xGa"E! +aD +t!ǫS"FlWt'|> U5 /kdh%O]sx9=ðCh xh/I> endobj +5501 0 obj << +/D [5499 0 R /XYZ 85.039 781.388 null] +>> endobj +1718 0 obj << +/D [5499 0 R /XYZ 85.039 620.561 null] +>> endobj +5502 0 obj << +/D [5499 0 R /XYZ 85.039 591.157 null] +>> endobj +1722 0 obj << +/D [5499 0 R /XYZ 85.039 508.814 null] +>> endobj +5503 0 obj << +/D [5499 0 R /XYZ 85.039 489.942 null] +>> endobj +1726 0 obj << +/D [5499 0 R /XYZ 85.039 363.859 null] +>> endobj +5504 0 obj << +/D [5499 0 R /XYZ 85.039 342.966 null] +>> endobj +1730 0 obj << +/D [5499 0 R /XYZ 85.039 205.961 null] +>> endobj +5505 0 obj << +/D [5499 0 R /XYZ 85.039 184.765 null] +>> endobj +5498 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F20 2873 0 R /F56 2898 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5509 0 obj << +/Length 2306 +/Filter /FlateDecode +>> +stream +xڽX[6~_a/rђ`@ڦd4qXA![IRxPL +lsG34fI u}Ͷo9\Nx~\^-~ÙfQN$HΖW秷oo>])gb&Iv;z8 ;_nqttÏy&7|wfyh͛`һ+O,a +SDoQx%.X˞}V}Ez!`D\2 +(/Lf ljU<Ou:N~4A c9Ar njODX¼1W +R<q$#3wHY#nߩj")&=wAtkx7j!;q N60s0J}}rͿ٢5 +R _ٝ=: +GCԁZJhw/8GXP~L~ D);D$'ryiU}OiZ !>F)HUbLp~NPg!(Kσ|*;IyF#,$@Ļ,k7l6_[15q0Uܲ>%jpcyG +݋<^K(7 mscH1yy1{&0m5?i-F3B)ܰC.F՝'/cKN"+ DovL#jMG6r(,2BJxiԚΊMD6F2=;F= PϜ2hm9LBHzQհֻ've)c7}حAclq!ο8qk{m9Sse5xO7h&Q\ɽSyQ6\TyT0UEUkK}cS m Ê,b}鸨yct&혶/GftxOwbZG14?3"n]ȧq %7řb6˺#L(A:4؍<"'T[6p8p3y^7>Bsris:f^lydȃ 9@a3 K l"ŧVjr ﰮP=l99fOgq얁)@^/8}Y8цPFɤ`ڌ̀!+QL-H#ړG; zdA&L"wQ6AOQ:3;TKIkp$֊YO/gMϋʞYF50W ~wxf]*T7=; 3q]f͆uhJO0AX0"RPF@ 5J&i:!bp)0feje FMs*/+:0R[$x=e*.E.鰣L`eRv\=R̴$^3,AEd^P+JKZ _ D[܄t &Hcdv܄4%ayЧX"49m ޖ|hxFsNGʱ0;l&%!wlۗ9Qwwe?I61/ʆib} M% vj7 5`Ç'?4:%{蛯=t"n]=xd[#py=V~NXwL&:˒X# k>}Z;~n8"/K4ߘcxE ė)mᦶtl,Ү!-~J$4d4p B/}*><8uQuAapo$S endstream +endobj +5508 0 obj << +/Type /Page +/Contents 5509 0 R +/Resources 5507 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5506 0 R +/Annots [ 5513 0 R ] +>> endobj +5513 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 87.442 371.033 99.435] +/Subtype/Link/A<> +>> endobj +5510 0 obj << +/D [5508 0 R /XYZ 85.039 781.388 null] +>> endobj +1734 0 obj << +/D [5508 0 R /XYZ 85.039 761.463 null] +>> endobj +5511 0 obj << +/D [5508 0 R /XYZ 85.039 741.134 null] +>> endobj +1738 0 obj << +/D [5508 0 R /XYZ 85.039 327.573 null] +>> endobj +5512 0 obj << +/D [5508 0 R /XYZ 85.039 296.048 null] +>> endobj +5507 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5516 0 obj << +/Length 3894 +/Filter /FlateDecode +>> +stream +xڥioF*` +i3Oi6& +R-DK\SBRv~5P@a͛7o= +&>4|M4TN @Z0?/.z^g̀'t&Ϋw/?J)'ȼ$,p>է?Şr?Rao?__.~4U⏿˅,C\^QS\a 6"/ ӧSQEY|r;DC|->A 8JIxYeAY8Ixp[j`o7s8<96 <_gbMF7u NF2^BL%YA{N&qhi"v!nE 4Y:͆opX;~3-՛+SX:([n =wgn--pv8="b,[1mq2p=@.xYgΎ{܆}K|z&k™-mJ즠xY97 ys;@i5 G_0ψ-{,v!qkU6=eYY &/F&XXz'{Njgf9ݺ1_ǧ_ poflIWy3Ē_㧥]_NbԏtDOh' P8۽$v!Ntĕ{*ﻦvvrٔwEl;o*WqꥠcV^%' q-c=Ą$4h;Ab,ANﹳ߭Pe/VOFG#INlFid4Mi j +2}a/(B6bZkyKaz!#ii;1jz[F΄{L'El|LjPEFI:qLTYU#DFOone9VH:B -%*c:;⊺f#Sٝ8UksÑS,N܄Mծ*mǣxE$D@xP^d0 TO8J<->,vO%!El!jpJ8aSE3tN!|ْx\+.,뫶F͊2cY( Xq`̲40H 5ZnrQ=:˫pd:laDd`p]"@0hN*^dQ<?8"+}ލW9(otѧLEkй![͜oP~[c@4IAWC_’z 2*aNl1E0 y_Q6E ;6!$S4&SA9z7R0 +{v٩P@n}72Hƌ]NA~cށ7D5H]{⨨L-};9sx +z kF5 tV|B]S}i{~3 +t1TlHH}%>+J!m$n>rTJf} z8u˓iI9!ڵOD\8`,>' ɘM10S)DzD: jA9Pl2i,Jda#q>ĉt:bNk xqZR^z@&c;CwbBHpl urNNO<-cə@AcqƤGgᮛܢnHԱjn}lTqYd8 +O?c>kK9cW3I +$ɂS$IAG)%}:snISR{x# |fidG\((@1CBcib;6UR)4-].sPޖdt7D|3( ԤT,>a;"+1F`}}fck +^Qvg]ok&SSkD~7V N -JpȊnbDP,)OF v\<_ *0ﳩryRNđS>Px4FQM^Ȧ:>/W1|̸n>R_`([lVh@dr' XbW:g9ݨL rS "nLJ܋A o{Ҽ됷 s$Yy7@<Ϳc@Jz;9:|_8QQ6:s8_ |hh@B@8i{$e%<$ k'R/Xr~<k=ʗ"`I;̗q($7')3R +Mp]@ +пI.PIUv>3aN '+[b"}Y}q0ЋSBfç]v-S'wl]WV:xtļzx84hU:9uoꗳl?m.p$'e+Wf_钍W+bǜ.lU/(cV ^ĸ;Kՙ( 00pPԋRuL5FbXendstream +endobj +5515 0 obj << +/Type /Page +/Contents 5516 0 R +/Resources 5514 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5506 0 R +/Annots [ 5518 0 R 5519 0 R 5521 0 R 5522 0 R 5523 0 R 5526 0 R 5527 0 R ] +>> endobj +5518 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [412.789 653.385 454.872 665.378] +/Subtype/Link/A<> +>> endobj +5519 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [155.951 639.836 369.851 651.829] +/Subtype/Link/A<> +>> endobj +5521 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [421.617 405.262 475.382 416.951] +/Subtype/Link/A<> +>> endobj +5522 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [179.03 364.614 225.113 376.304] +/Subtype/Link/A<> +>> endobj +5523 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [375.968 364.614 430.714 376.304] +/Subtype/Link/A<> +>> endobj +5526 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [191.321 143.854 256.005 155.543] +/Subtype/Link/A<> +>> endobj +5527 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [181.685 130.305 300.65 141.994] +/Subtype/Link/A<> +>> endobj +5517 0 obj << +/D [5515 0 R /XYZ 85.039 781.388 null] +>> endobj +1742 0 obj << +/D [5515 0 R /XYZ 85.039 519.568 null] +>> endobj +5520 0 obj << +/D [5515 0 R /XYZ 85.039 500.899 null] +>> endobj +1746 0 obj << +/D [5515 0 R /XYZ 85.039 323.247 null] +>> endobj +5524 0 obj << +/D [5515 0 R /XYZ 85.039 302.652 null] +>> endobj +1750 0 obj << +/D [5515 0 R /XYZ 85.039 178.994 null] +>> endobj +5525 0 obj << +/D [5515 0 R /XYZ 85.039 158.399 null] +>> endobj +5514 0 obj << +/Font << /F64 3118 0 R /F72 3974 0 R /F18 3977 0 R /F35 2888 0 R /F20 2873 0 R /F15 2884 0 R /F66 3248 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5530 0 obj << +/Length 4219 +/Filter /FlateDecode +>> +stream +xڥks6G_JX,7{nҦM&8δ@ %:$w|M&XžK4r LRiz_xB FP6η7_s3/0 +.oߝ^>z2wIZ9zۛWo_W@|߭aWogo}_CʐO]/<7/\ Ӎ@/QK\ԍ`YlQw_&F^H|6m {Hr?qCyXc4w7Л:l>_#4xȥGLy_AVfGHS.09 ePp- (W2XhӜ9%Qȿ[,]q0) #1(W |7-K +Z«niOE{iv%cpBM@%8$[[*TW ȼ0! + ۯ9'𣜾eFޗ {S${i '&W (qڇ{@#7GFI>a:d0 w*o[uWȋ6x*! +Z?} , ?˜/Hi;ŶԚcuX#'^6z9ŽS0Ҿ<ڏ,m{AnaZK>$nl +EFw86Dnz`C+QRީwa_|/f'bnE޽HZ MtG۴*pR#~+?z ǐeeY4Ȩ vnvbcpW2ewDm{kZ4X~D< +c]6Nh :;*ր/hcE%b"B:.ʐXp-)rƢʵbal7t6 6-E1:Bf?" !{T#уNJP# +~j;TFФ>G?rR(Q3BC>Dk>7+ k ]~VDԒюscFc$zt4g,\ Ibs&[f< '?L[}D &z*#8} +4,]@ WA~G 'SpծP@&p`6,\^0xއ` b|d[6nG6nz#[{y9҉%RefjkqU4*h:UDdGi]0^C$K)UE%0t_6WGYF^QL,N&%g{l)2.,CU%q/m뗜BDG4nEV7{YB8Ui =t>yTG[9<%stZr\P$7[oIrz$9Sy! NQԍDh 'GO +E5ȗV + |0;1CLD,Ao~$g)±kz+ $Ϊ'gXT1NGyMFR/1!W7Ԏ6͡փZ7/ +]Wgo@zB=VzgGv|(0lF>fͅ܂c DLYCQ<2:^xՋABcoBDQL.5x* RRE鬡3]itرNBxc.KJiLRLJQk +̰@U9=Ϫ-N-tNJ+yN)H٘4Ιu'3ẨNXl>:@G L;v- BlerJqRBB9,ǿڈ<>0 c{}/AD "Dz3w`Ga_SHgK)TlDپ@p{HRrr$EX1PJݖnT۾]L/DapLOշmRM#&gg J(TH#VX[T~?'M7\ޓjd@O޾D^8hwiB8uL(e#14D*HrTq] WÊCdyDWoPRGF*/pQΠ`-C,C7R 䍅7\.jc]jJd2QI +UpPEF#R(~= W[,m3{_X` W\}+Sÿ]I.tC#Y[KOxznU*\77'sy i~837S٘d3+Of•7̳{/on]^2#.~& +ʙU^2Z`%9lŗC,Vعcå$+@{hI6c<"zm$ZFL+fӧzeKJKCvF,p w}ubbA 2_1\In(E>JӂpJ/"3Uendstream +endobj +5529 0 obj << +/Type /Page +/Contents 5530 0 R +/Resources 5528 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5506 0 R +/Annots [ 5534 0 R 5535 0 R 5536 0 R 5537 0 R 5538 0 R 5539 0 R 5540 0 R 5541 0 R 5542 0 R 5543 0 R 5544 0 R ] +>> endobj +5534 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [417.299 388.145 472.685 399.835] +/Subtype/Link/A<> +>> endobj +5535 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [365.076 279.146 434.644 292.047] +/Subtype/Link/A<> +>> endobj +5536 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 265.596 179.218 278.498] +/Subtype/Link/A<> +>> endobj +5537 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [286.484 239.104 364.4 250.793] +/Subtype/Link/A<> +>> endobj +5538 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [323.843 225.555 392.533 237.244] +/Subtype/Link/A<> +>> endobj +5539 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [339.529 211.4 370.915 224.301] +/Subtype/Link/A<> +>> endobj +5540 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [403.684 211.4 428.706 224.301] +/Subtype/Link/A<> +>> endobj +5541 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [407.442 184.301 432.313 197.203] +/Subtype/Link/A<> +>> endobj +5542 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 170.752 151.596 183.654] +/Subtype/Link/A<> +>> endobj +5543 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [176.334 170.752 212.114 183.654] +/Subtype/Link/A<> +>> endobj +5544 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [115.558 157.203 176.975 170.104] +/Subtype/Link/A<> +>> endobj +5531 0 obj << +/D [5529 0 R /XYZ 85.039 781.388 null] +>> endobj +1754 0 obj << +/D [5529 0 R /XYZ 85.039 719.568 null] +>> endobj +5532 0 obj << +/D [5529 0 R /XYZ 85.039 698.974 null] +>> endobj +1758 0 obj << +/D [5529 0 R /XYZ 85.039 422.679 null] +>> endobj +5533 0 obj << +/D [5529 0 R /XYZ 85.039 402.691 null] +>> endobj +5528 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F66 3248 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5547 0 obj << +/Length 3972 +/Filter /FlateDecode +>> +stream +xڥ]s]L'PDŽ>';v'Z!D@lд?Ád: ݽ> EI*MͅXͅ/K!YZ4/o. s3/[܍DnM/n^\*?s/I:k^}x7w>^!rn\.^N Ul~woQ~\=<{Ff*ƅ 5'MeAt^r2 9ñ-adfưO&J`& &X^0O&-{fnj 4y+dkKL*QNH1Lușzɶ"տx4Nlmq5 xˇcI6أg} +kv!)0؊(QuIN#[2-G^rdUbf=" NE'YwLVTZUd޸E8gKdaŷ其8n/Ol[B[ &SjVJRbEdW;,$q%>ROy j@OܰiWtF<J#CU뀂rE(lKkjCqrr2%ϒTD2|6vƲ9K~Q-J {_klqtWR=An` UR.QXMoCd:J[?=ZNhmp&H8=Pa{)4f$;/ԋ)Hj$yH='Ɍ^Hn%ϞA2y?BŮ,sDM$Kf dd&urVH(L󣱯4-d7Pl0cDrϹxc_sYn%,CE>nIA̲Wv"i|SXv*ϵU*#Ie/8F/Z Da"h C.7ej,ZaO+[u!f8*uTQ14{ʋ2h! nzn@ ZQ8K Wx}Hl3ۨt[s%HҬՏ͡ <*ovzgջX3iJ8/,R8X['~`]IŝLs__ =dl>:%IXeWg|w :JO2qj;R'4eQS +E#g 5G *APqP299J GXuvcrN—{'TT4U9D$GpG3KV_BD(ZHtR BX;ӭ#$39F +M2"̇Hf&!atA,.+}EE{u.x*ցGC@Zk UbdgڒqV2j#VJm7ֺvaM +3=Sg2 )߈1ܳ$;*7BrIDpU"b\}M< 6oūhZuө%e^6mW P fT󚠬U8H#-|ɽ།ZZ=yX@8,x#ot/0(66&`ՇJ٫Ս7nby}$Ϋ+W{ +{*SƐB/i,ӗ4X~$ ʤOdKM8a`Qeըkv%:kc)>@UY{GZaS"]gyS7ow9j1a/OVq:BN(y陈z G`հmmrڞ8$ܕ='/D@t5ȇeNZBdyA~ H\gzUaŰJ8$x]FΊduDJ/>$)(Xgx6vp +K|,@SkΥa +؅En?4`0v.{gr݊UԵp7!҇d%t/o&C\Am)ڱk !`O3i*i6.xN+ })"8t@yBIϼb?f }ٗ3\>? Bfj>DhEĞ7\,t8lq!qnA"_eN9jMSqn="ydsPMV]h@Q_ztvQG`eV}w sgo5tG@+ߕ}3b$)|׏ioe%N> eeB ^֭ +l9\? iLF߆o9Ӑk9(oͷUQ+] +;RgۍGݷ|媜/;N 9@Wrs"3cg00BjfG z$:cBA^!WmqlulSCNЍ3l.2@ل )8q6pZrq+>L'ەd4u ǭ2J 6+,$ޛ_Ldu/jj#h|en3WX5ԊAUd)>%xՍg#d98.%u`ϝQ&up{K4}HU/*oJE0{ 1D@&GcȗI],6PCk;coӏXu!x>e>^۴a + [xAOTq +ɉn㤦C@ӟzc,sv3Wf#"/R 6%+zT+6 +0ifB)Ӭս, f603Ruv_bH51Mendstream +endobj +5546 0 obj << +/Type /Page +/Contents 5547 0 R +/Resources 5545 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5506 0 R +/Annots [ 5550 0 R 5551 0 R 5552 0 R 5553 0 R 5554 0 R 5556 0 R 5557 0 R 5558 0 R ] +>> endobj +5550 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [465.465 713.243 512.306 725.538] +/Subtype/Link/A<> +>> endobj +5551 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 699.694 126.672 711.383] +/Subtype/Link/A<> +>> endobj +5552 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [362.259 564.202 455.161 575.891] +/Subtype/Link/A<> +>> endobj +5553 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [449.589 550.652 512.306 562.342] +/Subtype/Link/A<> +>> endobj +5554 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 537.103 137.066 548.793] +/Subtype/Link/A<> +>> endobj +5556 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 240.82 167.248 252.509] +/Subtype/Link/A<> +>> endobj +5557 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 186.623 171.793 198.313] +/Subtype/Link/A<> +>> endobj +5558 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 145.369 195.687 158.271] +/Subtype/Link/A<> +>> endobj +5548 0 obj << +/D [5546 0 R /XYZ 85.039 781.388 null] +>> endobj +1762 0 obj << +/D [5546 0 R /XYZ 85.039 761.463 null] +>> endobj +5549 0 obj << +/D [5546 0 R /XYZ 85.039 743.459 null] +>> endobj +1766 0 obj << +/D [5546 0 R /XYZ 85.039 373.187 null] +>> endobj +5555 0 obj << +/D [5546 0 R /XYZ 85.039 353.199 null] +>> endobj +5545 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5561 0 obj << +/Length 4092 +/Filter /FlateDecode +>> +stream +xڥrF]_K-08XZKuUڂHB V緯$H0GOOOOCo?oYxJ|}V0[@̏g`N꦳e'tPnX/߾}VJY^\qX/\_x ^~7 `г\n~Ň_pO9o?5ә4:LπN' ˳T<xW4 'K4" "e8y(ϟšn@r༞ ^_(ת/g5gm0>^Du#4VU\-E + 14ezKn[a4yp+e-^J@zDi_TO!zkQ.7~$U+n໺}8 0̆{#GV=ux7 ubA͹,75nŃr\0T|2 a$#}="q6w!<|\e2:늺1E +3Jf;Dσ~q"^MW7 Da:aO04;ǁhZxBj4UWT,%4Vߒng8 0k5,]Xf8tbAqA$C7q${{xpOVi(qہ 1MߑV:H:5/Cu~2v%Je5ݞL}D9̢$u4=?>N$.96 +4 f;eǶҵgxeoL1iP`-#ʥuEkЈĊK\̛*Ϻ{, +70`N ŀL&׮k4S$_d}&B{GebL0Lm8n5BHҕsXuCVbGY- + gP oP'H1FcJЁ`o٠CV^E|Fw\`lnͫ 6߉k}x۬1/ʘyj0U~G|ǩU6(xaZB-I#ƮmḋI +0ċëYĴicjJ' K{>g8BxqtB v h2ȉ(Zn iE'R&Dd((^MK_c\r;Ca^1H!dQ'dd-K^zfFs͆Zvla=-x=\K1fpTaF3f2uS3`/Q  styL$1O I7'z}5veDmm|g%a*9!@Ҡ^ziɸc_mt]FI*&p W푢JI{BNszKH'Pzγ1SZ0Hvd#xݟ&Mcb| CȟD}.MrIl?䏘bxs,^_aQ TW Ja:T,MfHuE@_?bQ&NaA DƔ7GZp0e9|I,3,x@ /μc*Lȟp/~Jd{M ׃dD%pkxгU*_v|FR!^^ˑF Bf!`Ac{ +r)=MSĮ~A ,pϹl)+\C ׺so! 8sP(Djq*ЕSI&'lH:YTVT3bqM9p[f+cdyfXbl-(s^jfb +y`>G^mE9eYA3HfnXP f;-j J1(ZY<R J$RӘgt 6C+3 >xQ4KTR_ؒ} 23+uîh+ hƺݴ7H:I!5ZɐziQB<t!.tG-E_DW_hC +j-u')Β(ɠC +M啎/8np|9-AIU|h-:Մ(B(>.MY-,փ[~ `!m*).Z&\qId-?YnKz. $zy aёj)^it=qa_q衚{7Y+ł2Ϝ2/oCCگrYhn5ХwUL?,q,M|]}hӜ8\ѠM!(jw +m~{oӰgA:L8"@7T݁Od*Ӊ+|rG!Kۗw9? ;"3I ώ?3D 27?}xuP+LR'q7%|x5m9掭<:w(o[0q//[~ȁ%cc!~ <[XE{*SmArXBwPLCiP#7]y~y휒zR(u?%3_q$uSQAW GMey$*= zLA4)%@gXendstream +endobj +5560 0 obj << +/Type /Page +/Contents 5561 0 R +/Resources 5559 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5506 0 R +/Annots [ 5564 0 R 5565 0 R 5566 0 R 5567 0 R 5569 0 R 5570 0 R 5572 0 R ] +>> endobj +5564 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [229.571 699.694 271.655 711.383] +/Subtype/Link/A<> +>> endobj +5565 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [474.768 699.694 509.276 711.383] +/Subtype/Link/A<> +>> endobj +5566 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [382.128 685.538 512.306 698.44] +/Subtype/Link/A<> +>> endobj +5567 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [323.743 672.595 408.715 684.285] +/Subtype/Link/A<> +>> endobj +5569 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [458.132 208.512 509.276 221.413] +/Subtype/Link/A<> +>> endobj +5570 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [188.809 194.963 226.257 207.864] +/Subtype/Link/A<> +>> endobj +5572 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [175.286 61.174 435.003 73.167] +/Subtype/Link/A<> +>> endobj +5562 0 obj << +/D [5560 0 R /XYZ 85.039 781.388 null] +>> endobj +1770 0 obj << +/D [5560 0 R /XYZ 85.039 761.463 null] +>> endobj +5563 0 obj << +/D [5560 0 R /XYZ 85.039 729.909 null] +>> endobj +1774 0 obj << +/D [5560 0 R /XYZ 85.039 444.64 null] +>> endobj +5568 0 obj << +/D [5560 0 R /XYZ 85.039 426.901 null] +>> endobj +1778 0 obj << +/D [5560 0 R /XYZ 85.039 156.323 null] +>> endobj +5571 0 obj << +/D [5560 0 R /XYZ 85.039 133.005 null] +>> endobj +5559 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F72 3974 0 R /F18 3977 0 R /F66 3248 0 R /F14 2903 0 R /F35 2888 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5575 0 obj << +/Length 4354 +/Filter /FlateDecode +>> +stream +xڭ;ko䶵+ZL\lv{7|("gdTyQcEpM??"?'x@PGHW-eoH}~ɾ{{|)(nW* k`m2/yZNx/uk$/YY036,/!C LwYqǍmo /VW; +/jt8!U$Derv@ K\Bh97IN _Qg8(%:H~GD%:md?QZ'C6tO+f%+B3]O$}P KfkNcYm-!AszFp0Us^f)h)I"XЦ+ vaQ> +L< +"p- ww ?0rubN b&#HB<ƞx-y6@xx> 6MMk2-x'~\\#=XDZYsǶ&(m@hз55_ckX;5|M `w൰oow@|!X?gڴx QA R`.qZ< MYXy!ݔwH+]4 4ռtr ka0ll`2cG mRԴX[2!_j!%^"9kD-CE4^>J= ӲS ar7< +f [) +TC瑇gT6F1=r9Z.7~b#:mV*>a }ou\@w:~K p$KX'.^|j|~bqKCe +:b<`gsM$A`Y&Xy AC<k*; iż"zx t\s1uafcoLCcp7uM_Zh p (VRR7/aReŎƍCGIMbk{!x7c˚4/l U>V+'Ve=PF3~bT.tL&嗗l>& tYl-/҇sBk>QzVIb7XVм0@"BQ#|SJX#؄b)^ Y㖥#G'n{lK[LKpXzeJ,Ӵni}HyZ'tOK= MޓĬgsXT,QI +)zs8OxLd쨙gYω{h+qA 5k +׻lP(6 +Th"7`@ ᚋ|Sߕ[oEwC먿aQ`Fqp%6\{ybA% 2k&ECL$}2&ie*jU1,@X@&vҀ?ݽFT I?QO@?Z%JʁషJ3hJל4 & f]v$нDhd-m_KFF;Mұtށ {I&mנBdzf+.8$IÎ3k0Q,Y7W%z ^ ^W'fcMd3jbחŲTuK֤W6! 6֋!/OG{5/*]^eۦq#OI?"70`&JM3q a_@z.~$=tsYD(ߔb3ioR+$D\σg%R﹝ tր =̑|evUioӼߎj*\GD M1`}pț|; +R YŹT0n0AGӌ_^=XR.e<_M򥅯KM:=gu-gB{)?x1 +`@fǬJuVCw;h{6/Eʘnp:3U#Wyn'< +.}VixU{9aSV +lH@'򼙨qUEcXē k.0,ÎM1jGl֑|4?KOtfINXLҿ;`3!Sb|g2L=&QSDͤTٲH*=֧}9`ڀ(%. ̄>g-6)cF$T%iuuYx/܋)=dA`:?5FlHS`]a}asLc\NrZq%0'ə$sz.}Kw[~oIO9;38HZ;\hA\/!4r=7)V6{I\v%l9<, PRFOmiƣC; <:~o.(J^J.;}o+4smZ ێ4Vo~iS ,Y|9w+ċ8$FJʼn,tAdMIsVpG3$ _ӭ R$MBܢoK+ɞ;Վ#yv|5g0SU.CkǛ"z@wϿ3X2b +[\\Am.@.qBC|\`g=[b{Au H(Z˞ƣz.lzƅ(8ik\7xoNiݬ&X5w#ppP"W>Lp":E8KL[an. |0Fې?Ǣp Q滖Ҳ\EshϮoIQs{G+hfz%@WW]iZ1-]_+Y+)JQDL}V僋 +0c0PLQҝ'M}GJw=kn6OY8`r֭pfȾn̄ؽ-u}5+nsEqy3.B"mX)o 7:8Y?s cLPzlǺƉo(e}|ScTld܁ؘ;bIC In%@"xg6HO<  Ֆ1ڛH+y||fB4o  P,ߔ}JtHܴȏKN[jA)$n:ֽO ?ֵ^4Kj*&Ln}LDh* _ȧ|Y ۱~v& )mMy{x٘ri7aVC,>XEouVgzS:Mjl<5gʼn4*?h}bkќL“9ꮹtХp7&(߿s]ʨP="nOd j6d*D)Fĕ/J\kaRm6S5@6Y!g[iU\5CS1ج\ݞ'ajGy9O>]UgK K +4ogendstream +endobj +5574 0 obj << +/Type /Page +/Contents 5575 0 R +/Resources 5573 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5600 0 R +/Annots [ 5577 0 R 5578 0 R 5579 0 R 5580 0 R 5581 0 R 5582 0 R 5583 0 R 5584 0 R 5585 0 R 5586 0 R 5587 0 R 5588 0 R 5589 0 R 5590 0 R 5591 0 R 5592 0 R 5593 0 R 5594 0 R 5595 0 R 5596 0 R 5597 0 R 5598 0 R 5599 0 R ] +>> endobj +5577 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [378.225 747.083 512.306 759.076] +/Subtype/Link/A<> +>> endobj +5578 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 733.534 323.852 745.527] +/Subtype/Link/A<> +>> endobj +5579 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [386.739 679.034 512.306 691.936] +/Subtype/Link/A<> +>> endobj +5580 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 665.788 404.531 677.781] +/Subtype/Link/A<> +>> endobj +5581 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [377.256 611.592 512.306 623.584] +/Subtype/Link/A<> +>> endobj +5582 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 598.042 323.852 610.035] +/Subtype/Link/A<> +>> endobj +5583 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [174.8 529.993 417.833 542.895] +/Subtype/Link/A<> +>> endobj +5584 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [456.688 529.993 512.306 542.895] +/Subtype/Link/A<> +>> endobj +5585 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 516.444 312.896 529.346] +/Subtype/Link/A<> +>> endobj +5586 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [450.04 516.444 512.306 529.346] +/Subtype/Link/A<> +>> endobj +5587 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 502.895 312.896 515.797] +/Subtype/Link/A<> +>> endobj +5588 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [392.387 502.895 512.306 515.797] +/Subtype/Link/A<> +>> endobj +5589 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 489.346 186.642 502.247] +/Subtype/Link/A<> +>> endobj +5590 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [311.286 489.346 512.306 502.247] +/Subtype/Link/A<> +>> endobj +5591 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 475.797 163.49 488.698] +/Subtype/Link/A<> +>> endobj +5592 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [405.345 462.55 512.306 474.543] +/Subtype/Link/A<> +>> endobj +5593 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 449.001 512.306 460.994] +/Subtype/Link/A<> +>> endobj +5594 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 437.876 146.308 446.535] +/Subtype/Link/A<> +>> endobj +5595 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [470.223 421.6 512.306 434.501] +/Subtype/Link/A<> +>> endobj +5596 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 408.354 512.306 420.346] +/Subtype/Link/A<> +>> endobj +5597 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 396.191 215.035 405.888] +/Subtype/Link/A<> +>> endobj +5598 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [367.133 326.755 512.306 339.657] +/Subtype/Link/A<> +>> endobj +5599 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 313.206 323.852 326.108] +/Subtype/Link/A<> +>> endobj +5576 0 obj << +/D [5574 0 R /XYZ 85.039 781.388 null] +>> endobj +5573 0 obj << +/Font << /F64 3118 0 R /F14 2903 0 R /F15 2884 0 R /F35 2888 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5603 0 obj << +/Length 3716 +/Filter /FlateDecode +>> +stream +xڥZy? 5(ޤ8E\bL4+~k#P xsssgIh;z''lqfO, ooVGu쵳?v^ݿXok{绅k}ֻoݿ}k4w"{&zn~o^qͷo?޼;{]qo~͙epo_'ۅ _Ǜ멸/)~b?flq5P/efbX^h-k-6o~ϻ.Vo6iYUY#ݯNuUWv˺)]uu=wY8ZOM, ":k޸%vGz&<گV//$Xi"+}JXZ/+kz*Td2tvv /Kj$*$VKbD2w>6Pv<'؁?jhlXedWHt́3É^|g$2C`[a v9.g?t. GݛE=s\{0]2.!^4&!ӎ&7M[XvRdMQϹv/O1%̹ "h'E4Ǣy:'n~up8eDA{Z=VgϦc/ }P׫:*SǢX8o6?HId?#yŁ.^`/ػ"BtMKzlwOR"PD(("$U4w]K,bO4M-!2%s-^:OiV<1N8 vm]s,<YG<Ӏ'];w #<'# j:8F, xp [`輴b" vHc]38,1>=(À4jYy {L}IeFVƒ"R/}{tO:qy2It{ ?Q +<zHe6{.~ƃg$I7I&m`{#2Yζ jWt>h: :uqAQtynwd gDnbDە̇lZĪoUY<6}ݮ@rk&%I3fA \e?K6oGk&=`ß/zE܄HOW2kwPʹҠ2[Zr=^ZOt|'-Po/hL]>^fY\5!,5 OU9"Av'Z }a4ck|)i^XQ~u' %Ƹ=l:WB肰 +5a&X-7Xi$kZNx?#6?2td's3M^Rpx"FC1 dso(8^J-~ˎoXe&A_* `T[nF9dPp <;C_,oVV !ݶ ρ{DJЭ+(x(sV v, $]LZts%a7&pifùIZ&w-DDj1>md2$\nRГr d:mܳͤtO֥%{X*K9 CD |ddRCBrlGhCpT{+n0iV1ÎiUmqÖY{OY +" m3,X1J[r<62ViOm]i:Ձ>zbHG\o<>CߐKAşԗRl6xDz0>HYB3Iș-,hQ"3KF7h\hڲ[c?䎞L6-W؁u^rC)CI2+E>G DMJ +-Fmԃ88 +"ŬG@@H3+yDžEbc-OhSvcHؽ d>Wc+!)4XJ ([7lX0Cm$LVd}u\d +G9$8CZ>+Nޒ@K;<D!@zS4; ;ۉ;g7e `@fDG/G;/0P|Av*\(DH .Ռځy 8c"`H9:[&>02:B<˿|:lR쫊U_vRB<#@ܨB,#sR]8lAiͧvB`% s+8.\҂ +MXrlΐa>p)#p JW)\ȃ4J(( _Ɲk&|)u+2: N(~_ICc[:Ov z" xkvݵ %Þ0uG17|$qt[qEI. R164Uo32DRVӌ=!뜀 t&ra`+$Tq8 i8);P[.0ElR={9JLZoB ~GAxP8q$Su7z1kzJ̒ﶷ*9@HԼ7i&4+vNE|-ҋ:YM:39m6i7<,tц vqendstream +endobj +5602 0 obj << +/Type /Page +/Contents 5603 0 R +/Resources 5601 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5600 0 R +/Annots [ 5605 0 R 5606 0 R 5607 0 R 5608 0 R 5609 0 R ] +>> endobj +5605 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [286.952 649.25 512.306 661.243] +/Subtype/Link/A<> +>> endobj +5606 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 635.701 387.349 647.694] +/Subtype/Link/A<> +>> endobj +5607 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [470.223 621.849 512.306 634.751] +/Subtype/Link/A<> +>> endobj +5608 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 608.603 512.306 620.595] +/Subtype/Link/A<> +>> endobj +5609 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 594.751 146.308 607.652] +/Subtype/Link/A<> +>> endobj +5604 0 obj << +/D [5602 0 R /XYZ 85.039 781.388 null] +>> endobj +1782 0 obj << +/D [5602 0 R /XYZ 85.039 207.502 null] +>> endobj +5610 0 obj << +/D [5602 0 R /XYZ 85.039 178.704 null] +>> endobj +5601 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F14 2903 0 R /F15 2884 0 R /F56 2898 0 R /F66 3248 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5613 0 obj << +/Length 3359 +/Filter /FlateDecode +>> +stream +xڥZ~U_J&|?N^|gE<'1H|גDJ +#>fgggfg~;x*߁*Z]uEK9-\ ɥE{tC hao_Y~-ʜ;zM6pz#MWwicޗ@% ZwIjMQ-ubğGz!+[b-6JYk(VhA>|-Vh%麼*7X7E;Pp7p -wiEX-Mi?f]u]}b[t)Wt.Kz`{\Ehdzh-0x ܸGJJ˛gjAHc7"{j+GP>[^^Ӫ䏯egg~siS,)AM.r'j o#n6Kq;R'%ev뼀q[RͪkAyeIqDm{$=ǟ AK<D!o84j$t̿Z}E7jFw\WSA8Hw'/#fH=e8"0G+4+Ɛ漬Rg2UҘF^; +A4b -vmWCTmE^LDڸ<-E\Pǿ͢s쌬n:."ȃP 0] ,F`W*KѴ>_=>.;|t[{Al +p/czA`Dhokyp­?0Q=ItSDY״MּfK0G"+HIpwW/\{[NCs-P>1Ym CU4ўpY ŧ27 ]۽yzzrʢ +$n7tw o)g."]t(34'cN Gf,r\eO o1H~C;"\6PۦJ;Pc痢ʨdTZoJUcg؉. ]%?qJ03]ThFZԣn7)n@'gá3o$B{]kZF!ؔ^?| O~r/ zOY;-GpAANu7QCUĉxɬɸGy`bgj@!kz\NH.G<3zH8"bH0ڣtQsRMt;;!wK/epMɓڔ!/t'KB.܆FMbc&zTb&5i` +K,^^YB\Fɤ1aG_*P-Wၢk +Kp\Ovn=׻`݄mhvߤFXS81I=ِ7T TGO}ڥzc8d#pO !5Rc@ٌ>LFőyÌ c.b 3RmGASlrpJy;t/<ku\.,֖ZdCm +y}m˖dȢJ3]Qem_8e`{i;&ǣRN?<qFT*MD8hiAZE}ZG%\O8PjߜgjHA[T~RI[Q@`D3_sP}pbN%*pT0pF؆=bv*]`:~W˾8r\˔dz.@U@XO/ )yp O<_,t4)d&c:rbNRZ>5/2I$Jn=԰(&K#H"| 9nB7 ngtd!J_3yy&=l꼣>cHQq \:pA 0a?\8ǛMx{\udq Px@h@,YPn'y5aendstream +endobj +5612 0 obj << +/Type /Page +/Contents 5613 0 R +/Resources 5611 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5600 0 R +/Annots [ 5617 0 R ] +>> endobj +5617 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 426.515 371.033 439.417] +/Subtype/Link/A<> +>> endobj +5614 0 obj << +/D [5612 0 R /XYZ 85.039 781.388 null] +>> endobj +1786 0 obj << +/D [5612 0 R /XYZ 85.039 761.463 null] +>> endobj +5615 0 obj << +/D [5612 0 R /XYZ 85.039 741.134 null] +>> endobj +1790 0 obj << +/D [5612 0 R /XYZ 85.039 597.546 null] +>> endobj +5616 0 obj << +/D [5612 0 R /XYZ 85.039 576.955 null] +>> endobj +1794 0 obj << +/D [5612 0 R /XYZ 85.039 412.246 null] +>> endobj +5618 0 obj << +/D [5612 0 R /XYZ 85.039 391.656 null] +>> endobj +1798 0 obj << +/D [5612 0 R /XYZ 85.039 126.125 null] +>> endobj +5619 0 obj << +/D [5612 0 R /XYZ 85.039 105.535 null] +>> endobj +5611 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F35 2888 0 R /F66 3248 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5622 0 obj << +/Length 3106 +/Filter /FlateDecode +>> +stream +xZ[6~_a`cE$uE4hv6b`!۲ĶIt IѶ..ZrC~ʣIzJ'q"<$Ɵl`)dxML~:y\^_^=޿{ 8w=2vo?ۏhOjJ_n>|'+ү7dm0szatwv+ & @F|/IN!B B'\L(& +<&^ _S&b3Q?Vwqɬ)y\G.V-h !K~8-\Rcp6Og=F`h`Dc0 140\@o/㸘UFO^PK1PZP4(C (:Aqe|Epv:l])NYMHS~ylpԢ4fFPdQׅUmY7 "3Tjˣ5Y[+^ 墅_ Z|w!rVK+*V[獌R#(b*+WQΊ6UlC&pgnC{-W|{ i(@1I@jqѿ67{ͮ͝0һrG P5M +8@c#FaUa2P 2>YMNFUڗo{ @V^"Ϻl?K_ƷPϧV n|cRLS䶦3sސ), aà|pĂ<9J-Gy]l߲ɫT,ʺ6GGQN^U Ӻ8dx~Ȟ b]Dw .%ӝOݿ)6},a##yru@?,r+#c//os;zyW?*aY-|ƁgnjuEHe\:c(#f8u6hEzWxE1vWwpgt=p4J>~qF<>i:|]=T{gͲժ2j}Va.֡A%vx-!lVF}_'Aj(&[`ۭ|hNɘ@J<ƣpր٥p5QŅh7ˡ+'trUdABPRHqo3y;tSw;t{G5+Ѭ<]ϷB35oqSӶ50~ $x;'_"//de4à$:t#:*N6C9[Jzn/:-ѴM"wiDSv;mz#W/z[F .iÆyU-~ONJ/3ZoƼC.uz;_BـI/-خ3J r^U9jdd\ܶ*{9A%+M%qIS01FNK-re9e/r6$VSDb3עJ-f4hBQ coR4/#}_ ш 2 +tůK\~{iȗI}|d)@\bY]bClAJ颣Zdj~O Uly9hv'(H!&C#K~te\D[z[usVV4҅X4Kӌ5Muɬ ,)~/tNM/ +rqa'/Βhj$B/y.Gx[~'94"4#"EtɬKD+]~ip<ƙw}ץZPT,3>\:n>_5657T,{"{ ?l?)/Q=5PJO +sUWW~*endstream +endobj +5621 0 obj << +/Type /Page +/Contents 5622 0 R +/Resources 5620 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5600 0 R +>> endobj +5623 0 obj << +/D [5621 0 R /XYZ 85.039 781.388 null] +>> endobj +1802 0 obj << +/D [5621 0 R /XYZ 85.039 466.717 null] +>> endobj +5624 0 obj << +/D [5621 0 R /XYZ 85.039 445.52 null] +>> endobj +1806 0 obj << +/D [5621 0 R /XYZ 85.039 210.682 null] +>> endobj +5625 0 obj << +/D [5621 0 R /XYZ 85.039 189.486 null] +>> endobj +5620 0 obj << +/Font << /F64 3118 0 R /F14 2903 0 R /F15 2884 0 R /F35 2888 0 R /F20 2873 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5628 0 obj << +/Length 2824 +/Filter /FlateDecode +>> +stream +xڥYYF~_R.}m˕$-#"e_\â$[.@whrgsgIh;~:d=\9̼rb)$Oի(:l}Ao][,}߷^,8~tp= 1놃kRfo8^b +ڪ|osKZ=[=\#6AYo]~\,aM}I У@~#P( Џ;퇨 Q,+T +4KX3~euGkIH]#cuh>`FxcFbjۑ /|j񈶦'tB˷ewBv%PlJnAM%>6xXn[dTVO #OYll s+ҍu{Xþ {V9Mg؃ :ՒM}y>W-!GߔyNl< ӧgΈàщKPSJ 0o5qGӥ~|A $Y, X)al=T]%hAN-2MnJl5h^8 H 8Hd|:){C!B)du-]KN(a RŅ,tw3r/&1"Ny^VxS}gwT*2/_t{M#[|3&A=9&c/d{:'" ,J3q @Cd=f!Qx[9Gl5-bc.%#LI1i}xz H3k0g"+ٲAjLh5oHjs + Φa,F1&DO G`JHMi |(Nx=? í$aƒc˖W[fhNs lu"|mbEh:ЅҜcc%Y12Ubv Ry.taw(_C].s9DBl\RCxUauP|l$YIࣚ?a'"2ˁ DS M{R]:)I`\q2RFyV(јK.-Chѧ+3N0X1h3t%r|&|ajA{x) +ДIl3ЍabD^JchO@o=9> +Sޓs^3,dBs{Uq\xSoxC,(PJ8B,z}CK(I˳2Ԕ5ENsRb:!e\Q P~)n/7Q7\p8 \UWjGS+ա8~:rMzҒ"WQ2 Tbc T +=8g9yh1NT<R_{&=jjz7g):2 +Hrଡ Usyﳷr:RT{'ih}(XmOQT 1G~<{5t[ؑviV ,@Ɩ|B!{?ɈШG|Vl nFb۷c%7yDt6=tYd0J =,#_2'a5%3M<.QrL};MSݑuSNM('%5ɺ895,e %%P VwPQjɬxϬO|18J1i9kvF]74q'6 $u$5\̑2FSC`rk2EيdҶc+D4F~*34\6>yǯ1 F$ɿNTtCԿ>=fw"͓L]oXӧn\ @b'~z7{ @Ga- R"|=gS/`^b'yRƵ&uhy)<HQKsXleJ tAEsbS6=r)Pvqy Mro| bo~!ohiӋ ?IM\wg-0Ŀ#by^PI 4>endstream +endobj +5627 0 obj << +/Type /Page +/Contents 5628 0 R +/Resources 5626 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5600 0 R +>> endobj +5629 0 obj << +/D [5627 0 R /XYZ 85.039 781.388 null] +>> endobj +1810 0 obj << +/D [5627 0 R /XYZ 85.039 761.463 null] +>> endobj +5630 0 obj << +/D [5627 0 R /XYZ 85.039 741.134 null] +>> endobj +1814 0 obj << +/D [5627 0 R /XYZ 85.039 711.349 null] +>> endobj +5631 0 obj << +/D [5627 0 R /XYZ 85.039 684.734 null] +>> endobj +5626 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F66 3248 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5634 0 obj << +/Length 3694 +/Filter /FlateDecode +>> +stream +xڭk6 Z8Ҵi4^v\lkjeɕlw$E۲SAVp4MLʯL*ˮW۫fcaPWW7ZDa#Z]߯ +^~R*y8_ip;Co߿~wݷPnqL8W/M7W;NUly/* +U]?8 +LoPʼWwWqx.毦ULEiO,BaשTa%$bU1TmsY_~W] h+td_o|k?yCܼ>+$)0Q)q#JR)ȸ,eSW % ^%I \pI-$M4o +U'hai-GRZHVD@d':L0fh}1@'|v(=3$蜎f-* |3s$3عF ~E]hYt=ns%  B$cbN]O_^zZ3!+uae(hFuY&-"3f.s5D"F +׮̗ +3k5v`nitw`t(*"nž} ("~< <,wUVv}P'UA[]ERL>4jjm1Y |(XˮcseHnr AKWK D|܈bK+ID̈́N@JT41E]fiOSyO%)R&@ܲ%F( )7Nn8V7,T|U4 +C,yG)/^ՃyfPF1*T' go_eᗁVY"h%?N<8A %jBw"$X @FӘ%P6$.Ќxib U%f]56cS#3H( QMIMOS-S풰' !jo%g-M$J L4eA6̵WzQ+UCۼ.UoU=v`hy>%5E, S-:M3$vG ?s,m]})tAAWz5b@V#mRR><);P#.T2g+|Mfy"WSg*d\x*M5ʊ_z8RpG }T+dwc03E$7}ME$ ,Fx(M6~ _}k~N -<BM:21s| gts ljK=uPP;lF!724ad.=&, 3V98'Z{-L,uƬwA_is4gkK79XMw6`:9[v59}J58i}Q`Ru0K@Z~਌ߊkj"kg<[A +w[C,(tA r?{[|2shvCy08'<f!;YfGfN 1pxexcJ]:) ;2KXf +jbxg4\a*\GT)\}VrwZMyn^rmS! hH0@v UP\qm1C*l8v嵘l8әjV}d8n'c_ 'va2pk5<ĎӤ8:mѐIZSfz.?uQ8xr+ԕ[hHY0pҏĔ`5l2\|K4ic|,b: 왺 jM $"MW6Il#>P!ZeRJmK [3jRϱvkл̬`: +Э{un6ƚ3V*mpב"Ve4e$d:);c<ȒC9_ +)C- +l[Ԑ{6Kwv&-) +P[4dʣbx;B/MInQms[tEYxH,.IGҧ'+8 +₌rmLMY$={m֌)JA] L_J(Ǣj0 !֬sx +-妤PC',ͭ;s(/5fSi1,/s gj昏:eo1Se<c> endobj +5635 0 obj << +/D [5633 0 R /XYZ 85.039 781.388 null] +>> endobj +1818 0 obj << +/D [5633 0 R /XYZ 85.039 511.561 null] +>> endobj +5636 0 obj << +/D [5633 0 R /XYZ 85.039 482.763 null] +>> endobj +1822 0 obj << +/D [5633 0 R /XYZ 85.039 400.118 null] +>> endobj +5637 0 obj << +/D [5633 0 R /XYZ 85.039 379.224 null] +>> endobj +1826 0 obj << +/D [5633 0 R /XYZ 85.039 154.341 null] +>> endobj +5638 0 obj << +/D [5633 0 R /XYZ 85.039 136.075 null] +>> endobj +5632 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F66 3248 0 R /F20 2873 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5641 0 obj << +/Length 1958 +/Filter /FlateDecode +>> +stream +xڥXYF~ׯ*k`+xVP"G,2I㷎5xc:t|'8N(BDZ.f/?ͤ,7y]G"gy7 >/<]~֮L‹}Bzfy} -~~nkwL7翼x+-ϳ^^*A5?>| :BbzhՋo]bT(T@*t O;}uS9Jh/F$Ί#H%e$D9R [7]x͟ڵcDD$H$2ýpu]HU:]Y7%Ue<+"1&aDU˅mE&grjy"- t_\*vkVr>1Ϻ*p K07?OFaYdaF'bU+w?@32S\c&W<逺S +=$CZnO|L +Z%(9@δemjDv|GYN(ne[>2lQ} ؕ28vם@ZIM=F J"ʰ:?ʍx!&"e_HbD +Dף,4 !;>? 7pӘ.CрA໿@|: ݗ:luJyCg ;0aªZ$ +Л1zt-$J(#s[ٱE)!%+$6.f$9`1 +"(R4#s<wVP"tz.x|6 s'tdBNűDDP uXooHg?E͈`mg|[Xc !<g:бP#>&5j0L 3Xh>-@U:|Xh{g4OSoٞ/^g0QYF< jB-"9Xl zm`ur(,0r!9w\Tw`/ 3X3Q*2" ZjOa[4X<,wMLU ձE:|du7e H ;,N$CO9 +wŴLw0g|iqh(EQUӗ|̀[+x̖yڅ9j;/MǘV|U@G=r} p p7<^ +JGCeb]w<fXWM\flroBFgC"3Uj˟@&pvI5aO3HE]WnNwYqy"Łʧ={ױv-]F sR']zV#uW%v f]R^ɤk[N>xx#Ƒ;sUorU]zwQmpBfQ#ۿnvU0G6V[I76r ',ÒV]FSi༰4M +_yt+1[rY@ +E҇}aLM-#J5\|M`]bpDX܀F/yRĥy;]TB69|PJq0ҕLO|BPb8["/۴ݝ}Mt\v9_v_) +*IrxK&RDQk1$endstream +endobj +5640 0 obj << +/Type /Page +/Contents 5641 0 R +/Resources 5639 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5649 0 R +>> endobj +5642 0 obj << +/D [5640 0 R /XYZ 85.039 781.388 null] +>> endobj +1830 0 obj << +/D [5640 0 R /XYZ 85.039 613.806 null] +>> endobj +5643 0 obj << +/D [5640 0 R /XYZ 85.039 595.137 null] +>> endobj +1834 0 obj << +/D [5640 0 R /XYZ 85.039 538.254 null] +>> endobj +5644 0 obj << +/D [5640 0 R /XYZ 85.039 508.85 null] +>> endobj +1838 0 obj << +/D [5640 0 R /XYZ 85.039 478.924 null] +>> endobj +5645 0 obj << +/D [5640 0 R /XYZ 85.039 452.915 null] +>> endobj +1842 0 obj << +/D [5640 0 R /XYZ 85.039 252.806 null] +>> endobj +5646 0 obj << +/D [5640 0 R /XYZ 85.039 234.54 null] +>> endobj +1846 0 obj << +/D [5640 0 R /XYZ 85.039 202.998 null] +>> endobj +5647 0 obj << +/D [5640 0 R /XYZ 85.039 182.408 null] +>> endobj +1850 0 obj << +/D [5640 0 R /XYZ 85.039 153.191 null] +>> endobj +5648 0 obj << +/D [5640 0 R /XYZ 85.039 132.6 null] +>> endobj +5639 0 obj << +/Font << /F64 3118 0 R /F72 3974 0 R /F18 3977 0 R /F20 2873 0 R /F15 2884 0 R /F35 2888 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5652 0 obj << +/Length 2593 +/Filter /FlateDecode +>> +stream +xڽk +!`QP]'q;WA%Q{pʇ΋^Q`^OI2^Yo?^8xRd_~S4a| ˻ m ߺxNxטVZHiEڷQi6~$*K3IaM=W{=HɪM|~Lzc(`V +f6TOp X,jO#ǡkdlW}[ՎG?'Mߟ wicx4rxM^7oM'P=G$TÔ$nX*bH+ܪـ 9q +Ӡ\UIAܽIM5p//+y%7(=ǸI"?cYe([FȘ(9p#*|jbO&W:7>Sy=zS +u= |ț;l'.2(U˶VɤmmA̶<'uA|9T=^\ROVmHĊ$L>S1p/#l'MBY ;fSPt*LXN;Dpʼ=?b|ثjՠ[/6 [7t\A]ir9.4|VT\j &0`qܼ6bJV|XICHbܗS @A:Tka:N΄X3v,KZِ%c(#cV'KĤH%UQ@"M0Qv, C}܍ޟ ^LC ˕Y=P’UL>C9^J1dt!f ];^- 9f݆%Aq:#FGVԃ# ZCGb,@(PCW.Hy-mĝàh(66^Uz$bK>erңx'U#1FQ|=.,dª;n%w'-"υaF/5@ꉌC7?&[) _5XHe :ζ}w#m1a0Ws=?@+]WPyQ + JY_C&z +//J 9kpQEaPΌ2BtU"ݐr dJ::*mf/>- ߞ-d2=EB*(ټݯE +H/˔g3:GyL6Jد+E/aclwuBT6s(9b0 =[I!z'Ґx{n #Yǩ6_!qy6T} [s&}OJ{tFΐ#F珂Ig{e' sN}&^Wa.71qcN%EF +O-9'krأ?!s\S +~"#O#ɘ(ys{cXƊ:RQ+I.jYXXPVˤpŝs7F%Q +)Wy+909+ƃAo p!wɰHs R8U]>/.oW^kY6^AHumѸ bR DM vB;+ǎW0mه҂X\h2~ [iMAX罹X v%sdмbRf{LN!k{e^h{_AZ0ZcѪ&]-.(jcL=",z+{N=Ft&J!Q]3]!s8$ }&CN~`3] S&Y(yUNјC!hISd܈#"}CV[LPӝ,KV> endobj +5653 0 obj << +/D [5651 0 R /XYZ 85.039 781.388 null] +>> endobj +1854 0 obj << +/D [5651 0 R /XYZ 85.039 761.463 null] +>> endobj +5654 0 obj << +/D [5651 0 R /XYZ 85.039 736.911 null] +>> endobj +1858 0 obj << +/D [5651 0 R /XYZ 85.039 736.911 null] +>> endobj +5655 0 obj << +/D [5651 0 R /XYZ 85.039 716.383 null] +>> endobj +5650 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F66 3248 0 R /F11 2906 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5658 0 obj << +/Length 2118 +/Filter /FlateDecode +>> +stream +xڵX[s۶~ׯPfJ R˩؉Z[R-yhĖ"N|^d=9'$b_1+Ǖ0 Gvװn mXrpvC: J/~dK)-9#; ՇHX 'dg>a˳XZKfL勻 Iapl5mu"Ta &0p0v(_y6X ~jE?]Qcyznsr䗺`Mƒim[#[X7EUA@#Di^:xgWi'I4:*zyP+[d~`ƒ^Taȑ5G$更ɪnqM@ѪwK<2ۑ}L>.l1>3FI6߳7guq6ezGAc<'T!d @jͧyʰ}5x, |K?d#vlȱdV5-XBmI680gouy( 5nZsrRjځ8mAIc높T㉐UFlT6a+&}e8Upqm{豘)Jzb̒iėg ,tl҂~6]\^"KDd]|#+M@\g6Hx#S)8xyV[gTsJ.Yp¤iOi[i0Қ̔Nҋz.]|:MVCQbahD~-,=CpA %)9(?Y x[K‚ь(2FS]љ 2.iȉ&DLLWl {nPӃZ +a q +'O* 'mj|TkƫczN@~aE|wD󝮪碌jrL ?+Gf*vvb8Pv!)Ҧ"2G2_2GcBNBs׼ed*9N M5dP_@ XRMOaڤV*|DASwFp9 jd4v+x|9 e5B, +K-VӖP"^D[*p9|@N}$lͫyRcS#2aJyr!86+9qaЖyJh^xLt/F4+{:44+dIŽr<^]UൢJ23 /'0aZ21+}^]'ˋUʒ;tҦ4 n&bi.ݵQ.3P2XޝiBuo4gUBH ONYE )RsO ?endstream +endobj +5657 0 obj << +/Type /Page +/Contents 5658 0 R +/Resources 5656 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5649 0 R +>> endobj +5659 0 obj << +/D [5657 0 R /XYZ 85.039 781.388 null] +>> endobj +1862 0 obj << +/D [5657 0 R /XYZ 85.039 355.788 null] +>> endobj +5660 0 obj << +/D [5657 0 R /XYZ 85.039 335.198 null] +>> endobj +5656 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F66 3248 0 R /F56 2898 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5663 0 obj << +/Length 958 +/Filter /FlateDecode +>> +stream +xڵW[s8~W0 ]T,:)Ʀam= !S;6%;߹a٠H#<30"!;X0PړyIӉ5dj};hBm(sdz6c`P1V\6lg Lb,7c(W9{#H>H' + l`+}[0郤!b°J J*6ٮ!V(15CZт&-/L5g>թRTu^Ucm({VQ\ᖽ:b# l!ܲM|++lpU]qQ T:;įendstream +endobj +5662 0 obj << +/Type /Page +/Contents 5663 0 R +/Resources 5661 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5649 0 R +>> endobj +5664 0 obj << +/D [5662 0 R /XYZ 85.039 781.388 null] +>> endobj +5661 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5667 0 obj << +/Length 1039 +/Filter /FlateDecode +>> +stream +xڵW[w8~W/e`rB\p|bl-Jٓ%MK7qNffF)UU:&4*K6sWCRHp m]A*]YP7x_ &M1n.lNlMԘQ{bkt{:D/6O&n8B{z| irԾ~SB5-kuᄆe?Mk UbNWĪ2V lB`4t sj 4dhFco@% n{$55[W*!Um$nJIB4Ze sLW7GTzDK$gf#@/9n4'~Lŀ+QrB%bLAZ&;l$,gz_˰.V¹Yi-qlu%룈Ѥ> endobj +5668 0 obj << +/D [5666 0 R /XYZ 85.039 781.388 null] +>> endobj +5665 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5671 0 obj << +/Length 903 +/Filter /FlateDecode +>> +stream +xڵWQ0~W04!D3`-^)z/m8 +Mgw!]q,~ɮT%1a:6)f[k\*Tj tʫP)T TI"ƘF-PŪ.V83170~@ :fTWǜ`NCt<* F('Qs1D (0J1wegyP'x#L\3bfC5"-UķKh;t<{m0> endobj +5672 0 obj << +/D [5670 0 R /XYZ 85.039 781.388 null] +>> endobj +5669 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5675 0 obj << +/Length 809 +/Filter /FlateDecode +>> +stream +xڵVQS0~x/9I9ob: +=}|@@V_ҴZ@,.clE"7Pjacgyp]M[~S/( J)i/:0 TLV ] +Jiwp:X֡(ؙ'“NaޡFi4Wyœh)I _Њ0$78z,Sz*9KZaQ^ =AU2~zT.fVi2eM (>HrTp7jTMݛ|UXylסųP&,NK}\x"g6z!Y"xh^ӽtYm5P$S'.;tiͮW +Fm~D[(r,YW_'?UF m/e5Y(ٌ^6->PtVey{(WZ2lOVHܰڴ[N@ +XGHOyL!/m7ZkLӯ9̵g2nXSB=gfMXYr1H Ke*ܮ: h8u I3pλlęwx \a [5Iendstream +endobj +5674 0 obj << +/Type /Page +/Contents 5675 0 R +/Resources 5673 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5677 0 R +>> endobj +5676 0 obj << +/D [5674 0 R /XYZ 85.039 781.388 null] +>> endobj +5673 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5680 0 obj << +/Length 1211 +/Filter /FlateDecode +>> +stream +xڵX[s8~Wx؇%X, ;J/8yE\ːa&?~eK B'u=w.56l? j)zmuujakc47ڹ4tBGu .~йw.`g!zdN坰sóu\1i2wq%Ge0~3edg^7ë .hSc]MjbB` !-Ȫ 4eBta-Lg轨2XT78eƢY]Z3FשB:aM=TSc,Zc),׷:㐲)I2 fR Y|^8 8pEcIW8=sO)4!52KU&N/ފ1|yGIQYHEmH>:ar]7Ǡ: +my'0^Ii" p/VftH<>]rsj{}TJId-{XD|/|QB\?8ʷ$lw[v5?dm1QFWM>fx/\qx,OW\smBrw;Q`!}~zHI-I/Uy Ca<wƩ 4ba)>2vC\@⃬U~yq7#49|LV|`^D!HODi;^m[DeD仜GZ)ͤe-84Ht3S {dw}=TVQ9ؒ)jUWYdas0Bp8_T^ĪoݍOӱ~;2y91 +=q1fe#s+k\~vƫR b=[A yुغ H'V> endobj +5681 0 obj << +/D [5679 0 R /XYZ 85.039 781.388 null] +>> endobj +5678 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5684 0 obj << +/Length 3363 +/Filter /FlateDecode +>> +stream +xڭko6\.iI|m7V-|%&":b~||HܢupY(cQieh\8;y}b& W7Ҏx4_x|f4_~xtfXMgaM^| ^z7z{ k~aɜ޵?}r?_\Jgg#|(G=azst*3__\AsވW q7#swآvG(/hߙ2&pox:Ӹil\+N˺MZgt}vja&r|]L,ӊj +p7SXiMxz(1Dݲ6BxN7)P!!šrr~J~Tx{8FQIKǶ!~}1ޞS<WLs+y*l"gcbى$O!Tr`]vwZ !O(<0G<ZXn+I#Ev9j1kbM#$50aat9ྴэB̸ݒrcy+G) :Q#aJ(>j &x78Lr,q؟!GbqEB7M%H^69o":?Jr<%EtQpxfuY@Ƽ(M$D yfbS!%:{|j}M iIUJA+SH$g oʪdM9̇ܖV6)v4V=lm+KA]7C~%;D +3GbnY?pɛ2-CǛ\/vcGEƜӾ ;JEmڍvzZ\_d8:mݳY.șº_U%wC99\;O5/t*;RZE` (vxrP8lvE&PY +9jQ/7fPL)kݤ8^h|eRucë:;tשO(̖\:;!8y»NؗY&ቄM>}>aN, + ~7OU>UGkp?K9'!caQAE]kџջjHrB{th tCݒ[{ Xc_LNl8aN)br_tϟa*#1}KeO+=RmE8tP/g`kO# 3.@tyȗiBD#/% 2' /Oq}T|99:cʀv>+{: vP4+4 Ya E5ҋ"Eऻ1ujBRj ڷQ5Dy*eLSt l("1a|⽉ޚˆ7~g]?O580ֿ-P*T5 IiYcocK"сG {0UϨȜ(\miAA@uD(//endstream +endobj +5683 0 obj << +/Type /Page +/Contents 5684 0 R +/Resources 5682 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5677 0 R +>> endobj +5685 0 obj << +/D [5683 0 R /XYZ 85.039 781.388 null] +>> endobj +1866 0 obj << +/D [5683 0 R /XYZ 85.039 545.55 null] +>> endobj +5686 0 obj << +/D [5683 0 R /XYZ 85.039 510.609 null] +>> endobj +5682 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F20 2873 0 R /F15 2884 0 R /F56 2898 0 R /F14 2903 0 R /F11 2906 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5689 0 obj << +/Length 4718 +/Filter /FlateDecode +>> +stream +xڥ[sȑBJ]`/oݥqv-+\$ "Of5јGO?~3R.tvizڽ.6 %K!Yh~{]l.TgAvq0&wyo˥SL{RyzfQyoT{wLz~\~p?x{Vp?5l/_g#_Aӏz_Pg.9D:TEE#(UtDri{ܖ0,vA:x†oxms .ĻŢ2TZ +++b@Y]UgI +\.uw}:0`iɗ +9G}ok / +;Lkl꺀` +Sqw=b+d}ŶX`|˦U;0ަ`ܜX^q{c~dLW\YFv9T}r屄9OW@ZVP Co.2!LW Ĺ%% ܍;kIBPųd/ѷO(yL|nXc1 .EFA y'pmK}%5H*z9WDAWPClh-C5 C'c. +`x[>QL[(%VGFoxD/@q8|,/g$ȣiy}G<л#T(Xx=jJ-7BX7U{E~[cf`iRDī\`iUeƘX$Hyb) z7́llA NŷyI?1XN_qGt-bUO7eڮ1a?(i,uRa|&ck*d"_0POSMAX[FGw3#NThG0 b9G~,"`R_¢W-L5s B?(t{38nƏjAhG}DP$89;=Y$B+kSYhR$(3] hW¤}S@Ӣ¿䏝`/xL٩B&$r $l_k[!;L1. +3H5==6E_F +n*?TJJtЦ4(F(/¨oyx@؏d¤T;(NpMe3J,U1&W[&~=-rDDP: &L +}` ~),8q`O8n2q2{P-n+mKrimSo܀xF'mҜlv"(f C5EF(e)"̆xcH,7p/myB$B-usOgXq=f,F#{F/@VO k/q[cD'`'`5b1d؀CɆ,} `=>wI>ws4k`L(<p7+g΅ NC-vj @n@&%|^ξד79֬n2 ǯxUec%rȱup 19D:kPꀌΜ +-tuyӏmJOMޡNLhR`9 +Ja_g̟{gSP+)kx1' Hxtw/ß^z#滢TE BjKMvp3&22Ҝ0f'ɴ|$JK(`KU'hb8=Y L-e3;V%x +nѬd5mV˦A3%2$D$KǕC:!TJāTU ҂ĸo_6A@0x͔ pl5"|fq[-I>Ҭ{m_w,1K(Sjw7Nxx؎yHgDJ;":7uJrJlĿ 7¾#ϲ8˙x~Ζn $՛lb_=[=OQ,&{B3IP\ S=S &?{.İȘXgW)6e/az7ԣs4'(iFO6~esoIgg wrGG[$Uns[0AH Iy|1"1 +P;>_=< L,ǩ2e&mtPr&< +f]44?@PC,n]~i~왝 3+N ΀V^[idO@M˾FPc  ~r<@b)^D5w 4I"Qݎsۑ$u5Jm k5Ȱ!|- ++㐛? =EVrŴ/O8XGf7'5E Dh<"O֘"cm( pWmr43G',2z?daฏ5e=E ;K 4ȵ_#_x6ϲetC PFC :mV YG<Kr-2 +585RӁ\"Yn6 iMJv@bF;6&ZTY)F)rfdH!$,{Wnj0bвʞdG`RP^YIR+ <VF&PH>V$T%\Ug +̚Ճƃ"E~;MjzA@%%bZo^Zr4Hu:ӭ>M)pB{ˠg8iFuKxw1~z'UVqe-欓MZZ/zO>  +,:"r柉 o{Ѝ$Np *֊:.>^0ȯdI8-=3!;ro +/ 2V>S$o8c@?f:򺕋9m.ޣ4;p-%Q)$c$_uEPW76>gl23Ҍ7x'F"/P6i(}(1ցzvdGy%dP9&d^0İ140 z Lc+ +& Ydn`6`(ԜF7VqKz PkgLO>?}W"JŸ͢˜q66?ru?֗YT>2o)|~}C934lɏ(O," ѳEm^JM׀dIkaZPl84thfz'fӰ 㑢r(ڤ*Sz2$6[Y&hW[8 +MysEGؒbCe ^M%,P/~ 6\rhσ]pWы#9!<2QRǶn0yGR9zKo&,Gަ5 u; ]r6$h躗2!ɑI\QMog^ӋcD!G6M*g2\e\+y!V>u2tfIIyzW6D]~dpc'&T8<9Yי|U2o->z K=>ō@/B@5m\IbdiJ.}-ۋטAKy)Դl.ݛ)zD3%|M1QsOs.\SIׁ b-_6M3RGK6asUv:(PTh%½<},w/.& w<(aN/ TtA&!m:<>+JZ w]5i݆$_dGgpu‰_?K2Ceׂ 䥈%ɂ ?endstream +endobj +5688 0 obj << +/Type /Page +/Contents 5689 0 R +/Resources 5687 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5677 0 R +>> endobj +5690 0 obj << +/D [5688 0 R /XYZ 85.039 781.388 null] +>> endobj +5687 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F56 2898 0 R /F35 2888 0 R /F66 3248 0 R /F74 4582 0 R /F20 2873 0 R /F14 2903 0 R /F11 2906 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5693 0 obj << +/Length 4731 +/Filter /FlateDecode +>> +stream +x[o8_ae4-R'dwfs d.V_}jy%*U*R̃, gq$g+Z~|b%$W?DTg}? +B6u+:UU'w_zqO?x#P/\c_2ǫ緗|+o_^}$u2T)_r_^yOG+S/իWs]q[poMi%Mx=$$" .TNuNk|m,# 2l/E /:0VU^gJK_/r'+]]K[4QVpX4si;߱0H=֘iCmQ&JFP/Mx\Y2>( L1*J|P;]Jo5Tv-WAzz/Iھ|%?B{/[7|hbrն\ѽQ6EåboE6ڂF썆5$w'!bOIO-SD ,>bB2.8D:D4W*@f-!e2`]y%b$ɄYG&˪b3k)ЄR@;!tcYNl +#,dR0lKP4XvP9׻$wց0IbJyWƷ{L+7ȣdK(v`WrbJpZi%8̷4eKsՐ% 7놧mq55(_o 2`*n>4itĜES+e;r6ֽPe[KŽZ~~~$9EDa'zZFY &!Ǒ GD$/0K|Ff}رU:HPybd]c-5hTk yѨ*ѧ٩'Q!_sJsܬ +gY}.6W\|E& $!E +ȅÏW(K0NEa:ކ +iG^wΆoWx2m־nb U?c\)bm<q +d~ֵ^$gS!ȪJB%yrȠS3 Xl)f-jj:;7M\ڑ:|Ϩ8pE_%m7r~)etQT%@seWU,RiOD +lw&aJ@r9u֢fG>YD19A!f@ ND(/tzN)q&hAr#7ۺuܭ=tv Tc]Ki8f| +fcp+' tpQKݮ,T +H gbi2i-Gjyo-,@y&#E>aJɐOD]k1!H3&УuoDnN6$Zx^6*uܕcYhXZF ol]:F +s.2! 5vؙⱗHQ0xɉ)dv]g-u +RDA(69:ܺ~8[^8 Lc!r8!FHQ<0QkGRzJӅ=BI-)ǮyQ"s/lG V-x`3uTUxRme`3j4 + ]o+VL?#n}͑T7,""DZӖd})X +v+B+~m?À4e50v qAt$C-*7||IN YpDHqr)B]NUb|/-KF#y"]XVRTcٕ 3GVUQIШw h1@KLЭ3V)BU5OZv* t(ϹPcbɸ ZHo48% X+]~jB\ BOړs &$`G/I?\iaGݖwM(jxo8 wq?q/+t“vgysM&]QE,sfWJg=^>uS2=I-Dh/sd6TˣC_UQ>l*Ph(P!YR8^2^#A'2rH =8uEePiS;G+,Ĥ-#yF'%A3DSk=UR;⺬AY9?BE 6ҒM9:<7e%×~BV FRËqW*N,Z'$d܉&00O09ٝ!#PsBc_j@tBX"'HlXE-qz*\Jx-k.}]Wm.1k~Q}uC7ow2 #Հtcit~(M0*h_jz)TcQl\.MNF +dv.|isru.:ume\KĒ#0X6> ۩.ߖag"YOzq.zd[!ȮݏaJMoAC;諞7Si"H!$Q?xC0'kxhI~Oh~݈ߤ[9NSR*o&(p{Q1D +VQ."Yؑ1k#PInhS+xŖ3w[:7N`18v_$I`]Wc 6HpQޙӿ}(9!lȥBcV:D=__/qendstream +endobj +5692 0 obj << +/Type /Page +/Contents 5693 0 R +/Resources 5691 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5677 0 R +>> endobj +5694 0 obj << +/D [5692 0 R /XYZ 85.039 781.388 null] +>> endobj +5695 0 obj << +/D [5692 0 R /XYZ 85.039 679.769 null] +>> endobj +5696 0 obj << +/D [5692 0 R /XYZ 85.039 664.099 null] +>> endobj +5697 0 obj << +/D [5692 0 R /XYZ 85.039 650.55 null] +>> endobj +5698 0 obj << +/D [5692 0 R /XYZ 85.039 623.451 null] +>> endobj +5699 0 obj << +/D [5692 0 R /XYZ 85.039 609.902 null] +>> endobj +5700 0 obj << +/D [5692 0 R /XYZ 85.039 596.353 null] +>> endobj +5701 0 obj << +/D [5692 0 R /XYZ 85.039 582.804 null] +>> endobj +5702 0 obj << +/D [5692 0 R /XYZ 85.039 555.705 null] +>> endobj +5703 0 obj << +/D [5692 0 R /XYZ 85.039 544.277 null] +>> endobj +5704 0 obj << +/D [5692 0 R /XYZ 85.039 528.607 null] +>> endobj +5705 0 obj << +/D [5692 0 R /XYZ 85.039 501.508 null] +>> endobj +5706 0 obj << +/D [5692 0 R /XYZ 85.039 473.804 null] +>> endobj +5707 0 obj << +/D [5692 0 R /XYZ 85.039 446.706 null] +>> endobj +5708 0 obj << +/D [5692 0 R /XYZ 85.039 433.762 null] +>> endobj +5709 0 obj << +/D [5692 0 R /XYZ 85.039 420.213 null] +>> endobj +5691 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F66 3248 0 R /F35 2888 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5713 0 obj << +/Length 3357 +/Filter /FlateDecode +>> +stream +xڥZst&`͇VvDZVcyN H@@j )5g noooo]ʟyϟT2bUq<[.fb!$뻋7x~c\m.y '|Ew>7w7◆Axʹca+R7w Ub~/,#}*g>L.@Nh%ŇxNx9&VjH-J"ӤpAt2_ϹF&ڍ$AnJ&k~,tpZy{t7E[0o3y,RdJf_{xN슖 E]8 5Ѳ-| :#xA&,:s/xz/?t{VT*y%+*o/# h3x2,eL}W+7Rp^WǗq;l(8)><Mlf<[dVz!GA +ӝj$R]_%8CHՊds5iVJZ2U]S>cES=y {lA8gC8 ƛ t HKAGď<"GrflZ3gZUWod\rP&' +Z5] O)S%,TKON4j1$,45BA2K)TG㱠oPqȠtD#gU35Ix0 ]Z՚sX\>uSn| c;ϢWY>mM@塯7۴˽ +2L* l i/a Ҏ[ej"ky XʦdJ5bDS8oc t[ó1$HW8L/8(D5[TʐC\$(7p%N!̺ L&k '̡kOA4 -}&@Xb+`E`52xqnX2bU\V/E@! 'ⷊ&xJdzo# )!VuS<hόblֱ*̭G+*TP.z!ݗٓk10f Dn")@:4{:{~.框K]fB&Rrx p!ۯ"6ruai8@8O#Ss0?珔ea.ro{P2$I0кZfvtA=ݩs5 vL`G|xrLx\T~%=eI(;E ,9;l X, 7 i5OJ]NHT!MȜ&"s +[J&@Ggf:>0 + ;^@zJ:㔒FeCR +c]ȍe;a7d4IdUo{Z=ZrR t[^q\B#S /!h3$<=3E}&Bc hWD3FN>3^|M aphenr˓Asڢ+S|%UfóL9˚*cTjl^DŷØ֘+-@=NykD|޲DTqiȏTܓMQ +OtQ[f!jϯpRj MN96>,DcL)ȌZ/GzT-͉bFQ( ej6ٚj+6O[Sd (Mbl["x7J~ȎWkLMڷ}nlc/!k;`\H4ƴ<^,͉^&9x0^>*]w"e!ÄB}X\wDr*o> +=cp= +0h1bGCbuF @.>3t6=w3p^ ?wI8@9)~TM*E.yE"7JiPq :+A*C'R;\G.YXy߂d_)nը7 +9O +#d3sF{K!ƽ"P]0EepVWItɲGqm?xT +?顉|z Ю[n9?s6(!3m6(EJv_S8̸S*l#m31T9?IwDCRaL;+qǫ{Q;?\ad!?_Ǜ$0y%xMcc[<鏺cRx!gfE{3Ť d<7;B}R0H1#endstream +endobj +5712 0 obj << +/Type /Page +/Contents 5713 0 R +/Resources 5711 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5677 0 R +>> endobj +5714 0 obj << +/D [5712 0 R /XYZ 85.039 781.388 null] +>> endobj +1870 0 obj << +/D [5712 0 R /XYZ 85.039 288.115 null] +>> endobj +5715 0 obj << +/D [5712 0 R /XYZ 85.039 264.798 null] +>> endobj +5711 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F20 2873 0 R /F56 2898 0 R /F74 4582 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5718 0 obj << +/Length 513 +/Filter /FlateDecode +>> +stream +xڥSMo0 Whnit.,MSCЦAzAllc lS|$'NӌK!Spؓ:"?ALfK9CLi C<_W,RY[:.7Ū,VRt:n2'2UGK2=7U2m9+h'3ΐUB> endobj +5255 0 obj << +/Type /XObject +/Subtype /Image +/Width 780 +/Height 575 +/BitsPerComponent 8 +/ColorSpace [/Indexed /DeviceRGB 31 5724 0 R] +/Length 36251 +/Filter /FlateDecode +>> +stream +x]8 ;0_$ X{B I,ͳ-a .Xn . 6Xࡹ UB`"9܅? oxa!y;x`/GN>[0z <_C53kZMk^?H߸Zn6ભQ/ݳO\+m鵥ph8yQ׿0."Ηp%3`,d9g6[%N8 譏z z-N-WJz#;eX\m)Da&T"hӀ3Oc-5ϾXg&IJG K)adM!xOza +pBlC/D !΄W^ij^x&#[C6RE2H: I#PnTSa^|wgW,>0̕8 =2Z^YGņFPm}>@`<*z>؁O! -o2YT^rqeX_^0XxXm?Gʃ/^i:!7(E,dp/d;Xxđ<*ư|Ι,Dm;']"ϋO6yFmyOGz|lpn xV",\TDSFF /,/\đ\#Jy";6 i>ۡAe2đő9 ;@,8 + Ն )sZH*?^0i,}qG~ԐDQat5 ݤD6:It#Kq<ž Rk FG`!$i//lQ[v!9\,1悅zHB 1^T6RGdƑ+^&.X1#B.G`a.q$17XȸHm8MĂi4<‘$C6=p쪣W^ZgG +Y]c!ZPj*KlFk|}^Ȼ>7Qn{R㪢 p7HBX0(uw~TՌo=7"^Li/(oEyO_WX|Ѓ 9/hd c@X^ 27/-q"/Jh5B]liiP“h /d&2A_". 1B?9] +B և/sbzFZ<3Z9 }]@Pi|\brю9( Xߍkjv*ZXn ,Ym#^i]6-i`YeE1'ʋ/ v Dzo$aLJvl ӵB𕼐ZH \4)C^ȬABɁ\ Pm[s;Lq^#b 9=\_Xx+/|D+ﯰa6xq ۩"Ka`@!>Nau=gB,DPV ;h3|n0AN%Hb#J s m6Ort>ciPK0Xur'WԃGp8tSHsrhC:09WhOn\6[ϲw7Dl^,<Aup `!<=!C J8M,8 + jT,a %Iʇ,Z[,/S;lX!ИZ{?~VF\[{H <hFZ/GJU=5ĸV,WP]HUI܋#Q>ĂvxAKx Jaa +ܣ|M NTOjK:r/L*GЭflYgzZwc:ݥ,<eZ !>Y4H'ZgxaQq1U@KX`V6^hpXPj8N +1} NI>Œkf; ^nW-[fu| 2Xo,/;YI? + +~նvY0l7öRR80 :=(zdBUԴFxØ}2g6iAΔdng{{fͼ~u^pȭ"ͭ7.­_] ك*}ĵXpd*3#I@K>I8GR}[@k8Nk0r7|7)P9ߗcҬ5a=giߥqjWFCY=n'*I)s Xpo7ͯ^, [‚> JƿgwaXo%ՋW^a0,5+,YJW7XxMa + 7-h\Xu^p kw! QiHJ TAK_],h;4kH?bc᾿煕Xxʽ\Nw`׼r704őބecMxXF t91uE,h1 4bCnQYB=^–.jTyunOh ue@c굪kQB.PS>EV^Xmc^^tü7pG:0^BymXX&Ű uvɅ!̗zvRN>%_ލj3Fi}N.,<[b-ZԲ/ K`FbtRaB7TD\>CJanx!9:޸,(|z`.ͽ( zGBǸO}y:I}YU 爒7,)z'l( %PXhS]ҧ6#85xf/=CW۩5^gq fa9g*F:N[;^(\c! UNHNd+<]}&)@̕b[El +Õ>^'"Fp^r)ɂ] [DRP+n){y1Nړ;#w>*ZQ^5{ӯ#-z} /HfdLb)ӒUTOq&}j m^`7:M%b@,~pӆ ͖Xl@7’T| /jg=%McXx / TϕIU'Vŏpd/Hhut$FY97-3Qbҝ7mPALx m2JgzCic,Xe2lOVjrxBX`/H5/!g吭Xpe0xfn>.Q(_Ю W+=ͦw}'F,`\ +8=̍mFSXO}EGᅃ +xtc8Ҏ2> 48cH؅ d‘* y %E} Jx}`/Sk N + ^6 39Qu#Hg-Rp[C/>YW[c8)g/t$3^5Ea`"e +}Tjl> TL$B[ +%-R5̍t| + މPdJA'RkT T+:-X{#/aA[:S  rAsޗs}qz_*a6;Z|}Pz38Ν1/ D"̮6q/̕4.p;N­=wtd!o>E}~XJiz!7¦E}dUa>Zۺ3bWjYZY qk~68/,,M9Tadwo][5wy5گ-I0]Pnz,ˤ % #W=|aߊs0q?o&r??߿fw^-a,+Fw:oLwf]niKWXm)wW^c8^Ca O=}}KE\FQzo ~/][;na,yx<֝ ش곮XmAEUrs.i7ks ^1~0N' إ7yAw*9᪆@;Ro}ю <2%w)ơc$qӲ]½7IMvQy~{z,*o_4(fM8Mi^ca:yiQ$1pe-hoyI^X6Z% S8dgz@ytǓ(gj8X `WI!ՋQP +mۘhSw·ɖ^/tHc!4.kA %5Xl?*'̙ DwZF#4MчMc)n۱P,,l,}\,4]2oG2qL +5YQ*҃b`xđ#\Ix#(>Ն\S B C^>麙,˱'"SKL|(gnoG(*<;;s{Œg8tΊ 8`A.pn<~mOm@}j|]V &~P^?(X8EdԽ`yO5 (R, +7`aWM"`:G6 SyyKc1YxSg.ެ{DXѾdY$4|$R`Yyw%*Rf>X(E1bp."lXz(O%"uث۬5w\8yy-^Α ,EfImpJD]w8'Jp@<&HP<+šF"uS*AN8oZK$}BQ//^IJDŽ=a%bڀbg;,2-4`x % +G]x"'2 ic,4`!$Hzg//#an詖"Tav]kL /|ifhjfx̠ƽ8R ;! }9Kes n邅b!| pZgvj)`F2+,؎*U64brbYPD G2۪[v jwbkgdqd|3I ͪ1n|+yhl$ _)=5B?-b<-PB +!/!}>ӴD7b  3qG.|('],=";^RQ]Ğ"~rJd;[`Ay ej9X<-MםV^ lZ|%N{\"i _)-P;U;@/Pc&Ut$)O sGs|dx%T;#4x|g_p7hf_؈=  /|c^j5,/5-+CMXYVUUVf#ț_2HǶN:Sȃ]EWAI;/LaYPacU {wdxkŕlVa!!pT$0S=h,a~b#7,^jqg\a?qEQOKjxog]ҿS-CrSlx7X0`D /1`x# BRa $7ذ4*,ljUkKf `Ĉ#F1bĈ#F1bĈ#F1bĈ? t>]Yr+b|Drm\>Ⱦ﩯]Yo8:<'ε# #߇rO Fwϟq +32=zO{e'|0Iцlbw(qq|^@ZIJxC!svj8RTZ!̒a#Y/b^ƂOq# +PgH4`2O؂;p+T*35˦K,d^ӣMfLzH)G%W$3-mr0-{Y*V9&=VQ#FM)%\R UNA +dFZ2-cDXxB B4zை<ȥWDg3 _pNK1+,𸂟6ȨU2L/T~$oX"j}&-YU +nUPF<)b4t*|)|^͎(g>R^ȸh$"x!A>^@wGhߢ^8r\y3($O ],d;,pSEYw/%`!1v/@B/䵍d#[ ;)8t@?2r!K2}zil`4c`0I8@s[>FqF~v-i]ֵK2| /1X!@aB^H pYpBS`|<ZKj dYjHÌ),p8PF_a!"N y PK)Nm|R^aa3T§#aᜍ؎"DF@f9/xe`bAn| R  ) ޥӴ222/ lE*@qfWB&%XPӓ=lYI*mxOB/9iIW)YX`'Y~e5^3YgeƑcyIdyĐM_[Du1G"2^^ QKQh)A:,i8u5WgE/U`AKӄB#<|+pШ}@8e@ڳX #Gg4㾛 iYe giD}̾ WshU1\h S3;qX湓66A3w)!mnfrd.>lÕ3{r- 1r0 Q މ&6kjI]\ ++']x ƺUP?OH\mMO‹uGoy{(/(Icqnr~'|М0cs&݆ݠy|e?\2#Xm;'CRiO|d%O煹Jϧ.s=+n +Ra*_Jْ?ҩk f | akQy^B.5nF/(,Ɛ z!a*KG5fA;(`BrwLR<벮]mB#d(u$u"y{djmM/r/Ϻ6 FJ,i@iqiœD6 @p!c] K#&T0?-O8%VӔT3Vl$ F3Α.j> PgA9z ʕc'2̩}DX< fh/r^v,ÆmAbxȓ¥ Vx`O8ڢ)?ܟ /HE+֋Xpsi5`[/0 +,6s\b PRiBRain'FA7 \ܚ|THFK?{#*{ +@ )`G,sBM)zFyózl{Po"(N^*qf9Y +_98^080򂶧_HH#WH뉱`y C +wvsT.Jli.;J`^0COC-p'b!QBPa#i (x:$؏Â#/H1:~bc`8QG 8iۻ͝^0Cy Y +%Out})E,Ps]t/r F O%Ub Y8w} }sɩ +^0rY;^H.Pkˈ7Fjhgj,@"ޟ; /y,>D_Xmc-G-DB-Jl#+F MhL@ Y@;'m;c:3nk^02/VSR-;8s6W ֱ{,65J޳#ΏdM־ܦ8XR$-H%]K\Op FG\QεZ%y|^0.X(VcՃ'ǥ| + +|Y(V$^0 6>3`ۉᲶ", FSbexl$v<\^0)@|ʧj{> Et`; {FQM}+F5O%Ǎ bxҵ< X`M9WFFFO'B SvH§.X\$|g,|u2jϽe#,Ԉ+\ݱD[L}myQ^6LfRG F~4/(,8ƪeŽH5_ sN&IY+`=l{Vʈ€:z1ǃ#Bo=)%&% Q=^|q2h# +ϛؾ^hxF~(2S25 Yҩ|gG2X0;xIHVДc[s|_ y  F~/ؠn/[յMB$`k /]`I Xζ9!/\Q`)u^iSi5Lr;7X0+x!0H <A.T3!T; +Zd_ʾSѦa +y9= /D1xP,)S=;\2uP`R'$"J"}yAbF?i)_ FBe`§ ᑼ0pQ-n(:`s#?RݹNܙ#; ڽ;^n`g tC6 F_'5N~ώ/ŒIu;e=K /`AHRP& +w, ?{f|U,Op |pc"N"L)eҤqK3\-4>b<;sEtrԈ? +ߊ=aW$q,EheŁlql24jWbw: ,x֋;6bfAԧNڪ M6Hx$m[eOQ2ԲiJb+&x–~sfxQ0ͪwt ~&9GX(DYK W4Fz?.3(z\p(T" +HV?_`[ +(dYӕ0/%.~a}KZ92 %e=B5ihJ xO3Ūxxe#т;3kppvfM5ˋUY郯(L| Y,,|9/(,x,Lu,T}{/{,MR2`1Bȴ+Q~+mֽ'=Z[E z84"X; +Erd+/\ő+Ը:l%mo%1|v5>ᕍDQN/K]mv fp pI>* ?,+3ppnKč?+/\őftbDSt#3VcxX{-E\ El&}z%z`? _Hq$ysBx 8sO!sIy9إ//4/XO<28ǂү$ͳXXVm}nN0 YZ;]}E/} +f{T 3pC~PUzDa.{zm^GaY.1Xq30BDTbav[X-W~ _QJm}Dár@+x/< wB64 +(ЊM`, o&_4z ?VO3` 坼0ʋH:"z!Kg߄ya.ify!~n#m _ꡈ+%%U5B5u8]0lv/Z˗n:7^y!v vUog֤V=S1ʶ&WmVO]m_(Ibv{{6\amh`fnrl:BdeHu6x.mQFퟒ# +/pI׽di "zj +Mx]R$7}qR#l-iwM^}񊇺^N`րׅsMlö7. ,CS^_ nw`^[9^g57{s{G޵&K볁~+kYz#%i) hGHjǾqlJǮHCہA bV 1IzVIeHa^P`w6s-5'f5oXb!ׁS$`^z27wX6'\jIVns`)Dz\ +If^ {D21+ Nb$h=5; tj=͘ilBwG ΰ赕6F?cAg]de5;F(8UΪ&Q1/І!{f~X'B,tl χ3,B?q :+;ٽS&&$jBRf;X:Lem/~R~7ݽESxng + ;k//< z=h +oB(|(,0g Hc< /Ns/}ʫ_&{ 2{pp3ýj:G46s /h^d˿\X2*XT.n)>}:%?|Iy Ք"czO83ujXu]S9~ji~x&*ox0{0{pŊX^‚*JՎ7ûH>Z)XCm+vͺg7h. V|c-OTz]ze2 W9G`F} O)ԽS}X CuKE(&o&,;?𴏦3K{Ī;pTBG\`y wF^(9Y2 +)4#,1VPSj+0Gg{W + ^.BZ;kz41.Bb;.>HÓD?/|/a&T |鄼 (anYG=)*切`H΃vվS}8Q5;zpw^ 'hު  d!nVN^x OXxn޴+Rg3HNV1\}o*NՑ BSv"MǑʷ;| OC{wx᨜*]/Fqr)qKMkZShmof,\pyUv“`cSwx$IcKwnb7U1^XKqDZk],lvfcc|JսDm3:no]-y1Ӱ\4)qS=&~{]ۻpa;k@Ұ{ba7b!|#/8- ѸxGzM~OUwOKp{5[_0PA4CXx8/l2[\;5BaDz/c,X_x ڠԒOKX3G]j6 ڼ 8^; w>᭼cxựЬ"Wa=M0$Z[:T[^`0^EQessk_/ ѹN=˗)9;Tomi銅{|/\(^,w7:kKz VQB8Û~x(/<FOQxast Km|"T l y]zf1~= ⅗NVv.;^H[ocUfs;V|]Y_N$ҳCL|)Om4Bz*RTO,j>N#< ӢӾAv聾uV~>R 2` +:!5y^M) vV% pAO'u\6YٸuLqgJF< zܳJ ֫òѾ]^e^Ru$뤵U|=v^ˀmRQs99$./d2׽pA'= ;yރS]%Hi͉nRrs5²:}ENr(was u;ϱCLK4u@{w;.jK53GhZ],hu },sLw;R~emm}/u}^a ~47d;.r.$Ut `jn*,oB^a WS^358]BOf$t͸~_`W*4/8g"P/ XM4ЃH$׋7x7nAA[ϧ!}Gacν.٤+\$/C{'/\|x[q3%"E 4X Q[],$ C/gzSa:K_`t!$t®\]ܹiW꩖w(W'm3ehi 8.ѻkԳN> Xŷ՘fK)#w)%ܞn ihX}Kb+|N'ZUsȝuyxdmЇs$34Ai^dYMS[R`<6H*!}e˜{Q]KkY^ >U۩.E/_RQ7uue_(tXx//`^ym^♶;2v"`>r):I봗k6+9LuApueML3 4 8WeZ-͠vMW}:7rktuz4MoSy|Wܹ秄_x>,Lvlifq=,6KM6Lzd?bմmr5Ok؛FH0nrRg[7|k[@d9`?`!N8w}mYwMXF4pwpI:JWtT;GXx6elsoA]Hѵ'Nw['WSy ll@6i6p6cytU*düU'Ds;5k}'R}Z^`bJ|ogW GQ/g{k,|F[I``y!t +EOB;a݄XҟHv;rY\ ٜ &Q'lf/N,Y + +ʈa**H(^HϓK/Ծoq?;<^o +_9a`x)y^b^+*dG85Ie6$,2* ")E]^rHN̖E3X2,L_ rj4UN%h1.Kh~A GqVXt³@Q\}SxYcsA4zC >c`lqYo;hZ$_Y|p>(_ex9[釸xYwVQ ܮ?b`H/KsR=Fp5aY򂽼 9bak { L-XɣNBצ /x Ƕk^+x;v!b3ʕ/{,a _`=`CaDŏ*>-‰\H DYmy^n/~}d`wđ"piY^=]0հX5x@K +"Y0\̶`/dwsvKd+.*p_l.9x~%.׳B˪TSmDб*lX`I2/. 麮o}3=Txn/K\kSJ'+QFc'wVt8i6*b}ol gz2X0L?/f]   0 :63~\ ^ъ+5X8:UL(*KoT,:wyNh </x2XD9=<_rtwR52".E3!|.[qCѻ$ ~} /lPQ9/t?rBFXȗQlDZ1iisWh1;,PgOC,Շ~?/}tP\u'9O5Iɥ"^ 9ӝ .ͺ[(/,|g{BD-0i|Z`r{ ~!m%ԁgǂ|Rhl|B?zZ,`{&sd=j[KMaَ\n\~Y<%K!Fj8V?Bd~>+Ծ>AmyZmHK,4D8X`!c'ɫ=/+w +,}jZ)3I 7,mn Ո=UߊwqyVGP+Ƌ3h^_T  [AXe|bKdbiρtD9qE! o!. /P$&.P/TWZe9 aٖkW+UWuS3,VlmvR>+uؾi!Se!< JtaZ_((c[.Ϸfup57eCv3:fwObg qАb)߹-9.jcez z)gA[qϥ ^٥x!kBO)Z#K'd4"W8j=J', YsEACGo-_uRh " -0Y*/2ib<|2LsJ9Gш#m +p۠V2a hC9bl/+a}2vNqX?֥_p-=.X H P_|$V(S2\ pX.O~œ[Q@N(;n~6Adi!4lwN2YqNx[Bݎ";#- LQDjvvG{_`k:ɧl@!RGomyUg`! ADb!V5>%9,s~FdIC5vU Π !m*0`v!<8ELŏjq$[Bn *mz^_TLP0[Œ}~2X:1Ȑp}whaZh/&·s|b.JEgB+ֈ! { #7a!\rl /<;>7m ފ|#V-8nL}'jNx Y2÷5R6w2X\ݓx6C`g# x/h,F /^ ,D瓑,4@rF*Ie7Fya`Ĉ#F /1rn`Ĉ#F`Ĉ16#1`;x6w{A䍿 `%Ɗe# 9~mxǰpucxȇ~د1b!ᅟ%.am~$]UsP Y gPiK&X4QJ/O~` P,8  F,p  2/"h‹R6[Fu ?񳿄gQU̓{x +E}t}Gs ǔzt+OOwW{m4Lj_2Psx:o9ҿŖ O[$ܱ4>{At# lΓSlH^|F ޗ"Bl`93rՔx3>+}D_ q|$ڏT*j:Ǭ-E06hDT{ᥟ"?W1Rr~R" +Pm8 H_6Yz\RKB@aĄ)>haR K\N^ʙ\avM/WdBI(l#셕R lӁF.3`KVUONԧHEl.VEI_ܽvG{8^ 2*~84!+\<i,n,̲BKfr W >c5nSP`"E;tl9EG){aYojIp@9ӭ:>'QO=̱ב:ɔKigڒ4Ep9*q3}o‚0D=Oat}'-V _B/qqan*k35`@oƷ^,\Xl[i}vn`:Z]xnO_W'`LܿDop fc #,%r︒I=,!tpg$ K;숅LXce B$p),0+7jDXUt$K9Ayl\(E]Ngb2[ΔJo96rg JGj #:0v& REa5.tp#@pUHbł *M:|rfI. +eb/D!:lXu=%[rJrR0텘$:L zR;U0KUuh E2&p"y\)v_(DOsa҉kg} $>A$1qtBK/Kf3H\M,G8TnEr` ! rae6QTX ++/ 87~\TC!R y4orΝ?\O:*k%WUAe,Ʀ ^n)h礞.(U6Y ˥C3&.<@iBU`4݆ M TgJpAr ;v;NLkӏ5 +ƿDn% ~zܫXT`1O/4E [^XXFN vH02gݮ;׻Sd'ַx.ٜ2V,,m&bLN[0)DGHT_xL[:namLv}U0Z\˪>U&s9{a`׿1O"~)Ò*,b#({5~`/›~6 \x͒-? ފn`O-a]Ͳ,}lz?``|7b?\0m5!оKkVц`!RO$Tlx. ,o͙q^sVe  jBAbB],/-|c?V߆"A B[0$lS2Q'D\D  PyFEQ)]"fm,'{}aAr5\I/Y/ <,h/D\ض͍\Q6  KFe3I B!ܧY#[*,T,JQBY_ k| ~z` + {,FP+]sYV,^\(95^`!1`Q TSKPY"0X0Xx + jeR!Jnt^[ `20&{f2 ] #1bEYlK0Ji`8+žC5Y(YZ1P+Xމ@Pg;(g5 B(眗eLHM]D*fKF,Ӑ`ì',,,Ԋ!}c&+$MyȨ`Kzwy`,P``g/΃8/~wEko3n.^{r%Tgp- +U=@b8ae~FO ϑ! ~m .^~}!&,,*PfA^=IUl*Ycf6.1_ \'>,"d䂡U`#?T mq# ``CO(}iMiS8_   ( +/os2e`ӱB 0ѵ,,p,h-fLy k7jlgUSRNp ØPQ{ێw"j\M&tJ /ݡsY-1Uq_v,fi(<`je'v([rwaJ`D@s p5YGm䂡=#-Ȅ-a!P fu9 T`8@QO  OͲ. ^x1 ;Aќ2P *&]t3ϱVXC#{>"˅ۢR-0Vbs Zͫg#`H> 1'Bt!%s؍:@Й-) +'8e# +ЫZe U?BAڍN|ku,d߀"|_ul7NS88WG 5{ayqG+qqbw9,X9YQB} 0XX(<M̶؋pOvϛX:(]k8c>|j"˭A2+1XX` +fH"PW vLKFTw4J -*~`/c!lU_/\ u?K ;&nKfw 0&ńn|Q.гjulׯ!~w>JB}[j& ? [xT18A.LY!w4Wj]?s,F,4on1 9{\XZMvTpG.,~`b!ӺA|[K=rA]u>1y/V=  ֺOn}~\jQk {c>u3ViAaNx`ŸwWDZ>*# 9щv[.0kĭz ww#X&;fKmEz&=a֬ڪ/R4FO,ibaՒS;c.MrO]9#)#n=rA.:*kk` +(EÜTZ4% QiMrx> \NL<0C،Ǹ':͔'5 >8 ^x5,U.|Ho ~ΏBVd/a[[j]F|uۜc^xZu?Vz>w;-E`\P@G#EXX!|;QȻͶ-CLF\_ǂz7{ XHV0 #abYΣ~!1Fǝ'~."n@ ,`>4NlիXYy#‚r}Tb*V1W + H2>wTmad~j? KZ?^[_3^5vűE{ߛl?}'vlEN>Ăʫkt6𿊅V|~-+,W|̩O=\ܔ +04ɬ]^Do՝6ZSX?,xwWoy8OF{A:S $]`re ++mhƊX% t๓ Sqsc,# +]I;?ğ=uhK"XkvAqd} 0*Q ML4+TMd ;ަJ+H6zO|*a4Xcjl^ raSTޒȨEIbḲTM| +wvCG69ºrpo**ccEvUNN;aObv`7c+X(֝+-[ AnN)׷pdKTMeX2e|frj,_ǂCwyΚKڜ9wb+[٬h̝[x[E?.rFߋm<ׅ~g~ NR]¢zB.|24#yѲƉX(4Xx+]ͳݏȣ7U*I,%"=,6{Ւ+S4~E;^up7`A'SEt'}{{} u(n8|ONSMƏB7;:% 䖕X8uRXhƛTx',|B7 7|I ָo<$\}(]ҾRXh)4 + U +ו^'KJ\F,l nJƝT Hs+XXo,C8bʎx#W?Q.X7HsV{/V텵soXH畯P8/-M._=Vki=e\|eJ_>Wt\nKRPq\ ߂$׭|hjWp +Z>MqF5?Tzl}tfimU3\SPaWI_!UjX`ᛰYX1 +]iK8uci۪m;ڒ.b#smՄ׻<qm{<`vށAէGKĶyݞX pc_]h fb/Jt ٳ'1c*ԻEk]&{ B'eԥL*QS\*գeNku8tZ x ;)a뫇UAѼ cXifWLWoBj5Rpr<ܶܓ}T/lORYU#w~}y5.iuMn׽]߄{m|ѸO΢cx l=- ˿!X@|MrAY47\ۭZ)/@O|NFx9|rh UtƪނMVu~+ sw]6'urS WB1x}!.DNoC-ce?oZ79y ؚݝ[_^ra +x9@Hoe2hD9"O i#CL߃tj(, g ~TpNꜨoִZ2YaNˤzcjT힮o~kt>4|^C/"5\ ڦgCrܫUMoł']XXMf-„O,pԑ,1.,ʀ>綢SsK顽~k//a!H~"I?A,mgKX0d{|K2_x. ~Uhذ_zׁαt"km`a\@,truZ[찐(C z/ " \zҙ0G,LsC vs'X`m +aLJ_@o^[ ed`aa})Px$WnC2EUS:}Cҩo3X03/`/QImdwY_-`O4X0Cim7C /`ҕOB`oёc`    f,pf`````aH`PU`_B.҇Bf`baes0?#嘧ƺo2  X,= ,X(T}f`Oc!UՎxsC K+`ПBIjCg,R (Eү  ],KFAYC,_(lmn˒:Ff;œFՒFUs{EwJ+ jmd ^@HO +5]2am+=Դ3eKA`o^/u)4֛KU]^.K,|;,-#{AT}RXuEU. m *qWQ k\m9Y}īg`ͅPN.̋ *ďdo<9x\`,񙬶I~A,tĦކ{ m/A+v '&`j^z@ꀰbAPrÂЏތcB pI`}zM1_L;G6XHb;`q<,&-I3s+" +أ>ɅZXhAޏN|S>(0'vk2!y`+3b!<]0(\@ fDVpC\vhӰQ\T+maW;pPA +-Q_ @]*t0iyP'dpпÂ+kPC|7,zs[ X h^.T1#);eU|z :h&DS@K&XHPK̗AL٠`d d8hjVU=-HbV 1uN" &Rɀ-9H03Hc. Yr<T%#HI MG>N*Ex|Ʌ $jDY {(G*-K)I'w~ +G,hvwXl~t(7%8g6"V9"9<Jij>Ph;S㰌-:Q P`ePMA,$1mkZϕJV9 Hwiva_E5^<;l8ţ6Kbx.N}(S! PK S9xqG$sGȐQ)ekpS"B4JP$$%u:jaCR8bά, jD~%\ϴ/ C1(-9BlCX8u J3XJnxSŷ?/?5`hU*Zon~q2&G=QWcpSN|xrrlj5*tV ֑s5NU#d蹊LKZ2bNQc諛E$0R^WO5Fv&X( o,F¦AZ=tJts@LHו,|u7~ϲAA *>aXxUu{nh^ j%&YخDPժ7=|] ߵLZ BSE `AP9WP.$,8E>;s6ŔD&(wQ_>WX;ę qhK, k,֣Z-ɅT̸ؤנ Oapw>b! .pw,}+GZܣ0Ŧ$O d/AAzmH‘=&횢@EI:赚E#Mb ,X`^\fMW&%7й bh/؍Nդ XxMS_V,2X ۳?$K !E2ӐEe ( +~ 7*iz3kRZܯϙy'\OJz q4[?ۗ:S:(2 JL:oPRv'd/ [w:i,)z Fd鍞VFX.RKW +rCNQakޚ߉F",fD5V@/Yr8&2Яzh)((9 X.&˨ + Z,\@CCbz-TJb5[)aX0 ް@1aP+PXTW>f ~5EU#˅ Md"l(3{ ^(veegEghZ{o!Sp-uƟ倍,,N\#X0 ,2d`endstream +endobj +5724 0 obj << +/Length 107 +/Filter /FlateDecode +>> +stream +x`•fff:::GGGVVV}}}&&&阘䃃rrr> endobj +5720 0 obj << +/D [5717 0 R /XYZ 85.039 728.299 null] +>> endobj +5721 0 obj << +/D [5717 0 R /XYZ 85.039 728.299 null] +>> endobj +5722 0 obj << +/D [5717 0 R /XYZ 230.943 101.64 null] +>> endobj +5716 0 obj << +/Font << /F64 3118 0 R /F75 5167 0 R /F56 2898 0 R /F15 2884 0 R >> +/XObject << /Im13 5255 0 R >> +/ProcSet [ /PDF /Text /ImageC /ImageI ] +>> endobj +5727 0 obj << +/Length 515 +/Filter /FlateDecode +>> +stream +xڥSMo0 Wḧ>wK?ҥ4qOmAeM3;] +H>RO($(IA8@ދ.║kF^S3E&V dKǀ6$x^\/R ~aN鬘nN!_dҢ"Mg-zPlW.=hzU50~!7q5F)PIϐHg&endstream +endobj +5726 0 obj << +/Type /Page +/Contents 5727 0 R +/Resources 5725 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5723 0 R +>> endobj +5266 0 obj << +/Type /XObject +/Subtype /Image +/Width 780 +/Height 369 +/BitsPerComponent 8 +/ColorSpace [/Indexed /DeviceRGB 31 5732 0 R] +/Length 24902 +/Filter /FlateDecode +>> +stream +x]b: ea3l d6I}ﶥ dIbP2ǍPJjv[8_B2x[ٌ`!7v[nֶoX6^6^6^6^6^6^6^6^6^6^6^6^6^6^>O{sk'bv*'ۏI1z߇ o?{+:[[VOs"[:=A9h=~##xe9U{tYg38&/MlIήNDIvmkFٷl', RJ뒴 84_cazg"ڰM@vDc\ ΍X!9ByG%Y 6xKK7,|/Vn`:/&:0Q(s@&x݁8:XH'6<Æ0mY2luvbX ^ґ]4{!]d8Aco=j܎Yz +57,|/a2N]G %tņaaxn+?/F/JiNx*1YU2)CI8߄d'`;oB>lƹ b(tpi˷ \0(3QL4QQyZM szūe4hHp^ͳ3?2r ^Z:Q4$Gy?2` ~l}x̎/#ӟoǁ~)&QIc,2{7~&/L vrǜ?Ү=ϱ|mY^@ETGY}D)T絛cxgŸljL#SXp)j2aaIxaߘ#XXk}aޱKdZCp q?,^@a\o(tEU6 1@ "sIXh#|iqDe?')Չ|iYZmsya)p`ǐl{`\ {,i%:)7`Tv +d>i:]R$i}p@Ca"<{}9Ld+nH02|LB<CUyx$2-}di61o#y޲gTqM;9Hbkԥ:,/j߫ug30EM3GMcK*txܼHOsWq^a䀲#2̧wb\Yd'"w\o8t#J0G"WxImt8챐;:H̏7'ғyatwwj]Bl0=?/3MT"7Ä69Iɥzxo" N 4/߷A zʌU0ba8l?R Msuk2/~ܓ O=6L+%X8<ٱf_߲GY7*k3?y,Iw-rw@}gmeWʀ{c&}ɾ)/reo6HFgѼx~5`c:NVxĊN89)鏞 rD2J)/Lr:ۏ1NX vOnlpV}[tKyH~Zs_'GÚ+ l59VpeEf3\xB3aS`TuϐK1A&no_h%:>g_ƚILnǞ*ѭ41LbgA ̼ >> /Ld5bcBlqyyQ<ґΒee27~aB;$=6& ,j¨D1.Um +|fJwa)J\#y!ΒKˬY ^hmu0#H7(v49rR2r`rQb@9 ׍ϥW9sNޝzD /ΨmÔo7%ދWr&,Zt^4SG`%J ~W _~tiW<@  .{}9.Si"FHn̹7QX@G DŽHvǫh1$Msnsq}aBwJ6,vS^ɹ+Gٰ>^ţ\ߵŅG&7B#MJŽwR~vC5,ppW%G,VIs|{o4cFL:M]# +J}SR&aB u_:_`aGtN<| ?X2lUЉ3qH2~ul~7O;/)|'# x13ŽL YW?^1]fKim|lQs0ȏe]a}0yfZ'5n0 sgOF鲎X}ɾq`E^¾ƴ9%,8jmcV`,raƈsQ-|Dip{xa8'QpƨM[-Gov´y/@>XWZFVcj/k wM$w8!Load"2b#?iH:\K i$N^zsqiIy Ӓjrf&.1bo0<9^~^8c]y$0Us)~v;ws޸2dLlpgX"cj֜)~56?[yak7<7-LVK`TS;q* Ԝ?q` 9z+oK kf]!9=|Iٹ3V`Q7wyfy$Ư5{+Ur>6%Twa]E!5-uvءCENXpQ@R充>ǥڤ}{TM!N<*0tB, 3/& ¾4)*@rCaoi>/'|M>۰z^Pn].ғ +ʼWogvBճW7}^5O + Js \`)zT^ ՉqQa^vdQGi»x;O.fɗrIp1ۣu£tesܒ3qoqAx_w\Od]*@>):  >s>UEdw wvNT=ºr& E*s w2b<} t5%^.Ӟ]t۰z^!UQj#_.Pჹ'4-Q{2']Lƒ^]Ǭ ع.[$/J7 &'<2v|yApnYIcU27^x/(1AW wפ\EKy6ۺ&"!j%AfŷJt)LU=kƙLHz~.Va.(ׅmiOZsH'K;ڻ0S; ZB  [*8O\(i ]@%o@Ƹ2,_ M+}>Ss=S]WUDOK[{/AlD/4wOw-oܷ˧^*tN^6^6^6^6^6^6^ذ6,lm [ [ [ [ [ [ [ [ [ [ on{kㅿ9cAv;+I;\%r/^+$x/6lUI¸]Cuk;L[K@!L8iVI7A*̌,nz'ͅO 52AJ![ -1^heiL cÅF^dk&YE#yyWcEk, @4nÝ;CHĂgSȴ},19K>9<m%?i6wM+`5񭈼qqٍ7^fm+y^+=/H.GA5e eT(C0zlb(%LSZ=`!, PXolʠp=g.qim,T+*i)XX4"xathY{;bf+<j7%O|7 & u[/BxF9jOe`'d2=:xͅRm$#a>ׁg m(mJF10;;( TUVf2\]-9p[FF,h9 4@4E"r==XJ61OF:P‚E>bJaVVW ;AT)2)20< +2+[ e@\/-,8/$5̭dDJkbËDȟpAo<%*!%/M@$S<Ȳx" ؍X4hJ7a0ma^ +~h̛&ho'/XTi{*<%JHvQ#Ynv@7"$BxO5 +ь/5,=/1km/PcY[h`R20@ +f*B!qElqpR8' ,چ8OX00Ccՙ;F-/(Y`!8 ܟAR b34*MT`x5Χ1%<<mI 4H{PA yiٞ:LmױaӞC`h%p 1E@]c(A mXPhFჱABrm/AQ~"|Qz-AB{A;1+i01X Fs.fngeZq$`i^> ˏ#y!1@u,y&E|O(3l eLj/5=pnFppW"dJ@.s(>SmeU9h%T-dX=BC3 !+ᚹ;.G,P^Ġ8 g`C{ + IѰMK _R/"xAZj}=7AF,t3Pޏ+so^Cbt4"8(W^~{֑z +r4##n cxZ `90©eaK8TR_P1ZG^Ч +z,\ވeh/0\ ); />Lp]IrP (\QiB8&7c!(}ZvT4׾zDBYiFS0+bsĬz߷ʲ#J;)wAX`QkG>c6&e.quz:Ufde!xL0 |LeO oW)-x$%VT|8m[BO ;~ñ +݊{Fh"i;SWȫkm/|sPvhp]?3!xa/<} +,`Mq7&}<&O; uٟI@,9\klzc<5xt,Xc>;W?' ? +{>,|ㅯ&NF8A ~-RX}rCa  ;e +ޥ xզf{o+.wh?ޖ/IzFfu*/|; ޶*7&[ֶH6^6^6^6^6^6^k[/7^[ [ۘc.Űmmk[ֶmmk[ֶmmk[ث_IY'M{t4d)Arms4h"%[Zo\*@A\sҕ}7|9[Ǥ +O$`P\o Pɜ@Jgř̕C1Y!,ǽx3m|aӲ)YI!0tuAqc϶C1('ޫ>l9;ZwwOjdbA'>XxPKe2)s CX=!<8t"y񫱸|wj]* ë;Z)>YIX}ٖujQLruyB ^2>uN Hebnz?9{eF Z~(s|I$kR8R~3ɒ[㡶h;vL;8'cd8u7=!}F<7?zV@3Ă$~3ɖ⏭?= qUe^ys~EZr&ْwTӗ~3խ O3=D#|2{tugR5.,8VB|MخC~-,8ɏĂEMB4rօvCĤHj}zT$XR!\!h[9.|s0V5Fx4JDZlj8& D }pU7Ylt]g h+ڜ>H31]?s|x$Ud5ĴLD^ZGrh +{a|qD†CCcIw!uH2iJ dRaB.3k0? +p.H4e87xY +tT%p~Ă!X8~x#:Lov'ڼBkip `%xH6po?^L8@9̨HC^( M0 >n M_ꇨ?")#+CBTbNEp|u$S /K6Mxۂ&Pڒ,Q}tA-:R}P=C8,QKagrJG>C*S!&B\|&/`]DSxR+0 ZM5[xT!9`&pNZp^ 8$,4+cX`1JPt$Ċ1 ,bQ'(&jg`7Pq4t;Ƃ}Hy +k=4@~v14 Z(pPO;vu#99cl:JWW-A}V pbW0y 龏ERBYՠDvԿu10چ" To~l "|h]^ +,Z` )YGPC[cP耰^=4AP: +|(/ rvτЃڤi + ;`KFNj89loFS;~ƂŸh}ca"#ܶ 5V4^Qv X/G ׶ > PGM*$ /T`y';/BS$5S# ۏXPCؾB MP $0K QN=meapԧ@/87z(y@HjБlfΉ*Rij́r#)בSƅā‚1,ԑ=DHxJY?&rUe6V֡XR .e`hyTqnƩ ICaZq@zT*5waUw ^S0I!Ab񂲚qTd2\kCڔi^Gjխ _EYsCBPIquQވkr*м sn(rc>Awr)gPS_ָ + `U舣za`AqR(_ 9,ǘ\) *-Ġ8(|!,RE%|Y'$E :R 7w ҟz`Z$ݼ`2I;#Y+aN%'H*>=#i*+YcX͊^ nzDG`c^o9:~:y`TɨOvm/PloБ2xxht$TG_i/`LoqK=\C,"j} pL*0˲x/0L])Q^k;T#PHh Z;!/ 2-)/0y.K,hF;p1Q?RӎaP.visOc;2 QcaLldHw ١t.~ FɽůЃ)/y{2v>!+y3aeλBgc~1^hTz3hIȷaA+|=#jRz>T#kL} XН`/`6m'ϱrc,lwʇSҵ?[ ,M~an^^5ҙleUa|/2-ÁC7#r%Bb.-y4 ;!E]'h'l= +&e`P_ !.\2~> r8a7Pb*I]z2>$150~g`Xzn􋼎j1K0dhk?ڭA' W5me,xcoXx /lXxs`lX [6W]FD,3;\QBc!~| +j ^pXT, słu%sF{v8}2/`m,Xӧ;O5? >C]{`J\<ߺP{j~2/T]\ :ӱ`_ +v?ɸ˞ AavA\3Ɂ u|/a,y!s (+5;Šʴ3n΃R:V&C-ܬ IԡLXKZ&ƹFV^娾-^2(V՛h,m/x%/N´wqd Ne9>hHo]X:neԵy!HeaY¡z'g0m!Z* 4 H +yi u&EMX2^.f# xS.2&KD#C#sܹͺ &vBJm\]b0v <5Tb̙ah2z8 r20}bڴH&8!⍔mC%Ջ1C0S>B$}p2ǝ$ Rf#8 2S*\ nip <;R^鍈C̘Y #Xc5~x`u*cH=WB*?$%Tj= + TMlL텞aS`=\,Z_G +@=ܡdUG5:lyp:Wa,x&BLXLBzy; =ca°oY"RM6Aj9`aɢTaJ%N^H;^^h\Ҫ_25XO>P(Uo/`NLP`oaxn Btl/4rM,`&BΔl靳ս0߹׃"$ kba@l6 IõM`rzDB*—x>Rёp74ObWuj?`Am GӁ&@iw ]`5☳iܩ\`:5åLRziyLsx\z{XjU7TsЮfmZn gxEvXdf>>6Mv# H@WP ># +TKJעÂ0W8uL„r9_`zPqiA"/#"lOQ}#LI4,&:1b֬YtgANMOS^VyZBca`#:nN2`ZmTI KTWP tFX!lXdSH$2М;#XuB -q#ݘ5ݸ0i,#7M01pxu$%ZOJLtD)"Ga Ubs s.lV,Ԫ4Z3J# T-u,88C֓,Pyn~}2O)XfPI,]vZFUy& JGζ<I[I[u$tc25%  ^HF^f{Jn D6e"Y/p3gmIq\f I%\x΅ STXz^P&~GB\a.X>7Y +ۭ,YX^lwsPJQ(0q=z)N +f*^PuسjgXd/  &z5ѨUyЇ!ݼJQj74fDy]AªpS,UB^Kq-E7h9#n0`au *|R]_C ^pu +/-D{ cȄYB @j^欌'X,q(V޽ 7 ov|3t7ZvN٨gÍX@wz<թb4F)</7n|,MwUe ?Ҫ>|;~R_B=ó6h]7cQ5!VZ@xW|Zlx %6OW@u$a) 硤p7͒#= cX&G'czoݵP ֍X2X;>,x?V#=B7bjH> srއfwGۼnm_ »|gH(mt)|[kMuIP'G\rQE[2 wq p?FNml+o8OԹUC1Ws+xn2wT`ֿ|;VieN&o_+fӖb>KkaR>u/Y>CjkrzxZ-W6l}ZKE R$ֽ]pwkOsۧHxTח>gϻB 6gHmz.\GKi[ֶmmk[ֶmmk[ֶmmk[VxVު[o6o~3q;h=q ^|SIWs kMD_Zy90&cXX3R+ p0AL}0cmK6A +骏izE+1︥Ƈ8984wPk| +<韣=jمṃ㕋&/kNϋr\aV^gʋt f\fƤw8X!ȃf.sA>];򟱰Nb;o:ʊeއzO 8*)rÄ^P]= =tыX(C=S\-WB @kҴ}0Jڝe9{6`=N*xA2<<5BbzE U#mHI7S-ϴ/dí;R1 + .`txA>A[ NVPiP`_B9umF +udSK۸^()W@Z]yܨ^iAUA8F+lva!G= $_?:`ز.jx̒  LpiC5iG{6iq#Jսa@^3S U +Kb^$,x7WC`%)2G!xP8\G!bp9p0)Kn[J1\|f\`gNjs=+?)Wb5ֱwKV`2m>tz;R +"!/? T`[ݰ_ۍ~$# h=K^0`VD9u'a#&.NJ̼V ܮXtnq[Oǚ5cWa@页R[ 9v:ŨB[Vo Zd0i-*FXic-Z >I0E \1'( S}.#^6)cTnh޹]x֧)AonQ7ba8U‚tL͖v)cI. n*iƂ't΀l0 -tiս~(IG=/^݈[fKX htE^(n\2؝y! '"-F5/G?93b,}cM.4])I"M #;gZ0,LR#c¿A8 $wdܱ\E۫LYx6TëeBĖ9yp^(@ES UArO*gq#/vSI +0,F^N@a +A1qn w~|/Xv63y SJ]& ? :UR9$2U`%;uJt%:ќikB?0`J}e;c~usܘa}G+Juxay0o6C`x^8=},DtNlwlծ&? 3_Bq4pB[VH:q1.T5/Aе[T ֬.opw5q_?h/X;oi3`P+Skp1@̴?B12&s3 p1S#]4#y;H/OmF/i[xae5\jOg`a?|Tr{aGG\L(],\*L/,<v8:ܩtrOc1^ۏP(i[˘;DtՁtA#pѠsu YA5^8D[ݏZ(ܳUWN &H©*)UM`7 Cݳ? doa*ŰCP hDB}/18*B>XK׸R_#i,x3/*o__`wB5G#M%Ⱥu:Z /TPlNXqÞB?w!xc*I]*Ԋ|TГaZXHoBxm"Id:W$9JrldR)Q,ܮh]Od-z rsu$H&[ʃv;/T2ЬPp]803yL Zf"j8kN]$rs^p@E@akv"۟Z{w5<)BjoޑA%ӀDZUfyBKwJO:w^d̕q;*܉ +F ljua/Ouݧq8U8\vO#UtϓKX8vW,is 0.r^)D]9bT4ʷ@E#,TL2o&E}08)s=&Uۤf9JE=⸾^r !0 Y tͯ'z!F=! +a;䅽0tw/.bu}LZzi:\+qy;mbGJ#aeU.\"˙$>).崾0J A`PehLLGΏd;':DS(zF[ʏ4A7} fo^J;993Ê>Ķ/y=D %RɹZaA"@!:1YaХQgԖ'YwBEOjѥVxKƞipޥK^*"lr#=X\F2aޅg*b97,ʄ9p b +%CTu]x/nzWqY[QjolPM8HK1;+8q8,3޲P0bY[h_JE /}U-dO"xzW' $esx`=,qՏ{h/:}<%K}%({H' + +3 hW0Xe^ݑ&/ w_:X؁YJiAs~m?w/\#%oΔ@ʥSWxRCk,煢Ll_߽OŸ]_Htl@Zf3熁˼dwrHXm/L~Du]|^p:.bFkB6Ơ;k}y!쉓]y]n?nB./]|@e/GPkGxoG^N"TSMi[Wh2dPMJ5Vq=fU޼} =rq ߵ_^_Nޮ?Gr樷 EF9c)pu c E.gnYKg y g`Tq9i˰:ƭmwX؆abVݫ{U=j; +^oł'xR{x~YM%)ޓJ\<#a GǔR6+#>o?8>2X;k7RT$zl+߶l# cx(ܭ /|`K~1NozViHmA53ns7/,vԬt^=1[*S(Uj=ǘ (z&be{U8zhendstream +endobj +5732 0 obj << +/Length 107 +/Filter /FlateDecode +>> +stream +x`ۋIIIXXXº탃sss'''{{{iii999==endstream +endobj +5728 0 obj << +/D [5726 0 R /XYZ 85.039 781.388 null] +>> endobj +5729 0 obj << +/D [5726 0 R /XYZ 85.039 625.299 null] +>> endobj +5730 0 obj << +/D [5726 0 R /XYZ 85.039 625.299 null] +>> endobj +5731 0 obj << +/D [5726 0 R /XYZ 265.428 204.64 null] +>> endobj +5725 0 obj << +/Font << /F64 3118 0 R /F75 5167 0 R /F56 2898 0 R /F15 2884 0 R >> +/XObject << /Im14 5266 0 R >> +/ProcSet [ /PDF /Text /ImageC /ImageI ] +>> endobj +5735 0 obj << +/Length 524 +/Filter /FlateDecode +>> +stream +xڥSn0+xZsI.9i:@]QNi:-Y^9! + +O u#hrIunjRvr.l4F ^N} iQ=?_jQZs>%|1Uu ;1Eu^'K,jU4߲G)yL^&c@F]v۶J1#RЭ45p.#38)J.jI)vt|4Y%@5g&N21t.0S hALLܞɁ1ݿ#!XoŨ5m$=q@X= +(]]ST Qas1Y,_kٌ&l[g=@ >*0 9)-z9zy_Y^_0쭝;!b匛4n^o8,HK[F;RY8CBVo`!0V~6"^ui򨗥_ i1CgVqendstream +endobj +5734 0 obj << +/Type /Page +/Contents 5735 0 R +/Resources 5733 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5723 0 R +>> endobj +5290 0 obj << +/Type /XObject +/Subtype /Image +/Width 780 +/Height 546 +/BitsPerComponent 8 +/ColorSpace [/Indexed /DeviceRGB 31 5740 0 R] +/Length 38179 +/Filter /FlateDecode +>> +stream +x]b0 .,gootmD74i&I%Zg!l3aLڴolUVi۶30?hGLc8n3a <6a|v= +?fv3 +WχݣG(c<;/Y;=J8P*٣M>Ikb:jVꝖ3@KYKwXi ır[,XfG~PjPR0+y43ywB9ͣ?ˌKjϼ`a/f. +if> ѝva 0qt >J]w WQPٰp*uņ ye5_  b6,l&6^d :-soF60 nX[.ca/=^s&gŝ7^c Hd<!7]  b܏#}iY҇ [y8V58Otl FIP{GCztn (g;+d.E 6/lr]XML_;t~ A. +G͇3w,K^5b_6RcŖ@J׾ +5kn~:6^,bU\N*}5чvJzt?3`DO1F2q7^[] ߠKiJ6U^vvgyc g/77 ىu]Z%_tI5 Ο. I a TSQ5tV'K"[ aðl OɄkPvjƂ4-̔L8W3dh)ɸb嗳J., +:f(-c~ҋKT Y&g +L<΍ف>=]oFJa#|ww|b/#p? };@ 7|%ffcw3tMa,/gσ=jx+H|An,Jz(=_Ӵea)n=|kO WKØjI/^/FYv|>=a!+{.<>KMC/t{,jfW8M"^&$Q; kNq1PU5=x`c堾0JNMXB}Xp-VQj*%B;^P=`=.H^bl9XOV?c4ބEBǴuot& DVq.67%7-S,慯A{`yib*iOHB : `-xJP5<8iR Y@"0s +s5j, \g0$ Qp֕,L ;f |M C1;nh}?] +_eL=F=8`Q|$\G!='.7^x<:ӓ2 ={!L|ѣg;3 過L#/FL{P %ZؙNx_P5mbqB\Ui&K㐭E,[,$+t6tp(VXBWǾ_'uM$₝NprvNI܎>;;DZ,w,,2HjM < _af[29[%Wvߓ= +1Da~bnh-^ DgDY~[yv  Q\j;o?ϒ8 NvKfǝg2r;۔,IyӰ# .y8 mw~wCVѼ6lylS9V1y%:Ro:r+&,p<mㅍimxu /`> _GQ2KGiKgQ:nP 7@pN,<E<9怓Y|//]D -Ƥu,[A'p<xeoX83, tpa<ֳLad /xҍu-f}( /*6^G:Bi]rl "ㅙ̶ӸNAX;nv6pk%Ԣ gx aKX/l(/{_vp8byO e^8kl"&}1,i;¸]l ȥA"/ mhѭ.xe?%] ai.=’pWlk;Z'_-9c .Mw޵?^9SXƾL-C?x= +z + +-p ;/8 8Ʉ?3BAH:m5niJ. ]xa-/…6v?iP5N?y&!j}.#>/sp ϵ稙ڤ]3d`FbM͇vBrpiþ'7^X 7?1@fOMN99-c8:SQűqB}8NxIDCZ snE:bXua&-q gC2i]7 uP< &Ģ*:[OA<-vx{_X6eWM>MGxtXns>X۩%ʓx JT\ٚA1oGk9qܬibC&Y/hS,eWnb!*L3|[boyAss }mO8lx7Q"XPN2HܘmL1o=pݜ[%\,/[ښNj$DXuPibPJl|tզ`TX{PKYM|}M~E]b?`ݚxwϵ.gWS.V`A$=ǷPC7!^ |1,{̹,VJŢD5dw[%x(<<\i9;z #ߗd +ǫI_DQ(D{^U H!RWZ&^xb"w>xhYxDv?RϖFf>G!/'rf<~L2vK `K,HGtҳxuyAd B(>]h8HEFf]LvPU t#BuLmc Mv*2_UjKұL9zvL˭gW/ޙfTn&}?Tɖ<[v*;35Hț;lFTv?N]οAɡ?D^tkxaG׾T6^xHup,;TI))B teJ^GolX.,:lq-}&u/Hy|/ħ2) 7 a$].jmQ>?m?'FvN> Nѵ4r=K͢ 2?˦N=/avYةv߭QW8OD س{o{trG'+7-۰X;ΪN^gx.,)?|Lxf5A=F/߅aH'(^gxϗo/n,< j§Hy,/I^/lCU_^H(7,-^Gq<̏Èy'~8fq,Mc?(]j:nߜw~ _x᫒S +jiԶND ۶nkHx֝ mA`w잉VdSct ?FڰRR `!H@qƤO }E*l[w@fw/c+|aaㅥ(Dn㳾lQ$oOzAmb9i[aKoݚx& wnJJ%8o߿ivoBaoX[vI0qw`AB)C})n`"W`#}Z|uuٙ_5B`t ,$UKbD'#T-1) DUf^ :}m$"3OuCU;3qT`B +0mk d|Apf愶Bjj2g,{hk'EWMX beZ8usVBawv`|qSɑ^;,Ę|G`Aw/b!u*DfFx-,D<86-'*=c()|L ;5r[:$aY3׌ZVt+ws 3T ,1s1 jkh3ewS|~Fʑ硏 vc;c! <ŅnT4Mj[2Uk,0SUqc*mcpX)XETa|Z`i!UkcSa'0X@@^BAϱ7(V%jhЬϫ))nk^WT(e +sU{{UhnSt*e" =Puݕ 9Ec(U!`fʕ6y~|焸:\u&Vj^:.]0RϡZ" L̈R]7cq:E*R@_N4УS2A&薓)ħUOJteK΄tUrʼc[gwy26,* +E[% ,RR3M#tXF\ƢA-UG?}ecW|#g[,?.%`L,6iN&֜N1=Ck"?tu7n<(hCFaDa1\[żaqPIcVb2ῡ/vxsQߙPPp6[{^qOGHScƗ FgH/vg =ܶH>gG@߼@qQ2gZcEsHDM}#ڰaXxkaYzhWS#_!IrXx/BX[2!qgaa/ +oɨ#]$#%+& _`1z9OUSxa7BQxe?V)>p})ş-A̺< 7\;3>-Y^>k}/LVmA:o/x/I,m +T7FyMҶDEmAEw]Ru#WQul?jW۱&a OR!G#i28PUHldNj`J5//뜛68%MjBeΑxBŇ}6(;AX!j#1c][S +f':WN2u60 ۶=uJTŒ# /TrPU/;S228O`PJw|9ؗ%>?|^QGK}Ϻ&m a(YOscf.ۚFwm ""=my/ ]H`7{Vt2ʰr3F_HD!=lq>-E$W=Q^*+xYo;'om^x~<8]ziV^ao䅊]\aˉGl֬*Z Ӻv$($WQ,01U}x$_gȠM1?M2IiƦ9=t9ύ֍nbA_!6*c*UoYyww]Yا;E0%qQda0 +w膅M&ݹ#AS3$<t:y_%LoX)#zI3Yr3,XX9`A"ym$O_#x!}(s $YfXz,n^rC]u˾sẍ́g1kMY)2'_3Սn>T,VnKT F(y#n Zԝ& 2 +SymcE6Ky)vm8wQSi`:7rf: +¸Nط:+ú6Ά..AQ]eM?#Ӭ1\AX7*D 1 NXCr`*y5Oʼ_X A mIKGjӊrcQBZ"'uש(]u)RC:HҴA +X7cxpt:x'h= +ͦ*N[Ǥpܑa&WA)UZRk6(u!"SkRhGN/pզ+jTu!"_ ="}!gw&~!-L0<`ll$J 1&"YsEY'R%,2]+j%ifPQN'7oqp3/0d̢)9`ugk k汸n^zUH2/ 0N㩎H}L=kx,ِk  H fmg=F"5sjHSx"s&a':kS>։"iLvbx!2/suj1 f5?0,\Ϲ3P:L&B&f}S,$-pM_$<3C#%yDPzn"a: kG l2tI7XECEB[ǢB5au;'.ڞ$b,:j  3/,$\V`s,U +ǏBnΒ;!d;XYTS(/ &)䵈ͮka\6ݿƨ džB :XHUfF~DN`pCF5|: >fK'a`.kZ?0,Ų:q`?MIHo#'@jT,q,t .H.D*F7蔫>rFpZSpw` = V,wU8@-jkO8.!t)1B;TS Q Ȑ8NYs,0[_q߰^_ x_x5,3_ʱ4Fnv]L-xm֩ƳCMiu_6~nj4y9JH갴!,Ja8sGaNп $yf۫wmQj"nx!}d㔈 Ǭ%Y_}_ѺHnvw>"GЈU/ʩ6g`k)]*f +T04Ꜯ(:tW5:ݓt-s,t䮠EV(Rp+-R;X0co/< :Z37}. +ވ/`|7Y(AfC*!Ϟ̀:MHcMyaazytS3,_8ÂL J]Vk;W|m,/a]nǝmSIv!} Bf҃CZ:N.%VBl./i WK|+l!?h?I>8UڿYh&6߹/dХQbg?,%U0)Wa! 7,]7X!-Z?eWPOXpSC1 hXUkvy0 !E1T@!Wm [EvC56ŚkǑ +~(Jb2wǴVUk*+9]FZY*ej8CѺ 䢲{g`H:8o c[ju Q:h?ǻʒ+*]WCҤ{[qgJ7v +"W9MeTQb)q"esy2^z |8RǑ[wU +xt݁]Qu'1+`xj鼰}OBU(|-1* ;l +S`?{bD+Hy++ ,<$ߑK ecN>;QJ~R1%34Tv?= vw?FW`[~G|aUdPʝ}Q7}f] i\޽}_xl.&W*,^w)䩋6^SkTõ9=r[>ssS`(Pn4C/Z+l #q^FoBo]*ۘ_%ggT8Q*5T*4] ms?/ .=GWE<ܯaa_S+ K <3D J3 GǑn +ŸH/,~FAu +}_`b) + j\I/lr 7_p*n-+ޜvGHNoװ煹<X8J3Z߰z##ZUqgh+6v-i*$at$m' nO9 {y涧sҚ:q.-eXxc|tv_{rw_q/GXkV=rc-?& <,mJ,<3-ذ$A?mJ6)g&lXdt[aM6ٰINιvZjɆ%읱>%'˰s V=Jgn'k>ՆR&//\myt<|XxqgD3! /|/η0;ٰ&ɂ4-;?smXdㅷʰaa†M> &ZZ^Nɮ}, +iƆ+QCiQ$ +/DBUKaaDe,UJ6Xy!>[?T^^tc!_ذ&1SF]Ii'4˞ㅮ2#1o1KhegaX`oSݰ&Ot8վhERN/ G"]*"w *ro?@>PS(>V`4:( !(aeAj|]o9; +^$,HUu_@_`/\G DuN8aJ:Z9ʾ0(XwQs8q(~ 6y$u{@dnr?iLI;@ 8 SG./%)z=^BPz/ ;[~3oX/X@? fEʕqg[L,H`!)а +|w`soPaMyLuBvjdSpzXb!G oZ+ۈy9DT24r}dV 26҈5Mxz ϙ,qԒ ś~LoPuP +].rSR܍>ߕ VhON#Pkdөf3C<لF|m(gQ`4Q6^x8 yp8l2s^WUcHX`amY$*-{NY*h\O?Q.,6\vX8b; Ga!P4)BؒS Ρ>x!k0 ,oMj_3jOav鉉/{XN41jff`ٴoM@Ӯ;~Nu5HDtBms1(/ +c\GsdPWcs9׳X%j%^YM 4H' &-\WX [qNȇϓIFy JF!ƴ>_4{Qcw=F{>n`/,y\gNۿ J_OcIѓq[Ebv˗xaAm*//hC8)yИ L72-e4hxOh0``k`T^[Ұp?#XΆ2Nt_pZ$QB Y:-;O\^sx &Z7#6}kiz;?%DZOHz"'׋yc| Ob! ɞF5g]7XxǾ&#jkRI 6i5I:ޔx(&?M>PҜپ$ÐvLOH8[`9!l>f:`!h)Wx<`; 룞a6XPznҴ L{H2}k ME ¼ [~6Ib/'^i@s gx=Ho> 196Ѥ<\Ă51.cBv9y;Pf 9sϼjJs [fv9&^HMmp?_xo|=tIq(lu4%ʹ5Xs>,$nho5<I{ v4ZN1ixS ĜXxX097Sj5$~|!/ċ\ ̤E ҅6e7|4M t7"ӽٛ80mc>c! O}8/`ts4B¯?ʠ3}B{X|;nI"=vƺv(@R4ӰQyʗZ6#mc +Fb .,{YmiAz4c&\w_w<`E[EF$=G:#̐,򱼐}d Xx-/\qse2¨M@C9ʇ#oq5 qs)}p vD!a|/|f,+yLi::p_=u,,6l$ +GLC<Ջ7vS-wWiJ,0ߌ{6=ZFJ/Hvu;s"-I{?S0OsO[e:zk4p[kę9Ӕe9& SvI28›Ed͢!, gW"~44Ū{v.OXHDe,yi؏itxɵ1ՓIᩂ 6op3{E-47uj,:ˆə|kFe3n+<ĝwBv ,.e?_ĸ }\[.Umȳy4Dr5vkҜm*3N ]-u} 3-Y5"軙ɒMspv}d3wyR~++7b(y!x/fg!~ +m/`'ħ؍ĄhZyjSvw*ca=v t9?24FF<%n K2N55q qô˦15ͅ5丫Ѥvb.0( 0odM[`v E ps8l.츹.@$:,vu 7֚Q7o*L_ +瑦b@H3~\w^v-XIy2:کr37AXmb>[|;i7FK ffYxԝ5sr]11.@pʦ xi?UZ6iSZ]ApJ ?iirxm΁ɋ'7kzf +\v=ul]a$Z^mmaSɓbK3u{ƃ^jxw]Z)nfܪ%GF/Lf߅)nZU=VI [ +_<|ɮ>'.~2p}|q$\&?R |,Vŝ7x-@^nO}6Y b iߏ6=Sp/Qu=y?8)۱ G"4&0GL!ys84`/DP_lt|OcҌ9/Z3%!(ǎ1P9++_ux%:Vrat:+=%S~&+K/8,DwMSԾ722*iz^AI{dA;'+6x76#IJ05m"ܩ(4`e?)\H,/0,ȱkj"QR(Wc:61c63+[!YE>JM)ilrQl68re@E0#ں/9 +LQZ ]SQ<ij1Q)JEL Kwa53L"Aۅche4Y5u C[t-X .?'%eNGJJ F u56 Z;U m)@1DD]&U +E`/ȦE (ݵ'mDTjpTLU-fkbPspH%G+U8QK0} C1Y% +Gy)Nj.TDI lTN7k(hǪCU0. "#o`e%3Sp4%+ocz))JrWE垊"1my $|CI~~zTK`dļp 0k`tH'\HP8#38?~^'Wk{ C :Ix`ab8s ~kU P*ǥ Sn^i (.'`95Fi9O" xe˝4Y#%B )n{2%dT>tIxB!ۚysz8By.#\^)|ۈ}~ܙTރwtX>ьGO@B@@UIZRͼG(56sMHihJ1JN*lp^3TGȻxÌ1,9GBba,xh)'M @łYAL&Mc X_TUd1B֤z%eFڒ~>/<9:w~_yA߱ho`A=/ c xk|m%f+r;Oz:^ Ie˜0ʷc1S*V`{"LhG䘱?6~< $„HihReIQ%!}k*yGF/F o,NwXxГqM ][eti-wp^ն|[N[Ѫ65s-6<ᤝ"2n;|AaG'`PgWfD5vڮ_ 5! ^ab#`6W +obsRBm^ Ga!87X0wBm@e1Y_4J%{czDv!"Kk8w!8Ṧ^~:qjz1^{2^u.ǽLBH3٘캉lЌXcIt̬u2*,:b`V6הLpR1׶=/(e )fOjsTJ c/8 +l0m~g8m L/"q^=1ʚ,;_B_9u:^y Wr0}mztn 2#EaO)(/$ĉ6}zc0} +#F) &7o=Lh-e4%e+u7%B|+_3/[-g-B?F*/ǝe-ؓq}aaH},/:Ɇ >橵HwٰcឬG-6\,? aII7,lrW0lw'4wS@Y'w%@TTpC"oLbM_[ﾴQqÙe߹aoɏ_ ݘ @SxDؐj= vDh"u<_p1?&?e|annDx\>U]^(o*^5%$;֖ڛ,cqXp XhNF_*BּkZ%*(BsZQOё-g%瞖kłㅿNɪ <i98Ƒ'B2d`!(R ϴÂPM?ƄpÄ"aˀakl<sMk N~.# kw K‰!α6o  $ /4,/~Q!|̵ ˍ&:.~j40l;J;O6i NnH?ZMHhww:W٘= -8T+zUD\RU + <$W<uϘN{`Qdd\)9^SJJi5DZ\FM) ")%oj*Xhpd!Q3֋9[zֳx!s0 +(}bSZ"~ 6wԐAX8֠g\xOđ|c>;\#U~-b T ł RAUS`w,/\5V.އ_$뢩_&^~rZt#.:y!`;< C.x'_ Z]P`/o7;^V_>ҌX(9Ђ4;x;(89'F>ƱsxxU˛L,>:Z{Q@i|߹-:B=GEϰPƧy`9--, 2l,HRS on:ݫg\ NY9 b7J^ > W HXx6//r3,YBZ=3w::^8CUI]Y]Qf3o-uB_p dg̉çc xr g*z޶7c!R5 _ N>ͰQZ|dO A'xov_+c$)ށǼЧ$ C7'#  ̸ ;/U8,| ;˱+Gjln:df/J"i˱:7xqd|63/v(&o ͜ߐ4T1! aP&N^=kmGHd6üRZ3Ƞїwb8c XW / } h]vX:=HR[8||pIߋ_ UYy]#^/yP`B'p_3BΙY[˪a5Xg3Qڕ'[d9a*Ycw?FގZ+!#K|o˙ס0IJH{N2IʼnD^q2gQ;%kMߞIIQ@(` e:^z^^~q>,<-Y;rMgU?Ӄ,tpݥ `;| G,,̗Ύ_(,-RÂ\? n[ i~6F>T*owG"Njy#/dw] 98Rclp$1C:\‚rxIx:곾ޝqgqe ]^_mLU`/\'{% ̇ +`Ye?1f ~|ׇݪF+Hwp ˇx`ϲ5 +oxΞw{cb -u)~~ k~~n 缰|lX>`D0q.=$]b" yAR?;J26OXzG9> oeE5 YǢBTCyy~0^}uߴQ}e'(`o!^"vchA4b፼Ow:\FS6ܚoLzӘjzo0 AxAF~ N#K6>jR4mG䈓,\d5Ž:^qj.ڱOㅽTlHtrMxR4N^,cՍCPW}L܇gn<>?łŊWh -'ً,*8CSOuFygsL5Y{c^lR /ltތY,8w L v; +lݸo^i1wNIz{xM&ݙ9ml6G[hb;m0dV/Ի5 o$IRܭ ZIѷN95wbFa'%YyIۜw-`w{ؾw)nք6)-@1umu ϋ\`dz QdgbBB{=>^jcNyq_ya9ĂPj+ W6Nzvzt7l\={h(OK W-1=nYbac!=N`@i*E:ι*g7͓ {x=Ƣ ݯW +KljB]&[+2&\I2? Oϼ/x%?΃=Nc wv&ZIw~_f4MAyͦKc%lOy۳d$ܬWSAjo>|W.O˳I+ɘ~y~  [ضZ  Bv_Ƶ'8/?"WyCkw.z[5n ~//h}]/"޸b%I8,YOaAdz#sR%,3U3(_MﵰGE.IAcѕpi F R'n tJ*2rsZG +JF*cU-ŔADɻ{.{~:TNR=GTPhamn8ڷ/*E|hճW@/R,yOvZ;A E"bEyUѐԍorG(|[-i.Lb' 113h}A=bU' +[KI!&㶉as8:F ㋸Swzpr 3A c~'*9(1‹c[>ĄGơNL:ʶ4%R zza˜ MW@O<M%tCh$bMhގ5h@FZj, OQߛhtMtӓvW8j #M +c +~]xj]Xj 85) a&,Lo R +<tk=%.O:"9l_`c:sLrȋLS~m" ɘ!25^bV)>tTeX _p1K,|>.xeyaIbc LEM!DXm>N +W։?,t/+ՄBCsW("|p-J% }g: ]r\]'NO默>9Rֱow,t~knyacPTLm;+S3K;,)wFOTBoy8b4`ZK `!{ϧ\gd;k*k#% +~<6HD D?By^~/ e3,H=_G,sNzwz6pAE4HZJ 1i@q =OX(6>8f$Byڧp#E&p"68n0yއ`G2Ro1F'O<ˌ4up~s<6Qtw6K3px^"=8zi1v՝}Z L{OBz|NqOI3ZWmb:::@3'pt c|6ya12~OwOX@s^ok),R}hpOɳ )O [ϰJװoډöJ}W-+Xmx{*FAeB# Y^N70\B$/Lya/./ca?x/SZ]LW)ca\-umy^`k[6 FPCg~EU %V* +{?Labɺ;zQo?,z)zXlvϪ8Rڳazl=,[ݫ~mujwgawaw~y6,Dj ލ/| ˼XrP;yȼ~8ىÂÂ'  N8,8,8qXpXpnYqptvhOdf']bC vXpQ_Â=DÂפ5SM/8q'N47o'G3pdCv\:'N~HMGu8}WMg#9YB8qXpaߵ\]py2Zu,2<yZ;qױ ' F]uʼn?8,.a+wĉÂ' N;XhD_ׅjqDIKY,Ν`#\};y^[Ъ\IG&]x̍}B!F8UXQ !ix!rX/M̋$`dy u ەExcdp% +,3D  $hh~ # A A:X~ {ixC8p຤wEV x!uXXv`ydQeDeқX`a`8v,'CW!K\8\m,X17xg] .T&>kڤ,j.xAaW¨qV_4l=Yv io\f/-ㅟ)Qw'8ϿbaY͘-g^lSGwO0߅pZ29^wE}F8RlO,%g ˼ca=kst K,8^4i/i +UDiꢲH䇠]>MBiGZY?u_#)r9[ ~.gcX fmC/\y$8s_eKǛ#oYGTyݪNǝFGh8$R& łQ"p /&?3Z[֕X0 7`O PDBcP"7x!4!$׃N`78w9$7bxa)C 7/}MHf!`JOјK]h[1ίa! npX)qXЋd7l$ԯfx89BaFʰ}F NYu  (OV]Ia!z!InfE4-܅Wv&BO`\evNP>l󂥊 Oɣ&8Y7XH$uW3="l KV %͘1tK=36b^3/_3!`ֹg ca3]f>`^vJ+O$2ҕ. + +maHv XRJ4Euv•~yiگf-*xsTʟṪ.A_Ԁrxeߠ|jV^6L'yp9{yYO HC,FY(Xn.?e +&j (1"K1l$LuWk XԠ bDX4O4BlOz7 1OƨN|s){GbG)xt1 Ъ bN\f;Gk/>w&#X[9.O\1w‚ >hX+lx:{".=(8&n"*BD0R Un;BQYE,$8]Q>CsZ wpaYQa)=lfP6? b2w7SpŅKϖ؍;p[jBK=Lawo{ ƓaK{q(^5-G^9`,4TX#Oam¥\CVeQn5rn=^#qk /%Hi,gp S'SSΊRk`c$ Iu>B=BP`TYjW]kX`gJYwyeMƂWjDxaRI&8đHtH/~C^Cӳ؜w1M&}6jRT>c[̤5kKsКa47aANH ~݈CU2ueS3_Ϊocs~q|Gl.bN=^ +ymтd//Ck(ļ:ip/j>XG^؄QVzMMv xLnwK>SR 'FCnYwPܲ<h۵p9,v۔84 \Q˗MAtvi@cDCdOT< yy/k%?+X7s<DMV_ܦ\ +.DI4<;݃Zf͏XEr#[8BV\M.b>Pd^(,s!/uJ%g>~Gg naz9/y4f.<+K +370Ï5=2_]W,ghdcʴH0σY5/ct' *k6C{"_7q*LU%n}n7gb;l$-O ֺ.bbv4˼0(vMH(DU *S€;ؗpbf.D()DԔsRBVFhD:\I~m_ƂuHl_q2?Z%{ 6dFWku0B1DlE5sQJXBd:Nv@Ջ +7f f?YAiitX0:3Sc(T{(Ucn5_zV;3IP%|рau2 ΃L$Qe,4Nݾ2IJ7Yf_>*&-[Vmmubڶw:;- N`f'njmAp6AecP=r3a_ -ym2DTM*8X9T&6¤lO-/ 7#< +jiJ v[jû,˰b {J<"̄nmƝmyo(57^nN[-RW%v'.إImM\6drJn%O{3bS# +&MBW1X ܄N@kp*X0Cgf91zD,{,d ~1bA/XXX8LB<Vz7+kM`Dk;~֭˚zն* mAqlJZ{"ȓ0êg;7e/qi*8OIH {3KUq`,=j^avX^v:]a)tr/:łh -r_w^_dvM"##|P{=r}V6YnKm16b_2~}[7`j?h{myͰzl=q57П̞wQ<0FZ03B', +”؎8M +nJʗ%\jj[,h+FZ8A4Q`VJsG5e`Dk秳.LLW{FcQ".0XN!V{]xQ8`Aqz33u|2Z/?S XO) x\/ t(:S s<ۀis=]gAQ&vRm/Hfp:ì3.k'6'6e}*P-N2918SK?>I[9]{V8~vNzZԶ,8qEDaOÂ',ĉ=+civ##w|g#mw N aa NoX(G fiDEFJXȉ// 2Pqȼ7U|d\t;,| uałMŸԈahj{z=YѤw+lp4+nLjB Qrڽ:[ױ :pu9uD ƕVr+RjGq+ʹ=P@ez:J WXhLߓ)\~Mz=Jhj鐄ld+@0JL1G4bٿa!q+Mu= HUŘRHHhT֑ +OFV4xyc_/*Xh1#w85頃ǪԢmGy^=Ǿ'~nCי&>UǦgUA<Lj)sXA%S)I^6 N׎cCXT]=B,ߴ FKřf$KB8-`iXȣciڈ鿁J? ҆cvTWc_q1OD˅Xe7xgeuV;,BhȂ^ɲD9{,dLc^_:53 +qA*vHWhBjbLbxD.͋!v|\oWaFXS7PY+z7Rb3=b4PJ@)BY\h+pUqT#GEXˌcIQ9 vEYn8qx7x#S#i L٨6_f<k:.: p,"2 + Jh#Y^9{ C p_s=,I6sp2pUTu!B, WXiDxQu)ĺJ:ܾġ=?؂@bxK1UiLP=JENMx[ &k%UEZ9EF!S;p&y1;v"8?"SGL1 3& Cc.Mdzyۿ}L3ulJU5f'133Q T3ǿ¿/8qXpg#9qXpXpl$'ĂjwjWEwkSz">GvQ/fT/ Я>VL6R6ܙ +@ﱑO>V+;V? 6›}—dD߂A9,X(3/Bk7bAq8^rx=疇qH7BnH?9 +1 +""ٰ"/xR6C` +B{ +A11WJHN;_B'QLЯ-z1vTvQwu 9<_h3fMżGW"M:-{ hBS+*u1 B/P%EO"'J=5^MM1#/ Y}ÃSmbt oٶyjx1P%۸B %}S\BH;) eZ^);5d,pRAc:sF\T>':۪oGBdxiE,G\y 8BcƘpdXIg1! +S{|} qN=^ &=g=t@'Sgb|y)z/Xؙ:aE{4oئJ &Q\KSEReױ`W@QL܋/9L<]' rY2V_X;hO7vUa` +F :< +{mGiW. +egߊcaR;"B!\KyRۿ")etc>|(\`!ʐv8=p0<%>nvS>,8/P톯q%~4XG bɶYt~I%ET>O nj|ҡfUdD|7v; xڲ0tFk@]-O60 =x\Ͻ|$oû#y!,T>ȝO`D`쵀yaV_s7WyA=Q;}q1Ҵ|Zs(ba`-s,\;H tm$$`w +nI!0+ C!l|,߾KwlWbwyA|ǐ|(4y9b?`Z(Tgª>;D7Z絉}M-_]*? >+l"N"U#i!^PĽPMC& C%FBvRդ(&VSz vesj>l9 9@3(/Z`XEЉ}+ :*QmMM| ~yhr|yyRW%JLJl=-PŽb`FǾ3QƁAyPckR-H0L*pd&AU`MFH7X(& +UR+Mjy_P `>CO,1Mvl>2C{B893U +^hSX!r9S ۬% 92ae`¬s=w y ح..CtM׹"xIQ^FKMD z1 Sj DZ뷟 !Z<8ܜ}s++.>WHMR|[Z]AHW.c @wfi=㦓 - K)ofEVuT,Dߛ&b7B# LCzxF3O` q,_Y])#h#) B)-x0]wcm '~_Q,O }=@\ JBBl &/S-XpނXFG:ud};,8[ys `gyk _= ٗp iN al̃ڎꏽeDŽ_6f,ϵHi킹Fendstream +endobj +5740 0 obj << +/Length 107 +/Filter /FlateDecode +>> +stream +x`DDDwww555'''ê苋kkk]]]QQQcccz;endstream +endobj +5736 0 obj << +/D [5734 0 R /XYZ 85.039 781.388 null] +>> endobj +5737 0 obj << +/D [5734 0 R /XYZ 85.039 714.405 null] +>> endobj +5738 0 obj << +/D [5734 0 R /XYZ 85.039 714.405 null] +>> endobj +5739 0 obj << +/D [5734 0 R /XYZ 222.519 116.14 null] +>> endobj +5733 0 obj << +/Font << /F64 3118 0 R /F75 5167 0 R /F56 2898 0 R /F15 2884 0 R >> +/XObject << /Im15 5290 0 R >> +/ProcSet [ /PDF /Text /ImageC /ImageI ] +>> endobj +5743 0 obj << +/Length 511 +/Filter /FlateDecode +>> +stream +xڥSKO@W>xYn!&p (38n/Ȓ BT'H$OHț L&sg(T叾Ƣ(oٗiQS2˽tvSd^bXE ;!)b*#L:iӯB29/;f"ͷ^G2Q|V8M9NVüjl+mF +a85<G|ڬUVśT{+6> endobj +5315 0 obj << +/Type /XObject +/Subtype /Image +/Width 780 +/Height 299 +/BitsPerComponent 8 +/ColorSpace [/Indexed /DeviceRGB 31 5748 0 R] +/Length 22110 +/Filter /FlateDecode +>> +stream +x]b( >1+$M;mtt&q|$!Dgrw w{_Q7ag~6c }s$ l*cK,X.ZX^RIM l{ a7b>j^^{HOll煽켰^v^ya/;/켰v^ ;/Xya ;/켰c_^^mW^r΄e /Th<]ov*_ϸֹh /Tn~v,,&B/$h?|و!*m͢ +V5igxy0s8EPo0$/ٶGHeWs(OrD_Cyarڥ(T:)\5ޮ8OLuF @|Һ.7}85kytIP;X.wTV +ņ=  +"?(}̝=XG5TKP2&d4CY8zP36iXMXQ/R;=E 54>+Ur,n曀]qU`^ ZwP# ',vr~`SVIJ 4aZѥSW]WU`{D&XBI*H5hdYd"ߤA~۰`\8}x"&ZMe /: 7GHRXv$p44иƟ#B zu$PagTt#A# tsЪq8~ᙓ+b0q- 9ر"КMaa/bAn]vxb:e$ X7- ft[ k]HR; Cﰥ vV0Kd} :R@1|p6NԦ=/͐JƛϻRl6K{& [ +m7v^"eYN/rMGuh6ᜡd<;b3[5@lg+fx˹LC 7!(8bD{`᡼Fn)|ö e>9v(xt/2paۋ,v/: +aX9ap[`שۃ,`m$/^U 4v- O?=/pyXAZ,,P6HDdQ.H^tVijk_ /'XPJ6x rQO ?\v^ (5E =o/]ݑ* W6 Q5`65}3f`2[nv_xpb0bx0̑%rj29B}\.?:XٴG@ÙEfM)IOs1(+MU!ܶ )Ez"Y*i⨨w^K[;DݕK#v0SP-w7^y_(`=n}W^JPW.iG$_.Wn{3 Nb{1{55{J~ ȰR%UQKM,$q9gE#4㞼TEYVU 14%nL[:(rM5WV)DQ *y256,tm3X?켰{GƤ0Iuҹi7{nREν8&"̴Hкt[B:=pXy5ɀGpvX++B mʝSPdvS,J3L4;+ +BBJjFY_6*37y3u踶6ya/? )Xb\lT$%rÈqtrÎ#/ԝ->&=2aH#hTf-ya/? i,Gڒ0MsgRZ0CS 08ƩX q9l +8ܕPS Qx煽$/4 ,[pya/?  {9^)=7v_tHhJZ|1&L|A't\Y-upI';/9x!r3Fi(+C|:Fֵ80bt+Cz煽 /4`bl}D*mp| y/@ -Dlygx0(i8 +0=b$|Y< Q;/'%g`8 :Hiȇtڎy H_aA9" ~Q^aއ|9`ݲ^@#s7j'WXbq" D$L&SҺ8`{.+Е~VU4bDo4|49F8=bs^@OX !(8HmISQ {B IZ]w.Dv^TO?!Kľo/ѧA5|v8=K_ٸߛ04نeXXॅ4#5ށL(,, +XֽPj6lKg%f,Qƪ$b)o?shᐡ)LyC;.Ì#U|v7/˨>~mՇ3`G:޽A;ҊD3^X6[{!sz]9UJpl0-#!fZRR "覄t_~Ĝo]aSš:xcKUC, s(%?*3rfOo,)*؇؅a-|ÕI1U3EM`@StDtBC#WI˘JSEjX580*[ H{+sj煏 +"+ȹX$,2ak8h(ʌBOʕx.!5<MqD`PnY5sNE_Ƒ 2p!,۰,0٦ #%!U*P[>bY%:v;жv rD2? ?]ʗ>TwAɂFpXT~PnJdw,pЉlA&39^3`6;i3:),1.iݲa܆*dpg'?KOLR`ڠ#I~O ?$JeD J A]CzB>\ W ! 8MF=wtXFH0ćX- ԮHPº4!d QLFH:kLLGCuˊ(qxT CZ1), A, Ѕ /0,8.xȔrW kH^pq9DlS1F*vB٥e}/4L|$sTv47bfENI.G- 2jbc/':EOX8R,00i= /lX^E+ P#/ h£@11hB14(Z3|>@ +UxA9W*yT#*0,6ԯan|G`y +^tmJy1.oXX/x }mlH}HC Ēpei{B.Qԑ}v|F`Dyf঻/~o\⭻x|mOY B;X7,W92~eE#Ξ$Џ-V1HΜFxCi#bᚹo%52M + c T;hzph惎[Hp]"r;\ꀅI:b`I! 5̂,O %X]v"[P b06 z:q +C=mX@M+n%܅Uu.I;/|, +v8N_7(aMaC4Pov&MAsE9Isl*l `=bqYH,Q;/vkƠ !.(G幢 aa>/@{슦^[+`)}D+n W~F$$[i +̛ Ran$RfJFKn+?jU;lQ@U2/JLFd#ug8-+YA ꖐ{UD ,]wyE22LomaSuj@8 MΎBеUL({q|c>Zy.~zkms1F.]xAK"/ #/Lـf,E{as8s)e]p{!bVy8[py"`B63u^y%Nݐ䩘q d煽<d~OLSr>ʋJ)|/L~/x1rkB0h<7'|p>*[#H{yv^xsKotNs'Rٯyl ya/O 06ؿ0Ｐ _R\XB .;/ {ya煽켰^v^ya/;/켰v^ر ;v^ya ;/Xya ;/켰ca煟9UO_ ;/|/DN)Eڱ7BR?uaӎg}َrXya ;/ Ê8ٱ̒G;(Ie (L v,> 숅zرñ1F zEY?GQ[ {aqn2s?劦J]9¿` xUUEWg{\ZϮ2];y//< LJ J/<]^AJZ"Sbmv^x;xxaq,^h(B_? +%|照ㅻTw^+/y _| _d~ _#MX[H%l>䅺z\ly;/<%/[m}XҶ񽕲&Z dQ%4-xzP֡UZN#e&KbZE0qs^B5? @MTE7]nsP׀c'_ =҄^0^~Op 5x]x=zQWeJZ{!D +^gƕR}dKoc*:+ Y"Se 5bB a:xAp]+B0U\u]1 ̏$ +^Fԉ}JxL>lyAKrŧ2^Hݼ-C:'K[>,"E0V^o/4f 8j.o#I /'7[P(ɻ,`aA)6ÌZS.煆 T<4p|Rtx~3U]L3"dsdeP'jS*!YO +9]-2_rr &efG*<* +Z^GJUU9*aѹ7 Zu׿G!/A!~bHg[e:]G!TYi||. (2NU܄ڸSg5 +k2e/ㅲhDCWĵ-\AP`DJHп.K}7|QoI [}$,и' N vPp_pkTlʾ:/lp=o(I5m;ٻ1\r &By k&[,EN]RϬiZ- N vZDt-Q<Ҩ1,/`wŸ xaRMبoF>`AUA{aT0]Y5QX_ d~%sV휫"o %6Zw!/0t ^$RE= *5a3r^uPͫ,of^"bӕ%s^( 㑾^s-Kcg$ˈ5RP5 o;^ (q\ zhU`ѷ+ r3;0 Ш +~SpG(:1CT5+qyar1w++׼ vDAk]l/%‹oPl5=^]'=;]]y!>Cgq4͇rWY]*^(Ĩs _X|>ޯ3s+N$o:|HHZ ~&j Xp|[yϒN7I/!Aֈ)o:Ot/^ca79/(? =lXK֗url#lrX`!OYbď#e +* P@P'EJh?R Aq זn?x!a4$tc H,^VwBN"C^ӀOk]NgYc-#1;K$iԫ&%߹nt-OXM=MEJl|[cS/Zz^h + +r^g/م$R^({, G>C@7xr3Cc!R6xa%-5TU.UGRJk5#hP/QN+"^Qht30tfb 6aѵ6A]vf[y5f]?+塽d#ۛJEj׈ dDҫyխox +Xz31AGjmFV-{F8JT~ x S,{332t*dK.}>xyiڪN "rq3/Z$j{9GvSmN}u2ؙIg;bUk9l H{i <0 X) 3CquTiFOrgκ",u>HWjm¾"d1D7B! MqX .7׎ YcԺ0rNE/ pyõLćeGB5i۫ykH޵`!ޥan典RPfZfBiG‡Nw7xh}9,!R%r<U> +qMx^ |AT4k+j0b;㡫a|[}5/3\Ӻ +Vfg3WGJƢ1!C hHhцglv?,|֦␒eҩR<)84S kz0P-|#]nG8Y uwxп-ú0S(iQ/B*e#YyAeKrI_xS]v/!|%E➵T ̏);+_in}jLFUpT&LߑN^Pp臎{MVͥ@vmRV䅤:X^8s%mpuX0D5l'yDj;cpDq%cvB'JHƤF%e n"RQ/ p&^ O|3^6?aSȳ R#1 nxskEYejsS],Dxvp)A=.N{GļOH|9 e}/vRK˅w#N{CG0h{2db-A/,)02VX04<_ZёB~ ߘ 7{*kojpH> tOx /L Z`u!kk^~*Ϡ1n̒w}1Z@ o>)ѬWԣ3 L| ; +>iMCۙ\ /='e2RoZWa +*Ǝ7B,sTn.OfyhZMgt V`"Ok"<ÉCg5̕ XS ,MՈYY@nSi s=/`B %HMki xi>rkQYo#pB6* +pޞ$Yo5M$^Sm^(߆nJ~A)!dll t#DYkMgX!-0C9Fh b8BZ͕ɸ"pօ)KVh!2UyP7޹>Y 7mz-#d[+y!C׊!lNx3`b;`K7w P\ WYbx\f.g` +F7e @HGqIߘ7 m?Je~"y=/ em wrPB['c1^hY5B6C7РyhWNGrg+mPׄrfGl"M@f!EA(}&uaz FG y!#iZ#/1$G9j^[z0!RMZPTMD]$REB%r,t$"'/FNSJM :҈ XO c̬fLMA58fa\x +ςDZZ{ҡw@&㝏OZ^ %8GZje˂lD yRrZ> 6/be/\6PAfe v^8p!=¿DM[ƴ x!A#A^eu2DSR? LmfMYI/[ '4Y[|CE`^xI+B4: XJjӇ$Rrm;CQHI%1^ ncf h HM_! 섅 +ڹX$Tv*~La6Y2G:4U{pJ+,_# F:FN O;ĭЭ= @H[e}E81e[^XvY>/DaJJo*~6?H kR0-IsI?ҌAsS'%$^(mԘ:P?17"h{};h$s%!ۚӏm0a%B>@|5^X"…MOI"Uֿ =s=]$eO8?RXR{*>J@+ FC0jg`Ω~SZ1\Gj8ect2F <2njv3JeJ7ғƩ.=z_wa 8yY< ھG,L } +5'!#`̣J4~tԅGW }$)cXbՒRⱼLA)/,$N a1Y ~Ks*DUL=:@嵎+wNй b3ζ ԟ)=BFS=/Z-qRIK%3H%dE~μ#N.ڼQ2\0X^{^ |rZ8O('KWfkA=U*n$CaA-rthďB-1頞R\j4d)e=5ny=0J +F{ȪDkVw T#'EW}{0-(D7JPWxu([O<Ή!ع]>8e0S(2U]kG"F͘wbaA,L<f8 _ =.kҊ:|-|t5E$.Ҝr[5B/ #jUFcm6ߜblQuJq<3{Ԁ`AD8Sp ;c!A8iJ,R#詟KPV-He~y[UfnsU^PԥnD8ˈ3Q lbwEu¦-Mcye&W x[˔㴩 NRYػ:bA a;iS+57 ~j^ӡ^⤓)뜍'H%kC( ,Upۆ(j[ 0XS7:æBQ%Q@ pH:`{!@FKya<`&r@\`IXv8qX3Ke׼ԧez-e_]Wf~f^({.,dX/-J/Ye94(Q2EC/׺$~$s?wzpFHԳ;M]XΈ!/\zTQjn;kK|g?8ՖR#OSBCQ@ͫL2I-Oa!KӮ"Kd0aN-7xQw7w>`4a& ? 2RuԠQT/u{p㮵ј.AѰdU2tؓkqp'/x(z sb؀yoOܰ}fT.Hi1u⦚+Sr O5k5XN{<uZKur@Z,/ja*wY\lj[,AClA0} +QWVDZxaϳ}+.p +:m³i  +dK+~HQi (DO =LXE"W/p/7iU^t132? W}xA8fjyb^f}\FG:¶kT\`e0q@sJ^de\AixϺ."y }&) /XyB{!Gw\)\#Jxy y! 5H|X準"B#:k =[\K<4('M,BzB,sXM:@+yn@jAYs~TnَcQ:&l}k;]L8^\. b +@ `fs #ҍtˤ 5*!p $SdƉ:qИ*54Zἀ3T^'SP28 9ΜM6cF xY#l{4Ls6`2e]ErRg' $d.pl N[ګ ֻ`*;*ӆZ۰#GCG^y7[k 9 5mg +w-YjZfZ +eILG9Jz3,i#;WX}IBHA^X|e f5ad:,LNU:J>>^៶ u"WXG^V!!EoӠDF h1<8joO4O'tH,몪|:˭t351Te%%6u, >;CN(oLͿ %4А9Y-o5rQ ~ `ߘgo:_^G?ݖʧYįm)#Ox9mZ,4/80;IM[ 9X¶{YzO<_ۛq"ōcUU|dn17K~ D .ƖA>xTYvod[x1˱Rg{}T-' _ㅒYe$ԀR2"TPͥe9AG)&Cyxd/ĖRXke&G9 1,^(cLgpBL-0Λ\ࡩ~oCR3g&Fj~M6P,!RzDQJt4(Բs VTJٓ<\f.ʤw8Ϧ89Yb@;kk¤$qBb)#續eTE2,@@2 F\/os);rX%m"'Ĺ-^zvkǻGj0:>Ti[<%# +(S&\,[#E=<.~)yAm I8wji{`^P;/|:k]u "1$[2-v>%FO!GacsJ##&¤BRIFA^JPD,> :ljB/9?e^x7S1?n/l8D1 U"2qYz1şr&_goㅜ;gϸ!&H2 pLG✮s\T#1 %#VJv^x"^HgGJ؅6"4sUH83XR+Uͮ +vi}`)J D0bJ' i{@tg[Tv)*; `Һ (1a*W7r i.yFWxuBZI:\a=E`хݽ<v^OJǫc މ"Юg ~2,4o`AFg|AGz^};/)48sfW0#ZGa5a|hU#.`At k}'LI i>V*L;rJF\t`eJ)0Tq"G1MjėQ3E Gywƍ$ F1f} yy`:ę:ēQ${n O *K io/|ya_ypv{/p^YHXx*PҨ 5̛'`n 过k`t BK Ssv)()텔u/LY[^xyUsa rz/yaSG'{ұW'zXwy Ѱpx\N BrxUKOl̺¯t$U^9| uO:Ϡs"i-MZ}zL@Cq P7> CS+^x+ZgRb!nZ׾w<^~ND?xX^<6 !'ꝵ- Ѻ60AKXP<6ꀄk'p4? < !/R<g牛?q[o/F癓:ԗ0.a~^^xyĂy>$< eu]яt w\/WďlHđTlm{U?~b$~5S=zN$Q<4t ņUOqm? a: nqEkY~ƦLBE鱰n/\\bw +^0$"-/ ~^+y!;/P[''yAL5v{ +{C{e}mxSD֦ۼ՝جdf煝~i4GgKS/"(bַЖ$pL p@m8+\D}uP-b +Ӗ3,/GyDE9v^~/ʨ*"҉߀^y*W%}}#^ vdxuI {R^ȫKNg +Z0}ˍ)Ͳwd#ʢyM4wPC[& R 7mh/iy~9EWQgL܌`F;Od>K}ü?_mte}go(Mmn !6UjpmKTB)>k!*BH4ptIGY tki+g[*%{k(daTBϰp /4F;w{᝖T.z̬>r4bXxA%7uᒉ<Ti_8:TYEm6Onaр7E13Vd 7\(pnJ_ErX{XC8w2LX'GZx’YBM9* &=h2 NTx EX'(`]5 U'U0*pOc12C44,b"|y!si)ڶ)UA.L:˄1*x`b" e&¨%u?(y6>7#YS.*Evʵɀ (H Z1Q? ,'8z0 ACjaC%a>?k. Jm}%B2'癫x:AkߪTZR>/<D)Қ@" X."*^ hS,0)Iq"T =:/4x 0ƌ+lr'^BcwAd[PMvx!yE +n兲K&#b`%5wAD,$hnW X)54-Hg^e 6Ċ,h',p4mH dߍXAQCXxhĮ/> +!fS WU7}/Oѿ +u 9BX~/L4h6Ph_ @PK``^֚g,4 嚁b$皘 XIt$7f7^8n/kMm͉LsZ>Ph׸8踏Бp˯&>ٮ؋J~j5>UHF ,(8s5x4Xe`4N= l7G_]H&`ɖe09|V|H5/7&"%7 O>_6z [""|ozX,[5KEe=ֿ# YD}ܒ_m߾^IR`g^pt| /qSee-i҃DwOTn}-_%$\ON߽IϾ~ PTb^-Q$c oQ3&S~-V+/O,4T"/NΣfT]GJ9v.J_r5xlV & yG"IB5Ûi|%).,}~kˇ[^BjBW꺞FjJ Y..M].}BÚ ? %+RkzR-kR ZؚJ62u/cr6~!.ިy;x!"/zY0/e!\  +HցljY@ eriQHmJdE Åsx}d`0r^(k$iDu^eB\>d JS'xMq0"/wk +2$>MP9HY/h_ a^&2Ow]2H1,D6W+@,hf +R )\q1 Fٰ72aDEb(*_3{v=mezjj7PBuV\Xjpr47ƛҀ .jK,JIS3Ʌ 98_gw1XZ͒3dAD?GX^K{2.ą*R5PQm>ucׁ@CI0+q0-jc +H[EB:T#T~M`o(m~T7ze^ih.7z\(b~^ܪ~xޘqx}D`#(I}..Q\V~Tk [=Sr1iícT6ŢNTӘeRRE=[)JKde؜7 w'V-Vֆ7_u:+{8}>d44H8ЂX&`x[f檮Jv`@d&qUk2/2* +zxE-`T'QEF,4(-|Wg}yhXZ^]O].b\o~q|2$Ǡ2| +oP 7W`6jbgZRjTQ,[>95NI #Fԟ Ao\`Sjdns=#!:J Ѫ<؍Q0Et{%pP=Ro6>0uLK..%i+~G2 +\j\ ֙T 4P(vWvJZݔ5cF3[B&L}#cXp}PQZNU񼗃2JoO% T;JKe|."_lBIgYS#z: cJtc ^ٸWSHkPqu 38I˴@.f>k&+4c,1&[i))*eIB: Q =h8=N_px$9PzZ\ u n)"0F0?m^K^7 + r02ƛ5V"ڎG%Se@Ú6*gVtRiͅF-t'^Zhj'_l)`S/J7Ja G:[֠طu mS/#o]\_V >G+;$W9cPh_ #կeqVys,p-v tzq"e7 iE_kfa.LaQOJfrgZ(Ğ/> éjag-y/| +.;!evdyvZy30̑MLG/u.'BBqUGх/fe6ebd5|lW+0AR7F!:{My27paQמ7]EL)a]9\bӍab 6j-Zϫ8UE7SO \TՐc\$YTFϫ̅̅GPB5\ Ŷ)wX{6cL9m_C >.~Nl!DAnW`g=s1endstream +endobj +5748 0 obj << +/Length 105 +/Filter /FlateDecode +>> +stream +x@P[ K((*Jw CRZsNJis;ֺnc{)RJB}cL)e圇Zk> endobj +5745 0 obj << +/D [5742 0 R /XYZ 85.039 590.299 null] +>> endobj +5746 0 obj << +/D [5742 0 R /XYZ 85.039 590.299 null] +>> endobj +5747 0 obj << +/D [5742 0 R /XYZ 262.428 239.639 null] +>> endobj +5741 0 obj << +/Font << /F64 3118 0 R /F75 5167 0 R /F56 2898 0 R /F15 2884 0 R >> +/XObject << /Im16 5315 0 R >> +/ProcSet [ /PDF /Text /ImageC /ImageI ] +>> endobj +5751 0 obj << +/Length 511 +/Filter /FlateDecode +>> +stream +xڥSKO@W>x}Ajj9)ԀB۟YN( +A!sqH̑یMrNd0@ ^zQh(46=:/uQZޔ[jVNLoULZ|Knx. g ]M6?Noendstream +endobj +5750 0 obj << +/Type /Page +/Contents 5751 0 R +/Resources 5749 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5723 0 R +>> endobj +5327 0 obj << +/Type /XObject +/Subtype /Image +/Width 780 +/Height 299 +/BitsPerComponent 8 +/ColorSpace [/Indexed /DeviceRGB 31 5756 0 R] +/Length 23606 +/Filter /FlateDecode +>> +stream +x]b( c0'_4It;O:mzL w11`A9'k$_YG{r'ǻD>g /p` ^8p`^8p ^8p`  yV0Y_]^1k,cQ*"ML[V)gו˷ԗxҮ^!0:Wx.Bյc}'RD '+OC;uIyglta.^4wpŸB뼐Xg*q`iinS|{.NLOBY@ؕ"B d=-Xs‡MIҝ׬^yM@tŰKX7)4tltyX nl{h[>5A e5Y2]F< +O9,4n+U./_E/FuDcq;Ag"=u)woh6NQFt~ xŹ ÉHgk7 Լ>d?ٰ}m RkRixWvKͺN0mXC"˃rV^@'4S EM_BOjџ=m’Ss jٌ$sBzm +T'f}%3| /IEgTۣ(`2۠: Xa,\ fn7txb#8@b&wXTuޜ`&o:Ty]boXUwqr1Y&q# ]9I_4;dҲ貾X&]_8M1Nv{ca~ѩ:( yӤ*.ȶc8 =e;EûVw)F:e%0 xBrD#o yذ` 9l:|;hmm N]}k,@"O>M 6I/7( &<1I + kU˥//XF̞˷qPiƍ>XhXWm;&^%*$/ ^0`”?/\9l-te^b^;oW d1蝗}, t߶^0DOB\ & 7Y# eԚ2Q ]!dW1=g4g,X<>>r qE[J +؅aQk _r^hawy.&/hP2 ;/lb;JI/x X}K[sl/X[~or1ר;#XOŤbtɴ%bL(wحnWDYCv v ?b<圊l|Qg{ 0m^n,Xx/,`rv4 &}ѶzA;:,,XpVԠERn1/_`a9ad;e8w dWph+G6\op{MO_Rncl|!^`Z{o rBR,}Slsom}Go}Lv_|[t9}K?r3d`|#v D؍e=GU^9yqVAM𳛡*p9X/ _d|Ło9vxᇷ:t9X`6r@i"kz$΂6Tn C ߣ! +j[mh,CB_ ^H |:j+,иEI#3-ėbVľ]OtENfbѡB 9c*JXxgy!:]8eL$v"*])2ԉ2s'.n!uy݇HKWk]X^id 貌؁wʩzM.%<D_$|L,hEQ/$|j*@ +c*s[sG5xYdf% F.~J9կp>^  +ħ£twW^g6;z{W_mo`aEkVJXb-ZJupOoUI.]s%beU.V<:P:._> ޫTfe";yN %=cŸ(pYf߰0vʵn(uGJ#螒r |n3 W:)(TI u{1ܗ3GeIYO"+hgz yO2An)ϣ xrvWT5`>l![ +vι> #U"9x!߰qXH\ IDYL5A;P6)Xp9e{ ;Ƞ'5%l« ߟvi< T !(AG:cAv,hv߰SM+zt†9u$ RL oB|iIXX0Iqm1lwY)mKX18 6^P lzbo +HO%p_ߎHЭEo^BDXx(/㓛vEK4` 1lJҖ5:Sг8$RMvy¢<ן%Nj =Vk%9vu[g>p>hy,A^Xkc.d fWa E[&iR%3A%Mp.$sk؀$ EC3eL*,|T&j͇p*!QJ7d,$Q.zlā +c\+᪨K10V^f08Yt p9F@';(N@gB Ji:i^M'/=~ fo9ɼWTӵ+EXjP]1dhVV 6,KlO ZW_cX ު\%> qBhYoY%t+Bkxg!lfly,LlX٩&pnr^8il-F _N>%o}VopM幜#p6?ztLe +z8G"`Yn1-`;;^;/8VUa6X$`A9<)偅Bu붊$#F+(=]g145 (2<1 ik$`aҸkWEڷusCap$)w$Y"#&5LT} p~cg¨ mTq eD̀gYSk6Le.Yquط?nEk~`s1RGcK)և,"cc40ewr^XhL*0n PcxztpJ;7Wp8lNM lQ^Ya 2Opںs )0@X%X%)@HK<쳧M49W):(iP~W٠0v8 6ҭ3su,`x`ɼnU tKt펹5>}>]cM 0fؓQJt=zajlˎTndTڀm(8v$ W1 j1A0d%0wTAq)5w,`yƶj@'^XsЛD‚gBӼ©b{?ŕ?cbpL>Bt3^tapG/QL뀅i$!87OBл[IGr5[7T\Wo`;_b 9 %+Ɇ`]DC'H]q_FY?LЗ 4J6!-U)^xyNQ Za ?WN]b@Md%s 袽U.K mLxdyٜ2,ضX'Q:R;Gչk`TXvi6 //I8N@sӄ~'?{:YH'JKqlП=ĸ`Y5xE ik\6+V+!r.K% 3Ss&&sp 3c|Atܴ--~ /iKG:2):~*[=MFv)_ѤXnpE&ɠGbu)6((P1=]^*xeC*I+,~4Sd/Ԉðeall'$$d5?6-xF 4ڻ#\5w#82[r7[2o8 æN릻{tbqnmpyr] ( ~4oJ)E`>QO, Q!f)@{$q,hFkXXJQD)x6KP2i61\#{c>XObxlƜ0"2jԩ(I5FϮ SmXYhrI^9 +ݱE#( ƣdʺCz"?x˛DXu`~X_`"@4"̴19[p X nau_cPI0 &ņsHAȐVOp2!3kb`7΄WG4ͧu B룺6C(#Bʃr92B۹^xq70 le/됭Eq]\V4O^ܴWݺ{oD=rҝ_!^lZ|g{G܎h(sr\1wLc>U!9jqrÂC%|P +u] Ȩԝc%^xaBz1(/5kKȬe_ԟ\Kq\(F}KIdrjil*rBN{Ŗǰ"/̎~]ϗO8N<_ 2<*M`g^6a|'֥,>%?%b +VSLXx(/'; 9a苃5}'3NjL~rC&..4N'a6B f2:Q]Qt0</.>ÿ < &q|S5TY&]F'xEUd S4hdަȄiGjW7)VJȚk:#v1#p#&*oWmFHI5OJ^?dvb*g6Pm,lh :'8o1=:`a\/ĂۅwT,t#lƘK/p6̴bUpB8 ^I5F2feba>tgڻ08I+܇_/҅Su$LV~% wX0ɉyX>Y`|s3Z׼0},!2o~./_Ho  <^38R-y᫰Xhk,IG,P!]בO`g _o W/D1Ճ^x,/{C _5y ]xsޫ|RJz>/}0#^x f ^://\p g^Ehd҃h/`AQYLB)`-X֔ 1W)~y. [psxAŞSQ&DV ʼ>R`^0q4>B;kk|m? 3|V99*Z~*Rfu( +묾 +ߟ.qm`g=[iycoeKy^಴[2x629\y VID^\PKݘ-nAٯZ'jToybB&;ˮJ+=@ny*om+K5b퇥  <P/i7L[M+6ح|Vʩ+|۪ /^I/ㅔeW2Go?"I H%G5+C,h/ج, )˕}šEu%kX5:xQ9|#vU~/l:RS{x{)f_ٖ *%֬ ̮E릘ۆɼ"TI=a&/X &6^h3fg-J+c XP^G(঑J^d֫`3^< +k<\ft]W4k/FQmCs9^0lW>v)7\sSZ"+3z/xB /,P)]vTfL[:X0>6EińeFL˟,quN-|[qKa "y=ZRMgNE(IH%K$_NGE$v!/d(+! ˄<( = ͩ䅳6,-ㄵ(pQG+it؉9w< +۶CUr8baܱ 5WIH*yS!h ԕ_^ S +,ح/;DeX5v#yᄅ/VQzye%Vl۵9,/;/e@J窪  VDD*lX\~Vr&SGS2xdxI]N* <A^{٤VH@^p[$9b*GtK-A3IK,]hYy XXWbA^tt2]xASձ}* gy%<9'_ pT0AAP +5j*K*֊Of&!,6ݚ?"ǖx~׽!5&^q'5EHdÿ SY":.uVr6Umm~ּ$RZR͆L_! 텠 }GyX涝/ljq-N@뵚AwyxX^(ĉf)P΢ :,vh>CW»MT\R?^ֺ(2O| ^x8RGޢ"Ky~+^@$ ,|,u mIW#~|89M܆MGzE 7qd)[z`ރuO?yt58cx'Jb_HJR<Įք;΃J[<8BqveNz™!/bz{xC6Z-ZrI х1ܰ{ۇw"`h`ra=Ag$OVA.̱Tέ zY+M] #Yɉ'd}sY$yGB抙+k!)ei9<^`I'#ؤFuqm4Zm^/| +6ڢ%R,`g+xepNi^ +D$̷ QXfq}M)z^hOSj}(3N{+j.4:@Ba= dG\*$dύaDvؽf{%)M煗B$>w#I2KOA +m `W,[. _OϘ_x1e߯rmx^(cO/Ju.|~B~j03*ِKaq +e)3 6/<lΓxp \6FۂfOUũvzX }{!WarM"0HOnP F`!lZ}|u&(yX^X +V鈲0)'^ DzéYoR IҞ^ɮ#yܴqgxᥦ-)1/\ Ka@AÎv}w(XU$n1M? ~M_F[)^07,/Ֆ +ۀMbaXT>(v,m7T$mtyA4%egБt~9t~r\Zܸ>'1ĽJ2JE̓o崨B&jG;p6\q 81yM|O 7a^a#-7B +E 5~bM[+r6|䠄‡yW0S=DUZX6pzg;ftKrQTj%Y45b-[0_)SZ߿‰OB+tjԒ% PN)J;`YTH /C"3beind6d8mɲPQn5գu'b@yJ~ Al ,#| + g0] cZm[2_4`i+,DgNZկ, 7{X^8ɯ1TVuJ8 OO~/WyeignːǷڏoIp+u%vROGxEcDM$H S]xnbAwng!q)<.ЅƞJtٰ :eE^0t'/%>6|?/A,t!b̯R,bp?drkE_  c +3J2!ISϚ_pzŅX0{豝eE\EoUۈL4baZZ?^s3}i^.<vbA+4(znbNr䬶 \$-x!`իN;aAs2Z|iV0<B,&:pz'xYXI/v^ɜȮ`m-ABۙuv 5(yT,6vy0-LPH +>6_ &XX1(gǂQhMr"dxvl()^8H eKtov^и/\ԲW\c;~BO%jl V"NsBR/Z3Ήzק[& -g؂ hM+M4&M]\HYFBTK;*=St|)T^j NX[Yk=(0FYJ:| /0ph2T*1\H2vCxX?R~W``T$'SKپFewƂq(a0V6X8vb| /`ްO;GX[yR_k/<ջ2eR85K˲Th ƉB E-m #3~0Z9^؃9G<о zx[~ȅn} Vd%@cmDsŘ\d7 :9cyB?[f/JY,dUXqmǂ̙P"Or!D_!'΄wGD +q ޤ鍼aʷFG-:]p'/h6"S_Zԩvo׬'yA'uK62h+t}@芈xx?RYs+5V^S!]U>VH~};`]z">, ӂn\aڐz9<Jk2xG`A&5K&h&lrF@OF#Ft+#x"e6^@KV,,MlC/α,*{-Յwa>^0Xn$,dqU]1B겡jI:ѡv\%]u;&:]/JtL$zq~R_soЊJU<,f>cNĩ R6 h3*, ОKz2 f/$2^IH4֬Ѝ+[Ց$q goUȆXFR9Tg};4~#eo[ǑJs 9s+sҖ:Ew +uaHaK|"x012a! c0:[<ZsVj$s5'p\nu\elV̟ +HD6$ǟt- K +)ˆj ^(# +G<18i= 7)3EkƲ/O='\ƿ[bJG#;Qi{,}my{lt 4Ljvh7@gO ^uXo½HæM~]gO j~ V,`o<`aB)93xU&tBTό#K,9~O^ㅧ?^OQ2͙H8u e-%C>&d$ z|{yv5 zF h~V6E*-0|ύGJk?{Ţb Y[$^eL3qfv_x:/̡M`kSeܕtQEwԁ胀 >* NW#I~'6 8t :U1QVNmR} +y1Fۦr,BZ3Ba4V|u? BPpT1 /WskeWXdӦg_J2S\'Y |ߍs2;ȱbg \=׷CљL^(Y[U+`kVdX Jhkģߚ]xaZ )]=_xAQ0 +܃2PD|6v]V%nچY`Qun? 82\lF~mSoVBй7ͫjNKx3e۸3i]T*u(b%",m[M3 )]bGχ=xJM4ą$z^h֕7E =.wIꂳ\:RQV^*^DF^تtyA ,,l{`je96V]1z煸 bNj&Ukډ*ʋERrr7}wy7KΣ ,2ht$Nsvх*ebH\Bc+~Nj Ƶ\cP D7Bxb 䛱``Zn?[rYQ+{0EeS)&ꟴ|ȫ݄fd;} ^x *.`) 6L6ȺӦL|Ib*l QX rI{. Tb&[oD0dY ճ}{qe)5`=IKj%@C7ԱöEo_;Ӹ!Cȧ:z^X$:`$MM`DK6u{zUv[o rNY^`(i/T =ijHVdBݾVY#+w7q)yk/BH}G+^aP߀^יKCpsyFO\(=Ob/mg,11qr_|^-e|> :~y }V˅{ת,ïSgSA’*,JwS}@yo џLL`)gT}zuT]|eA5 S=x{ҝ&'>̓;W٧C"ދ ^0̳p—Lk[MSC;Qd䬿ZlR~6^*,4zL 9T$Z]~6_X=Mbż+X8x᫰@zuMET+BA7VTƳEnsIYj.1͏ψB>R$:!Ɋ+$*~PU) P(ST=Sk)14^D7 |lЏ/ tR0h9GuS)c''0l$[bZldʕj9e% KL=/&Py!Tt(14҈2gpaAG2%jA*JK#L*`D.@*̯:@AP76c^`%4 +%H];vg  L! wvW(I,]rOŪ`E\:ND&1V·>C,B Qǜ m0L7]^a<_CbA5 Pfp=p~ȉ''&E~PSFTBA0SKrl\bOb( Ugy!I -b_;F}ab/@+aci)jH6mGm9Iѡsdm2qo'ۮ ce493ϳ: +Ms5"c +B? [e[0])Xp1lSXGeKuOᡗoq~m޾a”n%{kx_^{4+E0Xf ҼL|*rJƋO#[ +ɟQA/mx) 3`DAYƑ)I 2P^fP8K/jD?lWc ?UҴڞכH,ȬMj7kקVVx1)y H? /|o,>ai d`dm9a1݂C2)_}q^xb;x_le8fϊ_07`m/<.ûЯ煮|&~EKp_ OB^[-d-J}-^Xkxo`[5SqLIӶumLg;lC 7_VI^N +ѷŠPٲ, &S%srd3d#fRISf1eOqM{(]It* #H\]8f: +%[E +WR@8*p7g5,w+tK儏C%r찴y .(M +#EM ^F@9t 䞁A '$]1D +ȷA /|#^1_1U8 ~,dkYj`a~t4MDx{gBDK7Q T&nA Ο$N)VV͠S#xnnOmo\^`jvN +?eRGBE.&BzREk%Lp|8a/,^~N;8OLr:÷65] iz1 a_⨿ /=xIwݵX8x /}x+ʛS慵][S^~{vȆGXXڶukO'ڟw:EկXX֦򜽴oy/S_.wPK8^uqp}64/u/R,`WFg½\ ʕPU +m痍k{aKxE,gtsC:UɄA~Ɇ䅵|I5H<z&.51_7T6Ħq~o BucL?uq$v qBh~an~Az|c,%{~aA1_c[/4W^+/ULGZ^KKswu<9xSZ^KNX C! 5|[+Om׌xAip,p·^Qd>Zv>r>x wve23AXK 咘ޑVv\=>,p ߙ8dqc+vE+OuB9:sqZp ߙZxtIerd7<zqb2k`у{//JdպS*N,prKU+VJI^H* .j`wb^Hq$@)Bo(@1B,bɽX8xo <=w7d4dIu26ßF{pa/|k^9{Z璱 /yWTGŵXX ym7sMp·/{{n5:1Mdpn~mm~_q.E5y/W>7Ϩ x.6, ^p_Et ߂wFQ4 ϰ#c)Zf /z>mr +io{V|[v?Ev7x /eQE7X'xa]~d.e=Xx/ޗ"Et"'T*j} M眉_ ^ &خ \ZMBF`*5ѺI%ץpRLLco(`\軫x᯲F$W20+uT?Rʕ \|lu9)uXt f֧jUjZƒTRuk]V@Eeg3rU0B[*d:m˾8qKVl-UIEBDIXP D0q%]X`.M#2-fjR\`36C-(”nêB/A pad;bӹgY.Ɓ"n8-| ( ;  j*֠i2N3\Zqi~܉ -'A0ZV DfeҜX#cZs;sM ˀsc'S`krR|GԳ}:lpBn.Z΀ … `ѹ+pZT!|pOMt i8(VAoZ࢏xZ#F .ӴW)eV6BU,HCB (IQ "ӂzjF ar!\Q SP|A `D. Q ڟ%\x +WSֻ :=+DQfgs$d`ۺ"O'7M@%z0EτB.30,@5Ѓm2}o.}0*&$pod8XVv. ~ޱW䂮{%RKh\N}m͕M\l +Ʉ ^gjꕛ9BeiH5W _ₙ9XTs{[i˅:, hIG c{7)j2u#1 ._;29Iw_aOn]'qyK2@,oWtAGra=G:LU;1VE + +0V7=w֖W /Oyiac="4ŤX[",߇$tUoGrfw~I.ܨ0R]n֪zTVu6Qo:2IJ\.[)Zb S$.<)^{{7 fYD>+s,:U-svXaA~No\rّZ˸NZ.r326ٱ*ؠq(VSP3o3flpdM\״p.P{$` N׾_|eY7\_OYs#.H,aM\( sU.xx n.]*X簄{\ \xBW3Ǟl/dko뭛wwۆq+Y۪V K#L.,C%Ux*0S3~_ j4٥wrⵕfb$>gPb1Pe 5Yhr݉ywc< lqB*,FjaL3BܫPV7:_Ì~N9Sq Ayc#rw@ u1;vsVЅe\Bmï#-DY"l+).@"ʹq2Q ,B>\3-/0&eʺFQ^AAalq /Ņ_8Zl>k!WB9 m_IE.\Ȱ@cE зixIq*gNX9E.,]Z0Z3G2^x2,עxBF%ᓓ-pasFZ̑4˞B#01K\QBm.`FNGv::䌎p M3a-GrZX@ \UDEעۑ@[~^s3I9Oթ Ƃ9}"g:?Us=wHyL1K{ȸ܅.|a jU +pVv¤.X/_qp>zJBč1Sq;w.}꛹н=PcLd %$_RpK + oG:ITS=i#jj{n11\4~!q5P[c(]q\Y ią!yvTݵZH\H\xM.Ta̵o04njvn S5llmuP}B +Ƭf=JikL2^B͜I:j%\>ԌZYU +EB#ZH\H\xU.X"3ɱHc0"~ `:261'<-N7ocB+B@f BBCbeh wR //Q608b EMiSE j-$.xU9>]Q ck$$ja NN8T/VX]DD_BB‹rk1>ͲSYi‘o +\mجڋA4^nWji\/CKyx# Zi:`rmΈ޶.p8dAkKݘy47SmR ^TG7>R@JW ~#GzQqmoG> +stream +x`eee%%%444ósssyyyAAAћTTTՋKKK +<endstream +endobj +5752 0 obj << +/D [5750 0 R /XYZ 85.039 781.388 null] +>> endobj +5753 0 obj << +/D [5750 0 R /XYZ 85.039 590.299 null] +>> endobj +5754 0 obj << +/D [5750 0 R /XYZ 85.039 590.299 null] +>> endobj +5755 0 obj << +/D [5750 0 R /XYZ 261.943 239.639 null] +>> endobj +5749 0 obj << +/Font << /F64 3118 0 R /F75 5167 0 R /F56 2898 0 R /F15 2884 0 R >> +/XObject << /Im17 5327 0 R >> +/ProcSet [ /PDF /Text /ImageC /ImageI ] +>> endobj +5759 0 obj << +/Length 514 +/Filter /FlateDecode +>> +stream +xڥSMs0WhhАR84PNH,ca}B!Ϥز*6lCʓ:̭(! o}ڐهiU_r P|vWߦjX֋U4_b~WEU)Sbٻ/"C}]ӎ +Sv #tI>K@v3 FSknTiƦr(Qq#p.pt' s1$x|> endobj +5328 0 obj << +/Type /XObject +/Subtype /Image +/Width 780 +/Height 425 +/BitsPerComponent 8 +/ColorSpace [/Indexed /DeviceRGB 31 5764 0 R] +/Length 23871 +/Filter /FlateDecode +>> +stream +x]b(EAQA|?;&}>4mӬ$Mp Ì{da+momoMb{6`o{ۉao{{N JBk~ 7lkWR}mY{VT -67ko߫^Q}E|{ {涌 ˎ}{;d wş {ŐB}اi {ƛXH,}h4cviIQB)1®>B`BmX(l ;/PlHTa {7psnµm {Vb8S߿[,zaoچxXPQTvqw~s)9J@ޮlݟ_D b)|\BwYR˗|u>U[.n3p4/$ XkC^Ļ + OKiy)mXȗE&C4XP +wx??? am8}YE~} cc4ǐ ;/2/煍/ۼX(>r ;/z;˼GBa ;/y/0za0<<Nɴ녝>xza/HItV}=x?m }WJx U-¦eՆ(d6)vװPmNb=xt.t{qǷd{eά}9rslBJsfXM H"G~B JO=ejc!1J k֨4؊oӜ3?XBW/~.#.˳C]w͸$|Uy',` ,a ?%. uێPH_(VS}ؤwͰTj:v zUN&庤(6>Z +Ӱ^׭GRV/oVի][.̓`#uaX9}4E:{>#.PY/|(DE| څ8z8DmW&=yF + azc_~#N2so֛VA]52߳gHL>tYOWEۋ c4QF ]͢ʍ6,lḭu~ޱe^ p:0*{ >JBօOj,H]T:&ͧU 2,)<vG]ӓo'WWK|s5w$ZǦ$&yQ}c~FD +X{=c2=oRdU5QNz\79C8pU QcgW,23·*yXoă–+'8RBu h9`+Wav4 Ůlܯ#$t#F.'=ȉrdaaR+ł "um=`T* :&>Gr}>S4_ stDkIy!=`2 |Ypcv9E cmtO;S%ݶ?GLt|xa6plG#O~eBn5/&czf>]U:N ka!ZGs4 k㢚5c2+U~qumF,MJR %qp +FkPc>Y9.j8`ZZN̍k[jDw+PaUPva^R;vdY%lUjK߯tQsCBhpR u]._zX0 d՝y9#;\s?ƥN+ Nl5NGR:ݭ;+0T g'`O"Vn> q^t Jcaa_HNүn +5:i!9zOrΈ~*-.Ҫ xJ\/BׯL[+^IY縈 ŏTb040+:(HX댦kʖ=|*c?^zO1uӜl}YfOxr$ ;/pT&<¿Xb ,Zmg0m)Q<ɧmXӱ$w^锫]yᄅ5CNzu2&uzsP vӟc$x*7{pJ&y[؞f˻՗6]dMkMZ6k--/:IJU}XOr;/ďt?B,۹T/.,WH P^Jhr&ڕ"jXX)Gz./W  1v9h,2]p׬iXDd"uG6B%n^}^ďĘOOwg_c/d[pt%]{}4u[1[]a=_օE^Xf]Wi1q>Z{mV6աXN.jm' :"/u~!Lt< Q;}*|_huڸ地%!6gl-,"U}B_^d: ~,5Z-v6hLK!o K< +X,͔.Se~I[ +{A [̜N6`w0\-Jvee]R`vi![.M_pS _bA0Vp$i@ʧ vKwH3=#ui!;i8"qD>%R1v:BN,8 Mu)\3փM R-*'̄zB2Ka?/ ~U!$]_w +Xȃ!6w 28J#yj +j}rG,T5ІiG4B&w~8A&f<*iC+W &r\*w YPzaX*O0+F>U4}dqaqZ*L}Yގбx!ݰ& V8|d]9A|Ջ&зD"=Ty\õlX)g2_߈Gzכe' 2,^b_,)~U͒b㊌ ,01Wa4Q&|e -4*dqY8fG_B߻Uw}W!.[O_8vUzAc//0gV#t`iPTЏ9it4̼]GG~Ƴ +9b!Q1 +[2't=q.;baQ3 M_&ވ_^RdMIa#&*$LÍsv*|zL)\mII:Lp@ha_wϙj|",)0vRZ9~ +;1 |yx"X@ @:Qi1s ;l)DmУmC@3g ΍%\PKBbbbsMXՓoXMa:b̟S@W2`h?*u'oaA4;.^񭈤i^78&ⷆ?KfJ2&ۮ`"@ߓ)vV+UJjgB_B"W,Μ6'apRE~4FI)*  ;(A.Z~—:Dq@---RU0ՋqCF4RWs)S+Vv*_^HXykQ hR@Fy#PI#jt6@,$RQK+UnB, nuba_p=jB8C.`x! 0H 8a9C?Je *,^snڡ8a싅}µH r~:Vb@XX@ոM5kЎ;-&)]/Hwv_ ;vp[7]/<./}6^1طdβP+ٞl'5zvo =QN2q73A9ν8MüQURb`W9Iם-/>^녽}/|D,]*&NmfC찥ڒ F%r͞Q)&GM豵l |İc zaofcj] +_E[:À(QJSՊ5Av,:Ў1~(Z, +#AoN1f8 ~>#8'u`&n] $1bפ`ѹڌ!*ǥrZ-GpQǂO&W*1-/5^B=?HI bKH0W^Q,`Ҽԑn[B:r\ g13 Xv!o {#?R +=w2J*#rGNUk֩8c8V XX{, Ѧ^"QKMyI\zFA,`֤N^O蝂{t ScQ)[XXVC GJ^cKYTjZzaowGewGC,)PӦ\Oв4R/S5^<2,J26)vpzWt{׀zao?G5Uizao? 3,zv{^P]/<>/X81-] hY:zya_vNAV~XgQba0N*~vŸqR 1 \ݏyդ\8H +]4eX?3St)\(? 錆t?VnԀ[Vqp^HohOgW2 0Ώı^°L]v[Bm4%.g& 7.l.M,F:q7֢ſ F 0;`g@"D5cMm> oꅌ*n=%sZz5{G{ 3*LdD fYm8m`LÆ:l͸Zܺ3穝8?i nMpÞ_Z߰ vS. ذؙLQ@ww! \MS_Ttazz*:ލߝ -<,/_-~"^oWևm߰Ji|`[G--۴q:U`|ZnWU|OXK]147n?x~_+,uu&NGB^:z}B\ܸ޹)͛m-zXL^1/p^o<~ ,Bo޺Aypw~GXA+X|gw Z:) |+ ?Жn ,AX釰P.03Kq$7Y녛 Ey!7hwPaN@ +ONMp oҟzaue /BItkӹe,6 cd117R#X~ cK\KYW.>:^H0,imv߲>y58Cs*^Ի1u,nm +N 'UMG)<旱@0IG륂o GhKWש^ד9T=vI_XeyZ{m$.煒kT[iw&v(ʥF^X\,[蜶{zWȌɹ6/0)OX@;~~8sڛXMȪ8^|)KOhY7⣛.KS F3ˤvT];wA/',^d +|@ vx>Ly(n7)>v0QrLז,^u=~`O :Fyѳ, n=`Gg=Ix2*)ADY.itzݎR4k⍤C|(_,X=Þ |3`LEBQmU6),QKS5fT)4kcTř`J# +9H.R"fL2*(#kg"qyz!S +|blg7 |`Ssv缞/e:g~u0mL'd䩭mY%ui@)1~$i?{l\t,c^`k$޶<^XtLL*jKvImVFS䁡"A,PrUï#+fckMXѺ6CڙvՅEx < C$4KcBOem^U M BKYEI|jZ˕2ƨa/4*BT$Vu+a23D,VET;ݺv>G۸EBZ^a ^(2j5B[% &mۀKuj c`5/B%`a5%ܚ>E^ hGѲb\2BؾD,dSD*JB `!kW, rL5~배k%_' `7]Ö* X4<IkFF @kBaAQvg/ +bu*΅\sB13b,UykObtf{PeX 43t);)R5aa}'{РfO]PoQْPuJDz4/ [:yA,jK ~uMM" }?#u΀'YUB땵2Ze!VԨ޼Xp#?RLyH(ǡ5QZָ Xr1ĐΟ CcY%(ftUg[u>rYWϛwZFBos.8iϣ6xZ16bgN#=<(GWYOOYX#ogL6B@̶X,um?EZX&NWcT!GlnS!ł7?Rg*F)9H\߃/j,&34r8HA3>=o6g}E΢Q%ҧZ8yo^e_Nf֪0Qb@bkj4 3̖5RtIZD !%1f7--btiKV<`F0ւ}T8=VPb+4SHdJaеm1k:WF}#m'Y:ֽF}mSZw/BU'Sv3*'R DG! `]m%Vпp& NmHԋCe;cT3C' +{/(.\UWsj^{f|}蒈Ž0GD  xZQ|'/v 8mf}(U0#EmN'S:z8kү`˼"wk,8]T%-u-dULݦZK~lD4HQ + z@R.R;c<ro\ ȡouJ"𢐤2CTOYg!4(q_\v[JYx5ߤg`%GU17ða<,0hX`GUUMUM~ &ʲ,$Vt$c& +y&ջ?_/HVˠFJYRKix:c 2ɷhR۝\7ҹ,ps:^`"81Jw#ZSVpUg)yקzo a;l?vk(yK]x,/`2^+Фr:&2.Us99mkxAP>V29O &suoY e. ZIR0cWK]jTRz^uxJ$K=P:6,P #{gy@9͹E^`fIbroGo^6w *P9  :3^r#||аvB4/6f;&wa^qta8vܠյYC}OW;6.}a)v C,eNRjRx6U}aޙXJm &9鲅Ү(ㅚscβ8=uR2du07a䜧. ߢ +==.s$s|ҸcoO4cXvU\*$uT.D]΍++j9Jĺ6dI!54;zm0jIR"脧VIgk]E.Z& W_ +.џ6Uo_zI Frsd4$Qct-QOY~$m÷ix§ֺjQX0P:4H[ jUкXy)5׍c s xaޞMlebw BfCB(5äU&|ĂIh3jՙJaﱑUO +:p,M/\|X1!lZjy"i<Tx+I}[^i"ϐ?Rd1b6G1S^&HfF%?,; m(HR;ZJJZaVe% )O.͝% 鷵k.vQ+1.F}%#>cn0F +>\W;9-Ϻr e^O9Uox!0lR@FXi,92^ae3CߑXcIU^‹l].:l~I"0E^,|,˹3eyo﷌|bTB iæl"Ӳ1JEoֆCXqB?.Hir(ݻ20NR'cUkK:] + +>_^@iQ/FƾI$JIeUViGޝq +f[!GxXؾJ>@oy|ljY;ADži/hzVY W•[TE#7/{}C  njoi ȑSJQJRBϥҀ`{蔕X߷u s^\/ r-s%Q+DIV ŢV٘%R}LK<\ lN4 "ba|JiW SKXEPu}͵긦1SEih#l)JBx۬瑜/_K4h. ͮoW h"b餥S757~]/,EmXV+赭ݎ}xڏ` +=`rD|\2:054l &`4+T*5!CkOE(hSn+l? k1!ұuZA?=(BU K1vJ$+}0LB%OV $8$T:Z"|]|F~8^= E?TٴcZSL:0(O9u8sЈB#/Rއ @`2e)(hnABS-{9\Ulw4M} +:W5ǚTPsnñ :j۵JOyaǩP4늯7 4ß#S +hJGE"Tp%*:ee*Z l7 iwd>(hsټf5jq}GtDka}m\l޿)b60:[TLsNUE%o]Dd. HDrg{8JGTF޵jвe!Ke Bq` GH;96~yL,#õB#yWaZA,f]#Lض3` Lk@g,%HC{QQ;o#/l<$[IF +?G?a&1.R1֔I&4IU *R?Y^HзDX50obR\{3Vmp0D5|ɷHoE,̔u!Z6zKcE, rs?Ez!ﮥL +c}UͲmۺ?BWQY Jϔfh`Y$I',jfj%UQ0:n8]oONHk.ڧR)I{0 T%>(&SpB^A"; wOOǩz <  2-ibb9;(² G*yqⓔ/m!,dJ(F2BA=ux?-N rNòV +M'$Xx mR!f'ov䔀t ffJRս"*%f P{s=v^xkRr1&L{0Ezx5TD/&L RxO ! guyr~3,$5w]/<YY )ּf<ږ*[ɺ^VJ<èn/UXFNN? )i?`%x`.kűE\\,}z=\wE~$isH5 +9z?( ;/?RMj L<A˧y;X<}H2NU1tuMd H~13pœJ"x+g<  6sybP{ NVEŸ \uKhuv10+U"ʎrǵV)%!6_s" r&l$٤$)3MTw]/!?R+7(դ, "ͳ.Nƌ\4Fk}f "b,N+4&[Ҹc Z&ND.Ruj.Y,4 Z:Մi-u +sRF| +$iD1:V <it ;/)<_Ŧ6"Te/Vk2*ID͸/w򤥞%In E2w],mX_#I$p^[Bcl,1]xC',ݛiG 􂘬b!3ĂI1!'3^#K~$>[/0,XcL1b^4^jB\ ='") Q01~[ A& +yd,pz!|䥍4AtYↀ9(gP fLQ"jX.FM ^#~$itC`T%l兑ki@ϒٖ3>vxWҨ6[Kw/BqZ)_ĐBm1U-n*1m +GhxK>BU~]/ ?R6鞯,tCHm[S*LxIcLQ7ez䑱½>\xC+[ƫ]=vyH9H@FŮ~_f g,\xoW_θ4N[5'\~}Q;fne;/=/AX wG2G Fyxd,p~ɅpB? +bjv^%?|r_}y煝BY{)\>4v^g?RCca{CaAXyHg?c#w^yWHi5;/pTKv];zargfip~$rbwεkynyA|-8%v^yH[ GJ,={Oɮw^x`?ξT/#£"Ϯѽ_ys ;/}?ٓ p>Ï/dXyNy!dT~F. _u %G)ǩ~$wy~ &;ϕxd,pzg| wG:~jcy.y~;/ܣIKL_w^y?ҙkO˟Iяtarv>мE9r煝EgKj  wG ,o;PF W"<𧇷6䯶~ͳ/X-,pPKvَ8CC yY +bQ%w:0`1[Oa(ǝC/. ;/|͏4 H鲬[fe]IQ&rPyRr%]]feM[S^&Z.uMZVIYZZذnI,e~C _#\mLK]|VmC֧mW Чʛ?ΏUwl,iƂ^&1k[v^C?RM, Xm w 8\L/N򏃅_`ӟЏ$aӋF ;/|/əXxFHXd3/j.ł5//$wuͲZ, p8]Df.#]/`!yF / 0Mcr%v^/dqJKx*~2"5<ԼlxN'>eWba(1tNژ^Qm\>J_G)zz g| ;/܈{O3"Mc<1 +wx,$8T-yda^LMk4A,>F"*y,眳+xa@_f: /ꄅ4,h͏—|;/L/D>݆?RBvXO—xK: H`r v^酼j`> <# =By1^(˲ ;/܊W?7.? aεp#^Xp9^H$rr!^"rj~?LJ>>/ HH/F=cs^#4o\Br3 &? `/,1N.ğ wM k+ps^xWRm^H,irxk/gum~c_ J):PHW!pS[M\r]5T)WP/-zvV8WEYlt4zvbGP/X&(5hdϯB#:U%qmр7s^q?1WN獷n󏈅O;^`x[_H=xh)eW:d OΩ_,MacH~^pe(q{ m^Y:|Å% +|qxaN<]#Ruצ)ezˏʧʍE"p-p{?1 `=PGZ|~O8?ۣ*-YBbcah kUcGy1_4ƱߙwⅳPO|u5-I|N AuFzt^KT[PHKŠv{6ҋgru;J-'7%y^îv^8FfUH^眏|/^t9 WI.uN ?^H#yXx5\;RT?UiԠK_7oS,΃aXPۍjUH*뀅J\G²uXO^av^?'U XHU[/#a>y! GHJ/R(f^)~j#]Ony7T˲M/`6ڤba*©Ixz +Q'x Wa^yv!.yGB^@>.V]`^y +İK/X_H82Џ7 w O y/$3^>Kf}gcH {<%6XXX_^xյU_;慧ZUJRNK#z6W9F W;k^x]c!S1cA&vhߪwg23ҾBq%l].p߼椅X_.]vᲊu +2v@5,ʘ;GGOQt }ęvYvss1&k /$T-sɵDzDVrVN2j]H BNp ̏@X#OF̢aLАdq4BY: W/rub,<`a-g֝# M/`.]&># 6w9HHC'_oER,ki8٤5U(j]zpM/}xI)Ů|hIʨIV*E{8$V,uzM9>w~ikt&֗ܩH]Ѵus,lP[gU%e}?RڧrpI^FQcvG]uR|UV9E~h$p~$Tby<>2'8ѐ$6]O y'ǺeZ6d<^aQ }B,;/%I~:NU=Fpzxa 6& b!2+oƔVr +\js z!$4F酉gvFjw pkh`:Rq_C^/, +`!, {1 ^0H>yFGZ3n[gRTU cS/rbaP-[ *)´WmQ$:ʮǸ+o/5Ǡ4_@^k\jeJƱtيqay^HfLN^TIc=>!y5U_態kΎ c< a!Za| >p~$K~ /x9/xq1r,BvBb!qH +,p~$b@.춍7>U/of^R*β=p9 Sr ^H.0}txah9^m6h2m1!5Oڪ ;/ܩ4×Ʃ&y4.xq慟k;/7/gaZ$B,/0v^W?ABY8-zya煻#\,\ RQ2+5hya_#.̰ҴLZ {Aʝv^p~K&,{k/;/~$ ЫBr 1 n ;//b^` Fya#)eוl3ya_#9 BY2Y뢨/;/;~ssH;/E, gv^yK~$,,켰£//$酡w臗 ;/܋oB. e{n;/p'~$5O|da "cEW'K&^}Z]_ya#+?k_kc0Ly +][0Yx|n!ɠxx~1ԗtya{ [sC ;T.ɔ Q{t*sřI2sUeVNxH G:+`+"~wL$ 4_{ب +aDoy=ͥiwӭ1nj1TU/t0v\@.<Θ/\/4+exElFDtպ4rXF:^{rQH){v_HU,``dhTXd ak ȅO#3_0}XMiD6Dw^1SQ#=fUgƥ6)_\@.|b)Dž4i%ÃσkD[<hfyS)TDT\x|! *.B -%"r8u$8 +]w[}ow39i(§rO3HrTxD/ P|{q//4:h^@.||~cQO7N3؎Cٞ~O.:rHpTm~O U# r!v[b:VUU7v?@+\@.\VG:N´ xy>2 2S%ޖsՑN\TGzgMy~g۝o {u)eƩe1Uy^8ͅ>ꦷ:amS^TX8iQ7I%qbdn^8ͅ|eCnyP&ܴ~ ^}0|2. +΂`;.2*qΥkBuaoyMyz/]lYشlYOD0owNq~YuQg{בNɢmzUtis] х 6y0D=DsPG Li[:J9paSppV*#<߽Ml 2gy6&]U#9[fn/0M=u搼`*%7F. }:<Z)n x|BL^.l^qB/dz8Uyu j67>h!$,Ku/Dž +H1B;q"W\ F; u,h'/7B_^`k7PX?_Y۶I!1_x(.LQN=D< >ng~ +*ERinDa\t_:?:%K*H޷L6_8l\S\k NMR˿Eӂ(^-b鳹`|ʐ~y^Wc2u3tx5m9|l x_//P#75(z G#uT0ޜ U'X#"pAA*yAFʩIq~#6֞Rؿ\\8<܁F{l^6 3@bBu^o9?vjtP?)&a@v{#=uv}]U +.~IGPEXL)|pUqΩu/8rJH7^{w1MܒǑR;,D XNz{)v\:ҹi}8.9>6>ݗ\4 :l{n W\[W^F2XG\Xrϟm~keHGqT0LŇX=z)ػȅą.~&BE}DY{:!Pʅ; z:ru$rsy\@/  o? r\x XGB. "֑ # +݌ W䂮gŪo>q\@]y;r^ sRoLQ +\@ (rB.P +B!P( +\@ (rB.P +B!P( +\@ 1C/?,zu_9RDz> +stream +x`xxx555hhh񴴴&&&ڃ[[[PPPAAA=endstream +endobj +5760 0 obj << +/D [5758 0 R /XYZ 85.039 781.388 null] +>> endobj +5761 0 obj << +/D [5758 0 R /XYZ 85.039 653.905 null] +>> endobj +5762 0 obj << +/D [5758 0 R /XYZ 85.039 653.905 null] +>> endobj +5763 0 obj << +/D [5758 0 R /XYZ 270.549 176.64 null] +>> endobj +5757 0 obj << +/Font << /F64 3118 0 R /F75 5167 0 R /F56 2898 0 R /F15 2884 0 R >> +/XObject << /Im18 5328 0 R >> +/ProcSet [ /PDF /Text /ImageC /ImageI ] +>> endobj +5767 0 obj << +/Length 495 +/Filter /FlateDecode +>> +stream +xڥMS0{h-|!pHJ; lsb^(E| `K,lJʃ*̜RUgEcu~uNWE9E,JC~|,(g/RddeJ_./ѴUq[gUK2ULlno=%4Ii-N^uh ~F$;mғɃ+ Zx "\<:GqoeZ_Tb خFw'eײ'WM/Ow◰7 2 fhE%5|F'GP;NNڼ}^ob碤|W>5 Bԭ,%^fihl'A-֤Ͻd*kPjliXn#Z'Zh4uI +endstream +endobj +5766 0 obj << +/Type /Page +/Contents 5767 0 R +/Resources 5765 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5772 0 R +>> endobj +5768 0 obj << +/D [5766 0 R /XYZ 85.039 781.388 null] +>> endobj +5769 0 obj << +/D [5766 0 R /XYZ 85.039 599.799 null] +>> endobj +5770 0 obj << +/D [5766 0 R /XYZ 85.039 599.799 null] +>> endobj +5771 0 obj << +/D [5766 0 R /XYZ 296.792 230.14 null] +>> endobj +5765 0 obj << +/Font << /F64 3118 0 R /F75 5167 0 R /F56 2898 0 R /F15 2884 0 R >> +/XObject << /Im6 5151 0 R >> +/ProcSet [ /PDF /Text /ImageC /ImageI ] +>> endobj +5775 0 obj << +/Length 495 +/Filter /FlateDecode +>> +stream +xڥMo0 <3(Ynit)MSðfAClNmc€!C|H2[TyB~;\'FmH~sQ%EaٟcX!2/u3sJ9^nʌZj;#FJ7et߮3i-W{bUX$WUG1U/ã'i&QÛp5%]wT3dMMkNq9\[xTNANSssʉ` /WP sA*9؉l8g[n$N΂PQpXP./~*M)$Z6S{lrj iȱ"_+l-O,o=kp̄۠3t -endstream +endobj +5774 0 obj << +/Type /Page +/Contents 5775 0 R +/Resources 5773 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5772 0 R +>> endobj +5710 0 obj << +/Type /XObject +/Subtype /Image +/Width 780 +/Height 1135 +/BitsPerComponent 8 +/ColorSpace [/Indexed /DeviceRGB 31 5780 0 R] +/Length 95337 +/Filter /FlateDecode +>> +stream +x]b* 6$3$5w4HB<|폴A ze说N|_CEv1a!eX`B Pa܉}PȞ\Dx; ϰ-;4QZ:ɹ>)"~$oW!Z ;>^w1yԬG_-a=Dx(EqFֈ Thke`2@(ڳvz%֯~T6R:G\.Si rCZjM41eJ$n'Ѽ4ՑV,PC&XCo#g*2 Y ehy@,L2^/Y OH >*oBe-}p s7 LX#^/; i}Fh@ +S ieO3yU<3ͮaD."Z% +'y{뉌DH2Zd`LyKCVKbL(t0LME21aT2K3$M"@bq TpVcKQt}C4'઱ |X(o/(>Z,lޑbS~Jx/"!&ԉɎҸ)/s~>Ro8`7 d@Aj # _Oh/P4u/ilqpL,i!f \ +BP,d!Rb9,p3<r= v`5aM;tw^#̇WK`8WtTcMV.v3%kլ\0 F4WٍDyˠZpdAީ'󦃃іnpXhܔb8E}@@RPaAG&g G^^7^X0x,X>iQQB̨(Cq"-*cBn ( Oi%%$xV#|$-Jh-o*ԓar8*y00|Z\H"88])`T^2}%EF+_ BbAf@B0BEY%[@zm;Й wQsX@h-x$'E:~BzZE3qdt*03#bNäR z<Ф0VM$b7'3Z!a瞁ߡw{yAƪ&`Пm$j| 3,;7/` +3`pmW6*Jswexp@{Cj;n%N}ݶCD^ogI`Z,2Α<32hq) 4xF,!/,2mbH&,CP+KFbZ0"2T"a ǭʣ; (iL!\W[ b >`db*|FBڠޅc 8@S+Kѵ}GujL3ڐ~&:i``cV @>f϶ ,[C3RW>ؼ*hۡC ˆ"^u3}#K_/^GO /٣eڃ;K{qqҢ2'Ýl_*,@zT7 i>UOjE, :P@$@,P9oy&y1Ѐ"x%47_t*EH7,P4-vC/Gb]wx!XH c/ : r3p`Rff/u:F^{RS/2&\x!=blZ" JۿӰ0 tev, [?’4VeO -Fw_C7>u"52Oe)H-hVHyXfFf;+Z(ΰP!+YK]s )bTZ+{Aya;-9la'xױə] KC®tvM߳4]&%("-M3b!YUIJ2B.1E"Z43ap+7m]tG3U'0`|* D"OV6,Ό`JP6D9Bi *t?zyᶳbʑ.ac`cPOኖPbiKǧ̎1PQ4X)9uqlEjI:T0$ yRG*8Dis?ٸr#R&9!wn f{E98 `×u~`GĂ{8T2e D%x`F{!Fs+`n*nPcr60c"ŗ1q-A+ܰVʤ GZw#l0 +ɜoJ=B (T? tMXjFP ̚Ե"e_x-mt @C3*t^p}:9>|DEQx!OQ 1udLiW,ny!nLN qs:[ 6Q%H8PF&'Խ)f0 6v"0q&6" _m)l@5C@s"f;+EAj)D %dʒ-qh\({윰C4ggqeyr,:Ä<ڵ< EqqbXJ0hTWb:R3k(UeWp΃Cj$(,b *H3tSIؤ-6,fw"LYV:P*|0%u7&[Q"S셇*h/X5f͏EeO K!/@ZzނSaT-O `a띎9V&L:?ZhCDYDbg@Fɾc f#XDXuA^(/yS] MHZ ժ:E.)ƷdA8u,6΃`hMrsl(3`bºU/ +7RC[֖Ｊ(`|[a#"'껑>Spӽ(B*  LLrT]Һ>9<^\k.[Ï12Ξw^c/boxaxa  #rQn]18 + OP;tunFInWeK+VNVܢXsԬxCIh<[~$ ,Xނ3N"2A y8ɬZ\9xha HL zPV4eZ)h :VmR5>rV{`> T.t7edB9H̴ + (5JҌ`}$foSq5ġX?fY7;Svgi`'.iC\ e&I C nоٱ1{᷶ߏJsccao;/8{A,]w^yſ {-{Pk(/X(84/]"/6Fi=z_x}GοEBɀ'^~'aW[ ؍#F?/@OLVZ?jr߉ +;}_؎'^/xAaoki߼1Zq o)Zx7zNW75B^eEǵLkRXx|?*n掅 DRՎ {3&̎ {e;v,ba {yav^رv,m {yav^رi?,La%ookyꗪUϽ`Dwn{ jZ4NJ,t ^] Z ,LuEoknG=I]v^jQjgPv+3X ۊv1RX87/NJ"K>ąP?zVY ~uFhl[ ,qw/Voce p;IIaޝ>V}^柂 vVt/ /dX5kS]Q9`AefAy/phy%,|Sp+6&b/ sLX-:B\ |;UyB^(k^xT&{m[Қ9615V voЭGUkr@^(J~#kIrFya\m&; hM &, /tZ2,X&f3Tk Q( u `Af Vvł3, / +ָ>1ȕ/uJSRBbf/ :IUJV^X 26)]@06b<4kpyTdw{a3^5 dHv"7L< t,Fn>`s/ 1Y Xi[v/Ĭdr8_ya#p HļagyIo@ms-_G:ł!d0 +@ H5?M즈`Y(S/=1w^OLpas fSY&בHuఠƺGpJi재;+X^AD cWb*{&U#Pak+s ^`@"DWCY +ؗpba& aHK ZfB0甬" +.#Gt`R)Br [ТObx +CݽGYqtÀi8"P үǂ)hqqC57p]Pѱ XmUmu~~?^X@)kC*\R2']=Moj H|ndl 98Lv5I +Ӕ%bb/%۞)$W9t-BA +^e^(PT© ~Om./mh5.M3/ (`m" Xx!ʔ>^D'u + V L5XX"%QR14 /LT#+N=b/p(҄'! ^LPR("Z#-Bn qj1b%#,Z +?֊2`8BF["qX(6{!#"Q@zGБE&2 !E1(S= nIM7`^3'ꦀoBؐΫd= ],30SIС& ^7F3έ;B{B?*tw oB&eaFvDTEH0qJӴbyA] kߵ +u +JMk 3rJn6H/wDXRqfżHLW^G^0%N_ hA"Ж0EV Hh VVSdr./X~gXxjlq?C"h +X[ķ#8A\lMmJ… nxWB;@nL&A Th^)N5ư_nX`F$M6%Onؙ%0A{t$N"FJ?wxaӨ9B 0fn:? &ԕܰc&PORژL;1 5nq-RTQFD B _€f/e 4*1څ0dN@g^S`00L+gDg>Օ,L < b`qXHʣU}xX0m;fm/"PؽfUSWܪרa,= 7<'@$^AU/lXp/%Bc':=A+E4.I8䅘aab!֘TDșE)+F5?rD@VS˧FM@ve 7Om_a]L(㠬[,(YxOxAy8a0T,TP ZPEC%zn㴌^o5[ T<|Q3{m;mo!պ#8ԥf^<0 U"k/{z| jJ*Y"^4Xf1Je{4U2Cql0ULZ෎YmpFRa$Qϑ_+EF h. pvF^kR1tZ8`Gᰐb ddΉ|q.ڸ+فzƊ `;Y/ΰpYIo}0T5#ʡEBQ lj/R.&g>B?y:a QL>#0U*m +D[xNR8]%&)AzW3!b!A/,Yr/NW,t슽oML[#z3w({KdIeBF4 |G4ew,r;"=rk'y;fv Ϩ*MtGA3XI Xh6۰0TWtke%,H;Ubsq&FJV5,b r+W,0Y%<HvK]0[8+/rt^`vx +XIG,Ш YɞU;팳*M7paE~>H7d}y&/Z~јwR78KӦ?v^# D~R/f׵ +ϟt™ÂL$`̪# NGdRDcht#I|]j +`=}Wp_a&S$/Mrtt4 ;D a~xA 4f%w2T ^Rـ )?REaʿ>R ^ShuLzkl;"?E'?@ y:bzTsGSWv),^{(Jw,`EeL0]CWmoN .= g+To5&MUkѨƖЁM$Ѵqaso5)3`HhS^0E45޵c ++frm6MD/qIS6W}w.i/4iY9;Q,^3?=7tLϜs&wtaaX +@1S +3g,QuFbceXW;*UML6-cC:7}@_SiHGعw5vK?7ZmXHαk Dي9)h c,++`*cvuTn⋛.$:zy |yy>/uX;ak(F-ޛ6m*|^y& ߶ xɉ9_eBn_ܐ* *=<QۮN.C(z $ I[БGȄpT߮RSq 75ɘdDz3|*lZ +;P b6ɤy?ܯr~`A` 0 ^dX Fyܟ.,0 + vJxˉn* 5 =E@Oz6C5K"&: +*ꌥƂUVTQ@ǰ0ԸbP̮ ߰pc LG_ /Ԭp+=VJ3VH+x S`,X{r QҸ#aV*11D0/x0@Rvj1,(G>t>Ÿ)_"|x$,$צtR,ز}jP9Y&},D-*,g BU$BӛL͌5G-'cI m\tXyI|HFT.(%i&L,'cMz,^1o`A lӕZ! +q5}v GRuƂfƟM>xl8'M`Tou5z 7:rjRY;E(==^Eq^ZA6͜L+{ci~ צ%r Xp`Ƀ,(N`%֥Ěf,,LIX|Sϋb0"Mlh =K~sth`yդ%/_cǰɬd",nWBؖqX:B_L$F)\LLA%Jsk"7ĻRMk]y+]Y_VQ(m,/ J?v~@Ep,bqj^q)Q"(pQTA#e2h>^kKidYҫIz0 C~y8yj$19-!P?y'~v}ğ>v63(x8K댢 .*-> μBz!IJ}n凣,7W{ יF, ~=kLz>ğ6st0]N_/camP/tI\À;XH˼Pʏba ukW8XH!XDQk Q4"]wI! v=6é‚X@) '3ڇ2?N _riۿ{ߵ,y*JG"caG9bHP)/ 6\G`@ό+?V?bb 8 G&4G* zx v +뾌†Ev,/`DɍBʠ$],:8 ڇ-,` f#@N> 8'`C#eė5l^(^,ec7w,|M*ѤHo + >bitdSy~D^8arB_  ^d'8FնYg $ӆl^;J{^lByUv,|d~7YZqcbNCS݊h̔-a6c?VdC,Ir{假39i.sEC(Z!^ dѭ\sAȘ ޳Xxڸ߱`ZO@qLtBjů]3_- +ك`#(_fHM"S)CI)Uʮ5 +52.n:&%do{ ߟi,C&XUw,|M0|Z$nK|ObW"!lYOsѥ,ͨ׋ajiVꓙ :f l˨,-&`4[DeTn0z )9L XПH 1b(s"L81EQ#bԼ;]u=, 4kSv@ x `5XuXP#;qQ ϖim_H #񺳌Ÿ<Ɋ,ecCm~-W l#/QB`˿ fs DS,"dkmGe#hw{zH8qL⥼6KzJX+|sao~Տ5TLX FV S"?Z0); cἽS};a7vs߻g^W{ގ|nٱGHR?Rz óqwr\1$wUssѮYoo҃g_`^`D-}>A,xGzŎϜ_7ulhB1YFX٤ٙm`}Nb;ӮWLe4_ѫgvc^ gza;%EP +;5l[g@ ĆkCڟ^91MTyRZxJy{]^x ZX4V;Od@} CXVz 0,`%1Z\Wxt޽w,4lj:? Z p &/'+:gĺuw4p)FMс#5 XRgak'j޽w,({ov!^:­ئ &zqfuw,n[X XP5^8bA'#-X8)pw OjM^p `dkEKedw C=}޾ xDIzߏA,&Ii^`U'X3] /9?YG,(MKXX#{kZ*bh-' NU /(Ns (Ik0'uTA `XL;~VZWVi-b6~.hNʶt8NcXHir^aL󔜹9Ou- SFdm{X|z fN*(j^%FnJ5clXqb$@$.bkLɌ'ڀ*Mz1eF RCzS nM)e0&nSQ\K1V X; ̵򩾩u⎽*V’gjPУr#X5;b"Z{ha(X0v$pX0y^`^彈:Z.xd :hxּ@㼐KXU^2A, 9֖~癢2ƕAgQ}z?G1,mXmm f"R +b8H4pc7qH$6bjz]0xA~ 'װK_eBx %R\|ep]GRu M|zJZ\С饟IdKC݃NCzJz `yA") l!7 ) S{L:( Jd+U}}y(~oyV =z<[dy 7=TmfdL*[q60 SowQ +]kxba1L(gO̶TUyu@%|JP +:ݢըb!&*NDy F +y$p(H!B}~]U&ElܷK#oc0/g~#=*$Cq,7+-^%eP2$lwif\)ݜ b;1XB׭D^WЛZ3H|g_V" _z+ұ0$y<]˪栝Ћn(O($Hc@WK7W3$<`ɛo1au6'@9OLCt66fe Ne łI( $sM7oB+;͒rZ^ +B/K8H>$ `eʼn;_ X×ƴ PɃMrրh8@(Rd@|ФnR=$Hbg_ػ …c㰠q6q ?E?=^16f54-K,t8C`ż`1 ]@AZ"BRUbHS|IB=)~f^8`aJtQ\x! V+rv=l؅b71X("^Dź00Ŵ~ҐsԾp`K MSb+LEV̑;'O@i*UtPnǩoT$KddK&U¸u c=0V ,Fhsit$ x*ӈb^z,*zk/:Q I Q-13p%zS[]X FK&]B0!|yΌXxE Ʀ#]J7΍H/`j%V eu ,ƫp\0w_ϓPYg%Di/W:bXxb~-nº5,,|Ʃ~}fkXXQ+ijKM^04ûp&Pt@ᵼㅺ3}p0:DM)d&Blc{Tw5;d({ѣryђO`< 2X8SY>G'`kXl ++GVڧRXFXnnSl~] 6īxtrT9f*)79N6x;oP‹{w򟨃/.wp7N5?/Q,ܚ_f.vaӑ2[:rF u 6^ވ2eۺ># 9ZYtZc,_N-h/H<,V1HK\0Nxm:fyX$k'X&vw+x~դpԄ|:ldZHxPmR;Z_ǜק",P ;1iwkӺ۞a*43?w&p9=9tn_Ja9Xཋ~P.uGv tЙy=U_^F=+'ڕla'Q=-eִ*>ٷ.p)ҍs.ڹ&"8$=^A+yaWbs n)-"(,Z7&f62mFEEg<"3XkX5KJ>&% ԃ/5JIDc_ /Xd! +qƤ&^)pktrž~/̲鯂 "Ee à)tvO`ݦM '`Begzmה0(/즕T +[7<MJ], >RbPL`?Fϗ^5z-*y*v=< N DAN钦xA'!,e^ȟ}\f]-ƒíKvDn,aϟO/Ј%5JKZNnE5i6^fs6!2ư.0f;8 # SWd-hmP0pJ WIu]~[$etFN(.rqcj:irٱ6Mվ .Ivi S;e6,dƓb~a))aI,H`V,&EgNSyX88V(l?F3N_D&Q'gD%^LL_e6/Zˊx6:.[iٻ KS ?HXݥG[ZBp] zD`]z~vC- +$ 53m)}a9M]L`+r,L%CCMעNah=hpL z&sgSLdL pݱ5D Ok5$$py2+[S=N%Zݞwl,YjMVqWE/pݒ+:OQb!<[X(i*F*b!t홹SX}z+Zm8nٰQτ+fV5 +)!+M=pΟJ3%pzjf"+cyYѓy$fˆw' uUUlif/'X4EZ +€Ά(E{$=T$ 9s/PX+a ؈M%t i11>r[l#X1 ]gρrVmGӄ,D-UaUR`ZİY ]sV.c1kB +fjz|L.b)@,R|בHD2/ 6{6cEoJHXP3S$JuZq,X:Ii3֠b)P# +؂@F +"0n[^2ODd|O]TO`+ $z1HXeC1,>aV@xW!(дdybjx]-k|~l k&{8$8,-/T }hy $&0HMY& L ѩyv7Bz84[^qP:,dxg(Hx!&تJwX(PL){`_8ȦqS ~ZMXh;`^sQՏc:8|%k#Tp@{ʵg1 +/hʊ,(-m+hخJErVXv̖=1ow0nP1B ~$`̳*>t].@Y_C?qR"ջJelv/mֺbG(,XNdx!P_. z$, t5Ȅ"2oDʨ;neGB\@j &~R謜݃vk)g,aLnhM6BT dYɾȮ'0Tn/2$xYG~dkN@`@(/!*B|E?1U:f̐NAJF|_2zGT& E^i#AЧN芝NeJ/P>*ŋln=3OY=ez!Kv@ 71HM.8͍ x\hhHZ,H<ԞX^hPO ]CA_xHT;d S 7rMm^ȌّX<}8 'LG,By? =8<]!57_.Tz~Od{7>m#>~+:ajdņ0xVzjNSƞ0ic:sm-ڗnD,ckoB0yd~/ĥRv?Ƃ<0Dza\El)e $t}WXɸOhYbYk*!M>x~GCO\/SmXPjVo/XX/Fz!+s~, 0;\s$.5tzo^jXPr۠v iAdvFN/&6R/GZ6: :#l¨|ur {s#˪ VQф?DlaHCJ>)93L.ɓ˪/.oX$كP`%2V/%f%#'zi"Xh˿ʷWjQFQ IڸXoɎFN6r3 EՆ#2-4tG/ҡᐴHoVfy4'Y}dj$Iz{ebY_TVǾ'\âW'Xb?`.!iܡm}\ 偦=MۤV XW*p5Z`kb 9a7<+k4Ѵ_b*E0y:3{ +!*%\Bjxi6˫u-Dm8 *oݎ$Qmz#0k ҉>;2@#]s! D涤8N`is53BPj;ﺝT yţ ⭙[u8P7, 3-X}nWLmRp7vEQ@6"_ RgmdLNo<: KTPOiO,(vn~! cUqxGiQAI tQIuGQDHD{On`,32{Գu_hс=Ӳ[El X (40hZ +YObC{ck<>!!Aa7t9Ud?oP]p;f|BjB\oDVHu{ztnqn܎.T iÆi#eƌntMݡLR(1t I&rr_ 7Ѫf$J.G"n#8yTX] u#.W,Rrᔆ̨L݂@0ͦAZ_+|[E#}IHTU.zD:7Ol(hVA΍Kr1Ej{!ϩ>Ͻ}G_۫@n?b\[Y+oq11[%5"~X^~i3Ŏp=B` wp^~ᗻwz_6\} C)2J_ 4+24=- C2>M_nb"'Q 9Yi !;ϾfwFZ >{:ʓw361aN/300ѯ +Ň ?N4Ri:#u:WИ 'H/Y " +!Qy,:UZYʷsXY+O}IG<LࢢH eG7‚K@5|y~knt`!~ [VΚ]a=, R=,Hyħ8?xةAP(XNg}X@rb!oOh,G6HO‹ђ`b\5(b\:fI~FH/~/ j<͆w>W))qNB2R{"F4Sӊ=f a\dA5(s/X!)j\vQ3i#W8аP :BT$䊅`ϵ9н8O\^|I%r /iu;fN\8{/V/'vcdrS}ZLIџ Y=sy #K@f{+jD؀ll^:.C +ANm3y:́e n|Q.bvjo3;{+48%ўNZ׵W_XIw&~8&U+) Z֭ydD e4Y-h[:yU]UR"R=mB;@`9YC(*#NA~, hFZVmAU+dG> ۇT +i-t"[* ,y1xFZmg)EގtެE/W,@/@IqHO,TRvTq {Y;ǧ^)ޜ솅 ܗV_θ{ ?2ڒk i xV.I*R7׋cyپrg`<1T :X\%/zm c΍ƽO#6Zѫ}KgU}@vO +2#`hd6@^@q_r E!<X`Ix۫nXxq-ٝqqO9s!U)m]\?Ƀg]}#xG# +;r^#%o,L|tm"MXhB?"!"8xr / AFL>ėً^6A@CfeC1M[B}1[mB?9&ݨJ'q !ي+ bo.8#6f& iDY ,NNjg /ka(^.4I:a}Z .;3YJ lVn=a%0Mݱ'* j_8{L_gv(Jޱ8V,XGDY 9wdE#Ax³M^N\¶OYSP?v!MQN*+slXzA%Yɽ+`& _x$ų~MwO= c!RPш:Hm'Fkcr 6-,߰,ET$rπ)5;Ey#9?׳ s+ژ9]GA,K:{Ѿ 8>Iÿ<Vkf‚kXONɝKL%Y (j_@-ܰbaҲӺ)كվ]"MrY-YKV)]*r#ح\FpgBNa̲L) +wvT,p ʥjʸ.|Ez\u)ꬊVM7[ ]Ob根i#a[\7Z&lz%OccPF +:CjE) +x p`B%-IS, ud>vAb5s')Qp͍_tRD,R@Vs.n!wڊ 238zJ GM%0ɺv7׬N|r2d52<|,`,ߍ0"dܰX' > v*PHRLzG&jd㞠7O߹GӍAD:kdib 9`Ǜ`Sj! +(č3gX)= 98Z-v8c + =Vy)C: +4J*(ud[B},d6i$[v҉82v1q ^*\<{ڛc!f?%G&e_gJ [J. rn ޳ +0lsM`LI rw:HH5"1fѺ@1xG&K9]5a‰Xt]2!%;mܒ e| lF"g}'vE`Ziot=/LEL5X0VJA3A \hE\9Ib0q _~ 97]Ľ ۳$/d=w;G6.yBv͠%&@{_T7| Ϸ|GhL;5~ K ݑ&*MjK0B_%e`J>8٫*&P/;[C|_,d^;?[i5=.\/ 'Sur`1 = +EoXxzO<, ϵ /]톅nkWg_㠅r흩s.O a#67m VXv+D5c/Yc#_> yzuuQHhp.ͯ`X3}X 鞑WKXP 1$X\]:>@u;lc2f.[k*ݗ?oGVwѪ}u,Sw[D<@nֵD(lTZwFK+bXѝ1V'bRۤAvf*#ɇ;$&ZLoMX{znmw[~;.X4l΄,h 9Ō>w U޻ˎ0d aH$R>=3ۺT L)9duWZuyѹWtȫŴd#̺cÏBr +, Z*(QRc5kH6C;&mlO$S4g#q{fIbmV HL$z3nt.)kQ/w(Q@jBnłkLP;8sud!"l0 +j)znmUJ24>> XH zNۓ˓E8ЊBfWuW,pwl\F[:74jx# ﰈƂ1TGC&Xh"7躖\O$Ծ39n6X8HA{:W.X1ss wFtZ#v WѿN7FoXz91z)>f +h7svƑ ,N^ZEcF vq\\€KU'et?nۢs{,%V J Y/>3!wx,cm$wb~0 sXm3Y:-k{XpMO{za3C{N/,)7,|G(~Gf; Ul# SS/!8,TF^jJ{chM-d'yUw}SOr+"E6ms*6.X䆅O/% @(:녈ZJ]`M hڱ-ߗ^+3oXvX8P粆E-H8DpcĬ֨vQ^`0ϼ] GUOv,Ɲ}s  o{0š#s*<@.)&ZבY@g/gB} ,l}B\;mFJe NFRU[R, wYvk;HA XLs];VOĺ%6$7,|$>p9mHc1hGIz'/]2~ƂӜ5lڭf]}>aI_ ے=0i KqݣfbwB}@NBFݞup.3zv ,/V@UxZ~n xC 䒌cM2XhiH}ޝBy y wtJ{7'2r$'bmH dnYd˝WјԪ@"-y ?^[{unAEۉ>B6/P?_(a(G"5ק]e8=$1H2sʑ#D{ߖkuqdQn%1eNZ[@?5ßBӺ0B=˹_B__E6BȞyGHy6l+u]m"T Yɓ l۫b륗qw0oZZG$IѬҬ rtm66&SUnИ9`XGx~*Ț\m^h F Y[$Tʩ##iIlVs:mma8_ܑ߱Ϲ~]ٞ3hm}pd@WGd&,gH<$iX"_!utg7sDIL%\j V3%Uֲ E<6]wSҨ4\[Jl[U.@dI]p=Y~^`,1W~)ay3/C^aa6 ' mw甏>CAvt `¢|MJF#4X`B!5>P :$91-XH^oɀ'w޹] +`OhLtX= ȅ42 .Zr8RaH$i_/3@>1U ɥ֠9[w6R"'&5BR;SӒ,qzNw8z TfB`Jϱ7,i}X˜oQ3ǃ;,;EV# ~^XH՛=lC -ȼz!Ӷ'Z4*l+".V ,yX.]lϥPכbyЛ 2>6o^o+Xd͎hy%$Fc0_ȼ] sPo +%y31ѵ ]Fw2d:ڝף#KW Cm}4;\vnbwĂb v\K()i2e72 nXfzߎbS|hkֲVܓ tY3!&ۿr*D`>RΨmE.*^ ].xM!tn٭kBu9I&!ܩo|I? +1 m*{WwO >wݽ]T /_lc/? xӛ?$&Gκ xN/۩nXaBގԎT+#V| 5C?oX __AA],OaEȉ|oX酿<`QQc++Z[e}m19=J1==\EWQ4PJf7,ܰK%zyhɍBrh),c!޹RzAk3"I;5rCT6oXaBZ /t{jqF{ }ml<ftmV,fyfJW9ɜ&eeg녮T`D7[sFJ08dM-$ZzA\U"%cC_`ȉ̖lp*nzwpz#!/0[-&[,žX(݆t*R3F'v^X,&+pLq)h*nXòwFL5gW6B6wh1X̾t 0w9 +`JI5)L#[XMXc +o.W%6(}^4k&: ,>qگX6I/tpXS[] +^L";anJzbMPgB߹Ky9)mȰw7DB'JײmO$i"iギ $'h‘k5n#8G4?[!$(HGԘ⓱$qLT6p͘dyBfYk,y̕#xȌ-=W6,d q>BkɈGBa(u [;.J 'qƑV+TZr&n&$+g{mwB*{7IVTG.~'$*͍!,<b-,'Rq@/g<6mb=<;ғJP +pfvHq4[l [ĩcwO]}Q/W>/_E@v? FF#e{kg 1P ܕ+IβM<|@h,Ʌ,㳭h? %jYw2z[ vL4` !,Ȁ\AJ>:+K(hZlMBZ`EבUfV ~`!  +=QU+:r]Iz]| ](0vIw:*۠pC%yw]-d,thǻL#`׼)ulvɔ3֣tII=bɓ$2LT' fZx0ř +b?T>dﮣ_]9MP32;YVTgR43٪QT<62EzmM6gom4^X!I}h«׺]OXhir6NmN('. ϡt|%.F22's‚\(x.40@V`Q(IϹD""0}Iqx,ݏ]QgzxC%G `صqn'ҠRXH0"d,QW9M/^H(cgrNn3wFO@Jkv L f;LI$0lOnR\|'EɂDy,&k9;x>gPkB[:0r)VȄ˼X=ty0KNXX$W.jDL}=ջ6t*RO#b:צgRT)q{eJ[|.͊ץXH}4'?r2`m>|zL]y~*]T-xr Jd!,/4A6W a!Ϸlkuz'u~sXǿO]>}{_WϏןyFpsnXxֻrKnXa|^}jrI_Q]v e#.םmW)+w_}U +D856&mw'ݱ.aᆅ_"j9_N<>oeSN_݉}ͼOK+ambsMXgk6|˜Jlwwݰpc,w"뱰<‚i,+=I,5R@{w6XpĥcaoX YM7.Oz%X8p_/aW?~~,F.㑍aa5B[&wgc ^/NzZfɷ_fmfzl县nG.Adi:)ZU)Jx* e嫻gJ;N=:K piqw6ܦnSw_i_4n հ)~´|anj фMNe@) -z`!.ꆅj,ԡv~G( +< +h9Sf|,l-I'#~w= GgQ=NŸXc"ILJ0$ܖBph3 N؈e錬lrgc? ZUꆅ2kzIyܵ͘vX􂟕nXH,~ԏ;,[K1zL_ ?7`!? inkl 2s/AӻUZg곱< ? i*B~=.Y9|7vrQ-? o16c!)Ī`a% 6h/5X7,|u}z'bA}ֳO;6A-W0Za-( I^$c*)sL>!iT5vβM4[6޵ XKW@PS=Adnkah?7^FIԯY;2U7,@ʌZ(4vSL 5&q5AG,v(%Yݑ> պ ""4=&%YH“1 N|Z?%0y  Ws iMa9 p/0ILk1m,8$oyYz4G#/,%f< /I9vkTfv؜ʄ +<)4gh,bAH}p¦,4l)SM-a4(U"фꟊcVDoowM:{Ѹw9)n2V9!Ivlz|c3wn-6*BXyDV;w +I&jNTB{$5[v],ʍ0/XMx +F2xa5/w a +dQ\VFX<#)j\,פ]==iƶjz yÂ{~>Ң/:^(4:1ȣ@.bRՐL'6rZG[n;Uȴ %5`Y6RL-vTn7j%Me94Ej3' BRr*BXߥ>m[‹m&Ek_ + : #9y?ggp~d$df) |9}":B<3 UJ*0 x|ñgL<rKUQi7LJ/ԤGz' fe!u4Oa[%EiH eF_0%b| +av`@`  HY,97)%F]a{=zn !g:}Ƒ2+vZ_4&#P..OgE GcZfiN@36pִfi;FXrpLU<3 >u6Z pr.t,T6aVŘ&S@gXJ=je6b,xYdK_`a14䦬\tS*ؚca3<ZLuɇ-0tι8&۽ ئBTFJ؅~*>he3&kel, ؾR̥HjJZ Q~o x$ټb!SQWIzyo/QΫ 滅v[dgXp2[$ٵh9q+uu.Jƿ-ܢx.Z+J WF]1I@BF7B%a܎yC9QQzvUC9HۣZUD?_½~wƮ,}>uڅdTe%:WtR-=HtܩvSa|.{$Xrw^M)R XK蠛ia5V,}+{mF$NIЏB (n&2L =9BJ^uX߸9_S}{IGb۸OZ#mTN +70d% ܽZ,ˆ?qeZ Lss}\|bo3<0x,[sGJ3 ܋CHZb WNg%X^%bwCky3LB]#:!Nx=~yBc*wh&R^ brǟ~;ku8W_?Z~]]1N)Ʌ>s9:'_[^QJ6O6OP_B/E=|]/a}~?צi"=k-tI$| \8P/B=w{r" hS3=mdp|5[U8? Pڳ#R?K{B!JEP AJbI;H`d0t Eza垹Mع8 (Qi^(1jʥ/^[;lz{Zy³$N;If10kd̠v;6R$lim4Hv_h[`uGk][d8(jA +9Z ݫ:CQHӎ uArai"{-?f02K6RNz2q]IUMX@kc0d[_*3fQ[&l7/XAL(I2Wh3v{y9 +KWBCzl9:-3Nb~BnR""PS[1O'bkK荙[q̘E-C/~Se6`ߋ:X[$l$<"9H[3KF_\ZmOpIWrob3=a~7F^rs;F4:>$w;2z01!#[EqƜ:]*u|o6anxTƑZMƳxR]nG`!b#=jz:O}R ĥGqpor*~ Ly?X`F~Nk,eƿx(\Wag%> k~6JF ,xr6R ?a@/(&o^`,l^*f3۹chtMX3ROLDnj\!IcB~ckWeDzIL,l ct*qh/zA:6we_S/_#B̂h \N"R6F8vNsڅaIjE|:TT1MBnP+M@4 Cc4Ҝjo_P93˪}M<ԑb[GbWOLZJ']4\4 {*}NӱzANa*3(ζ8KmQi$Ϫg VI|%a\iw^3FlTi۞qOPKXPBO\,F兩 gcBC[/[a}U7#V+4Uo=+#y <+W)(zP6Ҿ׍ 0Y/`f&erʢ|—]UͰPrZ,o텞:;vkn7Ҫ+1HG%IaJ`\]ӊBIkN$w6N,4J$X@E{b!b uOvW٪d].rZ﬎9C]8$ۮ9jmŒDi568ӹ]GY:̴&1 [V!IkkU46& Nꝰk ԝ]q 0)W&$m&+G&@ˋ*[ՑϜsu=:!*\ÂpLPG9jB +ɦ2P )N;7K4K9F샄U|O mPKaMhP/k?.[GBJ7pƸOKӮF܁n \pSLw*,!Q )-Y ͩ JLUGU}m<Xt$~iLFr[czWYz!}K!@ Qdl9NQ7rȈo|bwe0܊2@|L`>{8jWvBuH)iOW@8ܑKl Y&;;'t4u`3BI:AF ,LtvVekO&\ \sRAwX9G 9ie/^`̓m$81y1+8PCٴOg$֧02kIRH *U/lØFt4@&f_*;Hi;,FB&Hzb6CG }b1Vp!q} +qby|)*Dc$\&u!>|j*hXw XɸGB͢v7(̽:$9PHpsݞD>O=, :^B:44*e*oQֳМhmc!2Tzu\qcTxzbzꅂ1AP[UX&ղZfQcb]8~ћҡXC~1\J.V+>zy +4) %{y iLR[Γ̛ȵ@䵵:9s-LxZm!I7Eaa ϨMh GxBQT"E%Q9LqNk1|1=dU%^ʺ͞&paÙz{]0c&pu MO!',sbdn@q>@bӒϕ00 01DYwRH[ .6"gm*]k)I&,UE%n5eßG"3u~6mX`{'w IlGMhƂu(ƪQPPP+_mdݒMܲtugCؽ`jAD4Vd`B0ـ k-6/4'\Η,-q]n߃̻)ɯ8`fk"J&m8BnޡY6ekߦwaAS$,Uz.:-\AM p#ӶÃ1OQW` +H(CKtбs{j4IdkI\G_,|P?F zVHҎXs$yA@ʖ2\'/HH<ՑۙPW9s,&0ώXhGXG9/@Gt Da`=ilBДe K&Xh=vGcկpִ(ubRa _`!@qv7,Ce>ǝ;Ed'o4U?w*|8or۹ -Gw ʗ$|Ic387Cc ` iMkȾ< SX@d#Nlg\U#jT]gُX6UF=:O 61+/9IKsA^Жu$v`,P,;9^@AW^`5o0뮙س )-WRӉX45£X|\!v^axs8 SfWA AZ? ?s^}U'3$v,kX )#+t%>TOaFɹcm~ a +1~FAl[/vG,>n/z} tʪ`Nɺ.Xڤu qr(DICٱpɢ+X?Wz/y0n/.̍\)M>w,ڟ}`F>t9elݐlhv,X X'[(F1IId(5; -ز?h.oر/bݪ)0 +\ˆ aKYeDZ }@S;ޏv Q[X/<󎅷ϫswka `/=c= Ԟ~$"+7N)ev^ر@=ˀp?A3=-%23NG EyXر4/ے<HVļXפP=jZFmz?'e8'=N6KދObA|xdč~捹Vܻ#}1,ljO+t(?)7-V>B̿J fx[ehu9\qݓjv #z:vyԘ; \~ֻ>.gCa.$B}SX8Vп GHX &F/cB3+{ %v$X4\Yqs X?ɋc X^ +qk /k/; ׼Pk񭵅w,X?Âͥ%I%K s^{^U.\EywEu|^p>Yw,dC + -Pwl kM 6{S'hOyo &B;8]`0u7QC/J|mPa{t0__t|^XW'9Xay3ᾗH @} pʹ-Z{aƂKE7p-ܨw>#~N7 T,(y+fy2(2K k_yvv^w\!(z,O$PJ,gc|E1-#ćO N "E!,,e·\X5vt:&Ř@x&=ln8 cG;N;֓/+3D@cÌ5Y^*(:#10[C0¯5`hfжmՁFXu>bS|PIh;edx=163/,XH4;FBT.'#m!V[3^tW+8tAHxEGGc:Fdyɀ::7 +4 .blȦ!}q%;Xfclxds7pɤ{ +KGXD SŪo1P1zYKшP% B"9\ +upr~\_XA Q7ЁPxR:rbK?@ÝE;o' 1HC@\1/2ugѼ(iSł'PڐK ^!B6C*vj*a78϶㋭Ng&o ƵXW\J`Pീ[F~* 1HpR8Sw >~=C*MvL #="}l^3ƍWCi#sLb`<5F 瀅3L)t ;/|,ƮwujqV6s;Ӝncn w-o~/! 0 ]dX񺷟Z|FtR;p[/pظ9$psw\wTr)sm:;ͰJtQJe#Qz]SI*`] .zL!# ;/|8Mʤ~~Jj~W:UNb:7OTTPECӨ8 +dhޚVp(Ł~UB^iM4Q[`)ee(^E + +ָ ?7#ŮЄީ83,F2Brif"Zw$WV0;/z@ : ] $ +݂ŪlvXI-XQUg5#TZWMYX\[ڻ cfo. ]kh[FQ-,(~H19/;ZSƈa 9Іʐ*吔[-U;•59mb-C͉Yɵ^Q8EGMRTJ iVC("#^/;SCJzn/yir[9a' nX УM)OU5B.bv,L4810%bLkoc,^iMɞx8!lo^ȡe@"yA׼9b@yuHP : YBҤ+FO[ W90DP+EW4׾熽7pKwpM8EQQ@!p+ '`<ou.9NG9< 0h,V +dWQm?eir@cʼ DvN{~ 9xS0'_]'VeJox|KsBY!ba6,$bZS)? Mi4(>`,f` @c]{#ý*N{ױЈ þS'`~;2"S9/@@ +E|}u};`&g('iRzs4-zPy)Lus^S!+|Ӯ߈d^#;K, / +r83/T>F.E /BCj"L 43j%8zy]V۹7A1[ +|N| /G k)\?08laS׃s\e_;clO= 2ԗRS{xMU:3a,|s$ǃV{NG_k/ +l[yJb!f2,zBX%+ `/JH4 |_PSJEjg4UղߙiB<@^l/9*2<E^‹EBww)2UU-xe#D`cpmMQojǞReGd7+-BIe"2(+(˪OW_@[֚A* W .jUμyeiiOm;߮6Vm_4w̩ ܟӴ%x6w~$ւAu?H%5[3ZuJ6tLV"xUnF+1>/L*G[* PJ:UF+1Ei_jłT|wa ,Ҫ. M +ad!8lHds +=h3*Nka#1~^Lt^G ZJmu /H1G,G i/vZ+%Ӻ}o/p\̧›yaur\6%oeo@/^d\Ո -UtO ]\v|%7yE~w^dP7e^łXXT{q8 N$P !:b!BeT}:n#E;]owitüU©GL,$h C,o @eGeڮ<@ t[@A#o#Hz*yC^=SY^q* ]x0{.t6$)9(5t 8CJ>dan vZ,V,E %Ur*8YzP{*RԞ(I} odՂ?j+\_~0}b6JаO΂>O|/lR`Nْ4ғaZF4Kc!4*jb@Mf9uV^(>i3B!MqQn{$l;ô21s8D^Ɋ*|VÕ//%^JYmHx58gT$wD>/K*p = ݭ C6SX)zQ/-c>^,!] >/@W5U3њ`3AT1PʦA`/L8dڬq|$+j BЋGm2U$q>cFQx#f%WpIuOVѪ1h7t襵>LYMD/ߓ[9KD]T9;HKvUߝjHN^!/0EBxFg@@M)v`8.9>=cO9 zp̏CnS +?KppڸSn9GY2aٳ1c "wkp֣z $[y'`@FYG.?x{P9X23j\>=g/,tͼXN{CTr:GtOy'~$ @]yNe1$%n"]t܂ t֘Ə Z$Er dO0lcQXP;hcq-ͺW j8zEH!WJ*?<ƙ}<ʮIP1`o :UD GkN"R "$>tյw͉%SNF~ ~B$#FE2MAuM%|` v*ODZoObwvN$?lxsB=^k x(cʋdUxOL X/f j/ku2>l^XiP@8fJhkXP:͋UQW$/y<𩲕Ǿ4į Cxq\sfw+M54%+ȝN>ƝitGN{vt'Gm]3-mqr󶪥* #c .".;ͫWӾƒ4갚ZS,+z%U?dz/JܲÝG?O5OǸ!5TsX1]e8#5;E3"`rAIکq}+ú*wgu@u&=֭VV:َ=^8;d@ +]8u,t= ꈅ8_ɷL>/xAv5cͳa@ՖF9`b]F iW-t %| 9.c)(gGCE0x:oOS]EE|G;d kX,=RCh@Ėe YƗOuxk瘏t haXxY>|"BEc|O{̏4|'}ύ 7>Bp: +2ʥy8b.q0 ;GG__GD7 XYmܘk_B2& ŐUE |6NVAt=ޙN:O rSM '^_ɬTwg{$ӎ[RKjB{xWG:"MTir!B8dN?RNu3,*XExm/ itQ`4LN0 :8 Q<-<. +bNm->, & x>pXhXpʝi9 L|`Su/O/{@bAuXXקs!g68^H-{]IJy.hp"Ä%7/<**(b._A' mcX)(wg̎CvmfEVqH36"W#KFF +A}E5}N$V xP84L|Yu /Rry1q:,SSu Jb N/ +]<KI<~svxZ?WbwYcc憿}j3޷L]~HP#[)t"Ajg+X`.n@ '+SGdqvh.M_,G]qw +&QXPc%DӁ*2+܉缰jA7_QF(7c bڦb8]1:}v·r[g9^w` UJfGpMK>.:[^WԪ̺ڰpH;j]5&=Fb:5,Mn, +<.qV12=0GgV7]h*ɤ5N^x =s^ wbava#œc>f:Qic '>PIB؛\qX>| 1]ʉoB +k)(e +ڣe*>!5}SX4wg:ǟh;wB0I[y`Cy.#kwyGW4^t:7 o &U |[%MS7.5 Ph/ 4r.s\JLBcN B|m^߃} +O6gFr϶)Pkxa0,"R8`V^(q0*0K$l-8#j6eF~ԛ X:zO\O5{xwRT%[-乌YGzAAX-2Yq'J5G^Gd^۶|x3B]H{C+Ȑ$,u'9ap4HaC#ޅ[

- ?dHhc+ub(B^Q'hVònVG +-mXHkL]DRd#/$_.( u}7~?/fyAP)@v#: vB mNبNx q=<'lE@1{w=^V^ q~" }s{+*)U +U}74}}wTno/n۱ ť +NP))"tZx=d=^d<\/^ʡyЃJHϤ +듍S{AubILgg*/Eb +vѷ뒓!_Zp߫#mȌ ~1)I8<& +zr:{Ox!&,,}kUy, Cdp>O7훒Qx?q'W~9<' oCF`XD28R@J]ib/PSv+IxpL^"j/:Vs B@78DGz7;/j3p]).4*paӓ9BƓyƾX0EWiUhzWxC[wԁވxܕM?;/j,܌;+{2\MSi) E#'Zֵ]Uz`ȧ~Cڎ`$=&Xb2joN+?VǑv`o7@7Јel0{+َ]=u0O 69Cho< +GSrVm+^p %#aX#V^Hm`ޞLE0uߞ𥽐3.ӡVi祴|5: @ɐ s|!ܱyp~zQW4^tנr)Y`| )}cao[PfYUOin:%cOM#EFXu gH+Z;yaooq63 XEþ/?v5x=ncX9qaPOb+/bRYET_lSYC~~^p[lB*ye +2>9aY߉Q4v;.|N7 !:j"6:y;':`x;tEWicӲ<*w )-p!  Xo Ґ6+yi,.6grTA'rA:em1eھ.6 Q|>< uvO>GеyRGDs/?#U9տwƝ1w򏯷’| ڍ:?ܕG0O +iRǸ<̅:۷| +y_O:ygؒ _Bz^ yoz>h qsX ? `N,\3y~^ ;/|'nH15×)7|ĝw^,uUՕXrxO_q?7۱Xv{A;Y8o^ ;/|7W ;/׵v^ p1] w,y^vyv,q^_ێ=?l' ~,?=s࿙XBB^^ENy+w,CX`OG +Ad?!3x?(-O7BqaζF(> ʵ>٧6ZFfciyq4flZ]ǘG+Ϳ8fO(+{n32?m;| ? K&:l yr..1yzޮS6odaZյ^_iR-vDnEPqVG<6/QiOhx}ikLUpHs_ a4')m,gn ߄9 ˁobaFVzyۆm~fmZackjѽ' [ˆ| ;xQ,  8^?` ݽ]CVy"i=B<H kT˧};wiV^`//X)0 M0tσ6js]o>ԵN=> .~^OfΞѮl7>Tq4KC}:GH G[Vӌ/_0QR ՋJ2>iTpß#\s {; :Lji6цa +A*[4$|]:e{ކ,B:R¡K%<&@#0qL-~ zzT0"БDuI7+8Zau`ܽ^p;qẊ 3Б8iבޅO5Qnn5$g{d"t %w)'~\x^]&8^pL蹙V-KK)V +eWMzqy[⩳6g{֞:qDJ,`Dz!U! v=8[F{P-\kQ&]Ѝ0X7`!BFcXHiwr\` L j>`ϰ/7`I P ǸWcypɥ|^0EJOwaAa{ pg|NBdY(" 0 i# +ݺIЌ!}~gXuI}Zr̶VSZ,08wb:ԑD&~dl»PӸ_`!^zziƨE)@|T{A=8WMP)ȀXNS;OִBԦZa?y{rV,X}שS'DPgf 0TH{q`ᎅw`F̗$:RP3"-L;F ؕ@ש&{VKA} j@ґOuu~/xa`G6iXdŽܤ(n Z^@DŽ=T&R}dwBΫ.00X=řkYX(obAg LBM'c8`8X8`bH8[&^9  O mFDCeqnh!ڛШlp> r}oz +,Gt=CRc7_eݬ*MOqgva) y$%ٔ\/I s8pjzWa^ӔB+{Oݱ,'Jyoj;G* ۺmQ|Ž wvSwc4[QdX۰:v, )k$! 9ڧ8}v煷c!Q6^P< B oX7/$@J ?#E +młP+eOH. )=#PIߡ#|~#(,DP tLv{SXP\(:\P= )fݱ,hmw< /"\l"K.'\=X0=Þ`al%g[y/3G}#Y,Tnmk<3 b!NvȎ`XP:!{\GB&soyO`!¤o9 ۓ~,#:BoA {@/Xл6x\<)L #9&.n,EPXX(:!p9ɦVs=s0hcϏ`+ vӕǰ ᦞ q|;ނVTMqR:ALi<=!,΍sHEO,ȼx!tw,|?@-mS}S۱XH9ׂ ;2T!(rkZoB!`p-$Jw._cY,eERyݱ{}L}XutՍ"~6`xd#85gOb![h3|:;ޅAGj Չ3:*N +sqkwyv, MVr۰+APww’ݵtDC:T5,2wI4f ,.ʃ)p v=Wj)38?SQe&pJ|L^s*nos?HrCکєb\gXo,\`!gs 6?ЀhsyPZ,2f#$&CwxlވJ Fp~NPI5&hPqEdF7i W͸ZMObf?F^u8d9C: +VFpEL3|6m^pl^y.PS96:G,8'[a)]dpa-"ވ/MICгSDe'۱0 qb^kČd^Ts Ռ8Z=X`S,hmMC>lR6`Kf, m,D'Xmɀ S]uxXb;¨  o‚ZVBV,tʔGMYM?H8D 0k>Ր$+5TX:>#&"gnґNy!`n/{ ͡lёjP}>02f煷c5sna7m~QFl1}F4!RP`;{> Ws-/X7c ]x }׮L?`e`' ߏq'ϙ[z$Gfs<_( 1t¥]BYVK! Kz-c8#,=K@z7cBc=y4q1+//%ܔ@ky 4}w e۠{%4JIXdvAfiOn2(Z) AvL0AK[w.\_͕0uxNSX_G'p*gp aǦwĂ ;CXS +#U8arN.N Fɔ瀽v, ȷb#hȖT{Sk[mJE[x!յ}< k,$6 5k ;c}<̧uX5/CQǬ82kXXa,}@/.tg/%l${<^rOw{Xp6?sUnT%籱7`!0dsm>kv,e,*~Ev,mp AXX\k_   d(/lTD9gallxdb[٫/W+%v޹o9\ރ'ԥ4Q;'溅/'>U~>J,xX_O%kb ү8h{a=aÇKcXxFmilC쐞C={mERm\1m&_"3;*|m +e8poO1p*pfJ8Sme0/N9wԘAJ< aΎڈydL8X! 'XP-HBߚ?[mk dҘ9_7cԾ +b\$XI+ lłc% +`{ " zp6c, G,c: Ir>ւD,=f,X;^!YͶAG96/h՗-<Ϧ*Zh*4ǗS|ѮN~4ms0o7yO^CO} 9X 1$*N%&q|#4Z C0Y8v&e=a< h1˱a!^T/YUˑdX ?OAmZϽpjʃy"D} YzTIiؾ[#XxCt$r1=4O{amMXH`bp#u/ a:-L EsUpe͚G:r[c=U Hcsa`7|.B*,WO6P3,/jdBQL IUz6y(8\dB"MK`Pi2܏[‚_C&jsXɗ]d|]h3ЏZ XP=.H4vs3$Fpr]fE^디)+ v5B(%9{EX:$KXa,oB+4T*1E^T_),ƪ6TT"!Ft-nE^4J҉Oyr_ד0q 6M2%1zVL(B$SOxB&,}?wYX#*B <8XpM2R."ȌR4Э9(\(d1|zd3/z{wlfTCbapuۗ4.~"{DÍ/ 拑Bⳗq-ئHpeCǔc!' C3$_ԑ(,fm%Q[T"ѭuts $++-g0sb!oRTpa 41Q$D*@=S| /|F%)hN1^P\D|2FO(O96((N͂Wdt `mg0&g^tvYJ Xu8"6J3uVx/..%q?*Vp]9 +QXض#(RSʭ@A$*e e:MB,GaA]id# +X U@5L{jJ;Gnm6y1 JN^ON&GS>槪Skc,t݂[`yህU 9/VV /v"r^TN Z1Bf9FEk)M\ 8ʴXV,V|y1{a~NL.6R#~SS{G>u,~ {КIU8`yh/Dh kv0NG%l` H OiJTCi-j:|d2/œTIޭQL^mW],,|VlR)wMcC0oMG<;Bk4V.fGJ9s9xռʄIR^$:;EBGDkfJ$3Ga!ͼc1/$ 2%&H$:/7`UI&y2lFTI0X05|~jp1ɪI>U2ID8b/9~$gL\(b(bP4=(@ 'R-XЮ:qḧ:6:|yQ-l`-+!L 5%QmXneȕhmG?ǂI]Pɑ0r) O:~[ _["ka'>Sjg⦖~\O 𾢙hCă{VٌӰЫ17& R?pO㴺ӥBS"DL ^eT2xXB wUpy=XȞQi; | =U}^t)n+ϝGvK7c}J6>g]bG4Li%$M]}#CS:g&EϹfa15D_ٰp>4 +BX C% gN,;0 /S =.̯G-oV- LqzښMbF'45Ѭi"z2EM. ^ ӵݚ-FI +V holXx#-! +ǩGy4PL%y;b!G,$ոVPq#R @aJ6_dB@?ǂ&oo$(I~=`φ[AkNXyiu}̑,,S)it$ukFPz /;/e.WFh,1(NU匿~GDTD /`B +Ipӑuv0^HO+v1%n[חR{s]A;wߢk9[U.h#| eZ/D@%F$3ݫGzTYXX +#[?R/^Ml#c~GuiVҼYfMӠi=;17/E%t9|upoT?]-n[(jɹԼ0J8SXȝ$"5]/_l?Re9xj\brt`;'km]p .k:Ci +zfG,I&<2[˒#x;BOe[Cƒ`!83,|V_?놅JwdR]$h.[WrQ"ĂR>4 {9rݡͰm#y^8<|'Ɨ)X ;E˝%yXO݇iA$Xܲ5K{*V*G(w,4l9sq/$ TsdF`耒vӜ7G^0<9lڶu6D>ՖOZ  $\Q0nDt%ZՅI7 CWn˿\m (dJjs h7u \E!~%i;xQXBz렸b;?y VgQX\Lqy3h&9[J h r^ahCB T`r9bMVk(TJ}k܂tny!d+2uߤ#ŭ o8lۧ2bpì B0Mbo *8R`ӑY'8Q8u j!S2D?ǐѣy.܋EM%~5^>bqڀ巰p͵'ow߷1X=9_$@ŀAs}!vG,02%:aavHsh)"pwP#S/T +u~ HQDX` Q:7 8q~}PhP}ܚۚ95˧a*Â=H? }hXM-q3P9U\G6CFJsq ;niBܑf1[9@.BL H0X؋V; M#nz녌Ikcaԍ~;noE / ]>cl}4B8d X-H)G f`v&2{#w)k05n^5vWrjb-VWW=cAՏg̠Mxr &fY *?{, 5Ζ,Dmgζ8|Gicv#^#BYn }%t_ a;g _3eUL҆iF T˕]݃q^jb:6q=2p K@-gX+v7oU^7*̤l3_^vpHLu |EeRt/*9_%c D+.ȃ&l׮Yjim}%~ /k/\Z` vDZ+u끬 +Wa-JT[ D:?btVJqtRSE JêUNt$Y~'FGz!b1Mq?q{W 5I"+"~J.z;K+fa"}+곡=wPx,TZZV6rgZ|m h1P +*= Xjn!Y&=G6<;00\%EH#%8+V=".ct듬Y_Led]mxM^4&Xhr [LiZ%WOp*Fp2,O0 L|T'f=Űf%L ('d.׺XSRJa~O ަ؂&/代fh}5om9@.Բ& &H[-6LW c W r\&m{7.l35|J .[X$: v99ݶWViM ⪽"AVㅕvFbp@sɥ ^:c0w,|} HT#/vj ЏTq&:#/٢8&[t SH^e&/bA[FA qiþoϡogb<9@^7>#~:® +WpA33ښ+hZB=Vm+c?u%_[Pk;Kw0,}Q/&kܝ1➮ˬaUqOCJir&kI_k}$ e!6j.Cz{ w崭 Z ERX_`B4PMa#9mw\w0CGz:H3 ans]UU[I(Ѫz`uj_v5yAq\/(e,>=KJ\ wbq{*R/syT<σmp QXc G-g8$m7(V/+w,z\ͱo\26Μ_Cz,k/`69u+ZN/6iRpН.A*0 vo}XN>.wv,OIٟŒc5:9g{f!Ǵ&-0~ͣx,IuN:B9(ns~~X!\ ¶&?d\|0ɹK24,sB) 8%}YsNкwgyNѹ@! X V3_bPsPΦu 1gy<n=t].!\Р#=7muFM +ᓻwy`A\&xAcKE*[ +{ Y㻇}9"z7N))sU# *i2 ,$RP\2Dޏd,Jr +E\*E +o 0L|3@K5:`w6AI@0a!MJ.BɎ:é6>wfRnjKz8lZDLtqcNg} i]b1{oAS`hE:셶U_U:𴣛ZN.wX$"D! # mrB >~o}V̇/SlmTZߵ4hL}> b{ C<в-պ5b$rOre =L9dot1!'p,.QB&A !/#l#x}fK +L*0hƮ+)Ӗcg1Jim[T]KoI%1(!8r[g8ZLlWwwuw+K#֌Y\Ox'Z)zNjY{H8t ,L`ֺʎǼpĂF$}.Db9, r r +X6­}ǖŗ@;1Dmr  8Nyɕdǔ$0G6Y9L}^spryq5X”/H9:)Xx6S lh@_g 0F.|\s[IB-FIT / nS=4F%PAl^y6qzW^9sY.<>%yO5[L\aT%[9V/1_6)v  VcfJi|6+ `"PS|VȚ|@Vdn1m{& +cEE A / 4xa W#TTˆY 0L@AI#?dבF~͏ [be9zbesv W\B +aD?BH `Ac?m,dJ€ˤc,n&tg/PSjlˍ +uK,#/9e.p[$W4 ؏b0V(a.U0 X]Rr7/]6O+po6Vt>Q#>gs] [Sxlso/N{ s'rp0OxA:[t}Я'X *5h케q'QkXȔ>ӑ޳ĥӭ_E:t˅ oj?zE +#l?{}[n/Υ1, Y! Hu𖡷C,p*^X@u(ygcKh,i&xW;jwu:Ww9/JRo;\2؏/4AIFqlr&SS3Sp<~[nOӃwOr~!?OyGe.0qՈd/[!ol +%,Lvpֆ'?Rm}崾ߘ7W7#_ 6¶b4IŴz,Z.T}%.zNPH ϷWiWy 2ҺM@c8gfL=IACa][mw_v#Em~)y(" 7c'g{b7*eщscn%Z,d\※{E~9lDA(;ehVpw4H7eBm{3U f>~Zm?Sk)~ѪVIp7a_ :Y9 ]~2F>Sdi<1naZMɒndv!Ą*q3q1`NAun4ugk椝9Ƙfgf2ϼ6 ,}BIW{Vg[Az06MS|e99n\oq HlL~[܎52LC<W㩶ڝTlp9Y EOx{Zӱ7/ o1pMPETóS8QO0i!)ĝk%MCt.>#[a5pn)uXiUBοvӪGTqT^OܱV/k٭<Q a!QL}e|g[hz6#,*(C,vIya|4h*@myx!$6=w㩺,*u|E/`3>J7-\UL B 6@#Bl6 S 7X(A2AX /#=p/xosvZ}fG"ovN2훜VΏs/%8X-,L7*7gs/t0\n0ZK[cXx3Z_܃Q2$D ,!/P6YpmK|9r ,_s[23b6Qn2{m"g< 䗙&%?k@l nM%z`Vx.cBZ,u5!^+3 ۠u-@Mł¯H$?!9󡠪;DtsAIirNҢS,+Ką9(za;Câ,R9KHߍl^gٗl ߝ/`!^X'#nͥ '6 &9MuˏԽt%\fhp€d#a.OF zb!פ;%_`ƃxaSN;%1˷X (u2T<E0q<=KEبϷdV) e߭P!ofUj^"VsE8;T9`P 8",<BƧ i6Yz3a舅Ju OIcʒmO5 +*D:^@ 8,ȕلTgt?w}lM(Xϰ {@9 ¯b&Bɑ_XP'w 6J6i5ƈ09&jld|?[\Fmoם^Hz<2ޠ6$Xx0T/w#8 +."k"X^tU#U\XSvocz2Fy᠍:flZ"Ge? %^ΏHI\S p=-uv)!A92u&Z`F,qsh:;R]eX&/mj(XX ,LaWwtQQK<ԯ̫` 2ój:𗱐c,7Y= S[_zXqp~I>>`!S:BQFFߜ8?ރ񵲰70W_7q0Fy1AbXCpƕLGv+,jЦC`GGV/s~ +^#ӝ,Q^]>zɽE]\_. 7^v%WRJf{_dk7E4h/0x5) ) War *C鍊ǘA3CNg { &ChJUZ*m}c6yHԬ~}W+?k>:Wk? $T%vyy:0%$ù:Լwi26MQf r) EP \Xa%0,PBܩ A% K얼bJ-`Ο@Z^\I;yAJ o&17KJ-/(nya8hXXY&8 %.l30 #y5Ο +mX5ϲ'ؙPn8  x,x,X,|a7 ?Z?ľ~ɉtd#Y~w.ˢ.n>Z  X?N^be0m-vf{6[0NO^NX0h7]M07d;]wP6rlfw9LE c:ݕkUJh=hL55ҍ]݉L,5p;bhmf]L23.%}+;z]a[LweX҃1>)%M1wlQ8!Im8OX[!>f;ӫtb:]U9hQN_Sjɶx4ta:twNǮ:!܇>umN8}rBl[lNo:]'hGz:M,4NA6Nַ:llM3%_%KVjŢ-m=K,/y["(P9mLlXf%- ¢ϱgbv`ϰduډEqv#&dӇK,uz ; Ӽ,LN/yؚy.)-f;}lwOeɋ f~.gdOwnby: Py?2')P2Mˆ$#Pb)PcI6MbhgN-(J[m;oxTjOwwx-<.;؇lǨvleᡙ)>lNo;]t^.vz5LnN_St1Lwwleýval|ӧ;B\Xq/rҀQi,/ f?]v_L%߲?^J&R(.TΏ/s/| /h/0/Gv֏/v&+_|%ާ`!2c˿]~H/{ _|{)+i?nsk 3Q%> 8DNcmB"L)F%e,6rHhqXXMlf4\BRFK,tUO1VbL j"ie4˭Θ&zh2g܁eLPOJ|jl*, <ܰ htʧs,@{5:{gI+Dn^Y,SvVX6ٸ&Fm5`۠GȫxztnA7>JĊgVP+0ƉTJK [-/j* p W[Pj,G" 30Js3EzL+{T0J &{kjҔ 䔜nVU +@Vx5VSM Z@d;CSg % >Z,D،KSo¿jʆaGFz|sc +(w''RLpb3M#p@ t~R;^~j -Dvxb +^JwB$j])Qi‡N3iJmK wu HCĭy$L:]r̖&\ +$-jahYDFHXLBr7rNE$ ]eG^ z@Z%I,Tl%mBȜJ^gJ^~h^CcE9T2 hZ ufVͼD=2 c5%qS "d7ˡy"iIbWlQ- g;ɶP ~D4K^+!0Ut0F +s5VA#Cxo*_WԨc)t8`Hl312>`ݮM84)t&+a=?Z D0b7$V!m6s6,cI3,b%p01Y{AJ͊GiT Ψ'tjB{KGUgEZ(+Ϋ.{ pԛAE@n/0'`CQ.NvV^7kp +"G@j  Ab p fO"z8Ի{ _S;W 45gn遶m?Vx@ÂD,H/d V׸A(w~J% + oqԤ(eog,:c]vʁp9,8e&OyÍrS +^Yoo0h>E˯#.hv1f& 4WkM6IO }dHh {jZ5P'RT+p&P4Tv߰yqsaU-/P 0/>lT/ \M th,3I`NJY"8XKQt,v RJ3Zݸaa|HDs~pX0a#(6=xd۰`Caڜ 8*aL:h/j%,i9`vXH~0j\oDz R@t:53ed1k/:p0\A[5b!wE ~ &rehrL:lC\5s״D6tX #u{xY/`!$R68$%0p)~A;>_:+.9|& +/2Բ7]:pQoa,5BybHIt#& (5\麂o*=m/edՄI0*&5yR5RW^ʈA»"+IY nF|,DfU>H\͆:10*vƅ_EzH;L s vZ G8MqwDs%T z`,/Xer#Yed4t\ƥAMu +3Ld xNj0Y"gS&G%zR sY9_~EsHG,r[ˬplđLr`GB5JFMB6Au$}!jWⒿ^ņZveyP,v#c@8ؗ#Ff-4b.>,PsNz5 ~i UK:tIe> @q dWAjAX\Rt0pQG,ʰHx{Wl'v).5(XHdk4+~S;p +*a +¢#mgF[ޢCx-&῎ +d4M$eιC E鰀tX]K+ܰPabAš(sU >yի ;b}Re_)gzONrEmЖ9}<7ZtBpɜg Paup<{]gpyXdX@^up$u$P .`.H.P{|iINR`*uj +44S퀳Qžzh0*h'~@=CMD%E'@7yAUz @l*-K mf_ 6_v9zc.T1Y lב<i9  [^3@ zfB>=n6H9~b(Bł+Iӄ/ ~ m{y-֝=/.‡yya:  ?WΞLm|i_h|B[Gt1vx%휵 OpOh}i`DKM] aa㔝%tHm=%xwZD9o/x{9)ήKEEڤ J[(.n#:( +;,z$m“xQd2nf,gTyrۓ[n\:^`nƜ;>&aဏ%Kx2Ԙ ׳~ o/M^U\P2*́U)ɧV`&&WQ/PhݗkTf]A lTAcF~; +_:,dNE? Wy榒1)6_Bf WQXW6=Tm*AXh,]CmաZbz1b$/=sIR5[98ڭZ4= + ?Un\80d @{( t1aY/mQ4 u㍶3n&(yC^:!h*h#R7t%5rGB z=&A'SvN7):)r=ɐ:A^[,Lf6މ-ynQ};(y^,`2tsiWѨ+M`0 +7|<|:nȖ4%uO8D{V?'}tS뵧x}7x! +dE2v3j3ik{2-%AiPȂXƻJIhobgOT-W@ `a7^bRn,baɏ3w܅h .eLd*M>Q[IUi>w]tXj$B15~Pd-^T94Bg=y]7wud9"Z'`Mv3mvTL!Bzyü؂B_aX=>uE[z\DZ݁'IQ+˃@*U2gR# (Kyc2d?PrݲRX|‚[5,Dg,TZi9L@`7Ey!D0v'Ǖ>B㎮y3xV$ iiIBm>̈& z Ôϰ+P5:IVá(hb5^h$`#t=7=ǪGk>Fx}9 ښ +! +&nS8$fC\x{{ny6br|||zN%()q_ =>حk+wHQ$& vrBy/8KLfY&j5fBfV3~ȊpK E V d_5ζ`dpG=A?R5x.R 91IV0k䪎 3M +xgjRԉ(hWcAdL p:Ra>huۙe; CyK5UGC^Ȫ!VF9n;"+x=Xmg[+0;2 _bpdcIl9b3j%jt1Y1K +qR%M_moSd`(conhD "+m&q26e.f }y91\ڵyc#.q1?Tn* 9XN j`pUd|Tt{aF:өn`GYpP{i"sq)0I/( WH0gq-5O`^]:M`K/er_} +baimP(ŀ<3 뀬+}[)E`,:^?5oB{ KzZJ B7X0k7s5' VP<#&إm[ $*diY~l/+w=L 1.lڽǹQqfܧZG~ D-seVXRS*``!0Ce%p _99~ΗxN{hv^XYss74&B$ecԑd%MVAPYѦq# V L q9 S,HWmێee_ϬgБ c)t\  YU:RL&>,ˑ*pIHh΢?G^ %}pQ46ȹqa!tpEՑ +@f!X^NzЩ#Ǽ̉*j7>'XXl v,F fh[pv4" ļ } a#WzRAFww!w 7a`dהPՌ  3qzckS 0yA5}.{Jٸ@؎%wS:h:@yƩ;lgŠj]`:qJ*ěj$李/  - ~l/$ć}jslHn@;@NjXdX֎/tZաC` O`%W] +$ W'Q$ Xps *QdRImG*0ڎ*=\B"1/8gSG +j9W1|u/l/În,Xk$/ ^\khMBr1/#:<3~#RԾ^*刅X6'Ў^ :#;ךT2Vה?/mC `ca}1a7[^!W ߱Py .sL$ >4Ӻ6}btw\| 5(D`s0h,;^;s ZpQy $ L ȡdAaetwX˖YqhxyL jg,uUka>ks -At3JLv7:/Z<K+;kB=RVgFy&TXX_)I`A{ B85 +7uL Ѽ6i-kG#<@7o(9&%3+&`;םSCkquw1AY)r pzZ9(On;|g2mx }^=)6hlj5*+n{0A*FLMjĐTae 8 D*BV+W*α0K>)UoX*d`ZԅQNr%X\\lufwndž{N6]eiYZf# DjjVX+LϠGkӶһl_fIv}Uݱ 4Nc8yk>BMGf#pʜqb[kTKqӅ =Ssu}xX0dsS0OOͶ!pFU# 59T=zkQYm Q;Α/-/ZBn>3^G`nc~N^xX ~$`/qlj,m ^`A \[T(#,> +Oɚ2M*晰7aj)|Mt;N e\ ?B~$B#mvU]aաBo,X֑0 1 +LFPB8qXRNHU / 0 'g3^9,崸]#,؍ <-; ʑ@*E;fGJ޹Pf:xi,x^˼p#~ޮ. ZA`@cL, nǠXFFeiD=ֆ[GsڸH ^x/(αvqNS4SR_(!M8 YZ9Xk4adj}*WG"9ayG5vi`d47MA2!lb6d#v9xII5WjSp.EbC92q\d|7# 1杋1v e/6/PN]x0,zf;ix^h^x|h-œoM ¾gW=t;& +D"QZa HqriXr1:BA| wM&O;-G@0#"ȱ+h0\*)z 4`EP@ytj:@ ]ګЍ݅r3fUwB7Bk)^B6 +EP) +;B 6olã wۆx"-]Uʂ11!F,>D]괫FEUx,riP(&% e#R{eF[j %D=AI-[Fyy- J#'3u = +6Ub]PGoj[5mв4Ye2BobA 7G;BlUM +Y]M߂ЖZKŪ&&GUkl-mJmL؆2P7wH?h6Ja+tW}oj}!# IS3y;K^RɓvXo . &Ć8:'1MJӇJbVi2 *ۂo "l8O< +M> /ӵ4oz#Mд^VwjjZ/&K$&Џ~cX +7-~,dYl~߶? 7dDFÆ 2dȐ!C 2dȐ!C 2dȐ!C 2dȐ!Cmʂ`&4vo!A^#4Dž^q-c4u]7d}uJ4sJ&s׾֍ݶ0U4ְwM5%7+ <=5_Ms|#|Yi8aSݓp7y79<%Q6|Gr3UXsa l Bw/ Wa~_cOݑ×GX<^iSfj + +c(,U/?%y-)=M,4u4ؿ[_6?eUXx-Iqb|C, ?DM,,__0X0Xx`a_  f`/`` /,  f`/`` /,  f`/`` /,  f`=F +XX oRޖO:zD{J8WךZ{?C2A'~.WXTa; A;{Se3&|,.dWg$"3ڪ'"JF£q~۝J%tgZGo^Jd 6b$.Pg?9U2?`tD+f[:M2V>G^* N-~mn$߻B_ ɬARP C 2dȐ!C 2dȐ!C 2dȐ!C P3wop?卐wnU6`\ѷ՛5{Ns}:m_n:wؖ29bt>sFCc4O0Gyg:ĴW/rőTե9Dm^b[uFxe>/e#O..wZY?vg{-|f~Bށ17=iu7`uy}.on/Pu2z֔GPv6 F* ު?lNsk'qpl\oj B~x> w&ǂVZ~PytЮ~B"m\כ@/0B!ơ :$(9Pq۹/hR/萨Q:u KU~A;'A5kXXugvyϜ :$"*y­Au\}=9^tH*^{,h5A;*Ol.;H"k~As:Pz_=O~ OXc_w[,qoI㮋oS}o',U-s~9}ۻu,؟v;,طUӃ͝(iU֭ + ?.U1]R`[ On  9#>*cKGAsM9;ت߼~v2ԥO ^<^K ԅXX/`tT3"y/,HN;|AGg"_G6 Z/$N;H'K^Y̺tUkr}eGs{= _KYWlm/u_xj;/} c$׌sN/L{5e~z_RqU,D ^# 3}iF,_^ BXH_s| >aa^m~!`__玴}-q8}ÂڄeIp4-wXuޒ/Bܜ[Qd7`ugxhxYR u3WEBNdBzB{~i;MEXb֣_8Y%—kgXUya<ڼ3bk9k`dˣ9RS ә@I9?,׈18 kP/wT|Yyu>o?UuN4$8N<\Yhd3G=5J!C 2dȐ!C 2dȐ!C 2dȐ!C 2dȐ!C 2dȐ!Cc[@lϤQQ"_]f)5"'ԩ\Wf/%NP-fȉm}jheD\_1~'T\LC2φݒKLn֧fM۽CUh'7_IZo/y )`TТGfh;u?f +J<ăPLfmj}$sOz+&Y@T?&[!~BW7/ pO`m)&0؞g~Xt9r(;%?mbMOV=y{vs Js); ',$:L0zLf:WD zcc܂J\BË>zWiξ4 +BIG:?Dq<~ rn ho/ 4ZmO>x`mDeіXn6F 4ʷ:[]X8ba_ŕ5A5nU]kFZCC_v+FbC6V2#|#G~8m x0xamD|w2c@ `\og=N =xKATaA3c βq+fw0Q*CB,XF;9 b3YSx!]`u>*A.v;\>hAO 7B# zu1-s*s3;x/ނ" BuLN%`-lǺ8Zj0 n!y/E]wdoP)]5YAȉyѯ:FoC-LE>]Έ=$g,:# W%K1P'+>< [FɜȞ2ʅ))xiޤ'f)sZF*Oc?芅D=QI_x] ܩ unXgUX!k2gP*!˴ TomtT#@vftI@-'c1“5g5EuN*6DK +#<] Ǝ?/D4N au6Q+G= +(_"dOZk o9‚ί`L'6˺r~ EsڔJ8A{rԥbao<@ st`U oS1W3<*ӛ_h9s^8&~>0y|N 4kaCYP ʈw*jK_[G9Q K+ˆ x:^p+8۶9*0T؆zl|씼gTҕZrO'OC(RG^ "ʆ?: ] %SQs )#Co%͐ 2dȐ!C 2dȐ!C 2dȐ!C 2dȐ!C 2dȐ!C 2dȐ!C !eF !d q(bGo f6)j„)y_7b;E@$ګ6oo7<͕[ᴑvr%OVb)D + +.ǦETaMUUIrDId("AԴ_I&z7(4)#J y5؉h2i {H>"]k*<$-|ƞ3b}- ]!CN8 +kl"F2a9ӻNI5CZZ})!2 ̚4V9|EUغEgrFK-r$Em]Pov1Y=h +>I5< ""IeUeC=e_:H'6 JDp_oC}iF84jm71664 .F8c8(mk:*G;ijf+h6m;yI2El@,ǡv'O ?Rُ<|RޞD8ybC؋>j"y@[PGEފvlhvfa_ 9Jݩ@Qdq"KhCoO`e8a 0(1 _`S"B1m8IKJ~I/Z4]%;x>7s&j%=dEkm -_36xbXa5)6lܞV3WQTmBo'uz\02E/VԤmmFцޞqi̦~41Q83K SǀʎEya3)u ?2D ie2_/H>Zeq}d<"endstream +endobj +5780 0 obj << +/Length 107 +/Filter /FlateDecode +>> +stream +x`FFF̚666%%%񳳳铓[[[Ղssskkk{{{bbbRRR;Pendstream +endobj +5776 0 obj << +/D [5774 0 R /XYZ 85.039 781.388 null] +>> endobj +5777 0 obj << +/D [5774 0 R /XYZ 85.039 758.673 null] +>> endobj +5778 0 obj << +/D [5774 0 R /XYZ 85.039 758.673 null] +>> endobj +5779 0 obj << +/D [5774 0 R /XYZ 288.958 -427.984 null] +>> endobj +5773 0 obj << +/Font << /F64 3118 0 R /F75 5167 0 R /F56 2898 0 R /F15 2884 0 R >> +/XObject << /Im19 5710 0 R >> +/ProcSet [ /PDF /Text /ImageC /ImageI ] +>> endobj +5783 0 obj << +/Length 2175 +/Filter /FlateDecode +>> +stream +xڥXY6~_G"3@$=`{ L恖iRGG.!?d@GUUQjZl7i||P"FƏ7&7nvk?2&QoB2???luҁf_)}*B?4zE4(ĉ~Xo7@ïV3XmM'b=A`U|f8E٠Њ0ؕGgl?ܰh,}I0h? 3:$!OUckx;lms:^zḿЁFv "8De8?(a5+=VNVFyW,Dݖv.ɵ>TaxIOm +wd ҙ;ȥ״70cXUS<(5qk;0PhG*:#ăe~S ە7=X/ KH8_+bkwuy ##8QEh¾‘yDe{^$ CWt}l4!D@/x !0M H89VZ@V8x@:ɈN#+M 1V/gq}#R&W}VM?\{ |9}5~s?=SGDؗ`چ8\>LA':DjVwkE4ԞCg:hX +_),SP"4 l.4H[. JξKT)?*Cc{3Vf߈ɁI>CObZ&I 5P!)$&?kxK߸aqZxR\/]StoԨo1Վʳpfhr&(Qjʁ*g~B bl ;Xn Zp&.N. ^cCvGqlvKǼ.qzs<[ȕ9]_ȉȇTNrkBA"q D<|D{SaYܪa)|*Lf˗«v(ׂEF,փk#a*y}:0ۆbJ6EO,ռ6Rк};G\J2MǰMVG3BM:HɑFzt[pʳ| /z +Jsqr\F 9 U6<%OjsKD.raO5?ׄIs&<ݬq6Fl +O{qr4LT{bzF2U]ы +G 0&\zc:kzU(t$a:MBy?\}rWi[~OUFA0('gb2?Jiu(M>4" i Gl@K%R*%pb}';(EQBP%*~s e"$1y^%KBKikxu˙m;r;bG^'[h g4K13eS8>8-WW48`?| VVkux0~Fҫ5󼬵-vi:z|gk-{bj_'JcnSr(+ [_D}m&g&g^ JEa^?%, RBO {dkLoYgǩ7 ?aύrgOj;aK=@?> endobj +5784 0 obj << +/D [5782 0 R /XYZ 85.039 781.388 null] +>> endobj +1874 0 obj << +/D [5782 0 R /XYZ 85.039 761.463 null] +>> endobj +3031 0 obj << +/D [5782 0 R /XYZ 85.039 671.062 null] +>> endobj +1878 0 obj << +/D [5782 0 R /XYZ 85.039 671.062 null] +>> endobj +5785 0 obj << +/D [5782 0 R /XYZ 85.039 642.326 null] +>> endobj +1882 0 obj << +/D [5782 0 R /XYZ 85.039 571.69 null] +>> endobj +5786 0 obj << +/D [5782 0 R /XYZ 85.039 542.954 null] +>> endobj +1886 0 obj << +/D [5782 0 R /XYZ 85.039 260.981 null] +>> endobj +5787 0 obj << +/D [5782 0 R /XYZ 85.039 234.367 null] +>> endobj +1890 0 obj << +/D [5782 0 R /XYZ 85.039 234.367 null] +>> endobj +5788 0 obj << +/D [5782 0 R /XYZ 85.039 213.374 null] +>> endobj +1894 0 obj << +/D [5782 0 R /XYZ 85.039 114.086 null] +>> endobj +5789 0 obj << +/D [5782 0 R /XYZ 85.039 95.82 null] +>> endobj +5781 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F35 2888 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5792 0 obj << +/Length 3237 +/Filter /FlateDecode +>> +stream +x[msܶ_qJMq6Ӹv&ꎒX*ɓb<OxǗ U*Y(Uq&l]{x %Zd|{sDx0_ zb&cՇ?_Auf%n.3\]FYr̓£o[]?} ԍut6`1`#㷐KJl oum (^r䅐_ra<ʲGvP]/{7c~'ƦMNeG>1xuRJt<3MxA8tC6:ZcMn9F 3>h∢bB Ahd&Gk~gбrK^:lըQ'g7$~a8pXF9K p?0f O\IEa;/0aM?8T"jMߴ/tӣ \ŝ8wLN\ƫ&_5)g1;' #p!`eM[:3.]|H5Ř9F/Fw0Ð%/;/g=hrX}\zx{g;; >N(΀S>rkESffY4hz pY9,‡]Ht(w>R+2MWR5 5Mk&(A(ny,2@oaQ KADSXGŰ`#oapW|#4gbt'` ~ I< +TAhٶI6dN ^c!X(ӻ=YNQ|`KxRh87[M}sSv}Ap;-J쉫a+k6vU=1~  +Km `'ڣ$A' FU/D +tλ'm+aSB],>}}Ap5uEV gxݖj==Sd,bSW% ͦ@͚ui4 v@MEŕ=:t*WK/1&jZDO6+0@hp8mRi\tʦAV!);'b1h2/&c* *ݍtnz`+ܴ% k#7G$x }2`K䅑Y;BSbh!t71mpiɐ,XT:!,%LC;k@Ӛ#uCh0`TS*21`i_&G=#32N??#2OGh0Fh0s ㇥ Z +@3Cӄqi\EǾ-'P(gqzfd& LR@i,_` aZbʠlxa8r>4/4fSF3”( t*zL0#~$er&VY"t6G| ELK 9%ǀKӣW;aB zɈ7=E$Y$۴2cQx1y1:^X%rͲ Á+>wZLG ە4#30LG<r''Zh'yexZ,O Oh'M}؞ T)4̤#mOC Bh% &!k CB3q-$+ 4akĤ"|1,ə~IG=HU>j0e >]&9,QGdNSʠAxx54)㧏BtӋ'Vn' rgm]O醪6xԉR6Qa1IgeWhǺS`*%ZKcams0.pWdy!2Y0H%/ǂZHYP=G  +];Ļԁ$d SUȜW= Y(G<*n^"wx> endobj +5793 0 obj << +/D [5791 0 R /XYZ 85.039 781.388 null] +>> endobj +5794 0 obj << +/D [5791 0 R /XYZ 85.039 720.089 null] +>> endobj +5795 0 obj << +/D [5791 0 R /XYZ 257.152 726.062 null] +>> endobj +1898 0 obj << +/D [5791 0 R /XYZ 85.039 582.549 null] +>> endobj +5796 0 obj << +/D [5791 0 R /XYZ 85.039 561.353 null] +>> endobj +1902 0 obj << +/D [5791 0 R /XYZ 85.039 478.545 null] +>> endobj +5797 0 obj << +/D [5791 0 R /XYZ 85.039 457.348 null] +>> endobj +1906 0 obj << +/D [5791 0 R /XYZ 85.039 290.257 null] +>> endobj +5798 0 obj << +/D [5791 0 R /XYZ 85.039 271.385 null] +>> endobj +1910 0 obj << +/D [5791 0 R /XYZ 85.039 171.529 null] +>> endobj +5799 0 obj << +/D [5791 0 R /XYZ 85.039 144.914 null] +>> endobj +5790 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F56 2898 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5802 0 obj << +/Length 1829 +/Filter /FlateDecode +>> +stream +xڥXoH_ɑډ *P"6mI,b;x o>֎UN:U׳3q?A?/$ L,% б ;:煆c" =5D4B D  $EG*N$ǾJYuQEӝGyLwւ S&O7ώQ(|oH!nTKqQp;[>WnFV̌VeU =GhXfFs2zaFY1?f9!2 CRaПc!DŽ;7YWaCTfXwS[9c<92ayőD!P!E{3[)2YՈt,9Kx&޼ڝۮ2x ‰b,߸u:af g_g%yOY'̇ecZdC69k$J5 +"QD:*AYʕi[`2(~PVQ3<vvNYجdU9bRB[hzħe +j$Lh -|D<$ȫ89>2Cܠᙳe$nY2R1`;+4]c&h<lXgfҺ2`x=B}63؞>'w%]wzųmn)qr/^~;+[[ʐ;f.cMm(3h왰#zމWBzU ?MQdjpwL̒QAbGorY!+CwꙭGqL2\tȂS+"{[ff CH -TN! qƒN&~-Jwؘ:PMS.k<aĠśغ 29[@.h䳹 h,?PuwEqOvxjq#~QR3Ŏ/ +ssl{13ٴN{ +BE\|Cr L`)%K ٹ싒5U + `هbA-]#Y~r* I<(]p 6f\Pςa?L5vU2y&:04G!(ԚUԹ0yc)$|t\c cf  n G1y.O ?~96|q_~;oх*l(#/4<'Pθq01c)ݫსtR8ZXp(Ic2AkbHSGL7Se!'f:e?.P=4Y8j414Z\~},82%=K8I}ͅ: I9a%/9>*Ys|rGҽ̵r7. + +G=Nw䛬 FҜ"A05c,4rmQ3gfXV0DU[QpgEMmnv᭘tCzY'GHe|}$Ұe1z3Je3 +Ts (=ajtVm܈fnVݥ.FjwxYQnteH} 7^oϟ_pEx~9_>{WJ q4X(o,'9endstream +endobj +5801 0 obj << +/Type /Page +/Contents 5802 0 R +/Resources 5800 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5772 0 R +/Annots [ 5805 0 R 5806 0 R 5808 0 R ] +>> endobj +5805 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [141.013 726.489 469.456 738.481] +/Subtype/Link/A<> +>> endobj +5806 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [139.346 713.243 202.339 724.811] +/Subtype/Link/A<> +>> endobj +5808 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [141.013 527.64 309.095 539.633] +/Subtype/Link/A<> +>> endobj +5803 0 obj << +/D [5801 0 R /XYZ 85.039 781.388 null] +>> endobj +1914 0 obj << +/D [5801 0 R /XYZ 85.039 761.463 null] +>> endobj +5804 0 obj << +/D [5801 0 R /XYZ 85.039 743.459 null] +>> endobj +1918 0 obj << +/D [5801 0 R /XYZ 85.039 563.482 null] +>> endobj +5807 0 obj << +/D [5801 0 R /XYZ 85.039 544.61 null] +>> endobj +1922 0 obj << +/D [5801 0 R /XYZ 85.039 458.303 null] +>> endobj +5809 0 obj << +/D [5801 0 R /XYZ 85.039 431.689 null] +>> endobj +5800 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5812 0 obj << +/Length 2888 +/Filter /FlateDecode +>> +stream +xڅɎD!Lq=@flsQHmmU$%RFZ^[7$t=nwul9? ;"~G_NyQ7O+Wj`|w Cyf(v;P;ο`= Ͼ\g;s@NnEts" Ot:)@7X/ոX8{v| yEG e]SfA !Pv- +##h!<&\g_dyzq +[=()d1qiPT +^ո"g  3K7)p@9Bp7@RMS_Pv*Dp$TE >iJA"#Х/0M 8*3y@mbppߟƃ<킦~&~hHN"}jNK-"'A)@3Fň '˯oZnl$Vlμ:093&OQevL8>…5֝u39->C=S=ŎX+^+3Pguƌy:K|3!U(^G:IYGKD[p&oRwCrh{e@Sx7ˁ7'4坓}Ks9e{FŰn4/{ KРa.~+Kk=xT* ƹ z, (#]["!1¬ T[U<$Uڰdlh; cZ[Ι`4J7 dDYdhG/;,v_TrgS8 5A[3|;g%YŁԪ5xX!І88Z T@D0M`CL +/c2LdY>R 84|DDwБ"ry L.pM2[8V~8y@,K{6t6_2dF]UZIC160&.$xÉʥ( *,wM<6^KB8s uHyVB' +4)x`Ar "<8Q3`lIjnTA|"p^ќinL.5V:AZdEiԈ4 {➈4kMPE9I&]vG%3ޱ 5K|1Ui%RbˤtjN}f^--1ѓܡai>x z'C7i=ss?b:Z +arCF֐}>kޡ6zg$? {Zsm\_gMv,/Lkڌl{2PrzO{mfymj (%5PHij[>W7+=cyF`է5O`K@`S'[ZRF+1f(,Pc&5,6y z $z ԴZm?^_AYw(v +o6=ķ\qsߖYG*T*1T6S DdƉyqUmҴ5b8aEq<> > endobj +5813 0 obj << +/D [5811 0 R /XYZ 85.039 781.388 null] +>> endobj +1926 0 obj << +/D [5811 0 R /XYZ 85.039 761.463 null] +>> endobj +3032 0 obj << +/D [5811 0 R /XYZ 85.039 647.5 null] +>> endobj +1930 0 obj << +/D [5811 0 R /XYZ 85.039 647.5 null] +>> endobj +5814 0 obj << +/D [5811 0 R /XYZ 85.039 618.764 null] +>> endobj +1934 0 obj << +/D [5811 0 R /XYZ 85.039 492.295 null] +>> endobj +5815 0 obj << +/D [5811 0 R /XYZ 85.039 465.681 null] +>> endobj +1938 0 obj << +/D [5811 0 R /XYZ 85.039 171.674 null] +>> endobj +5816 0 obj << +/D [5811 0 R /XYZ 85.039 145.059 null] +>> endobj +5810 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F66 3248 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5819 0 obj << +/Length 3465 +/Filter /FlateDecode +>> +stream +xڥZo8_ܓ lM{..iqvAGlee_3R-w8pH/^<8/WrM#.BŸR+ŏ̒0\-Y{0O>{@/gA ?}~]1/vv77oځvIߖƒK̚O~ǧ +SAaq]OD8TNDgM\XVu٢궳(k ** +Oi^h0#6aЫ0%>t tj ͽyB@Ȅ/rO&-W!sS~U[gd(y@mpϬE0 ,c" )%kbvC߃4(7o[nr<~h.NϹ^gǬK=p8!57͒m@N͕dI uG!,s+,c_u=Q*rk./kWee)IN׻x rW6jF7+ގGOVhIJuw~8ĉ^ݾ%b<5+^ ݡKLc Oluu9zѩ5QC꬟!_ی_IM$wsD\{S1G 55Zo KSAHEId0~}u԰SręwPf/-7wSm E + ȈJ ࣯X ]7O:2 AIǵ^"jý톮M͠Xf +[q,RƞE/s)˖;$l?aϣY#IZD_I%h6I5iGoLf?~])p^|O#1c&R8]Al#b$_7H?cPIRxi!"$jYL8HD +q%dyco&nS/"v #^%R Ș2ٹ/b@SF<ۃwY&z$Y4 Q1$1m(hd=;?0˭^zL}M l*y7ym_^hs%]GL/^L0sQ8rr 'yoȑհ.݇^8洮.cCXuΛjŲi_m(1&g0:Wɐk(CQ1ac+R߈@udƱVD,mS8\o;Aft֚pA CLh<B PgYe*N0OMc6K7wtQÁ&tѭng Uy^*r +Mەֳ$@אZ/ۿA ]+b"+P;[wQt@mLȠOD rcM6KA#tUĭ3>-\v#)`u #Ȉ楲w+@!O'TQD0> \SUL,FPبg1f_f"Xbs[.VTqf wO󺕕$;Υ'RhFEg ESuʥH}M@]kc8pMbH|EjpOOu3jPjn'~Ei[qAq +4K-<岤? )/[y*$[Sws؍tpum ۂW3Kʼn (7ҫL'?%NWڡwll>sɔA0rGo%dQGFƼ> endobj +5820 0 obj << +/D [5818 0 R /XYZ 85.039 781.388 null] +>> endobj +1942 0 obj << +/D [5818 0 R /XYZ 85.039 515.724 null] +>> endobj +5821 0 obj << +/D [5818 0 R /XYZ 85.039 495.134 null] +>> endobj +1946 0 obj << +/D [5818 0 R /XYZ 85.039 356.955 null] +>> endobj +5822 0 obj << +/D [5818 0 R /XYZ 85.039 330.341 null] +>> endobj +1950 0 obj << +/D [5818 0 R /XYZ 85.039 258.758 null] +>> endobj +5823 0 obj << +/D [5818 0 R /XYZ 85.039 239.886 null] +>> endobj +5817 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F14 2903 0 R /F20 2873 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5827 0 obj << +/Length 3646 +/Filter /FlateDecode +>> +stream +xڥ]s6ݿӗR3C웛5/v'7,R2'TtHJ;N!X,~Au,_Y,^m +c)(ΏWJ0 ~Xtb?C7w>/ZkObE}Yd{x@oy ?ܾ)_>X"⷇^{p<;n߂6ϫyv}v08үHXtͳc1a*~YIGv2T0y P:TiqAnV 8tVm5Đͪ~[o:g% JQ~V0NwIZQi2#pA=[!jSKy*WetfP-276ڕ'2\UP,jYޗYQVy%Bcq"ԉ_ j@Xxڼ9D3;tnM"g ɔ ^{߷M ⣩WEc\IJ>D |;n5JBRmf6[dU( Q}4$[EQ%Pw +@;NI㇭c*ɽ";,7m{Db8"fH~fxT2bdCl0B J}ު~49(\_e0>I 9HjXQڕ7Kw@'ۦ-Eo&0 i45XL{UYmu' *o '3_E3¹l>(b6H'/KKk9"Fu kmnE2[(ykf@SF͸$ȉ+F~x:F'ιq&?4J,عTԹ:/8UY"790Z +3JZ05b8K_pr4dz8)Fi9]tXy;K6Va뼊$1N^SŽg;BO%9]9e)Q7m9\sE,b;R Cz<>Fi[W~GnmmߓbSa) a$VvOU]7Y +k.R/-Kl렷it"% +r4zw'i+TWw2l 5~2/F<ƋoN=9VJfX XIY ]>xâęm*" 8ǟe1yBuI.FHy +3Of#OfaEEfvGeR*< b0x;,ůh@9T1'jQy.aD.PnE$sآqWe0s̎*#ͦ~G/L#y*gGtXϽ:iA~恓>BwYx*yG(xvR+'Ο3 mPr%tGL=9U=vGoˢh$DEFpp^%hVҚ r]Hnj`Oe[CmZ.rŢ^p-'IOf0Eؒ⪝a!V (ꩺbF2Qfܴ=Uk8ƞŠK'^zx0J5-EзV$4ƤF +}LP׫BCB:Cv[ԙ䄥}υ {ӑ}qg=ltn" vhwԌLj|z29_S@"gb|Z^ȣ)8 ֍-endstream +endobj +5826 0 obj << +/Type /Page +/Contents 5827 0 R +/Resources 5825 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5824 0 R +>> endobj +5828 0 obj << +/D [5826 0 R /XYZ 85.039 781.388 null] +>> endobj +1954 0 obj << +/D [5826 0 R /XYZ 85.039 761.463 null] +>> endobj +5829 0 obj << +/D [5826 0 R /XYZ 85.039 741.134 null] +>> endobj +1958 0 obj << +/D [5826 0 R /XYZ 85.039 658.326 null] +>> endobj +5830 0 obj << +/D [5826 0 R /XYZ 85.039 639.454 null] +>> endobj +1962 0 obj << +/D [5826 0 R /XYZ 85.039 182.516 null] +>> endobj +5831 0 obj << +/D [5826 0 R /XYZ 85.039 161.32 null] +>> endobj +5825 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5834 0 obj << +/Length 3600 +/Filter /FlateDecode +>> +stream +xڥZ[s6~R3M;mMt@Ć"UsJҙC\\s ?FEJf-,7p{ne8O䆑Zߜ?}\\)w$Iwn*gz|:@׏ODͿbÇ<Ç76/_xnmx62o{6,]@s}n*7L}G͝OR7Ju@~ I乑 }e9Ob +9%nZ ;);î13TP e>Tmcyo=MTܞ72!e8mW\qxbQdz%ĝtPʉ+O9C-Dj(3oʼn^zn/nٺ~2̚"~x/7=9 AVֻJF5LV2r8/nzm"?a- ~v $C&bK{8"8}Ԫ)H_>+G}j`yY6~Q8.-Ex>^ȹo9-ӵtd|Pry5 K(*O +Z6̗}%6mu+UP:h*Pcr+37FՃZ %B6Uy +7WMaBa"3*Un1 V xMU0Cl(V Im8aM#)qWʶnʋLpr[2Ʃ |n;61 +LvɁZ[@=}F˔)A>կl(ҕFt%6x@ :+-﷧63+]ti(J.={2G8sQѳW29Fh{ltT5M"\^zlZ&J؆GSsȞ\н;D⽵cmN;uq ?;$4փEICm;Fo4"ҩD{hb8/ +r[*^meǺTGl3 +3[-ـ~ I|K)ҔbXg=jN0eDxh9 "P4c?qT[0G(Q&߆ U< W2ʚ HF,lT pႣ58}WrP.vDnӾۺzͱ9{*Aģ``{`?] Aή˯]<wu;YR Ɣwb/;r1{%dDC6}r.0}"+ QLc 0Fn)Va¾d 1MnfW#50^C 鋢M<"4M  Y1vPxO\}{.aB;;bj.%]2Uz/YTM|v*:nl;n7v@l(eg#^zn@ԫh 5ud$)g +( +ȍ6aG[h,7nOUU25G K` meWqu9;F@|{}Xpj 6=Î >di > + [ +I_`0` XXL(Ak4<%l|`U /-ZA' zM&,JhN п'&xl9kA r`_};6R"[ys7FƼ̆쨔YjB4M;[wBq~ 䃉%Ov$ I +#( f ^L^`]тDp/!J bw>liƜeQ(= +a ob'B';gvwD'K):.Uc.ok 秊O [;L^`e%(ct!;rl\OҔ 9: Kb/ Jsgͣ,Mgv)f/'7h&6 + ozhmHt\&BYʄ98ŧ3Vǂpk O% {,YX l ]UqqG&lal4+6NH\I>?Lny) 4׃sr ĒXtoV%ݑ|ȟL\ݕ5r|_3Óz2)%En>74eӏTċ¤BxV4< 􋿀 -.lz_MN`5U+Kp'Es(s(X;7; LE_K,˸U r`ј~F=ZB$L_X +0pV2{8IA Tw0u@m:0w6׏F~(׋w‚5Ŏd10ĆYES*H*Zډm=7criijߣd*kƓ!oC,TbK/)Ȁo!if=LE 8Nsp`Ԟҹc #Ґ#sS[.׎cs G1 3wýs#7v< ^\d +c%8ߡfI% \t4szʌʓ܀IhX>y<]ٔSĐP 8! l$Hu s]5N?aq} +&|*GE/0M룟(ݳ(.H(SF׎Yfc\)\ +_O3h5C bUalc?03RwpM?8Sxo9>yVL\eբ s$p},nbB/T[*1EcSv@2mŸ&^猟̈1PywHI +ݴ 1SN;9LMr'Л5^~BY&?x +E'9R4F֏X@_6]%v `0 +3H_t6wإ/Zl~]2t@Tv=Hh.Gni&2sK܆/l5[ISW%moVDwQ&dqN ?*6>F4' ^2z<=p:U?#> endobj +5839 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [250.936 169.022 367.444 180.712] +/Subtype/Link/A<> +>> endobj +5835 0 obj << +/D [5833 0 R /XYZ 85.039 781.388 null] +>> endobj +1966 0 obj << +/D [5833 0 R /XYZ 85.039 572.649 null] +>> endobj +5836 0 obj << +/D [5833 0 R /XYZ 85.039 549.331 null] +>> endobj +1970 0 obj << +/D [5833 0 R /XYZ 85.039 371.679 null] +>> endobj +5837 0 obj << +/D [5833 0 R /XYZ 85.039 350.482 null] +>> endobj +1974 0 obj << +/D [5833 0 R /XYZ 85.039 212.304 null] +>> endobj +5838 0 obj << +/D [5833 0 R /XYZ 85.039 182.899 null] +>> endobj +1978 0 obj << +/D [5833 0 R /XYZ 85.039 102.678 null] +>> endobj +5840 0 obj << +/D [5833 0 R /XYZ 85.039 81.685 null] +>> endobj +5832 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5843 0 obj << +/Length 3789 +/Filter /FlateDecode +>> +stream +xڥZKs8WxO"ߵ&ɎM<hXH I%ʔ3U[~|ݔ b?4S~eEpJ(Bvh^).UA~y{?Q^ޖ{o~}sjZi}}aϯWYݾp W؊/ LdS~zZcǻ\<[n?Eyv_8(vs?v).y֒|0,|* ;RJҗiq~B}`m Nvk]/I08q^FtqcB(nɋk+խĽ(woy~5Q*`[5E' C߷zCK7~P69e8nM1s Fxx9FHO|Ax׬ ĜvWA|ҙBVkhB֯DZj^|ʟq+jqQ &:)^7N}Q +J{C=~Dȍ +Ϲv9 \#) +2Hw-ĸEJ[ վ#7vnąǎ{\5䣌!%7cݵ MqZ,9*i !RmArӴ0Ęk~䋆oh$MJx8\d0ULd$q spGl;Nzî;6hu1xbBcs2u⸂#bPP䬒 +OFJn|rhY@gUo +C$Wq *R ܣ'W_I=; f ѝc:0H^i]v H,4gv85dfhm{k *c"i YeynT GZ(`9v<:4Hil~ik8cfos8 #O6:P]{ӂX'4aϤN,W&L y QS>+N8$)Q8>WϞ bolK +M癲$s((%ع@肝L zlV,|{d 8 H0dX|N8u$1}v3WB!tt&02{omiPyE)fY'p6 +ѹ:[ %WEI8rr;Ē^.GJ80Sl I+;a&_Uա6ICv.e=Ű )"vd?Kʵt,˝0e}aRŦ7zOQK`vJJ@㿣BN(6{Wru*j8Ưm2&9DMM9 ‹ +%`(5AH-//!P=ӂE ѷv;;cD%k:hD i_@`JՖ +A^94d;㳧uXأN/P5"Ih$5K&(C'^FDƃL-DQ²X4 﫢pU99x/AK֐ +En<R<]"dIKgpМ/M҆Rm]Z \MR2kq%繜h`Yg){7qu}%A},zBŤ7HqOw=r@N (f6 ȅ<^>Q~R΍Ї4Ql(&N-ՙ9~/oڙ}yOjbZ + CqFjK7w)  !Oirؕ#Y,}h(̝|۶PͭpϟN tI9wGϟ~O‰̈́@$173y'pvR @ ՌUxx8p1ע#eQB4ӿDCЉlQ86A +/GnֆM;V8VH&e`(H" Ȣ>1!s`k)r͸`~@#n ,/ zV2wKWqWeY,2n~hw}.CDŸFmdʟ{^lLpw$7J2:ZIbO}OeH*asJX R SnS8e<`AP)ٯH@}0i`ހVk5H[l%}J=݂Chĕ}jpsR 2;4?<*N ޚno|6`5YBT,Jr;yH~Ttc5Yq$up$̹σߏnNuzd=MTfFo8WS}BrEO++'l]$2]5Uϖ7v*8I`IV~pO>ӊ~!);g tyWVW|YUcZ^²_k' GD +endstream +endobj +5842 0 obj << +/Type /Page +/Contents 5843 0 R +/Resources 5841 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5824 0 R +/Annots [ 5846 0 R ] +>> endobj +5846 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [348.805 382.959 464.335 394.648] +/Subtype/Link/A<> +>> endobj +5844 0 obj << +/D [5842 0 R /XYZ 85.039 781.388 null] +>> endobj +1982 0 obj << +/D [5842 0 R /XYZ 85.039 526.891 null] +>> endobj +5845 0 obj << +/D [5842 0 R /XYZ 85.039 505.694 null] +>> endobj +1986 0 obj << +/D [5842 0 R /XYZ 85.039 262.418 null] +>> endobj +5847 0 obj << +/D [5842 0 R /XYZ 85.039 239.1 null] +>> endobj +1990 0 obj << +/D [5842 0 R /XYZ 85.039 115.645 null] +>> endobj +5848 0 obj << +/D [5842 0 R /XYZ 85.039 95.05 null] +>> endobj +5841 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F14 2903 0 R /F66 3248 0 R /F20 2873 0 R /F69 5124 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5851 0 obj << +/Length 2273 +/Filter /FlateDecode +>> +stream +xY[o~ЇR@8"9^7{Ļ]+IP$Z"L*I"?>F((rf\sO<ϟ$Fy:ĉtL+oWPBh^ϯfp{*pQѓgۿ_4uN૩ljss;~;vo[ xG\}G~}=uqwWo==7_ _ +S:M&0+XP˼G>5e} m +@i?:R1ڿL]jY( \jzJEf!ٍV(|vɞ]͘v_g/`ㅌeڢ@;H#vpGdVT4]r +W9xG7NY1͚j_/Yl3􅞤0$_7D3ϳ{Rl)Fm9 {U.ٺD%r>`K#.odP]עvB4mdV3ŝ@ +[aqrGb-BEuAz|_y&xrKef.jȪi_CP+t(ʷ]0]b{tglP<7n-Rx h74 ٭QI0tkz(Ճ/y/ +SV" Xǡ!?buVO#Z +||H.N:+-b憀KHB64S!9}ۙ\2h[r=~ "G^ 9q" fcWs*o ˍ8dP E 6N $(^%ھ4}xrp1`ozvN Œ-rXIm?{g1X-HPJH'GVC OmAJJmX@_I lD5!ńM(z)w,r{ :5Pm5F,0+ڲtCmYIA 3d;e]=[d%,;Ft\ +hl#.gMf1/fWF-VizHs"q:$|O͋j-*wpG,]LJs!BM `Q/Sb^ET!#]ƱT&#8xÎuvÆԡLd4;l?IþEy:XZعϗe@s >た +RHdTJURuOP'|t%QRmIk^Pa7Q'}!I4"C8?dƶ|4RV!ۮb#׀߾^ *֖o G-6Yfx}COj][.6ɖ{Lnp!7_SAU3Aㅠ> endobj +5852 0 obj << +/D [5850 0 R /XYZ 85.039 781.388 null] +>> endobj +1994 0 obj << +/D [5850 0 R /XYZ 85.039 596.758 null] +>> endobj +5853 0 obj << +/D [5850 0 R /XYZ 85.039 574.042 null] +>> endobj +1998 0 obj << +/D [5850 0 R /XYZ 85.039 188.565 null] +>> endobj +5854 0 obj << +/D [5850 0 R /XYZ 85.039 170.092 null] +>> endobj +5849 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F20 2873 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5857 0 obj << +/Length 2886 +/Filter /FlateDecode +>> +stream +xkHܠ ofn8&hOb$Ĭ?_ڱgFWWȂjzD TE~aVB DP&׳Ͼ;RYhp㙮f/ƛ_>n>'2Ǔ ce|1_?q~x3߾[~}z<ٻYs !/|FK݅e:Q8l + \G[Rxא~<'49UuT(,ӳ\RPbS'ObQϪKaN˴€H, (z4OHp4LT0>cg~ iS,Odєi pj)L$5fk85 eH=f  BGDu `OY#Edu +~Q/q54xP͘52 87p.?Ƣ(Z pQ5*-UBlI2_>&k곀0-pep'1\.%y樵͒aon% +8\]Cʌ[7/88y0@{:vd˿αPƻo`:TN劉Vɏ=Éf:+#|,(&%52v`ɈJ|u6D[߳M?Pq\ ƧNlؓ:^;Ik_=H_bmLU a~dF@g{Ď"-ql1oR^-j0sr@Dz[&$'Z|@T=4Τ4siRjYQ +y|yWU/SRB$+Lf`݈FMCA-.1m5q/0=頟*&xyssG=^d)V6)WH\bSHR[by̾58XhȺc}[<.1%NoAMV:̶zw=" LPcm@(0aUQsĂ4p;/rM 它3p뚻75}UCc &bOlXjˌBLTx_9& E( "FBi)_R'R|jdBʎi1O9WԽR "C*mO@}1"-I4EgʪvKX})ӬD3sTg[#r@ *R]1VhTDU/W׽`8BTn@cQ> + $Rl0^hY1rM) 4URn?qKAx,CV?]ݾn9|@sTѯ:O۞.P9Cʂ? >L=SB"S\Y= ~UY4{N,+v &&tZȩֻ 䔽!M">7qO#yB %u Az +4D S Y]:6I-8ٻA(~Y"Oi!897O^J=*5 z:dŦޣɾs1A1/E<)EQH eH +\jJ]l>~$(vb8oY9FtsF\cvp6O~pk:{D.OT^@ f5'?"qT + K)٧ Yr =] 9`Hq;aN a@=B/'~,б ׹UD8AtϏyYA:%A挺\ =6`ۖY?,YLEe 1r<{YFRwj3iX}P0:sJ1V0_6'MY}(3ϑEԱ4OJ zR]T Xhʏ@)HK$(xH́E]LŜeD_ ܒTXAZl~`'7p\C7TC ]Tф!Kv8 K Ňr?ypZ:./*ފ%H>uuy-wB`dp^:ң` T{}#iKNlj^Nܣڦ2 *x ]> endobj +5859 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [381.287 649.553 512.306 661.243] +/Subtype/Link/A<> +>> endobj +5860 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 636.004 322.762 647.694] +/Subtype/Link/A<> +>> endobj +5861 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [186.225 622.455 485.324 634.144] +/Subtype/Link/A<> +>> endobj +5858 0 obj << +/D [5856 0 R /XYZ 85.039 781.388 null] +>> endobj +2002 0 obj << +/D [5856 0 R /XYZ 85.039 608.186 null] +>> endobj +5862 0 obj << +/D [5856 0 R /XYZ 85.039 587.591 null] +>> endobj +2006 0 obj << +/D [5856 0 R /XYZ 85.039 300.475 null] +>> endobj +5863 0 obj << +/D [5856 0 R /XYZ 85.039 279.88 null] +>> endobj +2010 0 obj << +/D [5856 0 R /XYZ 85.039 181.199 null] +>> endobj +5864 0 obj << +/D [5856 0 R /XYZ 85.039 160.604 null] +>> endobj +5855 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5867 0 obj << +/Length 2298 +/Filter /FlateDecode +>> +stream +xڵYsH_{0]0 /Wxk{a$YUTu$*鞞_w I[Mб0,+{+G8La1{1_^?OH|z)>>H1~iEWaOb܏WFdpv[/R=Iw-y"Gj)^[5bg?7+H9u0b3&.ӫMl; E@mL `uhbң53>s1tmڝk+j7l۰7T0,jOeizܪ(A5XՇR\A P5<]Hj&TliBSp\S$N9t"e'?A _I0 +`-WK+j&nӪ7l8ISLRׯ[̇*ۉvQpap"ń_Yg`klG \!nY; +4,XN{{8Ks0@Qt@ȳh8$C'6u|a\Kc)7OOUR9TvLy/#i=3:]A|"ө`5גlzPH3162[@it2 U\Z#vh ᶶ9NN(jK/ 5\X%d # !l=ջ7_߰& ŒabȀ &!z'>r'g3;} y0ٮO/u {Y y_2&7iWa_e~؉6]D2aŏ}.j})&Cpt6VT,0Bs_I5SRn@LEFh#Om8b"'',۴Mux.(kFx%Qކo.AɘTqO bMfX'x4w:$_eA"TbFߔ{p@3)\/eT8H! ~h~pfVaȨX<Bqjюȳ JɯBfNk rƗ.455WK:=pw'S^ Nhy7Vse„o>ߤ޹Pf9yrd_Uط}/dhE [JXH)N邪)dxxjZZbC! mDqjt &4q+PZJAR.TUE;\"5c+^X(\ƫOG1qĀ2u<}qߕ&Ձ (uҽh0,k"Քq`"P]b2;uY9sxkx높Tbw$.ttámƧOKyx*˾j&x/'2'B K#76uEaBGTgr#!OwK7i\ͮ7hήbA S\bpi&Khsʳ۰??nB={+a3vcH`A[Z9:[ۻCC][oz.˛ yz5?E= +h> endobj +5868 0 obj << +/D [5866 0 R /XYZ 85.039 781.388 null] +>> endobj +2014 0 obj << +/D [5866 0 R /XYZ 85.039 159.668 null] +>> endobj +5869 0 obj << +/D [5866 0 R /XYZ 85.039 139.073 null] +>> endobj +5870 0 obj << +/D [5866 0 R /XYZ 85.039 139.073 null] +>> endobj +5871 0 obj << +/D [5866 0 R /XYZ 85.039 139.073 null] +>> endobj +5865 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5875 0 obj << +/Length 926 +/Filter /FlateDecode +>> +stream +xWmo0_Uh$q X0!M2-M$]sf e MS=]JL,qov8w EELؾ}'`?u!IiN'_5-X%u% t8LfԝWe7+0Vlv'iޭfX;폎h8nt>ULe4:P'i."ŏRS$j$Æk:<檬BPbMu)CUn5T7nODy[wT&̛`UܖO)!'Rmp3ƦÚX@fbx s!ɗ6bBujZ'a $Ҧ™p*,cH3#Hcϙ dFC@c)[*[p] +Vygڳ +YB.Reb[wukP,[E h7k="cf=$\}TC +yxeTP ?'UHyWS)jŪt ^|y$4A 02MZoKivqş)߲N;׷7.CFEeei]mi-;?ɷm1gH]fqԣƮi[4](zn^ӻ꧈ːՋvcrJ%\ds|gHEE6endstream +endobj +5874 0 obj << +/Type /Page +/Contents 5875 0 R +/Resources 5873 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5872 0 R +>> endobj +5876 0 obj << +/D [5874 0 R /XYZ 85.039 781.388 null] +>> endobj +5873 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5879 0 obj << +/Length 1324 +/Filter /FlateDecode +>> +stream +xڥWQsF~ׯv&Ntq A3ypju&][ilw#P8dw!Gv;$fPcc3}ߘ-{ԘǴ@ j>'=5% >q=nLk_.&Kk97Fh䛧g#d|Oa gyRϸ~zvBplN>Ɠ-- o[jD@cƔ00/{x.wm>|+j1'#R".Ef <3_]'}B"|c0u })2c X'gPsZG ]ihqfId&>;YSxKYN`NH:ʭ㛱ZX0ϋ{53 y +!-Ѷ͊|J5~{" 04AIKm@.̕0\6"6`,gd.PUJ\"K*RWZ 8)ћ砿 MMS` ]7bHxsQˉσﰞoeVaAV?v-endstream +endobj +5878 0 obj << +/Type /Page +/Contents 5879 0 R +/Resources 5877 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5872 0 R +/Annots [ 5883 0 R ] +>> endobj +5883 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [361.189 691.474 414.575 703.163] +/Subtype /Link +/A << /S /GoTo /D (winbind-solaris9) >> +>> endobj +5880 0 obj << +/D [5878 0 R /XYZ 85.039 781.388 null] +>> endobj +5881 0 obj << +/D [5878 0 R /XYZ 85.039 708.141 null] +>> endobj +5882 0 obj << +/D [5878 0 R /XYZ 85.039 708.141 null] +>> endobj +5877 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F20 2873 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5887 0 obj << +/Length 2650 +/Filter /FlateDecode +>> +stream +xڭk6 +E>DHz(ImlP⠵nm˕wov`#r8 IE"1""NIX/V\H[b: +2i.o{:FF/_Z{Jljw՛/]z?{oqz`{1#/߾-?_}r;;n߂Ep&B8&vp 5a=U6I0  B_ D22ZKiXoodkv*e+Uo2}QӴY?Ry߯`t7a&[GB DĄ|g|=-?-UU'<,UrJ!NVP8P^&͑R#je@R U| Xp(ԫ]vMyX=:"gxe.PXQǖ`ںtLDl_?Nfq=R*Z0}Ԭ;DFџQB +Υ['a3a!Bi,΄%8*F,\iAԛ&N <&*[agW`R!~wז[p𜩃i+;xLT22}uhN/-HV)c#)Rk[v|Nw4Ԡ `9[vk74$g+k<ͫ}F}1l5W cedϝʵφ 0;HVg[nHa|8CJhT{haFv P+G=,D_m?48MsXO"t3sծY50_f.(R(c)LCFĒhf04p&Rxu8$8wD>Nm٪zA`Ax.>->AE^1"tEr}䋑֝WQJa`X҈ $hb ђ +H85m=9_#/*M 4O o#%K5_Aπ^ ^GYb Pij#Qoԓ +G'Ep8Z։}(lUy:6ɤf䗛9!^ilе |d_!65:Nktf)r,лdqOzm;x*m)=m3 da7EOjE}dV"T0T?6[ߑ-s(BlnO& z]s_QRqI +M ak X +rcc{NwF;6LP$HqXQ~SeWloz\GqQ,IaL[7|;з\% dvg,gI>+r /mk$nuS{vhx~=]qlv]d[μ-䥰bq"pXȰ&$ܙMH6umsNAi:`K4LmDa<m>>DZ>ҽtH B*@E߮ {WSeRQV=x`,+y?"8hs>[*-M$ro"Q Un= ƃ"#nr~Ge’Vq2w#h pYLmDNN>:<},ڂQ6sB4P-՗hFfZG "Z HaJ:^m9u?XNE0>endstream +endobj +5886 0 obj << +/Type /Page +/Contents 5887 0 R +/Resources 5885 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5872 0 R +>> endobj +5888 0 obj << +/D [5886 0 R /XYZ 85.039 781.388 null] +>> endobj +5889 0 obj << +/D [5886 0 R /XYZ 85.039 566.671 null] +>> endobj +5890 0 obj << +/D [5886 0 R /XYZ 85.039 566.671 null] +>> endobj +2018 0 obj << +/D [5886 0 R /XYZ 85.039 508.637 null] +>> endobj +5891 0 obj << +/D [5886 0 R /XYZ 85.039 488.042 null] +>> endobj +5892 0 obj << +/D [5886 0 R /XYZ 85.039 309.581 null] +>> endobj +5893 0 obj << +/D [5886 0 R /XYZ 85.039 309.581 null] +>> endobj +5885 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5896 0 obj << +/Length 2208 +/Filter /FlateDecode +>> +stream +xYYoF~ׯ/@bw U>bOXāA![asyv}VWUW}UՒ E +_8B'"ߝ-̼8n-YM>9{ OH'AWǿ}frU'ūK~ho)0 +{y2/^-xrO:yxRd_Ӊ/t,n ӻXv) kN?NDcp R"֑HÐ4T6e].W +sܕ9{.WP1}'1}LϴU+oznmc#n*-һh8mhkC;~mxfWuͭmJ\pOS^YuW@U>OɋG)}%ABnu$E cM*@u`?ۅep +̍ےm`V4LZ)IA^;7H=AO!yܖ5۲5p4g(::kw7aGG '3l˦lAA +TAe,cv2f;dnGPnR`e/{ù|_D3# NYujNX D6׼&[og])?Q9Ol;iBp -}[uw(هݦXa9:%wm(;:Q֊tIg-׸VvpmMWe,xo˪)c.˯];w"BUY>QH%}KK䶥x cGp 9U0 0@-P!wy頃G@Nh G®wQ +s^S^(zP铃Y)`I݄q'5ֹ\&sb\ )/kp\CPQc|Q9pz\5CBaEH(* 5ˀ0Һ..3c򂾎A{Dho!*«R=-zө҅D:V"Z4h;EǪ1Ę'"l0_<7E__G~)(93ysUi}?" =QPy:HlӡcsZJ@ߍu!à)lΜE|΁#7ƁwTny0h.8ݛYs1Ai;nVܿF EU<ׯYM(Y(dL-5:]S- N[9AXvRi<" >j{ +VT} $t[# + @XGzt +,דB$%o2RPGCC-&.!Қ  mO7=hascGzKrPݚ"#ͷ3=Nveݔ`hj&[qQY\}叏eyawEJV%|vYQb9oZ&ӷ Й]cGvx'ykSrr_}ϯɫ=08`T\]4,&29RsۺE39)mdC8}ƙgTĕBkNĩj4c 9&kUOfnIUU7߽C % yR5O0=ˋoΎю][m\J'x"w!F+IO}ÍUNhrt@j!"gz?uZ$:Gve j@%}~ 1qendstream +endobj +5895 0 obj << +/Type /Page +/Contents 5896 0 R +/Resources 5894 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5872 0 R +>> endobj +5897 0 obj << +/D [5895 0 R /XYZ 85.039 781.388 null] +>> endobj +5898 0 obj << +/D [5895 0 R /XYZ 85.039 189.755 null] +>> endobj +5899 0 obj << +/D [5895 0 R /XYZ 85.039 189.755 null] +>> endobj +5894 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F56 2898 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5902 0 obj << +/Length 789 +/Filter /FlateDecode +>> +stream +xXߓ0~`FB ^Zgk7jHzAc:췻_vP:զ,՛+:#34QMmՙq001RQwڃZ!ͦu{NSڠUo{KLm(,eiD~v{7zq[{rS\X#S']swm/(犰`2TP٘fRe`dlm LTXX7 ]Z+ ƀLg1؟oBQvع\YR5<M4anLh$U$QLLt7w#wEtJ,M0asBXFH x #kcG/$MJau~[K$"0`^Gx> endobj +5903 0 obj << +/D [5901 0 R /XYZ 85.039 781.388 null] +>> endobj +5900 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5906 0 obj << +/Length 2299 +/Filter /FlateDecode +>> +stream +xڵYmoF_!"h `MQT$J2Ep_fgggyvVqgqgq`;*Ek83[ W$"|3ױ'=j~[J)s"bvy?wy[0Ğo=@x.Ϸ x;mͪK/~͙ep/[%ڎtyہxW:@vT0r%(pC?T& AX:MnXվ-rkmxiW?n.~ 즲]tسpdɛT]i:d[|y*pw؋"prl@fVu -9۪D j~jd`<"Bix%<_o9-lu′^pjF%jEghEDHZ'rDi75hᾨAmRnt{(6FI! 8o9Q6?a0O0nrݳ B`ҷI͛nl{ 7GwXk]Wt5)8 dY) @?#a|8lH$pS+i)xvDEIP#!l,5ATzy wHcEQޭWKк[y;=LTZ Y'o0#E~O Tg}0i[݈vۆBtyo%`.;YD }Nc^ gkSrs>ClqQp3ecZx.E3.h3Tb@%3?8?/#!)Bfũ塂X, Ї~R +%謤3l .?!MҪȨm!*vkQßyD9=KyFp>Sxx%A4N`(6SQtPY7u]H)kDYstCx7/z=腜7 5],fqI6 +afOTB E; CF.#SZmd.f1Dj.-q_wř,{,.^rU)03 q:,; +DY8dA)a~&;Mo" x`M tF|E]L{Лfb_&`|C)W^FK׼q5s{Gb$=i$H_5 ] /~ۂ(G˷|+SH8ր:X@TSK_q\H ͗o#Uz6c>s7ԡ~L`Hc|w17RR\;&FQ笌"k 1A +X*i +I>|j?$>~b#!hHG}5f"c;.p ЗQ|뢾]M1Hi D 18h)"&>ӄfhm%%) % EA)}кp68RknrŁlKnSD}u(GBBg7w(q.hxohR)U*KVdbFh#Uf rEU].K5}9UPgvu &49BQVg#éb3n%B.Nw䎅ftTNaMF4E=i7nU^A`ж V`(I:XHp0d8P0(7#LL9xmmVE|b$OD:BoL=!5>,JNy%3.B Mtw=\v!&>WNTjSVDf<.g<_s z\i@OԮ/a0vQeuqܥv_x4X[ww(.ҡGsl3:믱|][ޅ~2gNfCXR'~|y(Ab$w-?EHT&[${v?/B3JIѩrlEʎՉ_ϳ=B8^? A3endstream +endobj +5905 0 obj << +/Type /Page +/Contents 5906 0 R +/Resources 5904 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5910 0 R +>> endobj +5907 0 obj << +/D [5905 0 R /XYZ 85.039 781.388 null] +>> endobj +2022 0 obj << +/D [5905 0 R /XYZ 85.039 634.11 null] +>> endobj +5908 0 obj << +/D [5905 0 R /XYZ 85.039 607.496 null] +>> endobj +2026 0 obj << +/D [5905 0 R /XYZ 85.039 523.31 null] +>> endobj +5909 0 obj << +/D [5905 0 R /XYZ 85.039 494.575 null] +>> endobj +5904 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F20 2873 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5913 0 obj << +/Length 2738 +/Filter /FlateDecode +>> +stream +xڭYYoH~ϯЛ) ,2g68"gf})J"LI?u5Iɒf1Xp7:fYIgq|$|&m`7J(lhZ蟙\EgiERX4?=(2L)gQj}kaoOk{y/L{_~n5s'꬞/)vUP_o( |3=!U8Sa۲/.rfW|/? +:zZ{{=oq~Ϭ8L[wBV۬ɬ-xYczVr'4mrRq'Kij/<': zBX +;[f]ˮoiYn;=x3Ep xmAn@ #sx,o-zn2))ݬcCǢ/ʄ-2AVCA˞`~[UnΜA&ǾeEF+ֿJIhHOY0hakg| +ϦG"mm~*?px\0V~OurwXXoUSh:Gvӵ7' 3FAN)P+Q)]9dw:MrVBGKo63zhr8(w f"@BRrPxD}H λESyǀ.tRؾw {SsnaꧩB!{qJP17<;^nG/Vж0)Iz' Rgc^%k7oe+t@k g [b) +y"\*gl="*n-v +\4y-!J%#`kIE>KĆP n_c^A25%YǛd< ~oϡ3( <,Uùu6fWvbP4lXȚirv}h/#׆+dPv(ab?/.#e_w؟txҴ!Z٣)nqܑq;E ò-AVOB8gQjLHkݱk56dhrd4(V=Kv)X}g.#~Z{uӳ4Lx#v׍ 2|m[ +Pa$'4}ڷq>\&x{Y?cG8O rl$n含܎4wqܪWZlLRlM |7;b E +`zIr&8azY㌳:,KRc !,'n1뛞1._${Dlx`򀴖?%ؙ ΠrLjsIQ,HzOaA0Vx >4;F{ߌ,Cq*9ޗNۦk* 2!C`Rr ȩ.!R DgTM%;YUQ&99/Y5弚I.^K=],[{;: Zx6p$'+_uX W~wjΔ!٤_%RxebLmR?qDd5>+l +(;Bs)\^~\{!BXCZ,Z8|YjCë~WPlr'hEikL:P,;\UrLTLF'83o7Bm"GI&f*r~2gLfwNU>J:B?1-?nyK *N u-bBt15x6G~j +Έ:pwa.H u{މS}ױfIVv 71:ys*]DFqZK]J6e 0TVT2n2Biv&6<^F_U e}tD'\~u03mA\mg\ p?EܪD0Ҝ #?SyĤzץWǤA 6h0Pt< 4AyRxm8k-]kh +vSCyaLqBjB՛s0LڷE-~^t=5 5 yQEA:Gq24XEL-%\'2B׸D_¯oG5$cbiqCΏhN +#N1Ħj&JCyNW`m'ƹ粪7Z"W 6 ~ꖿbJ27aXIX>E%Ȕ·:qƓ +Iƨic3#u60*3%KXf(ICJGyJ~ F?4KHR]QDkJ`^`Ks۲.:Nqhd'4W)|ߛUSU%V :cI@-,'55^n[A3d0~r6ޘwapJA|Ʃ!Iz"vNS3)}n -(n(YmX-;r eݺbM?OŶBly]F8׬$!>\ɾXgmɡJc{z(ل_&_ +4GULHU5 KE|uE+&{uմBSe^&rQ]lmtөm\`NI6#N!`\>OU}endstream +endobj +5912 0 obj << +/Type /Page +/Contents 5913 0 R +/Resources 5911 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5910 0 R +/Annots [ 5917 0 R 5918 0 R 5919 0 R 5920 0 R ] +>> endobj +5917 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [327.043 300.33 512.306 312.322] +/Subtype/Link/A<> +>> endobj +5918 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 288.296 216.398 298.773] +/Subtype/Link/A<> +>> endobj +5919 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [327.043 259.682 512.306 271.674] +/Subtype/Link/A<> +>> endobj +5920 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 247.648 233.58 258.125] +/Subtype/Link/A<> +>> endobj +5914 0 obj << +/D [5912 0 R /XYZ 85.039 781.388 null] +>> endobj +2030 0 obj << +/D [5912 0 R /XYZ 85.039 761.463 null] +>> endobj +3033 0 obj << +/D [5912 0 R /XYZ 85.039 667.044 null] +>> endobj +2034 0 obj << +/D [5912 0 R /XYZ 85.039 611.854 null] +>> endobj +5915 0 obj << +/D [5912 0 R /XYZ 85.039 585.239 null] +>> endobj +2038 0 obj << +/D [5912 0 R /XYZ 85.039 458.285 null] +>> endobj +5916 0 obj << +/D [5912 0 R /XYZ 85.039 431.67 null] +>> endobj +2042 0 obj << +/D [5912 0 R /XYZ 85.039 232.205 null] +>> endobj +5921 0 obj << +/D [5912 0 R /XYZ 85.039 201.589 null] +>> endobj +2046 0 obj << +/D [5912 0 R /XYZ 85.039 132.795 null] +>> endobj +5922 0 obj << +/D [5912 0 R /XYZ 85.039 111.599 null] +>> endobj +5911 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F66 3248 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5925 0 obj << +/Length 3560 +/Filter /FlateDecode +>> +stream +xڥis~/&gD7tŲ%jN$1hł;۷o z#y4r`6JR t4// +V~b* S Njq8\gFOQ0z\6~wicw&$I7?: DWpVU^Cf1βn+A5rfSu_5B"v`]RʺŅj_zÃyɞ"nu6l_o6_ELʫ!5Z}۩RHdJu,oNvyRN1j@ +;9|]khk!|^"ozG~zrR!Z;}jʼ +[;OYܚy]-VSw'{JU>k&˃]e_s۫o+7$^+=Plʞ u,,g٨^\#?#>,ѷlF| ׍-Q^/䪚# l5ϳN򷿻'\{u4CovfPyc={8/Ok,,]O/ ^oa>; %ؗ}!#\k+uQ8dK:!l֨oIN(pY ă 4?8_M"}} +}8 %ׇ~Q˖W|3▼9fy81Gt3qzK֨%$^+-9knX;-71$1uySKŀګ`7׼$?+YgW0I2=L#u-4TNL,SK7eL ksA~;L*l穧Sgab8Ϭ;qzB/S4gq$SO '^N 5B|1bKiH襟 [͋ޟƗsM(L*hlHmTi}G>3,ѿNp%dX|׶=c5ko;aA9cǏQb/ =OpũU9携 4+4Mb!&XǮbOƟJD?F +%خC2W`~>xܰ:3?*:I#'0_\RKOarkRUBi㗯\}S:Ool=As3C,W!AN.5IUQIy& e i$np(L'3NAHm Lb2D)@>P"螁7v<;CKÍ';HMѠ*:quLN&_ aedUGɚQˢNaƌ mū (ItMXmC%)`Y-$2fH:5BA)vȘa}fE $ގE޲rq,+4̃Fs%[V]1Gh׈mY +b?n 2@LB*XrvT%2]!%vSCĺB3]Q2>Hm*6TfLΩ5^%q_v;P"xG5]_%(Lqb I,0uej-/sh"^Vtw|vhL Vne_?[\!EՕgs |xμ5OJAuGAr\68^WJC +pn-[Ƀ;S'nڃlpV`\v}2uMJ>Q_n{~~/~qd~A= 7T"zW4Ր?/> endobj +5927 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [481.678 567.955 512.306 579.948] +/Subtype/Link/A<> +>> endobj +5928 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 555.921 227.853 566.398] +/Subtype/Link/A<> +>> endobj +5929 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [165.255 296.971 384.882 308.964] +/Subtype/Link/A<> +>> endobj +5926 0 obj << +/D [5924 0 R /XYZ 85.039 781.388 null] +>> endobj +5923 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5932 0 obj << +/Length 2780 +/Filter /FlateDecode +>> +stream +xڥkoFE +\>y8/V~%Jb7%)-x3UȆ(NGaEy~fVsqb" ̿fg?HjjOGeWf_^~O\׵G'aYތi^]~;+~y^]]۫ه.p2E8w{k|8;F0 xSwvv{y#>5$ ĵUy0Z;˷o{t_\ډT#)z 2!=Oϝ*?w]2C+q|<ɚ7edcdYXEZ 'u /ݖjNk*C$XglU6/n`HL֜5FG^ֈU{tFo`bż$k{KŶ>zr_J|DdHxMa+P6A3סuGݿwY\&Cpٮ἖CURK&^Ƌ/~ImUNnYV<"y<;`~Ss}zӣwU~=cI+&A"ЕbuBH ]Zxy1TI81$q\6=&KsI1&H ^߳ꭩ+Fۆm0ȅmFLilLU`kCLC.DS0<伀6<"iá _M*`S)q3 ܤUݼ.)Jxrތ#,}|'mt5||6 2+V&y>YZ7P:"zɮC\/ q(tbbuE֌] &`#rE :yw4 f~eh0B9r3ӆegtd!)6ZʵC8 +WlBUs}kBBٖ,Ɋ%4`?@&DDpߌ{Rxd^1"-`7mÕM޲5Q~l'GO1`W4\dsO;yPI>ôqSCa{Q(7ei" iNv +D9с4R_3))a'wˍ ~igeW ^.qZ%*Lt։jH͖Iѹ +X8L"|ٝX&[<*GK^({*LOeqe>M))#AΟ`R[_/˲'T &8vֱPoMͅ+,;6<`o;BB@-MlEJ),Heak*bmID  "R]UUb#d 1Rq\xLV' 9 +P'G=e9ˆ +y7]2qs#*jۃ( A۶T*?"Z0=nm")n`VW^sl_<{)ҁgxc\*"]n*鉰f{񣿮  P`\ֲ޵Ooy>Q`0Jpݨ`|pg)K6ng;9۶5j͋]RB&Cr{ K)wg[IRO@ju4&Tԟ~ܩB!7YR3܎)s O%? +@Ў _ hB)\:;V3s`lҗYF\|IQ/=wIm\yCs=DVaAJo|&6iPD ܓdb +F1Xe'Zc@?QH~|T? M|gnĹD\s4}亊g"XfegNڢsd̅=b~NEy/搕 -zݿJ.قwdO_g>Kٽ/rgg!]򸉫8O*yrް9F.6*$W :"8#nfbbM'Z˴>;Dt.dh_\)2HZ,zy_MlbK5`q0yO:7TοzqnsEn@ɺ4ZT={1';8ON'ynI$nY{,ZzӥrT{yR͚$gw"[@%@w(# /7uQW endstream +endobj +5931 0 obj << +/Type /Page +/Contents 5932 0 R +/Resources 5930 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5910 0 R +/Annots [ 5935 0 R ] +>> endobj +5935 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [218.134 512.523 287.369 524.212] +/Subtype/Link/A<> +>> endobj +5933 0 obj << +/D [5931 0 R /XYZ 85.039 781.388 null] +>> endobj +2050 0 obj << +/D [5931 0 R /XYZ 85.039 568.747 null] +>> endobj +5934 0 obj << +/D [5931 0 R /XYZ 85.039 539.949 null] +>> endobj +5930 0 obj << +/Font << /F64 3118 0 R /F14 2903 0 R /F15 2884 0 R /F20 2873 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5938 0 obj << +/Length 1119 +/Filter /FlateDecode +>> +stream +xWmsF_A]X1'D4SBߐ#a3>`8I$#pi{Y8Ʈ %CfJ]0$oP96!)rioN=xבLŔكttMrɇޕc[iMU-5~K57-agX-)dyeCIYr +t]dо5nS7 +LC ^6(6w4BH|UfvP5AH]]ɸ%|GoRi`xO5J< <7Aɐ!7˖U"Dq7$HYυ0@PqVte?E2xPw7ӎ ri}ֱ~O ]_'Ğ`Bs8F"!޿oݤy;uwnRM8wJMFGavwgN1SkbVox{4)U/Q_VCrn#3rOgVQeQ0 +g,{7d4po~^brJah?>Ѐu-GLI,s<4oOFko_o y(,ciJaaF0Lꆁq0/O7 %l[('?}^ԮǾ,^5Wm8yMΩ=|Em[&oT/3G'qH=\[+ D>~u)@5^cGрū_:-5Xz;endstream +endobj +5937 0 obj << +/Type /Page +/Contents 5938 0 R +/Resources 5936 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5910 0 R +>> endobj +5939 0 obj << +/D [5937 0 R /XYZ 85.039 781.388 null] +>> endobj +5936 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5942 0 obj << +/Length 1399 +/Filter /FlateDecode +>> +stream +xڵWێ6}WQjZ钠H6Em<0l +Dzm(ə!9sH  2IbiF ϲhgqso2?q5[$`~G!y*?Y-?DsyiWo"F245W:.q^EWft.xk>}x7 ϳPP3H}>mt"p.eBȌʣTP c4HeLd,l.V[=TRzDy{ ќ8}yX5K4X2^ 3k_ixycѝp {=jxp$x2.[\oJ{0A)f*K]Z`n]޸Vkܬi4A19ⴾ2) RAKead4vU(7^ᨮPW u}8֕?01p E ԨfoUQ4 'qXʲ$В)88!Y}%xotmQOe"8,P +c)sogsh99w; 1uA )t(7aj(//nE4i,Os"#Wr"bA $g9I%IX>@KIY<rkn)ǥɴi@MUCc3NHM#8p岈uv.KUxyaWlQ5]rC4~p!' +q|6GuFE)aAfb +AH%2DyZqx{ͳ<< u  _RPɺω-'Rޖ lI7YC֗\Yض~l#c :u[g[a"n7wx ^բ_#- /?$9ԩeM=.1X<*GoyLjR{y5e SnUq8&ץj `qi-փіDftmPJݻq&H&j\DN5frS4wѸz7M[K\uj=f9N߲WW> endobj +5944 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 716.996 381.124 728.989] +/Subtype/Link/A<> +>> endobj +5945 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 703.447 266.58 715.44] +/Subtype/Link/A<> +>> endobj +5946 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 689.898 490.439 701.89] +/Subtype/Link/A<> +>> endobj +5948 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [266.468 572.648 475.915 584.337] +/Subtype/Link/A<> +>> endobj +5943 0 obj << +/D [5941 0 R /XYZ 85.039 781.388 null] +>> endobj +2054 0 obj << +/D [5941 0 R /XYZ 85.039 675.629 null] +>> endobj +5947 0 obj << +/D [5941 0 R /XYZ 85.039 654.736 null] +>> endobj +2058 0 obj << +/D [5941 0 R /XYZ 85.039 557.204 null] +>> endobj +5949 0 obj << +/D [5941 0 R /XYZ 85.039 530.59 null] +>> endobj +5940 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5952 0 obj << +/Length 3356 +/Filter /FlateDecode +>> +stream +xڍYYo~_K(敇sLjC6mSO]ݤ$ X}T__}U  *B?ʲ]poBqZCysi{4H(qW\OjxʏBuבZT/qx"r b%g anEzm]*Vr[$yNdha|~GS?#j[@yJӖ;nqmH%a["ueP7Jme^pP 5Q%RIcqvB\v}ۘYp1v0"4b{bSr#΄+xov`og*f.9= z}RȃHU~+7#:KЕfv[h!(F_W(W U5srQ sx&3n1")sP+MWD<²sX d͵g~ε]ELޝƶA)\nyIniM{&CS b0\8v4Sp Rr3ӉrT#>Dl{f/v.3J1S١tM5<$BG5_rÌeu[+Ђ{VɊڽ7hv(H +06rn'=L7r H쟀=7HyM90wD{-jLSpĀвaEWFZ!Kj +{o=e \^Z3ǫdqƮ~!5n1GԦ +T Њ)؇b=t%ȍghZ#[ iH \\h4? uH%w%-lr`v>f_)JOd.*|)+?u'bӘM-a+QQKA<:~'2x~S> g#J29rWfTP͹ZG6jm;J$q| qDZ w;:& sP@OrvDcj8h8J^]a) HA޺8l"%0{f8 +ۡ $X4H W};i%g1\-L c%;Ag4)`Ncp0AnzEU6nqۅ;vo<XJ\S0~J`=R&_iEd,ƌ¬j#ly /pĀgD?1&ݔCoHGlJi#c Rhix*Ԣ-e62 hj{K1 cZ"&7s }^x +~"&̈́EiҜJS: B' /0bN{0ů'_FKFSV +LqZɱ A:2TXm8?16I2= +GUz]6CȊ#mЦ 6Ȭ.nWoz$S/'N3\KWK#kNz! lrhJAZwm>J:.0 Yy)w[I*aDsEIJ@}EvѷZ!45c*ln7ojO2h;]KbhrMѯ&Pʧ< e'@.GgDendstream +endobj +5951 0 obj << +/Type /Page +/Contents 5952 0 R +/Resources 5950 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5956 0 R +>> endobj +5953 0 obj << +/D [5951 0 R /XYZ 85.039 781.388 null] +>> endobj +2062 0 obj << +/D [5951 0 R /XYZ 85.039 761.463 null] +>> endobj +3034 0 obj << +/D [5951 0 R /XYZ 85.039 667.044 null] +>> endobj +2066 0 obj << +/D [5951 0 R /XYZ 85.039 598.304 null] +>> endobj +5954 0 obj << +/D [5951 0 R /XYZ 85.039 571.69 null] +>> endobj +2070 0 obj << +/D [5951 0 R /XYZ 85.039 309.244 null] +>> endobj +5955 0 obj << +/D [5951 0 R /XYZ 85.039 279.84 null] +>> endobj +5950 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F56 2898 0 R /F35 2888 0 R /F66 3248 0 R /F11 2906 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5959 0 obj << +/Length 4283 +/Filter /FlateDecode +>> +stream +xڥrF]_C)fpg-k+&yHDhI}` rR)9zwτ ϳt~f|? η0,,ϖo< <ϯ7>z_Xh=EfKqJ*^5DGˋE{ ^rbf X~38_ γ[h~3ˏ#-V<SuǙ~| aC*_<?":UHD"@9Z޺Q!@ Dے<Y o%8yW+V8*鳲w <ձ.dE=Po8RvwvO&` "C̉[bT:ODhvM[=%{Ja1m"dZPa'^sץlc΁`[PQeݢYмo;[C]a' wg:-^V(=fxFv ~C|ɍdpЏ p <ʢcEa<3;V +C^ekxjC'34oFL*nH]=830k4f͂H4"e"/B>vC'_=w.+F!)VFDHema ͺC>4&I gV >9@/YCMvOBY(]r`R[)`%iFn{FLJ`=K] G\.o[?oUK(/Zִ|ZQo@EC_%+!W$,rS־J]448U%v~EdD>&$a *x)dކnkL?`3UEg+pr+ģ#[0=ߧ4=P8XΡY12f9(: Iơ TQr$\f [Pb|Ю7&\(vد(,1_T!r#5 GkosXqh^ G~-ʽM[Jq`4 f3 whbފLJfXIl/V kk^ѴS%D7mgy_Tl=H@JPp0`{: +LJlbcg<DZg`ɔȁ!`6sT,ĩ +7C8KE^g'&-/$q +q!)\<%Ӹ0MX~"zšx1 Y_beU_yƽWXwϳ]!%Zduf7XLDP1zኜ#{MoUCSsn+[eurUJ>A@z\X_{-@v7%sh!Xve},m]WO6rWcG޻T(Fα؎ DZākX%PigUG,̗]7ŪĔ~8c^+ @0VmL \+}& (=i|Ygxh;rSavt&IѾ<\ADy5?ðk^2/V YWF`Af?VQ*y? ̊% d&~"R@HbU:fgdjYP+Ukf8c#u$](_i=UA?6h%+r=C"rЉ4lM?~x?CEy q +)y;X B~ #x*B2b?՟<1~Qx65$BK3^ Fn{F' +s[j-7Z/[^juڟ ɶU/9ϱS"# +őƞ{Ha1 7r٭՛#(D}B wy]ʌ~[C' + +BZ#o_ڑ8"J/.$iVEynpZl#oԦLb¦s܍LSlSGB3n~Ў\`ga0ow +T'' (v:͜-M +=_cNJУ(cXݴkZnCV +induÁa14&D"!=k{[j2W8IqlƨW9i%s" 9d%+kE\<}=S7U}RWZ=MsRE4C4I1q׽:|x.ÊSPĹ-C'(?[Yr`ug߰6vH8q';AD v˻rL5Ls+*THsXq.F ^]G<^ph7 +4;ƾ]Wk~kD 8ɹi2hk9Ā$63]1T+sTÎ,vcn$wR1jR1"aTԡc9eK$ ZL~A0 Z̘ta&X#.b1Z4y!mxuư@y{KGZܤMаeG)˵\c(uuej HZ+00>T\*cͱ_9pd?d8 ,A?;3v46?M_gV?Fr5Lūl.vz1x7;ǦЩm(!t'A:S.Y(ح[6 +-ɲu@ n6ȻjMJC.,‘3AQ֑\L<ZS=;h( fp߀m qxN3 sl-[#hth^G b^“ >;pX1V1+,JE}g}z*FQ{kSv Yn.Ւ{E^嗄*gA0r?')WCɚᇓ#?ɔ|/K%95*Maj60T) 4hlNF)]K\ƩC"b~\@a, qvB9s3d|&lޛ*$*B~|13LE[:r4:'ޑh0&?^۪ALx+Be> endobj +5961 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 665.485 824.811 678.387] +/Subtype/Link/A<> +>> endobj +5960 0 obj << +/D [5958 0 R /XYZ 85.039 781.388 null] +>> endobj +2074 0 obj << +/D [5958 0 R /XYZ 85.039 584.077 null] +>> endobj +5962 0 obj << +/D [5958 0 R /XYZ 85.039 562.216 null] +>> endobj +2078 0 obj << +/D [5958 0 R /XYZ 85.039 289.778 null] +>> endobj +5963 0 obj << +/D [5958 0 R /XYZ 85.039 269.187 null] +>> endobj +5957 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F35 2888 0 R /F14 2903 0 R /F56 2898 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5966 0 obj << +/Length 3933 +/Filter /FlateDecode +>> +stream +xڭr-TՈC9;{V2-6cԒx@H\.~y< Lag#\)X +ҁߒ\~竇q؏|ջ2 CObwP/w<~qA yY@}O/K}OgW+=?~=8~: 0_ +gG볻حx.:UsT0KߦT( -tPJ)JqADh}d|z+$IA;ڪ٪y7aj +L[P8r1'{ ["|]49<3Y] ="}ԲH $dZB{]W%똔ky\WZ&%ߋZ=F* (~aMrc"Ȯ7B {rFnw8p0ākplk==-UڨGl\s6Fa;*X@EF, +b[T~RDgb9pCێbR5Oog3 |nǭ@xG{,*e.{' +;2F"JyY q۞}jaކg<`ȆG14Dhp {Hy0,Vlz[$ D󁲩cx]Fl,هE; Ã/Ƒ*cו|!xfl +i"0=5rU-[AH"V% + kfA%r+PٖNdQ$*KZ )j~Τ{23)N0laλ`EjH+6I06Ldn}:I +*\Xİ9#&ǏdZ;߁a2_ga +V1R!Y=Ȼ&LK\, +:kV71k,XM3@y7Rs-y$bЮjE"p`-TÌ=clP-#snY\N ]ZKhy%2 +B hbfTkGq :lpu\Hu!qо?Tq/r޷`ޓ4a<t脆xmmz)GKN ofLr#z}L>M(~i-cnMģT:|AxUwst{} 7GBb 4^I sajgH z*:k\NWF{hbUPs:Wdo3i]У/wTR?@H:qXGJR#G\B]Xkx3x4pd&h%D k̅ubmQYoȌΜDtHu>y-F^^a@ȇ= #9tAj7sߣft`D%zMr"){)bGHiyw˵-ǁ!V>mK91*0oYQGEx~tB"m1F V3&kO֭FJ6b&Ic_I3 O&c-@R7iA0p/Ou-v}ԥ}\N}iOKl"P[gu\ _./bDZZ\H)1q1xVendstream +endobj +5965 0 obj << +/Type /Page +/Contents 5966 0 R +/Resources 5964 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5956 0 R +>> endobj +5967 0 obj << +/D [5965 0 R /XYZ 85.039 781.388 null] +>> endobj +2082 0 obj << +/D [5965 0 R /XYZ 85.039 761.463 null] +>> endobj +5968 0 obj << +/D [5965 0 R /XYZ 85.039 741.337 null] +>> endobj +2086 0 obj << +/D [5965 0 R /XYZ 85.039 633.349 null] +>> endobj +5969 0 obj << +/D [5965 0 R /XYZ 85.039 609.367 null] +>> endobj +2090 0 obj << +/D [5965 0 R /XYZ 85.039 120.748 null] +>> endobj +5970 0 obj << +/D [5965 0 R /XYZ 85.039 99.547 null] +>> endobj +5964 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F66 3248 0 R /F35 2888 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5973 0 obj << +/Length 3881 +/Filter /FlateDecode +>> +stream +xڥ]s6ݿBof*$q]7^bjrDIl(R%&HJ3sC`XYJgq*If7ț+_0|!3sS/-7=ա-׿8y\4_(@E'w~~Z޽gҘs{~<û］WwK3&"mqol GsU>Cs}_P+WOWxLxtA I'q|?pB =mYVAF:$Wl@|9Fj*u$/:9|fQzQ­k›;1#LaS͕4݂Q}$nW'fMo脾_z_T횬C1ΟȇH9y,v겕MT 88-?ExUaQT [ee':0\YuUE}+Ld >o G:.JHp +R#"傄{.Jk)u5#՞+<'7=dxCfFͺJ=PS~B3T)Ԍ3?t;L_[ @"ҩva :cj'n'S;@j."d9 #)3A6ȧ~/$ulK$H@"o^t\p/ bFqtY 2Q]WA|}5j523\l8e鸵*|nrN(XoZ}$Wr[d^&LU^.{|)'"ZbOƤч"Grcߍtl1U>gaET7VFR> S-R4Nƕ&:Y^A^4A鋂rF^]`5+hZrv5xK]CnB~ diֲ$WV9BzQ2]~hk/7_#n3NwHLJf BGW@!V K' h72,^n S0ô8 vfy| 3F> •ax䂢`p HւRFi,w]Ϗsy! ?f=W-pV̻v ~1͝幟ўh1rtry2- غOah`;10v|Ý_ X K7he&jz{c(~!ε!eo'Ι5t&/56 {yRWQf2"ZܲnS'i{ +AnF &\YAC 'nuqS`!M][# ?f4U3hޟ}_Ng2ŀ0G*0#HN-E1#/+Mܨyd=nN%ow}DȘ4'C"3Mjk_֤qXHxHL2J?[SCNZ͒`{#X&P㖎PB +SLJw5uh`(VƟ SP*bp`FPƿx?a5kkVĖw6JA6:f1$FhF¬%`02 ɬڬdN -8xLJ1oĘ-"d e6kߊ-, 9ZRj`Ala A qxI_-%+Ȏu @ y"&3X@X@pgU--|7U}-<8!.e~߅ 80XA8TPTkHN'VVtjJ2.|lIp9`Nr=X~ pr2g HT378<b{n´XRӶr*a6kP-Y!"FziRbKj?M d>eW! @;ʚh#MCYbM7-6_N@;Uh0W784`&d>gf\$6sPݫ9>\i۾?HP縜Px]Ӑa@y:A;)o j/.~vZ8E1CL^vST Z$F|2 C4v`H-ܚ$WRh"E>󚄞̴3pdSf 3/ +T(Ng,mj|6=γT .0EpP,g*!z|Hp +w5C7 PH z+Sj.LU?: +l}R#-׮WY:cq]köyKl(+)qǃM& 1uKڜ}m_w!Ґ8B DÒ}Ih[T 24Ķ(1F Twy?p9GJ[4xod89kdk̙*Y[:n`jX5>Ie[*lrC9PT7pyf]E/ŗα)]{Iixc/k[g[;Q8f*Si +9.Щ7T4zq^Z~E 2һ.$f,aAWla6RbTBVHMAOg(wzva#XsDeTɾ +-[ΒW i~9E?FWZ6T9Roz jK/܂PhY#[B5rظ?`?fIi&¯ p*irPOYIendstream +endobj +5972 0 obj << +/Type /Page +/Contents 5973 0 R +/Resources 5971 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5956 0 R +>> endobj +5974 0 obj << +/D [5972 0 R /XYZ 85.039 781.388 null] +>> endobj +5975 0 obj << +/D [5972 0 R /XYZ 85.039 761.463 null] +>> endobj +5976 0 obj << +/D [5972 0 R /XYZ 85.039 734.834 null] +>> endobj +5977 0 obj << +/D [5972 0 R /XYZ 85.039 707.735 null] +>> endobj +5978 0 obj << +/D [5972 0 R /XYZ 85.039 680.637 null] +>> endobj +2094 0 obj << +/D [5972 0 R /XYZ 85.039 396.451 null] +>> endobj +5979 0 obj << +/D [5972 0 R /XYZ 85.039 370.305 null] +>> endobj +5971 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F11 2906 0 R /F72 3974 0 R /F18 3977 0 R /F66 3248 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5982 0 obj << +/Length 3253 +/Filter /FlateDecode +>> +stream +xڥZ[s~ׯP剭bt$Iʲu,|N%y`℅ _6N)wzf6_7r=|0rm/3|oޟB_go ر?Wϋy2 #nZW2XȺ=Nh?}rtn/ggݙElyy +"r^?ر]x=l_{\ݝۊs^5ߋl?N5=Wc&=웬^,Y[%)AdxK [-zʁmF~S~E2 +c~Dh%EQf`?!);g^AʉIVz*(fq?Y\v&5>Ym 6J٩xՊwddYp+uLonLC\V.:6 xaR|RV^}jwǮQ0aʵ#7]t~y1B|6jLi v +M23:`!Lvįg_?êuf6oLxh<֚]"-8?ܗG += |iJ z|X !0ns-P -K +j} j@N ++;KدQP/}0?GnD^ < ! q.ٮ)4olu1/=ǪvUЙy4y+pWBu2iݖ}ZAbGerG?Ƕ#xd*`+&?S4bꤔIa41j4C|J,,Z)1u')B5[O3mR:G@J$ E#Ϗ qMP/e_|397bh ]@ix<4{ŤZAU"Qȍ>晀*ڷ80@ 0ŽpH1 pb,'aϴBovl'/Q@ $~7"% i шr-pw*OUn&GNM޴5qzEh }0r/e qTaC>I#im?lOK`p!82Bhh#F.`² +EDos ݎ-&,b9b bh~0fWhZǚ& a{{U+3 VIT<21~dd>}M}on_F0:85Gϧt~?<ijB.MfiCl;n8#4J (uab/N;+3 7ޖ e2pʉїO&Xv9WiƕqP&Jp]@ +^D)s:v\ߌځ+].ކ/-onQ#S5_4Bb2ڑo_`5ۼ` 8fsc\fy2xÃ]chxƸ3 9֫C;Kh}a;QCc$ +4^ f 4t0^:Lc4dᗆ/6YxT!@,x?鶮#"R OYݟ?f:vy^af2P0K%-쒗 :GR|Vdqru ,[qv/}%"4)$:(r;-o2V(2 al+J 7CaϗWj +[ZKjyEqp@x=nfCYvBܓk#qRAϟ&SZ +ۂ~NQgv +͋t_[etKD;Dt坱)_so/#:\/4yEb/H?-T -_rQL疰#in*A|Vp'cW6픻(ie@4.ޔ'2𴯏CQp J$mwqb 5手hi5I, r”Mwd)Di03VGIӷTZ,$Ԧc+1tu8NS{-c5\G\T͏!Nz4M?d䐘]%aGۥ*Q*eRz/7'}~Fz!:*ÇgTxZ7u>H[4B.*mHۯVI(J݀yJla6䠹yEwHXutu& +Ru{*(8UU2m7057 lNAPm/]4|H֦9)MGΰ|8j&ʩ3ڟ=hp G_ăHVk"v'S[Z?Ρ.ۺX^*+ |O=ь'> endobj +5983 0 obj << +/D [5981 0 R /XYZ 85.039 781.388 null] +>> endobj +2098 0 obj << +/D [5981 0 R /XYZ 85.039 635.285 null] +>> endobj +5984 0 obj << +/D [5981 0 R /XYZ 85.039 614.088 null] +>> endobj +2102 0 obj << +/D [5981 0 R /XYZ 85.039 585.477 null] +>> endobj +5985 0 obj << +/D [5981 0 R /XYZ 85.039 563.616 null] +>> endobj +2106 0 obj << +/D [5981 0 R /XYZ 85.039 470.045 null] +>> endobj +5986 0 obj << +/D [5981 0 R /XYZ 85.039 449.052 null] +>> endobj +2110 0 obj << +/D [5981 0 R /XYZ 85.039 378.416 null] +>> endobj +5987 0 obj << +/D [5981 0 R /XYZ 85.039 346.89 null] +>> endobj +5988 0 obj << +/D [5981 0 R /XYZ 85.039 317.471 null] +>> endobj +5989 0 obj << +/D [5981 0 R /XYZ 85.039 289.767 null] +>> endobj +5990 0 obj << +/D [5981 0 R /XYZ 85.039 195.529 null] +>> endobj +5991 0 obj << +/D [5981 0 R /XYZ 85.039 181.373 null] +>> endobj +5992 0 obj << +/D [5981 0 R /XYZ 85.039 167.824 null] +>> endobj +5993 0 obj << +/D [5981 0 R /XYZ 85.039 140.726 null] +>> endobj +5980 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5996 0 obj << +/Length 2003 +/Filter /FlateDecode +>> +stream +xڥXKsFWTUad3-8X)o*-23%IqlJ9lM4ZjZ:&Vr; kL;ɇh? wNj/ ?'faqY/n`Z-D=>}͕&׋^^&HIL~#p&S;}8Hf0g%{TNYb1|k1e`8v^+ +7A[QU 5vDdF Ҿ7Eӊݪgްr&g:_QyPj $ mr-E#2ic%"i ,-ʉIY u)B_pO7F,?Y(y/OGd/T1kɆ)a[me^h/s7Mdi]merly&V6:gUafG cecoB2X쵴zرE^BFA^:#"ٓ^:'Yi>U몄b5ŮmdMFz_rmz+0*>ҹ2'J }G}7@y&.fN{|iS8WR$ntIS 1;uщ58W`mxqKRॠ^厡+[&Fs(ëD)ߥǠ*Yfsա"j$27-#zYF7m/#dQ9 -_rŞW|2bS`@t::"2Iz*Ίs)p^K4 : Vt6 2)BG=h[H3Vhڎ }]܉* aq̚0l$z-{"/[Uی1Oǁ(mIPaJ+Yf}DNFCe_z{<"h)Na{2@"c|NV.F0!R8VsvʱX'~ n@b75ˊP.4!#k4:>Y}4#1)ʲ:mD&k{aCz&+Rz襝A=uLWGW+m%_J"[RGdXmU;[!aV1xFՉ< Zt9bWuaFAqmU6m ceT +ըXzpsͩ4q|6~JZ 1уpTcV]8$.7߹G&?5-92jiD磩 I]l'm~DzaEc.t?odGorybL1HF9JDb"4^% +P2qъpi +3'̑qx^ P~vL6i^Rx%BMB|$&CƛsrY-))[; q[cj?_侖-;bIy#%%?{i4HlKt-sb+C^G–4`qHSVvNt*o7zZI;{~Av7XNT`a*wýG86 极ۡE/;d0Py87rx'(GI]5p{њ<-u  +_ٓUWfZ;3 +1kXA_Ax|XbxGΕ~ VD41Ė *Nn+H]zI4ڍ4xZ7z!̅:fgʾGkr$Mɷ}kh̟F.QSrzxQ }tyȼ4.CO*H,o#tXe0DZ6T3ăi:tVFe]?Yuk?_U4Ҿ' C?T.tso5E+?]Pendstream +endobj +5995 0 obj << +/Type /Page +/Contents 5996 0 R +/Resources 5994 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5956 0 R +>> endobj +5997 0 obj << +/D [5995 0 R /XYZ 85.039 781.388 null] +>> endobj +5998 0 obj << +/D [5995 0 R /XYZ 85.039 748.383 null] +>> endobj +5999 0 obj << +/D [5995 0 R /XYZ 85.039 734.834 null] +>> endobj +6000 0 obj << +/D [5995 0 R /XYZ 85.039 693.58 null] +>> endobj +2114 0 obj << +/D [5995 0 R /XYZ 85.039 637.099 null] +>> endobj +6001 0 obj << +/D [5995 0 R /XYZ 85.039 610.485 null] +>> endobj +2118 0 obj << +/D [5995 0 R /XYZ 85.039 566 null] +>> endobj +6002 0 obj << +/D [5995 0 R /XYZ 85.039 544.803 null] +>> endobj +5994 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F35 2888 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6005 0 obj << +/Length 2377 +/Filter /FlateDecode +>> +stream +xڥX[6~"2I] æݤ) ۸8<ش-DGss!)>rp8~3Q"4U䅈TQf{yV"IU& L*QWe\Jʼ\/^8qe*X!d 2P&rq>/E8vJeyER9iL;.?Ygge%⪁q*Rz,zy3Bz'ejԃ" L޲/Mk<87`U?k$C64qT噍<'tSJqh -g)h;`,a)/g?[=-x)XqH;ã;nm{E*.YAv/Gb/g{jDJBW=j!֏#=Q[]7tyhGZM/7D !O 7s8#9)%U^6k+ ndwN[Wtg~P7!g*Q0Tf~E` +H^oPPiۍg&* kqq&G"2:s6x;+0!C+eN^csK2{ai}EX3] Bd,Q}xzB̿'q껂Kk=ylR\7`t G!hU=,DsN3ɄE_@ +Ǜ7x1\6P'6``Bi  0UmҒ2J2HzmAn1$+, y$_(3) m,GhǑ(ˠY2za9]+%M5(5ܲZV+(@hEQVƂ~  -])nL/pR$"y142s3Yji^1yiāG‚.a{9c4p?'~) #'6qBQE$V\sߖxO5նܐpnW:qIP$h6>6~̃/z4%osxH)Hns:J0Jx>U$tek?tW+24 EąnqpLݣvƏPϭR8$y?ophBF%_ueٯM ?n3cfn0.*[锏wCGsctz@93"nIk3r2ȝ:"RwS}y'7n< +NvDLygY.Zy%c|#1nY۠A͈` w9vxC"O+xA_t(ཁF!S9qXDОV߁1ln*i+-[ۥ#w9q;Aqc9{3o ;}Z<7Nj]LgO=S ww&2>& ]gƏDv{F ܶDv;gX(?|HPo,R06Wl>60[Os_ Wt-ߢRfQg)LSZ(BQN +/d?r>`腊)]~ Ÿ-yq4J2&Je*cd/΅Amك'8%Nx 2">Ɣg22O +xCq_Xߡk_P8y^08 +oeZ3'z}Ne,qYrVx , >A=]vˁ$)tx;b0N=w'#%4Y|ͱ60&~@Ewԙ'HHUGꚳv*h|>c_P ?ݮ5WP_g}T(h 6bW}9<?+%/xm\9\ Gn@<^)0U I:eh)<:R@?endstream +endobj +6004 0 obj << +/Type /Page +/Contents 6005 0 R +/Resources 6003 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6011 0 R +>> endobj +6006 0 obj << +/D [6004 0 R /XYZ 85.039 781.388 null] +>> endobj +2122 0 obj << +/D [6004 0 R /XYZ 85.039 761.463 null] +>> endobj +3035 0 obj << +/D [6004 0 R /XYZ 85.039 667.044 null] +>> endobj +2126 0 obj << +/D [6004 0 R /XYZ 85.039 667.044 null] +>> endobj +6007 0 obj << +/D [6004 0 R /XYZ 85.039 642.326 null] +>> endobj +2130 0 obj << +/D [6004 0 R /XYZ 85.039 490.395 null] +>> endobj +6008 0 obj << +/D [6004 0 R /XYZ 85.039 458.869 null] +>> endobj +2134 0 obj << +/D [6004 0 R /XYZ 85.039 226.062 null] +>> endobj +6009 0 obj << +/D [6004 0 R /XYZ 85.039 204.866 null] +>> endobj +2138 0 obj << +/D [6004 0 R /XYZ 85.039 162.706 null] +>> endobj +6010 0 obj << +/D [6004 0 R /XYZ 85.039 141.505 null] +>> endobj +6003 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F72 3974 0 R /F18 3977 0 R /F35 2888 0 R >> +/XObject << /Im2 4154 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6014 0 obj << +/Length 2868 +/Filter /FlateDecode +>> +stream +xڭZo8!XC{mm\wXٖJr;R[E"Cr8ߌ"&Il@%(bsLnaa)dڣy1;9$H&Uڨlϛ׳WϦJ)OjlEՙn~?AIߟ{+|~~W8jvyɫYv]I[zs0Y1~9 |ē{h 7Z[V<'p:TYN! J)eJwkV,+5[$Q8,ξₘ0`~$ S^1aVÖudD94D",38{YZKdf}c3ߐcXYUS@7!R:=vObbK|:Q&CG mؼtfPnABfm'ג̃5-\}a7]`ʝ]p4=/u7jbCCO y+Jpn DïN5C{ $2J8RHCe4H״njne|M"m+f*`=C6x=I/$ػ+ 'KedK͋+!RFC$i /LG^֠~dr"5xN*c!-Nջ7"U`D_f6(ipomF-=>6)b EHD4lW}Z +w֩#Lz +-Wvⴿi(V*KDuCxBŦ!l@>@5c !w|F9?.f}Tq$!g<~0@YP;l^+ޒ5V]#s~؃8Gt ) |jzGacq"vnӊE}o:x8Zg_]D3.`뒟d#icd⩌^"wRV_&f@Pi%(C9i䷀|v+ r10g &gPVXXaFV썚YF$Arl X(tO`AӺߺ+T ʐ3%+M7)9w^fl-Dv(u- )-}~4=Gʆ34@w{k'GJ2Jwʲʭ׊Xbpl^&qJfCͪ\5CtEu$5}rN g^8Ldw2^ѾH`adž7\h?a^C<2}c9"ol!]wBXS +vtv#<) +kFi1ڻp^;Xި$˼Xz V>R@ +B]݈'Mպn2_+`pn1+ijsǢUSqr [þ㌢83(J膕K."PZa" YB-]s\#-!ǥh 6Coxk0(}QI#e̘ܺa>/ed[k rNm;dR*#^, N0υ8A_`K@rxPzCLݥ S爦T#@_jf@)+`GC[wmk'FDԑ|z^I@UzrhzxnqDp:ĬQܣ9H,K(\9狜@:bK2Ƹ + +/9\w;ٱA*lj~A +S@x0jf~ v}vM%~WN81 w#q .i՛uMtq^"]6bZ \-պlGdKeVƪ{}`. ~oc_$H2~'|?|?2!cPQ-72(hȴ5<.io{`lD7;6%$e; nĄ9n/?\?l}u ^FJBa> endobj +6015 0 obj << +/D [6013 0 R /XYZ 85.039 781.388 null] +>> endobj +2142 0 obj << +/D [6013 0 R /XYZ 85.039 488.874 null] +>> endobj +6016 0 obj << +/D [6013 0 R /XYZ 85.039 469.924 null] +>> endobj +2146 0 obj << +/D [6013 0 R /XYZ 85.039 246.049 null] +>> endobj +6017 0 obj << +/D [6013 0 R /XYZ 85.039 224.848 null] +>> endobj +2150 0 obj << +/D [6013 0 R /XYZ 85.039 128.027 null] +>> endobj +6018 0 obj << +/D [6013 0 R /XYZ 85.039 105.311 null] +>> endobj +6012 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F14 2903 0 R /F72 3974 0 R /F18 3977 0 R /F20 2873 0 R /F56 2898 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6021 0 obj << +/Length 3177 +/Filter /FlateDecode +>> +stream +xڭَF}BoKV} +&>Nxa=[^~|E7s= >A?U}|^pK?̛;(kV@Y}:P:lQRKa"2b&Epym=U5c2=+^+~dMWĔstA(P1FS5K9nynuhԇdOx QqjxVUjB6޲΂.v/ y"^UQD W'JIH#.u\oWi:HDU!xxxx*`}(v:RpD$0D@{dD$PqjT jj8g$$ 3w;9{]w1@$ƾ f$" +8UZ:?Y Gɭ% q&NjB v˓IA"r‡{<9Br= EQWx2xî@/|~2#<#k$aהՊҹW:gt(kY&n"Mj)z9yJk2ެH` c.eUq0{MGC_~I駌R郥Jq$:9$#ZM$-<8 Ar-fOr1RvN5^%Au3pӒx.kN~i$Wr* G}S&IBTF(4 +b.^(Q*1g\X0^]ρލ!k<.f-sdC 5 |㹵Z(*(GIn0MQ//xe> l^}w;biﱈ:dkB >ai_58ω+=p]]VJ +4'ՕCzV 4jAe2FΦNwSg:8^bR'(wՇV[aqt )CPWmUunJJ$;j4YGׯ M1>F%΀rl 4@ÓOɱ6ʶb +~}@CX9@2G-&e h8sk\ǡw(Bl6 L! kH A% ] YΫZNqfu fh"T2sm}a +ö2'uSTXXcW|>ýR]qzCbe#C%B[Hc +0=j!O -6T)uۥ9K%_ȕ ![0HL] q*:A XX6Is5+t7py׼,j] c\ лRSc1+&Gdߥ" }^I8iKElbk6'@ʀfl$geH;#*۸㛄}LKϋ +ϛ~q%U]sR"{/ tԚ ~CbcF<.m)MEoѠxFH`PQ'Z\Ziѡ$"A8ȵ$HZ?Hz ")JyE=h?X߆_=:VxXԾPtlu//;|UтO־>71x?}I~endstream +endobj +6020 0 obj << +/Type /Page +/Contents 6021 0 R +/Resources 6019 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6011 0 R +>> endobj +6022 0 obj << +/D [6020 0 R /XYZ 85.039 781.388 null] +>> endobj +2154 0 obj << +/D [6020 0 R /XYZ 85.039 255.288 null] +>> endobj +6023 0 obj << +/D [6020 0 R /XYZ 85.039 236.619 null] +>> endobj +2158 0 obj << +/D [6020 0 R /XYZ 85.039 236.619 null] +>> endobj +6024 0 obj << +/D [6020 0 R /XYZ 85.039 215.622 null] +>> endobj +6025 0 obj << +/D [6020 0 R /XYZ 85.039 93.418 null] +>> endobj +6019 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F35 2888 0 R /F15 2884 0 R /F72 3974 0 R /F18 3977 0 R /F14 2903 0 R /F11 2906 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6028 0 obj << +/Length 4226 +/Filter /FlateDecode +>> +stream +xڵr6_K&ևI;L'F%%Q%8=7D;tpV!γ8u~f*Yv>[ L T@wwgW'\Aw=80>ݛ_/ZIdifo./TMAAnɻz;_޼Į5λtٛ;;.$ǭqSx>c|: +g 6ZWgP9Yc0QD)4tdQ* +\qġqRG.Abs )m=L13xiw I,:iz8 E1n7`U;FF|Ε𷾗dj8SM0Y" e 倥SI3b)>"tWBLժF{ȟݒg5ً-:YoS~FNj@p5.:Fф-Z @Ch +Ȇy CeVe]EVrxi֚a,:+Hge1}\AQԯ!kQbOm0^Z!7V"6<\%AKY[n{. Zі|-?cKO+$?PR:nNz7eey`l|lA=-K`#;x+1\(xLbI'/>[INDtC^b06JPbxVFr㽸8iڬXx:Y ̔ +CYDZM@]0ʭ#5^O_2h%SqB0>瞖Jҋ}bEq4J26\DI>e]I@/>0IC2! 2Җ^H +*D<+cY |Y*>,qC ThCV@_5)sL6_Ǭ؁cAv0Ÿ) >++v젹'.˪%狖dۄ`S C,Cy3&D<̈l<#C=iVm6pw +WJ(kh{$eHEˤ\ fE':v9YCv7qohRpY_Fd.:e- @ mYiZ ZCxPE?D|#]osgbҠk##I>F'6PU#N##P[|u_-0c, 'my:uQA,50^/|53ؔcG'^c6~@3*Q6[(~s`g]MZn&햭̚4yMq=ۢ[r #b̖<=`gh4)&.:*T&JuI,+]A+?C`VwE#*{]nv}0ϡmEST@flj!( 1^-z>) +*}o^6-oKEs7ۆχB8 bw+)ٖꙋM !SY0+ҮLkl *6AsjbRl$gL]&sfQ{3IB!a*i}.9Wvp][:3 ՠ^Z[|QEj##'5%a +EXѨaôn!klZ.2ސo|+k2d3W+r WǮO.'WW+rZ_fuO݆ӏ=}':_n^F5 haU;bOEs +CA Q2Fr2 p:I:r'WVkv Oq2֔r^ALf| +b+qH1FT0qߎd`Z_~@#XWe<z{y22ʐ$AR"]Ͽ{M_5JSY\[X"J#wAvl;ɰ"4zĶ{7 V RLZiyr=^ 7D-A7߱2y70%96FYmt.d]<| +ox1?{L 4#drzd Ǹ맜jE*v2PW!/PKzpԪ2^J?|*ݣ6e\:3^ܹ+^m3 :;/:&^ػs > endobj +6029 0 obj << +/D [6027 0 R /XYZ 85.039 781.388 null] +>> endobj +6030 0 obj << +/D [6027 0 R /XYZ 85.039 761.463 null] +>> endobj +6031 0 obj << +/D [6027 0 R /XYZ 85.039 295.282 null] +>> endobj +6032 0 obj << +/D [6027 0 R /XYZ 85.039 281.126 null] +>> endobj +6033 0 obj << +/D [6027 0 R /XYZ 85.039 199.831 null] +>> endobj +6034 0 obj << +/D [6027 0 R /XYZ 85.039 175.46 null] +>> endobj +6035 0 obj << +/D [6027 0 R /XYZ 85.039 159.184 null] +>> endobj +6026 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F11 2906 0 R /F35 2888 0 R /F56 2898 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6038 0 obj << +/Length 3666 +/Filter /FlateDecode +>> +stream +xڭ]SF_K*h7HdaW{WIFneˑk-UXyfIz:ʼnruVo3?(X‚ݏQ0SzlAg_gOwĹ+/nO?^}볛3 `.qreG](I?N~ݛ1~>\&gx\ -߻x.!N:qDB+]Yznċ/|8}fX$8-sf;_ycmrܡ?q >'Q,w0DKOU`: _(MJgi2 +'8kGyJ#Ef}4␽8cjSdF+B)J0zC{ IK\((nd2pX+f?4|^;q@j +˛6kj3F (A~QY d/ A]%hON!ۊ'e@Hs`2h88-S!emk;*^^^4iE֚c#q %^:[`Y8+ iZ&/_v8r6|d>\L +ܽv .21Hɕm:Hf .E +N5OK"bcNɊ2 x@eQsL8@ji  V =Fܬv=uҾ/ 0lGg;^z*m )|1;ͽ; _L# D +2xEXieS;HI Ddh(~؝˱pj5楮q ޣIrBqiJa`ź ;۬IqYF" 흾ܻ(gFu\4(i^QJH;n¤?:Y 4t#DJVHc샃֐f[ ؍Dțmx*;:%(7yTUcۼK$wmVj^ov|`Obq{䶮l I8  ő4|wMǛ>.u(Nox:g (\/꘻v/Ζ41.Ἠ< +FtH[جpUd{88\6{ڋ58դdOz$rWk~dr)s+_y-c_%uEMEUNLr6*u0t.^Hy輒\ +_=W +[ӌKbdɳ}ebO!ȗd6KKs3ԵFFH{N9^_*!DmyDPPl'0S=nIq`q}UwrP Og +`N^(vWR\ćWvnRIĤcR G*eO]^Ij^RK*slg4D`".fl/)37bv:.4{ME4A*x0=MT Sbb'P5 DU,F1SAO=P<">j llѩDZg|@2 VDe>caبG& #߷=:OFiK2ڡ*7oт@22 ɖ3 Oe7T-w0E3yi3I`L9RP,,9a"*ebuJ.$:yN_ۇQ$E Jc1 a(;UIR?L5L&.@dϣLBg>0i0]AI:{%mk _*ek9:"֮Юm+r*Mbs2 fF˵׌: +z I "ףBg$5HvNIX4SY1"\0 A2>Ur`~WbUhQN3lfjauetp#2>ydt+N5^tlsuT +~0zC=Є Y +b +$6# ۄ~JuOc7{?9s_S,G秩x4,q c$:a46a-'}71-Q֘߷ԖFN/><}E㜞P_z=~*-g~m.Xu`Az0}M0yC=Є\QǣrBg:fDFb@%8R9[ʲ^JHp3.'m2Om&b)‚>}S|A>cQ/un̪O󒯮%R3{)UI'Q;D @3|2 C'>xvrZ5@ֲVQS|)j}4n޵?|%0oC<؆VдP +X)!_@n*ypSqGwNW jsL^ag"? ZElZe߅1`b L@=UuUj UB qv_&TXu`pPs%5tTTHgzFx%zʪ. 6&kp]8W8~,|/~58.ѓb4늉o?V7\U^(Xw&C+2A #Kg>ux n},Lw۠E翑' uL!Gxb4On4~]u{Vr!b݇PHz|wOdgҝ`46}#&#@ȮtT8Sp&X`$]ȏ }c]!Fw&teշ<}h0ʼd`oYE4x:D]'oS '[nOEҦuH.u 'ca61ɠfPΦZuB +4墲AYZ}J5'x{_mvOVr_BD[ +rax6 \F{_%n D KGGr8$?`ܛNӇ}C=҃A}eh֕k> ?"?Uendstream +endobj +6037 0 obj << +/Type /Page +/Contents 6038 0 R +/Resources 6036 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6011 0 R +>> endobj +6039 0 obj << +/D [6037 0 R /XYZ 85.039 781.388 null] +>> endobj +2162 0 obj << +/D [6037 0 R /XYZ 85.039 719.568 null] +>> endobj +6040 0 obj << +/D [6037 0 R /XYZ 85.039 701.095 null] +>> endobj +2166 0 obj << +/D [6037 0 R /XYZ 85.039 426.274 null] +>> endobj +6041 0 obj << +/D [6037 0 R /XYZ 85.039 405.073 null] +>> endobj +6042 0 obj << +/D [6037 0 R /XYZ 85.039 380.702 null] +>> endobj +6043 0 obj << +/D [6037 0 R /XYZ 85.039 365.032 null] +>> endobj +6044 0 obj << +/D [6037 0 R /XYZ 85.039 351.483 null] +>> endobj +6045 0 obj << +/D [6037 0 R /XYZ 85.039 340.055 null] +>> endobj +6046 0 obj << +/D [6037 0 R /XYZ 85.039 323.778 null] +>> endobj +6047 0 obj << +/D [6037 0 R /XYZ 85.039 310.835 null] +>> endobj +6048 0 obj << +/D [6037 0 R /XYZ 85.039 297.286 null] +>> endobj +6049 0 obj << +/D [6037 0 R /XYZ 85.039 157.817 null] +>> endobj +6050 0 obj << +/D [6037 0 R /XYZ 85.039 147.124 null] +>> endobj +6051 0 obj << +/D [6037 0 R /XYZ 85.039 135.696 null] +>> endobj +6036 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F35 2888 0 R /F66 3248 0 R /F72 3974 0 R /F18 3977 0 R /F14 2903 0 R /F56 2898 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6054 0 obj << +/Length 572 +/Filter /FlateDecode +>> +stream +xڥTMs0WhÒq$(6I'LߕD0ti^ޮv2KnjEֲ2v $aUYrpܱjˣAiɪ6}a0ʛ,RBAc2trE*1&c!Lch])>nTeweRV[vsԞ;jeA:˾i{7Jn֋d|ڦ{ŨcPaI@qo鷅}$͏BV!:}x ج誛qz*̓^E1 V#ΰ܇L. ͟$+cCJX7} =%JөT Da1܀z +endstream +endobj +6053 0 obj << +/Type /Page +/Contents 6054 0 R +/Resources 6052 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6011 0 R +>> endobj +6055 0 obj << +/D [6053 0 R /XYZ 85.039 781.388 null] +>> endobj +6052 0 obj << +/Font << /F64 3118 0 R /F72 3974 0 R /F18 3977 0 R /F15 2884 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6058 0 obj << +/Length 2862 +/Filter /FlateDecode +>> +stream +xڥZs6_Q3L$AM\ٺIn>mq,HYMRdbc]],('>8N&&Bd9'DZ%uh~^DD"'A']ϯ31{Χһ ̧3}\]OU}97|><æ@s]Χ=975|AE䏿/tOP &@TLxT2PP@t0zYF0<~1LJ%TPF$4dDJ!nFDڡ0q:@kĄ~$i:eZ@0j8%H:iՉPa4QJ်0 rfd(B.G}0rx + ETY#@(|tb@]=PigXX!.p5*^Er 9%ԽM]7H>FHXp2&7{Ƕ f10!Y%BAuk=ϮmjA ΍c`_4 Q~3 *j[M 446߱swg)։@`IVRv`6K.IxЖhPK+4Àkg{V] \O\o:7clDOqM1wSY^@>$d`tb4r|:D;成aH)ԉ" +  X2sh+K$Xkg{vXD1sJW rtӖgQ b:"Jà1l@ehAQGu$ DBsjV?ʮTzkO{hR7 -C#YhKD _%F62t5~٧ʸ{Ro9 e 9J`USB7iC ,$uJ=S2ş dS0yH>!Z&o4 |B IIAvo>M:фt2Ϙ*Cr>Tvu|씩$9A3yjHU ;DjHom Z3d{qI0⌖ ++JTW8ixu +zW<,+b)0l*ӍUV˶%Mrd5ϕn\cЌlЮ Ǹ56Y&[;D#(X"Ba8ʰAaEc3wg\a^Υo*3|aLT$NCvGs[ee Zj8NbJbk׼ݹŽIiuI<(bSoǬ}Jv4j|hG5ϻiq-it@dc2KCJ6|tlXu/ .|90R0e|_SΧ|a6 $m-J +Bp v@wm4~ݖqnkM:n Ԩx_= +JS2sA -Mp|鷫 +[ށ)(:Dw5IMD|䋠Ӹ@8E.ǣHC^[fC]n_*V5k{_ s8|0KY^~sX,kV,IUjC]UsKg}X5i4IYLs|Rm-hs޺qA"TnB%}@{N?/j*p~ +htÆo^X~-(rOendstream +endobj +6057 0 obj << +/Type /Page +/Contents 6058 0 R +/Resources 6056 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6078 0 R +>> endobj +6059 0 obj << +/D [6057 0 R /XYZ 85.039 781.388 null] +>> endobj +6060 0 obj << +/D [6057 0 R /XYZ 156.947 730.534 null] +>> endobj +6061 0 obj << +/D [6057 0 R /XYZ 156.947 550.26 null] +>> endobj +6062 0 obj << +/D [6057 0 R /XYZ 156.947 519.114 null] +>> endobj +6063 0 obj << +/D [6057 0 R /XYZ 156.947 497.426 null] +>> endobj +6064 0 obj << +/D [6057 0 R /XYZ 156.947 476.345 null] +>> endobj +6065 0 obj << +/D [6057 0 R /XYZ 156.947 458.143 null] +>> endobj +6066 0 obj << +/D [6057 0 R /XYZ 156.947 435.697 null] +>> endobj +6067 0 obj << +/D [6057 0 R /XYZ 156.947 414.768 null] +>> endobj +6068 0 obj << +/D [6057 0 R /XYZ 156.947 395.05 null] +>> endobj +6069 0 obj << +/D [6057 0 R /XYZ 156.947 375.484 null] +>> endobj +6070 0 obj << +/D [6057 0 R /XYZ 156.947 356.524 null] +>> endobj +6071 0 obj << +/D [6057 0 R /XYZ 156.947 336.2 null] +>> endobj +6072 0 obj << +/D [6057 0 R /XYZ 156.947 300.206 null] +>> endobj +6073 0 obj << +/D [6057 0 R /XYZ 156.947 266.333 null] +>> endobj +6074 0 obj << +/D [6057 0 R /XYZ 156.947 248.13 null] +>> endobj +6075 0 obj << +/D [6057 0 R /XYZ 156.947 227.806 null] +>> endobj +6076 0 obj << +/D [6057 0 R /XYZ 156.947 177.657 null] +>> endobj +2170 0 obj << +/D [6057 0 R /XYZ 85.039 116.799 null] +>> endobj +6077 0 obj << +/D [6057 0 R /XYZ 85.039 85.843 null] +>> endobj +6056 0 obj << +/Font << /F64 3118 0 R /F72 3974 0 R /F18 3977 0 R /F35 2888 0 R /F14 2903 0 R /F20 2873 0 R /F15 2884 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6081 0 obj << +/Length 3273 +/Filter /FlateDecode +>> +stream +xڥZ[s۶~L}KMS;>:NOh8!Eߟ$N1.J3sgq̢U:g™m` W(Bh~Z^~3Q̖=@-nBk=|ux~ʝW w wLrʋܼ}C?ͻ\w{Żewn_8IGzl Q:gOv M~qq3^5$@*(zJ, +8>b]Ez޼v8B<]C{ͤ$ u&,- PLq3w+Î}'v-ñP7\ !j'Uk|EQ&tUg|$bx]]={:o, +$=\ͷhp%7;7(꿎(?"gqcBl݆!=p3in8E4ՎQ;|% \b}K<4r1@S=QU%IK x`[?5%勸?: %X_THS,W;s^8 ۀt I #W Pp=xDҖ[؄U乌!alZ4fH^  ϱ}N +rʿh52N,-p\ƹA(.AIxQD,hu(8j^g#3X7:$0>䉼k>;SJ;#G0ſ=B% ׿ t*O u7?q{A=1I͎{p92Um2γݪ~FѴrܧMCCUy;j0i73IguIx'E'j}wE6HK7YZ/R4 T4cr"gzqSDZ +uŸsV^(g6QI`9h=32135L԰7#WFf"df٭`L|8\v^ ՗\?qoulpXtd_Q` SG#r_B^c/gɏ\A2¦h go@dʋ4rhKy;RŪǼiKM&v+|S_>~x ڥw` I-e{D{ +nJtj;#݌D>K\ӧDyف'+pPwu_ZϹD8.έ%{8A,sŌ+($8Ps@ TWBG$$ mVxxy=!GhNB{pir7'k5%g|T9^ (Sh6ِ:*cʏ{hwɌRݪ>b{e }6hȓ&Spp139yLk71]IzEKWTK`oչX}hҝT |JsЁTIJ8Tn%kuItUTMW7_1t-R G&TKDp/yߞhBGxar7k[S[RQk'/I6 SiRKG)OXSr>M`?ىxBE3^iu!I>_HZs Vm6V05L'OӌL]ɄOL(A0-$Okɢo2LP_ #3 \)pQl0ў{̉6zX4ȱ(B|f$E8{o>qgejlGNJv L=`'d' -" m !G$ClHH+:)U mO> endobj +6082 0 obj << +/D [6080 0 R /XYZ 85.039 781.388 null] +>> endobj +2174 0 obj << +/D [6080 0 R /XYZ 85.039 611.175 null] +>> endobj +6083 0 obj << +/D [6080 0 R /XYZ 85.039 589.314 null] +>> endobj +2178 0 obj << +/D [6080 0 R /XYZ 85.039 520.72 null] +>> endobj +6084 0 obj << +/D [6080 0 R /XYZ 85.039 500.125 null] +>> endobj +6085 0 obj << +/D [6080 0 R /XYZ 85.039 459.478 null] +>> endobj +6086 0 obj << +/D [6080 0 R /XYZ 85.039 434.501 null] +>> endobj +6087 0 obj << +/D [6080 0 R /XYZ 85.039 286.575 null] +>> endobj +6088 0 obj << +/D [6080 0 R /XYZ 85.039 275.882 null] +>> endobj +6089 0 obj << +/D [6080 0 R /XYZ 85.039 261.727 null] +>> endobj +6090 0 obj << +/D [6080 0 R /XYZ 85.039 248.784 null] +>> endobj +6091 0 obj << +/D [6080 0 R /XYZ 85.039 223.806 null] +>> endobj +2182 0 obj << +/D [6080 0 R /XYZ 85.039 179.322 null] +>> endobj +6092 0 obj << +/D [6080 0 R /XYZ 85.039 160.848 null] +>> endobj +6079 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F20 2873 0 R /F72 3974 0 R /F18 3977 0 R /F14 2903 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6095 0 obj << +/Length 3274 +/Filter /FlateDecode +>> +stream +xڭrF]_K%9pMkَbKZzSI Pm/\$(6[)'jjgY)Dl=fy}c!(?g;S{l]r׋1֝/0r._Εs, 弃-ܾyK\_\ 5༼u7_^.;}Y|_l sM;sLoπ7׷F󳻳uxxՔ$ZXK+P L'- vҳ\߳$.v5 *ζros g9qOqc'tv>78Pή*oHrT+^X~1y-:t5p(!Hڥѷ7`<&@6o<@ 'bB}\'@ǂ_$ý?=e!x +v!6n*4)汕1>_"xSNNڲ4d!0uMǰ1W(^lDI9bPbc$8Y$[3!dD=AdH*IKLŠI&VA&+<Őye`p%sPrW`v l8V4c4dHqWp +x_gņ^tZp3v%05 &m;Md/غބhT7YCߊh~#1oqݔU*$}[%Yΰ"J+h& FD tMV7ϢkrN˧Sh >$ ⟿2Ce@u쉣Nq#t2 }cgevcG 08  +rxD ~YDj Znwo)Ƶ%WE_EA>kE1pp:LL/$=}Ɓ@T;n$M0_qM‘!$l[%P9Rtv +'(T.yG=E4$9>n{ KK:.܏N # ,idE~tl W GLI4qS;,[1d&u%tׁkK0&5  +Żmu >x> pN'6 +\qӰ Ul R[6ʚ !cҴ#V)D8flݼ[2CBZrO^5kڭC\j.׬p Y@oTJ, 5&K3^إo3AOJ=GSfHtKVO[\^aTblX +m;r6 !hT"NB*Kp53`/lg +ܫ2!f1gA$-'ښ=)X@B}I=:W{xzPk´ 9|QTQBhkEQޑCꉝ"k@_ĭuR)w`}p9"z_VK`Gl?D#?[^2<JBxL 9CHHrc: b=3M9:[*@3z6 ,_mNg#fb@=w4PM}IҊ;1j҅7 P:a~$ce׽ѭrIpILވlgلAnq=GLrc+:~2{rYEDQl|?奣^ǚ︍'1:e:0žNv +'ơpe3 qV3A*MWQ.s}ؖԝ:3!7D`fiϵ};-I w:2!Py!'^VH`<]U)%DSb +s n8JZjV$'u,=ӕ-0*> QU/GܾL BAo7bШi[go$oq/ <ђAϡA:X{gՇZ7ςuVJtZ\Ê N4 +?"#MAV0-JW +wl_^,':6rMdLr^`dNO넴+ƺ \_Lu1o\y'!)RAeS{*4٪cs(Ros(A %MpOb +¶OGv.Taď}%ea!lCԋPSš\ @hUItIaD#}譅vmÄ);+E+DL{l!68?$*2QQ?1ƖEB׫]Ol)w$fXm,` +mr4= :5РtG v)?Q =`/w$s!g,WsCϿ񁊂 gR2q*`}́EOI~lC.7a8nu1`e%Tu󧶣&C٬IISq9A%K׽&̜֘Gj(sQE(}ZMxRR7Uۆ + .eΟo+Aի!n9\+^C(y_&saܾ\u&rcZ19VUR\mW$2h+)gdi}]߸%!IFn_`f ayJOzΫǶ-/JOeՓ[WNXF&H|]Z^ƋM1_{endstream +endobj +6094 0 obj << +/Type /Page +/Contents 6095 0 R +/Resources 6093 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6078 0 R +>> endobj +6096 0 obj << +/D [6094 0 R /XYZ 85.039 781.388 null] +>> endobj +2186 0 obj << +/D [6094 0 R /XYZ 85.039 761.463 null] +>> endobj +6097 0 obj << +/D [6094 0 R /XYZ 85.039 743.459 null] +>> endobj +2190 0 obj << +/D [6094 0 R /XYZ 85.039 684.819 null] +>> endobj +6098 0 obj << +/D [6094 0 R /XYZ 85.039 666.951 null] +>> endobj +2194 0 obj << +/D [6094 0 R /XYZ 85.039 526.448 null] +>> endobj +6099 0 obj << +/D [6094 0 R /XYZ 85.039 497.044 null] +>> endobj +2198 0 obj << +/D [6094 0 R /XYZ 85.039 229.946 null] +>> endobj +6100 0 obj << +/D [6094 0 R /XYZ 85.039 199.745 null] +>> endobj +6093 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F35 2888 0 R /F14 2903 0 R /F72 3974 0 R /F18 3977 0 R /F66 3248 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6103 0 obj << +/Length 3490 +/Filter /FlateDecode +>> +stream +xڵ]s6ݿb3deQ%w&n6v|sWD+ܵ}AJVddR$ E"U~ "I/tq; [DY90_G :Ћ̀G/gWo+)Fr$|)w?˕@A.{ë>Z^=O20) J>x"!@"Ђ D1NEmVy|t,>"xfmN +g@TfM0ByP8ɾw!x7L 1\Uw&֏?mG';C9~h7* &/lx5j + #21. ڲ&uXCclHʧ:pό#X5~k78x -$OQ>Μ'\?P/$Iw71iL8GT:ki %yԐ ICKaHuK 53n5sq;`[Wvd+&{/ثbW4!2sr`ʻ- ֶV(-a,[H5TС?;#CFXrmsͩ@|:^u`z?D"-}-㧅'UC18`pz,?GhczJR0C9fI`|qah5C%KÎڴ<B0q];Νrsa<" D44=PEFq{/^Ȃdg\;&:c;֏+ڳ,ny) A7E_mIXB[?49wWAI쉸c\q H>^9፬| `{N Jڻ22!ºw{\+p$Lf{)icMh҈qQ1CT?H!!bcVBo06>.9}1 Ysϗ)*ğ6p3< ?k0iyN='^ I)xrR]KG#1gJ0e QJ΁(cYdC'gO1j6dy;LЍ#->284s\̬)NxC^i/%x*.NqC>=RESǑTH!ՆT}3CFjnɆ(u3`Fiўt.*LSwEq7] ,0p\Gb*2pm8͞ɕ_OLT,ڞ, 9+Mc3Q>/ FcpkCI;E/dbvz +IZ G?GRGk k}Dd~Y")i!I4iBH_ F]=ܜb4q'zjF6<wh^[ƷF +hie-/${^6 ` +OR/DM@8xOU@}~c No2oP`]C@tYɑtyo>-~$ɵ&~ f73jɵo,&>28äy44v` 4aZOvaj,/ysΡ@rusTAj]RjsX fP@)uwO>80|E TCqLK5A9%ogSSФ!_O_'84׏J%/vyQA'yhE5Z9=&'5:Y_{(LW܊]Yq \7MD +H}@y}U 4zq.fSkzNI\0m,7q/^IkvfTKo4JD1kltD66zW`Vp+@0CDD0S +~ĸ<' A煹1g70KytK!W+|9>+d0́' x"+poQCz~Vl)79dTZax̕XnBmROrםSJ7|Q&)whL4# wIHMMCR1SvD2.҉94z5h D/8|p0xQ JxڡB3= 6# =̂://*YɵdMVSW9t!f 5-Y(Ks@mPU; F+#k2fQ#r-GؤSuCƯ>+ 8=~Be9,*(un6o +j+Dߌj x:q:ꤧW˓5u+AzXzFDέSKc\,0xRNF4/ʉ E?:0_t".똤tC! ?Z!<@YRD,Z'\ +@5yxL c |+Gq56G_3\[~X,OzogQ ($¹o2j,A/˥+h=JW-μSO>inWP䁗/^/aN#egl'ËSa҂JTR$5! +$Oendstream +endobj +6102 0 obj << +/Type /Page +/Contents 6103 0 R +/Resources 6101 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6078 0 R +>> endobj +6104 0 obj << +/D [6102 0 R /XYZ 85.039 781.388 null] +>> endobj +2202 0 obj << +/D [6102 0 R /XYZ 85.039 626.181 null] +>> endobj +6105 0 obj << +/D [6102 0 R /XYZ 85.039 604.419 null] +>> endobj +2206 0 obj << +/D [6102 0 R /XYZ 85.039 505.738 null] +>> endobj +6106 0 obj << +/D [6102 0 R /XYZ 85.039 483.877 null] +>> endobj +2210 0 obj << +/D [6102 0 R /XYZ 85.039 333.987 null] +>> endobj +6107 0 obj << +/D [6102 0 R /XYZ 85.039 312.787 null] +>> endobj +2214 0 obj << +/D [6102 0 R /XYZ 85.039 108.439 null] +>> endobj +6108 0 obj << +/D [6102 0 R /XYZ 85.039 89.567 null] +>> endobj +6101 0 obj << +/Font << /F64 3118 0 R /F72 3974 0 R /F18 3977 0 R /F20 2873 0 R /F15 2884 0 R /F11 2906 0 R /F56 2898 0 R /F35 2888 0 R /F14 2903 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6111 0 obj << +/Length 3966 +/Filter /FlateDecode +>> +stream +xko7P D +p|hm'g+WmQluW87/rJq/EqwY\r8MFBO8u>J3,͖GF^)ăW0|4āh:eDk=Lp(ofbm@#QUVEp̂#S˘:_g M(ɟ(B;Ȓ!c1٬b'Vky$뜄^&X8W D[D,'|{TWBfFI:M6(ZUK<ѿD _rmak˻57dD9,Lý!ĎvmA<^88O,b.0h@У8H[ d +vc9hDgNLt)~(EȮz@ĐYmNo+8Yo%,xڅ[Tc|zljþm_rΌP2L/zй{Ol^?ޱKk`pz. x`Gr;φM2WZW7["0YQ'Z4dS3("JW0|b2tjFh_$< Xo+PbF44cX0F2IkBqh2(e,RrRI em93AvWjPV#蓫0˺nHjq aDzբ\1xyPQ]JJq09kM'_e XRy%_DTb72T,!`̅ɚtj%Y.%a` ^&asCZ%q Uy89壽Nr\:9o54Q&L~y1 O 9) ZpזYv?3ܰ )BTlY2ZWPo+.l xRukM/ tF%ZCVVQF7J <4Pc D+CE_;!Ki$zz?#Q+VfDZúU K}zp9ëQ8ub!83,~w0~4=!l(6>HŠ.U6 RS :Ju~ Rd!@iNgL9N ./uuwhMHF5Ъڧ6{;J@qz 6D$(˓c52P*B!mm0mRЄ$Hd`bqMN NJCn#F«\OxogKZ w…5$ $&[mEhǪkDA>斢R$U8squXcłoMF8ڔ|n]*RRwKbgrdzKu,7R'J"] +h3`¨l'0r?{o^ +Wsj=8lWxS9S.5h1tZ&L' }!7{U: bwcMWNL̫Uy>{m8lq.dbߏn>[e=ǗRcˀT%B1aV"`"vޭesධG.ˏx:糈ۚ֟yU|јwsTPnJO$oQ)A/Rᗝ$Ijѻ2cnwC|tA|[עtvK&* b9PQ +Bar$)j9<ˑ~٘[8o =Z\icz۲X N"S闻Wͷh +"czu[WNt2LwGj0mJN=DVMbљA| 힠( t]zWs,t,Uqcm +gsA1B}n#>[4(Kp$韾ct=5bPHYZYmz?!?bTendstream +endobj +6110 0 obj << +/Type /Page +/Contents 6111 0 R +/Resources 6109 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6078 0 R +>> endobj +6112 0 obj << +/D [6110 0 R /XYZ 85.039 781.388 null] +>> endobj +6113 0 obj << +/D [6110 0 R /XYZ 85.039 608.251 null] +>> endobj +6114 0 obj << +/D [6110 0 R /XYZ 85.039 515.528 null] +>> endobj +6115 0 obj << +/D [6110 0 R /XYZ 85.039 472.759 null] +>> endobj +6116 0 obj << +/D [6110 0 R /XYZ 85.039 432.111 null] +>> endobj +6109 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F14 2903 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6119 0 obj << +/Length 3076 +/Filter /FlateDecode +>> +stream +x[_s6Kg + KjӛL˼RKQ.$!sgn YuI *ghڈ&dXdn`g! ϞZBpu~$!?nqP%9ݽE~5B7De}ʶUyGGw[ 'HvyEDiPCnhx4VeFMq̂8E &Qȸ__w6r\ZwpmX15yNU`՗UK bQ`/Z'DNm`T"'&R _"cUxz{ zTI[cxHƞx{t ۨgo\8d\t:IlTY!&0vg e'>z?aap$n.Wm|<#gP>fx5bF# fFI9<0XZI2i=Cmc`hHCȏml{4&&Ft,$9Px  @ȓ!t +쌡'S]ok qv],?0_C 0`2(KW +L +X^k0h覺I\YI`f?A>1TӜq~YPgpvPHP wTCWf%JQ=?"3"fBQN׼3=L7D(^p$a2h=EqD{{wg]Yľ>|jY)oeYlk['}6Wŧ׎Ů,MSZn"G$8?oL>-qK< vF%WE~wYrSv[2k ܖ "S;;!<0V +縃;ȞC1HSkJuk]H}WXV<^iNaTUD%|Xuӌ?x]EюVf0Eu16kPݞ t>Mjw"m}F5f8=0Uu/=uXaqwbOVcjzA{5R키!ė="XZ/1\`$ +9zFi]1?$r|_#1}ɺ9[uXq?7 +Z)?ry)\j1o† Xb#5ִ Mfmfs%xtRdӖH|3%7=, ++%mKLaN$#ŷ#?̖9m7LVgF̰?Yi[}^`a:ϑ NbN`zai@;0wk1yY=acLa/:a,U C5(֠xڔW3 X* f>yԽ3pK%횟a8wlҾ[w$F2`#n +֞F>UnMU J :H%ʬB.wX(@CǝŊV|%\.A~(̷D`nK-+6)!aJE/6K~V5rr! NK$S?Q7)y%|RI .͊MmJPvNfbꥸY k1V̛trm.Oϩ 8~2D|gn tð_S`Ks ߌvFFr6^B MeAe٨hBh%#>Ή}uj}okȰ߂.N7$%ꦾw֭k%pgKA|ADL5/m)Qغc& _q{?4!fFZ NK7 lSa&^- bv͵W+>^?d %DNZRzF 5|Ws䶎ʅb/ .QP:nDPEH!e}rNmD2HƥMr'qͯVk]9{yna ]sl,*\U&Mim7)pyё -sGЅK4MYtܕS*輞wtzp>mo9ror+FP !FĎZ2{ +*݂|eF\04[[G^#ʑ{*a]ftMW7gqN./(r{q;*tMsT& TVp=tuӿ.&_eYﲞɸ{[sOIN2Eg?1*jYPpbgPendstream +endobj +6118 0 obj << +/Type /Page +/Contents 6119 0 R +/Resources 6117 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6078 0 R +>> endobj +6120 0 obj << +/D [6118 0 R /XYZ 85.039 781.388 null] +>> endobj +6121 0 obj << +/D [6118 0 R /XYZ 85.039 758.673 null] +>> endobj +6122 0 obj << +/D [6118 0 R /XYZ 236 764.647 null] +>> endobj +6123 0 obj << +/D [6118 0 R /XYZ 85.039 477.993 null] +>> endobj +6124 0 obj << +/D [6118 0 R /XYZ 248.712 483.966 null] +>> endobj +2218 0 obj << +/D [6118 0 R /XYZ 85.039 326.904 null] +>> endobj +6125 0 obj << +/D [6118 0 R /XYZ 85.039 302.922 null] +>> endobj +6117 0 obj << +/Font << /F64 3118 0 R /F56 2898 0 R /F15 2884 0 R /F14 2903 0 R /F35 2888 0 R /F20 2873 0 R /F72 3974 0 R /F18 3977 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6128 0 obj << +/Length 3693 +/Filter /FlateDecode +>> +stream +xڭZ[s۶~t&Si&b-'QҴJӞD[PKRu@e{L&oTI8LX9~OVwr=Nː5?˓oC=Qdy ^],SO;y7^Cႇ\\μxz7:{M`-g->Y,;uY䏿I<(ޞoN}'W'Hq𬱓 b(T`|$ +\'p5ŧ pK؛ +W)/U>ﰿp]۴1mo6JijN¿;W-R火Z}mcK2MKLdxғlkl:NnDOw m-Z*] I0g+(̹Br%w4tUswyQp֫M7BR&6'}p;_I[ul0-~@q}w~٤u[H[k[ǝIеT,o?8&AOM%l EjB3m&-`_/p.簙寋gq6 HE5b(ᴨnD^9Y[k#0Aێ"3Jyp9$ 'HQãTh T}"s<cGA$"/0Aë0Ƶrb'qV #s8{W'c2^ߪɛ +8 es0{ؖ tPi' bbv.8(mƼ&DWVQjɾ5y,y)v])׀v͗']#ZqCc gܵH \o)y$;6p) +t!q]p,(zfے{]ϳ9yД:޴L%ꊦU]],g#:5[h*CViQ+#ɏg1}QWy9Gkr:R&߮t*ҁo7C val#f5CqJedC`pdi ,x +EeƜEPf:[\,f[6d$ci0.%h+h퐧X }7_Z F R*6mUg( թro&7Csd^v͢O`K}454 XeN떰1̙8h)"HWʸW(Y^1+L*:g t1*7v{)l<#Nҝ5d>l5+Cri]kmD3 gFRobhO7pS*G}UC-Ps <@fDQdR n4Gz;}uؚm➧Ng=~!#djj}8 "xfy*^ \n*2{plXa@}(nh!hBd^EwJkCcȒ+~FVvSѼt,ڍռ<5X.s v;0 +;Jx >Et.Cq0XtXaBV!h济9E" +eTD!6)[;2j2.X%̈riػ12wqؒۑz4c$EmBu?gKfQmYzA[ȰJϛ)]EJY0`MlD˰x 5= jW9֏m?AC _oTl^/7{>?a+9Wd\U)Nƹ&$ Tp@ ̥]Mͭyƾ´1Ikha7rO+A9VNb/[.E="ؑ;hvcܺ?0qjGrh :.f#r"ɡC}#ɲ25i^S"uZҶOHy'W!hX>AH{ZzCҼ'/(|΄ÜalsXz{ȯ |UW !( sLTwcvG%wu q̯Y`X 7'nn U; +OW s!o?1h0G w'Pw9$CCx$?8oMh=\ زݟw?Pbߦ_f{xIo*V%Ku i1_ ƭA]s? A &}un6u`(wy(`('֗ fP!ށe3Dxk}`̷$$ҵV眿(Ef냆U29=,b5V2\LZu`t%+Yʹ~ ]ڿ0j>1_bUYYk\UG> endobj +6129 0 obj << +/D [6127 0 R /XYZ 85.039 781.388 null] +>> endobj +6126 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F14 2903 0 R /F72 3974 0 R /F18 3977 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6133 0 obj << +/Length 3479 +/Filter /FlateDecode +>> +stream +x\oFB(PTk/v괱抶huD濿}q%>tHo^e(($()q<]|}DM2{vt&#$HF$Bld93A&(ǧg:&S:~WՇ ߼}w\\࣯M~}st6sܹyYǟQ@x: G)&FzT$l) HXs(t|o:ޘ.M)f$IcA#HR$diPMIӛj#JY}Jo c56a{>4KUU" 8Ot|vU2+CPc3={VPa ,eU|҃~AeHmk,GhA0팖&)E,ak75(2ޥR[: ڕP"AbBTzLپ8$lT|,^8Hgw*1,9 vPQuK"R""kHC9A4`#L X-7aQ08,>03vg|Vq^>v3aɸRMV7p\eeQEaL(xAN ƸVt˲)3NC sybXP +~_/paϡdwx` bܟBX$r 5^jp9@PB/it;!$qኁxJr^CɛCc/J0ΪT+53S:!ӁI +dΟȘhHZ5֩ڟ,2(zu>2AZ%t 8,'PqTq&?wgsH@U"eQ*$2)ӅنF,oʢf)1hBYl| %68S8,ڻ&1!لZlZp0B /_ʁ$1 ~UfG@w;'ҁfp&%$IB BJ+|A 55!PǡC <{=Z4X9)\~~< +!p;Z3ɓ@r_zvzs+y̧'b! !|j$bdzf~rfFcPc$GxVݻ!d5/g! ql;?7-FѮ18a S_w#*1#ab̂wxv+?n(OύȴBÝ/ܜZn"q6[GG13 /hPbL͢@-Ja1> )ro=l?<|\V29*wvꈣ]ã>roVf+6+}bԏ{C'Jy^o"TgE bn\aE+?$/NUVeYNo/9̋@G[3}/jߚK='篬 [w2?X_S;SW;}+2˞@am1#qFI"?(c +20a;\)&HZ$z YQCOK40Qٹ +Ã(2U^eڔ ;_EyUVQ׭UG8_ݧjWߋYR1ŵfbޥ<r%WX^YsuQ֏X*oe3N>UU~Ǹמ_>}Ova-y?-41 x,3^3\?\r<`a6T[[`OwmI7@ӛJցLq=_6MQ%f:[A٩y,/Wg%s}륄Uj&$+ȅ=}nsԢJFֆ )4Mu>l$>_31fR*pqgk| y cYåHֲ:_ZnnYeϬ]vUٴ ahA\7R? ENy{TJ +p H6S9X@q:4Dv-)z<Z•!v\n]E#g۔u56(J>a喙 776Ckk!$)QfT/O|4'J!aS&CQ1- fg_o3F[0@?ȩOϪqr'uS¦KwA/ 7/ <-\eIEG^L~ٷ;>,@AE 2J3xnL|c`<9OnL?kV` ́N[e+5 *$zr?Km(*!o,OBR׿߭]rUMZB~z.jF`d͑:*MMI- r7yekrB"UGkKXҾĻ?Iu_2} +C ]xܑm0ӻendstream +endobj +6132 0 obj << +/Type /Page +/Contents 6133 0 R +/Resources 6131 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6130 0 R +>> endobj +6134 0 obj << +/D [6132 0 R /XYZ 85.039 781.388 null] +>> endobj +6135 0 obj << +/D [6132 0 R /XYZ 85.039 758.673 null] +>> endobj +6136 0 obj << +/D [6132 0 R /XYZ 224 764.647 null] +>> endobj +2222 0 obj << +/D [6132 0 R /XYZ 85.039 321.948 null] +>> endobj +6137 0 obj << +/D [6132 0 R /XYZ 85.039 295.333 null] +>> endobj +2226 0 obj << +/D [6132 0 R /XYZ 85.039 263.792 null] +>> endobj +6138 0 obj << +/D [6132 0 R /XYZ 85.039 228.589 null] +>> endobj +6131 0 obj << +/Font << /F64 3118 0 R /F56 2898 0 R /F15 2884 0 R /F14 2903 0 R /F66 3248 0 R /F35 2888 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6141 0 obj << +/Length 3331 +/Filter /FlateDecode +>> +stream +xڥks6S! oIĎ/qi;SJ%)R%}$%QI'.<ϒT:UI2[f^o#==7cOP?9o|rq8\};0_h3y8y^[uw_~sQ_ݕ4}0P+We9=U( bh(M}&Oyn+d蹡-%p@I_n3|4a7Ϟ&e# 95+Kh>L]E;jUk˺y"PjP[6ٲ4;1T~pYzz!]\1P1H}:NOzΛ<ȹ#yNڜlE=ɢN'nŗqaΰynƄ7󅎔+>c;G#"H C푝~#]_B}v +`DrkN@0t#WۻQ;6jH4]D) ~#jqPS>>LLJi&q8!/"oBL({0Z{Vsc, P0u|e '$rU~}#@x& +kF$zTX柏 + G7'Y7Ov7Ir--0ŰnsF GK}[%?v,7Ë8$G| Ec$B8"a s{1;XyC܂o&5 [)9z}ddZd]!Geʹ &--D9"Om8zOqJ{ +`V{ +6(2,KB!?gٍThE-&I`yea.!oSׂ륮ꋘTƂ 6?Be1BOGe:Ii~, $2t=vy5w(dNLԀ Rc<5/,)˂~ EClsB&ADp %V"A +>.)q=ECBINmsf!]D4?)??咧H:L!q s^ Xv[;R[LZ?J|N ( 8 qeс˹lfIӼUj&O4 +Du/4ʺ,d#;Bg#ݜ-G8:cP>hCle٠2Jsb3-L~b܏YˑM'WGOU<)HB7r/@:A@بW,NbbzlLJD"'u' >@M>kyˉ߯@}B\?WJ˞åF @ X'cfKcƩeiV[46qϯ1[rDI^ɥ7D*%ee*n,L,XE{gT,3F#n.Ww?r~2x僆nOи3z + +k +6<0aԢ@u_gQ,\!s6)H 'm9gz-zێ8̉iaR挏+kdutR^&+;w'Rnz=C p}G?Q!q˒y|GC)> endobj +6142 0 obj << +/D [6140 0 R /XYZ 85.039 781.388 null] +>> endobj +2230 0 obj << +/D [6140 0 R /XYZ 85.039 732.512 null] +>> endobj +6143 0 obj << +/D [6140 0 R /XYZ 85.039 711.921 null] +>> endobj +2234 0 obj << +/D [6140 0 R /XYZ 85.039 133.97 null] +>> endobj +6144 0 obj << +/D [6140 0 R /XYZ 85.039 112.774 null] +>> endobj +6139 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6147 0 obj << +/Length 1583 +/Filter /FlateDecode +>> +stream +xڥWYoF~ׯK +7\ +4q&($HI)CR_9viVaqvfY',ʽ4BeBo;ogR$={hO"so +oY~_{X^|J)?bi濾KWY_`$(޼x ^^ĥ@s .ohݨ,Ѵ/Bc|Bwq($lf`fv=m{csU&L=v'Q.tT%"cE_uwU7(_gkx/izD9QIjNT߯a+og +撄i4n@1m"ϪGgo A"Bf)Y4}I#qmUa(K ib7@|y-:K1m1zmuQaX]UwCfXـ=(~3gc]VyHs(t(ay@s;c +'f%=2zE[$(i[wPQ/Vt5Shzsb2z@MGrDx53ԫiXaP״5.m`_ÊJY=(baQCB=m'f=Y`wюQN Zk6l$UۍoxFRFBK (oR/lHr.60Jh8]N+ "Nc yhP +pҲ!.t <-k*I\E8dyGq1p?ϣ@"> endobj +6148 0 obj << +/D [6146 0 R /XYZ 85.039 781.388 null] +>> endobj +6145 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F72 3974 0 R /F18 3977 0 R /F14 2903 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6151 0 obj << +/Length 3092 +/Filter /FlateDecode +>> +stream +xڭɒ6_#UeI|t3TIl-L2I⯟$2I훢Y,UhYEdl +gkU$66*'6nwhtFXQ{tngQ,ɭnW:VEy77IŸ?u mU&t͡/`Sj9>+xkv~@И$u" ų(K#6VqFy4 )lyy9GtD0RxW)=yy7\pR7; C!|~pK,zrdvωɏ̲4(wCz_wU=]\/w]OwoQϑ ~zGg` w|+00( | +#@]=V`j/$j1$lŒdRv~[Xf#f+v \ċ k Z}DorwͶv0 +nE4xc: |ce_9vmx_M TLζԃW8hZO(-*z%.'PRgmyP jE` =c|jЄ~kX!(Cp'I+i# -[ܿa< Hݐ[ i^lƠ>oZV +wP mUCJmZTPʲ!>΃!cc+PIjpx\ywddkڸeqkDa VaP"0p9G].we A9]L:D'u-vz=^ޓYQ +4t0'|h G,sUX=d*@H,&)eؤ*M4&/WV~ +xCl{eN|Wpg6«IQ[~pNSLD[?&M[1Y_xY%źTRDSc\3!Ɨ'"}\`X@ϼ"=wٟW;/y7ݐ/ae2^K+o{tnl( 'emqe%e‹r`)9s:dUN֮(0h:•o $۴U-C4omQ +K ոlI ah"lcKj:N@(a>sr"Qi)^_?V%KI4}&͂B6ڋ@I16=&vE/}u,{sT.)m1?#u/E=r-¾.źr+IuId,7yQVcG=u[l;Na.}E,{ 'sy f@%.RPK (ॆIBq3A5`<$eyݗ펣8($ SsS DZ5+}1oz~;KYEv2\UyQpLT;^z>Rw3|Z^:*IRo8 n(}Lj32C݊f!뛩9)n+7ރPlKsiD-We!S)fnЗQ2g 1} ,Fr!-IXynj xtјk䆢(|vP^pQ 0N=%Q q uqe[n^JXlgɯ ps|/ tA@ITúx}6 QC*\fQgZ<4Q ]|]|[fVbݬU [H+т%X>b-͹/ Dmw!Mm>V${Bjto45VTGm-1w2 lJRH Cmlj2k 1d9WQ􍃏˓Yk!;W"d bzRN :4pjGv^&F +=ykսD*:\Aj*fGwFqmSД9y792B9i1r}F.#iwe+ uKdp7 h'0xOe Ià6g4>/+ s$*L:lңBK=ϫTe>;KCwQ-F\SʠN}Hgvw1Zz\y gJOC+Ty +3\iR=j|ɿ;^>)om >I(X\WM͟nI_f>X&&w~nܺ桨l{׷7T:ANШD;d(2Ɛ\~endstream +endobj +6150 0 obj << +/Type /Page +/Contents 6151 0 R +/Resources 6149 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6130 0 R +/Annots [ 6153 0 R ] +>> endobj +6153 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [225.436 434.035 321.065 445.725] +/Subtype /Link +/A << /S /GoTo /D (winbind) >> +>> endobj +6152 0 obj << +/D [6150 0 R /XYZ 85.039 781.388 null] +>> endobj +2238 0 obj << +/D [6150 0 R /XYZ 85.039 761.463 null] +>> endobj +3036 0 obj << +/D [6150 0 R /XYZ 85.039 646.155 null] +>> endobj +2242 0 obj << +/D [6150 0 R /XYZ 85.039 393.584 null] +>> endobj +6154 0 obj << +/D [6150 0 R /XYZ 85.039 371.823 null] +>> endobj +6149 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F72 3974 0 R /F18 3977 0 R /F35 2888 0 R /F56 2898 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6157 0 obj << +/Length 3645 +/Filter /FlateDecode +>> +stream +xڭZo6_a*YY''N)./ mj%UJ7_v{9P܃< ]OD~3zyb%$Qp<7't?_8o~Yt}ѡ{ĹH=}{k| G9.Vʹ'z|y.t|^BVk"#>\Jne)Sϳ_~ Xg3<{톁/ٿ-+ y.~↉?&I)Pq蹡>@W6]sjz9HՖHMTzwJ;x6uY@gp_I~aCr7^Үgf际f6t#C~dJ7a w/k=]/kZ-ȞnvF.nװ[/ᳺnP#;|:K~F\h;;p4ru]OZH[}>?66}C[;$o9!zʺW.FQC O%u\:p4[l6_x̰ +a2H?]}XX2MVv6\7Ѡ'z eIFwnQ7kaSz9& tUL[^W-`wIش2=V^=U(J]}ƈ0D(#=rt~;+X8$;*M]B LIj/h"(q#Is'0tow&i5Zv%gCvP&AT!auR*x,S䁽̻AĻA}(ɁUUCi~/ 0ܲcq`4݅/G8jJw2 47M+O7W75GM Sz=ٕ] k{߆,knL(B3eiF~0E)]hjMyY@']0P$A9c8hz:X^*~ߤk5bTq9bfFs˨yyMFm ,Z56FJ Qw^lDKQgPE&O ?Z J#4FVY- pd(d|P6\i 'DB?j?!b*q1DP+gs(@FIfxrL/68 &N#l!iޔ8|cҲy%#^FR@pi z*8 >$lC_cܴ=AƆy˿_c6!$дPpgm+5R|= !֦@0Z#2Vo3`ۃ!|PwY +/F[zk(À(_WƛxʊZE㿰E N =ͣ d1Г lMDڍx23$~Z->c& "8P!D74Z-tR;# +\1[ERt/nyq2hdͦ( [~uGk+c/ +^m6}fi؎'"u]h\?τ?6?,-uU3q ֋Cѝ@1MnFCrI?́}ˤ6- U>jA>mq\ڧkLvnC}r^!9tk1pczjs8 o?zF|DeH[|X6-M/ruq;@|̓ՐJ{=#[N{LSs}@5Q԰bPR=8xΊm]GH9]|1IRfQK.z25 \X άMDyD'7c0]n*Ce(BfC:xiI*0s[ޤS Yvb-kb2B*2IUa/"㝩5RangX|3 R=*ʎ-Wj/X:zp\58/T BQ+0MCn߰:/sBfAQJ /(;TRX(`B*0@a›Zn[q|@ۿMjC}ʑ"0 6Y{ ]_bİvW7֖ n{h=0͛XV~=>`9f#O1ྖ*p2ő#$SѥT{'/EcDSUD7EaF+sa(o: ,@G#`UJV g +!IWIBA6*eR2 K}YatAPB]a[7I)<V9ECh(" 3)7ga%%h * ۊ̽.pE G=JzkwȶZ~(FPrFZYϭpd;qvq$AB87~%CyRP҈ȎͪݨP$JLjd3;0sկę~pn%h1l[]«@TxǗK/qV9?8|Z˲d4LS~th,lN败4֕(`T‘+QBr\oD-\1,Q#LIQG4ǝ)$y'\6vHXѼd¦_c5G Mۖy?Niwk-<ߗE$=L Go=W:rzM[XPO10fSF3`iSF7 ~$1*èyO:dJoCy<|N5C2Ʌp41uU!TMnyV;Ø^W\9zh,+gPIH4 /sL}`|4l8$\H$S䔾`㬈-@E[Vm!3IQ W#eM&d8B ~ȏ'd:rV`{m9+m)1ܮq.~iOFyX5dnb0(8h\'d@@<K8pNZ/eT1+E5'0"^-rĺdor+epCaH <z%cU GM#@X SF\Cy73 h endstream +endobj +6156 0 obj << +/Type /Page +/Contents 6157 0 R +/Resources 6155 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6130 0 R +>> endobj +6158 0 obj << +/D [6156 0 R /XYZ 85.039 781.388 null] +>> endobj +2246 0 obj << +/D [6156 0 R /XYZ 85.039 308.93 null] +>> endobj +6159 0 obj << +/D [6156 0 R /XYZ 85.039 282.315 null] +>> endobj +2250 0 obj << +/D [6156 0 R /XYZ 85.039 210.126 null] +>> endobj +6160 0 obj << +/D [6156 0 R /XYZ 85.039 189.535 null] +>> endobj +6155 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F35 2888 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6163 0 obj << +/Length 3588 +/Filter /FlateDecode +>> +stream +xڥZY6~_7SU#$xNkv<%)#Qn$R)y\@h4> ?FEJt-;_(VBh^oop{ne~'rH-6ߝ޾uqRJ9A.WI:.y/n}w~ƯnOH<įAy~'{Smxspnx.3d;/wt CvPݿT.xԜ"Qb#KL~ I乑헫0JT;HI(q*@Wn+: +:v@M9xuv|-x|l;ox~FT<2zxRsb%{](6+yvpibDi(WgUKCUlhoK5? '<ݶD4Hϸ 2bC9Tps?K: zm0 ͇"ġM*Œ7j0,ӯm훲#JB0Pag!l gY;SթTχYa?rWI:bւT,h$>bghNvLH1=[QW11+`NSݗMu ;j>#7s~vM^ϧzr +Q&|Z4 g1H&&@f|ׇC]}Bc8qEE?T]^E{iI|gC2ee?qӌ%a}PNO唃 #49i6~yaFHf3jIʸ%k 4"M}W2?TXPAV%eceZ X;V"?58oW Ҁ׍C׍d@OL2Я ])+v4h^Y3D?_(4>K|XQD\K<d-*& =l0ĥ۬kD$ -p#fɏ =x`աpI=f|+peq=m] lzjQDz l&q5y/3tGAdnϰ F5DqR94N}жhbU(?J"Ar}?`kjc"{jɛC;FKkV-!TY~gN|Y{pyG\:9cʞQȡ/$dO0/J!A[~:{L"˾`5\!_t(+"H[HBU!8JF`P>s~ԁD!?c5;3mYi5!xܞ6 /vrI9*Mî)J-:2L8||gXF/l-^>fB7kϓ8T\ +6Av2*,(nlfHd4tڂ-NSuѴ ǒyR0rFRbg I+LmƱ^@@ltjѿ|ؼ}(A,fCU7C{U\?nEt5%V\@)[*S@Hj&1 o!46.p_ڐ MeXm4fPqL +Y};j\C"ѬVhWX*L݊3qޠHee NوD=ČJbpeiHO;j ԢZ\|s}OMቑAmcL Ȝ]aԁIؽARŷ"ƚh|sAAf^+TSSU7pC.9N*@j`qUže Ǽ~8p la!C14\K)F!2ȶCj~J5&zçR&η[Fm@-M*h*so\`ZAlRCù׹`o ܶ+M%je^]y aB#MZqϠYuIL38α?NɹIĻ|Kt1{ Sf\fEȦ9u?5I.rQ4cQ&ŗE8O\Ylxt0ʅ* 23< C|SmsIJcFVWm"4%{(ywV~$2@s%4(}C &qZXH.׭ Tb/,R7D( bI9ģapk0 aʶ\5@MvPU4L˷S'~k\ Q% kln|ˎiKvM ]B1RڍFyn0CHfRͫYnk^P&)N/1endstream +endobj +6162 0 obj << +/Type /Page +/Contents 6163 0 R +/Resources 6161 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6167 0 R +/Annots [ 6166 0 R ] +>> endobj +6166 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [391.093 600.62 591.389 613.522] +/Subtype/Link/A<> +>> endobj +6164 0 obj << +/D [6162 0 R /XYZ 85.039 781.388 null] +>> endobj +2254 0 obj << +/D [6162 0 R /XYZ 85.039 652.037 null] +>> endobj +6165 0 obj << +/D [6162 0 R /XYZ 85.039 628.715 null] +>> endobj +6161 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F20 2873 0 R /F14 2903 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6170 0 obj << +/Length 4505 +/Filter /FlateDecode +>> +stream +xڭ[Yܶ~_oVyhiUDJ<9 +w "9ߧ/1he hun#OI6Uhv{n/7JFldͷ?"*nG:I'~[/wcLney<[;bQ +~_ݿ3~{_?-a?Ì~ͻ{ǹ ,7`BS䷟9 +to0n~#}-ZRb0RL*ĤL,$INPnt|UMt(v'ܡ#`WJEB_o/ݱD[Pk1s}β0Jyǎx =Ӷ܁v?xr=p'M:YU9݋;axv-i/Z" XMNձEtjRed!( yytf.QhG3[Gf~6+NcMLvVc#<&֮gJ^5KU+@To`M;ԞhpJ֩2=!h*xn%8^t*5ae(xK&7pcU0jlၴ]ivLs=mp^]9Y(Kgi@mԪ. Bdw cb8轐1 %tj5J $Ь\K_7OC; +#֜\:Ma?jWʁ.cύ#PW7 wզ<S0ﭫ΃m]c>k^:| p8Y;(fϘb!cp,`$ kyb%bPO'o ;m`ɤ|mw׎I*,:4d +AM|t <_1q#A[7rost q1rUX#?\ZܺP $:E| fj jLQKTW>>٤-0@(PEwjɼ\Dt&//)t-)ϤOw dˇShG:t-L(|;>rẊ 枚kt":9xqVDԏ(5s(@Bˠa;p[TM//#,l˱H=fmKvT uLy͑Ϯ(j&h#k?Й Ǿ'$SaН5%Tt$:x? >5P;78^$VkҥH] %HIƏJ0)vK'b)1hOA2 kV)H#.~OKGilRJ۬ӀN.8x .Ӫ~:(AX}7ߒ7.?WPK9g16NA"_6Gr6"Q+t>"AD JDzpܕ\LmGkKb4N"&(nPc`aRKQbyjȷyѐ@ij!4 ƜͲ;yMzՎe!2. +&ZZ{xH(8>5-'ʷORcq𦠘˞;1VT3Nx` GKXREl;: 8UI g 6IKI tY.R,bpSb5<o0O.KĹ\FaێS#C7:p)fy8mEW$[SQt*:\*ō5|:ҳ79opeyuFMtޝA ;g^EǵWafYF$ +.2peVFLu` x,B[j\Y *:K̞Oc1iOՃ_׆F-YFm(٢i$'& א-NQK]f}rj нoAW_,xiY+ݛ:_^Tr\y_׼u$ =,XsbƛrxMՁӭ|vpnD`Ba3vlfy޿;D152Q5e5bZN\X729爃w9f[r>u;b풨DZ ?7k^zxfL:(OT0ߖf]ؒA*ᑍjV4Tή +2£8Ly/S&U1?+lfKsɒG t-wJ,߭|/aФ4dȊ i(!PI@mZ4a +LhrNJ7\ZiǜOCh?)GFnÁU6:#|AW2e 8Ɉ;6f"U_,Gl ҇Y܊ N_'*LP_] +EydIDӛi~rZ$tVQ j#dVnQtYҳ9.b/&U8.s*3":=.TuZpW.%ju q]QK2FOUM_ Y: +W-@IsԃP* H äWaOH]f=z {Y'0q-,g㉊%mXcMi5xRyJ<'Z'UR, )WbZGWvolkP2ZqF(_{ 6#W5rYL|Sb9%uq ̎+\(5R#Cu:b'cI!~5b__cXX5Y!2:k {endstream +endobj +6169 0 obj << +/Type /Page +/Contents 6170 0 R +/Resources 6168 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6167 0 R +>> endobj +6171 0 obj << +/D [6169 0 R /XYZ 85.039 781.388 null] +>> endobj +6168 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F66 3248 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6174 0 obj << +/Length 4273 +/Filter /FlateDecode +>> +stream +x[Y~_1oF\>M[s٪p$ %Iʻ@Cjj$@@nSY:M3,nF ZH77D* (ַۏ޷~_^uf_WYKyJyW[^Nt;&~ +3?ݷX'@W߼#cQ8o>~ +n073 ۏ#-͇ٮ.Vs̏3}L*vI48hW0˽摟pV%3mX`u_7HS#aZ]O. 3UsG(nZCtBҖ*e'^QpXM=,Zj4-yM/4/@\W_xQ0]!rw(He#?R=SYU}jI|we˅MmP`Aox"u=};nk\'~Zǹݑ;<Cߦ25s5 & +A 'W·TvhMI[lEqK3GгvHQ=@y'Xkզ腲~X~8-I WNr_hPHֶ% e=3[< @-v S,tu޻#b_u{,U;.! Po=l +o{sE& .I +< 5@-14𛇔Tl~j)iEMuբ?,j ?"]s n^̓ B%v%luzt͉4ŠZ 588d;e՜P`sS/RٵbEu4C#\EROBp;zg>UQ{D@ >ƎtHV!, `֥(ipX%(+PDioV\~ΊS8?*90X+Lb>$诣4rgc8#1RuVJh6=DLjzXg-OBwdXx#OH2 >1]*rOA;R&ACam!E~%W 3-@FAf̄El^T%j$){aUwagC2!\6fdЮ#i:E #WЗR$2t"ʦ3,7e!onN3.09AY!i?L#Dkl&~o}1hp>J/xH9.M|?J&4cnr8‡;ѓʨ?P"J %F-L PopN* /㲅nhüi5Ij|<}Ʈ ١a#ya2;EgAϋ)ܬsxDX-0DW"C1S~m\%#8h }HyH!9 FLp|Kv+|RA D kZbh 47!G:}8)_O`U()g;ڲY":g|7vtHu3qJ66E$wNHm/U: +rxJt%d +g.]@ ~0Pe΂6T&r|S oXx#e?OX DJ8`-/50Y#٭\([$8("F嚠$խ8w)b3Β}߇{^ˊ-0[LޱL5uM 3}}Iurp.˳!"ϋ E3Cg((uarnRNB k6 TtAs>ky:N|4qtKt6cd1(/-_0Q!:SÅk|8^A@b!%S~(vw)AKB/@P|4eky85(Â"dܒ% giv 䟕B+u!Z]C)Y ;f/Z(@ +Cq[#гNr?Swr1*-2#h2D#*ѠzZ-/6幦x-\ZNbu`~3\=(zDG*7W1r&4.w8k +$;k6,](]-0$X݆#L}{adtyooq03ޮt + .{,/J hf&o}H8 Q3=ts6(P4򜰪As⫌/x2 fM\+>GLAeӜT! ~` D08x"I4Ƽ"p kk9drIYxQE}ڭ,!fN^9u{>ip>N N.wN\GYi{1'8M=2Я(Pxw2<1Ct0^sҞp6Gͥ"[(~nBZ|/qz^-Rs 8|}JO9"k\D# 8$cW΀#G_Ѻ -eLʱӋ-?`/^c7.{{bQ"h0%<5r4'EkАT?ޙJϡ$|&v<XRb炌B=5 8Sb `1kvz4kuC#BEuh0V \tsWaa6Le5 4ä +L~8f~ f%i?pq2c)Nlb,endstream +endobj +6173 0 obj << +/Type /Page +/Contents 6174 0 R +/Resources 6172 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6167 0 R +>> endobj +6175 0 obj << +/D [6173 0 R /XYZ 85.039 781.388 null] +>> endobj +6172 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F14 2903 0 R /F66 3248 0 R /F20 2873 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6178 0 obj << +/Length 2258 +/Filter /FlateDecode +>> +stream +xڥXo8^X+(Y9 m.n>A*Kt,TWz۷|3uCů ZqGcvLRo-pc ..{RE7UcVeh<5f2.;cժaoe+| +k[:|q-n0 68X30D(UHVX56Y \JԒzPmEWduu]v /qC)}fGͷ.G,q'S7"jI+xqW5T8g\lr^._;947m]ߊ;ZVb|bJרz76}֩zgr]īBzdϷC%|қ.UL>F*ijʸ*xK>HخUzחK2l뻛gw._m.)x{%G1]_niSW.~&\vqp}'ݘCp_?TJ?ث +އQN,IޥI_.5:־ ^Vtp15ff C)=? m֬yc>/,i ^| +x|5D HSd\,]Aw_l(,(0)C$\[ +wlg];T~נ( s :FB&Ueso02=Hkg9l[Uy^SmO4u8B +6AgvvF:]6N\ypB'&:;[f +uxA8%O膇E:j}n-ەת(LЁC0exBgr>;xKHMJM/>,% ˴E?'ChSEb%/fsJ*XItD&D*mB e:> \{nw$a/IiրUj`T䡦[San\m47.uEAĴ'UxA0E8wmSv?Iۓ+Ț Q 30i6]4=( Ƴ˗Oi2J:'W,QxEendstream +endobj +6177 0 obj << +/Type /Page +/Contents 6178 0 R +/Resources 6176 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6167 0 R +>> endobj +6179 0 obj << +/D [6177 0 R /XYZ 85.039 781.388 null] +>> endobj +2258 0 obj << +/D [6177 0 R /XYZ 85.039 490.22 null] +>> endobj +6180 0 obj << +/D [6177 0 R /XYZ 85.039 469.63 null] +>> endobj +2262 0 obj << +/D [6177 0 R /XYZ 85.039 400.068 null] +>> endobj +6181 0 obj << +/D [6177 0 R /XYZ 85.039 379.777 null] +>> endobj +2266 0 obj << +/D [6177 0 R /XYZ 85.039 149.846 null] +>> endobj +6182 0 obj << +/D [6177 0 R /XYZ 85.039 127.13 null] +>> endobj +6176 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F14 2903 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6185 0 obj << +/Length 2296 +/Filter /FlateDecode +>> +stream +xY[o~Pˣ:mVڢĵEUff)Qs|PA^ffgX@&(LlU^Y\߆jlqLi9[dzpaq˵/f~އXy7mk}_ +~4Pwv͵nZnjA+~} LP쿮~=ep&xv8 W 7Jʎ]5%-ccy&j\0,Ӂ"=mU>5'>nK]Jț>/ qaohI!X$iꬫ>Q ]_ylɛfgi^Aak2oinAcVڴ GpWiAUi>gfmfɟcxz"a{ʪi#͔m4cP?ժ=ژ"Bx-$5v +z3>A5ijom˗ k<ܵП9|nyJmϬzmlmkXV=iij-ҕi+0jl{7r DO*8&d4IT>,)NaSP`! vH04dE_Fg(F9}+w'+c/Cex{Zƞ;S,58Xh]ǫf meڸeM(^I:]ͭN$nڿ&"?>iiVƗfIJxDp:b"Nɯ} 4juӠNг+ /[GP@K8l +' +_e`Z&UoHfv`)@tޯѮbibdWjLܡ p^i孪 ~)mZhu(&e+l BzRH2R(K`>;uPkN! PsN ȑƮ,cIi tJ-ZCD)ϥ> endobj +6186 0 obj << +/D [6184 0 R /XYZ 85.039 781.388 null] +>> endobj +6183 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6189 0 obj << +/Length 3649 +/Filter /FlateDecode +>> +stream +xڥZYܶ~_1oVi( x$a[XqJq]FrDrv XKh4ݍ/rFXdy<_lvWF~b)$Kij;1abbUKuLx̲<:O8x~2nc>_}\}7*>~|~5 f}ەR(~l(Ex(axwr&nnXXYdt\IOMqBEfD lC7]/UEP>4C]A3U&ؗu8Kj&n'6ȰQĂX86}'Y>g_c?dqF3^ԀMm{YOc[a:C=UMΒ?6Eh`*JCgЬ%?泴R-LQY36kȞP)6|rBϷvy.>/0JB3M7F/ś$] |c6}4iX$"MP9 XLTmq{ @OtwLoeaAg)߃Svǩe׌[," ML׈Ȥ%_fAOcnk~_M rjX(StvS>6= +q'gn`VP`=LP)Kv+x+5(.bc' JbŏD5zprxѠ29HFDn3;^z^j0zNc/PY^|{Y(N6V=#ZG{3Zim4!fIͼ c(pY.K +>b?.ƀx'%ȱ/R+h;I72&̳Iz,'s)H.:Q`; }OX ɰ@䨲'" +c%=#ضo` '2A0y%t$!h* +%ɂF~D[ +6eqmlLQv di8ɇ&N)ҌȭSw32(ݸ?hm GEJ#FٕHy$:TojȢ;0tJ4&yW`}ByR6:gMN)}`Y*mgx z⃷%KtԻ$'ĵ 5fCےxK"LXu[v eCHRT; ZLmwU ^} %Fklt֢tltjt6W]I(X>ol_W2rjJarg%(q ?\ 0\ x@2VA1)5_.\.HR‰ s;Yv3Jd!*\H^~]= *#©4٘AX'ث~ے]Nm]]ƿ̔)F9Krn(tˮ%XU3 z1vC ޖtqkS|h${nlPIXm]Jź9ҵ hQDu(@M,l7l]EeOB jjP~b[9ut

Z 6zX| 4\`x{_wi/FIQmJtopyr$Ir4_$Hq(JȬCͻ`^Ht=\F~ ևA6)Fh6WJFLCѽ)uˁYfwG5:)]𩳢 _dŮv:+yj8rSa)M[Ix?+!Ē.Eim$0 tKo\|+X4I8,O={"|50!d3P8_G(VlDPFxtfL﾿zCUP΀0RlHftUr8&:hG*(32G5Ls, a;ܝΛp:4N!W9+RnwN^=+`泓Q"RH+[a.X-vKngs3]@ ƛ_s(|"y]JlwAp߽A%,dѹcC'Vqe4vϭrc 7smKmjEᲺStŨfx--,z@ފÏt9Cf gJ|>ز^KOFpYם@au Ԡn{Pėr+*%2 +QOnpTW҉X,ht$hdNϭrˁ F9HCK +Ԕt Xp=wpbҤ$14?a =dD0^s2|x[ˌih%cxG$Wg .Pg< y +=mkTP٥ogF[ -0x3k2Ϧ~$Rq) +}odRưr>EkXKa;YU'|$6D5_\N\'7V"+Onw8G#/Ƹdžxx~<ܖɔw:5!MŅ(6ySTEGGlՒ3o$ !RM^N.u`<F3q/C WQwOUNJ/a7z吪v< +pT +{Os%x`wzΡmiÉy>/QN#eQJ6Q%`)|c2 J@לpC[:ޙ#D[QE'MWN+'(G+}=5"tg=33pI1QHjbs C(L}~&![;hHnt[T'B+8RFR{٬Wu +SЁ{˛VJq*" I8Tzug0>}g: +Uq2 +XsM(ʂJ*9ݙԠendstream +endobj +6188 0 obj << +/Type /Page +/Contents 6189 0 R +/Resources 6187 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6167 0 R +/Annots [ 6192 0 R 6193 0 R ] +>> endobj +6192 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [294.66 417.944 400.604 429.633] +/Subtype/Link/A<> +>> endobj +6193 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [366.309 336.648 485.694 348.338] +/Subtype/Link/A<> +>> endobj +6190 0 obj << +/D [6188 0 R /XYZ 85.039 781.388 null] +>> endobj +2270 0 obj << +/D [6188 0 R /XYZ 85.039 450.954 null] +>> endobj +6191 0 obj << +/D [6188 0 R /XYZ 85.039 432.286 null] +>> endobj +2274 0 obj << +/D [6188 0 R /XYZ 85.039 281.732 null] +>> endobj +6194 0 obj << +/D [6188 0 R /XYZ 85.039 260.535 null] +>> endobj +6187 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F72 3974 0 R /F18 3977 0 R /F20 2873 0 R /F15 2884 0 R /F56 2898 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6197 0 obj << +/Length 3747 +/Filter /FlateDecode +>> +stream +x[Ks6W*1$,߼ v>,wv'Wosp \7[\ij({+UR,)n3'%%bWŢ+&_+`)U$9z +fNyϔ+XkinW{:U'wP(k9*X`YczbOlS*-4;DÄ>#!o r2MAS XF H7OyBwN 8pZGUnpJ&vz^|AddWv SdGq!HuT]ZpDpJ^qA\M \ܼ*i^8+y9Hm]ʺ_^snkf&:p,+dZd3Ӽ2n~}ë9JF*亻j>+ 0QkH36 ܳȎ8Ԅ5qW.-wʽt&0rc_>(J\yw pI>0<-0z(~I puC-H l/p$B³?`*/_LhF_%;;.ZmB7, 7bxu9SdJ@s*?4Zk~Bp,ėb "[`QRk7D|Cpk@5WДE95LkȐ4x7tޢi +X5I]˸lَp4t+}DAz$C+IbEvc6Km8f15hE}j{fhꛂP.v=ˬfI޷È!xbXW"rԢu2_"#dֲt9>( Ow2 ֖R"rEȶ 0/pA0`h5T=̅jvsXUYiS`{P1~iYQ0-b݉<RKep@O1cن/d#:ʝ՝Z3(u"ey $@>Ozn#j|6W1劸YG2η;uĔq 㰎phVq0k1pyKJj 51ol0l>=2^(gGӧ AΘ3"$_nsB ) +!#W!pQr=9Cl;G ]a%ܗv:7lB23=07X1&#tA 00=Gs@=k6;czPsę/֜ r5zǃF'>$%P"7 {'iRV_ܵ: +Ϫ$j jR +v6-)rf5E_! GaƜ H +Lcu3EowN. dýK% 6wOtMk"HU/"p<])V3!A$O$>$H,c׉.lҶ˼ZXŜ3GM E(8q̕bW2ƕ\+gL9h2\lZkA8y֙lbO,Nq'tWbRY<{T ^#$RؼOdI2o-@w))`MZĆQBDWQ(=WQ3ˮ11Y#j1`(T}R(xYZ!36]!r5'xyiđKr +K~Ŵ)ze^dP Ia|1[ 0G/h/NȜӶ4":B'}3}@URTU :r~z#^|*H^ؤǡ\S:6>X¶s^x}}1/`DN"}ROig:E]QiZO +Oj5vhDp2J +ϸa)鐆Xgm+hIws7ӷ*bô>PL׃tfwt;DΟ)貝N59£Q6rd{xIUMs5Wܝ av'ɤ$M (V $6M,2O)x\VQsQhή.L{/5 i5bM|~ndzdp'.4Ԧp9cY]0̵ / +5(ԣEG9O9,6ϑ>?Tk!n&_),0ڐ9W7ĺ)=7SSA݄D'|9}eCi=/#Ylq\!J߬Ka|ywBtIT?U/z?qw~+# nu7» FaT/~j.'Mެ]!`}Z;v%,dO0hg|0,p7$hPuf1 DL8-27RZ<UQ_l9Fg*]gaXn]۽0aU_ +*Ofsr"P}˄?N-endstream +endobj +6196 0 obj << +/Type /Page +/Contents 6197 0 R +/Resources 6195 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6202 0 R +>> endobj +6198 0 obj << +/D [6196 0 R /XYZ 85.039 781.388 null] +>> endobj +2278 0 obj << +/D [6196 0 R /XYZ 85.039 546.666 null] +>> endobj +6199 0 obj << +/D [6196 0 R /XYZ 85.039 527.998 null] +>> endobj +6200 0 obj << +/D [6196 0 R /XYZ 85.039 377.964 null] +>> endobj +6201 0 obj << +/D [6196 0 R /XYZ 256.582 383.938 null] +>> endobj +6195 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F72 3974 0 R /F18 3977 0 R /F20 2873 0 R /F56 2898 0 R /F35 2888 0 R >> +/XObject << /Im2 4154 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6205 0 obj << +/Length 2299 +/Filter /FlateDecode +>> +stream +xڵYo۶@qqmbDRv֡mO(bF<=俿Aʲ#鲢hM;dą?r$Q4Igd +?ICg@f~v.&Ow;>|=/~ZO/fNFӏț^\웋˙_#0˟b/߿ŵ d5'f=21+tM0v-|O=+^&kJfLRi+|#;WI 7lex|(*6/L9*fhj 84Jh&DcZ()"pd %f R`̰;e .^g[&pWjd 9-c'cOR*Ayҿ62Գ|%y^q"csBud]QĜ=W_]r1Ce8ՙi cG+-Mښr|$B~6״Iۙ1)֋҆gY!&qd9N?\_< &hx|Yw׳(s8"8 zJ7 zj5G2t9`..: +[ 㘗3`6q+=ˌ"\l~HZ[<E{N=eX."~0xhHr{7-vwr p5oBhmqiTD>ڕch/6O9$E@}ŏn^p, |a·[K _ E-\iw̮YB%~`kxGHI$/vЦMu}0WA? o&߿c7֥i-풝jgVoz^Wxb+<ÔߩW1ںB-C^u=d{ZDdJ %,V?_endstream +endobj +6204 0 obj << +/Type /Page +/Contents 6205 0 R +/Resources 6203 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6202 0 R +/Annots [ 6207 0 R 6208 0 R 6209 0 R ] +>> endobj +6207 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 733.837 217.411 745.527] +/Subtype/Link/A<> +>> endobj +6208 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 706.739 221.713 718.428] +/Subtype/Link/A<> +>> endobj +6209 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 679.641 210.209 691.33] +/Subtype/Link/A<> +>> endobj +6206 0 obj << +/D [6204 0 R /XYZ 85.039 781.388 null] +>> endobj +2282 0 obj << +/D [6204 0 R /XYZ 85.039 597.626 null] +>> endobj +6210 0 obj << +/D [6204 0 R /XYZ 85.039 577.031 null] +>> endobj +2286 0 obj << +/D [6204 0 R /XYZ 85.039 357.66 null] +>> endobj +6211 0 obj << +/D [6204 0 R /XYZ 85.039 334.945 null] +>> endobj +6203 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6214 0 obj << +/Length 1634 +/Filter /FlateDecode +>> +stream +xڭXYo8~0P,*+Ft,7M6SdIp%9nΐ,ےSԓ(7 =''r>x)orG!t}1.̮WLsn0ILu=1G_nLjž5ޚ5n1/?ϯ^ilSM-R7y,$Py?3k,`tT63* MA-$Sخ.qӪhS":NG[I(j0OwASi-Vsm!WI.Tfo\FCJ/C5Ñ.#1{R5MP~_TPkU0BC <ƟQ{]Ot`E׼_/`\e׳%;ϠTzR%e#w6Jm*m6/.IUJvɓ#°uc懖1Bai@*/e\/q>PzU *ER76U|{=nIYշjϋa?*[PgQU(x:`'%8bK#z-~+]@نnUވ1-xC +]`D8RTPszn$F!wNǸtct6 C:@!t]FBEPua0]ZPTl+ 60("l9$sabZ]VOqxqA; V] +{Ix:r=B*Ը||ȮU[G-Q @P` Tϫʅo?7 Eӽ~urIАLk*HU~1 }ǫ:v0SA$>GA:<0 /aZXi18KjXuZMP9l6팘M)wa?i`2;kLGbp.oI}o\Yđ|&HQsҟ80̨gvcg=k?]>j GV 8 + Jx'%gd-#]AߋEoi.ո5wܪ`HVCWh$C-Lwwq|I#[ 4t??D/E +JM>'{EE %‹Ӳ]vBa)p1om/tHME<9>%9Ɍ>u9j`Qvy"MnO.lT+$A[hE2/b'SD^2 dXUhes)+O]yOq걪Rjl/-)v7 *6駺 N<2ac=WrH#.z^endstream +endobj +6213 0 obj << +/Type /Page +/Contents 6214 0 R +/Resources 6212 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6202 0 R +>> endobj +6215 0 obj << +/D [6213 0 R /XYZ 85.039 781.388 null] +>> endobj +2290 0 obj << +/D [6213 0 R /XYZ 85.039 761.463 null] +>> endobj +6216 0 obj << +/D [6213 0 R /XYZ 85.039 741.337 null] +>> endobj +2294 0 obj << +/D [6213 0 R /XYZ 85.039 521.967 null] +>> endobj +6217 0 obj << +/D [6213 0 R /XYZ 85.039 499.251 null] +>> endobj +2298 0 obj << +/D [6213 0 R /XYZ 85.039 278.706 null] +>> endobj +6218 0 obj << +/D [6213 0 R /XYZ 85.039 249.97 null] +>> endobj +2302 0 obj << +/D [6213 0 R /XYZ 85.039 205.486 null] +>> endobj +6219 0 obj << +/D [6213 0 R /XYZ 85.039 184.289 null] +>> endobj +6212 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6222 0 obj << +/Length 1180 +/Filter /FlateDecode +>> +stream +xڥVo8 ~_ae6nV,ɲ![lW\i:vf; )dCQH2"V,K5gRkXN"Np:@2L3ޏb^6߼}ʮajScv/gW*!oAȾXkvg Uf}~r"Q >IĤq8^N nbvybΡfJS:s$^"~v TB]m]u[Maڗźt/퇼xf}K}ٽTEGr Q^[I +e"K~J 8|#]H?q6}[A +vwy=܃pw_n8w!7XہvCHwʦY5 {$JFW@8Vͫ-PCW!(s`cLn\UQMaGVP\^^-Fl ߸Z.*BHb>ԣ%n \ʸQW{wbpmTMQw\E@11&^b$pTa$v G_3 GF0*w $c"/e cr| r,6LS$c-n&-!KP-Kagi) 8X_IgS\uU b3a4Utr+6G8:N5KR,Zh]$ OשDZB0 ϤUsuWR@Br(p':O3irG:E8-M劉=m ӑZI%,R(E-"GEY[ZN|6[4Qҷ> endobj +6223 0 obj << +/D [6221 0 R /XYZ 85.039 781.388 null] +>> endobj +6220 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6226 0 obj << +/Length 2408 +/Filter /FlateDecode +>> +stream +xYKo8W20VK"qYxN"rb+[XrO}U]a *dty B{i*˼"_FFkOt]^IEqKrhW?Nܘ_"ʧlEW4$?xUnf*_[xT係ϝglg/!0^n#s6.$Lё o42^:dJYME*('Š򪫚ZkҶmo ._n^8˫_ibǓ k +,޻Z,ʶMMHÈA΂ ḿWݵf3Wb j,&l_U/K; #t}f̈́ϕȌh1f|X"cCzeehbl & r:N F'}Vs8Q~ '3 Ґڈ| WA;".?-N ;N':ʿn*Ygjnl[hkt_"Nqhҡ'ўJ=|rͪPr"/6)eb8& -#C%0vK[HH+-{6vMѝDrYb+"j#Y +5eWH^Fι p^D*Dya7+xlރNjհLVU;1B1#`?\:C5B8@(OK(HAPҗ$MޭtP] HRPd\W5r3j*`+qY% + B{sӾ sSTjǑ炏hJ8`m9&\I|\tkny=!xRJ 10A ᢭V22.G(d]琁Ym_Hf>4QHZ|x?\W,T.=˰'2IQ|hM\=5^َ}mhj8g]]ERTH }-%؁ֻnưCpшRK" +S x 5\bU]a)W vd"U$]8z8,M Z-s] ++gk1wCNቍDNn]1a ++o +\ژNJtb|MDZ=R`o,mp @v{f\XNoS0,Oٰ +]VlYTRLЗ[.(Æ0nZ oA5N ƹ RA;92TqydpѸB>훃;8[,4954}5Dl1yG + QMJKp{v(i8 Ce@wV+Q-ׯC_4d "[=$w)sS +=I)BܨWYd˴/ThENEkNRD+9rWR͖ !^VehG vax_{pB Ğsz% #ToPG ThLߩϕDڂk6v"yqE}6cqj[Yi]Ϫ65_~pCrphƣFVۭ p2Wh8.A0Qכᵣ*k*v&~"Tʻj%t07 x*rqIGOnL)g2xbLK83)]Kj9L:rxS-+7$$/pKٚY i'2)rHK$C"!ٍv҇8 +sT7[yapu[U+!E M( {-jiWk֮ /cTAڠo[?MrG\yQ8L3c,>lGCǺPXPņ;Ӆ{xqG8t$U}}Os-lզ Ol*TAB"1)tdendstream +endobj +6225 0 obj << +/Type /Page +/Contents 6226 0 R +/Resources 6224 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6202 0 R +>> endobj +6227 0 obj << +/D [6225 0 R /XYZ 85.039 781.388 null] +>> endobj +2306 0 obj << +/D [6225 0 R /XYZ 85.039 761.463 null] +>> endobj +3037 0 obj << +/D [6225 0 R /XYZ 85.039 648.42 null] +>> endobj +2310 0 obj << +/D [6225 0 R /XYZ 85.039 416.522 null] +>> endobj +6228 0 obj << +/D [6225 0 R /XYZ 85.039 394.76 null] +>> endobj +2314 0 obj << +/D [6225 0 R /XYZ 85.039 295.722 null] +>> endobj +6229 0 obj << +/D [6225 0 R /XYZ 85.039 266.318 null] +>> endobj +6224 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F72 3974 0 R /F18 3977 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6232 0 obj << +/Length 3276 +/Filter /FlateDecode +>> +stream +xڥZs۸_K!C_kǵӻ{%Z"}$} %Qt21A`.]JM&iz6IR4,6gd#ΔP /_'M'o޻ws#V+dZa+y]pxFGMvB]]V'"BUH2됻Uca%e m7^8z9 *ҽ*;ٍ,x +]ӢzțoւW@~h@!;&/T\TW[!^"c g׸R;@o52 ~TWG C1"gZ4sqjv-mɪiٸ/N)X';Ϋug u#-{>< &P6U vde@Bd +ّ@-Avj;4YvQ92wlW8]Qw c 1aeVdt=͈҅Ȕ6|<,l]]0vBWI2yo MdB&]B݊qeM~/5H|3G4"DԏحM%;j0 }zC&9OhY &F;ɻś5DL3s@t\NK9On(r7*p?K͇tT1ϤNH+D?ԆVڽƥNq&= Ygʺ߸H֪m!-֣ ʼn94+qRNXG< 0}\9 4}e?0Q}m#Sf0#!F1yސlpeqx(zY?W)X eT! (^d0l^}j-kIB_ũpX>Nɛ `#de߉Ş~^)` -uFCw/V~*! ZxjK/!ӗr<3zh G*q\Z*|Iuq^lt:g+ (bg$a <lͧu#sžvK=f'1!7ώ,e]cga4 ^hskDy/Y ޺ਫ1ݱ 9mAz\*^uDLѰ9-CmWe``?$X{Zo0ndFm^\{8qA'uߝ{+3^x*D.jS!mQ2SjÝF:@` ײ/\*Ouie9ͷ7C;,m_492"PGS^KTN$.CԌy1kŝt2\ҝ/oWos-3 +^t$2C9D q 6 A +=ðI т )VeH6t8ʂRe50X +#!v̏a{Eڋ/:-Ozo}}.޲P7O4w'PCJD ـq,&G=ql%j -{S[5וtq alapo:D( 9AxF`)}'PӱDP ¨84RnѦ#~)d~ݎKʴ+,mL]S5Zu{Ɍ QiECo b&<v2wӆš|[nsK[BVl8W:kήGc¦b\if%̖ cA}>(^_E{ՉBpT 2˥l:]J٪RDEQ]" BJ2=@NJ`Ol)K v:+$cXqgo7&6rHv$?bqIV7G?n +SR !贃%P)H]/ JFy]qium>do=BEA z%)Jn3''[@2 ̂b:ƽq՟ ZK7hrtDyG zM\uI*$~?~R˒~|Uuϯ]YHWendstream +endobj +6231 0 obj << +/Type /Page +/Contents 6232 0 R +/Resources 6230 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6202 0 R +>> endobj +6233 0 obj << +/D [6231 0 R /XYZ 85.039 781.388 null] +>> endobj +2318 0 obj << +/D [6231 0 R /XYZ 85.039 664.197 null] +>> endobj +6234 0 obj << +/D [6231 0 R /XYZ 85.039 633.996 null] +>> endobj +2322 0 obj << +/D [6231 0 R /XYZ 85.039 550.674 null] +>> endobj +6235 0 obj << +/D [6231 0 R /XYZ 85.039 527.601 null] +>> endobj +6230 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F14 2903 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6238 0 obj << +/Length 2101 +/Filter /FlateDecode +>> +stream +xڥX[s~ׯPU^Pp7'l*IY#PYq:rs瑶ȵU͓̙?ʇ+KaYxYnرW^}ַ?>\,R؋eFk}]DZ`_>w.,_?q~O|skgpgh~wvay7m+gfux͟)|ls\=y<ԎZmS{5<;d#M$7۲nj \Up~PVVsPa,RKjrȐ}9+|}bZ>_Q`! JZeۡ͗.b|GY;[ I -JPiI\n"6 |0 ~#lm- +8|?e̼ BV!ɢ9jCN X*G =nvz0;@xTY="}Im'LM%b%lE4۬avd` s}!Z)B-S)i"φVS3Uk agj]>tihI& ZJ6^nhTcȉKq)tғOl[*خsϑaH0 b.%eD@B6YncBRbOͲ ֌L)Y|]/a3`8-sUΙ|tu[\lSx#lYF7ze׷[?{]`Gץϴm}%f4On1\*#R6]E>u .چzMQ)aSĘKmvAj-jj >0@IE<_.FɜND~ 5ME84XJ#];~aG!GW 1{\}F3b&]GbH `rQI52Sxڻ'ͪ6"5jta D@h7/U#_PVHO5hTyRc2+?dv0} Z/ +ՠC*۬N#4׃℁Sp\ij br9,a l/TCͨtHs+UoM?Bh(.ʈyzbԧ6XPK3c̓: .*Fb٦]R!S< #;~_Y.WFk;!2PՔ97*EݺA\އ?6@ +FEBc$!4qbR~S=M@$؉bN};/,[S =0#l_4$Ce 25O9v@Z]"ٺ5.>Ƕ}5I%w=JM&hN̎0nsd0\46oҪM/bHZ4|$.`_ ,4U(WQD[K6{~;fŅzYoͺ<^>&T;j 2*-הAŀv!@&-'qcsk +2 9~Eڀ۟s瘦X?'ΏʦL&='oKSԜiNq +;O`VۻJ+;Rt!מg{nk E)w3D +endstream +endobj +6237 0 obj << +/Type /Page +/Contents 6238 0 R +/Resources 6236 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6243 0 R +>> endobj +6239 0 obj << +/D [6237 0 R /XYZ 85.039 781.388 null] +>> endobj +2326 0 obj << +/D [6237 0 R /XYZ 85.039 679.343 null] +>> endobj +6240 0 obj << +/D [6237 0 R /XYZ 85.039 657.482 null] +>> endobj +2330 0 obj << +/D [6237 0 R /XYZ 85.039 559.67 null] +>> endobj +6241 0 obj << +/D [6237 0 R /XYZ 85.039 537.81 null] +>> endobj +2334 0 obj << +/D [6237 0 R /XYZ 85.039 398.93 null] +>> endobj +6242 0 obj << +/D [6237 0 R /XYZ 85.039 374.948 null] +>> endobj +6236 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F20 2873 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6246 0 obj << +/Length 3259 +/Filter /FlateDecode +>> +stream +xڥZYsF~ׯ`eM M8HZL!DB$ e 9rgF̡,mOfص8glK3\X(bfuvc\NdzvwOV>[^del]ݬ޽y[p}'n^l;^c/'i]^ݪ;sw:_ulC|~Ϟ.Mv/ӡ`&)p msgбC'`>ҷkUODgdhCqhq;]ϽJWdn`RiI7SU]uȒvڢ"J,7O[~Ly8rC#U JPȩ?S}1P m"]W663U jvbze*AWt˼ҥXWYKT@ʬ=|O=14,tmp9@ 0zSֆL[ ` s>نnaEeQ퇋^W{ʁNd)˽* ~tDy\Y>Ađ~ʁ|˔9#9V%]|,MNWU֭cW0( ɫR<۳iޑt%_s-8E<#pZ7/mVvXJZ%cN#v9Ƃ`dCi>Jo5@`2_0ʥ-v5zQSwt҇B[nP=)H +=΄6^ vZ7YniNƄƀayNHpl:+c1A$-SmbamȺd0$̐,s z&:b"[t6, tJ6ۧXJFAA駹~=ٛ~䁑e]ʉ vrK# HeG`i)w @0|~b,1F<}Wٯ-a1_0l< l?X]]o %@2F%LZUǥ~$ ?5lhli1}Ws1 -s!(2@n_cu:: ˮ tdաp""kXnSKh8xLuSP) L =~5Ώx0M!C'u>'^D" +d-BAhM?yNL=W30tGT%TM~Q1~A^G_~|QlcK1ё$iǪFNr{ie8d![Hqv,G9LS]TZ.%8ڧ|eRg_:HZKڼ7̐%< t\O /&tRr= UAe ]s*!] +8RIAǍ5:^*ܲD6[2ݽܶZrũrVE(ʫVdWU+4FXU{a%uDk^ d5qMw?kWdr,zTG3zݟɧ4AyoghCSs#]}w2<^P;8qtvA0CGfd6*?LP硯}Cƒ>ch#{]:F*gh=-IX|( +qNkMI ).>iᮯP/j3d}yp3+hXDqKa(%uVAC-{IC 8f;۟n\^qC2w>duW,I2;@9 e>+,b4zǦ!-*#|}/kZ^)?S/?;a⢔Ʀ5g\8$fk/~g)+?7AcA0`Կʶ֡ԷH8w ++*i9#}Ddv\m|;dg% Jo d28KR 椖ͻXk5^2\ q@>А34rN䯿t)&Cb6yQBI`aT&4AI AZw˻cH۾G uҶN]e2߿(K.qgc>ݬ:mk)Qk^>Zehv(]klȔAB0͝CLG5MLZӜztP1ð:'x /U < KjksRm?.u pU2G o1o#CW_/.;p#W+'AqVku{/Yh|DgHzZIU(OHm%]\)/f88h+ce]Pt񜣏tةꭋ<럏.FF\Vs +]1FƻR C+y13"mӘDx15 (BP?1̯}(,ƞwik>b0/Xy~:ZVD[= s'VT*ab?^ls/~,qAR5t be M11&-kz!W +d^IP'YOٞkSv|^*'8endstream +endobj +6245 0 obj << +/Type /Page +/Contents 6246 0 R +/Resources 6244 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6243 0 R +>> endobj +6247 0 obj << +/D [6245 0 R /XYZ 85.039 781.388 null] +>> endobj +2338 0 obj << +/D [6245 0 R /XYZ 85.039 555.804 null] +>> endobj +6248 0 obj << +/D [6245 0 R /XYZ 85.039 508.467 null] +>> endobj +6244 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6251 0 obj << +/Length 3659 +/Filter /FlateDecode +>> +stream +xڥks~vBGYQmJLN'" ﻯ;HPNq7{?b 403|3| +y;?It{nǞNFqx>_\4L0tĝL4sf7w߹d3ݼc;~n~8 2^7W=G{]\>jnx692߽%3 ƞ 8v(? )y՘|0s,<[ <=7"ϑ84Hb2X7۲ +SG1֦&ў`vco^}R o->Z-u`3' +Fue]\Q E-pŚ83x% fU iUvF4XZpbБO7GU0(e_ B7(Gq\0GzEPruQe񋜺ZDDǐ'4B7ςp/H0*QS"@*MgߚKR]&p6p e'JD-s-!-*uIJ) rV#{a17Ϗ~/θ# +- iYPpHwI; FDE2y]3HEn0]E/R $l~KawwX4"h(7Վw'avZҎrZlA:(@-h|؈+Ndk0kk5; :>?ʔH7Q3s{ρ-\6lY -tΘš(DSS˄)| :;y84 8`SAW9GڵͰs;>\O^_fzG i|NK~f~Z񞽘 z^ԦyKqǛ!PCοyg41z 1 є*1d+s*G,"|)E#ށucL`,="bWif0Mf`$Or+J|yn0EZ^pmq9u5D=|hia$0w<{S?9 }~+Ŧg ) ֍+Fr8R#CUSQD>lS?E\4(=D#WSp)4[*.;y2oYzoZF5av8W-jh~U|:VqY;3oF,h4&YMV[`-ֈr.x]#FEp,YJ!t[#1pRHxz"(~VB1vrm ?n.#6;Gƌ-ʭQʳhTj_] e5 Nm5;$M>kDtS<`rNl 嶠nm̃d2 s G){7yi\7Ҭ>>6Yo恡tLr`Gz%VIؠ#7;KٛYLj†_PgU Ay9;psNBH4GAov%j3𠙉+BE*ak">6jl;Q%7%K<|Wn|[n⫂E7gx}pUL~ü? )ۓ^FPo(=tm7Q<+Լ%`M/aR)VaD$wT0p6d8l(w47 _O-ӹsg?HQ&94VnNRes:s 2O8o_aX NhQkG@fs2"xJt=U7ʴ\( F1# rL$?I?w0p韤_Wwcd<[T(=6QU\UYQK sEE ?i4@",PNX +n>3j!~u7&h 7Oݖ傻S\JȂˆ#)jgv;q:t$`?D= 5$OT4'Kw؛zҔuǯg\p_> endobj +6252 0 obj << +/D [6250 0 R /XYZ 85.039 781.388 null] +>> endobj +2342 0 obj << +/D [6250 0 R /XYZ 85.039 420.88 null] +>> endobj +6253 0 obj << +/D [6250 0 R /XYZ 85.039 402.614 null] +>> endobj +2346 0 obj << +/D [6250 0 R /XYZ 85.039 222.638 null] +>> endobj +6254 0 obj << +/D [6250 0 R /XYZ 85.039 203.766 null] +>> endobj +6249 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F11 2906 0 R /F20 2873 0 R /F56 2898 0 R /F35 2888 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6257 0 obj << +/Length 1747 +/Filter /FlateDecode +>> +stream +xڥXmo:ί@åR+L$Ҏݖj2fqR8ĐlմU1_kkfi|ixGGu\ as;ߜڗGivs9?'k?N~{>dfi2?Ot O㟦s֚.F̿4s٠|C G?n3}i?4wv>o|6fTٷ^3u>}~@^wyun/i}w ^ `3>(Xg1}k0k/p|8kq=z&f)aؑvMtU ,r[WmH̱`#ZP5d +EmHb$-G NZ +[) +3!JDhX1Ϟ!f| dzyj(!N-t41^Rs_8l#< 3j&-T Di:$S iTii QQСi3hAa.jZ.Xk_gBĐ66k}5"YaL Z{H-/( +eoDp~ӯ3Xf]EGv'sot?PgKic# +rLcbmMuP5q[E<S6_@G>IX +X[o8 s”G\s=#0fmRZϋ؏$@4[m(GE ,LXh-B?5'ހ\+< Ro)(sNT1T４ғ1s7U<7"^]V=_Z,C:kD~2#t.e7tn[/[N;hnlmu"==? X1#endstream +endobj +6256 0 obj << +/Type /Page +/Contents 6257 0 R +/Resources 6255 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6243 0 R +>> endobj +6258 0 obj << +/D [6256 0 R /XYZ 85.039 781.388 null] +>> endobj +6255 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6261 0 obj << +/Length 2626 +/Filter /FlateDecode +>> +stream +xڥY[sH~ +.-!jMqאuMMh6Bb$a'~ϭɛTQ\lB߲qo:x{a`Å#C!\/..c[c{[||K^ob0zwk0t|8A&4tvs7pL&@xĩjGͯ>]_ \z1YԘk4oO~-o^`l[,o/+OӋſjVzM?Z~+cKUoۖo+wcp5VzviT oo&0 mXRϺ@AH8ye `i+޺ T9,tҭ^O>LgG]-&PNgo?L)3`q/$&/g$dvw>N-govw'o.Mü4󬊒VBqMTDqe$)vB|O@Dxct@+t7]<'{wp:YA_INǖNdDڥۗ@ iTFXgUw~݂Q0($5קr ^VzzEQFT[mlW`4/ =,G4qH'-CsQh#Ͽw^QU]͵Kc|vgdv/*{ITPowE{;]@rFY`b tTF'Y.9)M<%i\$ZPuhX:i8yXcFTc~~?k̅U5渖=5YʂKڃ+ǻxWQ$|^t!@N^5 +-H뚳is^PKDd\NA +l h<|L`rH^lkʲy'>]۶kNAA`s 8! TTJ(x`:TO圉Z Q>(y|n< ~d^8S S^#2.qW%2U.5h{ժ ښSc=a]0x1},)J ewI' 钢r[RA/#QɩݺJ0{t"* +GKP< (XbJ[HSis@(=L\n.M6{Ny%DRA TOlr: +6@d8૟]|4bS2Awn֒@0ƌ0Ӌ Sŷۄ$ZiK]ŗuUz82(te|/^ͯ|u')FׇT6]}M".(kSNhTuBlRrR$ԧ#3YQV-uuH +A`BQ?h-+Yյx4/e)GaVgKD66V|O߁(3`>*l\`*+i 9|u$-~HK~6#ڛf*u٭- @1 W$7tO-!`Tהj8 +>qQq,kHF<5l=78P2磹.`S~s]憀%)ĉL_uǔI|]u ^"|D]9oq +/?];71tXYWMgs8#ոR דK?qAx/Ԃo:vH\\<'RR"mQRw&s9&/ֱc%綘$oI:@{=#+H; +cѐ~n:$j܇)G7 +.\*9|Dw9/uu1PivcqTgU|B?q 6jbB~nxryF}j.槺j\yj6F`9FBS%nGA"yˈ)+ٱRE(qT90aQY#Y/[­{ÒNѠYً;Q缇 *.-- }i4ppˇXvmK#@BC붶qX6aÞ4;!ss.@hKO>mʾlGEX]:Sӕ%e +CZ:ikem]FϏzw]u y)^3J>Eendstream +endobj +6260 0 obj << +/Type /Page +/Contents 6261 0 R +/Resources 6259 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6243 0 R +>> endobj +6262 0 obj << +/D [6260 0 R /XYZ 85.039 781.388 null] +>> endobj +2350 0 obj << +/D [6260 0 R /XYZ 85.039 491.353 null] +>> endobj +6263 0 obj << +/D [6260 0 R /XYZ 85.039 470.36 null] +>> endobj +2354 0 obj << +/D [6260 0 R /XYZ 85.039 386.44 null] +>> endobj +6264 0 obj << +/D [6260 0 R /XYZ 85.039 364.031 null] +>> endobj +2358 0 obj << +/D [6260 0 R /XYZ 85.039 229.148 null] +>> endobj +6265 0 obj << +/D [6260 0 R /XYZ 85.039 205.83 null] +>> endobj +6259 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F20 2873 0 R /F15 2884 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6268 0 obj << +/Length 2703 +/Filter /FlateDecode +>> +stream +xڥZ[s6~e!^3q'ui>ms̋JR\HivM8sšݙYێga2fę=ȧWQ,ɢG~yc\ǎxmϗO/=_ad]\-?]<\\D֭:-v]P-ᷛ󿖿/ φ/F>/gz2f. '{R󓛓Rl?I+bۋY(;}B9+l7no~\Ux,c" փ///vXUpJ+>uXz MSI+=g/pGu `{M#UlrMk{BAQ .`Գ쮰+f1vA}F:J`*ұfA~:g ÏlY}yXzJb<㯪~UU~s\(vf8mYWw;EH_]-~=IʬiEH`V!Bp_Q+qlI]0k6xcmc^KEU/tKc>0}]Du_a.5DV}Y 4X +{c6_eJ4 V@rXE0^7N#K@e4榍`z5 +ȗ@ݢ(i8UtJjHLk檛ruLht[\X^p?lɞŹf;%2{F`rUlsFϖ`Р9 +:`֣6R@y19 +E(_($UEj'"m&jO^ľꍽMBD5I1d{2к"z[sضޝ,GԼZVҴIvC1ДzpOĘK%2ݻL`9D$C(Q IXnٮ-9Foe m8o(d0Cb'0r7w>.m_rww&IΣ̝øQkq >F?+"{Dc:+og1ΗQEɏ +퉼_ڒlMpN暆92B lPKrNS{O8)DV|@$Lً+r' RVje* +DZv޴=?f*I_(+1Bw p + wG9q9{P?`C Rqz1+#=/#ydf:yRځtQM_L9CI3;2jaW+ׁ*AGQ?ROO jȐp7ЦjSIw2&g5QU*z6*KltRjZs+M4ܼ"f%<7(Y#Uc[s!/M v~0~B# +i +H1mAo~E J k#:Uڌ64&|}3̲0,.[Fbيp.["eĶwDR䀜䘔24*!ӏAbC7c٢+9ԕlnr[hTSC +tDD ІZ +ߔ(ӎxC 7%kWL +g`S'MrۉUhK$X# 4H1z(LP(PRPp\4jN.՝TVI7TL: St4iL<ʨA0eR7ʕ\K[/kTa(x> endobj +6269 0 obj << +/D [6267 0 R /XYZ 85.039 781.388 null] +>> endobj +2362 0 obj << +/D [6267 0 R /XYZ 85.039 676.879 null] +>> endobj +6270 0 obj << +/D [6267 0 R /XYZ 85.039 648.143 null] +>> endobj +2366 0 obj << +/D [6267 0 R /XYZ 85.039 590.109 null] +>> endobj +6271 0 obj << +/D [6267 0 R /XYZ 85.039 568.913 null] +>> endobj +2370 0 obj << +/D [6267 0 R /XYZ 85.039 447.579 null] +>> endobj +6272 0 obj << +/D [6267 0 R /XYZ 85.039 424.261 null] +>> endobj +2374 0 obj << +/D [6267 0 R /XYZ 85.039 324.915 null] +>> endobj +6273 0 obj << +/D [6267 0 R /XYZ 85.039 303.719 null] +>> endobj +6266 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F20 2873 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6276 0 obj << +/Length 929 +/Filter /FlateDecode +>> +stream +xڥV[S:~+B 2U}&Ef-s,L燂1 ` -NH02ӫO@euh@^?PFp!˦}njEI(NADYb͛( hnh|\-WT(DrņK?Vunf{z7[#cULS`OØrʵmv<%x{wM,6Vp +ȀJB7z8^O .D-{ gZ8P2^3kZFC=V33ʷ2~ltcŒt/Xn$e-x%=:*vX@KCcq OphΔ0J% ̲yE8mvqK-!}V`^5#G>#p3^u!7!P`2vܥY*]"^0UoYT , vvjsXa9B+֍ލ0A%lp 2u߬9tv@ Bkdt$wC +d|V +-ѯn_!oendstream +endobj +6275 0 obj << +/Type /Page +/Contents 6276 0 R +/Resources 6274 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6278 0 R +>> endobj +6277 0 obj << +/D [6275 0 R /XYZ 85.039 781.388 null] +>> endobj +6274 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6281 0 obj << +/Length 3194 +/Filter /FlateDecode +>> +stream +xڅZ[6~ϯ[EH$uq n@Lm86"KId)ɖ0<<׏GIW KWe'z*4eڝ^%* +83 ?UbF6&E^J<׫UXjoMlYT7YDӨYoҨƮ]ot^#6ZQ׻_ur~^ncoXLVc],. Tm=)lk`9d+yd=6׸? /8iJxlg<2.xZ랁bU s^K-"ƙRٺ^F~xREdzG8t hId2ϩO48*mϞVl~k*3Ed<"Nr-Ŏkڙ:Ԗ{"wn'OF[ wt 䖧Nl,x[~_òZ(r%<㟶qTtp=2`lO(uDG vʠ@K$ +/SA<(dź48Z^3My^ha.蜄鸒_D$L? H$) 'Iijۮ>$ 䘤5l" L7G_"q|EUćGb#{glMt ~+:GHHlχ#1$ ۑ`;cGī 7IՖva.6Y-tilZpyؐ0Kׇ!cpHI8bǕ$C||*-&lSpVqcw_+6kۤoQٚgN>o6%ĺ3$"i(rs8yրȲOJ@ʷYoS!gHG4?޲ 7_?=!SʝYiۿng{}F`RQ~ ! ʞg-̥R5|gkñ#s.#BEPw#?$$L:-{Wr/ܕ_CK@w(3]m MVhPpgW?.'P B%p5zI|e.&rLYo؄63M<S~;r/0z$S2L!Zg:~{rin5c8M3yHlhP?FNI(/ +#FH͔$_& +-L 6g't>S(SKumP.g9̎]4 vg%8t!I'VvJdQd}~l%j! wah0)a;f<0$0*ζ/ +@J✚=0~!dp+&c_,|IA5u@~Z׶Ofa1Ž<;䧐O :KwmgHRx1uhQ3:7Ц"58~ VA ƬΌi'd~+G-kª0fhD=,pC$^r&Lh^~@F=Ŧ@#qLATF^*=OHpJgq7,Z>f,#+}dL7^i\]8AOj':Kz y Bz',"=&:@Ȍ;t\> q^ za'Ý`n(tfe\$ﱭ?/ɳL x㷙yhY ((^#lgeN?:TL0^Zǧ&J"[LsͰw'§ +LvJDȵ{-FCn!鲙$칗%HЙaTd9V!e,FX HaBZe׆ +Iێ Ht%"pԂ}qybpL^dk]*Juo3C9'4w(yaD jr.<fCORZT:hI`%jb5lGi6:~J,EQI'K-q|m_8œdBe_' 9ܾxy)zy:fqeni6`f"z47.BE%dQW,*Ve抅IXx)g,aVi\C83WYB‚Dʎ{||g~Mo;`Aqi߻p*=g(sp{~ԽDžG*'D{Qy7bl! IȇfqȳjmTBCf!'ua0*%'sjc1M vK60/σLb>Z~T=cLQ̩ʩ)bv [yd&NCp9^0fh4,UvÇPU%PBLSE T+^PF^*w xNn@yvH_qf-KW7]Yo~٦endstream +endobj +6280 0 obj << +/Type /Page +/Contents 6281 0 R +/Resources 6279 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6278 0 R +/Annots [ 6285 0 R ] +>> endobj +6285 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [425.738 282.402 509.276 294.091] +/Subtype/Link/A<> +>> endobj +6282 0 obj << +/D [6280 0 R /XYZ 85.039 781.388 null] +>> endobj +2378 0 obj << +/D [6280 0 R /XYZ 85.039 761.463 null] +>> endobj +3038 0 obj << +/D [6280 0 R /XYZ 85.039 665.896 null] +>> endobj +2382 0 obj << +/D [6280 0 R /XYZ 85.039 665.896 null] +>> endobj +6283 0 obj << +/D [6280 0 R /XYZ 85.039 642.326 null] +>> endobj +2386 0 obj << +/D [6280 0 R /XYZ 85.039 488.273 null] +>> endobj +6284 0 obj << +/D [6280 0 R /XYZ 85.039 461.659 null] +>> endobj +2390 0 obj << +/D [6280 0 R /XYZ 85.039 174.236 null] +>> endobj +6286 0 obj << +/D [6280 0 R /XYZ 85.039 145.5 null] +>> endobj +6279 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F66 3248 0 R /F56 2898 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6289 0 obj << +/Length 2415 +/Filter /FlateDecode +>> +stream +xڥY[o6~ϯf D^T(L'Im +r,'@|υe[v +,Cyx".AWƃ0tya3)lMbwh~|8} p؍-Jf_wWBghad}z|j(~ܲ!1J7w0 o\G`c<~ղ5pBO l:Q7p"'(o=O9RxC5!"Jת7Wha~9@a~"|/̳YSO^h- +fjhGuĕ '% +b@bGF2g0``ĝ3W#v~=XmRacܐޫ3N)/ÑEAdKrSzJz7t`"ŲkqJz OiKsS8{< ,MҴ..`Pҟp:ϲjiC,Mky@}+Aѵ>ސTqbkE:Ō<_Yb4iawA^VfzNaJ4x#$Sä5лv7@돂;DÃI4΅iLr(o'\ +:Ԯ v0_py%>IEI(\cԋ~ mNMS#Nu:m9vEB'/Z/\O*O"ٌUZy./d9/`%s KVaƞAPS뎕x׊(  +6]Y K }8Ǵtmf O_t{̸Fm-# 2(#MVhh_^ouesa:6 y{l~ !h!Y5: +8Z+n# 8v@y# }Gxͷw$ 0jL/?]K~umCUM# tuLᑡ7] -HG/aaNaR[3I$^ +U9T2Ch'Z\hR!?ONx+u{O{NLn1c}HybǍJ-щDo)&&wGޑnqy0+R/-+Җ^Vl?hK~|y?Ghnߣ^J\}z*-?ƜDi +#W10ܪ L![,O!K+ͻC߅,=9 B)>c;? ƻ> endobj +6293 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [361.406 338.821 512.306 351.723] +/Subtype/Link/A<> +>> endobj +6294 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 325.575 308.034 337.567] +/Subtype/Link/A<> +>> endobj +6290 0 obj << +/D [6288 0 R /XYZ 85.039 781.388 null] +>> endobj +2394 0 obj << +/D [6288 0 R /XYZ 85.039 691.296 null] +>> endobj +6291 0 obj << +/D [6288 0 R /XYZ 85.039 664.681 null] +>> endobj +2398 0 obj << +/D [6288 0 R /XYZ 85.039 550.67 null] +>> endobj +6292 0 obj << +/D [6288 0 R /XYZ 85.039 521.872 null] +>> endobj +6287 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F56 2898 0 R /F35 2888 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6297 0 obj << +/Length 880 +/Filter /FlateDecode +>> +stream +x}UɎ@WؖpOoN $@Á @8tĉ"^w^?)eSYQucX>qRIScI&(S>FJ``4dG *RQ%U=Q8ISFcVljr^WwߛT=1|aQ_lETγ,tj9W% s]KpMVo>[gdUy-1ND*u?;>#f>N1v眏ƝۜbQs}0MGarWjr2ML/Ճy޶>3'uG`m-F|5sdw{BZ\Zi f8mBqxI|_fw4:9K[;ڮ̺ALONU u|CY55dŠO1g5R}0#8Ű_ئv۟7 =)̌dYc,1z2O;?d~0,ͷ9~NjIeͷP hv +> endobj +6298 0 obj << +/D [6296 0 R /XYZ 85.039 781.388 null] +>> endobj +2402 0 obj << +/D [6296 0 R /XYZ 85.039 761.463 null] +>> endobj +3039 0 obj << +/D [6296 0 R /XYZ 85.039 667.044 null] +>> endobj +2406 0 obj << +/D [6296 0 R /XYZ 85.039 667.044 null] +>> endobj +6299 0 obj << +/D [6296 0 R /XYZ 85.039 642.326 null] +>> endobj +2410 0 obj << +/D [6296 0 R /XYZ 85.039 582.512 null] +>> endobj +6300 0 obj << +/D [6296 0 R /XYZ 85.039 556.503 null] +>> endobj +6295 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6303 0 obj << +/Length 411 +/Filter /FlateDecode +>> +stream +x}SMo0 W(̉lmw. ;SKQ ߏvْ€-|2 +P(|@a#Gn6X&`F+g@[S8*b|j6-H4;h-X&ZW9'? +K;(~WR 1 xR?ͫE / +բ2]yvjv}34quه[V?.fZ ཟ~8D/ oe%O]ݲ0*e]9aicKFޥ:2vr7/TG?KeddvmS|fO;Do҈,g/{a.0f 4P^43k, k +P}endstream +endobj +6302 0 obj << +/Type /Page +/Contents 6303 0 R +/Resources 6301 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6278 0 R +>> endobj +6304 0 obj << +/D [6302 0 R /XYZ 85.039 781.388 null] +>> endobj +2414 0 obj << +/D [6302 0 R /XYZ 85.039 761.463 null] +>> endobj +3040 0 obj << +/D [6302 0 R /XYZ 85.039 667.044 null] +>> endobj +2418 0 obj << +/D [6302 0 R /XYZ 85.039 667.044 null] +>> endobj +6305 0 obj << +/D [6302 0 R /XYZ 85.039 642.326 null] +>> endobj +6301 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6308 0 obj << +/Length 243 +/Filter /FlateDecode +>> +stream +xuAK1 +rlIvҫ x,1ux/K@4#I^E^?:ɔWGʂ9%w(5rh^\u$ o{AsUg )|`e[ { TE-**:ck9Z9/<.Esjj_O%xwCT;a8Vm !bbi;HeuVs bendstream +endobj +6307 0 obj << +/Type /Page +/Contents 6308 0 R +/Resources 6306 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6278 0 R +>> endobj +6309 0 obj << +/D [6307 0 R /XYZ 85.039 781.388 null] +>> endobj +2422 0 obj << +/D [6307 0 R /XYZ 85.039 542.44 null] +>> endobj +6306 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6312 0 obj << +/Length 1661 +/Filter /FlateDecode +>> +stream +xڥXY6~У Dx(Ї*hl$%-pHIJJE,E|^hԋdx"[ %Jxd1pA$XQ{FIQz"dQ$ǹ` /JSRyw'_lh?-oaP 0,@F#>dG_FB8U-ܽPP, #sXeY:{LQ~Pd2G*b\\ѕ"aBg;GUeKu 4m`ZHzkFz$, 2PaR$&~p+Y{pmpc֏ _펔4Vمz]Vg붨ݶ]Q6#^Kg;9kb;8^;GgMY!u.W}h\G` v%ۢa\ 'U(ENsq_HÅvGz"Rn]#iz4x?' ħ] !y{(Ry@-3!G~d*Ռ+PF6CsSl"dp|6d2`]6t£Wաh Qr=[qr*LYUubQixh /sS0r+* g*  g5k*즺8Gu93=ʄ,DRAhwtB +efΙdNuX![qN+@]fUR +5qTAiH>œJbFO>͓iBv;f|hQڊybh?k1+Q${n6FYq!ڪv<b[s,i@~,Ӊesc]U&b+? +;zPo+<dq? +!ľ}2͍;]'ԹT^5ɵi wZ~˭Zmg"3-0,&*?<lL)2L5*6*/ +?:+~SwOjg2ӽJP$$ a{?$2] Yc {nx5T򾡩ri;9v;C<Ef +NU8UfBk߉՛J Qa&5hC צmmh:Y߷mLonL~yɵ ܫK[$"|l^ߓ= rJ}kg0m)x\xY9Z50FC,ԽD4\M Eį'iIٍPVpx X-ͦ0uoLr+ QQzvZĢfWƜ>nhIF[)hj`?Ips\9Kt#G uͻWA +(TD=j? d#d ^g% 8ѯqsAR-5m8e+cRo/΂& } 24.0OS︐Pz:,>,+ p84m bdJy64C\*ú5]%"ᔙڪ։>?$endstream +endobj +6311 0 obj << +/Type /Page +/Contents 6312 0 R +/Resources 6310 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6319 0 R +/Annots [ 6316 0 R ] +>> endobj +6316 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [111.316 573.654 192.49 585.344] +/Subtype /Link +/A << /S /GoTo /D (unicode) >> +>> endobj +6313 0 obj << +/D [6311 0 R /XYZ 85.039 781.388 null] +>> endobj +6314 0 obj << +/D [6311 0 R /XYZ 85.039 761.463 null] +>> endobj +2426 0 obj << +/D [6311 0 R /XYZ 85.039 761.463 null] +>> endobj +3041 0 obj << +/D [6311 0 R /XYZ 85.039 646.155 null] +>> endobj +2430 0 obj << +/D [6311 0 R /XYZ 85.039 646.155 null] +>> endobj +6315 0 obj << +/D [6311 0 R /XYZ 85.039 617.419 null] +>> endobj +2434 0 obj << +/D [6311 0 R /XYZ 85.039 558.211 null] +>> endobj +6317 0 obj << +/D [6311 0 R /XYZ 85.039 528.807 null] +>> endobj +2438 0 obj << +/D [6311 0 R /XYZ 85.039 388.105 null] +>> endobj +6318 0 obj << +/D [6311 0 R /XYZ 85.039 361.49 null] +>> endobj +6310 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6322 0 obj << +/Length 2774 +/Filter /FlateDecode +>> +stream +xڥYKW +$IQvl##l-#q"Ww#Q1f1Տz}UՊgų< #-8Ty>E=|~ NUj + ;Ȓ0˫4rbBc/hDaaIdtw Tiw8(˦/TE͑{_Y߁#|ɾw/"*h{sܘb? ɻݥY +$ր؊YA[* 39{}(;88k?s l +1F/?4'sG.EA-I+IFw4hʚ[z=VV1*~E JPPtb$;/S*@rmXˊ5Z6TA0SkYd[z|L];yzǍɸIl\{옹 쁱NUziI(T*{{Hl +G(V<81&[ !>i玩*?6Uq-=͙U +|3_@%W,8eк1d 4/UƝ̎^.ڶAʴ/-rXw#^a6 u# f fkj&vgX2x D¥]PTB +>Uԫ ?4(v`,e.۾4=[( hDWұMs;48|oN/beIn+31 ޑ[KnUo9Fxd|&jss`["0'琓Vܞ@G%)*QT\혜og zHW<&YM,X8rxX IpOW( ܴiΥ{ { +ﾵ;ѐjnj z`*,4Mp,{Tz0āMWm~mVnNzގb:Jd&J]Hf ~/}icN(ˎU3X?.|qpFoo463:~.yva/1!܎1`M5>|>+61炩n'{bHo&ل ң?;ʂoutRbѸZ1*MYs!xf bWHo{+xW+U <-ZA(ʏGB|[|xڢ`LX$_iџН_/!l3Efq1samu+J#^ָ`qنV7uF(NtG|IE89(r$:Cg _NFc0 s˽a"YE`c*p,99sJ&c7Q I` +ǰ7VT9M +OᄊPǴOE8L= OGKBwrS_a=ӷg/F7ynl +kIPG/s̤P KzP"hMS18fiٿ3\ZB:H7W2dp|A~m6wWUӤ6[.(R9?}3_~4_BCqD2  _nr;M`Xau7~@tbJYZ:^&^U&xQ^"!\kendstream +endobj +6321 0 obj << +/Type /Page +/Contents 6322 0 R +/Resources 6320 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6319 0 R +>> endobj +6323 0 obj << +/D [6321 0 R /XYZ 85.039 781.388 null] +>> endobj +2442 0 obj << +/D [6321 0 R /XYZ 85.039 761.463 null] +>> endobj +3042 0 obj << +/D [6321 0 R /XYZ 85.039 646.155 null] +>> endobj +2446 0 obj << +/D [6321 0 R /XYZ 85.039 602.617 null] +>> endobj +6324 0 obj << +/D [6321 0 R /XYZ 85.039 571.092 null] +>> endobj +2450 0 obj << +/D [6321 0 R /XYZ 85.039 461.651 null] +>> endobj +6325 0 obj << +/D [6321 0 R /XYZ 85.039 440.454 null] +>> endobj +6320 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6328 0 obj << +/Length 3622 +/Filter /FlateDecode +>> +stream +xڥZKsFWV}-;-;ZJ0$@e`вoAPRt݃p_8+R?(fM0B7p,ey}_ƎI߽|DZ|iz~z;/b_y{~y/B//@{ωi.b& +ßy`$72K f%,7/#<~OXޛ-q1-qE|0uFE,O? îUp`)g^Q-wA=$ޱk{ RTx{]!VHv5r#5 z2O}GKo 1.BؒV8gO8i Kp`'lT!__niF~F<-6" +",ql8C#}d%ld@?^D+mۣ8)z/tFtAnPҶ`(dV598p)hvpZ~h=aPkuWSȖ,? ̈́ڸ{Bm.N|z#ЪT.+I?4@5vklpiQM+NuCNrLd"vU<0pt^Knauܴn0CQm+ΌH?B([D'CCw9m#s^$ mdܽ(> l;5AyU|@ ԢP/Kj+'H G!p +N*fMӡfSھ: 9$7VeČQKS(gwB*ԁ pշ_C_is'bM4!{F %ْVJc|>O)K^8/Ͳ=9_!wgQ>ꞻ&/(A տWq9&?Կ̰_~2+Yv6psC򕊫25N>w ;5~_˒ 9͢(@bE8*F4g\M ykOמ,h9jY,HD] e&L^j6DNA#ye^YA1GD"LYmN 7ܢf< ['6uZ}Bjy!YBs +|bde 0 sՉgsPc?Q~5 + CAoJba$I(e$ +@ǫne$ "Hj*iTk޵4Ij|}D%{L2D;啽m.`VS*M |ߝ(dM:;Qr s 4qj_%|&}U3*D>T&Oľ=JR RM"l(g8'eLFX9wv'%z*\PW8ߐ RĴq(4I(;fK $%76NXsa|y}eGz>iN>-Aj?/Jg pt0;/JEOҲܻ), ve(^tRk7?Iu:?a}qF_+<ӥ0H|y*1YJq6#?vhW8d0ƈ[,1B p-D+}3 < 07Ǒ>?jD>2K g>QAswju2,f(>ChiAm/0C;yIum^](|l7dx:pI6S/*5 `-&wC=HUJ:ҐF"+*ʕL,7۲jZZÎ+~#7׽.=s}8%l:"۽$'8D[}4[HaLקH|^ř?L98яgGڛ/ Sp]Qe!G{endstream +endobj +6327 0 obj << +/Type /Page +/Contents 6328 0 R +/Resources 6326 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6319 0 R +>> endobj +6329 0 obj << +/D [6327 0 R /XYZ 85.039 781.388 null] +>> endobj +2454 0 obj << +/D [6327 0 R /XYZ 85.039 470.214 null] +>> endobj +6330 0 obj << +/D [6327 0 R /XYZ 85.039 449.619 null] +>> endobj +2458 0 obj << +/D [6327 0 R /XYZ 85.039 138.556 null] +>> endobj +6331 0 obj << +/D [6327 0 R /XYZ 85.039 115.84 null] +>> endobj +6326 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6334 0 obj << +/Length 3678 +/Filter /FlateDecode +>> +stream +xڥr8Pe! "<73ښ-֔!);@P-x4Fp_8?Plʲzw60*,7x~ðOlj߽zmPJy*2nyէ/<"* YA!" *2^vY!t*{8̃B@$*H[#0WOzfA*Fu~$K3x< hK mV6ҒB{86bcO\HF"sAsŬxe9y]0+lTpy I$3I]Hho!sFha!QIfM*ɧLLOhYYC$P>:S2 l>gC.2-0dc$`](Vq։*'e]O^ t,k,f75Qf&(QQWa4؏*CP }ss!HݚT@.F~⟣5LTw ZӔ:%jH ˍ! + b|J h*.($!O5ssNK>-LUv2AV-MG8Nl}@[N.͡GQNa⮠X`Z9uS$ +PD \sǣy8vzv )>GɍUNS}5z͜b8(74FCdNғMUxj!.aCq:GmKahLoΡxxk/du\ZclϖZ7[ucw']LJ@6$e,fqwȶ3na&*l +4Z¥(Ȧ n*#k;p:eM0äIxM'Jٸa(|T璉biQܲ6j3F@N0I~ӟ*1 #r݁ +b? R"~/ 8qL#PH$A 活w2 =ģIHR.`1kFMJI 1Iz|/L}? Rok-4Q$! jmG89vKs!>&JRa8*~ٻn43ӞktօMn <+8n ] +| lⶌ;%/#%X5DU&Uq% /Xf䆑yX[yr_](T=j9`Qn E]=_颖?0rSM56Iw1`#Us(&ѥWE,]Z:Ntx;wFc2's'pT'i$ DdW&{(t| C'>Olahx49Z\gzX ApkiץrA7$ >%=|ߴܕC993p 0nuX"aR<.CPW\jbZ "LLxKѣOsXcd}(KI[64м&].`{6e[!OK&Q/C[R{P{d7w=U~ e:U'|76jLU%̏zAI&o1RwE ! n.5:-;KLC)7rQo=a͋ɖɻ(AӼ-):s!saIt#3ZK1n߰[6QWXO6$*z`N}N]AMhgr cdxq^ِhHG;kxYS( }IXl`i2jyL&I +yLO1}m=ۭ磦V/~rmBMHzC~+Imm%`(BsM@'ƙ +?-)+LwzCVʧMaE\n)|g'endstream +endobj +6333 0 obj << +/Type /Page +/Contents 6334 0 R +/Resources 6332 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6319 0 R +>> endobj +6335 0 obj << +/D [6333 0 R /XYZ 85.039 781.388 null] +>> endobj +2462 0 obj << +/D [6333 0 R /XYZ 85.039 475.683 null] +>> endobj +6336 0 obj << +/D [6333 0 R /XYZ 85.039 455.088 null] +>> endobj +2466 0 obj << +/D [6333 0 R /XYZ 85.039 277.233 null] +>> endobj +6337 0 obj << +/D [6333 0 R /XYZ 85.039 256.032 null] +>> endobj +2470 0 obj << +/D [6333 0 R /XYZ 85.039 173.627 null] +>> endobj +6338 0 obj << +/D [6333 0 R /XYZ 85.039 153.033 null] +>> endobj +6332 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F35 2888 0 R /F56 2898 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6341 0 obj << +/Length 3284 +/Filter /FlateDecode +>> +stream +x]sݿ} 5!@iw?zM䁖x6SIt$$(⇎DKb?0_Ųrd_| ܀WˋoKK"..uK\^n\JIf,ˣ~jh{7Yt s4pyyIAoM@ed~Ed_>s8Lo/ni7uK\rI_qBy +œL9KRqR,gRI\\f*f*N4+{? `Rqhl=͢0ȸLxѪ:ǧ$g<+”0r( NJDT>=R- +H.`|5~;Yվ,bh63ɣ5KLJ6 0'!#Q"5#4OdX_hBAFg$[[}INFUK/'-j]s&H4֔ژ~gI$ViL8tyd_%s_DVqum< x9:r]0{q@а^<q4rXJH:g>YY;^+^I Z2%(=XfXuqeOnzV\naeB4rW>g|1IKea @8IVBΔĊTE#L LѾ&Yxd,v9'?7aag!«!tV[جtl{+f9Lq==_:2>Ըpc{I1yU4 +ZP44h!Vт97cf f4͌"V3F BMMc[w^0pvhk?d񛏁ip 2RrPl~js2/< IE|su{O$w_dI*KX^9@~K@ShT,ШpR|L&P@ Rx)ΪST6:ɑ> llZn"+Ą@-0@Zh jpR )6vvڶ}1zJrC*:Rʼn3ξgPHXū"^ d*hU 6QNA[Sut"gpNg}`Ex{m}89Xl͉BJWOA<YZLE(dNLLbLvyq҈ ANM嵉+ L3ei1 @ deieie XyԤTGuMy FQGuuN^ӊ(.9(c}?|Z1kBs- cuib|0[,)&rA($^YY8mKSڀH&R8(` h@BZqޜ"r0 +}ɹ`_4x#bBcz1Vҵث2!|Vet`: TxV4PE?&@`?y2(O-Y~Y~:>'R}Z"r-H +5Ȥ qY ס: Ot?@}4c[ VooC~]0{E?S%zĦ .zI<5kB.' #'oxD?i SNk (Z1ɍiB9Ftm! +}ϤMڴMV[? }M íMڔ XP |EF'|f+~:/; O4Ezw:Li~ҼUggrjjʍ lG.04ì%"ңj_WnGm} 脃mCga IomMeP@7ސ|PZ[waL+ wQffs0c|oMAPwm4H}F%J_`DFyv͊bsLʘog4BeV:VJPHwgdNŁ)8sf)o0D3"hNWZ0]DB[Ԇ3/ı#Ğ-; "HCx&eI箷[F2dtTqHS7GQ5O+[v~9v0go'xnP%ḓ'/C(J$N5H^A(ۈCBWW=)2w(i'Qv@)m6}WFWn 6<҇:j{QHd,.>[4tU#ȱ DTVKlWr2{ iCPkX@nL=vFv4w1YkO5one:,鯬~Nɫh/V48I$h,gEpIͷO9N(U=E?ģovMEM)J%(%xYn)u|=A B7㨛>`^}MH u/6k]AhJWF=umD?ҔLkr~M-(tZ|6"r~atܰ /D8IŠl39^מtbli}hf.ZU_ K8 & p) =(H(1#Պz%0FJWm_L%):zA&qֶkRT}b?:kKU\$0fm)":2[υ7sPۦd_J7~uJYfn,k ~l}!Oyk["pk+4D甍s]a*h+0ђ`\50\ ad k7~bûHn~pq'{4l4fgŊ&ғe+! l,\_A<)endstream +endobj +6340 0 obj << +/Type /Page +/Contents 6341 0 R +/Resources 6339 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6319 0 R +>> endobj +6342 0 obj << +/D [6340 0 R /XYZ 85.039 781.388 null] +>> endobj +2474 0 obj << +/D [6340 0 R /XYZ 85.039 761.463 null] +>> endobj +6343 0 obj << +/D [6340 0 R /XYZ 85.039 741.134 null] +>> endobj +6344 0 obj << +/D [6340 0 R /XYZ 85.039 669.735 null] +>> endobj +6345 0 obj << +/D [6340 0 R /XYZ 85.039 654.065 null] +>> endobj +6346 0 obj << +/D [6340 0 R /XYZ 85.039 639.909 null] +>> endobj +6347 0 obj << +/D [6340 0 R /XYZ 85.039 626.966 null] +>> endobj +6348 0 obj << +/D [6340 0 R /XYZ 85.039 612.811 null] +>> endobj +6349 0 obj << +/D [6340 0 R /XYZ 85.039 599.262 null] +>> endobj +6350 0 obj << +/D [6340 0 R /XYZ 85.039 586.319 null] +>> endobj +6351 0 obj << +/D [6340 0 R /XYZ 85.039 572.163 null] +>> endobj +6352 0 obj << +/D [6340 0 R /XYZ 85.039 559.22 null] +>> endobj +6353 0 obj << +/D [6340 0 R /XYZ 85.039 545.065 null] +>> endobj +6354 0 obj << +/D [6340 0 R /XYZ 85.039 532.122 null] +>> endobj +6355 0 obj << +/D [6340 0 R /XYZ 85.039 518.573 null] +>> endobj +6356 0 obj << +/D [6340 0 R /XYZ 85.039 505.023 null] +>> endobj +6357 0 obj << +/D [6340 0 R /XYZ 85.039 490.868 null] +>> endobj +6358 0 obj << +/D [6340 0 R /XYZ 85.039 477.925 null] +>> endobj +6359 0 obj << +/D [6340 0 R /XYZ 85.039 464.376 null] +>> endobj +6360 0 obj << +/D [6340 0 R /XYZ 85.039 450.221 null] +>> endobj +6361 0 obj << +/D [6340 0 R /XYZ 85.039 437.277 null] +>> endobj +6362 0 obj << +/D [6340 0 R /XYZ 85.039 423.728 null] +>> endobj +2478 0 obj << +/D [6340 0 R /XYZ 85.039 380.191 null] +>> endobj +6363 0 obj << +/D [6340 0 R /XYZ 85.039 350.786 null] +>> endobj +6364 0 obj << +/D [6340 0 R /XYZ 85.039 296.062 null] +>> endobj +6365 0 obj << +/D [6340 0 R /XYZ 285.909 302.036 null] +>> endobj +2482 0 obj << +/D [6340 0 R /XYZ 85.039 144.973 null] +>> endobj +6366 0 obj << +/D [6340 0 R /XYZ 85.039 123.777 null] +>> endobj +6339 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F14 2903 0 R /F72 3974 0 R /F56 2898 0 R /F11 2906 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6369 0 obj << +/Length 2572 +/Filter /FlateDecode +>> +stream +xڭZ[o~#T q +kI./")^8;ua EAl8r[Xx޲yz/̱#'Z7_?^Y\q-*Bnɬۏ_!ַ_n`};5q^% ̿ga?w+&׿]}X<?v ەc(\<óc3Xίo\WWԚXPxh{!ļLE9!eӤz~F=K7vejh^yaXSMT%nx  Z8bsF[5ͬ9Rkb"Sjn*@A_+0E$74wޞj1]c LjzbjhRrX0: -JF{n6Y?bFVtǷC?|nL09wILz]'[ŀ,xNj?ԽMRMH}@-)%Oן>I1? E= EفE zkP;@qz$Pl(ՠRj%.Mb𐹉k00tLOF ֞1yS&+ 5\KtZe3,|D8[Q?|- R;&cŽ|t_vc;<hw +.I) - 1&a>Q4+8,z9{F9DO6Jr4T4F$jʌop u*#I`cf,uXhwE[d +4>QD*<@}=ّn,ē\'O4V=jj3<:ISy.E84s!\pl'1Mm..ڼYЖUw]NJ 8>q sW|}X +*ݜAg#DoVy *ˋ";E9Q;c]=L(T0``З AwBڤoPZj YO1DvDf,"h|֒{hO)Mf-1dBܣ6k^9sU:RBk|ZXC"2u7tqRń21 +Tg<U|ֈ=aj@3FQ7>7ѥbA|.Nj5Kҙ9Y e>vb]u/A'񜄜X>J ˮs +2&Rg ؜ dbɻGmDe7ںQCH(qR*JZɩNPU]r(Rn 7ȽTH精IhBԪu] !My1/!z=Zqi=Ԍ O/ڕyd]jѿؔJU ܨETrr‡}rr5+>Ҹ)tz$?S^5nT!\Y/zoX\oUle& ;Mg& +8}\ȒBG2b?@9endstream +endobj +6368 0 obj << +/Type /Page +/Contents 6369 0 R +/Resources 6367 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6319 0 R +>> endobj +6370 0 obj << +/D [6368 0 R /XYZ 85.039 781.388 null] +>> endobj +6371 0 obj << +/D [6368 0 R /XYZ 85.039 659.915 null] +>> endobj +6372 0 obj << +/D [6368 0 R /XYZ 263.137 665.888 null] +>> endobj +2486 0 obj << +/D [6368 0 R /XYZ 85.039 374.658 null] +>> endobj +6373 0 obj << +/D [6368 0 R /XYZ 85.039 353.461 null] +>> endobj +6367 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F14 2903 0 R /F56 2898 0 R /F20 2873 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6376 0 obj << +/Length 1050 +/Filter /FlateDecode +>> +stream +xڭV[s6~m@A yc$ַdڙ> ;E^WXssv2I|&ǰceИHmȑT1:ӝg8ڡ.v|?Eub&tgM0_VKq:q?[e<1'k?{eo&Z|L 6—15&2a}b)wȶ@G.ۖÏmlM3_ Ч 73mwijG|b?fJ'rE!!-LI7yd/uw%zPi%tj3T{0d//,g$<[zGm^flo/7Jk|圕Lgj9kԲC:{*l63ӻwtґ_e[ 6%$sIsXo) 8Q%9Fdh`3\ԶUI +UB)!(:k(~`EE)n=h9JXaV,֗~֗dk ]h-YW!!8, +xRzeX0YVp 9 Kg>{y&S檷YBiP#W[]sZqZDi2 U˺6ص_Rf8 +SZTRuي2:/2JubתH5LQscNJ"(U.fNJbxm͞h!χ?_nV]3ٞLpwf%L \`QUKܞ{L yw5uZ|J׬JR 61dmSsaa-'kepY˾:ڠPC7~l`TI5˷d޴Mg}g4ٻ$pJfGoo+O1C[+\L\ŸWF}_*2EO[Ɨ +ؖ=?JVBtONu-QXj2vk_߃ Jendstream +endobj +6375 0 obj << +/Type /Page +/Contents 6376 0 R +/Resources 6374 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6378 0 R +>> endobj +6377 0 obj << +/D [6375 0 R /XYZ 85.039 781.388 null] +>> endobj +6374 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6381 0 obj << +/Length 2619 +/Filter /FlateDecode +>> +stream +xڥYK 0 ՒJϽbw]$`s۲Iׇɒ@4bU,ϲ_lktR?xW02nX\U^=V&[f]~?XY&\reYy_`|^)˯Ͽ t3/f~7uٔK.ʶQ&;m_GU8(H= G ߣͳ㦤(Cw #f#@XF;:sm AWnc6;XK{ڱjdGF/`.aSTVt%t$8ϮUkpFSfN`mA✦1Ɋqn +3: +ʡ#7W  t 8@`O +a9ˮz}de{ [imW25ʡ CU%ldP6RD3w SYPWrG 0y? _F4AD +קAB25lr  XK{s덬]JY,[ ]*@Đco*@QXq[I@5𖯊GTaJhBT$q)rbLjsM.N" I#/aes܌>*pS գQCY]쐑upBas~"MS4j`'$,Hre'䢉pGTezR[98[ñ0 ~.Iq¹BJAϓSyLTn 9)k%qy%NW߭3s^NDč+1 ֑[F=\j 6cPv^reR\\J@8Ƌ.sLM1. {^'8i4.u1P4q7l1aiqEql5Bުf6LJQKk J]ɋ̋(+_E\$P %ƱSbP4bwbHӾhz"1 +\g +D3b!u/VS|<.d :> =W1BD1J&렛ChUoE9bs]JwJlyTdɋmH9J%87CNr`%>2)ڦq77bz)iXݿ~-+N)Qiuy_;WQzq8mK\1Mn0?U[m +  rׇ=[ܓtC &̍)dCֿP^ :_h xT L?`mo5gB/M2M{ =O]*u> endobj +6382 0 obj << +/D [6380 0 R /XYZ 85.039 781.388 null] +>> endobj +2490 0 obj << +/D [6380 0 R /XYZ 85.039 761.463 null] +>> endobj +3043 0 obj << +/D [6380 0 R /XYZ 85.039 647.397 null] +>> endobj +2494 0 obj << +/D [6380 0 R /XYZ 85.039 534.44 null] +>> endobj +6383 0 obj << +/D [6380 0 R /XYZ 85.039 507.825 null] +>> endobj +2498 0 obj << +/D [6380 0 R /XYZ 85.039 263.788 null] +>> endobj +6384 0 obj << +/D [6380 0 R /XYZ 85.039 245.119 null] +>> endobj +6379 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F35 2888 0 R /F72 3974 0 R /F18 3977 0 R /F56 2898 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6387 0 obj << +/Length 2747 +/Filter /FlateDecode +>> +stream +xڭYmo8_a`?Qk^^^bɶ[Jr]pTdYqrHŗp8yf8#QW%(Bh>sG L!thLtE&O @g.>N/o<1DQ܎s7R:X9Sw.T\%tp{\' +ɦ7f?߇/_.yZIA/(z +ģ]!az}Luv{#^5@"ձTQ'( +\>i$'YUlBybʭoTOys"[%7Z7?fIKn!'ϕX9"NlyVf^oW߭E{^e>3Y62#++e_yMWEcYuWzWl].f] o<`<;fPC|m ΐMq.\+fCҳtQ:CC|XnВo꼾/'ҋ:O +-YU~p}^夫u>pguI(M#"{:|7Ghȱ8)9z7όE6@ql c4[~<$OvDQ%]n%/[V{d9Ԉ"Ox?Kx(:@\[/w=*ᎍG,r`sw4hX1tb"dQ{ Q{ 8~1kcՊ[xbx2t)/n+f(G\2jJÙyhԼXӆgpo Rhg3y,ҡ4KO2ꢜcZ/7A$mASTjg)t]5K6$7YpMzmwjtG}Vi6l6|FE![2CO E=˕ U " ͟YCf nWc:#ΐ"6&,ۺ(iJ0bϭ ݓHֻ`(: Ǿa6N1zhQRl[rpeX*H\@`cC}Gn2+3v?\qqD:XπL28X> p9B? +$'T`y'm*|R$DuJz`#.)OHRa--m+NJEc~<,+],Su2ȵӲ>ҐUElך(GE͈8A} gO4B6_Ԍm* MFAoÔv53`}mi[QG`ac CBãxMUԍoGXDC)fWq˫g("8(-g?e蘜W60b 2$>%P"NlW\;Ns2k_J1x.IDϒv$oX&\Sro(aL:D[Nx^yRB13/݊>}7yY+S;ƤgnbY7zPgpQW7PGgty}^7۲W+fd}BpIɛMnȓ|<‹XŧCY" +sO팱[w7niWTj+q{Nh4?B"vDxqNh'5vj;Yuv8Eܲ=5cd7/جPw&Owj/?j09ޔ[=i&ReGy[{cVUaI=rS}\OIHxt8Q- M ,C~e'jb4z?@6?u%ž$=34G> z82+&z"6aT!Qn\2<X4tŅIb*?ytNc6{UƓV"Gǽendstream +endobj +6386 0 obj << +/Type /Page +/Contents 6387 0 R +/Resources 6385 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6378 0 R +/Annots [ 6394 0 R ] +>> endobj +6394 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [370.786 98.123 475.868 110.115] +/Subtype/Link/A<> +>> endobj +6388 0 obj << +/D [6386 0 R /XYZ 85.039 781.388 null] +>> endobj +2502 0 obj << +/D [6386 0 R /XYZ 85.039 364.301 null] +>> endobj +6389 0 obj << +/D [6386 0 R /XYZ 85.039 343.104 null] +>> endobj +6390 0 obj << +/D [6386 0 R /XYZ 85.039 289.111 null] +>> endobj +6391 0 obj << +/D [6386 0 R /XYZ 85.039 275.561 null] +>> endobj +6392 0 obj << +/D [6386 0 R /XYZ 85.039 196.388 null] +>> endobj +6393 0 obj << +/D [6386 0 R /XYZ 85.039 180.111 null] +>> endobj +6385 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F56 2898 0 R /F20 2873 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6397 0 obj << +/Length 3393 +/Filter /FlateDecode +>> +stream +xڭZKsFWrYʄ1revjcemn20(Z~5 nrq0Ә Y, 8QIj{`,4oWL~qз-׿y7]<_c<"\y_J)zo ;~F_\wo>}Dgf:M'??_[9S̟WpߤW5\^}W5%;GP|#հ4 QJi(=K*.k@axM׎byA$"Lb!un=c_e~4į +S~?Fc#vLw?4Tu= X-g^ 'spquLsHʖoˊ=r('XBu_mQ=H,qbK\Em&Ցw8+k᧮y&Xh5`]8avdb8j~}أ~2͐.CmVꞵaIYL\ֶu{r!4z"Xi[̰›=1޳xȪOiˢ+ع3,2[P,P*d ,뉸cvy$lkxC>Lub5qge%nFliĵUý p;czZ&#roIEJ/;,[:%/7?0h<256yV2(V['ӽC/`˚BPDEMìa7vAF嬁̓|!^ Odz ICK'jpvfYG1\f>Ȩ, # (BA S?LIЁ!}#p\a:~؏R=4 EE'WB EEOK,)7%zng#y`cVH22{`Ƴ0~8 Ӄ0VpAB&_3 +$@˛eɗb3<=|/sܐKEnahCJ4btLGcPkdKZIBΣI6s DUrxPtz/G1*P8$Ga[HslLPMֺbϹi2sAH,_z)qhK_"φy>kjH {.+"o䲢D^PEϛTc^Q̈́vCH=vޫd*e *#Ԯ+UģXj4[`o +J@5*Uu0((#а\].B0c\,f7XX)ػ.Ƿ$wȞņ44Up@fߜbZ0#qZ;`qlP|/™s>!e6(ϊ QX0ml'^)ㄔ,49*fP|-% o>-Ă^ + #bۑ8D!m[V1AÛ`(8it@[MID}Ds&5KBIطHT2?cҁܦǤ)3=&u4| 761iWZ!ձw< +hPpW6yzh[<ܖ28y`7DV{SfKl&BB ?vYo<Ʒw?F~ŐDֵnNM2f1e樂72A3RoP AYj? _()h!CeWƕ(`qKir`@sKȌ!m|ϥY鿙4M^wGv5+`WPU4r '=4 n',ɧB6f##LBiS"¹_q }_ +ۧ3B8QdL짉r޵AGLRQ0XZe4鈇GH5;N]9p*x +uiCBaDLL(=8(!K c}d:4#U\d9e?y]endstream +endobj +6396 0 obj << +/Type /Page +/Contents 6397 0 R +/Resources 6395 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6378 0 R +/Annots [ 6400 0 R ] +>> endobj +6400 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [386.344 644.891 509.276 657.792] +/Subtype/Link/A<> +>> endobj +6398 0 obj << +/D [6396 0 R /XYZ 85.039 781.388 null] +>> endobj +2506 0 obj << +/D [6396 0 R /XYZ 85.039 761.463 null] +>> endobj +6399 0 obj << +/D [6396 0 R /XYZ 85.039 741.134 null] +>> endobj +2510 0 obj << +/D [6396 0 R /XYZ 85.039 473.996 null] +>> endobj +6401 0 obj << +/D [6396 0 R /XYZ 85.039 455.327 null] +>> endobj +2514 0 obj << +/D [6396 0 R /XYZ 85.039 152.856 null] +>> endobj +6402 0 obj << +/D [6396 0 R /XYZ 85.039 134.187 null] +>> endobj +6395 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F56 2898 0 R /F72 3974 0 R /F18 3977 0 R /F73 4000 0 R /F35 2888 0 R /F14 2903 0 R /F66 3248 0 R >> +/XObject << /Im2 4154 0 R /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6405 0 obj << +/Length 3336 +/Filter /FlateDecode +>> +stream +xڥZIs6WȮrsdǞ$/FLPfMvHϯ`zLM,-n'n,NTu["Vey$[Ǎ0kCh>Cފ$ٯinߢw?}yxjW(WBnU聇H;R}|{ݏ-~/?"=mX Sgd?߼pq換~Onk87II,`xTn)Koy9YJf囋8͕QWYBJ"K,II Sasm%ї~F!4"y!lnKIXu= (.<ֲH"D(bnC<^~PǦ=zB8_:R+YE3o`ф/x=6 phE{1+_a%<g'1jf"%GA1`{Uq@d +x`!UeT/*L=GeRL[>5IJg#A*Vsh2KOc2  Nt"M}D _2.Mkiΐ&]R2]@ϒ%c% +` p9 +, .hEdBJ| +a3<)뎋8$^NNn?z X<(E&@׎:4CR:;`?mg^ŮuQ7 ?51ߒY`iň60&vrKIl.\Sخy/8W5[>[+͊2ݴF0EOv)ɀ]T- &lj0bR̢~`d 3$XTb +lgÍ\|ݽu6b> wPpM  {7y[jlbÀ2M%'vo~A슨sp+zU1 \UUe\ ۈ=nk8E3fQ2 (| 5g.GA2%W p5YV&PxfzeI՛rf?" +L0뎛qH !$ N܅= 8H@Ca!qCv"dzxhnYl&L:p>zm9gS?f&"/>+$.P٘@{IiYRXVlO^H8J01QAx B$+rˉy;4v̽pO7tF1j Ż +Wx,"^_4w6)xN&$QUG<ꄗY kt6f$J( TLXj͍l݌ˌR/ˣE9_78JMJi,Y3eL.Rz: *Un's'q"ly\G2[* +oK2+ő#;Ҹ{5ӺHBrx8j晋LW-.y|z$2΅-lB'`-r.w KuQj0Cb`^ K.:bJ=}H @H4pl h^p}U{ ɶ=jitCi3T5n90%UCje;~~8.O;Tĭyk5ɩDb!vN%4.3$"_E;Zcpa`9|j&7@cHz$ H‡K̾X!laW. J QLVb9xY7xb+k*D2,®GFc4T ǯlхq;-9c=C3gk`ImV )'@cXkSZPP^˃LY24rcIEv cCqcW&mRRV!8Wќp6D`K +E`,h9bkga+J> Smv1t +u hgld$wtق_DkUEi6aj)5Zӧ'Nyȓ%4mWB/ C;zog_TI5e>`+EϽ4֡& `NE1.>9M"8vYNYEoFJfѸ%4]RlpHVC-.*Jby#*mYT~}IKayܝfR2_mendstream +endobj +6404 0 obj << +/Type /Page +/Contents 6405 0 R +/Resources 6403 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6378 0 R +>> endobj +6406 0 obj << +/D [6404 0 R /XYZ 85.039 781.388 null] +>> endobj +2518 0 obj << +/D [6404 0 R /XYZ 85.039 761.463 null] +>> endobj +6407 0 obj << +/D [6404 0 R /XYZ 85.039 741.134 null] +>> endobj +2522 0 obj << +/D [6404 0 R /XYZ 85.039 633.349 null] +>> endobj +6408 0 obj << +/D [6404 0 R /XYZ 85.039 612.356 null] +>> endobj +2526 0 obj << +/D [6404 0 R /XYZ 85.039 431.773 null] +>> endobj +6409 0 obj << +/D [6404 0 R /XYZ 85.039 411.183 null] +>> endobj +2530 0 obj << +/D [6404 0 R /XYZ 85.039 274.178 null] +>> endobj +6410 0 obj << +/D [6404 0 R /XYZ 85.039 252.982 null] +>> endobj +2534 0 obj << +/D [6404 0 R /XYZ 85.039 197.272 null] +>> endobj +6411 0 obj << +/D [6404 0 R /XYZ 85.039 176.076 null] +>> endobj +6403 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F35 2888 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6414 0 obj << +/Length 232 +/Filter /FlateDecode +>> +stream +xu;O1 )"Ə8$@h`xe%NDC{JsH}@5rّT@SRՄ8/kM.#,8.)h? B\ ~uMPjFfQiPI~F{h3 hvJ8̖Z-^VnKSE ۄ+(M> endobj +6415 0 obj << +/D [6413 0 R /XYZ 85.039 781.388 null] +>> endobj +2538 0 obj << +/D [6413 0 R /XYZ 85.039 542.44 null] +>> endobj +6412 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6418 0 obj << +/Length 2415 +/Filter /FlateDecode +>> +stream +xڥko/>%%qk&((8>:⊴$°;;;;;YE?jadKUhtRacj\]%:;#gBcYG IbB)IfCkb.Wqb2 +>|HUŸ~X~Zru˹#3E6qU(S$3AJg# +9Yp ] ܪ`{ e\bRPBEae3>t:爏c. )*xYT4r^#x9Iv8 [~ն}heUE5ŌVI_  PNtԣB;dUEp]Uβ#8yB220Q3lC/H(#W}U^8ޢ#{b,ȣ⅑_EbťQK g6srkQj3=Te5)9οaE{0qlym;^4Ds>8I-jb[tr¨v]԰Xߗ dcMD*e!#twŎ8F 2}4V_Qd'`-%оB.GmC5%6sTIY1<=J:uwAe#cf'* _[$C $2Q9v~͎_B^ּwm'qWƝB' 09A"$EUeq.`ݒEyUI0eRH۷w7RAW!lM|+J*?vAnoޯŻ?5Б[b RX*W'.5/;>+J$fRDJUʂ+y$E%')d,-pVI:Q9L i$c) NUl{qYqU%{|;+u\ +? Vm}nfLj37qTN#IhLFO%U0rf9 6Bt8cLƅ6/WQht(T\_8 ,yuuwibuH6E@G_PY> endobj +6419 0 obj << +/D [6417 0 R /XYZ 85.039 781.388 null] +>> endobj +6420 0 obj << +/D [6417 0 R /XYZ 85.039 761.463 null] +>> endobj +2542 0 obj << +/D [6417 0 R /XYZ 85.039 761.463 null] +>> endobj +3044 0 obj << +/D [6417 0 R /XYZ 85.039 671.062 null] +>> endobj +2546 0 obj << +/D [6417 0 R /XYZ 85.039 671.062 null] +>> endobj +6421 0 obj << +/D [6417 0 R /XYZ 85.039 642.326 null] +>> endobj +2550 0 obj << +/D [6417 0 R /XYZ 85.039 488.273 null] +>> endobj +6422 0 obj << +/D [6417 0 R /XYZ 85.039 458.869 null] +>> endobj +6416 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F35 2888 0 R /F72 3974 0 R /F18 3977 0 R /F56 2898 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6426 0 obj << +/Length 3440 +/Filter /FlateDecode +>> +stream +xڭr8_JUM}9L6vkv(YDIo_ AS3)8FoHMBS&I*l`+%s{0of ccvϯ>ݾ=ީU(RĆ ͣ( ~R๶и_f"g=LmU˜,C jà 儮աƅ{i'[l1q{(q?@f_w(M$̀x6/{Z"LlaYǓg/JIlFip=dt BM +οdն8 dHCz2`ae|'\'q`h2W(%#c9{ۂ[D!uoynIy2dC#e[mlXW(;;zYpm^d1E3 '?wB[GFʜ>@Dq=O,Iat iXe6\OΙn,;n۲7Hl@@WT`"-r}hm̷M[y=rJ8E̊l)s̫mS<}Am$X!WvK;2@048F:;tOUcL2 RdUeaU; +2Bgiѕ*Gy\ pЉn=RĈz+^nJdF01bf~=rP8SnsnI.]Xw9y\._teȚ.3{J9RHjm*>Hh{[H@uQ +'(0j \wʖoN ZpѲ,4dXrs38# C Y_&fe G RQ (°NUc$!.$.MI40@B ?#ޖ p&P:͂*ME}LfqȍQ`Xeq IU'J_ގAMgn7`LwKLr@VNMfBxYy-ڹ}:և=oqneGh_ MSXC`Ye@ZlG!/Btߚz:s c`]HSW̷]g&-pF}IK" 2lCXSF'6 FEߛ äf:""[43jPh<)AϢE!@I@\(݄(wrV$v `0 qN 4Ykhf&o+t+xbVW@j6xs1_>9@gT+Jobs'0EV$NPo@a+cn9L., x銑@~1QI̺8}J Ny+29.sA?5FFe?cbe?【59?a:g.&z@vOCHv9F8y|켾 O>ϔRSה0*,S*[U+7n}xyÎ<4o1":oQU S .ڣ^AdY8Gjo%7B?F o>]|INפ7.lF} bWֵnRb|(AO%{[t;v˭ÆFQJCaL#9^[pC 9ɋNDSji'hz#ckXntIprSK"`ozV0|W5PIOFGE:(?G7 }\Ep־Hy$r Gi7H|3V@< 7U")d=܋"Efz#J̉EYaեKFe9'C9uB]HEyaoY] Ϯ9Ve4Sz^…dnMsä02 +=Hl4$f*N)R HU1q `?ϪKF//7=+ҼC@aĩT;1* !'(uJcQsKz%hM8$呺`%nyꐔIb-$i+ BH.76thHfVRLh=[Pht+g\ї\C.l\$7q|ݥGZ#N̐/l +)Y*žrt}(IT>,&%);hT֏/_8 .:/0$l22.f0Tf7b ip3 d*H GZBK'͇o[ XdLTђC I&h] -әޏw1Բń?4$E$VێڎvM!2/*.sɊ'^J#r\E`x.UT.n%mEyJSeE$S +r[S?w$jd 5"HM?ZlpUl{0X=aO9i\"b#rPre•mں+[M1~B7Aׇ_JخB-%vP—RA|G^G=EA)?÷#܏ +kng.1?w]!>~`ƀ9xxQݜZ/F/ p𴨭B}'Vה{>1`*_ as$x'AcM/ȵlQd&"&-%x?-Mޑly]P#Yl9Lf@cŒs?auh'F^7PU`Egϔg|utrNr3tlgۏ&\XؤC3R=[ٔ +̀af.k3lwZ;aŠHB,sZyd|&|EG#:bbq&uv'Öds+N_B5Sw,+/b,Y~K9@d+#]r(92SxbKE[v &M1ܛ( 9O~׽qNu6( +"hٲendstream +endobj +6425 0 obj << +/Type /Page +/Contents 6426 0 R +/Resources 6424 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6423 0 R +>> endobj +6427 0 obj << +/D [6425 0 R /XYZ 85.039 781.388 null] +>> endobj +2554 0 obj << +/D [6425 0 R /XYZ 85.039 650.648 null] +>> endobj +6428 0 obj << +/D [6425 0 R /XYZ 85.039 624.034 null] +>> endobj +6429 0 obj << +/D [6425 0 R /XYZ 85.039 610.485 null] +>> endobj +6430 0 obj << +/D [6425 0 R /XYZ 85.039 469.804 null] +>> endobj +6431 0 obj << +/D [6425 0 R /XYZ 85.039 232.632 null] +>> endobj +6424 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F56 2898 0 R /F35 2888 0 R /F20 2873 0 R /F72 3974 0 R /F18 3977 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6434 0 obj << +/Length 3558 +/Filter /FlateDecode +>> +stream +xڭr_eND7^2%vv;I@K1E:$E;i%pp$1Di&"e,^wgb-:y}}vm"8_\ߎH|wVkRhNly;\ӀoVkK^rٻkO6͑_~%^lH3H ȈV_]/cz p%[%H)%q~xq%*yv:ruBb$qȋT.rcB(O"i M•x{uIn"騋_"u+ t`8܋(]uD\HݗzcQUsp@H~(x8(K 7yr2ڄ T3Vc]l,Y R%ȰpG$Q" r2gٕ{ 4㸒ٲ=tSue-׮ր9P a[n@N-w=mH۴е5`rXh9rN@; ͡.H|b ;#c\𑼟y?|n܄| +}M@ZA0DK5$&ڝ+ Wcöļb:> * 0:N Y + Eu{5[ELOL\)!"5P#LZBnO7S:Žlu<Ӂ|txnr{*B¤5"fؾ9J@o|(*Ց; GHO*)%,Ƽ|o*$]]Й/NQ\IN~ !]t"^>y$$b߽3qW6~a{PùUf17Nl(x )}@E`"ْ|5p_jL*,1d[B~qUښ,NxT=2_{D#?@Lv +Ba= y< 7T S< +~l]xhd`(JȒa7̝H[hヱSE}`INB?\%gELS%]H$؟>bvOqYϯb:7>tŸf8(jSx7%8 ||'8qCF2@` +mra`aW0?8Uq\(}2/\1 &0vn% W^p# "!}Yv·snaővfHzHb9X|,8;"y5^wTA}BGSmp_O Yir x|茖{Vllt67hoWc\ڧolȿf;ݦhWT}/3.B6LC9D3 +jعkX=[1.ox3 +;r8p[iێ5\ y m.&~ +nphhR r㒺I'$8!3%WLk;Q>1|Hs* |?_=;DH?2뽁R +G )Fe`)vN?endstream +endobj +6433 0 obj << +/Type /Page +/Contents 6434 0 R +/Resources 6432 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6423 0 R +>> endobj +6435 0 obj << +/D [6433 0 R /XYZ 85.039 781.388 null] +>> endobj +6436 0 obj << +/D [6433 0 R /XYZ 85.039 210.005 null] +>> endobj +6437 0 obj << +/D [6433 0 R /XYZ 85.039 117.585 null] +>> endobj +6432 0 obj << +/Font << /F64 3118 0 R /F72 3974 0 R /F18 3977 0 R /F20 2873 0 R /F15 2884 0 R /F35 2888 0 R /F66 3248 0 R /F56 2898 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6440 0 obj << +/Length 3980 +/Filter /FlateDecode +>> +stream +xڥk +!@ax$w +$6k_ i>P"Ę}˥D}{pp~Eʲfw,a滛P Vr`^~Ey/}b_jq_wo/WJ)O)J̻-|X?{Brz/%Ģ9R/(&U-!Ln ?J͇حxN/xԡuQ + Y'a0Ugm9g(, &*jtA^r?=09L~[a#6n.2o[Fn*J+՟_-4wkО=-aAWi~ op7(@40 x[L2>!C[k?Q;*# PXCc[0!VuطP󀛜l]cg =CLNJ:piQv5]Ju~HvK[޿ywgmw!|ܶZ#wdx!GD@=C?n]c"Cl*vbzr|7塢iG_es`8pKLG6Pe.*V޿jDu bo=QK05 ,b'OAqUvDhQcN'Z8pU-&mֱʖ3W=O<@?|:`l44e#K*S}8Vj)=Ll=w1`$P ݴcEE" +Ppqwkⶫ*HP}4zBI'-1IƆ'Y/Dׄi~оBF=Le"d0BӒ'sɽƉ} B ITnBTm@hoʼnfa{ nBtљHtiS{C恉 \+'o H?P?_d ,Z_%12Z++=#B%7f]+_`{,뜰R|b + =_,Yk&QàDi,<7JA恵fX@zglk"QlU*7w!ޖpkE-4R1Ȼ7kYok 1)KApD @|# 1 |0;T8xo DmXssꨉ>0-ոԨ8%Sy $-yϢ{D.6(aEaN!q]cSe޿޾ݒbEFCDݱژ~AġlCKB@Q  +jO$'ImD0Ip֣-DJׇtJ츼%B6qq^{=fbw{y +SЦÇQr`tRCNVV=:GB`{;邽}\?1endstream -endobj -1569 0 obj<>/XObject<>>>/Annots 697 0 R>>endobj -1570 0 obj<>stream -xWko6_q[D8oI vm\ Dl$ҡ8ޯ߹$nuCx_QD}D4it: -G4}8;:!e4b OJ7GÁ_pB(Q轋Fte7vںE4[_ɘfާY}/t)R2:KSXI\ ZN^Iı)uA9Y|K+_Ͼf\ ᄡ%hLm{D ?E=n4kDRZRa+'TN,Lb۶GUĦX+TMJ"f=¸ T*@r۽6rVQ2eX$}M fbKpRnv0= &atN@#8F!U[e<3녇50ukRqJ8"L:*O>q&ٺj͑ۓE[<$.wC$yf98쏝 -A7Q RG$ Ĥ2~66skf́˾0H^04ij6\QpGS~nJ4sQuP;mUV NA}[<//}Z-ܭۡ[Jd[.R͇G P't6W5ٺ,&QmQc)]1M -q 7Z2 wo} y8PAiŪl(" OV4@{nXy88U `6pDkTΥ} Lnaӱb}I:Ylt -?ݠh;m6Z -^%f&kLf+y6wmwr%:_'?[(>9 Q̛hZjSk[7lK ٭w -NU?? oSkk2Ѿn9ia&sr_v* A?`Ľ7N]& -^CTzf -=C|F[o/ՃHy,Zzj+9h4 ~U:1`=?6P7nV,=Fׯ!tp} hY٬T/3m_9`KzA8u֔&_2ϱ!!&f`d p[-`:[LgktR9 u*NO66I -;U)qb;mRaridq ?ߴ+DcOSFX\~bk\Zݶ d2`'7/50qK5D#ܞ'3h/OGendstream -endobj -1571 0 obj<>/XObject<<>>>>/Annots 700 0 R>>endobj -1572 0 obj<>stream -xWkoGίr[HޅCC>b|a$;dfטs VUE3yιh2Ofp4M4U85NSIx:{+etnh4;WFҒl4ÃNzg4_"o -nywAJ'Iu=+#EtMzIoDRimCyۺ/auDY& v+IV.+jd]mĖM|}OU8"&eɪj]n$Roѭ̓4OI_sF%HXOڬd.祒uækSi6ZJ: ۻUu.I"hc$(o\!?kH!3%;(ZF.]0@hsft8kT)=w"\cf% bR2pr'GF;ܸ}V,tIĵ+Z#F5KJRK?T0[G 1(d{k)F8F~ -F:-r1mfK12)>rȼ.!Ugh |% H'n -ngP/r p,x.,,~KWFF&d N><[6X[PXP 8`#?ˍ Yx2-4 Sĭn(E0.QzE0[M#$%bf3=8NSFQnAA&>nvMcR54ʶ`0~}Tq1RkYtݽ6۵_ E([S6R^޾:h߽5:jONd\קM\ ݴ[^c84U6DfCo ,o./ 1[hE!tHɤ-ͯ:h2J')~?:,Bendstream -endobj -1573 0 obj<>/XObject<<>>>>>>endobj -1574 0 obj<>stream -xXmOHίC=%wPPA*tR$.׷&ͿgvpV*gyfF4MttBIq7:шK~t2-,zH)K1m PHcJFtʫ{oQh~%*i;ֲ$ >i+\n-brx$ht b|2!;p80mPl%`;ʥ6Y.{7JaB#IN౬shg EKN^=K' c 5J -vbvOsJOh21~+sI`SZXVpiIj -Д/3tGTxis40GL1"7wz.=YEQ?4i-_f|B@SH2k!chPv17u,GפKvJ -nh I}c#?>_REQ}% ,Sf,?8GakRZ:])RMrMd Hi,bbjR:+ܐ ka3~qsUQ&qϊC 8ay<)>}&`nqMa2wh8ݏwhU~ _TH)F737v -E:鿎hD~ VJ fA6C -*謲\#=k0ޘJ,yU+QsNW䀴?KlNA:]N-# ,% b`tۜwNyESxǣ_3:pt?ǃgɳ *ac /$bNڍpƒ fU*ī‡- FOE+f8at/ Hpߍ0ÁgXmT -}V/)V aE0Tպ`t|Iy^a3Ncr -z)Vp}F_gg73twwsb,?<9a[M}{t7..URc#gӇI4dxMeڿ)Uݧ mKf5< 6u<9&'SfG|ϽD\endstream -endobj -1575 0 obj<>/XObject<<>>>>/Annots 703 0 R>>endobj -1576 0 obj<>stream -xX]s۶}ؗ;6m}Xy4ɭMd܁HPBM,@FֿY!:ɴpwq٥ ~'lAYuq6Y|)^VR z.KuLTd6MfUI5V+Noh5lqX]Me|ot:īuEmV_o.i2M`-VKd㻆 -e]C[IR5ĶĻI+̴qtP0yۙpӕxwaKu| C(#FKvuCWLJt4-eVFyNx+vNɜwk26c=H"lh /jM[@Q^a+T 0#Y \B^ -k*z2k)Rx'1%岁 -yO ؚ- jczJIms+c_U ҂R{JS's' fA/q@ls K;mUO[xjh,p3 (ת&&J xX֋޵dP={oe2[V8a ,}zp `+KoC=C(DD+wʱ=J(š˞D+eT[@;t h$~ń<9u>$jڋVhR{8E唄zer47Ѫ2:y5ܗjҺބ}R+1t34٢6B^Wi=)sVxPElf0Y [ŀ -x=@#?yZ#~~"g 1{@03a'j 6Kǎ3群¨F~` wUS gW8w<~GoLciՌ7xAh' -¸c>n.~ f#mendstream -endobj -1577 0 obj<>/XObject<<>>>>/Annots 712 0 R>>endobj -1578 0 obj<>stream -xWr6}W웜P7v;i#ig Ti= 3Ǵybٳ_{gB) J8tGSьJ-VѸ+hݛWъ1x;~ C4'VK\tɌ/hNx-–3MotdbM&该}o_mcNe^ܩg2Orުm#AXd2;$yc -G( -OXRy<>|ҩ98{v^.-c;nv1'='EJ_/淣s8qdt>}C'wB 8}eJG=Agi8E Jh'Aoˆ'az*@f45*ۼE)Gk$PzOknM ߡ'S:'Bb[f6ՙ5%G@?e͇hF7432aYMENx2bjzGJaD(~Kə&^i}OC^"JTz܀>޼|TjC8F%N[qF6F)7&%/P\u\ji (W0dG"S}[á*G7ВV:@d@*k<5] -@Vy; EEX#qĮSAp@ʿHOOl4ұJ4ް'rN KG:E/:*dߙ;lo -+iȤPn/=Ӂs֯/,POg%JS"I:Xv,mLZYP.e j2 Zs(, ) -b>wp`l_vT`YUP)D- ^YjFWL;ݠ]P$4맭_PV*QETg TS[U-93-1 ȘfBG28w* !a}| M6[vbx9 2`QVlm1 -8so5E5O\2([l!f/kG0p_`:\[SoN['uUnl6(jȼ29Cmʠ{Mp r/o ʚw~vmgy TAG\*SqŬ̀;Vn6@3SFH|{f<ԥ68L25rVYd(f}s5(L{:X^XQz"PkxKoZ2`h_M^i#}1$*LS*aj:(@'Qp)4ڽH@ U칪?iA**Ol,͡(xb;V$5Uq  :in{BwF+`0h -Yߧ{#"'ZZ8I4?jKY_3;eByNYAR^>Ppxw,5sh*8XUTEG05 JF#Y6 wTJSTpvR-sf"b4n0ރH+.& /S?8sc4iE>>|rށgz8<ŃUwP,;GX)e9!4p>O#b`_{`n}*( TO{3wahwtbL ˘ݛ 4Yऽi_rX0[΢bU.g1~ >endstream -endobj -1579 0 obj<>/XObject<<>>>>/Annots 729 0 R>>endobj -1580 0 obj<>stream -xXMsFWRRR"HI%ZȺR  en|R7=],3u4?c(NFoOoO]x>x2)|h<)//7'rduM'^#Soh{I.֟ޘW} ~X 4@O:AB\j#|s':J 7v 4l}ylYQcl=jsjKDZҘ6tbq t@ecπ!զ{􋩎u" -! 嵁/&tDc9rdpoL#wvy{gS!hvg)ҽfd$0&EjrwQdC"@bڲ>ˠU@ʅRrm]iR*s7˫8fyۨ)ā{H/ňPfV*Uk-0Ju~۩+Y,XBp9!;}W>Q9©;]<^Rm0:7kpuI(V/O>߭׫gpB6׹|ejPe{z`M zP:ke!@",*^ x$w!GB+{X>ݻS+T#k0zP*+/(,\2|ek)cJEZmXou Ii zlޠ|:˪G ;| 7?ỗsl57{4Y -vW3Ϩ#|͡DZPe-w\'++) 0^Q_^ L`ˣRg;Сe7?mph 2F;Z|-VIZm 7#gX,)б2`=)5ҁ(.2F&hzQ=,s kY=a:Al!C{]3L̠MtHea:GRi%[JTZl~K }i'g&juMP}C[=~)0.wCWY1W)_B[qy pо\A3ٿRZf[xP|Y) ȭT ^-nf}Gz燻P 3~6|-"C=Ӫ* -Sb?>'qET0YH՚6oB)nlS!~”^lS LT8`P8q -r|@s$>ɈLr04-% NBw!q莻JǼ1H1T \ŗ ɝ?Yx ]֔tuu}EK+ߝMO.)7ZLh0]~|BRaG\Jya٢O,'x.endstream -endobj -1581 0 obj<>/XObject<>>>/Annots 734 0 R>>endobj -1582 0 obj<>stream -xXr}WtM^i%T0$gpg_=L1.l$0ӧOw{oL#3 MTԽQ6“?_>쒦E6󷊖tMi:f٨oqMcvy״}va%9^Ä;v;8Vk6qqyARѪ_W{u8u=ŭOr;)\F~}E)Sezj˿Y}h8fVe(x/EG;ʦФGS4*6WxM3OT5g6o]Ƕ/8X l4҄&%L*[Zh=C7qk -\#4/f#d#"? -uM&Z<:kU^9x]'IAlL`pPY֦*:EVc_ -WT zc; -n|XRei9ğhQ!%-'?-lTQPm -:Ulu3L$׼fwG_ zNjZ=wM(7z=!Df@gK1ݖ@Rӓz L+\uת?!!XWmJ^jxHʂphqC9Y 70Pf0M֬njv8*aA V bwlc;G h'6xajL~G"<5 ݤ*ܭu5S+>=Ơqlۙ·7A )Xw0Uǝj26MmXŨ -EW4\RZfA%P ;Ur@ܕ6J=5/d6 -rBf!m?CS`]05 g5R#^XhPQ*":kohNf₞;=̢N|T{I? su$k-ROP@4h!bEvsIoƹ?Mj -ໍqsQL9e2$_:H{m$Ò!ٻU Z,SwEakإ4CZnC -ɩbpQ{?)uڤJՉDgan$@Yѿ5@ެ4^0*Gت#t1nN[i1e dAY%=8/1]MNTK_af8W5@"y/C,i]8$8 -s ,+xvUm-Jc[oy1VU]!܀uO5 m' IQԹ.Gֈ78=F -Q2NI{LtاNCjwF䖗^oº]  kIPƻf'N?dXtKF={D', }_uVM1s 'FHW@TxU8pH?B (w(JBG0LUp;PD~ ijȈ+mixhFGdy*1G6Á I',#3Cnվ )hˢv~ 'Jgxv$.Ohm۷n0 X#\oq,? 9ο} 9vI;|3/ GXq|EN(D<*qLd --k;W5Mo|y 4#Ouɿӎ\Qax"YC5~_e s9|sV׷o޻o<ʽoq^Ҷ2],{YvF5aVzendstream -endobj -1583 0 obj<>/XObject<>>>>>endobj -1584 0 obj<>stream -xXnF}WCEK,iQNV@/+rimLrҎgfD;HA$^vfΜ3}=G4ɔ` i|zi2gk4_i4Kq0#b47>X_Nh4e-3©!-Åsv8P^g-&gB -{g+=6)όK[qtꍭQJk6QfKe__4ev(ǺKS{\VUF ՍMr }2UfW讱mg,y\tM(h%"~4ßֺpbt8ϭ% Oƪ,Uٯ9@tIh s1[su;9+_* -!_ n9!mwp::]ʸR^QYip7Ýr=r^ZxBbkYnW'!dpianA[I!T+4UYOn d?jE@ 0NM9Am87:^).b\p=5 Nwӏ<ӥEo#U8CkkjfO;7$F%-,n`zFudKzdع -Tr60-`X5i"#n aȞvR5i^nWʃ(pc;uL{okQxpj^hP^S*]D;rskAao~pvȳ_Co+gߠS/Z70]W|t z ~F!o@zG*ːX#P`n -*PNTF2=&;7TRӛWw q"1|.Ԧ+tmPB{5{րdS PG=/w& 6W@)"5\p )tb/peprLx`*,ңVEkGl(WHCfYRoӨ7h#q/_ - -51al.#ʧ{0#xp}cP}»r9{ -['?vkKaMpKlЧVMjm/qASD=ώzug7]?xb!< >Ϻ.jƦn0y}1w ]*BI -1s&[79=I-<.a1|*H {Q/$A:<{|k[`bb.# U/)|)ήNBǗg4\`2 u~{}_Py# Fj2j"yyy~ZT;s~xWbປu6X!L]3B4.VY2 ߎ3iOӭ1 oJ2 FxfBhZl*MQ}% 9z0ġ`{)ې*Xbq=ym4<'!,c l7*JJ@(@!^EdxzݱGǒ&sŠ/XR KM ȏ){,T8{ (YK+UL,&lX`j0{ {:JFV[o,V=P/_bӗ#p[vh+{QN|EeaWac)b03uُy( YTu6L=w%}S2$B+熾A5&,yV`*oE&o4iz?Bśsn4=L&9WMcUl̦ɔ~<_$pendstream -endobj -1585 0 obj<>/XObject<>>>>>endobj -1586 0 obj<>stream -xWioF_1uaT$ZeIP>@VQȥ1UK+}KJ2Eѱ;Ǜ7o_B_HN`HYpJ#V҃/Na0Q4 BurZw?LFpGfDaH(!gxJpHwZO6S1_|CVɄI\+I$>HWTjKX*jci!Q]UR!)%ESVZWJ+6[^JXU.I  -}rfa8+Ȗ6F-5ue*O{KX4uѼ'RT>x2.ZS "-\&*Me%KKiO͏c0Z')8B[d2] Rb@l&X%|o$]9\н hq=t׊PmPņޫ2(B8)1ג:;'ry/ke2`mO-3vw *8UIat٢ -lhLV|3a)a4FL{[6zt[uW%$B' -8K:42+e7+MqMi@ekgfw԰ Y#^W ;$r0쇍QRKc 0UېR3) QMqJׅ \h~w}҄t8?ǒK_hfcg^kU!Qat* > -es+P[nEVZ1xMrk+YN۶ظ>юLUX:^3mPq{pX%l of""_G]ɶQFSmE'zBXJfZ N`zzL(FY!̈4i\CjQ0$+BB܌A4 F˟8m-#JW$9KioA.}hq 3Ш[ny:FJwNT!!HQ*p2]eZq6R*Xߥ-S -FKFqҒ{- -6v/(V@资D`V`Z镉'IECa#`T>/XObject<>>>>>endobj -1588 0 obj<>stream -xWaoH_17q$ECW 8Rq'^'Klo]7Dߛ];n]N:݁*Jݙyޛɷ1wLΦ'hDi4|cI7Ϣ8ο9M^ĩWsޟGycZde:"%hCɋ^( -6%Abc&Dn2Wߝ<{]J"B0dU2#G?E@bO qğ__va<僀L B+Y:K{VNeU)[j^@ނl:"sc~?aH8DՎSo){PwmzmD&be`ꦑ +!(qţ1 Y49Eq'5Lhўjfl% W`c&Y4Љoh`_}ôQp\09 X&[)l9r֖΁OLX}px#˪7tw%]o@=丆'^ht+AB$,:8.]I+I4kYk̨\c:Q8 NX6^g%,+\.3%w~f -UBhLTh93 "Dyt{,%bȰpG;V@a7@\x9e&À*py'x{\6 /*~e)"iȇJ*=X߮[--뇝FV+6B^J|Ǜ3^4ͣm jyl 0Ȣ ^•S O{Bau,#Q L5\5nt'D(cpZ>/XObject<<>>>>>>endobj -1590 0 obj<>stream -xW]oI|ϯh%A;N)p. CEh;k13qz>֎tLwWWW<tqBpD':3ʃWӃ7g4ӴĉM ӣMJ LCMA.-mtK?.iQ[Hj4VF&7(+;:H{8|1q0dxxG?Y5^[:RqZZjWVApy!U߇ V#1p&$jՄr8\bI|4FD-AFlȮdJJUcP8^ q׊z&=JaOUnpYONGi{Fύm{nuѣRW4 Lʆr#>\Ӆh^||E@EUmRƾծ - %qp`~r͡ZT bq {1/ϦD. Tg!ѸA:PH}=->QO ZIS+knO]ƨ,Ԋ/xck"oOv!0 3 ぶ܈\4G E -SU֬^I>U>PF>0߄cڐsNzփp|JeVj :L Ѷ _9>ڵ6E -] |B 7ےXI)CvAϴ[F]'%VŠTK21~~on,ZFݴ^/@,{NYwM73^33>ل x{D`+RnZJh"f?åYe4YƁQE.;}va~ps#1'! #r#ͷ)W'tOB_L·o~g  P/pa$9 s -9 hdGnwfMOU,AN-`@.A)I몉IMxzP[`f"_bAWt!^XFJcN/6ɲ,yȏArQ/TQ-=ً@e<ݶZb߀Upō&n3E/n:/.>:N^\tV -M"r]F^}v -DLܳwq <$Tg6v8$dyrX) @sf`G/l;8 wwmWkW]0YRȠ']9IhprNӫ []x;)䬝P%dPDԻxdg@} -DѶ/_m`[]*`}u;ôo(>Mx4Qkc旋yZ|.@&דt {ʳyv^\ -k.*>6.@(9;pL0t1wQT Oe /Oi25V:oN8xnbtF2^a57)ռ5Azuô9/j輕Owr?] /&a8uI*endstream -endobj -1591 0 obj<>/XObject<>>>>>endobj -1592 0 obj<>stream -xWOH_1tVJ$@VT8ZrREILl&ofm'*]+{Ǜ7ofh#pBq~Fh&Ӆ/v8DO_F0~4dcXM~0E|<шf 19,!=,~5N"XkZ$fzF_];|j -:g0qԚ'~)H󔙥 oWJkiOG3JV+fWl>3bUнlȕ:NN`ښj=JW=kU=\8G4OC1=[ZNi@)y>-!fXǩ^ ww+kwwW''U$.6x8KAPiEWz pb*-<~б0Jn@*Wh^?832\{7,8hk*ZG͉s^ @ԖC2x^0aLj@q#@TXvGuoTHl{.u+Se S5l{^'[TŖ $Cmwg/a,Q{7kRDIȒtVೈ0OR#uHBJbySa.Rd}&ϜiK$ (n.nIpp9L, ʀ3KߧB o66om96T}QeY}t*ݽa&K{p^]HUSC0 :[HuRa?l*WE,TH+4VMN:6-}$p!"ծuO=WkcYY@
)bES-Z pF`oNTҹ.tm;:/=&1 -)"-bx -~^TӯCk@|M!&t!uze0P^DvWhQsB7eOkW$+JUӃz,13.;-X|14ýY&b׈;EVѝ!ÂΨlɪ qe-pb +?|x\dd[,b2Q΄ئ܂ypdf#d. 3-KuSfhX^4cG aDE}"]V6lN -oC|5tQUk<9Z(o9 CMgjT|n^j t qD $>X|Xd+Tm -j] -KX{\ q?u "4:/[z+nk@,v ,sc[zu |]s_S EwvјnzKi$X"BY{v]%l0MS`@f8#<͟">1w?_s-G-6)@yA6'CӱȒ2_YaQjQ`gԁǖ;7˽- S&9:psro5D#m7l'99 PozS[DێOkKMnE9/m3PAˈ:cV r5d:,ٌJ+`laŶWqL,{w [O-/a0bq{:Dv ջ1D2d jb:nCXxRtG\Oir[!_>oϯޝ؅v͉txݓy[UWń/Bm//lhzM''?>bendstream -endobj -1593 0 obj<>/XObject<>>>>>endobj -1594 0 obj<>stream -x}WkSί* [%T{7!<.CK#<iF;38>G0*9}ALCihBiyi48d<ÓxBsC(qfNgS|NJ?}4|]zFqL9MfSZdSCZGh%4J?ѭ5*)5=I茮h+4~YI%ØY4K8ѭR{%bK2#cIX+SO%xrSfOl,Kk_GSiejwLZHS& qhytRԕ*]h6JZ\ԅk,qJhNz+j+Q$bPƧ~Ub/o8I '>Za8(j!C*)32хp$|ZU#p:w Jy–HpԲrHF~-F7qaSK )ЈP7ԻOy:6ye'nmkЧze2RcBT|]Qk8J\Q1Jq򈫑?j8Hυ,a$\a,zF/]^ UUV sͥL^zQ-xe`Szea-J+p<0 ޠ<nNxlKh KŘzW?687iwSc{a0K`s[ў!Ss =9kE a?^XNOd0rշ)n(endstream -endobj -1595 0 obj<>/XObject<<>>>>>>endobj -1596 0 obj<>stream -xWn8+pI44rMTt$*f#*IRUmEǒ(̛'?ggt3Zr=;]W\J*gwQR%a)%J_o'QWZtTKY7ZUVvo^"duKxr@$zQێJUIG)T\x05Go.:!-rd$)4FkQXNu pēq&M=I @Q,R~2|KF!*kj-kO[a*.[rd^ \|c~F^Jjnh=衯ikG;J_ -*%l[CJ7TRSl}vXrs)oС%NUMhA#I>c o 2.ԦrՀ2!T -Q`OϿO#_}a<*0=32}`tT#$׀%ItZ'͒"A m[ ^Q 6bNth;FzRvrKPhQHhva&KFR#V1%P8d$j"-0ILBc@¼H_,‹L8@\'@%nE.(5Q 0IjnܾؾRI;h2vszmHKiո9^imXHn:&ohgIpUҦP,n)Y=<9T͠D!@ ƶmX >+ $g^N&xrZ™YT(c$.W $bC+"s<LP9vFl#\.Z݄DŽݐY#T7(mZz,_c=څtҴ NL4FU[L_+kv [G)XUJ -I(SptSp3' QnW\7F2\c$z1'R{=w! ~pJңgFb TȃOZqBp`:+l8w!NxEɱ \gsJ!d; YtJ`Pcp%UaaUZpoVrah[ns>/XObject<<>>>>/Annots 737 0 R>>endobj -1598 0 obj<>stream -xW]oJ}WԗTRInAʕ<,{c{:8UUkfΜ93tǟMt28>Vv38F#:L>e4FҌx i4C-%-lۘHżs|}F>͗i<\ʒ&}cK ?W]LNzn]ܖ:MqO8yW2Ld Aͤq]L 3h])KR)R$*_ pqB.5`bJw=ke(uH02,Cl -|:[V,RIeRIp'S%#Hj!oR{}FÀnh9XWa޳E_{DVys$ȟIJ祒Z:.V̵ܸ¼Wy7npDkW'2Yvq~r8#NIϮF?φ -%^+ݓl?t' -a l$§9#ÕݱFE,Β^"F#sXZ]ٝ.a/anHEfO ^*P qqGU >^Mg)`36 c*|vy BU$8Ea7AM+vq)}sD}{jˣfe} 8 Jz<>\\P%P -`e°źز߼Ԉ|Ok2 WTuHi`C4sW -E4}4Q8 ïؒ*4)`[jX@=瘥38 -*T2ѕIFUм!\ +1LýIƒu l&Рeu.ի~ɉ]pMQP4D_K+آYZ޵>$Y3Dj4a@"|k4v/qFu CMf{L6NɄDn 8jb INt4Jj_WB$|zgL -5 !ikr2D7^|<3a{/ v HGEuAʘj) -1vG`+6;\ N,u¿@ lh\t&5(-{F*&ad; -H4BJt)_Ô ̂9h.-€Cť6zi[֯)9L~0q3njG(`(耵?;;/A[X'? FQ4Oqz.|wBendstream -endobj -1599 0 obj<>/XObject<<>>>>>>endobj -1600 0 obj<>stream -xWnH+C$ >eD$Y~V͐2Mۻ"0"in:H2h"iyOr:'CϦ<_eg/g2| '>dd jwYD[;|n,sIJI- -]}0 c p -f. <׺1p{9~P^v¦ӕx+ -jSu&k{7!ax}K%ksb/YnŨR˯)Z_Uvov:s` $Tol@=L^mfu Fdv6$am sدR`ɣeL9Io?k8de菣endstream -endobj -1601 0 obj<>/XObject<<>>>>>>endobj -1602 0 obj<>stream -xV]o6|Xb8p(hӴ6PMQPeN"7KIN( N3{-GTj^.knAJRe%$꩕&| 2pU[~eV7s!ޠӸ<:~2^.9 -U[(8VAIWϠοB睫CpC # =ʆ`K-(8rll z} ``Ψ"`C)\]Ka!8.:!i<5Fo8c7/`v=IoGA|(zU)7szFN=Yvz={+kQNV=&Y&O9-7E,رLXo@o7$]wB{;~xYꦒPNyhɉ\4{ۆ p*wpq>NZ7 - D5Yްb=l/ 4U`TKr(jmrUfp*^g;!tB,e,k-]OQOY4 }H>dG5P(|0?5OlқW Nendstream -endobj -1603 0 obj<>/XObject<<>>>>>>endobj -1604 0 obj<>stream -xU]OF}ϯRf'1!mH[T==)m4Z -܏s=m?}h[ bLSsT٩$ ǴIPd6i -d;V%eIIZ,)Ԇ -UD<4y^fG&WRi4ѱRZ}xhJd8ԙ2Z[C2EF?Ǜc3_ڪlCF"X#j3{"83!>q9-@JtGx6ڒ2f]ԫ 4N7Ybr/0:*ePab˃<aGEmJ -i/;3ADeJyXࠑؚ8gJw{en/tEw͙Qd -Ou>)K%ڭREZ+e;ELz`8mbH4WFqؽb7Z7Whf&) ZBJV\ DVaȀrmz/ܑHm%KEbik$H[ilZ8@Ʊv-; X+u)KkxzMaia#N?j Ԯ<(& ]-7JƺN/B1tUKuu}QUNkFs/c])֚D N=#hĦ8b |X^H؝1`ULmy6@dkdT)k 쭬|5βX?wb >-~_y׷=| _E8{qVUG1b;Q1  !y,ǂn13Yj[ 1{r"J-(|%6U#sA_Crnc]g\"H4#>׻f\z4|q"`Ͻ1qn:㤫?>endstream -endobj -1605 0 obj<>/XObject<<>>>>>>endobj -1606 0 obj<>stream -xVmo"7_1KSذIJ.]:5`v 8{7U}ƻBhY3<3󌿟_LugM~7⹃ n?O,(]|n-{0CJn,i9V-LYZq;aNT6Ʀ=n3ך$9OjY)=mMiIYZ*ꭕ"I\$~yp&+IjŠ`|%F/N~iuzE~&#h-\Z*צ@ZE7SRj6=i)Sdd(tJ&K@)2K%k#AR T_r"icu V2q gIIDd[G18."&W!!yY9lRYZF^  HZJHB)&-\{U~xXV(E4,>XyDf9( J`'ZKP v!2y4A51xd3V|q' jv|3% -q3r|%n|]\0]ƗO!GLۻ#1U%"D5E!- n9Caԯb kP j< -V:GfQEc=;XJԅ ;õ\ۢFّ~ 'zl*_+|X n#{dPuHDJQ2۞0ܷh: c6gI -.62@);_1h\Rj ;CQp02Ӈ,A9BF ё{XA"R"iJ/8pPP! VY:4J( -UpZ8s^G7~2aF#=oz̡n/p J[?O@KL^\&Ԟy=skuzH˕s<뾙\X^^YDnQԵ `d9 aH T/.b09GQ?#7;P0x{lʱO ƌb"4^Ņi?*;eVSG wp -xcm 9ĦL6y e[ɵ9x.k bڣ. b\t|s9{kx^za@lo |S7z^4ldvٿ:xendstream -endobj -1607 0 obj<>/XObject<<>>>>>>endobj -1608 0 obj<>stream -x}_o0mlOU[:i6i4 !.o:ӈPsڿtEH'&(1#6A<8|W,p>|B"HEKPy1X -,mD1"I -~V.UwhP!h%xӽF2־)hz-JHt56¬Ѷ{ޅhM$Ҥ(Zilޑ[ӦdTҢⲱ(WJ7$,6W aM*Tڄt׮1B^JWн}++ۻ|_PiL0=^gݮzUp.vŏPN|%Oc;Pn^Gy꾔F,8@D=V) FI(j)/qaEWtO|NlDZr+Q6QwheZrw4yW܉NڝIl7٠YPoo!^җm)y˖hҠ?.5*:hy;1Jɦ2Z:yFendstream -endobj -1609 0 obj<>/XObject<<>>>>/Annots 748 0 R>>endobj -1610 0 obj<>stream -xWao6_q0ղe;i tòDl%%{GR"X Rݽ{~4Ÿc(d/y䒦$ê`2'#ޜLI\fw,cG,dJY6 i+oYYww -@N/W7 |Y/iUdK>|{' -Zj-HXtHzG*t%Tla0qa%4}bjl#~ѪVD wtA]h4:@3vpemSI:vAQ<ҽ}ZPp xwOQAHpB݊O#tb S.R}o?N;Vr];XnJ~ŔSD89CJz Qƺj#Y(+ӿV7ߍ*%9MN"؝nʂj}6VQ2[ICS3#$ZJ@~c(U-Ivږz-ʿSfr(1xvXSsC/nZbOmlW{{YT6'SLٶcMSf͵2@͑HʳώH!<%ǭ ޿&ڊ'&}v?\߱UЋSw9'4TVua۽0P(a?`Yw8`-0JTvsg`ڀJAD Spj1>H(*F%4h_Bm` -\3\E&gБ4IDs|=9zE8(HpNV(rǝp/ -.. ޟxrR%ta0Ƌ'kAz\d,$آ6{hv@W%8\ ~DyX" ØPXjqݙ4l x -77U%}],C`p+O֝.@AϨ?, *ɒlOq7ZڄV/x" sm\XZ$ۻ%‰@Fںr6 -o*Ŵz\l񤲮_.cs -3Gv&- UWMn+Bw!iTxϧxbא0Ųڋu;6 -46ZOKt|vw5b`Uʼnrt2VhPԎ_VLIK(ldcdyPE*Wl}Kvz6!_ꏚpz2Z2~VQxLjp8-m| -"hoȎC% oOZ}g,. .?5endstream -endobj -1611 0 obj<>/XObject<<>>>>/Annots 755 0 R>>endobj -1612 0 obj<>stream -xWn7}WLjI.PHQ6-j.7$׊g\Y^;E^9sף oD1MfWGl;?7lNlFn}bcw`2aQx84^LO/^~O`-.G40it:Y .AĈk2[iYCZ'ZS -[)Sӻ߯WX1M+N:M5ǷoSE_soWOx!vuLJښیnTpw{EQ+ );r1gs=}F6^6=h|ۚmz0=?<ȕ7k} 維Zv~sB4鍪B[xm7S (c/Lmyo״u&L͖NvݫnVU+ES#yEkSjBMy*pl΃u;ݘ|CV[ۖAIgT[WяQn6h6WqWj8J FIB;,G>Û얥ڑ%]'\r3U"aG-Cෘ/z -a]J@E:H Q9n\CݩJ_D}P.Ķ5,,d.1'/(=Jzz/zd"E('iNO!8^9 q66 T{ -i7Yv9Ldq4Mn~K;.X'EP*̺Q|& -uNGޞhCD|j4M[Ȣž8]ԥdi9ӦAmt>.RCE'}ڠXx~JI]߶Ρ,^9$Q}hඐ.~J_ҟ&-"rr;G"qPbIVZ3+ۺ+ ; ,z <{bʱb8BjB/Os\ ")7#]qp8ّ7)Uw- $ۡJz^SXr4Xv @$lU x5řںO;*TxSQyxBЫ0G~a k`pȈj{6K7oeuF=:y8u,,;yoZμ':8\N 1pactv*f*5 2L98JVJd◸.l(ҭ{1 /k}|;-w\Gg_fn48ĺ68m]cpAҠ}F1'mJ[' "+ǼMKP8`"uqWɕɝvzŕN -ch} X[P [)V"P^Lgvе# -a=R?5D"hblÄx̎ѵ#1HA5|/q4\$fp]Lh6C72oפ8Yl>@8OlK yˣ?`endstream -endobj -1613 0 obj<>/XObject<<>>>>/Annots 760 0 R>>endobj -1614 0 obj<>stream -x]Rn0+1W)7N|%f Mگ-B >fgvAYDA(B܎_߂DJB&aƉƨ!c>-L|.MB%"&E6 -(rR/cJi5)y: QPTwqV9[aSp){(j:B!'5OT!RT);̺Uv44xa*Ϥ2% oۧe^c:69~8M{xwKţ97HYGR:3 ^k/KFjӒӰ'UG]]=}PnmS]"M|pxvA eHf"9+߮Wxi.{Gegy{K_X쌫[8'V1.Rɜ^adĩ"endstream -endobj -1615 0 obj<>/XObject<<>>>>>>endobj -1616 0 obj<>stream -x+2T0BCs#c3\..}7K#4BHP$YSO$3?/1G!9?/-3( jP04hՅ%DhWH@.0B)endstream -endobj -1617 0 obj<>/XObject<<>>>>/Annots 805 0 R>>endobj -1618 0 obj<>stream -xZKsW!`x$~J*DB"b`в}0 *ZEn$s|6o*Jf+Xg;xwWnR\gfZ`Re\O.VTSdz2pra2fK3*X0a vb0`l-bh` BшPϦ "l4G ClH(,2ňYy"i4@ΧGR1,q -L,A`3،iY`3-KxjwN,qYgs4 -+^1)\Z"oǐeL+vWkYX9K}Lj4 "ρ5FSCޫ U`llKv,:riq^Arb]1 vEׄ9U򱩄 vOY`Aѐg``W1X5cW~v܀bf_(~\.X,@1ZH* 0X`1(_`#QXbY1$bFY`;AX,YH#va)DˍWHL" H+` w˔< -f#X`1bbXI(h]q0^p!o`3>.EV0(Qa)6 vcWd  -v#gyd5CR +$.D)/9!ˤ` `Xgrd]93.,JIӎHC2[rsN[A/E)#5dJ#RTX`sX -F0#Y1Xt w(thg) `G \µI`q{TQ`W+f8 -K7U vpT30[R1jV*cgdD.[Ab@$J7rDabp=1*XLq`I `$Gz]'O1=ጤbD~Gjj=WHPwz(FyVBY;/%e9#9`^abۮ0= sT vl)"`Nl -܍ -SXWwN`'Ɔ,4^X`WX`>f8Y,JhԬ7~d}h&;=|x$܁Vn`}/pG2FJ#RpyV0ť}2w?X,HN B{h ?U w+ Y u=+;^`C##5Zܽe"k>TX/?y-?2@I!S&),`$iѥQ12BM\+ШAIHHtAT1X.zifňSvZl&+,WIL-y0DQs"k9QB8<r156̃y!$iL"7m)o rvFa}h0Y6IN.@$ @p{$ș/:o#={5|nt -A _ 9_[88 >p'~}8p񽾗## 8J1pbž/(7BƗ 8\?G]>՛\Ȗ+w?7WMW_g15 xm~.o][|/|;5E]޹sOyչQUjwjnˏ]Ѵ ]7+mjhsN$خµbS>{Oy~_?54E:_<6yWV˭ZVuU=ͷ=YT^A:Eu~(ܯE[OL-)sU7~{A5.[3=j3_)͛]qH_D٦)E<- tնfwA보¾Cߡ{VeP Y -w]t>rG|Zz %!_nnC>\r}o%Kiy7hG6é m]^m&j[k;y #0LSgd-6]}dNqG_($swYEq omc(NsZn0hpV|~h8P#Q@ȶ>QFIHϡ2Ӱ#<"OwS4C]lB޻e?kS, 4hH`& N -I"|_? h|Cu}H\zy180~w|leSlyv‹Q(H!u={^6-m?,TG\I4bmMpsџSg9λ)Ox/{iݼ8[4:(pLN3G8L~ <;>8: 5-bZ9n`F ,w_MSCUnۮ8)ЗvH| @V tuFVhܞǺ^dͺ2hZN2pA=uտo WEk6GxR5儆-#x7_/yq.Ӳ#^&d)wo$l.,~? ->endstream -endobj -1619 0 obj<>/XObject<<>>>>/Annots 857 0 R>>endobj -1620 0 obj<>stream -xYr|Wc*)%Kde+]+DBvI R}9rvϹ_fH~"W.zw!gEB/rsE#غ w. 1`8H-TUzx1#*lf9+` tV5g 4 " Y 2;GaPbYv,vqBsiD=`ˈyY՜$ѬYiX*g$MXLxe0t5{%U4`ϑ]9K,j$H31}`Yq,k0#Z+YvdNЌgq@ vB{2fgԮԜ0^*YړfDFʆ8Yz1rH/ G@IwK05P]deSXՋ> AԪ$' '.@0-H,h1XCdD-qC^`+TݕI!ԢRHIZ H=k0|gVWHEc:CmƕjXg^V5Dz4Y)Q" ` f$l}̞`-2<@B-:3iTxNFs v:^`D~Z 6I4[ YM\02re4 (?L7cLd ;s2.5OZLw#E5?5,#Y.YNgD\:>e'<+iI dI2F2 %H"* ,Dw)gB_!]̤T^5c@T$. Y\le fXt/k1 Wg5q1oՎ cwb C3^ͬ`%h7_h.x%H4x=kX٠j&Y7FD`xyY5WaGVh6^\5,.Ȳ3"5^*x dQ} -LzLRAbVFSȳe>TȊS,!Ia1R"3CS4D̀B$Ұp92ce)b%\)H#\A '3&8ܕS0,z̲Q I]A S15|P*']HQ7 OƁrwOUn ܗʗܩة/}Atrqۺjq._6Cnkh: c\!}>mݙ`$l6u[u.g4{IaޕFlN4_]Ӻ0cأЕKeΟ/P]7rlFˎ\;Ҫ͔ܺPėY{ڵ]Knz~qӟ*MaWCL~wk'nQrFe9M9- Jk)e4ikwM~&Hah/om%ے~}y9~oK6{j&CJ2] O1% |xbǮ?vv"㫌qy[9SUٽTޟ eG>~owky@ڡmȡ5֗6 >0 /wVauzhbUtssJ"ү定θzXvm -vZ-bk]XSG}퍻n[=g P퀈ׯ^8轵mC'N;6|~? {;Dy_2b+׻o=("aΨ¨7qy׶oƦחC|Lo? i"s#=÷Ő?vwu2?3y2So_xuySn4wee.h:]Hm@/ayJ[_]uendstream -endobj -1621 0 obj<>/XObject<<>>>>/Annots 901 0 R>>endobj -1622 0 obj<>stream -x}XrF+搪$AؗSʖ#UsHBL j$T6=YǿdRSm緋$|)nLzfPpc02Ej 6*fj 6 @* 6ͽH -oLG6,r{IH26lRvvl*Ko&"< d314bf=4NQ )`キsl( rϜ }~&m_!)$F kX0VO3^pBPWALs&?qRDk:!["asfA_'fR U"$䚱SAw`SNbf bm:($H,I2!$,;`k,)TzKT]lv}w{Hwhަ{hC{͓L -|X{RpH*}OV, YjJN_*wXQ@5SKҚr}6!`f/f|~>/룬g1n۪+H գBKeUMf#1p"v *Uҗx6K71_ (yU .ϼ/E?m>/XObject<<>>>>>>endobj -1624 0 obj<>stream -xVr6+DHє&4nڨ/ hH%@Hi;m<Iaݷ*bZ%(тmt[I{!YǗ~^RXjMۂ-ŋ>h'pJgta-iMҳrW %)P?z'  e%qDE(8%(E[Cک\)<ҾӹSFjB+[[2š:CR]%=@!k@1B/C\’S88BsӂΦyŒ9ģMeh`"<_$*/VZgh6K87RQ4]Jw/4 vpF_CVAD+ؔG0ɵiA8b;%N89vE9Byvvmݸ!q8D otueB;d`ԇ1NpT ' j{A#t-=^o0rUs; =@ذ;B*<^#Fo| /-.(9ZE1+*A9*qw8 $DCNxw q'w&;  -8ϓݷ"TwR`0곱S?4Ejq:8)`IoB<樼R5pRbɎ@Էߊl#kߐz_-0wbJU=d^z f}endstream -endobj -1625 0 obj<>/XObject<<>>>>>>endobj -1626 0 obj<>stream -xWn8}W ڇuXİSlnu/y%b#.IRen/h*s;gΌ~^h3ZfIiu5M͓9-+<_+)/Eb6_|~s5ٌ69,+d)mґYa {$c)S.+ҤL֓/$Uy -R*,I%i>Rj*|ߑѾ){q5m$J/4NvU?IlH$tF; O\=ˌr$"qn/Wi] -9I ӕԞL ڡT$t+Nk{i^^=dA}F˾Yta|B|Sު9Ei(7pN\p -kۯx/me`)FʵCp\U87)Lt @ LZT.-R!oRSe(Y`0*_{Т8W0 )9 Dq:5[S8=r\m>OPTծ1UJaw'ѶF 9܈3Npb9LC~I:t,CIиBL,q@:ʸ? UP>ZЄDfh=tK_:Dyo#бAZ nY* -X%}aH}wܝbgEE75sZS>EoiP}܅ 6f~-҈[8&Ba{p]gw -uЍumʺзmD -fHP% \ -}LJ8K] (KCn+;_M@kр]ɟJ!pDbuUWQ˚isA-9`AP(V5b0рC̣F{cK]0ҜPؖq^M>W,jl`IxǵtQxʈiy,,S`siNJhx3W:, -C Kw Wɚ*D0_$(ni=YqW@_/HG萰i 8Elg-J+ ͱ@P rp繴k/yYɐW :z~a} K̴ǐ{ʆL"/FHR -bcDžZލx-@ 仹L>]z u#Y;"1mQDgMT=GT ]OcݓYBj1sU#eer a}eg弭S1C[2mZ{Mͯ2-[;N5+H˶\ʉUN-˩c]3R -V演FMl_^[7*]<eh iq -_NRu@y_p\`W1ݷ?(@U$nב/Bh3^G֍Ζ\rln?*xgҚ70h渽0^M1 ]-Qj+~/Aendstream -endobj -1627 0 obj<>/XObject<<>>>>>>endobj -1628 0 obj<>stream -xW]o7|X(uP[_v%%H il7RuGIOYֿ,yk6aX#wggwgɯG=G> ([u]:u}: ?+i~t9=\uM1CNX4;݈*ْ2jQY4Wl~9)<`h~K:(%IR0clNKPY$|}ss‘V\Vzt~[ܬ#5U[<&/K[FXvм8H[# ҙ -Gn9r~% YǖCkcA1[uDM$i;(x{0PZMfez[f{}?suN^l~9ة'$ 9I+-Э2RH ϯIJxT<׹y0mS!9䖦*rI<:4 - NS%X,B aC{].->qQۨ¢^[UMquD:S(!WJ.6F;M( y-hI(~͉LR8tD*Kc} 浠Cwܒ -mFL!cE0 -;( -fI -ɦ 'b֎n X@Etm[KJg屡IVK+@z䑚vmJ<+vܫ +,lNf'Dҵ]krF,UILZv{Q0$gRcv;-yc<S sB03PB;jDsķԵ8%TCY'EjaUBs#7QړαTqNRr -/6îHsB7#\*-@ŸXKMtNd$ عzEaygQb0?nU.G@~7<0v{1̻9 ܈bNfQXe*7I?fJS P}I-n*:Vr.~4S&eMFj9(*6JId O,lȰÝ:vC -`i_qTLv+a [![q`.X SbBgX*`RaxC> awπq7c$-2b sՊN0%=+8rH:$(*f]`GY9Υ`k\\cD -&+aM\SFb~SF 0ƣb0q|uB9dX07Eaxe]l1m/..Z)ұV_Ahbo$Ҟ߮o\߽vJ?(Jkƌ3DGMglҪƵ.3>VhG )iۏxMoƘ:/-|3 R5gooQT 'Y8I2gi{z·`{)L F菣$ŐTendstream -endobj -1629 0 obj<>/XObject<<>>>>>>endobj -1630 0 obj<>stream -xXr8}WtədTى3ZR*E$dELb* -@w>}Gc.h2> Gt6%H*zqtyDhQ%SF#Zd'<=|ym4MFѽ%쬔uȜ[UEXv[|?`<^O,3IB5Q7N^JtCsix[;KFo?:CBO*yrlQRwh\) \TT;D*CzP|- K-H:BUpHbǍ̴-Fk^8c#mB:x}77drJX -t، \~vkl2/n?H w)ZXn6ٻ /]/Pt4C l%Gv;⹋GA[JN3PYa]sҷ$zKElZషғ#_+}b7h qJϦ?:BaW@: c/2u<H O*F!}-8/ir  3g%d8}z@7H1oy^ݵǨY:>/x(QHEDV_zB@_80@(axNf,Vrʞʡ ;ty<#6֨Z-|x~<Y+/=Q[)Eyr:fX{& -%j o{YqH? jKS$D F9F1 =|ٝL#eKϊ*ވN"Lkl*R37w C[ҭϙFＡ VbKo=A*Y;2EOJJ@%@$PTSNj, 3zU|4Cb"+t>}'K0=$B5=qvG\zt-,Yv:~6`F}Q0dv-vno?«[ +V5i;΍D(|(r>[ =͗ A&eދ Ood?QYg:tH289M{ -(g~7/Y)N -Zn{q'B$Fv㠖^L" CN_0*Qn2͌zv%F ]u֒1QFkα>bcUqd>/XObject<<>>>>>>endobj -1632 0 obj<>stream -xXko_18HGpQ@Vo (VRkrw%-&M;"8sPic8/U+QR%h8(Ɏƣ鐒}[$ *T)?%3s'x(Y+~ed9)M tn6 Gd,/ 6yt5M$M-×4}cHir>#:K#:#f'3J;j&yns|_DVZ*dkDZ e]HCP]3$TK[[!5\Ͼ-5]kWAI !hPUhY~탺? sH7ZZ7e'_]]҃ʬqhpֽ3=܇:H '3r˭v vtSr~C&HK#vȞ =byGyG+S 333U621\[>՟MA)BvKnmHzuCFw`Y^TeZFGYPS[Tei6oe }u':46w:Y 6J)\YXOek`?j-ׁʔKmXx(LZ9n +\J~#ػ~(F-!j{rAhOé5񰘶Y6Pc|mvo>J6''n=|%7_~rt6vJp,=p=l}2}OE2gt5ڍ6J7=ȵuml~eNw^`lMm's̍ ľӎ (Kzm;m?29-4Plcb!cZ ǰܹƨdHnTQ~t^$uy}p>} V)E,f-mFfP~ó JGkŒ,fEex) aR!e[Q͙oo0$cR \- @?D>3?e4#܈Rl0Vk -D탛hM 񒭿()癲۲O:a!ܞnޖ- $.ig|. )KEXl<E@Zý(F_7'K:c7&#Q3&(տP7)jPnɼ.oF1'쒈ir}6}B`#r1{+Deq@-hh`^_Ny\YhR`!<]shu,U6՝װqN -7 Ѽ7,ނ}9I2:Yh^X)‹ǻz6cypz[V/j8M;i궮Uf-;kMd[]JRJP4h.M5\G6tH[R.08Џ߃Y$ձF3LPð&xU[Vo7( : /ů%=v/.n\heM[CIYIuHwܮ>RVy\! Ͳ owJ{L}q(4' æЫjE 68ЅÍʺ5@7c!(|wٽ//_G[7ϝO.Fx%_Mň&?7N#endstream -endobj -1633 0 obj<>/XObject<<>>>>>>endobj -1634 0 obj<>stream -xWn8}W MI}5Xݢ-1TEN~ϐov lΜ9sfKviԣРihp1rI {9h O\G`;w:DTPv^&m -Q(0d3+ ZZ &wmy+](DR"*d8yӺ-[M,b5/"I*IJ[䢐DYPVbC!wSɦuvz ҦNtr =~t{㸆m,"p7|8qW2 >LV&"1c[# D"jǖg;C#c;B ;tl -iNL\U0n8}0= ì'*J4;r g Y1RM*E]{_}"i);@O|V8&c:;qEޘ-r9m)[ MsIqЖ՝ISA($y00Y%eN8-dޕZJ,T#'h@WqKAz8"ZLܶhW 4y+&)ܨ"}eT82li`pІoRTn4s q DA&%kݓ?KNV|ۥZ._n"joTw&2Ngtħm:D"su?.PoeQfi~P5 ~YC~k!FB S՝|AuHf0hRKP֧M0Leq=2;xjbTJۢ+EJ@ӀRe9;(0%JJL ;9@Jg}vhY\ew^3W̙2zf>#q6+ 4m\0ؼ䃷x/w՘cd܍`uEuYF+8m0O)oINu|ly/<ĉ]4rj|GKI%S"v:6vzzN LHb:1|/(tOUIBN@Z(k~ث7'M$hȭ|; =H@\p1fBC}WV'՟y$g1WՏl:o*ZN];t3;i罁~Q2;}nJ u7aaxW4n*jv|Ӌ*}?985QI/~^8uMa4†-.G ?rendstream -endobj -1635 0 obj<>/XObject<<>>>>>>endobj -1636 0 obj<>stream -xXn8+.fl'0dҠ=&J-6TKRS`$ }sei9.jIYu6Kf\̓-W?_>ݜMg6[ܴ9ٌ69ůҖl[צq}16?ft1%80'g`K23 Ȱ&='eFZKf?eM;;?|]-X׋>=[wmuABT`e]Y'RBK_U*ƻJ|7ȥN$R,'yMߕ U"+U)G"5iQa\%2݇Oښ$ίK32IPKRL->#Ե);ɖ/"sTIW `ڑy't] -D\J ϵq>A>RITTJM;߂ٌWfM1OmH%'ifYSW'<@eŃ!dJ6 qt>nm(˷-%kphɹ(\P0pI\dS-݄Z]2|kQ-jiB,r%r#! $2_"oCԕ8\La?dR: ]h@*Zto''[&6բw~|:FjrW$6pŐe+$Cdtv;9Ȟ ͉iLjֆ@kH䝾J1%؁mX/ +]ذI>-/i:6jY%j}";s3O?#bh:GaIяvcgMw!rDjz+`?0=G}߭LVT y0ڞ +֐! pW *hXfԕ <wv\Hs׸%REA؏"rA)2t!Dv5-7Y0Y4;eϓxsYR..C .iu+㞋.rk=oD!|#tafN$$A.TjEB$ |]%eE"UG6<͐[1IƔH8TyRfK!I%3 {O8D7X`[DlHd@7~X9" /&nd7&UC"WhD͎6#Xn__ xU JGa虶Nhd\S_<9 #XE$3yMlvSQ4o5' Nut%MHRv'$eat>A^@Nn-EGq8l"Y6;b^EA4k)B8 bZ,RHflU˙R5.uS rI.ڙT*=OPȏf•W%!R$aϢZIF# $8=zi?K9L4V1 ( wd)XTq\4d(*S/~}NnFY Ζa>6סS UZSƂ<ᙶep\E3&Dap\MT ~c qg[5$j% ؼ6qd]{bߡenEglVc߀ aGkMBtVQ-{Y<0?i1fNba59)X*D$ReNj| +BeY|RegĊ%Vtb0.r /cliJ]>fט^Hz10gaW*Uck?5\ A0bTNM6,M9W&~j|}MVIT1 J\VQ07nЛ=m}p+.cdi޿&19A6/0K`^̡i&`<˺/ Ӽxb'4|>x-Va(<+dl I0㋯ptW. 3|J-0/<%bKrB+Ϲ*m3$* Xak5%m@+ ބP  +hL]aTE~ZO*fIendstream +endobj +6439 0 obj << +/Type /Page +/Contents 6440 0 R +/Resources 6438 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6423 0 R +>> endobj +6441 0 obj << +/D [6439 0 R /XYZ 85.039 781.388 null] +>> endobj +6442 0 obj << +/D [6439 0 R /XYZ 85.039 761.463 null] +>> endobj +6443 0 obj << +/D [6439 0 R /XYZ 85.039 585.186 null] +>> endobj +6444 0 obj << +/D [6439 0 R /XYZ 85.039 362.17 null] +>> endobj +6445 0 obj << +/D [6439 0 R /XYZ 85.039 335.072 null] +>> endobj +6446 0 obj << +/D [6439 0 R /XYZ 85.039 320.917 null] +>> endobj +6447 0 obj << +/D [6439 0 R /XYZ 85.039 294.424 null] +>> endobj +6448 0 obj << +/D [6439 0 R /XYZ 85.039 280.269 null] +>> endobj +6449 0 obj << +/D [6439 0 R /XYZ 85.039 226.678 null] +>> endobj +6450 0 obj << +/D [6439 0 R /XYZ 85.039 144.777 null] +>> endobj +6451 0 obj << +/D [6439 0 R /XYZ 85.039 131.228 null] +>> endobj +6452 0 obj << +/D [6439 0 R /XYZ 85.039 104.13 null] +>> endobj +6453 0 obj << +/D [6439 0 R /XYZ 85.039 77.031 null] +>> endobj +6438 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F56 2898 0 R /F35 2888 0 R /F72 3974 0 R /F18 3977 0 R /F11 2906 0 R /F66 3248 0 R /F14 2903 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6456 0 obj << +/Length 3438 +/Filter /FlateDecode +>> +stream +xڭZmo_!Q@ro"z^ib4(h5EHʎ}m+3CE"OH,Wz-0 %+!Yy4?\]|cj* +X\L$Ij[Zցreyp{T?Ş\\/_9A `Z\{؀?_D.=P\|ۊ̂W)Z-ViP jm-G%pIDVeCZ8^NάG[1ȝlh+р!!5&zQ(=MXu'}ѮƁ)U|"xT=x1vY>BV ]P<֋t%AgrF=hDΙq$;r&VnQPAUn&Ao|p,\/Ukt4fri:ن_[K4aW] k"Cx-g".^2`ivYﭬw$VaKJɏ_ʚlo-5< YC756xMhmaZfaP~(R(6X:CX6M7W0թ5m4@dѰÍ]7q=uua1RS*sҬ<'ajRjVg ~MӑkdCmOx ^sqQ2qBmg.[J~gş +'`-S+>!D>|B|fOaG6ш>Q)?#$q%'.y< Lqnq; ݱW3oEepoI'zIihp\a96]g.!3aٍ'+X"$}#F<:c-CH󃁏tnbX_{F!!yETp '0ܟJop(pՍl7{kbcR#ftLNсIİHb߿ e έcDvTQA,1v΀hw:]nf(I|DVf8ApQcUJpNg,hj JwrlK 䖾ydzp.BvYdl2Bbx&k| +6Wb6꓃1y3 + @(Τ6^ZY;y4Z(Ԛr8m~f$sĉ=ؙAvlDHxO+RA: Gͨc2á7t{)TgDSpCzi#mcrVlՆ\"eak Tq L|u0w8c;N[YǛ΀M8^P۾D(e/G۝M]"臎[\× ~x.eݩ3` hɣCk\W:!:=l"D+"RM +OPIakjM4L uӱg=xkdd۞[M^6E-!CSM?RQpN™]BgMB \ѣF]68g{G*=RL.:N0Q-fiP56>v2+lXJiܔTuw|452]?磸@;u @Б18#ʕS _P^ǀ?(F-jjEZX4&Rf^yy/[J1ؤgqD%pf]\n5۝F\,8Orz*:|HE|ꉖ'>Zәdo_^)'W`og]:. VpmN%C/* +: ԂL,2j(%T cُH:S#GtDDSY~ة-m)Gt=)"ذ/{JbʭGOtէhVϾ*q;)zȞ ycOO~5<( u|GS{znj= +Q$c}+Hs}RQU촭>zu͝+ri,_4 x'C/RGa\?;s`4xb^$o, iR> endobj +6462 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [212.407 214.44 369.551 226.13] +/Subtype /Link +/A << /S /GoTo /D (problems) >> +>> endobj +6457 0 obj << +/D [6455 0 R /XYZ 85.039 781.388 null] +>> endobj +6458 0 obj << +/D [6455 0 R /XYZ 85.039 625.834 null] +>> endobj +6459 0 obj << +/D [6455 0 R /XYZ 85.039 479.52 null] +>> endobj +6460 0 obj << +/D [6455 0 R /XYZ 85.039 382.554 null] +>> endobj +2558 0 obj << +/D [6455 0 R /XYZ 85.039 257.722 null] +>> endobj +6461 0 obj << +/D [6455 0 R /XYZ 85.039 228.317 null] +>> endobj +6454 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F56 2898 0 R /F35 2888 0 R /F14 2903 0 R /F11 2906 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6465 0 obj << +/Length 2909 +/Filter /FlateDecode +>> +stream +xڍێ۸=_#Fuݷd[lδAl˶]\$h=7R-{$!yJ-S,/L:U䏯`D( pe$(ő;V})yC,Ox- +}EG~*M[K}v\$vRޖ'CЯLfE.x +#?:ԁwkP D|ّ,'I.O# + +%|({WGW@{ 0fw^S4mr`nǰ +CxZ9OA:U]T a(n8==tu55cxBPъrXSCrrS1J{N2Oρ 'R"F_*:|աhpZȩ( HΦ >BP0g?C.Zqg#:bj˶li2pc:ƁD.i|!<֐^,q uB[&SS+['T{gI(m7fk@8DP8薻8)?4K)= +g&+Itd ~!9\R5~_u{!5bX |i tXcmŜlb pbr`?~SO +l4c; OPWE",la-Њx+uG>7Վ^‶-'(茵\gjt +D /O$'AM$9-2nDЄ~${.mp'akԑ;b6(o0u5]/As%kS2sƨZu6/-wY<8 Ă; +C )-3w"H33@&8H".5n;]A޴%_C4 +Hsu3 =e3ֱ7/3`6xO7 tĥja/ c .! |y(W4x`;I{ƣ)ܸsgc#d:D.Y +;cIx$H dUuW|H!^džk.x4-΄C&ųpfb*lf +p] NqBnlaAPv ]>/;p %LCdTxuh|qknN˕-) Gn +%fWCKR]Os&SbRecщ٥`M0{.\o2#h*8]QKTlÅi;/`FAM Bْ6؎vw=g +h"B? X&3gݵ 397s? 0AO9#Q:3uޣ|P]DAJ9 L!T\T1Gz7vn'){/õOϯe0p\ȡTTiӜP|B* +4z6,nPc'R="ߑBQ&o*=݃MD Xe=D?J װO~pSM!&Iޘq8~BV,"N>3EֽzrO\Gt6 (tzy42iVL6qX:XRGX}u8p'pW벗S>R$If|ƮҞ\a$~tTFTȍt9uRDՠswU$(RN.3l0RT mCk^C ĝJRukm!S2^0QuӱE asBדZ$e[+J).V;̕u4<Ŵ&EGN΢{+lK۾0>GZeRr'^W/V٭=G99u)csʏ_FB.H퇐P>={x`uKMJAkp;U/IhSno!mD:^˿5STxqz_t#4CY\"f]<8e-:ʊZ0;%*1&u8HJ %? A=]MN0kc:#>AH@6qM 0@TKv> BSTÜi^'=\# ZbL߾F߬endstream +endobj +6464 0 obj << +/Type /Page +/Contents 6465 0 R +/Resources 6463 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6423 0 R +/Annots [ 6468 0 R 6469 0 R ] +>> endobj +6468 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [389.071 266.098 509.276 279] +/Subtype/Link/A<> +>> endobj +6469 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [137.104 239 260.036 251.901] +/Subtype/Link/A<> +>> endobj +6466 0 obj << +/D [6464 0 R /XYZ 85.039 781.388 null] +>> endobj +2562 0 obj << +/D [6464 0 R /XYZ 85.039 761.463 null] +>> endobj +3045 0 obj << +/D [6464 0 R /XYZ 85.039 642.137 null] +>> endobj +2566 0 obj << +/D [6464 0 R /XYZ 85.039 586.947 null] +>> endobj +6467 0 obj << +/D [6464 0 R /XYZ 85.039 557.543 null] +>> endobj +2570 0 obj << +/D [6464 0 R /XYZ 85.039 131.44 null] +>> endobj +6470 0 obj << +/D [6464 0 R /XYZ 85.039 84.771 null] +>> endobj +6463 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6473 0 obj << +/Length 3885 +/Filter /FlateDecode +>> +stream +x]oFݿ/E"w4ɥ'HmQ}-Z&B*IɿZrIQPr3;߳kҁ8/bnw\na+KY0߯/^؉\;<z/?.Yo/Q[.buk~?޿]kNu}5|>.TdKznV??^\< 2o8X܏%#<; ӻ |O_-*/ bt U(pi|y+\o[7]U}_`u~/qُ5~a#SݤM(+@Yw@9iOAEc^(Rz_gFwbK@ŇJȁp`ߝ5hbhnç p$mYF拞䋘Mas`c + mj'9*w&CCL}uI( 3ypऀ&gAy!n_d}Yuٗ4X0P;oV/o>FєoۑҎa V7_&yjD؍gz,!sXqxqD~;bxP,Z!>NߒPJ{v,rZQZ/eYQ<ٍQCZX'c;I=;~|`3:ŗl"Ϥ?kg/B'e?0﷧Jpn'271 "]901ޥXe9M&6Q嫓 B6+F|V3 +m=|T~PN5Q]l)Dyjl=Z2Wʷ`F-̄ fNԴ(Fe=HC3S@-@s=EPo~BaF8aE +kdBR:_=]// LQ˝Sxǃz*:W8gM"o:kHܰd_@Rm6Mޡ7gPMQj?:6Wzp&p=n{ 6ox@Ky@ kO%$iK]vPvV 2Pr5D&fDX#F踾_Sh{9" Fk0hCC/HRV]}Rj(Ri ~ #X46e'&V=7Έ&snva\§qSbiӜAp]C&R˿3Q]EgaޔÂ-uT͜Ҫ>ХJBX_0qPgA󻘖vu<+Nz~l`('HL:'+;JZʠt@pQxks]:BţZ^ǚahQ?Bх_! `籓B^#DZא%yIEĘRYV + Mc,O3&"K|D8 &3YBQߢ8he jh0sˉX7 o%Zug.( DZ)%K6mx'8RzL8 YZˇm}rˢh{fM7-eenپ7si4L7IPzcٟIﺠ)b&LX8fxUc̷aFo=Y]T:3űjvT1p;ʔ(/Q:et!_=.)/1c,. r^59 H*̴jr]q5'ﳴ9ʲ~~;݀=׺se,N:]GBЦ\K2iAgܵv"ߜo*;[n1t03)FM74OXI@I^KIdPwHñn]9H+QZ&=\7ioy<]X\ƿ@0(mi9w_FtNVO莍o}pp@o/pȟ8+wPDzh&1 wvFzaB*`FF5gſ fpthYAUu0J`fljԐؘEVX醮Vka>vHk +)q\xx}@xa(0ËW@91P`ķv繽Hk*4qN\g.9۩ul5k_n=(dRr5/{ݓn endstream +endobj +6472 0 obj << +/Type /Page +/Contents 6473 0 R +/Resources 6471 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6482 0 R +/Annots [ 6476 0 R 6477 0 R 6478 0 R 6480 0 R 6481 0 R ] +>> endobj +6476 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [376.679 337.371 512.306 350.273] +/Subtype/Link/A<> +>> endobj +6477 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 326.549 194.521 336.117] +/Subtype/Link/A<> +>> endobj +6478 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [288.68 310.273 504.006 323.174] +/Subtype/Link/A<> +>> endobj +6480 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [390.793 251.851 484.421 263.844] +/Subtype/Link/A<> +>> endobj +6481 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [335.18 211.204 480.851 223.196] +/Subtype/Link/A<> +>> endobj +6474 0 obj << +/D [6472 0 R /XYZ 85.039 781.388 null] +>> endobj +2574 0 obj << +/D [6472 0 R /XYZ 85.039 381.258 null] +>> endobj +6475 0 obj << +/D [6472 0 R /XYZ 85.039 354.644 null] +>> endobj +2578 0 obj << +/D [6472 0 R /XYZ 85.039 294.83 null] +>> endobj +6479 0 obj << +/D [6472 0 R /XYZ 85.039 266.032 null] +>> endobj +6471 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F14 2903 0 R /F20 2873 0 R /F35 2888 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6485 0 obj << +/Length 2516 +/Filter /FlateDecode +>> +stream +xڥYYs6~> ax<9v29cצRIh H $%QÖ&?,5ʏY*Jr{60*,F4o^3ֳW>FiVyo{mȋ/$\=,rxM\=m(!ʂ[i G򐛢@ Vxc݄<; +Z06g^,EbrHe%"Svʷhy49K\zHY.$(y)B|SL$8=5 FeW|w/SnifAeգ(p Pnƺ)bՕ ř6dPgb9IƤ) w]RVZ[ ΍I*ˢI!+ckJvұSZe#9NRb#ycE_P +d}NqNoOyv)$źGox)Vp nN~#&<=1b@t!F +K1C#M_mRJ"NMEAr +Gf!ݖ/k@cMW%bߑwV +Y;2_E?+{ĖVq(mZֱPڻG-0Q䏱%>*X8@>DŽs$ 9E:ѳh!l^vU@2oǻzAK"9Msb201U͋>":oKP,ߔ3 4} B#634=u0Hٷ0p1Y".9z,/-E|)( 04OCF}{H9bLNis@!S,F32FWoof.e8,ϛX$H^0肉 K&v3c~&6wӛRBdG##șHһC*&V\gUrXarHU6J"XU[%+;v9T4b]s xtG)hfkZZRPt?3 u w! +a Tiwno +xN8r2> ߜ?TPqaZ OwEa #l>GpC#Cre .hk},JP[Q9tX y (pXڮ#3y: KZE:&w'4cw73V4tNX9G$l6c9,wP\s е` ̈́ǻ#Dx*3<֡-Ճ$PHRǩn)`+g$:;~vEu0_'*T "22l_U(`x {| g0c5 s$M!؋QD(~x{ay$7"k9eE˖rms;:}0 H`Q@P4F;NtOdЖCG= D1A6+?&[ϾqGx!G;1> endobj +6488 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [218.97 417.072 325.417 429.974] +/Subtype/Link/A<> +>> endobj +6489 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 392.701 133.339 402.269] +/Subtype/Link/A<> +>> endobj +6486 0 obj << +/D [6484 0 R /XYZ 85.039 781.388 null] +>> endobj +2582 0 obj << +/D [6484 0 R /XYZ 85.039 474.509 null] +>> endobj +6487 0 obj << +/D [6484 0 R /XYZ 85.039 445.105 null] +>> endobj +6483 0 obj << +/Font << /F64 3118 0 R /F14 2903 0 R /F15 2884 0 R /F66 3248 0 R /F20 2873 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6492 0 obj << +/Length 2913 +/Filter /FlateDecode +>> +stream +xڍk +s"Z#[nG>r ۲FwvSdyU +7,o,Um͇`s>cZxesgvwI:];viJ_`~ihJoTowqxlCnw*-뷻+Xmqt$>h2l<[$|lvUޥ?IRxjxQ2F?܎}G8cյ`0ބ(4%:Q#9?JiGvF#.(o6TyI^ -чY ~Pjw{R8 H=iEuqGIyd)~Bi;_bxc2`bH}{cEr퍗j`߂PS'x n 0jB ybSf]*~ x`wb`b#z}LJyցWQF# ƍT؋\ysOzFG|p їa+Di0gB +ۯ[>4~s NŷxZ [pl``&x-` E㡳XIV)CS$"poL|)Ed"!K^xQ_*+ȓ"4lUZkQngP$ +_pW y/js( ߤ&!C pPFiWu'em/0Ѽ =_/pcBJg FeE&jfWqEyJ0iEF7B +?&]b{W`|qK?^(Һsr h4Fƒpژ6T(MF۝&v֩ "{'A/fi JP|,OuyiR;*IظE/Tt ]WVb i6y@4n?/cޕ=o +n}5Htmh#3o+`+VrT Co#J^ۍ<`?P!A-H@c9J7I+_Q;cVBcI&;8U0GجJ0BT8sG8jU-&c$ +e/8n|3_];ػўgȌ#;+M$ eQkg\mQ5 2a=lT0 {QNn0x "+8@$#tg6(;K-Lv߂8`ˉ +3J28>ݍ3{Ve/G석)fPѐ|e+ѽ,o؍G6< $$LF@?0w`&nw۹e$0v-6[x0n?YDy϶>\k61s#0߸y o3UL* 2#{UcͲ`IOA$A_2?LI5JHd̑l`:9XZ jD%jjc$^U0KXZ9d3CgX!keY+˽kq WNmiŔ cg"(f;&z^1`ōv$m +&&+sCTxλE1]f%DY'hN`(~0$Ha$KY?jcGIz>y" Nkr04$p[gZs`UfP9Lr 0nn\ +M "O%Ҽd pB6Iljo0 IErY:\Pq T'%6Wf WBu@ΤtPb .*^Uܙ\ +w*(N(&FDq !{Wl@(*g4Àױ'(L@iYG\5TW آ5Skj}Cc}XPJ5pB.řR~ahk(n3/E]dm(e ( d)P|CPHSC! >1:,a0)iq}]CL*PpCO7VEvlÉ<(IAKC^Ͼ@Taf!30(D-/UTo?iendstream +endobj +6491 0 obj << +/Type /Page +/Contents 6492 0 R +/Resources 6490 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6482 0 R +/Annots [ 6495 0 R 6496 0 R 6498 0 R ] +>> endobj +6495 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [232.013 625.659 270.975 637.349] +/Subtype/Link/A<> +>> endobj +6496 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [341.801 435.668 475.519 447.66] +/Subtype/Link/A<> +>> endobj +6498 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [250.165 336.599 295.309 348.288] +/Subtype /Link +/A << /S /GoTo /D (diagnosis) >> +>> endobj +6493 0 obj << +/D [6491 0 R /XYZ 85.039 781.388 null] +>> endobj +2586 0 obj << +/D [6491 0 R /XYZ 85.039 761.463 null] +>> endobj +3046 0 obj << +/D [6491 0 R /XYZ 85.039 667.044 null] +>> endobj +2590 0 obj << +/D [6491 0 R /XYZ 85.039 667.044 null] +>> endobj +6494 0 obj << +/D [6491 0 R /XYZ 85.039 642.326 null] +>> endobj +2594 0 obj << +/D [6491 0 R /XYZ 85.039 420.224 null] +>> endobj +6497 0 obj << +/D [6491 0 R /XYZ 85.039 393.913 null] +>> endobj +2598 0 obj << +/D [6491 0 R /XYZ 85.039 282.629 null] +>> endobj +6499 0 obj << +/D [6491 0 R /XYZ 85.039 251.104 null] +>> endobj +6490 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6502 0 obj << +/Length 3377 +/Filter /FlateDecode +>> +stream +xڥZ~( 1r7q ׵/$DJbM*=yr)QFqyf>}a\gyy~;݅.!yh>}}0(i?IO寛͇wqo$>dYnm>6כCy|Oߟ~{wlaWݯ%H]E~0`tK}csZhA;oQ8RYIi[o ϟM]ѳ$ + +d={ R{wB1p+c? (<{ +c&Ll&} +\'n!Lyi"xi[ޭiGCjs0BdS@#+}3 /SdIIXA10+S%-2O[`̱@ep5S:+T"1YBBeZr@+"@^:zThnG(JT( +3Xop*4AcF&+e`A|^X-f*PFgJPs؇ȝՙz08s "`gZ٩Fj@յK p+>nPCɌ<Ÿ)\+p+9Gk`unxT!ӿVFOXOҝ&xn~b´jQ7O.YͿ)s0uK*rr֭éDmCGE7j'D@Z K IگMo ]UncDުX3?ϫ_8rF uN +Tde!wKy//#%endstream +endobj +6501 0 obj << +/Type /Page +/Contents 6502 0 R +/Resources 6500 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6482 0 R +>> endobj +6503 0 obj << +/D [6501 0 R /XYZ 85.039 781.388 null] +>> endobj +2602 0 obj << +/D [6501 0 R /XYZ 85.039 623.55 null] +>> endobj +6504 0 obj << +/D [6501 0 R /XYZ 85.039 596.935 null] +>> endobj +2606 0 obj << +/D [6501 0 R /XYZ 85.039 262.887 null] +>> endobj +6505 0 obj << +/D [6501 0 R /XYZ 85.039 231.362 null] +>> endobj +2610 0 obj << +/D [6501 0 R /XYZ 85.039 136.417 null] +>> endobj +6506 0 obj << +/D [6501 0 R /XYZ 85.039 107.681 null] +>> endobj +6500 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F20 2873 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6509 0 obj << +/Length 221 +/Filter /FlateDecode +>> +stream +xu=O1 sCclj3 L  b@  +qա,?vITK(f6r5ّUPsbjCD͌uy. KU@968 +1JLJ~sLfVd*, -Ovs8x$~RE_f\u¨Gw3!,a6  N_OM`9 'X#endstream +endobj +6508 0 obj << +/Type /Page +/Contents 6509 0 R +/Resources 6507 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6482 0 R +>> endobj +6510 0 obj << +/D [6508 0 R /XYZ 85.039 781.388 null] +>> endobj +2614 0 obj << +/D [6508 0 R /XYZ 85.039 542.44 null] +>> endobj +6507 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6513 0 obj << +/Length 3034 +/Filter /FlateDecode +>> +stream +xڕZKW|Xb1tDS+]IsA /Il 7ӯ@=XO-L$Y7b3?QaCxbrfWOX +y~|xsQ QdۅR7J/ߞ* ji\(Jy#/Ry<:d( |E*\OB0$"[&ƫN{z9J‡5fGS^CNu6 BʫsR?_ͨW&DDσS:Հ}|5 +w¾; Ў$J;R]RuX{ĒAKgL=$G(bcCڂ_#Vǿx8A9]: 6_*0i͘;\=?T5=X7ܿe:#v|OY°Ot|O{ M^4 ݽbk.s_[ǐ'~3i^Q)dhpF)_P/ǧ囿![qV6@_H:+Q:F/MlBbK?5 SP jo6Nl|j +| {~CuOuK|"0<+`)IYA`qGڻu&䔰) TCN6'x*?0J:nkfM&|6ޱx5.Gh6`%]m&N{^e%mh`PL>`! ( I + g% q+Wq;`p@W.PN)l^JACYd1{8>#4 +u=kZItr)hʒf펉ՖyEk6H\Mk0&I-B8NDbǽ0!0\ylwwwVkrև1]~nW+^4cN2z>sq _~(q|X \8SXS"XEnB_ϣqr":>x1ySIC"z&C#B5LIWr}Y5$2:W}Uղj֣ bkF 'YN4gW]G' y<[&xkHtɺ36y͡ +r/'Iy p2qm{Y##CT&qa`v5#m$w넯)8B7JYj[F߀ˑT^e;kĢ)6`Xo+{ڳKpuŗŗM(i,V^r02UNVm%|7@ҕ{r<7P8a̭Ù {KbEHny2JZF4w(8R96bF}~ @ N6a"ِ37"wzuON]K`fƜk1i_!&c1N@ߨl<ّ|5O<"4È=0IJ;>ߺ($l5]!ϸY[!$r}i9_ZA@֘xj>xey@AyYN";J~<} @+(_@.ߘV +#H`&2($]a1=V)}[<ˠk.<`P5#{e2vV~ٸVIz}SjHHkY ';v 3%"}DD ):}/B./W/3Y^dJ\]uMP\IK/, Cy74S۵*qGF&:c&?m]BK.MxT$#_^˧D_˪癨 𳠍:(u2{1V&`_M͐5@D,R3gtny5X_95|>ܶ,L@-5E mn.2~ynߜ%77`ϧC^K?2pv%9>?21u[ d$)xKakk繭m +mn%l/w/*3@__rqBUo 1]T/dhn:Ήi7M C66ϥendstream +endobj +6512 0 obj << +/Type /Page +/Contents 6513 0 R +/Resources 6511 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6482 0 R +/Annots [ 6516 0 R 6519 0 R 6520 0 R 6523 0 R 6525 0 R 6526 0 R ] +>> endobj +6516 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [316.138 654.568 386.484 666.258] +/Subtype/Link/A<> +>> endobj +6519 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [435.86 506.864 512.306 518.857] +/Subtype/Link/A<> +>> endobj +6520 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 493.315 216.398 505.307] +/Subtype/Link/A<> +>> endobj +6523 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [195.316 312.928 375.35 324.921] +/Subtype/Link/A<> +>> endobj +6525 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [481.678 209.385 512.306 221.377] +/Subtype/Link/A<> +>> endobj +6526 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 195.836 210.671 207.828] +/Subtype/Link/A<> +>> endobj +6514 0 obj << +/D [6512 0 R /XYZ 85.039 781.388 null] +>> endobj +6515 0 obj << +/D [6512 0 R /XYZ 85.039 761.463 null] +>> endobj +2618 0 obj << +/D [6512 0 R /XYZ 85.039 761.463 null] +>> endobj +3067 0 obj << +/D [6512 0 R /XYZ 85.039 667.217 null] +>> endobj +2622 0 obj << +/D [6512 0 R /XYZ 85.039 625.638 null] +>> endobj +6517 0 obj << +/D [6512 0 R /XYZ 85.039 599.024 null] +>> endobj +2626 0 obj << +/D [6512 0 R /XYZ 85.039 599.024 null] +>> endobj +6518 0 obj << +/D [6512 0 R /XYZ 85.039 578.031 null] +>> endobj +2630 0 obj << +/D [6512 0 R /XYZ 85.039 479.108 null] +>> endobj +6521 0 obj << +/D [6512 0 R /XYZ 85.039 458.215 null] +>> endobj +2634 0 obj << +/D [6512 0 R /XYZ 85.039 402.568 null] +>> endobj +6522 0 obj << +/D [6512 0 R /XYZ 85.039 384.095 null] +>> endobj +2638 0 obj << +/D [6512 0 R /XYZ 85.039 298.722 null] +>> endobj +6524 0 obj << +/D [6512 0 R /XYZ 85.039 280.551 null] +>> endobj +6527 0 obj << +/D [6512 0 R /XYZ 85.039 104.412 null] +>> endobj +6528 0 obj << +/D [6512 0 R /XYZ 85.039 75.192 null] +>> endobj +6529 0 obj << +/D [6512 0 R /XYZ 85.039 61.037 null] +>> endobj +6511 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F35 2888 0 R /F72 3974 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6532 0 obj << +/Length 3093 +/Filter /FlateDecode +>> +stream +xڭZYs8~P*TU>/$3;oJf)JHHV*4F_q&6q&ql/D8d #/ ̠yxqsO[%v2y\ |1ztyj:q}ȿo?v?uoon>rq /&(_iO2 [yIu)lȱU ϚWtX͟eZ[n ~jԍTxU/hc=e2y, HWEã/8DE`wp" ;shyIhXYQsc۪q<-<㶹OWBYg#jXԫ[aEBqSjtUP\}g9Savr5-o{ևۛwrA咖Hpf +E!'Hu;-wŠE6uNoAȪ60S63r>}[-j%KΉV=x5m"V(`#+ w| Ӎf2 6x< +wbԼsgt3LC"ݠe`{ohe42m+%Anx,CQ-w8dw p郦i}` B"3Ɇ̍_3϶B_9y^h0 '~̍wΟ)ZԄ&GGӍl̿\k;0D VB +.DKr;0m`mccR7&wI +#D2EHU;6 Ҧ>cm"+ PV8吰krI kqsQZ3y< +64e]q4@|1N#؋"A HmSt<48yyud **N_#H!%=NDӜɅA7vdZTUs,2$ZdlG ǕDL00 + %2?NC]J+ jF[M%CoCkus)R'_pU6Go_YPXMc}%*8(G,-Wb@ cu.9Wr H*4EWC $t +rh D_wRV+Չ [WIpE4Q"Z TIejSh%;ZD96;?léXPd8Aj\(@Tif>b%_@_yL!-=Pm|2LFq9m7NBҢD&7uhjrƄy0KS sK=OڻNKGrݚ+Yqnɴ-_O-R1ks",:06vɍ٬Xo 0X,k! {kD-q=o5, IW"vI[,o +k&/!X՟O'zpX_)} +p Qfs<ΤG0OT 'mk&&7)֯:`ג@kNy4Sf+B¶P6=ky:U\?e ہ]퀽}ok+%5+> endobj +6537 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 553.795 319.488 565.787] +/Subtype/Link/A<> +>> endobj +6538 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [475.95 553.795 512.306 565.787] +/Subtype/Link/A<> +>> endobj +6539 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 540.246 302.306 552.238] +/Subtype/Link/A<> +>> endobj +6540 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [130.71 527 227.642 538.689] +/Subtype/Link/A<> +>> endobj +6533 0 obj << +/D [6531 0 R /XYZ 85.039 781.388 null] +>> endobj +6534 0 obj << +/D [6531 0 R /XYZ 85.039 761.463 null] +>> endobj +6535 0 obj << +/D [6531 0 R /XYZ 85.039 652.932 null] +>> endobj +2642 0 obj << +/D [6531 0 R /XYZ 85.039 610.928 null] +>> endobj +6536 0 obj << +/D [6531 0 R /XYZ 85.039 581.524 null] +>> endobj +2646 0 obj << +/D [6531 0 R /XYZ 85.039 473.958 null] +>> endobj +6541 0 obj << +/D [6531 0 R /XYZ 85.039 442.432 null] +>> endobj +2650 0 obj << +/D [6531 0 R /XYZ 85.039 117.174 null] +>> endobj +6542 0 obj << +/D [6531 0 R /XYZ 85.039 88.073 null] +>> endobj +6530 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6546 0 obj << +/Length 2313 +/Filter /FlateDecode +>> +stream +xڽY~|D4Kd~8-4((QBRVq"i }7+5sha8[nftb!$˧/rȉfOn|={J~^߾z8_h- Zѧzx~7o_s~y2F/7?Q8;C۱Ln 7i9oƫƄuhZ=mUwlH,߫>Kݑ~.8*eK#.-zш y|W4%i,m<뼋e>a'+]tk'coK>ᥔ'\7R\T*O<ϳplc2 .cN0djZhY:{.TO,U7f'J]/q$_!˚oDiD_oP<$G=X kTe{Y@ OY YF\5QӁ; ET;{cmyYbd*=؟q +3ngB1xFkkNYU֋bMʅMTөΊ1_"mN'26lŤE$` 1aΈ=BHOh*NJhXWj(+ ]xrat/Kmws7'QH8cZlHtDPͷ0 HaϜX\R0;\_קC +qLɆf#b-{ ,۝ 'jVLryVu m{ vjET`].@<h5٪AfIӊ):  ?uyZ('\p2WoOA kljb4٥!19ǀzqw DR ۓH躿a 2ky~ިgcgcoP4z~.Pg>%/m e'~@㈳tV0" sC}ɆHK@XH^BԉlG8 +$K9CVER;a)g&IrH$'mRYw:X`JY쫕ǻ7#]jU/R*.9Cut*=wZa @d9l##`X$Œzm݈@)C۴HT!]jyXl8PsJR1avl'd:I7Y|׷o?>F2%;БA/ZGϡX^͜_`ѥY`pˢsboO>3%AA..Amq"koÞ,drK  n΄ +v |8[A9[JGs(\䱺s s&U}x4Wendstream +endobj +6545 0 obj << +/Type /Page +/Contents 6546 0 R +/Resources 6544 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6543 0 R +>> endobj +6547 0 obj << +/D [6545 0 R /XYZ 85.039 781.388 null] +>> endobj +2654 0 obj << +/D [6545 0 R /XYZ 85.039 543.429 null] +>> endobj +6548 0 obj << +/D [6545 0 R /XYZ 85.039 522.232 null] +>> endobj +2658 0 obj << +/D [6545 0 R /XYZ 85.039 291.675 null] +>> endobj +6549 0 obj << +/D [6545 0 R /XYZ 85.039 271.383 null] +>> endobj +2662 0 obj << +/D [6545 0 R /XYZ 85.039 214.603 null] +>> endobj +6550 0 obj << +/D [6545 0 R /XYZ 85.039 191.887 null] +>> endobj +6544 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F20 2873 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6553 0 obj << +/Length 2555 +/Filter /FlateDecode +>> +stream +xڭY[s6~>-5[AoinIlN%Q6"THʖTds?,z:lZ4pv 3вb!K5^],L* v<)j[>\y0&VEQ£W>up ?W?~xs52\fHŧgNjP,C;T C9kx(3uib3E`bllD0k1 +FH*Z Á8͂}>7ae} I@" +:H^K`OMTy5DvG."&h56Q쁐nA.Xvo>MW` Ov}ʺv z}OWeʦZ:Ln[XTLD `R RYhwF\9۸c4Ϳ@ZoXPY> +#5^μ)*-k{J= j +))ߨuSoy遂P/MG(HJWbIli0Tc7E%'[`=ʂna`;#i؄wv1(@$e[DvT)˒#aڦyDDpN( VITE^kk + b0,g H&_ӺG?Ǩ%<ϱ+Q;o /K2vSź֡V=:w~+fe@$ H7gy+kG[B @u48="H!gv[DᏖ #l$8Ls[=|+reYl  *qpf+aejK:JBr~%繣H ؓNWDU_ 7|01- +2ǑB2o'mQkTԭه A=~r9ɫMԎ~W's*d̀(Pcbvi( +h B.dXA~Բ R1&l[V%s]+%%0Q ҅rY|,L6:y m +nS^: edD2LT -eXOGm?$FgfZ6 -X^VzJg)sl2saI]&/ 2 +)v@_Vp-Jlwn P?!Z5v^}𰧾)-W$#")hV-UW +)`3N;,]тAz X b.E#K6DIJ#d˞wG dMYf-pEI*uɡxuaBo6Ϯh2oGD& b8*nu( GwG8dq{WV>aL jbkMܣ`JՔ;&r `byup=uY |&/rD?Չ ^8vjg9iO3S>bff"ڇ]GNdKxN d;(U1 ppmj}v4ZvIeW|*eW6rͩpZn{$g;Tŗ|MC /  ?|}ˀ=`( #S,ۆ7 +&0XT (d wrbrS9ةؘ9B + Ti|:~3&<4: I r40'gc^87 x;ïsX=I'ѦZr&*8sL6F.<$B2dg*nyjq=i!S0{. ~]t9؈9 lԻp{ekk^P$Χ yI#THoU,"С=SVi)x0Dmp[%GY$Y4c;<|@zt'OU$@5C—4$O+3U%d Rg UI2{,KgRR#& *endstream +endobj +6552 0 obj << +/Type /Page +/Contents 6553 0 R +/Resources 6551 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6543 0 R +>> endobj +6554 0 obj << +/D [6552 0 R /XYZ 85.039 781.388 null] +>> endobj +2666 0 obj << +/D [6552 0 R /XYZ 85.039 761.463 null] +>> endobj +6555 0 obj << +/D [6552 0 R /XYZ 85.039 736.911 null] +>> endobj +2670 0 obj << +/D [6552 0 R /XYZ 85.039 600.648 null] +>> endobj +6556 0 obj << +/D [6552 0 R /XYZ 85.039 579.451 null] +>> endobj +6551 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F35 2888 0 R /F72 3974 0 R /F18 3977 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6559 0 obj << +/Length 2051 +/Filter /FlateDecode +>> +stream +xڥXY~@* V!f#/)y-["Eؕr\Ēp187.$3=҉uD:m=V³"Db}88Qz{KOkP,(7*v;޾{~)ݻ^so_-[x Mů,q #}!a\* ^5w@BE0"VND$w<`U55ܲZ<)R9^0zpD)Eb :BHr"DOQ7m'ݼ_l&`ۀ;IߤMgFR9`sf0&bO#M( r$d۴<<- oyq>nq*;vTԴlC?=ӒuY3hd 8?) W;=r)`ȐE^$p(^U"t*ϫۉm]=mp$L Cw yc,~REn}Ncl}*v(tӱԩ͸AGm8O-=֌t" P00tc$M؟JKt4(j$1;g'!:OmcgMl;t7u֙:quQ!Tfv_0 8헓L"yQVcN+JI'TRH!ӥ ^2n]pzdP5hB'npm; cgى?o~ ػClā| xwEf7З6NE5<+DM!`/e +[e*nBLQi\IexIy2 Eq%s@G$0XLqnl7JSW8Oڇ`96vp4+f'efX6[/c$!,3 +F,ap4g +|x}c 9f?RXkdkލB\KCD@&?D$|!2Q|!C-|Fc0XccPи!NQr/\^-?AKŭ1].a +fCƣ`y$V΄Ym,"kW&NǙr+nٽ5'){OMse`Ugtk>PaxvtFs֞A~Vl'_Yl+|iJ'"F%Sa]ᴈQ1^Na ܑ{UIY,^7MMW{ռh(sRPTI1g'W;]Hnfuy̹X9 Uy. p(BNdM[*mrj2'ϫ0*H|o\dm1~3iʴc6冶>u( yF@'.Z֗yrxdmn>ՉO{| +4y k_3@hWW7cy8QMHrޞG$e"{`^vlBfIUh+-PX*/5:& ;Pendstream +endobj +6558 0 obj << +/Type /Page +/Contents 6559 0 R +/Resources 6557 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6543 0 R +>> endobj +6560 0 obj << +/D [6558 0 R /XYZ 85.039 781.388 null] +>> endobj +2674 0 obj << +/D [6558 0 R /XYZ 85.039 590.17 null] +>> endobj +6561 0 obj << +/D [6558 0 R /XYZ 85.039 568.973 null] +>> endobj +2678 0 obj << +/D [6558 0 R /XYZ 85.039 292.426 null] +>> endobj +6562 0 obj << +/D [6558 0 R /XYZ 85.039 270.664 null] +>> endobj +6557 0 obj << +/Font << /F64 3118 0 R /F72 3974 0 R /F18 3977 0 R /F35 2888 0 R /F20 2873 0 R /F15 2884 0 R /F56 2898 0 R >> +/XObject << /Im2 4154 0 R /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6565 0 obj << +/Length 2869 +/Filter /FlateDecode +>> +stream +xڭYoFݿB@BÙԍEd66h,(PJRq]Cg6WvwjYyc5B_~04B)a⻾'DraiS㟦[rJ-<-?t}<&뫗V*X(MdU2]zXY˕󈓺;u_X".z#Rv[AYU^N> ¦dey{,A[z#+ ,GWV +/vA=1x} >.soB~_0C#2G\LI +S>#D*gS)9O#Ǎq"'Dզ&63EIA$0plS;iQ #u/Rn/c_`X͂$+V8?"0_`sYуH!3X2 ªqE߰>ȴ@ *ձi^ HAU(V-XHic{ǚ§af:x#;mѵO\@J'ളH8}=S/NZ`o O%'v3_f'Ve@+]=Yڍu!q= $d"xR/ޒ2:qlV:^ P4h5m]g|r_td\ yIznld@ FzqQB0#sGQ3I̎#IȵZo16r_8}Zt5a|ui'ow3uw6Q$,Μ')e =YeBRPpԉrnofB>mNe/ Z886 +_:{aRW}3P[eֻD*%~Z$ k_' z& +˒!Sc'ޑv6J@=65EԖ[ iQmJS.uU8d8iNTک5X@ + J z>qɇRAgwV}ZpN\RHQ3P< PY$ň]DH*IQm>>SZKwViMfæ Y 1m 1C X9?.![ #e9YͪE;bȆ'pED?}_L<@GgM.#[ +,/Z@.|},HiT7vƘ*%! Hc~/*{hJ}Cqj[}4\.NMPG8R޽yȄP^Asqn ±!2 .MJB/;v7Y~M3vDPݤd# LMzxcoĺN.MS5r;GҔpKe +⸥} +? + + +a;X$T:?##ЫNķ(۲`>%9\%jϭs: |/n2Mn¼z͛x1Eeq(o<>k=3Qy|625QIKàRt{ێ{t]Fc]F5nOx(EnOJ3,kj8(5J' +x<&ʕh<ؗm0ni{\|bLKIZm'V*]0r̋nV<1! +&nSjoT쎢p|W_.o>Dr}=ЗKmg0_v1s5^̹+Qi`=,?pcOtbPۂ(p̛1 Ÿw ԻTjAn4).\ry u``b7vſXkTendstream +endobj +6564 0 obj << +/Type /Page +/Contents 6565 0 R +/Resources 6563 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6543 0 R +/Annots [ 6569 0 R ] +>> endobj +6569 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [115.558 292.455 171.248 305.357] +/Subtype/Link/A<> +>> endobj +6566 0 obj << +/D [6564 0 R /XYZ 85.039 781.388 null] +>> endobj +2682 0 obj << +/D [6564 0 R /XYZ 85.039 761.463 null] +>> endobj +3068 0 obj << +/D [6564 0 R /XYZ 85.039 667.044 null] +>> endobj +2686 0 obj << +/D [6564 0 R /XYZ 85.039 611.854 null] +>> endobj +6567 0 obj << +/D [6564 0 R /XYZ 85.039 585.239 null] +>> endobj +2690 0 obj << +/D [6564 0 R /XYZ 85.039 390.539 null] +>> endobj +6568 0 obj << +/D [6564 0 R /XYZ 85.039 363.924 null] +>> endobj +2694 0 obj << +/D [6564 0 R /XYZ 85.039 277.012 null] +>> endobj +6570 0 obj << +/D [6564 0 R /XYZ 85.039 251.003 null] +>> endobj +6563 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6573 0 obj << +/Length 1159 +/Filter /FlateDecode +>> +stream +xڵWo6~_!$y!ER YEvZEAKE\In~R$[*C}wd8GNDȉ7@DŽX ߪMOGSg|v).q{urv3M98`N>; {7N# o&p$y>yٚ22]Cr!c)xHxuLjc=?O)9OrlD9mtr.9v%rH.Nrŋ8 lkvw,RD=ErJDq^6prD> u|P$M.k N\Tvu@,s#C}:ӄ yZv%*eÙ@2+w V74\}92+zJ-U&L$1B*f峙@)#HM/:X jtC+oOɉJ`ay^DaMzNb#$ӡt¯A^-)Es\9 Cog$endstream +endobj +6572 0 obj << +/Type /Page +/Contents 6573 0 R +/Resources 6571 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6543 0 R +>> endobj +6574 0 obj << +/D [6572 0 R /XYZ 85.039 781.388 null] +>> endobj +2698 0 obj << +/D [6572 0 R /XYZ 85.039 178.747 null] +>> endobj +6575 0 obj << +/D [6572 0 R /XYZ 85.039 150.011 null] +>> endobj +6571 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6578 0 obj << +/Length 2076 +/Filter /FlateDecode +>> +stream +xڥXY6~ D +}6i4i]mA^˶I^g}(-X|3ZyBg$N}=-4F7"#r8Kd"/7>QFz\~Z{: ~އ~][⿛߼{{ivzie񓘯ۙtzGQM~[\8UtD>PFR@)9O"D"$Ȼ_\c.*V9K -+p,*>@Qz[rʳ5%) +yX:;6tD`Vc}HcW!&UV=0|&}S g(ƻjē0v#$Wۡܚg +6j: l;tGڍp0\Ha ۶CPa@!|SШs0x[u-B:09X*G <@V@awvnjrBȡ7 Hm׳GkہC8'»ak ζnGQ*Uc 44D>hF]8vsyZdC٘!ݵ^@+)'N τ aØTj24_05fJ~]$:H2 t` /s8n'WT!yVB18q>_ ?һ~l%E[D̡.^YڰU=(!P7傇#äQ9-#ar1e9f̃ŅӗۦG&ˊܑ3Gi3uN(Nl޵UdA Y i=OXރL('¾3LyQ Wu%P0'뜍JЊ DKPic3.7Ē 4d7DA%Ia<2*1ix?j,I.Xlvn#d5 ^8|绣bjA}iW*`rNGɘNIվ%nяv2kN؎⟏yNӚc)!Q HE˕ku?MJ{bk3=7-i·9of&CXB b,xSNe.ܻ߬o7<5tO~>W /O$N0v7PJΔu/̾Ř g*|@-\r= Ї 5\yڀˋMN> endobj +6579 0 obj << +/D [6577 0 R /XYZ 85.039 781.388 null] +>> endobj +2702 0 obj << +/D [6577 0 R /XYZ 85.039 679.868 null] +>> endobj +6580 0 obj << +/D [6577 0 R /XYZ 85.039 651.132 null] +>> endobj +2706 0 obj << +/D [6577 0 R /XYZ 85.039 651.132 null] +>> endobj +6581 0 obj << +/D [6577 0 R /XYZ 85.039 627.814 null] +>> endobj +2710 0 obj << +/D [6577 0 R /XYZ 85.039 584.48 null] +>> endobj +6582 0 obj << +/D [6577 0 R /XYZ 85.039 557.865 null] +>> endobj +2714 0 obj << +/D [6577 0 R /XYZ 85.039 557.865 null] +>> endobj +6583 0 obj << +/D [6577 0 R /XYZ 85.039 534.548 null] +>> endobj +2718 0 obj << +/D [6577 0 R /XYZ 85.039 343.346 null] +>> endobj +5884 0 obj << +/D [6577 0 R /XYZ 85.039 324.475 null] +>> endobj +6576 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6587 0 obj << +/Length 3194 +/Filter /FlateDecode +>> +stream +xڝr}BSU# k_R38Q2kT6I5EjIj=~ɷ/孔Da5OMt' dܼ&07J0t>28w=ő=fJ@+y&FQ0(廁'Q]NYzΝL0YŎ)WܨuVsz7әr9"HVkǛMBZ幩c7TQ}!ԏ!-hgYS?qZ䕍kAyA}_MBOٝxr+oG ,r*4 -*r:s2}l!_0׬6[ 8@, r! )ă!3#S4i`-Xijizaqg UsRh8?~-l +ex:Ý!:,g2UiLtmm'+dn6<f$}KmuDA'#ˎ0`-NQ9;m$ o+ЄW5hy[A(+@.\ݖղɞ% \kQKEG= \KrZlU6([ "ΆP]_^OtA-l~K1x?O^A9:[/i|: Lhp_ {6@?ĭlBc=yeýpCDۚT;´Q +2 Oy>ص5  +[Y Dtf OH+ ߠ Bf!ሇvS%:A}ceDn1)'@H `b7z!x:/M٠[M!EBS7iii#8Y$mL۸^y+x_] hS7Q'>-ňY%n)4N$|U<ӗ< >'ג[Ry"!#oxPi7I49R ~ƍ|=VVLLMɴϥ_wJN iBFUٲ׌7cdՌJQVN,YrWPXx*Et"qq2}ߚ?wMNA2czmdbhNxP+7Qɉ +~ u$6Z|CMl GJ`C`tA}9XaחyNx?s^A^^otw)l*9SciM{@~ +'4@i wϿHݬ8^9<ì:RI +0ּl .܂Lʅl?VGIq/{2A\-0yXT !ȹGm0aKCȾ2hMĽ옪!-Z5eaA_.74<%ZL2=r,d.}3+)i8`\ @2zo`HVR+ &w~Ҁì[p;+,]ƞbWV>nO5,ٚ%'V.Ӱsl_!DgS=ٚqF +}}M5& .UۣqhҕKum%J 0wTIX +^@4uT%1̪8yiMUEBcМH{ĉԲ';|~@20VBƗN9o}E.٢%Pv.96Frx}; >o ߋ3j5EdHp+hy5mo._RfG_V0;%m$8]VI{\Q^/+ƧT׻D9J $rRA31䄙rW@850ڥ-zKwx܇;y3ӕ""&㡦z:<^NUJV3k/J,7qxБ1BG/P3zB-Y>8QИ(̺De".ʌvn',ũlkXD(, W)͆4jp-V5MA%j{u@bͦBcޙ -{ & IϷvi$u:R4k/y5O3"4"]3zғ_bAo^ +6K,Lq~:<<&m)o,vb;|{/Ĝ EmC Nl1G花Wd"j ɕH=r޻ls||[cMf`@'21*29E"\?f HnŨ2x@2cPXendstream +endobj +6586 0 obj << +/Type /Page +/Contents 6587 0 R +/Resources 6585 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6584 0 R +/Annots [ 6590 0 R 6591 0 R 6592 0 R 6593 0 R 6594 0 R 6597 0 R ] +>> endobj +6590 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [135.619 595.065 177.399 607.966] +/Subtype/Link/A<> +>> endobj +6591 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [370.468 595.065 403.066 607.966] +/Subtype/Link/A<> +>> endobj +6592 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [466.071 487.277 509.276 498.967] +/Subtype/Link/A<> +>> endobj +6593 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [132.201 473.728 157.678 485.418] +/Subtype/Link/A<> +>> endobj +6594 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 446.327 330.942 458.319] +/Subtype/Link/A<> +>> endobj +6597 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [377.921 352.358 620.096 365.26] +/Subtype/Link/A<> +>> endobj +6588 0 obj << +/D [6586 0 R /XYZ 85.039 781.388 null] +>> endobj +2722 0 obj << +/D [6586 0 R /XYZ 85.039 761.463 null] +>> endobj +3069 0 obj << +/D [6586 0 R /XYZ 85.039 671.062 null] +>> endobj +2726 0 obj << +/D [6586 0 R /XYZ 85.039 638.952 null] +>> endobj +6589 0 obj << +/D [6586 0 R /XYZ 85.039 612.337 null] +>> endobj +2730 0 obj << +/D [6586 0 R /XYZ 85.039 430.884 null] +>> endobj +6595 0 obj << +/D [6586 0 R /XYZ 85.039 404.572 null] +>> endobj +2734 0 obj << +/D [6586 0 R /XYZ 85.039 404.572 null] +>> endobj +6596 0 obj << +/D [6586 0 R /XYZ 85.039 369.631 null] +>> endobj +6585 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6600 0 obj << +/Length 3457 +/Filter /FlateDecode +>> +stream +xڭZ[sۺ~["^L8>=N;uvN-R2TE*_ۻRL;pY,voAK/H +E{\HC15$ͻr<͹q2Z;:iFD:W]\ݿ/70׷??iͼQ_{.\rmWH^_HOkYwɫ `)2) tk$RľFR -ew=F RMA@;ƭaC+n=LtoOw 12[40%O8oJh< P{*Ԩv:AXGsSyv4dZ5E(H;n2UJ@!4Rف>5do^%Ll3O̺-ڝTH=/8A*r_ `"ʉx"zj}h@aՉەx{ȏtl`O|jوEC[}g.gc!X=zÓʀ|f[rBMy4p=o<"+B'd^K=푏OοـEƋd[b֢hݷ8(Ѥdl "Aڵ_X šB PZjh"h$g]aQ^%:irJ8˿!( 3b$~S|^NȋiI cgWSDyt+ "Aܖo%+ -1F`^H>SGF`Y#;?Bv#87 L]؞+_PńHX?=] -=Dn*{I`Uqg6zTjA̐!wghטxEI#^؂@2v2H-[*R6 y?N%+!k,$%aPth0,dRK0H²Ew7WT1"MVKSFb+bbda+c qZv%=3TX6J ~4Y[]!AvB'Gahd2aVXLIӂC0tвX50syzƓO2E<4rڲ2V -MW,T)RU2=F"0 -I4Ϛy8M]#҉ύ>0j׆iiZRH[qkOZthU'(6<:dCS_:pLHg;}2=yaz#ٙp mAgygOj7<v]owc Vi٦*eR׹Yԃ"hFp]75g|nr Ĥw.,ABFƭ„\% xl>(J1o:)2;2yro B A%͙E}iac>sZY:&*=Ŀ|r;oZGfCs8#^P- "P˓`"䎤lYq'[qge -}B%e||Z@zmXx K8tNO'oR?z(vj @ DŽ#6Iuwq}5]3Y[!^8njOW^"Y-d>n>4߇endstream -endobj -1637 0 obj<>/XObject<<>>>>/Annots 908 0 R>>endobj -1638 0 obj<>stream -xXQs6~ׯ2cђ,K!IN3~HBM,ZvAB -v:& .EhfՒj4ͦx~tMzʖTlnFzƪ͗ײs=K"[WXe ZW7vnAmvz^Ѧ`<6xԑZIۼ9AT+)<)&ۑ|R[/kgIa+&W8K+tnhJU6XeϙT鬾R~ Cc쓧^{SեNVyD~Ʀk˂W.^:'JT7.ܕ?,>g/E#",: ϤT)"Ȕ ڶ [ƼWhuYmHWd<%xc`DVˮ,)#nf98:'?,؞!߿|?lE2a;X or˻cd1f+&gp5N,^qjUkZ1.-}h=Z!dߨ -d$KՇbORO&^TjI2 h{¥O+3ۣFr'u6Zھpc;ci  O_nhA.EZ90A6qZ r5޽C>kԧ/&g4`U^:+ ZeI$/57eyrgH wCCSlTxATϴ">"; Ei/{I#xh\]3wziN$\TVm6ؖinpQ#TD} uS4PcƷ$B#ږ#y3k磡|oCYCy%ߛqSx`Y>,؀z8S# A=TZmAS9ɊER$SCu݆QP' uxUH#FCL̈́Mڡģ6rmQ N -(62:ds/gS -ho <EOd -@LI !9Gm'!96"V.㚰PY`TjoE/IsqLl!}(ȅ*j@Q~p-%*2+]rXgCӷ/t|G -v(C%hc*.0݉fۘMcMPwnу* s)MGUN)R:ia?]gDj([8b[+x'Xo^xu.ޡYMqi@9yy9g 2z'q 4Yh02$Ovqb!: ]ye줸*CP ;Y&JJ' X'}3:YLU2VTmETEj7>BLαmcX EN(w4\݅VܹǏ$K/c>:QALw5soPnw U V'My_Kz/Ƅ!%j\]?tvӹ"&Lnє0u1 /w7wjڀ2[ je~g=vO.hh \\MF E=ʾ2SĻs7[kANW?~ OoݺlX_Si> l⋣&)E1/2жZ+#~yuu鎸ˀ` .NƲZjx[]񫏛?Goendstream -endobj -1639 0 obj<>/XObject<<>>>>/Annots 913 0 R>>endobj -1640 0 obj<>stream -xWMoFW |r%YR -`IkJFP".%RiE8xYL}i2ᘒituh4?ZRpߟ1Ń14 qVA4gC>fqv=#Zdk<Ň9"UGh$k^jgaAHv-+'"#V0`unvRʫ*HӜREBjEHmp=32JTQOO# _*cvJ>_>Isǡc&okS8~ lT!'=}xA?vh'.Z -|r)h7t2JRjF0{.jY*+Jg"/B>Ku: -B[y>i$z}+@29Br7!w*FFE2Dj+BU].YuowVY-M]X?xĦatp{RӎTZ~s&P.]Fx cHUWLv̌oXag!)XhEG!3e'OV:qgs=''7' c mkISUqߊBȨoPA鷕VϩS7n5m:{ Q\wU]rUQsD@^aXg2( D%5P 8 -~Cu -/\a(C,{Æ*)1Y8;n"ZpCiDE91nFb52<{kpjrQTGTb|RVuۭځ4?$I4)A=OM|?#=2{"`]* l -")4a?=\3Wxzi?_ 3Ȫf_%M)(R9j;D؅֬r^J;\X[Pɐ5FZ܂tbtYKpz_pRҗԟiV &}ۣqcߏwx`cL=g‡Da`ǰ24'.warGZlxӸb$v83c؈cW`wT<]ɘx -_l px6v_;_thǵDQc --y'Am -MΚm -x;Msm/ M yZL1æC 9-_\w7jAI!acdMSd?-8Dendstream -endobj -1641 0 obj<>/XObject<<>>>>>>endobj -1642 0 obj<>stream -xV[SF~W>ЙH%Kt$}6-d:YKkDu+~{ %0ivҧ4)RV &I8x1~N '0~h$z7~#JsB^<-JE5ׅ̩+Y". ]YUr]{Zm(>S<̤XТ/Hףăp|gg8S-xeu)QV%SRףCc.6g(gąlZ5++up}%俸ȚR/ֲ?amų)/7Gbf(Rs RW2NA d]sH*W8߉ma~6=DJ|]G (#9r2SظQ,mv 'hA%FE@.,$8xg)C&s3ALњWkb'] dίoS)rV4M0[!{tVi3݂=vڲyhE&[ر4GoYrк{ҖmJL -*s ̜rd˴l6 -VNӇ~(Eam Hz,3fdMfTvF``;ʟV`(`Ȝ"CtjP}} eU{DoKyCmhюC#];.ѥqk0<KnsCfF8঺1ׄ sK`ڍS`P6HP٩W_zwC9a^6ₕevW]\!"Z- #gn^uf‹?c1x3|F.yah' t|!URpWe@SIjɳ:cn F\RBv 1Dw*4=~.h:K~!iW̸za0zc-]]D.0C Q=aj,_8};rZX% c94st43 >/XObject<<>>>>>>endobj -1644 0 obj<>stream -xWMo8W rru7- Emvq+*)o%NE|MsA)]^QVLz7Oiv=)~? uSX|iUo5!cȣK^ZM%[[9˒hX44j̋]A7 P˘h _~ Kj+N6׾K}*vAm)W뒬3Gj9 ҭĥpX kk9g$ИL\Ro,ʔ>BN%*jPLYDHRCPH7t]Ǯak9H8H;^h;#Qo6)$o*ǭ]^ؑ 8C3de|P3(J`SW>RbL Wi|]qlUB>{6Fp="C޲7mgxҺ*cJzňUOolP" D7j X84JToq4ۮ&[vnp8hFخpvP=ެss;GgyŖD*|)Upy7u% =(Ϝa_ds-菻Ol+OV!l)Wf7{tB``|&Ӷ"eʣXX( {a]7G3@A:Tyt7a;}juMW;ft4ckh~ht|&2 "rU>`\r!A+zH avd-&ԥˀ f WI8heI"d\Jz~ +P5`DfwkSUU C@dK`[L,xpco:;'>pV.lFaUGΗ#RY8N58ʩXڊ{i $o3XZGaTЙ '^v dm2g-$vhyy8)f .ePG~B;A&UIZ$6"; ot$Yo;Cww< -~+$[<} ͟y).l<Ƶ[u"endstream -endobj -1645 0 obj<>/XObject<<>>>>>>endobj -1646 0 obj<>stream -xXMSH+|2&^JEhgF3-Rlf_noFz(?8bt'10LΦf3Z%p8]*&88>U4Co<˔\*^kA+) g2B͝ĕd7fώ*f(YCP6*ɕJ6{tDBL.U&uT ingk76ne'f`$Di_p&T׸]Cfw( DNou!M^St-31T6hӯd_}rᡲp0K!rfs硯)L-\-}[nS gi&Ck7lH9֐GN5?Az~E<.ci#J%Y&©dßp, -El D,P -kk Z‰o7Jak!p$lUڸWґNljlSж_ƜUC!e2Z0 mtj0B7Ftfk3&;[rOY93q7W6>NAmq% -{i]Ç]D#c2U0,ޭ( fԴڅٟ@pYe/?/A'+[ygv)Y4DD:=*ΣHZ'4xNὨռnܸ* a)U^Ӝ9,ũDCh?|y -@]~,}&&vi6 Å9kh0@]5EE܎:P;ny>T{. Eö'ԩ r) -? OLJ7>(#y|! mdT< ~nb(2Y00jXRmt&ҕA$ 73Pr|4zBmmMSY]mê_#ŋ2ʑ*T¯-_|`Lv8kbr ^aڍu2gyAfpuoY?nx(7XGn9 nmVf$bF}]tqA;dw21fY^yeO,/ƃ!F[ZCYo [hvvȶmLѽԆU 9_)Ҫ vx'{ǐV^`|8>֬0=fiuԪ,ʍmHW/>(U&'qPBTȺvMCs)/q!#MG6l -ykQp -~<>?J>_Χ)^kdW?L@endstream -endobj -1647 0 obj<>/XObject<<>>>>/Annots 918 0 R>>endobj -1648 0 obj<>stream -xWr6+vt2cӒ-KroJݴ4vk|HPBL @-J:kX}vlJ⊮ghBm4r+Ipu|h~=M5TN''of+9]ͱ -?Kgoiu -H >gyBxHzVE/c]UV3՗!)FqUl]Tk1'ʊ_@qGq -<̑c>O{vBۭkbQR2i(uYTWMNPUyomx;X;͓Ezw):2Ći ӵo[<'%xӣl.(40$x`/6P.D.nypx%=M6c荏Ԉhu%+fkaѕx;ہ3tVr.9.k\qJiE]t\hZ;/ -h1_J݋%e}ٿ"'0endstream -endobj -1649 0 obj<>/XObject<<>>>>/Annots 927 0 R>>endobj -1650 0 obj<>stream -xWo6~_qoqTv!Śŏ}%*f+H}GhIb8;}w, tQ/ϟ$ZjTur~U,\cwmtC7u`~duIdsX[ܰ 4Ǜilnf$e?ӻ^DvjlgWKJmY6shŴMY+~zvlYY%tIZNYC"|^zddʞ.o9N2#aH@ʒν^(Ț^yX%Gw`urxt/GyIHW5.kÿ-4 /5F]NY) -*[B:Z:snEd'J0 :P/*s8 ک>*Q-Q; :GH[1X*[IeV{(':S]=ֺ9\u]d]CM -; kP.~_mH'\k\׭~BUhMg'R {ذ0]圷{aDAT׵4TcYErM9KNCg?1gU׫n̓<} F壯 }A8x"BWcjIxC~dSi¯4!lRQ?&.8` *; @ދ+X_Gps|tzlｫL2>DqT#L)JG_@1&ՎNqױʃqb<mc3:hyLRcω5XO$ϧd7DqܙlQڝ\4ޓȋsjjo`(xh#,߁k?`‘v#/DM3K<5>ڝ9'+qFGC -LY*(^J{ ~t1{wU73 j\ԾAǔ7^q̇qhYcb2UJ8Rg7j{TӉ/ϩAiu'{VqnCo7gƏn/MxGjmp^돀~iS)xo|D7wc:'4`1T{]-hA-+}1 endstream -endobj -1651 0 obj<>/XObject<<>>>>>>endobj -1652 0 obj<>stream -xOo0 DO)иv%S`nЋ"+V[$A%;K]6"| -WrJvg9-lNw6l5^;AEA%!OS)ǕvJ -tY4.P뤢[)w -B:*%* -pUA9T^vcjDg) &y*\2 Pl>S WWѮmtH QSVl<'R ʓ'%u0Ixp5/.jQַOVV{s%u=bMrb@̤0F$4Z| ;LwșxYBWG9xJ\lpo>Q%|CTADFBJ=DHihHqJ<IJ#? ~bR}3:#jz=C&"0 GyV^#%Daqs:9  -eSQjFD(B[g<,Ϥ_wѮ^9|Ύ %B>gx`|%(`-ULLv55" L,$v M_+[p֒E  a;?V{.{vgh]S X6ONfFt}򖉸>'G>~e|'rG;~>+tU)~}U,YhV/ۏo鳳?"VvbMe~WIy\@U?+G_FBendstream -endobj -1653 0 obj<>/XObject<<>>>>>>endobj -1654 0 obj<>stream -xW]o6}ϯ@6Z#iC۵O+![hDK[IC~s量is^ZhƛZV4+f3[|Qj3J9o*xY~X}6WK8R{+@b"-U)27suX! JK{/i>o.+thVЬOܼ۠*w% G{Y#Z4 -irߕ/I=j]"%XՒޝ Ϧ - yP$02 y{%a3ȥ&'*+U8g@VdzdTR9^¶F8Vxs퍭+Jn21J_NU~4{ꊬT&b6Hbv - -A^l5` 1? -6|Rm6QBvQW(,/Y(WE%V@YnVI -! -KuCdunIAWTꜞjRuh+X !!acO@qKPْ֚ђ -%x)4˜(^HVsQR( UjƂLaСB"GYObW8o$W$=7+͜c\q5Wendstream -endobj -1655 0 obj<>/XObject<<>>>>/Annots 930 0 R>>endobj -1656 0 obj<>stream -xXnF}W PQX}pPihWR܄2K.)Q) - rv.gї wB)]P\\#:yhv;S3R~~bvMzMU%Nj7 "9-nUڍ6 %‰>^.>U_G\FQDo:2z'?rLR:i8fPw[,ٷd*Ψz[X}iK'TNLe!Jp,Ņ[]TOUY?Q'K=zi^]n)s-Ņ=oMrDQ,JZJuQijC5[(&w#QZ@P&*^7#Mf;jD儕?ݷc B5v2HXW;M2Qȁ"WB(]6 ],KU6*=[efr@Vr1 42>k \z4'"O6_ՎHwP-V-jV -^dm#x-ݍqŭq WC)X{EyEU 7k6Gډ^2f -o*ܯ J$kX&:cbfN}6^ qe?a+o1֠dpLgY4/ -endstream -endobj -1657 0 obj<>/XObject<<>>>>/Annots 935 0 R>>endobj -1658 0 obj<>stream -xTMs0W[ii{J'%Q*$Wq`= iOHYDqJe;[KJ4(35j@o0(AJK!$i=[A}r6̝!3g;؞2W^2*a seނz$Dz:w4ތj/V;caJWWHm缻y!zdw V=v_} ̫agSnYѽOp/[?.x%Ax5voPendstream -endobj -1659 0 obj<>/XObject<<>>>>/Annots 942 0 R>>endobj -1660 0 obj<>stream -xVM6W Cs v!(uuD[L$%);}CJdQh$97fLiSZh~KY5$/ -*Z̓EQ곢t,gI2j+ɬgm2wp:cOOqqf}O mvvM l/-M 5+'AUf3;OoV9U)_l>&4-etv^V䭔d4=*lpS%BiI!ÆXJP07ZTE9k0BK}!EZJzz8NCoY?ʆ #ʌީ}tR`7kېc>W.zqHOЯ:֪# :](GT6R 9:%9Hh#u4x9J)ѳB%u%*V - -*Mu%0t|[457jl]o"H_#p<-Q>v8N%ߙͯjيH(K?3wv`JM2jhEbϢ:5W{仒~uOˆ6d2tUC@&2HKt: 3#Z(l+p1$ -BgΨW-n_`BXAsj:ڣzj9ӜM&~Y6G"ՇUPLc2_7 ݷeepEnlOÿ"ALz# 2+zzx˸ݠ{.A@^ XKf3.ĹYFptvL'TG#Dm֣Uqb\(ogC<6eZbA[/vܶx8QzL{V&rZj;BVXBћM%(uCM#.AX[VR*kS>a%,`-/:ƌ3ظ.㠛Qyͬa֞\A"T)!m`@3uE0ِ+~%ӤeqLRU*E#,GKh֞B׆cR)*K{ X˥Q ys&jb,Vdu{)w`?o džendstream -endobj -1661 0 obj<>/XObject<<>>>>>>endobj -1662 0 obj<>stream -xuAo0 -j7v=r۰vEZm,y~OӭA ae7"d=[ ZtEsc: YfEYFr˂gocO 6jC<6:^W±޶ IE>I{^m_f J5ngzwg_>he[cL"d0RƿTXb6}~[endstream -endobj -1663 0 obj<>/XObject<>>>/Annots 949 0 R>>endobj -1664 0 obj<>stream -xWMSHW5UXrn]vة9Dd/z4ccFc/!~"t: !l?>G·`D%$8u -%AwG r.PZR{h k6.' - >^x蝦6L+8,8Yf3•Ft_QMJ}6wNq8 -jjit=(rG12ѷAUݨfIR".B -#Oh*ʅ ӹ4D%EUʇVt)*eJC\U#3v?AİZ >_ҼXnSD)3Zsrtkh-kL Ť'nDu+m({>SQ&pj@fHWdbDAy[YD'kZn UEI oٕr]@ --2Fzf5)Wz<$, vZ(g]2Y*)W+`$HfqW+ |EM;EȲs! 庸2?&dŇKk3i)Sy9F˦Y Cb:AlP.yƼ!92GQ2,g% CF;sH>U[fޟl TJNבt;}wڦ-sY -J R] h -y#x~݋!x|s2nz,(7\[C^|icoc5z7 ?RU[th4ZFrmuA3шTX, -I\.b< FOh-% -YRVdt` TWy˚Dbۆ6K2*C+t,KhT~qUUHNg]N(F,صiWKm`5ymg;Q 肣0=r5WYGza5\KH&zbK&@7֟07|w4e*xw#̘zRIi- &{v^=|yD&= Zsq;A3l`i+ -m!٠1';v6hmIĽ|Xo3 -]mŖ{ 0}r`ZPhJ*'o}$*[PBI]T)s>+.Tp:2L0ۃIJ@89Gvt'Z2G3c%=|&<_v}}Ċ`b>',V4zߒʌlrC/XY1q= Eyߢ|q݁8vSV%{:QɈ->ZqKendstream -endobj -1665 0 obj<>/XObject<>>>/Annots 960 0 R>>endobj -1666 0 obj<>stream -xWkoF_q[D5 -q쮁X*ڢ^,FXdBrҊ;CR:܇> Ϙxi63i6f!wi-h rYKwbA <8ʆOp9ԞSE3.=ݻ=q;ةËdomt?[Eқsk>kdq̀v2 @(w+y<9wi0ǻ1 lL!XM[IZ>^t-`@&ӫΧDXo sE̷ CQ8O iU-pMl3yV%̡id%J9+(5eFi TA+gx~W'c "Ӿù9F2ldDF9owHgE#gjP]2R_}$IkJ"b"G6|a.ZR5sB PW ^n}t<0Sɜ<5&U\|թDÅ?gXP z!cY4,#]WM1l0Ys=Ì&ي!G56]Z!BJ@yPUCv 1ơn-K,ZJ:3.6_Ł -i dC9ڍ: vL\77Ѝ7K?D{h&)֪91wJc.}jfjp+^HQR#Fm*,f:Gt,l +#YZ~D@P>{ЃifRU).|4`ց<6Tj#ЄXqyb:#.QNv~7"N+vս2ޡsch Sq8{&tD]KpB]pA@XW' /ڭmWc>NJ1Mah>xyJK̨(KQ'H %kQXf՜yqhTQ4vKf)bZzHdA)ȭD'fQ.+,s=?Ѓmq+$w,hm}" ?wN[Lj)2, oߖ>5IǝY  i톼5m:= {{9 or>ZNu'E+D75_;}8}ҫQDzRnXzf~l6_?޾׌.lx6pBAxә]\J2~yE5>;Yv8NiIDɛxA -[4b.0? xLendstream -endobj -1667 0 obj<>/XObject<<>>>>/Annots 963 0 R>>endobj -1668 0 obj<>stream -xW]oF|ׯX-ɲ$;n(>ȓt1SxwvHSSA`1;;4ل3kl:i2>x8f*y}) `Mi<~ -M+vCItq|j9}7+`Hyt>"{sE *-UQLzGIaV4WRƺlɮE'46wUiBeQ_/tG4[l48U^R4sg'z;T g"NamY͞N!4qI~4?,`LK(0G%NUשqeRul/͢. q`4mĕ&MikĹ+j`]LL 0qlx:תПOEIʍB5ۨ6񋜖Ҿ*Bt{JJUO/%(̙ckbm18B_ţ*GÇ3NQv#C*guͲ-|S{W`w'vvAhp:z85h>nuN[F*bfYk.:7{ -]PƮ$,`GLm`S=9rG3uCv<]E]xH!⸍N3drhJIء1B\̎L񆙆2raŕ% Y.h9a5 T..D~ !ՙZr+iɏ}66 +S R -5gWڣKbc\EJa-=v'@B1|]CDߪoƑ[]}Y: -jGoh[ح.Jvo+W)zd4y -"P;8¦EfP$#$()&̎k-m=P*1ʼnqTuϬVfex] oܕP,04FoJ_29wmEv - _#_-&5v4HH*4V0B4@ShbωKU -!hk  SՎfeUh~{~sPs-*m^hs„ - OYDGzִ| -%r(S;#`#:h5)&ݓ'Z'GR9f.KZ֪PG"VuUTf[T,7Zbg61}箊7G)@>.|'G-WKYĎmE<mA;ف -e W "rp/_Z߅F^~XfdAbX(SѕF28f6/Tre[5cSbQX6Fy ^" -=-#,+g#&O|gIY32[dÇ+״\5#1Ԅ l_Q!]5 \KXnOwo”x~u潱AKN;B\5ѪaU+tfDoYQyx~(dU~ &(Bfu3F4RkS7a*v"9zv.t0rZJmO|bh2F9oF˛K~a 1KW?tMm*;1o:endstream -endobj -1669 0 obj<>/XObject<<>>>>/Annots 974 0 R>>endobj -1670 0 obj<>stream -xXmOHί;5 -zG{C^!p&K -Ԃ@lvwg^" -0ހb/ B|u^4 c.(zAܮrkavz>GC㧖 xYP?l[4A={޲(bmMݣU]cw[cw#Orox Y13SP? vŠ5va 6n!8m9h ^c`۽(8&PlelV摷N{=;|s 4] #0 -it`EJ E}+\7&F $<+!sYJʴ^Ij$L˒ncI -Y6TdQDVT)eJ"bIR.s%R sh^0|}}N맬]MS_}b-Zr0ZVx0L7/PtS*%[lɀVEZѠ=`Y*DCu$yU˦+QE!1Jdk/ UF{u, WR7"qh -,T5(`֐S+@R'[H.ԭj~2оDYz0YYjv18ɫه2LYf ®7ϭd<ߏn۩K6˅ jO\'4{{E5"dDt5q!F\ Iv=ar?җY\Yx?a~td'r>_V]éIUMʓ={N?]3zsyMӷ>]<)Si}2s..|'%~ie2g['}4?^DjX.ڠAMσ -@t{(:i5B$Mw0KmTo+e!VysXYJ\(ךf%bV`Z7Ac%>ka `Ki*k`ϵB)E0etMUg]-JSg1}V-ܬ @9\U 3`7*̅JpèYAi7]󜼗ɪAu/鲒eky(M$-fբAe^AeN|R%O8N7q;_ǻ`9n<ܰ"!pW w`0yF3fu֍15o)?PPL07˖kpo"=K=mZֽځ =9&x)VǮ;لW HUZT+Oi8"A7h=lS}(LDbDvc\F#0|w-#/Pbvc*/[2M)D-Uc"ߎk(Le&]!{#C-+QsXҭLs繪!;CEJ^vZ2C8k P&\ d]wǦЩ,3}uh ْЅ20Y?WTe}K5Zi 5adlw`%C0<*.e>8~Me.agSVAfZ4H\<!a]HY:dg/4+?FY.}G kW凈0OB$ʴu1hK^]d1ŇQЂܴh<_a&h :deƳ aK;e|۶gp0WG,l޿B!.endstream -endobj -1671 0 obj<>/XObject<<>>>>>>endobj -1672 0 obj<>stream -xVkO8_q#V&MHe Z`i5~7vg;c;{$c-6>{BOcHVp:)q -Άe<@L}}fY˔Ad´#a#7+ztEC/@AzQ:$p2@@ sa&z-wK T&$¾?u@gEuЌAH2w {&]皜݁TpEq 1@C.PgG].EU ̱r*J]pqpŪLq$#03_3bO*6e+@]\_YLXɓy|:Ba[s'^Ssyyc&_dz6QSlim2v9X՜?%0݃9Ok`{y0fZB ut -ㅇூj: -t.e`6/z񘷀fa?~N[@|ZM%q]ϕ8|L 0H~ ,/P{DGFձYf(WS3Ia5,\{ Yj0wy=|]JNv^p +6S6N|l'R{g, noBL޲w$-p/ @25(@ƈNA@xnkKv}%8;e.jpc ¢ nZ=< -r*"+}Uv0QIhp;H97ܬ;!S>kTH4}cG83;/qxح8#{?.q/N ̳BBJbN[X4,JPD!]{BGRH ׇ>+R RWmV׉ -2sOFn\qW?hò(( lsW)(ylvA Hv%e(mtuAʶYq2mzJ[$Lm[ɔp&,am٬ 3Vב֚ -TV'WeA$$%"1-"<Ui%1exf~y<_YbD&MS6ڡ7S'C274nKendstream -endobj -1673 0 obj<>/XObject<<>>>>/Annots 979 0 R>>endobj -1674 0 obj<>stream -xWMs6WQF%w=m7a&=%L3i `}>&lIY9'c>Z4Xѯmџ*@g~ݫ8V[Ti5,@șH(۝1iIWժr ߈/'̈&JHm[%G:6>8x=,@O Na(8sE,;K83`w1+hM|"dO i ` zy(nHojk?^LVendstream -endobj -1675 0 obj<>/XObject<<>>>>>>endobj -1676 0 obj<>stream -xWko6_qO)ˏS`ҴY5kzhPBRVa}Rbs4!MFtvNi~4Hx7I4N~V= -aq>śpz0Yzрz,g aBd4J"=$Q֔V /*eC~ؗ)v##t5簙U<ƹJ:]fٝUCp1?wW?4GQp7D+!Hdȸؕ(RH2Yh;Ej*kYK<@cT -Go! Z"H%BZʢM,qa,@¦kJе$'pJTo3REAoő3:,q Yts?ivLp-ӑ~@rm~tx܄'coZ;X^ Vb#i%*mDWh*ZZiݩ(*Sz0|Q9\k̚Jtb 5Đ_jUxdrQb5 ,.(׵"g kl<^}+Q|4Wi` -ZB #rOx,d X'v#RŖV_Oə@Z&b`I c -C<pXv [{bkpSH<ōAYY w&欹8άW_ U(I>IT*^Ob 9\㥠RV|Z@N4;N_JFYw4CzmN;9: pL 4Oo] /crrnOJ!>ƢYa:#i}^B3y +߱65sk6 jxiN0Е؂0Xv詒X4q\6Z ,=dgeC*}]f}ǷLDlWªM^MT(y`DXkTЦXo)PSoJT$MX>"ϴ1gEJ_޾[#}0i_mز&!rr@Ǔq29BbfgG *s!endstream -endobj -1677 0 obj<>/XObject<<>>>>>>endobj -1678 0 obj<>stream -xWmOFί){  %QS --WUaml]s9U}f6mr/ط;33뻝1|BJQ4hMhv8#iv30#Z,!qp{4EO]-ki I. -QDNG*J' i.A`r?qXY4+NhX[3U9+C*ڳfD(:ܖΫN#)Icy{_>QaINW[2"E/D tHq.)KQ9sdrE ٍu kkG -o[~(Ʌ2z#JGJTLA3$.*P2X#e^R6l@#ހwJ6Eζ.|-66(YyicJ&jdJpY) -i_CHc*ĆlGy-m(6I tc l؟UVb+bWi#UK?XcjU⍗MmkXpt"VY@S ˥(]#7Ǧ^t iy{BCXr{{㲻PtVV\:ҒbA.Hw5΅$RGfR s UA8ˉ+"fj1ry: /l+si觻HWt"61Eصr2PɆ{fڍWƎ lܳ"/I<󌯽>=! sޅϺz,02k9"TqGh4(℁0G4A4C1IDd\Vܝxd̜'$5eܵ20nwlLmbT*X^YaP׆qEDtFV@$cH lR? NWTCPd7~v[ Zl {f>mV) *:UDު'q4 Ùc: |¿pq --| -`<3>o㡽zـ|n~|'8͎xi꿛?e"sbޖzn ) |ΟZZ>);Y5'b|G)ZGߞѹ7|{߆{r - #~2Ϣ!Db痝UK#6endstream -endobj -1679 0 obj<>/XObject<<>>>>>>endobj -1680 0 obj<>stream -xWkoF_ 6*y&yiYE~|gHaM$۝]}=ǴtNIq6G49ͮie|Q<9}ay6xL {̯L G#Z&ˍ(QDLMjި4m}iL E˚V;y$7xR25Z\-و)r\نU]y⸪L6uėȡjE?q vLִw7y|~m믍Iև=dF*W5vq$[q=~k]kV#J -oJh׵q'Eu %REh퀗7֣r6>H_-gq|Vu̝CN8`/ae1Փ0RȥC# eNmXTn?8mF_(U^XEkAoQ해zmKHjʦ$Is>0o!A#H6J<Dwomú+p?1eG >|BzERy/8*ؕ~ۤ -0nhavQp;9=qMɽ[:v#/lƢaQ} 8/˜1h]9磔[g$0$b{rcGDHɋ?w'vch{ Q@\5F+$;iLeJpb Rk0C9JE9p.(2pV vI,tQApcNK.@aܤE -xa1A 8B -"X'̱0[kDf^7(# iJtAb~2lgg -<Tߏ\d~!jd2y(ah~c>/XObject<<>>>>>>endobj -1682 0 obj<>stream -xW]OJ}WL!R^ TЕ6ofwMĵ~H33s̙Ό;!-(vOɜ'K<Ӕ］9xC988CF0N6ݛ͓yr_vE^aB%ۆ ofxtp{TY(wNSS\ SL/f[Ԇ -ŃnWzFgxBSnZLgbJ䐝{mHکюm7hJmU)~'M'jz$m%G%\8ۅqNJ= 1&: 刜/BĂ[>" -wS本%d7֖Mdj -jSΔ6Fx`ʒV2! ym[GTx}&Szӓa&B'`K"@15JRBDnbbYC?*KT^qvj; EK&5;j$+YTAwHK , p1{O3PKH 9Lnx䉠ֹt{{̶6.7ƾUe5l-X]LkϤJ5 -ߣRnaJ C?LÈ5sD]2HUC QJ87=X6*7X1:t`I.b=fSU0ם#/mYڵTDu~5bڝR$oziI -qG@ -f΂1i!0%w J&sVbkθ=Ȍg]ߘd]k}H[v1Ly慦cm3ċ =Pg[m붎Q؁ 41M푎IFPb$ؾ<#PKTȄ#3%j +HMLD' ʖe@9O&uxP\jx ۯ~s<=S"0.Ues|Wjk4̐ϲ'_ /A,"@6-|W H#|k 5%g;! Cx?!N!Ccs]}!z -Wjrd uki QZ"[ubr-E7gޞ΄9i[hU[r8Q>/XObject<<>>>>>>endobj -1684 0 obj<>stream -xTn@|W*UIM0~tFC}<`m喤;wrV%ݏYD!>LhfaRt :X yp&/%N5E1e['I08 V}UOtk] -]w=Ebپ:ܐ앸7U]TrI@\ɞ;,lkL] -{th`EuBfd4M>R7VqXB۪ 2 >;UBvitrB|4(獵F }! -N٦(ƷC,\/#L:mG ܺ<+|6£5E(Aa]*u{1'={ -4Joȴ;PI뚬еq#* -{.Vvp^K ݹ& -#Ў[rv=\`]`I -c>0J#0G .tId:~wOWLz] kh U~^1 -wP!}?endstream -endobj -1685 0 obj<>/XObject<<>>>>>>endobj -1686 0 obj<>stream -xWMoFWLuh,ّ-5IXiuKr)mJrݥ%e-(|yfdFg3U'g]'tq9:Mɫh]byIp Ojv4{돫[Z9SSomg10[Fdcܘ%tSg6 f2YVk[U}]ݘ=VScT6PTzO& -LJeh2;)U\-3B{@Q.t%yU紵;/oK뵮6J-` J7%?,v=?(\S !>:;O C;4Z9`΄y*Mt'4mS?͞w'"Dt) d8 dF]:'h@(ة,[lD>7(c'zMj4x 9gznV+ܴfDP7B#2t9D9*Z٠=Pw:nԒ3Dr|A2@6&k#OP#ʒ+03Wp̓Fw0%Ժ -/Ͱe޾\+ ,fF'yf"ŸвSn^;G[scaMzS}2SJ@L!q %O}"S2mK -鈫{wbg2U -zh8 Lm CĽVu%mkqօٴx*KBe?Jz-7lJA6]L+p茳m_tٕ 6 -F6Ә\/(Pcko{)|(fu. .6MAk3+Z“oMPi; bƒ\f?]ZAIlgޯ!BRq7qŲח3рFs ]fD=x è -qRd%xK,#y;M -}}@@@0*y)@Fg0\C3$=ϣ/d/1@JS7jtlt&RG}Zc^Jlj2 17ju&dExJqE2z,J:)7 BO.n&[|gdu Cw[t~cbG"ebZ͸c ̀W\ܨ.v{5RXƲvjkm V= +`hx fJ1+O DLpgr^T`PŒY`KaF$ZPzcwfVabVscux+Я݈Q񈹁 # 9?y/^G6=',~A;/GU"| q#"|}dX5O>;n3gLVقi${RI@QdE;^_}-'7},^,/2K6䷓Eendstream -endobj -1687 0 obj<>/XObject<>>>>>endobj -1688 0 obj<>stream -xXr8|W̲*uˤDJdV98x{ LBb -`ҊdU$ 0=4фwJI~/i2(~5ǫ˲09e,G=nq4Sb')- -&ZBZJ8'kIKUJ#" Qe47MU.je4݋A"yveI6L)Φl?/_,TGIn#6c$~hSӉKcsyB(N]xHq:8DٺhF۹Zn|8$cVԲ`W,2gHn~=}=$BqkTj["EU-qț¾LO%ҙ[U:Pʧ6cNJ{"ɔ.[@^l;.P̖=*^JcU{x^]N ku5y!MhwٰC@]ѐyS>et: }͒yhd- Yqkۄ\m߬$w۵g%Vh\"?Y˴OU)ryOijȒ*K b|(ph(s44@{+#8 N`>կWI {6F?Mh*^ =PS߆"eK׹itr~_렲mkazRdEo~x7џ!pFŵZڞ}>|qPEljJaQXYƦYZ.Q\TR?{PgiE;5O̸GtتOsn -=2faKMfٿ#nJR=rwJ^˫;+PtQ8fDd> C:: F *:)zhrc(ޡb*6Dcm5~k#8bMWK3Z7o³w_B_=bM#؆dQ5y+ ^ZwR n(* = r KsShs9xo0r`㟐N.xwe%\!TWSJ4T4{]gThT!0jMKXƢ-[$}a3m 4ou G|iVy( mk.c%0,H}wX? Q &Q6f+PQ/#4Zg5eU\ ndn*,/x=[㰜d'wo42Sރk -;_U}BqaxlVY֪ -7xhtsakYhL6ɸy%0c_\%U ^η>У -b--xp!w+c0p/ !_SP*w~hDMLiF^K/:Bzjx*Z"&,wlwuwd،ޛ<(PtBOh>+Ń*`Sgy}_z{[tCLdwYЌ_\P'6( -^ -OҴzt{?7,+b{Z*L>_%;FD'נ Uı g(,tOM%ͭ{ o:Np6_"j-*YȜkmSUz Ot2 wo~qg)endstream -endobj -1689 0 obj<>/XObject<<>>>>>>endobj -1690 0 obj<>stream -xWkoG_qE`]`W75#5mUR4ffsgBqMT[q`sw'}O([ c~VRq;ROt"],'hgKTZR%E.}@RT)AVWάWY$)C\eҹ.-eF2Oq NgoOzooo+I-QU`Z){H*ˬ|+`p6,Iv\URSa,2sGZVzA5#*ReK$jo!w&'[)Ve(2cs6, TI#'Y3JlݵpRd2IE2arWEm5gRWx!FV.D Dyxi9[t,OšF %9P{x7u<k@ IB|auSNztl҃a:d= Qq/eܟ?e:c@Xr= mbhd rLg c -.x ]0mVu. .%r `*𭕴Og\3N$,p-ZxR-hkj Nd&~#Bc=@7>DC{S(d՚[I<> gM\dOԞWְ k;|"q0jD?fjf EULS=b8Ioj}N 4܃&-eYF}< JX夙AaYb`ʬfN!02⤛PG,&E#jJ(p$P V 8J2wxߡf'^yTNxS 2A6!_D%*խT;Ry B h<^fZ^3nQc -.^E#m,*xJ tB8r5:Ebgh`Ąz-M'p1d4سORV(- =S]-k܇X]:199jONu+Y߬,p8[l 6 mQ'p]@4Y[je܁:9!x,|trOrؘX`! 2Fx)Ξ6G yn # s",?)>]c^4".S A7߰%ZH.94q]8-'%JIz0^8z RP-v'W7Q0=C]ͤ<\!vK"!V@4q<^_?5‹M?Э6(Yhw{c{!5ZB2!R~>_^Oogw,rr{wL^v={ `kTT|Pi>@+ `bI)~/nM5o̡Yn4}`jib67Ͽ6N(~?>z:=.omoe{QL4ۣ F%[nMV؄%#MvWqnR t\ד -Iendstream -endobj -1691 0 obj<>/XObject<<>>>>>>endobj -1692 0 obj<>stream -xVo08K-i-e@"Ȉ'^4iI٦i lǜJξ;怍Mh!jפvڳ ).;mٶ $2 [4< F! ݱXtlq[9~E۹rVK[7=͏2JP@@%$- -"U s|4YpLπK'\*I|97PTt6*9rz -Z JC\M۟;wCwx5 Ίk =ZE!yTyĘẐ~f |3^BFpϠSi l/(rXoa8x?7ޝzfxCFO -PBrX1 sqK&'\j&j:L#C9s⃦5h l-6:$h) _@=,xQ]G Õ\qLZܖW:9A*G-fϿz~r{4nTAW'}aٝ^!X#hac/;4 慭\sn, ذuAPݱMͶi}{aendstream -endobj -1693 0 obj<>/XObject<<>>>>>>endobj -1694 0 obj<>stream -xWQS8~W/"^dqg(t/ 4׶&rI +aI]4ta O <QPm7xMgJ~5/Yv-Z#2eQ)Tl^|%X2##|IQ3@IkARjکi` x1<ɺeF>뫇>"4x7 +I4徭f#0]f+_M9t蝡;.ƽT(MX GzfBsE(hrQR)owF4)F 8UOEB~O c6`xޭVwCgojsґw Y`fND"Ɇ"TZ"X쇞RK=푏ĠcjA6iB =ϪZ(b,_񞔩$>r59 y dI*N!E=8Rz31 *ki1$ݟz&'9&ط/ժqϪe+^l؇`_68XCU$BO7^Gs@Z|cf D>esꗄ94m:oo'RJLK4iC X)zm tx$N [$8Ū Wa"ߖ{67-C~BZqkP0عHefn/W'՗^ )? +~\i^%mQF Ȑ"2@ϙ4ỀxBC֭;ޭ}~bKZZUq5w';cpft`9m# 慒~/Fd?Ck[y7kxPFQ0<<_vbMor8knݶ>]"$ ^ֆOٍ8oM0 AK$f,DʔQF 9S)ΗLL)CúgER+ƤvG>Bh +}u%QX4(֦*_¸w5ګ +Bc+dU-SJDw^tͦ|;ϯz] +k>sAz!][ܤ[y_- lQo/^2vYxj-,ʒ ЃC B3Kb$M=D[ψrWmDwmVdoFg,3!=c6Q=ext+ qfI>UTU蝊uޘeiI{G&b1tbVGX@8ˑdx|M6Pl{.ŬYll7Z'BZ{"~r10!}gB ht6=(؏(装sA' bL_?BcCo]^lm =e,L+}>w2_+"]VPa |zxw7b@8 f̅# 7#;PH! +K(!D|+w|p𖻄>^N\a$FxnFg9D'> endobj +6603 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [443.558 712.238 717.944 725.14] +/Subtype/Link/A<> +>> endobj +6604 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [129.766 698.689 348.214 711.591] +/Subtype/Link/A<> +>> endobj +6605 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [338.851 570.769 555.269 583.67] +/Subtype/Link/A<> +>> endobj +6601 0 obj << +/D [6599 0 R /XYZ 85.039 781.388 null] +>> endobj +2738 0 obj << +/D [6599 0 R /XYZ 85.039 761.463 null] +>> endobj +6602 0 obj << +/D [6599 0 R /XYZ 85.039 729.511 null] +>> endobj +2742 0 obj << +/D [6599 0 R /XYZ 85.039 545.678 null] +>> endobj +6606 0 obj << +/D [6599 0 R /XYZ 85.039 521.696 null] +>> endobj +2746 0 obj << +/D [6599 0 R /XYZ 85.039 316.435 null] +>> endobj +6607 0 obj << +/D [6599 0 R /XYZ 85.039 287.031 null] +>> endobj +2750 0 obj << +/D [6599 0 R /XYZ 85.039 287.031 null] +>> endobj +6608 0 obj << +/D [6599 0 R /XYZ 85.039 265.839 null] +>> endobj +2754 0 obj << +/D [6599 0 R /XYZ 85.039 145.169 null] +>> endobj +6609 0 obj << +/D [6599 0 R /XYZ 85.039 121.851 null] +>> endobj +6598 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F14 2903 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6612 0 obj << +/Length 3339 +/Filter /FlateDecode +>> +stream +xڥZYsF~ׯ038R$'Jc%z唓IH@@Kk[sLw}@ȃQl\O%(]ǣa_(B2<9}G&^2}MgwӱRQ{:y8pX;g7<;fy<5r1 $'Fpۉ$Bs}^KJ˓v[}`y@A"Wq4j͝*ZN튛EÝ%4`:z2 F缾v~:=TvY7D 8ɹ]-%my%jdh,0%yhϒ%Y7/-N-S毬 +XK9zv^Ҟ֦%yY;Q)HJ7m^ىD`~^K:\JXBAƸ۩lz{qiH'I?pDY2+xyUF5^$@?GP|Щ1D: leY7ߍ2cUo0Yk$l-Iό]]]t) U4EQ_n&MȹdP4zTF}nVR<\Q♴PhșƊ K[^Zۢ2~}!ƒM\~;e'< x~:J<ӵ̟]\_ݜdz~A5-z.`mz6<ƃvUT:$߳:~O#W7xLJ=[|2BL׋/?]QKnY& (W2 œ-~)Rnb m&Ok5_H3KW HȮmon" xP +x5xB큷xpZ9-ިZ؂\)#.Z[#z2p +9dE>-7`;@`F2_3sqP8$c 6ml!p 84݆I*dmh69X#@/@Oyd~MGv&LIpH:MR'RQwuo"$0ԧ0v ;q!֬ 0Zf2 w87 }4Uxag|,@'0 ONHtбhG0m<ݸZl拜TC]Ab\8i `ĉz.Y[|oIs|<dXD?m-olx83n fH@-R^|!1P% dڶ_"鴘}WPJJ(kiN[qILFd&d ka#r-Hy(5C&<aY"7v}@ǫ;.fdt M"sЍq3H)PE?ny|knG^ۇS:qYDg6YY!`Rql{Vuy/Z3^ƻ?<2lA[@%QA 5bKYy=LdH=FiUέ:g#kEVYwܼ,4]u)=ٽ%'Sʧ<B%N=="Aynw'X }󵱷⁍I+IpuL"R2P$i@Є +/dy;]tio%_u8bd4_űƌ^7UK&H[7 +ŰmCL%;NHvmw~e#5o>_cmo;A믃#p%L(P Ꮗ{us' OBp%6 xO!:[}Ua@ *t! + Knh1AKWkfiYz.911X0 p({JouS|Hܵ$ؿv nL + ؔj#rUq0 bˇVWk%L~ZLy/҂]:*ּנ9 2۶ Pj^ר`- +}xT +)vAE9c% +^YZ9p*q9nI{yIF^u - +2gaTv"A@Ta?ጔ;=7Aj_O\ )jֵiѺZD0L~@5-Ѽ.0X xr@9*j)~d%:$50D;5qiVǙH@ %[ce"gݰ#010InϤ!H bۈ)@cVQQ<`b:m.{6S6LU;㕯Tձ?rzڂi +aDJ-%̙vr-e }@]! +0.yW)CJ;hozc:`޳Ar%)$p +7XAekrE`%_k6 lh/|vd9Y(YJ+l`@VUg<3k8ԑE-|)I}+US@6:r歞x)(UWj䣓`$nXr,{|D*jBX٩H6#Ks@gDn/@B<X=އS.C{pJ%==;oz{ 8#|xwbAAލ~G"dC`}+ n~AaUq 0,D;GQh ı}@R~{a5QBƿA>ޯ?ºl)vAGݼ +ZBMFlT?`pc/>ڋkh>-BNk.3RI鉂f v#o%R>n|P!~n?\d.[!OM"{(k&vA)6a;MKQ"YؽW ԰Jygf}6x0!z(PT"c0p xˇBC|Qf)qbsPOSc>~L#ẇxط5!lС{ˁ:2/HzQI4f_ ?k~䀪dOh<7?Q_R|6A2(M$endstream +endobj +6611 0 obj << +/Type /Page +/Contents 6612 0 R +/Resources 6610 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6584 0 R +/Annots [ 6616 0 R ] +>> endobj +6616 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [394.325 552.321 452.136 565.223] +/Subtype/Link/A<> +>> endobj +6613 0 obj << +/D [6611 0 R /XYZ 85.039 781.388 null] +>> endobj +2758 0 obj << +/D [6611 0 R /XYZ 85.039 706.019 null] +>> endobj +6614 0 obj << +/D [6611 0 R /XYZ 85.039 684.823 null] +>> endobj +2762 0 obj << +/D [6611 0 R /XYZ 85.039 602.015 null] +>> endobj +6615 0 obj << +/D [6611 0 R /XYZ 85.039 580.819 null] +>> endobj +2766 0 obj << +/D [6611 0 R /XYZ 85.039 511.56 null] +>> endobj +6617 0 obj << +/D [6611 0 R /XYZ 85.039 489.699 null] +>> endobj +2770 0 obj << +/D [6611 0 R /XYZ 85.039 421.105 null] +>> endobj +6618 0 obj << +/D [6611 0 R /XYZ 85.039 399.909 null] +>> endobj +2774 0 obj << +/D [6611 0 R /XYZ 85.039 288.828 null] +>> endobj +6619 0 obj << +/D [6611 0 R /XYZ 85.039 258.627 null] +>> endobj +6610 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F14 2903 0 R /F35 2888 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6622 0 obj << +/Length 2863 +/Filter /FlateDecode +>> +stream +xڥko8{~_NjV[i^MVfsEJ~[p8[zßd|fZY6Yn.Vyc&(ΛwI4Ѿ|x*bŻzyxi: 35iMw%#?.޿O cկ7/o)w0#G\|OV/ +lc_iX\K*Bw9RMx)XU/ )*JB'VuBLW@0kO.\ozmSәrMN,QtCx g>i~uw-? AV$e˨y@!zABvx5再kq7N8}A+r&W2hx9:JCϴ+~i1VD\X &ʚ9+i= FFKHWztq7 aӋ?>9gEϦ^^z?Wp~ųA:iή(>1Yr t H?Ocd>ɊVF- EGtl +6cC\,!eV?W!cf uFi@V]E.ߙ +R<K6}HW#`feFK.e͇%>|+hPyte)e +y i6\-)QmѲEs]j+dZe180a߻qs¿tqȽM]c@a+6*%D$w`±$*H,]CU_TL'f1^?ϭiײ#)P) =-rtJfZ%2y⊗9>?Y(dGd)a>X9=&)k[37oLP"шf;`MobwKomlhH}$2|9LTZ +V۰9]sƋňST]N׊'XQ#;R@cv Y48v.]j:UBsBϰ:FI>{*([+8`m}UUGɭ%| P0<պr n3H.~SC + :Q佗+H-m?Cƃ: +cmQ #oNQrEԖ:焘T[S~o Ũ8`e/w&r +R*K$B_uk'_n ʩw%TfY06dz^G OEMn 4MH-1ry +4'9LJ3-qK,xُ{P08ON}A#C| #,OkD4*Ɂswc8U=Uw:lINhȀ*ˣ:s喻֙JӶܓZ78^p=]g 8y29/17 COZb3QTKבܚNZX;aJ]𸧈7 .4457^}1;XK[WqH^VG$II!ȳ)KD*yW)wbo8)V~p0JpNbQ^ɹUqN~4ܷ#lB+ /2endstream +endobj +6621 0 obj << +/Type /Page +/Contents 6622 0 R +/Resources 6620 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6584 0 R +/Annots [ 6626 0 R 6628 0 R ] +>> endobj +6626 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [149.104 518.42 206.915 531.322] +/Subtype/Link/A<> +>> endobj +6628 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [165.346 77.186 348.339 88.876] +/Subtype/Link/A<> +>> endobj +6623 0 obj << +/D [6621 0 R /XYZ 85.039 781.388 null] +>> endobj +2778 0 obj << +/D [6621 0 R /XYZ 85.039 761.463 null] +>> endobj +6624 0 obj << +/D [6621 0 R /XYZ 85.039 741.134 null] +>> endobj +2782 0 obj << +/D [6621 0 R /XYZ 85.039 684.25 null] +>> endobj +6625 0 obj << +/D [6621 0 R /XYZ 85.039 657.636 null] +>> endobj +2786 0 obj << +/D [6621 0 R /XYZ 85.039 129.164 null] +>> endobj +6627 0 obj << +/D [6621 0 R /XYZ 85.039 107.402 null] +>> endobj +6620 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F56 2898 0 R /F35 2888 0 R /F14 2903 0 R /F66 3248 0 R /F11 2906 0 R /F72 3974 0 R /F18 3977 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6631 0 obj << +/Length 2889 +/Filter /FlateDecode +>> +stream +xڝYY~_G +h6ټvֆ7 #R3eSVf}j:@`X]]U5j?b?E)?ʲz,N #?W6Wnw~ӫ4r*Ui4~EI-7 B?R"ɵ#x,~_8~'\EI}]F+Jy47yܬf񗻟qD$| +,VaGim$m%ۀzT(ν`Hʶ%bׅHH/TA>!4MI)ʽ (5LYQYTY}_)׎U<ʃ>nehgv5~]ü">2}ЁNO: +j\^p=t§K[YlYT=jm3Y +nJ2 M;uf x:LF ~ӎjF/J7k:Yڀm~]XP4eT_ .{eچ鶕\3-l]W 5-|ZQEޗ~|;%|ki0x׫ $~f5O+_%yBy0ـ>Ssv)a%P$~ܘ NKNOcI5I$HJPJt.jgݓZp=azaAejZ}a/J(DZދs2gڝcOm6WNӹc-tTwŽz4ZHxj1X +8&sisrcv5w +iWS_ (i7 0hy_0k>||E~GՄٕ ,}kN7$QX?x^L_ǫr3BJR3sr\'piK^{y} "/롦6B۰Bb w)1,OG&?Wuֶ~Kdžy UɎMy._~Bt\&wP)zA +H +PUX͟7d2ܮ,TvGٹza:S&MJZh_Wy@pPS;!$-aYnKEi&J\nLRgFxG\x1 &ڃq6 gBQ3NRpmO۵`2e t)9qF;).(;A6xF$ |5|.43Z^ Tc3 $t:> endobj +6632 0 obj << +/D [6630 0 R /XYZ 85.039 781.388 null] +>> endobj +2790 0 obj << +/D [6630 0 R /XYZ 85.039 761.463 null] +>> endobj +3070 0 obj << +/D [6630 0 R /XYZ 85.039 667.044 null] +>> endobj +2794 0 obj << +/D [6630 0 R /XYZ 85.039 667.044 null] +>> endobj +6633 0 obj << +/D [6630 0 R /XYZ 85.039 639.536 null] +>> endobj +2798 0 obj << +/D [6630 0 R /XYZ 85.039 406.978 null] +>> endobj +6634 0 obj << +/D [6630 0 R /XYZ 85.039 377.574 null] +>> endobj +2802 0 obj << +/D [6630 0 R /XYZ 85.039 172.114 null] +>> endobj +6635 0 obj << +/D [6630 0 R /XYZ 85.039 145.5 null] +>> endobj +6629 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6638 0 obj << +/Length 2794 +/Filter /FlateDecode +>> +stream +xZI6mŐrSN&qwjj*-%tHݚ_?oHJ|T*-,[:\_b?P*B_ej[=x +FH6wwUy}b_jo}xiQJy*כ4ͼu-kW:ʼ_>}߯70ƫ~>|q΂sd篻 V;`Wyzv0]?~xNxյ*L]^?'#GQJM8zE׮dU\Ÿf/8v0d#^KhÃNL^2iHH 'B[D64]YYoPMd`s_Q, \KOl r8 U44G*jlR7 +ނ +v@,lx#80ᾳۛxl8FZ"s\\H@O0 +/83Ցg5a2ڙ[q.t.T:UP Lύlj%2. c%Q̊F<3$ +ǴB:s ;%|ώĻj +r^b<*Dd[xBUsԝ7fx(I? =ʼn(SNkP6 4si1%1i8V 6ЖpB]ݱ;&~)"g7G#6Uҽ4)܂͕wl+ǭpdԗi+>I4Df~P`VJ'WaJtQCyd6^SRD.=wp݁9@'MRwMQ/Ɨ2X?i_q kFǴ(cحs76 d< 1,c3|NܞE1*,HN[[N/]< HPLWe\N+G Ͳө, 8ݧj`&#Ͳߩ8תI +Ŏd*:Z5~vE_BVJjGYbjK76līY lH;0:qF*bX%1}8 Ɛ<'HsddNF(3>*^l݅f1|4v5yG)ʐRg'VJۘʺAlc Rڧ1".sk<"F]Z{/"\V#aU-2D8iGijS^*)_Rj>M~Fix7rBsq4:̄():<xwZp*J6h +2a}a:1=][H/b<ӭZFX)~wrr`q-anMuX%X@yk)!RF@L +&v ,a4J> endobj +6639 0 obj << +/D [6637 0 R /XYZ 85.039 781.388 null] +>> endobj +2806 0 obj << +/D [6637 0 R /XYZ 85.039 664.197 null] +>> endobj +6640 0 obj << +/D [6637 0 R /XYZ 85.039 637.583 null] +>> endobj +2810 0 obj << +/D [6637 0 R /XYZ 85.039 483.53 null] +>> endobj +6641 0 obj << +/D [6637 0 R /XYZ 85.039 454.126 null] +>> endobj +2814 0 obj << +/D [6637 0 R /XYZ 85.039 397.708 null] +>> endobj +6642 0 obj << +/D [6637 0 R /XYZ 85.039 371.093 null] +>> endobj +2818 0 obj << +/D [6637 0 R /XYZ 85.039 257.688 null] +>> endobj +6643 0 obj << +/D [6637 0 R /XYZ 85.039 231.074 null] +>> endobj +2822 0 obj << +/D [6637 0 R /XYZ 85.039 144.767 null] +>> endobj +6644 0 obj << +/D [6637 0 R /XYZ 85.039 115.363 null] +>> endobj +6636 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6648 0 obj << +/Length 2785 +/Filter /FlateDecode +>> +stream +xڥYKs8WhNf"-yy*SLDK\Sx mIa*@אigFitԨ MGՑ-L27Gpdt6TW$/x$elO'zWOOuq6@GooFn-X=CuwAߏ +tZ^>* +}vSq_8Qvo%&&Slب0| Uh!c|DZE:$U.Qyߌ\ڬzq^7~L&$c_ 4|BQmW=rg4pN뱟@(-Hxe o n2:hw,DzO+=njjѣqu9509[ߋ+`(\a<{[0EH&S4'O+xUNw]p|}')nt0 n`xhڒ;V%-acHd1W1` B3oˣ|=y 3W-C{'|DE ̱͚.HOG-!V`F=J746zzA ̽v>#ӓe%W)(Z?L)nω &^5sML`pkRE-\ngepz<rW˭|Wqo%2gi}5Pt2pȏfq_8-󦠅w]6keGb7?l/mbIĵp1rHU,Fibj +.$Qòty˽:{v0xXb(96{h4&2h4$] j[[<,d]cMYvMXu8nl`Njש*vHд;% +a7ϝh`vhۜB()W=ꚢiLjDR淉mx辶](d*q -EQ' ׹g)<|G?x,'㊡eQb|]I6ŞOбغe;X=xDiҙ&{Pb1$ͥ--aɴ^wGu0>16TqyA\/Nc8_Za21wRkH$z5foVp8˻Gn>4/02<ߤԼS~+|3!0*q{YKSAÐ;⨀Y\n sB$4hv>w;v{ si@GC'c>-%B7h5^EY]iE kOtK5pOKAr Şs՛]Zۃ (n;PM[sN *Sn"%wDZf+DZo۞Z˺_oeVl5o<qoV'-#K)ȂHQ?+hc!G-GɗKD_>^9> endobj +6651 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [321.922 723.034 388.309 734.724] +/Subtype/Link/A<> +>> endobj +6653 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[1 0 0] +/Rect [229.043 639.333 352.339 648.901] +/Subtype /Link +/A << /S /GoTo /D (Other-Clients) >> +>> endobj +6649 0 obj << +/D [6647 0 R /XYZ 85.039 781.388 null] +>> endobj +2826 0 obj << +/D [6647 0 R /XYZ 85.039 761.463 null] +>> endobj +6650 0 obj << +/D [6647 0 R /XYZ 85.039 739.701 null] +>> endobj +2830 0 obj << +/D [6647 0 R /XYZ 85.039 707.591 null] +>> endobj +6652 0 obj << +/D [6647 0 R /XYZ 85.039 678.187 null] +>> endobj +2834 0 obj << +/D [6647 0 R /XYZ 85.039 623.89 null] +>> endobj +6654 0 obj << +/D [6647 0 R /XYZ 85.039 592.364 null] +>> endobj +2838 0 obj << +/D [6647 0 R /XYZ 85.039 427.552 null] +>> endobj +6655 0 obj << +/D [6647 0 R /XYZ 85.039 398.148 null] +>> endobj +6646 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6658 0 obj << +/Length 407 +/Filter /FlateDecode +>> +stream +x}RR0 +|q r$CtJ؉Z&XJ+ 2$ϬC z![\-0!tNkٜ͌AL,z sZ,N.dJ1Ċ%CT@4iVT\KYK~~ 22]5ίE>FݓDۖCwjVx.nŗx ʕ,Sd_/W:3{^pP F7(jKUcFzJ+ڑh)oP7fd j:t"=)jm OЄ^MˏkRfZϨͪ,](}14jһUꌼզSqqk_4~ѷ4"*PB.A-pd$aGF͢Dr0'㌟,endstream +endobj +6657 0 obj << +/Type /Page +/Contents 6658 0 R +/Resources 6656 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6645 0 R +>> endobj +6659 0 obj << +/D [6657 0 R /XYZ 85.039 781.388 null] +>> endobj +2842 0 obj << +/D [6657 0 R /XYZ 85.039 761.463 null] +>> endobj +3071 0 obj << +/D [6657 0 R /XYZ 85.039 667.044 null] +>> endobj +2846 0 obj << +/D [6657 0 R /XYZ 85.039 667.044 null] +>> endobj +6660 0 obj << +/D [6657 0 R /XYZ 85.039 642.326 null] +>> endobj +6656 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6663 0 obj << +/Length 2761 +/Filter /FlateDecode +>> +stream +xڵZ[oH~ϯhRC]}%NN&&n6t<_ԥtj-ZE8>wnu(H]d$<_%<}AH!bƊD^89Ⴂ̫\d_|]PlrA?#A22.F[4ڔ2*4*͡]n>xss|}SA,b O$dR(6Lzl@Y k"n<ʻ=!ڛ=(XJX'bԤ xr>Jaѡ3Rp +uekOݧ%S X +Ϲ|l"jtO`,9$iUg2^"2` +ueb03CqV|J}Ӷ\] ik4"|HΡ_QaBTR1BbZcS[Duܸˋ⡆@!ؔm!~:2<P^\F| PV@Vi/QXsf\o% )t ذT{X +FLؔuba疝D4` +uel)^~/;#4.(&i713X)O!)dNr`o˜1=9af !/#+lXf}} CCP^@Ⱥ-Mh-N84I )F8T3>5͐ +1ϯ/CK"Nk12HN[y }VܛxWPjS캲E(rkMqb^jjHLdﵞ"~ЋԨ +e;z=W!D[M8搝<$<0sB!{]s?@5 Rf;A 57w:$u dU+0 ݴv,0>fid?-(vbf\::Щ4Sv 9S@[G`EF҂ OU^ 8~'MҳfX{D`bek#H^@$,9rm)ǶlpХ;T)Icǃ}F,P-CԧpRP:a p+%~L HuemOiAmceī]iθ\S̵Oi  +5#T~PBIvVrW.wNo zɘьs}[BQ +5#T~PiKwfyfZ^ q pӘB:-8q*+p3\PB!c{oۍXMx V+BL'yN Lk* n/o1qÊblL]jcj.ڞ}tG09ofG7{=!ܣUw>QSOI MT +?k\ߗnDe'Nf NSB3- +Yy-Lba0b#i~,fc][ky÷E )=Jl8z],{{fLɝ[T, &a akf QyaԛօqX+5|w5Wѭֻ3H˥Cmht#L)k=Z+Q܂ ueh-nSpfUoں[<ߜ,'_XM5bPdD3 @#Bu͵TOxx_UGl؋˩W>Xlbә쟆v\RYͬ*omtuR;"\}*'%.DE#0yN__i@endstream +endobj +6662 0 obj << +/Type /Page +/Contents 6663 0 R +/Resources 6661 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 6645 0 R +/Annots [ 6666 0 R 6667 0 R 6668 0 R 6669 0 R 6670 0 R 6671 0 R 6672 0 R 6673 0 R 6674 0 R 6675 0 R 6676 0 R 6677 0 R 6678 0 R 6679 0 R 6680 0 R 6681 0 R 6682 0 R 6683 0 R 6684 0 R 6685 0 R 6686 0 R 6687 0 R 6688 0 R 6689 0 R 6691 0 R 6692 0 R 6693 0 R ] +>> endobj +6666 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 625.659 402.992 637.349] +/Subtype/Link/A<> +>> endobj +6667 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 612.11 385.241 623.8] +/Subtype/Link/A<> +>> endobj +6668 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 598.561 357.484 610.25] +/Subtype/Link/A<> +>> endobj +6669 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 585.012 328.405 596.701] +/Subtype/Link/A<> +>> endobj +6670 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 571.463 370.677 583.152] +/Subtype/Link/A<> +>> endobj +6671 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 557.913 289.975 569.603] +/Subtype/Link/A<> +>> endobj +6672 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 543.758 309.786 556.66] +/Subtype/Link/A<> +>> endobj +6673 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 530.815 358.538 542.504] +/Subtype/Link/A<> +>> endobj +6674 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 517.266 379.598 528.955] +/Subtype/Link/A<> +>> endobj +6675 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 503.717 460.925 515.406] +/Subtype/Link/A<> +>> endobj +6676 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 490.167 350.768 501.857] +/Subtype/Link/A<> +>> endobj +6677 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 476.618 512.306 488.308] +/Subtype/Link/A<> +>> endobj +6678 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 462.463 512.306 475.365] +/Subtype/Link/A<> +>> endobj +6679 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 449.52 356.69 461.209] +/Subtype/Link/A<> +>> endobj +6680 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 435.365 492.684 448.266] +/Subtype/Link/A<> +>> endobj +6681 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 422.421 512.306 434.111] +/Subtype/Link/A<> +>> endobj +6682 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 408.872 420.309 420.562] +/Subtype/Link/A<> +>> endobj +6683 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 395.323 388.007 407.012] +/Subtype/Link/A<> +>> endobj +6684 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 381.774 236.368 393.463] +/Subtype/Link/A<> +>> endobj +6685 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 368.225 331.698 379.914] +/Subtype/Link/A<> +>> endobj +6686 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 356.797 264.271 366.365] +/Subtype/Link/A<> +>> endobj +6687 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 343.247 212.708 352.816] +/Subtype/Link/A<> +>> endobj +6688 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 327.577 512.306 339.267] +/Subtype/Link/A<> +>> endobj +6689 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 314.028 253.915 325.717] +/Subtype/Link/A<> +>> endobj +6691 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 255.304 403.258 266.993] +/Subtype/Link/A<> +>> endobj +6692 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 241.754 305.962 253.444] +/Subtype/Link/A<> +>> endobj +6693 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 228.205 343.331 239.895] +/Subtype/Link/A<> +>> endobj +6664 0 obj << +/D [6662 0 R /XYZ 85.039 781.388 null] +>> endobj +2850 0 obj << +/D [6662 0 R /XYZ 85.039 761.463 null] +>> endobj +3072 0 obj << +/D [6662 0 R /XYZ 85.039 671.062 null] +>> endobj +2854 0 obj << +/D [6662 0 R /XYZ 85.039 671.062 null] +>> endobj +6665 0 obj << +/D [6662 0 R /XYZ 85.039 642.326 null] +>> endobj +2858 0 obj << +/D [6662 0 R /XYZ 85.039 298.585 null] +>> endobj +6690 0 obj << +/D [6662 0 R /XYZ 85.039 269.181 null] +>> endobj +2862 0 obj << +/D [6662 0 R /XYZ 85.039 212.762 null] +>> endobj +6694 0 obj << +/D [6662 0 R /XYZ 85.039 186.147 null] +>> endobj +6661 0 obj << +/Font << /F20 2873 0 R /F14 2903 0 R /F66 3248 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +6695 0 obj << +/Type /Encoding +/Differences [ 0 /Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi/Omega/alpha/beta/gamma/delta/epsilon1/zeta/eta/theta/iota/kappa/lambda/mu/nu/xi/pi/rho/sigma/tau/upsilon/phi/chi/psi/omega/epsilon/theta1/pi1/rho1/sigma1/phi1/arrowlefttophalf/arrowleftbothalf/arrowrighttophalf/arrowrightbothalf/arrowhookleft/arrowhookright/triangleright/triangleleft/zerooldstyle/oneoldstyle/twooldstyle/threeoldstyle/fouroldstyle/fiveoldstyle/sixoldstyle/sevenoldstyle/eightoldstyle/nineoldstyle/period/comma/less/slash/greater/star/partialdiff/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/flat/natural/sharp/slurbelow/slurabove/lscript/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/dotlessi/dotlessj/weierstrass/vector/tie/psi 129/.notdef 160/space/Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi 171/.notdef 173/Omega/alpha/beta/gamma/delta/epsilon1/zeta/eta/theta/iota/kappa/lambda/mu/nu/xi/pi/rho/sigma/tau/upsilon/phi/chi/psi/tie 197/.notdef] +>> endobj +5443 0 obj << +/Length1 794 +/Length2 1135 +/Length3 532 +/Length 1713 +/Filter /FlateDecode +>> +stream +xR{8\gF]j!Һ4_°Ƹfqsp9g9c5 D$TJRThf$!i4JKmRaݿs{g# a0C G&>L Aa`9br Wۙ_L#IE[PP KB0!4-}2x: (L&!$զQ\7iH.}2۰IICE^^^.Ε{uͨ^$8_L"0B1їQ;LJ@B FhLgyGd\D C!L"Xo0 +샌o=$,:@Ë  (!7fɐpD b4I +/n4 .@ +9D$b,&@PVXIZP 2 p]].e25I=I={dxjջ`,G&8d+9.܏"ir8nN V(q%6!d0У 7rUfG҃;CCBqbp3', GMzQU 8-E?KZ/?H,dzbXG& @ؚ?ÑJo}MYtIQP|lAQntPPy̷ʏl~O-br]U\ŖwҊѩ_)[ߋzhy{9]7& VnRYǣJ?Tսty$=*2?XiXm3qJ 8эN%'pFm? Q )^X A>eOouh5=N%oHuU=C1AfT6w4|+O,vBeŒ;+E^v1ztMAI{cs*.D͍vLr3mm;Vf[~%S25]KVc*motSuů%DgƘXzXzgj/W.im_OZgJDset}u eW+Xȧ[g.jYאu9?_Ѵak/xDmW6폺57ե]z`IKH j4ÞKx\uN1ԇVS׶%3zGkG?ղըْ`waboYH +/98 O6 xN =t7\?q:¯zp^J}N?Ux'~|-WH= Y͜~}!;p;iwud3O{b.ZPQEL$4h].|w ϖ,Kw8|jW0=׋w +~pZOY]C]Cpuڞ YY]Fg&#S{4:͌=ڧ!'9(BڧG8{gSi|YV +?(/?Q@(8Ix*}֎,endstream +endobj +5444 0 obj << +/Type /Font +/Subtype /Type1 +/Encoding 6695 0 R +/FirstChar 60 +/LastChar 62 +/Widths 6696 0 R +/BaseFont /LOXTYT+CMMIB10 +/FontDescriptor 5442 0 R +>> endobj +5442 0 obj << +/Ascent 694 +/CapHeight 686 +/Descent -194 +/FontName /LOXTYT+CMMIB10 +/ItalicAngle -14 +/StemV 113 +/XHeight 444 +/FontBBox [-15 -250 1216 750] +/Flags 4 +/CharSet (/less/greater) +/FontFile 5443 0 R +>> endobj +6696 0 obj +[894 0 894 ] +endobj +6697 0 obj << +/Type /Encoding +/Differences [ 0 /Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi/Omega/ff/fi/fl/ffi/ffl/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/suppress/exclam/quotedblright/numbersign/dollar/percent/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/exclamdown/equal/questiondown/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/quotedblleft/bracketright/circumflex/dotaccent/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/endash/emdash/hungarumlaut/tilde/dieresis/suppress 129/.notdef 160/space/Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi 171/.notdef 173/Omega/ff/fi/fl/ffi/ffl/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/suppress/dieresis 197/.notdef] +>> endobj +5166 0 obj << +/Length1 800 +/Length2 1394 +/Length3 532 +/Length 1979 +/Filter /FlateDecode +>> +stream +xR{y?2m5cؘF h*LP[H Ţ@`J436fd` $B$0H lV61u(,D +\ qkp!>؄qX,k>pfOG!hp`Y?h_`^+ E)`\p< K b,w0}8 +BO a!pxu Ś CCeZ|P@yn a <9 &gw[sۜ {H흫ilHRTވ_3b<ů @B!$! G8 +kBA11~ĂLH]*0@BY J0>h_EYؔAFO lJ2Ys(7\O/<ʯuQ0Z$gW%;yDPf}4׊:Ž2Na}^R%r;[GFWI]$ +;TS0CfþLSyzZ4O fL/{)3i_tGhXqH z +Ng _:yR0cf'Tn>Pr$eKj` 7 /{U/Ek=ոg1bT]E&m+zG_tʱ4uIJtj]ނ[diWy<3zvk[u[S؅KKvy&z> -Ut:m|9ΗZ`_ .Π݁ }j͡ .ބ`[mO@_Oc~N5̖mu̮Lė4(CʄdgBU ,beҬ~FƄ$8_cv;M;q ? cJݱK1 # W OfY@ !/s[y?SsқzIY)NpC?^]X2Fa. x?-˚W $#* -tOGy[~Di=nrE_̪z]A֌? V^:LLw31saSwwNߪj~dϰO޼뵧 -W+EICr;/xBys p'p[0b4PM/ S?6jq((w< $ !IP塜QNyv9 gLI!Kz"6>3_A%CYZ̬sq`X}<|kXwY$DȄ?hrli(̹QWϻiR&!C,4[tpaU`XVCI*,WtVb}<agI閦_K 3"*E%#2l6뵥ԩ7Ս8"Sb4pCt5xv!TC|4Z#oLcE^Ag.- 9{WKVw)Di"᛹=kCٹ>K~a"fE@@TE6J:pn/ W1A57['s]+ϫӻK} %ْ3dYѓ>%]K8U4]hԷUsa6~a3%i[w% -,X)kB0/lMVo}x!@?̨睮zqRmg_DMendstream -endobj -1695 0 obj<>/XObject<<>>>>>>endobj -1696 0 obj<>stream -xVs0~ر/tn@z郵1*'O B#g&Eh6: ɗoոt?k+G ؽk8ܷkkwɸ5_i?uSvK o*@, -r͔2(%diFٜW*߽iqi9!d+1%xѧUֵ9Lo_<_"pEl>M )SJBQhNlgusMj#^5Rkb&gk3i2\wt}wQ(k.Wq(!kx(BP *i9b}2ӌ1=Xy`yQv̦rAH/i<\)ͽ$ \^kVPN'$Bk=^XCk r7}[zG|W_HQ>h"hPg(|Th8$\azQ"IuOX)z[nw?؊endstream -endobj -1697 0 obj<>/XObject<<>>>>>>endobj -1698 0 obj<>stream -xW_S0їzNZ=gDZі+> 釿@RH N.dw??`ٹOk3RF#o7#ːEq ȯ\@>9е!W"6{{B ,hҽrTP'7S70HƲ)'JM[G76r&ctiFk[ȱTt [L.G+‡gOpOaJK tR}clpg۳*Xu )`/S8Lj۟Gt\?h?~B+zG -~E8_W@ڞ K ϫ'–g.+'Wq_2࿈!=SCYMըWא޳XPߒ%9h:1qM^h+hW QmFҬecؙNܩ=k_n_K-UTIj7VYT—RrL[TnJUKoz],pue"4jFjqN+Т]J>&ocx -iJC_5ܲ:藜պ%MY&('m`LDMuB,Om:zˠ[%eʖ5= 0[18a W|ϼ0yBÀ% V0a>IK7t緍q5Q(8)j` Nzz3Ɲ]endstream -endobj -1699 0 obj<>/XObject<<>>>>>>endobj -1700 0 obj<>stream -xW[o8~WL4Ϊ+1-t->$qBc;t6Hhu_Ώ yk:;38b#}y<|p;-ﮞQ}n[FA H^w -px$EH#TL! " R)A c. ˔ףH)^"(QaL#݋I%Tj5j #gidčiR)t!yJ-W3 y& W=*Ҁ$a#ieEWeBc{@s͝ȞCtO|$P+pPDBЄ/i!k-kجo0c)*(.=pkH0p,5XoK>x飖 r04fTP7#pMqru-HoX-}Ϭ KJP^@* $^T)ȥdѺҜGXZ]4G( "%Z5)OՑ")A{f9as,aƅ " c2W SuG4|AO=M?ktmGbvoM/aUo]x& - oGI0!]]{.+d)W?cQ^ כ}[5^o=%&x:M:nY֗s;m꞊MTrN,V f|Z.HTMs'Ї5Ra!"2g^a;aE\?}Nc" NUݼn jۃ;Jem2LZeMYm Z߳係/ٹw{ɤw󵇷,DCW<s_a;ޱ^M \Ƅu#$Ջ Z~uendstream -endobj -1701 0 obj<>/XObject<<>>>>/Annots 986 0 R>>endobj -1702 0 obj<>stream -xWnF}W +IEZhbRR0ȕĘ䲻K+*=|Q\ʰ-r93gΜY}R ?! S¾ߧpmjIK# ?\G۰nSFqPuҬZk 5iZ9voSukqiD!nͣ3rwտoAvR[ŋXT;6ʤ]']NOjF:q __p#p_]_M\xw7&=QQ' ]<_5N" -oܒcₓkco*z$7 &ג^(gUNDgo3r4{zi6A.1++ck=>Q0F?:]rW Vȝ;2I"i*.amap10IVJ(T^M7aUZBR>JDNInHSBF"a`jcNxkCcZ8^A); mu0P!4$M(䈼A(qT !'_zW9blxY ҍHkiu"oˠ7kRGy,t ex[iA#Mav nNC(&ܒi_6fO3(ZhDeaL2}ZӧS\XHW=-ʑ-SQiieLRi,(]V  ޴Cc# -uªzOR&u܀>#3YVkQ^za9DžF'&ƨps3-ɝUj悭t>^yEzՇU0L00 -!¢Rլ<7]C5'NFD+HB􁘯d.$A\۱j9z;hYD@yzج -GsEVѣ[[-r s ܕ -Ik<&%#rh{]eh&G'XbĔZ!ʼnHՊ.N,&aDL֍!vޠE|.~׮1a h~endstream -endobj -1703 0 obj<>/XObject<>>>/Annots 995 0 R>>endobj -1704 0 obj<>stream -xWnH+ -:cn;@0HƱ$(ca_ZdSld3MɚWMj9s ҵz, Ft5:wLYQr7UIxx6uW%p/ ޺N`nɄn5}&Fӫ0aMw3?J -F77ᘺ+~qqݍ)IhzFG". -YeIU;iޝ/p0\0"e#J4T -+͓tl-kj-Y2&sdWD5QJi?Ȩdk{O4٠L0rHh'/pCdpu%J(7n_MUBmVPpjHmdDI?b2$WҶAVcҽtR8iJפs:~χхѴpyE&,ONzSBY%i))ՍB -U+0jJvtb@!:cs$m)3/2mX2$v{Dgp@DmӫܒS]}UKRf srywSo&a$jpڴp8tFqeLy<_)Ue*u65q>,N'0xhveF|r̮hmk Z?#nHcMu$ٶiX[NgC'Knʓpdf -je^iɗf U%o{7Vԯ}Ә| @C7=t|,=+pAJ/5KGT8ӕM$g$ m{aݟz}R@BhV"&"f@dҴ1Dв]AP^Vkɬ'VG/ptݱN>/XObject<>>>/Annots 998 0 R>>endobj -1706 0 obj<>stream -xWo8b/u#(ikvX h$"ea{Cʉ콽AmK"9of޼8Q=ň.?zјA4䇝ioHךu.6|||6b?QFA*9/`h0>VggzXO#4i8]ZĭmKUXzUƾmS" '*_n$%ʲDmunTEKK+]Xnȭe@-al.垂9_<] -{~Mxnzxpn,$rMLPci^WKt4JmmT 0nt6*=X /`D'P<_VZgª8hV*u#2'%t&HpAMճKʼg;7]z9 1&շf _gW z8\6ص.Hz铙A 5k9W#-Tp{}0] `Isro0fI"LJg2Qb'yQy6x<y_Y,zJ凐Bڡ!l K;e7a6'PW2l" dqUOsDo>ojp,R_"ENFkײ -e*(UnI,geŵ0&쉩`Jd>{c -Y&X47k6f&Wv'Jj ,QDb>),`*$ǵ2\*D3MqM@zg_ުby B`* ")/;v}Ɯ NgȆH!fN RhLumXbU?]Z |㹗Z֕(@r>C࣑PUXZ+S&mF1v1uJ Qwdɶ1agl GNQx('N Bғ^0s$$pМPQ&`^:2o@_qEѐu - g^|oQ2/~Trwcgcrk|?uϝͨL\ e -qmwg`8?Lcp9@Shg;K*Y'h--XiHN -&|^*_id#^k,Xr[W#iתH"LR+6$3ۈs3>" 4˞WI?a2Y\a4( ?{q~Kx<Fh4C>{Q,ξ8(k@endstream -endobj -1707 0 obj<>/XObject<<>>>>>>endobj -1708 0 obj<>stream -xWmOFίKa p\"RA[EEm%h޻`{:򡿽5!UC${vggݛ?:b|7<Ʉ+h8ǴHO~kMѫOWt-Si67嚮 V*[{Gz墄>?(U%-5-gkw7xrL~߮]:5[?Mߊ*fiTBxReɁrK*]6Ԫ',9a 2_TQR$mlKZ9IQřdC,ݹ^qqX"R:d,vt9gxz#+f೿4 M,q!^ƹ)1OOg 8x/z< ) zk8mvOι: -i7&qZj )TtK'p"Nj-՝w r!Sj&uSo2 RkƱ^NFr˽uk9_)m478D̾Fv(>8E7zL'2#a \XБ.*jSuʝBE++ P@נoϞ MuU-U2utʁcWY3Vm\MʵlȎDO7G E$m3 e@\a.H -H^ଶ2eJI}`pcZ> fURBݑx!gAe[a34稒2rMh`=pNZlˁ -yI;[[rl6蝒 D?3;D%iimFm&Ms'kbsLҵaQ'L!j'$1t<[hk@~!я?LQG fHh -4Hz:g7b383oS7v );.lRd:L-c;ಇv"$A!0v5ES+4״k"Bo#@+Q[޾ N}@@;v-eucY=ɶ5_9s3}m٪:v'GA(%}1y^D 8kH,L+v[VɮN YD?KhpN#& )vJݍ>MW2eu$'Sg:UcD$nqg|A2eV)cЁ  mf%gRhN&=Ħ֖aP˘|9'LSHwJ}U\0!-1>B' L(X rT;4EꘃR&:sPKWUcx5S`a)yS;E] ͻ~/>ka8x5k;w'*@Ɍ9,'$7OZ{s%OJmCS/VQ )WX9<> \MD*9`?yQ5%1Φ~Ke@¦M -m,Z$b?9MNzk}h>#A :@oRA9͓_up9ǽuendstream -endobj -1709 0 obj<>/XObject<<>>>>/Annots 1001 0 R>>endobj -1710 0 obj<>stream -xW]o6}ϯf,Ɏ2keXq Pm1H⺿~R&6`h'Ls%?e;㜦s*4Id͏{,(;'sjh:͒|xWe-V4?9E (Vr$4ɏފ“YQ^\V'Zk%yC;*I+ca$+%qgO ϒ"اKx~1t,?|N4ϲYvrN4KӿPF^,MNY~5˳fY?|q>N.* s#ltYRk}[ZGX+h3vƍJ{aZ%%-fY(> Gw$*~U#cU4#S`,Ms4c4k 4 yΏxU D3:h)sə] /Et@ZĆG{sfRhX F "P:/*wuyB l3Xiluj":ĎՃw`=A7/wgIUqq~x+gf3Sbڧ7\N8IO4?`Mn5Pyza'he%>Nq+(_T|w@y9Llf6?IG9.l"=g/{ tendstream -endobj -1711 0 obj<>/XObject<>>>>>endobj -1712 0 obj<>stream -xXko_1.I˯qR^dIh7IaߛM?PE3$f[X$"53̌ϣ>ӧ ǔy:O~:pqT/_66 ao t0bQG4_ K{c"-̋I; AOyz6|~};|w{IE-iO+I{?##K)u,`9ķIUup[[ӵKad0Eݏ 0UY'EAz +S)5my&at]^Sz]d$N2uUsPV,IeO+VH92Q ܨjeئQOKGR 38K8;Ԗ˻@ >Fs0I'۝#G&^[7 A ymT%̶r{;Z)dumr -o~Q,x+  2 6|IRXʤ/k(-e2^_Tn GSO -~Uh|zFW3S igǁUQ2P&xҕ.zM„D*', uV(ԄKo= NƔQKi9 5 lEaWY,̉NƷ~1򷩮>@^~Eږ[>؏mpb+UhW 9]v^*Ni9}X.s?mX`pyvzw%J0u|'Dсsۯ]9(û+OYpP`!"di&CЏw;K&5h)_; GX~b(aд>'3!d% -~q~ Xaho{:?{3yڛ i|>N ̮|bz^avW:=>QJ?sJUʠAkzX6s6藣rH1endstream -endobj -1713 0 obj<>/XObject<<>>>>>>endobj -1714 0 obj<>stream -xXob*Jdvc5ΩKIwrײ͐+%DΏ7o hDgoDcL)-g4L%Jf~49F4_%33}h5mMzC斚~pZ/7w'*+Z\{ZUsGM0itmf -(+ckn HԨZg{81U-MMf?Vnˡ%gOp!LYSwTDHr&_c*V?y zd4_#WWXjR{X_#-f)LjI(Sz]+KRU8Fy@'I')YW -[U#{]{|+RG*ZkR VkUe'" ʤt*VR)-k#{+KiS͒)m7&>Pw!.klͰu+;|R0w!;_gC8]ҚX??d(6ɚdAVLQᅏ54I]uS鞔^RYi뀢P*Ԡ \PMWCuH1 -\UMñPU,Ϥ0x4RsAht,+jPo#8'/ JԬ\^C?S|"2rwk0֍5t s'C]KgunwdEF턈&l=ǙWRNS9M-?MY+AGP0{V0!(aTG8ṙ3 ~,)b^h ls,/=Zfie-0x:;_Iьrdds2&3'ZIb;* w:PwAק5Zg*Bޅzi6cǤ2PW +.ƃԵ^W06*`tRgQ=(aCZ굱` &:2 K` -U/$:VĨ\x (]ҁ+Ps&ah_"#<3&@;rpXQg  57X0[ț)fZ|wcm@SVV-B+f<Ѷ5s4V,wsTXbB+rgNtYڍ5XQ2)9 Cdi<~R6E4̡ ьwdn7";'x1>ǽ6x~YLt~1U#DfԢ F2?M/ 3$Bh8~X[g=JPJGd @r.aǹ8ml(O@p Hu# UۍGy3#mx jp+1^[IһҤ`U Mo*xí a# EbCE+>/9YJv_"@Л>>u&HwTSh-qUs1 j^K2Y|q7lơv{%>@90:-Ml>/XObject<>>>>>endobj -1716 0 obj<>stream -xWkoF_` ,eKu$-#-~8GёwL6)"p Q؝]h3Zi*arqfތNWNV<ǟ6 fplE|:MrtQڋʑT$KJM$T+E* -iLT!+gsEQV-3Hcq/"+]S?ۼMi<[ MzYrE6WW;Qn4O!>IPTkCJɟu PQY'U|:|-|os:hΉ$O~oX9PL6U1]5WRzZMDEۦJek9O+s ERB1Z]2>XJo/NVg*KaB*Przڐ e?,.%k=(sVR-,i5E>M٘^4ڲ8Rh}  P5`ψjH@6M,[U%,9 !XR`1J%Xwj@{;8ycu{Wʶr+c z njWڔ` RItLkq|+?M}Haput Jnvȳ SD!ƠzACxat=c +ZXϨ^DRkg-z/V -Z@m:yyZ"ʝ/&+],3f>][~-׬JOCr/vsKA||l>-F`DExyR!K]&0W:FclE&}+q䀖K]Cf67WD`Vwp.//`Zz : 䓘d6_FCϗI]]xP/Ph/[٢,0>_T#U:΄QA3(koyl(Aq L@S(q$HJ'ү g8RntnE}%Nt:zw@;ja84#?ŝDG%k0H^1_b 7(0  Ԏ>N4dpػxW00ifj4V{zЙ1C@ȆaJxm]0^ǰwh9JB;z)9d5oXB.6{3 -`.ʢhҴ'̆3:85WU[^%F`\@U,ipxX0>/XObject<>>>>>endobj -1718 0 obj<>stream -xuU]F}W\]eW6`Q6ٮm6ZP E{=R\a[!q?ι^?Ih8}Htg xgxNmkO)ei4洔8eq-QT]Kmu%UK%Il6SPhkVOd M{jZcALaEq6EQa͚횂Ѧ[L]jNYBt#Y0]Di֫! pDYRj 1Q`t Oq;3v@LM-drmu]ݐ@uFɋ8ڶ;UV(s] ->t6T/۶1baFiY4vÚNOޒ̚8:5R?x]KVys'[ut|_@Fv%XgT RQ\ YՀʚBIWtP0"QJvT@iM?m -? l:ހ7(S@ODޤ5 GR9DKFK!HWr%ѤX\]@FDqiJ'-xMU-[^r5仜En_%G*y*7b?XT~أ>/XObject<<>>>>>>endobj -1720 0 obj<>stream -xWMoFW rrP[dYvzK08n =".%(M-6l͛ד\k. \IR\.j~5[/Sk‹bx>y,.dF֩$rU5j&ɌNWuF7V>ϓ 9_,aTT>!7vS_Gق`>7*iⱥ5BDZ[m㬸,:&wY3 -Gv6%mz%W'äFRJ^ E2gpGVbY vgjgKm/apxޘR䳖/cF>Sx :m;+Lɵ솳LX]K|;BxyЯo(I얜!f6}6ՔGA+P@Th0εEks%Rm,F7k8~V0ɱƁ6?T-E-N#Bćw#ȥJKL;-tκ%'p#ȍFX4G=̰٠>(dMUѮ"GPFnv '|J,FW@g#vKW۰&u -(dmQL/uNagbbpWwXv P߶XȨ `hŸ q'~G[* C<1 -D!W\H%Qq`|w#ɉCwYL:U@I##l̓vOvqc,c1$4eL(=bu6{L|m5&y@|É81Pn*; v+ Zhcd3yqX,) EB -=>/XObject<<>>>>>>endobj -1722 0 obj<>stream -xWMsHWtq2Uc1GCZ Yb -4D3_g$Q5ݯ{}2~.V'錮/y q6lz[,|\_,ohfN'߽rPO8-Qrxh#6ζ5'rpGm,p],5}u2%[gv6M&nu (IVC&#UJY#FK5SyCv>0{1]T&[m[O8STPCʸ/3ҞM.8ĭgXWzr?8<Oi] ~v;@7ei;dQfLʴSiL 4Ζ%  MTktږ} iAk߲©rʤ*2- >٭΄ZL`[H@ZlRšQw6kmO{;$] [(@AfG8MH>E3 -r͉.u- c+daY}g]&lj:, GT|c[8>MzjПhڋWt媡Px+g+#)4edsFuR=E)7R60NX30l{*mZ:S 1D['.}y;pgA2 X(GQO]]nN7EX$e FmM2Ŝ; -TȐQPΠd`dQN8L%n2_)X`CNŶtbE;~հ=(7Q{ VBĜb z +Q$c 2CVpҝNv1P4BkU#=w+ RT. C)^O;PE$G\%s5?1fI$H60d~ \ cjRHg<Ƭn(dJ+3B uO P S*{„2VJ-A-eBGcW3,cX7b\pw s Z$DL*WFLCgᥣ"edb2pKL}g4p(@3!(JU86=SjcJ.AcCC+7(AĢ>!:, -.4ڨv?%/a"nF+'eVG58JP\REX"'oLĻo3ʢ^lNöVCA`b)RK6eņЮS v\1Bmm{R8/p7*T@}`-$eeX'^NWUƥ~q+xmZv* -:C,*3Ѝ)6 EWUx0Q8pݺbҎ> C);5()VAl00mU@j9!'/ֳD)}E&Dž fork(hZxqgJw7YtvB! C[1C7ޡӽT\=/xxb5e;=_閗WwWd~-š *φnfX뙼3O:)ǭendstream -endobj -1723 0 obj<>/XObject<<>>>>>>endobj -1724 0 obj<>stream -xX]o6}ϯK3 QlqҾ -[lv Dl(Q%xޯ߹$rv($x?=~=t3(l4f4XIex1]g˓ˏoi\_`jJq4u1sIZxIh|N QmP,o$RV䞶ozTuau^Gt1& 5x -%pȥ3LzH.iW9T*Yٶ}q"dV)5mFۉJVpB'ʵ57.6qDq>Q -R_(PU\8Sgn/&0*9ǘL T%|Kdd,sRe)o'jIcaQ_dveɓ ?*D|QETPNƂpi{+vqF?5 -YD7iZ g )3y`.eLck1Ј`YOI`AZMI%fT$SH\h -oRQ-={GJepn)W"fcbL/;ܢ>,X@ Z'B3sӢ:aQ"mje$>GՇ;8R7(&R -`ղFܽOB9zoLpKhM\ eQ_UcU6&V)$]~ Rv.cV($<2 >c+b6}m%қA[mSۄ^@]Ia&7 r]CC@C18$k$xP%&wni#Bqzh"ƀ OcB Ud>ap†]#1\ -p SKÁ`YPբ[<b!{rBwކ(~E$~ݱ]A2s^UyҬ@EݴF"Ÿ YiDz:F:Ga;҄%E)bDh̑1yXW0Pg:#8=-~8ojp9?#~cc 2vzz04a?lrO?K*ast7^pk) VA tj`i!i;$D~t=cPd4q 1H!k 7Fc,JS`Eyהּӌu^e!B}.cSm@Cyӎ4+~˃8<(ƪe6k(  vҩqNqnFr]V@1D6p_}հ -9 xϜ\>h *#J5-^6´ZXj ּF/ae*rؼM }v'/Q3p1{vҠZO+ b8m/{I['lphAp8|xͮowqݛ7tc݁e/m6"8͟'j!endstream -endobj -1725 0 obj<>/XObject<<>>>>/Annots 1004 0 R>>endobj -1726 0 obj<>stream -xXQS7~W[ ؀!o%ФMBgCf:Iw#aξ208N~|1~Ft> qqLg'#|^s`h./NN^Gb ^wgMNqhM㓋b}XNI~ѻSh:sj9u34DjTOR5;S S ),[>d]c\/_A5~G'oٖHl.D^I׏7SM6*^lW~}lXri{ I-uPlmf`k6tk+DyZ*rQ. [4YKLE=2)6jC@AݩIq -8һ]16 -jݧN 'cAaG@Y!iʣ }4٧d,t=R(,`'cNAwɞ I2҆EUsNJ]W!Rje`FJ -/ x¬/|FbԈi}ٲ%]b>+["DհBYA_$}`5]Bs6Y3E F"jH1,&&CмBTa5b7^' Y%PxT`(-Xe*}Lw&7I@.Q&mύsncA7R]^E3^)BHdWl%*D׭Rv D+p{PuWYc 6hj[|69,ؿ`7+fnD9`VؘфW;Ԥ"y!D+?4Ig/q^[4G1S}pPwЩl5E@|w,DsB5L!/M55zF㟔q]"쫇VIA%( dGN6.qr)FYba F+/("ǵͭ]Ʀ+!GQ1nk/\,er": 0B@d#7g;I<0' dئeJX W.::PNLsJG=UAmXlx,ٜukn"k +D 2vCI/Ά4ucl$qY8I'džm34 Bf5!p8ڈdr)ɸMeQkK@ y¬tum'a -CMmtۦѤo0CU747\Ш?p&C8_:1KtjŃ 8@+ҹ>M?uDc$ ]ZM,Ζ~͆`q$u˺J$18@`F6ПֵO4O(p95z7w+K\N'tV8@ 8-WP7$1h 9nݕ0 E+7V^\@]^Qv0hݽ՗f᎚M{rq}̢Txj@.1$A0cC]7+XM7&M].Kh88"UBZ}=_C0{xo8>/XObject<<>>>>/Annots 1007 0 R>>endobj -1728 0 obj<>stream -xXMs6WlOQf$˖q8vur$!5 iUo$M1N;ؖ,v߾}sߜ Z().fьfъ.7kRӎ巋u4r-l]7rz˫h_}jmXE*{X^:bz{I9mwvY6PfMFx2)ұ4UImU t:̳wdvtr5) U{c2]RjY7@EL$u\@Bޯ[˜4X ||)f|a+%{0Aϔg hLjM~z| UzБfȥ.9gKû]Geb{e1( -N-aף*Xv}bj-ǀ<H29Ora/-bͯi"WU6)%3jR$lT%̾\ ! 8>.Kd!A9OqK>t~ erfi3"G/:1X%OTESAQZqAJ+O$?JҾH })b*ɧa -U;E&p=% - dC1QFcN K?1 d7VNQYQiԿjHx,*½bͳ@R{ ѣ}}t!}p!cJ7V+.jDG @ӹBE֡;|RH|{#y~{rXAG=$qjEn0v?$},]U8ccT}J҅R=I{Q,;`D,"\~1Hgh"' QR;C8Zd5@ ;;@7uGV5t]&`CZč~ ,4.΍MnVA "njQ9?84輰ѾLEzJlR$4nƅICv{w%=f!|t$(ӐVv^BFl_rΠqVì%T"@^;tˈn>(o [G=:*h&p.gzە̢d+]ͅkb&ܪ -@O0 :ɓL݁7x< 'd\ ۮ,a蓆rM.'u\uu wG+U&$Nz @N'nԖP0BjEjk&_BULZ9^( cVqw:fǾghGʇ[c ϱFKdƃ{#f|v>T^m@R13IF>`pw nܡAd9!,?\[M6 yu䁤ULa`j.rV%H -vU3}9;I盜)˓mD } G7k.hӚ&R2m]!aP^M&o61]?bkF)(<4'.<0ICfT<Hd+?@wTЗ;Ѡ-y +F9o01 ei[v>2S0v<IJ*dKQx3Rs郗g3^H ^aMA[yH1Ȣ`Wٸڳ 8_eTäG -,iڄwa C$z"{7iLֳk~q D>a{ſ qendstream -endobj -1729 0 obj<>/XObject<<>>>>/Annots 1014 0 R>>endobj -1730 0 obj<>stream -xW]o6}@1eɎۀt]>@I͆=R`?~Öx] -u.()ple3)\:ϯ5?#v i>l^~7fs64X d)O -nG^4q[,cOz9JN5]rF,Fًܓ= OZ5}K~9@L$u_~'TOE0 b%/0,(y2T.Wc`RSGfP.V*uT. ۛoDb$J\%7?0fp+tk e߈-tO0IgXCf:}dFlZ(+cj(z*gj+BU(Jo+P0Hagyv vɐ]1g4lneWپ8#ؙ!oøEjw@/4%gh<Wxch0~H\7c#41z#  O Aq2 ==r*HM)H#BX:1SZ&;r@ Z)+M,1ݫZXG ,;i\ -5b*VXzi\{la8W^[͟ ĽvslrKRJF Rj԰?VJ\ VtGUlčP~`3ulXIBbF5<‹؛On| 0 QZ3% :zF6*It:̽,)"9ĈɐC(ykT:\ W %_5  /ǎl/^x`r5oO -KaI§|eizM,GPGdendstream -endobj -1731 0 obj<>/XObject<<>>>>/Annots 1025 0 R>>endobj -1732 0 obj<>stream -xVko6_qעŲ؎`&)2M( -ѶRTI)KR$.8`H1~t b~ 9bD 4DP]X ֆ{&i8ESxM[Lͺ0K>x$>hʡ%7na`p)Hv2ŗ,JZ晥?TkJܗ6R䊖F7}=Gp7z\s^oDߝW( -&RQZ^Pk -K~% =o?ݙTxAvԢ EA{ZRRf2|AJnh%p54~~݅eUZJ2Mـ@@ՃWWya/9̅]) \jR3D"N;wqNA.4p&[K aWؼ\\-)euR|A]ӝ#Zޏ~zty{[gS`@qэO ^ۖk<+sDus ڳL%QHowP!/RZ0p|D7ta=uү9kNE1`߹?w2s10VZCy:ٕn^0@^.ۓyuvkjyL=oT. eBP G>ik_|mizn 9# -vYx.rNMM^!u2s;t}i@lY*ڏѼЙ敶6d}/\ -SEnlLxO{enRt}w&虇ۂl5>2J"[@Vi7a:-u& -9\!'LwYiyQ[ke -p1HW07Uuȁ '_STSe[KG'`и{L"4)RsNqnH+Iߺ8gL.4,('+,1nKpa-6hayR+rp2A hLB!(A,1lȪmp>/XObject<<>>>>>>endobj -1734 0 obj<>stream -xVmoFίHp:1BN:UIwQ/nJeװá@JU<@?\u7(u}o⿤nÚ?5  G (@5'uZA}"z+B5F!vw`4LL*ݴ'!@,284x7R(iš9EWD-4)hoxw݁7F9DK +[׬I+~5mAYk${ADftB1ւ33rZ=rU6qS܆3+Z?;^T͍LMKy5."=Tﭗ nɊoXAvKFI!3o-xݫ!!ZXu\r*מw0v 8RwUI9+޼!dMQ-{􍘹S|ѡ6ʞO-xMZUk,-uS<\) nB1G:U2uoD-k!Nf[4Z02 s aL A^s +*m>;XWc1(Y߫J'Qqb}H+;a^UUSx[6Ids3&߷bŦzh"k4.+[]fJQm܋})k^36&'=N/q9M+vd|(F2W{Xk.J܋)Q{'GN8]$^*,k_ծjߏPkJ.2^sYٲN55O(zmV΁|8f~BREăݙY7Vrs;*c^ucz= 2V rE|v?6df8_d~M֟;B=1 + WZim]2?8olǦȫ˄C$uZ3%u#N6 htI#Y]|BOgiH̨O$xZO\ +7NAZn5Y}TId!=mak4v%=6 +}/Vs_|WisHl|_3me#L+2 x3ߜhvD;]߹TիMRʚG> endobj +5165 0 obj << +/Ascent 694 +/CapHeight 683 +/Descent -194 +/FontName /FRLQDY+CMR9 +/ItalicAngle 0 +/StemV 74 +/XHeight 431 +/FontBBox [-39 -250 1036 750] +/Flags 4 +/CharSet (/parenleft/parenright/a) +/FontFile 5166 0 R +>> endobj +6698 0 obj +[400 400 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 514 ] +endobj +6699 0 obj << +/Type /Encoding +/Differences [ 0 /Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi/Omega/arrowup/arrowdown/quotesingle/exclamdown/questiondown/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/visiblespace/exclam/quotedbl/numbersign/sterling/percent/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/less/equal/greater/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/backslash/bracketright/asciicircum/underscore/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/braceleft/bar/braceright/asciitilde/dieresis/visiblespace 129/.notdef 160/space/Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi 171/.notdef 173/Omega/arrowup/arrowdown/quotesingle/exclamdown/questiondown/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/visiblespace/dieresis 197/.notdef] +>> endobj +5123 0 obj << +/Length1 966 +/Length2 3059 +/Length3 532 +/Length 3718 +/Filter /FlateDecode +>> +stream +xw<H]2"9ÌDuspqrPF(g*BH:"HFD~yݏDzxIڦp$$ h t$*WQ^.$WVU8Hx2tq%R?Dʀ&M` H#A4 41GDo4 +(I. Ò!( +TPO\cUPQ?BA]M'oR?@uHmRs 5TA9 --<((]26a0(ҋ@@H?u3H=h6؏G +qK wM7u14PJQHWSÔSNF^vKAQΊc5m~V6>T+9ڳZ[8ӃG&= z71V|+ +~p]5cQbSl$mgF;7gySWxw[FzsDdҘ^Em Xcǟ8O*$[sFL,e®2W\z68I%q˦GPx9j>Z#;NyA##݄SxT2+emz +vgUSfe<I4\GMz1%u:!'6߸F66D "%NEXL,:~5M:{\{nQC')g^`x+{[}Hu7c)WT5vH+Rȓo/B`E 8ZԖ1/+oؔl*V3 Wh {YZp:̷΢qBwq5Ƒ+<VKyo-|Nehu+>0*_gO,^1>P{IL9Ǟ݆~̇ l=7=^뺮G1}6v2c>U9}Igv[~FqGy@ul A_Z6B.:<1ږڧEH-c7:呄4*i~gPq\`ߴ -_f.|}K~q1{wUV\{2uSh<`DXޙe@FDFTTwc,G֩Ur;VI C| +|aoKCͫYkP\.fv#_XSҝ6va[~^YŜUՉ/pR'nCCʸtqv,o1)dtzcs5_.'9Hpa>5)/RR/VS7n7UT۪WoJJ']~HiTN41ɎB<<颁YPg=7\z-6NXeoCڨWKpBO&ahӁ΢r|`t+b%D'w@m3?ƕW?gwWXq;$2;-9KS#ztէT1B뉯NVԻaf!\+];JS摝vlt~e9"d@yX43Kr|8s9:6r㐦~Y+[C9͋W/Y`jҔPn艩3ķ d4UdړyiR]$_,? ux|?걤rg' +&)x2ު8"sl M)|WWs)Bo|kaA|IȞ2M,YA+|}Qqo}_6Kx~-H!s}{"d 2v3 b>p'w:\$+8AN u/FHx,/endstream +endobj +5124 0 obj << +/Type /Font +/Subtype /Type1 +/Encoding 6699 0 R +/FirstChar 46 +/LastChar 116 +/Widths 6700 0 R +/BaseFont /EDTHFV+CMITT10 +/FontDescriptor 5122 0 R +>> endobj +5122 0 obj << +/Ascent 611 +/CapHeight 611 +/Descent -222 +/FontName /EDTHFV+CMITT10 +/ItalicAngle -14 +/StemV 69 +/XHeight 431 +/FontBBox [11 -233 669 696] +/Flags 4 +/CharSet (/period/slash/a/b/c/d/e/f/m/n/o/p/s/t) +/FontFile 5123 0 R +>> endobj +6700 0 obj +[525 525 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 525 525 525 525 525 525 0 0 0 0 0 0 525 525 525 525 0 0 525 525 ] +endobj +6701 0 obj << +/Type /Encoding +/Differences [ 0 /minus/periodcentered/multiply/asteriskmath/divide/diamondmath/plusminus/minusplus/circleplus/circleminus/circlemultiply/circledivide/circledot/circlecopyrt/openbullet/bullet/equivasymptotic/equivalence/reflexsubset/reflexsuperset/lessequal/greaterequal/precedesequal/followsequal/similar/approxequal/propersubset/propersuperset/lessmuch/greatermuch/precedes/follows/arrowleft/arrowright/arrowup/arrowdown/arrowboth/arrownortheast/arrowsoutheast/similarequal/arrowdblleft/arrowdblright/arrowdblup/arrowdbldown/arrowdblboth/arrownorthwest/arrowsouthwest/proportional/prime/infinity/element/owner/triangle/triangleinv/negationslash/mapsto/universal/existential/logicalnot/emptyset/Rfractur/Ifractur/latticetop/perpendicular/aleph/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/union/intersection/unionmulti/logicaland/logicalor/turnstileleft/turnstileright/floorleft/floorright/ceilingleft/ceilingright/braceleft/braceright/angbracketleft/angbracketright/bar/bardbl/arrowbothv/arrowdblbothv/backslash/wreathproduct/radical/coproduct/nabla/integral/unionsq/intersectionsq/subsetsqequal/supersetsqequal/section/dagger/daggerdbl/paragraph/club/diamond/heart/spade/arrowleft 129/.notdef 160/space/minus/periodcentered/multiply/asteriskmath/divide/diamondmath/plusminus/minusplus/circleplus/circleminus 171/.notdef 173/circlemultiply/circledivide/circledot/circlecopyrt/openbullet/bullet/equivasymptotic/equivalence/reflexsubset/reflexsuperset/lessequal/greaterequal/precedesequal/followsequal/similar/approxequal/propersubset/propersuperset/lessmuch/greatermuch/precedes/follows/arrowleft/spade 197/.notdef] +>> endobj +4581 0 obj << +/Length1 779 +/Length2 1014 +/Length3 532 +/Length 1583 +/Filter /FlateDecode +>> +stream +xiTWǡJԸXPBE<@=,5d^d&& . J="-R ŴX+U~l?tf>{{l`;wNy#8<{.f{PB%+ |\dO"IMx +X{ T tcX2C @%$AĞR Q`e|H#)IK ,@3"eLNA4ʿAys (0 Db$")$'HK:b%P;. 9s>P7H JIL)` }šbǓJP +Q'A$yb%U(.2UgRAq9;9 IJLёHG +@̱ hgҁ ʣ8qi(j/ÃPNH7wpS߅8}885xh>2vB2"s4 ;O+[cyuv@e]빑wcmt'"ޖyb,Ϧ5yXd'+N[D,Ww$M4=s+]c.w +eX6jImY]_{r +?lYs>h\~xnlے{s +05`63Mƍw+m#V˙8fwD0,ֱj&u۸7y^▉TZp.-6TFv2X [ SB"Zו}"7G ]>Q#W vGmmu7=ZoCBP|K馳*oXuj\#s;¦U5wB"Hǖ ŬИhl̪Y1,YTbHml6w%?[Pjlsćwk\~X4{ WK1"gvLgM׏ Fiˊ:^#Wo뜺RͩڦnlMY;cs"2'\endstream +endobj +4582 0 obj << +/Type /Font +/Subtype /Type1 +/Encoding 6701 0 R +/FirstChar 110 +/LastChar 110 +/Widths 6702 0 R +/BaseFont /MOUPZK+CMBSY10 +/FontDescriptor 4580 0 R +>> endobj +4580 0 obj << +/Ascent 750 +/CapHeight 686 +/Descent -194 +/FontName /MOUPZK+CMBSY10 +/ItalicAngle -14 +/StemV 85 +/XHeight 444 +/FontBBox [-27 -940 1332 825] +/Flags 4 +/CharSet (/backslash) +/FontFile 4581 0 R +>> endobj +6702 0 obj +[575 ] +endobj +3999 0 obj << +/Length1 1354 +/Length2 5076 +/Length3 532 +/Length 5901 +/Filter /FlateDecode +>> +stream +xW\Sۺ)HA@@ "wR JB i{' +RQ&R^E:қJr9{ާ+/o1sMO_h~A$PQ[__]P(pr*áh +E%@yO{n"),") pQ>{4[&P"P7-E> 3_x=^p (!l@= aIiBUy5wrLqa(uP8-8Nuc.g\\=pw6 +wG/wp埣h3Vi  +PAxazGiݟ&TuLy?G$' f\FoH@@׈f5e- +@⎅D~@½q $ +%hrՁDa  |*>pkC~ @3ā`߄R @oUSou&a Xo; v/!w?;`oM8YۿIP 8)%#K".!.N%Ex q./!Άoĝ#0l.!Ά%_B%/!. Ku q60Qs q݄_?.n~!Q@Ql4D"1VR1]Z'ӧo{t8m05x%Yvs 5ǥ|^Ӈi[ toOgx`ԋ7j}%aKkfILNzn.acOϗg/El!-DiuwXhIàקw&Q] +EKҪzUdsSyEңZQ;+d3p0=<^˦vǜOۧ_NQ=Jnp2y@rv!Ɖ:;2PѬ}|i:?S]7#I~jv.ϲ]3ϛehR]XaaPzFHtިǝ_`9fIۏaQC3qHÈu멩/хa6Ezid5^<]?~)۠C2A´$m( s[3`F-|Z&T̚mLMݎrWLMϸ$e fhCǎ_U=d_$|ODN(mA8:uuiˮ/2},{*nfWѲ + 9;Ys]7sIlF&&G]g./V2d7(LqJ}+*OHU'o+~3FArmZŒ-~Q:JVӨ5'ҽ7S8)tZŞ>!hNWI9J&m{̬=l! :z!*9µC0R0&Z.#{Ô<8mKΐ.~ۧb|zP=ӍT!Q'^;1}I}ܿ \g,l4Rtǥ#!@eM[1KRgKVnj, K٪A$ǧ 7g|ZOu,/EfNAz (1BWGr)'\)%ݷ! L9C3>]PJP[эPQyZ5Z"[YL}V>sd5R@_Fq|PWYTC/S_'J]aT,0ҳ@S!~rP +$('e?tlEc+?ʉ(XO0`5z~}",©e+x@Wb$h=ｕ[ + gV`upO>wDX,C=y%v(Fkc4%wrw„Af詑X-M]ɚWw} -]jO5,!rcV/>&R==%|U1LM1%08T^\ gC#hvJ&ם"Z "ŃգfOfrn Cѭ?32 ecsHPM\8jP;D>hff׵E*3ZEt+N{SZꂰz7)Qi>>"`AUSPh(~d3B0]4_ْƧ_\М(K_<2f$%uLfJj]~R1-yӕs1RiwWԬmoIɓ wx7_^ITCXD1@BXPPD28gX&9;)>t'@דB[k"<q|!@-sTvKoS!a_Z-=/i{g/y'P_A{R AjRׇ/&I,s)  6Ff1ƓC♬uGCݓ봷+ʚ|CbNgkIcF+[m4WA&ޖ;}DWξ:F4=O~v@/!]W_k}ąkL? h$fVH/GoxrZIJî[o83Unr&¯,pkɥ I>? +IWD7ϕ؅HB:ө&Gw %:":4 t!j>o| To#y, F=fureHšGQ워\ t98w0jv?u/4͔Jz۰Ӵ'8.N<<2D?Ix=jMdK+Ϩb`G~ǘo9/!r *] 1Rq,GHqE}>󵀓|@C9孪$k gueㆷI"U2'Nkkɶ9*^]A5Rtͣ\˗yS8MMn(]0 >^3b@ |MvTfH(9C]i_OL SH!I0aS}NU~_=jP3A[=Q Mwc.:8^iMK:{&[\{xBBt(5bu_аV|}Cl'c;Wힱ٠hǺp}Aq2bG$7鮘3wPܯPE-s}CBXz6}rLkx=}uUjvoScKW- `HOI?]a]?2G}}xT*۞+`z"wyA pӼ}1V6r{fἧ ^m%ꚬhʨ, +J<-%wӾ` 91Tx e 7w'ε~; ⊻QG61]DmU|ܵ7>Rۇ0 6{ k9CkUZi[|_SvC22$o"w][Ӈ񥦸kQɚ3iLLWv8 o Si`cU^7ygYu>L`CE[a=1+Uܒ%,EF)r3u[2u6mχ_/ MXi¯Vh4ױqhu(P>/<ڬ5sUH~\6+5^&|~9BM!]+/BӒj+\*f#N3WXlBZT> endobj +3998 0 obj << +/Ascent 694 +/CapHeight 694 +/Descent -194 +/FontName /RGCNXM+CMSSI10 +/ItalicAngle -12 +/StemV 80 +/XHeight 444 +/FontBBox [-97 -250 1077 759] +/Flags 4 +/CharSet (/fi/quoteright/hyphen/period/slash/C/D/E/F/G/O/P/S/bracketleft/bracketright/a/b/c/d/e/f/g/h/i/j/l/m/n/o/p/r/s/t/u/v/w/y/endash) +/FontFile 3999 0 R +>> endobj +6703 0 obj +[536 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 278 0 0 0 0 0 333 278 500 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 639 722 597 569 667 0 0 0 0 0 0 0 736 639 0 0 556 0 0 0 0 0 0 0 289 0 289 0 0 0 481 517 444 517 444 306 500 517 239 267 0 239 794 517 500 517 0 342 383 361 517 461 683 0 461 0 500 ] +endobj +3976 0 obj << +/Length1 2113 +/Length2 9913 +/Length3 532 +/Length 11050 +/Filter /FlateDecode +>> +stream +xUX\˶=5XC7 Hpw@4;-8ދ}}m^5fVP`9]ؘJl6fVT** b`/ tbv8??'*@beaC̀%%:`fvd_ P;!n`3*de0[X٣67w+ ruϐ B%PE'6GeQvCMoHҮ@Jkhge ;GW0C;U/9%0G\Vfb`BVV`%h +tR`ёVg5 +wt{1CbxM7sYC7=QgJ\l+{0;@/@`A=g1+/dr@ 9'? s@sB'W0_7`k Jh4X 7ms*da{,lD!>h6n<&J0F$eYn +p s/䄜,Ϧ;q8-H,u;6ԻܝXS؉U7ČӢ!Rч[څ{-fc +Brƴb47Esz~G($}Dk-BNLmۄW do\s9w5K>x|t}Oc<cȹ9`OB9CW^/V0%WG\EC}} + FP M:Cj 4Ӟ 'sEhƞ~4 +ζe1n|'aC2)&R{>c!\8O2 +** jD\B4!ko[q ;5v\Ϩ0SwSL'Gd[>}pl/!o}ɳ\ټ½zscV^vjcU`HlEHǥhKvJ&[ߞnYua;u},$6K[? bdg]^Өm}MQ7yp<&G仲@'GI?lI}4&@`ҥPa:7})x;@[|v;yX%MğhD~-dTZnYh=rBEmr?Lcx$¾Vo]ۢ?+oF#Q̷Hs u:+:s5^뜒`EPENyn~4/7cUp)[媏cۍQY@;t9>K)Nς +;ʻqϪvmdi,Jy>9 i[v3!DG92~*1NElfy,Pce8 d V% +Ki0FU12K{ c<~Yo?~Y0ϡuQɪ+Z8XЬD=oPjj'45*@,\pZ0I73͸5yӮ־b*8Yu,:_^+J)*xvTb9Q,~Ui ]{.i޷ }2Qj̻wzz.q0ȸ֙J|*{h+ξfwo'q.{juϝ/,c&rR8d@?q遣M6\m_g2UVG`BgI"#/|qS&ԱLwSO* qqyH87?#%s7@BxP8M)aYr[_1YO^6V;^w-=eLfν_n0qv/Gen 4V1M?% w FN#w} 7X:\gaz«Ord3~=D5Z!d("bYޔΈu]AwA?0 =ip ч]T-77q'ߴ1jG  ldžѫNi7!~c:}E&MGF2WoUϯ|_(x0}۽@^VsjWuTYPw>V30h4!]K2(6Ԩ{[ H1O Fi(77:jsI~L@#"X$gwd5ɜ% +GET5{V|w|BKS3kK:8cꐻר/A |Sҵ렋y;AmƜ3+)>& ʲHK0_~t lQt YI'0yAaJk +$Ϥ9V[>뤡{1? _}Ò]~rд{tkkjed^x~Iiy@{#"/øY^D6zoy?{+H` #<*"R8\ej@1E|۾^51a(uSsaFi=V$@u}?*W;@g@/rTYl`ϲ+%} )8}r>*i]}#ᢍH["ijMrJS Sɟבi$K> nt-Y<`'^`B ?_S?P1?ǎm"ikdF` ֞q:?Z8¤4+}YN4EMcyVYLf.l?/Z/f5Jl2`PB&nx#XjvWψbšƧ2ҋs?\e;X/!jG0ek ]M .w[#s4.ݓ%H3o}DV_n g |:VkgcmKǯeV )\h!$mty1'e --RH TB|'BfD3!"ΝmژX_ -rKi'ʸJH91_ƶc\QQ9SϜ߉l#tgE"M(&sShI3'7YIiOHY;I ` -vB@) K.0+^~YPc.,t#/}TQrcQbS% D!٫#\n\Qjm RilK xQBa#r %ќOuWio:LFW֦ 0/3 Ū Xh14BuiBT2%Mal}4U0ł#:Aݷa*+2ku{mjr K <0δGKH*|]vmOEUsSfPG4|>/XObject<<>>>>>>endobj -1736 0 obj<>stream -xVmo6_6g^*ncH"l%b#H ))s(+b6"^;=σ>FHˁ;l~lӧbXNw95iDs}q:Abi.ONsۺWo'?aɄt V{<} --4wT^!+O+um]ooYaU |3iU%șcؗ9LD3wFnBIŕP%7Xf5M 'өnk:ULtRzV|]kԊȱe-,s:S74h:v)ATnVmj)jyBDgi8,};~"׽lkNn{dΝGp_Y?Pw>5z^b8&C>/XObject<<>>>>>>endobj -1738 0 obj<>stream -xV]o6}Hlʲmdi=dÀ-6cTI*Flζt8"׹ܫϝIi:ф3`G=Mw|e8HS6>>w&3| ng/o)n7.NWT kEϵ4"6dydy>/XObject<<>>>>>>endobj -1740 0 obj<>stream -xXn8}W /ȗN@Rt E?(hPKRu{mYQAvΙٔ&͌攗glBUvM׷7_'iufq6~wM)-V82EAx|2E>Z9[RXK:_|ey?Q̃uuF6UfLy?RZ_Jۍ6AYCvE5\EXMLrz˼r*TڢgPY_]Mi+Pvcde'C~Z8ٞ$`Pt -I+:߬#!gsW 7r)Z -z| x}M>L٫*ɦL}I\TN3ROPV.Fb,CaeEEfVz26 -#kad}| -W]_Svi]7UX^N~܂AMb|3H ~o*w .[gN[NP乭L8Ѯ4E^~ - ^?0ŀCSFNV^dZJ" qJM=l+Ni  -id -ҕJ?CR H"LAIa2stpi`^=N,h(BJN$b}WȊ shLEF63{G>g@^rK'ȸ)q/8a6JA% 禟 u;L=lݔkImK[iF:]_Ăm$4ԘJ'*h-qs-7UTcj̊l3,- hN7 -n΄tmN%y-Hl!'iֲPv㞋ׁ%G&(Cmh_JPC@m/95x=}t .Uɴ]/o&X Q{{7=}fW3|ήg Hx;oendstream -endobj -1741 0 obj<>/XObject<<>>>>>>endobj -1742 0 obj<>stream -xWێH}+J!4[FBQfZi%QnCGvӗLo1dFca}ԩtB/ЬxDW U00U[V1 )Q9ɞ<-jpSN[}FQӃ $1LٱïR$2M%DKYZ@Fb#maZmdƿV7XUYžXXƄkڢ9 I}aK9* mа{b0>e++k2Tt2ɳ\j1؅R21C@tyD޼[I Gf~a񦽻}|vg`ݣ;g=,Nkc0ѡN[p:zp7ɇ7֡ KNdWREK~4c9^ϫ[fc7cv^?n{ 9J!*#i\*Sdjp^ś1/{VP)͜nVô<܄C<*3r~J~flOOjCy>if>Z xsKcUο(Kendstream -endobj -1743 0 obj<>/XObject<<>>>>>>endobj -1744 0 obj<>stream -xVn6|W`|-4M.ڇ-Q2w%RKRw%ʼnZ`m2gf =Ŕf1%`bGS/x=ů"ZZ?ntI 9%^1mn>4r}ɕ&Q+EADQ#'*Z_*Q>}ۋșhB2esM66 -;nNwܯ=IL|ڟIRcol`vNIC4fHΐHS蝡BiI"%J{J o ғU(-#9(Sjm!䆤]C.j9/ܛ=d뼰V rʕQb~gM] -D8˛3}A\>!&ټ?8OT>D |" -@A;-0,U¡gi7B{I;SI )%j{o93lQ/ي?YB80'o6خW\Ңi`ҝ~P/ * Xo"K -"E Nv-(|Nʯiu{`PeQ]]q^е*H=?u30,W0rLӝIB6;Ĩp,A>~n_Qbzi=:56i:\D g/Cևq`xPq=& R4Ԯ.riW݂`RY ~d9+(];p0*`Դ=8g,SI]`D3O<^-`sF- ám\c<% Η-mb+jQg - _a]66ph1%[̾ ā<_XhAL  rfUǃ*ј)]疡vPXα*+~旒JI,&_a9p&4\DtmtRpo iځո 8:;QtZ.ZSY%;XLᚘN̂(>ag8)J3˜]̎adhh4nžX |$;Sf1"( Qeb/#[vA& 0ZzfY;e1/xE|%K7&K8a薻vۇ1?-2/xtӘO1~Mendstream -endobj -1745 0 obj<>/XObject<<>>>>>>endobj -1746 0 obj<>stream -xWQOH~Wx)H7(W rR鴱^]߮4!1<*Jpo'S¿)-f4>Jz>Onv3xM|qsӓ˯hvEiP7[JsB+\ξi"ǺnsZy ƮX -^_2](kdJ3<6MF[r5M#ErÏ<'ۭ?94Y 5v-MVRVm@L2TJc(`!]Lcp*u*i pPZeζ-UK -z TJnlKk2-QnM [ rֵ(%\<Ry|hpU* (ydE -.Dw'= }q0Ϋ8<{I*JkˍweTq՚Y;ȇ e]:䚥~C|+ R'!/_6VC sĴg=_.>~ qv|2u (Be^WuBY'|<"B2tkԔ\'t? ֠+))d-1(s ^eEg3@ -S-/E?σ}i%]>%ʠ3waME&u$1JvF5KjL㊇z_5zXȗu KYP=DջS#R -T>҂n{蓢l젽ky= *Tf*b0{D;SmU.Cv*8x 5\8'*Ufr4}|99Oَ _vnjxZUk@{!%crWs+f<1!V@mmImXcGLz}0jbE 4:$T&PeNjeᭆ y&";̎8HRwQ-vv4g+h:Pݹ3M%(r^"=?} ۅoũ#(ʲ#~)=(>fV 1㣂i^wΎ -Ju2JZ#&[j=tWr |\xR轅Wԟ# Jm'wZuY^sr La@$G/ ,ezzq(.(|${.' "2>9^A 1%èMh1Yq~HZ*ayG{Y|L]pE{2D2:l| -䝌QZ'gd91UD׊Td:ZcچON {}g)HΆ{On} 8YY0p}+>`m)j+cxXtՐ9%H –ų zЭfKI2q+Z\謐7GbNQyX;pyvfӿT`KaN4!itMW:n˯RO|Znx18L_'3endstream -endobj -1747 0 obj<>/XObject<<>>>>>>endobj -1748 0 obj<>stream -xWr6|Wx:S{F-ɖN!M$XTidd vft3Zi::Oiq9Otq99M|p74[ѦV˫mr6NfdЃi+mٵ֧oxfXMd'O -[ʭ-{vkF]YTmRW)Դ7eI;]6b;jʞM@ƽ\ݖ1R?lAsT9ޖRm[mU+{gsn)uv:)Fխ'Zs2iyQ#REǰ6M2`MA#ƌ'veNIAj-/ kժ‡g_?++U-5p>*ǯExln|S(zճ2;G \C~jm\ -("SxTةP̶*xivu{Ϫ4y~poϺU*Eenֵش8>P'x!ɹau^:@jm*>,u/`9735{rvZUz)+ s:a]mh,'-i4Q4A̡ sy-ͰbxȊ*-B9jRӶ4T4/(fEyO>aMP|T&y–@ ri3H~!B4 -v?쏇y M9V9=ix:/?x^ ak-٣URTyXԍZ"Ass!aO -~@O0j8+ zpZ:c S0>gFp0XB,pT?{;xKrqQD"FFkM\ea9$hM:.Aח؅P-Pp?^~wky=*)1ƛX[ُ'l\ڮ/% -@QD0]c+R]$2 AH*hbO;ڲr#wx-jAs~-?f]3}U/_7G Zendstream -endobj -1749 0 obj<>/XObject<<>>>>>>endobj -1750 0 obj<>stream -xXn6}W[쬓 @m}1Pms#(^dYRȴHr04_L#O(ٜ̞N>^Q|NOKL.1Hi CzJzEtwji()1dE.KZzgT.糧vNq Fֻ~w2$(ћmQʔR'Wy)TR7UVm&i_V[Ika2;eɇij,DFRXi}˵Tb JZafP&E!O"OQl22k7*'7D!tp iX@ar:ĥZUf4D޵΍Je'ֿT[Ke<<>s3gat컏~M׏[XIasXAo)@x[Ovi:o1|G?3~4:pPU~CV/kc1Qg |6i%רK4qs_uϱ+ |ZaoHSoekKCڝ bJ&Nsy/ӨO3Q-^ ,C/z 6SK0/DGW ⠱'`/a:'rt=1ԾhjL]$33gӭut}(ȺI LuHe^]- H -*YDw; 1aލޠaTqd_NALg5TRZMͶe36 ڒE㹞\T4,Tr#}rٮ]SÓZ3تmd)T9k9ɹ:+NfS?g, eK3k1C2e42?x芥~}:oendstream -endobj -1751 0 obj<>/XObject<<>>>>>>endobj -1752 0 obj<>stream -xW[OF~ϯ8P%^_hHUB/HȗxIC\-%j-y{)HDJtRKy7 -EB[Ev[¿]冞t^jƥ"#6KS\V дU^(TAqZjgݭ^c;azGxÛt -=BcZaTo:Ekk4Vzgp-GCzER46[&\R0BHun,rRqHSxKn.€#j~{,W=qbNs."iN\~ f?xLȃQXʌ` qtセ3NtHm0D~.T<i"X^Βl&3MeF?wRӢ(S>*+bLW(RMM-y7.&,yP ɹ$&$TߺΊBm\p>%ʞ8ѕH³n5ZT[Mh@IW*x5ij 9ZT(p? glZyw_8endstream -endobj -1753 0 obj<>/XObject<<>>>>>>endobj -1754 0 obj<>stream -xWnF}W he@J -0VRژU./ -4uj4o;s̙ߣf,r4f4q<9?1_%)]F7'Ǵʱdq~FlFt|(VRaRQP)+d?7zTQF(k62SoVG3(YTTO[(Jo?ԮRF@)2aIlI`S9iVi $3 7yX8-: %@,G&o0y\e.pBrJ"gB'SQAAY(!"lPI.ٶ2Z}F[ZK$Ec ^6픮hLՄm,qgV񨡚"λ$bG91ۇr -A(˨WjEghɜ)5-B~U'i*!<S=R^M mn|}?- aۊhľ0@8i'0=FTb샟b|3#NDžs -ZOzZ/h8#+Sr4Ӄ̼w7itGs("A)=-\V]}pfqSOrC>Ltľ:L[?˦ʚXd;A`/$sfU* 2ﶂAxW JKW]T]2ŽoPMK|t,:N:نlP#Nk}^ {Z`=^4[o= z[#7Jڛ$,i妎ɖPH5V j]?Ѧf- -Vj@N-bVSۙO$7hNd90HEq&BDeD>cd.·*lGv`>r-L-4=\`U"zUA7[o6ۮwJ@|a kL| =ʷ:ZלlUhN*m5՗̏UG)YaZ4d}y98VMȒ!?fV5}`X}/ ŷLDWWodS`4C=4t(k󬕎UǠ -Ϻzؿ2[HfkTJ|uX)C-W(Ik~Z{&3IX_&^Gt* m{=9o5^;|/v|q{yAT#ϿCLr.!'hq೑_lz5u#>/XObject<<>>>>>>endobj -1756 0 obj<>stream -xWnF}W "ɶl;(<4}XK Q=q`8wr̜?1oL:RZF]\H{IՇs)qezuIIF8>Q+H+I$+kjT(j]6 Q*!X/Rk,d:m+o\E*BɷވOF:ե%51^ni-L]ZԒyb鮦Z[[,xn8It:_waގbLT-cɼP2ͪHWIUڛy[HW8qZ - T[+ihѴS -ys)pƮII:ʢ&65'NTsN[jGBl )b 3ꆪrҲ>.[`+RݙW6|'aⱳ);-HkIrBs´䒋POy12z0K>f.h0+DcRLo,]_FfC2DS-Q֢2\V!jC6eA%&7kY(pjŐkJK>\ ɓчf -Whu%HǮp%x} 3Gy+ Em[~$n(89H?z{O""L+dt=ӉBeyB⻦czl!r'׮bBk!=gq+R"DNEQ2_l m6JB[Q EӐȎBtd 8rN'h8k\Q\Q0&C^^"Sǜ듶wGzIdBC Uz/ՇkCYg~/!PϏl &zYVYw"? @2}B=S%!5L6<t/,+|x~,'qo/c֐%hWB:Rl!ipt8G=Ypl@9b*y0m]QS20eK\-9Hf`|{it>͈q)pe!N1-%!&.B5 9lO9@j=*?EiJ`Y pD@V-<> `azܽ[)qiN.I&ͮήN-A]S:pN㓛Aom|PB_p,Gp8H"B2"kR1 -ېɀd;8+n}ޱ_BeDaOHs~ xvǓ`@fCK$]%czq,N=-Jxrlgӥ /Xn?Madmx:Û+o - U𯜻A0W$|z5^L|liOz}VGendstream -endobj -1757 0 obj<>/XObject<<>>>>>>endobj -1758 0 obj<>stream -xWKoFW | X%ْ\n²H%\KZѿ7KFm.4A`ٙ1Ch<(ƠlGWJJz7>ᐂG&)1aS.꘶&Vu,tZT$E&?tiIPp{#Q*HdXו,),Fgʣsϧp썐!߻QTGŖn)-bE06~0q̥Ja؊bS}̡7i}s kz8Y6kd]+YlR)W(JvLZQZPJZ)SKkz8(PHv/E -B-Q7%QY6i"T -O *S=/ CI(IQ9ڧ3;ᚓmlzt5lw^/i+JȲƿYi&6o &2veؖx5WOTuZHlD_4JR܅:E3M 2a܇;({i}I" }.W ];|W eLLYt%ʪ~"绛5SBсjZHx틸[HZ<#n錮qVi6&ՠMs'N5A'O T9-UU^uo ͽ g h`菍h ԣ4gMZ1fax -;]T1%>VK+MmZWVx q:4R,QgerD+`/h3*@ih(mE,4₇9Uc&ݧrFN7wK2>4pdbV7qk|,릀-,p!e. _݆K|FtTwu2kWu['8cbVK@Һ1vvjd7#)]aYўᦲxF6%@W،Y8;gf(3n=bY/m3 3;5 ͤup}Z^/(U'`^,>/XObject<<>>>>>>endobj -1760 0 obj<>stream -xWMoFWLurѷC6FT|Y+qcrWVfR\μy^ ͆4RZ^>Mwɘ?oi#.˫h0I2eF2̒yB]%ʵZSk*ua V4+Y2U'SWj/{<+iX(,BqvKxvwTŸOJ9ާ(ϝJ_tM2֓"۔k]NUds\u3mSMk;_]SdWMr4vBݨi!|5+zՁ -?ul[}>]5֮_{pVIw8E;[3Gm Vp|Nކ! xA^qXw -~BKFc ]z]QEqɁ P
"J𮿧zWwwp!4.{XkxYmgF+c&7ew2BWɣA\ *WI.4hqm)ݔMI]6IiAErAZUuK6dU - Ib%IR|}@+$!;Wk[  -?G/逢cCWuN),ݐdB)zp=ϵH a!3 Ϩ~RDS⛵k( 1#ŨMNWe -r؆#S~dU -휱Xpe>J^ ]YjAE>n:NHx?%1ܖ V(vH6Օ9>wD&'\&`iAEv_S{r{6`+T@C)f 0ۥ6P.(ڇEU"hGBkK(qc*Fb<$"fU8|8zNV&SR^}1z"v>>!@zx6(S!O>/XObject<<>>>>>>endobj -1762 0 obj<>stream -xVMo8W ri -Xd9[nrɅ(DjEj>(EaMrͼ7wSWL%JEF5w[<%Bd w×51r$t !dBI, d3x*}cmD -3bMCҝt7,ɝ&<`V4m-XmP! -Jĕ5hSGIBr\eJ/IXRŐq08iDA+i̋6G-][4g?ʑk EUImI::"#U+BYtzH8' -iҢa)=^td 뙒`YUW\ 7ܔ| !%;Qxܯ$ѩAݞP?Ĭ6N2i=l挧ZPYˬ}QvֶF ŽZvKjJ{ ʋe"(e ,I?QAs3jSUuꄨ#b2W?5J2f7jG~IOG!LJx ]5p o"$Do8 -8gpԓ*=u~d:?ZS?2<&"hC0zMM(+X:n=SsN{Q]X®apKpMSDє%mԎS@X01ES:zgfg/c [zd9=N58?Nfށi,:ŝT!@w7>oxYZ 2SC@-!^k?թeH{rXR&P۴x}Pf?}D滄9~6iS>Á`]כ]Z?h,B峟endstream -endobj -1763 0 obj<>/XObject<<>>>>>>endobj -1764 0 obj<>stream -xV]o6}ϯ)q}趺lPD\JC "^ޏs=rUAd{%ɚ+<jWIyz,ݼ"m _5m+ o{RNfNE77Ԛjl{W\&\Fu7XADW4]oG+MBg1VA2hQ=eUHɐPlD?*Y2tH8^+AZ{n_{aQOwVXXdJ>$8:B#jQGE!C)рp[;4o4>\:mkhD Ռ$ ӭnetv1 -9$zaE,tsxN5J}SnfD V;hxՃjwF9=hF]z^`s'00G&t&i!c&D􉇏@}Ѯ@j0}.L |1LLyzkĻ,Axҝ5wb煗&y?'g@&<ԵV)7ȑbvnA`Rt 2^7fC_=޳|u|@,{y,,˲YNU6e؛C}@w

{TsrNV7r9ߞ~/8Gendstream -endobj -1765 0 obj<>/XObject<<>>>>/Annots 1030 0 R>>endobj -1766 0 obj<>stream -xVMo8W ziK?m6E{(PeH쨇[e ̛ u ? -S7~œK]K.K^*.l5xOJ{t7؎!"C-ہ~J^V)CmAta#sʄǐ{42kzm{ -NE)|l?])L0cgbt3V#"  !EvNYhըi#muC1Dd| M?0Kik .N1"`-8zĴS?BnD"zqܨ+7TLAދ ںNnCO)ԣhv r/{ztNoG.Yys4tt^łAa֨AtnZ(e1}4ބ.r@!O5 ᖒGf`r=S*tYvgdx^^Z(XiG3x^n'ƍq>ԁN*`bxj4?gT / m5OչW;0$jq=w{X6p LCCC -[l2Ȧ?Wj -3}״ykb۪bs su8OvיKERVt8xXܰ y!S+C^) %57ʶXKh -e(Az2{(A|)Xc @v݊COd7UFd.w;vW6︞hsFxbx/xe ْތFRJ'endstream -endobj -1767 0 obj<>/XObject<<>>>>/Annots 1033 0 R>>endobj -1768 0 obj<>stream -xeQr08dN[vzEEQji+v: z#cSP}2^wIfb-X\p^NG8ےU m&M=n+4-)BQ+^ gpӼpZl{Cxe<3;A<[ s }*?tmJKA1D׳a#t_x^B !A7h #mœ>/XObject<<>>>>>>endobj -1770 0 obj<>stream -xWnF}WL"hhsiI -eEĵI.D) 3sΙ>Y?KdbtqssIW'gn)_jZ <)+9ihyOF5T?~^}<]=`>obUN?9a)W'ѬçJP>#AMN閔%$T-ֵhUI*zcd먑%Ok(=9!,h<J[y7[Iޑ{DžnBԵ,C1)f dq,˯ N(cy$Y qp8R7B`௏f Mxf $?Sj[+>v -wr%ǽUO!ZYGxn,pňVYIe"*NGi3˭n$0ت7UM"ֽRđ3IO६khC3YΎx/Y $k::*C!(%g`^`z !h ; -IK> K.H1Aߐ0'?0C>.5RwQO[8׊*Pi囝Z@힃/0,`OGmTF#JeSx kdL0>wqV(71HX@|ACcp@8FpkϢpKzXx5kM$E (}1 +iGH!7enÅs{RutuptJpd9$y:f˿7ԏRDǤ8.KgAS0oz j^Mv?Ae(] )L봗q4"@f[=R'|6  \#1 n:: +W&݉%:vKg;IϤf}O"h"> ǚnܠV/0Ub%D'/ޱfpْi}2_( 5lM\hb1U]~ \["A(mG$six *>?YN:xuC7d%N$d.Z|Oʼn(9!n4)3*y=Az7e4MNMQ@^ЭY`|ة26Ym؎,~L6⻋ހz9q=sYP҃@@dNPa +cОǤ +B4@8~n!Wx}vN }{m5oex5edST +< sm70_Fg+"P修SQbot<=0C" y~;Ók\~Ez`T@mc0 5%FJ:CS"iX$%w>YPg s:5M?5Q{8""ɱσCC"{ R"'wMm=W*x֗,Ze5lIWY<-2IYJ@3=`s0SiXpÔ%[t*h6gL=8N{w/ox(dobGh֐\;5 =H"tgX\YRk4y8;=qls4ھ5bPb&}5{Zleo Qp- !ȝ<_: +s^Wnxxm, ݌ޔcg'Q3"H<݃p=O^~}./]łλT-ަw"c* оbL8oKzg:'ji.2<64<7 gdw +љ1y-JYm!R3MN||L:G+zO"cs:q[xrV#_ +55:B^b˴Hj7pB˙>d39'2 9t:/0BWȽ<5Nq(dX##&8n階7d y>CG^V0vUfk&`C)!]yn-(QIz+6wyx!;s՛nUc{L(>Eq`U$.=osX,!TQLQe%9x_9Z8) > L|d}MEi(?de"#-Y'c\XAEYE Ëd +8]: 4(RK'0UFz8pFV^Qz?0~QA;m#[5|؇^Az|EyĒl<ŁUj @cbC`FDZZL0S!z%EIr +hQfNpXp*VvڌiG|?*x׋ &NH(5rݹhtrN;HWZ{YEb/P1b;,D"i6MI%1ȝNl2N^_& &HG 4u<ԑ12"]&+n>Xwz ҄&wF4ֲ7+p$ElK{ +k9?7`~Ѽ!>ݴQ(ICD/OI[& fsV[i*2&fl&5kk4)(O$dҕu ½]Vn@5nVΔjFٵ4otm<َW-"/WV8[y>8dȳ~mVjr~)_bg9DtIW~Wqީr^F3F;ĥ5֫SkCo8DBLyͧؐ[S4:Y߀{ŋM*^R a,2!`Oe2p5TR}ojIT>EbKwUk^P3X,0k|~. /. &*,%hX|+pif9G ip>V!WUHMU |UkZ[OR0 꽵]~e$r._Il\b}ۧx 2*0o< BB#dgn3xkO }(,5yB娾'ZX:ݰDgR"^\!Js FRqjb"g>{[O0#2WлR|dVByQ30}ѷG![]9-{' +.Ұg12%F߸ ~{.$RM`m*rG%I;o u9f*-oбBOZ)џ.準~|:m.+;ibMF)~&Ysӳ鹢>KJ0ttahc7 \g#2._sU_$j]͇h㚵D ϼN@*DqP3. YEy&GSrֻ(꒙Z/}Ɯ1uDSTMEXr q +0=w.-Z4083G5LL +[ +0'ӋBvu8 d]!-63x݃%'S\%l흮 mܴmף\z4 zaN%j|KX|o6̅fղ +ӴRι\o&I_2P9=O 6>B|`]3Ⴔ+&ɧ$yF )#QWʪ?ٴ$JcG1-O6H:9'}yU>+9h|3SD!`!~٥4uLa랺iB Pd{ژ7ߘF[uQ80d^u|{GLd8= P5ըbuhPu`~XYD 2T't+ﲅ0W$FbNUx)@{S'6F܍׬?6KȄY{TWIor>$&Y!=j_D!1ڏpt$$g>=qR9[X+Q ']󝉭Z':ff˱BBsIZWЧBnRՍǐ$rZy7mE#0*\.iF##i~]ĎԜ1'jW}d }7}·՝7Veo6%Z̺?pƛ1eOȏ/hk`gh򰒊wqVp{X6g{1 J\&kI<9(fNVxbˀNJ?<>FvmBE ٟ5 rx&&#:",\MOk"fhϒʚ'm}YыZ\ܠ$!ޤͪPxDC[)r9Q,Z`-,:LΉ?)I~H0Q*^?.΅hP?C[<ǖi*e]`9Sz,[\̳\xK>`["1~ ȰGu30[#M!|(6ЙE4ַ->5 OLWoҰ'aiZq>gE~giGg|\r""k}"Ш<o +3u/4?kbF_6I}{`hMnܗR=zCRqQ#%IY։9`Kj-4t"RJZf-we9{XxύK8Mڅs(Z}r.Y_[fcZ0E:Hمort}0^{ }DЪ~.&gdN$3`hI ۫P1QR®Vv%#iw?;1#a/.XdUCj!m$cgdw8Y'+zvE 8ү`ؗjɥ`^G7r,_v^"^E"FIxP *2J +el~L_3md cx3_TtP@PP|iOU4qY!"RKDa˥d7K:&Ci(U&^5MPaDͧS&*ԉ II=m&[ i!bl/wn& AZZrUOX9R&$w] mQI~$j?Na8kn"*r٠d + m!Oh_J7,BT{a=k^/KzȲS:n9+97(e7av-Ql1.ŋD+K|<̇?ep+V؞Ǥ0ܼ2s -xF/_(hSI{DQO瘐1QW1 PeXOD"nϸV!-& 5aB/f5[v#gGoeࢇb$Wh$wo/9t~/E]7(QhIQ58vEpoXW@S/[s}=iIFQK΀ [ l@b?I4Nendstream +endobj +3977 0 obj << +/Type /Font +/Subtype /Type1 +/Encoding 6697 0 R +/FirstChar 11 +/LastChar 123 +/Widths 6704 0 R +/BaseFont /WFOBGJ+CMSS10 +/FontDescriptor 3975 0 R +>> endobj +3975 0 obj << +/Ascent 694 +/CapHeight 694 +/Descent -194 +/FontName /WFOBGJ+CMSS10 +/ItalicAngle 0 +/StemV 78 +/XHeight 444 +/FontBBox [-61 -250 999 759] +/Flags 4 +/CharSet (/ff/fi/fl/ffi/exclam/quotedblright/dollar/percent/quoteright/parenleft/parenright/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/equal/question/A/B/C/D/E/F/G/H/I/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/bracketleft/bracketright/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/endash) +/FontFile 3976 0 R +>> endobj +6704 0 obj +[583 536 536 814 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 319 500 0 500 833 0 278 389 389 0 778 278 333 278 500 500 500 500 500 500 500 500 500 500 500 278 278 0 778 0 472 0 667 667 639 722 597 569 667 708 278 0 694 542 875 708 736 639 736 646 556 681 688 667 944 667 667 0 289 0 289 0 0 278 481 517 444 517 444 306 500 517 239 267 489 239 794 517 500 517 517 342 383 361 517 461 683 461 461 435 500 ] +endobj +6705 0 obj << +/Type /Encoding +/Differences [ 0 /Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi/Omega/arrowup/arrowdown/quotesingle/exclamdown/questiondown/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/suppress/exclam/quotedblright/numbersign/dollar/percent/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/less/equal/greater/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/quotedblleft/bracketright/circumflex/dotaccent/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/endash/emdash/hungarumlaut/tilde/dieresis/suppress 129/.notdef 160/space/Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi 171/.notdef 173/Omega/arrowup/arrowdown/quotesingle/exclamdown/questiondown/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/suppress/dieresis 197/.notdef] +>> endobj +3973 0 obj << +/Length1 1393 +/Length2 8137 +/Length3 532 +/Length 8965 +/Filter /FlateDecode +>> +stream +xeX)ZZ R,R @ܽK)Rܽ{owg?yϜΙPBP['VAP `p ' $ ,;8|ܼh4 @d; nv0@N`& k: +=v;MY88&Nc-Jr(_aSgaRz$h +v!hlPX-0/.lm {KXX5;w6_vJ`S gsY[ۚY +Y8J[MU,L#8%`GMGFRYSgϨ +I?sfX,Y9`}jR&PS [3'/rG<9`7 j uM @>RNw_~ v/M7؀ 6W7 ؤC|6`M\6 `M +J VA7**&~oUMi&X=ڲ~oU7qʛ|@a L7Ӏ0 ?a4@raV. 7r¬@?? '̄xؽRyH $iEAuiBkBf'4dAe8 +lD ^<قpa1䦫 `d.o52,Q]t U)s}!:G,{jJ1U1 ;r$̓. _~Z$YZLQBM{ s >/kF={Z\ϭosҁ!m3hSjIp3ʡ;ᴞ(P6z9PRkR^RJW7% }fG3A[D!ufS9GkKfIʤQ+蔪stF{"qq4 +mXb=I/v 1vF}*C*x8".~C_D$vrGqpXe`M$"8Zr&5tN>'!N+1C͐q3']@/p]r@_II, lA1H,E2o1(c?"8$d6gWpd0J]gK%m ݊QX*| txj- 55IK8&`DJ$˅(Z6+:'|t G\/^I\gnoؼ15%݌UxdgUj^MW$Cq;D3T[+8n+< jjWf$C<<3|7~q߲ä%)մmsu~U._/Gx|քp٪'bY ڣoWJ!|OKrk7&҂˓'b)8a`?z3ZTAR*su[11ǥ"fN$:]rD+±c/;1'G}afHdڶYf9oh!5mIbB}1t"WMۓ#cl/w,z_v@$ %%nXREDD1tNH;?H2WwӬ}j}+AɺA㋚Լ3Fnm9ɏ*|5=^9FoP)k̬t{OgiRPE*cW4=e$9=M^?glY^d5kPӣkBTWVPHd*|6w}vGXl?d̥e|8)d]l;MЏ($-!NѸP2VE2l1!ѡ7䁕f~ 'N"BD jMX:4W t YcL&5E:0>*^~/a)pO3?Vyy_ 6=@-U O@YS 1ȔxnfC?b%t<< بRROEP$|Z8xj˓G!͞1ijd|^Sۼ(QV'Gff}uː3bߣ8 Vϥ^rb)]{5"(7=LoepLv.ݔEuJ,a~49L9QtDZ]־1X!߇L|}5>[ +{[ZT/~a.k]z)iX 3ˈ5Y7A,pY$w/N/[Ұ?@m2^v2XmE$hc(3Eۥշ"3}@զ ^tRU OF껔h7xE:!Z8l۔W"_2q\lx7q%,7?EjERh[NbMpDObWNp̸8b OVN6@ڡQiA)?nxyl+;{3w&2Hs")>Ch!*u2޻?1EL9zPo̒&ɧg6 ݣ=Yqe!Δ$ydɼ)يTo/S3:fr6ԷnB:_L"ݱd;\?aWt"{l~\R7Y>aovWC@yJ{+OK5h Tv,Dد7GM1$anuVK,d( o}Vk1LojW 9Ux&:!^?mB~yin g{.$$T?" +ޕzqwT2}͸W"p]n V:R2wT`"@hwVmV0xkPU"mrKY_m*.CYu"É<7;t@] Vu[z;+dj, Demۙf"5[/?qL6 +q.(ACF>@Ű +dщ +鸑e %͙i$ƚ~30bhk+{eiZ]hޱ6BQ4!6eaf.A Oy.M&JooøuF!K0͢#Z8Kۯ9zlܜ^fb|%wQ~oN?UꟀmQƪuhii|1wE{`*Z,,/BF3ca !&Kq<]>""9~k|XW?W"n@6!ɐcElJlCXjB[ELzLnek\g1m{zI>Qם.@HDG]%˅g@i41@yPKu8d\x2DڹG{W6N6g3 Z d`fSi2iaS;!F[5+vCJ|ŵhSVߓƭ&z|Tm|xqEnn@E9"Psu'L%iSH_HcL ru=$H+*? Q*RxxyN%i.iey͇]ĔMk\=}e nyڌgmd˹3to|Z=uL`AYv\{ O:ށLoX)+{'ŷ6c\sUz~ώcĸ, e[(-IQ:%ծⱄ8vS5Mf`wT1u|*8v1gCņ# ˏEO/)m[]RJkG6VtŢ ZJUB뜱 1:')Ճ5b{QBKAA ]^;&U}ʤ놅=+*Cq(ǓOԪTI|56 i?O0l|O%z \Q3(2PO/R5;o-ܜ4bJӳd߾vv^"]^C)ʦ1@_X N%U22q=ߝ .jK(`, G wU-:I=_*_O6|I6-n Py B%Ú:cjn7Zt]:5MxҼy Yלa7+ c +[:]ƕ=ŭo7>i Ej}) 7?EET]@YB-W]D*ߤC9+N_0~=>Mal:Ñd11䷣e8lbed}SM^drqor%!Rk\y?ms!18tnԮ$yĢ]g6*2jNͻϥ=ǛJf=_?rfKVnY0s>Ձ +T4 d9y5S +E7FrORNSfo<|#৅Tg=O=)FfUҨPlrWG:jsd^ dB2Ã#f~ᓾXRUaۧ04/[WdoυJL=_YX㇒mne ΫO:[ OV7Ra%I @y"QOޚ5zCx |rs"#nW7}i3s,*\b'$E'J)[Ă\3fڸ_^m]~&'"Z,{Ɏƒ!:*FGveyT}7_u]F s/i1U %!_O__xK-6ɐZeF5U岰S%͉MXj?_0+0 mcB>Yˠd*o~q حpXvt4][Q{Yyt%[KƉ| {֮3Dp;?0уVcfiIw}9m^mB"ώ%z;ƘRCK әz<۞=D;bZW4'|UgpHtk ;q(1(kݾ^^- ڏ6q$̙˾.Jx~}a`:$m/7dbkNď'S& i% [FO8S +` K7i'ۻOP{O o-4+-nSZ8*O/ tAqP&y KEzIȃBMˀ +\B^Cr)9K4p5;oPˉ#ޕBr?Z!]Ͻ,RJ'&dQUjcUgIܒF~ĪX{ BB@x=wprdj-Wr(,֬`7K+CŴȘ0` `+e^nTs{>ɵPKH>#\Ijjv=44D"[Vz1s2_Qz#_[:_VT=QFz7mq?b\XI ΎpΦ_b6,P^(=M(3U j޵2! S;%F1du2v@ΝY 0UL1p 00hX?(먛.Ƶҹ=M2~MήMVlOCS'z[с,/#b؆+xܡ#8른$A٪sNj."lj^LĹGȲZ-{ѯ3I,w(_ݼ-;omDNUG_ 6}YM"FMN 3ew٧HG ʠT//rA Osگr_ +18=Z8ӧcj34gA6X KTqA7_js_̧ jhH#O)&D[58fKj +Vikf옫& lЪ\rWܣJVb9:I.QfLwj:-GKH +Gh~|<XȬp`F١^)w;[|"W6| +ihfXWlWGlҠݤpef|-tx0ʩR $,X#\7]@;6VxŨmfv\uf|o+k_kOqRRl%W}r8ϟt殎85%5#ˋկ٣ šCQmwz+1ÁЧr)@@YY ﴊHg;nTq\o>qYlrW. QPie?X rpڀjendstream +endobj +3974 0 obj << +/Type /Font +/Subtype /Type1 +/Encoding 6705 0 R +/FirstChar 52 +/LastChar 121 +/Widths 6706 0 R +/BaseFont /XGDNUI+CMCSC10 +/FontDescriptor 3972 0 R +>> endobj +3972 0 obj << +/Ascent 514 +/CapHeight 683 +/Descent 0 +/FontName /XGDNUI+CMCSC10 +/ItalicAngle 0 +/StemV 72 +/XHeight 431 +/FontBBox [14 -250 1077 750] +/Flags 4 +/CharSet (/four/colon/A/B/C/D/E/F/G/I/J/M/N/O/P/R/S/T/V/W/a/b/c/d/e/f/g/h/i/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y) +/FontFile 3973 0 R +>> endobj +6706 0 obj +[553 0 0 0 0 0 319 0 0 0 0 0 0 814 771 786 829 742 713 851 0 406 567 0 0 989 814 844 742 0 800 611 786 0 814 1106 0 0 0 0 0 0 0 0 0 613 580 591 624 558 536 641 613 302 0 636 513 747 613 636 558 636 602 458 591 613 613 836 613 613 ] +endobj +6707 0 obj << +/Type /Encoding +/Differences [ 0 /Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi/Omega/ff/fi/fl/ffi/ffl/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/suppress/exclam/quotedblright/numbersign/sterling/percent/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/exclamdown/equal/questiondown/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/quotedblleft/bracketright/circumflex/dotaccent/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/endash/emdash/hungarumlaut/tilde/dieresis/suppress 129/.notdef 160/space/Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi 171/.notdef 173/Omega/ff/fi/fl/ffi/ffl/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/suppress/dieresis 197/.notdef] +>> endobj +3247 0 obj << +/Length1 2090 +/Length2 17727 +/Length3 532 +/Length 18923 +/Filter /FlateDecode +>> +stream +xڬeX\ͶpC x-8];k܂kp]wsv>?z̪9jV(Hl b6 aYeIf&3PZD `b @?@_n6vnfv +JIA+5@VhZPdchtpeZZ=@hs1 03 @3k$m6r!'=H +@/MjH`4F`e\--Y_,]w kcj9Z%@?q3{13)X8M@WA )= Y;(Lf0Hvf.-&PAA_D m̬M,l};;}W%`fmt]@ƌ 6@!sg4Wf?3՟hwGG8@;C_1N(j*ۿ\.Z@hm 4+ 2׷g {?Ah'/O3?B u{K}{?Olc 7d4L6v)_3@s7̀K6i9١͟Vfe;G>St?MOT?/@(%7qj!@ +$!@C ?rC ?rC &NeWCJ]!Pv?ʮ@(ƿ ]*a`oht+Ԡr!P"?O*(_yܽ//mڻ_r AR!Os`u=Fdeln_ AV!/Y9 +dWY +׿d^Hŝ<ѳț3U@OQ01qp+jhjdz˂r^=@ aqƐ'<>K4wڞ `=6xcƮa\HtnnVx*]hd̶[/ޏE{nx 1׍jHc@{Dv]!s̑{h~{tcn"NfLP`=zD&f1G;m{ub9+,Sr6xs9ՂxQ=K⽲vaiN>yAo4B)shL(va،Zg!ڸb)9 fa2HL #m a,K5'lf4ore,,^U+F'1l3`F!#ܬagdO';L9q0L9surWX}y_$XSLюIEwc;OE'fEzvni +70(/&c?r+U׉~K̊Y=S溜os2F[ڰMw*q8¾*Jj םϤp篆f"I?hϦ~h1g)8't)/faE ,'xg;z!e[]F3!I~Rqu*6{s{R(ڏS6 +{GT?J٠ܾhd@ĵC2 y#:TYYOԟ~-ӎϮ>lWND[4yl|-^5M C_ Ǖ/z*/jd}Q^^Ȼ"f'hЅYSn G"7>*o@RrbC̪Dx 0mѱ3=0`yd})ϭn5r(,Zh1mw6 h >.fQC~*}SU8mK5ڔ +@?Mz~: VE@[-/Q"MCoeUF~qrQ2>B:RŴ肌afV5:Cko#YhPJr(\0&@"FZ9Ė< 5drT5GƓFb:6 +}m޲)CscF߁7_ɽTB!~ 0J34}t=7%wAE?yu ^Z~&:eC6=|F a['ϲ7 ùR1;(Oջ}MY+1BCxogςhbpBPc<5l|~j,|Zi 57ql궫p;yX0UrS"~^YL4{YHgB12+1Im2= iP]t Gt@ f+܉Y=$&u[_2x瘽RD0dVQtPگXT uUZ^]st9/$D]<#Ή@D \rq1LDBl刮^eI11D;&հԬ xK*G/Êh%e bR07KJS#mbR,`=Α0ެK&*OWNk~XptVl#T,YފDk.ڕ{+CT9c~<^WbW;>='|:lܝ\^xS#冩^:E/Q/4F|fFF>oّr2x#Eu%43z|em JďODğZ9 Z=RiNh7q.ò8C ;??7Dm)Qaob5U-*C;)]^gz m+'\8b֏e&е8GAwa%df,Zԥ,L$ +17:j2Y"km󃑵渴|(u3γ9CdOu =0e2:aKw?S(z-X1 D m8]f0|isa|qِ!֒yfRܻZ^7ߨ3 `6 0Ky6}]fr}KOArJmMΥhO(w( XW=ogw^AaoH^>6˝|#LuĶ"*9r8^+ZbaJaCrU7Xy9xt7?b%ђ6^:: #7Y3,LB !T9Z@JthE@0#= ,zi-[,Vl5Hw~x3i2v y6a'לlX-<^샬iDlt eZy-qrA&ۖ cwޏgQ5RLMxXN#]9s%V:ż' %T7(hF Iww6R`,fKdW#SщFh>q;TI&˵|݈u(=RS'ǯ) i0k[TwON3:?q \H}HVe2fnR֟QΒp{YK+;̣|*oGCRC  +1w)= g8t j1r%:֬nx>i ' vh +ahuS9YODgC5~xrE!%r&;";Y:׷:M8CF˧͕ +f^R`2b}v $Hcl,7IQS Wc/V,; M²Ηݮ~L"4?x#J5 ӂ(Q^2>X!}Vr45 Ely>*!EkI|m mRUHrCay%jWPα b?+_ ix]G'_8 } +:8^$KoMzk*7sP]JSd3W}֚m_3%GWyKM=WbE1|x}r 'm,#mha(#.Pe-SW$+OQYl,&I::/byx%Lp;ZGœkȝR+ 3L6Sj=DyÅg |`.G~iF NA +!&p71<`$|$/[.PX6xwU>ǽ9 }<Cg1_׋Uwn/vͷڟк~ A&*뿏/Re߅ ^ށԘ}ތp7|KNcݡIY MA ~7AѐT9Ƈv5\jCuYpɃ {`9+Qb7_#Kbo=+Bxg k0& vq[|v4Gs0YR?\>kIpLg0}4f7<`D2i'4 <+3+Hq,ڰaF +~[Y޼B HB,wJDDgk&VO+ę=?(|{ *9,P0)kn%4)-ͨWgSC.UK)ƞ gQ&Ӫn^4=ͤ$ᠹrJBsGuadXh :{zp&6/qwrC0zMd= - kϚWԝBGDsy(<҄(5&<Hq}mdbRxy=X~34]-w7dS^D(H1z/S_LhEPVfZnX:k|#ywl9GUS5Cő~6FE`̩nTM ŏr5fw}bk`鍿Z%9@P??0U>jIЌTs3~&gVώ mQ'w/ _Qz0J}lӬ~=_lt8VD:!Zk5}=YFpR4"c -s~JOO>aJ+.ؘCN)ttm/ +$@1asŋ=X蛕gSHͼW>ϖmm>Chr='f/(l21w~3/Kp "bjo}-+8~;M﭂QUcLBGk;fx3#i.^> 1 +CF24s%A& n!0 B߭`AF-- ny\2oe'RsZsɟ ;ڕtoP]jw'4TWZxa^h!2ga@XfIAf,?gH5PbS11rPτ Bqx. + M[[V"-D2~ G~!5vm|OuRB37<\#gM&\;0?SExˏBLpcE^+R^5%b +#;ukmU^P#,4 GnֱzqEv" HX[`dXTe{m8֙98|(PeƎP`{dqVpP)VŐޠΗ#alHM-27Yð?BV%]B‹KcSЫqB) AتV[x #̋ JO\t}GeȲ4rWӼk5P Ԝ+a2_!<~ǥn(VHweN}E'RRHVTy6պ@ X:$FڡGq +k8l'oŅ9Mip A5MzӢW^oPm0Z¥ֺ VJ1Z> ]&WAH?~b@ZЋJ +MIV>^> +:} |eJ^%js'[䒆S/즗Ų߃X-6 1$$,Ə*v N/(ŰfqA﷮dpLS6y}z\!>E)n? re%v[vo 3ׂ}VS]mĨVOlnp[ƺ$:>>,l_Ϛ-۴Ƞa})Eo!]]i[~Bۇ" i#E!۹QYΓJ(/z݂ri5_P)sۦwqTKj 3!SLPyB}T&x@ 8}[ +l,Nɰ}BLirNFv(c NI ASU p=6 j55* W?%屘E۵3FKci ܜH:PNe<@ok%#G[Ԕ00 +Yib;&aF\ Mq +EYi(̤w_,['Z8-Dw.j)opwC˥ +D%- ɩ)6OCmzU8Ê8Vy`sPxR@;XBR$]nI Y Rc>9^6ʊ\]ggHa [D}ڊ͌P=[MeK%xRi"3,OȓBkn:rYC$qV]MYHNWD.qUl+c-+8)uPuChJDb^m0Rd%h*L9}'B3[T|%BUl\!h@;2ڜ=_B ׭i+%=< ؀;ѻ;Fhrsppqg'A%ۏ?JC;LasbYaxnk\"Ԃz9L~Vs ?oQލXg3KMEFs xʲUM$qooSoQ";'og-%m[W&nTs DH(f^ᑙ@4JzM_F]ʦf^"k7108R¥QmB,B+XBө;1|H)جjoC`u0rJ?A̤|{m6I|yw<&F1zc]i) +\HAt>\b+ +\,K.)P0,[D`}&m?\]٪k'<K-`VQk̭vAW@WsUz }vj{{Q ^ .(-5s٠<4h1_)abu5VVۛ+9V +)CEwܨQrΥ|_ɑ5oTNt+*!/tF-=9YZnImEPRq;ϵNk,F4RJo ^;նH*A-ITU[߄P_5mq4J6N CgJQNY#C~e! ':±EON _ V;i{xL(pQZ: bzeFכ-bDul`AMFHtaWȚMFM79Q'kfVDyuFʢ x6T;( a\4i_%|0$݋J_FP܉hlWcO$/]v}!•]1enpΛxhsFg FQs2eKh_;(=7;o_ӵ;2Z#!;%e #0܅0^j) 43SyuvfVPVGnrr&5Ki[QEcS0$ PzdUoc1UW\_dS .-]nlL{;-\6]͕ť( IK=a<=pr%B3RQ0a4xb>D}LFk/ 0o729<@ٚs:v\,YSaNF'`x W"̯h*9`-&߅xeOU%׹A![0hr\XFtWt.UrӅߝ8n%`ZOF_~z>z2-K;2 iòA# OoFW2&{]?оL!+-v2p+p\lm;zkݲ1l1ESH9o6vخEj&PE +jW9fa-6HV["Vs ?l+TTQPjiLrkBv1:5C!ߌMmmnc] vעhI^)hl)N=ΖM @` No)hvfFu ]>B44*W +Qmmr-֗:BQ|vە`i?Wq3f0?B0cm.p6~ytxMZwPښzJVȯnSm W˙LQS$m}!rU!]ϛoJ$uәs:M^EKJkMV,'u? Ick_;bJ—z*z +Z7[2^j PD1|ϗndFM ?ȥ'iBWiyG 8\ܹEěP*.VR?31t*{r"bP4ڛrD"k?5sUjbMoaɂ2PĭPwmICʇoBRin:|B# +wJ(jrōɼᓙg(ZxP:w)|kc"ݢt_ZkFqB{Qe]5eg{qL].ծ:5ucD "<d$3% 4HX L2HF"~!f@)#awۥ<.#)򝫮7w4L|ejP!Aq '1 b.-F;wi2̹#$5 >C5'@1|.zqxK!V `F +a}U}LGJAԺHv92?cݚd߷`avql14>rsnVl;Bl1.g6LM5yN]]@e}?RԘb} d1P)kJ/ +0R;x塇/Mk]r At_U^)Suv,)'E9~|T/v6cҜ7{e~`=yJgyU0NgrQG +sqpIFI&d5(U؅mh)n +5#Ra*ۀ7㘡&Cߣf ErlCM#cbfߦɺZسFw#N# +jkcdYZbuRKZZPJZ8Io;}O&+B7]'K쭌F]+-D3/S;[1˲%I3a87d*ڿdg >kTY +*T/y#Jwgo9bá{.'* 9XWPeIrrY.ZjӐDrQV̝eoeKD[U!ʣ59M]Iy|~JC:8S )`q{ oUKEX+y?Kdc?*I}]>Z[m7җqY 4$&S w`x9% xzT?T+W&:UC#+ۈ' +OڟQȎB +#6 YG&]Nw&h3F5(Z+k ?Bzr}{B2vBN8.ruH*!}"ʓ^.TՆ2sbAWx [ ;3VJMj:.gM-j4INEL$AbD7#,(`\%2ÙLوWcR@vWFX9LKuO7؊ذM_/&r1_Oə[&g4z~dWB;_;ǑMGDqE$33{ddDžYw:ܝ:{e Ox~/%t k$tK9Ll-Σ*ق^Zo'Փ25WR33.:zd+Z8aą~MP4` Y4,UBB.מ :='oƚ*:a8橭Q LR S=:;r QS"`.1:aP>'1J2漚yj.jf(cY-{}ej}΀5ϩUi+ SRYl"Tf\R-~gϬU?|r꧳Rxh|ik;L-iDYZ{݉tѬ;TU%']A7z#0pFrw+$"M|=}OnsJ$am]"v˯G}@Q:KK!TyWFg.Bȵ +ĜЇ3,q`|:`ULW# ,(h˯V4N-jCͧ >2PF4@hº (?$ 53_ot/Rgiʽ;Do-O9'HpkWŽfVIUy0JH7# np*2= F*0\q:aD&^ig+Laaߑ"O/I]?fلDP:}ŢK4E!S܋QӕOZܷYxn%G3$,$ +QXѲ&E:גICo.>7AM; {F fS1)~%X'atY}|ΉqH5phrd$zKsi~sb3vSx/݅~Z\H+uAE /roxog(t)"9v{q).=EHgR8ZS8~PF4w[8 zq*hIoD1ٽGdx03˞{M_3`{((v5zYx]AVO\ Gdk1oo_FXp}nCCUHL +$`F~~mYj#6.?d2I`BlJ6L:6g zqʻ_|2Aós!<=I6tJXi UW&LlXRm6pIbHӗHl~ƿ,2-2@`sᝦCyLʲ]g{ҺȪZ1d3в?z^-I0n]vlI؋boDa g˲GYvpx Khx0Cp:q0Ŷ'ce9$V.+;L?G7Bb9(t%gphb!7PEbq1,w5)(qсvmsX C +ݳO~x4 ;WΔ}өSB+)s.?8(IY;DFaIk7~x-|ά$yi>4b$XcwA( j U8}';eyqmn@V)ܓwLިBQ# 40>I$rnUkGPV/OQZфݵA $/cZ~@|i׸ZEsֻ O+LCw3ri/!f@<$4DĒUg6dK'W7`_@o2#endstream +endobj +3248 0 obj << +/Type /Font +/Subtype /Type1 +/Encoding 6707 0 R +/FirstChar 11 +/LastChar 123 +/Widths 6708 0 R +/BaseFont /NOALYJ+CMTI10 +/FontDescriptor 3246 0 R +>> endobj +3246 0 obj << +/Ascent 694 +/CapHeight 683 +/Descent -194 +/FontName /NOALYJ+CMTI10 +/ItalicAngle -14 +/StemV 68 +/XHeight 431 +/FontBBox [-163 -250 1146 969] +/Flags 4 +/CharSet (/ff/fi/ffi/exclam/quotedblright/percent/ampersand/quoteright/parenleft/parenright/asterisk/comma/hyphen/period/slash/zero/one/two/three/four/five/six/eight/nine/colon/semicolon/equal/question/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/R/S/T/U/V/W/X/Y/Z/bracketleft/bracketright/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/endash) +/FontFile 3247 0 R +>> endobj +6708 0 obj +[613 562 0 882 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 307 514 0 0 818 767 307 409 409 511 0 307 358 307 511 511 511 511 511 511 511 511 0 511 511 307 307 0 767 0 511 0 743 704 716 755 678 653 774 743 386 525 769 627 897 743 767 678 0 729 562 716 743 743 999 743 743 613 307 0 307 0 0 0 511 460 460 511 460 307 460 511 307 307 460 256 818 562 511 511 460 422 409 332 537 460 664 464 486 409 511 ] +endobj +3117 0 obj << +/Length1 1411 +/Length2 8632 +/Length3 532 +/Length 9503 +/Filter /FlateDecode +>> +stream +xU\ڲq&hCh{pw;C஁0ǙMKj[j5=)X!RP`pcK9A.{4,HZ8ay^AnvANX@ bix#W@1AJ +l3-@ vdHZ P;ls l br$+l)73 $#fj 0[`aZ`ssYW[[e_ݥAl=P7;AT/sJ`sf]@3 -*0Y6WY,@`5o@EueU]տ E `9#'V/ٛC@=`c k/ KmmANqsfvvh`>``7jomAV~ d3;ေ;.X +]gX0`x5 wf +^"g-|&X3$L`Ǒ}&a v;3 L0ug+?L]SW}&34 2gk=L]`:S}&޿6r².ϗ$)i `儍 '_{ +M;;Q3W''0?0+o56X7 +NZAp23EzihWHcS&?RrP4Y',3 ?MȘzbv`h0߃k@|H{օ\W@zT>?xol}3͜v;(]1k-nPξ~xaՋ? =+mrgE=,6082mt[g閑fF/RslXZYWK-j${RPu^2|| 9m#ۇCXKGiSs"Iݚfm pNgaSR%ޖЭ$6Ψw~kQpXϿ 5G$ha| !aa;?[P?He;J~AwUzinr*^vVRU`[.PS L) +Ooݴk=S c]]6C*>;T,,(Lo59})gG<$.:Ȭ>(I5zoF)@5Bkn>6^X:J;/qAp.|kӎpp{l_{z'ܮ7DO|䚪&஼Lߧd^ɹȯ7,pjJ*4  nBx@/!V{CivҺ}9V!79*_2ڳ f/a[!|}Ћ)^v'*md) +JǴ"d+j0If"w 7L67YArxYp8Uh,\J? }/f1mhaFjt@_[Yce2?dϽ[&yYoOE(^p}Y)ڻbIbIn~ p uĩn"b:Lڌ<y˳~+r.']t䆊~F(xóV|}#'tR@Qg#nJ_#V0jkMK%]6!5*QNk'wvC 0*|44H:-t^ +u%9z6q^˴˯.OX$16L oL|!8uc.T+{ MOhOe=KB6,%Fӏ1ACCGxQݥXZn8Y#N?L˒i{J@XDT>Amxye?"2\$' ԰e(!zkQ` :=uV́*Zs~A(Ã1 މzPs +>d^D WS b7w:>*] "ٶm @q[PoI"(7!.h"`>ͼ>PTRYL+j.HnӛA[kM#*%Yod8T~RX Im*KW0FYr ADbVMDQ9;n3lG/E:Ԗ<| MnTKoZkY>L5 +#`)ТK -\hg}hI׍.$H1#'uJX^y d{ViQѣz6UҸ-?R|.JB<0uP QQ75IZp1JPgN,uftqV8Bx䁄n٪z MKy"*NmQ[2qn9+N>,SSQ|$RY82~]_(EkwMݗ-ACnMfV.p/93f`"5u@O„mH&VwpGhɸbZ“JBی<.kf&>QXG,+,4Zux`\W&ȏ^N}EM ƾn pz}!QWH{6gW[wNjF3w Kt*vaUW-Vp^o+)O;e,Jw9bNޓ"nxϏ=Tc1%; Qv|U$pK m:κYe?uRD5iO9bl&k=z$ٓPIv<7nϼMmt+hqLۤuԲJ"J{hGՙDu4+-4aիOXT7:Yߢ]ƕZP +*4p~x`)L'zS(J$cZ={U9۽ ]`Y7! f#6Y"R0v 3+dp xIas\]3;<84`bCF)xRP5] `R<%6}>H`er=ˡ"E.hZ$ޗP M08| +˙%E)gaGPOIY3%aIy$\RX>J'(?UIoFc7Ҹ(;EBva;d=7*~Km͔fU z*a3U(&B_ڂTH^'w Iv->9m)/?&XM"-Im?z8Mܲ^ ^-KU!؛!g* dnҟ0?ǟY3Qx?ldy*>Z[Vƾy!lEP+~I7q>z~߫1Pƺs6(HҜci^4&T%[zoAGE7DkEչuk>~.C0^jz뺠-o.l>Z,8ש2D^52,[6R$v6Џ.K}6xͱHv +1l +t8&r ճI 6kW1G]&"jQ(Pm;)v9_We!.iՕCJQuX$E LO|_\I~$r {DZݹ F +B. +v-ih}r#27gG+,#OZ&>qQsdv*Mp0kH}Y_^>5aNL&z+fFhQa Uu4%30*}!ȉƒ1G{#%21^'bZ-LC޿56|tCTy5}3{Z\ssÏإ +/:^R_pϻ\Y"v$_D7~TKiVR!-( k[A%:w5qB}ZHP0Y1z_WfQ.#X^~>fRr K fv:]["A9{9ϓ^4F@,\M]t hZ +eºByCb2m]M&>בhOɑqܻnWw"IN}bٕqn}sTPqya-ƂbrolA0T Q )O{}] Ox6?*vH7 ? _í`X)0c6C<==`Cp˔1n5&A<~,j/% +Tk1S|Oxց3WTW%y3XA&t6r`/қ ڊ( %lc1,CG,TQWk\DZ % X}DkCpV+[|)x]F CjZ>wܚ^Ei\L]'1h:wxCԧ]M,Z'6p'yiMa5R0~?e7B:2R_!HT-j-Ar(㆟CPZ|MJNLq >2D-[OD&2ΨC͗0:}o4b΃ӱf)=i_mUq%p)l^('VMVϛ|bcD;[*{0Ma M9;B/E㾬*xܴfOT6Eu0uT܃xd 6L^.k)Rio:ȢXv!"Qlt~gZդ>U/.Ng_N{c ܮ q-@t^6w-<&<47ttYƖUsWdWRKDfѯ0RU|ECC?I¯Hu9t:!BuAp=#DxrSu0)kbvKxrKvjPV=8{_"ڿQRM- lm)v8| ,; +K JṫKb.s袾ھ[)'pi̦L)Vnxuc8]Ffq2'q2TK(jSϤ}G|SO3</֝i^ )1AVlP m_#nzRW!?]WӛBB'1*-?^l1X/P|7*ܵ7,rl_N՞$Xn +kbwLrg|SvGMn*3.8HN [E'nkՕצ '/Vԧצir +FYY x_D3Lo D|Ŋ3>H_)90h`ƐXԪMc0W|7~ݢMT)1dFk:'Zk{Pxvpf"'1~/ +-̙-.lZ-#n9ЕO^TvAz!|}*S ]CB37bBhVHӘl5~ZmKwGA[`9}.it(eAm-1yg.j#+1(MR{26HӨ7ԎpRAS9/ t!MteRlzW,=8lIw27 0  +1dtπ&Gt=1yBQJYI5,#Bcaf|fq":-6N#}E8 V3sEDӲϸ}< a,)δlRW$wv)w>'m-覫IR:p`gc}O-z}4q*yA)?kW`MⲴxdլ%L "¡L_- +~DɅǸ~t;9֍_mPM)Js1; U]i~2 3{7y (Vmfa u("V= lCeh[`=G(7MtO7*J5RlG`.o  a +`u 6!# +S}"$'BsrXDh0Mj۔tt((pq\ ʴدu>噲s7( uoc|槤h +}9)Az>ee173}i\ 4$m&Gc.pI{-`.DD*sZWo .6kclĒ.S4Ob`rE6>k5g)͈Od,Ybi[\Dzi^cbIrc/bCC(}sUц#Hir/2y`b6p3Y{!OIErGXNSu6;E٣j gPBU9/99^teJQKekѫ58Z:>ywzgkO}Ver{>.r_I׶W?gCZ79oϜCs齓H8=RưmPvWXFQH_spIYݛk9/ߏ"\oڌ6okĜ\''d*Mh5qyg=W({sʙ=vuğ̂Hٙ;@c +?&]rkPIOo[~nDM{ N% +ɮi[nKSvc~L 7ܵlO L7Pfٔ,d1|ZDJz`c %(C$x/A4k8`{䊣%js<Fw?'60\@N6 s!endstream +endobj +3118 0 obj << +/Type /Font +/Subtype /Type1 +/Encoding 6697 0 R +/FirstChar 36 +/LastChar 116 +/Widths 6709 0 R +/BaseFont /LKRNPX+CMSL10 +/FontDescriptor 3116 0 R +>> endobj +3116 0 obj << +/Ascent 694 +/CapHeight 683 +/Descent -194 +/FontName /LKRNPX+CMSL10 +/ItalicAngle -9 +/StemV 79 +/XHeight 431 +/FontBBox [-62 -250 1123 750] +/Flags 4 +/CharSet (/dollar/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/A/B/C/D/E/F/G/H/I/K/L/M/N/O/P/R/S/T/U/V/W/X/Y/e/n/o/s/t) +/FontFile 3117 0 R +>> endobj +6709 0 obj +[500 0 0 0 0 0 0 0 278 333 278 500 500 500 500 500 500 500 500 500 500 500 0 0 0 0 0 0 0 750 708 722 764 681 653 785 750 361 0 778 625 917 750 778 681 0 736 556 722 750 750 1028 750 750 0 0 0 0 0 0 0 0 0 0 0 444 0 0 0 0 0 0 0 0 556 500 0 0 0 394 389 ] +endobj +2905 0 obj << +/Length1 793 +/Length2 1151 +/Length3 532 +/Length 1728 +/Filter /FlateDecode +>> +stream +xRiTS2j=,)In01 $1ܒ܋H @,QT +@PjUh'*Be-R*N`]]?;f8D0 1 bAB/J '9XD<*p/ y|zMVş9I!PR9B4T \ dEH= jvFX!D:h`TAH2ؓ$70M}JG4JpHz#J;!ju\3Y~ʩTkR$B)#6'E`Tr5ajA+Xop4-!pJ*T@)W!S8ӕPM`FS09TpfO1e@@oO Ӛ1X2< z5DT@1DG)f0ʙl zp[Mo.`'O$L7w.pVd$8|wOSCE6VC4 \哽䈫:Z2oi?5ewh1ۭlJFBbJ^(˘)co5Z;0+f=P 'θTŃ~r~z'e{>R0捗sR6vJh eWA"Ste~^/͏z;喵APX&n~1);hŦR*pBk`!ڧ)D.`n$/$8J1hf;nԷƶh| kR;Pjڤ?$g -NfgDzMwqfsW?3:U_%EV+ 4?g5IAzÍ#9{q_7wNjufGRכt&چU3MUKf=~|z͵NӅn]},;cB/~,06Xc9yAN噞[ Mwz֞0~?o^8^O~sx]-󿌭\ƵUgr1 RS/ɓ]LF'9p[ 8DUI$;ggI'rX-R/7q{ĦW ;a[aw&G +:~>.UJ_$Wfu2Jؔ\8s +7#B%a7mGZkQّygy}su^\"CEw=Y|{~2`t3烪ӞŒ˝]ҹ5v 9~Yx{W{q;oC8}U_듊‡A-3`p `hu]9JlV3!kOUE}f}p%oc- W{>]”f&ɕݼyO2Uk9D$)?<endstream +endobj +2906 0 obj << +/Type /Font +/Subtype /Type1 +/Encoding 6695 0 R +/FirstChar 60 +/LastChar 62 +/Widths 6710 0 R +/BaseFont /BNXZBH+CMMI10 +/FontDescriptor 2904 0 R +>> endobj +2904 0 obj << +/Ascent 694 +/CapHeight 683 +/Descent -194 +/FontName /BNXZBH+CMMI10 +/ItalicAngle -14 +/StemV 72 +/XHeight 431 +/FontBBox [-32 -250 1048 750] +/Flags 4 +/CharSet (/less/greater) +/FontFile 2905 0 R +>> endobj +6710 0 obj +[778 0 778 ] +endobj +6711 0 obj << +/Type /Encoding +/Differences [ 0 /minus/periodcentered/multiply/asteriskmath/divide/diamondmath/plusminus/minusplus/circleplus/circleminus/circlemultiply/circledivide/circledot/circlecopyrt/openbullet/bullet/equivasymptotic/equivalence/reflexsubset/reflexsuperset/lessequal/greaterequal/precedesequal/followsequal/similar/approxequal/propersubset/propersuperset/lessmuch/greatermuch/precedes/follows/arrowleft/arrowright/arrowup/arrowdown/arrowboth/arrownortheast/arrowsoutheast/similarequal/arrowdblleft/arrowdblright/arrowdblup/arrowdbldown/arrowdblboth/arrownorthwest/arrowsouthwest/proportional/prime/infinity/element/owner/triangle/triangleinv/negationslash/mapsto/universal/existential/logicalnot/emptyset/Rfractur/Ifractur/latticetop/perpendicular/aleph/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/union/intersection/unionmulti/logicaland/logicalor/turnstileleft/turnstileright/floorleft/floorright/ceilingleft/ceilingright/braceleft/braceright/angbracketleft/angbracketright/bar/bardbl/arrowbothv/arrowdblbothv/backslash/wreathproduct/radical/coproduct/nabla/integral/unionsq/intersectionsq/subsetsqequal/supersetsqequal/section/dagger/daggerdbl/paragraph/club/diamond/heart/spade/arrowleft 129/.notdef 161/minus/periodcentered/multiply/asteriskmath/divide/diamondmath/plusminus/minusplus/circleplus/circleminus 171/.notdef 173/circlemultiply/circledivide/circledot/circlecopyrt/openbullet/bullet/equivasymptotic/equivalence/reflexsubset/reflexsuperset/lessequal/greaterequal/precedesequal/followsequal/similar/approxequal/propersubset/propersuperset/lessmuch/greatermuch/precedes/follows/arrowleft/spade 197/.notdef] +>> endobj +2902 0 obj << +/Length1 842 +/Length2 1048 +/Length3 532 +/Length 1655 +/Filter /FlateDecode +>> +stream +xRkXg,tjQ" d&"TFn$ $38I %SJzAzAT.hEZ++XbPݥ?wә?|;sޗ ȈXT@7`q X|E4! 0*ϋyqy4zSi:,|T(I#8TEiH%R ݁R gOA8F$TNa ä*0ƞu$2mVJ)S`ePe*C.r0P\U*Cլ\J#*L TZ J`BBj:o.aZ®P(1P m70ӡ29Ts8Z3Ž*r}1׹p}" +_s5KMDb: CL׮RB +z$= =0prv uPѤ9AfJ;ġ0JTlSƎE j%/n=<7?ۭE~ A&|>R-Ifn_rP)_PyV唹AEsdGpqmN+3}v[YgTf+80+w])Wy~=㎩fِO{++;;5ݹ՚qh|oCܴ5$ +wz۫IΜ Y0Y$|~.oݥ O%¨V0cKW?weȵY`mD~}\9kݷLT趇?u/n-x_.:hU{Lč?(D+mz=_[%2f 1a_EF৖sQdч1]ſ|v5ov +%ȒQ/-br,Vd"|Nq;BC7^uIo)<$qOIJ#8di~Cu]cTd"yL0r; /oy^_(`n=Ywz>;uNշ&'7,ɹ\+PFͶꊩU6T㫻wy'O+#̬~R,!} GɥX;Nd3}ko& _*W<|} -.XUo7{O#aiZnnrf'va\P!=`MϪ;> endobj +2901 0 obj << +/Ascent 750 +/CapHeight 683 +/Descent -194 +/FontName /WBHOOP+CMSY10 +/ItalicAngle -14 +/StemV 85 +/XHeight 431 +/FontBBox [-29 -960 1116 775] +/Flags 4 +/CharSet (/bullet/braceleft/braceright/backslash) +/FontFile 2902 0 R +>> endobj +6712 0 obj +[500 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 500 500 0 0 0 0 0 0 500 ] +endobj +2897 0 obj << +/Length1 2066 +/Length2 14415 +/Length3 532 +/Length 15551 +/Filter /FlateDecode +>> +stream +xUX̶kKpwwwwh݃{p' kp஻֚\Qj5$Jf&@ {Wzff3IBhj`/f +0ss$&?v6& ++Z$N oj ajl Pu0z1mm*p]@3ff+hae'i{s2MȤ hRa.fk`lnlgevn@gj˜%#jlke*loa 0WEhdjj 07u+7@F%-aUOjT2wUrd0:V]&PyAM̬-,cggc/;`eo=A\A]YPf?B6ŬFPo[c?!P+V-F3[[c?!N#hW٘@@{[_QdmcpuusY5u3a0Zz9Z8eOO tvMofwj +J; ;?w+dfY_^AKB[m9:Չa32trGXY?͟ ȃ! !T?J!!)!⿉ @z*@5WC u?RC u?R7qilljt_n>WA&4A? 4C k!Ȇ___7Ț_dL Wf%h\9 W?/r !ȕ_r\ W/ AB fqgUtAl~no:Kbt69n2g +@S_ !iaeSд"- + ]K #NZO(/.QNoFmZW^{'s73eڅ?O`WI7~ +ԒȴUd%QAKw*` _@KNZ krTfh +芈@0ȯmGNA沦 yj=O/mwzd;DO;bk|AKokw2Ү`E(C_B2Г8 *2U&u(Sq3;VwCt80[{#3?}m{Dv[-j#D݀[zW٭8)x}}^ˣf& WRpjJ-%ȮN5.4,5*2J>i^se0^˷?ج6 +IoQoU]lׅr=Р@~gx#>A /D#&rH6Rtد +մ9l{noD әN )+uc诨ah'hhp#`dr +-L3G`J$iOY}!?-NG{BCЩ{E|pVǫ2,$?·2}AY:l_/doeDf.5p\W{IG9TzFw,t!h]e\&WBVt>n㏚[Ĵd7|i;9V,|q:gA[f4`4Ԝ&n[~^icjTG 2}";3i8E(3%GFO|eԚw˛z|YrVDmy>'p BryTK:-& sa-!gt]*1._z|QJV| A.~93!1gzADBsCJy5%4&؁{EV_ N綑%d"X  +SKנ[\.w1[4H 0Z(TwҵPq~ ʦfk==`wg~i9D-iftU{G$z$a/967査z-p!E ?9sekXݷZx6 *£= /y[iu) F^';)k?uj2HӼ⑍1{tM!|~w&lO3D=Z|Zj;6B_{3LD5e?%F hMSHEnb+(+R[iD^"~Lus2` ق1ީQu$:21/^Q> Dfij; ݌-Ľcty5mxYtxkZM^ DQxԀ;,w +Fr",mx0~;#zh=Qj`Gӆ`äˮ79U Ou$}OtU޺' +g&a{ȫ FPd$1?RrFB?\4-ٺ_*[dBd=B) +6 +Н:s(/ij7x H>%@Vq} U";H^IDR_2@. 8kuך&kW=.UC{FBjk5I^ a +o) Du+y7ͶEȪM\ +q(j2ea]D]x)8G%moS:g\.~mZ6?6K˶G3ݒzB%k7tB}.g=& 8,4Vnec.D}R2 ǟIF'㬦(8~cg֋o~oKu4IzpʨdF/^\/NW>Mt%iB +DV({[\:pwJQ<իBŚll?`-ֵq7ϖ!3g%.)s†ZrsO1[ \8$zSP{bC2+2R s7lj@AN,d.&@s"DSW[X'V+7)~-9){@eZ>fۖ*'] ÍhwzpM7:#\S&Giښ $Gጻ!uL"uT~*4nnơ~Oމ WyJKVߔʚ7dAXrAf3,ŴS ;ǒgi3ɐjSN^MD]n} JZ[3 pYQ% +/7삖{)Qa :5 _-UeU;,?պ`ݷͬa}54?0ME[ӹ$vi52%~uAq-$&? I`ǏXrи=xfQDm7HE~zIоYAx{?m'uW/d"%ZҨ2^uṬW k:W2=ːsrCXW/k7'Tu 9jf2f^E'$`.84Eʞ)4GL 1]@Gjv<j4^1'{Vg4V5m[nJXʷ GYZWR1ZTt56]_=K^%@H8r@Ÿ"ܨ- ے2C2y3MduPb~?ؑ{JJvg#+ILp7+й,LVmKk>'W`9tB:*gE9*é:l$xykVQU&{9-Oiٗą6F`a ¬b, +Z )ABc_W6h8>$Hh}&6 +>|SRv ޥʒnb˶{En_w:m*.f$+w!4ġ'q{4 +,nLQ8/-ig0p| { a[rUγj~xJԟa#oUqEZj=9:ToL:+ ݘ/{m +ִyu5lGT:$,3== p~e.!aySW>2[PZ&_ôM?x| +5[[ pϪ?U'Ց:u:nTz4Hnl@Y*#dNEY Wo3;8l[Rkl)Lh*7C)\}; :UNɳnP\tu߂5SS }_>x{1kx˅i +{֬ьluxp]WE6Fr8Hnk-racCuc2 o IhydpH xU_N^{~Hh (!#R߱4zay%56%f[җ,HO<~Т(2r}H0(K 0zt,K*r8Dd1cAv!Ψ>e&++yBgueUE&b$aʭH'_$GgR s47}FsBxBw;M(+ /2Y֨l֠KO"0\{S~^V:ӿExZhSFQm׳teac:άB􂊯_(A;ԱCJS +%ij/ً&OזB=- pmy%fiћauI*0ia3}Pa^E <:}38}wN # ֪R ''1 9IPr}3,2ł4'l!|`5IL/>os5ѯ/?_esSd!9wz_ #]EMgKI#:AD|[RYjssPK]6n)ʌ#t?iokH{Y {;^N,"YtrWy*ANk󕧁a\?SmԜ]/)r]U\9tֲr.-9TUDK␑{&ʗGc!aKRMV ^3 !jY7rBVA7ðy*jvLc.-b ;OɈQ:1\ޥ[JYNoLJJYLfU-cq5oJziՓ(9 +~鮰x/ }W1QE6t4U|<!(׹0l y +KK->C9]Bo۔>"e0o__Nȧ[Lx0,A,7_/49s.퍝Oп=j~tB=I"'F9aV %Y`KbFS1@_m5}o rjCaØ==ȭH4ձL q𙾻Ԇ_j_Qmbù €7+ o>·|@ݥq9nϩ罉$=spI/[ɶ% +{a`&2eǸ)'m(sIE3w{KWi5[O6 s=*i^c%Q}`_.'do u/j/xrQJ׼6[{}5 QH@P+/cz C s) "7Y=SA~iuA/4Cc!{ĞVC҃] +Ovtz%v6;~ H&!mQ_6dr%]DL_'@/Av'E-2>d,Q ZB)gO*X\>Y+e H|PeA j ;]b=lK\(ijE[o}]rANdwR{>?hkWv,Y.WMpE9Sn;{hrD|t6RhuOfr!!;UǣhsHEZ +k`p uZ=j?2x =dDW<̤PB 9y|pr 7*tJ_,$bqN} XGUFhUoS_e݄\@Ӳ<~G=lxN6VxcPr<^a9F%Cz/ +e1x>vכ(,8LniXzSX̪~ (FZUB=Nw#<|[aLb!Aѻ +C>I ,~Ziݮ}|wˎ[f yλ6[DABcPCD|J@eMEfvd7Fُ/%Ւ0KOedv@6FqBƳs)*h)`gs=AyמUαǖXYd!SIuBOx`G W2KSL^4?FpA`:r=(I(X3$Ƣ%." $ rSb [`Ng^-QoIJíV(RT$/WpyNpDPHduܔrUխ 1YbϿxZP"rbP,6\;#- )X?C1 >[qG9*_܇s`O}@o}v$oV )D!2XJ *Kr0?!ΞMgE4w#9Y 4&_K)CQڳV1&DJajQB<v=>Tǫh'3ȉ`›N!Ϝ?YjLx[%%r2)JPԼdѪSg@njuN̼H뉨 2@;P bO̢QC4wbG|zE Rs{6l\lfƙq dq7+ɣ[;Mѧ *HRo8k8Vw]MEg,A%QO^MF|iC,1L770(1`(nN,WwaFa+QWgN5|Stkb)*2v/SėJ 2>q0%)˵%VsKR;wG/| \}ytS55j/vrbc̵UaB yq +"ިN*YXxŨA*3>q 7B+q"xSuGK'k"T€}WouN|{ႛ:fĒ39O[%z啀bhHɛp(!'&kroչ@FƒVWVں6B`ݽex._A2*\ۮ}J'AWvb,SCBfƷ^>1KcxYF7it/iaǾmfrfzS*ځ$%BZ7P}3eXNC[)&A$+B$?^b*k<â4K#DܴNC ~$ڬϳ}aA>->2wL#>ڰL޵Ύ),s8+c0_|JRd1XxC5&˂Gi"q7XP@j$Hs5uHpH$2.sqm7_vtb09YMg`sk6" A)|gYsfm g6ii]ԉw S(;uޝ3{܋s +li頪#Iw\N>e -V @mFV5 mk^|/koY ԏ0SXgAK\Y(+ .?^kР\#w16y V/"Sx-\SEq11#Xlj< +zEL"箐5ćP=K(Z!Xp8xA5\RC_S +7QQLL=+(8RѶSI=Q[&6}YimG k$ ʫyv1R Zн|Dk;_c+6euPm#:`9&B.B)E(B])Υ.uTͺP ,isYAۇg$/"*1/ψ]4[D!UtXuHllN}1~笑\ ʿ`y뇘ՈF@Mwb-ox38k>[qZ KKF%*/i>[)h3YkU x5yi(#'w F>)Kn'(nNJ]F9h?R+Ox\ ޳ȆSN볰췡pB*y*cB>"P SW&dYܞp< +(s4ovx^V(6 \aߖIɺ$pF6 +8](p3EhElV%i3&x[0.7~BWUZ˲.2lm.TkW(˓!kcJO:=DQvNC mdi# 6Eij1m]whx +"HGPk.'59΅_e6!W<,p;p^4{Nl$՞yn VQ,F +^TJa0xgT3QK>ި^0xծ$k^P-(J6(bיD#kA^O "YS9zl:)C=)DzL(ȍo.(CPHʬ`R<=⮇/"<ސ ū(8aS9,x"Z%`[!e񅽶=ROaav|x2닡\g̉U͉.w/!B~fRjQZ)[uq[C0I훏g8̅f|HG-,.ʁr +4ȝjE +zu;{-mh\jH3G7}V4 EK*%|gPjy|k޻jޯ|gR3IQ_\ZL=_mg#mBiX8=Rxzn4 N$O\?%0T1Uk0 d[D'|+ʼISRbP j q{l9"L +Qngx@2ѯLa&Hd5HfȠ{EK!m [Rp/3e3@^o!X"lqpV&ag0Y#OީV55Xe_oqHi q.8 ^ýW)?5llK{ +/#+Q!b2?Z^;4"fvcV]=~"K;m7*}Ls}%_r%U\X͍ ++~Z)<{ݰ.垂JJYw]h RP.cg@05tn2D jיmyU 1!d*T ^ +XC2h _N2.K%{R20L{ehfLvFI)&yTDIJ#2lW9Z)Au^љbb!S\2{fR!`|! ,94YR80uTBeWk^*v;8]b"ˋt>fNsHI=~㵫e>TRkBTF J.Llcʋ9/X~6&bUibu$wڀSk)J\qw\ih"|^Y2*&,/E2)KHU5Yv~=~P?oAP_}XQL>kr*C¾z_rAیR(J~X+Nȏ<. ȣW2/E%սsP-7 +gi̮d 9jUYJGmharbw[݅)a9Gr]gV[:T>:oWg/߆GPε52.F0J[poiou"/h~fs-L_vbP 3>:~r`)̒sf KhPt~qnwBx֕7¾]UM`rz2c;f33#yŽFj]Ex|kBP4sa"6J1RGٙU!dNcT@I@wPY\0̒7qO8˟MAzH_Qdؓp]F?4Wvє ۮ:r;e1 Cڰv0f/i!.p5x~D㥹&4-[l(PFvPc%0ǤH 0Lٖ҃Mb6fLf@PآȊN W"'vY;@9V8TzޜYgsgcB6)k<.qďb0h%*NdU-Ё꧷i[9Y`.|Qm&E)b)l0Ұ#ov"K:N(O}ḫ(A6ګ0QW#GH?u +r(KY'YR,}{|98>Mz1;\+NZvF/qn_+Fnq]HhTp\J BL +ᯣ\lCB]2UO r}&r"́pP%RFO:A :)ThZH&ջͩϠ EL{Obwt*کlzD(4Rߖ~eAtH]lJ GQ~KڊrGǴԦ_p6e9.u8ܫ\Xn/]HbrZcT;C-( +GL'f_jd493] ⷞy[?.s<8caH| ™h[\1LHdL ,7{pTٺ'9=-֬HbfFB<3fEA?+&U5OYTϪ>}gaQ U|5RGFp,i;>!KXU[JKDD`iޏ1SM1q)^&^ @s=%8MdAeOǔfU@ۯIll++BXI#¾{Q6u2?{iwm,(T>9O׉Nl8Tݺn_*W8\ +l mB OF iఓ`8VWjN%MciS~۬-Ԭ^7v?`t Y6J6;>YU'=u0T)B#嵨#A@{q[73B͑ἦ\ݒ뤟J.z^@ +&sP}y"Pems6pkf]h4пl7.X4 gVpAțfbx ~YLZY^醎w8㳒ߺ)CΌE&^DI,t-SDZ uL$D +fo=cP\IUs# ':aSmU=&0SkQ72m>KzNيNK`Y+cg9bã[ss&U~1X!k(g|oǎPY+~vG"⧡m6:Lau 5jNM`zV\ +]]5`.AcP[\G>\vT-QwCg+b8x^ﹳkc[I0k}7s"׆X) ^yq#-PK &$qo٢QdSN}1g*CFVqFu71-4R9B6#Jf\|iug?Jggf@Bp +$Y[NPy5"K3d?,j1DR jSALjAjdUMIZgn[(@8DQvT*,e(O`)GKAT9pAw& Pms^׃q|J Y2:(ԧ wH1g9ЫH~$rQ+=:ߞYҢ~k{-'gLq޳ [:բ~%"a(s$uD2 ]gcR?Prdo7GiԔ|zU3ڭ'p$3~Vw@n2O?NT99C|o/٤/#%5C?>8!h/}}|$x93:Ϊ8xdQXÉ %2@Uў6s.,lˋ7x3~i,gIizh(B8"'RB=V[IծF3"`w.o* ǑʈJUvDlÆ]8v%k$! dL&<ZK0v l# +0K.KlH;\Fix1XRw44Sp*O~ĝ*LosuIIs)ܦuT^d׳6Q]ElYQ"3`oŠޟ =g&eb8Lݭ&g(/Gn 'aMV[Eh7+zZ=<,E>([9ch&o|W TWS4$䷥| bS[ KrLendstream +endobj +2898 0 obj << +/Type /Font +/Subtype /Type1 +/Encoding 6697 0 R +/FirstChar 12 +/LastChar 124 +/Widths 6713 0 R +/BaseFont /PZXASH+CMBX10 +/FontDescriptor 2896 0 R +>> endobj +2896 0 obj << +/Ascent 694 +/CapHeight 686 +/Descent -194 +/FontName /PZXASH+CMBX10 +/ItalicAngle 0 +/StemV 114 +/XHeight 444 +/FontBBox [-301 -250 1164 946] +/Flags 4 +/CharSet (/fi/ffi/exclam/quotedblright/dollar/percent/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/equal/question/A/B/C/D/E/F/H/I/K/L/M/N/O/P/R/S/T/U/V/W/X/bracketleft/bracketright/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/emdash) +/FontFile 2897 0 R +>> endobj +6713 0 obj +[639 0 958 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 350 603 0 575 958 0 319 447 447 575 894 319 383 319 575 575 575 575 575 575 575 575 575 575 575 319 319 0 894 0 543 0 869 818 831 882 756 724 0 900 436 0 901 692 1092 900 864 786 0 862 639 800 885 869 1189 869 0 0 319 0 319 0 0 319 559 639 511 639 527 351 575 639 319 351 607 319 958 639 575 639 607 474 454 447 639 607 831 607 607 511 0 1150 ] +endobj +6714 0 obj << +/Type /Encoding +/Differences [ 0 /Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi/Omega/arrowup/arrowdown/quotesingle/exclamdown/questiondown/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/visiblespace/exclam/quotedbl/numbersign/dollar/percent/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/less/equal/greater/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/backslash/bracketright/asciicircum/underscore/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/braceleft/bar/braceright/asciitilde/dieresis/visiblespace 129/.notdef 160/space/Gamma/Delta/Theta/Lambda/Xi/Pi/Sigma/Upsilon/Phi/Psi 171/.notdef 173/Omega/arrowup/arrowdown/quotesingle/exclamdown/questiondown/dotlessi/dotlessj/grave/acute/caron/breve/macron/ring/cedilla/germandbls/ae/oe/oslash/AE/OE/Oslash/visiblespace/dieresis 197/.notdef] +>> endobj +2887 0 obj << +/Length1 2332 +/Length2 15237 +/Length3 532 +/Length 16504 +/Filter /FlateDecode +>> +stream +xS|ohϤm463m7llۍnضw>ڿ`^\ 92P֙ "`f`bF 'q:[ي:y,!{G @p03wPP :Z ́6> v@g5@'J@'+Є`ba 0Y"0$ekj4@RiR@&v)m@ZsqkkyCH_6agc tٙmw:&.6UX`;DWhk@#/FY1)U5*Z:x4<m&2AIL 0tt4@-&@w$`k z#?3 +`5[hbd'`u1gl9&vֆBF{1O hh:FQ~ 1:0tZM2w%zv '?APQ.Nll D@{؛/q ?lZ D@x@E {g? ogsG_ eS;?#5p+3H +h1 U[E? akӟ\ L>쟓G:s: 8qY|EHVDM A?C 3?rC ?rC ?rC ?rQ7q\(!!!h!濉@.FV@7eO̠˟C:L,2nNP 7?*/gldm\B_R ANV!H/Y)tX3 +deB_ AV!/Y +?r AV!/ϙafag9yA_1k!8[Xה߷=t?p2Z )Q򯨱#$w +?ljl@w1Ҽ1oeJShXt94 Ys|}l'bbP9.3qћ]T98L7\ʨL\fPcRҙV^eא;a-7zź:4$r=m + db jrY-i4kЬIAA gF!'TyKb$? %E+x@? C9+ .X[Q҅N[ x? RTd(rRowm&!K5 + ч>XgLITρ IK`$Qw610{fӅ{;: 5ݣQIt8{)*0b(e]R܊?On˽I 6F.pXS/ K#߲,?uj`}lxM:1~T/ô>@za)9N+ +h`L8F0hg7Ѣd۴SKȻJcE'q>gAi n'GFW[[ǾFM횾Ww8ۜ27RvSWl[Y(dYV 7"dXsʙcȳوB>|/oAvQ۰/ }c. n o0_DrNDzWyd;\wv=у=Si!ucb~ltE{iГwC ALe"N*Rtc6v!}ީ̾0X|YcVә-8}M8t3G.Zwη?а8p<Z{'Ђ0G /*I{B"a*7MYQ|Og+|9@z8v$KEʰi*H7rv5]MłM돨l _7 cx5bYO-Na 81eFm Zk+ݑ]VBAd*v; +{lŒK$_k0${~# +Buh_Y&N;m8p>`гlIzg tpP0~ĪA*}*AUt׭%ͤ#q{ڠGh:ޟvQ#SEW(,1&")Lk՛ ݏ²t3Vnzv$Pͺ?Ԥ^ٹ*uR$}PΌcnHi:W >.,E'T[.=_C/Tg4(?5:IpZJEׄl$>ݽSKKLpF6UƬmk{I +V=?6g*u~1Դ'.%zJU(ե=|'xyFtaH׋Ox\sH?&HRo:q:Jmmyx.X!o&hGSdB6L-Z9ҔEbYeFJ힒U.򧋚Bf'lhU]7,kW=<|yAY8$~"n[ƎmZ/T/WզxBʀ_[>ڄbjo%VnՍLJxH'[ir0*DＬ\ܺ}W_ϑ)AВrl^U;׍q_ tv%ED9xʶܑp2'w;['2ك#ӓ6N]\Ĺ}- PF` #gA qEtvh[4svt_{rG3AzA,d$F]fg̠yb2 yZ~l XEF"9A2|#.hߪ}4c-$X1A w:LQ1*$p.@O,/1"j밊#a\nI*Y9vFo/o}KE Fa3U\iP;&?y&qEG#J$Ԙ?  Wɟ24jkf3`.R).Lbf L pRoKw(k*>$GY(+9!iB`'dT\Dx/jbЦ%:i} ΪA)#~0Wae` !Uv^|"4 r#UhA{c䟐v%J6˝AB%il*eK0ӧahlyv,FV\H`#B"wrR Jdb--Jx-d\3 +\ǟ[l$`l괬YI ƮuZ%Zı&Iј. +mF*$ ,_Mgٍ1)\XMo\F1ɓ!V> Rn}j . g>pCYJג0⷗,5g(ac$- 'υk7n>3G׳^B I8/ۀ8b*X(j2F7yBM3'cr\Nf ȨnDW8BlG6eI=^ b4UG0Շ.:hw];\S$r˹xCJr#}w ݅쬴$v>$eI)|ǒIU:Unv)z; u̜0'^瘖%(ׅVK-u,*:osіT0А2ݴhQu@4X"<|^Febr,VuingB1ˏL<'̱tye~ +$P{o5GSҎHJP> yS4TH 4, (k9/jj!JVhQg*byfTJl2vΌr-dk7 sN|+Ovց ]y 5\D.Sy;HKr>XaA3nzj,_ju[J;ObjPicwZ.Ye& 8-=A8(UJRa f'Myez濪H J_!CNRxp//58ޓH`)Fټ%?G#"#B!|jc|NP'cD\7_Sia.7uBdyB0nХ5[Gkf4R}`e(>ܮ:\^=q rCdό?ܱOR%uB(_O ܨdڒsV`Hj=yRҶݮν+W}' xE_}YZOoT svʒ +2w tNKNUTҊdX~>OXӛA_U%MМ`ߣ~ZIf.@l{Yon!ͣϑ%GqceZ2bMpp +4y@z^pd+|yk%w /<;:oB&[ƐQۨfKFfy!ҝ34SUIgb=aUk`ht4;)^+%vw >;~t퉴@̜QXw`alV/$*E$=V V*J17#C2i"s QvDIGTlQC#t](pEMN'P̯.rU)9ٽlNl|tC7veFVq܎ g^Uk/ 2X`:_ߺJ޸۽[.{Bh(;__yQC%EP&ZkH~Hz\Qt KWc]ꞕ/3I1=)2^33o/ /-󘷚)BK}+lG9}HMIدSqX&u˗>u!րES'{fos^ /Yp%a aВ g9ՒVȐFQCjjt%8=jEp/W>ӥ%ZS-jL"5gWף^4fOtLmUSτ+s[֫  GDh׻Yr )L0Sw(Q2PD˧iZ[s!wr⮫sU~"PY<݂!rN- &EOǠ !@X+; .:|w[j@܍ ~x-790lnMei )ZC)#W=q엂#+iH3kz%8T=nUt"Ip|&FV6-[ܲҀˤ/OTq!$jF'hPԃtŴΉ&ĖTTQ_4):>|y];-?bVyf|&ZwI5#NH9s?j\pS^l*ƃѲy9^slNׁIH4M*u,/lmnc?Ni[u4]3֢M +sZI0Ck flS?E+~6zEm'nJBEfQq-4*Ծ>rZTU&m +NO/b43tT5ѧ'AN_/(JÂ;kCk +()hX,(j%xi$NdkO4 > l(=Y!id{B~S{}uk_Fc +5œv=sN[ӰZIޒ1gE4Cbާ6}h^ z\IߗʻVscI"}dcaw{w#[ 3#HH龋lypwa?mPut]IdzIgv$g*Dn۱}ę!5}fاfd8ᵻ0d q/T@_@1pTP18MKKW—%,pw{:(Z;8{ccVCMhn-Rvi" +oI`Iiw0moT֓ۮ Iץ*k|[:Z(5ndJ{eH0z5N5E=)]kz+P[*$fgBk*A> kkͧx QBWokwso6F3|3](E5&D.n]s9dn]./"gR}Cv9(tU>&ʞ:K%"W3߾EÏiH Ԃ3mޚbcsy&*< +HVN 놥.s]?p=o6Uk;iPÙQLz;T8;*>Ah*<2a[}uKi + Kg̃S[4I71OB1V=O#E:?-`d>K&¯,)O:hn gGSbDDgD=M[l>C"Ž7,8g%ci`7R\R;k)\F nE! >֛Zd!$c^7TS)w?o-z+ƖUD!,FڊzӲqgG#W?JwxP6\=#XcX2,CgeՒ`pξ l2 dg>x[9D)]jTʼt>Ţ>7RI!ydjFH`ōL9TU U-yq.k8nTl(g0*T#˔]0 E@<3H.l߅~bj"gmP8InYTa;~4qfm\'+C&*s]#Mw׆mԘVCmEGérם!CMfO@pл~! ~W`0GJs\q\t<1zc:S +i{eM^kU OvfCJ0|_#CÝsp[ yRo-/*sCu]ʚd0o! #vnW|pHkeI=Slk}Ţg@P_uPnZLB8qBUJg87oi|J~)'p38>.@?,JuG?EՂÂm`XH-I񂶳ún՞V(}`<߂e#8 +BQѣvJ Dvo-@mXþ }lm$Qtt$v6UQ$/)ϮpƁa6c$L +QK8 lcZf[&5 + BoٹhΞ"l@NÜa뱒Q +Hxæ'L7 uqcF7.͹~)we:luHv蠸'l@+c?#@?G;3@b0}sw!b'>x`4r/eǫLP5OA=8⒂wWp;u ((ږ +~XZ۹'̈́vyNLX`P,MSP0_$tFr2tgD`ɕҸ"]ҍ>2Ig?if8_i*R!1Tt""ck} <7qI$wo &[XӖr,~SDpJylWDI4OmRshť}O+@(ň|Q(A_oq9#].dSD#҃I+$[g2zĄJ2&IC{gB.e6"3 9xb$RkĀ+̓𱒩f^/xa(d0vBi؆sLyZR j]Mi g:b:Q1ƴiVZ +gS'q#+`cع{~3r;~u u2K{ + +k6h?$թڗNy0Ŀ0~ظ>?wYoc"TeՌ|$'*跧e$E{2ip;BfѢIQ߾:d֞JMnA͠ڊ( +,'++dDMO$͟ǝK>/ױ-eE惺NBz%dKoDTku {_.'j/B5a$cDO5GH2 I,zGeؒX{ӽ(M;>^{ğ:zzִ^ޑA孈\l'R`^Hohux]ˈb[6܇&Uf᫾ah ;ͬ^AM̒0^^/ +j6J1ա4W =dySΌ2bC<,ɐT=Pq+lȖWN)iܽ>!FlKIaF9°YNf- "}0'mM"lJRhHr^ƘOT\_QbNïk CD(|֒:\S17)C\,OVj!!g܆aoxe߯4(O%dE֐ M}(y_50jo˶|c Ƒj_cc.QҩJ?L:ݳ׆6.mgjT[|W/^ Htt f>ܻ4II >Ħ,d%8 z&TȤ<`3>My +?ASG[FB_7(5j#01oxZH/q=jdt4ZȸLnn쩰!,Αb{s-,4p?!w63ޗo-+yqot`h-l[p 9'<>b}{^3hxOb rW+h_\\s`۱ wd_Z&|vR^nkd\;~;FfQ~r bQu#g#R)TO4 fޒ]V5y徑bCx=[29IRdcyzL҆tz,s P Cי1RPq9~ơs - EUI(мe'h9kR929IwUvߜ |, dDlbduk&A83 +o0Xhw?[z=e14amsi_;ܨiϱɨ +ZP$U3/AC830ҮWưR{q ]B#/EP!d,2F‰(;Ԕ[% FF;Ρ3eL?/LFk +Z_܀sgMoqdl*fd+t i ˠaϙ~qg]T!JY}#m"B}Ȳb0Bmpx@#bA|ep^Kvv c,1yܞ +샂!NrE~+#m‹;tRtE 7{B V8ʔ9y +ĉTRUl-74c/i7jG"gCt?1w=Fju.*G,3pyȊ85wɽ6QW,qW`.ƒY +~SR[cVyTY1t!1bnq=?]o21g0nB j_ܞ$qQy_`U͋ꭱ)uO,JW` $hcHXu͆u%#.хEe #w*|r>UCaLnD$|ޢ@#h1pBj;@',H#pSq9,fvפ4D +T4Y =nV.+pwҠ89COb#.c7(@D%:ʯ_BvZupH%٢*b|]Y`{{R'槠r0ŸS8\9l,$mnHo 7}5Id.K}gpەNǠ0r9{t + u|2&M|*bi&:"wh!!G" DyMS/B$TdvWM\`*k ™PeFBT,{$;s| + xd+N`_]Nae\e=z2Ї|&I= +/v +)т;Lac9Kd8Nqr#KMfl@8\2ǕW,!O.MY *K}6uSAz=sQi1L#2X-;]@Qc4VXWWO zOe*GthEm4q_() $-44-GK Z!gFS: 74)^y%MT;BfӗB=k{si`JR몌1UXZL- EO |Sg]xGհĜW;׏~/Wom*e(EtisNđO, BU|FH1DHim)7wkF[{W؟6E1-Au~WI͗MuEc2XaNj(&c +{ݽh>vM<._e9=)J+b;SdEWd^)dQ[jtA/Rwn9iRc'ۼ&=\Dz!eɾ\p[[M;&z} +͉LQwg:%L5 !K@Wl6cC2-mo dC dEJ)ݐ@*\0ƨI&ԠcC\c'Ίw_~i q Y5$ZT~Ii!o55)Wu[d׾)QWxlGo"/0XxoZnv2^(D:R~glFpn1`'M XMcxH/5Ng6nl?X6glkh˿a*@5&t%oUF0s8;цA߬6On%0?Y"ѷ{YPk!\foξC'aGl_YZ3˞jʇ%\x]c:ޫsA-Wv;N<PjMo3]#eyKκvK*16@H=5ܸ ΰ/>Es$6+TvI7+N]EձB)Iy'{*8#s]0Pmr>3%-#C1?KAKJTB5,߽rZϣseҌn~uhT- QKtPr$NZ7J#B6/va='Jm[ty$\ֻ9.k }F*3fu\T\'4iImń( 0N,"ؓFyxm~!׉K/gaBs3gd[_īfeL?с5 +Gendstream +endobj +2888 0 obj << +/Type /Font +/Subtype /Type1 +/Encoding 6714 0 R +/FirstChar 33 +/LastChar 126 +/Widths 6715 0 R +/BaseFont /LECITU+CMTT10 +/FontDescriptor 2886 0 R +>> endobj +2886 0 obj << +/Ascent 611 +/CapHeight 611 +/Descent -222 +/FontName /LECITU+CMTT10 +/ItalicAngle 0 +/StemV 69 +/XHeight 431 +/FontBBox [-4 -235 731 800] +/Flags 4 +/CharSet (/exclam/quotedbl/numbersign/dollar/percent/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/less/equal/greater/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/backslash/bracketright/asciicircum/underscore/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/braceleft/bar/braceright/asciitilde) +/FontFile 2887 0 R +>> endobj +6715 0 obj +[525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 525 ] +endobj +2883 0 obj << +/Length1 2307 +/Length2 17225 +/Length3 532 +/Length 18527 +/Filter /FlateDecode +>> +stream +xڬeT]Mpk;%w  n]tI7`0\UUk} 'VR6s0H8ػ330ʫ031301:]Ō]@~S=-\<\h-,^x?1ޙ{>]OU0'K+G<˂AX%Y.Wu2H1[ш1io?h# fj,c㣋שm4Yı$W/4eud;]2MBAK-+F7b'3lذ5)\t:baE:OZH6$ ;++d58}CYd @ +_o$}W,5\J4|Q;cz6.xk*bHEq`_WS`?0Zmr]o9>l50bM%9s6A +y໕3`>ۇAF9($u@!g6SX*+OЍKԆՄ4ZAA`̫vߝ #^xB@<Ƨ|flʲJFNW.D n p0;=L"SB'K Fjq:HEάЌIxmFUH(M>HQ +$ݼlA;ךo tftlSԬnxikFdK?~  +߈t:ew&Ny A/3C[_4%ͫf@ k$,0 ] Uq#M 򽨜&3m"-܎m'= ֞ t˳rQl,.|VH1G"Oyd8k)"^! R>NfѼ{o"k pD5vۓ46 0^"D$ο-@c\ hf.:1v/CUCK-;\֚U\VSQ5+KUvbWEKuڍ͛'Qr`#tsV͛Փ kПĽP#PU `Ź US0  +cDZVǴ\iѰj_IgQu7(xz1EESI㻾ۄYe9{ʹ3+6e㊏UaQS @)S9o•Ò(TӸTsHhYDVqY,?0Z5G.@p5u;|Sra(QꠡfgɧYމRD~l00[D^1_ta~p i>kvUrpjr+ se8Z +rޘ?>65< +{)=T^9A8$jI=MtRo~?6<ù$B($×tp֜el0՟## )jsNDkDg geG;>JяTiGq.TOAIaT3H Y>u|LIjb.qz'-쉡ȃ&B%0zde2㏯ aQ 5/4lH`]n+RlZb>0 _b E!a3OGVi+Y|HBwWvkxs T S0zɇ $Zm24JF|;/hGedzAM1RCqbBZiB[mMuw]X'JXp,B*⑟ӳ2>ͣH=h{* td["@+7I +uSCL2ChȤ?Y/syp(HJ#g/S4: ى7[,394ĞHp8xX%'><\:r^;kz^3iD\qJ@_Iד+?}f"^t3G( +ԟ9Dž?WÚ_u=|D 'wJ~ِfʁR,x4;T.~bDa [ h*b w'vi{UNzd-+ե(֣% o!V[4ŝ< +_E3v ZwXX)y4|:ح\}}b\P[(cM)_5K)E4Y.5uCy|{I'?Ei__NH-IO'P0y4Rh3wBp'z:p~Թqh"aþA 9 A2T%(w/-Aͤcr:xljvmhE~VYNv߈p !G'FgN|۰ +@F*7Dm !C*B.FElwsl5sWʛUd`R֖C-V1f٫.%Ƭ,^:Y]]T]"4pRWpCQcd573A4 +t:`{u +q#8&aMӹ}+djoEh4&qVZo\ y2֞+2ܜM^o`٩@ +/P]c۫3G+{tefԻQj@~{sn/vM mݴܵ2DH5,Z4y|(Xm"lM(Iw'pܬWM% '"ƵPTCr]槊X/'5@woxe-t^*z׼6Bd1-TG?!H$+nd K}gG;BE\:hGv>٤݇\E&ra<]pжlyrU= /<76iL7^v UJ\/I4!l(4OE+Rp7LZ{n:Aj5M'FE.}T99ח`kGni42oojTQ4xas l*/\]O=gxb`.Z( +`'t ++?N zŭB?!<0O<_6 w8-۴Nrz- z|@G%l}%B6b.*I4>xɆ ?eLj\MUy"+R<'uaw7Jڅ|QQ%l}|dPfT%^2x'؞bPk0%I5I)Ήe׆,l֝Ii<6!$y/Vo,Q"f*]^DI5$2#}ګUŢ=hvF0 ab2Nϒ +J`MsD`x4o<fyFp([T D> +( *J)&%W`k <4 wM}ǜ7>fO}`#$bvG|e:rxDɝb]P|{Cr4E4|jGLTx;ղځ%*9055`1|֡4e_ g䳑P:uq-4v #keHKOnTy՜G" RdSo^ ߏy+Sw?A\jSƠ!>x}%'#$=rpTH{y[~mCW W6*J.ip +*]1۞I;6#P 3_cL5eY+h"? QfĜqQ +ӺGKyVB^9+QwMrgUͭɶ֏lA&aX\?WyHƷ0Aj8i`A*eյ"V6HvNq9J:X5"~uvo5}Cw1BLf6n>",miaS-۷揆M*5SKSuq5)&kR.*R58u3ָX*:tM8[XU$+HI:1eREluOC8W(ņ-rh lO(g,"cU) Tbp`OÙʸGtc7Lij>m`YkLm)#A8g)ۢ8Mr-B֔ѓxzΙŗXq\Үd8j:<OUryzH¾hDg^X߯L1g%OA,lUو1xP 2D]Uc\--@oShC} rDJ{WzNL^`c^sHub.lbvm2jgai= &BhdKy {#ی2 `,;T!/ၩjQZI*ϮvzAQ(ܶ86!;%{ <h +-vmۅGO^hr;![ o/=}~ˋ>88L-mA+#!olڹ@8 ؟\TNxg3ŵ%BT7fQ ;ED[EBd0c56fh~CUˋS {jj2.lDv. 6L/ +Nö㺝)A)ϵpxp:zWS" Xw{$ MI,(GRS3媬0~7\  f%Og+eenzu/{qէNӠkAφ[`g>M_LL`x xD.oHtPGXpܔ^Q_u8*+SX}iDi ܖλْsypDn;?GOHӎV(|8(i1 w,f7RTbS8ҭ>yzL| +!#}K%e3UT9^ɴˬ˹ &B/fZŞztA*1}29J*>g$#@8ˮ"Z/}ÆsIT`,{y eXr^ARg-A}WArƒ .X +PWEh4`9~e}AS־L1@ZaC(mZo=V }WnuoU ui˶vޕ5 YTSXPSgU5 G֧{UaC\)w4~ɬ!}^.~DB-~kN[W>4!0]*ѩ񷌇G߰xin~1;- IuZDp(.q$JWfPE*Cf<":μ&ҵHHi:(5.TTXbQhaW^-A5'wA,s2OXri{?Y@2Wgw +eh6qR77)iuCA[9Ua8M*IY6ŠDg9F8S\` Y _p9hWOz7HI_>S9- +1;aO! }CD٘x0)zA1^iʕtE'= +ƙ~tV?Б JC1|avt!s=*gp}ixaK%q\i_li3 +6TVpx2 \@_ j1kb9 w3:xDBV@Gb=7&_b[Es]h1ȕš\vO1zs3R V/Ud]v`v~20t"p-H#ty VY/{c:~W6\5އwɶ8s;3+T($Y]mC<8(i!.6F]&OO˯Ʈl7фGѕ^;TlT[3Q4.UL3&"y"yE'B07@8*޷3_Bu7D m5ߏݦƑ:V$י[z%~7$2\Lp33g70Lt}'\{yҰxX&u -I-&E}2^8c5ԟoX;^^õni<~}kfe"2u)+'9.?#YO׫"}mbBD +D({H_ڰ$3_&Z*E+g=HҞ Qxv~Z?jⲑ5u^4r(}g:>LC.7H81~ +7 6) c7YHfΐw] +2.o/S<§4qdY +G\|מ ~fs0M AOk!Rkb憳aIzb3D5үҬ 1q##졹#}dn Ra^5&Ki&BH'M"QlQ5i,ﺸ1ո{ +Jq0zP䤨 L$ +Z3H4r7#S "fڅ…Чť_b70**{ a4#s+ξ>RʡC6}6m202EE=mmr +>0WIfez#m;^棈vwC^QNX>&¤wʆ~ 䥅K^TA4ޕF#Eb\lWDh(017,/vR=_%w y6`}vWqޥx78}Ȕ.S_'SB)\jIݽ̶,߬P8 *'˴3F )ʒԸ[2 +kֈFW*@+]{=h׼{; JsS=Xe( 4@%lsK8K%aqүARR펓 MVqq̸SPIo +`MxUTŏ_+{]Nr '$U-zjkiza8bnz| Mx>}@%-̿py1AX W PPVpAT&h٫au2HZP`JƯp- YH>z(gK˒|7*щ!b5e0fx$IQ" MfSZ(PIFG[#4K\,&^ERzCyzF|hq*⚊bT;֎mEkM|IbY=h(tnV(Ab&#ԉ*sŽ;h@dc f4CD*S{Ѣ:t;5Q-J;Ũ;O4WȂ n `Use%ai1 v B#].TIz F&y7ԏk5'I?զ(*暝MKBZlzކ/.״2nw^_꫔Fs2_D65A^r_ޫJ"j#Q 5'A"D˦->~rʫ/  p:Jթf穱~ڰ;l9yL3e*icQV亭V*݌9'Uu43P&<@%I +.:p\\b.ь-Wl؃E`'awQHY5~tݗo7+5Вm!L{_#–qIo>T KotFj1)x}qIJ2l,$2g_[1^eiϒ`B(D^8 ح0LOgNP_߾ǬAam 1`I?,ii ܎EI0@~A8e&bulXM!ʁXlƲhN-wHf2őߑ+_ʮ:č}u4.@,31k16|r`Lt{ּˠA#zӕw;igqzˌR{z{J!EPr W[ߟ$"qqIASyBHDwhWwh<n#[b˅KgWc,:O{ + f籛U]?0[d mQDR@縚G&I0ddl1.F9 +#[\@ (L5\-qVCUXIJc~ZgqPCCb OY{p̿~eOKɞ z~V%G9#6($bdM (L'֯_yRz2Vl(l۾^Sysv[2˒$QE'D Iy&k.? +ps c9 ͹x=b96rLFK'rH$0cCeȑ|&?>|J.?ML #Ѣ&eLىNۊ9I +Lm7bU]j)ML7q6?aH8{|AC$<\1Xa/m)Z_QBKLeaۯ;2A*0>G)αƀ] #\'p|-;^V`5 lDi}}'|7E0H7}Fp'nM)6?0KIJiN{ru%-fЄD;ֳmȔJ&Mi5],հ5j6\8IjBiǩ "~=7]P>>sH!mDM sSaMhl\y´F>kFO+?+ KQ]-]#X nj|5# څ976d{"z٧ݞ,qHe^GAfORᵨy % i;gBBZyHﳷ`#%lZV^Li@7ZV`ퟙݕָpڂއ. 3μ-9Ľ) zNR7>_i^HQqQ,i reϾ1Y.']IvdP5/DD5_1Q ݶr20"@vu}SĤZNŽg~$1o՜SY‚6eƀ&kAԩ6OPKD KojAK +R-+[~[ٗ]`ʣF><keǑ 2\'qnPxtC"#{w_"3{k'&IvA%uZ[o.ۮMw(6َˢP-ϝrxrXpL%żTm䷩Axz$9<њE]59; |T^p.3>҃wC.MI]QRK++uu'b-8 +7b!]w`LߐJc6?@BŔxc!gY8?ڈ .0f(%#.(8[YcM: ? G4SuZԪ!?@k}w0̲>N]| 3rxg/BleOk\g,UiQXBbGH!A}z|טd]Nլqz͢W +>X` N[5|1^˿|ǠחPפV;_k, wȓOOyU+#S۲'ڻ:\v@uFS26u`}D$*{6rOdeRוlEUm2güu5]L1Ż:/bJ$z=kY>Li6[Gzm}ȽVwgI$MbHYTd+^DXQ_Wuv4&"BҨo \2!a _f}8c,-X&ė&"CUqV{1'!rUw3І`6X] 2-7,/endstream +endobj +2884 0 obj << +/Type /Font +/Subtype /Type1 +/Encoding 6697 0 R +/FirstChar 11 +/LastChar 126 +/Widths 6716 0 R +/BaseFont /OSCTIW+CMR10 +/FontDescriptor 2882 0 R +>> endobj +2882 0 obj << +/Ascent 694 +/CapHeight 683 +/Descent -194 +/FontName /OSCTIW+CMR10 +/ItalicAngle 0 +/StemV 69 +/XHeight 431 +/FontBBox [-251 -250 1009 969] +/Flags 4 +/CharSet (/ff/fi/fl/ffi/cedilla/exclam/quotedblright/numbersign/dollar/percent/ampersand/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/equal/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/bracketright/circumflex/quoteleft/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/endash/emdash/tilde) +/FontFile 2883 0 R +>> endobj +6716 0 obj +[583 556 556 833 0 0 0 0 0 0 0 0 0 444 0 0 0 0 0 0 0 0 278 500 833 500 833 778 278 389 389 500 778 278 333 278 500 500 500 500 500 500 500 500 500 500 500 278 278 0 778 0 472 778 750 708 722 764 681 653 785 750 361 514 778 625 917 750 778 681 778 736 556 722 750 750 1028 750 750 611 278 0 278 500 0 278 500 556 444 556 444 306 500 556 278 306 528 278 833 556 500 556 528 392 394 389 556 528 722 528 528 444 500 1000 0 500 ] +endobj +2875 0 obj << +/Length1 899 +/Length2 2465 +/Length3 532 +/Length 3098 +/Filter /FlateDecode +>> +stream +xy<+L"x%CZiyfٌfdIb*Ph!eDL (ʙ?||﹮TG6RT +EXCC45m AR @#k&0S #3 Dt"mu!k2H'b dMvS1D$uE0  aA<}5DQ0I +"SȤ RHl 07h/PaWq&&ڤd"*dt_K\A,I5@k +!bbQDФ`[`5!7 ={m[&R{ش?Uc_,P8!*?~˞bс01t:  GYA)Th I!_il@:k[?1B:1`"w?)b? ! BQ"DT"66T#cP @#n/D#͍E1L:0`Ѭ~0(,@ dzPF͉H{ngr +cS.>t%[^fDbdSJp­pSA)_FBdժxdi˜q ڊ\hɝ?^Ҷ3*9/1)!7.RHS.388*w8#&PMw[̵RӾϾ5 >!ItbN=MI9u80NLJ%' mjs֗«r#džzb +5Vwi +3j:Wpwx,MuW?^<^5 鴖. gI'\dKh~zz$["c/i1[\.%w +&оPo,]^몳$᳔:Wu8ڙsq~֙a4T7۽ș}=xlAl,+p6p=3իWSұ_U#/PCև +qN[ɪQJK,W1 򮇛N g|iBbW]蜲?hXWdzb|yyu͙japYhw?z̾ +i2AԌ՗leI##•jq7DN"k:4a4;ׯv:x*1ubB +~QkGYYdh Z6MVuvYAHaҳꜚ_ԑ IuFE# }(8x2%ԤVͧ5ok׬;ڴ E ͪ'jj}J4& +=gBo{O*gycm6R=~ p7BfM>ISTtݥlL-`Or b?6_\n^P(%+%i9qͣlNpCt|rU8,l܊cNެDoz~ʢk-Hε {); y3jAY]e\+ve}yZʷ3N"i5kf֗^W9d <0$.K - u,:e(}Scvb4!Sx7ڝ}16(537"䟕PfyJ6W~# ,vp]vܩɮ~6u!`o4FGޗxޚV4S**Xd6ߏ5ĪO,`e%z 8sV*Ұ-=ӡI/G9wMFZfiڍf +}06Ҙpc3 7cڗҶ^T5rI?6pGVQ9ʞZ=4_`{GM o4ƣ +8RcP[~NxT,'{znL_,ٙx&qVeo 8G{N(^ֻ'Srd?GRi ;oG +k3\0pLNl;/\ WzCCX?ro)XM'ųԉzddX~0}AyՋ"'AbuwGR!Vs=1mz<غK[v-| _\l-ϻ=y|.Sڟ7>ɯ<VvP3*bաOՇܹ_X~GCiiIl֜:nt.O0(2p&v~SQKU e\|R:!*:,Hk'0$MgPha?oendstream +endobj +2876 0 obj << +/Type /Font +/Subtype /Type1 +/Encoding 6697 0 R +/FirstChar 48 +/LastChar 117 +/Widths 6717 0 R +/BaseFont /TTDEEC+CMR12 +/FontDescriptor 2874 0 R +>> endobj +2874 0 obj << +/Ascent 694 +/CapHeight 683 +/Descent -194 +/FontName /TTDEEC+CMR12 +/ItalicAngle 0 +/StemV 65 +/XHeight 431 +/FontBBox [-34 -251 988 750] +/Flags 4 +/CharSet (/zero/two/three/six/J/e/h/n/t/u) +/FontFile 2875 0 R +>> endobj +6717 0 obj +[490 0 490 490 0 0 490 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 503 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 435 0 0 544 0 0 0 0 0 544 0 0 0 0 0 381 544 ] +endobj +2872 0 obj << +/Length1 2124 +/Length2 13008 +/Length3 532 +/Length 14161 +/Filter /FlateDecode +>> +stream +xUX\Ͷw XpwܝwwoY<\ N w(E@.rQ{';\4 oh?y(@ݕ}s&2z'D' 4_f ٪!hB!Lg ANV!H/YwfPwd AVv!/g +ǿB_r AVn5C_ AV?zRsyzPU =|3Q:"T.>0ha3 djnj 4ogdR+7Y +MDZ#>d}焊)Z0% t&^2c" &uns=%]dU2G̜?"J_}6RLf$nĎ>- b.M["rEfBΥ=1Z{! w{gUٖdcoEb.bn璂+&) + +FiBPٔX[tVSPVfC-(GG\Dj3ܸzcQf04_P~?'gQ@9:j8 lPe (׶Q%$}{lwY\Hfe, ya4{2)_*Q1:GxSŏ0 #b%4eC%?*w qa!1~* yQg,|ErCvuW%5hxxxZ3Os*{;{xK4[k[%LX~~ϿR~h2~ǭlJHUAaqҨsj@>k)gsi/錥FQNDNx6ѯ$4:=hFNP0Fr~_~k!0'(%FO[~!?Kzh^0#Up/J pW!N +/gW]!;pRO +.Jg޶b4med;ȥ.ǽQDN;OCĖD%\qW L ?y^V%pnoKaj: ;U -xkTNd:B{VݒXaNv&dZѥP+(z~nO{qgf"mm̈*RIfIk7T=,áSqr9;uw06y<z{uO + _ԟ~Bs_OqQ+%Њ q8gbW6mL j=%V=9!Al N:#.J=TAP$jr?OrMHo]qk}lxmkRā@u٧MզAQ%)ruJaDžjsL `?ǥi&"xԘs`e1k 6kJ{'ڡ:zth= ;o̜RF,ӕHA=6{>?nY[RTKҞ0΁AUy8ݘ[7]g3ɱX/WL}Q\Ai?2GQF aM9imN~ =aNP÷kT*qT7r{~hBY\hHym'DJ/  +|Nsh|TSصnQO"p]Ut _ȻjyS3޴.U՞'-,9'\]V`TRkS0WR(y.%N~k;+*Fa~D.%w iTTi*sB0y /9\'gJ/Z +A}9Iֺ53mmf0,?%r;Kn9}wm2-D7H2!ɳz~.'*8F* 50Us?|`\L(I_ UvՑcuO6sgS)=71z˙ʔ8GEڋi I/DLsGbT{Q=X)ėvȎg"QlcP:0þ^؃>T>%] 9atv7ckC)/4GZ9Z',ýZx̆ޣ1L![ zzm [>RC&')ʈ0+h5rʳ(̏ih&{Y?hҤ}a0Ffs칾kLJf*pȍX/Phdt,LN`A 6R~:P߁eh8M/tSA1VʵDEF&xAͦiR-QσVͷ4x Vl|dl$ ]Eqd8&U9K>$ H']:-%iKhd“>._{BkByxMݲ2BHtG|TYJ22&_o[W*j_|V;Ӈ3٫!|fOF(&,ZvMr~٘ȟk^J^^Q52N+.#aaF=98ApDr$[u HYh= $ed|DEgO&K#`[Aupv?SSPlv˻Did$Qר&&= J3}f7ɡO&aʘ]7#VmQG:2ϴvf8c/RH'ujj4A^V]vW;8+-}OQ3 +OoЍ†hvJ1$ +ts=K2"d:0BV?i iJ9nrǑ,.ckrXԇ5X[)FVej~b"kMvΰ@5LMA&% Ug%u¦gkV"򄣜/$EuZ/%ۘȹVz{-rH ], +1#Da3s]9%irV/p36$6Mck.AW*?aI-zh+g+OCGrڜ'd貃źD03WOĢBBk6M4շEѣ7O}tצW4Cl":Of=lO3xϋzpEϑE^كn4G/38,&Z.&҉_ $x1pyU?fnI>o!jG+UxqiԂXGui􂭒guZZ;Lnk!b[ѓ +h0?~:}!(cb(NDPrv7.{ΐ7ALaV!N.ϱF'/Ng5g P#6Q#T 4(Ľ(mF6Qno؂uƈb]C9"` W~Z燎6~h`VASʱ:@; Ŝa6{-X&?#\5}ܢ 097IUC0NH$V;[bQ6Af]5E#Ɖ '͙vcW~v8DI1ozUL"ok6iG{0#Wsgy枑~C:/r `DJ\!y6[rC?~Lȃ˨c[0%F Cpԑ.e"D.b'~?) }KpD 5a:,7{4Yʉh7ܻO¤{ +U23k^88JfNK^IOa`+s@?ksj1.s|F~#0*H:ydʙXq4c>}e5[e'fڲ(4z[ +~s<^]J\,5˦iBCwu;)_p`Buo +Qpid#[^րJ%_ a)I@-9H7){(NԆQF;iե4%ԈY!Kx '鬠K?j\]\(>2S.B6yA֘+ %KSchBpt*|ؘE&f>BnB௴p("mHg8;N]VOx|=;a5h>l֮ׄw=Q׾-N ̈ieȌfnDxc,*dT<̵@-m=x!n}}{B,ʋCN5YGd;c6Kg '8jz*DMķ +ad{!^e|Z>4)dym'Y`-C0V5<} kݒn@h4a +?XG-m[N{md=xIpIzH/El4[L8'LQ߆Ȯn%W6.ApzeK;Z`Ż?St`ĥכ +4{8M-\,P*‡nu|OohD˜,(os(tT[o{oNޥ>=8{iܟΨ쎧:Iٰ#.3>~rT`C^ZMqt^Ftn>/XObject<<>>>>>>endobj -1772 0 obj<>stream -xV]o6}ϯS -N6k`-J$6蒔]KuAs9\~9?S傊dMh>d __ NS%ӫy6.gX4vk匷}zsNizsvxs贽n=n>PT(R݇VT)T55pUdn[y7vhK;ˈiն;*&elT)4*0|UQmUi(ӪzpE7WڍN?r%UX֨D'޿AqN-9wyت^ HVo;5-WcvzgkS6k4^*9A~^?I;{~5U. -kɀ4rә̧d]M%4՚r;k'1hHӗQ'M) 6pj{Z2;P,ۍ &S9|U)Ͻ{Z>j 2:kݗFwX؍ zXZl0WR|8 -p _PG/V^QD;$6>ѴΣ7`ESlJ@,Rg#U)frK(Ad 2""W>wxEENZON T2:]L^D=N?J iGȮa[(&,`8o6XJu)RG -c[@I03NCွ DBK>Ά]$+)S_0Lq#_8RcѺ<Ĕ$FYC[IO׀S";T-9IMSp!0,q^"Ρ:^`YЋ$Qbp㤵 =+|&?;Ooy/)#nĴ!i#v娲^}9łUY2# ЏN&oё %B4_׭E|d*j0P\{S8m%G&ɷ0+qO7?{x\f_ҷpqBR4}!i -g\VaJjāx1Kuv`` -Ϧr!9*\J c`Ԟ ҖK1n1͸C1sSx/wqB?!a @ÇG =qmW7Hx:$dSĞ섃Wl(gq ( {q{jo>_\gW3\qy'|ɯ't $endstream -endobj -1773 0 obj<>/XObject<<>>>>>>endobj -1774 0 obj<>stream -xVMo6W |is!An( -BIōDjE*ME$q͛7*)~bZhFSZhFH6Z\z1_..7hurs~{Â☶9P6kfD)mm,gٔQg'KBjr$[K᳜2eH茴t%4֒@9VU͘ -̑tOr$\fjJxhISiAF -'&cV 1\gQ|ocJZ<;RFUR;Ʌƌ#g I+\DBpdgcS% |:j -}'p7h\B;]ةh-Лы4)hJV9[%7H4{`1Ll-"$^RMȾsdh\[*RK/+F8*񢪶"mv-ǐB{KYs A ~Poj -ۈB)4aa LJ-xU"ȳ QkY|BGC J*R~5(-:߳@-OOI"y{8]]%Dhz7zq!04gX uai.|{f _^IK'<ބRpZ|YT$t'dnǂǽS 1f1%{A/%Z9{{94ft2 $sb%t*n UBMASaK:Ku? -F9Nˈ~1;*b.A5M .5dF7Taj-wߘ\=B@Ws^`tBE}Cl{ay.\Wn*$jRdԈ_1&<6/a0:~!:y ROB~t&2]4Spm# -q-%wR -6N&‘Ωb/8dӱiϖ7+2 .vqu;I bx0p<[JxW9dijtNae96h-c9 -ֱkr*K dl[%SO\{"hEu%oeWςU&̫Y76k ZF+GH=slMzHA"(6vwPhjbXQ6[G"2+ݷt8˖7+?Crm9F-Jrg< 6#T.z]`iiDzegɝzG*:B X'.Oj動Xgl=|Rl.}U,ēLU&JZe -^Gd|ނ |jd4^jEȯ^%TEk9(ڇUe 1Bktɂœ\qS&UJJ:t$:n& YR߁[V -4T9l!CV?>nZ=yQ2y^=5wTkBJC`"BxէU4[91mށ}17j'kʓG7 -Lz{5cq ]?%nKߧ>tWk78Q`A44' ;Tl^rċ5GǦ)BW" -̰7Q\@:$FGn<-j^~x$9O@8P"KY$`zylA&J=ϵ mخ=XR2U<7u T[#/M@6Du|<C;J)TgĺʂՎCsl <2{\F[Lxa; -Jl>ᬎN3ʔSXVbHզh\/Ay4A۪Ozqqendstream -endobj -1777 0 obj<>/XObject<<>>>>>>endobj -1778 0 obj<>stream -xmUMSHWBjc1lr[]92F@QfF8}=X։)(i=u}WLҜn!"AYG6k*7}FqL -5KB/.mJzid۾~׊:GҾ1MI2sS5uT$lJY Ei!hQ -'ʓ%.'?X~sQXkJe}L  G$55zA u/28[8L`p=F)89,&4zp,Ftj}s^k4%4eZ>\ "8@:(ј_ -aP}r!~D9ѿyf?'rL~||I} lcF}ܒp`j& - 0M'хxSܛ - 8c€š4V|)Oˊǐi7%s\MJz:|7״ D6/kQ^$}e&W Q%R,~endstream -endobj -1779 0 obj<>/XObject<>>>>>endobj -1780 0 obj<>stream -xW]s6|)YyKe;$NjPH0}Ғf&mc,BE4FƋId>sRQz>ua< E ĶmxIW>a0%>,(QlNqB7'܊U%Ea@R -MdZFgz gs>6b믺H̾ɯP6+Y0啿 -[6shkJ*eWI95)Tϳ͝ўϸ\Hִny,{͋u.# OK&sy=\k-x'[֕E_mvcG_-㺄tLޣhӓ[<;ݢD+7@%t̓pqt7b7Dvf?[O;m;E _'y0:p:>tendstream -endobj -1781 0 obj<>/XObject<>>>>>endobj -1782 0 obj<>stream -xW]oJ}ϯTo4IoQBVT-f7K=kmnu[EM;gΙŏOÀzץAw ?9RҾ8ϟz^g/J g~  NޝߧpÃ] -h,$EI7H:[}}w qHU.H͍Hr2kI%mUa*+t,r$ fAF%ڣ{)Ld8Vq:Cb4\tz*b-(V$+Ti&=E@"U|eҐ1eҬբq\6b_JM(2I4&5 Jη>rMEF[z\}L6b\ g\Ja,V -$DRUE㑒 Z`K[JU̎`7Gd]CTU ̂$%+__o~Oϣ 3._##\YRD"C &ƒsznWR۔21[إ,Uv-%'$r8J̴YW:_m\Y(\FYxvKߣ@aHHAιI[:2}ͨ'g<$# i&KP}Ub<)swjƑYK*3aP:+*<1KȱH.?}=_On.hv.|iĥji)(:J0 )u9^sm.3GCC$89>ն` |ıL͜i -V  -r@/baDǡ6gϟyAueu sp剆[tK_屌^g+cPֹ*՝,7!W4W%;EY2kю_& -C)HH$qG+ɣgze۬FdVh<l]"{vK1gCȥyƳL ֿ£/+:?g ν}>JL+)VVU.PmkZ5.9y1VGI5Ǣȗ\$%>/XObject<>>>>>endobj -1784 0 obj<>stream -xV]oH}W\l*jӦjw%^&ggʿsǶBtUAuνOH1%E 0P<}~yz׏`X³Q0dJIsz=0ɘ)xOhߦ"m6'I֥Y\˄Dhz$SLJFŃ!`jnXr{'R/AGt*KdTg) [p$z8,煮Rw٧^8@%kΑ?JJzeC. F0՗% -2J嶔d2y$-7HTtc;ZoQ++'HZ 8.NtMIS#II 8]B&WɖiTL>Q`w/LJ|aRR8eb1M u?e΅vmb 1] :wx;`ʽFfj0]P.!6 6)G63U2t\fTn7sٟ`YϷ^|Bܬ*;9a2iڂ@7v?e@aḲ"[|\B@GfwID C)l/gx#/CpVY<7aq98-J }8 -#75ߦq6|4ADj -;oǞI3_zhE=zݓi_|冋] {!9&JX?]{|Z{0 bo?7ϋfcBdXȲɛ 4Btr #1ZOq;V $nܰeRQզU_vhLzHYA|Ѩó lz{>%;PÚT<^d^c 7( hRIG$GX8ռ4xgendstream -endobj -1785 0 obj<>/XObject<<>>>>>>endobj -1786 0 obj<>stream -xWMo7WMIڵ"9rH04) -BRZ\rKr-pW- ;~pf޼fEA3,zAU{1rZf%~ܸ^.(b:?~uq 3ZmdUM0ÕŇFuI*)mNkr],Ws䳪_bJ._U2GTãUc"94T$]SàrzVQx2ITyqxA92mCR.Q4Ӟ6qJFs*s~m|h'vrD:ktF2.&eƭVYLRaDAqhjo-!ߧhjM{`Ir:|=zzuJw˩[R.iטV+$`6BNCdx N>$RmB=7I2$NF5ʠ/{z-7dm 4g"a60xW1/?9/knJ~Bc 'z7g%C&XD(ѥiQ6 NRTJ!ٔ9ҏlK87 [*;({ZP(7쪄0u,d娧4 4ͤ:)kb},7o/ ca]{)]GA3d@1A㡘Ru/s%3_̗ܛ?/Aendstream -endobj -1787 0 obj<>/XObject<<>>>>>>endobj -1788 0 obj<>stream -xVn8+@S -]b0]MgASF"5$sI~ƈDqιoV͖$4b|~]|P,ljhqNyN,+ڔ)mͧlGٽ -A=u- izQ*ebQ`؞J<<0%}Hucs)Ϣي7o)YVM+Ld9UrRb!|" @ٖǔl}[6M#eK4Q=!&s [ʝ]ˏ0 U$zH[gP!g8EY&n`IhF*tpP,!|G9R"[d3>=>"_q+2師, p9ϊ*[#w:mn9&Gڮ.!oIj,ˮURﴌ0]zD@0!Tj/э^p* C飘!Tہ!Q\CߺNҧ#˝ Z:\C*C$ꍥҢwۗHt+_{le=3UwE/Y/p|_e&S<2uG5NSD$5Fɠ9 !b>"J؂ +vjEj&Yz5c-EP&zAbl^yjT}3A8xh*^a "E/.FCʚCc;ش>mGPϪLؐ mx|RkpU=f+{ xZqgLROi;yDCP*>|FAЂVk,U@W1 {1~W]Gm%\T>Zc[g{6ru>{U;Q*kLg. ðM fgj6SMFSޣ jM$Dޚu%;Q/lpWzwpXоL<_uIBז"@u|]=3RaV%XO+~SzF,q |Uz_s]RDň>wQNlunO=^Ur~YhQ,;?ӣ߰Gʎl7>/XObject<<>>>>/Annots 1036 0 R>>endobj -1790 0 obj<>stream -xVn6}W e‘mQٴ٦vۍ_hHV IͶ@$phsΙ33?#Zi2 !V>xFl9=~\K.S9m$J(LJV-U%MUV{t=xЅwX^&vx8"TR4w@(rEAuDX_]|PmdMU8FPLHHвb, |/zFB #(c'#mu E&靬 -\Ԝ_D)č|Qd}P,l|ϐcNlvp2 Q!UJ`e); |Dnt .K]YOP-M { J+,HW+OQ4#t Jq)EAfG#AUi>MZtΜ\p.xad6)5YD9H3Hz0"c,ݢmƊ4[G`,r6!!9%G@pI'O78!4Cm|߷>$pġĺ6k'e HD_88%\#40,mWXcpȓTHVP+dT&ϤyuƬ>SEP)]y "K*mn`\ t ەi đ0I98h)6TVDle :ƫ5Nlw(|!@iA n+:{>ʔ43N&|y>\# p-0Ōig Ŗ-La?|澎x:4| 0~)i{QpWR4ᡴP9#-{W1tGs8-W{x))!-<Z.eb5Lϭ@?%P"y umV%9>GfR(Թ \bY'c-8P0][Ix#%\̊i|=#ѿ~^yKy$ϸ6ŭ,øܬÃs|[Xo`ߌe'W\hǬO%u^|[<̩w<{suB~]=JcKQtDӮ%JObT /4L/Uo-Nɹ/--?^S1xoOOendstream -endobj -1791 0 obj<>/XObject<<>>>>/Annots 1084 0 R>>endobj -1792 0 obj<>stream -x}nH~ut"JL L=m3lh9H5IS"P2y*]nƿ-nE3~3㗫8.OQ.Ϣvjf.O([͢7[!w8\p] A`h,b%)IE*J yJ,\2H썒Āa糩+Ma5$3i6Ӳ`BXaWS5x$D Z KkYY]MvHG,]Φ ޻*X cgaϾAGQj= kP_j}GYa X_AװZߑY5 xfYɳ. k1,vfFbfȕ"_߀aiDXa K-T!^MZ V v- -,`U2l0yNeYaxbbX y0 ]W5X껜Y0.v? ĺ5X*XU` -eRk0y++k(FYF,GV`-E3e-eX,\(mu':Wp,B'-`jj3J& -$PjFbT:Z,Fh4 PmLGZYݰC=0 5s+V 4+R`4nFbWnZ5 A`XVYp6׃@Vt|aֳPH=9 (3 $ z -Ƭ7) *zT0@0’ym,9` j 1O)JHLƔabS:߰T e ]dS0Orĩs"@8k;@ pg$A֖VSO'y׮b~2g~\Ei>yiy!d#@qNoC" N?PNrE)rr~mD@S87r޾g|ga|to֯nP֛{ٽ~/OS?5 Ͽz(wkOO)Ó:~ۢono/̉k9s -_G«j~zWJc0l{UCr&Ub]}=;v^~O܍L d|svnؖHMܧ=Hrݻ5\ѹdm`Rq'}~U7`럽)gOgvl s^I"YuݱܷZ?kvUS~rc#z9C4dݡ%jVh]C5헪~Rw52zgOUlBmgǮt/=ܽs]_m݇j6]ǦⰣ]ٗ.:|۹m#1Vb8]~.X, "h<<$S?X Ͻd$Sp٦ǝuS3gʐƟV?!xx3{p_u$}ɥ׻od\z.4]slQn6Z=x(fHE5#<cө/m^  2;V͠]Umwd9IY[}ã1b煀3]6lU&s<Aўu3bN֪ޏ(>oo& u!;!;>]NٸL$>/˖]CކeOnW~-wݼ Q` `ʶmg5 k=ֵ^.yWSU&MXxYU^v'5< /kH3\&=sE"njTK$T%L*9{.zЯG'./(w|pOm"χ_]Qendstream -endobj -1793 0 obj<>/XObject<<>>>>/Annots 1092 0 R>>endobj -1794 0 obj<>stream -xm]O0+Υ^P~@ㅉJ=#cCƟi,˚;< /Y Ď֋^N,:oˡlMWMXk<=fx,m[}I-J 1Waw?z/endstream -endobj -1795 0 obj<>/XObject<<>>>>>>endobj -1796 0 obj<>stream -x}Vao6_q>V>uIXqPesH)ũڵEK"޽{'cf)]L)NFɈe2|)"|];$I~]vEVLgsZ#;Q{i)$4֋*?Ym㶳tЫ|p/O&T$+V)./mO~'Ii/D&Iexs\S[ە#m<q/bTjSʄV;Zę^(^rZfPr2b$- SRXgmd•qBˇoɘ%S^rbGK; -Oe R}gQfe*Q%؁*yi$ǧQS޿}wg`ݘbG5BvyLmeV69?K!gl\ j1~P|`iEA`LÓ 0`@!$-SŒ -8Bxz.DEp ( fE,z_j.Nۡ>x`%*ߔMgtBb>|IucfmjO:#\q^8>/XObject<<>>>>>>endobj -1798 0 obj<>stream -xV]o6}H"َC[?l@ E$U~:ylK+}eh1YN .INS|2ޘ͒zt!kZ@ʗ8)(iJk>S*ο ]?RdiĎl ϯ 6`0x#qa'Fٛw'++|1"0ޅ;emib6|%IK*A-mNx"9p -8Q㣂$lٷ$~y(-^|Gz`j=;Y^ҋb3+ĭ`^H5۠pG{ӄ5M9Qo\8j:VNK3sBhikyriTA[kG]H"4z/11]`kHZ Q7 -U!qupOJjѷݧ՟H{i42Z=z=8 eK?%;TئIL:|K7R-/1C M~YhppGVFxiMN Ƈ\5pI޸l͠Y70H(~">JzcVX`#=!R(o>FEcCuv)8} Rx~Y4J0q' # Tn7?YѬgYaj&ux| }.gZ!ENx%P -HldRa7uhə?uZhXi'} }XQK5SkZ</IʴL]- (y*Cl6J Ć{GwB9nkGB&$P{6_-ne9h\( E;ÛޢtIaH?(wj7 gW~=<tmendstream -endobj -1799 0 obj<>/XObject<<>>>>>>endobj -1800 0 obj<>stream -xm1o0w~)S:ڎ1d$J+u6:`RG`Mʲ$wp:F8LC9͒nthI9LC]sSbC` 0p23BN.޶pFER:ۧrp_iVnCW%77`bΆa_ٶfKd)4-6(eC+Fjhi;>Χ9W`:ԃ:L͊''?cendstream -endobj -1801 0 obj<>/XObject<<>>>>/Annots 1103 0 R>>endobj -1802 0 obj<>stream -xWn7}W bV]Kav+44R. %1撛%׊^=C$[ -!A%93gΜ=9:4RoHY~rӰ7wc~'X7wYwÁ^ʩ?&iw }}39͗`8|Jvv%u D -fA֯v5Q4޽=}t=8⦳Z9[2kP T2SK2K[+kxՄ:^?UЭȔ֭w@_%4_WKdY_M3Y>#Lh-kj=VwrK^:OʓXq>)GAsn0r-E *su (W$M2fmӋw6‘/Nr@󜼍kT %LxJT#\<вV,d`|FGv=g!\2PPKGV^oI0\4C8zժTpDLW x| m->76:BT $qEO(; |'x^~\dk#]8@na 9e)\`?$]TZ?[[1eeu2EQ p.o'$N(l9_+U2&dl6( -dN:suЧ5X.png{׾!Ȟ -}J7> l>܌a9|R:/sE*b}l6 xd7$kkvuG"M~֥(V<Ԧe; CSp,ժ[g.}eAWy~( FQU?-weE(۠g) -`Rt$[ qDiu\R=?Zjzq^ -Xr5, j"CB|tÅY|etzyKRo"YZd >v#ow#l=zhOөaXZZq9e(A%Oי MVH{ߥ*6l]IXE}T;A]ZAioFBT&puȅNhTebF^cAn6p -"M@#(HuA6%S{ޘbGUf&s (c i!]VO"KGHs5q U~ |\n=qrxЀa[\,G]?^>jwrOn@'H-^Uee5 -Cę endstream -endobj -1803 0 obj<>/XObject<<>>>>/Annots 1112 0 R>>endobj -1804 0 obj<>stream -xWo6~_qR,GɚIk0,@KV"5QbE=iU[$^LtpBi@hWϽ4,g^FQr̛~7sZE -JMƚECoFjT5IRzSJ7ήöM/\4(S2htc#oF0}s~+>NH^W;bk+')tS(ծBRjjʂy- 5JFhc6(H|"Z$6vO*OD^(z|O0^4{~F:L!p{-slJMgenȵ}:tec$X'YմP_Uy󻷓Uf -iSu{_c44W T*Xdt)3&09H6S^&rVOP\`.A3q{;5Z ߝvDD:m+ OP9" -i㫛𕡑eC-@lŊGo=y%t?*>M$YW揯svysʑTP\OB5$!! <B6BORp]Պc -TiYT6ϨMFjZ.E˚{RB)>7 -~> 5-ꝳ83օ&07c@r׶SZ+VH€OtEvݙ[WDao3eX{1/ǫ &d*t4@B6SKV@2ײxnq/AlBUm0F1 ^y:u/=ǵ'$)Vwa&[>UB !y}B#L3]w\ݬpgpd+K޳'vϱe{DHıH u0E6L;rx8yu 2^x7hX>HT{a^޿+fCVIAuEs!CYUFƌ~S&ofٝj/@m&mwWîdڴA֏;OT}qWJ _a_,iUg{ fSm^V-?˸޵>ˠhmlsw E -l21^{4 n[ܵuefh83,Ɂ/T]t}$/?/5 ~ Tʽ"eV=I(xN4ᛇޚ-1/a8\|/GIx>/XObject<<>>>>/Annots 1115 0 R>>endobj -1806 0 obj<>stream -xWn8}W R/K -Cb;Ej,(H+Rq{DȢ#\Ϝ:R4QDaz:4w0b1G :×.7yJy*x⍚WIz@.1MGNeo%I'͒ᓡ(֐)(6yҡG;⤁FF$2RYTfV$T6$YMv+U^+ί/3r,s[+Qq4w4Ǻ"Y%1;2J쥵a^3BfޙiUi Qaۆ;k<"-H2 0EhS ^n/hzng4D%J xCΊ%|i#'w")dV0dtY @ m˅T e]S6tVW< "#"W@2rf4I*vaJ>wFuu3j0~a#v15ȲH9s?M3QmCznu \Leck :Sa2fj]^:ffEh'#@)^1 dlj76Dj&@d,2uF 0u'UfW! ίj{OPLY[!tr5BYL<]PNY0sEeL |!m EpX䞭 pVCKļQQ¢ãw˸Ҥ)RLkX_Wt1lO +F:np+C\uF|X $KC#gǖnŽ?h C^8V]ٱctGG: $Wkw9 $̮(UO=D 63催oBeنi (|ڣҳX9^7lDA92uiiz*a{U՛ -gSW񛸻x[8 y&aqm9㩍ug`؎Z]xKzL˛ŗ.a*Q1;ǤOWwW1aoY|o?w.؈1 F*'c;O:+$endstream -endobj -1807 0 obj<>/XObject<<>>>>/Annots 1118 0 R>>endobj -1808 0 obj<>stream -xVr6}WEInLn=ĊX~}l+qS˺b={c5yLg3J(xג2~۟{xh2 4ϣE*h'(>vn^Mh7SME$BAeP [l۟~RTjLe#T\ T2`,+>AW81xE)pA҇DqT(u- ) -JZ5(eG sy`T\P^E"Q#gFt{}WR+w~`-[FtSi6ڼR<8^$L.~N>afcɮuzy%I5{I*ޑ<@Z+I0}{xzy -O]Cr|mUZA&^xw:IHP$LpeZ=4agiAZ(~meugzX.lj-l2'74J>( H_?@aQuxIтCKd=Ł^]a8T{x5 Ǜ%/&ujqn>9&@_v8< - 1';#W_lͦ?2 t} RӢendstream -endobj -1809 0 obj<>/XObject<<>>>>/Annots 1127 0 R>>endobj -1810 0 obj<>stream -xW]o6}KS V,q<-n@Wlb@_hXKFRw.)يbC$2u9^IL3nN%dwxfZ54WѦ{*q2|"Z NV[X.w{Mw1^\nf2'vfu>1fV d5߬1w7_joeg1g^o'7ouF ִM=6&zIC_uKNSZ~j K`?~^JDEz焪咬(wnLt.߶rgmuo"(GY躔4VN14^pnB ⽿HPcU'cOUt7u.颾8$0DJܝahM3@ۛo3:mTCUpl_L 0RHVGet%Gs ׫7Jc.d,A#d^$Lz[QXM -XLʽU%۞7 -tF;#*8ם$B@gTT:a`%*L4PˁHYs^TTe#Hg^KOgRr/H}&9(wexyk-,ES<$Tx -;C1FD$f}: Zj^k`Mʢ^Ca)}Sͼk\bF |\04؊e$Ctv9=+ b>Vvu4`\k>hgGώSP&A_|-X$EG?-S+JG*UG6 ܗ7|ZX^ᕣDYC{ώu쾗y?Us -{J (=ntĘǩ&™~DWӝ)`LM4ClJ_T4| -)|ẅ́nW}塻|?FԹJ  .R~fP/ozi2%љ(d<򂩅Ms5~N<=O&@Akyd ŲLQߐ6%hH/Dק~sU1TJ[Fd3< D@@Xmür'OH6ƢJp5?pOs0N+ We$9w^[e0'#  -5ch׿||v0Ğ)a-Gh[}[r?}b.t~K Ͻ{mvsawl'NH3endstream -endobj -1811 0 obj<>/XObject<<>>>>/Annots 1132 0 R>>endobj -1812 0 obj<>stream -xVM6:@%[-{&is(fDL$R!)oAHǛf*eS^P^-%W㿕T~^iA-eE)3|En~v*잭[Zsgy|Uhqc}jbAYF)+T!m{Iy6u¹c+N;X+$,O0?yk{Ii[xz9ǹ9#sDIE7 ?;nEjf5 &g6{A5 V -/B,G*E*-JB ;?9ے$Too]$n -]jj  -bitio',ckz7i2Epv2:M%̔0"hܣ+)#rzޛVa3_d !kr F<6 Tʉʝ+#$EMCN^+4Uiڨ"4.AeKG9Q(Aj=0  MGD; QIH USMNiajc8+D&TgΊ62tkmHrfIcCcrЙN!g8&y0y-N ;:/[Pb/]˗d/ &ipGҁLɒg:o XRm&bQ=ga"S=.;#HѮdXS<`09`no4qjAc9efC= Q9CM_9 aDrz߭e뜊b(&'d̔=?~tL'd58N:-H謘q7W^ P endstream -endobj -1813 0 obj<>/XObject<<>>>>>>endobj -1814 0 obj<>stream -xWOH_1>\#v@zZJ=N*6lw5!ٵ r Ώ7oL~d4oF)dB'Yxz_簑ѪrA`g2U>_ޮP$]ZHRyQUqwnsx %Jڙ"kk+ -45V*:)ɔt%7juT)xnF~#TE2q6KOVIG[UU@FZ7}!;/5N+̅kCk߰S6$H6#y+ DT@jB9ἴoSPDxv$t5'uA4(1Yx%_=yc m }FA\ŅaQF=!G!ݍefH - ޽&#N qD4}x;t}nBli -yj2bLY2d@0By -酪~di<Zq6LEBhIJ$$Xoq["sZ7D!xc #_996 !1Ia+LVhYy7'Syzx)GȨ+,R,j7 Z- k1`X0hU~eRZy%*+~.iiM=h@6߉,MU-'+^RB5OWGsKZlVZ-7gcn@Eۃ%wP M0(K6;M}ހ@%iǏPcx -.!(Z7vNSBcalE6 jRsPҋ~/0Hq}Q 5"G08;Lcݴ4y(!4,oP@xܼΦARdz:ŤM| /}u&XK0R%2PCapuͣny'r$}?(?_6n kk͞ "P>.>Ыwku -9l 4;B:$*V]dWo=mjYCv(>deV =0i_M#eiJ^=T7yb=-rEyf+F9v97"Y%@=G T-Ne.<ӻ_.\70=;;|ݨDɎK~)`cYYv a6ǷAxF|{yLy_/&bxL'%glσ.endstream -endobj -1815 0 obj<>/XObject<<>>>>>>endobj -1816 0 obj<>stream -xUMO1W ꡩJ3,~zt k[ wloZ$=3y3=!wv%Ty0_sAeU&݃z~CC\P,O~\]|DOpz%тVrs0{a-:4\u2:B![*HC)V jH ԍ fyIմE,ltѽ\z`; b;'4][T6r#:Znjw*;6@ QE?)N0$}4p[ {5)H 3R{Ҟ}©.LOT-ۀB F; wBJ,I$ߚp79@9q1af/] -'ydi\&Kȳ0" b<+ te$ -%ƒpl)i -?V7k/EN M?t)??4KkwAxjxzޖM)q W+n@.&M[b*c Bȼ`^R[(pcQ3EjZ hW |dm'ѦgAپ{vUCACӯ`MՅ -rPcbgyErs}r~zF"wpyX4qgۀaFӱv ̫ERG(8 -C=6;endstream -endobj -1817 0 obj<>/XObject<<>>>>/Annots 1141 0 R>>endobj -1818 0 obj<>stream -x}W]6|X(z. hI M BK+9JTI|%%O Cɜf7-7דY6Ó6fTrɖO*[ffx9ndhlM*bfX+D]mop-!S9ϗ -QVs}inXˈѴ--f+fK"'կj;Zd[n;q&|P -Cg.6i~(ldbZiC({OuHIJ>a<2<{ҞYwѓ9ʴ:O3z"B_tl -*p^5:W"h? [ ؿSk|X, -<R枑v}2x{Mm -IAW9pi@=Mzd #$)`zNHJ5פy+p9{>/\TX ^wy%ߒCvM)VlZ -Nw|lU3$%ڠM$rB 6p1ٮ%[RtбtoM'^xRMA\3GZ8OJ. O`rk{p?6Z)DS)J*sG -~:3uH/ -gc[v%K1Ȝ^\H2 cr -XNj($ -en6k 6gSGLBDvԶh>ηGnCa!4g-c~{T@HSCxy 6RL[ Ax+}A| ~lee 2s= Cc{-oX{x;TrQb\^AO -F/x!hzJ{j4bY0EFa 馌N?oo%ϊ.[hFˋuV!s֡'Zt pt<﵅k,ٌr lLx~D;:j\1ׁ7USbȲ֡F0a\ߥ^ -XZvbDI5tj&MW0 -B3hP%^-j} ՠ`q?\4s-qXX%Ir#*H%yH^a H~WGˌޱ`6bq@ĕ -l `+GB\ ֱqg G]˅ ѢfG(;# ZqAe*yJ혖QtpĴg" A4J=%>9m`lıMPV;T02[M߯E6oҫlWnMqG+lhxF/ɵR ).0=Ғ_;4md׆Q[y"Fԏ(=Cq!q()p5kg  GeuxRM%Ӏ'Y0=Uicq'|ѿ}!6%}(_\h= ؎pM+xsa}h]Ldx]Gw;8%XեJ*ByivǴU8֢,aZwN=5\]>/XObject<<>>>>>>endobj -1820 0 obj<>stream -xWn7+TbYe)Ѓڀ&M@_#.\ݵܵ}( ̼yoɌ39],)O)]^_Liq}7h*b6Ya6>N4ѪD -BVV8=9]8|bZk;+GDZ&we8&R8^"wү&R<8o"MZSB7)tTܓ*ZEʴvD]qmD1ɜw|IT)RqO -T@7{H*X|Jcu"vNFsA+b-R}(HQ43ɕK[P@Tq(Fܡb {ՁO4@\߹6ZT]LVy(#,gRj|.`_Lg86 -}NVJۦ 7SPII-wi2.-IWń])K:Ɣ,Zi$I/ۇ/7#u -A!t!Ht3 -µJo~<nk0BD۽ >S6P˷F+u`bbg_1`qࡴowv"| -  Ht)2iwW= b)X -(lj:+c4U*82kpeX o?=ٵp ֢3t)@{XFC\-C:ikYYm -Ȃ>^:=&ߡɸDUCkLECȔ11jûP;@.ފʒ)} -Si[X?aG02y%qjDž=E ->Qf$믝tm$(ۄ] VFFUtslo ~wapZqAk^RE-oQ ]Wi|{u$Xe|%OG]C0(MrM(tQ=| ab1lN# PAqGsfz€hk[Gzu9;WzW`⯙_q8#qIGnC2yluqm`F ,j-pa&&7Ъtq#ȏ"rCC"fu2Ff+Iw@ay6|mԑeOҳWAn~E\Ԉ+xWK#Wf6Ypޣ;sU񮣑eVH#Ym~,|~+4t=GQBbEt4O?s/j7f&ljQtִ K;mn͖#} `d-_ M3'-ZaSCr# H0Zykm|ӋQYs-H1$8\!֛﮻7%~]_r_axX~醾KQgWӏgby=Y^ŮRP]y/dendstream -endobj -1821 0 obj<>/XObject<<>>>>>>endobj -1822 0 obj<>stream -xVn6}W .k ^' ػ4 >p%bM*)y3ڪ [̙3hJLlFSJˣI4EtN3=ï$u0?N?&G M(윒/U!FZG(wBOZO}zdǰFk6m邦tvl`QTP#ALNti)ƖzZe|f)i9iE؆vhAZ=I}\&t2dS:feIHJʅQT]#kXަIiQp/v+v@{cT8H!Woh|Cծ0(3xHU?c3tV* -VɌAJy5- -Td4] G*jSZ5 -V.V0o@ s^@Q(7Q%_px#骟 a6{0ҩZߧP;tU.=lۓwnJztdU.֞~^T/W< >`/F&Gݕch07jo꺚eEe CNI-c_̈́.zIZNFSY ~l9Z֢)`6ᑕ IW1-݊@x2;7|^Q:YEoa[n>Nۯ^_fuzCXGoJt$6 @Y_Yi-xSJ#Hfe*ճȺް&.xfIhr[г*fS\Y̺_D?<K8MEF ;P[G$/N$A1DzI˳giOQ.G +eP]ÉYbA2ˆK&FZH)Pc8 xQ.Cr0*zQN>&paB'3 +aJnGys, -BXjqR9a |>tΏi0{%>/XObject<<>>>>>>endobj -1824 0 obj<>stream -xW[OH~WeAh>+$eKR%^Lg~sƆ`AngsgJ|MdFGsI:)~ ^Ss9Ǵ(1e~_ -Ʉ4=Jg)-thh4ZjrW}.}-һZF^ˀ˛֚ enUIkpt;O`Te -V͋[iqq{xuKZDȺg^MՑQU_t6OBצj]P3|CZU­Qz@ՏA%X!MAu TtY 9OԦR~/7w/EaġnC4Pnpm dԟ8:SY!IS^+aZdv_'fEk+y &" cVPLyX1e*Ȉ^< mkz2J7rUmMŰGa_6Ykŗ ^J] -W L(TXvr2?} =68#w:DQF9W8xaɰuG"8 TAP/byJv$fK ͇P-RgʓV3 늷Dz@JK?^6H삕u"nktr^y`G) gJ@Ah;1Mol5['K+4Y1$E:L^|&þp70 '2So__g*[ʙo?j1^r}8Yf\8!ظ__-.oK4b0M*O'4Hc|Ekx~PQzID:LZ["mQAA+yRs%Vh&/NUE$g6.:QZT7/˶+H -'L3ꈙ{ҦBؐIG'#g'˵qֈnF3:CS9HOHoc2ol[g{ziTI-JH@ZtS9rT c U n Lj-0 i.bwO }wDZP/^78(3]_OS@&لq&>:CMBDȼ=69w{ʐHX?Ԫ58pj hYrPmjʆ݌Xʹw4RZA1@pl(S!EIR493⑺ž/# Gf{&_OY94uzDgt}q9.>!>&L`pta{x=yb篝Yendstream -endobj -1825 0 obj<>/XObject<<>>>>>>endobj -1826 0 obj<>stream -xV]OH}W"&_oRfZi%$4ۓΌܙIH]ZTAbߏs9~;Ft>Ɍ` ?s9#_Ld(,?LN?Mi4D҂x84?^UPFJ%C61XR*YHWo6R/d`lW$,݋&үC&(-lwzitCF~@%Փj,-6<ل*?ыL-Td3/\d@ɾT+Hr@%Z;ƥ4uF8b E[Ћt$"kmjAEZ*;dG> dx S#tgF"qHk{X:A别\#sв=.Χ@| :iJKY"F]CU_PկRľp~! #-*ȉ*.h@(`;'dP*4sxpIi w5[q4R&SbBc"76YQe\a{9k,EWㅭ&(]vLeJj D+mNn[ΆiuVUXd^Z$VBA@O\lC搀X/CjJW0XQ w-VBU h'QA;Qw&|T|9stWU1d V"3 .w[^{3n0Rv͞N^)73`p6θ@]h+DMlT]S+ycD}c!Ow J~yV rdxU 8}EamlS -v띵ţNP_,}rzz:4?႟Oh6:9 Z}y[<ƙlC_q~:=dZendstream -endobj -1827 0 obj<>/XObject<<>>>>>>endobj -1828 0 obj<>stream -x}Wo6 ` v$[tmd - -QTIɎ#)Yv%XxɌN;9-(NN'tv>,|ysYI+]+%>d㧧trBw5t;NlN8=jj -I*p"Vinh:>|}9477Ӓ+L[flOJRmMU72XT f,?l20IMwLijZK^îҍ[ieibB׹?'~BBgw}" ozhQ7dFYc?_q.d_ܼ~ED…=\P'({l[UP3 C$$cz.%8a -3f{0v%@gcXPY>HtW??ƖPh(Sf -f-+hp'Sd+ΜdӺ60e5 oՎ4 W LY Y k -*hjX3X3.c4(q>1-h/Cy1:5zdsFӉn !|*(@N=-5$A1]I7 E`HZOUX{_O4:h\yZ[F_Af|*` -'3G=PFB|Ll㺮NHwǓG &n?aWOh(mTڢ^R%M-Yh?̶={9C-fݿt%3%Hygjzd;V?ZΣb$ , ֐>Lw#]Sr[*7xȴJ_;c2a!$l -M!$B Eb*J|;(Ò5a_~qգQqz vC/`Ux c^ _-jǍsĻ(ɂP4v;}O?.{l-.ݾtn^&m+X<><}W'/dq1l击Nendstream -endobj -1829 0 obj<>/XObject<<>>>>/Annots 1146 0 R>>endobj -1830 0 obj<>stream -xWnF}WLiQ)9:mk+ VRbB\Ҋgf^DHۙ3BoH!"A0hCO'_)i0}h<}0+'`5GgCǧ,(La(B8ؕQLojLaHD A,/]ܮ(rDb+Zۦ8ϴ驏]#]۷< xLi0 -iWәmgxȦz)EL:mP4}OOˇ!d?mCniw=FE'@:l m5v'ZkuI\iM}K D.u"UoiJiYťY8Pkd7P+d_枊l8 ,# -lH۶q$z7 -/ݥzOvԾw,<DRM e5U ~-]BgQyU' <[S-.g|>0Qx q֋sITQsNgp®ܡh"hK-H^A.|PF+HlǮ ڤRr[@L R ?+THme]<cVkR 酬Wgy.`_ldWZ ٷo)2 -; -v_^rYTCKeJթM9;Sh8 m3ЗB)ᆶᡙ-m0r0x@ZG-*(gW; !ZUfK{2P$H8Xlg4F&RYA%o) _Azږ^tpDxꖘ;M\̳ʳd+G=BESWPND5.l1[50Ѝw3 4쒾^aaRte[yg5>=.V\?뜧QSMx jΐ~WKy+)/wot=B[Ar7rbLvlv-sFŅﰄ Rptq5|9AB;MYڪ#ԗ~J0y|Xz<oWq@".P #tt?fJZ26 P;> DhDB[KUN p3Y굹R?i^]{#ְ#nDpc$ZUX[C3ߖ,𥙻xy7K- -C͵~M˺.ߟlWm}dbciF~*1/~sjF3Q4>^~~𣍛o@|xsx28{g8@uH~:\Ύ~=Q;endstream -endobj -1831 0 obj<>endobj -1832 0 obj<>endobj -1833 0 obj<>endobj -1834 0 obj<>endobj -1835 0 obj<>endobj -1836 0 obj<>endobj -1837 0 obj<>endobj -1838 0 obj<>endobj -1839 0 obj<>endobj -1840 0 obj<>endobj -1841 0 obj<>endobj -1842 0 obj<>endobj -1843 0 obj<>endobj -1844 0 obj<>endobj -1845 0 obj<>endobj -1846 0 obj<>endobj -1847 0 obj<>endobj -1848 0 obj<>endobj -1849 0 obj<>endobj -1850 0 obj<>endobj -1851 0 obj<>endobj -1852 0 obj<>endobj -1853 0 obj<>endobj -1854 0 obj<>endobj -1855 0 obj<>endobj -1856 0 obj<>endobj -1857 0 obj<>endobj -1858 0 obj<>endobj -1859 0 obj<>endobj -1860 0 obj<>endobj -1861 0 obj<>endobj -1862 0 obj<>endobj -1863 0 obj<>endobj -1864 0 obj<>endobj -1865 0 obj<>endobj -1866 0 obj<>endobj -1867 0 obj<>endobj -1868 0 obj<>endobj -1869 0 obj<>endobj -1870 0 obj<>endobj -1871 0 obj<>endobj -1872 0 obj<>endobj -1873 0 obj<>endobj -1874 0 obj<>endobj -1875 0 obj<>endobj -1876 0 obj<>endobj -1877 0 obj<>endobj -1878 0 obj<>endobj -1879 0 obj<>endobj -1880 0 obj<>endobj -1881 0 obj<>endobj -1882 0 obj<>endobj -1883 0 obj<>endobj -1884 0 obj<>endobj -1885 0 obj<>endobj -1886 0 obj<>endobj -1887 0 obj<>endobj -1888 0 obj<>endobj -1889 0 obj<>endobj -1890 0 obj<>endobj -1891 0 obj<>endobj -1892 0 obj<>endobj -1893 0 obj<>endobj -1894 0 obj<>endobj -1895 0 obj<>endobj -1896 0 obj<>endobj -1897 0 obj<>endobj -1898 0 obj<>endobj -1899 0 obj<>endobj -1900 0 obj<>endobj -1901 0 obj<>endobj -1902 0 obj<>endobj -1903 0 obj<>endobj -1904 0 obj<>endobj -1905 0 obj<>endobj -1906 0 obj<>endobj -1907 0 obj<>endobj -1908 0 obj<>endobj -1909 0 obj<>endobj -1910 0 obj<>endobj -1911 0 obj<>endobj -1912 0 obj<>endobj -1913 0 obj<>endobj -1914 0 obj<>endobj -1915 0 obj<>endobj -1916 0 obj<>endobj -1917 0 obj<>endobj -1918 0 obj<>endobj -1919 0 obj<>endobj -1920 0 obj<>endobj -1921 0 obj<>endobj -1922 0 obj<>endobj -1923 0 obj<>endobj -1924 0 obj<>endobj -1925 0 obj<>endobj -1926 0 obj<>endobj -1927 0 obj<>endobj -1928 0 obj<>endobj -1929 0 obj<>endobj -1930 0 obj<>endobj -1931 0 obj<>endobj -1932 0 obj<>endobj -1933 0 obj<>endobj -1934 0 obj<>endobj -1935 0 obj<>endobj -1936 0 obj<>endobj -1937 0 obj<>endobj -1938 0 obj<>endobj -1939 0 obj<>endobj -1940 0 obj<>endobj -1941 0 obj<>endobj -1942 0 obj<>endobj -1943 0 obj<>endobj -1944 0 obj<>endobj -1945 0 obj<>endobj -1946 0 obj<>endobj -1947 0 obj<>endobj -1948 0 obj<>endobj -1949 0 obj<>endobj -1950 0 obj<>endobj -1951 0 obj<>endobj -1952 0 obj<>endobj -1953 0 obj<>endobj -1954 0 obj<>endobj -1955 0 obj<>endobj -1956 0 obj<>endobj -1957 0 obj<>endobj -1958 0 obj<>endobj -1959 0 obj<>endobj -1960 0 obj<>endobj -1961 0 obj<>endobj -1962 0 obj<>endobj -1963 0 obj<>endobj -1964 0 obj<>endobj -1965 0 obj<>endobj -1966 0 obj<>endobj -1967 0 obj<>endobj -1968 0 obj<>endobj -1969 0 obj<>endobj -1970 0 obj<>endobj -1971 0 obj<>endobj -1972 0 obj<>endobj -1973 0 obj<>endobj -1974 0 obj<>endobj -1975 0 obj<>endobj -1976 0 obj<>endobj -1977 0 obj<>endobj -1978 0 obj<>endobj -1979 0 obj<>endobj -1980 0 obj<>endobj -1981 0 obj<>endobj -1982 0 obj<>endobj -1983 0 obj<>endobj -1984 0 obj<>endobj -1985 0 obj<>endobj -1986 0 obj<>endobj -1987 0 obj<>endobj -1988 0 obj<>endobj -1989 0 obj<>endobj -1990 0 obj<>endobj -1991 0 obj<>endobj -1992 0 obj<>endobj -1993 0 obj<>endobj -1994 0 obj<>endobj -1995 0 obj<>endobj -1996 0 obj<>endobj -1997 0 obj<>endobj -1998 0 obj<>endobj -1999 0 obj<>endobj -2000 0 obj<>endobj -2001 0 obj<>endobj -2002 0 obj<>endobj -2003 0 obj<>endobj -2004 0 obj<>endobj -2005 0 obj<>endobj -2006 0 obj<>endobj -2007 0 obj<>endobj -2008 0 obj<>endobj -2009 0 obj<>endobj -2010 0 obj<>endobj -2011 0 obj<>endobj -2012 0 obj<>endobj -2013 0 obj<>endobj -2014 0 obj<>endobj -2015 0 obj<>endobj -2016 0 obj<>endobj -2017 0 obj<>endobj -2018 0 obj<>endobj -2019 0 obj<>endobj -2020 0 obj<>endobj -2021 0 obj<>endobj -2022 0 obj<>endobj -2023 0 obj<>endobj -2024 0 obj<>endobj -2025 0 obj<>endobj -2026 0 obj<>endobj -2027 0 obj<>endobj -2028 0 obj<>endobj -2029 0 obj<>endobj -2030 0 obj<>endobj -2031 0 obj<>endobj -2032 0 obj<>endobj -2033 0 obj<>endobj -2034 0 obj<>endobj -2035 0 obj<>endobj -2036 0 obj<>endobj -2037 0 obj<>endobj -2038 0 obj<>endobj -2039 0 obj<>endobj -2040 0 obj<>endobj -2041 0 obj<>endobj -2042 0 obj<>endobj -2043 0 obj<>endobj -2044 0 obj<>endobj -2045 0 obj<>endobj -2046 0 obj<>endobj -2047 0 obj<>endobj -2048 0 obj<>endobj -2049 0 obj<>endobj -2050 0 obj<>endobj -2051 0 obj<>endobj -2052 0 obj<>endobj -2053 0 obj<>endobj -2054 0 obj<>endobj -2055 0 obj<>endobj -2056 0 obj<>endobj -2057 0 obj<>endobj -2058 0 obj<>endobj -2059 0 obj<>endobj -2060 0 obj<>endobj -2061 0 obj<>endobj -2062 0 obj<>endobj -2063 0 obj<>endobj -2064 0 obj<>endobj -2065 0 obj<>endobj -2066 0 obj<>endobj -2067 0 obj<>endobj -2068 0 obj<>endobj -2069 0 obj<>endobj -2070 0 obj<>endobj -2071 0 obj<>endobj -2072 0 obj<>endobj -2073 0 obj<>endobj -2074 0 obj<>endobj -2075 0 obj<>endobj -2076 0 obj<>endobj -2077 0 obj<>endobj -2078 0 obj<>endobj -2079 0 obj<>endobj -2080 0 obj<>endobj -2081 0 obj<>endobj -2082 0 obj<>endobj -2083 0 obj<>endobj -2084 0 obj<>endobj -2085 0 obj<>endobj -2086 0 obj<>endobj -2087 0 obj<>endobj -2088 0 obj<>endobj -2089 0 obj<>endobj -2090 0 obj<>endobj -2091 0 obj<>endobj -2092 0 obj<>endobj -2093 0 obj<>endobj -2094 0 obj<>endobj -2095 0 obj<>endobj -2096 0 obj<>endobj -2097 0 obj<>endobj -2098 0 obj<>endobj -2099 0 obj<>endobj -2100 0 obj<>endobj -2101 0 obj<>endobj -2102 0 obj<>endobj -2103 0 obj<>endobj -2104 0 obj<>endobj -2105 0 obj<>endobj -2106 0 obj<>endobj -2107 0 obj<>endobj -2108 0 obj<>endobj -2109 0 obj<>endobj -2110 0 obj<>endobj -2111 0 obj<>endobj -2112 0 obj<>endobj -2113 0 obj<>endobj -2114 0 obj<>endobj -2115 0 obj<>endobj -2116 0 obj<>endobj -2117 0 obj<>endobj -2118 0 obj<>endobj -2119 0 obj<>endobj -2120 0 obj<>endobj -2121 0 obj<>endobj -2122 0 obj<>endobj -2123 0 obj<>endobj -2124 0 obj<>endobj -2125 0 obj<>1<>8<>9<>13<>14<>16<>20<>24<>36<>37<>39<>41<>43<>60<>63<>66<>69<>70<>73<>83<>88<>91<>93<>104<>121<>134<>143<>146<>147<>151<>154<>156<>157<>159<>162<>166<>170<>172<>]>>>>endobj +ˉxT"0n)NKx$0dhuL mw.ekpoo4 l)Qt*KJ?OCWI: 68 ;Kwzec(K ?R,1%0MI۹{vԲNP e3SN8 Ӵttda臆~ I#B/>ѻXQ $JኌNX_.(uEM7aQ,@K>$j ^,-myyDƸޅwBCYuPDNWqh T7ёkWh5"+*ONjcH KvȇOaOF-w k(T$X1Wh+MFGuP+޿U#&8%/ť;}8\#}[ ʱFMWw%XSm EūnlNJ=V,G?i1JL<w[+H Z'đˬ3 C&cpb(0r`97EgJaf!nzW]p})nB'"1^e:is/rTW]spZE[ {,(!㫭6[Gh(`4ﺻC^!LT+Tí]UK>"md,$\rN$oϓ&lpf_m;=UM>b8xآ9V͛U=+";ryz^NRȈ(30Ppd+;)ec/rξk@>$4d6~oT]ঐO$c@'WWun 6@vhLm;h ?NCJW+㲰]A8 OkQs-NwjhLȢWXA߂ +?lu<=İ$2y/ېnrBʸ؝<:dZ\nd!a=`Pq>a^ۦ3-vXt~F4Cd F/Fle[. |O1ZA\G{ YpٵBtW)RN͈k$GM Ƙ'du@/-u@RW,qhu;BB夅&<3-T\^A6V郍@YB[^H +T/7r6$K!u'Z| _>KRdؚ~ +gܸu|a7p]~1H8.PwhËxp~XmJWNCMyeyd,JI,4{Lqxp?vxxIjdPĆF‹֐ Y!!a߬{;\ ?"28 b$h88&!blﵻ ۄ]1 +Znt5D'>灾Teni3p.ijRri*MxsPn11VF-vְEdז&nkW+F#YyU~r6[5 sb{v/f(ɁRI0*wKcnO$QetL-&jXnM }<ǿnc.)͎!G8l^nn;zugmzk` 0Z$e"Ү4jwv)]8Fkǁzw6کS l ~%`a9tM[;zYQFլ+T;ތnju91{34UD) nc7Voܧ:H6Z8㧗$jNW5h|MS9> +ag-#+?SEfg] e<^(S5 $l&DK>myS]m,Rg r]Wgc0(urf<$IRIَ 7D}G PP>@kg9(pP-zɇ'|$ځ`j ϡRwf5 dǝN.>$gF~00c<{t ^Svk >{:>PSE!ԕY0^fn&,nx"dJڐs47d( +^}쵾BC@%eHL^$qħ*L10. +eRs9Q^P%(y0pL̚8!v&Ljڧ$jekz8,@w1R#iC|wFqvB650[mD7?2߯"} ue'b2_eݑѲ'╟= +]ǷV .‘%0;_6)w 4:zB!Ӊ/}!G,F8L@V1ռuh,Eɔ x|6obQ$z'šdRT虴֖~ٌ(/V^`MS~Fgk?ǟc87(y]ڣn%<{I*Q*EvP/@󱼾ӟerJ }\NuDksJ>f$z*en8ʚci/16g];KS;>ڱt}eBقI$pU^f"x ܸmGU75Ac {tyh)5*kptR{Oz7T""|Z EAa'v>1}1C_H;(xls {;~4heCa 7,4  IZ~ #*׉EO хrhC^8 lEg6!?-(đ\q@ 3!F,@TBlSvMx5jOJvհk87*!?OLH(Sجi޶G#0#X;OuD q5/!3 +SHc.|#9a0p=JH J}IW"u\5{yd ,oO(;Hb^OCl* +yԭ**zX! &IXc2LS ~_\yjt7K\&fJd[>ƘoСQL3qKI͞|bme]B/v͜蒂Uk3Pk CJnESdWOfC{90&+ؔ?ӥ`Oے6l3jĄmuN^bB"ڄт +yA VJs\ywԬZ8<%lVHLoƘ&<8fiէ\m, #~86z_qVȬ)$} nXh괮NcL0iVGQ`ǎX2mf7?ƪC5p}I +&\S(rcIN4"l=t?ZSp/]%mKw>⛅Yh1lguYk9__E65Ol=.|ߞo!zhpEvNKo͖e,xˌPV/:rʉOGwc hĕ/,?3NyܣXF[| MKvdbH79|WLa M=CD=Z<8 r״F7 3(Sa\'_vm( +6LK7sfaH֝YTJ59aCA7,PX0&M0?ߏoH!]<^'y`Ur RxEIS7a^$P(mYKi0O }S#Tupn@TK8nʠPՓq;9%( I4Eie9* b R4&A_{~u|{0񉑤w+*vn] H܉ 0G`pw>)!sYxp o#zqϩpÿM3ftiM Ü)Ol`f0$6d*`LbXyuhZTlj[ f)1tW‡RՖ4ws-8n(GO>0$Z+B7y춐Ca^vԱVR:|dH{<_I~E؍ݳme+,OJٖ6qU@rPhɹ J-Se$^N9>.Y⮻)]eAd&sC@GxW0;iu]ICZn͊|x¿_WSҰc+ZFf3 $?,oME .$g(U_\Y&!RT + n lVqMK=nD ^c߹v/~`w'cJk! dfh=N{\1h2S2. ɾ&:3D ژ3F!QԤyG)$yw+KDWE +]WH +pG ޺B +S9LL-8 d`YOZaR#ZVoʔSLW3yϵ"Mk3?Ĺ%Aδ0tXSm Ө,[nU58\o-j2jZhB9n&{IWSO\[^>y)*yqŎx6RHmwbB[S׫HjfQtG*bxIJݘBW?h.To7xmD`,6!Ί^yFl(LW0 Y5;J\êo3s- WLKs +L$#']98f4d#:.uXߠiCdԮ-DC-\c/_tҽxZe& dE;vYLU|Ptr8kUҒ*~ayu5 @X3:9ׯ-_\`*ԇGex7:h~{,JVKZ'0 ]F@32 چx MqsQ|Ҋs:!O15:@藵i?Q2L%{29xfP]Cһ6u]U0v|5sW,d8R?{iA#t#ȁyg|uw"<+pɊS :".|x=Pc|7~6Gq[IM.hI +cБiJyϋngLX%kRC$1A!y21b@Xs lv(QKgtKx"#tDQwam?0Փvr `%Gfm[ƬN?MѺ,=Ž8Bv9#ޱ8iAUj[:::Zp;&endstream +endobj +2873 0 obj << +/Type /Font +/Subtype /Type1 +/Encoding 6697 0 R +/FirstChar 11 +/LastChar 123 +/Widths 6718 0 R +/BaseFont /IECMEB+CMSSBX10 +/FontDescriptor 2871 0 R +>> endobj +2871 0 obj << +/Ascent 694 +/CapHeight 694 +/Descent -194 +/FontName /IECMEB+CMSSBX10 +/ItalicAngle 0 +/StemV 136 +/XHeight 458 +/FontBBox [-71 -250 1099 780] +/Flags 4 +/CharSet (/ff/fi/fl/exclam/quotedblright/dollar/quoteright/parenleft/parenright/asterisk/plus/comma/hyphen/period/slash/zero/one/two/three/four/five/six/seven/eight/nine/colon/semicolon/equal/question/at/A/B/C/D/E/F/G/H/I/J/K/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/bracketleft/bracketright/a/b/c/d/e/f/g/h/i/j/k/l/m/n/o/p/q/r/s/t/u/v/w/x/y/z/endash) +/FontFile 2872 0 R +>> endobj +6718 0 obj +[642 586 586 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 367 558 0 550 0 0 306 428 428 550 856 306 367 306 550 550 550 550 550 550 550 550 550 550 550 306 306 0 856 0 519 733 733 733 703 794 642 611 733 794 331 519 764 581 978 794 794 703 794 703 611 733 764 733 1039 733 733 672 343 0 343 0 0 0 525 561 489 561 511 336 550 561 256 286 531 256 867 561 550 561 561 372 422 404 561 500 744 500 500 476 550 ] +endobj +2877 0 obj << +/Type /Pages +/Count 6 +/Parent 6719 0 R +/Kids [2866 0 R 2879 0 R 2893 0 R 2971 0 R 3048 0 R 3074 0 R] +>> endobj +3164 0 obj << +/Type /Pages +/Count 6 +/Parent 6719 0 R +/Kids [3113 0 R 3166 0 R 3216 0 R 3271 0 R 3324 0 R 3375 0 R] +>> endobj +3478 0 obj << +/Type /Pages +/Count 6 +/Parent 6719 0 R +/Kids [3428 0 R 3480 0 R 3532 0 R 3578 0 R 3631 0 R 3683 0 R] +>> endobj +3777 0 obj << +/Type /Pages +/Count 6 +/Parent 6719 0 R +/Kids [3734 0 R 3779 0 R 3827 0 R 3863 0 R 3867 0 R 3874 0 R] +>> endobj +3889 0 obj << +/Type /Pages +/Count 6 +/Parent 6719 0 R +/Kids [3880 0 R 3891 0 R 3897 0 R 3908 0 R 3921 0 R 3927 0 R] +>> endobj +3936 0 obj << +/Type /Pages +/Count 6 +/Parent 6719 0 R +/Kids [3932 0 R 3938 0 R 3942 0 R 3949 0 R 3957 0 R 3967 0 R] +>> endobj +3992 0 obj << +/Type /Pages +/Count 6 +/Parent 6720 0 R +/Kids [3985 0 R 3995 0 R 4004 0 R 4010 0 R 4018 0 R 4023 0 R] +>> endobj +4036 0 obj << +/Type /Pages +/Count 6 +/Parent 6720 0 R +/Kids [4030 0 R 4038 0 R 4043 0 R 4051 0 R 4059 0 R 4063 0 R] +>> endobj +4077 0 obj << +/Type /Pages +/Count 6 +/Parent 6720 0 R +/Kids [4072 0 R 4079 0 R 4091 0 R 4099 0 R 4106 0 R 4114 0 R] +>> endobj +4126 0 obj << +/Type /Pages +/Count 6 +/Parent 6720 0 R +/Kids [4120 0 R 4128 0 R 4135 0 R 4144 0 R 4150 0 R 4156 0 R] +>> endobj +4178 0 obj << +/Type /Pages +/Count 6 +/Parent 6720 0 R +/Kids [4168 0 R 4180 0 R 4193 0 R 4201 0 R 4209 0 R 4221 0 R] +>> endobj +4232 0 obj << +/Type /Pages +/Count 6 +/Parent 6720 0 R +/Kids [4229 0 R 4234 0 R 4240 0 R 4251 0 R 4256 0 R 4261 0 R] +>> endobj +4270 0 obj << +/Type /Pages +/Count 6 +/Parent 6721 0 R +/Kids [4265 0 R 4272 0 R 4277 0 R 4284 0 R 4296 0 R 4301 0 R] +>> endobj +4311 0 obj << +/Type /Pages +/Count 6 +/Parent 6721 0 R +/Kids [4306 0 R 4313 0 R 4325 0 R 4332 0 R 4337 0 R 4345 0 R] +>> endobj +4356 0 obj << +/Type /Pages +/Count 6 +/Parent 6721 0 R +/Kids [4351 0 R 4358 0 R 4364 0 R 4370 0 R 4379 0 R 4390 0 R] +>> endobj +4399 0 obj << +/Type /Pages +/Count 6 +/Parent 6721 0 R +/Kids [4395 0 R 4401 0 R 4406 0 R 4414 0 R 4420 0 R 4428 0 R] +>> endobj +4450 0 obj << +/Type /Pages +/Count 6 +/Parent 6721 0 R +/Kids [4439 0 R 4452 0 R 4457 0 R 4462 0 R 4477 0 R 4484 0 R] +>> endobj +4499 0 obj << +/Type /Pages +/Count 6 +/Parent 6721 0 R +/Kids [4491 0 R 4501 0 R 4509 0 R 4517 0 R 4523 0 R 4529 0 R] +>> endobj +4540 0 obj << +/Type /Pages +/Count 6 +/Parent 6722 0 R +/Kids [4535 0 R 4542 0 R 4550 0 R 4559 0 R 4566 0 R 4571 0 R] +>> endobj +4587 0 obj << +/Type /Pages +/Count 6 +/Parent 6722 0 R +/Kids [4577 0 R 4589 0 R 4593 0 R 4602 0 R 4610 0 R 4617 0 R] +>> endobj +4635 0 obj << +/Type /Pages +/Count 6 +/Parent 6722 0 R +/Kids [4627 0 R 4637 0 R 4644 0 R 4651 0 R 4660 0 R 4669 0 R] +>> endobj +4681 0 obj << +/Type /Pages +/Count 6 +/Parent 6722 0 R +/Kids [4677 0 R 4683 0 R 4689 0 R 4694 0 R 4698 0 R 4707 0 R] +>> endobj +4719 0 obj << +/Type /Pages +/Count 6 +/Parent 6722 0 R +/Kids [4715 0 R 4721 0 R 4728 0 R 4733 0 R 4737 0 R 4743 0 R] +>> endobj +4761 0 obj << +/Type /Pages +/Count 6 +/Parent 6722 0 R +/Kids [4749 0 R 4763 0 R 4771 0 R 4778 0 R 4784 0 R 4793 0 R] +>> endobj +4807 0 obj << +/Type /Pages +/Count 6 +/Parent 6723 0 R +/Kids [4799 0 R 4809 0 R 4814 0 R 4820 0 R 4828 0 R 4833 0 R] +>> endobj +4852 0 obj << +/Type /Pages +/Count 6 +/Parent 6723 0 R +/Kids [4839 0 R 4854 0 R 4860 0 R 4866 0 R 4871 0 R 4876 0 R] +>> endobj +4884 0 obj << +/Type /Pages +/Count 6 +/Parent 6723 0 R +/Kids [4881 0 R 4890 0 R 4896 0 R 4901 0 R 4907 0 R 4913 0 R] +>> endobj +4925 0 obj << +/Type /Pages +/Count 6 +/Parent 6723 0 R +/Kids [4918 0 R 4927 0 R 4933 0 R 4938 0 R 4943 0 R 4949 0 R] +>> endobj +4962 0 obj << +/Type /Pages +/Count 6 +/Parent 6723 0 R +/Kids [4959 0 R 4964 0 R 4970 0 R 4975 0 R 4980 0 R 4985 0 R] +>> endobj +4995 0 obj << +/Type /Pages +/Count 6 +/Parent 6723 0 R +/Kids [4991 0 R 4997 0 R 5003 0 R 5008 0 R 5014 0 R 5035 0 R] +>> endobj +5043 0 obj << +/Type /Pages +/Count 6 +/Parent 6724 0 R +/Kids [5040 0 R 5045 0 R 5051 0 R 5056 0 R 5060 0 R 5064 0 R] +>> endobj +5083 0 obj << +/Type /Pages +/Count 6 +/Parent 6724 0 R +/Kids [5074 0 R 5085 0 R 5091 0 R 5097 0 R 5106 0 R 5116 0 R] +>> endobj +5131 0 obj << +/Type /Pages +/Count 6 +/Parent 6724 0 R +/Kids [5127 0 R 5133 0 R 5140 0 R 5146 0 R 5153 0 R 5160 0 R] +>> endobj +5179 0 obj << +/Type /Pages +/Count 6 +/Parent 6724 0 R +/Kids [5172 0 R 5183 0 R 5192 0 R 5197 0 R 5206 0 R 5214 0 R] +>> endobj +5224 0 obj << +/Type /Pages +/Count 6 +/Parent 6724 0 R +/Kids [5219 0 R 5228 0 R 5238 0 R 5248 0 R 5257 0 R 5268 0 R] +>> endobj +5277 0 obj << +/Type /Pages +/Count 6 +/Parent 6724 0 R +/Kids [5273 0 R 5279 0 R 5287 0 R 5292 0 R 5298 0 R 5305 0 R] +>> endobj +5326 0 obj << +/Type /Pages +/Count 6 +/Parent 6725 0 R +/Kids [5317 0 R 5330 0 R 5338 0 R 5346 0 R 5355 0 R 5362 0 R] +>> endobj +5373 0 obj << +/Type /Pages +/Count 6 +/Parent 6725 0 R +/Kids [5369 0 R 5375 0 R 5382 0 R 5387 0 R 5396 0 R 5401 0 R] +>> endobj +5415 0 obj << +/Type /Pages +/Count 6 +/Parent 6725 0 R +/Kids [5406 0 R 5417 0 R 5427 0 R 5433 0 R 5446 0 R 5452 0 R] +>> endobj +5464 0 obj << +/Type /Pages +/Count 6 +/Parent 6725 0 R +/Kids [5457 0 R 5466 0 R 5472 0 R 5479 0 R 5485 0 R 5492 0 R] +>> endobj +5506 0 obj << +/Type /Pages +/Count 6 +/Parent 6725 0 R +/Kids [5499 0 R 5508 0 R 5515 0 R 5529 0 R 5546 0 R 5560 0 R] +>> endobj +5600 0 obj << +/Type /Pages +/Count 6 +/Parent 6725 0 R +/Kids [5574 0 R 5602 0 R 5612 0 R 5621 0 R 5627 0 R 5633 0 R] +>> endobj +5649 0 obj << +/Type /Pages +/Count 6 +/Parent 6726 0 R +/Kids [5640 0 R 5651 0 R 5657 0 R 5662 0 R 5666 0 R 5670 0 R] +>> endobj +5677 0 obj << +/Type /Pages +/Count 6 +/Parent 6726 0 R +/Kids [5674 0 R 5679 0 R 5683 0 R 5688 0 R 5692 0 R 5712 0 R] +>> endobj +5723 0 obj << +/Type /Pages +/Count 6 +/Parent 6726 0 R +/Kids [5717 0 R 5726 0 R 5734 0 R 5742 0 R 5750 0 R 5758 0 R] +>> endobj +5772 0 obj << +/Type /Pages +/Count 6 +/Parent 6726 0 R +/Kids [5766 0 R 5774 0 R 5782 0 R 5791 0 R 5801 0 R 5811 0 R] +>> endobj +5824 0 obj << +/Type /Pages +/Count 6 +/Parent 6726 0 R +/Kids [5818 0 R 5826 0 R 5833 0 R 5842 0 R 5850 0 R 5856 0 R] +>> endobj +5872 0 obj << +/Type /Pages +/Count 6 +/Parent 6726 0 R +/Kids [5866 0 R 5874 0 R 5878 0 R 5886 0 R 5895 0 R 5901 0 R] +>> endobj +5910 0 obj << +/Type /Pages +/Count 6 +/Parent 6727 0 R +/Kids [5905 0 R 5912 0 R 5924 0 R 5931 0 R 5937 0 R 5941 0 R] +>> endobj +5956 0 obj << +/Type /Pages +/Count 6 +/Parent 6727 0 R +/Kids [5951 0 R 5958 0 R 5965 0 R 5972 0 R 5981 0 R 5995 0 R] +>> endobj +6011 0 obj << +/Type /Pages +/Count 6 +/Parent 6727 0 R +/Kids [6004 0 R 6013 0 R 6020 0 R 6027 0 R 6037 0 R 6053 0 R] +>> endobj +6078 0 obj << +/Type /Pages +/Count 6 +/Parent 6727 0 R +/Kids [6057 0 R 6080 0 R 6094 0 R 6102 0 R 6110 0 R 6118 0 R] +>> endobj +6130 0 obj << +/Type /Pages +/Count 6 +/Parent 6727 0 R +/Kids [6127 0 R 6132 0 R 6140 0 R 6146 0 R 6150 0 R 6156 0 R] +>> endobj +6167 0 obj << +/Type /Pages +/Count 6 +/Parent 6727 0 R +/Kids [6162 0 R 6169 0 R 6173 0 R 6177 0 R 6184 0 R 6188 0 R] +>> endobj +6202 0 obj << +/Type /Pages +/Count 6 +/Parent 6728 0 R +/Kids [6196 0 R 6204 0 R 6213 0 R 6221 0 R 6225 0 R 6231 0 R] +>> endobj +6243 0 obj << +/Type /Pages +/Count 6 +/Parent 6728 0 R +/Kids [6237 0 R 6245 0 R 6250 0 R 6256 0 R 6260 0 R 6267 0 R] +>> endobj +6278 0 obj << +/Type /Pages +/Count 6 +/Parent 6728 0 R +/Kids [6275 0 R 6280 0 R 6288 0 R 6296 0 R 6302 0 R 6307 0 R] +>> endobj +6319 0 obj << +/Type /Pages +/Count 6 +/Parent 6728 0 R +/Kids [6311 0 R 6321 0 R 6327 0 R 6333 0 R 6340 0 R 6368 0 R] +>> endobj +6378 0 obj << +/Type /Pages +/Count 6 +/Parent 6728 0 R +/Kids [6375 0 R 6380 0 R 6386 0 R 6396 0 R 6404 0 R 6413 0 R] +>> endobj +6423 0 obj << +/Type /Pages +/Count 6 +/Parent 6728 0 R +/Kids [6417 0 R 6425 0 R 6433 0 R 6439 0 R 6455 0 R 6464 0 R] +>> endobj +6482 0 obj << +/Type /Pages +/Count 6 +/Parent 6729 0 R +/Kids [6472 0 R 6484 0 R 6491 0 R 6501 0 R 6508 0 R 6512 0 R] +>> endobj +6543 0 obj << +/Type /Pages +/Count 6 +/Parent 6729 0 R +/Kids [6531 0 R 6545 0 R 6552 0 R 6558 0 R 6564 0 R 6572 0 R] +>> endobj +6584 0 obj << +/Type /Pages +/Count 6 +/Parent 6729 0 R +/Kids [6577 0 R 6586 0 R 6599 0 R 6611 0 R 6621 0 R 6630 0 R] +>> endobj +6645 0 obj << +/Type /Pages +/Count 4 +/Parent 6729 0 R +/Kids [6637 0 R 6647 0 R 6657 0 R 6662 0 R] +>> endobj +6719 0 obj << +/Type /Pages +/Count 36 +/Parent 6730 0 R +/Kids [2877 0 R 3164 0 R 3478 0 R 3777 0 R 3889 0 R 3936 0 R] +>> endobj +6720 0 obj << +/Type /Pages +/Count 36 +/Parent 6730 0 R +/Kids [3992 0 R 4036 0 R 4077 0 R 4126 0 R 4178 0 R 4232 0 R] +>> endobj +6721 0 obj << +/Type /Pages +/Count 36 +/Parent 6730 0 R +/Kids [4270 0 R 4311 0 R 4356 0 R 4399 0 R 4450 0 R 4499 0 R] +>> endobj +6722 0 obj << +/Type /Pages +/Count 36 +/Parent 6730 0 R +/Kids [4540 0 R 4587 0 R 4635 0 R 4681 0 R 4719 0 R 4761 0 R] +>> endobj +6723 0 obj << +/Type /Pages +/Count 36 +/Parent 6730 0 R +/Kids [4807 0 R 4852 0 R 4884 0 R 4925 0 R 4962 0 R 4995 0 R] +>> endobj +6724 0 obj << +/Type /Pages +/Count 36 +/Parent 6730 0 R +/Kids [5043 0 R 5083 0 R 5131 0 R 5179 0 R 5224 0 R 5277 0 R] +>> endobj +6725 0 obj << +/Type /Pages +/Count 36 +/Parent 6731 0 R +/Kids [5326 0 R 5373 0 R 5415 0 R 5464 0 R 5506 0 R 5600 0 R] +>> endobj +6726 0 obj << +/Type /Pages +/Count 36 +/Parent 6731 0 R +/Kids [5649 0 R 5677 0 R 5723 0 R 5772 0 R 5824 0 R 5872 0 R] +>> endobj +6727 0 obj << +/Type /Pages +/Count 36 +/Parent 6731 0 R +/Kids [5910 0 R 5956 0 R 6011 0 R 6078 0 R 6130 0 R 6167 0 R] +>> endobj +6728 0 obj << +/Type /Pages +/Count 36 +/Parent 6731 0 R +/Kids [6202 0 R 6243 0 R 6278 0 R 6319 0 R 6378 0 R 6423 0 R] +>> endobj +6729 0 obj << +/Type /Pages +/Count 22 +/Parent 6731 0 R +/Kids [6482 0 R 6543 0 R 6584 0 R 6645 0 R] +>> endobj +6730 0 obj << +/Type /Pages +/Count 216 +/Parent 6732 0 R +/Kids [6719 0 R 6720 0 R 6721 0 R 6722 0 R 6723 0 R 6724 0 R] +>> endobj +6731 0 obj << +/Type /Pages +/Count 166 +/Parent 6732 0 R +/Kids [6725 0 R 6726 0 R 6727 0 R 6728 0 R 6729 0 R] +>> endobj +6732 0 obj << +/Type /Pages +/Count 382 +/Kids [6730 0 R 6731 0 R] +>> endobj +6733 0 obj << +/Type /Outlines +/First 7 0 R +/Last 2615 0 R +/Count 6 +>> endobj +2863 0 obj << +/Title 2864 0 R +/A 2861 0 R +/Parent 2851 0 R +/Prev 2859 0 R +>> endobj +2859 0 obj << +/Title 2860 0 R +/A 2857 0 R +/Parent 2851 0 R +/Prev 2855 0 R +/Next 2863 0 R +>> endobj +2855 0 obj << +/Title 2856 0 R +/A 2853 0 R +/Parent 2851 0 R +/Next 2859 0 R +>> endobj +2851 0 obj << +/Title 2852 0 R +/A 2849 0 R +/Parent 2615 0 R +/Prev 2843 0 R +/First 2855 0 R +/Last 2863 0 R +/Count -3 +>> endobj +2847 0 obj << +/Title 2848 0 R +/A 2845 0 R +/Parent 2843 0 R +>> endobj +2843 0 obj << +/Title 2844 0 R +/A 2841 0 R +/Parent 2615 0 R +/Prev 2791 0 R +/Next 2851 0 R +/First 2847 0 R +/Last 2847 0 R +/Count -1 +>> endobj +2839 0 obj << +/Title 2840 0 R +/A 2837 0 R +/Parent 2791 0 R +/Prev 2835 0 R +>> endobj +2835 0 obj << +/Title 2836 0 R +/A 2833 0 R +/Parent 2791 0 R +/Prev 2831 0 R +/Next 2839 0 R +>> endobj +2831 0 obj << +/Title 2832 0 R +/A 2829 0 R +/Parent 2791 0 R +/Prev 2827 0 R +/Next 2835 0 R +>> endobj +2827 0 obj << +/Title 2828 0 R +/A 2825 0 R +/Parent 2791 0 R +/Prev 2823 0 R +/Next 2831 0 R +>> endobj +2823 0 obj << +/Title 2824 0 R +/A 2821 0 R +/Parent 2791 0 R +/Prev 2819 0 R +/Next 2827 0 R +>> endobj +2819 0 obj << +/Title 2820 0 R +/A 2817 0 R +/Parent 2791 0 R +/Prev 2815 0 R +/Next 2823 0 R +>> endobj +2815 0 obj << +/Title 2816 0 R +/A 2813 0 R +/Parent 2791 0 R +/Prev 2811 0 R +/Next 2819 0 R +>> endobj +2811 0 obj << +/Title 2812 0 R +/A 2809 0 R +/Parent 2791 0 R +/Prev 2807 0 R +/Next 2815 0 R +>> endobj +2807 0 obj << +/Title 2808 0 R +/A 2805 0 R +/Parent 2791 0 R +/Prev 2803 0 R +/Next 2811 0 R +>> endobj +2803 0 obj << +/Title 2804 0 R +/A 2801 0 R +/Parent 2791 0 R +/Prev 2799 0 R +/Next 2807 0 R +>> endobj +2799 0 obj << +/Title 2800 0 R +/A 2797 0 R +/Parent 2791 0 R +/Prev 2795 0 R +/Next 2803 0 R +>> endobj +2795 0 obj << +/Title 2796 0 R +/A 2793 0 R +/Parent 2791 0 R +/Next 2799 0 R +>> endobj +2791 0 obj << +/Title 2792 0 R +/A 2789 0 R +/Parent 2615 0 R +/Prev 2723 0 R +/Next 2843 0 R +/First 2795 0 R +/Last 2839 0 R +/Count -12 +>> endobj +2787 0 obj << +/Title 2788 0 R +/A 2785 0 R +/Parent 2723 0 R +/Prev 2783 0 R +>> endobj +2783 0 obj << +/Title 2784 0 R +/A 2781 0 R +/Parent 2723 0 R +/Prev 2775 0 R +/Next 2787 0 R +>> endobj +2779 0 obj << +/Title 2780 0 R +/A 2777 0 R +/Parent 2775 0 R +>> endobj +2775 0 obj << +/Title 2776 0 R +/A 2773 0 R +/Parent 2723 0 R +/Prev 2747 0 R +/Next 2783 0 R +/First 2779 0 R +/Last 2779 0 R +/Count -1 +>> endobj +2771 0 obj << +/Title 2772 0 R +/A 2769 0 R +/Parent 2747 0 R +/Prev 2767 0 R +>> endobj +2767 0 obj << +/Title 2768 0 R +/A 2765 0 R +/Parent 2747 0 R +/Prev 2763 0 R +/Next 2771 0 R +>> endobj +2763 0 obj << +/Title 2764 0 R +/A 2761 0 R +/Parent 2747 0 R +/Prev 2759 0 R +/Next 2767 0 R +>> endobj +2759 0 obj << +/Title 2760 0 R +/A 2757 0 R +/Parent 2747 0 R +/Prev 2755 0 R +/Next 2763 0 R +>> endobj +2755 0 obj << +/Title 2756 0 R +/A 2753 0 R +/Parent 2747 0 R +/Prev 2751 0 R +/Next 2759 0 R +>> endobj +2751 0 obj << +/Title 2752 0 R +/A 2749 0 R +/Parent 2747 0 R +/Next 2755 0 R +>> endobj +2747 0 obj << +/Title 2748 0 R +/A 2745 0 R +/Parent 2723 0 R +/Prev 2731 0 R +/Next 2775 0 R +/First 2751 0 R +/Last 2771 0 R +/Count -6 +>> endobj +2743 0 obj << +/Title 2744 0 R +/A 2741 0 R +/Parent 2731 0 R +/Prev 2739 0 R +>> endobj +2739 0 obj << +/Title 2740 0 R +/A 2737 0 R +/Parent 2731 0 R +/Prev 2735 0 R +/Next 2743 0 R +>> endobj +2735 0 obj << +/Title 2736 0 R +/A 2733 0 R +/Parent 2731 0 R +/Next 2739 0 R +>> endobj +2731 0 obj << +/Title 2732 0 R +/A 2729 0 R +/Parent 2723 0 R +/Prev 2727 0 R +/Next 2747 0 R +/First 2735 0 R +/Last 2743 0 R +/Count -3 +>> endobj +2727 0 obj << +/Title 2728 0 R +/A 2725 0 R +/Parent 2723 0 R +/Next 2731 0 R +>> endobj +2723 0 obj << +/Title 2724 0 R +/A 2721 0 R +/Parent 2615 0 R +/Prev 2683 0 R +/Next 2791 0 R +/First 2727 0 R +/Last 2787 0 R +/Count -6 +>> endobj +2719 0 obj << +/Title 2720 0 R +/A 2717 0 R +/Parent 2711 0 R +/Prev 2715 0 R +>> endobj +2715 0 obj << +/Title 2716 0 R +/A 2713 0 R +/Parent 2711 0 R +/Next 2719 0 R +>> endobj +2711 0 obj << +/Title 2712 0 R +/A 2709 0 R +/Parent 2683 0 R +/Prev 2703 0 R +/First 2715 0 R +/Last 2719 0 R +/Count -2 +>> endobj +2707 0 obj << +/Title 2708 0 R +/A 2705 0 R +/Parent 2703 0 R +>> endobj +2703 0 obj << +/Title 2704 0 R +/A 2701 0 R +/Parent 2683 0 R +/Prev 2699 0 R +/Next 2711 0 R +/First 2707 0 R +/Last 2707 0 R +/Count -1 +>> endobj +2699 0 obj << +/Title 2700 0 R +/A 2697 0 R +/Parent 2683 0 R +/Prev 2695 0 R +/Next 2703 0 R +>> endobj +2695 0 obj << +/Title 2696 0 R +/A 2693 0 R +/Parent 2683 0 R +/Prev 2691 0 R +/Next 2699 0 R +>> endobj +2691 0 obj << +/Title 2692 0 R +/A 2689 0 R +/Parent 2683 0 R +/Prev 2687 0 R +/Next 2695 0 R +>> endobj +2687 0 obj << +/Title 2688 0 R +/A 2685 0 R +/Parent 2683 0 R +/Next 2691 0 R +>> endobj +2683 0 obj << +/Title 2684 0 R +/A 2681 0 R +/Parent 2615 0 R +/Prev 2619 0 R +/Next 2723 0 R +/First 2687 0 R +/Last 2711 0 R +/Count -6 +>> endobj +2679 0 obj << +/Title 2680 0 R +/A 2677 0 R +/Parent 2619 0 R +/Prev 2667 0 R +>> endobj +2675 0 obj << +/Title 2676 0 R +/A 2673 0 R +/Parent 2667 0 R +/Prev 2671 0 R +>> endobj +2671 0 obj << +/Title 2672 0 R +/A 2669 0 R +/Parent 2667 0 R +/Next 2675 0 R +>> endobj +2667 0 obj << +/Title 2668 0 R +/A 2665 0 R +/Parent 2619 0 R +/Prev 2651 0 R +/Next 2679 0 R +/First 2671 0 R +/Last 2675 0 R +/Count -2 +>> endobj +2663 0 obj << +/Title 2664 0 R +/A 2661 0 R +/Parent 2655 0 R +/Prev 2659 0 R +>> endobj +2659 0 obj << +/Title 2660 0 R +/A 2657 0 R +/Parent 2655 0 R +/Next 2663 0 R +>> endobj +2655 0 obj << +/Title 2656 0 R +/A 2653 0 R +/Parent 2651 0 R +/First 2659 0 R +/Last 2663 0 R +/Count -2 +>> endobj +2651 0 obj << +/Title 2652 0 R +/A 2649 0 R +/Parent 2619 0 R +/Prev 2647 0 R +/Next 2667 0 R +/First 2655 0 R +/Last 2655 0 R +/Count -1 +>> endobj +2647 0 obj << +/Title 2648 0 R +/A 2645 0 R +/Parent 2619 0 R +/Prev 2643 0 R +/Next 2651 0 R +>> endobj +2643 0 obj << +/Title 2644 0 R +/A 2641 0 R +/Parent 2619 0 R +/Prev 2623 0 R +/Next 2647 0 R +>> endobj +2639 0 obj << +/Title 2640 0 R +/A 2637 0 R +/Parent 2631 0 R +/Prev 2635 0 R +>> endobj +2635 0 obj << +/Title 2636 0 R +/A 2633 0 R +/Parent 2631 0 R +/Next 2639 0 R +>> endobj +2631 0 obj << +/Title 2632 0 R +/A 2629 0 R +/Parent 2623 0 R +/Prev 2627 0 R +/First 2635 0 R +/Last 2639 0 R +/Count -2 +>> endobj +2627 0 obj << +/Title 2628 0 R +/A 2625 0 R +/Parent 2623 0 R +/Next 2631 0 R +>> endobj +2623 0 obj << +/Title 2624 0 R +/A 2621 0 R +/Parent 2619 0 R +/Next 2643 0 R +/First 2627 0 R +/Last 2631 0 R +/Count -2 +>> endobj +2619 0 obj << +/Title 2620 0 R +/A 2617 0 R +/Parent 2615 0 R +/Next 2683 0 R +/First 2623 0 R +/Last 2679 0 R +/Count -6 +>> endobj +2615 0 obj << +/Title 2616 0 R +/A 2613 0 R +/Parent 6733 0 R +/Prev 2539 0 R +/First 2619 0 R +/Last 2851 0 R +/Count -6 +>> endobj +2611 0 obj << +/Title 2612 0 R +/A 2609 0 R +/Parent 2587 0 R +/Prev 2607 0 R +>> endobj +2607 0 obj << +/Title 2608 0 R +/A 2605 0 R +/Parent 2587 0 R +/Prev 2603 0 R +/Next 2611 0 R +>> endobj +2603 0 obj << +/Title 2604 0 R +/A 2601 0 R +/Parent 2587 0 R +/Prev 2599 0 R +/Next 2607 0 R +>> endobj +2599 0 obj << +/Title 2600 0 R +/A 2597 0 R +/Parent 2587 0 R +/Prev 2595 0 R +/Next 2603 0 R +>> endobj +2595 0 obj << +/Title 2596 0 R +/A 2593 0 R +/Parent 2587 0 R +/Prev 2591 0 R +/Next 2599 0 R +>> endobj +2591 0 obj << +/Title 2592 0 R +/A 2589 0 R +/Parent 2587 0 R +/Next 2595 0 R +>> endobj +2587 0 obj << +/Title 2588 0 R +/A 2585 0 R +/Parent 2539 0 R +/Prev 2563 0 R +/First 2591 0 R +/Last 2611 0 R +/Count -6 +>> endobj +2583 0 obj << +/Title 2584 0 R +/A 2581 0 R +/Parent 2563 0 R +/Prev 2579 0 R +>> endobj +2579 0 obj << +/Title 2580 0 R +/A 2577 0 R +/Parent 2563 0 R +/Prev 2575 0 R +/Next 2583 0 R +>> endobj +2575 0 obj << +/Title 2576 0 R +/A 2573 0 R +/Parent 2563 0 R +/Prev 2571 0 R +/Next 2579 0 R +>> endobj +2571 0 obj << +/Title 2572 0 R +/A 2569 0 R +/Parent 2563 0 R +/Prev 2567 0 R +/Next 2575 0 R +>> endobj +2567 0 obj << +/Title 2568 0 R +/A 2565 0 R +/Parent 2563 0 R +/Next 2571 0 R +>> endobj +2563 0 obj << +/Title 2564 0 R +/A 2561 0 R +/Parent 2539 0 R +/Prev 2543 0 R +/Next 2587 0 R +/First 2567 0 R +/Last 2583 0 R +/Count -5 +>> endobj +2559 0 obj << +/Title 2560 0 R +/A 2557 0 R +/Parent 2543 0 R +/Prev 2555 0 R +>> endobj +2555 0 obj << +/Title 2556 0 R +/A 2553 0 R +/Parent 2543 0 R +/Prev 2551 0 R +/Next 2559 0 R +>> endobj +2551 0 obj << +/Title 2552 0 R +/A 2549 0 R +/Parent 2543 0 R +/Prev 2547 0 R +/Next 2555 0 R +>> endobj +2547 0 obj << +/Title 2548 0 R +/A 2545 0 R +/Parent 2543 0 R +/Next 2551 0 R +>> endobj +2543 0 obj << +/Title 2544 0 R +/A 2541 0 R +/Parent 2539 0 R +/Next 2563 0 R +/First 2547 0 R +/Last 2559 0 R +/Count -4 +>> endobj +2539 0 obj << +/Title 2540 0 R +/A 2537 0 R +/Parent 6733 0 R +/Prev 2423 0 R +/Next 2615 0 R +/First 2543 0 R +/Last 2587 0 R +/Count -3 +>> endobj +2535 0 obj << +/Title 2536 0 R +/A 2533 0 R +/Parent 2495 0 R +/Prev 2531 0 R +>> endobj +2531 0 obj << +/Title 2532 0 R +/A 2529 0 R +/Parent 2495 0 R +/Prev 2527 0 R +/Next 2535 0 R +>> endobj +2527 0 obj << +/Title 2528 0 R +/A 2525 0 R +/Parent 2495 0 R +/Prev 2523 0 R +/Next 2531 0 R +>> endobj +2523 0 obj << +/Title 2524 0 R +/A 2521 0 R +/Parent 2495 0 R +/Prev 2519 0 R +/Next 2527 0 R +>> endobj +2519 0 obj << +/Title 2520 0 R +/A 2517 0 R +/Parent 2495 0 R +/Prev 2515 0 R +/Next 2523 0 R +>> endobj +2515 0 obj << +/Title 2516 0 R +/A 2513 0 R +/Parent 2495 0 R +/Prev 2511 0 R +/Next 2519 0 R +>> endobj +2511 0 obj << +/Title 2512 0 R +/A 2509 0 R +/Parent 2495 0 R +/Prev 2507 0 R +/Next 2515 0 R +>> endobj +2507 0 obj << +/Title 2508 0 R +/A 2505 0 R +/Parent 2495 0 R +/Prev 2503 0 R +/Next 2511 0 R +>> endobj +2503 0 obj << +/Title 2504 0 R +/A 2501 0 R +/Parent 2495 0 R +/Prev 2499 0 R +/Next 2507 0 R +>> endobj +2499 0 obj << +/Title 2500 0 R +/A 2497 0 R +/Parent 2495 0 R +/Next 2503 0 R +>> endobj +2495 0 obj << +/Title 2496 0 R +/A 2493 0 R +/Parent 2491 0 R +/First 2499 0 R +/Last 2535 0 R +/Count -10 +>> endobj +2491 0 obj << +/Title 2492 0 R +/A 2489 0 R +/Parent 2423 0 R +/Prev 2443 0 R +/First 2495 0 R +/Last 2495 0 R +/Count -1 +>> endobj +2487 0 obj << +/Title 2488 0 R +/A 2485 0 R +/Parent 2479 0 R +/Prev 2483 0 R +>> endobj +2483 0 obj << +/Title 2484 0 R +/A 2481 0 R +/Parent 2479 0 R +/Next 2487 0 R +>> endobj +2479 0 obj << +/Title 2480 0 R +/A 2477 0 R +/Parent 2443 0 R +/Prev 2447 0 R +/First 2483 0 R +/Last 2487 0 R +/Count -2 +>> endobj +2475 0 obj << +/Title 2476 0 R +/A 2473 0 R +/Parent 2447 0 R +/Prev 2451 0 R +>> endobj +2471 0 obj << +/Title 2472 0 R +/A 2469 0 R +/Parent 2451 0 R +/Prev 2467 0 R +>> endobj +2467 0 obj << +/Title 2468 0 R +/A 2465 0 R +/Parent 2451 0 R +/Prev 2463 0 R +/Next 2471 0 R +>> endobj +2463 0 obj << +/Title 2464 0 R +/A 2461 0 R +/Parent 2451 0 R +/Prev 2459 0 R +/Next 2467 0 R +>> endobj +2459 0 obj << +/Title 2460 0 R +/A 2457 0 R +/Parent 2451 0 R +/Prev 2455 0 R +/Next 2463 0 R +>> endobj +2455 0 obj << +/Title 2456 0 R +/A 2453 0 R +/Parent 2451 0 R +/Next 2459 0 R +>> endobj +2451 0 obj << +/Title 2452 0 R +/A 2449 0 R +/Parent 2447 0 R +/Next 2475 0 R +/First 2455 0 R +/Last 2471 0 R +/Count -5 +>> endobj +2447 0 obj << +/Title 2448 0 R +/A 2445 0 R +/Parent 2443 0 R +/Next 2479 0 R +/First 2451 0 R +/Last 2475 0 R +/Count -2 +>> endobj +2443 0 obj << +/Title 2444 0 R +/A 2441 0 R +/Parent 2423 0 R +/Prev 2427 0 R +/Next 2491 0 R +/First 2447 0 R +/Last 2479 0 R +/Count -2 +>> endobj +2439 0 obj << +/Title 2440 0 R +/A 2437 0 R +/Parent 2427 0 R +/Prev 2435 0 R +>> endobj +2435 0 obj << +/Title 2436 0 R +/A 2433 0 R +/Parent 2427 0 R +/Prev 2431 0 R +/Next 2439 0 R +>> endobj +2431 0 obj << +/Title 2432 0 R +/A 2429 0 R +/Parent 2427 0 R +/Next 2435 0 R +>> endobj +2427 0 obj << +/Title 2428 0 R +/A 2425 0 R +/Parent 2423 0 R +/Next 2443 0 R +/First 2431 0 R +/Last 2439 0 R +/Count -3 +>> endobj +2423 0 obj << +/Title 2424 0 R +/A 2421 0 R +/Parent 6733 0 R +/Prev 455 0 R +/Next 2539 0 R +/First 2427 0 R +/Last 2491 0 R +/Count -3 +>> endobj +2419 0 obj << +/Title 2420 0 R +/A 2417 0 R +/Parent 2415 0 R +>> endobj +2415 0 obj << +/Title 2416 0 R +/A 2413 0 R +/Parent 455 0 R +/Prev 2403 0 R +/First 2419 0 R +/Last 2419 0 R +/Count -1 +>> endobj +2411 0 obj << +/Title 2412 0 R +/A 2409 0 R +/Parent 2403 0 R +/Prev 2407 0 R +>> endobj +2407 0 obj << +/Title 2408 0 R +/A 2405 0 R +/Parent 2403 0 R +/Next 2411 0 R +>> endobj +2403 0 obj << +/Title 2404 0 R +/A 2401 0 R +/Parent 455 0 R +/Prev 2379 0 R +/Next 2415 0 R +/First 2407 0 R +/Last 2411 0 R +/Count -2 +>> endobj +2399 0 obj << +/Title 2400 0 R +/A 2397 0 R +/Parent 2379 0 R +/Prev 2395 0 R +>> endobj +2395 0 obj << +/Title 2396 0 R +/A 2393 0 R +/Parent 2379 0 R +/Prev 2391 0 R +/Next 2399 0 R +>> endobj +2391 0 obj << +/Title 2392 0 R +/A 2389 0 R +/Parent 2379 0 R +/Prev 2387 0 R +/Next 2395 0 R +>> endobj +2387 0 obj << +/Title 2388 0 R +/A 2385 0 R +/Parent 2379 0 R +/Prev 2383 0 R +/Next 2391 0 R +>> endobj +2383 0 obj << +/Title 2384 0 R +/A 2381 0 R +/Parent 2379 0 R +/Next 2387 0 R +>> endobj +2379 0 obj << +/Title 2380 0 R +/A 2377 0 R +/Parent 455 0 R +/Prev 2307 0 R +/Next 2403 0 R +/First 2383 0 R +/Last 2399 0 R +/Count -5 +>> endobj +2375 0 obj << +/Title 2376 0 R +/A 2373 0 R +/Parent 2363 0 R +/Prev 2371 0 R +>> endobj +2371 0 obj << +/Title 2372 0 R +/A 2369 0 R +/Parent 2363 0 R +/Prev 2367 0 R +/Next 2375 0 R +>> endobj +2367 0 obj << +/Title 2368 0 R +/A 2365 0 R +/Parent 2363 0 R +/Next 2371 0 R +>> endobj +2363 0 obj << +/Title 2364 0 R +/A 2361 0 R +/Parent 2307 0 R +/Prev 2339 0 R +/First 2367 0 R +/Last 2375 0 R +/Count -3 +>> endobj +2359 0 obj << +/Title 2360 0 R +/A 2357 0 R +/Parent 2339 0 R +/Prev 2355 0 R +>> endobj +2355 0 obj << +/Title 2356 0 R +/A 2353 0 R +/Parent 2339 0 R +/Prev 2351 0 R +/Next 2359 0 R +>> endobj +2351 0 obj << +/Title 2352 0 R +/A 2349 0 R +/Parent 2339 0 R +/Prev 2347 0 R +/Next 2355 0 R +>> endobj +2347 0 obj << +/Title 2348 0 R +/A 2345 0 R +/Parent 2339 0 R +/Prev 2343 0 R +/Next 2351 0 R +>> endobj +2343 0 obj << +/Title 2344 0 R +/A 2341 0 R +/Parent 2339 0 R +/Next 2347 0 R +>> endobj +2339 0 obj << +/Title 2340 0 R +/A 2337 0 R +/Parent 2307 0 R +/Prev 2319 0 R +/Next 2363 0 R +/First 2343 0 R +/Last 2359 0 R +/Count -5 +>> endobj +2335 0 obj << +/Title 2336 0 R +/A 2333 0 R +/Parent 2319 0 R +/Prev 2331 0 R +>> endobj +2331 0 obj << +/Title 2332 0 R +/A 2329 0 R +/Parent 2319 0 R +/Prev 2327 0 R +/Next 2335 0 R +>> endobj +2327 0 obj << +/Title 2328 0 R +/A 2325 0 R +/Parent 2319 0 R +/Prev 2323 0 R +/Next 2331 0 R +>> endobj +2323 0 obj << +/Title 2324 0 R +/A 2321 0 R +/Parent 2319 0 R +/Next 2327 0 R +>> endobj +2319 0 obj << +/Title 2320 0 R +/A 2317 0 R +/Parent 2307 0 R +/Prev 2315 0 R +/Next 2339 0 R +/First 2323 0 R +/Last 2335 0 R +/Count -4 +>> endobj +2315 0 obj << +/Title 2316 0 R +/A 2313 0 R +/Parent 2307 0 R +/Prev 2311 0 R +/Next 2319 0 R +>> endobj +2311 0 obj << +/Title 2312 0 R +/A 2309 0 R +/Parent 2307 0 R +/Next 2315 0 R +>> endobj +2307 0 obj << +/Title 2308 0 R +/A 2305 0 R +/Parent 455 0 R +/Prev 2239 0 R +/Next 2379 0 R +/First 2311 0 R +/Last 2363 0 R +/Count -5 +>> endobj +2303 0 obj << +/Title 2304 0 R +/A 2301 0 R +/Parent 2299 0 R +>> endobj +2299 0 obj << +/Title 2300 0 R +/A 2297 0 R +/Parent 2239 0 R +/Prev 2247 0 R +/First 2303 0 R +/Last 2303 0 R +/Count -1 +>> endobj +2295 0 obj << +/Title 2296 0 R +/A 2293 0 R +/Parent 2279 0 R +/Prev 2291 0 R +>> endobj +2291 0 obj << +/Title 2292 0 R +/A 2289 0 R +/Parent 2279 0 R +/Prev 2287 0 R +/Next 2295 0 R +>> endobj +2287 0 obj << +/Title 2288 0 R +/A 2285 0 R +/Parent 2279 0 R +/Prev 2283 0 R +/Next 2291 0 R +>> endobj +2283 0 obj << +/Title 2284 0 R +/A 2281 0 R +/Parent 2279 0 R +/Next 2287 0 R +>> endobj +2279 0 obj << +/Title 2280 0 R +/A 2277 0 R +/Parent 2247 0 R +/Prev 2275 0 R +/First 2283 0 R +/Last 2295 0 R +/Count -4 +>> endobj +2275 0 obj << +/Title 2276 0 R +/A 2273 0 R +/Parent 2247 0 R +/Prev 2271 0 R +/Next 2279 0 R +>> endobj +2271 0 obj << +/Title 2272 0 R +/A 2269 0 R +/Parent 2247 0 R +/Prev 2259 0 R +/Next 2275 0 R +>> endobj +2267 0 obj << +/Title 2268 0 R +/A 2265 0 R +/Parent 2259 0 R +/Prev 2263 0 R +>> endobj +2263 0 obj << +/Title 2264 0 R +/A 2261 0 R +/Parent 2259 0 R +/Next 2267 0 R +>> endobj +2259 0 obj << +/Title 2260 0 R +/A 2257 0 R +/Parent 2247 0 R +/Prev 2251 0 R +/Next 2271 0 R +/First 2263 0 R +/Last 2267 0 R +/Count -2 +>> endobj +2255 0 obj << +/Title 2256 0 R +/A 2253 0 R +/Parent 2251 0 R +>> endobj +2251 0 obj << +/Title 2252 0 R +/A 2249 0 R +/Parent 2247 0 R +/Next 2259 0 R +/First 2255 0 R +/Last 2255 0 R +/Count -1 +>> endobj +2247 0 obj << +/Title 2248 0 R +/A 2245 0 R +/Parent 2239 0 R +/Prev 2243 0 R +/Next 2299 0 R +/First 2251 0 R +/Last 2279 0 R +/Count -5 +>> endobj +2243 0 obj << +/Title 2244 0 R +/A 2241 0 R +/Parent 2239 0 R +/Next 2247 0 R +>> endobj +2239 0 obj << +/Title 2240 0 R +/A 2237 0 R +/Parent 455 0 R +/Prev 2123 0 R +/Next 2307 0 R +/First 2243 0 R +/Last 2299 0 R +/Count -3 +>> endobj +2235 0 obj << +/Title 2236 0 R +/A 2233 0 R +/Parent 2223 0 R +/Prev 2231 0 R +>> endobj +2231 0 obj << +/Title 2232 0 R +/A 2229 0 R +/Parent 2223 0 R +/Prev 2227 0 R +/Next 2235 0 R +>> endobj +2227 0 obj << +/Title 2228 0 R +/A 2225 0 R +/Parent 2223 0 R +/Next 2231 0 R +>> endobj +2223 0 obj << +/Title 2224 0 R +/A 2221 0 R +/Parent 2123 0 R +/Prev 2203 0 R +/First 2227 0 R +/Last 2235 0 R +/Count -3 +>> endobj +2219 0 obj << +/Title 2220 0 R +/A 2217 0 R +/Parent 2203 0 R +/Prev 2215 0 R +>> endobj +2215 0 obj << +/Title 2216 0 R +/A 2213 0 R +/Parent 2203 0 R +/Prev 2207 0 R +/Next 2219 0 R +>> endobj +2211 0 obj << +/Title 2212 0 R +/A 2209 0 R +/Parent 2207 0 R +>> endobj +2207 0 obj << +/Title 2208 0 R +/A 2205 0 R +/Parent 2203 0 R +/Next 2215 0 R +/First 2211 0 R +/Last 2211 0 R +/Count -1 +>> endobj +2203 0 obj << +/Title 2204 0 R +/A 2201 0 R +/Parent 2123 0 R +/Prev 2199 0 R +/Next 2223 0 R +/First 2207 0 R +/Last 2219 0 R +/Count -3 +>> endobj +2199 0 obj << +/Title 2200 0 R +/A 2197 0 R +/Parent 2123 0 R +/Prev 2195 0 R +/Next 2203 0 R +>> endobj +2195 0 obj << +/Title 2196 0 R +/A 2193 0 R +/Parent 2123 0 R +/Prev 2131 0 R +/Next 2199 0 R +>> endobj +2191 0 obj << +/Title 2192 0 R +/A 2189 0 R +/Parent 2175 0 R +/Prev 2187 0 R +>> endobj +2187 0 obj << +/Title 2188 0 R +/A 2185 0 R +/Parent 2175 0 R +/Prev 2183 0 R +/Next 2191 0 R +>> endobj +2183 0 obj << +/Title 2184 0 R +/A 2181 0 R +/Parent 2175 0 R +/Prev 2179 0 R +/Next 2187 0 R +>> endobj +2179 0 obj << +/Title 2180 0 R +/A 2177 0 R +/Parent 2175 0 R +/Next 2183 0 R +>> endobj +2175 0 obj << +/Title 2176 0 R +/A 2173 0 R +/Parent 2131 0 R +/Prev 2171 0 R +/First 2179 0 R +/Last 2191 0 R +/Count -4 +>> endobj +2171 0 obj << +/Title 2172 0 R +/A 2169 0 R +/Parent 2131 0 R +/Prev 2155 0 R +/Next 2175 0 R +>> endobj +2167 0 obj << +/Title 2168 0 R +/A 2165 0 R +/Parent 2155 0 R +/Prev 2163 0 R +>> endobj +2163 0 obj << +/Title 2164 0 R +/A 2161 0 R +/Parent 2155 0 R +/Prev 2159 0 R +/Next 2167 0 R +>> endobj +2159 0 obj << +/Title 2160 0 R +/A 2157 0 R +/Parent 2155 0 R +/Next 2163 0 R +>> endobj +2155 0 obj << +/Title 2156 0 R +/A 2153 0 R +/Parent 2131 0 R +/Prev 2135 0 R +/Next 2171 0 R +/First 2159 0 R +/Last 2167 0 R +/Count -3 +>> endobj +2151 0 obj << +/Title 2152 0 R +/A 2149 0 R +/Parent 2135 0 R +/Prev 2147 0 R +>> endobj +2147 0 obj << +/Title 2148 0 R +/A 2145 0 R +/Parent 2135 0 R +/Prev 2143 0 R +/Next 2151 0 R +>> endobj +2143 0 obj << +/Title 2144 0 R +/A 2141 0 R +/Parent 2135 0 R +/Prev 2139 0 R +/Next 2147 0 R +>> endobj +2139 0 obj << +/Title 2140 0 R +/A 2137 0 R +/Parent 2135 0 R +/Next 2143 0 R +>> endobj +2135 0 obj << +/Title 2136 0 R +/A 2133 0 R +/Parent 2131 0 R +/Next 2155 0 R +/First 2139 0 R +/Last 2151 0 R +/Count -4 +>> endobj +2131 0 obj << +/Title 2132 0 R +/A 2129 0 R +/Parent 2123 0 R +/Prev 2127 0 R +/Next 2195 0 R +/First 2135 0 R +/Last 2175 0 R +/Count -4 +>> endobj +2127 0 obj << +/Title 2128 0 R +/A 2125 0 R +/Parent 2123 0 R +/Next 2131 0 R +>> endobj +2123 0 obj << +/Title 2124 0 R +/A 2121 0 R +/Parent 455 0 R +/Prev 2063 0 R +/Next 2239 0 R +/First 2127 0 R +/Last 2223 0 R +/Count -6 +>> endobj +2119 0 obj << +/Title 2120 0 R +/A 2117 0 R +/Parent 2115 0 R +>> endobj +2115 0 obj << +/Title 2116 0 R +/A 2113 0 R +/Parent 2063 0 R +/Prev 2111 0 R +/First 2119 0 R +/Last 2119 0 R +/Count -1 +>> endobj +2111 0 obj << +/Title 2112 0 R +/A 2109 0 R +/Parent 2063 0 R +/Prev 2095 0 R +/Next 2115 0 R +>> endobj +2107 0 obj << +/Title 2108 0 R +/A 2105 0 R +/Parent 2095 0 R +/Prev 2103 0 R +>> endobj +2103 0 obj << +/Title 2104 0 R +/A 2101 0 R +/Parent 2095 0 R +/Prev 2099 0 R +/Next 2107 0 R +>> endobj +2099 0 obj << +/Title 2100 0 R +/A 2097 0 R +/Parent 2095 0 R +/Next 2103 0 R +>> endobj +2095 0 obj << +/Title 2096 0 R +/A 2093 0 R +/Parent 2063 0 R +/Prev 2071 0 R +/Next 2111 0 R +/First 2099 0 R +/Last 2107 0 R +/Count -3 +>> endobj +2091 0 obj << +/Title 2092 0 R +/A 2089 0 R +/Parent 2087 0 R +>> endobj +2087 0 obj << +/Title 2088 0 R +/A 2085 0 R +/Parent 2071 0 R +/Prev 2079 0 R +/First 2091 0 R +/Last 2091 0 R +/Count -1 +>> endobj +2083 0 obj << +/Title 2084 0 R +/A 2081 0 R +/Parent 2079 0 R +>> endobj +2079 0 obj << +/Title 2080 0 R +/A 2077 0 R +/Parent 2071 0 R +/Prev 2075 0 R +/Next 2087 0 R +/First 2083 0 R +/Last 2083 0 R +/Count -1 +>> endobj +2075 0 obj << +/Title 2076 0 R +/A 2073 0 R +/Parent 2071 0 R +/Next 2079 0 R +>> endobj +2071 0 obj << +/Title 2072 0 R +/A 2069 0 R +/Parent 2063 0 R +/Prev 2067 0 R +/Next 2095 0 R +/First 2075 0 R +/Last 2087 0 R +/Count -3 +>> endobj +2067 0 obj << +/Title 2068 0 R +/A 2065 0 R +/Parent 2063 0 R +/Next 2071 0 R +>> endobj +2063 0 obj << +/Title 2064 0 R +/A 2061 0 R +/Parent 455 0 R +/Prev 2031 0 R +/Next 2123 0 R +/First 2067 0 R +/Last 2115 0 R +/Count -5 +>> endobj +2059 0 obj << +/Title 2060 0 R +/A 2057 0 R +/Parent 2031 0 R +/Prev 2051 0 R +>> endobj +2055 0 obj << +/Title 2056 0 R +/A 2053 0 R +/Parent 2051 0 R +>> endobj +2051 0 obj << +/Title 2052 0 R +/A 2049 0 R +/Parent 2031 0 R +/Prev 2043 0 R +/Next 2059 0 R +/First 2055 0 R +/Last 2055 0 R +/Count -1 +>> endobj +2047 0 obj << +/Title 2048 0 R +/A 2045 0 R +/Parent 2043 0 R +>> endobj +2043 0 obj << +/Title 2044 0 R +/A 2041 0 R +/Parent 2031 0 R +/Prev 2039 0 R +/Next 2051 0 R +/First 2047 0 R +/Last 2047 0 R +/Count -1 +>> endobj +2039 0 obj << +/Title 2040 0 R +/A 2037 0 R +/Parent 2031 0 R +/Prev 2035 0 R +/Next 2043 0 R +>> endobj +2035 0 obj << +/Title 2036 0 R +/A 2033 0 R +/Parent 2031 0 R +/Next 2039 0 R +>> endobj +2031 0 obj << +/Title 2032 0 R +/A 2029 0 R +/Parent 455 0 R +/Prev 1927 0 R +/Next 2063 0 R +/First 2035 0 R +/Last 2059 0 R +/Count -5 +>> endobj +2027 0 obj << +/Title 2028 0 R +/A 2025 0 R +/Parent 1927 0 R +/Prev 2023 0 R +>> endobj +2023 0 obj << +/Title 2024 0 R +/A 2021 0 R +/Parent 1927 0 R +/Prev 1975 0 R +/Next 2027 0 R +>> endobj +2019 0 obj << +/Title 2020 0 R +/A 2017 0 R +/Parent 1987 0 R +/Prev 2015 0 R +>> endobj +2015 0 obj << +/Title 2016 0 R +/A 2013 0 R +/Parent 1987 0 R +/Prev 2011 0 R +/Next 2019 0 R +>> endobj +2011 0 obj << +/Title 2012 0 R +/A 2009 0 R +/Parent 1987 0 R +/Prev 2007 0 R +/Next 2015 0 R +>> endobj +2007 0 obj << +/Title 2008 0 R +/A 2005 0 R +/Parent 1987 0 R +/Prev 2003 0 R +/Next 2011 0 R +>> endobj +2003 0 obj << +/Title 2004 0 R +/A 2001 0 R +/Parent 1987 0 R +/Prev 1999 0 R +/Next 2007 0 R +>> endobj +1999 0 obj << +/Title 2000 0 R +/A 1997 0 R +/Parent 1987 0 R +/Prev 1995 0 R +/Next 2003 0 R +>> endobj +1995 0 obj << +/Title 1996 0 R +/A 1993 0 R +/Parent 1987 0 R +/Prev 1991 0 R +/Next 1999 0 R +>> endobj +1991 0 obj << +/Title 1992 0 R +/A 1989 0 R +/Parent 1987 0 R +/Next 1995 0 R +>> endobj +1987 0 obj << +/Title 1988 0 R +/A 1985 0 R +/Parent 1975 0 R +/Prev 1983 0 R +/First 1991 0 R +/Last 2019 0 R +/Count -8 +>> endobj +1983 0 obj << +/Title 1984 0 R +/A 1981 0 R +/Parent 1975 0 R +/Prev 1979 0 R +/Next 1987 0 R +>> endobj +1979 0 obj << +/Title 1980 0 R +/A 1977 0 R +/Parent 1975 0 R +/Next 1983 0 R +>> endobj +1975 0 obj << +/Title 1976 0 R +/A 1973 0 R +/Parent 1927 0 R +/Prev 1947 0 R +/Next 2023 0 R +/First 1979 0 R +/Last 1987 0 R +/Count -3 +>> endobj +1971 0 obj << +/Title 1972 0 R +/A 1969 0 R +/Parent 1947 0 R +/Prev 1967 0 R +>> endobj +1967 0 obj << +/Title 1968 0 R +/A 1965 0 R +/Parent 1947 0 R +/Prev 1963 0 R +/Next 1971 0 R +>> endobj +1963 0 obj << +/Title 1964 0 R +/A 1961 0 R +/Parent 1947 0 R +/Prev 1959 0 R +/Next 1967 0 R +>> endobj +1959 0 obj << +/Title 1960 0 R +/A 1957 0 R +/Parent 1947 0 R +/Prev 1955 0 R +/Next 1963 0 R +>> endobj +1955 0 obj << +/Title 1956 0 R +/A 1953 0 R +/Parent 1947 0 R +/Prev 1951 0 R +/Next 1959 0 R +>> endobj +1951 0 obj << +/Title 1952 0 R +/A 1949 0 R +/Parent 1947 0 R +/Next 1955 0 R +>> endobj +1947 0 obj << +/Title 1948 0 R +/A 1945 0 R +/Parent 1927 0 R +/Prev 1939 0 R +/Next 1975 0 R +/First 1951 0 R +/Last 1971 0 R +/Count -6 +>> endobj +1943 0 obj << +/Title 1944 0 R +/A 1941 0 R +/Parent 1939 0 R +>> endobj +1939 0 obj << +/Title 1940 0 R +/A 1937 0 R +/Parent 1927 0 R +/Prev 1935 0 R +/Next 1947 0 R +/First 1943 0 R +/Last 1943 0 R +/Count -1 +>> endobj +1935 0 obj << +/Title 1936 0 R +/A 1933 0 R +/Parent 1927 0 R +/Prev 1931 0 R +/Next 1939 0 R +>> endobj +1931 0 obj << +/Title 1932 0 R +/A 1929 0 R +/Parent 1927 0 R +/Next 1935 0 R +>> endobj +1927 0 obj << +/Title 1928 0 R +/A 1925 0 R +/Parent 455 0 R +/Prev 1875 0 R +/Next 2031 0 R +/First 1931 0 R +/Last 2027 0 R +/Count -7 +>> endobj +1923 0 obj << +/Title 1924 0 R +/A 1921 0 R +/Parent 1875 0 R +/Prev 1911 0 R +>> endobj +1919 0 obj << +/Title 1920 0 R +/A 1917 0 R +/Parent 1911 0 R +/Prev 1915 0 R +>> endobj +1915 0 obj << +/Title 1916 0 R +/A 1913 0 R +/Parent 1911 0 R +/Next 1919 0 R +>> endobj +1911 0 obj << +/Title 1912 0 R +/A 1909 0 R +/Parent 1875 0 R +/Prev 1887 0 R +/Next 1923 0 R +/First 1915 0 R +/Last 1919 0 R +/Count -2 +>> endobj +1907 0 obj << +/Title 1908 0 R +/A 1905 0 R +/Parent 1887 0 R +/Prev 1903 0 R +>> endobj +1903 0 obj << +/Title 1904 0 R +/A 1901 0 R +/Parent 1887 0 R +/Prev 1899 0 R +/Next 1907 0 R +>> endobj +1899 0 obj << +/Title 1900 0 R +/A 1897 0 R +/Parent 1887 0 R +/Prev 1895 0 R +/Next 1903 0 R +>> endobj +1895 0 obj << +/Title 1896 0 R +/A 1893 0 R +/Parent 1887 0 R +/Prev 1891 0 R +/Next 1899 0 R +>> endobj +1891 0 obj << +/Title 1892 0 R +/A 1889 0 R +/Parent 1887 0 R +/Next 1895 0 R +>> endobj +1887 0 obj << +/Title 1888 0 R +/A 1885 0 R +/Parent 1875 0 R +/Prev 1883 0 R +/Next 1911 0 R +/First 1891 0 R +/Last 1907 0 R +/Count -5 +>> endobj +1883 0 obj << +/Title 1884 0 R +/A 1881 0 R +/Parent 1875 0 R +/Prev 1879 0 R +/Next 1887 0 R +>> endobj +1879 0 obj << +/Title 1880 0 R +/A 1877 0 R +/Parent 1875 0 R +/Next 1883 0 R +>> endobj +1875 0 obj << +/Title 1876 0 R +/A 1873 0 R +/Parent 455 0 R +/Prev 1331 0 R +/Next 1927 0 R +/First 1879 0 R +/Last 1923 0 R +/Count -5 +>> endobj +1871 0 obj << +/Title 1872 0 R +/A 1869 0 R +/Parent 1855 0 R +/Prev 1867 0 R +>> endobj +1867 0 obj << +/Title 1868 0 R +/A 1865 0 R +/Parent 1855 0 R +/Prev 1863 0 R +/Next 1871 0 R +>> endobj +1863 0 obj << +/Title 1864 0 R +/A 1861 0 R +/Parent 1855 0 R +/Prev 1859 0 R +/Next 1867 0 R +>> endobj +1859 0 obj << +/Title 1860 0 R +/A 1857 0 R +/Parent 1855 0 R +/Next 1863 0 R +>> endobj +1855 0 obj << +/Title 1856 0 R +/A 1853 0 R +/Parent 1331 0 R +/Prev 1839 0 R +/First 1859 0 R +/Last 1871 0 R +/Count -4 +>> endobj +1851 0 obj << +/Title 1852 0 R +/A 1849 0 R +/Parent 1839 0 R +/Prev 1847 0 R +>> endobj +1847 0 obj << +/Title 1848 0 R +/A 1845 0 R +/Parent 1839 0 R +/Prev 1843 0 R +/Next 1851 0 R +>> endobj +1843 0 obj << +/Title 1844 0 R +/A 1841 0 R +/Parent 1839 0 R +/Next 1847 0 R +>> endobj +1839 0 obj << +/Title 1840 0 R +/A 1837 0 R +/Parent 1331 0 R +/Prev 1835 0 R +/Next 1855 0 R +/First 1843 0 R +/Last 1851 0 R +/Count -3 +>> endobj +1835 0 obj << +/Title 1836 0 R +/A 1833 0 R +/Parent 1331 0 R +/Prev 1819 0 R +/Next 1839 0 R +>> endobj +1831 0 obj << +/Title 1832 0 R +/A 1829 0 R +/Parent 1819 0 R +/Prev 1827 0 R +>> endobj +1827 0 obj << +/Title 1828 0 R +/A 1825 0 R +/Parent 1819 0 R +/Prev 1823 0 R +/Next 1831 0 R +>> endobj +1823 0 obj << +/Title 1824 0 R +/A 1821 0 R +/Parent 1819 0 R +/Next 1827 0 R +>> endobj +1819 0 obj << +/Title 1820 0 R +/A 1817 0 R +/Parent 1331 0 R +/Prev 1815 0 R +/Next 1835 0 R +/First 1823 0 R +/Last 1831 0 R +/Count -3 +>> endobj +1815 0 obj << +/Title 1816 0 R +/A 1813 0 R +/Parent 1331 0 R +/Prev 1783 0 R +/Next 1819 0 R +>> endobj +1811 0 obj << +/Title 1812 0 R +/A 1809 0 R +/Parent 1783 0 R +/Prev 1807 0 R +>> endobj +1807 0 obj << +/Title 1808 0 R +/A 1805 0 R +/Parent 1783 0 R +/Prev 1803 0 R +/Next 1811 0 R +>> endobj +1803 0 obj << +/Title 1804 0 R +/A 1801 0 R +/Parent 1783 0 R +/Prev 1799 0 R +/Next 1807 0 R +>> endobj +1799 0 obj << +/Title 1800 0 R +/A 1797 0 R +/Parent 1783 0 R +/Prev 1795 0 R +/Next 1803 0 R +>> endobj +1795 0 obj << +/Title 1796 0 R +/A 1793 0 R +/Parent 1783 0 R +/Prev 1791 0 R +/Next 1799 0 R +>> endobj +1791 0 obj << +/Title 1792 0 R +/A 1789 0 R +/Parent 1783 0 R +/Prev 1787 0 R +/Next 1795 0 R +>> endobj +1787 0 obj << +/Title 1788 0 R +/A 1785 0 R +/Parent 1783 0 R +/Next 1791 0 R +>> endobj +1783 0 obj << +/Title 1784 0 R +/A 1781 0 R +/Parent 1331 0 R +/Prev 1739 0 R +/Next 1815 0 R +/First 1787 0 R +/Last 1811 0 R +/Count -7 +>> endobj +1779 0 obj << +/Title 1780 0 R +/A 1777 0 R +/Parent 1739 0 R +/Prev 1743 0 R +>> endobj +1775 0 obj << +/Title 1776 0 R +/A 1773 0 R +/Parent 1743 0 R +/Prev 1771 0 R +>> endobj +1771 0 obj << +/Title 1772 0 R +/A 1769 0 R +/Parent 1743 0 R +/Prev 1767 0 R +/Next 1775 0 R +>> endobj +1767 0 obj << +/Title 1768 0 R +/A 1765 0 R +/Parent 1743 0 R +/Prev 1763 0 R +/Next 1771 0 R +>> endobj +1763 0 obj << +/Title 1764 0 R +/A 1761 0 R +/Parent 1743 0 R +/Prev 1759 0 R +/Next 1767 0 R +>> endobj +1759 0 obj << +/Title 1760 0 R +/A 1757 0 R +/Parent 1743 0 R +/Prev 1755 0 R +/Next 1763 0 R +>> endobj +1755 0 obj << +/Title 1756 0 R +/A 1753 0 R +/Parent 1743 0 R +/Prev 1751 0 R +/Next 1759 0 R +>> endobj +1751 0 obj << +/Title 1752 0 R +/A 1749 0 R +/Parent 1743 0 R +/Prev 1747 0 R +/Next 1755 0 R +>> endobj +1747 0 obj << +/Title 1748 0 R +/A 1745 0 R +/Parent 1743 0 R +/Next 1751 0 R +>> endobj +1743 0 obj << +/Title 1744 0 R +/A 1741 0 R +/Parent 1739 0 R +/Next 1779 0 R +/First 1747 0 R +/Last 1775 0 R +/Count -8 +>> endobj +1739 0 obj << +/Title 1740 0 R +/A 1737 0 R +/Parent 1331 0 R +/Prev 1719 0 R +/Next 1783 0 R +/First 1743 0 R +/Last 1779 0 R +/Count -2 +>> endobj +1735 0 obj << +/Title 1736 0 R +/A 1733 0 R +/Parent 1719 0 R +/Prev 1731 0 R +>> endobj +1731 0 obj << +/Title 1732 0 R +/A 1729 0 R +/Parent 1719 0 R +/Prev 1727 0 R +/Next 1735 0 R +>> endobj +1727 0 obj << +/Title 1728 0 R +/A 1725 0 R +/Parent 1719 0 R +/Prev 1723 0 R +/Next 1731 0 R +>> endobj +1723 0 obj << +/Title 1724 0 R +/A 1721 0 R +/Parent 1719 0 R +/Next 1727 0 R +>> endobj +1719 0 obj << +/Title 1720 0 R +/A 1717 0 R +/Parent 1331 0 R +/Prev 1631 0 R +/Next 1739 0 R +/First 1723 0 R +/Last 1735 0 R +/Count -4 +>> endobj +1715 0 obj << +/Title 1716 0 R +/A 1713 0 R +/Parent 1631 0 R +/Prev 1651 0 R +>> endobj +1711 0 obj << +/Title 1712 0 R +/A 1709 0 R +/Parent 1651 0 R +/Prev 1707 0 R +>> endobj +1707 0 obj << +/Title 1708 0 R +/A 1705 0 R +/Parent 1651 0 R +/Prev 1703 0 R +/Next 1711 0 R +>> endobj +1703 0 obj << +/Title 1704 0 R +/A 1701 0 R +/Parent 1651 0 R +/Prev 1699 0 R +/Next 1707 0 R +>> endobj +1699 0 obj << +/Title 1700 0 R +/A 1697 0 R +/Parent 1651 0 R +/Prev 1695 0 R +/Next 1703 0 R +>> endobj +1695 0 obj << +/Title 1696 0 R +/A 1693 0 R +/Parent 1651 0 R +/Prev 1691 0 R +/Next 1699 0 R +>> endobj +1691 0 obj << +/Title 1692 0 R +/A 1689 0 R +/Parent 1651 0 R +/Prev 1687 0 R +/Next 1695 0 R +>> endobj +1687 0 obj << +/Title 1688 0 R +/A 1685 0 R +/Parent 1651 0 R +/Prev 1683 0 R +/Next 1691 0 R +>> endobj +1683 0 obj << +/Title 1684 0 R +/A 1681 0 R +/Parent 1651 0 R +/Prev 1679 0 R +/Next 1687 0 R +>> endobj +1679 0 obj << +/Title 1680 0 R +/A 1677 0 R +/Parent 1651 0 R +/Prev 1675 0 R +/Next 1683 0 R +>> endobj +1675 0 obj << +/Title 1676 0 R +/A 1673 0 R +/Parent 1651 0 R +/Prev 1671 0 R +/Next 1679 0 R +>> endobj +1671 0 obj << +/Title 1672 0 R +/A 1669 0 R +/Parent 1651 0 R +/Prev 1667 0 R +/Next 1675 0 R +>> endobj +1667 0 obj << +/Title 1668 0 R +/A 1665 0 R +/Parent 1651 0 R +/Prev 1663 0 R +/Next 1671 0 R +>> endobj +1663 0 obj << +/Title 1664 0 R +/A 1661 0 R +/Parent 1651 0 R +/Prev 1659 0 R +/Next 1667 0 R +>> endobj +1659 0 obj << +/Title 1660 0 R +/A 1657 0 R +/Parent 1651 0 R +/Prev 1655 0 R +/Next 1663 0 R +>> endobj +1655 0 obj << +/Title 1656 0 R +/A 1653 0 R +/Parent 1651 0 R +/Next 1659 0 R +>> endobj +1651 0 obj << +/Title 1652 0 R +/A 1649 0 R +/Parent 1631 0 R +/Prev 1647 0 R +/Next 1715 0 R +/First 1655 0 R +/Last 1711 0 R +/Count -15 +>> endobj +1647 0 obj << +/Title 1648 0 R +/A 1645 0 R +/Parent 1631 0 R +/Prev 1643 0 R +/Next 1651 0 R +>> endobj +1643 0 obj << +/Title 1644 0 R +/A 1641 0 R +/Parent 1631 0 R +/Prev 1639 0 R +/Next 1647 0 R +>> endobj +1639 0 obj << +/Title 1640 0 R +/A 1637 0 R +/Parent 1631 0 R +/Prev 1635 0 R +/Next 1643 0 R +>> endobj +1635 0 obj << +/Title 1636 0 R +/A 1633 0 R +/Parent 1631 0 R +/Next 1639 0 R +>> endobj +1631 0 obj << +/Title 1632 0 R +/A 1629 0 R +/Parent 1331 0 R +/Prev 1563 0 R +/Next 1719 0 R +/First 1635 0 R +/Last 1715 0 R +/Count -6 +>> endobj +1627 0 obj << +/Title 1628 0 R +/A 1625 0 R +/Parent 1563 0 R +/Prev 1623 0 R +>> endobj +1623 0 obj << +/Title 1624 0 R +/A 1621 0 R +/Parent 1563 0 R +/Prev 1619 0 R +/Next 1627 0 R +>> endobj +1619 0 obj << +/Title 1620 0 R +/A 1617 0 R +/Parent 1563 0 R +/Prev 1615 0 R +/Next 1623 0 R +>> endobj +1615 0 obj << +/Title 1616 0 R +/A 1613 0 R +/Parent 1563 0 R +/Prev 1611 0 R +/Next 1619 0 R +>> endobj +1611 0 obj << +/Title 1612 0 R +/A 1609 0 R +/Parent 1563 0 R +/Prev 1607 0 R +/Next 1615 0 R +>> endobj +1607 0 obj << +/Title 1608 0 R +/A 1605 0 R +/Parent 1563 0 R +/Prev 1603 0 R +/Next 1611 0 R +>> endobj +1603 0 obj << +/Title 1604 0 R +/A 1601 0 R +/Parent 1563 0 R +/Prev 1599 0 R +/Next 1607 0 R +>> endobj +1599 0 obj << +/Title 1600 0 R +/A 1597 0 R +/Parent 1563 0 R +/Prev 1595 0 R +/Next 1603 0 R +>> endobj +1595 0 obj << +/Title 1596 0 R +/A 1593 0 R +/Parent 1563 0 R +/Prev 1591 0 R +/Next 1599 0 R +>> endobj +1591 0 obj << +/Title 1592 0 R +/A 1589 0 R +/Parent 1563 0 R +/Prev 1587 0 R +/Next 1595 0 R +>> endobj +1587 0 obj << +/Title 1588 0 R +/A 1585 0 R +/Parent 1563 0 R +/Prev 1583 0 R +/Next 1591 0 R +>> endobj +1583 0 obj << +/Title 1584 0 R +/A 1581 0 R +/Parent 1563 0 R +/Prev 1579 0 R +/Next 1587 0 R +>> endobj +1579 0 obj << +/Title 1580 0 R +/A 1577 0 R +/Parent 1563 0 R +/Prev 1575 0 R +/Next 1583 0 R +>> endobj +1575 0 obj << +/Title 1576 0 R +/A 1573 0 R +/Parent 1563 0 R +/Prev 1571 0 R +/Next 1579 0 R +>> endobj +1571 0 obj << +/Title 1572 0 R +/A 1569 0 R +/Parent 1563 0 R +/Prev 1567 0 R +/Next 1575 0 R +>> endobj +1567 0 obj << +/Title 1568 0 R +/A 1565 0 R +/Parent 1563 0 R +/Next 1571 0 R +>> endobj +1563 0 obj << +/Title 1564 0 R +/A 1561 0 R +/Parent 1331 0 R +/Prev 1543 0 R +/Next 1631 0 R +/First 1567 0 R +/Last 1627 0 R +/Count -16 +>> endobj +1559 0 obj << +/Title 1560 0 R +/A 1557 0 R +/Parent 1543 0 R +/Prev 1555 0 R +>> endobj +1555 0 obj << +/Title 1556 0 R +/A 1553 0 R +/Parent 1543 0 R +/Prev 1551 0 R +/Next 1559 0 R +>> endobj +1551 0 obj << +/Title 1552 0 R +/A 1549 0 R +/Parent 1543 0 R +/Prev 1547 0 R +/Next 1555 0 R +>> endobj +1547 0 obj << +/Title 1548 0 R +/A 1545 0 R +/Parent 1543 0 R +/Next 1551 0 R +>> endobj +1543 0 obj << +/Title 1544 0 R +/A 1541 0 R +/Parent 1331 0 R +/Prev 1531 0 R +/Next 1563 0 R +/First 1547 0 R +/Last 1559 0 R +/Count -4 +>> endobj +1539 0 obj << +/Title 1540 0 R +/A 1537 0 R +/Parent 1531 0 R +/Prev 1535 0 R +>> endobj +1535 0 obj << +/Title 1536 0 R +/A 1533 0 R +/Parent 1531 0 R +/Next 1539 0 R +>> endobj +1531 0 obj << +/Title 1532 0 R +/A 1529 0 R +/Parent 1331 0 R +/Prev 1519 0 R +/Next 1543 0 R +/First 1535 0 R +/Last 1539 0 R +/Count -2 +>> endobj +1527 0 obj << +/Title 1528 0 R +/A 1525 0 R +/Parent 1519 0 R +/Prev 1523 0 R +>> endobj +1523 0 obj << +/Title 1524 0 R +/A 1521 0 R +/Parent 1519 0 R +/Next 1527 0 R +>> endobj +1519 0 obj << +/Title 1520 0 R +/A 1517 0 R +/Parent 1331 0 R +/Prev 1503 0 R +/Next 1531 0 R +/First 1523 0 R +/Last 1527 0 R +/Count -2 +>> endobj +1515 0 obj << +/Title 1516 0 R +/A 1513 0 R +/Parent 1503 0 R +/Prev 1511 0 R +>> endobj +1511 0 obj << +/Title 1512 0 R +/A 1509 0 R +/Parent 1503 0 R +/Prev 1507 0 R +/Next 1515 0 R +>> endobj +1507 0 obj << +/Title 1508 0 R +/A 1505 0 R +/Parent 1503 0 R +/Next 1511 0 R +>> endobj +1503 0 obj << +/Title 1504 0 R +/A 1501 0 R +/Parent 1331 0 R +/Prev 1423 0 R +/Next 1519 0 R +/First 1507 0 R +/Last 1515 0 R +/Count -3 +>> endobj +1499 0 obj << +/Title 1500 0 R +/A 1497 0 R +/Parent 1423 0 R +/Prev 1495 0 R +>> endobj +1495 0 obj << +/Title 1496 0 R +/A 1493 0 R +/Parent 1423 0 R +/Prev 1491 0 R +/Next 1499 0 R +>> endobj +1491 0 obj << +/Title 1492 0 R +/A 1489 0 R +/Parent 1423 0 R +/Prev 1487 0 R +/Next 1495 0 R +>> endobj +1487 0 obj << +/Title 1488 0 R +/A 1485 0 R +/Parent 1423 0 R +/Prev 1483 0 R +/Next 1491 0 R +>> endobj +1483 0 obj << +/Title 1484 0 R +/A 1481 0 R +/Parent 1423 0 R +/Prev 1479 0 R +/Next 1487 0 R +>> endobj +1479 0 obj << +/Title 1480 0 R +/A 1477 0 R +/Parent 1423 0 R +/Prev 1475 0 R +/Next 1483 0 R +>> endobj +1475 0 obj << +/Title 1476 0 R +/A 1473 0 R +/Parent 1423 0 R +/Prev 1471 0 R +/Next 1479 0 R +>> endobj +1471 0 obj << +/Title 1472 0 R +/A 1469 0 R +/Parent 1423 0 R +/Prev 1467 0 R +/Next 1475 0 R +>> endobj +1467 0 obj << +/Title 1468 0 R +/A 1465 0 R +/Parent 1423 0 R +/Prev 1463 0 R +/Next 1471 0 R +>> endobj +1463 0 obj << +/Title 1464 0 R +/A 1461 0 R +/Parent 1423 0 R +/Prev 1459 0 R +/Next 1467 0 R +>> endobj +1459 0 obj << +/Title 1460 0 R +/A 1457 0 R +/Parent 1423 0 R +/Prev 1455 0 R +/Next 1463 0 R +>> endobj +1455 0 obj << +/Title 1456 0 R +/A 1453 0 R +/Parent 1423 0 R +/Prev 1451 0 R +/Next 1459 0 R +>> endobj +1451 0 obj << +/Title 1452 0 R +/A 1449 0 R +/Parent 1423 0 R +/Prev 1447 0 R +/Next 1455 0 R +>> endobj +1447 0 obj << +/Title 1448 0 R +/A 1445 0 R +/Parent 1423 0 R +/Prev 1443 0 R +/Next 1451 0 R +>> endobj +1443 0 obj << +/Title 1444 0 R +/A 1441 0 R +/Parent 1423 0 R +/Prev 1439 0 R +/Next 1447 0 R +>> endobj +1439 0 obj << +/Title 1440 0 R +/A 1437 0 R +/Parent 1423 0 R +/Prev 1435 0 R +/Next 1443 0 R +>> endobj +1435 0 obj << +/Title 1436 0 R +/A 1433 0 R +/Parent 1423 0 R +/Prev 1431 0 R +/Next 1439 0 R +>> endobj +1431 0 obj << +/Title 1432 0 R +/A 1429 0 R +/Parent 1423 0 R +/Prev 1427 0 R +/Next 1435 0 R +>> endobj +1427 0 obj << +/Title 1428 0 R +/A 1425 0 R +/Parent 1423 0 R +/Next 1431 0 R +>> endobj +1423 0 obj << +/Title 1424 0 R +/A 1421 0 R +/Parent 1331 0 R +/Prev 1387 0 R +/Next 1503 0 R +/First 1427 0 R +/Last 1499 0 R +/Count -19 +>> endobj +1419 0 obj << +/Title 1420 0 R +/A 1417 0 R +/Parent 1387 0 R +/Prev 1415 0 R +>> endobj +1415 0 obj << +/Title 1416 0 R +/A 1413 0 R +/Parent 1387 0 R +/Prev 1411 0 R +/Next 1419 0 R +>> endobj +1411 0 obj << +/Title 1412 0 R +/A 1409 0 R +/Parent 1387 0 R +/Prev 1407 0 R +/Next 1415 0 R +>> endobj +1407 0 obj << +/Title 1408 0 R +/A 1405 0 R +/Parent 1387 0 R +/Prev 1403 0 R +/Next 1411 0 R +>> endobj +1403 0 obj << +/Title 1404 0 R +/A 1401 0 R +/Parent 1387 0 R +/Prev 1399 0 R +/Next 1407 0 R +>> endobj +1399 0 obj << +/Title 1400 0 R +/A 1397 0 R +/Parent 1387 0 R +/Prev 1395 0 R +/Next 1403 0 R +>> endobj +1395 0 obj << +/Title 1396 0 R +/A 1393 0 R +/Parent 1387 0 R +/Prev 1391 0 R +/Next 1399 0 R +>> endobj +1391 0 obj << +/Title 1392 0 R +/A 1389 0 R +/Parent 1387 0 R +/Next 1395 0 R +>> endobj +1387 0 obj << +/Title 1388 0 R +/A 1385 0 R +/Parent 1331 0 R +/Prev 1363 0 R +/Next 1423 0 R +/First 1391 0 R +/Last 1419 0 R +/Count -8 +>> endobj +1383 0 obj << +/Title 1384 0 R +/A 1381 0 R +/Parent 1363 0 R +/Prev 1379 0 R +>> endobj +1379 0 obj << +/Title 1380 0 R +/A 1377 0 R +/Parent 1363 0 R +/Prev 1375 0 R +/Next 1383 0 R +>> endobj +1375 0 obj << +/Title 1376 0 R +/A 1373 0 R +/Parent 1363 0 R +/Prev 1371 0 R +/Next 1379 0 R +>> endobj +1371 0 obj << +/Title 1372 0 R +/A 1369 0 R +/Parent 1363 0 R +/Prev 1367 0 R +/Next 1375 0 R +>> endobj +1367 0 obj << +/Title 1368 0 R +/A 1365 0 R +/Parent 1363 0 R +/Next 1371 0 R +>> endobj +1363 0 obj << +/Title 1364 0 R +/A 1361 0 R +/Parent 1331 0 R +/Prev 1347 0 R +/Next 1387 0 R +/First 1367 0 R +/Last 1383 0 R +/Count -5 +>> endobj +1359 0 obj << +/Title 1360 0 R +/A 1357 0 R +/Parent 1347 0 R +/Prev 1355 0 R +>> endobj +1355 0 obj << +/Title 1356 0 R +/A 1353 0 R +/Parent 1347 0 R +/Prev 1351 0 R +/Next 1359 0 R +>> endobj +1351 0 obj << +/Title 1352 0 R +/A 1349 0 R +/Parent 1347 0 R +/Next 1355 0 R +>> endobj +1347 0 obj << +/Title 1348 0 R +/A 1345 0 R +/Parent 1331 0 R +/Prev 1335 0 R +/Next 1363 0 R +/First 1351 0 R +/Last 1359 0 R +/Count -3 +>> endobj +1343 0 obj << +/Title 1344 0 R +/A 1341 0 R +/Parent 1335 0 R +/Prev 1339 0 R +>> endobj +1339 0 obj << +/Title 1340 0 R +/A 1337 0 R +/Parent 1335 0 R +/Next 1343 0 R +>> endobj +1335 0 obj << +/Title 1336 0 R +/A 1333 0 R +/Parent 1331 0 R +/Next 1347 0 R +/First 1339 0 R +/Last 1343 0 R +/Count -2 +>> endobj +1331 0 obj << +/Title 1332 0 R +/A 1329 0 R +/Parent 455 0 R +/Prev 1083 0 R +/Next 1875 0 R +/First 1335 0 R +/Last 1855 0 R +/Count -19 +>> endobj +1327 0 obj << +/Title 1328 0 R +/A 1325 0 R +/Parent 1319 0 R +/Prev 1323 0 R +>> endobj +1323 0 obj << +/Title 1324 0 R +/A 1321 0 R +/Parent 1319 0 R +/Next 1327 0 R +>> endobj +1319 0 obj << +/Title 1320 0 R +/A 1317 0 R +/Parent 1083 0 R +/Prev 1315 0 R +/First 1323 0 R +/Last 1327 0 R +/Count -2 +>> endobj +1315 0 obj << +/Title 1316 0 R +/A 1313 0 R +/Parent 1083 0 R +/Prev 1311 0 R +/Next 1319 0 R +>> endobj +1311 0 obj << +/Title 1312 0 R +/A 1309 0 R +/Parent 1083 0 R +/Prev 1307 0 R +/Next 1315 0 R +>> endobj +1307 0 obj << +/Title 1308 0 R +/A 1305 0 R +/Parent 1083 0 R +/Prev 1303 0 R +/Next 1311 0 R +>> endobj +1303 0 obj << +/Title 1304 0 R +/A 1301 0 R +/Parent 1083 0 R +/Prev 1283 0 R +/Next 1307 0 R +>> endobj +1299 0 obj << +/Title 1300 0 R +/A 1297 0 R +/Parent 1283 0 R +/Prev 1295 0 R +>> endobj +1295 0 obj << +/Title 1296 0 R +/A 1293 0 R +/Parent 1283 0 R +/Prev 1291 0 R +/Next 1299 0 R +>> endobj +1291 0 obj << +/Title 1292 0 R +/A 1289 0 R +/Parent 1283 0 R +/Prev 1287 0 R +/Next 1295 0 R +>> endobj +1287 0 obj << +/Title 1288 0 R +/A 1285 0 R +/Parent 1283 0 R +/Next 1291 0 R +>> endobj +1283 0 obj << +/Title 1284 0 R +/A 1281 0 R +/Parent 1083 0 R +/Prev 1251 0 R +/Next 1303 0 R +/First 1287 0 R +/Last 1299 0 R +/Count -4 +>> endobj +1279 0 obj << +/Title 1280 0 R +/A 1277 0 R +/Parent 1251 0 R +/Prev 1275 0 R +>> endobj +1275 0 obj << +/Title 1276 0 R +/A 1273 0 R +/Parent 1251 0 R +/Prev 1271 0 R +/Next 1279 0 R +>> endobj +1271 0 obj << +/Title 1272 0 R +/A 1269 0 R +/Parent 1251 0 R +/Prev 1267 0 R +/Next 1275 0 R +>> endobj +1267 0 obj << +/Title 1268 0 R +/A 1265 0 R +/Parent 1251 0 R +/Prev 1263 0 R +/Next 1271 0 R +>> endobj +1263 0 obj << +/Title 1264 0 R +/A 1261 0 R +/Parent 1251 0 R +/Prev 1259 0 R +/Next 1267 0 R +>> endobj +1259 0 obj << +/Title 1260 0 R +/A 1257 0 R +/Parent 1251 0 R +/Prev 1255 0 R +/Next 1263 0 R +>> endobj +1255 0 obj << +/Title 1256 0 R +/A 1253 0 R +/Parent 1251 0 R +/Next 1259 0 R +>> endobj +1251 0 obj << +/Title 1252 0 R +/A 1249 0 R +/Parent 1083 0 R +/Prev 1231 0 R +/Next 1283 0 R +/First 1255 0 R +/Last 1279 0 R +/Count -7 +>> endobj +1247 0 obj << +/Title 1248 0 R +/A 1245 0 R +/Parent 1231 0 R +/Prev 1243 0 R +>> endobj +1243 0 obj << +/Title 1244 0 R +/A 1241 0 R +/Parent 1231 0 R +/Prev 1239 0 R +/Next 1247 0 R +>> endobj +1239 0 obj << +/Title 1240 0 R +/A 1237 0 R +/Parent 1231 0 R +/Prev 1235 0 R +/Next 1243 0 R +>> endobj +1235 0 obj << +/Title 1236 0 R +/A 1233 0 R +/Parent 1231 0 R +/Next 1239 0 R +>> endobj +1231 0 obj << +/Title 1232 0 R +/A 1229 0 R +/Parent 1083 0 R +/Prev 1183 0 R +/Next 1251 0 R +/First 1235 0 R +/Last 1247 0 R +/Count -4 +>> endobj +1227 0 obj << +/Title 1228 0 R +/A 1225 0 R +/Parent 1191 0 R +/Prev 1223 0 R +>> endobj +1223 0 obj << +/Title 1224 0 R +/A 1221 0 R +/Parent 1191 0 R +/Prev 1219 0 R +/Next 1227 0 R +>> endobj +1219 0 obj << +/Title 1220 0 R +/A 1217 0 R +/Parent 1191 0 R +/Prev 1215 0 R +/Next 1223 0 R +>> endobj +1215 0 obj << +/Title 1216 0 R +/A 1213 0 R +/Parent 1191 0 R +/Prev 1211 0 R +/Next 1219 0 R +>> endobj +1211 0 obj << +/Title 1212 0 R +/A 1209 0 R +/Parent 1191 0 R +/Prev 1207 0 R +/Next 1215 0 R +>> endobj +1207 0 obj << +/Title 1208 0 R +/A 1205 0 R +/Parent 1191 0 R +/Prev 1203 0 R +/Next 1211 0 R +>> endobj +1203 0 obj << +/Title 1204 0 R +/A 1201 0 R +/Parent 1191 0 R +/Prev 1199 0 R +/Next 1207 0 R +>> endobj +1199 0 obj << +/Title 1200 0 R +/A 1197 0 R +/Parent 1191 0 R +/Prev 1195 0 R +/Next 1203 0 R +>> endobj +1195 0 obj << +/Title 1196 0 R +/A 1193 0 R +/Parent 1191 0 R +/Next 1199 0 R +>> endobj +1191 0 obj << +/Title 1192 0 R +/A 1189 0 R +/Parent 1183 0 R +/Prev 1187 0 R +/First 1195 0 R +/Last 1227 0 R +/Count -9 +>> endobj +1187 0 obj << +/Title 1188 0 R +/A 1185 0 R +/Parent 1183 0 R +/Next 1191 0 R +>> endobj +1183 0 obj << +/Title 1184 0 R +/A 1181 0 R +/Parent 1083 0 R +/Prev 1159 0 R +/Next 1231 0 R +/First 1187 0 R +/Last 1191 0 R +/Count -2 +>> endobj +1179 0 obj << +/Title 1180 0 R +/A 1177 0 R +/Parent 1159 0 R +/Prev 1175 0 R +>> endobj +1175 0 obj << +/Title 1176 0 R +/A 1173 0 R +/Parent 1159 0 R +/Prev 1171 0 R +/Next 1179 0 R +>> endobj +1171 0 obj << +/Title 1172 0 R +/A 1169 0 R +/Parent 1159 0 R +/Prev 1167 0 R +/Next 1175 0 R +>> endobj +1167 0 obj << +/Title 1168 0 R +/A 1165 0 R +/Parent 1159 0 R +/Prev 1163 0 R +/Next 1171 0 R +>> endobj +1163 0 obj << +/Title 1164 0 R +/A 1161 0 R +/Parent 1159 0 R +/Next 1167 0 R +>> endobj +1159 0 obj << +/Title 1160 0 R +/A 1157 0 R +/Parent 1083 0 R +/Prev 1131 0 R +/Next 1183 0 R +/First 1163 0 R +/Last 1179 0 R +/Count -5 +>> endobj +1155 0 obj << +/Title 1156 0 R +/A 1153 0 R +/Parent 1131 0 R +/Prev 1151 0 R +>> endobj +1151 0 obj << +/Title 1152 0 R +/A 1149 0 R +/Parent 1131 0 R +/Prev 1147 0 R +/Next 1155 0 R +>> endobj +1147 0 obj << +/Title 1148 0 R +/A 1145 0 R +/Parent 1131 0 R +/Prev 1143 0 R +/Next 1151 0 R +>> endobj +1143 0 obj << +/Title 1144 0 R +/A 1141 0 R +/Parent 1131 0 R +/Prev 1139 0 R +/Next 1147 0 R +>> endobj +1139 0 obj << +/Title 1140 0 R +/A 1137 0 R +/Parent 1131 0 R +/Prev 1135 0 R +/Next 1143 0 R +>> endobj +1135 0 obj << +/Title 1136 0 R +/A 1133 0 R +/Parent 1131 0 R +/Next 1139 0 R +>> endobj +1131 0 obj << +/Title 1132 0 R +/A 1129 0 R +/Parent 1083 0 R +/Prev 1127 0 R +/Next 1159 0 R +/First 1135 0 R +/Last 1155 0 R +/Count -6 +>> endobj +1127 0 obj << +/Title 1128 0 R +/A 1125 0 R +/Parent 1083 0 R +/Prev 1115 0 R +/Next 1131 0 R +>> endobj +1123 0 obj << +/Title 1124 0 R +/A 1121 0 R +/Parent 1115 0 R +/Prev 1119 0 R +>> endobj +1119 0 obj << +/Title 1120 0 R +/A 1117 0 R +/Parent 1115 0 R +/Next 1123 0 R +>> endobj +1115 0 obj << +/Title 1116 0 R +/A 1113 0 R +/Parent 1083 0 R +/Prev 1091 0 R +/Next 1127 0 R +/First 1119 0 R +/Last 1123 0 R +/Count -2 +>> endobj +1111 0 obj << +/Title 1112 0 R +/A 1109 0 R +/Parent 1091 0 R +/Prev 1107 0 R +>> endobj +1107 0 obj << +/Title 1108 0 R +/A 1105 0 R +/Parent 1091 0 R +/Prev 1103 0 R +/Next 1111 0 R +>> endobj +1103 0 obj << +/Title 1104 0 R +/A 1101 0 R +/Parent 1091 0 R +/Prev 1099 0 R +/Next 1107 0 R +>> endobj +1099 0 obj << +/Title 1100 0 R +/A 1097 0 R +/Parent 1091 0 R +/Prev 1095 0 R +/Next 1103 0 R +>> endobj +1095 0 obj << +/Title 1096 0 R +/A 1093 0 R +/Parent 1091 0 R +/Next 1099 0 R +>> endobj +1091 0 obj << +/Title 1092 0 R +/A 1089 0 R +/Parent 1083 0 R +/Prev 1087 0 R +/Next 1115 0 R +/First 1095 0 R +/Last 1111 0 R +/Count -5 +>> endobj +1087 0 obj << +/Title 1088 0 R +/A 1085 0 R +/Parent 1083 0 R +/Next 1091 0 R +>> endobj +1083 0 obj << +/Title 1084 0 R +/A 1081 0 R +/Parent 455 0 R +/Prev 1071 0 R +/Next 1331 0 R +/First 1087 0 R +/Last 1319 0 R +/Count -15 +>> endobj +1079 0 obj << +/Title 1080 0 R +/A 1077 0 R +/Parent 1071 0 R +/Prev 1075 0 R +>> endobj +1075 0 obj << +/Title 1076 0 R +/A 1073 0 R +/Parent 1071 0 R +/Next 1079 0 R +>> endobj +1071 0 obj << +/Title 1072 0 R +/A 1069 0 R +/Parent 455 0 R +/Prev 1027 0 R +/Next 1083 0 R +/First 1075 0 R +/Last 1079 0 R +/Count -2 +>> endobj +1067 0 obj << +/Title 1068 0 R +/A 1065 0 R +/Parent 1063 0 R +>> endobj +1063 0 obj << +/Title 1064 0 R +/A 1061 0 R +/Parent 1027 0 R +/Prev 1051 0 R +/First 1067 0 R +/Last 1067 0 R +/Count -1 +>> endobj +1059 0 obj << +/Title 1060 0 R +/A 1057 0 R +/Parent 1051 0 R +/Prev 1055 0 R +>> endobj +1055 0 obj << +/Title 1056 0 R +/A 1053 0 R +/Parent 1051 0 R +/Next 1059 0 R +>> endobj +1051 0 obj << +/Title 1052 0 R +/A 1049 0 R +/Parent 1027 0 R +/Prev 1039 0 R +/Next 1063 0 R +/First 1055 0 R +/Last 1059 0 R +/Count -2 +>> endobj +1047 0 obj << +/Title 1048 0 R +/A 1045 0 R +/Parent 1039 0 R +/Prev 1043 0 R +>> endobj +1043 0 obj << +/Title 1044 0 R +/A 1041 0 R +/Parent 1039 0 R +/Next 1047 0 R +>> endobj +1039 0 obj << +/Title 1040 0 R +/A 1037 0 R +/Parent 1027 0 R +/Prev 1035 0 R +/Next 1051 0 R +/First 1043 0 R +/Last 1047 0 R +/Count -2 +>> endobj +1035 0 obj << +/Title 1036 0 R +/A 1033 0 R +/Parent 1027 0 R +/Prev 1031 0 R +/Next 1039 0 R +>> endobj +1031 0 obj << +/Title 1032 0 R +/A 1029 0 R +/Parent 1027 0 R +/Next 1035 0 R +>> endobj +1027 0 obj << +/Title 1028 0 R +/A 1025 0 R +/Parent 455 0 R +/Prev 971 0 R +/Next 1071 0 R +/First 1031 0 R +/Last 1063 0 R +/Count -5 +>> endobj +1023 0 obj << +/Title 1024 0 R +/A 1021 0 R +/Parent 1015 0 R +/Prev 1019 0 R +>> endobj +1019 0 obj << +/Title 1020 0 R +/A 1017 0 R +/Parent 1015 0 R +/Next 1023 0 R +>> endobj +1015 0 obj << +/Title 1016 0 R +/A 1013 0 R +/Parent 971 0 R +/Prev 1011 0 R +/First 1019 0 R +/Last 1023 0 R +/Count -2 +>> endobj +1011 0 obj << +/Title 1012 0 R +/A 1009 0 R +/Parent 971 0 R +/Prev 983 0 R +/Next 1015 0 R +>> endobj +1007 0 obj << +/Title 1008 0 R +/A 1005 0 R +/Parent 983 0 R +/Prev 1003 0 R +>> endobj +1003 0 obj << +/Title 1004 0 R +/A 1001 0 R +/Parent 983 0 R +/Prev 999 0 R +/Next 1007 0 R +>> endobj +999 0 obj << +/Title 1000 0 R +/A 997 0 R +/Parent 983 0 R +/Prev 995 0 R +/Next 1003 0 R +>> endobj +995 0 obj << +/Title 996 0 R +/A 993 0 R +/Parent 983 0 R +/Prev 991 0 R +/Next 999 0 R +>> endobj +991 0 obj << +/Title 992 0 R +/A 989 0 R +/Parent 983 0 R +/Prev 987 0 R +/Next 995 0 R +>> endobj +987 0 obj << +/Title 988 0 R +/A 985 0 R +/Parent 983 0 R +/Next 991 0 R +>> endobj +983 0 obj << +/Title 984 0 R +/A 981 0 R +/Parent 971 0 R +/Prev 979 0 R +/Next 1011 0 R +/First 987 0 R +/Last 1007 0 R +/Count -6 +>> endobj +979 0 obj << +/Title 980 0 R +/A 977 0 R +/Parent 971 0 R +/Prev 975 0 R +/Next 983 0 R +>> endobj +975 0 obj << +/Title 976 0 R +/A 973 0 R +/Parent 971 0 R +/Next 979 0 R +>> endobj +971 0 obj << +/Title 972 0 R +/A 969 0 R +/Parent 455 0 R +/Prev 875 0 R +/Next 1027 0 R +/First 975 0 R +/Last 1015 0 R +/Count -5 +>> endobj +967 0 obj << +/Title 968 0 R +/A 965 0 R +/Parent 875 0 R +/Prev 959 0 R +>> endobj +963 0 obj << +/Title 964 0 R +/A 961 0 R +/Parent 959 0 R +>> endobj +959 0 obj << +/Title 960 0 R +/A 957 0 R +/Parent 875 0 R +/Prev 955 0 R +/Next 967 0 R +/First 963 0 R +/Last 963 0 R +/Count -1 +>> endobj +955 0 obj << +/Title 956 0 R +/A 953 0 R +/Parent 875 0 R +/Prev 943 0 R +/Next 959 0 R +>> endobj +951 0 obj << +/Title 952 0 R +/A 949 0 R +/Parent 943 0 R +/Prev 947 0 R +>> endobj +947 0 obj << +/Title 948 0 R +/A 945 0 R +/Parent 943 0 R +/Next 951 0 R +>> endobj +943 0 obj << +/Title 944 0 R +/A 941 0 R +/Parent 875 0 R +/Prev 927 0 R +/Next 955 0 R +/First 947 0 R +/Last 951 0 R +/Count -2 +>> endobj +939 0 obj << +/Title 940 0 R +/A 937 0 R +/Parent 931 0 R +/Prev 935 0 R +>> endobj +935 0 obj << +/Title 936 0 R +/A 933 0 R +/Parent 931 0 R +/Next 939 0 R +>> endobj +931 0 obj << +/Title 932 0 R +/A 929 0 R +/Parent 927 0 R +/First 935 0 R +/Last 939 0 R +/Count -2 +>> endobj +927 0 obj << +/Title 928 0 R +/A 925 0 R +/Parent 875 0 R +/Prev 883 0 R +/Next 943 0 R +/First 931 0 R +/Last 931 0 R +/Count -1 +>> endobj +923 0 obj << +/Title 924 0 R +/A 921 0 R +/Parent 887 0 R +/Prev 919 0 R +>> endobj +919 0 obj << +/Title 920 0 R +/A 917 0 R +/Parent 887 0 R +/Prev 915 0 R +/Next 923 0 R +>> endobj +915 0 obj << +/Title 916 0 R +/A 913 0 R +/Parent 887 0 R +/Prev 911 0 R +/Next 919 0 R +>> endobj +911 0 obj << +/Title 912 0 R +/A 909 0 R +/Parent 887 0 R +/Prev 907 0 R +/Next 915 0 R +>> endobj +907 0 obj << +/Title 908 0 R +/A 905 0 R +/Parent 887 0 R +/Prev 903 0 R +/Next 911 0 R +>> endobj +903 0 obj << +/Title 904 0 R +/A 901 0 R +/Parent 887 0 R +/Prev 899 0 R +/Next 907 0 R +>> endobj +899 0 obj << +/Title 900 0 R +/A 897 0 R +/Parent 887 0 R +/Prev 895 0 R +/Next 903 0 R +>> endobj +895 0 obj << +/Title 896 0 R +/A 893 0 R +/Parent 887 0 R +/Prev 891 0 R +/Next 899 0 R +>> endobj +891 0 obj << +/Title 892 0 R +/A 889 0 R +/Parent 887 0 R +/Next 895 0 R +>> endobj +887 0 obj << +/Title 888 0 R +/A 885 0 R +/Parent 883 0 R +/First 891 0 R +/Last 923 0 R +/Count -9 +>> endobj +883 0 obj << +/Title 884 0 R +/A 881 0 R +/Parent 875 0 R +/Prev 879 0 R +/Next 927 0 R +/First 887 0 R +/Last 887 0 R +/Count -1 +>> endobj +879 0 obj << +/Title 880 0 R +/A 877 0 R +/Parent 875 0 R +/Next 883 0 R +>> endobj +875 0 obj << +/Title 876 0 R +/A 873 0 R +/Parent 455 0 R +/Prev 767 0 R +/Next 971 0 R +/First 879 0 R +/Last 967 0 R +/Count -7 +>> endobj +871 0 obj << +/Title 872 0 R +/A 869 0 R +/Parent 863 0 R +/Prev 867 0 R +>> endobj +867 0 obj << +/Title 868 0 R +/A 865 0 R +/Parent 863 0 R +/Next 871 0 R +>> endobj +863 0 obj << +/Title 864 0 R +/A 861 0 R +/Parent 767 0 R +/Prev 823 0 R +/First 867 0 R +/Last 871 0 R +/Count -2 +>> endobj +859 0 obj << +/Title 860 0 R +/A 857 0 R +/Parent 823 0 R +/Prev 855 0 R +>> endobj +855 0 obj << +/Title 856 0 R +/A 853 0 R +/Parent 823 0 R +/Prev 851 0 R +/Next 859 0 R +>> endobj +851 0 obj << +/Title 852 0 R +/A 849 0 R +/Parent 823 0 R +/Prev 839 0 R +/Next 855 0 R +>> endobj +847 0 obj << +/Title 848 0 R +/A 845 0 R +/Parent 839 0 R +/Prev 843 0 R +>> endobj +843 0 obj << +/Title 844 0 R +/A 841 0 R +/Parent 839 0 R +/Next 847 0 R +>> endobj +839 0 obj << +/Title 840 0 R +/A 837 0 R +/Parent 823 0 R +/Prev 835 0 R +/Next 851 0 R +/First 843 0 R +/Last 847 0 R +/Count -2 +>> endobj +835 0 obj << +/Title 836 0 R +/A 833 0 R +/Parent 823 0 R +/Prev 831 0 R +/Next 839 0 R +>> endobj +831 0 obj << +/Title 832 0 R +/A 829 0 R +/Parent 823 0 R +/Prev 827 0 R +/Next 835 0 R +>> endobj +827 0 obj << +/Title 828 0 R +/A 825 0 R +/Parent 823 0 R +/Next 831 0 R +>> endobj +823 0 obj << +/Title 824 0 R +/A 821 0 R +/Parent 767 0 R +/Prev 807 0 R +/Next 863 0 R +/First 827 0 R +/Last 859 0 R +/Count -7 +>> endobj +819 0 obj << +/Title 820 0 R +/A 817 0 R +/Parent 811 0 R +/Prev 815 0 R +>> endobj +815 0 obj << +/Title 816 0 R +/A 813 0 R +/Parent 811 0 R +/Next 819 0 R +>> endobj +811 0 obj << +/Title 812 0 R +/A 809 0 R +/Parent 807 0 R +/First 815 0 R +/Last 819 0 R +/Count -2 +>> endobj +807 0 obj << +/Title 808 0 R +/A 805 0 R +/Parent 767 0 R +/Prev 791 0 R +/Next 823 0 R +/First 811 0 R +/Last 811 0 R +/Count -1 +>> endobj +803 0 obj << +/Title 804 0 R +/A 801 0 R +/Parent 791 0 R +/Prev 799 0 R +>> endobj +799 0 obj << +/Title 800 0 R +/A 797 0 R +/Parent 791 0 R +/Prev 795 0 R +/Next 803 0 R +>> endobj +795 0 obj << +/Title 796 0 R +/A 793 0 R +/Parent 791 0 R +/Next 799 0 R +>> endobj +791 0 obj << +/Title 792 0 R +/A 789 0 R +/Parent 767 0 R +/Prev 775 0 R +/Next 807 0 R +/First 795 0 R +/Last 803 0 R +/Count -3 +>> endobj +787 0 obj << +/Title 788 0 R +/A 785 0 R +/Parent 775 0 R +/Prev 783 0 R +>> endobj +783 0 obj << +/Title 784 0 R +/A 781 0 R +/Parent 775 0 R +/Prev 779 0 R +/Next 787 0 R +>> endobj +779 0 obj << +/Title 780 0 R +/A 777 0 R +/Parent 775 0 R +/Next 783 0 R +>> endobj +775 0 obj << +/Title 776 0 R +/A 773 0 R +/Parent 767 0 R +/Prev 771 0 R +/Next 791 0 R +/First 779 0 R +/Last 787 0 R +/Count -3 +>> endobj +771 0 obj << +/Title 772 0 R +/A 769 0 R +/Parent 767 0 R +/Next 775 0 R +>> endobj +767 0 obj << +/Title 768 0 R +/A 765 0 R +/Parent 455 0 R +/Prev 727 0 R +/Next 875 0 R +/First 771 0 R +/Last 863 0 R +/Count -6 +>> endobj +763 0 obj << +/Title 764 0 R +/A 761 0 R +/Parent 755 0 R +/Prev 759 0 R +>> endobj +759 0 obj << +/Title 760 0 R +/A 757 0 R +/Parent 755 0 R +/Next 763 0 R +>> endobj +755 0 obj << +/Title 756 0 R +/A 753 0 R +/Parent 727 0 R +/Prev 743 0 R +/First 759 0 R +/Last 763 0 R +/Count -2 +>> endobj +751 0 obj << +/Title 752 0 R +/A 749 0 R +/Parent 743 0 R +/Prev 747 0 R +>> endobj +747 0 obj << +/Title 748 0 R +/A 745 0 R +/Parent 743 0 R +/Next 751 0 R +>> endobj +743 0 obj << +/Title 744 0 R +/A 741 0 R +/Parent 727 0 R +/Prev 735 0 R +/Next 755 0 R +/First 747 0 R +/Last 751 0 R +/Count -2 +>> endobj +739 0 obj << +/Title 740 0 R +/A 737 0 R +/Parent 735 0 R +>> endobj +735 0 obj << +/Title 736 0 R +/A 733 0 R +/Parent 727 0 R +/Prev 731 0 R +/Next 743 0 R +/First 739 0 R +/Last 739 0 R +/Count -1 +>> endobj +731 0 obj << +/Title 732 0 R +/A 729 0 R +/Parent 727 0 R +/Next 735 0 R +>> endobj +727 0 obj << +/Title 728 0 R +/A 725 0 R +/Parent 455 0 R +/Prev 583 0 R +/Next 767 0 R +/First 731 0 R +/Last 755 0 R +/Count -4 +>> endobj +723 0 obj << +/Title 724 0 R +/A 721 0 R +/Parent 711 0 R +/Prev 719 0 R +>> endobj +719 0 obj << +/Title 720 0 R +/A 717 0 R +/Parent 711 0 R +/Prev 715 0 R +/Next 723 0 R +>> endobj +715 0 obj << +/Title 716 0 R +/A 713 0 R +/Parent 711 0 R +/Next 719 0 R +>> endobj +711 0 obj << +/Title 712 0 R +/A 709 0 R +/Parent 583 0 R +/Prev 623 0 R +/First 715 0 R +/Last 723 0 R +/Count -3 +>> endobj +707 0 obj << +/Title 708 0 R +/A 705 0 R +/Parent 623 0 R +/Prev 687 0 R +>> endobj +703 0 obj << +/Title 704 0 R +/A 701 0 R +/Parent 687 0 R +/Prev 699 0 R +>> endobj +699 0 obj << +/Title 700 0 R +/A 697 0 R +/Parent 687 0 R +/Prev 695 0 R +/Next 703 0 R +>> endobj +695 0 obj << +/Title 696 0 R +/A 693 0 R +/Parent 687 0 R +/Prev 691 0 R +/Next 699 0 R +>> endobj +691 0 obj << +/Title 692 0 R +/A 689 0 R +/Parent 687 0 R +/Next 695 0 R +>> endobj +687 0 obj << +/Title 688 0 R +/A 685 0 R +/Parent 623 0 R +/Prev 639 0 R +/Next 707 0 R +/First 691 0 R +/Last 703 0 R +/Count -4 +>> endobj +683 0 obj << +/Title 684 0 R +/A 681 0 R +/Parent 639 0 R +/Prev 679 0 R +>> endobj +679 0 obj << +/Title 680 0 R +/A 677 0 R +/Parent 639 0 R +/Prev 675 0 R +/Next 683 0 R +>> endobj +675 0 obj << +/Title 676 0 R +/A 673 0 R +/Parent 639 0 R +/Prev 671 0 R +/Next 679 0 R +>> endobj +671 0 obj << +/Title 672 0 R +/A 669 0 R +/Parent 639 0 R +/Prev 667 0 R +/Next 675 0 R +>> endobj +667 0 obj << +/Title 668 0 R +/A 665 0 R +/Parent 639 0 R +/Prev 663 0 R +/Next 671 0 R +>> endobj +663 0 obj << +/Title 664 0 R +/A 661 0 R +/Parent 639 0 R +/Prev 659 0 R +/Next 667 0 R +>> endobj +659 0 obj << +/Title 660 0 R +/A 657 0 R +/Parent 639 0 R +/Prev 655 0 R +/Next 663 0 R +>> endobj +655 0 obj << +/Title 656 0 R +/A 653 0 R +/Parent 639 0 R +/Prev 651 0 R +/Next 659 0 R +>> endobj +651 0 obj << +/Title 652 0 R +/A 649 0 R +/Parent 639 0 R +/Prev 647 0 R +/Next 655 0 R +>> endobj +647 0 obj << +/Title 648 0 R +/A 645 0 R +/Parent 639 0 R +/Prev 643 0 R +/Next 651 0 R +>> endobj +643 0 obj << +/Title 644 0 R +/A 641 0 R +/Parent 639 0 R +/Next 647 0 R +>> endobj +639 0 obj << +/Title 640 0 R +/A 637 0 R +/Parent 623 0 R +/Prev 635 0 R +/Next 687 0 R +/First 643 0 R +/Last 683 0 R +/Count -11 +>> endobj +635 0 obj << +/Title 636 0 R +/A 633 0 R +/Parent 623 0 R +/Prev 631 0 R +/Next 639 0 R +>> endobj +631 0 obj << +/Title 632 0 R +/A 629 0 R +/Parent 623 0 R +/Prev 627 0 R +/Next 635 0 R +>> endobj +627 0 obj << +/Title 628 0 R +/A 625 0 R +/Parent 623 0 R +/Next 631 0 R +>> endobj +623 0 obj << +/Title 624 0 R +/A 621 0 R +/Parent 583 0 R +/Prev 611 0 R +/Next 711 0 R +/First 627 0 R +/Last 707 0 R +/Count -6 +>> endobj +619 0 obj << +/Title 620 0 R +/A 617 0 R +/Parent 611 0 R +/Prev 615 0 R +>> endobj +615 0 obj << +/Title 616 0 R +/A 613 0 R +/Parent 611 0 R +/Next 619 0 R +>> endobj +611 0 obj << +/Title 612 0 R +/A 609 0 R +/Parent 583 0 R +/Prev 591 0 R +/Next 623 0 R +/First 615 0 R +/Last 619 0 R +/Count -2 +>> endobj +607 0 obj << +/Title 608 0 R +/A 605 0 R +/Parent 591 0 R +/Prev 595 0 R +>> endobj +603 0 obj << +/Title 604 0 R +/A 601 0 R +/Parent 595 0 R +/Prev 599 0 R +>> endobj +599 0 obj << +/Title 600 0 R +/A 597 0 R +/Parent 595 0 R +/Next 603 0 R +>> endobj +595 0 obj << +/Title 596 0 R +/A 593 0 R +/Parent 591 0 R +/Next 607 0 R +/First 599 0 R +/Last 603 0 R +/Count -2 +>> endobj +591 0 obj << +/Title 592 0 R +/A 589 0 R +/Parent 583 0 R +/Prev 587 0 R +/Next 611 0 R +/First 595 0 R +/Last 607 0 R +/Count -2 +>> endobj +587 0 obj << +/Title 588 0 R +/A 585 0 R +/Parent 583 0 R +/Next 591 0 R +>> endobj +583 0 obj << +/Title 584 0 R +/A 581 0 R +/Parent 455 0 R +/Prev 459 0 R +/Next 727 0 R +/First 587 0 R +/Last 711 0 R +/Count -5 +>> endobj +579 0 obj << +/Title 580 0 R +/A 577 0 R +/Parent 571 0 R +/Prev 575 0 R +>> endobj +575 0 obj << +/Title 576 0 R +/A 573 0 R +/Parent 571 0 R +/Next 579 0 R +>> endobj +571 0 obj << +/Title 572 0 R +/A 569 0 R +/Parent 459 0 R +/Prev 551 0 R +/First 575 0 R +/Last 579 0 R +/Count -2 +>> endobj +567 0 obj << +/Title 568 0 R +/A 565 0 R +/Parent 563 0 R +>> endobj +563 0 obj << +/Title 564 0 R +/A 561 0 R +/Parent 551 0 R +/Prev 559 0 R +/First 567 0 R +/Last 567 0 R +/Count -1 +>> endobj +559 0 obj << +/Title 560 0 R +/A 557 0 R +/Parent 551 0 R +/Prev 555 0 R +/Next 563 0 R +>> endobj +555 0 obj << +/Title 556 0 R +/A 553 0 R +/Parent 551 0 R +/Next 559 0 R +>> endobj +551 0 obj << +/Title 552 0 R +/A 549 0 R +/Parent 459 0 R +/Prev 539 0 R +/Next 571 0 R +/First 555 0 R +/Last 563 0 R +/Count -3 +>> endobj +547 0 obj << +/Title 548 0 R +/A 545 0 R +/Parent 539 0 R +/Prev 543 0 R +>> endobj +543 0 obj << +/Title 544 0 R +/A 541 0 R +/Parent 539 0 R +/Next 547 0 R +>> endobj +539 0 obj << +/Title 540 0 R +/A 537 0 R +/Parent 459 0 R +/Prev 523 0 R +/Next 551 0 R +/First 543 0 R +/Last 547 0 R +/Count -2 +>> endobj +535 0 obj << +/Title 536 0 R +/A 533 0 R +/Parent 523 0 R +/Prev 531 0 R +>> endobj +531 0 obj << +/Title 532 0 R +/A 529 0 R +/Parent 523 0 R +/Prev 527 0 R +/Next 535 0 R +>> endobj +527 0 obj << +/Title 528 0 R +/A 525 0 R +/Parent 523 0 R +/Next 531 0 R +>> endobj +523 0 obj << +/Title 524 0 R +/A 521 0 R +/Parent 459 0 R +/Prev 487 0 R +/Next 539 0 R +/First 527 0 R +/Last 535 0 R +/Count -3 +>> endobj +519 0 obj << +/Title 520 0 R +/A 517 0 R +/Parent 487 0 R +/Prev 515 0 R +>> endobj +515 0 obj << +/Title 516 0 R +/A 513 0 R +/Parent 487 0 R +/Prev 511 0 R +/Next 519 0 R +>> endobj +511 0 obj << +/Title 512 0 R +/A 509 0 R +/Parent 487 0 R +/Prev 507 0 R +/Next 515 0 R +>> endobj +507 0 obj << +/Title 508 0 R +/A 505 0 R +/Parent 487 0 R +/Prev 503 0 R +/Next 511 0 R +>> endobj +503 0 obj << +/Title 504 0 R +/A 501 0 R +/Parent 487 0 R +/Prev 499 0 R +/Next 507 0 R +>> endobj +499 0 obj << +/Title 500 0 R +/A 497 0 R +/Parent 487 0 R +/Prev 495 0 R +/Next 503 0 R +>> endobj +495 0 obj << +/Title 496 0 R +/A 493 0 R +/Parent 487 0 R +/Prev 491 0 R +/Next 499 0 R +>> endobj +491 0 obj << +/Title 492 0 R +/A 489 0 R +/Parent 487 0 R +/Next 495 0 R +>> endobj +487 0 obj << +/Title 488 0 R +/A 485 0 R +/Parent 459 0 R +/Prev 471 0 R +/Next 523 0 R +/First 491 0 R +/Last 519 0 R +/Count -8 +>> endobj +483 0 obj << +/Title 484 0 R +/A 481 0 R +/Parent 471 0 R +/Prev 479 0 R +>> endobj +479 0 obj << +/Title 480 0 R +/A 477 0 R +/Parent 471 0 R +/Prev 475 0 R +/Next 483 0 R +>> endobj +475 0 obj << +/Title 476 0 R +/A 473 0 R +/Parent 471 0 R +/Next 479 0 R +>> endobj +471 0 obj << +/Title 472 0 R +/A 469 0 R +/Parent 459 0 R +/Prev 467 0 R +/Next 487 0 R +/First 475 0 R +/Last 483 0 R +/Count -3 +>> endobj +467 0 obj << +/Title 468 0 R +/A 465 0 R +/Parent 459 0 R +/Prev 463 0 R +/Next 471 0 R +>> endobj +463 0 obj << +/Title 464 0 R +/A 461 0 R +/Parent 459 0 R +/Next 467 0 R +>> endobj +459 0 obj << +/Title 460 0 R +/A 457 0 R +/Parent 455 0 R +/Next 583 0 R +/First 463 0 R +/Last 571 0 R +/Count -8 +>> endobj +455 0 obj << +/Title 456 0 R +/A 453 0 R +/Parent 6733 0 R +/Prev 99 0 R +/Next 2423 0 R +/First 459 0 R +/Last 2415 0 R +/Count -20 +>> endobj +451 0 obj << +/Title 452 0 R +/A 449 0 R +/Parent 447 0 R +>> endobj +447 0 obj << +/Title 448 0 R +/A 445 0 R +/Parent 99 0 R +/Prev 419 0 R +/First 451 0 R +/Last 451 0 R +/Count -1 +>> endobj +443 0 obj << +/Title 444 0 R +/A 441 0 R +/Parent 419 0 R +/Prev 431 0 R +>> endobj +439 0 obj << +/Title 440 0 R +/A 437 0 R +/Parent 431 0 R +/Prev 435 0 R +>> endobj +435 0 obj << +/Title 436 0 R +/A 433 0 R +/Parent 431 0 R +/Next 439 0 R +>> endobj +431 0 obj << +/Title 432 0 R +/A 429 0 R +/Parent 419 0 R +/Prev 427 0 R +/Next 443 0 R +/First 435 0 R +/Last 439 0 R +/Count -2 +>> endobj +427 0 obj << +/Title 428 0 R +/A 425 0 R +/Parent 419 0 R +/Prev 423 0 R +/Next 431 0 R +>> endobj +423 0 obj << +/Title 424 0 R +/A 421 0 R +/Parent 419 0 R +/Next 427 0 R +>> endobj +419 0 obj << +/Title 420 0 R +/A 417 0 R +/Parent 99 0 R +/Prev 323 0 R +/Next 447 0 R +/First 423 0 R +/Last 443 0 R +/Count -4 +>> endobj +415 0 obj << +/Title 416 0 R +/A 413 0 R +/Parent 407 0 R +/Prev 411 0 R +>> endobj +411 0 obj << +/Title 412 0 R +/A 409 0 R +/Parent 407 0 R +/Next 415 0 R +>> endobj +407 0 obj << +/Title 408 0 R +/A 405 0 R +/Parent 323 0 R +/Prev 375 0 R +/First 411 0 R +/Last 415 0 R +/Count -2 +>> endobj +403 0 obj << +/Title 404 0 R +/A 401 0 R +/Parent 375 0 R +/Prev 399 0 R +>> endobj +399 0 obj << +/Title 400 0 R +/A 397 0 R +/Parent 375 0 R +/Prev 395 0 R +/Next 403 0 R +>> endobj +395 0 obj << +/Title 396 0 R +/A 393 0 R +/Parent 375 0 R +/Prev 387 0 R +/Next 399 0 R +>> endobj +391 0 obj << +/Title 392 0 R +/A 389 0 R +/Parent 387 0 R +>> endobj +387 0 obj << +/Title 388 0 R +/A 385 0 R +/Parent 375 0 R +/Prev 383 0 R +/Next 395 0 R +/First 391 0 R +/Last 391 0 R +/Count -1 +>> endobj +383 0 obj << +/Title 384 0 R +/A 381 0 R +/Parent 375 0 R +/Prev 379 0 R +/Next 387 0 R +>> endobj +379 0 obj << +/Title 380 0 R +/A 377 0 R +/Parent 375 0 R +/Next 383 0 R +>> endobj +375 0 obj << +/Title 376 0 R +/A 373 0 R +/Parent 323 0 R +/Prev 363 0 R +/Next 407 0 R +/First 379 0 R +/Last 403 0 R +/Count -6 +>> endobj +371 0 obj << +/Title 372 0 R +/A 369 0 R +/Parent 363 0 R +/Prev 367 0 R +>> endobj +367 0 obj << +/Title 368 0 R +/A 365 0 R +/Parent 363 0 R +/Next 371 0 R +>> endobj +363 0 obj << +/Title 364 0 R +/A 361 0 R +/Parent 323 0 R +/Prev 331 0 R +/Next 375 0 R +/First 367 0 R +/Last 371 0 R +/Count -2 +>> endobj +359 0 obj << +/Title 360 0 R +/A 357 0 R +/Parent 347 0 R +/Prev 355 0 R +>> endobj +355 0 obj << +/Title 356 0 R +/A 353 0 R +/Parent 347 0 R +/Prev 351 0 R +/Next 359 0 R +>> endobj +351 0 obj << +/Title 352 0 R +/A 349 0 R +/Parent 347 0 R +/Next 355 0 R +>> endobj +347 0 obj << +/Title 348 0 R +/A 345 0 R +/Parent 331 0 R +/Prev 343 0 R +/First 351 0 R +/Last 359 0 R +/Count -3 +>> endobj +343 0 obj << +/Title 344 0 R +/A 341 0 R +/Parent 331 0 R +/Prev 339 0 R +/Next 347 0 R +>> endobj +339 0 obj << +/Title 340 0 R +/A 337 0 R +/Parent 331 0 R +/Prev 335 0 R +/Next 343 0 R +>> endobj +335 0 obj << +/Title 336 0 R +/A 333 0 R +/Parent 331 0 R +/Next 339 0 R +>> endobj +331 0 obj << +/Title 332 0 R +/A 329 0 R +/Parent 323 0 R +/Prev 327 0 R +/Next 363 0 R +/First 335 0 R +/Last 347 0 R +/Count -4 +>> endobj +327 0 obj << +/Title 328 0 R +/A 325 0 R +/Parent 323 0 R +/Next 331 0 R +>> endobj +323 0 obj << +/Title 324 0 R +/A 321 0 R +/Parent 99 0 R +/Prev 263 0 R +/Next 419 0 R +/First 327 0 R +/Last 407 0 R +/Count -5 +>> endobj +319 0 obj << +/Title 320 0 R +/A 317 0 R +/Parent 303 0 R +/Prev 315 0 R +>> endobj +315 0 obj << +/Title 316 0 R +/A 313 0 R +/Parent 303 0 R +/Prev 311 0 R +/Next 319 0 R +>> endobj +311 0 obj << +/Title 312 0 R +/A 309 0 R +/Parent 303 0 R +/Prev 307 0 R +/Next 315 0 R +>> endobj +307 0 obj << +/Title 308 0 R +/A 305 0 R +/Parent 303 0 R +/Next 311 0 R +>> endobj +303 0 obj << +/Title 304 0 R +/A 301 0 R +/Parent 263 0 R +/Prev 295 0 R +/First 307 0 R +/Last 319 0 R +/Count -4 +>> endobj +299 0 obj << +/Title 300 0 R +/A 297 0 R +/Parent 295 0 R +>> endobj +295 0 obj << +/Title 296 0 R +/A 293 0 R +/Parent 263 0 R +/Prev 271 0 R +/Next 303 0 R +/First 299 0 R +/Last 299 0 R +/Count -1 +>> endobj +291 0 obj << +/Title 292 0 R +/A 289 0 R +/Parent 271 0 R +/Prev 287 0 R +>> endobj +287 0 obj << +/Title 288 0 R +/A 285 0 R +/Parent 271 0 R +/Prev 283 0 R +/Next 291 0 R +>> endobj +283 0 obj << +/Title 284 0 R +/A 281 0 R +/Parent 271 0 R +/Prev 275 0 R +/Next 287 0 R +>> endobj +279 0 obj << +/Title 280 0 R +/A 277 0 R +/Parent 275 0 R +>> endobj +275 0 obj << +/Title 276 0 R +/A 273 0 R +/Parent 271 0 R +/Next 283 0 R +/First 279 0 R +/Last 279 0 R +/Count -1 +>> endobj +271 0 obj << +/Title 272 0 R +/A 269 0 R +/Parent 263 0 R +/Prev 267 0 R +/Next 295 0 R +/First 275 0 R +/Last 291 0 R +/Count -4 +>> endobj +267 0 obj << +/Title 268 0 R +/A 265 0 R +/Parent 263 0 R +/Next 271 0 R +>> endobj +263 0 obj << +/Title 264 0 R +/A 261 0 R +/Parent 99 0 R +/Prev 183 0 R +/Next 323 0 R +/First 267 0 R +/Last 303 0 R +/Count -4 +>> endobj +259 0 obj << +/Title 260 0 R +/A 257 0 R +/Parent 235 0 R +/Prev 255 0 R +>> endobj +255 0 obj << +/Title 256 0 R +/A 253 0 R +/Parent 235 0 R +/Prev 251 0 R +/Next 259 0 R +>> endobj +251 0 obj << +/Title 252 0 R +/A 249 0 R +/Parent 235 0 R +/Prev 247 0 R +/Next 255 0 R +>> endobj +247 0 obj << +/Title 248 0 R +/A 245 0 R +/Parent 235 0 R +/Prev 243 0 R +/Next 251 0 R +>> endobj +243 0 obj << +/Title 244 0 R +/A 241 0 R +/Parent 235 0 R +/Prev 239 0 R +/Next 247 0 R +>> endobj +239 0 obj << +/Title 240 0 R +/A 237 0 R +/Parent 235 0 R +/Next 243 0 R +>> endobj +235 0 obj << +/Title 236 0 R +/A 233 0 R +/Parent 183 0 R +/Prev 211 0 R +/First 239 0 R +/Last 259 0 R +/Count -6 +>> endobj +231 0 obj << +/Title 232 0 R +/A 229 0 R +/Parent 211 0 R +/Prev 215 0 R +>> endobj +227 0 obj << +/Title 228 0 R +/A 225 0 R +/Parent 215 0 R +/Prev 223 0 R +>> endobj +223 0 obj << +/Title 224 0 R +/A 221 0 R +/Parent 215 0 R +/Prev 219 0 R +/Next 227 0 R +>> endobj +219 0 obj << +/Title 220 0 R +/A 217 0 R +/Parent 215 0 R +/Next 223 0 R +>> endobj +215 0 obj << +/Title 216 0 R +/A 213 0 R +/Parent 211 0 R +/Next 231 0 R +/First 219 0 R +/Last 227 0 R +/Count -3 +>> endobj +211 0 obj << +/Title 212 0 R +/A 209 0 R +/Parent 183 0 R +/Prev 207 0 R +/Next 235 0 R +/First 215 0 R +/Last 231 0 R +/Count -2 +>> endobj +207 0 obj << +/Title 208 0 R +/A 205 0 R +/Parent 183 0 R +/Prev 203 0 R +/Next 211 0 R +>> endobj +203 0 obj << +/Title 204 0 R +/A 201 0 R +/Parent 183 0 R +/Prev 191 0 R +/Next 207 0 R +>> endobj +199 0 obj << +/Title 200 0 R +/A 197 0 R +/Parent 191 0 R +/Prev 195 0 R +>> endobj +195 0 obj << +/Title 196 0 R +/A 193 0 R +/Parent 191 0 R +/Next 199 0 R +>> endobj +191 0 obj << +/Title 192 0 R +/A 189 0 R +/Parent 183 0 R +/Prev 187 0 R +/Next 203 0 R +/First 195 0 R +/Last 199 0 R +/Count -2 +>> endobj +187 0 obj << +/Title 188 0 R +/A 185 0 R +/Parent 183 0 R +/Next 191 0 R +>> endobj +183 0 obj << +/Title 184 0 R +/A 181 0 R +/Parent 99 0 R +/Prev 103 0 R +/Next 263 0 R +/First 187 0 R +/Last 235 0 R +/Count -6 +>> endobj +179 0 obj << +/Title 180 0 R +/A 177 0 R +/Parent 163 0 R +/Prev 175 0 R +>> endobj +175 0 obj << +/Title 176 0 R +/A 173 0 R +/Parent 163 0 R +/Prev 171 0 R +/Next 179 0 R +>> endobj +171 0 obj << +/Title 172 0 R +/A 169 0 R +/Parent 163 0 R +/Prev 167 0 R +/Next 175 0 R +>> endobj +167 0 obj << +/Title 168 0 R +/A 165 0 R +/Parent 163 0 R +/Next 171 0 R +>> endobj +163 0 obj << +/Title 164 0 R +/A 161 0 R +/Parent 103 0 R +/Prev 159 0 R +/First 167 0 R +/Last 179 0 R +/Count -4 +>> endobj +159 0 obj << +/Title 160 0 R +/A 157 0 R +/Parent 103 0 R +/Prev 115 0 R +/Next 163 0 R +>> endobj +155 0 obj << +/Title 156 0 R +/A 153 0 R +/Parent 151 0 R +>> endobj +151 0 obj << +/Title 152 0 R +/A 149 0 R +/Parent 115 0 R +/Prev 143 0 R +/First 155 0 R +/Last 155 0 R +/Count -1 +>> endobj +147 0 obj << +/Title 148 0 R +/A 145 0 R +/Parent 143 0 R +>> endobj +143 0 obj << +/Title 144 0 R +/A 141 0 R +/Parent 115 0 R +/Prev 135 0 R +/Next 151 0 R +/First 147 0 R +/Last 147 0 R +/Count -1 +>> endobj +139 0 obj << +/Title 140 0 R +/A 137 0 R +/Parent 135 0 R +>> endobj +135 0 obj << +/Title 136 0 R +/A 133 0 R +/Parent 115 0 R +/Prev 127 0 R +/Next 143 0 R +/First 139 0 R +/Last 139 0 R +/Count -1 +>> endobj +131 0 obj << +/Title 132 0 R +/A 129 0 R +/Parent 127 0 R +>> endobj +127 0 obj << +/Title 128 0 R +/A 125 0 R +/Parent 115 0 R +/Prev 119 0 R +/Next 135 0 R +/First 131 0 R +/Last 131 0 R +/Count -1 +>> endobj +123 0 obj << +/Title 124 0 R +/A 121 0 R +/Parent 119 0 R +>> endobj +119 0 obj << +/Title 120 0 R +/A 117 0 R +/Parent 115 0 R +/Next 127 0 R +/First 123 0 R +/Last 123 0 R +/Count -1 +>> endobj +115 0 obj << +/Title 116 0 R +/A 113 0 R +/Parent 103 0 R +/Prev 111 0 R +/Next 159 0 R +/First 119 0 R +/Last 151 0 R +/Count -5 +>> endobj +111 0 obj << +/Title 112 0 R +/A 109 0 R +/Parent 103 0 R +/Prev 107 0 R +/Next 115 0 R +>> endobj +107 0 obj << +/Title 108 0 R +/A 105 0 R +/Parent 103 0 R +/Next 111 0 R +>> endobj +103 0 obj << +/Title 104 0 R +/A 101 0 R +/Parent 99 0 R +/Next 183 0 R +/First 107 0 R +/Last 163 0 R +/Count -5 +>> endobj +99 0 obj << +/Title 100 0 R +/A 97 0 R +/Parent 6733 0 R +/Prev 7 0 R +/Next 455 0 R +/First 103 0 R +/Last 447 0 R +/Count -6 +>> endobj +95 0 obj << +/Title 96 0 R +/A 93 0 R +/Parent 91 0 R +>> endobj +91 0 obj << +/Title 92 0 R +/A 89 0 R +/Parent 7 0 R +/Prev 39 0 R +/First 95 0 R +/Last 95 0 R +/Count -1 +>> endobj +87 0 obj << +/Title 88 0 R +/A 85 0 R +/Parent 79 0 R +/Prev 83 0 R +>> endobj +83 0 obj << +/Title 84 0 R +/A 81 0 R +/Parent 79 0 R +/Next 87 0 R +>> endobj +79 0 obj << +/Title 80 0 R +/A 77 0 R +/Parent 39 0 R +/Prev 75 0 R +/First 83 0 R +/Last 87 0 R +/Count -2 +>> endobj +75 0 obj << +/Title 76 0 R +/A 73 0 R +/Parent 39 0 R +/Prev 71 0 R +/Next 79 0 R +>> endobj +71 0 obj << +/Title 72 0 R +/A 69 0 R +/Parent 39 0 R +/Prev 67 0 R +/Next 75 0 R +>> endobj +67 0 obj << +/Title 68 0 R +/A 65 0 R +/Parent 39 0 R +/Prev 63 0 R +/Next 71 0 R +>> endobj +63 0 obj << +/Title 64 0 R +/A 61 0 R +/Parent 39 0 R +/Prev 47 0 R +/Next 67 0 R +>> endobj +59 0 obj << +/Title 60 0 R +/A 57 0 R +/Parent 47 0 R +/Prev 51 0 R +>> endobj +55 0 obj << +/Title 56 0 R +/A 53 0 R +/Parent 51 0 R +>> endobj +51 0 obj << +/Title 52 0 R +/A 49 0 R +/Parent 47 0 R +/Next 59 0 R +/First 55 0 R +/Last 55 0 R +/Count -1 +>> endobj +47 0 obj << +/Title 48 0 R +/A 45 0 R +/Parent 39 0 R +/Prev 43 0 R +/Next 63 0 R +/First 51 0 R +/Last 59 0 R +/Count -2 +>> endobj +43 0 obj << +/Title 44 0 R +/A 41 0 R +/Parent 39 0 R +/Next 47 0 R +>> endobj +39 0 obj << +/Title 40 0 R +/A 37 0 R +/Parent 7 0 R +/Prev 11 0 R +/Next 91 0 R +/First 43 0 R +/Last 79 0 R +/Count -7 +>> endobj +35 0 obj << +/Title 36 0 R +/A 33 0 R +/Parent 11 0 R +/Prev 31 0 R +>> endobj +31 0 obj << +/Title 32 0 R +/A 29 0 R +/Parent 11 0 R +/Prev 27 0 R +/Next 35 0 R +>> endobj +27 0 obj << +/Title 28 0 R +/A 25 0 R +/Parent 11 0 R +/Prev 23 0 R +/Next 31 0 R +>> endobj +23 0 obj << +/Title 24 0 R +/A 21 0 R +/Parent 11 0 R +/Prev 19 0 R +/Next 27 0 R +>> endobj +19 0 obj << +/Title 20 0 R +/A 17 0 R +/Parent 11 0 R +/Prev 15 0 R +/Next 23 0 R +>> endobj +15 0 obj << +/Title 16 0 R +/A 13 0 R +/Parent 11 0 R +/Next 19 0 R +>> endobj +11 0 obj << +/Title 12 0 R +/A 9 0 R +/Parent 7 0 R +/Next 39 0 R +/First 15 0 R +/Last 35 0 R +/Count -6 +>> endobj +7 0 obj << +/Title 8 0 R +/A 5 0 R +/Parent 6733 0 R +/Next 99 0 R +/First 11 0 R +/Last 91 0 R +/Count -3 +>> endobj +6734 0 obj << +/Names [(AccessControls) 2967 0 R (AdvancedNetworkManagement) 3033 0 R (Appendixes) 6515 0 R (Backup) 3039 0 R (CUPS-printing) 3030 0 R (ClientConfig) 2963 0 R (DNSDHCP) 3071 0 R (Doc-Start) 2870 0 R (FastStart) 2957 0 R (Further-Resources) 3072 0 R (InterdomainTrusts) 3027 0 R (IntroSMB) 2955 0 R (Item.1) 3954 0 R (Item.10) 4087 0 R (Item.100) 5701 0 R (Item.101) 5702 0 R (Item.102) 5703 0 R (Item.103) 5704 0 R (Item.104) 5705 0 R (Item.105) 5706 0 R (Item.106) 5707 0 R (Item.107) 5708 0 R (Item.108) 5709 0 R (Item.109) 5975 0 R (Item.11) 4088 0 R (Item.110) 5976 0 R (Item.111) 5977 0 R (Item.112) 5978 0 R (Item.113) 5988 0 R (Item.114) 5989 0 R (Item.115) 5990 0 R (Item.116) 5991 0 R (Item.117) 5992 0 R (Item.118) 5993 0 R (Item.119) 5998 0 R (Item.12) 4161 0 R (Item.120) 5999 0 R (Item.121) 6000 0 R (Item.122) 6025 0 R (Item.123) 6030 0 R (Item.124) 6031 0 R (Item.125) 6032 0 R (Item.126) 6033 0 R (Item.127) 6034 0 R (Item.128) 6035 0 R (Item.129) 6042 0 R (Item.13) 4162 0 R (Item.130) 6043 0 R (Item.131) 6044 0 R (Item.132) 6045 0 R (Item.133) 6046 0 R (Item.134) 6047 0 R (Item.135) 6048 0 R (Item.136) 6049 0 R (Item.137) 6050 0 R (Item.138) 6051 0 R (Item.139) 6060 0 R (Item.14) 4163 0 R (Item.140) 6061 0 R (Item.141) 6062 0 R (Item.142) 6063 0 R (Item.143) 6064 0 R (Item.144) 6065 0 R (Item.145) 6066 0 R (Item.146) 6067 0 R (Item.147) 6068 0 R (Item.148) 6069 0 R (Item.149) 6070 0 R (Item.15) 4164 0 R (Item.150) 6071 0 R (Item.151) 6072 0 R (Item.152) 6073 0 R (Item.153) 6074 0 R (Item.154) 6075 0 R (Item.155) 6076 0 R (Item.156) 6085 0 R (Item.157) 6086 0 R (Item.158) 6087 0 R (Item.159) 6088 0 R (Item.16) 4165 0 R (Item.160) 6089 0 R (Item.161) 6090 0 R (Item.162) 6091 0 R (Item.163) 6113 0 R (Item.164) 6114 0 R (Item.165) 6115 0 R (Item.166) 6116 0 R (Item.167) 6344 0 R (Item.168) 6345 0 R (Item.169) 6346 0 R (Item.17) 4166 0 R (Item.170) 6347 0 R (Item.171) 6348 0 R (Item.172) 6349 0 R (Item.173) 6350 0 R (Item.174) 6351 0 R (Item.175) 6352 0 R (Item.176) 6353 0 R (Item.177) 6354 0 R (Item.178) 6355 0 R (Item.179) 6356 0 R (Item.18) 4246 0 R (Item.180) 6357 0 R (Item.181) 6358 0 R (Item.182) 6359 0 R (Item.183) 6360 0 R (Item.184) 6361 0 R (Item.185) 6362 0 R (Item.186) 6390 0 R (Item.187) 6391 0 R (Item.188) 6392 0 R (Item.189) 6393 0 R (Item.19) 4247 0 R (Item.190) 6429 0 R (Item.191) 6430 0 R (Item.192) 6431 0 R (Item.193) 6436 0 R (Item.194) 6437 0 R (Item.195) 6442 0 R (Item.196) 6443 0 R (Item.197) 6444 0 R (Item.198) 6445 0 R (Item.199) 6446 0 R (Item.2) 3955 0 R (Item.20) 4248 0 R (Item.200) 6447 0 R (Item.201) 6448 0 R (Item.202) 6449 0 R (Item.203) 6450 0 R (Item.204) 6451 0 R (Item.205) 6452 0 R (Item.206) 6453 0 R (Item.207) 6458 0 R (Item.208) 6459 0 R (Item.209) 6460 0 R (Item.21) 4249 0 R (Item.210) 6527 0 R (Item.211) 6528 0 R (Item.212) 6529 0 R (Item.213) 6534 0 R (Item.214) 6535 0 R (Item.22) 4287 0 R (Item.23) 4288 0 R (Item.24) 4289 0 R (Item.25) 4290 0 R (Item.26) 4291 0 R (Item.27) 4292 0 R (Item.28) 4317 0 R (Item.29) 4318 0 R (Item.3) 3970 0 R (Item.30) 4319 0 R (Item.31) 4320 0 R (Item.32) 4377 0 R (Item.33) 4384 0 R (Item.34) 4385 0 R (Item.35) 4545 0 R (Item.36) 4546 0 R (Item.37) 4547 0 R (Item.38) 4623 0 R (Item.39) 4624 0 R (Item.4) 3971 0 R (Item.40) 4630 0 R (Item.41) 4631 0 R (Item.42) 4632 0 R (Item.43) 4666 0 R (Item.44) 4667 0 R (Item.45) 4672 0 R (Item.46) 4673 0 R (Item.47) 4674 0 R (Item.48) 4675 0 R (Item.49) 4843 0 R (Item.5) 4082 0 R (Item.50) 4844 0 R (Item.51) 4845 0 R (Item.52) 4846 0 R (Item.53) 4847 0 R (Item.54) 4848 0 R (Item.55) 4849 0 R (Item.56) 4953 0 R (Item.57) 4954 0 R (Item.58) 4955 0 R (Item.59) 4956 0 R (Item.6) 4083 0 R (Item.60) 5019 0 R (Item.61) 5020 0 R (Item.62) 5021 0 R (Item.63) 5022 0 R (Item.64) 5023 0 R (Item.65) 5024 0 R (Item.66) 5025 0 R (Item.67) 5026 0 R (Item.68) 5027 0 R (Item.69) 5028 0 R (Item.7) 4084 0 R (Item.70) 5029 0 R (Item.71) 5030 0 R (Item.72) 5031 0 R (Item.73) 5032 0 R (Item.74) 5033 0 R (Item.75) 5080 0 R (Item.76) 5081 0 R (Item.77) 5082 0 R (Item.78) 5390 0 R (Item.79) 5391 0 R (Item.8) 4085 0 R (Item.80) 5392 0 R (Item.81) 5393 0 R (Item.82) 5410 0 R (Item.83) 5411 0 R (Item.84) 5412 0 R (Item.85) 5413 0 R (Item.86) 5414 0 R (Item.87) 5421 0 R (Item.88) 5422 0 R (Item.89) 5423 0 R (Item.9) 4086 0 R (Item.90) 5437 0 R (Item.91) 5438 0 R (Item.92) 5439 0 R (Item.93) 5440 0 R (Item.94) 5695 0 R (Item.95) 5696 0 R (Item.96) 5697 0 R (Item.97) 5698 0 R (Item.98) 5699 0 R (Item.99) 5700 0 R (NT4Migration) 3042 0 R (NetworkBrowsing) 2964 0 R (Other-Clients) 3069 0 R (PolicyMgmt) 3034 0 R (Portability) 3068 0 R (ProfileMgmt) 3035 0 R (SWAT) 3043 0 R (SambaHA) 3040 0 R (ServerType) 2958 0 R (StandAloneServer) 2962 0 R (VFS) 3031 0 R (XMLpassdb) 4426 0 R (ads-create-machine-account) 4216 0 R (ads-member) 3993 0 R (ads-test-server) 4218 0 R (ads-test-smbclient) 4219 0 R (browse-force-master) 4310 0 R (bugreport) 3046 0 R (chapter*.1) 3077 0 R (chapter.1) 10 0 R (chapter.10) 458 0 R (chapter.11) 582 0 R (chapter.12) 726 0 R (chapter.13) 766 0 R (chapter.14) 874 0 R (chapter.15) 970 0 R (chapter.16) 1026 0 R (chapter.17) 1070 0 R (chapter.18) 1082 0 R (chapter.19) 1330 0 R (chapter.2) 38 0 R (chapter.20) 1874 0 R (chapter.21) 1926 0 R (chapter.22) 2030 0 R (chapter.23) 2062 0 R (chapter.24) 2122 0 R (chapter.25) 2238 0 R (chapter.26) 2306 0 R (chapter.27) 2378 0 R (chapter.28) 2402 0 R (chapter.29) 2414 0 R (chapter.3) 90 0 R (chapter.30) 2426 0 R (chapter.31) 2442 0 R (chapter.32) 2490 0 R (chapter.33) 2542 0 R (chapter.34) 2562 0 R (chapter.35) 2586 0 R (chapter.36) 2618 0 R (chapter.37) 2682 0 R (chapter.38) 2722 0 R (chapter.39) 2790 0 R (chapter.4) 102 0 R (chapter.40) 2842 0 R (chapter.41) 2850 0 R (chapter.5) 182 0 R (chapter.6) 262 0 R (chapter.7) 322 0 R (chapter.8) 418 0 R (chapter.9) 446 0 R (compiling) 3067 0 R (diagnosis) 3044 0 R (domain-member) 2961 0 R (example.12.3.1) 4555 0 R (example.13.2.1) 4596 0 R (figure.19.1) 5168 0 R (figure.19.10) 5739 0 R (figure.19.11) 5747 0 R (figure.19.12) 5755 0 R (figure.19.13) 5763 0 R (figure.19.14) 5771 0 R (figure.19.15) 5779 0 R (figure.19.2) 5178 0 R (figure.19.3) 5189 0 R (figure.19.4) 5233 0 R (figure.19.5) 5243 0 R (figure.19.6) 5253 0 R (figure.19.7) 5262 0 R (figure.19.8) 5722 0 R (figure.19.9) 5731 0 R (groupmapping) 2966 0 R (id2807007) 3871 0 R (id2807218) 3872 0 R (id2807372) 3878 0 R (id2807440) 3885 0 R (id2807529) 3888 0 R (id2807602) 3895 0 R (id2808137) 3935 0 R (id2808262) 3900 0 R (id2808302) 3903 0 R (id2808339) 3904 0 R (id2808435) 3906 0 R (id2808490) 3911 0 R (id2808534) 3914 0 R (id2808584) 3915 0 R (id2808685) 3916 0 R (id2808748) 3917 0 R (id2808782) 3924 0 R (id2808794) 3925 0 R (id2809010) 3930 0 R (id2810161) 3946 0 R (id2810256) 3947 0 R (id2810340) 3952 0 R (id2810455) 3953 0 R (id2810549) 3960 0 R (id2810588) 3961 0 R (id2810668) 3962 0 R (id2810710) 3963 0 R (id2810732) 3964 0 R (id2810962) 3980 0 R (id2810991) 3988 0 R (id2811048) 3991 0 R (id2811204) 4001 0 R (id2811273) 4002 0 R (id2811449) 4007 0 R (id2811477) 4008 0 R (id2811510) 4013 0 R (id2811539) 4014 0 R (id2811572) 4016 0 R (id2813379) 4021 0 R (id2813682) 4034 0 R (id2813698) 4035 0 R (id2813910) 4041 0 R (id2814230) 4057 0 R (id2814528) 4067 0 R (id2814550) 4068 0 R (id2814565) 4069 0 R (id2814598) 4070 0 R (id2814618) 4075 0 R (id2814654) 4076 0 R (id2814892) 4089 0 R (id2815000) 4094 0 R (id2815007) 4095 0 R (id2815046) 4096 0 R (id2815095) 4097 0 R (id2815166) 4102 0 R (id2815222) 4103 0 R (id2815249) 4104 0 R (id2817408) 4111 0 R (id2817579) 4117 0 R (id2817608) 4118 0 R (id2817757) 4123 0 R (id2817820) 4124 0 R (id2817841) 4125 0 R (id2817867) 4131 0 R (id2817913) 4132 0 R (id2817984) 4133 0 R (id2818045) 4138 0 R (id2818057) 4139 0 R (id2818082) 4140 0 R (id2818115) 4141 0 R (id2818144) 4142 0 R (id2819144) 4147 0 R (id2819267) 4148 0 R (id2819443) 4153 0 R (id2819696) 4160 0 R (id2819892) 4171 0 R (id2819954) 4173 0 R (id2819967) 4174 0 R (id2820034) 4175 0 R (id2820075) 4176 0 R (id2820100) 4183 0 R (id2820150) 4185 0 R (id2820161) 4186 0 R (id2820527) 4197 0 R (id2820667) 4206 0 R (id2820750) 4207 0 R (id2820954) 4217 0 R (id2821108) 4224 0 R (id2821128) 4225 0 R (id2821163) 4226 0 R (id2821194) 4227 0 R (id2823184) 4259 0 R (id2823530) 4237 0 R (id2823727) 4238 0 R (id2823799) 4243 0 R (id2823814) 4244 0 R (id2823864) 4245 0 R (id2824070) 4254 0 R (id2824770) 4269 0 R (id2824850) 4275 0 R (id2824953) 4280 0 R (id2824970) 4281 0 R (id2825131) 4282 0 R (id2825263) 4293 0 R (id2825400) 4294 0 R (id2825525) 4299 0 R (id2825747) 4304 0 R (id2826017) 4316 0 R (id2826173) 4321 0 R (id2826190) 4322 0 R (id2826219) 4323 0 R (id2826324) 4328 0 R (id2826385) 4329 0 R (id2826536) 4335 0 R (id2826734) 4340 0 R (id2826760) 4341 0 R (id2826790) 4342 0 R (id2826804) 4343 0 R (id2826877) 4348 0 R (id2826998) 4349 0 R (id2827045) 4354 0 R (id2827152) 4355 0 R (id2827231) 4361 0 R (id2827295) 4362 0 R (id2827422) 4367 0 R (id2827537) 4373 0 R (id2827636) 4375 0 R (id2827736) 4382 0 R (id2827875) 4386 0 R (id2827890) 4387 0 R (id2827919) 4388 0 R (id2831376) 4393 0 R (id2831701) 4398 0 R (id2831765) 4404 0 R (id2831929) 4409 0 R (id2831983) 4410 0 R (id2832019) 4411 0 R (id2832074) 4412 0 R (id2832106) 4417 0 R (id2832372) 4418 0 R (id2832524) 4424 0 R (id2832560) 4425 0 R (id2832599) 4431 0 R (id2832706) 4433 0 R (id2832734) 4434 0 R (id2832874) 4446 0 R (id2832900) 4448 0 R (id2833007) 4455 0 R (id2833195) 4460 0 R (id2833323) 4465 0 R (id2833521) 4480 0 R (id2833558) 4481 0 R (id2833681) 4487 0 R (id2833699) 4520 0 R (id2834047) 4489 0 R (id2834109) 4494 0 R (id2834223) 4496 0 R (id2834252) 4498 0 R (id2834272) 4504 0 R (id2834335) 4505 0 R (id2834413) 4526 0 R (id2834538) 4532 0 R (id2834918) 4506 0 R (id2834948) 4507 0 R (id2835054) 4512 0 R (id2835062) 4513 0 R (id2835077) 4514 0 R (id2835137) 4515 0 R (id2841332) 4569 0 R (id2841369) 4574 0 R (id2841388) 4575 0 R (id2841636) 4583 0 R (id2841656) 4584 0 R (id2841732) 4586 0 R (id2841877) 4597 0 R (id2841955) 4598 0 R (id2842511) 4538 0 R (id2842613) 4539 0 R (id2842803) 4548 0 R (id2842868) 4553 0 R (id2842882) 4554 0 R (id2842905) 4556 0 R (id2842950) 4557 0 R (id2843042) 4562 0 R (id2843058) 4563 0 R (id2843118) 4564 0 R (id2843135) 4599 0 R (id2843194) 4605 0 R (id2843406) 4600 0 R (id2843427) 4613 0 R (id2843651) 4607 0 R (id2843675) 4620 0 R (id2843867) 4608 0 R (id2843939) 4615 0 R (id2843953) 4622 0 R (id2844035) 4625 0 R (id2844238) 4633 0 R (id2844246) 4634 0 R (id2844284) 4640 0 R (id2844363) 4641 0 R (id2844485) 4642 0 R (id2844577) 4647 0 R (id2844668) 4648 0 R (id2844713) 4649 0 R (id2844865) 4654 0 R (id2845195) 4663 0 R (id2845270) 4664 0 R (id2845285) 4665 0 R (id2845664) 4680 0 R (id2849276) 4686 0 R (id2849332) 4687 0 R (id2849463) 4692 0 R (id2849755) 4701 0 R (id2849780) 4702 0 R (id2849808) 4703 0 R (id2849835) 4704 0 R (id2849868) 4705 0 R (id2849889) 4710 0 R (id2849930) 4711 0 R (id2850008) 4712 0 R (id2850051) 4713 0 R (id2850109) 4718 0 R (id2850218) 4724 0 R (id2850232) 4725 0 R (id2850296) 4726 0 R (id2850479) 4731 0 R (id2850709) 4740 0 R (id2850737) 4741 0 R (id2850816) 4746 0 R (id2850846) 4747 0 R (id2850920) 4752 0 R (id2850950) 4753 0 R (id2853004) 4766 0 R (id2853036) 4767 0 R (id2853110) 4768 0 R (id2853130) 4769 0 R (id2853201) 4774 0 R (id2853253) 4775 0 R (id2853305) 4776 0 R (id2853360) 4781 0 R (id2853422) 4782 0 R (id2853462) 4787 0 R (id2853487) 4789 0 R (id2853505) 4790 0 R (id2853530) 4791 0 R (id2854339) 4823 0 R (id2854437) 4796 0 R (id2854465) 4797 0 R (id2854549) 4802 0 R (id2854561) 4803 0 R (id2854647) 4804 0 R (id2854683) 4805 0 R (id2854710) 4806 0 R (id2854850) 4812 0 R (id2854983) 4817 0 R (id2854998) 4818 0 R (id2855553) 4836 0 R (id2855621) 4837 0 R (id2855658) 4842 0 R (id2855729) 4850 0 R (id2855808) 4851 0 R (id2855992) 4831 0 R (id2856977) 4857 0 R (id2857085) 4858 0 R (id2857178) 4863 0 R (id2857248) 4864 0 R (id2857336) 4869 0 R (id2857643) 4879 0 R (id2857746) 4893 0 R (id2857759) 4894 0 R (id2858141) 4899 0 R (id2858472) 4904 0 R (id2858692) 4905 0 R (id2858742) 4910 0 R (id2858793) 4911 0 R (id2859268) 4916 0 R (id2859547) 4921 0 R (id2859712) 4924 0 R (id2859864) 4930 0 R (id2859976) 4931 0 R (id2860047) 4936 0 R (id2860279) 4941 0 R (id2860439) 4946 0 R (id2860534) 4947 0 R (id2860717) 4952 0 R (id2860826) 4957 0 R (id2861154) 4967 0 R (id2861306) 4968 0 R (id2861543) 4973 0 R (id2861703) 4978 0 R (id2861804) 4983 0 R (id2861972) 4988 0 R (id2862176) 4989 0 R (id2862287) 4994 0 R (id2862438) 5000 0 R (id2862459) 5001 0 R (id2862656) 5006 0 R (id2862946) 5011 0 R (id2863041) 5012 0 R (id2863183) 5017 0 R (id2863216) 5018 0 R (id2863653) 5038 0 R (id2863955) 5048 0 R (id2864199) 5049 0 R (id2864297) 5054 0 R (id2864643) 5067 0 R (id2864714) 5068 0 R (id2864736) 5069 0 R (id2864781) 5072 0 R (id2864823) 5077 0 R (id2864842) 5078 0 R (id2864866) 5079 0 R (id2865018) 5088 0 R (id2865348) 5094 0 R (id2865392) 5095 0 R (id2865562) 5101 0 R (id2865577) 5102 0 R (id2865590) 5103 0 R (id2865623) 5104 0 R (id2874599) 5109 0 R (id2874607) 5110 0 R (id2874817) 5112 0 R (id2874870) 5114 0 R (id2874950) 5121 0 R (id2875096) 5125 0 R (id2875177) 5130 0 R (id2875295) 5136 0 R (id2875315) 5137 0 R (id2875342) 5138 0 R (id2875379) 5143 0 R (id2875438) 5144 0 R (id2875598) 5149 0 R (id2875692) 5150 0 R (id2875767) 5156 0 R (id2875812) 5157 0 R (id2875876) 5163 0 R (id2875912) 5158 0 R (id2875981) 5175 0 R (id2876028) 5176 0 R (id2876080) 5186 0 R (id2876109) 5187 0 R (id2876175) 5195 0 R (id2876244) 5200 0 R (id2876334) 5203 0 R (id2876356) 5204 0 R (id2876496) 5212 0 R (id2876683) 5217 0 R (id2876800) 5222 0 R (id2876970) 5223 0 R (id2877020) 5231 0 R (id2877056) 5234 0 R (id2877088) 5241 0 R (id2877158) 5244 0 R (id2877188) 5251 0 R (id2877241) 5260 0 R (id2877314) 5263 0 R (id2877335) 5720 0 R (id2877371) 5264 0 R (id2877420) 5729 0 R (id2877456) 5271 0 R (id2877794) 5276 0 R (id2877906) 5282 0 R (id2877922) 5283 0 R (id2877975) 5284 0 R (id2878029) 5285 0 R (id2878251) 5295 0 R (id2878479) 5296 0 R (id2878530) 5737 0 R (id2878636) 5303 0 R (id2878866) 5308 0 R (id2878994) 5320 0 R (id2879070) 5323 0 R (id2879086) 5324 0 R (id2879124) 5325 0 R (id2879149) 5745 0 R (id2879185) 5333 0 R (id2879207) 5753 0 R (id2879249) 5334 0 R (id2879268) 5335 0 R (id2879397) 5761 0 R (id2879433) 5336 0 R (id2879509) 5341 0 R (id2879564) 5343 0 R (id2879605) 5344 0 R (id2879671) 5349 0 R (id2879688) 5350 0 R (id2879722) 5351 0 R (id2879744) 5352 0 R (id2879770) 5353 0 R (id2879804) 5358 0 R (id2879823) 5359 0 R (id2879915) 5360 0 R (id2879961) 5365 0 R (id2880159) 5372 0 R (id2880216) 5378 0 R (id2880249) 5379 0 R (id2880299) 5385 0 R (id2880521) 5394 0 R (id2880703) 5399 0 R (id2880804) 5404 0 R (id2881031) 5409 0 R (id2881125) 5420 0 R (id2881213) 5424 0 R (id2881247) 5425 0 R (id2881265) 5769 0 R (id2881300) 5430 0 R (id2881414) 5431 0 R (id2881548) 5436 0 R (id2881663) 5441 0 R (id2881776) 5449 0 R (id2881864) 5450 0 R (id2881971) 5455 0 R (id2882133) 5460 0 R (id2882150) 5461 0 R (id2882180) 5462 0 R (id2882244) 5463 0 R (id2882282) 5469 0 R (id2882333) 5470 0 R (id2882371) 5475 0 R (id2882425) 5476 0 R (id2882459) 5477 0 R (id2882492) 5482 0 R (id2882542) 5483 0 R (id2882622) 5488 0 R (id2882687) 5489 0 R (id2882720) 5490 0 R (id2882747) 5495 0 R (id2882765) 5496 0 R (id2882785) 5497 0 R (id2882886) 5502 0 R (id2882989) 5503 0 R (id2883060) 5504 0 R (id2883122) 5505 0 R (id2883180) 5511 0 R (id2883247) 5512 0 R (id2883355) 5520 0 R (id2883411) 5524 0 R (id2883434) 5525 0 R (id2883480) 5532 0 R (id2883546) 5533 0 R (id2883692) 5549 0 R (id2883794) 5555 0 R (id2883876) 5563 0 R (id2883946) 5568 0 R (id2884026) 5571 0 R (id2884487) 5610 0 R (id2884519) 5615 0 R (id2884550) 5616 0 R (id2884592) 5618 0 R (id2884663) 5619 0 R (id2884764) 5624 0 R (id2884836) 5625 0 R (id2884884) 5630 0 R (id2884898) 5631 0 R (id2885092) 5636 0 R (id2885138) 5637 0 R (id2885220) 5638 0 R (id2885281) 5643 0 R (id2885299) 5644 0 R (id2885316) 5645 0 R (id2885352) 5646 0 R (id2885364) 5647 0 R (id2885377) 5648 0 R (id2885391) 5654 0 R (id2885398) 5655 0 R (id2885627) 5660 0 R (id2885933) 5686 0 R (id2887051) 5715 0 R (id2887062) 5777 0 R (id2899177) 5785 0 R (id2899195) 5786 0 R (id2899250) 5787 0 R (id2899257) 5788 0 R (id2899295) 5789 0 R (id2899336) 5794 0 R (id2899419) 5796 0 R (id2899437) 5797 0 R (id2899576) 5798 0 R (id2899621) 5799 0 R (id2899643) 5804 0 R (id2899699) 5807 0 R (id2899728) 5809 0 R (id2900574) 5814 0 R (id2900602) 5815 0 R (id2900674) 5816 0 R (id2900734) 5821 0 R (id2900765) 5822 0 R (id2900793) 5823 0 R (id2900827) 5829 0 R (id2900850) 5830 0 R (id2900986) 5831 0 R (id2901058) 5836 0 R (id2901093) 5837 0 R (id2901121) 5838 0 R (id2901149) 5840 0 R (id2901224) 5845 0 R (id2901317) 5847 0 R (id2901379) 5848 0 R (id2901491) 5853 0 R (id2901698) 5854 0 R (id2901778) 5862 0 R (id2901895) 5863 0 R (id2901949) 5864 0 R (id2902190) 5869 0 R (id2902197) 5871 0 R (id2902360) 5882 0 R (id2902478) 5890 0 R (id2902514) 5891 0 R (id2902620) 5893 0 R (id2902845) 5899 0 R (id2902936) 5908 0 R (id2902955) 5909 0 R (id2905259) 5954 0 R (id2905315) 5955 0 R (id2905448) 5915 0 R (id2905638) 5916 0 R (id2905736) 5921 0 R (id2905753) 5922 0 R (id2905965) 5934 0 R (id2906161) 5947 0 R (id2906193) 5949 0 R (id2907095) 5962 0 R (id2907190) 5963 0 R (id2907299) 5968 0 R (id2907323) 5969 0 R (id2907424) 5970 0 R (id2907575) 5979 0 R (id2907676) 5984 0 R (id2907697) 5985 0 R (id2907717) 5986 0 R (id2907761) 5987 0 R (id2907908) 6001 0 R (id2907922) 6002 0 R (id2909129) 6007 0 R (id2909163) 6008 0 R (id2909204) 6009 0 R (id2909218) 6010 0 R (id2909310) 6016 0 R (id2909419) 6017 0 R (id2909458) 6018 0 R (id2909609) 6023 0 R (id2909617) 6024 0 R (id2910112) 6040 0 R (id2910269) 6041 0 R (id2910780) 6077 0 R (id2910845) 6083 0 R (id2910862) 6084 0 R (id2911032) 6092 0 R (id2911053) 6097 0 R (id2911070) 6098 0 R (id2911110) 6099 0 R (id2911168) 6100 0 R (id2911214) 6105 0 R (id2911234) 6106 0 R (id2911332) 6107 0 R (id2911382) 6108 0 R (id2911732) 6121 0 R (id2911876) 6123 0 R (id2911936) 6125 0 R (id2912132) 6135 0 R (id2912440) 6137 0 R (id2912453) 6138 0 R (id2912516) 6143 0 R (id2912738) 6144 0 R (id2916682) 6154 0 R (id2916950) 6159 0 R (id2916968) 6160 0 R (id2917024) 6165 0 R (id2917639) 6180 0 R (id2917669) 6181 0 R (id2917695) 6182 0 R (id2917940) 6191 0 R (id2917998) 6194 0 R (id2918081) 6199 0 R (id2918114) 6200 0 R (id2918314) 6210 0 R (id2918346) 6211 0 R (id2918382) 6216 0 R (id2918414) 6217 0 R (id2918448) 6218 0 R (id2918461) 6219 0 R (id2920584) 6228 0 R (id2920608) 6229 0 R (id2920653) 6234 0 R (id2920710) 6235 0 R (id2920834) 6240 0 R (id2920878) 6241 0 R (id2920920) 6242 0 R (id2921008) 6248 0 R (id2921156) 6253 0 R (id2921201) 6254 0 R (id2921445) 6263 0 R (id2921477) 6264 0 R (id2921502) 6265 0 R (id2921573) 6270 0 R (id2921589) 6271 0 R (id2921620) 6272 0 R (id2921672) 6273 0 R (id2922217) 6324 0 R (id2922246) 6325 0 R (id2922411) 6299 0 R (id2922435) 6300 0 R (id2922562) 6315 0 R (id2922587) 6317 0 R (id2922790) 6283 0 R (id2922992) 6284 0 R (id2923061) 6286 0 R (id2923163) 6291 0 R (id2923208) 6292 0 R (id2923760) 6330 0 R (id2923814) 6331 0 R (id2923875) 6336 0 R (id2923933) 6337 0 R (id2923977) 6305 0 R (id2924197) 6318 0 R (id2924807) 6383 0 R (id2924840) 6384 0 R (id2924896) 6338 0 R (id2924921) 6343 0 R (id2925259) 6363 0 R (id2925276) 6364 0 R (id2925341) 6366 0 R (id2925413) 6371 0 R (id2925582) 6373 0 R (id2926949) 6421 0 R (id2927200) 6389 0 R (id2927313) 6399 0 R (id2927377) 6401 0 R (id2927482) 6402 0 R (id2927546) 6407 0 R (id2927611) 6408 0 R (id2927659) 6409 0 R (id2927711) 6410 0 R (id2927734) 6411 0 R (id2928808) 6422 0 R (id2928985) 6428 0 R (id2930160) 6461 0 R (id2931784) 6467 0 R (id2931926) 6470 0 R (id2932209) 6475 0 R (id2932255) 6479 0 R (id2932407) 6487 0 R (id2933023) 6517 0 R (id2933030) 6518 0 R (id2933060) 6521 0 R (id2933076) 6522 0 R (id2933146) 6494 0 R (id2933368) 6497 0 R (id2933405) 6499 0 R (id2933547) 6504 0 R (id2933655) 6505 0 R (id2933702) 6506 0 R (id2934356) 6567 0 R (id2934390) 6524 0 R (id2934579) 6536 0 R (id2934628) 6541 0 R (id2934764) 6542 0 R (id2934901) 6548 0 R (id2934982) 6549 0 R (id2935015) 6550 0 R (id2935067) 6555 0 R (id2935158) 6556 0 R (id2935362) 6561 0 R (id2935457) 6562 0 R (id2936544) 6589 0 R (id2936887) 6568 0 R (id2936918) 6570 0 R (id2937090) 6575 0 R (id2937133) 6580 0 R (id2937140) 6581 0 R (id2937165) 6582 0 R (id2937172) 6583 0 R (id2937894) 6595 0 R (id2937902) 6596 0 R (id2937981) 6602 0 R (id2938043) 6606 0 R (id2938139) 6607 0 R (id2938146) 6608 0 R (id2938236) 6609 0 R (id2938266) 6614 0 R (id2938312) 6615 0 R (id2938342) 6617 0 R (id2938360) 6618 0 R (id2938406) 6619 0 R (id2938479) 6624 0 R (id2938503) 6625 0 R (id2938615) 6627 0 R (id2939509) 6660 0 R (id2939646) 6633 0 R (id2939691) 6634 0 R (id2939766) 6635 0 R (id2939810) 6640 0 R (id2939863) 6641 0 R (id2939886) 6642 0 R (id2939942) 6643 0 R (id2939984) 6644 0 R (id2940006) 6650 0 R (id2940031) 6652 0 R (id2940058) 6654 0 R (id2940089) 6655 0 R (id2940961) 6665 0 R (id2941353) 6690 0 R (id2941420) 6694 0 R (install) 2956 0 R (integrate-ms-networks) 3037 0 R (introduction) 3870 0 R (locking) 2968 0 R (migration) 6314 0 R (msdfs) 3028 0 R (optional) 4268 0 R (page.1) 2869 0 R (page.10) 3273 0 R (page.100) 4464 0 R (page.101) 4479 0 R (page.102) 4486 0 R (page.103) 4493 0 R (page.104) 4503 0 R (page.105) 4511 0 R (page.106) 4519 0 R (page.107) 4525 0 R (page.108) 4531 0 R (page.109) 4537 0 R (page.11) 3326 0 R (page.110) 4544 0 R (page.111) 4552 0 R (page.112) 4561 0 R (page.113) 4568 0 R (page.114) 4573 0 R (page.115) 4579 0 R (page.116) 4591 0 R (page.117) 4595 0 R (page.118) 4604 0 R (page.119) 4612 0 R (page.12) 3377 0 R (page.120) 4619 0 R (page.121) 4629 0 R (page.122) 4639 0 R (page.123) 4646 0 R (page.124) 4653 0 R (page.125) 4662 0 R (page.126) 4671 0 R (page.127) 4679 0 R (page.128) 4685 0 R (page.129) 4691 0 R (page.13) 3430 0 R (page.130) 4696 0 R (page.131) 4700 0 R (page.132) 4709 0 R (page.133) 4717 0 R (page.134) 4723 0 R (page.135) 4730 0 R (page.136) 4735 0 R (page.137) 4739 0 R (page.138) 4745 0 R (page.139) 4751 0 R (page.14) 3482 0 R (page.140) 4765 0 R (page.141) 4773 0 R (page.142) 4780 0 R (page.143) 4786 0 R (page.144) 4795 0 R (page.145) 4801 0 R (page.146) 4811 0 R (page.147) 4816 0 R (page.148) 4822 0 R (page.149) 4830 0 R (page.15) 3534 0 R (page.150) 4835 0 R (page.151) 4841 0 R (page.152) 4856 0 R (page.153) 4862 0 R (page.154) 4868 0 R (page.155) 4873 0 R (page.156) 4878 0 R (page.157) 4883 0 R (page.158) 4892 0 R (page.159) 4898 0 R (page.16) 3580 0 R (page.160) 4903 0 R (page.161) 4909 0 R (page.162) 4915 0 R (page.163) 4920 0 R (page.164) 4929 0 R (page.165) 4935 0 R (page.166) 4940 0 R (page.167) 4945 0 R (page.168) 4951 0 R (page.169) 4961 0 R (page.17) 3633 0 R (page.170) 4966 0 R (page.171) 4972 0 R (page.172) 4977 0 R (page.173) 4982 0 R (page.174) 4987 0 R (page.175) 4993 0 R (page.176) 4999 0 R (page.177) 5005 0 R (page.178) 5010 0 R (page.179) 5016 0 R (page.18) 3685 0 R (page.180) 5037 0 R (page.181) 5042 0 R (page.182) 5047 0 R (page.183) 5053 0 R (page.184) 5058 0 R (page.185) 5062 0 R (page.186) 5066 0 R (page.187) 5076 0 R (page.188) 5087 0 R (page.189) 5093 0 R (page.19) 3736 0 R (page.190) 5099 0 R (page.191) 5108 0 R (page.192) 5118 0 R (page.193) 5129 0 R (page.194) 5135 0 R (page.195) 5142 0 R (page.196) 5148 0 R (page.197) 5155 0 R (page.198) 5162 0 R (page.199) 5174 0 R (page.2) 2881 0 R (page.20) 3781 0 R (page.200) 5185 0 R (page.201) 5194 0 R (page.202) 5199 0 R (page.203) 5208 0 R (page.204) 5216 0 R (page.205) 5221 0 R (page.206) 5230 0 R (page.207) 5240 0 R (page.208) 5250 0 R (page.209) 5259 0 R (page.21) 3829 0 R (page.210) 5270 0 R (page.211) 5275 0 R (page.212) 5281 0 R (page.213) 5289 0 R (page.214) 5294 0 R (page.215) 5300 0 R (page.216) 5307 0 R (page.217) 5319 0 R (page.218) 5332 0 R (page.219) 5340 0 R (page.22) 3865 0 R (page.220) 5348 0 R (page.221) 5357 0 R (page.222) 5364 0 R (page.223) 5371 0 R (page.224) 5377 0 R (page.225) 5384 0 R (page.226) 5389 0 R (page.227) 5398 0 R (page.228) 5403 0 R (page.229) 5408 0 R (page.23) 3869 0 R (page.230) 5419 0 R (page.231) 5429 0 R (page.232) 5435 0 R (page.233) 5448 0 R (page.234) 5454 0 R (page.235) 5459 0 R (page.236) 5468 0 R (page.237) 5474 0 R (page.238) 5481 0 R (page.239) 5487 0 R (page.24) 3876 0 R (page.240) 5494 0 R (page.241) 5501 0 R (page.242) 5510 0 R (page.243) 5517 0 R (page.244) 5531 0 R (page.245) 5548 0 R (page.246) 5562 0 R (page.247) 5576 0 R (page.248) 5604 0 R (page.249) 5614 0 R (page.25) 3882 0 R (page.250) 5623 0 R (page.251) 5629 0 R (page.252) 5635 0 R (page.253) 5642 0 R (page.254) 5653 0 R (page.255) 5659 0 R (page.256) 5664 0 R (page.257) 5668 0 R (page.258) 5672 0 R (page.259) 5676 0 R (page.26) 3893 0 R (page.260) 5681 0 R (page.261) 5685 0 R (page.262) 5690 0 R (page.263) 5694 0 R (page.264) 5714 0 R (page.265) 5719 0 R (page.266) 5728 0 R (page.267) 5736 0 R (page.268) 5744 0 R (page.269) 5752 0 R (page.27) 3899 0 R (page.270) 5760 0 R (page.271) 5768 0 R (page.272) 5776 0 R (page.273) 5784 0 R (page.274) 5793 0 R (page.275) 5803 0 R (page.276) 5813 0 R (page.277) 5820 0 R (page.278) 5828 0 R (page.279) 5835 0 R (page.28) 3910 0 R (page.280) 5844 0 R (page.281) 5852 0 R (page.282) 5858 0 R (page.283) 5868 0 R (page.284) 5876 0 R (page.285) 5880 0 R (page.286) 5888 0 R (page.287) 5897 0 R (page.288) 5903 0 R (page.289) 5907 0 R (page.29) 3923 0 R (page.290) 5914 0 R (page.291) 5926 0 R (page.292) 5933 0 R (page.293) 5939 0 R (page.294) 5943 0 R (page.295) 5953 0 R (page.296) 5960 0 R (page.297) 5967 0 R (page.298) 5974 0 R (page.299) 5983 0 R (page.3) 2895 0 R (page.30) 3929 0 R (page.300) 5997 0 R (page.301) 6006 0 R (page.302) 6015 0 R (page.303) 6022 0 R (page.304) 6029 0 R (page.305) 6039 0 R (page.306) 6055 0 R (page.307) 6059 0 R (page.308) 6082 0 R (page.309) 6096 0 R (page.31) 3934 0 R (page.310) 6104 0 R (page.311) 6112 0 R (page.312) 6120 0 R (page.313) 6129 0 R (page.314) 6134 0 R (page.315) 6142 0 R (page.316) 6148 0 R (page.317) 6152 0 R (page.318) 6158 0 R (page.319) 6164 0 R (page.32) 3940 0 R (page.320) 6171 0 R (page.321) 6175 0 R (page.322) 6179 0 R (page.323) 6186 0 R (page.324) 6190 0 R (page.325) 6198 0 R (page.326) 6206 0 R (page.327) 6215 0 R (page.328) 6223 0 R (page.329) 6227 0 R (page.33) 3944 0 R (page.330) 6233 0 R (page.331) 6239 0 R (page.332) 6247 0 R (page.333) 6252 0 R (page.334) 6258 0 R (page.335) 6262 0 R (page.336) 6269 0 R (page.337) 6277 0 R (page.338) 6282 0 R (page.339) 6290 0 R (page.34) 3951 0 R (page.340) 6298 0 R (page.341) 6304 0 R (page.342) 6309 0 R (page.343) 6313 0 R (page.344) 6323 0 R (page.345) 6329 0 R (page.346) 6335 0 R (page.347) 6342 0 R (page.348) 6370 0 R (page.349) 6377 0 R (page.35) 3959 0 R (page.350) 6382 0 R (page.351) 6388 0 R (page.352) 6398 0 R (page.353) 6406 0 R (page.354) 6415 0 R (page.355) 6419 0 R (page.356) 6427 0 R (page.357) 6435 0 R (page.358) 6441 0 R (page.359) 6457 0 R (page.36) 3969 0 R (page.360) 6466 0 R (page.361) 6474 0 R (page.362) 6486 0 R (page.363) 6493 0 R (page.364) 6503 0 R (page.365) 6510 0 R (page.366) 6514 0 R (page.367) 6533 0 R (page.368) 6547 0 R (page.369) 6554 0 R (page.37) 3987 0 R (page.370) 6560 0 R (page.371) 6566 0 R (page.372) 6574 0 R (page.373) 6579 0 R (page.374) 6588 0 R (page.375) 6601 0 R (page.376) 6613 0 R (page.377) 6623 0 R (page.378) 6632 0 R (page.379) 6639 0 R (page.38) 3997 0 R (page.380) 6649 0 R (page.381) 6659 0 R (page.382) 6664 0 R (page.39) 4006 0 R (page.4) 2973 0 R (page.40) 4012 0 R (page.41) 4020 0 R (page.42) 4025 0 R (page.43) 4032 0 R (page.44) 4040 0 R (page.45) 4045 0 R (page.46) 4053 0 R (page.47) 4061 0 R (page.48) 4065 0 R (page.49) 4074 0 R (page.5) 3050 0 R (page.50) 4081 0 R (page.51) 4093 0 R (page.52) 4101 0 R (page.53) 4108 0 R (page.54) 4116 0 R (page.55) 4122 0 R (page.56) 4130 0 R (page.57) 4137 0 R (page.58) 4146 0 R (page.59) 4152 0 R (page.6) 3076 0 R (page.60) 4158 0 R (page.61) 4170 0 R (page.62) 4182 0 R (page.63) 4195 0 R (page.64) 4203 0 R (page.65) 4211 0 R (page.66) 4223 0 R (page.67) 4231 0 R (page.68) 4236 0 R (page.69) 4242 0 R (page.7) 3115 0 R (page.70) 4253 0 R (page.71) 4258 0 R (page.72) 4263 0 R (page.73) 4267 0 R (page.74) 4274 0 R (page.75) 4279 0 R (page.76) 4286 0 R (page.77) 4298 0 R (page.78) 4303 0 R (page.79) 4308 0 R (page.8) 3168 0 R (page.80) 4315 0 R (page.81) 4327 0 R (page.82) 4334 0 R (page.83) 4339 0 R (page.84) 4347 0 R (page.85) 4353 0 R (page.86) 4360 0 R (page.87) 4366 0 R (page.88) 4372 0 R (page.89) 4381 0 R (page.9) 3218 0 R (page.90) 4392 0 R (page.91) 4397 0 R (page.92) 4403 0 R (page.93) 4408 0 R (page.94) 4416 0 R (page.95) 4422 0 R (page.96) 4430 0 R (page.97) 4441 0 R (page.98) 4454 0 R (page.99) 4459 0 R (pam) 3036 0 R (part.1) 6 0 R (part.2) 98 0 R (part.3) 454 0 R (part.4) 2422 0 R (part.5) 2538 0 R (part.6) 2614 0 R (passdb) 2965 0 R (printing) 3029 0 R (problems) 3045 0 R (samba-bdc) 2960 0 R (samba-pdc) 2959 0 R (section*.2) 5870 0 R (section*.3) 5881 0 R (section*.4) 5889 0 R (section*.5) 5892 0 R (section*.6) 5898 0 R (section.1.1) 14 0 R (section.1.2) 18 0 R (section.1.3) 22 0 R (section.1.4) 26 0 R (section.1.5) 30 0 R (section.1.6) 34 0 R (section.10.1) 462 0 R (section.10.2) 466 0 R (section.10.3) 470 0 R (section.10.4) 486 0 R (section.10.5) 522 0 R (section.10.6) 538 0 R (section.10.7) 550 0 R (section.10.8) 570 0 R (section.11.1) 586 0 R (section.11.2) 590 0 R (section.11.3) 610 0 R (section.11.4) 622 0 R (section.11.5) 710 0 R (section.12.1) 730 0 R (section.12.2) 734 0 R (section.12.3) 742 0 R (section.12.4) 754 0 R (section.13.1) 770 0 R (section.13.2) 774 0 R (section.13.3) 790 0 R (section.13.4) 806 0 R (section.13.5) 822 0 R (section.13.6) 862 0 R (section.14.1) 878 0 R (section.14.2) 882 0 R (section.14.3) 926 0 R (section.14.4) 942 0 R (section.14.5) 954 0 R (section.14.6) 958 0 R (section.14.7) 966 0 R (section.15.1) 974 0 R (section.15.2) 978 0 R (section.15.3) 982 0 R (section.15.4) 1010 0 R (section.15.5) 1014 0 R (section.16.1) 1030 0 R (section.16.2) 1034 0 R (section.16.3) 1038 0 R (section.16.4) 1050 0 R (section.16.5) 1062 0 R (section.17.1) 1074 0 R (section.17.2) 1078 0 R (section.18.1) 1086 0 R (section.18.10) 1282 0 R (section.18.11) 1302 0 R (section.18.12) 1306 0 R (section.18.13) 1310 0 R (section.18.14) 1314 0 R (section.18.15) 1318 0 R (section.18.2) 1090 0 R (section.18.3) 1114 0 R (section.18.4) 1126 0 R (section.18.5) 1130 0 R (section.18.6) 1158 0 R (section.18.7) 1182 0 R (section.18.8) 1230 0 R (section.18.9) 1250 0 R (section.19.1) 1334 0 R (section.19.10) 1562 0 R (section.19.11) 1630 0 R (section.19.12) 1718 0 R (section.19.13) 1738 0 R (section.19.14) 1782 0 R (section.19.15) 1814 0 R (section.19.16) 1818 0 R (section.19.17) 1834 0 R (section.19.18) 1838 0 R (section.19.19) 1854 0 R (section.19.2) 1346 0 R (section.19.3) 1362 0 R (section.19.4) 1386 0 R (section.19.5) 1422 0 R (section.19.6) 1502 0 R (section.19.7) 1518 0 R (section.19.8) 1530 0 R (section.19.9) 1542 0 R (section.2.1) 42 0 R (section.2.2) 46 0 R (section.2.3) 62 0 R (section.2.4) 66 0 R (section.2.5) 70 0 R (section.2.6) 74 0 R (section.2.7) 78 0 R (section.20.1) 1878 0 R (section.20.2) 1882 0 R (section.20.3) 1886 0 R (section.20.4) 1910 0 R (section.20.5) 1922 0 R (section.21.1) 1930 0 R (section.21.2) 1934 0 R (section.21.3) 1938 0 R (section.21.4) 1946 0 R (section.21.5) 1974 0 R (section.21.6) 2022 0 R (section.21.7) 2026 0 R (section.22.1) 2034 0 R (section.22.2) 2038 0 R (section.22.3) 2042 0 R (section.22.4) 2050 0 R (section.22.5) 2058 0 R (section.23.1) 2066 0 R (section.23.2) 2070 0 R (section.23.3) 2094 0 R (section.23.4) 2110 0 R (section.23.5) 2114 0 R (section.24.1) 2126 0 R (section.24.2) 2130 0 R (section.24.3) 2194 0 R (section.24.4) 2198 0 R (section.24.5) 2202 0 R (section.24.6) 2222 0 R (section.25.1) 2242 0 R (section.25.2) 2246 0 R (section.25.3) 2298 0 R (section.26.1) 2310 0 R (section.26.2) 2314 0 R (section.26.3) 2318 0 R (section.26.4) 2338 0 R (section.26.5) 2362 0 R (section.27.1) 2382 0 R (section.27.2) 2386 0 R (section.27.3) 2390 0 R (section.27.4) 2394 0 R (section.27.5) 2398 0 R (section.28.1) 2406 0 R (section.28.2) 2410 0 R (section.29.1) 2418 0 R (section.3.1) 94 0 R (section.30.1) 2430 0 R (section.30.2) 2434 0 R (section.30.3) 2438 0 R (section.31.1) 2446 0 R (section.31.2) 2478 0 R (section.32.1) 2494 0 R (section.33.1) 2546 0 R (section.33.2) 2550 0 R (section.33.3) 2554 0 R (section.33.4) 2558 0 R (section.34.1) 2566 0 R (section.34.2) 2570 0 R (section.34.3) 2574 0 R (section.34.4) 2578 0 R (section.34.5) 2582 0 R (section.35.1) 2590 0 R (section.35.2) 2594 0 R (section.35.3) 2598 0 R (section.35.4) 2602 0 R (section.35.5) 2606 0 R (section.35.6) 2610 0 R (section.36.1) 2622 0 R (section.36.2) 2642 0 R (section.36.3) 2646 0 R (section.36.4) 2650 0 R (section.36.5) 2666 0 R (section.36.6) 2678 0 R (section.37.1) 2686 0 R (section.37.2) 2690 0 R (section.37.3) 2694 0 R (section.37.4) 2698 0 R (section.37.5) 2702 0 R (section.37.6) 2710 0 R (section.38.1) 2726 0 R (section.38.2) 2730 0 R (section.38.3) 2746 0 R (section.38.4) 2774 0 R (section.38.5) 2782 0 R (section.38.6) 2786 0 R (section.39.1) 2794 0 R (section.39.10) 2830 0 R (section.39.11) 2834 0 R (section.39.12) 2838 0 R (section.39.2) 2798 0 R (section.39.3) 2802 0 R (section.39.4) 2806 0 R (section.39.5) 2810 0 R (section.39.6) 2814 0 R (section.39.7) 2818 0 R (section.39.8) 2822 0 R (section.39.9) 2826 0 R (section.4.1) 106 0 R (section.4.2) 110 0 R (section.4.3) 114 0 R (section.4.4) 158 0 R (section.4.5) 162 0 R (section.40.1) 2846 0 R (section.41.1) 2854 0 R (section.41.2) 2858 0 R (section.41.3) 2862 0 R (section.5.1) 186 0 R (section.5.2) 190 0 R (section.5.3) 202 0 R (section.5.4) 206 0 R (section.5.5) 210 0 R (section.5.6) 234 0 R (section.6.1) 266 0 R (section.6.2) 270 0 R (section.6.3) 294 0 R (section.6.4) 302 0 R (section.7.1) 326 0 R (section.7.2) 330 0 R (section.7.3) 362 0 R (section.7.4) 374 0 R (section.7.5) 406 0 R (section.8.1) 422 0 R (section.8.2) 426 0 R (section.8.3) 430 0 R (section.8.4) 442 0 R (section.9.1) 450 0 R (securing-samba) 2969 0 R (speed) 3070 0 R (subfigure.19.1.1) 5164 0 R (subfigure.19.10.1) 5738 0 R (subfigure.19.11.1) 5746 0 R (subfigure.19.12.1) 5754 0 R (subfigure.19.13.1) 5762 0 R (subfigure.19.14.1) 5770 0 R (subfigure.19.15.1) 5778 0 R (subfigure.19.2.1) 5177 0 R (subfigure.19.3.1) 5188 0 R (subfigure.19.4.1) 5232 0 R (subfigure.19.5.1) 5242 0 R (subfigure.19.6.1) 5252 0 R (subfigure.19.7.1) 5261 0 R (subfigure.19.8.1) 5721 0 R (subfigure.19.9.1) 5730 0 R (subsection.10.3.1) 474 0 R (subsection.10.3.2) 478 0 R (subsection.10.3.3) 482 0 R (subsection.10.4.1) 490 0 R (subsection.10.4.2) 494 0 R (subsection.10.4.3) 498 0 R (subsection.10.4.4) 502 0 R (subsection.10.4.5) 506 0 R (subsection.10.4.6) 510 0 R (subsection.10.4.7) 514 0 R (subsection.10.4.8) 518 0 R (subsection.10.5.1) 526 0 R (subsection.10.5.2) 530 0 R (subsection.10.5.3) 534 0 R (subsection.10.6.1) 542 0 R (subsection.10.6.2) 546 0 R (subsection.10.7.1) 554 0 R (subsection.10.7.2) 558 0 R (subsection.10.7.3) 562 0 R (subsection.10.8.1) 574 0 R (subsection.10.8.2) 578 0 R (subsection.11.2.1) 594 0 R (subsection.11.2.2) 606 0 R (subsection.11.3.1) 614 0 R (subsection.11.3.2) 618 0 R (subsection.11.4.1) 626 0 R (subsection.11.4.2) 630 0 R (subsection.11.4.3) 634 0 R (subsection.11.4.4) 638 0 R (subsection.11.4.5) 686 0 R (subsection.11.4.6) 706 0 R (subsection.11.5.1) 714 0 R (subsection.11.5.2) 718 0 R (subsection.11.5.3) 722 0 R (subsection.12.2.1) 738 0 R (subsection.12.3.1) 746 0 R (subsection.12.3.2) 750 0 R (subsection.12.4.1) 758 0 R (subsection.12.4.2) 762 0 R (subsection.13.2.1) 778 0 R (subsection.13.2.2) 782 0 R (subsection.13.2.3) 786 0 R (subsection.13.3.1) 794 0 R (subsection.13.3.2) 798 0 R (subsection.13.3.3) 802 0 R (subsection.13.4.1) 810 0 R (subsection.13.5.1) 826 0 R (subsection.13.5.2) 830 0 R (subsection.13.5.3) 834 0 R (subsection.13.5.4) 838 0 R (subsection.13.5.5) 850 0 R (subsection.13.5.6) 854 0 R (subsection.13.5.7) 858 0 R (subsection.13.6.1) 866 0 R (subsection.13.6.2) 870 0 R (subsection.14.2.1) 886 0 R (subsection.14.3.1) 930 0 R (subsection.14.4.1) 946 0 R (subsection.14.4.2) 950 0 R (subsection.14.6.1) 962 0 R (subsection.15.3.1) 986 0 R (subsection.15.3.2) 990 0 R (subsection.15.3.3) 994 0 R (subsection.15.3.4) 998 0 R (subsection.15.3.5) 1002 0 R (subsection.15.3.6) 1006 0 R (subsection.15.5.1) 1018 0 R (subsection.15.5.2) 1022 0 R (subsection.16.3.1) 1042 0 R (subsection.16.3.2) 1046 0 R (subsection.16.4.1) 1054 0 R (subsection.16.4.2) 1058 0 R (subsection.16.5.1) 1066 0 R (subsection.18.10.1) 1286 0 R (subsection.18.10.2) 1290 0 R (subsection.18.10.3) 1294 0 R (subsection.18.10.4) 1298 0 R (subsection.18.15.1) 1322 0 R (subsection.18.15.2) 1326 0 R (subsection.18.2.1) 1094 0 R (subsection.18.2.2) 1098 0 R (subsection.18.2.3) 1102 0 R (subsection.18.2.4) 1106 0 R (subsection.18.2.5) 1110 0 R (subsection.18.3.1) 1118 0 R (subsection.18.3.2) 1122 0 R (subsection.18.5.1) 1134 0 R (subsection.18.5.2) 1138 0 R (subsection.18.5.3) 1142 0 R (subsection.18.5.4) 1146 0 R (subsection.18.5.5) 1150 0 R (subsection.18.5.6) 1154 0 R (subsection.18.6.1) 1162 0 R (subsection.18.6.2) 1166 0 R (subsection.18.6.3) 1170 0 R (subsection.18.6.4) 1174 0 R (subsection.18.6.5) 1178 0 R (subsection.18.7.1) 1186 0 R (subsection.18.7.2) 1190 0 R (subsection.18.8.1) 1234 0 R (subsection.18.8.2) 1238 0 R (subsection.18.8.3) 1242 0 R (subsection.18.8.4) 1246 0 R (subsection.18.9.1) 1254 0 R (subsection.18.9.2) 1258 0 R (subsection.18.9.3) 1262 0 R (subsection.18.9.4) 1266 0 R (subsection.18.9.5) 1270 0 R (subsection.18.9.6) 1274 0 R (subsection.18.9.7) 1278 0 R (subsection.19.1.1) 1338 0 R (subsection.19.1.2) 1342 0 R (subsection.19.10.1) 1566 0 R (subsection.19.10.10) 1602 0 R (subsection.19.10.11) 1606 0 R (subsection.19.10.12) 1610 0 R (subsection.19.10.13) 1614 0 R (subsection.19.10.14) 1618 0 R (subsection.19.10.15) 1622 0 R (subsection.19.10.16) 1626 0 R (subsection.19.10.2) 1570 0 R (subsection.19.10.3) 1574 0 R (subsection.19.10.4) 1578 0 R (subsection.19.10.5) 1582 0 R (subsection.19.10.6) 1586 0 R (subsection.19.10.7) 1590 0 R (subsection.19.10.8) 1594 0 R (subsection.19.10.9) 1598 0 R (subsection.19.11.1) 1634 0 R (subsection.19.11.2) 1638 0 R (subsection.19.11.3) 1642 0 R (subsection.19.11.4) 1646 0 R (subsection.19.11.5) 1650 0 R (subsection.19.11.6) 1714 0 R (subsection.19.12.1) 1722 0 R (subsection.19.12.2) 1726 0 R (subsection.19.12.3) 1730 0 R (subsection.19.12.4) 1734 0 R (subsection.19.13.1) 1742 0 R (subsection.19.13.2) 1778 0 R (subsection.19.14.1) 1786 0 R (subsection.19.14.2) 1790 0 R (subsection.19.14.3) 1794 0 R (subsection.19.14.4) 1798 0 R (subsection.19.14.5) 1802 0 R (subsection.19.14.6) 1806 0 R (subsection.19.14.7) 1810 0 R (subsection.19.16.1) 1822 0 R (subsection.19.16.2) 1826 0 R (subsection.19.16.3) 1830 0 R (subsection.19.18.1) 1842 0 R (subsection.19.18.2) 1846 0 R (subsection.19.18.3) 1850 0 R (subsection.19.19.1) 1858 0 R (subsection.19.19.2) 1862 0 R (subsection.19.19.3) 1866 0 R (subsection.19.19.4) 1870 0 R (subsection.19.2.1) 1350 0 R (subsection.19.2.2) 1354 0 R (subsection.19.2.3) 1358 0 R (subsection.19.3.1) 1366 0 R (subsection.19.3.2) 1370 0 R (subsection.19.3.3) 1374 0 R (subsection.19.3.4) 1378 0 R (subsection.19.3.5) 1382 0 R (subsection.19.4.1) 1390 0 R (subsection.19.4.2) 1394 0 R (subsection.19.4.3) 1398 0 R (subsection.19.4.4) 1402 0 R (subsection.19.4.5) 1406 0 R (subsection.19.4.6) 1410 0 R (subsection.19.4.7) 1414 0 R (subsection.19.4.8) 1418 0 R (subsection.19.5.1) 1426 0 R (subsection.19.5.10) 1462 0 R (subsection.19.5.11) 1466 0 R (subsection.19.5.12) 1470 0 R (subsection.19.5.13) 1474 0 R (subsection.19.5.14) 1478 0 R (subsection.19.5.15) 1482 0 R (subsection.19.5.16) 1486 0 R (subsection.19.5.17) 1490 0 R (subsection.19.5.18) 1494 0 R (subsection.19.5.19) 1498 0 R (subsection.19.5.2) 1430 0 R (subsection.19.5.3) 1434 0 R (subsection.19.5.4) 1438 0 R (subsection.19.5.5) 1442 0 R (subsection.19.5.6) 1446 0 R (subsection.19.5.7) 1450 0 R (subsection.19.5.8) 1454 0 R (subsection.19.5.9) 1458 0 R (subsection.19.6.1) 1506 0 R (subsection.19.6.2) 1510 0 R (subsection.19.6.3) 1514 0 R (subsection.19.7.1) 1522 0 R (subsection.19.7.2) 1526 0 R (subsection.19.8.1) 1534 0 R (subsection.19.8.2) 1538 0 R (subsection.19.9.1) 1546 0 R (subsection.19.9.2) 1550 0 R (subsection.19.9.3) 1554 0 R (subsection.19.9.4) 1558 0 R (subsection.2.2.1) 50 0 R (subsection.2.2.2) 58 0 R (subsection.2.7.1) 82 0 R (subsection.2.7.2) 86 0 R (subsection.20.3.1) 1890 0 R (subsection.20.3.2) 1894 0 R (subsection.20.3.3) 1898 0 R (subsection.20.3.4) 1902 0 R (subsection.20.3.5) 1906 0 R (subsection.20.4.1) 1914 0 R (subsection.20.4.2) 1918 0 R (subsection.21.3.1) 1942 0 R (subsection.21.4.1) 1950 0 R (subsection.21.4.2) 1954 0 R (subsection.21.4.3) 1958 0 R (subsection.21.4.4) 1962 0 R (subsection.21.4.5) 1966 0 R (subsection.21.4.6) 1970 0 R (subsection.21.5.1) 1978 0 R (subsection.21.5.2) 1982 0 R (subsection.21.5.3) 1986 0 R (subsection.22.3.1) 2046 0 R (subsection.22.4.1) 2054 0 R (subsection.23.2.1) 2074 0 R (subsection.23.2.2) 2078 0 R (subsection.23.2.3) 2086 0 R (subsection.23.3.1) 2098 0 R (subsection.23.3.2) 2102 0 R (subsection.23.3.3) 2106 0 R (subsection.23.5.1) 2118 0 R (subsection.24.2.1) 2134 0 R (subsection.24.2.2) 2154 0 R (subsection.24.2.3) 2170 0 R (subsection.24.2.4) 2174 0 R (subsection.24.5.1) 2206 0 R (subsection.24.5.2) 2214 0 R (subsection.24.5.3) 2218 0 R (subsection.24.6.1) 2226 0 R (subsection.24.6.2) 2230 0 R (subsection.24.6.3) 2234 0 R (subsection.25.2.1) 2250 0 R (subsection.25.2.2) 2258 0 R (subsection.25.2.3) 2270 0 R (subsection.25.2.4) 2274 0 R (subsection.25.2.5) 2278 0 R (subsection.25.3.1) 2302 0 R (subsection.26.3.1) 2322 0 R (subsection.26.3.2) 2326 0 R (subsection.26.3.3) 2330 0 R (subsection.26.3.4) 2334 0 R (subsection.26.4.1) 2342 0 R (subsection.26.4.2) 2346 0 R (subsection.26.4.3) 2350 0 R (subsection.26.4.4) 2354 0 R (subsection.26.4.5) 2358 0 R (subsection.26.5.1) 2366 0 R (subsection.26.5.2) 2370 0 R (subsection.26.5.3) 2374 0 R (subsection.31.1.1) 2450 0 R (subsection.31.1.2) 2474 0 R (subsection.31.2.1) 2482 0 R (subsection.31.2.2) 2486 0 R (subsection.32.1.1) 2498 0 R (subsection.32.1.10) 2534 0 R (subsection.32.1.2) 2502 0 R (subsection.32.1.3) 2506 0 R (subsection.32.1.4) 2510 0 R (subsection.32.1.5) 2514 0 R (subsection.32.1.6) 2518 0 R (subsection.32.1.7) 2522 0 R (subsection.32.1.8) 2526 0 R (subsection.32.1.9) 2530 0 R (subsection.36.1.1) 2626 0 R (subsection.36.1.2) 2630 0 R (subsection.36.4.1) 2654 0 R (subsection.36.5.1) 2670 0 R (subsection.36.5.2) 2674 0 R (subsection.37.5.1) 2706 0 R (subsection.37.6.1) 2714 0 R (subsection.37.6.2) 2718 0 R (subsection.38.2.1) 2734 0 R (subsection.38.2.2) 2738 0 R (subsection.38.2.3) 2742 0 R (subsection.38.3.1) 2750 0 R (subsection.38.3.2) 2754 0 R (subsection.38.3.3) 2758 0 R (subsection.38.3.4) 2762 0 R (subsection.38.3.5) 2766 0 R (subsection.38.3.6) 2770 0 R (subsection.38.4.1) 2778 0 R (subsection.4.3.1) 118 0 R (subsection.4.3.2) 126 0 R (subsection.4.3.3) 134 0 R (subsection.4.3.4) 142 0 R (subsection.4.3.5) 150 0 R (subsection.4.5.1) 166 0 R (subsection.4.5.2) 170 0 R (subsection.4.5.3) 174 0 R (subsection.4.5.4) 178 0 R (subsection.5.2.1) 194 0 R (subsection.5.2.2) 198 0 R (subsection.5.5.1) 214 0 R (subsection.5.5.2) 230 0 R (subsection.5.6.1) 238 0 R (subsection.5.6.2) 242 0 R (subsection.5.6.3) 246 0 R (subsection.5.6.4) 250 0 R (subsection.5.6.5) 254 0 R (subsection.5.6.6) 258 0 R (subsection.6.2.1) 274 0 R (subsection.6.2.2) 282 0 R (subsection.6.2.3) 286 0 R (subsection.6.2.4) 290 0 R (subsection.6.3.1) 298 0 R (subsection.6.4.1) 306 0 R (subsection.6.4.2) 310 0 R (subsection.6.4.3) 314 0 R (subsection.6.4.4) 318 0 R (subsection.7.2.1) 334 0 R (subsection.7.2.2) 338 0 R (subsection.7.2.3) 342 0 R (subsection.7.2.4) 346 0 R (subsection.7.3.1) 366 0 R (subsection.7.3.2) 370 0 R (subsection.7.4.1) 378 0 R (subsection.7.4.2) 382 0 R (subsection.7.4.3) 386 0 R (subsection.7.4.4) 394 0 R (subsection.7.4.5) 398 0 R (subsection.7.4.6) 402 0 R (subsection.7.5.1) 410 0 R (subsection.7.5.2) 414 0 R (subsection.8.3.1) 434 0 R (subsection.8.3.2) 438 0 R (subsubsection.10.7.3.1) 566 0 R (subsubsection.11.2.1.1) 598 0 R (subsubsection.11.2.1.2) 602 0 R (subsubsection.11.4.4.1) 642 0 R (subsubsection.11.4.4.10) 678 0 R (subsubsection.11.4.4.11) 682 0 R (subsubsection.11.4.4.2) 646 0 R (subsubsection.11.4.4.3) 650 0 R (subsubsection.11.4.4.4) 654 0 R (subsubsection.11.4.4.5) 658 0 R (subsubsection.11.4.4.6) 662 0 R (subsubsection.11.4.4.7) 666 0 R (subsubsection.11.4.4.8) 670 0 R (subsubsection.11.4.4.9) 674 0 R (subsubsection.11.4.5.1) 690 0 R (subsubsection.11.4.5.2) 694 0 R (subsubsection.11.4.5.3) 698 0 R (subsubsection.11.4.5.4) 702 0 R (subsubsection.13.4.1.1) 814 0 R (subsubsection.13.4.1.2) 818 0 R (subsubsection.13.5.4.1) 842 0 R (subsubsection.13.5.4.2) 846 0 R (subsubsection.14.2.1.1) 890 0 R (subsubsection.14.2.1.2) 894 0 R (subsubsection.14.2.1.3) 898 0 R (subsubsection.14.2.1.4) 902 0 R (subsubsection.14.2.1.5) 906 0 R (subsubsection.14.2.1.6) 910 0 R (subsubsection.14.2.1.7) 914 0 R (subsubsection.14.2.1.8) 918 0 R (subsubsection.14.2.1.9) 922 0 R (subsubsection.14.3.1.1) 934 0 R (subsubsection.14.3.1.2) 938 0 R (subsubsection.18.7.2.1) 1194 0 R (subsubsection.18.7.2.2) 1198 0 R (subsubsection.18.7.2.3) 1202 0 R (subsubsection.18.7.2.4) 1206 0 R (subsubsection.18.7.2.5) 1210 0 R (subsubsection.18.7.2.6) 1214 0 R (subsubsection.18.7.2.7) 1218 0 R (subsubsection.18.7.2.8) 1222 0 R (subsubsection.18.7.2.9) 1226 0 R (subsubsection.19.11.5.1) 1654 0 R (subsubsection.19.11.5.10) 1690 0 R (subsubsection.19.11.5.11) 1694 0 R (subsubsection.19.11.5.12) 1698 0 R (subsubsection.19.11.5.13) 1702 0 R (subsubsection.19.11.5.14) 1706 0 R (subsubsection.19.11.5.15) 1710 0 R (subsubsection.19.11.5.2) 1658 0 R (subsubsection.19.11.5.3) 1662 0 R (subsubsection.19.11.5.4) 1666 0 R (subsubsection.19.11.5.5) 1670 0 R (subsubsection.19.11.5.6) 1674 0 R (subsubsection.19.11.5.7) 1678 0 R (subsubsection.19.11.5.8) 1682 0 R (subsubsection.19.11.5.9) 1686 0 R (subsubsection.19.13.1.1) 1746 0 R (subsubsection.19.13.1.2) 1750 0 R (subsubsection.19.13.1.3) 1754 0 R (subsubsection.19.13.1.4) 1758 0 R (subsubsection.19.13.1.5) 1762 0 R (subsubsection.19.13.1.6) 1766 0 R (subsubsection.19.13.1.7) 1770 0 R (subsubsection.19.13.1.8) 1774 0 R (subsubsection.2.2.1.1) 54 0 R (subsubsection.21.5.3.1) 1990 0 R (subsubsection.21.5.3.2) 1994 0 R (subsubsection.21.5.3.3) 1998 0 R (subsubsection.21.5.3.4) 2002 0 R (subsubsection.21.5.3.5) 2006 0 R (subsubsection.21.5.3.6) 2010 0 R (subsubsection.21.5.3.7) 2014 0 R (subsubsection.21.5.3.8) 2018 0 R (subsubsection.23.2.2.1) 2082 0 R (subsubsection.23.2.3.1) 2090 0 R (subsubsection.24.2.1.1) 2138 0 R (subsubsection.24.2.1.2) 2142 0 R (subsubsection.24.2.1.3) 2146 0 R (subsubsection.24.2.1.4) 2150 0 R (subsubsection.24.2.2.1) 2158 0 R (subsubsection.24.2.2.2) 2162 0 R (subsubsection.24.2.2.3) 2166 0 R (subsubsection.24.2.4.1) 2178 0 R (subsubsection.24.2.4.2) 2182 0 R (subsubsection.24.2.4.3) 2186 0 R (subsubsection.24.2.4.4) 2190 0 R (subsubsection.24.5.1.1) 2210 0 R (subsubsection.25.2.1.1) 2254 0 R (subsubsection.25.2.2.1) 2262 0 R (subsubsection.25.2.2.2) 2266 0 R (subsubsection.25.2.5.1) 2282 0 R (subsubsection.25.2.5.2) 2286 0 R (subsubsection.25.2.5.3) 2290 0 R (subsubsection.25.2.5.4) 2294 0 R (subsubsection.31.1.1.1) 2454 0 R (subsubsection.31.1.1.2) 2458 0 R (subsubsection.31.1.1.3) 2462 0 R (subsubsection.31.1.1.4) 2466 0 R (subsubsection.31.1.1.5) 2470 0 R (subsubsection.36.1.2.1) 2634 0 R (subsubsection.36.1.2.2) 2638 0 R (subsubsection.36.4.1.1) 2658 0 R (subsubsection.36.4.1.2) 2662 0 R (subsubsection.4.3.1.1) 122 0 R (subsubsection.4.3.2.1) 130 0 R (subsubsection.4.3.3.1) 138 0 R (subsubsection.4.3.4.1) 146 0 R (subsubsection.4.3.5.1) 154 0 R (subsubsection.5.5.1.1) 218 0 R (subsubsection.5.5.1.2) 222 0 R (subsubsection.5.5.1.3) 226 0 R (subsubsection.6.2.1.1) 278 0 R (subsubsection.7.2.4.1) 350 0 R (subsubsection.7.2.4.2) 354 0 R (subsubsection.7.2.4.3) 358 0 R (subsubsection.7.4.3.1) 390 0 R (table.10.1) 4368 0 R (table.10.2) 4374 0 R (table.10.3) 4376 0 R (table.10.4) 4383 0 R (table.11.1) 4521 0 R (table.11.2) 4527 0 R (table.11.3) 4533 0 R (table.13.1) 4585 0 R (table.13.2) 4606 0 R (table.13.3) 4614 0 R (table.13.4) 4621 0 R (table.20.1) 5795 0 R (table.24.1) 6122 0 R (table.24.2) 6124 0 R (table.24.3) 6136 0 R (table.25.1) 6201 0 R (table.31.1) 6365 0 R (table.31.2) 6372 0 R (table.7.1) 4187 0 R (troubleshooting) 6420 0 R (type) 3945 0 R (unicode) 3038 0 R (upgrading-to-3.0) 3041 0 R (winbind) 3032 0 R (winbind-solaris9) 5884 0 R] +/Limits [(AccessControls) (winbind-solaris9)] +>> endobj +6735 0 obj << +/Kids [6734 0 R] +>> endobj +6736 0 obj << +/Dests 6735 0 R +>> endobj +6737 0 obj << +/Type /Catalog +/Pages 6732 0 R +/Outlines 6733 0 R +/Names 6736 0 R +/PageMode /UseOutlines /URI<> /ViewerPreferences<<>> +/OpenAction 2865 0 R +/PTEX.Fullbanner (This is pdfTeX, Version 3.14159-1.10b) +>> endobj +6738 0 obj << +/Author()/Title()/Subject()/Creator(LaTeX with hyperref package)/Producer(pdfTeX-1.10b)/Keywords() +/CreationDate (D:20030606214800) +>> endobj xref -0 2126 -0000000000 65535 f -0000000015 00000 n -0000000247 00000 n -0000001813 00000 n -0000001887 00000 n -0000001966 00000 n -0000002048 00000 n -0000002126 00000 n -0000002203 00000 n -0000002282 00000 n -0000002365 00000 n -0000002442 00000 n -0000002524 00000 n -0000002609 00000 n -0000002698 00000 n -0000002757 00000 n -0000003184 00000 n -0000003922 00000 n -0000004024 00000 n -0000004127 00000 n -0000004229 00000 n -0000004331 00000 n -0000004433 00000 n -0000004535 00000 n -0000004638 00000 n -0000004741 00000 n -0000004844 00000 n -0000004947 00000 n -0000005050 00000 n -0000005153 00000 n -0000005256 00000 n -0000005359 00000 n -0000005462 00000 n -0000005565 00000 n -0000005667 00000 n -0000005770 00000 n -0000005873 00000 n -0000005976 00000 n -0000006079 00000 n -0000006182 00000 n -0000006285 00000 n -0000006387 00000 n -0000006490 00000 n -0000006593 00000 n -0000006696 00000 n -0000006799 00000 n -0000006902 00000 n -0000007005 00000 n -0000007108 00000 n -0000007211 00000 n -0000007314 00000 n -0000007417 00000 n -0000007520 00000 n -0000007623 00000 n -0000007726 00000 n -0000007829 00000 n -0000007932 00000 n -0000008034 00000 n -0000008135 00000 n -0000008236 00000 n -0000008546 00000 n -0000008648 00000 n -0000008751 00000 n -0000008854 00000 n -0000008957 00000 n -0000009060 00000 n -0000009163 00000 n -0000009266 00000 n -0000009369 00000 n -0000009472 00000 n -0000009574 00000 n -0000009676 00000 n -0000009778 00000 n -0000009881 00000 n -0000009984 00000 n -0000010087 00000 n -0000010190 00000 n -0000010292 00000 n -0000010394 00000 n -0000010497 00000 n -0000010600 00000 n -0000010703 00000 n +0 6739 +0000000001 65535 f +0000000002 00000 f +0000000003 00000 f +0000000004 00000 f +0000000000 00000 f +0000000009 00000 n +0000294313 00000 n +0002261607 00000 n +0000000051 00000 n +0000000091 00000 n +0000298249 00000 n +0002261498 00000 n +0000000136 00000 n +0000000178 00000 n +0000298373 00000 n +0002261424 00000 n +0000000226 00000 n +0000000259 00000 n +0000298495 00000 n +0002261337 00000 n +0000000307 00000 n +0000000341 00000 n +0000303210 00000 n +0002261250 00000 n +0000000389 00000 n +0000000428 00000 n +0000308496 00000 n +0002261163 00000 n +0000000476 00000 n +0000000514 00000 n +0000308620 00000 n +0002261076 00000 n +0000000562 00000 n +0000000593 00000 n +0000310808 00000 n +0002261002 00000 n +0000000641 00000 n +0000000677 00000 n +0000314476 00000 n +0002260879 00000 n +0000000723 00000 n +0000000773 00000 n +0000314600 00000 n +0002260805 00000 n +0000000821 00000 n +0000000874 00000 n +0000314723 00000 n +0002260681 00000 n +0000000922 00000 n +0000000975 00000 n +0000314847 00000 n +0002260570 00000 n +0000001028 00000 n +0000001074 00000 n +0000314971 00000 n +0002260509 00000 n +0000001132 00000 n +0000001194 00000 n +0000319242 00000 n +0002260435 00000 n +0000001247 00000 n +0000001276 00000 n +0000319366 00000 n +0002260348 00000 n +0000001324 00000 n +0000001394 00000 n +0000319489 00000 n +0002260261 00000 n +0000001442 00000 n +0000001500 00000 n +0000319613 00000 n +0002260174 00000 n +0000001548 00000 n +0000001644 00000 n +0000319737 00000 n +0002260087 00000 n +0000001692 00000 n +0000001741 00000 n +0000322591 00000 n +0002259976 00000 n +0000001789 00000 n +0000001825 00000 n +0000322715 00000 n +0002259902 00000 n +0000001878 00000 n +0000001948 00000 n +0000323882 00000 n +0002259828 00000 n +0000002001 00000 n +0000002160 00000 n +0000324784 00000 n +0002259718 00000 n +0000002206 00000 n +0000002254 00000 n +0000324908 00000 n +0002259657 00000 n +0000002302 00000 n +0000002329 00000 n +0000325639 00000 n +0002259528 00000 n +0000002372 00000 n +0000002422 00000 n +0000329242 00000 n +0002259411 00000 n +0000002469 00000 n +0000002522 00000 n +0000329367 00000 n +0002259332 00000 n +0000002571 00000 n +0000002616 00000 n +0000329492 00000 n +0002259239 00000 n +0000002665 00000 n +0000002701 00000 n +0000333725 00000 n +0002259107 00000 n +0000002750 00000 n +0000002794 00000 n +0000333849 00000 n +0002258989 00000 n +0000002848 00000 n +0000002893 00000 n +0000337437 00000 n +0002258924 00000 n +0000002952 00000 n +0000003001 00000 n +0000337562 00000 n +0002258792 00000 n +0000003055 00000 n +0000003101 00000 n +0000337687 00000 n +0002258727 00000 n +0000003160 00000 n +0000003209 00000 n +0000337812 00000 n +0002258595 00000 n +0000003263 00000 n +0000003333 00000 n +0000337937 00000 n +0002258530 00000 n +0000003392 00000 n +0000003441 00000 n +0000343510 00000 n +0002258398 00000 n +0000003495 00000 n +0000003562 00000 n +0000347308 00000 n +0002258333 00000 n +0000003621 00000 n +0000003670 00000 n +0000347433 00000 n +0002258215 00000 n +0000003724 00000 n +0000003789 00000 n +0000351169 00000 n +0002258150 00000 n +0000003848 00000 n +0000003897 00000 n +0000351294 00000 n +0002258057 00000 n +0000003946 00000 n +0000004006 00000 n +0000355236 00000 n +0002257939 00000 n +0000004055 00000 n +0000004092 00000 n +0000355361 00000 n +0002257860 00000 n +0000004146 00000 n +0000004198 00000 n +0000357996 00000 n +0002257767 00000 n +0000004252 00000 n +0000004315 00000 n +0000358120 00000 n +0002257674 00000 n +0000004369 00000 n +0000004428 00000 n +0000358245 00000 n +0002257595 00000 n +0000004482 00000 n +0000004556 00000 n +0000362018 00000 n +0002257464 00000 n +0000004603 00000 n +0000004639 00000 n +0000362143 00000 n +0002257385 00000 n +0000004688 00000 n +0000004733 00000 n +0000371102 00000 n +0002257253 00000 n +0000004782 00000 n +0000004830 00000 n +0000371227 00000 n +0002257174 00000 n +0000004884 00000 n +0000004933 00000 n +0000375712 00000 n +0002257095 00000 n +0000004987 00000 n +0000005041 00000 n +0000384283 00000 n +0002257002 00000 n +0000005090 00000 n +0000005152 00000 n +0000388910 00000 n +0002256909 00000 n +0000005201 00000 n +0000005249 00000 n +0000389033 00000 n +0002256777 00000 n +0000005298 00000 n +0000005360 00000 n +0000389158 00000 n +0002256659 00000 n +0000005414 00000 n +0000005468 00000 n +0000389283 00000 n +0002256580 00000 n +0000005527 00000 n +0000005576 00000 n +0000392927 00000 n +0002256487 00000 n +0000005635 00000 n +0000005709 00000 n +0000393052 00000 n +0002256408 00000 n +0000005768 00000 n +0000005831 00000 n +0000398173 00000 n +0002256329 00000 n +0000005885 00000 n +0000005944 00000 n +0000402085 00000 n +0002256211 00000 n +0000005993 00000 n +0000006043 00000 n +0000402209 00000 n +0002256132 00000 n +0000006097 00000 n +0000006166 00000 n +0000402334 00000 n +0002256039 00000 n +0000006220 00000 n +0000006427 00000 n +0000402459 00000 n +0002255946 00000 n +0000006481 00000 n +0000006553 00000 n +0000405006 00000 n +0002255853 00000 n +0000006607 00000 n +0000006720 00000 n +0000405131 00000 n +0002255760 00000 n +0000006774 00000 n +0000006918 00000 n +0000405256 00000 n +0002255681 00000 n +0000006972 00000 n +0000007096 00000 n +0000409637 00000 n +0002255550 00000 n +0000007143 00000 n +0000007186 00000 n +0000409762 00000 n +0002255471 00000 n +0000007235 00000 n +0000007280 00000 n +0000413824 00000 n +0002255339 00000 n +0000007329 00000 n +0000007385 00000 n +0000413949 00000 n +0002255221 00000 n +0000007439 00000 n +0000007500 00000 n +0000417980 00000 n +0002255156 00000 n +0000007559 00000 n +0000007612 00000 n +0000418105 00000 n +0002255063 00000 n +0000007666 00000 n +0000007723 00000 n +0000418230 00000 n +0002254970 00000 n +0000007777 00000 n +0000007853 00000 n +0000422266 00000 n +0002254891 00000 n +0000007907 00000 n +0000007983 00000 n +0000422391 00000 n +0002254759 00000 n +0000008032 00000 n +0000008094 00000 n +0000422516 00000 n +0002254694 00000 n +0000008148 00000 n +0000008195 00000 n +0000426151 00000 n +0002254576 00000 n +0000008244 00000 n +0000008281 00000 n +0000426276 00000 n +0002254497 00000 n +0000008335 00000 n +0000008407 00000 n +0000426401 00000 n +0002254404 00000 n +0000008461 00000 n +0000008541 00000 n +0000426525 00000 n +0002254311 00000 n +0000008595 00000 n +0000008659 00000 n +0000426650 00000 n +0002254232 00000 n +0000008713 00000 n +0000008767 00000 n +0000430211 00000 n +0002254101 00000 n +0000008814 00000 n +0000008853 00000 n +0000430336 00000 n +0002254022 00000 n +0000008902 00000 n +0000008947 00000 n +0000430461 00000 n +0002253890 00000 n +0000008996 00000 n +0000009072 00000 n +0000434897 00000 n +0002253811 00000 n +0000009126 00000 n +0000009193 00000 n +0000439960 00000 n +0002253718 00000 n +0000009247 00000 n +0000009335 00000 n +0000444499 00000 n +0002253625 00000 n +0000009389 00000 n +0000009462 00000 n +0000444624 00000 n +0002253507 00000 n +0000009516 00000 n +0000009600 00000 n +0000444749 00000 n +0002253428 00000 n +0000009659 00000 n +0000009715 00000 n +0000444874 00000 n +0002253335 00000 n +0000009774 00000 n +0000009813 00000 n +0000444999 00000 n +0002253256 00000 n +0000009872 00000 n +0000009905 00000 n +0000449602 00000 n +0002253124 00000 n +0000009954 00000 n +0000009998 00000 n +0000449727 00000 n +0002253045 00000 n +0000010052 00000 n +0000010117 00000 n +0000454529 00000 n +0002252966 00000 n +0000010171 00000 n +0000010239 00000 n +0000457550 00000 n +0002252834 00000 n +0000010288 00000 n +0000010339 00000 n +0000457675 00000 n +0002252755 00000 n +0000010393 00000 n +0000010438 00000 n +0000457800 00000 n +0002252662 00000 n +0000010492 00000 n +0000010543 00000 n +0000462187 00000 n +0002252530 00000 n +0000010597 00000 n +0000010650 00000 n +0000462312 00000 n +0002252465 00000 n +0000010709 00000 n +0000010752 00000 n +0000462437 00000 n +0002252372 00000 n 0000010806 00000 n -0000010909 00000 n -0000011012 00000 n -0000011115 00000 n -0000011218 00000 n -0000011321 00000 n -0000011424 00000 n -0000011527 00000 n -0000011630 00000 n -0000011733 00000 n -0000011836 00000 n -0000011938 00000 n -0000012041 00000 n -0000012144 00000 n -0000012247 00000 n -0000012350 00000 n -0000012453 00000 n -0000012556 00000 n -0000012658 00000 n -0000012760 00000 n -0000012862 00000 n -0000013175 00000 n -0000013278 00000 n -0000013382 00000 n -0000013486 00000 n -0000013590 00000 n -0000013694 00000 n -0000013798 00000 n -0000013902 00000 n -0000014006 00000 n -0000014110 00000 n -0000014214 00000 n -0000014317 00000 n -0000014421 00000 n -0000014525 00000 n -0000014629 00000 n -0000014732 00000 n -0000014835 00000 n -0000014938 00000 n -0000015042 00000 n -0000015146 00000 n -0000015250 00000 n -0000015354 00000 n -0000015458 00000 n -0000015562 00000 n -0000015666 00000 n -0000015770 00000 n -0000015874 00000 n -0000015978 00000 n -0000016082 00000 n -0000016186 00000 n -0000016290 00000 n -0000016394 00000 n -0000016498 00000 n -0000016602 00000 n -0000016706 00000 n -0000016810 00000 n -0000016913 00000 n -0000017017 00000 n +0000010854 00000 n +0000466397 00000 n +0002252279 00000 n +0000010908 00000 n +0000010956 00000 n +0000466522 00000 n +0002252200 00000 n +0000011010 00000 n +0000011041 00000 n +0000466647 00000 n +0002252082 00000 n +0000011090 00000 n +0000011127 00000 n +0000466772 00000 n +0002252003 00000 n +0000011181 00000 n +0000011241 00000 n +0000466896 00000 n +0002251924 00000 n +0000011295 00000 n +0000011351 00000 n +0000471733 00000 n +0002251793 00000 n +0000011398 00000 n +0000011439 00000 n +0000471858 00000 n +0002251714 00000 n +0000011488 00000 n +0000011533 00000 n +0000471983 00000 n +0002251621 00000 n +0000011582 00000 n +0000011616 00000 n +0000475166 00000 n +0002251489 00000 n +0000011665 00000 n +0000011710 00000 n +0000475291 00000 n +0002251410 00000 n +0000011764 00000 n +0000011820 00000 n +0000475415 00000 n +0002251331 00000 n +0000011874 00000 n +0000011921 00000 n +0000477693 00000 n +0002251252 00000 n +0000011970 00000 n +0000012007 00000 n +0000478668 00000 n +0002251135 00000 n +0000012054 00000 n +0000012114 00000 n +0000478793 00000 n +0002251070 00000 n +0000012163 00000 n +0000012191 00000 n +0000479522 00000 n +0002250935 00000 n +0000012235 00000 n +0000012281 00000 n +0000482995 00000 n +0002250817 00000 n +0000012329 00000 n +0000012393 00000 n +0000483120 00000 n +0002250738 00000 n +0000012443 00000 n +0000012489 00000 n +0000485900 00000 n +0002250645 00000 n +0000012539 00000 n +0000012581 00000 n +0000490085 00000 n +0002250513 00000 n +0000012631 00000 n +0000012666 00000 n +0000490210 00000 n +0002250434 00000 n +0000012721 00000 n +0000012767 00000 n +0000490335 00000 n +0002250341 00000 n +0000012822 00000 n +0000012873 00000 n +0000494930 00000 n +0002250262 00000 n +0000012928 00000 n +0000012979 00000 n +0000495055 00000 n +0002250130 00000 n +0000013029 00000 n +0000013076 00000 n +0000499555 00000 n +0002250051 00000 n +0000013131 00000 n +0000013187 00000 n +0000502486 00000 n +0002249958 00000 n +0000013242 00000 n +0000013295 00000 n +0000506308 00000 n +0002249865 00000 n +0000013350 00000 n +0000013407 00000 n +0000510134 00000 n +0002249772 00000 n +0000013462 00000 n +0000013519 00000 n +0000510511 00000 n +0002249679 00000 n +0000013574 00000 n +0000013631 00000 n +0000510632 00000 n +0002249586 00000 n +0000013686 00000 n +0000013732 00000 n +0000510756 00000 n +0002249493 00000 n +0000013787 00000 n +0000013850 00000 n +0000514907 00000 n +0002249414 00000 n +0000013905 00000 n +0000013971 00000 n +0000515032 00000 n +0002249282 00000 n +0000014021 00000 n +0000014092 00000 n +0000519850 00000 n +0002249203 00000 n +0000014147 00000 n +0000014198 00000 n +0000523412 00000 n +0002249110 00000 n +0000014253 00000 n +0000014296 00000 n +0000523537 00000 n +0002249031 00000 n +0000014351 00000 n +0000014397 00000 n +0000523662 00000 n +0002248899 00000 n +0000014447 00000 n +0000014485 00000 n +0000523787 00000 n +0002248820 00000 n +0000014540 00000 n +0000014595 00000 n +0000527642 00000 n +0002248741 00000 n +0000014650 00000 n +0000014698 00000 n +0000527765 00000 n +0002248609 00000 n +0000014748 00000 n +0000014803 00000 n +0000531916 00000 n +0002248530 00000 n +0000014858 00000 n +0000014910 00000 n +0000532041 00000 n +0002248437 00000 n +0000014965 00000 n +0000015010 00000 n +0000535797 00000 n +0002248319 00000 n +0000015065 00000 n +0000015115 00000 n +0000535922 00000 n +0002248254 00000 n +0000015175 00000 n +0000015241 00000 n +0000549920 00000 n +0002248136 00000 n +0000015291 00000 n +0000015329 00000 n +0000550045 00000 n +0002248057 00000 n +0000015384 00000 n +0000015483 00000 n +0000550170 00000 n +0002247978 00000 n +0000015538 00000 n +0000015639 00000 n +0000553791 00000 n +0002247846 00000 n +0000015687 00000 n +0000015739 00000 n +0000553916 00000 n +0002247767 00000 n +0000015789 00000 n +0000015835 00000 n +0000558476 00000 n +0002247635 00000 n +0000015885 00000 n +0000015931 00000 n +0000562408 00000 n +0002247517 00000 n +0000015986 00000 n +0000016043 00000 n +0000566701 00000 n +0002247438 00000 n +0000016103 00000 n +0000016165 00000 n +0000566826 00000 n +0002247359 00000 n +0000016225 00000 n +0000016291 00000 n +0000566951 00000 n +0002247280 00000 n +0000016346 00000 n +0000016425 00000 n +0000567076 00000 n +0002247148 00000 n +0000016475 00000 n +0000016524 00000 n +0000570422 00000 n +0002247069 00000 n +0000016579 00000 n +0000016627 00000 n +0000570547 00000 n +0002246990 00000 n +0000016682 00000 n +0000016728 00000 n +0000573553 00000 n +0002246858 00000 n +0000016778 00000 n +0000016820 00000 n +0000573678 00000 n +0002246779 00000 n +0000016875 00000 n +0000016912 00000 n +0000578846 00000 n +0002246686 00000 n +0000016967 00000 n +0000017033 00000 n +0000578971 00000 n +0002246593 00000 n +0000017088 00000 n 0000017121 00000 n -0000017225 00000 n -0000017329 00000 n -0000017432 00000 n -0000017534 00000 n -0000017636 00000 n -0000017997 00000 n -0000018100 00000 n -0000018204 00000 n -0000018308 00000 n -0000018411 00000 n -0000018515 00000 n -0000018619 00000 n -0000018723 00000 n -0000018826 00000 n -0000018930 00000 n -0000019034 00000 n -0000019137 00000 n -0000019241 00000 n -0000019345 00000 n -0000019449 00000 n -0000019553 00000 n -0000019657 00000 n -0000019761 00000 n -0000019865 00000 n -0000019969 00000 n -0000020073 00000 n -0000020177 00000 n -0000020281 00000 n -0000020385 00000 n -0000020489 00000 n -0000020593 00000 n -0000020697 00000 n -0000020801 00000 n -0000020905 00000 n -0000021009 00000 n -0000021113 00000 n -0000021217 00000 n -0000021321 00000 n -0000021425 00000 n -0000021528 00000 n -0000021632 00000 n -0000021736 00000 n -0000021840 00000 n -0000021944 00000 n -0000022048 00000 n -0000022152 00000 n -0000022256 00000 n -0000022359 00000 n -0000022712 00000 n -0000022815 00000 n -0000022919 00000 n -0000023023 00000 n +0000579096 00000 n +0002246460 00000 n +0000017176 00000 n +0000017210 00000 n +0000584555 00000 n +0002246381 00000 n +0000017270 00000 n +0000017321 00000 n +0000584679 00000 n +0002246288 00000 n +0000017381 00000 n +0000017462 00000 n +0000586979 00000 n +0002246195 00000 n +0000017522 00000 n +0000017573 00000 n +0000588997 00000 n +0002246102 00000 n +0000017633 00000 n +0000017690 00000 n +0000593601 00000 n +0002246009 00000 n +0000017750 00000 n +0000017796 00000 n +0000597157 00000 n +0002245916 00000 n +0000017856 00000 n +0000017915 00000 n +0000597282 00000 n +0002245823 00000 n +0000017975 00000 n +0000018029 00000 n +0000600758 00000 n +0002245730 00000 n +0000018089 00000 n +0000018159 00000 n +0000600883 00000 n +0002245637 00000 n +0000018219 00000 n +0000018287 00000 n +0000604151 00000 n +0002245544 00000 n +0000018348 00000 n +0000018402 00000 n +0000604275 00000 n +0002245465 00000 n +0000018463 00000 n +0000018507 00000 n +0000604400 00000 n +0002245333 00000 n +0000018562 00000 n +0000018594 00000 n +0000608101 00000 n +0002245254 00000 n +0000018654 00000 n +0000018704 00000 n +0000608225 00000 n +0002245161 00000 n +0000018764 00000 n +0000018804 00000 n +0000608350 00000 n +0002245068 00000 n +0000018864 00000 n +0000018940 00000 n +0000608474 00000 n +0002244989 00000 n +0000019000 00000 n +0000019067 00000 n +0000611272 00000 n +0002244910 00000 n +0000019122 00000 n +0000019152 00000 n +0000611397 00000 n +0002244792 00000 n +0000019202 00000 n +0000019240 00000 n +0000611521 00000 n +0002244713 00000 n +0000019295 00000 n +0000019366 00000 n +0000611645 00000 n +0002244620 00000 n +0000019421 00000 n +0000019499 00000 n +0000611770 00000 n +0002244541 00000 n +0000019554 00000 n +0000019607 00000 n +0000623637 00000 n +0002244409 00000 n +0000019655 00000 n +0000019712 00000 n +0000623762 00000 n +0002244330 00000 n +0000019762 00000 n +0000019808 00000 n +0000623887 00000 n +0002244198 00000 n +0000019858 00000 n +0000019893 00000 n +0000627416 00000 n +0002244133 00000 n +0000019948 00000 n +0000019996 00000 n +0000629651 00000 n +0002244001 00000 n +0000020046 00000 n +0000020092 00000 n +0000629776 00000 n +0002243922 00000 n +0000020147 00000 n +0000020206 00000 n +0000630027 00000 n +0002243843 00000 n +0000020261 00000 n +0000020321 00000 n +0000632552 00000 n +0002243725 00000 n +0000020371 00000 n +0000020409 00000 n +0000632677 00000 n +0002243646 00000 n +0000020464 00000 n +0000020510 00000 n +0000632802 00000 n +0002243567 00000 n +0000020565 00000 n +0000020643 00000 n +0000636448 00000 n +0002243435 00000 n +0000020691 00000 n +0000020755 00000 n +0000636573 00000 n +0002243356 00000 n +0000020805 00000 n +0000020851 00000 n +0000640970 00000 n +0002243224 00000 n +0000020901 00000 n +0000020953 00000 n +0000641095 00000 n +0002243145 00000 n +0000021008 00000 n +0000021084 00000 n +0000645725 00000 n +0002243052 00000 n +0000021139 00000 n +0000021186 00000 n +0000645977 00000 n +0002242973 00000 n +0000021241 00000 n +0000021301 00000 n +0000652302 00000 n +0002242841 00000 n +0000021351 00000 n +0000021408 00000 n +0000652427 00000 n +0002242762 00000 n +0000021463 00000 n +0000021519 00000 n +0000652552 00000 n +0002242669 00000 n +0000021574 00000 n +0000021646 00000 n +0000656369 00000 n +0002242590 00000 n +0000021701 00000 n +0000021750 00000 n +0000656493 00000 n +0002242458 00000 n +0000021800 00000 n +0000021850 00000 n +0000660394 00000 n +0002242354 00000 n +0000021905 00000 n +0000021960 00000 n +0000664461 00000 n +0002242275 00000 n +0000022020 00000 n +0000022079 00000 n +0000664712 00000 n +0002242196 00000 n +0000022139 00000 n +0000022183 00000 n +0000668533 00000 n +0002242064 00000 n +0000022233 00000 n +0000022315 00000 n +0000668658 00000 n +0002241985 00000 n +0000022370 00000 n +0000022448 00000 n +0000672986 00000 n +0002241892 00000 n +0000022503 00000 n +0000022568 00000 n +0000673111 00000 n +0002241799 00000 n +0000022623 00000 n +0000022672 00000 n +0000673235 00000 n +0002241667 00000 n +0000022727 00000 n +0000022791 00000 n +0000677591 00000 n +0002241588 00000 n +0000022851 00000 n +0000022896 00000 n +0000677716 00000 n +0002241509 00000 n +0000022956 00000 n +0000023006 00000 n +0000677840 00000 n +0002241416 00000 n +0000023061 00000 n 0000023127 00000 n -0000023231 00000 n -0000023335 00000 n -0000023439 00000 n -0000023543 00000 n -0000023647 00000 n -0000023751 00000 n -0000023855 00000 n -0000023959 00000 n -0000024063 00000 n +0000682968 00000 n +0002241323 00000 n +0000023182 00000 n +0000023267 00000 n +0000686660 00000 n +0002241244 00000 n +0000023322 00000 n +0000023407 00000 n +0000686785 00000 n +0002241126 00000 n +0000023457 00000 n +0000023495 00000 n +0000686910 00000 n +0002241047 00000 n +0000023550 00000 n +0000023614 00000 n +0000690804 00000 n +0002240968 00000 n +0000023669 00000 n +0000023780 00000 n +0000694378 00000 n +0002240836 00000 n +0000023828 00000 n +0000023874 00000 n +0000694503 00000 n +0002240757 00000 n +0000023924 00000 n +0000023970 00000 n +0000694628 00000 n +0002240625 00000 n +0000024020 00000 n +0000024055 00000 n +0000699442 00000 n +0002240521 00000 n +0000024110 00000 n 0000024167 00000 n -0000024271 00000 n -0000024375 00000 n -0000024479 00000 n -0000024583 00000 n -0000024686 00000 n -0000024790 00000 n -0000024894 00000 n -0000024998 00000 n -0000025102 00000 n -0000025206 00000 n -0000025310 00000 n -0000025414 00000 n -0000025518 00000 n -0000025622 00000 n -0000025726 00000 n -0000025830 00000 n -0000025934 00000 n -0000026037 00000 n -0000026141 00000 n +0000707568 00000 n +0002240442 00000 n +0000024227 00000 n +0000024283 00000 n +0000707693 00000 n +0002240349 00000 n +0000024343 00000 n +0000024405 00000 n +0000707817 00000 n +0002240256 00000 n +0000024465 00000 n +0000024527 00000 n +0000707942 00000 n +0002240163 00000 n +0000024587 00000 n +0000024647 00000 n +0000708067 00000 n +0002240070 00000 n +0000024707 00000 n +0000024756 00000 n +0000712162 00000 n +0002239977 00000 n +0000024816 00000 n +0000024860 00000 n +0000712287 00000 n +0002239884 00000 n +0000024920 00000 n +0000024969 00000 n +0000712411 00000 n +0002239791 00000 n +0000025029 00000 n +0000025105 00000 n +0000712535 00000 n +0002239712 00000 n +0000025165 00000 n +0000025228 00000 n +0000717016 00000 n +0002239580 00000 n +0000025278 00000 n +0000025338 00000 n +0000720186 00000 n +0002239476 00000 n +0000025393 00000 n +0000025441 00000 n +0000720311 00000 n +0002239397 00000 n +0000025501 00000 n +0000025547 00000 n +0000720435 00000 n +0002239318 00000 n +0000025607 00000 n +0000025660 00000 n +0000723776 00000 n +0002239186 00000 n +0000025710 00000 n +0000025788 00000 n +0000729265 00000 n +0002239107 00000 n +0000025843 00000 n +0000025897 00000 n +0000729390 00000 n +0002239028 00000 n +0000025952 00000 n +0000026001 00000 n +0000733219 00000 n +0002238935 00000 n +0000026051 00000 n +0000026102 00000 n +0000733343 00000 n +0002238803 00000 n +0000026152 00000 n +0000026190 00000 n +0000737799 00000 n +0002238738 00000 n 0000026245 00000 n -0000026349 00000 n -0000026453 00000 n -0000026557 00000 n -0000026661 00000 n -0000026765 00000 n -0000026869 00000 n -0000026972 00000 n -0000027074 00000 n -0000027176 00000 n -0000027278 00000 n -0000027647 00000 n -0000027750 00000 n -0000027854 00000 n -0000027958 00000 n -0000028062 00000 n -0000028166 00000 n -0000028270 00000 n -0000028374 00000 n -0000028478 00000 n -0000028582 00000 n -0000028685 00000 n -0000028789 00000 n -0000028893 00000 n -0000028997 00000 n -0000029101 00000 n -0000029205 00000 n -0000029309 00000 n -0000029413 00000 n -0000029516 00000 n -0000029620 00000 n -0000029724 00000 n -0000029828 00000 n -0000029932 00000 n -0000030036 00000 n -0000030140 00000 n -0000030243 00000 n -0000030347 00000 n -0000030451 00000 n -0000030554 00000 n -0000030657 00000 n -0000030761 00000 n -0000030865 00000 n -0000030969 00000 n -0000031073 00000 n -0000031177 00000 n -0000031281 00000 n -0000031384 00000 n -0000031488 00000 n -0000031592 00000 n -0000031696 00000 n -0000031799 00000 n -0000031901 00000 n -0000032003 00000 n -0000032356 00000 n -0000032459 00000 n -0000032563 00000 n +0000026298 00000 n +0000737924 00000 n +0002238659 00000 n +0000026348 00000 n +0000026391 00000 n +0000741408 00000 n +0002238525 00000 n +0000026439 00000 n +0000026476 00000 n +0000741533 00000 n +0002238446 00000 n +0000026526 00000 n +0000026563 00000 n +0000741658 00000 n +0002238353 00000 n +0000026613 00000 n +0000026659 00000 n +0000741783 00000 n +0002238219 00000 n +0000026709 00000 n +0000026788 00000 n +0000741908 00000 n +0002238140 00000 n +0000026843 00000 n +0000026897 00000 n +0000745268 00000 n +0002238047 00000 n +0000026952 00000 n +0000027000 00000 n +0000745393 00000 n +0002237954 00000 n +0000027055 00000 n +0000027108 00000 n +0000745518 00000 n +0002237859 00000 n +0000027163 00000 n +0000027207 00000 n +0000748313 00000 n +0002237762 00000 n +0000027263 00000 n +0000027317 00000 n +0000748438 00000 n +0002237679 00000 n +0000027373 00000 n +0000027416 00000 n +0000752312 00000 n +0002237582 00000 n +0000027467 00000 n +0000027508 00000 n +0000752438 00000 n +0002237458 00000 n +0000027559 00000 n +0000027598 00000 n +0000752564 00000 n +0002237374 00000 n +0000027654 00000 n +0000027735 00000 n +0000752690 00000 n +0002237290 00000 n +0000027791 00000 n +0000027872 00000 n +0000756400 00000 n +0002237152 00000 n +0000027921 00000 n +0000027976 00000 n +0000756526 00000 n +0002237068 00000 n +0000028027 00000 n +0000028074 00000 n +0000756651 00000 n +0002236969 00000 n +0000028125 00000 n +0000028180 00000 n +0000760685 00000 n +0002236829 00000 n +0000028231 00000 n +0000028299 00000 n +0000760809 00000 n +0002236745 00000 n +0000028355 00000 n +0000028446 00000 n +0000760935 00000 n +0002236661 00000 n +0000028502 00000 n +0000028599 00000 n +0000761060 00000 n +0002236521 00000 n +0000028650 00000 n +0000028716 00000 n +0000761186 00000 n +0002236437 00000 n +0000028772 00000 n +0000028830 00000 n +0000765084 00000 n +0002236353 00000 n +0000028886 00000 n +0000028943 00000 n +0000767495 00000 n +0002236228 00000 n +0000028994 00000 n +0000029033 00000 n +0000767621 00000 n +0002236159 00000 n +0000029089 00000 n +0000029162 00000 n +0000771331 00000 n +0002236020 00000 n +0000029211 00000 n +0000029292 00000 n +0000771457 00000 n +0002235936 00000 n +0000029343 00000 n +0000029390 00000 n +0000773438 00000 n +0002235852 00000 n +0000029441 00000 n +0000029480 00000 n +0000777200 00000 n +0002235712 00000 n +0000029529 00000 n +0000029579 00000 n +0000777326 00000 n +0002235628 00000 n +0000029630 00000 n +0000029677 00000 n +0000777452 00000 n +0002235488 00000 n +0000029728 00000 n +0000029776 00000 n +0000781299 00000 n +0002235404 00000 n +0000029832 00000 n +0000029904 00000 n +0000781865 00000 n +0002235305 00000 n +0000029960 00000 n +0000030029 00000 n +0000781991 00000 n +0002235206 00000 n +0000030085 00000 n +0000030143 00000 n +0000785633 00000 n +0002235107 00000 n +0000030199 00000 n +0000030265 00000 n +0000785758 00000 n +0002235023 00000 n +0000030321 00000 n +0000030376 00000 n +0000789070 00000 n +0002234883 00000 n +0000030427 00000 n +0000030497 00000 n +0000789196 00000 n +0002234799 00000 n +0000030553 00000 n +0000030628 00000 n +0000791566 00000 n +0002234715 00000 n +0000030684 00000 n +0000030743 00000 n +0000797302 00000 n +0002234616 00000 n +0000030794 00000 n +0000030871 00000 n +0000808328 00000 n +0002234476 00000 n +0000030922 00000 n +0000030994 00000 n +0000808454 00000 n +0002234392 00000 n +0000031050 00000 n +0000031098 00000 n +0000813414 00000 n +0002234293 00000 n +0000031154 00000 n +0000031204 00000 n +0000818299 00000 n +0002234194 00000 n +0000031260 00000 n +0000031323 00000 n +0000818425 00000 n +0002234095 00000 n +0000031379 00000 n +0000031421 00000 n +0000822963 00000 n +0002233996 00000 n +0000031477 00000 n +0000031561 00000 n +0000827320 00000 n +0002233912 00000 n +0000031617 00000 n +0000031679 00000 n +0000832368 00000 n +0002233772 00000 n +0000031730 00000 n +0000031795 00000 n +0000832494 00000 n +0002233688 00000 n +0000031851 00000 n +0000031927 00000 n +0000836768 00000 n +0002233589 00000 n +0000031983 00000 n +0000032060 00000 n +0000836893 00000 n +0002233490 00000 n +0000032116 00000 n +0000032174 00000 n +0000840736 00000 n +0002233391 00000 n +0000032230 00000 n +0000032295 00000 n +0000844270 00000 n +0002233307 00000 n +0000032351 00000 n +0000032416 00000 n +0000848977 00000 n +0002233167 00000 n +0000032467 00000 n +0000032528 00000 n +0000849103 00000 n +0002233083 00000 n +0000032584 00000 n 0000032667 00000 n -0000032771 00000 n -0000032875 00000 n -0000032979 00000 n -0000033083 00000 n -0000033187 00000 n -0000033291 00000 n -0000033394 00000 n -0000033498 00000 n -0000033602 00000 n -0000033706 00000 n -0000033810 00000 n -0000033914 00000 n -0000034018 00000 n -0000034122 00000 n -0000034226 00000 n -0000034329 00000 n -0000034433 00000 n -0000034537 00000 n -0000034641 00000 n -0000034745 00000 n -0000034849 00000 n -0000034953 00000 n -0000035056 00000 n -0000035160 00000 n -0000035264 00000 n -0000035368 00000 n -0000035472 00000 n -0000035576 00000 n -0000035680 00000 n -0000035784 00000 n -0000035888 00000 n -0000035992 00000 n -0000036096 00000 n -0000036200 00000 n -0000036304 00000 n -0000036408 00000 n -0000036512 00000 n -0000036616 00000 n -0000036961 00000 n -0000037014 00000 n -0000037101 00000 n -0000037155 00000 n -0000037241 00000 n -0000037296 00000 n -0000037383 00000 n -0000037450 00000 n -0000037536 00000 n -0000037639 00000 n -0000037743 00000 n -0000037847 00000 n -0000037951 00000 n -0000038055 00000 n -0000038159 00000 n -0000038263 00000 n -0000038367 00000 n -0000038471 00000 n -0000038575 00000 n -0000038679 00000 n -0000038783 00000 n -0000038887 00000 n -0000038991 00000 n -0000039095 00000 n -0000039199 00000 n -0000039303 00000 n -0000039407 00000 n -0000039511 00000 n -0000039615 00000 n -0000039719 00000 n -0000039823 00000 n -0000039927 00000 n -0000040031 00000 n -0000040134 00000 n -0000040238 00000 n -0000040342 00000 n -0000040446 00000 n -0000040550 00000 n -0000040654 00000 n -0000040758 00000 n -0000040861 00000 n -0000040963 00000 n -0000041065 00000 n -0000041386 00000 n -0000041490 00000 n -0000041594 00000 n -0000041698 00000 n -0000041802 00000 n -0000041906 00000 n -0000042010 00000 n -0000042114 00000 n -0000042218 00000 n -0000042322 00000 n -0000042426 00000 n -0000042530 00000 n -0000042634 00000 n -0000042738 00000 n -0000042842 00000 n -0000042946 00000 n -0000043050 00000 n -0000043154 00000 n -0000043258 00000 n -0000043362 00000 n -0000043466 00000 n -0000043570 00000 n -0000043674 00000 n -0000043778 00000 n -0000043882 00000 n -0000043986 00000 n -0000044089 00000 n -0000044193 00000 n -0000044297 00000 n -0000044401 00000 n -0000044505 00000 n -0000044609 00000 n -0000044713 00000 n -0000044817 00000 n -0000044921 00000 n -0000045025 00000 n -0000045129 00000 n -0000045233 00000 n -0000045337 00000 n -0000045441 00000 n -0000045545 00000 n -0000045649 00000 n -0000045753 00000 n -0000045857 00000 n -0000045961 00000 n -0000046065 00000 n -0000046169 00000 n -0000046273 00000 n -0000046377 00000 n -0000046480 00000 n -0000046582 00000 n -0000046684 00000 n -0000047109 00000 n -0000047213 00000 n -0000047317 00000 n -0000047421 00000 n -0000047525 00000 n -0000047629 00000 n -0000047733 00000 n -0000047837 00000 n -0000047941 00000 n -0000048045 00000 n -0000048149 00000 n -0000048253 00000 n -0000048357 00000 n -0000048461 00000 n -0000048565 00000 n -0000048669 00000 n -0000048773 00000 n -0000048877 00000 n -0000048981 00000 n -0000049085 00000 n -0000049189 00000 n -0000049293 00000 n -0000049397 00000 n -0000049501 00000 n -0000049605 00000 n -0000049709 00000 n -0000049813 00000 n -0000049917 00000 n -0000050021 00000 n -0000050125 00000 n -0000050229 00000 n -0000050333 00000 n -0000050437 00000 n -0000050541 00000 n -0000050645 00000 n -0000050749 00000 n -0000050853 00000 n -0000050957 00000 n -0000051061 00000 n -0000051165 00000 n -0000051269 00000 n -0000051373 00000 n -0000051477 00000 n -0000051581 00000 n -0000051685 00000 n -0000051789 00000 n -0000051893 00000 n -0000051997 00000 n -0000052101 00000 n -0000052204 00000 n -0000052306 00000 n -0000052408 00000 n -0000052833 00000 n -0000052937 00000 n -0000053041 00000 n -0000053145 00000 n -0000053249 00000 n -0000053353 00000 n -0000053457 00000 n -0000053561 00000 n -0000053665 00000 n -0000053769 00000 n -0000053872 00000 n -0000053976 00000 n -0000054080 00000 n -0000054184 00000 n -0000054288 00000 n +0000853763 00000 n +0002232958 00000 n +0000032723 00000 n +0000032803 00000 n +0000854140 00000 n +0002232874 00000 n +0000032864 00000 n +0000032922 00000 n +0000860692 00000 n +0002232775 00000 n +0000032983 00000 n +0000033080 00000 n +0000860818 00000 n +0002232676 00000 n +0000033141 00000 n +0000033215 00000 n +0000863593 00000 n +0002232577 00000 n +0000033276 00000 n +0000033360 00000 n +0000866310 00000 n +0002232478 00000 n +0000033421 00000 n +0000033483 00000 n +0000869094 00000 n +0002232379 00000 n +0000033544 00000 n +0000033637 00000 n +0000873492 00000 n +0002232280 00000 n +0000033698 00000 n +0000033770 00000 n +0000873618 00000 n +0002232181 00000 n +0000033831 00000 n +0000033915 00000 n +0000876139 00000 n +0002232097 00000 n +0000033976 00000 n +0000034056 00000 n +0000880485 00000 n +0002231957 00000 n +0000034107 00000 n +0000034212 00000 n +0000880611 00000 n +0002231873 00000 n +0000034268 00000 n +0000034332 00000 n +0000885472 00000 n +0002231774 00000 n +0000034388 00000 n +0000034463 00000 n +0000889772 00000 n +0002231675 00000 n +0000034519 00000 n +0000034587 00000 n +0000889898 00000 n +0002231591 00000 n +0000034643 00000 n +0000034733 00000 n +0000894623 00000 n +0002231451 00000 n +0000034784 00000 n +0000034823 00000 n +0000894749 00000 n +0002231367 00000 n +0000034879 00000 n +0000034959 00000 n +0000899364 00000 n +0002231268 00000 n +0000035015 00000 n +0000035079 00000 n +0000904683 00000 n +0002231169 00000 n +0000035135 00000 n +0000035206 00000 n +0000904809 00000 n +0002231070 00000 n +0000035262 00000 n +0000035347 00000 n +0000909068 00000 n +0002230971 00000 n +0000035403 00000 n +0000035470 00000 n +0000916610 00000 n +0002230872 00000 n +0000035526 00000 n +0000035577 00000 n +0000916736 00000 n +0002230788 00000 n +0000035633 00000 n +0000035724 00000 n +0000916862 00000 n +0002230648 00000 n +0000035776 00000 n +0000035823 00000 n +0000916988 00000 n +0002230564 00000 n +0000035880 00000 n +0000035926 00000 n +0000920988 00000 n +0002230465 00000 n +0000035983 00000 n +0000036044 00000 n +0000921114 00000 n +0002230366 00000 n +0000036101 00000 n +0000036149 00000 n +0000921240 00000 n +0002230282 00000 n +0000036206 00000 n +0000036258 00000 n +0000926042 00000 n +0002230183 00000 n +0000036310 00000 n +0000036391 00000 n +0000930406 00000 n +0002230084 00000 n +0000036443 00000 n +0000036492 00000 n +0000930532 00000 n +0002229985 00000 n +0000036544 00000 n +0000036615 00000 n +0000933657 00000 n +0002229886 00000 n +0000036667 00000 n +0000036752 00000 n +0000933783 00000 n +0002229761 00000 n +0000036804 00000 n +0000036857 00000 n +0000933909 00000 n +0002229677 00000 n +0000036914 00000 n +0000036989 00000 n +0000934035 00000 n +0002229593 00000 n +0000037046 00000 n +0000037146 00000 n +0000938459 00000 n +0002229453 00000 n +0000037195 00000 n +0000037253 00000 n +0000938585 00000 n +0002229328 00000 n +0000037304 00000 n +0000037342 00000 n +0000938711 00000 n +0002229244 00000 n +0000037398 00000 n +0000037447 00000 n +0000938837 00000 n +0002229160 00000 n +0000037503 00000 n +0000037539 00000 n +0000938962 00000 n +0002229020 00000 n +0000037590 00000 n +0000037651 00000 n +0000942985 00000 n +0002228936 00000 n +0000037707 00000 n +0000037766 00000 n +0000943111 00000 n +0002228837 00000 n +0000037822 00000 n +0000037883 00000 n +0000945574 00000 n +0002228753 00000 n +0000037939 00000 n +0000038006 00000 n +0000949187 00000 n +0002228613 00000 n +0000038057 00000 n +0000038105 00000 n +0000949313 00000 n +0002228529 00000 n +0000038161 00000 n +0000038233 00000 n +0000949439 00000 n +0002228430 00000 n +0000038289 00000 n +0000038416 00000 n +0000952936 00000 n +0002228331 00000 n +0000038472 00000 n +0000038546 00000 n +0000953061 00000 n +0002228232 00000 n +0000038602 00000 n +0000038692 00000 n +0000957503 00000 n +0002228148 00000 n +0000038748 00000 n +0000038831 00000 n +0000957629 00000 n +0002228008 00000 n +0000038882 00000 n +0000038999 00000 n +0000961970 00000 n +0002227924 00000 n +0000039055 00000 n +0000039119 00000 n +0000962096 00000 n +0002227825 00000 n +0000039175 00000 n +0000039231 00000 n +0000962222 00000 n +0002227726 00000 n +0000039287 00000 n +0000039355 00000 n +0000995434 00000 n +0002227627 00000 n +0000039411 00000 n +0000039465 00000 n +0001009767 00000 n +0002227528 00000 n +0000039521 00000 n +0000039608 00000 n +0001014009 00000 n +0002227429 00000 n +0000039664 00000 n +0000039744 00000 n +0001018149 00000 n +0002227330 00000 n +0000039800 00000 n +0000039874 00000 n +0001018275 00000 n +0002227246 00000 n +0000039930 00000 n +0000040005 00000 n +0001018401 00000 n +0002227105 00000 n +0000040056 00000 n +0000040113 00000 n +0001023373 00000 n +0002227021 00000 n +0000040169 00000 n +0000040224 00000 n +0001026500 00000 n +0002226922 00000 n +0000040280 00000 n +0000040334 00000 n +0001029707 00000 n +0002226823 00000 n +0000040390 00000 n +0000040437 00000 n +0001029833 00000 n +0002226724 00000 n +0000040493 00000 n +0000040531 00000 n +0001049843 00000 n +0002226625 00000 n +0000040587 00000 n +0000040621 00000 n +0001074332 00000 n +0002226526 00000 n +0000040677 00000 n +0000040715 00000 n +0001130222 00000 n +0002226427 00000 n +0000040771 00000 n +0000040826 00000 n +0001130348 00000 n +0002226328 00000 n +0000040882 00000 n +0000040936 00000 n +0001135342 00000 n +0002226229 00000 n +0000040992 00000 n +0000041033 00000 n +0001138997 00000 n +0002226130 00000 n +0000041090 00000 n +0000041175 00000 n +0001142744 00000 n +0002226031 00000 n +0000041232 00000 n +0000041281 00000 n +0001142870 00000 n +0002225932 00000 n +0000041338 00000 n +0000041377 00000 n +0001142996 00000 n +0002225833 00000 n +0000041434 00000 n +0000041477 00000 n +0001143121 00000 n +0002225734 00000 n +0000041534 00000 n +0000041598 00000 n +0001150298 00000 n +0002225635 00000 n +0000041655 00000 n +0000041744 00000 n +0001150423 00000 n +0002225536 00000 n +0000041801 00000 n +0000041897 00000 n +0001155107 00000 n +0002225437 00000 n +0000041954 00000 n +0000042012 00000 n +0001160572 00000 n +0002225338 00000 n +0000042069 00000 n +0000042128 00000 n +0001164827 00000 n +0002225254 00000 n +0000042185 00000 n +0000042245 00000 n +0001164953 00000 n +0002225114 00000 n +0000042296 00000 n +0000042357 00000 n +0001165079 00000 n +0002225030 00000 n +0000042413 00000 n +0000042483 00000 n +0001165204 00000 n +0002224931 00000 n +0000042539 00000 n +0000042597 00000 n +0001169336 00000 n +0002224847 00000 n +0000042653 00000 n +0000042711 00000 n +0001169461 00000 n +0002224707 00000 n +0000042762 00000 n +0000042852 00000 n +0001169587 00000 n +0002224623 00000 n +0000042908 00000 n +0000042985 00000 n +0001169713 00000 n +0002224539 00000 n +0000043041 00000 n +0000043118 00000 n +0001174206 00000 n +0002224399 00000 n +0000043169 00000 n +0000043289 00000 n +0001174332 00000 n +0002224315 00000 n +0000043345 00000 n +0000043405 00000 n +0001174458 00000 n +0002224231 00000 n +0000043461 00000 n +0000043524 00000 n +0001178616 00000 n +0002224091 00000 n +0000043575 00000 n +0000043649 00000 n +0001178742 00000 n +0002224007 00000 n +0000043705 00000 n +0000043793 00000 n +0001178868 00000 n +0002223908 00000 n +0000043849 00000 n +0000043913 00000 n +0001178993 00000 n +0002223809 00000 n +0000043969 00000 n +0000044021 00000 n +0001179118 00000 n +0002223725 00000 n +0000044077 00000 n +0000044169 00000 n +0001182826 00000 n +0002223584 00000 n +0000044221 00000 n +0000044283 00000 n +0001182952 00000 n +0002223500 00000 n +0000044340 00000 n +0000044400 00000 n +0001183078 00000 n +0002223401 00000 n +0000044457 00000 n +0000044522 00000 n +0001185673 00000 n +0002223302 00000 n +0000044579 00000 n +0000044659 00000 n +0001188333 00000 n +0002223203 00000 n +0000044716 00000 n +0000044781 00000 n +0001191935 00000 n +0002223104 00000 n +0000044838 00000 n +0000044899 00000 n +0001192061 00000 n +0002223005 00000 n +0000044956 00000 n +0000045045 00000 n +0001194195 00000 n +0002222906 00000 n +0000045102 00000 n +0000045155 00000 n +0001198672 00000 n +0002222807 00000 n +0000045212 00000 n +0000045354 00000 n +0001202945 00000 n +0002222708 00000 n +0000045411 00000 n +0000045471 00000 n +0001205417 00000 n +0002222609 00000 n +0000045529 00000 n +0000045595 00000 n +0001208519 00000 n +0002222510 00000 n +0000045653 00000 n +0000045707 00000 n +0001212098 00000 n +0002222411 00000 n +0000045765 00000 n +0000045847 00000 n +0001212413 00000 n +0002222312 00000 n +0000045905 00000 n +0000045962 00000 n +0001212538 00000 n +0002222213 00000 n +0000046020 00000 n +0000046070 00000 n +0001216817 00000 n +0002222114 00000 n +0000046128 00000 n +0000046202 00000 n +0001216943 00000 n +0002222030 00000 n +0000046260 00000 n +0000046348 00000 n +0001220865 00000 n +0002221890 00000 n +0000046400 00000 n +0000046490 00000 n +0001221242 00000 n +0002221806 00000 n +0000046547 00000 n +0000046609 00000 n +0001224976 00000 n +0002221707 00000 n +0000046666 00000 n +0000046731 00000 n +0001225102 00000 n +0002221608 00000 n +0000046788 00000 n +0000046863 00000 n +0001228595 00000 n +0002221509 00000 n +0000046920 00000 n +0000047004 00000 n +0001231658 00000 n +0002221368 00000 n +0000047061 00000 n +0000047147 00000 n +0001231784 00000 n +0002221284 00000 n +0000047209 00000 n +0000047279 00000 n +0001231909 00000 n +0002221185 00000 n +0000047341 00000 n +0000047441 00000 n +0001232035 00000 n +0002221086 00000 n +0000047503 00000 n +0000047604 00000 n +0001234589 00000 n +0002220987 00000 n +0000047666 00000 n +0000047764 00000 n +0001234715 00000 n +0002220888 00000 n +0000047826 00000 n +0000047906 00000 n +0001237180 00000 n +0002220789 00000 n +0000047968 00000 n +0000048063 00000 n +0001237306 00000 n +0002220690 00000 n +0000048125 00000 n +0000048207 00000 n +0001237432 00000 n +0002220591 00000 n +0000048269 00000 n +0000048367 00000 n +0001239512 00000 n +0002220492 00000 n +0000048429 00000 n +0000048540 00000 n +0001239638 00000 n +0002220393 00000 n +0000048603 00000 n +0000048707 00000 n +0001242586 00000 n +0002220294 00000 n +0000048770 00000 n +0000048874 00000 n +0001242712 00000 n +0002220195 00000 n +0000048937 00000 n +0000049035 00000 n +0001242836 00000 n +0002220096 00000 n +0000049098 00000 n +0000049177 00000 n +0001245472 00000 n +0002219997 00000 n +0000049240 00000 n +0000049324 00000 n +0001245596 00000 n +0002219913 00000 n +0000049387 00000 n +0000049485 00000 n +0001245722 00000 n +0002219829 00000 n +0000049542 00000 n +0000049596 00000 n +0001249497 00000 n +0002219689 00000 n +0000049648 00000 n +0000049699 00000 n +0001249623 00000 n +0002219605 00000 n +0000049756 00000 n +0000049807 00000 n +0001249749 00000 n +0002219506 00000 n +0000049864 00000 n +0000049906 00000 n +0001249875 00000 n +0002219407 00000 n +0000049963 00000 n +0000050010 00000 n +0001252931 00000 n +0002219323 00000 n +0000050067 00000 n +0000050111 00000 n +0001253057 00000 n +0002219183 00000 n +0000050163 00000 n +0000050231 00000 n +0001258890 00000 n +0002219058 00000 n +0000050288 00000 n +0000050352 00000 n +0001259016 00000 n +0002218974 00000 n +0000050414 00000 n +0000050467 00000 n +0001259142 00000 n +0002218875 00000 n +0000050529 00000 n +0000050599 00000 n +0001266159 00000 n +0002218776 00000 n +0000050661 00000 n +0000050715 00000 n +0001266285 00000 n +0002218677 00000 n +0000050777 00000 n +0000050854 00000 n +0001272654 00000 n +0002218578 00000 n +0000050916 00000 n +0000050989 00000 n +0001272780 00000 n +0002218479 00000 n +0000051051 00000 n +0000051108 00000 n +0001278844 00000 n +0002218380 00000 n +0000051170 00000 n +0000051278 00000 n +0001278970 00000 n +0002218296 00000 n +0000051340 00000 n +0000051403 00000 n +0001279095 00000 n +0002218212 00000 n +0000051460 00000 n +0000051544 00000 n +0001294412 00000 n +0002218072 00000 n +0000051596 00000 n +0000051648 00000 n +0001298537 00000 n +0002217988 00000 n +0000051705 00000 n +0000051751 00000 n +0001298663 00000 n +0002217889 00000 n +0000051808 00000 n +0000051869 00000 n +0001298789 00000 n +0002217790 00000 n +0000051926 00000 n +0000052008 00000 n +0001298915 00000 n +0002217691 00000 n +0000052065 00000 n +0000052121 00000 n +0001302558 00000 n +0002217592 00000 n +0000052178 00000 n +0000052228 00000 n +0001302683 00000 n +0002217493 00000 n +0000052285 00000 n +0000052333 00000 n +0001306044 00000 n +0002217409 00000 n +0000052390 00000 n +0000052441 00000 n +0001306170 00000 n +0002217310 00000 n +0000052493 00000 n +0000052539 00000 n +0001310387 00000 n +0002217170 00000 n +0000052591 00000 n +0000052667 00000 n +0001310513 00000 n +0002217086 00000 n +0000052724 00000 n +0000052790 00000 n +0001310639 00000 n +0002216987 00000 n +0000052847 00000 n +0000052890 00000 n +0001313134 00000 n +0002216903 00000 n +0000052947 00000 n +0000052996 00000 n +0001313260 00000 n +0002216804 00000 n +0000053048 00000 n +0000053113 00000 n +0001313385 00000 n +0002216664 00000 n +0000053165 00000 n +0000053215 00000 n +0001313511 00000 n +0002216580 00000 n +0000053272 00000 n +0000053328 00000 n +0001313636 00000 n +0002216481 00000 n +0000053385 00000 n +0000053433 00000 n +0001313762 00000 n +0002216397 00000 n +0000053490 00000 n +0000053537 00000 n +0001316919 00000 n +0002216272 00000 n +0000053589 00000 n +0000053624 00000 n +0001317045 00000 n +0002216188 00000 n +0000053681 00000 n +0000053757 00000 n +0001319700 00000 n +0002216089 00000 n +0000053814 00000 n +0000053869 00000 n +0001330365 00000 n +0002215990 00000 n +0000053926 00000 n +0000054021 00000 n +0001345543 00000 n +0002215906 00000 n +0000054078 00000 n +0000054149 00000 n +0001624258 00000 n +0002215767 00000 n +0000054198 00000 n +0000054243 00000 n +0001624384 00000 n +0002215683 00000 n +0000054294 00000 n +0000054341 00000 n +0001624510 00000 n +0002215584 00000 n 0000054392 00000 n -0000054496 00000 n -0000054600 00000 n -0000054704 00000 n -0000054808 00000 n -0000054912 00000 n -0000055016 00000 n -0000055120 00000 n -0000055224 00000 n -0000055328 00000 n -0000055432 00000 n -0000055536 00000 n -0000055640 00000 n -0000055744 00000 n -0000055848 00000 n -0000055952 00000 n -0000056056 00000 n -0000056160 00000 n -0000056264 00000 n -0000056368 00000 n -0000056472 00000 n -0000056576 00000 n -0000056680 00000 n -0000056784 00000 n -0000056888 00000 n -0000057217 00000 n -0000057320 00000 n -0000057424 00000 n -0000057528 00000 n -0000057632 00000 n -0000057736 00000 n -0000057840 00000 n -0000057944 00000 n -0000058048 00000 n +0000054428 00000 n +0001624635 00000 n +0002215444 00000 n +0000054479 00000 n +0000054521 00000 n +0001624761 00000 n +0002215360 00000 n +0000054577 00000 n +0000054610 00000 n +0001624887 00000 n +0002215261 00000 n +0000054666 00000 n +0000054707 00000 n +0001628758 00000 n +0002215162 00000 n +0000054763 00000 n +0000054804 00000 n +0001628884 00000 n +0002215063 00000 n +0000054860 00000 n +0000054895 00000 n +0001629010 00000 n +0002214979 00000 n +0000054951 00000 n +0000054987 00000 n +0001629136 00000 n +0002214839 00000 n +0000055038 00000 n +0000055095 00000 n +0001632090 00000 n +0002214755 00000 n +0000055151 00000 n +0000055189 00000 n +0001632216 00000 n +0002214671 00000 n +0000055245 00000 n +0000055278 00000 n +0001632341 00000 n +0002214587 00000 n +0000055329 00000 n +0000055368 00000 n +0001635738 00000 n +0002214448 00000 n +0000055417 00000 n +0000055479 00000 n +0001635862 00000 n +0002214364 00000 n +0000055530 00000 n +0000055577 00000 n +0001635986 00000 n +0002214265 00000 n +0000055628 00000 n +0000055666 00000 n +0001636112 00000 n +0002214125 00000 n +0000055717 00000 n +0000055764 00000 n +0001640086 00000 n +0002214056 00000 n +0000055820 00000 n +0000055859 00000 n +0001640212 00000 n +0002213916 00000 n +0000055910 00000 n +0000055953 00000 n +0001640338 00000 n +0002213832 00000 n +0000056009 00000 n +0000056069 00000 n +0001644507 00000 n +0002213733 00000 n +0000056125 00000 n +0000056188 00000 n +0001644633 00000 n +0002213634 00000 n +0000056244 00000 n +0000056291 00000 n +0001644759 00000 n +0002213535 00000 n +0000056347 00000 n +0000056407 00000 n +0001649067 00000 n +0002213436 00000 n +0000056463 00000 n +0000056519 00000 n +0001649193 00000 n +0002213352 00000 n +0000056575 00000 n +0000056617 00000 n +0001649319 00000 n +0002213212 00000 n +0000056668 00000 n +0000056724 00000 n +0001649445 00000 n +0002213128 00000 n +0000056780 00000 n +0000056820 00000 n +0001653929 00000 n +0002213029 00000 n +0000056876 00000 n +0000056916 00000 n +0001654055 00000 n +0002212904 00000 n +0000056972 00000 n +0000057018 00000 n +0001654179 00000 n +0002212820 00000 n +0000057079 00000 n +0000057136 00000 n +0001657001 00000 n +0002212721 00000 n +0000057197 00000 n +0000057297 00000 n +0001657127 00000 n +0002212622 00000 n +0000057358 00000 n +0000057406 00000 n +0001661289 00000 n +0002212523 00000 n +0000057467 00000 n +0000057515 00000 n +0001661415 00000 n +0002212424 00000 n +0000057576 00000 n +0000057645 00000 n +0001661540 00000 n +0002212325 00000 n +0000057706 00000 n +0000057777 00000 n +0001664347 00000 n +0002212226 00000 n +0000057838 00000 n +0000057898 00000 n +0001671067 00000 n +0002212142 00000 n +0000057959 00000 n +0000058014 00000 n +0001677890 00000 n +0002212043 00000 n +0000058065 00000 n +0000058101 00000 n +0001678015 00000 n +0002211959 00000 n 0000058152 00000 n -0000058256 00000 n -0000058360 00000 n -0000058463 00000 n -0000058567 00000 n -0000058671 00000 n -0000058775 00000 n -0000058879 00000 n -0000058983 00000 n -0000059087 00000 n -0000059190 00000 n -0000059294 00000 n -0000059398 00000 n -0000059502 00000 n -0000059606 00000 n -0000059710 00000 n -0000059814 00000 n -0000059918 00000 n -0000060022 00000 n -0000060126 00000 n -0000060230 00000 n -0000060334 00000 n -0000060438 00000 n -0000060542 00000 n -0000060646 00000 n -0000060750 00000 n -0000060854 00000 n -0000060958 00000 n -0000061062 00000 n -0000061166 00000 n -0000061270 00000 n -0000061374 00000 n -0000061478 00000 n -0000061581 00000 n -0000061683 00000 n -0000061785 00000 n -0000062154 00000 n -0000062258 00000 n -0000062283 00000 n -0000062332 00000 n -0000062419 00000 n -0000062444 00000 n -0000062500 00000 n -0000062587 00000 n -0000062656 00000 n -0000062743 00000 n -0000062794 00000 n -0000062881 00000 n -0000062966 00000 n -0000063053 00000 n -0000063109 00000 n -0000063196 00000 n -0000063246 00000 n -0000063333 00000 n -0000063385 00000 n -0000063471 00000 n -0000063544 00000 n -0000063600 00000 n -0000063687 00000 n -0000063735 00000 n -0000063821 00000 n -0000063869 00000 n -0000063956 00000 n -0000063997 00000 n -0000064038 00000 n -0000064125 00000 n -0000064169 00000 n -0000064256 00000 n -0000064301 00000 n -0000064388 00000 n -0000064432 00000 n -0000064519 00000 n -0000064563 00000 n -0000064650 00000 n -0000064692 00000 n -0000064779 00000 n -0000064827 00000 n -0000064914 00000 n -0000064987 00000 n -0000065035 00000 n -0000065120 00000 n -0000065145 00000 n -0000065198 00000 n -0000065282 00000 n -0000065307 00000 n -0000065410 00000 n -0000065514 00000 n -0000065618 00000 n -0000065722 00000 n -0000065826 00000 n -0000065929 00000 n -0000066032 00000 n +0000058191 00000 n +0001682123 00000 n +0002211820 00000 n +0000058240 00000 n +0000058292 00000 n +0001682249 00000 n +0002211736 00000 n +0000058343 00000 n +0000058390 00000 n +0001682375 00000 n +0002211637 00000 n +0000058441 00000 n +0000058495 00000 n +0001682500 00000 n +0002211497 00000 n +0000058546 00000 n +0000058597 00000 n +0001682626 00000 n +0002211428 00000 n +0000058653 00000 n +0000058718 00000 n +0001690622 00000 n +0002211288 00000 n +0000058769 00000 n +0000058821 00000 n +0001694859 00000 n +0002211219 00000 n +0000058877 00000 n +0000058946 00000 n +0001694985 00000 n +0002211135 00000 n +0000058997 00000 n +0000059036 00000 n +0001698849 00000 n +0002210996 00000 n +0000059085 00000 n +0000059136 00000 n +0001698975 00000 n +0002210912 00000 n +0000059187 00000 n +0000059234 00000 n +0001699100 00000 n +0002210772 00000 n +0000059285 00000 n +0000059348 00000 n +0001704172 00000 n +0002210688 00000 n +0000059404 00000 n +0000059454 00000 n +0001704298 00000 n +0002210548 00000 n +0000059510 00000 n +0000059568 00000 n +0001708782 00000 n +0002210479 00000 n +0000059629 00000 n +0000059676 00000 n +0001708908 00000 n +0002210354 00000 n +0000059732 00000 n +0000059802 00000 n +0001709034 00000 n +0002210285 00000 n +0000059863 00000 n +0000059930 00000 n +0001713703 00000 n +0002210145 00000 n +0000059981 00000 n +0000060037 00000 n +0001717536 00000 n +0002210061 00000 n +0000060093 00000 n +0000060142 00000 n +0001717662 00000 n +0002209962 00000 n +0000060198 00000 n +0000060242 00000 n +0001717788 00000 n +0002209878 00000 n +0000060298 00000 n +0000060335 00000 n +0001717914 00000 n +0002209779 00000 n +0000060386 00000 n +0000060456 00000 n +0001720991 00000 n +0002209654 00000 n +0000060507 00000 n +0000060546 00000 n +0001721117 00000 n +0002209585 00000 n +0000060602 00000 n +0000060650 00000 n +0001724013 00000 n +0002209446 00000 n +0000060699 00000 n +0000060749 00000 n +0001724139 00000 n +0002209362 00000 n +0000060800 00000 n +0000060847 00000 n +0001724265 00000 n +0002209222 00000 n +0000060898 00000 n +0000060940 00000 n +0001724391 00000 n +0002209097 00000 n +0000060996 00000 n +0000061064 00000 n +0001724517 00000 n +0002209013 00000 n +0000061125 00000 n +0000061177 00000 n +0001727937 00000 n +0002208914 00000 n +0000061238 00000 n +0000061297 00000 n +0001728063 00000 n +0002208815 00000 n +0000061358 00000 n +0000061444 00000 n +0001728189 00000 n +0002208731 00000 n +0000061505 00000 n +0000061568 00000 n +0001731960 00000 n +0002208591 00000 n +0000061624 00000 n +0000061700 00000 n +0001732086 00000 n +0002208507 00000 n +0000061761 00000 n +0000061820 00000 n +0001741436 00000 n +0002208408 00000 n +0000061881 00000 n +0000061934 00000 n +0001741562 00000 n +0002208324 00000 n +0000061995 00000 n +0000062053 00000 n +0001747729 00000 n +0002208225 00000 n +0000062109 00000 n +0000062197 00000 n +0001751581 00000 n +0002208100 00000 n +0000062253 00000 n +0000062336 00000 n +0001751707 00000 n +0002208016 00000 n +0000062397 00000 n +0000062463 00000 n +0001752273 00000 n +0002207917 00000 n +0000062524 00000 n +0000062568 00000 n +0001756127 00000 n +0002207818 00000 n +0000062629 00000 n +0000062671 00000 n +0001756253 00000 n +0002207734 00000 n +0000062732 00000 n +0000062769 00000 n +0001756379 00000 n +0002207635 00000 n +0000062820 00000 n +0000062864 00000 n +0001756505 00000 n +0002207536 00000 n +0000062915 00000 n +0000062973 00000 n +0001760589 00000 n +0002207396 00000 n +0000063024 00000 n +0000063083 00000 n +0001760715 00000 n +0002207271 00000 n +0000063139 00000 n +0000063183 00000 n +0001760841 00000 n +0002207202 00000 n +0000063244 00000 n +0000063323 00000 n +0001760967 00000 n +0002207103 00000 n +0000063379 00000 n +0000063433 00000 n +0001769515 00000 n +0002207019 00000 n +0000063489 00000 n +0000063535 00000 n +0001777844 00000 n +0002206894 00000 n +0000063586 00000 n +0000063625 00000 n +0001777970 00000 n +0002206810 00000 n +0000063681 00000 n +0000063790 00000 n +0001781852 00000 n +0002206711 00000 n +0000063846 00000 n +0000063902 00000 n +0001781978 00000 n +0002206627 00000 n +0000063958 00000 n +0000064014 00000 n +0001787759 00000 n +0002206488 00000 n +0000064063 00000 n +0000064123 00000 n +0001787885 00000 n +0002206404 00000 n +0000064174 00000 n +0000064221 00000 n +0001792096 00000 n +0002206264 00000 n +0000064272 00000 n +0000064318 00000 n +0001792221 00000 n +0002206139 00000 n +0000064374 00000 n +0000064426 00000 n +0001796542 00000 n +0002206070 00000 n +0000064487 00000 n +0000064546 00000 n +0001808923 00000 n +0002205930 00000 n +0000064602 00000 n +0000064659 00000 n +0001809047 00000 n +0002205846 00000 n +0000064720 00000 n +0000064776 00000 n +0001809173 00000 n +0002205762 00000 n +0000064837 00000 n +0000064898 00000 n +0001816427 00000 n +0002205663 00000 n +0000064954 00000 n +0000065008 00000 n +0001816553 00000 n +0002205564 00000 n +0000065064 00000 n +0000065136 00000 n +0001820880 00000 n +0002205439 00000 n +0000065192 00000 n +0000065268 00000 n +0001824445 00000 n +0002205355 00000 n +0000065329 00000 n +0000065397 00000 n +0001824571 00000 n +0002205256 00000 n +0000065458 00000 n +0000065520 00000 n +0001826713 00000 n +0002205157 00000 n +0000065581 00000 n +0000065640 00000 n +0001826839 00000 n +0002205073 00000 n +0000065701 00000 n +0000065774 00000 n +0001826965 00000 n +0002204948 00000 n +0000065825 00000 n +0000065864 00000 n +0001827090 00000 n +0002204879 00000 n +0000065920 00000 n +0000065970 00000 n +0001831556 00000 n +0002204740 00000 n +0000066019 00000 n +0000066085 00000 n +0001831681 00000 n +0002204656 00000 n 0000066136 00000 n -0000066240 00000 n -0000066344 00000 n -0000066448 00000 n -0000066552 00000 n -0000066656 00000 n -0000066760 00000 n -0000066864 00000 n -0000066968 00000 n -0000067072 00000 n -0000067176 00000 n +0000066183 00000 n +0001831806 00000 n +0002204557 00000 n +0000066234 00000 n +0000066282 00000 n +0001835620 00000 n +0002204417 00000 n +0000066333 00000 n +0000066401 00000 n +0001835746 00000 n +0002204333 00000 n +0000066457 00000 n +0000066495 00000 n +0001838370 00000 n +0002204234 00000 n +0000066551 00000 n +0000066595 00000 n +0001838496 00000 n +0002204135 00000 n +0000066651 00000 n +0000066693 00000 n +0001838620 00000 n +0002204051 00000 n +0000066749 00000 n +0000066795 00000 n +0001842401 00000 n +0002203911 00000 n +0000066846 00000 n +0000066924 00000 n +0001846569 00000 n +0002203827 00000 n +0000066980 00000 n +0000067030 00000 n +0001846694 00000 n +0002203728 00000 n +0000067086 00000 n +0000067130 00000 n +0001851987 00000 n +0002203629 00000 n +0000067186 00000 n +0000067224 00000 n +0001852112 00000 n +0002203530 00000 n 0000067280 00000 n -0000067384 00000 n -0000067488 00000 n -0000067591 00000 n -0000067695 00000 n -0000067799 00000 n -0000067903 00000 n -0000068007 00000 n -0000068111 00000 n -0000068215 00000 n -0000068319 00000 n -0000068423 00000 n -0000068527 00000 n -0000068630 00000 n -0000068734 00000 n -0000068838 00000 n -0000068942 00000 n -0000069046 00000 n -0000069150 00000 n -0000069254 00000 n -0000069358 00000 n -0000069462 00000 n -0000069566 00000 n -0000069668 00000 n -0000069770 00000 n -0000069872 00000 n -0000070241 00000 n -0000070345 00000 n -0000070370 00000 n -0000070418 00000 n -0000070505 00000 n -0000070530 00000 n -0000070578 00000 n -0000070665 00000 n -0000070710 00000 n -0000070796 00000 n -0000070839 00000 n -0000070925 00000 n -0000070966 00000 n -0000071052 00000 n -0000071101 00000 n -0000071187 00000 n -0000071233 00000 n -0000071319 00000 n -0000071364 00000 n -0000071450 00000 n -0000071502 00000 n -0000071588 00000 n -0000071638 00000 n -0000071724 00000 n -0000071770 00000 n -0000071856 00000 n -0000071899 00000 n -0000071985 00000 n -0000072029 00000 n -0000072115 00000 n -0000072158 00000 n -0000072244 00000 n -0000072289 00000 n -0000072375 00000 n -0000072413 00000 n -0000072499 00000 n -0000072541 00000 n -0000072627 00000 n -0000072670 00000 n -0000072756 00000 n -0000072794 00000 n -0000072880 00000 n -0000072922 00000 n -0000073008 00000 n -0000073052 00000 n -0000073138 00000 n -0000073185 00000 n -0000073271 00000 n -0000073319 00000 n -0000073406 00000 n -0000073599 00000 n -0000073648 00000 n -0000073734 00000 n -0000073759 00000 n -0000073806 00000 n -0000073893 00000 n -0000073918 00000 n -0000074033 00000 n -0000074120 00000 n -0000074145 00000 n -0000074227 00000 n -0000074314 00000 n -0000074399 00000 n -0000074486 00000 n -0000074541 00000 n -0000074628 00000 n -0000074684 00000 n -0000074771 00000 n -0000074820 00000 n -0000074868 00000 n -0000074955 00000 n -0000075029 00000 n -0000075116 00000 n -0000075184 00000 n -0000075271 00000 n -0000075325 00000 n -0000075412 00000 n -0000075480 00000 n -0000075567 00000 n -0000075641 00000 n -0000075728 00000 n -0000075776 00000 n -0000075863 00000 n -0000075920 00000 n -0000076007 00000 n -0000076088 00000 n -0000076143 00000 n -0000076230 00000 n -0000076311 00000 n -0000076398 00000 n -0000076431 00000 n -0000076484 00000 n -0000076571 00000 n -0000076596 00000 n -0000076644 00000 n -0000076731 00000 n -0000076773 00000 n -0000076860 00000 n -0000076903 00000 n -0000076990 00000 n -0000077040 00000 n -0000077127 00000 n -0000077175 00000 n -0000077262 00000 n -0000077319 00000 n -0000077362 00000 n -0000077449 00000 n -0000077503 00000 n -0000077590 00000 n -0000077635 00000 n -0000077722 00000 n -0000077763 00000 n -0000077820 00000 n -0000077907 00000 n -0000078003 00000 n -0000078089 00000 n -0000078122 00000 n -0000078225 00000 n -0000078329 00000 n -0000078433 00000 n -0000078537 00000 n -0000078641 00000 n -0000078745 00000 n +0000067318 00000 n +0001852237 00000 n +0002203446 00000 n +0000067374 00000 n +0000067413 00000 n +0001855462 00000 n +0002203321 00000 n +0000067464 00000 n +0000067503 00000 n +0001855588 00000 n +0002203237 00000 n +0000067559 00000 n +0000067615 00000 n +0001855714 00000 n +0002203138 00000 n +0000067671 00000 n +0000067728 00000 n +0001855840 00000 n +0002203054 00000 n +0000067784 00000 n +0000067844 00000 n +0001861048 00000 n +0002202915 00000 n +0000067893 00000 n +0000067933 00000 n +0001861174 00000 n +0002202831 00000 n +0000067984 00000 n +0000068031 00000 n +0001861300 00000 n +0002202732 00000 n +0000068082 00000 n +0000068138 00000 n +0001861426 00000 n +0002202633 00000 n +0000068189 00000 n +0000068233 00000 n +0001864810 00000 n +0002202534 00000 n +0000068284 00000 n +0000068335 00000 n +0001864936 00000 n +0002202450 00000 n +0000068386 00000 n +0000068429 00000 n +0001866352 00000 n +0002202311 00000 n +0000068478 00000 n +0000068525 00000 n +0001866478 00000 n +0002202227 00000 n +0000068576 00000 n +0000068606 00000 n +0001866604 00000 n +0002202143 00000 n +0000068657 00000 n +0000068704 00000 n +0001867496 00000 n +0002202019 00000 n +0000068753 00000 n +0000068802 00000 n +0001867622 00000 n +0002201950 00000 n +0000068853 00000 n +0000068883 00000 n +0001868346 00000 n +0002201811 00000 n +0000068928 00000 n +0000068974 00000 n +0001870658 00000 n +0002201686 00000 n +0000069023 00000 n +0000069086 00000 n +0001870784 00000 n +0002201602 00000 n +0000069137 00000 n +0000069171 00000 n +0001870910 00000 n +0002201503 00000 n +0000069222 00000 n +0000069278 00000 n +0001871036 00000 n +0002201419 00000 n +0000069329 00000 n +0000069371 00000 n +0001874304 00000 n +0002201279 00000 n +0000069420 00000 n +0000069481 00000 n +0001874430 00000 n +0002201154 00000 n +0000069532 00000 n +0000069586 00000 n +0001874556 00000 n +0002201029 00000 n +0000069642 00000 n +0000069680 00000 n +0001878673 00000 n +0002200945 00000 n +0000069741 00000 n +0000069784 00000 n +0001878799 00000 n +0002200846 00000 n +0000069845 00000 n +0000069908 00000 n +0001882971 00000 n +0002200747 00000 n +0000069969 00000 n +0000070012 00000 n +0001883097 00000 n +0002200648 00000 n +0000070073 00000 n +0000070129 00000 n +0001883223 00000 n +0002200564 00000 n +0000070190 00000 n +0000070243 00000 n +0001887044 00000 n +0002200480 00000 n +0000070299 00000 n +0000070353 00000 n +0001888366 00000 n +0002200355 00000 n +0000070404 00000 n +0000070447 00000 n +0001888619 00000 n +0002200271 00000 n +0000070503 00000 n +0000070551 00000 n +0001891869 00000 n +0002200187 00000 n +0000070607 00000 n +0000070663 00000 n +0001896444 00000 n +0002200062 00000 n +0000070712 00000 n +0000070776 00000 n +0001896570 00000 n +0002199951 00000 n +0000070827 00000 n +0000070874 00000 n +0001896695 00000 n +0002199867 00000 n +0000070930 00000 n +0000070979 00000 n +0001900195 00000 n +0002199768 00000 n +0000071035 00000 n +0000071088 00000 n +0001904570 00000 n +0002199669 00000 n +0000071144 00000 n +0000071190 00000 n +0001904696 00000 n +0002199570 00000 n +0000071246 00000 n +0000071289 00000 n +0001904822 00000 n +0002199471 00000 n +0000071345 00000 n +0000071387 00000 n +0001908794 00000 n +0002199372 00000 n +0000071443 00000 n +0000071488 00000 n +0001908920 00000 n +0002199273 00000 n +0000071544 00000 n +0000071587 00000 n +0001909046 00000 n +0002199174 00000 n +0000071643 00000 n +0000071686 00000 n +0001909172 00000 n +0002199075 00000 n +0000071742 00000 n +0000071783 00000 n +0001909298 00000 n +0002198991 00000 n +0000071840 00000 n +0000071893 00000 n +0001910053 00000 n +0002198851 00000 n +0000071938 00000 n +0000071976 00000 n +0001912948 00000 n +0002198726 00000 n +0000072025 00000 n +0000072068 00000 n +0001913074 00000 n +0002198642 00000 n +0000072119 00000 n +0000072157 00000 n +0001913200 00000 n +0002198543 00000 n +0000072208 00000 n +0000072245 00000 n +0001917206 00000 n +0002198444 00000 n +0000072296 00000 n +0000072331 00000 n +0001931139 00000 n +0002198360 00000 n +0000072382 00000 n +0000072430 00000 n +0001934966 00000 n +0002198220 00000 n +0000072479 00000 n +0000072539 00000 n +0001935092 00000 n +0002198136 00000 n +0000072590 00000 n +0000072633 00000 n +0001935218 00000 n +0002198037 00000 n +0000072684 00000 n +0000072779 00000 n +0001940563 00000 n +0002197938 00000 n +0000072830 00000 n +0000072868 00000 n +0001940689 00000 n +0002197839 00000 n +0000072919 00000 n +0000072980 00000 n +0001944140 00000 n +0002197755 00000 n +0000073031 00000 n +0000073088 00000 n +0001948129 00000 n +0002197630 00000 n +0000073137 00000 n +0000073175 00000 n +0001948255 00000 n +0002197546 00000 n +0000073226 00000 n +0000073264 00000 n +0001948381 00000 n +0002197447 00000 n +0000073315 00000 n +0000073353 00000 n +0001948507 00000 n +0002197348 00000 n +0000073404 00000 n +0000073442 00000 n +0001952379 00000 n +0002197249 00000 n +0000073493 00000 n +0000073534 00000 n +0001952504 00000 n +0002197150 00000 n +0000073585 00000 n +0000073641 00000 n +0001952630 00000 n +0002197066 00000 n +0000073692 00000 n +0000073725 00000 n +0001953374 00000 n +0002196941 00000 n +0000073770 00000 n +0000073804 00000 n +0001958000 00000 n +0002196816 00000 n +0000073853 00000 n +0000073897 00000 n +0001958126 00000 n +0002196691 00000 n +0000073948 00000 n +0000074006 00000 n +0001958252 00000 n +0002196607 00000 n +0000074062 00000 n +0000074102 00000 n +0001958378 00000 n +0002196482 00000 n +0000074158 00000 n +0000074209 00000 n +0001958504 00000 n +0002196398 00000 n +0000074270 00000 n +0000074317 00000 n +0001958630 00000 n +0002196314 00000 n +0000074378 00000 n +0000074422 00000 n +0001963320 00000 n +0002196215 00000 n +0000074473 00000 n +0000074544 00000 n +0001963446 00000 n +0002196116 00000 n +0000074595 00000 n +0000074652 00000 n +0001963572 00000 n +0002195976 00000 n +0000074703 00000 n +0000074750 00000 n +0001966393 00000 n +0002195866 00000 n +0000074806 00000 n +0000074879 00000 n +0001966519 00000 n +0002195782 00000 n +0000074940 00000 n +0000075013 00000 n +0001966645 00000 n +0002195698 00000 n +0000075074 00000 n +0000075147 00000 n +0001969723 00000 n +0002195558 00000 n +0000075198 00000 n +0000075250 00000 n +0001969849 00000 n +0002195474 00000 n +0000075306 00000 n +0000075358 00000 n +0001972466 00000 n +0002195390 00000 n +0000075414 00000 n +0000075478 00000 n +0001972591 00000 n +0002195306 00000 n +0000075529 00000 n +0000075568 00000 n +0001976242 00000 n +0002195166 00000 n +0000075617 00000 n +0000075652 00000 n +0001976368 00000 n +0002195082 00000 n +0000075703 00000 n +0000075733 00000 n +0001976494 00000 n +0002194983 00000 n +0000075784 00000 n +0000075818 00000 n +0001976620 00000 n +0002194884 00000 n +0000075869 00000 n +0000075899 00000 n +0001978274 00000 n +0002194785 00000 n +0000075950 00000 n +0000076001 00000 n +0001980859 00000 n +0002194645 00000 n +0000076052 00000 n +0000076081 00000 n +0001980985 00000 n +0002194576 00000 n +0000076137 00000 n +0000076186 00000 n +0001981111 00000 n +0002194451 00000 n +0000076237 00000 n +0000076270 00000 n +0001981236 00000 n +0002194367 00000 n +0000076326 00000 n +0000076374 00000 n +0001981362 00000 n +0002194283 00000 n +0000076430 00000 n +0000076478 00000 n +0001986238 00000 n +0002194143 00000 n +0000076527 00000 n +0000076579 00000 n +0001986364 00000 n +0002194059 00000 n +0000076630 00000 n +0000076674 00000 n +0001986490 00000 n +0002193919 00000 n +0000076725 00000 n +0000076761 00000 n +0001986616 00000 n +0002193835 00000 n +0000076817 00000 n +0000076920 00000 n +0001991186 00000 n +0002193736 00000 n +0000076976 00000 n +0000077084 00000 n +0001991312 00000 n +0002193652 00000 n +0000077140 00000 n +0000077230 00000 n +0001991438 00000 n +0002193512 00000 n +0000077281 00000 n +0000077329 00000 n +0001991564 00000 n +0002193428 00000 n +0000077385 00000 n +0000077451 00000 n +0001991690 00000 n +0002193329 00000 n +0000077507 00000 n +0000077574 00000 n +0001995742 00000 n +0002193230 00000 n +0000077630 00000 n +0000077689 00000 n +0001995868 00000 n +0002193131 00000 n +0000077745 00000 n +0000077799 00000 n +0001995994 00000 n +0002193032 00000 n +0000077855 00000 n +0000077913 00000 n +0001996119 00000 n +0002192948 00000 n +0000077969 00000 n +0000078014 00000 n +0001996245 00000 n +0002192808 00000 n +0000078065 00000 n +0000078106 00000 n +0002000052 00000 n +0002192739 00000 n +0000078162 00000 n +0000078207 00000 n +0002000178 00000 n +0002192640 00000 n +0000078258 00000 n +0000078311 00000 n +0002000303 00000 n +0002192556 00000 n +0000078362 00000 n +0000078402 00000 n +0002003814 00000 n +0002192415 00000 n +0000078451 00000 n +0000078499 00000 n +0002003940 00000 n +0002192331 00000 n +0000078550 00000 n +0000078587 00000 n +0002004066 00000 n +0002192232 00000 n +0000078638 00000 n +0000078678 00000 n +0002004192 00000 n +0002192133 00000 n +0000078729 00000 n +0000078764 00000 n +0002007479 00000 n +0002192034 00000 n +0000078815 00000 n 0000078849 00000 n -0000078953 00000 n -0000079057 00000 n -0000079161 00000 n -0000079265 00000 n -0000079369 00000 n -0000079473 00000 n -0000079577 00000 n -0000079681 00000 n -0000079785 00000 n -0000079889 00000 n -0000079993 00000 n -0000080097 00000 n -0000080200 00000 n -0000080304 00000 n -0000080408 00000 n -0000080512 00000 n -0000080616 00000 n -0000080720 00000 n -0000080824 00000 n -0000080928 00000 n -0000081032 00000 n -0000081136 00000 n -0000081239 00000 n -0000081343 00000 n -0000081447 00000 n -0000081551 00000 n -0000081654 00000 n -0000081758 00000 n -0000081862 00000 n -0000081965 00000 n -0000082069 00000 n -0000082173 00000 n -0000082277 00000 n -0000082381 00000 n -0000082484 00000 n -0000082586 00000 n -0000082688 00000 n -0000083057 00000 n -0000083161 00000 n -0000083265 00000 n -0000083369 00000 n -0000083473 00000 n -0000083577 00000 n -0000083681 00000 n -0000083785 00000 n -0000083889 00000 n -0000083993 00000 n -0000084097 00000 n -0000084201 00000 n -0000084305 00000 n -0000084409 00000 n -0000084513 00000 n -0000084617 00000 n -0000084720 00000 n -0000084824 00000 n -0000084928 00000 n -0000085032 00000 n -0000085136 00000 n -0000085240 00000 n -0000085344 00000 n -0000085448 00000 n -0000085552 00000 n -0000085655 00000 n -0000085759 00000 n -0000085863 00000 n -0000085967 00000 n -0000086071 00000 n -0000086175 00000 n -0000086279 00000 n -0000086383 00000 n -0000086487 00000 n -0000086591 00000 n -0000086695 00000 n -0000086799 00000 n -0000086903 00000 n -0000087007 00000 n -0000087111 00000 n -0000087215 00000 n -0000087319 00000 n -0000087423 00000 n -0000087526 00000 n -0000087630 00000 n -0000087734 00000 n -0000087838 00000 n -0000087942 00000 n -0000088046 00000 n -0000088149 00000 n -0000088251 00000 n -0000088353 00000 n -0000088778 00000 n -0000088882 00000 n -0000088986 00000 n -0000089090 00000 n -0000089194 00000 n -0000089297 00000 n -0000089401 00000 n -0000089505 00000 n -0000089609 00000 n -0000089713 00000 n -0000089817 00000 n -0000089921 00000 n -0000090025 00000 n -0000090129 00000 n -0000090232 00000 n -0000090335 00000 n -0000090439 00000 n -0000090543 00000 n -0000090647 00000 n -0000090751 00000 n -0000090855 00000 n -0000090959 00000 n -0000091063 00000 n -0000091167 00000 n -0000091271 00000 n -0000091375 00000 n -0000091478 00000 n -0000091582 00000 n -0000091686 00000 n -0000091790 00000 n -0000091894 00000 n -0000091998 00000 n -0000092102 00000 n -0000092206 00000 n -0000092309 00000 n -0000092413 00000 n -0000092517 00000 n -0000092621 00000 n -0000092725 00000 n -0000092829 00000 n -0000092933 00000 n -0000093036 00000 n -0000093140 00000 n -0000093244 00000 n -0000093605 00000 n -0000093653 00000 n -0000093740 00000 n -0000093787 00000 n -0000093873 00000 n -0000093920 00000 n -0000094006 00000 n -0000094047 00000 n -0000094092 00000 n -0000094179 00000 n -0000094224 00000 n -0000094310 00000 n -0000094343 00000 n -0000094389 00000 n -0000094474 00000 n -0000094520 00000 n -0000094603 00000 n -0000094636 00000 n -0000094680 00000 n -0000094767 00000 n +0002007605 00000 n +0002191935 00000 n +0000078900 00000 n +0000078935 00000 n +0002007730 00000 n +0002191836 00000 n +0000078986 00000 n +0000079020 00000 n +0002007856 00000 n +0002191737 00000 n +0000079071 00000 n +0000079106 00000 n +0002007982 00000 n +0002191638 00000 n +0000079157 00000 n +0000079194 00000 n +0002011645 00000 n +0002191539 00000 n +0000079245 00000 n +0000079275 00000 n +0002011771 00000 n +0002191440 00000 n +0000079327 00000 n +0000079367 00000 n +0002011897 00000 n +0002191341 00000 n +0000079419 00000 n +0000079491 00000 n +0002012022 00000 n +0002191257 00000 n +0000079543 00000 n +0000079587 00000 n +0002012938 00000 n +0002191117 00000 n +0000079636 00000 n +0000079692 00000 n +0002013064 00000 n +0002191048 00000 n +0000079743 00000 n +0000079773 00000 n +0002021841 00000 n +0002190923 00000 n +0000079822 00000 n +0000079863 00000 n +0002021967 00000 n +0002190839 00000 n +0000079914 00000 n +0000079948 00000 n +0002022093 00000 n +0002190740 00000 n +0000079999 00000 n +0000080055 00000 n +0002022219 00000 n +0002190656 00000 n +0000080106 00000 n +0000080137 00000 n +0000080507 00000 n +0000080756 00000 n +0000080191 00000 n +0000080630 00000 n +0000080693 00000 n +0002179962 00000 n +0002165510 00000 n +0002179794 00000 n +0002165102 00000 n +0002161718 00000 n +0002164937 00000 n +0002180910 00000 n +0000083297 00000 n +0000082383 00000 n +0000080844 00000 n +0000083234 00000 n +0002160673 00000 n +0002141858 00000 n +0002160508 00000 n +0000082554 00000 n +0002140836 00000 n +0002124043 00000 n +0002140670 00000 n +0000082723 00000 n +0000082895 00000 n +0000083063 00000 n +0000096358 00000 n +0000087438 00000 n +0000083385 00000 n +0000096295 00000 n +0002122082 00000 n +0002106242 00000 n +0002121916 00000 n +0000088023 00000 n +0000088207 00000 n +0002105783 00000 n +0002103841 00000 n +0002105617 00000 n +0002101939 00000 n +0002099925 00000 n +0002101774 00000 n +0000088357 00000 n +0000088529 00000 n +0000088679 00000 n +0000088847 00000 n +0000089018 00000 n +0000089187 00000 n +0000089340 00000 n +0000089509 00000 n +0000089661 00000 n +0000089829 00000 n +0000090001 00000 n +0000090170 00000 n +0000090323 00000 n +0000090492 00000 n +0000090663 00000 n +0000090836 00000 n +0000090989 00000 n +0000091157 00000 n +0000091336 00000 n +0000091493 00000 n +0000091662 00000 n +0000091830 00000 n +0000092001 00000 n +0000092168 00000 n +0000092340 00000 n +0000092500 00000 n +0000092669 00000 n +0000092825 00000 n +0000092994 00000 n +0000093153 00000 n +0000093322 00000 n +0000093472 00000 n +0000093644 00000 n +0000093815 00000 n +0000093984 00000 n +0000094152 00000 n +0000094323 00000 n +0000094479 00000 n +0000094649 00000 n 0000094818 00000 n -0000094905 00000 n -0000094954 00000 n -0000095041 00000 n -0000095089 00000 n -0000095175 00000 n -0000095224 00000 n -0000095279 00000 n -0000095365 00000 n -0000095390 00000 n -0000095443 00000 n -0000095530 00000 n -0000095580 00000 n -0000095667 00000 n -0000095700 00000 n -0000095819 00000 n -0000095905 00000 n -0000095948 00000 n -0000096035 00000 n -0000096078 00000 n -0000096165 00000 n -0000096206 00000 n -0000096269 00000 n -0000096356 00000 n -0000096414 00000 n -0000096501 00000 n -0000096595 00000 n -0000096681 00000 n -0000096722 00000 n -0000096765 00000 n -0000096851 00000 n -0000096899 00000 n -0000096986 00000 n -0000097027 00000 n -0000097114 00000 n -0000097158 00000 n -0000097245 00000 n -0000097289 00000 n -0000097375 00000 n -0000097432 00000 n -0000097478 00000 n -0000097565 00000 n -0000097590 00000 n -0000097639 00000 n -0000097726 00000 n -0000097780 00000 n -0000097867 00000 n -0000097918 00000 n -0000098005 00000 n -0000098059 00000 n -0000098146 00000 n -0000098196 00000 n -0000098281 00000 n -0000098338 00000 n -0000098388 00000 n -0000098475 00000 n -0000098539 00000 n -0000098626 00000 n -0000098659 00000 n -0000098736 00000 n -0000098822 00000 n -0000098912 00000 n -0000098998 00000 n -0000099087 00000 n -0000099173 00000 n -0000099214 00000 n -0000099285 00000 n -0000099371 00000 n -0000099503 00000 n -0000099589 00000 n -0000099663 00000 n -0000099749 00000 n -0000099846 00000 n -0000099932 00000 n -0000099981 00000 n -0000100046 00000 n -0000100133 00000 n -0000100158 00000 n -0000100223 00000 n -0000100311 00000 n -0000100338 00000 n -0000100401 00000 n -0000100490 00000 n -0000100517 00000 n -0000100567 00000 n -0000100656 00000 n -0000100683 00000 n -0000100732 00000 n -0000100821 00000 n -0000100872 00000 n -0000100958 00000 n -0000101003 00000 n -0000101089 00000 n -0000101134 00000 n -0000101179 00000 n -0000101267 00000 n -0000101318 00000 n -0000101406 00000 n -0000101457 00000 n -0000101545 00000 n -0000101595 00000 n -0000101683 00000 n -0000101731 00000 n -0000101819 00000 n -0000101882 00000 n -0000101972 00000 n -0000102060 00000 n -0000102124 00000 n -0000102212 00000 n -0000102248 00000 n -0000102310 00000 n -0000102398 00000 n -0000102425 00000 n -0000102481 00000 n -0000102570 00000 n -0000102597 00000 n -0000102701 00000 n -0000102806 00000 n -0000102911 00000 n -0000103016 00000 n -0000103121 00000 n -0000103226 00000 n -0000103331 00000 n -0000103435 00000 n -0000103540 00000 n -0000103645 00000 n -0000103750 00000 n -0000103855 00000 n -0000103960 00000 n -0000104065 00000 n -0000104170 00000 n -0000104275 00000 n -0000104380 00000 n -0000104485 00000 n -0000104590 00000 n -0000104695 00000 n -0000104800 00000 n -0000104905 00000 n -0000105009 00000 n -0000105114 00000 n -0000105219 00000 n -0000105324 00000 n -0000105429 00000 n -0000105534 00000 n -0000105639 00000 n -0000105744 00000 n -0000105849 00000 n -0000105953 00000 n -0000106058 00000 n -0000106163 00000 n -0000106268 00000 n -0000106373 00000 n -0000106478 00000 n -0000106583 00000 n -0000106687 00000 n -0000106792 00000 n -0000106897 00000 n -0000107002 00000 n -0000107107 00000 n -0000107212 00000 n -0000107316 00000 n +0000094976 00000 n +0000095145 00000 n +0000095314 00000 n +0000095464 00000 n +0000095633 00000 n +0000095803 00000 n +0000095970 00000 n +0000096141 00000 n +0000298310 00000 n +0000314537 00000 n +0000324845 00000 n +0000329304 00000 n +0000362080 00000 n +0000409699 00000 n +0000430273 00000 n +0000471795 00000 n +0000478730 00000 n +0000483057 00000 n +0000553853 00000 n +0000623699 00000 n +0000636510 00000 n +0000694440 00000 n +0000741470 00000 n +0000109925 00000 n +0000100553 00000 n +0000096502 00000 n +0000109862 00000 n +0000101165 00000 n +0000101333 00000 n +0000101502 00000 n +0000101663 00000 n +0000101832 00000 n +0000102003 00000 n +0000102152 00000 n +0000102323 00000 n +0000102475 00000 n +0000102648 00000 n +0000102804 00000 n +0000102976 00000 n +0000103122 00000 n +0000103294 00000 n +0000103463 00000 n +0000103614 00000 n +0000103791 00000 n +0000103958 00000 n +0000104134 00000 n +0000104304 00000 n +0000104473 00000 n +0000104642 00000 n +0000104810 00000 n +0000104964 00000 n +0000105133 00000 n +0000105288 00000 n +0000105457 00000 n +0000105603 00000 n +0000105772 00000 n +0000105949 00000 n +0000106114 00000 n +0000106283 00000 n +0000106434 00000 n +0000106606 00000 n +0000106781 00000 n +0000106931 00000 n +0000107100 00000 n +0000107251 00000 n 0000107419 00000 n -0000107522 00000 n -0000107963 00000 n -0000108068 00000 n -0000108173 00000 n -0000108278 00000 n -0000108383 00000 n -0000108488 00000 n -0000108593 00000 n -0000108698 00000 n -0000108779 00000 n -0000108835 00000 n -0000108923 00000 n -0000108992 00000 n -0000109080 00000 n -0000109156 00000 n -0000109245 00000 n -0000109316 00000 n -0000109404 00000 n -0000109484 00000 n -0000109573 00000 n -0000109636 00000 n -0000109719 00000 n -0000109807 00000 n -0000109883 00000 n -0000109972 00000 n -0000110046 00000 n -0000110135 00000 n -0000110214 00000 n -0000110303 00000 n -0000110357 00000 n -0000110406 00000 n -0000110495 00000 n -0000110522 00000 n -0000110571 00000 n -0000110660 00000 n -0000110687 00000 n -0000110737 00000 n -0000110826 00000 n -0000110890 00000 n -0000110979 00000 n -0000111043 00000 n -0000111132 00000 n -0000111187 00000 n -0000111276 00000 n -0000111330 00000 n -0000111399 00000 n -0000111487 00000 n -0000111543 00000 n -0000111632 00000 n -0000111668 00000 n -0000111717 00000 n -0000111806 00000 n -0000111871 00000 n -0000111960 00000 n -0000112016 00000 n -0000112105 00000 n -0000112153 00000 n -0000112242 00000 n -0000112296 00000 n -0000112351 00000 n -0000112440 00000 n -0000112495 00000 n -0000112584 00000 n -0000112620 00000 n -0000112656 00000 n -0000112692 00000 n -0000118297 00000 n -0000118342 00000 n -0000118387 00000 n -0000118432 00000 n -0000118477 00000 n -0000118522 00000 n -0000118567 00000 n -0000118612 00000 n -0000118657 00000 n -0000118702 00000 n -0000118747 00000 n -0000118792 00000 n -0000118837 00000 n -0000118882 00000 n -0000118927 00000 n -0000118972 00000 n -0000119017 00000 n -0000119062 00000 n -0000119107 00000 n -0000119152 00000 n -0000119197 00000 n -0000119242 00000 n -0000119287 00000 n -0000119332 00000 n -0000119377 00000 n -0000119422 00000 n -0000119467 00000 n -0000119512 00000 n -0000119557 00000 n -0000119602 00000 n -0000119647 00000 n -0000119692 00000 n -0000119737 00000 n -0000119782 00000 n -0000119827 00000 n -0000119872 00000 n -0000119917 00000 n -0000119962 00000 n -0000120007 00000 n -0000120052 00000 n -0000120097 00000 n -0000120142 00000 n -0000120187 00000 n -0000120232 00000 n -0000120277 00000 n -0000120322 00000 n -0000120367 00000 n -0000120412 00000 n -0000120457 00000 n -0000120502 00000 n -0000120547 00000 n -0000120592 00000 n -0000120637 00000 n -0000120682 00000 n -0000120727 00000 n -0000120772 00000 n -0000120817 00000 n -0000120862 00000 n -0000120907 00000 n -0000120952 00000 n -0000120997 00000 n -0000121042 00000 n -0000121087 00000 n -0000121132 00000 n -0000121177 00000 n -0000121222 00000 n -0000121267 00000 n -0000121312 00000 n -0000121357 00000 n -0000121402 00000 n -0000121447 00000 n -0000121492 00000 n -0000121537 00000 n -0000121582 00000 n -0000121627 00000 n -0000121672 00000 n -0000121717 00000 n -0000121762 00000 n -0000121807 00000 n -0000121852 00000 n -0000121897 00000 n -0000121942 00000 n -0000121987 00000 n -0000122032 00000 n -0000122077 00000 n -0000122122 00000 n -0000122167 00000 n -0000122212 00000 n -0000122257 00000 n -0000122302 00000 n -0000122347 00000 n -0000122392 00000 n -0000122437 00000 n -0000122482 00000 n -0000122527 00000 n -0000122572 00000 n -0000122617 00000 n -0000122662 00000 n -0000122707 00000 n -0000122752 00000 n -0000122797 00000 n -0000122842 00000 n -0000122887 00000 n -0000122932 00000 n -0000122977 00000 n -0000123022 00000 n -0000123067 00000 n -0000123112 00000 n -0000123157 00000 n -0000123202 00000 n -0000123247 00000 n -0000123292 00000 n -0000123337 00000 n -0000123382 00000 n -0000123427 00000 n -0000123472 00000 n -0000123517 00000 n -0000123562 00000 n -0000123607 00000 n -0000123652 00000 n -0000123697 00000 n -0000123742 00000 n -0000123787 00000 n -0000123832 00000 n -0000123877 00000 n -0000123922 00000 n -0000123967 00000 n -0000124012 00000 n -0000124057 00000 n -0000124102 00000 n -0000124147 00000 n -0000124192 00000 n -0000124237 00000 n -0000124282 00000 n -0000124327 00000 n -0000124372 00000 n -0000124417 00000 n -0000124462 00000 n -0000124507 00000 n -0000124552 00000 n -0000124597 00000 n -0000124642 00000 n -0000124687 00000 n -0000124732 00000 n -0000124777 00000 n -0000124822 00000 n -0000124867 00000 n -0000124912 00000 n -0000124957 00000 n -0000125002 00000 n -0000125047 00000 n -0000125092 00000 n -0000125137 00000 n -0000125182 00000 n -0000125227 00000 n -0000125272 00000 n -0000125317 00000 n -0000125362 00000 n -0000125407 00000 n -0000125452 00000 n -0000125497 00000 n -0000125542 00000 n -0000125587 00000 n -0000125632 00000 n -0000125677 00000 n -0000125722 00000 n -0000125767 00000 n -0000125812 00000 n -0000125857 00000 n -0000125902 00000 n -0000125947 00000 n -0000125992 00000 n -0000126037 00000 n -0000126082 00000 n -0000126127 00000 n -0000126172 00000 n -0000126217 00000 n -0000126262 00000 n -0000126307 00000 n -0000126352 00000 n -0000126397 00000 n -0000126442 00000 n -0000126487 00000 n -0000126532 00000 n -0000126577 00000 n -0000126622 00000 n -0000126667 00000 n -0000126712 00000 n -0000126757 00000 n -0000126802 00000 n -0000126847 00000 n -0000126892 00000 n -0000126937 00000 n -0000126982 00000 n -0000127027 00000 n -0000127072 00000 n -0000127117 00000 n -0000127162 00000 n -0000127207 00000 n -0000127252 00000 n -0000127297 00000 n -0000127342 00000 n -0000127387 00000 n -0000127432 00000 n -0000127477 00000 n -0000127522 00000 n -0000127567 00000 n -0000127612 00000 n -0000127657 00000 n -0000127702 00000 n -0000127747 00000 n -0000127792 00000 n -0000127837 00000 n -0000127882 00000 n -0000127927 00000 n -0000127972 00000 n -0000128017 00000 n -0000128062 00000 n -0000128107 00000 n -0000128152 00000 n -0000128197 00000 n -0000128242 00000 n -0000128287 00000 n -0000128332 00000 n -0000128377 00000 n -0000128422 00000 n -0000128467 00000 n -0000128512 00000 n -0000128557 00000 n -0000128602 00000 n -0000128647 00000 n -0000128692 00000 n -0000128737 00000 n -0000128782 00000 n -0000128827 00000 n -0000128872 00000 n -0000128917 00000 n -0000128962 00000 n -0000129007 00000 n -0000129052 00000 n -0000129097 00000 n -0000129142 00000 n -0000129187 00000 n -0000129232 00000 n -0000129277 00000 n -0000129322 00000 n -0000129367 00000 n -0000129412 00000 n -0000129457 00000 n -0000129502 00000 n -0000129547 00000 n -0000129592 00000 n -0000129637 00000 n -0000129682 00000 n -0000129727 00000 n -0000129772 00000 n -0000129817 00000 n -0000129862 00000 n -0000129907 00000 n -0000129952 00000 n -0000129997 00000 n -0000130042 00000 n -0000130087 00000 n -0000130132 00000 n -0000130177 00000 n -0000130222 00000 n -0000130267 00000 n -0000130312 00000 n -0000130357 00000 n -0000130402 00000 n -0000130447 00000 n -0000130492 00000 n -0000130537 00000 n -0000130582 00000 n -0000130627 00000 n -0000130672 00000 n -0000130717 00000 n -0000130762 00000 n -0000130807 00000 n -0000130852 00000 n -0000130897 00000 n -0000130942 00000 n -0000130987 00000 n -0000131032 00000 n -0000131077 00000 n -0000131122 00000 n -0000131167 00000 n -0000131212 00000 n -0000131257 00000 n -0000131302 00000 n -0000131347 00000 n -0000131392 00000 n -0000131437 00000 n -0000131482 00000 n -0000131527 00000 n -0000131572 00000 n -0000131617 00000 n -0000131662 00000 n -0000131707 00000 n -0000131752 00000 n -0000131797 00000 n -0000131842 00000 n -0000131887 00000 n -0000131932 00000 n -0000131977 00000 n -0000132022 00000 n -0000132067 00000 n -0000132112 00000 n -0000132157 00000 n -0000132202 00000 n -0000132247 00000 n -0000132292 00000 n -0000132337 00000 n -0000132382 00000 n -0000132427 00000 n -0000132472 00000 n -0000132517 00000 n -0000132562 00000 n -0000132607 00000 n -0000132652 00000 n -0000132697 00000 n -0000132742 00000 n -0000132787 00000 n -0000132832 00000 n -0000132877 00000 n -0000132922 00000 n -0000132967 00000 n -0000134609 00000 n -0000134770 00000 n -0000134939 00000 n -0000135132 00000 n -0000139029 00000 n -0000139223 00000 n -0000143650 00000 n -0000143844 00000 n -0000148198 00000 n -0000148392 00000 n -0000152436 00000 n -0000152630 00000 n -0000156208 00000 n -0000156402 00000 n -0000159997 00000 n -0000160191 00000 n -0000163343 00000 n -0000163504 00000 n -0000163738 00000 n +0000107578 00000 n +0000107750 00000 n +0000107906 00000 n +0000108075 00000 n +0000108223 00000 n +0000108392 00000 n +0000108543 00000 n +0000108707 00000 n +0000108879 00000 n +0000109031 00000 n +0000109201 00000 n +0000109372 00000 n +0000109542 00000 n +0000109692 00000 n +0000756463 00000 n +0000771394 00000 n +0000777263 00000 n +0000938522 00000 n +0001624321 00000 n +0001635801 00000 n +0001682186 00000 n +0001698912 00000 n +0001724076 00000 n +0001787822 00000 n +0001831619 00000 n +0001861111 00000 n +0001866415 00000 n +0001867559 00000 n +0001870721 00000 n +0001874367 00000 n +0001896507 00000 n +0001913011 00000 n +0001935029 00000 n +0001948192 00000 n +0000114647 00000 n +0000111667 00000 n +0000110041 00000 n +0000114584 00000 n +0000111946 00000 n +0000112099 00000 n +0000112271 00000 n +0000112426 00000 n +0000112598 00000 n +0000112754 00000 n +0000112923 00000 n +0000113095 00000 n +0000113244 00000 n +0000113420 00000 n +0000113592 00000 n +0000113760 00000 n +0000113910 00000 n +0000114079 00000 n +0000114240 00000 n +0000114412 00000 n +0001958063 00000 n +0001976305 00000 n +0001986301 00000 n +0002003877 00000 n +0002013001 00000 n +0002021904 00000 n +0000123439 00000 n +0000117560 00000 n +0000114763 00000 n +0000123313 00000 n +0000123376 00000 n +0000118001 00000 n +0000118151 00000 n +0000118304 00000 n +0000118459 00000 n +0000118613 00000 n +0000118768 00000 n +0000118923 00000 n +0000119077 00000 n +0000119231 00000 n +0000119383 00000 n +0000119538 00000 n +0000119693 00000 n +0000119853 00000 n +0000120018 00000 n +0000120178 00000 n +0000120332 00000 n +0000120487 00000 n +0000120642 00000 n +0000120796 00000 n +0000120951 00000 n +0000121111 00000 n +0000121271 00000 n +0000121424 00000 n +0000121579 00000 n +0000121729 00000 n +0000121882 00000 n +0000122037 00000 n +0000122191 00000 n +0000122345 00000 n +0000122505 00000 n +0000122670 00000 n +0000122829 00000 n +0000122992 00000 n +0000123150 00000 n +0000134856 00000 n +0000127111 00000 n +0000123527 00000 n +0000134793 00000 n +0002099317 00000 n +0002089526 00000 n +0002099151 00000 n +0000127651 00000 n +0000127811 00000 n +0000127976 00000 n +0000128136 00000 n +0000128301 00000 n +0000128456 00000 n +0000128611 00000 n +0000128771 00000 n +0000128931 00000 n +0000129090 00000 n +0000129250 00000 n +0000129402 00000 n +0000129557 00000 n +0000129712 00000 n +0000129872 00000 n +0000130032 00000 n +0000130187 00000 n +0000130342 00000 n +0000130497 00000 n +0000130657 00000 n +0000130821 00000 n +0000130986 00000 n +0000131151 00000 n +0000131310 00000 n +0000131464 00000 n +0000131624 00000 n +0000131784 00000 n +0000131944 00000 n +0000132104 00000 n +0000132263 00000 n +0000132423 00000 n +0000132576 00000 n +0000132731 00000 n +0000132886 00000 n +0000133046 00000 n +0000133211 00000 n +0000133371 00000 n +0000133531 00000 n +0000133691 00000 n +0000133845 00000 n +0000134005 00000 n +0000134160 00000 n +0000134319 00000 n +0000134477 00000 n +0000134635 00000 n +0002181035 00000 n +0000146123 00000 n +0000138242 00000 n +0000134958 00000 n +0000146060 00000 n +0000138791 00000 n +0000138944 00000 n +0000139099 00000 n +0000139254 00000 n +0000139414 00000 n +0000139574 00000 n +0000139734 00000 n +0000139893 00000 n +0000140058 00000 n +0000140223 00000 n +0000140387 00000 n +0000140542 00000 n +0000140702 00000 n +0000140862 00000 n +0000141017 00000 n +0000141177 00000 n +0000141337 00000 n +0000141497 00000 n +0000141662 00000 n +0000141821 00000 n +0000141981 00000 n +0000142141 00000 n +0000142296 00000 n +0000142455 00000 n +0000142615 00000 n +0000142768 00000 n +0000142923 00000 n +0000143078 00000 n +0000143233 00000 n +0000143393 00000 n +0000143552 00000 n +0000143706 00000 n +0000143859 00000 n +0000144013 00000 n +0000144163 00000 n +0000144317 00000 n +0000144473 00000 n +0000144628 00000 n +0000144784 00000 n +0000144945 00000 n +0000145106 00000 n +0000145267 00000 n +0000145423 00000 n +0000145584 00000 n +0000145743 00000 n +0000145902 00000 n +0000158093 00000 n +0000149727 00000 n +0000146225 00000 n +0000158030 00000 n +0000150294 00000 n +0000150455 00000 n +0000150616 00000 n +0000150777 00000 n +0000150938 00000 n +0000151094 00000 n +0000151255 00000 n +0000151416 00000 n +0000151577 00000 n +0000151732 00000 n +0000151893 00000 n +0000152054 00000 n +0000152209 00000 n +0000152370 00000 n +0000152531 00000 n +0000152692 00000 n +0000152858 00000 n +0000153014 00000 n +0000153175 00000 n +0000153335 00000 n +0000153489 00000 n +0000153644 00000 n +0000153799 00000 n +0000153960 00000 n +0000154126 00000 n +0000154292 00000 n +0000154453 00000 n +0002088589 00000 n +0002069377 00000 n +0002088423 00000 n +0000154609 00000 n +0000154770 00000 n +0000154931 00000 n +0000155086 00000 n +0000155246 00000 n +0000155407 00000 n +0000155568 00000 n +0000155728 00000 n +0000155894 00000 n +0000156060 00000 n +0000156226 00000 n +0000156392 00000 n +0000156557 00000 n +0000156722 00000 n +0000156887 00000 n +0000157050 00000 n +0000157215 00000 n +0000157381 00000 n +0000157546 00000 n +0000157704 00000 n +0000157867 00000 n +0000170191 00000 n +0000161776 00000 n +0000158209 00000 n +0000170128 00000 n +0000162352 00000 n +0000162517 00000 n +0000162682 00000 n +0000162842 00000 n +0000162997 00000 n +0000163157 00000 n +0000163317 00000 n +0000163477 00000 n +0000163631 00000 n +0000163786 00000 n 0000163941 00000 n -0000166521 00000 n -0000166696 00000 n -0000170340 00000 n -0000170515 00000 n -0000173018 00000 n -0000173193 00000 n -0000174969 00000 n -0000175130 00000 n -0000175318 00000 n -0000175521 00000 n -0000178152 00000 n -0000178327 00000 n -0000178592 00000 n -0000178795 00000 n -0000180229 00000 n -0000180446 00000 n -0000181900 00000 n -0000182097 00000 n -0000183949 00000 n -0000184109 00000 n -0000184604 00000 n -0000184774 00000 n -0000186514 00000 n -0000186702 00000 n -0000188191 00000 n -0000188370 00000 n -0000190346 00000 n -0000190525 00000 n -0000191467 00000 n -0000191696 00000 n -0000193565 00000 n -0000193762 00000 n -0000195301 00000 n -0000195498 00000 n -0000196994 00000 n -0000197217 00000 n -0000199386 00000 n -0000199589 00000 n -0000201482 00000 n -0000201696 00000 n -0000202997 00000 n -0000203229 00000 n -0000204902 00000 n -0000205115 00000 n -0000207019 00000 n -0000207227 00000 n -0000208505 00000 n -0000208744 00000 n -0000210263 00000 n -0000210451 00000 n -0000211763 00000 n -0000211951 00000 n -0000212498 00000 n -0000212659 00000 n -0000212849 00000 n -0000213052 00000 n -0000216173 00000 n -0000216348 00000 n -0000216696 00000 n -0000216885 00000 n -0000218508 00000 n -0000218696 00000 n -0000220068 00000 n -0000220238 00000 n -0000222193 00000 n -0000222353 00000 n -0000223034 00000 n -0000223247 00000 n -0000224669 00000 n -0000224883 00000 n -0000226452 00000 n -0000226650 00000 n -0000228572 00000 n -0000228837 00000 n -0000230548 00000 n -0000230761 00000 n -0000232329 00000 n -0000232536 00000 n -0000234565 00000 n -0000234797 00000 n -0000236825 00000 n -0000237038 00000 n -0000239006 00000 n -0000239218 00000 n -0000241199 00000 n -0000241453 00000 n -0000243716 00000 n -0000243946 00000 n -0000245991 00000 n -0000246222 00000 n -0000248131 00000 n -0000248342 00000 n -0000250218 00000 n -0000250387 00000 n -0000252226 00000 n -0000252448 00000 n -0000254446 00000 n -0000254697 00000 n -0000256661 00000 n -0000256830 00000 n -0000258360 00000 n -0000258554 00000 n -0000260133 00000 n -0000260313 00000 n -0000262054 00000 n -0000262243 00000 n -0000263444 00000 n -0000263623 00000 n -0000264712 00000 n -0000264909 00000 n -0000266280 00000 n -0000266459 00000 n -0000267185 00000 n -0000267417 00000 n -0000268891 00000 n -0000269094 00000 n -0000270903 00000 n -0000271087 00000 n -0000271622 00000 n -0000271783 00000 n -0000271974 00000 n -0000272186 00000 n -0000275133 00000 n -0000275308 00000 n -0000277928 00000 n -0000278103 00000 n -0000279934 00000 n -0000280132 00000 n -0000281493 00000 n -0000281691 00000 n -0000283380 00000 n -0000283568 00000 n -0000285250 00000 n -0000285429 00000 n -0000287531 00000 n -0000287710 00000 n -0000289483 00000 n -0000289662 00000 n -0000291343 00000 n -0000291532 00000 n -0000293380 00000 n -0000293593 00000 n -0000295624 00000 n -0000295837 00000 n -0000297389 00000 n -0000297578 00000 n -0000298852 00000 n -0000299059 00000 n -0000300832 00000 n -0000301030 00000 n -0000302793 00000 n -0000303006 00000 n -0000304714 00000 n -0000304917 00000 n -0000306297 00000 n -0000306486 00000 n -0000307375 00000 n -0000307563 00000 n -0000309089 00000 n -0000309292 00000 n -0000311000 00000 n -0000311203 00000 n -0000312020 00000 n -0000312233 00000 n -0000313719 00000 n -0000313899 00000 n -0000314663 00000 n -0000314927 00000 n -0000316651 00000 n -0000316897 00000 n -0000318788 00000 n -0000319011 00000 n -0000320801 00000 n -0000321024 00000 n -0000322899 00000 n -0000323078 00000 n -0000324302 00000 n -0000324534 00000 n -0000326203 00000 n -0000326382 00000 n -0000327962 00000 n -0000328141 00000 n -0000329688 00000 n -0000329867 00000 n -0000331371 00000 n -0000331550 00000 n -0000333215 00000 n -0000333385 00000 n -0000334131 00000 n -0000334329 00000 n -0000336147 00000 n -0000336380 00000 n -0000338436 00000 n -0000338625 00000 n -0000340281 00000 n -0000340451 00000 n -0000341213 00000 n -0000341383 00000 n -0000342488 00000 n -0000342658 00000 n -0000343478 00000 n -0000343648 00000 n -0000344465 00000 n -0000344635 00000 n -0000345797 00000 n -0000346020 00000 n -0000347673 00000 n -0000347899 00000 n -0000349582 00000 n -0000349827 00000 n -0000351718 00000 n -0000351887 00000 n -0000353633 00000 n -0000353818 00000 n -0000355568 00000 n -0000355824 00000 n -0000357801 00000 n -0000358000 00000 n -0000360224 00000 n -0000360435 00000 n -0000362202 00000 n -0000362403 00000 n -0000363421 00000 n -0000363610 00000 n -0000365304 00000 n -0000365483 00000 n -0000367228 00000 n -0000367416 00000 n -0000369252 00000 n -0000369447 00000 n -0000371359 00000 n -0000371591 00000 n -0000373693 00000 n -0000373906 00000 n -0000375343 00000 n -0000375557 00000 n -0000377006 00000 n -0000377213 00000 n -0000378450 00000 n -0000378629 00000 n -0000379616 00000 n -0000379804 00000 n -0000380936 00000 n -0000381124 00000 n -0000382625 00000 n -0000382813 00000 n -0000383895 00000 n -0000384084 00000 n -0000385416 00000 n -0000385586 00000 n -0000387260 00000 n -0000387439 00000 n -0000389223 00000 n -0000389402 00000 n -0000391047 00000 n -0000391216 00000 n -0000392530 00000 n -0000392718 00000 n -0000394284 00000 n -0000394472 00000 n -0000396091 00000 n -0000396279 00000 n -0000397679 00000 n -0000397849 00000 n -0000399482 00000 n -0000399652 00000 n -0000400665 00000 n -0000400862 00000 n -0000402073 00000 n -0000402277 00000 n -0000403623 00000 n -0000403809 00000 n -0000404285 00000 n -0000404473 00000 n -0000405961 00000 n -0000406131 00000 n -0000407638 00000 n -0000407808 00000 n -0000409207 00000 n -0000409377 00000 n -0000410926 00000 n -0000411095 00000 n -0000412058 00000 n -0000412279 00000 n -0000413813 00000 n -0000414034 00000 n -0000415641 00000 n -0000415863 00000 n -0000417113 00000 n -0000417292 00000 n -0000418837 00000 n -0000419016 00000 n -0000420253 00000 n -0000420457 00000 n -0000421869 00000 n -0000422064 00000 n -0000424693 00000 n -0000424869 00000 n -0000425319 00000 n -0000425498 00000 n -0000427026 00000 n -0000427214 00000 n -0000428182 00000 n -0000428352 00000 n -0000428682 00000 n -0000428878 00000 n -0000430608 00000 n -0000430822 00000 n -0000432506 00000 n -0000432701 00000 n -0000434408 00000 n -0000434621 00000 n -0000436109 00000 n -0000436304 00000 n -0000437886 00000 n -0000438109 00000 n -0000439474 00000 n -0000439671 00000 n -0000441208 00000 n -0000441396 00000 n -0000442275 00000 n -0000442479 00000 n -0000444215 00000 n -0000444403 00000 n -0000446145 00000 n -0000446324 00000 n -0000447723 00000 n -0000447902 00000 n -0000449600 00000 n -0000449779 00000 n -0000451259 00000 n -0000451438 00000 n -0000453224 00000 n -0000453428 00000 n -0000455079 00000 n -0000455138 00000 n -0000455241 00000 n -0000455406 00000 n -0000455488 00000 n -0000455596 00000 n -0000455719 00000 n -0000455831 00000 n -0000456009 00000 n -0000456130 00000 n -0000456290 00000 n -0000456408 00000 n -0000456505 00000 n -0000456657 00000 n -0000456797 00000 n -0000456975 00000 n -0000457130 00000 n -0000457232 00000 n -0000457332 00000 n -0000457541 00000 n -0000457642 00000 n -0000457785 00000 n -0000457931 00000 n -0000458047 00000 n -0000458214 00000 n -0000458326 00000 n -0000458500 00000 n -0000458603 00000 n -0000458776 00000 n -0000458897 00000 n -0000459027 00000 n -0000459153 00000 n -0000459268 00000 n -0000459376 00000 n -0000459523 00000 n -0000459628 00000 n -0000459747 00000 n -0000459876 00000 n -0000460035 00000 n -0000460169 00000 n -0000460306 00000 n -0000460438 00000 n -0000460587 00000 n -0000460719 00000 n -0000460867 00000 n -0000460968 00000 n -0000461096 00000 n -0000461214 00000 n -0000461368 00000 n -0000461499 00000 n -0000461645 00000 n -0000461746 00000 n -0000461844 00000 n -0000461968 00000 n -0000462080 00000 n -0000462257 00000 n -0000462366 00000 n -0000462491 00000 n -0000462637 00000 n -0000462739 00000 n -0000462911 00000 n -0000463110 00000 n -0000463221 00000 n -0000463336 00000 n -0000463480 00000 n -0000463688 00000 n -0000463822 00000 n -0000463976 00000 n -0000464101 00000 n -0000464232 00000 n -0000464365 00000 n -0000464496 00000 n -0000464671 00000 n -0000464806 00000 n -0000464959 00000 n -0000465104 00000 n -0000465329 00000 n -0000465440 00000 n -0000465555 00000 n -0000465748 00000 n -0000465891 00000 n -0000466007 00000 n -0000466165 00000 n -0000466322 00000 n -0000466453 00000 n -0000466574 00000 n -0000466751 00000 n -0000466885 00000 n -0000467033 00000 n -0000467151 00000 n -0000467281 00000 n -0000467451 00000 n -0000467545 00000 n -0000467672 00000 n -0000467799 00000 n -0000467895 00000 n -0000468081 00000 n -0000468207 00000 n -0000468342 00000 n -0000468475 00000 n -0000468602 00000 n -0000468714 00000 n -0000468906 00000 n -0000469004 00000 n -0000469190 00000 n -0000469294 00000 n -0000469418 00000 n -0000469540 00000 n -0000469652 00000 n -0000469848 00000 n -0000469964 00000 n -0000470088 00000 n -0000470206 00000 n -0000470324 00000 n -0000470429 00000 n -0000470618 00000 n -0000470841 00000 n -0000470980 00000 n -0000471143 00000 n -0000471280 00000 n -0000471383 00000 n -0000471589 00000 n -0000471748 00000 n -0000471896 00000 n -0000472024 00000 n -0000472205 00000 n -0000472315 00000 n -0000472430 00000 n -0000472575 00000 n -0000472739 00000 n -0000472889 00000 n -0000473107 00000 n -0000473212 00000 n -0000473344 00000 n -0000473465 00000 n -0000473672 00000 n -0000473800 00000 n -0000473885 00000 n -0000474051 00000 n -0000474155 00000 n -0000474312 00000 n -0000474423 00000 n -0000474568 00000 n -0000474710 00000 n -0000474860 00000 n -0000474977 00000 n -0000475141 00000 n -0000475252 00000 n -0000475392 00000 n -0000475519 00000 n -0000475636 00000 n -0000475775 00000 n -0000475881 00000 n -0000476015 00000 n -0000476147 00000 n -0000476292 00000 n -0000476419 00000 n -0000476551 00000 n -0000476681 00000 n -0000476806 00000 n -0000476914 00000 n -0000477085 00000 n -0000477189 00000 n -0000477324 00000 n -0000477452 00000 n -0000477626 00000 n -0000477728 00000 n -0000477878 00000 n -0000478028 00000 n -0000478153 00000 n -0000478359 00000 n -0000478459 00000 n -0000478577 00000 n -0000478742 00000 n -0000478833 00000 n -0000478994 00000 n -0000479120 00000 n -0000479263 00000 n -0000479390 00000 n -0000479530 00000 n -0000479666 00000 n -0000479774 00000 n -0000479948 00000 n -0000480054 00000 n -0000480174 00000 n -0000480286 00000 n -0000480403 00000 n -0000480505 00000 n -0000480682 00000 n -0000480794 00000 n -0000480925 00000 n -0000481049 00000 n -0000481216 00000 n -0000481333 00000 n -0000481463 00000 n -0000481603 00000 n -0000481740 00000 n -0000481876 00000 n -0000482012 00000 n -0000482149 00000 n -0000482261 00000 n -0000482432 00000 n -0000482554 00000 n -0000482714 00000 n -0000482813 00000 n -0000482928 00000 n -0000483030 00000 n -0000483191 00000 n -0000483295 00000 n -0000483394 00000 n -0000483525 00000 n -0000483700 00000 n -0000483803 00000 n -0000483923 00000 n -0000484038 00000 n -0000484152 00000 n -0000484267 00000 n -0000484381 00000 n -0000484496 00000 n -0000484614 00000 n -0000484731 00000 n -0000484837 00000 n -0000485015 00000 n -0000485118 00000 n -0000485274 00000 n -0000485382 00000 n -0000485508 00000 n -0000485628 00000 n -0000485729 00000 n -0000485836 00000 n -0000486000 00000 n -0000486104 00000 n -0000486237 00000 n -0000486369 00000 n -0000486491 00000 n -0000486620 00000 n -0000486727 00000 n -0000486893 00000 n -0000487015 00000 n -0000487125 00000 n -0000487239 00000 n -0000487400 00000 n -0000487496 00000 n -0000487610 00000 n -0000487720 00000 n -0000487851 00000 n -0000487984 00000 n -0000488085 00000 n -0000488263 00000 n -0000488373 00000 n -0000488527 00000 n -0000488696 00000 n -0000488884 00000 n -0000489065 00000 n -0000489221 00000 n -0000489387 00000 n -0000489519 00000 n -0000489666 00000 n -0000489805 00000 n -0000489939 00000 n -0000490063 00000 n -0000490184 00000 n -0000490303 00000 n -0000490473 00000 n -0000490635 00000 n -0000490741 00000 n -0000490858 00000 n -0000491009 00000 n -0000491136 00000 n -0000491292 00000 n -0000491410 00000 n -0000491540 00000 n -0000491704 00000 n -0000491808 00000 n -0000491926 00000 n -0000492044 00000 n -0000492165 00000 n -0000492301 00000 n -0000492400 00000 n -0000492555 00000 n -0000492659 00000 n -0000492776 00000 n -0000492926 00000 n -0000493026 00000 n -0000493140 00000 n -0000493254 00000 n -0000493368 00000 n -0000493482 00000 n -0000493596 00000 n -0000493710 00000 n -0000493824 00000 n -0000493938 00000 n -0000494054 00000 n -0000494156 00000 n -0000494270 00000 n +0000164100 00000 n +0000164255 00000 n +0000164415 00000 n +0000164575 00000 n +0000164730 00000 n +0000164890 00000 n +0000165050 00000 n +0000165204 00000 n +0000165358 00000 n +0000165513 00000 n +0000165673 00000 n +0000165831 00000 n +0000165990 00000 n +0000166145 00000 n +0000166305 00000 n +0000166465 00000 n +0000166625 00000 n +0000166780 00000 n +0000166940 00000 n +0000167105 00000 n +0000167269 00000 n +0000167423 00000 n +0000167583 00000 n +0000167743 00000 n +0000167902 00000 n +0000168062 00000 n +0000168227 00000 n +0000168392 00000 n +0000168552 00000 n +0000168712 00000 n +0000168872 00000 n +0000169027 00000 n +0000169187 00000 n +0000169347 00000 n +0000169500 00000 n +0000169654 00000 n +0000169807 00000 n +0000169965 00000 n +0000181766 00000 n +0000173690 00000 n +0000170307 00000 n +0000181703 00000 n +0000174248 00000 n +0000174413 00000 n +0000174578 00000 n +0000174743 00000 n +0000174908 00000 n +0000175073 00000 n +0000175238 00000 n +0000175403 00000 n +0000175568 00000 n +0000175722 00000 n +0000175882 00000 n +0000176047 00000 n +0000176211 00000 n +0000176366 00000 n +0000176526 00000 n +0000176686 00000 n +0000176841 00000 n +0000176996 00000 n +0000177156 00000 n +0000177311 00000 n +0000177465 00000 n +0000177620 00000 n +0000177775 00000 n +0000177929 00000 n +0000178088 00000 n +0000178248 00000 n +0000178408 00000 n +0000178568 00000 n +0000178728 00000 n +0000178888 00000 n +0000179043 00000 n +0000179198 00000 n +0000179357 00000 n +0000179516 00000 n +0000179670 00000 n +0000179824 00000 n +0000179979 00000 n +0000180134 00000 n +0000180294 00000 n +0000180454 00000 n +0000180609 00000 n +0000180769 00000 n +0000180929 00000 n +0000181083 00000 n +0000181243 00000 n +0000181396 00000 n +0000181550 00000 n +0000194330 00000 n +0000185872 00000 n +0000181868 00000 n +0000194267 00000 n +0000186448 00000 n +0000186602 00000 n +0000186757 00000 n +0000186912 00000 n +0000187072 00000 n +0000187232 00000 n +0000187392 00000 n +0000187552 00000 n +0000187712 00000 n +0000187866 00000 n +0000188026 00000 n +0000188186 00000 n +0000188340 00000 n +0000188495 00000 n +0000188655 00000 n +0000188815 00000 n +0000188975 00000 n +0000189135 00000 n +0000189295 00000 n +0000189455 00000 n +0000189610 00000 n +0000189769 00000 n +0000189929 00000 n +0000190089 00000 n +0000190249 00000 n +0000190408 00000 n +0000190563 00000 n +0000190723 00000 n +0000190883 00000 n +0000191048 00000 n +0000191213 00000 n +0000191378 00000 n +0000191543 00000 n +0000191707 00000 n +0000191872 00000 n +0000192036 00000 n +0000192201 00000 n +0000192366 00000 n +0000192521 00000 n +0000192681 00000 n +0000192841 00000 n +0000193001 00000 n +0000193161 00000 n +0000193315 00000 n +0000193475 00000 n +0000193635 00000 n +0000193794 00000 n +0000193951 00000 n +0000194109 00000 n +0000206345 00000 n +0000198269 00000 n +0000194446 00000 n +0000206282 00000 n +0000198827 00000 n +0000198987 00000 n +0000199143 00000 n +0000199304 00000 n +0000199465 00000 n +0000199626 00000 n +0000199787 00000 n +0000199943 00000 n +0000200098 00000 n +0000200254 00000 n +0000200410 00000 n +0000200565 00000 n +0000200726 00000 n +0000200887 00000 n +0000201041 00000 n +0000201196 00000 n +0000201356 00000 n +0000201516 00000 n +0000201670 00000 n +0000201830 00000 n +0000201990 00000 n +0000202149 00000 n +0000202303 00000 n +0000202463 00000 n +0000202623 00000 n +0000202783 00000 n +0000202943 00000 n +0000203103 00000 n +0000203257 00000 n +0000203416 00000 n +0000203576 00000 n +0000203736 00000 n +0000203895 00000 n +0000204055 00000 n +0000204215 00000 n +0000204375 00000 n +0000204535 00000 n +0000204690 00000 n +0000204850 00000 n +0000205010 00000 n +0000205170 00000 n +0000205328 00000 n +0000205488 00000 n +0000205648 00000 n +0000205807 00000 n +0000205965 00000 n +0000206123 00000 n +0002181160 00000 n +0000218766 00000 n +0000210456 00000 n +0000206461 00000 n +0000218703 00000 n +0000211023 00000 n +0000211184 00000 n +0000211345 00000 n +0000211506 00000 n +0000211667 00000 n +0000211828 00000 n +0000211989 00000 n +0000212150 00000 n +0000212310 00000 n +0000212471 00000 n +0000212626 00000 n +0000212785 00000 n +0000212945 00000 n +0000213105 00000 n +0000213260 00000 n +0000213420 00000 n +0000213580 00000 n +0000213735 00000 n +0000213895 00000 n +0000214054 00000 n +0000214209 00000 n +0000214369 00000 n +0000214529 00000 n +0000214688 00000 n +0000214848 00000 n +0000215004 00000 n +0000215165 00000 n +0000215326 00000 n +0000215487 00000 n +0000215648 00000 n +0000215809 00000 n +0000215969 00000 n +0000216130 00000 n +0000216290 00000 n +0000216451 00000 n +0000216613 00000 n +0000216775 00000 n +0000216937 00000 n +0000217099 00000 n +0000217261 00000 n +0000217423 00000 n +0000217585 00000 n +0000217740 00000 n +0000217901 00000 n +0000218062 00000 n +0000218222 00000 n +0000218380 00000 n +0000218539 00000 n +0000230059 00000 n +0000222645 00000 n +0000218868 00000 n +0000229996 00000 n +0000223158 00000 n +0000223324 00000 n +0000223490 00000 n +0000223656 00000 n +0000223822 00000 n +0000223987 00000 n +0000224153 00000 n +0000224318 00000 n +0000224484 00000 n +0000224651 00000 n +0000224818 00000 n +0000224985 00000 n +0000225152 00000 n +0000225318 00000 n +0000225485 00000 n +0000225646 00000 n +0000225801 00000 n +0000225962 00000 n +0000226123 00000 n +0000226284 00000 n +0000226445 00000 n +0000226601 00000 n +0000226762 00000 n +0000226928 00000 n +0000227094 00000 n +0000227259 00000 n +0000227425 00000 n +0000227591 00000 n +0000227756 00000 n +0000227922 00000 n +0000228088 00000 n +0000228249 00000 n +0000228405 00000 n +0000228566 00000 n +0000228727 00000 n +0000228888 00000 n +0000229048 00000 n +0000229209 00000 n +0000229370 00000 n +0000229530 00000 n +0000229683 00000 n +0000229837 00000 n +0000242075 00000 n +0000233638 00000 n +0000230161 00000 n +0000242012 00000 n +0000234214 00000 n +0000234375 00000 n +0000234536 00000 n +0000234692 00000 n +0000234848 00000 n +0000235009 00000 n +0000235170 00000 n +0000235331 00000 n +0000235487 00000 n +0000235647 00000 n +0000235808 00000 n +0000235968 00000 n +0000236129 00000 n +0000236283 00000 n +0000236438 00000 n +0000236593 00000 n +0000236748 00000 n +0000236908 00000 n +0000237068 00000 n +0000237227 00000 n +0000237387 00000 n +0000237547 00000 n +0000237701 00000 n +0000237860 00000 n +0000238020 00000 n +0000238175 00000 n +0000238329 00000 n +0000238484 00000 n +0000238639 00000 n +0000238794 00000 n +0000238953 00000 n +0000239107 00000 n +0000239267 00000 n +0000239427 00000 n +0000239586 00000 n +0000239746 00000 n +0000239906 00000 n +0000240066 00000 n +0000240221 00000 n +0000240381 00000 n +0000240541 00000 n +0000240701 00000 n +0000240866 00000 n +0000241031 00000 n +0000241196 00000 n +0000241360 00000 n +0000241523 00000 n +0000241686 00000 n +0000241849 00000 n +0000253688 00000 n +0000245428 00000 n +0000242191 00000 n +0000253625 00000 n +0000245995 00000 n +0000246150 00000 n +0000246305 00000 n +0000246459 00000 n +0000246614 00000 n +0000246769 00000 n +0000246924 00000 n +0000247084 00000 n +0000247238 00000 n +0000247398 00000 n +0000247553 00000 n +0000247707 00000 n +0000247862 00000 n +0000248017 00000 n +0000248177 00000 n +0000248337 00000 n +0000248502 00000 n +0000248662 00000 n +0000248827 00000 n +0000248981 00000 n +0000249141 00000 n +0000249301 00000 n +0000249459 00000 n +0000249613 00000 n +0000249768 00000 n +0000249928 00000 n +0000250082 00000 n +0000250237 00000 n +0000250392 00000 n +0000250552 00000 n +0000250716 00000 n +0000250881 00000 n +0000251046 00000 n +0000251209 00000 n +0000251369 00000 n +0000251534 00000 n +0000251699 00000 n +0000251864 00000 n +0000252024 00000 n +0000252184 00000 n +0000252349 00000 n +0000252513 00000 n +0000252678 00000 n +0000252843 00000 n +0000252997 00000 n +0000253151 00000 n +0000253304 00000 n +0000253462 00000 n +0000265248 00000 n +0000257172 00000 n +0000253790 00000 n +0000265185 00000 n +0000257730 00000 n +0000257890 00000 n +0000258050 00000 n +0000258205 00000 n +0000258365 00000 n +0000258525 00000 n +0000258685 00000 n +0000258839 00000 n +0000258994 00000 n +0000259149 00000 n +0000259308 00000 n +0000259473 00000 n +0000259633 00000 n +0000259798 00000 n +0000259963 00000 n +0000260123 00000 n +0000260283 00000 n +0000260443 00000 n +0000260608 00000 n +0000260772 00000 n +0000260937 00000 n +0000261102 00000 n +0000261256 00000 n +0000261415 00000 n +0000261568 00000 n +0000261723 00000 n +0000261878 00000 n +0000262033 00000 n +0000262193 00000 n +0000262353 00000 n +0000262512 00000 n +0000262671 00000 n +0000262826 00000 n +0000262986 00000 n +0000263145 00000 n +0000263305 00000 n +0000263465 00000 n +0000263625 00000 n +0000263780 00000 n +0000263940 00000 n +0000264100 00000 n +0000264260 00000 n +0000264414 00000 n +0000264569 00000 n +0000264724 00000 n +0000264878 00000 n +0000265032 00000 n +0000274981 00000 n +0000268122 00000 n +0000265350 00000 n +0000274918 00000 n +0000268617 00000 n +0000268771 00000 n +0000268926 00000 n +0000269081 00000 n +0000269235 00000 n +0000269390 00000 n +0000269540 00000 n +0000269694 00000 n +0000269849 00000 n +0000270004 00000 n +0000270159 00000 n +0000270313 00000 n +0000270468 00000 n +0000270628 00000 n +0000270792 00000 n +0000270957 00000 n +0000271122 00000 n +0000271287 00000 n +0000271452 00000 n +0000271612 00000 n +0000271767 00000 n +0000271927 00000 n +0000272087 00000 n +0000272241 00000 n +0000272396 00000 n +0000272555 00000 n +0000272715 00000 n +0000272875 00000 n +0000273035 00000 n +0000273195 00000 n +0000273355 00000 n +0000273515 00000 n +0000273675 00000 n +0000273835 00000 n +0000273995 00000 n +0000274145 00000 n +0000274299 00000 n +0000274454 00000 n +0000274608 00000 n +0000274763 00000 n +0002181285 00000 n +0000285742 00000 n +0000278261 00000 n +0000275083 00000 n +0000285679 00000 n +0000278792 00000 n +0000278946 00000 n +0000279101 00000 n +0000279256 00000 n +0000279411 00000 n +0000279566 00000 n +0000279721 00000 n +0000279875 00000 n +0000280030 00000 n +0000280185 00000 n +0000280339 00000 n +0000280494 00000 n +0000280649 00000 n +0000280804 00000 n +0000280954 00000 n +0000281108 00000 n +0000281263 00000 n +0000281423 00000 n +0000281583 00000 n +0000281748 00000 n +0000281913 00000 n +0000282068 00000 n +0000282223 00000 n +0000282377 00000 n +0000282537 00000 n +0000282702 00000 n +0000282866 00000 n +0000283020 00000 n +0000283180 00000 n +0000283340 00000 n +0000283495 00000 n +0000283649 00000 n +0000283804 00000 n +0000283959 00000 n +0000284113 00000 n +0000284268 00000 n +0000284423 00000 n +0000284583 00000 n +0000284737 00000 n +0000284897 00000 n +0000285057 00000 n +0000285211 00000 n +0000285366 00000 n +0000285521 00000 n +0000293703 00000 n +0000288217 00000 n +0000285844 00000 n +0000293640 00000 n +0000288640 00000 n +0000288800 00000 n +0000288960 00000 n +0000289115 00000 n +0000289275 00000 n +0000289435 00000 n +0000289595 00000 n +0000289755 00000 n +0000289914 00000 n +0000290074 00000 n +0000290229 00000 n +0000290388 00000 n +0000290543 00000 n +0000290698 00000 n +0000290852 00000 n +0000291007 00000 n +0000291162 00000 n +0000291317 00000 n +0000291472 00000 n +0000291626 00000 n +0000291781 00000 n +0000291936 00000 n +0000292090 00000 n +0000292244 00000 n +0000292400 00000 n +0000292556 00000 n +0000292712 00000 n +0000292866 00000 n +0000293021 00000 n +0000293175 00000 n +0000293330 00000 n +0000293485 00000 n +0000294373 00000 n +0000294127 00000 n +0000293805 00000 n +0000294250 00000 n +0000298618 00000 n +0000298000 00000 n +0000294461 00000 n +0000298123 00000 n +0000298186 00000 n +0000298432 00000 n +0000298556 00000 n +0000303333 00000 n +0000302834 00000 n +0000298734 00000 n +0000303147 00000 n +0000302978 00000 n +0000303270 00000 n +0000308743 00000 n +0000307503 00000 n +0000303449 00000 n +0000308433 00000 n +0000307674 00000 n +0000307845 00000 n +0000308557 00000 n +0000308017 00000 n +0000308225 00000 n +0000308680 00000 n +0002181410 00000 n +0000310932 00000 n +0000310414 00000 n +0000308859 00000 n +0000310745 00000 n +0000310558 00000 n +0000310869 00000 n +0000315095 00000 n +0000313774 00000 n +0000311034 00000 n +0000314413 00000 n +0000314661 00000 n +0000313936 00000 n +0000314102 00000 n +0000314784 00000 n +0000314908 00000 n +0000314255 00000 n +0000315032 00000 n +0000319860 00000 n +0000318365 00000 n +0000315197 00000 n +0000319179 00000 n +0000319303 00000 n +0000318536 00000 n +0000318706 00000 n +0000319426 00000 n +0000319550 00000 n +0000319674 00000 n +0000319797 00000 n +0000318876 00000 n +0000319028 00000 n +0000322838 00000 n +0000322405 00000 n +0000320018 00000 n +0000322528 00000 n +0000322652 00000 n +0000322775 00000 n +0000324006 00000 n +0000323696 00000 n +0000322968 00000 n +0000323819 00000 n +0000323943 00000 n +0000325032 00000 n +0000324598 00000 n +0000324108 00000 n +0000324721 00000 n +0000324969 00000 n +0002181535 00000 n +0000325700 00000 n +0000325453 00000 n +0000325120 00000 n +0000325576 00000 n +0000329616 00000 n +0000328993 00000 n +0000325788 00000 n +0000329116 00000 n +0000329179 00000 n +0000329429 00000 n +0000329554 00000 n +0000334100 00000 n +0000333539 00000 n +0000329718 00000 n +0000333662 00000 n +0000333786 00000 n +0000333911 00000 n +0000333974 00000 n +0000334037 00000 n +0000338061 00000 n +0000337251 00000 n +0000334230 00000 n +0000337374 00000 n +0000337499 00000 n +0000337624 00000 n +0000337749 00000 n +0000337874 00000 n +0000337999 00000 n +0000341485 00000 n +0000343634 00000 n +0000341332 00000 n +0000338191 00000 n +0000343321 00000 n +0000343384 00000 n +0000343447 00000 n +0002067888 00000 n +0002058634 00000 n +0002067721 00000 n +0002056677 00000 n +0002045339 00000 n +0002056511 00000 n +0000343015 00000 n +0000343165 00000 n +0000343571 00000 n +0000342844 00000 n +0000342902 00000 n +0000342992 00000 n +0000347558 00000 n +0000346783 00000 n +0000343807 00000 n +0000347245 00000 n +0000347370 00000 n +0000346936 00000 n +0000347092 00000 n +0000347495 00000 n +0002181660 00000 n +0000457612 00000 n +0000351419 00000 n +0000350983 00000 n +0000347688 00000 n +0000351106 00000 n +0002044691 00000 n +0002038501 00000 n +0002044524 00000 n +0000351231 00000 n +0000351356 00000 n +0000355484 00000 n +0000355050 00000 n +0000351634 00000 n +0000355173 00000 n +0000355298 00000 n +0000355423 00000 n +0000358370 00000 n +0000357632 00000 n +0000355614 00000 n +0000357933 00000 n +0000358058 00000 n +0000358182 00000 n +0000357776 00000 n +0000358307 00000 n +0000362268 00000 n +0000361832 00000 n +0000358500 00000 n +0000361955 00000 n +0000362205 00000 n +0000366852 00000 n +0000366158 00000 n +0000362384 00000 n +0000366789 00000 n +0000366320 00000 n +0000366477 00000 n +0000366633 00000 n +0000371352 00000 n +0000370745 00000 n +0000367025 00000 n +0000371039 00000 n +0000370889 00000 n +0000371164 00000 n +0000371289 00000 n +0002181785 00000 n +0000375837 00000 n +0000375526 00000 n +0000371553 00000 n +0000375649 00000 n +0000375774 00000 n +0000380276 00000 n +0000379406 00000 n +0000375967 00000 n +0000380213 00000 n +0000379577 00000 n +0000379734 00000 n +0000379891 00000 n +0000380049 00000 n +0000384407 00000 n +0000383594 00000 n +0000380435 00000 n +0000384220 00000 n +0000383756 00000 n +0000383911 00000 n +0000384066 00000 n +0000384344 00000 n +0000385674 00000 n +0000385488 00000 n +0000384608 00000 n +0000385611 00000 n +0000389408 00000 n +0000388554 00000 n +0000385776 00000 n +0000388847 00000 n +0000388698 00000 n +0000388972 00000 n +0000389095 00000 n +0000389220 00000 n +0000389345 00000 n +0000393177 00000 n +0000392741 00000 n +0000389609 00000 n +0000392864 00000 n +0000392989 00000 n +0000393114 00000 n +0002181910 00000 n +0000398298 00000 n +0000397546 00000 n +0000393350 00000 n +0000397669 00000 n +0000397732 00000 n +0000397795 00000 n +0000397858 00000 n +0000397921 00000 n +0000397984 00000 n +0000398047 00000 n +0000398110 00000 n +0000398235 00000 n +0000402584 00000 n +0000401899 00000 n +0000398456 00000 n +0000402022 00000 n +0000402146 00000 n +0000402271 00000 n +0000402396 00000 n +0000402521 00000 n +0000405381 00000 n +0000404820 00000 n +0000402714 00000 n +0000404943 00000 n +0000405068 00000 n +0000405193 00000 n +0000405318 00000 n +0000409887 00000 n +0000408897 00000 n +0000405497 00000 n +0000409574 00000 n +0000409059 00000 n +0000409233 00000 n +0000409824 00000 n +0000409406 00000 n +0000414072 00000 n +0000413638 00000 n +0000410003 00000 n +0000413761 00000 n +0000413886 00000 n +0000414009 00000 n +0000418354 00000 n +0000417794 00000 n +0000414202 00000 n +0000417917 00000 n +0000418042 00000 n +0000418167 00000 n +0000418292 00000 n +0002182035 00000 n +0000422641 00000 n +0000422080 00000 n +0000418512 00000 n +0000422203 00000 n +0000422328 00000 n +0000422453 00000 n +0000422578 00000 n +0000426775 00000 n +0000425965 00000 n +0000422785 00000 n +0000426088 00000 n +0000426213 00000 n +0000426338 00000 n +0000426463 00000 n +0000426587 00000 n +0000426712 00000 n +0000430585 00000 n +0000430025 00000 n +0000426891 00000 n +0000430148 00000 n +0000430398 00000 n +0000430523 00000 n +0000435021 00000 n +0000434711 00000 n +0000430715 00000 n +0000434834 00000 n +0000434958 00000 n +0000438914 00000 n +0000440461 00000 n +0000438770 00000 n +0000435179 00000 n +0000439897 00000 n +0000439727 00000 n +0000440022 00000 n +0000440085 00000 n +0000440148 00000 n +0000440211 00000 n +0000440274 00000 n +0000440337 00000 n +0000440399 00000 n +0000445123 00000 n +0000443944 00000 n +0000440662 00000 n +0000444436 00000 n +0000444561 00000 n +0000444097 00000 n +0000444686 00000 n +0000444811 00000 n +0000444936 00000 n +0000445061 00000 n +0000444283 00000 n +0002182160 00000 n +0000449979 00000 n +0000448484 00000 n +0000445253 00000 n +0000449539 00000 n +0000449664 00000 n +0000448664 00000 n +0000449789 00000 n +0000449852 00000 n +0000449915 00000 n +0000448817 00000 n +0000448994 00000 n +0000449172 00000 n +0000449357 00000 n +0000454654 00000 n +0000453785 00000 n +0000450123 00000 n +0000454466 00000 n +0000453947 00000 n +0000454591 00000 n +0000454110 00000 n +0000454300 00000 n +0000457925 00000 n +0000456947 00000 n +0000454784 00000 n +0000457487 00000 n +0000457100 00000 n +0000457274 00000 n +0000457737 00000 n +0000457862 00000 n +0000462562 00000 n +0000461303 00000 n +0000458112 00000 n +0000462124 00000 n +0000461474 00000 n +0000461635 00000 n +0000461797 00000 n +0000461967 00000 n +0000462249 00000 n +0000462374 00000 n +0000462499 00000 n +0000466459 00000 n +0000467021 00000 n +0000466211 00000 n +0000462749 00000 n +0000466334 00000 n +0000466584 00000 n +0000466709 00000 n +0000466834 00000 n +0000466958 00000 n +0000468252 00000 n +0000468066 00000 n +0000467165 00000 n +0000468189 00000 n +0002182285 00000 n +0000472108 00000 n +0000471547 00000 n +0000468396 00000 n +0000471670 00000 n +0000471920 00000 n +0000472045 00000 n +0000475792 00000 n +0000474980 00000 n +0000472224 00000 n +0000475103 00000 n +0000475228 00000 n +0000475352 00000 n +0000475477 00000 n +0000475540 00000 n +0000475603 00000 n +0000475666 00000 n +0000475729 00000 n +0000477818 00000 n +0000477507 00000 n +0000475922 00000 n +0000477630 00000 n +0000477755 00000 n +0000478918 00000 n +0000478482 00000 n +0000477962 00000 n +0000478605 00000 n +0000478855 00000 n +0000479584 00000 n +0000479336 00000 n +0000479006 00000 n +0000479459 00000 n +0000483245 00000 n +0000482746 00000 n +0000479672 00000 n +0000482869 00000 n +0000482932 00000 n +0000483182 00000 n +0002182410 00000 n +0000486025 00000 n +0000485714 00000 n +0000483404 00000 n +0000485837 00000 n +0000485962 00000 n +0000490460 00000 n +0000489899 00000 n +0000486141 00000 n +0000490022 00000 n +0000490147 00000 n +0000490272 00000 n +0000490397 00000 n +0000495180 00000 n +0000494367 00000 n +0000490590 00000 n +0000494490 00000 n +0000494553 00000 n +0000494615 00000 n +0000494678 00000 n +0000494741 00000 n +0000494804 00000 n +0000494867 00000 n +0000494992 00000 n +0000495117 00000 n +0000499679 00000 n +0000499369 00000 n +0000495338 00000 n +0000499492 00000 n +0000499616 00000 n +0000502611 00000 n +0000502300 00000 n +0000499809 00000 n +0000502423 00000 n +0000502548 00000 n +0000506433 00000 n +0000505938 00000 n +0000502755 00000 n +0000506245 00000 n +0000506082 00000 n +0000506370 00000 n +0002182535 00000 n +0000510881 00000 n +0000509948 00000 n +0000506549 00000 n +0000510071 00000 n +0000510196 00000 n +0000510259 00000 n +0000510322 00000 n +0000510385 00000 n +0000510448 00000 n +0000510573 00000 n +0000510694 00000 n +0000510818 00000 n +0000515157 00000 n +0000514721 00000 n +0000511025 00000 n +0000514844 00000 n +0000514969 00000 n +0000515094 00000 n +0000518972 00000 n +0000519975 00000 n +0000518849 00000 n +0000515273 00000 n +0000519787 00000 n +0000519912 00000 n +0000523912 00000 n +0000523226 00000 n +0000520162 00000 n +0000523349 00000 n +0000523474 00000 n +0000523599 00000 n +0000523724 00000 n +0000523849 00000 n +0000527890 00000 n +0000527456 00000 n +0000524113 00000 n +0000527579 00000 n +0000527704 00000 n +0000527827 00000 n +0000532166 00000 n +0000531730 00000 n +0000528020 00000 n +0000531853 00000 n +0000531978 00000 n +0000532103 00000 n +0002182660 00000 n +0000536047 00000 n +0000535611 00000 n +0000532353 00000 n +0000535734 00000 n +0000535859 00000 n +0000535984 00000 n +0000541012 00000 n +0000540700 00000 n +0000536177 00000 n +0000540823 00000 n +0000540886 00000 n +0000540948 00000 n +0000545651 00000 n +0000545149 00000 n +0000541142 00000 n +0000545272 00000 n +0000545335 00000 n +0000545398 00000 n +0000545462 00000 n +0000545525 00000 n +0000545589 00000 n +0000550294 00000 n +0000549482 00000 n +0000545753 00000 n +0000549605 00000 n +0000549668 00000 n +0000549731 00000 n +0000549794 00000 n +0000549857 00000 n +0000549982 00000 n +0000550107 00000 n +0000550231 00000 n +0000554041 00000 n +0000553605 00000 n +0000550424 00000 n +0000553728 00000 n +0000553978 00000 n +0000558601 00000 n +0000558290 00000 n +0000554214 00000 n +0000558413 00000 n +0000558538 00000 n +0002182785 00000 n +0000562533 00000 n +0000562222 00000 n +0000558759 00000 n +0000562345 00000 n +0000562470 00000 n +0000567200 00000 n +0000566515 00000 n +0000562706 00000 n +0000566638 00000 n +0000566763 00000 n +0000566888 00000 n +0000567013 00000 n +0000567138 00000 n +0000570672 00000 n +0000570236 00000 n +0000567358 00000 n +0000570359 00000 n +0000570484 00000 n +0000570609 00000 n +0000573803 00000 n +0000573194 00000 n +0000570816 00000 n +0000573490 00000 n +0000573338 00000 n +0000573615 00000 n +0000573740 00000 n +0000611334 00000 n +0000579221 00000 n +0000577899 00000 n +0000573933 00000 n +0000578783 00000 n +0000578908 00000 n +0000578070 00000 n +0000579033 00000 n +0000579158 00000 n +0000578254 00000 n +0000578423 00000 n +0000578591 00000 n +0000584804 00000 n +0000583248 00000 n +0000579365 00000 n +0000584492 00000 n +0000583437 00000 n +0000583609 00000 n +0000583794 00000 n +0000583996 00000 n +0000584617 00000 n +0000584168 00000 n +0000584741 00000 n +0000584321 00000 n +0002182910 00000 n +0000587104 00000 n +0000586793 00000 n +0000584934 00000 n +0000586916 00000 n +0000587041 00000 n +0000589122 00000 n +0000588811 00000 n +0000587220 00000 n +0000588934 00000 n +0000589059 00000 n +0000593726 00000 n +0000591500 00000 n +0000589252 00000 n +0000593538 00000 n +0000593663 00000 n +0000591725 00000 n +0000591908 00000 n +0000592084 00000 n +0000592265 00000 n +0000592445 00000 n +0000592625 00000 n +0000592811 00000 n +0000592992 00000 n +0000593173 00000 n +0000593356 00000 n +0000597407 00000 n +0000596801 00000 n +0000593913 00000 n +0000597094 00000 n +0000597219 00000 n +0000597344 00000 n +0000596945 00000 n +0000601008 00000 n +0000600398 00000 n +0000597551 00000 n +0000600695 00000 n +0000600820 00000 n +0000600542 00000 n +0000600945 00000 n +0000604524 00000 n +0000603571 00000 n +0000601138 00000 n +0000604088 00000 n +0000604213 00000 n +0000603724 00000 n +0000604337 00000 n +0000603906 00000 n +0000604462 00000 n +0002183035 00000 n +0000608597 00000 n +0000607915 00000 n +0000604654 00000 n +0000608038 00000 n +0000608163 00000 n +0000608287 00000 n +0000608411 00000 n +0000608536 00000 n +0000611894 00000 n +0000611086 00000 n +0000608770 00000 n +0000611209 00000 n +0000611459 00000 n +0000611582 00000 n +0000611707 00000 n +0000611832 00000 n +0000615739 00000 n +0000615426 00000 n +0000612038 00000 n +0000615549 00000 n +0000615612 00000 n +0000615675 00000 n +0000617220 00000 n +0000616908 00000 n +0000615869 00000 n +0000617031 00000 n +0000617094 00000 n +0000617156 00000 n +0000620412 00000 n +0000620099 00000 n +0000617322 00000 n +0000620222 00000 n +0000620285 00000 n +0000620348 00000 n +0000624012 00000 n +0000623451 00000 n +0000620514 00000 n +0000623574 00000 n +0000623824 00000 n +0000623949 00000 n +0002183160 00000 n +0000627541 00000 n +0000627042 00000 n +0000624185 00000 n +0000627165 00000 n +0000627228 00000 n +0000627291 00000 n +0000627353 00000 n +0000627478 00000 n +0000630152 00000 n +0000629465 00000 n +0000627671 00000 n +0000629588 00000 n +0000629713 00000 n +0000629838 00000 n +0000629901 00000 n +0000629965 00000 n +0000630089 00000 n +0000632927 00000 n +0000632366 00000 n +0000630282 00000 n +0000632489 00000 n +0000632614 00000 n +0000632739 00000 n +0000632864 00000 n +0000636698 00000 n +0000636262 00000 n +0000633057 00000 n +0000636385 00000 n +0000636635 00000 n +0000641220 00000 n +0000640784 00000 n +0000636828 00000 n +0000640907 00000 n +0000641032 00000 n +0000641157 00000 n +0000646101 00000 n +0000645539 00000 n +0000641378 00000 n +0000645662 00000 n +0002038265 00000 n +0002036393 00000 n +0002038097 00000 n +0000645787 00000 n +0000645850 00000 n +0000645913 00000 n +0000646038 00000 n +0002183285 00000 n +0000648298 00000 n +0000648112 00000 n +0000646259 00000 n +0000648235 00000 n +0000652676 00000 n +0000651990 00000 n +0000648400 00000 n +0000652113 00000 n +0000652176 00000 n +0000652239 00000 n +0000652364 00000 n +0000652489 00000 n +0000652614 00000 n +0000656617 00000 n +0000656057 00000 n +0000652792 00000 n +0000656180 00000 n +0000656243 00000 n +0000656306 00000 n +0000656430 00000 n +0000656554 00000 n +0000660518 00000 n +0000660082 00000 n +0000656747 00000 n +0000660205 00000 n +0000660268 00000 n +0000660331 00000 n +0000660456 00000 n +0000664834 00000 n +0000664149 00000 n +0000660648 00000 n +0000664272 00000 n +0000664335 00000 n +0000664398 00000 n +0000664523 00000 n +0000664586 00000 n +0000664649 00000 n +0000664773 00000 n +0000668783 00000 n +0000668158 00000 n +0000664964 00000 n +0000668281 00000 n +0000668344 00000 n +0000668407 00000 n +0000668470 00000 n +0000668595 00000 n +0000668720 00000 n +0002183410 00000 n +0000673359 00000 n +0000672800 00000 n +0000668998 00000 n +0000672923 00000 n +0000673048 00000 n +0000673173 00000 n +0000673297 00000 n +0000677964 00000 n +0000677405 00000 n +0000673574 00000 n +0000677528 00000 n +0000677653 00000 n +0000677777 00000 n +0000677901 00000 n +0000683092 00000 n +0000682003 00000 n +0000678094 00000 n +0000682905 00000 n +0000683030 00000 n +0000682174 00000 n +0000682356 00000 n +0000682536 00000 n +0000682720 00000 n +0000687160 00000 n +0000686474 00000 n +0000683236 00000 n +0000686597 00000 n +0000686722 00000 n +0000686847 00000 n +0000686971 00000 n +0000687034 00000 n +0000687097 00000 n +0000689249 00000 n +0000688812 00000 n +0000687290 00000 n +0000688935 00000 n +0000688998 00000 n +0000689060 00000 n +0000689123 00000 n +0000689186 00000 n +0000690927 00000 n +0000690618 00000 n +0000689408 00000 n +0000690741 00000 n +0000690865 00000 n +0002183535 00000 n +0000694753 00000 n +0000694192 00000 n +0000691128 00000 n +0000694315 00000 n +0000694565 00000 n +0000694690 00000 n +0000699567 00000 n +0000699256 00000 n +0000694912 00000 n +0000699379 00000 n +0000699504 00000 n +0000703917 00000 n +0000703731 00000 n +0000699711 00000 n +0000703854 00000 n +0000708192 00000 n +0000707382 00000 n +0000704019 00000 n +0000707505 00000 n +0000707630 00000 n +0000707754 00000 n +0000707879 00000 n +0000708004 00000 n +0000708129 00000 n +0000712660 00000 n +0000711976 00000 n +0000708294 00000 n +0000712099 00000 n +0000712224 00000 n +0000712349 00000 n +0000712473 00000 n +0000712597 00000 n +0000717140 00000 n +0000716830 00000 n +0000712790 00000 n +0000716953 00000 n +0000717078 00000 n +0002183660 00000 n +0000720560 00000 n +0000720000 00000 n +0000717256 00000 n +0000720123 00000 n +0000720248 00000 n +0000720373 00000 n +0000720497 00000 n +0000723901 00000 n +0000723590 00000 n +0000720676 00000 n +0000723713 00000 n +0000723838 00000 n +0000726272 00000 n +0000726086 00000 n +0000724031 00000 n +0000726209 00000 n +0000729515 00000 n +0000729079 00000 n +0000726431 00000 n +0000729202 00000 n +0000729327 00000 n +0000729452 00000 n +0000733468 00000 n +0000733033 00000 n +0000729645 00000 n +0000733156 00000 n +0000733280 00000 n +0000733405 00000 n +0000738047 00000 n +0000736056 00000 n +0000733598 00000 n +0000737736 00000 n +0000737861 00000 n +0000737984 00000 n +0000736254 00000 n +0000736465 00000 n +0000736677 00000 n +0000736889 00000 n +0000737101 00000 n +0000737313 00000 n +0000737524 00000 n +0002183785 00000 n +0000742032 00000 n +0000741222 00000 n +0000738177 00000 n +0000741345 00000 n +0000741595 00000 n +0000741720 00000 n +0000741845 00000 n +0000741970 00000 n +0000745643 00000 n +0000745082 00000 n +0000742134 00000 n +0000745205 00000 n +0000745330 00000 n +0000745455 00000 n +0000745580 00000 n +0000748563 00000 n +0000748127 00000 n +0000745773 00000 n +0000748250 00000 n +0000748376 00000 n +0000748501 00000 n +0000752816 00000 n +0000751936 00000 n +0000748679 00000 n +0000752249 00000 n +0000752375 00000 n +0000752080 00000 n +0000752501 00000 n +0000752627 00000 n +0000752753 00000 n +0000756777 00000 n +0000756214 00000 n +0000752932 00000 n +0000756337 00000 n +0000756588 00000 n +0000756714 00000 n +0000761311 00000 n +0000760499 00000 n +0000756879 00000 n +0000760622 00000 n +0000760748 00000 n +0000760872 00000 n +0000760997 00000 n +0000761123 00000 n +0000761249 00000 n +0002183910 00000 n +0000765208 00000 n +0000764898 00000 n +0000761413 00000 n +0000765021 00000 n +0000765145 00000 n +0000767747 00000 n +0000767309 00000 n +0000765324 00000 n +0000767432 00000 n +0000767558 00000 n +0000767684 00000 n +0000771583 00000 n +0000770512 00000 n +0000767920 00000 n +0000771268 00000 n +0000771520 00000 n +0000770674 00000 n +0000770910 00000 n +0000771089 00000 n +0000773564 00000 n +0000773252 00000 n +0000771713 00000 n +0000773375 00000 n +0000773501 00000 n +0000777578 00000 n +0000777014 00000 n +0000773680 00000 n +0000777137 00000 n +0000777389 00000 n +0000777515 00000 n +0000782117 00000 n +0000781113 00000 n +0000777723 00000 n +0000781236 00000 n +0000781362 00000 n +0000781425 00000 n +0000781488 00000 n +0000781551 00000 n +0000781614 00000 n +0000781677 00000 n +0000781740 00000 n +0000781803 00000 n +0000781928 00000 n +0000782054 00000 n +0002184035 00000 n +0000785884 00000 n +0000785447 00000 n +0000782332 00000 n +0000785570 00000 n +0000785695 00000 n +0000785821 00000 n +0000789321 00000 n +0000788884 00000 n +0000786056 00000 n +0000789007 00000 n +0000789133 00000 n +0000789258 00000 n +0000791691 00000 n +0000791380 00000 n +0000789451 00000 n +0000791503 00000 n +0000791629 00000 n +0000794453 00000 n +0000794267 00000 n +0000791878 00000 n +0000794390 00000 n +0000799674 00000 n +0000797428 00000 n +0000797116 00000 n +0000794597 00000 n +0000797239 00000 n +0000797365 00000 n +0000803151 00000 n +0000799551 00000 n +0000797572 00000 n +0000803088 00000 n +0002184160 00000 n +0000802917 00000 n +0000802975 00000 n +0000803065 00000 n +0000807452 00000 n +0000808580 00000 n +0000807329 00000 n +0000803338 00000 n +0000808265 00000 n +0000808391 00000 n +0000808517 00000 n +0000813539 00000 n +0000813228 00000 n +0000808781 00000 n +0000813351 00000 n +0000813477 00000 n +0000818550 00000 n +0000818113 00000 n +0000813683 00000 n +0000818236 00000 n +0000818362 00000 n +0000818488 00000 n +0000823152 00000 n +0000822777 00000 n +0000818666 00000 n +0000822900 00000 n +0000823026 00000 n +0000823089 00000 n +0000827446 00000 n +0000827134 00000 n +0000823296 00000 n +0000827257 00000 n +0000827383 00000 n +0000832620 00000 n +0000831797 00000 n +0000827590 00000 n +0000832305 00000 n +0000832431 00000 n +0000831950 00000 n +0000832130 00000 n +0000832557 00000 n +0002184285 00000 n +0000837019 00000 n +0000836582 00000 n +0000832764 00000 n +0000836705 00000 n +0000836831 00000 n +0000836956 00000 n +0000840862 00000 n +0000840550 00000 n +0000837177 00000 n +0000840673 00000 n +0000840799 00000 n +0000844396 00000 n +0000844084 00000 n +0000841063 00000 n +0000844207 00000 n +0000844333 00000 n +0000849228 00000 n +0000848791 00000 n +0000844597 00000 n +0000848914 00000 n +0000849040 00000 n +0000849166 00000 n +0000854266 00000 n +0000853577 00000 n +0000849386 00000 n +0000853700 00000 n +0000853826 00000 n +0000853889 00000 n +0000853952 00000 n +0000854015 00000 n +0000854077 00000 n +0000854203 00000 n +0000857019 00000 n +0000856833 00000 n +0000854424 00000 n +0000856956 00000 n +0002184410 00000 n +0000860944 00000 n +0000860506 00000 n +0000857206 00000 n +0000860629 00000 n +0000860755 00000 n +0000860881 00000 n +0000863719 00000 n +0000863407 00000 n +0000861102 00000 n +0000863530 00000 n +0000863656 00000 n +0000866436 00000 n +0000866124 00000 n +0000863863 00000 n +0000866247 00000 n +0000866373 00000 n +0000869220 00000 n +0000868908 00000 n +0000866580 00000 n +0000869031 00000 n +0000869157 00000 n +0000873744 00000 n +0000873306 00000 n +0000869350 00000 n +0000873429 00000 n +0000873555 00000 n +0000873681 00000 n +0000876265 00000 n +0000875953 00000 n +0000873902 00000 n +0000876076 00000 n +0000876202 00000 n +0002184535 00000 n +0000880737 00000 n +0000880299 00000 n +0000876409 00000 n +0000880422 00000 n +0000880548 00000 n +0000880674 00000 n +0000885598 00000 n +0000885286 00000 n +0000880938 00000 n +0000885409 00000 n +0000885535 00000 n +0000890024 00000 n +0000889586 00000 n +0000885742 00000 n +0000889709 00000 n +0000889835 00000 n +0000889961 00000 n +0000895817 00000 n +0000894437 00000 n +0000890154 00000 n +0000894560 00000 n +0000894686 00000 n +0000894812 00000 n +0000894875 00000 n +0000894938 00000 n +0000894999 00000 n +0000895061 00000 n +0000895124 00000 n +0000895187 00000 n +0000895250 00000 n +0000895313 00000 n +0000895376 00000 n +0000895439 00000 n +0000895502 00000 n +0000895565 00000 n +0000895628 00000 n +0000895691 00000 n +0000895754 00000 n +0000899490 00000 n +0000899178 00000 n +0000895947 00000 n +0000899301 00000 n +0000899427 00000 n +0000900800 00000 n +0000900614 00000 n +0000899705 00000 n +0000900737 00000 n +0002184660 00000 n +0000904934 00000 n +0000904497 00000 n +0000900916 00000 n +0000904620 00000 n +0000904746 00000 n +0000904872 00000 n +0000909194 00000 n +0000908882 00000 n +0000905149 00000 n +0000909005 00000 n +0000909131 00000 n +0000910575 00000 n +0000910389 00000 n +0000909366 00000 n +0000910512 00000 n +0000912260 00000 n +0000912074 00000 n +0000910677 00000 n +0000912197 00000 n +0000917113 00000 n +0000916032 00000 n +0000912362 00000 n +0000916547 00000 n +0000916673 00000 n +0000916799 00000 n +0000916925 00000 n +0000916185 00000 n +0000916366 00000 n +0000917051 00000 n +0000921554 00000 n +0000920802 00000 n +0000917257 00000 n +0000920925 00000 n +0000921051 00000 n +0000921177 00000 n +0000921303 00000 n +0000921365 00000 n +0000921428 00000 n +0000921491 00000 n +0002184785 00000 n +0000926168 00000 n +0000925624 00000 n +0000921698 00000 n +0000925979 00000 n +0000926105 00000 n +0000925768 00000 n +0000930657 00000 n +0000930220 00000 n +0000926326 00000 n +0000930343 00000 n +0000930469 00000 n +0000930594 00000 n +0000934160 00000 n +0000933269 00000 n +0000930815 00000 n +0000933594 00000 n +0000933413 00000 n +0000933720 00000 n +0000933846 00000 n +0000933972 00000 n +0000934097 00000 n +0000939087 00000 n +0000937902 00000 n +0000934318 00000 n +0000938396 00000 n +0000938648 00000 n +0000938774 00000 n +0000938055 00000 n +0000938900 00000 n +0000938223 00000 n +0000939024 00000 n +0000943237 00000 n +0000942394 00000 n +0000939203 00000 n +0000942922 00000 n +0000942547 00000 n +0000942734 00000 n +0000943048 00000 n +0002034302 00000 n +0002030296 00000 n +0002034135 00000 n +0000943174 00000 n +0000945700 00000 n +0000945388 00000 n +0000943466 00000 n +0000945511 00000 n +0000945637 00000 n +0002184910 00000 n +0000949565 00000 n +0000949001 00000 n +0000945816 00000 n +0000949124 00000 n +0000949250 00000 n +0000949376 00000 n +0000949502 00000 n +0000953187 00000 n +0000952750 00000 n +0000949695 00000 n +0000952873 00000 n +0000952998 00000 n +0000953124 00000 n +0000957755 00000 n +0000957317 00000 n +0000953402 00000 n +0000957440 00000 n +0000957566 00000 n +0000957692 00000 n +0000965112 00000 n +0000962348 00000 n +0000961784 00000 n +0000957899 00000 n +0000961907 00000 n +0000962033 00000 n +0000962159 00000 n +0000962285 00000 n +0000981404 00000 n +0000964989 00000 n +0000962535 00000 n +0000981151 00000 n +0000981214 00000 n +0000981277 00000 n +0002028913 00000 n +0002026650 00000 n +0002028750 00000 n +0000981340 00000 n +0000980963 00000 n +0000983996 00000 n +0000995750 00000 n +0000983873 00000 n +0000981579 00000 n +0000995371 00000 n +0000995497 00000 n +0000995560 00000 n +0000995623 00000 n +0000995686 00000 n +0002185035 00000 n +0000995186 00000 n +0000997583 00000 n +0001010082 00000 n +0000997460 00000 n +0000995981 00000 n +0001009704 00000 n +0001009829 00000 n +0001009892 00000 n +0001009955 00000 n +0001010018 00000 n +0001009518 00000 n +0001014135 00000 n +0001013823 00000 n +0001010271 00000 n +0001013946 00000 n +0001014072 00000 n +0001018526 00000 n +0001017573 00000 n +0001014322 00000 n +0001018086 00000 n +0001018212 00000 n +0001017726 00000 n +0001017906 00000 n +0001018338 00000 n +0001018464 00000 n +0001023499 00000 n +0001022611 00000 n +0001018755 00000 n +0001023310 00000 n +0001022773 00000 n +0001022955 00000 n +0001023132 00000 n +0001023436 00000 n +0001026626 00000 n +0001026314 00000 n +0001023671 00000 n +0001026437 00000 n +0001026563 00000 n +0001029958 00000 n +0001029521 00000 n +0001026841 00000 n +0001029644 00000 n +0001029770 00000 n +0001029896 00000 n +0002185160 00000 n +0001032058 00000 n +0001051855 00000 n +0001049968 00000 n +0001031935 00000 n +0001030159 00000 n +0001049591 00000 n +0001049654 00000 n +0001049717 00000 n +0001049780 00000 n +0001049906 00000 n +0001049405 00000 n +0001076592 00000 n +0001074457 00000 n +0001051732 00000 n +0001050157 00000 n +0001074079 00000 n +0001074142 00000 n +0001074205 00000 n +0001074268 00000 n +0001074395 00000 n +0001073891 00000 n +0001105626 00000 n +0001103467 00000 n +0001076469 00000 n +0001074675 00000 n +0001103214 00000 n +0001103277 00000 n +0001103340 00000 n +0001103403 00000 n +0001103026 00000 n +0001346530 00000 n +0001130473 00000 n +0001105503 00000 n +0001103643 00000 n +0001129969 00000 n +0001130032 00000 n +0001130095 00000 n +0001130158 00000 n +0001130285 00000 n +0001130411 00000 n +0001129781 00000 n +0001384303 00000 n +0001135468 00000 n +0001135156 00000 n +0001130649 00000 n +0001135279 00000 n +0001135405 00000 n +0001139123 00000 n +0001138811 00000 n +0001135612 00000 n +0001138934 00000 n +0001139060 00000 n +0002185285 00000 n +0001143247 00000 n +0001142558 00000 n +0001139253 00000 n +0001142681 00000 n +0001142807 00000 n +0001142933 00000 n +0001143059 00000 n +0001143184 00000 n +0001146353 00000 n +0001146167 00000 n +0001143448 00000 n +0001146290 00000 n +0001410736 00000 n +0001150549 00000 n +0001150112 00000 n +0001146568 00000 n +0001150235 00000 n +0001150361 00000 n +0001150486 00000 n +0001155233 00000 n +0001154525 00000 n +0001150679 00000 n +0001155044 00000 n +0001154678 00000 n +0001154861 00000 n +0001155170 00000 n +0001160698 00000 n +0001159212 00000 n +0001155377 00000 n +0001160509 00000 n +0001160635 00000 n +0001159401 00000 n +0001159582 00000 n +0001159765 00000 n +0001159940 00000 n +0001160151 00000 n +0001160332 00000 n +0001450433 00000 n +0001165330 00000 n +0001164188 00000 n +0001160842 00000 n +0001164764 00000 n +0001164890 00000 n +0001164341 00000 n +0001164553 00000 n +0001165016 00000 n +0001165142 00000 n +0001165267 00000 n +0002185410 00000 n +0001474060 00000 n +0001499188 00000 n +0001169839 00000 n +0001169150 00000 n +0001165531 00000 n +0001169273 00000 n +0001169398 00000 n +0001169524 00000 n +0001169650 00000 n +0001169776 00000 n +0001174584 00000 n +0001173820 00000 n +0001169983 00000 n +0001174143 00000 n +0001174269 00000 n +0001173964 00000 n +0001174395 00000 n +0001174521 00000 n +0001179243 00000 n +0001178430 00000 n +0001174742 00000 n +0001178553 00000 n +0001178679 00000 n +0001178805 00000 n +0001178930 00000 n +0001179056 00000 n +0001179181 00000 n +0001183204 00000 n +0001182640 00000 n +0001179359 00000 n +0001182763 00000 n +0001182889 00000 n +0001183015 00000 n +0001183141 00000 n +0001185799 00000 n +0001185095 00000 n +0001183348 00000 n +0001185610 00000 n +0001185736 00000 n +0001185248 00000 n +0001185428 00000 n +0001188457 00000 n +0001188147 00000 n +0001185929 00000 n +0001188270 00000 n +0001188396 00000 n +0002185535 00000 n +0001192187 00000 n +0001191544 00000 n +0001188644 00000 n +0001191872 00000 n +0001191998 00000 n +0001192124 00000 n +0001191688 00000 n +0001194321 00000 n +0001194009 00000 n +0001192374 00000 n +0001194132 00000 n +0001194258 00000 n +0001198798 00000 n +0001198230 00000 n +0001194536 00000 n +0001198353 00000 n +0001198416 00000 n +0001198480 00000 n +0001198544 00000 n +0001198608 00000 n +0001198735 00000 n +0001203071 00000 n +0001202759 00000 n +0001199027 00000 n +0001202882 00000 n +0001203008 00000 n +0001205543 00000 n +0001205231 00000 n +0001203229 00000 n +0001205354 00000 n +0001205480 00000 n +0001208958 00000 n +0001208333 00000 n +0001205730 00000 n +0001208456 00000 n +0001208581 00000 n +0001208643 00000 n +0001208706 00000 n +0001208769 00000 n +0001208832 00000 n +0001208895 00000 n +0002185660 00000 n +0001212663 00000 n +0001211912 00000 n +0001209074 00000 n +0001212035 00000 n +0001212161 00000 n +0001212224 00000 n +0001212287 00000 n +0001212350 00000 n +0001212476 00000 n +0001212601 00000 n +0001217069 00000 n +0001216631 00000 n +0001212850 00000 n +0001216754 00000 n +0001216880 00000 n +0001217006 00000 n +0001221368 00000 n +0001220679 00000 n +0001217270 00000 n +0001220802 00000 n +0001220928 00000 n +0001220991 00000 n +0001221054 00000 n +0001221116 00000 n +0001221179 00000 n +0001221305 00000 n +0002025457 00000 n +0002023457 00000 n +0002025291 00000 n +0001225227 00000 n +0001224790 00000 n +0001221540 00000 n +0001224913 00000 n +0001225039 00000 n +0001225164 00000 n +0001228721 00000 n +0001228409 00000 n +0001225413 00000 n +0001228532 00000 n +0001228658 00000 n +0001232161 00000 n +0001231472 00000 n +0001228893 00000 n +0001231595 00000 n +0001231721 00000 n +0001231847 00000 n +0001231972 00000 n +0001232098 00000 n +0002185785 00000 n +0001234841 00000 n +0001234403 00000 n +0001232305 00000 n +0001234526 00000 n +0001234652 00000 n +0001234778 00000 n +0001237558 00000 n +0001236994 00000 n +0001234985 00000 n +0001237117 00000 n +0001237243 00000 n +0001237369 00000 n +0001237495 00000 n +0001239764 00000 n +0001239326 00000 n +0001237674 00000 n +0001239449 00000 n +0001239575 00000 n +0001239701 00000 n +0001242960 00000 n +0001242400 00000 n +0001239894 00000 n +0001242523 00000 n +0001242649 00000 n +0001242774 00000 n +0001242898 00000 n +0001245848 00000 n +0001245286 00000 n +0001243118 00000 n +0001245409 00000 n +0001245535 00000 n +0001245659 00000 n +0001245785 00000 n +0001250001 00000 n +0001249311 00000 n +0001245992 00000 n +0001249434 00000 n +0001249560 00000 n +0001249686 00000 n +0001249812 00000 n +0001249938 00000 n +0002185910 00000 n +0001253183 00000 n +0001252532 00000 n +0001250145 00000 n +0001252868 00000 n +0001252994 00000 n +0001253120 00000 n +0001252676 00000 n +0001259268 00000 n +0001257274 00000 n +0001253299 00000 n +0001258827 00000 n +0001257472 00000 n +0001257665 00000 n +0001258953 00000 n +0001257858 00000 n +0001258064 00000 n +0001258254 00000 n +0001259079 00000 n +0001259205 00000 n +0001258447 00000 n +0001258632 00000 n +0001266411 00000 n +0001263755 00000 n +0001259455 00000 n +0001266096 00000 n +0001266222 00000 n +0001266348 00000 n +0001263989 00000 n +0001264207 00000 n +0001264424 00000 n +0001264641 00000 n +0001264822 00000 n +0001264999 00000 n +0001265166 00000 n +0001265345 00000 n +0001265521 00000 n +0001265706 00000 n +0001265876 00000 n +0001272906 00000 n +0001270594 00000 n +0001266541 00000 n +0001272591 00000 n +0001272717 00000 n +0001270801 00000 n +0001271033 00000 n +0001271265 00000 n +0001271497 00000 n +0001271766 00000 n +0001272843 00000 n +0001272035 00000 n +0001272245 00000 n +0001272417 00000 n +0001279221 00000 n +0001277195 00000 n +0001273022 00000 n +0001278781 00000 n +0001278907 00000 n +0001277393 00000 n +0001277608 00000 n +0001277797 00000 n +0001277981 00000 n +0001279032 00000 n +0001278215 00000 n +0001278411 00000 n +0001279158 00000 n +0001278589 00000 n +0001289088 00000 n +0001283857 00000 n +0001279422 00000 n +0001289025 00000 n +0001284199 00000 n +0001284405 00000 n +0001284611 00000 n +0001284831 00000 n +0001285051 00000 n +0001285257 00000 n +0001285463 00000 n +0001285652 00000 n +0001285842 00000 n +0001286032 00000 n +0001286221 00000 n +0001286411 00000 n +0001286601 00000 n +0001286791 00000 n +0001286984 00000 n +0001287176 00000 n +0001287415 00000 n +0001287655 00000 n +0001287895 00000 n +0001288133 00000 n +0001288373 00000 n +0001288613 00000 n +0001288819 00000 n +0002186035 00000 n +0001294538 00000 n +0001293015 00000 n +0001289218 00000 n +0001294349 00000 n +0001293195 00000 n +0001293425 00000 n +0001293656 00000 n +0001293887 00000 n +0001294118 00000 n +0001294475 00000 n +0001299041 00000 n +0001298136 00000 n +0001294696 00000 n +0001298474 00000 n +0001298600 00000 n +0001298726 00000 n +0001298280 00000 n +0001298852 00000 n +0001298978 00000 n +0001302809 00000 n +0001302372 00000 n +0001299185 00000 n +0001302495 00000 n +0001302621 00000 n +0001302746 00000 n +0001306296 00000 n +0001305858 00000 n +0001302953 00000 n +0001305981 00000 n +0001306107 00000 n +0001306233 00000 n +0001310765 00000 n +0001310201 00000 n +0001306426 00000 n +0001310324 00000 n +0001310450 00000 n +0001310576 00000 n +0001310702 00000 n +0001313886 00000 n +0001312948 00000 n +0001310909 00000 n +0001313071 00000 n +0001313197 00000 n +0001313323 00000 n +0001313448 00000 n +0001313574 00000 n +0001313699 00000 n +0001313825 00000 n +0002186160 00000 n +0001317171 00000 n +0001316733 00000 n +0001314059 00000 n +0001316856 00000 n +0001316982 00000 n +0001317108 00000 n +0001319826 00000 n +0001319514 00000 n +0001317315 00000 n +0001319637 00000 n +0001319763 00000 n +0001321195 00000 n +0001321009 00000 n +0001319970 00000 n +0001321132 00000 n +0001322603 00000 n +0001322417 00000 n +0001321297 00000 n +0001322540 00000 n +0001323875 00000 n +0001323689 00000 n +0001322705 00000 n +0001323812 00000 n +0001325053 00000 n +0001324867 00000 n +0001323977 00000 n +0001324990 00000 n +0002186285 00000 n +0001326633 00000 n +0001326447 00000 n +0001325155 00000 n +0001326570 00000 n +0001330490 00000 n +0001330179 00000 n +0001326735 00000 n +0001330302 00000 n +0001330427 00000 n +0001335647 00000 n +0001335461 00000 n +0001330662 00000 n +0001335584 00000 n +0001341775 00000 n +0001340645 00000 n +0001335833 00000 n +0001340768 00000 n +0001340831 00000 n +0001340894 00000 n +0001340957 00000 n +0001341019 00000 n +0001341082 00000 n +0001341145 00000 n +0001341208 00000 n +0001341271 00000 n +0001341334 00000 n +0001341397 00000 n +0001341460 00000 n +0001341523 00000 n +0001341586 00000 n +0001341649 00000 n +0001341712 00000 n +0001525673 00000 n +0001345669 00000 n +0001345357 00000 n +0001341919 00000 n +0001345480 00000 n +0001345606 00000 n +0001383422 00000 n +0001346407 00000 n +0001345813 00000 n +0001383170 00000 n +0001383233 00000 n +0001383296 00000 n +0001383359 00000 n +0002186410 00000 n +0001382982 00000 n +0001409846 00000 n +0001384180 00000 n +0001383584 00000 n +0001409594 00000 n +0001409657 00000 n +0001409720 00000 n +0001409783 00000 n +0001409406 00000 n +0001449556 00000 n +0001410613 00000 n +0001410008 00000 n +0001449304 00000 n +0001449367 00000 n +0001449430 00000 n +0001449493 00000 n +0001449116 00000 n +0001473183 00000 n +0001450310 00000 n +0001449718 00000 n +0001472930 00000 n +0001472993 00000 n +0001473056 00000 n +0001473119 00000 n +0001472744 00000 n +0001498308 00000 n +0001473937 00000 n +0001473345 00000 n +0001498055 00000 n +0001498118 00000 n +0001498181 00000 n +0001498244 00000 n +0001497867 00000 n +0001523700 00000 n +0001499065 00000 n +0001498470 00000 n +0001523448 00000 n +0001523511 00000 n +0001523574 00000 n +0001523637 00000 n +0001523260 00000 n +0001524813 00000 n +0001524438 00000 n +0001523862 00000 n +0001524561 00000 n +0001524624 00000 n +0001524687 00000 n +0001524750 00000 n +0002186535 00000 n +0001621654 00000 n +0001525550 00000 n +0001524974 00000 n +0001621400 00000 n +0001621463 00000 n +0001621526 00000 n +0001621589 00000 n +0001621212 00000 n +0001625011 00000 n +0001624072 00000 n +0001621816 00000 n +0001624195 00000 n +0001624447 00000 n +0001624572 00000 n +0001624698 00000 n +0001624824 00000 n +0001624950 00000 n +0001629262 00000 n +0001628445 00000 n +0001625127 00000 n +0001628568 00000 n +0001628631 00000 n +0001628694 00000 n +0001628821 00000 n +0001628947 00000 n +0001629073 00000 n +0001629199 00000 n +0001632467 00000 n +0001631302 00000 n +0001629392 00000 n +0001632027 00000 n +0001632153 00000 n +0001631464 00000 n +0001631670 00000 n +0001632279 00000 n +0001631850 00000 n +0001632404 00000 n +0001636238 00000 n +0001635552 00000 n +0001632583 00000 n +0001635675 00000 n +0001635923 00000 n +0001636049 00000 n +0001636175 00000 n +0001640464 00000 n +0001639900 00000 n +0001636354 00000 n +0001640023 00000 n +0001640149 00000 n +0001640275 00000 n +0001640401 00000 n +0002186660 00000 n +0001644884 00000 n +0001644321 00000 n +0001640594 00000 n +0001644444 00000 n +0001644570 00000 n +0001644696 00000 n +0001644822 00000 n +0001649570 00000 n +0001648681 00000 n +0001645000 00000 n +0001649004 00000 n +0001649130 00000 n +0001649256 00000 n +0001649382 00000 n +0001648825 00000 n +0001649508 00000 n +0001654303 00000 n +0001653556 00000 n +0001649686 00000 n +0001653866 00000 n +0001653992 00000 n +0001653700 00000 n +0001654118 00000 n +0001654242 00000 n +0001657253 00000 n +0001656815 00000 n +0001654461 00000 n +0001656938 00000 n +0001657064 00000 n +0001657190 00000 n +0001661666 00000 n +0001660350 00000 n +0001657383 00000 n +0001661226 00000 n +0001660512 00000 n +0001660751 00000 n +0001660990 00000 n +0001661352 00000 n +0001661478 00000 n +0001661603 00000 n +0001664599 00000 n +0001664161 00000 n +0001661782 00000 n +0001664284 00000 n +0001664410 00000 n +0001664473 00000 n +0001664536 00000 n +0002186785 00000 n +0001665908 00000 n +0001665722 00000 n +0001664715 00000 n +0001665845 00000 n +0001667908 00000 n +0001667415 00000 n +0001666010 00000 n +0001667719 00000 n +0001667782 00000 n +0001667845 00000 n +0001667559 00000 n +0001981425 00000 n +0001671319 00000 n +0001670755 00000 n +0001668024 00000 n +0001670878 00000 n +0001670941 00000 n +0001671004 00000 n +0001671130 00000 n +0001671193 00000 n +0001671256 00000 n +0001674036 00000 n +0001673724 00000 n +0001671435 00000 n +0001673847 00000 n +0001673910 00000 n +0001673973 00000 n +0001675222 00000 n +0001675036 00000 n +0001674166 00000 n +0001675159 00000 n +0001678140 00000 n +0001677704 00000 n +0001675324 00000 n +0001677827 00000 n +0001677952 00000 n +0001678077 00000 n +0002186910 00000 n +0001682752 00000 n +0001681089 00000 n +0001678270 00000 n +0001682060 00000 n +0001682312 00000 n +0001682438 00000 n +0001681260 00000 n +0001681458 00000 n +0001681657 00000 n +0001681859 00000 n +0001682563 00000 n +0001682689 00000 n +0001687269 00000 n +0001686509 00000 n +0001682868 00000 n +0001687206 00000 n +0001686671 00000 n +0001686845 00000 n +0001687019 00000 n +0001690748 00000 n +0001690246 00000 n +0001687385 00000 n +0001690559 00000 n +0001690685 00000 n +0001690390 00000 n +0001692264 00000 n +0001692078 00000 n +0001690878 00000 n +0001692201 00000 n +0001695110 00000 n +0001693846 00000 n +0001692366 00000 n +0001694796 00000 n +0001694017 00000 n +0001694208 00000 n +0001694377 00000 n +0001694922 00000 n +0001694586 00000 n +0001695048 00000 n +0001699225 00000 n +0001698663 00000 n +0001695226 00000 n +0001698786 00000 n +0001699038 00000 n +0001699163 00000 n +0002187035 00000 n +0001704424 00000 n +0001703733 00000 n +0001699369 00000 n +0001704109 00000 n +0001703877 00000 n +0001704235 00000 n +0001704361 00000 n +0001709159 00000 n +0001708596 00000 n +0001704582 00000 n +0001708719 00000 n +0001708845 00000 n +0001708971 00000 n +0001709097 00000 n +0001713829 00000 n +0001713265 00000 n +0001709303 00000 n +0001713388 00000 n +0001713451 00000 n +0001713514 00000 n +0001713577 00000 n +0001713640 00000 n +0001713766 00000 n +0001718417 00000 n +0001717350 00000 n +0001714016 00000 n +0001717473 00000 n +0001717599 00000 n +0001717725 00000 n +0001717851 00000 n +0001717977 00000 n +0001718039 00000 n +0001718102 00000 n +0001718165 00000 n +0001718228 00000 n +0001718291 00000 n +0001718354 00000 n +0001721239 00000 n +0001720617 00000 n +0001718533 00000 n +0001720740 00000 n +0001720803 00000 n +0001720866 00000 n +0001720929 00000 n +0001721054 00000 n +0001721176 00000 n +0001724643 00000 n +0001723827 00000 n +0001721369 00000 n +0001723950 00000 n +0001724202 00000 n +0001724328 00000 n +0001724454 00000 n +0001724580 00000 n +0002187160 00000 n +0001728315 00000 n +0001727751 00000 n +0001724802 00000 n +0001727874 00000 n +0001728000 00000 n +0001728126 00000 n +0001728252 00000 n +0001732274 00000 n +0001731774 00000 n +0001728516 00000 n +0001731897 00000 n +0001732023 00000 n +0001732149 00000 n +0001732212 00000 n +0001737345 00000 n +0001736782 00000 n +0001732475 00000 n +0001736905 00000 n +0001736968 00000 n +0001737031 00000 n +0001737094 00000 n +0001737157 00000 n +0001737220 00000 n +0001737282 00000 n +0001742318 00000 n +0001741250 00000 n +0001737503 00000 n +0001741373 00000 n +0001741499 00000 n +0001741625 00000 n +0001741688 00000 n +0001741751 00000 n +0001741814 00000 n +0001741877 00000 n +0001741940 00000 n +0001742003 00000 n +0001742066 00000 n +0001742129 00000 n +0001742192 00000 n +0001742255 00000 n +0001743372 00000 n +0001743186 00000 n +0001742533 00000 n +0001743309 00000 n +0001747854 00000 n +0001746460 00000 n +0001743517 00000 n +0001746583 00000 n +0001746646 00000 n +0001746710 00000 n +0001746773 00000 n +0001746837 00000 n +0001746901 00000 n +0001746965 00000 n +0001747029 00000 n +0001747093 00000 n +0001747157 00000 n +0001747220 00000 n +0001747284 00000 n +0001747348 00000 n +0001747410 00000 n +0001747474 00000 n +0001747538 00000 n +0001747601 00000 n +0001747665 00000 n +0001747792 00000 n +0002187285 00000 n +0001752399 00000 n +0001751395 00000 n +0001748041 00000 n +0001751518 00000 n +0001751644 00000 n +0001751769 00000 n +0001751832 00000 n +0001751895 00000 n +0001751958 00000 n +0001752021 00000 n +0001752084 00000 n +0001752147 00000 n +0001752210 00000 n +0001752336 00000 n +0001756631 00000 n +0001755941 00000 n +0001752586 00000 n +0001756064 00000 n +0001756190 00000 n +0001756316 00000 n +0001756442 00000 n +0001756568 00000 n +0001761092 00000 n +0001760403 00000 n +0001756832 00000 n +0001760526 00000 n +0001760652 00000 n +0001760778 00000 n +0001760904 00000 n +0001761030 00000 n +0001765792 00000 n +0001765354 00000 n +0001761307 00000 n +0001765477 00000 n +0001765540 00000 n +0001765603 00000 n +0001765666 00000 n +0001765729 00000 n +0001769641 00000 n +0001769079 00000 n +0001765922 00000 n +0001769202 00000 n +0001769265 00000 n +0001769328 00000 n +0001769388 00000 n +0001769451 00000 n +0001769578 00000 n +0001773802 00000 n +0001773616 00000 n +0001769842 00000 n +0001773739 00000 n +0002187410 00000 n +0001778096 00000 n +0001777535 00000 n +0001773975 00000 n +0001777658 00000 n +0001777721 00000 n +0001777784 00000 n +0001777907 00000 n +0001778033 00000 n +0001782103 00000 n +0001781666 00000 n +0001778254 00000 n +0001781789 00000 n +0001781915 00000 n +0001782040 00000 n +0001784055 00000 n +0001783869 00000 n +0001782205 00000 n +0001783992 00000 n +0001788011 00000 n +0001787401 00000 n +0001784228 00000 n +0001787696 00000 n +0001787545 00000 n +0001787948 00000 n +0001792347 00000 n +0001791910 00000 n +0001788184 00000 n +0001792033 00000 n +0001792158 00000 n +0001792284 00000 n +0001796668 00000 n +0001796146 00000 n +0001792477 00000 n +0001796479 00000 n +0001796605 00000 n +0001796290 00000 n +0002187535 00000 n +0001801584 00000 n +0001801398 00000 n +0001796812 00000 n +0001801521 00000 n +0001806254 00000 n +0001806068 00000 n +0001801714 00000 n +0001806191 00000 n +0001809298 00000 n +0001808737 00000 n +0001806398 00000 n +0001808860 00000 n +0001808985 00000 n +0001809110 00000 n +0001809236 00000 n +0001811991 00000 n +0001811805 00000 n +0001809428 00000 n +0001811928 00000 n +0001816679 00000 n +0001815837 00000 n +0001812107 00000 n +0001816364 00000 n +0001816490 00000 n +0001815990 00000 n +0001816178 00000 n +0001816616 00000 n +0001821133 00000 n +0001820694 00000 n +0001816866 00000 n +0001820817 00000 n +0001820943 00000 n +0001821006 00000 n +0001821069 00000 n +0002187660 00000 n +0001824696 00000 n +0001823700 00000 n +0001821320 00000 n +0001824382 00000 n +0001823862 00000 n +0001824038 00000 n +0001824209 00000 n +0001824508 00000 n +0001824633 00000 n +0001827216 00000 n +0001826527 00000 n +0001824812 00000 n +0001826650 00000 n +0001826776 00000 n +0001826902 00000 n +0001827028 00000 n +0001827153 00000 n +0001828779 00000 n +0001828593 00000 n +0001827332 00000 n +0001828716 00000 n +0001831932 00000 n +0001831370 00000 n +0001828881 00000 n +0001831493 00000 n +0001831744 00000 n +0001831869 00000 n +0001835872 00000 n +0001835434 00000 n +0001832077 00000 n +0001835557 00000 n +0001835683 00000 n +0001835809 00000 n +0001838745 00000 n +0001838184 00000 n +0001836002 00000 n +0001838307 00000 n +0001838433 00000 n +0001838558 00000 n +0001838682 00000 n +0002187785 00000 n +0001842527 00000 n +0001842215 00000 n +0001838875 00000 n +0001842338 00000 n +0001842464 00000 n +0001846820 00000 n +0001846383 00000 n +0001842643 00000 n +0001846506 00000 n +0001846631 00000 n +0001846757 00000 n +0001848992 00000 n +0001848806 00000 n +0001846978 00000 n +0001848929 00000 n +0001852362 00000 n +0001851801 00000 n +0001849094 00000 n +0001851924 00000 n +0001852050 00000 n +0001852174 00000 n +0001852300 00000 n +0001855966 00000 n +0001855276 00000 n +0001852492 00000 n +0001855399 00000 n +0001855525 00000 n +0001855651 00000 n +0001855777 00000 n +0001855903 00000 n +0001857292 00000 n +0001857106 00000 n +0001856096 00000 n +0001857229 00000 n +0002187910 00000 n +0001861550 00000 n +0001860669 00000 n +0001857394 00000 n +0001860985 00000 n +0001861237 00000 n +0001861363 00000 n +0001860813 00000 n +0001861489 00000 n +0001865061 00000 n +0001864176 00000 n +0001861680 00000 n +0001864747 00000 n +0001864873 00000 n +0001864998 00000 n +0001864329 00000 n +0001864538 00000 n +0001866730 00000 n +0001866166 00000 n +0001865205 00000 n +0001866289 00000 n +0001866541 00000 n +0001866667 00000 n +0001867748 00000 n +0001867310 00000 n +0001866818 00000 n +0001867433 00000 n +0001867685 00000 n +0001868408 00000 n +0001868160 00000 n +0001867836 00000 n +0001868283 00000 n +0001871161 00000 n +0001870238 00000 n +0001868496 00000 n +0001870532 00000 n +0001870595 00000 n +0001870847 00000 n +0001870382 00000 n +0001870973 00000 n +0001871099 00000 n +0002188035 00000 n +0001874682 00000 n +0001874118 00000 n +0001871263 00000 n +0001874241 00000 n +0001874493 00000 n +0001874619 00000 n +0001878924 00000 n +0001878487 00000 n +0001874784 00000 n +0001878610 00000 n +0001878736 00000 n +0001878862 00000 n +0001883349 00000 n +0001882785 00000 n +0001879026 00000 n +0001882908 00000 n +0001883034 00000 n +0001883160 00000 n +0001883286 00000 n +0001888745 00000 n +0001886858 00000 n +0001883493 00000 n +0001886981 00000 n +0001887107 00000 n +0001887170 00000 n +0001887233 00000 n +0001887296 00000 n +0001887359 00000 n +0001887422 00000 n +0001887485 00000 n +0001887548 00000 n +0001887611 00000 n +0001887674 00000 n +0001887736 00000 n +0001887799 00000 n +0001887862 00000 n +0001887925 00000 n +0001887988 00000 n +0001888051 00000 n +0001888114 00000 n +0001888177 00000 n +0001888240 00000 n +0001888303 00000 n +0001888429 00000 n +0001888492 00000 n +0001888555 00000 n +0001888682 00000 n +0001891995 00000 n +0001891556 00000 n +0001888903 00000 n +0001891679 00000 n +0001891742 00000 n +0001891805 00000 n +0001891932 00000 n +0001893456 00000 n +0001893270 00000 n +0001892139 00000 n +0001893393 00000 n +0002188160 00000 n +0001896821 00000 n +0001896258 00000 n +0001893558 00000 n +0001896381 00000 n +0001896632 00000 n +0001896758 00000 n +0001900573 00000 n +0001899822 00000 n +0001896994 00000 n +0001900132 00000 n +0001900258 00000 n +0001900321 00000 n +0001900384 00000 n +0001900447 00000 n +0001900510 00000 n +0001899966 00000 n +0001904948 00000 n +0001904191 00000 n +0001900717 00000 n +0001904507 00000 n +0001904633 00000 n +0001904335 00000 n +0001904759 00000 n +0001904885 00000 n +0001909424 00000 n +0001908608 00000 n +0001905191 00000 n +0001908731 00000 n +0001908857 00000 n +0001908983 00000 n +0001909109 00000 n +0001909235 00000 n +0001909361 00000 n +0001910115 00000 n +0001909867 00000 n +0001909554 00000 n +0001909990 00000 n +0001913326 00000 n +0001912699 00000 n +0001910203 00000 n +0001912822 00000 n +0001912885 00000 n +0001913137 00000 n +0001913263 00000 n +0002188285 00000 n +0001917521 00000 n +0001917020 00000 n +0001913499 00000 n +0001917143 00000 n +0001917269 00000 n +0001917332 00000 n +0001917395 00000 n +0001917458 00000 n +0001921659 00000 n +0001921347 00000 n +0001917708 00000 n +0001921470 00000 n +0001921533 00000 n +0001921596 00000 n +0001926860 00000 n +0001925921 00000 n +0001921860 00000 n +0001926044 00000 n +0001926107 00000 n +0001926170 00000 n +0001926233 00000 n +0001926295 00000 n +0001926358 00000 n +0001926421 00000 n +0001926484 00000 n +0001926547 00000 n +0001926610 00000 n +0001926673 00000 n +0001926736 00000 n +0001926798 00000 n +0001931265 00000 n +0001930594 00000 n +0001927075 00000 n +0001930888 00000 n +0001930951 00000 n +0001931014 00000 n +0001931076 00000 n +0001931202 00000 n +0001930738 00000 n +0001935342 00000 n +0001934413 00000 n +0001931423 00000 n +0001934903 00000 n +0001935155 00000 n +0001934566 00000 n +0001934734 00000 n +0001935280 00000 n +0001940814 00000 n +0001939410 00000 n +0001935444 00000 n +0001940500 00000 n +0001940626 00000 n +0001939590 00000 n +0001939781 00000 n +0001939972 00000 n +0001940751 00000 n +0001940162 00000 n +0001940327 00000 n +0002188410 00000 n +0001944266 00000 n +0001943555 00000 n +0001940958 00000 n +0001944077 00000 n +0001944203 00000 n +0001943708 00000 n +0001943879 00000 n +0001948633 00000 n +0001947404 00000 n +0001944410 00000 n +0001948066 00000 n +0001948318 00000 n +0001947566 00000 n +0001947742 00000 n +0001948444 00000 n +0001947913 00000 n +0001948570 00000 n +0001952756 00000 n +0001952193 00000 n +0001948735 00000 n +0001952316 00000 n +0001952441 00000 n +0001952567 00000 n +0001952693 00000 n +0001953436 00000 n +0001953188 00000 n +0001952886 00000 n +0001953311 00000 n +0001958943 00000 n +0001956639 00000 n +0001953524 00000 n +0001957874 00000 n +0001957937 00000 n +0001956828 00000 n +0001958189 00000 n +0001958315 00000 n +0001956994 00000 n +0001957173 00000 n +0001958441 00000 n +0001958567 00000 n +0001957353 00000 n +0001958693 00000 n +0001957532 00000 n +0001957703 00000 n +0001958756 00000 n +0001958819 00000 n +0001958881 00000 n +0001963697 00000 n +0001962233 00000 n +0001959059 00000 n +0001963131 00000 n +0001963194 00000 n +0001963257 00000 n +0001963383 00000 n +0001962404 00000 n +0001962589 00000 n +0001962776 00000 n +0001962964 00000 n +0001963509 00000 n +0001963635 00000 n +0002188535 00000 n +0001966771 00000 n +0001966207 00000 n +0001963813 00000 n +0001966330 00000 n +0001966456 00000 n +0001966582 00000 n +0001966708 00000 n +0001969975 00000 n +0001969537 00000 n +0001966901 00000 n +0001969660 00000 n +0001969786 00000 n +0001969912 00000 n +0001972717 00000 n +0001972280 00000 n +0001970148 00000 n +0001972403 00000 n +0001972528 00000 n +0001972654 00000 n +0001976746 00000 n +0001975868 00000 n +0001972918 00000 n +0001976179 00000 n +0001976431 00000 n +0001976557 00000 n +0001976012 00000 n +0001976683 00000 n +0001978400 00000 n +0001978088 00000 n +0001976848 00000 n +0001978211 00000 n +0001978337 00000 n +0001981488 00000 n +0001980673 00000 n +0001978516 00000 n +0001980796 00000 n +0001980922 00000 n +0001981048 00000 n +0001981173 00000 n +0001981299 00000 n +0002188660 00000 n +0001986742 00000 n +0001984865 00000 n +0001981590 00000 n +0001986175 00000 n +0001986427 00000 n +0001985054 00000 n +0001985226 00000 n +0001985416 00000 n +0001985601 00000 n +0001985793 00000 n +0001986553 00000 n +0001986679 00000 n +0001985980 00000 n +0001991816 00000 n +0001990382 00000 n +0001986844 00000 n +0001991123 00000 n +0001991249 00000 n +0001990544 00000 n +0001990742 00000 n +0001990934 00000 n +0001991375 00000 n +0001991501 00000 n +0001991627 00000 n +0001991753 00000 n +0001996371 00000 n +0001995366 00000 n +0001991946 00000 n +0001995679 00000 n +0001995805 00000 n +0001995931 00000 n +0001995510 00000 n +0001996056 00000 n +0001996182 00000 n +0001996308 00000 n +0002000429 00000 n +0001999459 00000 n +0001996515 00000 n +0001999989 00000 n +0002000115 00000 n +0002000240 00000 n +0001999612 00000 n +0002000366 00000 n +0001999780 00000 n +0002004316 00000 n +0002003628 00000 n +0002000658 00000 n +0002003751 00000 n +0002004003 00000 n +0002004129 00000 n +0002004255 00000 n +0002008108 00000 n +0002007293 00000 n +0002004418 00000 n +0002007416 00000 n +0002007542 00000 n +0002007667 00000 n +0002007793 00000 n +0002007919 00000 n +0002008045 00000 n +0002188785 00000 n +0002012148 00000 n +0002011090 00000 n +0002008224 00000 n +0002011582 00000 n +0002011708 00000 n +0002011243 00000 n +0002011834 00000 n +0002011425 00000 n +0002011959 00000 n +0002012085 00000 n +0002013190 00000 n +0002012752 00000 n +0002012264 00000 n +0002012875 00000 n +0002013127 00000 n +0002022345 00000 n +0002016120 00000 n +0002013278 00000 n +0002021778 00000 n +0002022030 00000 n +0002016498 00000 n +0002016685 00000 n +0002016876 00000 n +0002017046 00000 n +0002017245 00000 n +0002017440 00000 n +0002017629 00000 n +0002017821 00000 n +0002018016 00000 n +0002018201 00000 n +0002018394 00000 n +0002018589 00000 n +0002018788 00000 n +0002018987 00000 n +0002019171 00000 n +0002019380 00000 n +0002019573 00000 n +0002019766 00000 n +0002019961 00000 n +0002020150 00000 n +0002020359 00000 n +0002020551 00000 n +0002020726 00000 n +0002020936 00000 n +0002022156 00000 n +0002021146 00000 n +0002021356 00000 n +0002021567 00000 n +0002022282 00000 n +0002022461 00000 n +0002025672 00000 n +0002025703 00000 n +0002029132 00000 n +0002029275 00000 n +0002034538 00000 n +0002034729 00000 n +0002038476 00000 n +0002045018 00000 n +0002057209 00000 n +0002057624 00000 n +0002068178 00000 n +0002068428 00000 n +0002089115 00000 n +0002099655 00000 n +0002102152 00000 n +0002102183 00000 n +0002106021 00000 n +0002122614 00000 n +0002123024 00000 n +0002141461 00000 n +0002161275 00000 n +0002165329 00000 n +0002180492 00000 n +0002188892 00000 n +0002189018 00000 n +0002189144 00000 n +0002189270 00000 n +0002189396 00000 n +0002189522 00000 n +0002189648 00000 n +0002189774 00000 n +0002189900 00000 n +0002190026 00000 n +0002190152 00000 n +0002190260 00000 n +0002190387 00000 n +0002190505 00000 n +0002190579 00000 n +0002261717 00000 n +0002310537 00000 n +0002310578 00000 n +0002310618 00000 n +0002310850 00000 n trailer -<<44d39a97f681ab9eaa30845c7407c375>]>> +<< +/Size 6739 +/Root 6737 0 R +/Info 6738 0 R +>> startxref -495224 +2311006 %%EOF diff --git a/docs/docbook/Makefile.in b/docs/docbook/Makefile.in index 472faffab5..23f9461ee4 100644 --- a/docs/docbook/Makefile.in +++ b/docs/docbook/Makefile.in @@ -224,7 +224,7 @@ $(MANDIR)/%: $(MANPROJDOC)/%.xml clean: @rm -f $(MANPAGES) $(MANPAGES_HTML) $(HTMLDIR)/*.html $(HTMLDIR)/*.css $(TXTDIR)/*.txt $(PSDIR)/*.ps $(PDFDIR)/*.pdf - @rm -f $(MANPROJDOC)/smb.conf.5.xml $(SMBDOTCONFDOC)/parameters.*.xml + @rm -f $(MANPROJDOC)/smb.conf.5.xml $(SMBDOTCONFDOC)/parameters.*.xml $(DVIDIR)/*.dvi @rm -f samba-doc.* dev-doc.* $(PROJDOC)/attributions.xml @rm -f $(IMAGEPROJDIR)/*.eps diff --git a/docs/docbook/docbook.txt b/docs/docbook/docbook.txt index 1d2f5ffbdf..dfce2fd61b 100644 --- a/docs/docbook/docbook.txt +++ b/docs/docbook/docbook.txt @@ -1,72 +1,74 @@ !== -!== docbook.txt for Samba HEAD +!== docbook.txt for Samba 3.0 !== !== Author: David Bannon, D.Bannon@latrobe.edu.au November, 2000 !== Updates: Gerald (Jerry) Carter, jerry@samba.org, Feb. 2001 !== Updates: Jelmer Vernooij, jelmer@samba.org, Aug, 2002 +!== Updates: Jelmer Vernooij, jelmer@samba.org, Jun, 2003 What are DocBook documents doing in the Samba Distribution ? ----------------------------------------------------------- -We are planning to convert all of the samba docs to SGML/DocBook V4.1 +We have converted all samba docs to XML/DocBook V4.2 in order to make them easier to maintain and produce a nicer looking product. This short note (strange isn't it how it always starts out as a short note -and becomes a long one ?) will explain very briefly how and why we are -doing this. +and becomes a long one ?) will explain very briefly how and why we have +done this. The format ---------- +If you are new to xml, regard an xml file as 'source code'. You don't +read it directly, but use it to create other formats (like the txt and html +included in ../txtdocs and ../htmldocs). -If you are new to sgml, regard an sgml file as 'source code'. You don't -read it directly, use it to create other formats (like the txt and html -included in ../txt and ../html). - -Docbook is a particular SGML style, particularly suited to producing -technical manuals. In the two documents I have produced so far I have used -DocBook 4.1, it seems that products like RedHat Linux is still include only -version 3.1, the differences are minor. The Linux Documentation Project is -using a modified version of 3.1 but are really geared up to make multi -paged documents, something we want to avoid for logistic reasons. +Docbook is a particular XML style, particularly suited to producing +technical manuals. For more information on DocBook tags and format, see "DocBook: The Definitive Guide" by Walsh and Muellner, (c) O'Reilly Publishing. -This book covers DocBook V3.1 and is available on-line +This book covers DocBook V4.2 and is available on-line at http://www.docbook.org/ The Output ---------- - -The current Samba CVS tree contains the SGML/DocBook source files as well +The current Samba CVS tree contains the XML/DocBook source files as well as the following autogenerated formats: * man pages * HTML - * ASCII text (where appropriate) * PDF +The following formats are not available in CVS but can be generated by +the build scripts: + + * PostScript + * DVI + * LaTeX + * ASCII text The Tools --------- To generate the docs, you need to have the following packages installed: -* docbook-utils -* pdflatex + * docbook-utils + * xsltproc + * pngtopnm and pnmtops (from the netpbm utilities) -This directory now contains a ./configure script and Makefile to -support the automated building of man pages (including HTML versions), and -the building of the Samba-HOWTO-Collection (HTML,PDF versions). +For generating PDF (thru LaTeX): + * pdflatex -In order to be able to build some other (more rarely used) formats, you need: +For generating PostScript (thru LaTeX): + * latex + * dvips -- PostScript: - * LaTeX - * dvips -- Text - * xmlto +For generating ASCII: + * xmlto -Another good tool is 'xmllint' that can be used to check the syntax of -XML files. +This directory now contains a ./configure script and Makefile to +support the automated building of man pages (including HTML versions), and +the building of the Samba-HOWTO-Collection and the +Samba Developers Guide (HTML,DVI,TeX,PDF,PS,Text versions). diff --git a/docs/docbook/projdoc/CUPS-printing.xml b/docs/docbook/projdoc/CUPS-printing.xml index 4d0adca6ac..a51cc384be 100644 --- a/docs/docbook/projdoc/CUPS-printing.xml +++ b/docs/docbook/projdoc/CUPS-printing.xml @@ -3850,7 +3850,7 @@ An alternative command could be this: flags:[0x800000] name:[\\transmeta\ir85wm] description:[\\transmeta\ir85wm,ir85wm,DPD] - comment:[CUPS PostScript-Treiber für WinNT/2K/XP] + comment:[CUPS PostScript-Treiber for WinNT/2K/XP] @@ -4496,7 +4496,7 @@ data should look like and which printer commands to embed into the data stream. - + You need: @@ -4524,7 +4524,6 @@ the selected "driver" for your model (as shown by "gs produced for cupsomatic don't work with foomatic-rip). - diff --git a/docs/docbook/xslt/db2latex/docbook.xsl b/docs/docbook/xslt/db2latex/docbook.xsl index 586421764a..56e000cd02 100644 --- a/docs/docbook/xslt/db2latex/docbook.xsl +++ b/docs/docbook/xslt/db2latex/docbook.xsl @@ -101,9 +101,6 @@ XSLT stylesheets DocBook - LaTeX 2e Reqs: LaTeX 2e installation common packages ################################################################################ - RELEASE : - VERSION : - TAG : WWW : http://db2latex.sourceforge.net SUMMARY : http://www.sourceforge.net/projects/db2latex AUTHOR : Ramon Casellas casellas@infres.enst.fr diff --git a/docs/docbook/xslt/generate-attributions.xsl b/docs/docbook/xslt/generate-attributions.xsl index 87c1c5ad6c..3ea510c541 100644 --- a/docs/docbook/xslt/generate-attributions.xsl +++ b/docs/docbook/xslt/generate-attributions.xsl @@ -45,6 +45,7 @@ < + mailto: diff --git a/docs/faq/samba-faq.html b/docs/faq/samba-faq.html index ec46e078a3..47f9a9b7ba 100644 --- a/docs/faq/samba-faq.html +++ b/docs/faq/samba-faq.html @@ -1,350 +1,10 @@ - -Samba FAQ

Dedication

This is the Frequently Asked Questions (FAQ) document for +Samba FAQ

Samba FAQ
Next

Samba FAQ

Samba Team

October 2002

Dedication

+This is the Frequently Asked Questions (FAQ) document for Samba, the free and very popular SMB server product. An SMB server allows file and printer connections from clients such as Windows, OS/2, Linux and others. Current to version 3.0. Please send any corrections to the samba documentation mailinglist at -samba-doc@samba.org. +samba-doc@samba.org. This FAQ was based on the old Samba FAQ by Dan Shearer and Paul Blackman, -and the old samba text documents which were mostly written by John Terpstra.

Table of Contents
1. General Information
1.1. Where can I get it?
1.2. What do the version numbers mean?
1.3. What platforms are supported?
1.4. How do I subscribe to the Samba Mailing Lists?
1.5. Pizza supply details
2. Compiling and installing Samba on a Unix host
2.1. I can't see the Samba server in any browse lists!
2.2. Some files that I KNOW are on the server doesn't show up when I view the files from my client!
2.3. Some files on the server show up with really wierd filenames when I view the files from my client!
2.4. My client reports "cannot locate specified computer" or similar
2.5. My client reports "cannot locate specified share name" or similar
2.6. Printing doesn't work
2.7. My client reports "This server is not configured to list shared resources"
2.8. Log message "you appear to have a trapdoor uid system"
2.9. Why are my file's timestamps off by an hour, or by a few hours?
2.10. How do I set the printer driver name correctly?
3. Configuration problems
3.1. I have set 'force user' and samba still makes 'root' the owner of all the files I touch!
4. Specific client application problems
4.1. MS Office Setup reports "Cannot change properties of '\MSOFFICE\SETUP.INI'"
4.2. How to use a Samba share as an administrative share for MS Office, etc.
4.3. Microsoft Access database opening errors
5. Common errors
5.1. Not listening for calling name
5.2. System Error 1240
5.3. smbclient ignores -N !
5.4. The data on the CD-Drive I've shared seems to be corrupted!
5.5. Why can users access home directories of other users?
5.6. Until a few minutes after samba has started, clients get the error "Domain Controller Unavailable"
5.7. I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs
6. Features
6.1. How can I prevent my samba server from being used to distribute the Nimda worm?
6.2. How can I use samba as a fax server?
6.2.1. Tools for printing faxes
6.2.2. Making the fax-server
6.2.3. Installing the client drivers
6.2.4. Example smb.conf
6.3. Samba doesn't work well together with DHCP!
6.4. How can I assign NetBIOS names to clients with DHCP?
6.5. How do I convert between unix and dos text formats?
6.6. Does samba have wins replication support?
  Next
  General Information
\ No newline at end of file +and the old samba text documents which were mostly written by John Terpstra. +

Table of Contents

1. General Information
Where can I get it?
What do the version numbers mean?
What platforms are supported?
How do I subscribe to the Samba Mailing Lists?
2. Compiling and installing Samba on a Unix host
My client reports "cannot locate specified share name" or similar
Why are my file's timestamps off by an hour, or by a few hours?
3. Specific client application problems
MS Office Setup reports "Cannot change properties of '\\MSOFFICE\\SETUP.INI'"
How to use a Samba share as an administrative share for MS Office, etc.
Microsoft Access database opening errors
4. Common errors
Not listening for calling name
System Error 1240
smbclient ignores -N !
The data on the CD-Drive I've shared seems to be corrupted!
5. Features
How can I use samba as a fax server?
Tools for printing faxes
Making the fax-server
Installing the client drivers
Example smb.conf
Samba doesn't work well together with DHCP!
How can I assign NetBIOS names to clients with DHCP?
How do I convert between unix and dos text formats?
Does samba have wins replication support?
Next
Chapter1.General Information
diff --git a/docs/htmldocs/Samba-Developers-Guide.html b/docs/htmldocs/Samba-Developers-Guide.html index b90d99bf66..86de03d627 100644 --- a/docs/htmldocs/Samba-Developers-Guide.html +++ b/docs/htmldocs/Samba-Developers-Guide.html @@ -1,1091 +1,193 @@ - -SAMBA Developers Guide

SAMBA Developers Guide

SAMBA Team

Abstract

Last Update : Mon Sep 30 15:23:53 CDT 2002

This book is a collection of documents that might be useful for +SAMBA Developers Guidehttp://devel.samba.org/. -Please send updates to jelmer@samba.org.

This documentation is distributed under the GNU General Public License (GPL) +can be found at http://devel.samba.org/. +Please send updates to Jelmer Vernooij. + +This documentation is distributed under the GNU General Public License (GPL) version 2. A copy of the license is included with the Samba source -distribution. A copy can be found on-line at http://www.fsf.org/licenses/gpl.txt

Table of Contents
1. Definition of NetBIOS Protocol and Name Resolution Modes
1.1. NETBIOS
1.2. BROADCAST NetBIOS
1.3. NBNS NetBIOS
2. Samba Architecture
2.1. Introduction
2.2. Multithreading and Samba
2.3. Threading smbd
2.4. Threading nmbd
2.5. nbmd Design
3. The samba DEBUG system
3.1. New Output Syntax
3.2. The DEBUG() Macro
3.3. The DEBUGADD() Macro
3.4. The DEBUGLVL() Macro
3.5. New Functions
3.5.1. dbgtext()
3.5.2. dbghdr()
3.5.3. format_debug_text()
4. Coding Suggestions
5. Samba Internals
5.1. Character Handling
5.2. The new functions
5.3. Macros in byteorder.h
5.3.1. CVAL(buf,pos)
5.3.2. PVAL(buf,pos)
5.3.3. SCVAL(buf,pos,val)
5.3.4. SVAL(buf,pos)
5.3.5. IVAL(buf,pos)
5.3.6. SVALS(buf,pos)
5.3.7. IVALS(buf,pos)
5.3.8. SSVAL(buf,pos,val)
5.3.9. SIVAL(buf,pos,val)
5.3.10. SSVALS(buf,pos,val)
5.3.11. SIVALS(buf,pos,val)
5.3.12. RSVAL(buf,pos)
5.3.13. RIVAL(buf,pos)
5.3.14. RSSVAL(buf,pos,val)
5.3.15. RSIVAL(buf,pos,val)
5.4. LAN Manager Samba API
5.4.1. Parameters
5.4.2. Return value
5.5. Code character table
6. The smb.conf file
6.1. Lexical Analysis
6.1.1. Handling of Whitespace
6.1.2. Handling of Line Continuation
6.1.3. Line Continuation Quirks
6.2. Syntax
6.2.1. About params.c
7. NetBIOS in a Unix World
7.1. Introduction
7.2. Usernames
7.3. File Ownership
7.4. Passwords
7.5. Locking
7.6. Deny Modes
7.7. Trapdoor UIDs
7.8. Port numbers
7.9. Protocol Complexity
8. Tracing samba system calls
9. NT Domain RPC's
9.1. Introduction
9.1.1. Sources
9.1.2. Credits
9.2. Notes and Structures
9.2.1. Notes
9.2.2. Enumerations
9.2.3. Structures
9.3. MSRPC over Transact Named Pipe
9.3.1. MSRPC Pipes
9.3.2. Header
9.3.3. Tail
9.3.4. RPC Bind / Bind Ack
9.3.5. NTLSA Transact Named Pipe
9.3.6. LSA Open Policy
9.3.7. LSA Query Info Policy
9.3.8. LSA Enumerate Trusted Domains
9.3.9. LSA Open Secret
9.3.10. LSA Close
9.3.11. LSA Lookup SIDS
9.3.12. LSA Lookup Names
9.4. NETLOGON rpc Transact Named Pipe
9.4.1. LSA Request Challenge
9.4.2. LSA Authenticate 2
9.4.3. LSA Server Password Set
9.4.4. LSA SAM Logon
9.4.5. LSA SAM Logoff
9.5. \\MAILSLOT\NET\NTLOGON
9.5.1. Query for PDC
9.5.2. SAM Logon
9.6. SRVSVC Transact Named Pipe
9.6.1. Net Share Enum
9.6.2. Net Server Get Info
9.7. Cryptographic side of NT Domain Authentication
9.7.1. Definitions
9.7.2. Protocol
9.7.3. Comments
9.8. SIDs and RIDs
9.8.1. Well-known SIDs
9.8.2. Well-known RIDS
10. Samba Printing Internals
10.1. Abstract
10.2. Printing Interface to Various Back ends
10.3. Print Queue TDB's
10.4. ChangeID & Client Caching of Printer Information
10.5. Windows NT/2K Printer Change Notify
11. Samba WINS Internals
11.1. WINS Failover
12. The Upcoming SAM System
12.1. Security in the 'new SAM'
12.2. Standalone from UNIX
12.3. Handles and Races in the new SAM
12.4. Layers
12.4.1. Application
12.4.2. SAM Interface
12.4.3. SAM Modules
12.5. SAM Modules
12.5.1. Special Module: sam_passdb
12.5.2. sam_ads
12.6. Memory Management
12.7. Testing
13. LanMan and NT Password Encryption
13.1. Introduction
13.2. How does it work?
13.3. The smbpasswd file

Chapter 1. Definition of NetBIOS Protocol and Name Resolution Modes

1.1. NETBIOS

NetBIOS runs over the following tranports: TCP/IP; NetBEUI and IPX/SPX. +distribution. A copy can be found on-line at http://www.fsf.org/licenses/gpl.txt +">

SAMBA Developers Guide

SAMBA Team

Attributions. +

Definition of NetBIOS Protocol and Name Resolution Modes

  • Luke Leighton

Samba Architecture

  • Dan Shearer

The samba DEBUG system

  • Chris Hertel

Coding Suggestions

  • Steve French

  • Simo Sorce

  • Andrew Bartlett

  • Tim Potter

  • Martin Pool

Samba Internals
The smb.conf file

  • Chris Hertel

NetBIOS in a Unix World

  • Andrew Tridgell

Tracing samba system calls

  • Andrew Tridgell

NT Domain RPC's
Samba Printing Internals

  • Gerald Carter

Samba WINS Internals

  • Gerald Carter

The Upcoming SAM System

  • Andrew Bartlett

LanMan and NT Password Encryption
Modules
RPC Pluggable Modules
VFS Modules
Notes to packagers

  • Jelmer Vernooij

Contributing code

+ +

Abstract

+Last Update : Fri Jun 6 00:45:54 CEST 2003 +

+This book is a collection of documents that might be useful for +people developing samba or those interested in doing so. +It's nothing more than a collection of documents written by samba developers about +the internals of various parts of samba and the SMB protocol. It's still incomplete. +The most recent version of this document +can be found at http://devel.samba.org/. +Please send updates to Jelmer Vernooij. +

+This documentation is distributed under the GNU General Public License (GPL) +version 2. A copy of the license is included with the Samba source +distribution. A copy can be found on-line at http://www.fsf.org/licenses/gpl.txt +

Table of Contents

1. Definition of NetBIOS Protocol and Name Resolution Modes
NETBIOS
BROADCAST NetBIOS
NBNS NetBIOS
2. Samba Architecture
Introduction
Multithreading and Samba
Threading smbd
Threading nmbd
nbmd Design
3. The samba DEBUG system
New Output Syntax
The DEBUG() Macro
The DEBUGADD() Macro
The DEBUGLVL() Macro
New Functions
dbgtext()
dbghdr()
format_debug_text()
4. Coding Suggestions
5. Samba Internals
Character Handling
The new functions
Macros in byteorder.h
CVAL(buf,pos)
PVAL(buf,pos)
SCVAL(buf,pos,val)
SVAL(buf,pos)
IVAL(buf,pos)
SVALS(buf,pos)
IVALS(buf,pos)
SSVAL(buf,pos,val)
SIVAL(buf,pos,val)
SSVALS(buf,pos,val)
SIVALS(buf,pos,val)
RSVAL(buf,pos)
RIVAL(buf,pos)
RSSVAL(buf,pos,val)
RSIVAL(buf,pos,val)
LAN Manager Samba API
Parameters
Return value
Code character table
6. The smb.conf file
Lexical Analysis
Handling of Whitespace
Handling of Line Continuation
Line Continuation Quirks
Syntax
About params.c
7. NetBIOS in a Unix World
Introduction
Usernames
File Ownership
Passwords
Locking
Deny Modes
Trapdoor UIDs
Port numbers
Protocol Complexity
8. Tracing samba system calls
9. NT Domain RPC's
Introduction
Sources
Credits
Notes and Structures
Notes
Enumerations
Structures
MSRPC over Transact Named Pipe
MSRPC Pipes
Header
Tail
RPC Bind / Bind Ack
NTLSA Transact Named Pipe
LSA Open Policy
LSA Query Info Policy
LSA Enumerate Trusted Domains
LSA Open Secret
LSA Close
LSA Lookup SIDS
LSA Lookup Names
NETLOGON rpc Transact Named Pipe
LSA Request Challenge
LSA Authenticate 2
LSA Server Password Set
LSA SAM Logon
LSA SAM Logoff
\\MAILSLOT\NET\NTLOGON
Query for PDC
SAM Logon
SRVSVC Transact Named Pipe
Net Share Enum
Net Server Get Info
Cryptographic side of NT Domain Authentication
Definitions
Protocol
Comments
SIDs and RIDs
Well-known SIDs
Well-known RIDS
10. Samba Printing Internals
Abstract
+Printing Interface to Various Back ends +
+Print Queue TDB's +
+ChangeID and Client Caching of Printer Information +
+Windows NT/2K Printer Change Notify +
11. Samba WINS Internals
WINS Failover
12. The Upcoming SAM System
Security in the 'new SAM'
Standalone from UNIX
Handles and Races in the new SAM
Layers
Application
SAM Interface
SAM Modules
SAM Modules
Special Module: sam_passdb
sam_ads
Memory Management
Testing
13. LanMan and NT Password Encryption
Introduction
How does it work?
The smbpasswd file
14. Modules
Advantages
Loading modules
Static modules
Shared modules
Writing modules
Static/Shared selection in configure.in
15. RPC Pluggable Modules
About
General Overview
16. VFS Modules
The Samba (Posix) VFS layer
The general interface
Possible VFS operation layers
The Interaction between the Samba VFS subsystem and the modules
Initialization and registration
How the Modules handle per connection data
Upgrading to the New VFS Interface
Upgrading from 2.2.* and 3.0aplha modules
Some Notes
Implement TRANSPARENT functions
Implement OPAQUE functions
17. Notes to packagers
Versioning
Modules
18. Contributing code

Chapter1.Definition of NetBIOS Protocol and Name Resolution Modes

Luke Leighton

12 June 1997

Table of Contents

NETBIOS
BROADCAST NetBIOS
NBNS NetBIOS

NETBIOS

+NetBIOS runs over the following tranports: TCP/IP; NetBEUI and IPX/SPX. Samba only uses NetBIOS over TCP/IP. For details on the TCP/IP NetBIOS Session Service NetBIOS Datagram Service, and NetBIOS Names, see -rfc1001.txt and rfc1002.txt.

+rfc1001.txt and rfc1002.txt. +

NetBEUI is a raw NetBIOS frame protocol implementation that allows NetBIOS datagrams to be sent out over the 'wire' embedded within LLC frames. NetBEUI is not required when using NetBIOS over TCP/IP protocols and it -is preferable NOT to install NetBEUI if it can be avoided.

+is preferable NOT to install NetBEUI if it can be avoided. +

IPX/SPX is also not required when using NetBIOS over TCP/IP, and it is preferable NOT to install the IPX/SPX transport unless you are using Novell servers. At the very least, it is recommended that you do not install -'NetBIOS over IPX/SPX'.

[When installing Windows 95, you will find that NetBEUI and IPX/SPX are +'NetBIOS over IPX/SPX'. +

+[When installing Windows 95, you will find that NetBEUI and IPX/SPX are installed as the default protocols. This is because they are the simplest -to manage: no Windows 95 user-configuration is required].

+to manage: no Windows 95 user-configuration is required]. +

NetBIOS applications (such as samba) offer their services (for example, SMB file and print sharing) on a NetBIOS name. They must claim this name on the network before doing so. The NetBIOS session service will then accept connections on the application's behalf (on the NetBIOS name claimed by the application). A NetBIOS session between the application -and the client can then commence.

+and the client can then commence. +

NetBIOS names consist of 15 characters plus a 'type' character. This is similar, in concept, to an IP address and a TCP port number, respectively. A NetBIOS-aware application on a host will offer different services under different NetBIOS name types, just as a host will offer different TCP/IP -services on different port numbers.

+services on different port numbers. +

NetBIOS names must be claimed on a network, and must be defended. The use of NetBIOS names is most suitable on a single subnet; a Local Area Network -or a Wide Area Network.

+or a Wide Area Network. +

NetBIOS names are either UNIQUE or GROUP. Only one application can claim a -UNIQUE NetBIOS name on a network.

There are two kinds of NetBIOS Name resolution: Broadcast and Point-to-Point.

1.2. BROADCAST NetBIOS

+UNIQUE NetBIOS name on a network. +

+There are two kinds of NetBIOS Name resolution: Broadcast and Point-to-Point. +

BROADCAST NetBIOS

Clients can claim names, and therefore offer services on successfully claimed names, on their broadcast-isolated subnet. One way to get NetBIOS services (such as browsing: see ftp.microsoft.com/drg/developr/CIFS/browdiff.txt; and SMB file/print sharing: see cifs4.txt) working on a LAN or WAN is to make -your routers forward all broadcast packets from TCP/IP ports 137, 138 and 139.

+your routers forward all broadcast packets from TCP/IP ports 137, 138 and 139. +

This, however, is not recommended. If you have a large LAN or WAN, you will find that some of your hosts spend 95 percent of their time dealing with broadcast traffic. [If you have IPX/SPX on your LAN or WAN, you will find that this is already happening: a packet analyzer will show, roughly -every twelve minutes, great swathes of broadcast traffic!].

1.3. NBNS NetBIOS

rfc1001.txt describes, amongst other things, the implementation and use +every twelve minutes, great swathes of broadcast traffic!]. +

NBNS NetBIOS

+rfc1001.txt describes, amongst other things, the implementation and use of, a 'NetBIOS Name Service'. NT/AS offers 'Windows Internet Name Service' which is fully rfc1001/2 compliant, but has had to take specific action with certain NetBIOS names in order to make it useful. (for example, it -deals with the registration of <1c> <1d> <1e> names all in different ways. +deals with the registration of <1c> <1d> <1e> names all in different ways. I recommend the reading of the Microsoft WINS Server Help files for full -details).

+details). +

The use of a WINS server cuts down on broadcast network traffic for NetBIOS name resolution. It has the effect of pulling all the broadcast isolated subnets together into a single NetBIOS scope, across your LAN -or WAN, while avoiding the use of TCP/IP broadcast packets.

When you have a WINS server on your LAN, WINS clients will be able to +or WAN, while avoiding the use of TCP/IP broadcast packets. +

+When you have a WINS server on your LAN, WINS clients will be able to contact the WINS server to resolve NetBIOS names. Note that only those WINS clients that have registered with the same WINS server will be visible. The WINS server _can_ have static NetBIOS entries added to its database (usually for security reasons you might want to consider putting your domain controllers or other important servers as static entries, but you should not rely on this as your sole means of security), but for -the most part, NetBIOS names are registered dynamically.

This provides some confusion for lots of people, and is worth mentioning +the most part, NetBIOS names are registered dynamically. +

+This provides some confusion for lots of people, and is worth mentioning here: a Browse Server is NOT a WINS Server, even if these services are implemented in the same application. A Browse Server _needs_ a WINS server -because a Browse Server is a WINS client, which is _not_ the same thing].

Clients can claim names, and therefore offer services on successfully claimed +because a Browse Server is a WINS client, which is _not_ the same thing]. +

+Clients can claim names, and therefore offer services on successfully claimed names, on their broadcast-isolated subnet. One way to get NetBIOS services (such as browsing: see ftp.microsoft.com/drg/developr/CIFS/browdiff.txt; and SMB file/print sharing: see cifs6.txt) working on a LAN or WAN is to make your routers forward all broadcast packets from TCP/IP ports 137, 138 and 139. You will find, however, if you do this on a large LAN or a WAN, that your network is completely swamped by NetBIOS and browsing packets, which is why -WINS was developed to minimise the necessity of broadcast traffic.

+WINS was developed to minimise the necessity of broadcast traffic. +

WINS Clients therefore claim names from the WINS server. If the WINS server allows them to register a name, the client's NetBIOS session service can then offer services on this name. Other WINS clients will then -contact the WINS server to resolve a NetBIOS name.

Chapter 2. Samba Architecture

2.1. Introduction

This document gives a general overview of how Samba works +contact the WINS server to resolve a NetBIOS name. +

Chapter2.Samba Architecture

Dan Shearer

November 1997

Table of Contents

Introduction
Multithreading and Samba
Threading smbd
Threading nmbd
nbmd Design

Introduction

+This document gives a general overview of how Samba works internally. The Samba Team has tried to come up with a model which is the best possible compromise between elegance, portability, security and the constraints imposed by the very messy SMB and CIFS -protocol.

It also tries to answer some of the frequently asked questions such as:

  1. Is Samba secure when running on Unix? The xyz platform? - What about the root priveliges issue?

  2. Pros and cons of multithreading in various parts of Samba

  3. Why not have a separate process for name resolution, WINS, and browsing?

2.2. Multithreading and Samba

People sometimes tout threads as a uniformly good thing. They are very +protocol. +

+It also tries to answer some of the frequently asked questions such as: +

  1. + Is Samba secure when running on Unix? The xyz platform? + What about the root priveliges issue? +

  2. Pros and cons of multithreading in various parts of Samba

  3. Why not have a separate process for name resolution, WINS, and browsing?

Multithreading and Samba

+People sometimes tout threads as a uniformly good thing. They are very nice in their place but are quite inappropriate for smbd. nmbd is -another matter, and multi-threading it would be very nice.

The short version is that smbd is not multithreaded, and alternative +another matter, and multi-threading it would be very nice. +

+The short version is that smbd is not multithreaded, and alternative servers that take this approach under Unix (such as Syntax, at the time of writing) suffer tremendous performance penalties and are less robust. nmbd is not threaded either, but this is because it is not possible to do it while keeping code consistent and portable across 35 -or more platforms. (This drawback also applies to threading smbd.)

The longer versions is that there are very good reasons for not making +or more platforms. (This drawback also applies to threading smbd.) +

+The longer versions is that there are very good reasons for not making smbd multi-threaded. Multi-threading would actually make Samba much slower, less scalable, less portable and much less robust. The fact that we use a separate process for each connection is one of Samba's -biggest advantages.

2.3. Threading smbd

A few problems that would arise from a threaded smbd are:

  1. It's not only to create threads instead of processes, but you +biggest advantages. +

Threading smbd

+A few problems that would arise from a threaded smbd are: +

  1. + It's not only to create threads instead of processes, but you must care about all variables if they have to be thread specific - (currently they would be global).

  2. if one thread dies (eg. a seg fault) then all threads die. We can - immediately throw robustness out the window.

  3. many of the system calls we make are blocking. Non-blocking + (currently they would be global). +

  4. + if one thread dies (eg. a seg fault) then all threads die. We can + immediately throw robustness out the window. +

  5. + many of the system calls we make are blocking. Non-blocking equivalents of many calls are either not available or are awkward (and slow) to use. So while we block in one thread all clients are waiting. Imagine if one share is a slow NFS filesystem and the others - are fast, we will end up slowing all clients to the speed of NFS.

  6. you can't run as a different uid in different threads. This means + are fast, we will end up slowing all clients to the speed of NFS. +

  7. + you can't run as a different uid in different threads. This means we would have to switch uid/gid on _every_ SMB packet. It would be - horrendously slow.

  8. the per process file descriptor limit would mean that we could only - support a limited number of clients.

  9. we couldn't use the system locking calls as the locking context of - fcntl() is a process, not a thread.

2.4. Threading nmbd

This would be ideal, but gets sunk by portability requirements.

Andrew tried to write a test threads library for nmbd that used only + horrendously slow. +

  • + the per process file descriptor limit would mean that we could only + support a limited number of clients. +

  • + we couldn't use the system locking calls as the locking context of + fcntl() is a process, not a thread. +

    • Threading nmbd

    +This would be ideal, but gets sunk by portability requirements. +

    +Andrew tried to write a test threads library for nmbd that used only ansi-C constructs (using setjmp and longjmp). Unfortunately some OSes defeat this by restricting longjmp to calling addresses that are shallower than the current address on the stack (apparently AIX does @@ -1095,31 +197,22 @@ and without threads, and as the real aim of threads is to make the code clearer we would not have gained anything. (it is a myth that threads make things faster. threading is like recursion, it can make things clear but the same thing can always be done faster by some -other method)

    Chris tried to spec out a general design that would abstract threading +other method) +

    +Chris tried to spec out a general design that would abstract threading vs separate processes (vs other methods?) and make them accessible through some general API. This doesn't work because of the data sharing requirements of the protocol (packets in the future depending on packets now, etc.) At least, the code would work but would be very -clumsy, and besides the fork() type model would never work on Unix. (Is there an OS that it would work on, for nmbd?)

    A fork() is cheap, but not nearly cheap enough to do on every UDP +clumsy, and besides the fork() type model would never work on Unix. (Is there an OS that it would work on, for nmbd?) +

    +A fork() is cheap, but not nearly cheap enough to do on every UDP packet that arrives. Having a pool of processes is possible but is nasty to program cleanly due to the enormous amount of shared data (in complex structures) between the processes. We can't rely on each -platform having a shared memory system.

    2.5. nbmd Design

    Originally Andrew used recursion to simulate a multi-threaded +platform having a shared memory system. +

    nbmd Design

    +Originally Andrew used recursion to simulate a multi-threaded environment, which use the stack enormously and made for really confusing debugging sessions. Luke Leighton rewrote it to use a queuing system that keeps state information on each packet. The @@ -1131,37 +224,18 @@ and a pointer to a user-defined memory block. This suddenly made things much simpler: large numbers of functions could be made static, and modularised. This is the same principle as used in NT's kernel, and achieves the same effect as threads, but in -a single process.

    Then Jeremy rewrote nmbd. The packet data in nmbd isn't what's on the +a single process. +

    +Then Jeremy rewrote nmbd. The packet data in nmbd isn't what's on the wire. It's a nice format that is very amenable to processing but still -keeps the idea of a distinct packet. See "struct packet_struct" in +keeps the idea of a distinct packet. See "struct packet_struct" in nameserv.h. It has all the detail but none of the on-the-wire mess. This makes it ideal for using in disk or memory-based databases -for browsing and WINS support.

    Chapter 3. The samba DEBUG system

    3.1. New Output Syntax

    The syntax of a debugging log file is represented as:

      >debugfile< :== { >debugmsg< }
+for browsing and WINS support. 
+

    Chapter3.The samba DEBUG system

    Chris Hertel

    July 1998

    Table of Contents

    New Output Syntax
    The DEBUG() Macro
    The DEBUGADD() Macro
    The DEBUGLVL() Macro
    New Functions
    dbgtext()
    dbghdr()
    format_debug_text()

    New Output Syntax

    + The syntax of a debugging log file is represented as: +

    +  >debugfile< :== { >debugmsg< }
 
   >debugmsg<  :== >debughdr< '\n' >debugtext<
 
@@ -1169,323 +243,178 @@ CLASS="PROGRAMLISTING"
 
   >debugtext< :== { >debugline< }
 
-  >debugline< :== TEXT '\n'

    TEXT is a string of characters excluding the newline character.

    LEVEL is the DEBUG level of the message (an integer in the range - 0..10).

    TIME is a timestamp.

    FILE is the name of the file from which the debug message was -generated.

    FUNCTION is the function from which the debug message was generated.

    LINE is the line number of the debug statement that generated the -message.

    Basically, what that all means is:

    1. A debugging log file is made up of debug messages.

    2. Each debug message is made up of a header and text. The header is -separated from the text by a newline.

    3. The header begins with the timestamp and debug level of the + >debugline< :== TEXT '\n' +

      +TEXT is a string of characters excluding the newline character. +

      +LEVEL is the DEBUG level of the message (an integer in the range + 0..10). +

      +TIME is a timestamp. +

      +FILE is the name of the file from which the debug message was +generated. +

      +FUNCTION is the function from which the debug message was generated. +

      +LINE is the line number of the debug statement that generated the +message. +

      Basically, what that all means is:

      1. +A debugging log file is made up of debug messages. +

      2. +Each debug message is made up of a header and text. The header is +separated from the text by a newline. +

      3. +The header begins with the timestamp and debug level of the message enclosed in brackets. The filename, function, and line number at which the message was generated follow. The filename is terminated by a colon, and the function name is terminated by the parenthesis which contain the line number. Depending upon the compiler, the function name may be missing (it is generated by the -__FUNCTION__ macro, which is not universally implemented, dangit).

      4. The message text is made up of zero or more lines, each terminated -by a newline.

      Here's some example output:

          [1998/08/03 12:55:25, 1] nmbd.c:(659)
+__FUNCTION__ macro, which is not universally implemented, dangit).
+

    4. +The message text is made up of zero or more lines, each terminated +by a newline. +

    Here's some example output:

    +    [1998/08/03 12:55:25, 1] nmbd.c:(659)
       Netbios nameserver version 1.9.19-prealpha started.
       Copyright Andrew Tridgell 1994-1997
     [1998/08/03 12:55:25, 3] loadparm.c:(763)
-      Initializing global parameters

    Note that in the above example the function names are not listed on + Initializing global parameters +

    +Note that in the above example the function names are not listed on the header line. That's because the example above was generated on an -SGI Indy, and the SGI compiler doesn't support the __FUNCTION__ macro.

    3.2. The DEBUG() Macro

    Use of the DEBUG() macro is unchanged. DEBUG() takes two parameters. +SGI Indy, and the SGI compiler doesn't support the __FUNCTION__ macro. +

    The DEBUG() Macro

    +Use of the DEBUG() macro is unchanged. DEBUG() takes two parameters. The first is the message level, the second is the body of a function -call to the Debug1() function.

    That's confusing.

    Here's an example which may help a bit. If you would write

    printf( "This is a %s message.\n", "debug" );

    to send the output to stdout, then you would write

    DEBUG( 0, ( "This is a %s message.\n", "debug" ) );

    to send the output to the debug file. All of the normal printf() -formatting escapes work.

    Note that in the above example the DEBUG message level is set to 0. +call to the Debug1() function. +

    That's confusing.

    Here's an example which may help a bit. If you would write

    +printf( "This is a %s message.\n", "debug" );
+

    +to send the output to stdout, then you would write +

    +DEBUG( 0, ( "This is a %s message.\n", "debug" ) );
+

    +to send the output to the debug file. All of the normal printf() +formatting escapes work. +

    +Note that in the above example the DEBUG message level is set to 0. Messages at level 0 always print. Basically, if the message level is less than or equal to the global value DEBUGLEVEL, then the DEBUG -statement is processed.

    The output of the above example would be something like:

        [1998/07/30 16:00:51, 0] file.c:function(128)
-      This is a debug message.

    Each call to DEBUG() creates a new header *unless* the output produced +statement is processed. +

    +The output of the above example would be something like: +

    +    [1998/07/30 16:00:51, 0] file.c:function(128)
+      This is a debug message.
+

    +Each call to DEBUG() creates a new header *unless* the output produced by the previous call to DEBUG() did not end with a '\n'. Output to the debug file is passed through a formatting buffer which is flushed every time a newline is encountered. If the buffer is not empty when -DEBUG() is called, the new input is simply appended.

    ...but that's really just a Kludge. It was put in place because +DEBUG() is called, the new input is simply appended. +

    +...but that's really just a Kludge. It was put in place because DEBUG() has been used to write partial lines. Here's a simple (dumb) -example of the kind of thing I'm talking about:

        DEBUG( 0, ("The test returned " ) );
+example of the kind of thing I'm talking about:
+
    +    DEBUG( 0, ("The test returned " ) );
     if( test() )
-      DEBUG(0, ("True") );
+      DEBUG(0, ("True") );
     else
-      DEBUG(0, ("False") );
-    DEBUG(0, (".\n") );
    Without the format buffer, the output (assuming test() returned true)
-would look like this:
        [1998/07/30 16:00:51, 0] file.c:function(256)
+      DEBUG(0, ("False") );
+    DEBUG(0, (".\n") );
+
    
+Without the format buffer, the output (assuming test() returned true)
+would look like this:
+
    +    [1998/07/30 16:00:51, 0] file.c:function(256)
       The test returned
     [1998/07/30 16:00:51, 0] file.c:function(258)
       True
     [1998/07/30 16:00:51, 0] file.c:function(261)
-      .
    Which isn't much use. The format buffer kludge fixes this problem.

    3.3. The DEBUGADD() Macro

    In addition to the kludgey solution to the broken line problem + . +

    Which isn't much use. The format buffer kludge fixes this problem. +

    The DEBUGADD() Macro

    +In addition to the kludgey solution to the broken line problem described above, there is a clean solution. The DEBUGADD() macro never generates a header. It will append new text to the current debug message even if the format buffer is empty. The syntax of the -DEBUGADD() macro is the same as that of the DEBUG() macro.

        DEBUG( 0, ("This is the first line.\n" ) );
-    DEBUGADD( 0, ("This is the second line.\nThis is the third line.\n" ) );

    Produces

        [1998/07/30 16:00:51, 0] file.c:function(512)
+DEBUGADD() macro is the same as that of the DEBUG() macro.
+
    +    DEBUG( 0, ("This is the first line.\n" ) );
+    DEBUGADD( 0, ("This is the second line.\nThis is the third line.\n" ) );
+
    Produces
    +    [1998/07/30 16:00:51, 0] file.c:function(512)
       This is the first line.
       This is the second line.
-      This is the third line.

    3.4. The DEBUGLVL() Macro

    One of the problems with the DEBUG() macro was that DEBUG() lines + This is the third line. +

    The DEBUGLVL() Macro

    +One of the problems with the DEBUG() macro was that DEBUG() lines tended to get a bit long. Consider this example from -nmbd_sendannounce.c:

      DEBUG(3,("send_local_master_announcement: type %x for name %s on subnet %s for workgroup %s\n",
-            type, global_myname, subrec->subnet_name, work->work_group));

    One solution to this is to break it down using DEBUG() and DEBUGADD(), -as follows:

      DEBUG( 3, ( "send_local_master_announcement: " ) );
-  DEBUGADD( 3, ( "type %x for name %s ", type, global_myname ) );
-  DEBUGADD( 3, ( "on subnet %s ", subrec->subnet_name ) );
-  DEBUGADD( 3, ( "for workgroup %s\n", work->work_group ) );

    A similar, but arguably nicer approach is to use the DEBUGLVL() macro. +nmbd_sendannounce.c: +

    +  DEBUG(3,("send_local_master_announcement: type %x for name %s on subnet %s for workgroup %s\n",
+            type, global_myname, subrec->subnet_name, work->work_group));
+

    +One solution to this is to break it down using DEBUG() and DEBUGADD(), +as follows: +

    +  DEBUG( 3, ( "send_local_master_announcement: " ) );
+  DEBUGADD( 3, ( "type %x for name %s ", type, global_myname ) );
+  DEBUGADD( 3, ( "on subnet %s ", subrec->subnet_name ) );
+  DEBUGADD( 3, ( "for workgroup %s\n", work->work_group ) );
+

    +A similar, but arguably nicer approach is to use the DEBUGLVL() macro. This macro returns True if the message level is less than or equal to -the global DEBUGLEVEL value, so:

      if( DEBUGLVL( 3 ) )
+the global DEBUGLEVEL value, so:
+
    +  if( DEBUGLVL( 3 ) )
     {
-    dbgtext( "send_local_master_announcement: " );
-    dbgtext( "type %x for name %s ", type, global_myname );
-    dbgtext( "on subnet %s ", subrec->subnet_name );
-    dbgtext( "for workgroup %s\n", work->work_group );
-    }
    (The dbgtext() function is explained below.)
    There are a few advantages to this scheme:
    1. The test is performed only once.
    2. You can allocate variables off of the stack that will only be used
-within the DEBUGLVL() block.
    3. Processing that is only relevant to debug output can be contained
-within the DEBUGLVL() block.

    3.5. New Functions

    3.5.1. dbgtext()

    This function prints debug message text to the debug file (and + dbgtext( "send_local_master_announcement: " ); + dbgtext( "type %x for name %s ", type, global_myname ); + dbgtext( "on subnet %s ", subrec->subnet_name ); + dbgtext( "for workgroup %s\n", work->work_group ); + } +

    (The dbgtext() function is explained below.)

    There are a few advantages to this scheme:

    1. +The test is performed only once. +

    2. +You can allocate variables off of the stack that will only be used +within the DEBUGLVL() block. +

    3. +Processing that is only relevant to debug output can be contained +within the DEBUGLVL() block. +

    New Functions

    dbgtext()

    +This function prints debug message text to the debug file (and possibly to syslog) via the format buffer. The function uses a variable argument list just like printf() or Debug1(). The input is printed into a buffer using the vslprintf() function, and then passed to format_debug_text(). If you use DEBUGLVL() you will probably print the body of the -message using dbgtext().

    3.5.2. dbghdr()

    This is the function that writes a debug message header. +message using dbgtext(). +

    dbghdr()

    +This is the function that writes a debug message header. Headers are not processed via the format buffer. Also note that if the format buffer is not empty, a call to dbghdr() will not -produce any output. See the comments in dbghdr() for more info.

    It is not likely that this function will be called directly. It -is used by DEBUG() and DEBUGADD().

    3.5.3. format_debug_text()

    This is a static function in debug.c. It stores the output text +produce any output. See the comments in dbghdr() for more info. +

    +It is not likely that this function will be called directly. It +is used by DEBUG() and DEBUGADD(). +

    format_debug_text()

    +This is a static function in debug.c. It stores the output text for the body of the message in a buffer until it encounters a newline. When the newline character is found, the buffer is written to the debug file via the Debug1() function, and the buffer is reset. This allows us to add the indentation at the beginning of each line of the message body, and also ensures that the output is written a line at a time (which cleans up -syslog output).

    Chapter 4. Coding Suggestions

    So you want to add code to Samba ...

    One of the daunting tasks facing a programmer attempting to write code for +syslog output). +

    Chapter4.Coding Suggestions

    Steve French

    Simo Sorce

    Andrew Bartlett

    Tim Potter

    Martin Pool

    +So you want to add code to Samba ... +

    +One of the daunting tasks facing a programmer attempting to write code for Samba is understanding the various coding conventions used by those most active in the project. These conventions were mostly unwritten and helped improve either the portability, stability or consistency of the code. This @@ -1493,305 +422,181 @@ document will attempt to document a few of the more important coding practices used at this time on the Samba project. The coding practices are expected to change slightly over time, and even to grow as more is learned about obscure portability considerations. Two existing documents -samba/source/internals.doc and -samba/source/architecture.doc provide -additional information.

    The loosely related question of coding style is very personal and this +samba/source/internals.doc and +samba/source/architecture.doc provide +additional information. +

    +The loosely related question of coding style is very personal and this document does not attempt to address that subject, except to say that I have observed that eight character tabs seem to be preferred in Samba source. If you are interested in the topic of coding style, two oft-quoted -documents are:

    http://lxr.linux.no/source/Documentation/CodingStyle

    http://www.fsf.org/prep/standards_toc.html

    But note that coding style in Samba varies due to the many different -programmers who have contributed.

    Following are some considerations you should use when adding new code to -Samba. First and foremost remember that:

    Portability is a primary consideration in adding function, as is network +documents are: +

    +http://lxr.linux.no/source/Documentation/CodingStyle +

    +http://www.fsf.org/prep/standards_toc.html +

    +But note that coding style in Samba varies due to the many different +programmers who have contributed. +

    +Following are some considerations you should use when adding new code to +Samba. First and foremost remember that: +

    +Portability is a primary consideration in adding function, as is network compatability with de facto, existing, real world CIFS/SMB implementations. There are lots of platforms that Samba builds on so use caution when adding a call to a library function that is not invoked in existing Samba code. Also note that there are many quite different SMB/CIFS clients that Samba tries to support, not all of which follow the SNIA CIFS Technical Reference (or the earlier Microsoft reference documents or the X/Open book on the SMB -Standard) perfectly.

    Here are some other suggestions:

    1. use d_printf instead of printf for display text - reason: enable auto-substitution of translated language text

    2. use SAFE_FREE instead of free - reason: reduce traps due to null pointers

    3. don't use bzero use memset, or ZERO_STRUCT and ZERO_STRUCTP macros - reason: not POSIX

    4. don't use strcpy and strlen (use safe_* equivalents) - reason: to avoid traps due to buffer overruns

    5. don't use getopt_long, use popt functions instead - reason: portability

    6. explicitly add const qualifiers on parm passing in functions where parm - is input only (somewhat controversial but const can be #defined away)

    7. when passing a va_list as an arg, or assigning one to another +Standard) perfectly. +

      +Here are some other suggestions: +

      1. + use d_printf instead of printf for display text + reason: enable auto-substitution of translated language text +

      2. + use SAFE_FREE instead of free + reason: reduce traps due to null pointers +

      3. + don't use bzero use memset, or ZERO_STRUCT and ZERO_STRUCTP macros + reason: not POSIX +

      4. + don't use strcpy and strlen (use safe_* equivalents) + reason: to avoid traps due to buffer overruns +

      5. + don't use getopt_long, use popt functions instead + reason: portability +

      6. + explicitly add const qualifiers on parm passing in functions where parm + is input only (somewhat controversial but const can be #defined away) +

      7. + when passing a va_list as an arg, or assigning one to another please use the VA_COPY() macro reason: on some platforms, va_list is a struct that must be - initialized in each function...can SEGV if you don't.

      8. discourage use of threads - reason: portability (also see architecture.doc)

      9. don't explicitly include new header files in C files - new h files + initialized in each function...can SEGV if you don't. +

      10. + discourage use of threads + reason: portability (also see architecture.doc) +

      11. + don't explicitly include new header files in C files - new h files should be included by adding them once to includes.h - reason: consistency

      12. don't explicitly extern functions (they are autogenerated by - "make proto" into proto.h) - reason: consistency

      13. use endian safe macros when unpacking SMBs (see byteorder.h and + reason: consistency +

      14. + don't explicitly extern functions (they are autogenerated by + "make proto" into proto.h) + reason: consistency +

      15. + use endian safe macros when unpacking SMBs (see byteorder.h and internals.doc) - reason: not everyone uses Intel

      16. Note Unicode implications of charset handling (see internals.doc). See + reason: not everyone uses Intel +

      17. + Note Unicode implications of charset handling (see internals.doc). See pull_* and push_* and convert_string functions. - reason: Internationalization

      18. Don't assume English only - reason: See above

      19. Try to avoid using in/out parameters (functions that return data which + reason: Internationalization +

      20. + Don't assume English only + reason: See above +

      21. + Try to avoid using in/out parameters (functions that return data which overwrites input parameters) - reason: Can cause stability problems

      22. Ensure copyright notices are correct, don't append Tridge's name to code + reason: Can cause stability problems +

      23. + Ensure copyright notices are correct, don't append Tridge's name to code that he didn't write. If you did not write the code, make sure that it - can coexist with the rest of the Samba GPLed code.

      24. Consider usage of DATA_BLOBs for length specified byte-data. - reason: stability

      25. Take advantage of tdbs for database like function - reason: consistency

      26. Don't access the SAM_ACCOUNT structure directly, they should be accessed + can coexist with the rest of the Samba GPLed code. +

      27. + Consider usage of DATA_BLOBs for length specified byte-data. + reason: stability +

      28. + Take advantage of tdbs for database like function + reason: consistency +

      29. + Don't access the SAM_ACCOUNT structure directly, they should be accessed via pdb_get...() and pdb_set...() functions. - reason: stability, consistency

      30. Don't check a password directly against the passdb, always use the + reason: stability, consistency +

      31. + Don't check a password directly against the passdb, always use the check_password() interface. - reason: long term pluggability

      32. Try to use asprintf rather than pstrings and fstrings where possible

      33. Use normal C comments / * instead of C++ comments // like + reason: long term pluggability +

      34. + Try to use asprintf rather than pstrings and fstrings where possible +

      35. + Use normal C comments / * instead of C++ comments // like this. Although the C++ comment format is part of the C99 - standard, some older vendor C compilers do not accept it.

      36. Try to write documentation for API functions and structures + standard, some older vendor C compilers do not accept it. +

      37. + Try to write documentation for API functions and structures explaining the point of the code, the way it should be used, and any special conditions or results. Mark these with a double-star comment start / ** so that they can be picked up by Doxygen, as in - this file.

      38. Keep the scope narrow. This means making functions/variables + this file. +

      39. + Keep the scope narrow. This means making functions/variables static whenever possible. We don't want our namespace polluted. Each module should have a minimal number of externally - visible functions or variables.

      40. Use function pointers to keep knowledge about particular pieces of + visible functions or variables. +

      41. + Use function pointers to keep knowledge about particular pieces of code isolated in one place. We don't want a particular piece of functionality to be spread out across lots of places - that makes for fragile, hand to maintain code. Instead, design an interface and use tables containing function pointers to implement specific functionality. This is particularly important for command - interpreters.

      42. Think carefully about what it will be like for someone else to add + interpreters. +

      43. + Think carefully about what it will be like for someone else to add to and maintain your code. If it would be hard for someone else to - maintain then do it another way.

      The suggestions above are simply that, suggestions, but the information may + maintain then do it another way. +

    +The suggestions above are simply that, suggestions, but the information may help in reducing the routine rework done on new code. The preceeding list is expected to change routinely as new support routines and macros are -added.

    Chapter 5. Samba Internals

    5.1. Character Handling

    This section describes character set handling in Samba, as implemented in -Samba 3.0 and above

    In the past Samba had very ad-hoc character set handling. Scattered +added. +

    Chapter5.Samba Internals

    8 May 1996

    Table of Contents

    Character Handling
    The new functions
    Macros in byteorder.h
    CVAL(buf,pos)
    PVAL(buf,pos)
    SCVAL(buf,pos,val)
    SVAL(buf,pos)
    IVAL(buf,pos)
    SVALS(buf,pos)
    IVALS(buf,pos)
    SSVAL(buf,pos,val)
    SIVAL(buf,pos,val)
    SSVALS(buf,pos,val)
    SIVALS(buf,pos,val)
    RSVAL(buf,pos)
    RIVAL(buf,pos)
    RSSVAL(buf,pos,val)
    RSIVAL(buf,pos,val)
    LAN Manager Samba API
    Parameters
    Return value
    Code character table

    Character Handling

    +This section describes character set handling in Samba, as implemented in +Samba 3.0 and above +

    +In the past Samba had very ad-hoc character set handling. Scattered throughout the code were numerous calls which converted particular strings to/from DOS codepages. The problem is that there was no way of telling if a particular char* is in dos codepage or unix codepage. This led to a nightmare of code that tried to cope with -particular cases without handlingt the general case.

    5.2. The new functions

    The new system works like this:

    1. all char* strings inside Samba are "unix" strings. These are - multi-byte strings that are in the charset defined by the "unix - charset" option in smb.conf.

    2. there is no single fixed character set for unix strings, but any +particular cases without handlingt the general case. +

    The new functions

    +The new system works like this: +

    1. + all char* strings inside Samba are "unix" strings. These are + multi-byte strings that are in the charset defined by the "unix + charset" option in smb.conf. +

    2. + there is no single fixed character set for unix strings, but any character set that is used does need the following properties: -

      1. must not contain NULLs except for termination -

      2. must be 7-bit compatible with C strings, so that a constant +

        1. + must not contain NULLs except for termination +

        2. + must be 7-bit compatible with C strings, so that a constant string or character in C will be byte-for-byte identical to the equivalent string in the chosen character set. -

        3. when you uppercase or lowercase a string it does not become +

        4. + when you uppercase or lowercase a string it does not become longer than the original string -

        5. must be able to correctly hold all characters that your client +

        6. + must be able to correctly hold all characters that your client will throw at it -

        For example, UTF-8 is fine, and most multi-byte asian character sets +

    + For example, UTF-8 is fine, and most multi-byte asian character sets are fine, but UCS2 could not be used for unix strings as they contain nulls. -

  • when you need to put a string into a buffer that will be sent on the +

  • + when you need to put a string into a buffer that will be sent on the wire, or you need a string in a character set format that is compatible with the clients character set then you need to use a pull_ or push_ function. The pull_ functions pull a string from a wire buffer into a (multi-byte) unix string. The push_ functions - push a string out to a wire buffer.

  • the two main pull_ and push_ functions you need to understand are + push a string out to a wire buffer. +

  • + the two main pull_ and push_ functions you need to understand are pull_string and push_string. These functions take a base pointer that should point at the start of the SMB packet that the string is in. The functions will check the flags field in this packet to @@ -1801,953 +606,426 @@ TYPE="a" STR_ASCII flags. For use in smbd/ and libsmb/ there are wrapper functions clistr_ and srvstr_ that call the pull_/push_ functions with the appropriate first argument. -

    You may also call the pull_ascii/pull_ucs2 or push_ascii/push_ucs2 +

    + You may also call the pull_ascii/pull_ucs2 or push_ascii/push_ucs2 functions if you know that a particular string is ascii or unicode. There are also a number of other convenience functions in charcnv.c that call the pull_/push_ functions with particularly common arguments, such as pull_ascii_pstring() -

  • The biggest thing to remember is that internal (unix) strings in Samba +

  • + The biggest thing to remember is that internal (unix) strings in Samba may now contain multi-byte characters. This means you cannot assume that characters are always 1 byte long. Often this means that you will have to convert strings to ucs2 and back again in order to do some (seemingly) simple task. For examples of how to do this see functions like strchr_m(). I know this is very slow, and we will eventually - speed it up but right now we want this stuff correct not fast.

  • all lp_ functions now return unix strings. The magic "DOS" flag on - parameters is gone.

  • all vfs functions take unix strings. Don't convert when passing to them

    • 5.3. Macros in byteorder.h

    This section describes the macros defined in byteorder.h. These macros -are used extensively in the Samba code.

    5.3.1. CVAL(buf,pos)

    returns the byte at offset pos within buffer buf as an unsigned character.

    5.3.2. PVAL(buf,pos)

    returns the value of CVAL(buf,pos) cast to type unsigned integer.

    5.3.3. SCVAL(buf,pos,val)

    sets the byte at offset pos within buffer buf to value val.

    5.3.4. SVAL(buf,pos)

    returns the value of the unsigned short (16 bit) little-endian integer at + speed it up but right now we want this stuff correct not fast. +

  • + all lp_ functions now return unix strings. The magic "DOS" flag on + parameters is gone. +

  • + all vfs functions take unix strings. Don't convert when passing to them +

    • Macros in byteorder.h

    +This section describes the macros defined in byteorder.h. These macros +are used extensively in the Samba code. +

    CVAL(buf,pos)

    +returns the byte at offset pos within buffer buf as an unsigned character. +

    PVAL(buf,pos)

    returns the value of CVAL(buf,pos) cast to type unsigned integer.

    SCVAL(buf,pos,val)

    sets the byte at offset pos within buffer buf to value val.

    SVAL(buf,pos)

    + returns the value of the unsigned short (16 bit) little-endian integer at offset pos within buffer buf. An integer of this type is sometimes - refered to as "USHORT".

    5.3.5. IVAL(buf,pos)

    returns the value of the unsigned 32 bit little-endian integer at offset -pos within buffer buf.

    5.3.6. SVALS(buf,pos)

    returns the value of the signed short (16 bit) little-endian integer at -offset pos within buffer buf.

    5.3.7. IVALS(buf,pos)

    returns the value of the signed 32 bit little-endian integer at offset pos -within buffer buf.

    5.3.8. SSVAL(buf,pos,val)

    sets the unsigned short (16 bit) little-endian integer at offset pos within -buffer buf to value val.

    5.3.9. SIVAL(buf,pos,val)

    sets the unsigned 32 bit little-endian integer at offset pos within buffer -buf to the value val.

    5.3.10. SSVALS(buf,pos,val)

    sets the short (16 bit) signed little-endian integer at offset pos within -buffer buf to the value val.

    5.3.11. SIVALS(buf,pos,val)

    sets the signed 32 bit little-endian integer at offset pos withing buffer -buf to the value val.

    5.3.12. RSVAL(buf,pos)

    returns the value of the unsigned short (16 bit) big-endian integer at -offset pos within buffer buf.

    5.3.13. RIVAL(buf,pos)

    returns the value of the unsigned 32 bit big-endian integer at offset -pos within buffer buf.

    5.3.14. RSSVAL(buf,pos,val)

    sets the value of the unsigned short (16 bit) big-endian integer at + refered to as "USHORT". +

    IVAL(buf,pos)

    returns the value of the unsigned 32 bit little-endian integer at offset +pos within buffer buf.

    SVALS(buf,pos)

    returns the value of the signed short (16 bit) little-endian integer at +offset pos within buffer buf.

    IVALS(buf,pos)

    returns the value of the signed 32 bit little-endian integer at offset pos +within buffer buf.

    SSVAL(buf,pos,val)

    sets the unsigned short (16 bit) little-endian integer at offset pos within +buffer buf to value val.

    SIVAL(buf,pos,val)

    sets the unsigned 32 bit little-endian integer at offset pos within buffer +buf to the value val.

    SSVALS(buf,pos,val)

    sets the short (16 bit) signed little-endian integer at offset pos within +buffer buf to the value val.

    SIVALS(buf,pos,val)

    sets the signed 32 bit little-endian integer at offset pos withing buffer +buf to the value val.

    RSVAL(buf,pos)

    returns the value of the unsigned short (16 bit) big-endian integer at +offset pos within buffer buf.

    RIVAL(buf,pos)

    returns the value of the unsigned 32 bit big-endian integer at offset +pos within buffer buf.

    RSSVAL(buf,pos,val)

    sets the value of the unsigned short (16 bit) big-endian integer at offset pos within buffer buf to value val. -refered to as "USHORT".

    5.3.15. RSIVAL(buf,pos,val)

    sets the value of the unsigned 32 bit big-endian integer at offset -pos within buffer buf to value val.

    5.4. LAN Manager Samba API

    This section describes the functions need to make a LAN Manager RPC call. +refered to as "USHORT".

    RSIVAL(buf,pos,val)

    sets the value of the unsigned 32 bit big-endian integer at offset +pos within buffer buf to value val.

    LAN Manager Samba API

    +This section describes the functions need to make a LAN Manager RPC call. This information had been obtained by examining the Samba code and the LAN Manager 2.0 API documentation. It should not be considered entirely -reliable.

    call_api(int prcnt, int drcnt, int mprcnt, int mdrcnt, 
-	char *param, char *data, char **rparam, char **rdata);

    This function is defined in client.c. It uses an SMB transaction to call a -remote api.

    5.4.1. Parameters

    The parameters are as follows:

    1. prcnt: the number of bytes of parameters begin sent.

    2. drcnt: the number of bytes of data begin sent.

    3. mprcnt: the maximum number of bytes of parameters which should be returned

    4. mdrcnt: the maximum number of bytes of data which should be returned

    5. param: a pointer to the parameters to be sent.

    6. data: a pointer to the data to be sent.

    7. rparam: a pointer to a pointer which will be set to point to the returned - paramters. The caller of call_api() must deallocate this memory.

    8. rdata: a pointer to a pointer which will be set to point to the returned - data. The caller of call_api() must deallocate this memory.

    These are the parameters which you ought to send, in the order of their -appearance in the parameter block:

    1. An unsigned 16 bit integer API number. You should set this value with -SSVAL(). I do not know where these numbers are described.

    2. An ASCIIZ string describing the parameters to the API function as defined +reliable. +

      +

      +call_api(int prcnt, int drcnt, int mprcnt, int mdrcnt, 
+	char *param, char *data, char **rparam, char **rdata);
+

      +

      +This function is defined in client.c. It uses an SMB transaction to call a +remote api. +

      Parameters

      The parameters are as follows:

      1. + prcnt: the number of bytes of parameters begin sent. +

      2. + drcnt: the number of bytes of data begin sent. +

      3. + mprcnt: the maximum number of bytes of parameters which should be returned +

      4. + mdrcnt: the maximum number of bytes of data which should be returned +

      5. + param: a pointer to the parameters to be sent. +

      6. + data: a pointer to the data to be sent. +

      7. + rparam: a pointer to a pointer which will be set to point to the returned + paramters. The caller of call_api() must deallocate this memory. +

      8. + rdata: a pointer to a pointer which will be set to point to the returned + data. The caller of call_api() must deallocate this memory. +

      +These are the parameters which you ought to send, in the order of their +appearance in the parameter block: +

      1. +An unsigned 16 bit integer API number. You should set this value with +SSVAL(). I do not know where these numbers are described. +

      2. +An ASCIIZ string describing the parameters to the API function as defined in the LAN Manager documentation. The first parameter, which is the server name, is ommited. This string is based uppon the API function as described -in the manual, not the data which is actually passed.

      3. An ASCIIZ string describing the data structure which ought to be returned.

      4. Any parameters which appear in the function call, as defined in the LAN -Manager API documentation, after the "Server" and up to and including the -"uLevel" parameters.

      5. An unsigned 16 bit integer which gives the size in bytes of the buffer we +in the manual, not the data which is actually passed. +

      6. +An ASCIIZ string describing the data structure which ought to be returned. +

      7. +Any parameters which appear in the function call, as defined in the LAN +Manager API documentation, after the "Server" and up to and including the +"uLevel" parameters. +

      8. +An unsigned 16 bit integer which gives the size in bytes of the buffer we will use to receive the returned array of data structures. Presumably this -should be the same as mdrcnt. This value should be set with SSVAL().

      9. An ASCIIZ string describing substructures which should be returned. If no -substructures apply, this string is of zero length.

      The code in client.c always calls call_api() with no data. It is unclear -when a non-zero length data buffer would be sent.

      5.4.2. Return value

      The returned parameters (pointed to by rparam), in their order of appearance -are:

      1. An unsigned 16 bit integer which contains the API function's return code. -This value should be read with SVAL().

      2. An adjustment which tells the amount by which pointers in the returned +should be the same as mdrcnt. This value should be set with SSVAL(). +

      3. +An ASCIIZ string describing substructures which should be returned. If no +substructures apply, this string is of zero length. +

      +The code in client.c always calls call_api() with no data. It is unclear +when a non-zero length data buffer would be sent. +

      Return value

      +The returned parameters (pointed to by rparam), in their order of appearance +are:

      1. +An unsigned 16 bit integer which contains the API function's return code. +This value should be read with SVAL(). +

      2. +An adjustment which tells the amount by which pointers in the returned data should be adjusted. This value should be read with SVAL(). Basically, the address of the start of the returned data buffer should have the returned pointer value added to it and then have this value subtracted from it in -order to obtain the currect offset into the returned data buffer.

      3. A count of the number of elements in the array of structures returned. -It is also possible that this may sometimes be the number of bytes returned.

      When call_api() returns, rparam points to the returned parameters. The +order to obtain the currect offset into the returned data buffer. +

    3. +A count of the number of elements in the array of structures returned. +It is also possible that this may sometimes be the number of bytes returned. +

    +When call_api() returns, rparam points to the returned parameters. The first if these is the result code. It will be zero if the API call -suceeded. This value by be read with "SVAL(rparam,0)".

    The second parameter may be read as "SVAL(rparam,2)". It is a 16 bit offset +suceeded. This value by be read with "SVAL(rparam,0)". +

    +The second parameter may be read as "SVAL(rparam,2)". It is a 16 bit offset which indicates what the base address of the returned data buffer was when it was built on the server. It should be used to correct pointer before -use.

    The returned data buffer contains the array of returned data structures. +use. +

    +The returned data buffer contains the array of returned data structures. Note that all pointers must be adjusted before use. The function -fix_char_ptr() in client.c can be used for this purpose.

    The third parameter (which may be read as "SVAL(rparam,4)") has something to +fix_char_ptr() in client.c can be used for this purpose. +

    +The third parameter (which may be read as "SVAL(rparam,4)") has something to do with indicating the amount of data returned or possibly the amount of -data which can be returned if enough buffer space is allowed.

    5.5. Code character table

    Certain data structures are described by means of ASCIIz strings containing -code characters. These are the code characters:

    1. W a type byte little-endian unsigned integer

    2. N a count of substructures which follow

    3. D a four byte little-endian unsigned integer

    4. B a byte (with optional count expressed as trailing ASCII digits)

    5. z a four byte offset to a NULL terminated string

    6. l a four byte offset to non-string user data

    7. b an offset to data (with count expressed as trailing ASCII digits)

    8. r pointer to returned data buffer???

    9. L length in bytes of returned data buffer???

    10. h number of bytes of information available???

    Chapter 6. The smb.conf file

    6.1. Lexical Analysis

    Basically, the file is processed on a line by line basis. There are +data which can be returned if enough buffer space is allowed. +

    Code character table

    +Certain data structures are described by means of ASCIIz strings containing +code characters. These are the code characters: +

    1. +W a type byte little-endian unsigned integer +

    2. +N a count of substructures which follow +

    3. +D a four byte little-endian unsigned integer +

    4. +B a byte (with optional count expressed as trailing ASCII digits) +

    5. +z a four byte offset to a NULL terminated string +

    6. +l a four byte offset to non-string user data +

    7. +b an offset to data (with count expressed as trailing ASCII digits) +

    8. +r pointer to returned data buffer??? +

    9. +L length in bytes of returned data buffer??? +

    10. +h number of bytes of information available??? +

    Chapter6.The smb.conf file

    Chris Hertel

    November 1997

    Table of Contents

    Lexical Analysis
    Handling of Whitespace
    Handling of Line Continuation
    Line Continuation Quirks
    Syntax
    About params.c

    Lexical Analysis

    +Basically, the file is processed on a line by line basis. There are four types of lines that are recognized by the lexical analyzer -(params.c):

    1. Blank lines - Lines containing only whitespace.

    2. Comment lines - Lines beginning with either a semi-colon or a -pound sign (';' or '#').

    3. Section header lines - Lines beginning with an open square bracket ('[').

    4. Parameter lines - Lines beginning with any other character. -(The default line type.)

    The first two are handled exclusively by the lexical analyzer, which -ignores them. The latter two line types are scanned for

    1. - Section names

    2. - Parameter names

    3. - Parameter values

    These are the only tokens passed to the parameter loader +(params.c): +

    1. +Blank lines - Lines containing only whitespace. +

    2. +Comment lines - Lines beginning with either a semi-colon or a +pound sign (';' or '#'). +

    3. +Section header lines - Lines beginning with an open square bracket ('['). +

    4. +Parameter lines - Lines beginning with any other character. +(The default line type.) +

    +The first two are handled exclusively by the lexical analyzer, which +ignores them. The latter two line types are scanned for +

    1. + - Section names +

    2. + - Parameter names +

    3. + - Parameter values +

    +These are the only tokens passed to the parameter loader (loadparm.c). Parameter names and values are divided from one -another by an equal sign: '='.

    6.1.1. Handling of Whitespace

    Whitespace is defined as all characters recognized by the isspace() +another by an equal sign: '='. +

    Handling of Whitespace

    +Whitespace is defined as all characters recognized by the isspace() function (see ctype(3C)) except for the newline character ('\n') -The newline is excluded because it identifies the end of the line.

    1. The lexical analyzer scans past white space at the beginning of a line.

    2. Section and parameter names may contain internal white space. All -whitespace within a name is compressed to a single space character.

    3. Internal whitespace within a parameter value is kept verbatim with +The newline is excluded because it identifies the end of the line. +

      1. +The lexical analyzer scans past white space at the beginning of a line. +

      2. +Section and parameter names may contain internal white space. All +whitespace within a name is compressed to a single space character. +

      3. +Internal whitespace within a parameter value is kept verbatim with the exception of carriage return characters ('\r'), all of which -are removed.

      4. Leading and trailing whitespace is removed from names and values.

      6.1.2. Handling of Line Continuation

      Long section header and parameter lines may be extended across +are removed. +

    4. +Leading and trailing whitespace is removed from names and values. +

    Handling of Line Continuation

    +Long section header and parameter lines may be extended across multiple lines by use of the backslash character ('\\'). Line -continuation is ignored for blank and comment lines.

    If the last (non-whitespace) character within a section header or on +continuation is ignored for blank and comment lines. +

    +If the last (non-whitespace) character within a section header or on a parameter line is a backslash, then the next line will be (logically) concatonated with the current line by the lexical -analyzer. For example:

    	param name = parameter value string \
-	with line continuation.

    Would be read as

        param name = parameter value string     with line continuation.

    Note that there are five spaces following the word 'string', +analyzer. For example: +

    +	param name = parameter value string \
+	with line continuation.
+

    Would be read as

    +    param name = parameter value string     with line continuation.
+

    +Note that there are five spaces following the word 'string', representing the one space between 'string' and '\\' in the top line, plus the four preceeding the word 'with' in the second line. -(Yes, I'm counting the indentation.)

    Line continuation characters are ignored on blank lines and at the end +(Yes, I'm counting the indentation.) +

    +Line continuation characters are ignored on blank lines and at the end of comments. They are *only* recognized within section and parameter -lines.

    6.1.3. Line Continuation Quirks

    Note the following example:

    	param name = parameter value string \
+lines.
+

    Line Continuation Quirks

    Note the following example:

    +	param name = parameter value string \
     \
-    with line continuation.

    The middle line is *not* parsed as a blank line because it is first -concatonated with the top line. The result is

    param name = parameter value string         with line continuation.

    The same is true for comment lines.

    	param name = parameter value string \
+    with line continuation.
+

    +The middle line is *not* parsed as a blank line because it is first +concatonated with the top line. The result is +

    +param name = parameter value string         with line continuation.
+

    The same is true for comment lines.

    +	param name = parameter value string \
 	; comment \
-    with a comment.

    This becomes:

    param name = parameter value string     ; comment     with a comment.

    On a section header line, the closing bracket (']') is considered a -terminating character, and the rest of the line is ignored. The lines

    	[ section   name ] garbage \
-    param  name  = value

    are read as

    	[section name]
-    param name = value

    6.2. Syntax

    The syntax of the smb.conf file is as follows:

      <file>            :==  { <section> } EOF
+    with a comment.
+

    This becomes:

    +param name = parameter value string     ; comment     with a comment.
+

    +On a section header line, the closing bracket (']') is considered a +terminating character, and the rest of the line is ignored. The lines +

    +	[ section   name ] garbage \
+    param  name  = value
+

    are read as

    +	[section name]
+    param name = value
+

    Syntax

    The syntax of the smb.conf file is as follows:

    +  <file>            :==  { <section> } EOF
   <section>         :==  <section header> { <parameter line> }
   <section header>  :==  '[' NAME ']'
-  <parameter line>  :==  NAME '=' VALUE NL

    Basically, this means that

    1. a file is made up of zero or more sections, and is terminated by - an EOF (we knew that).

    2. A section is made up of a section header followed by zero or more - parameter lines.

    3. A section header is identified by an opening bracket and + <parameter line> :== NAME '=' VALUE NL +

      Basically, this means that

      1. + a file is made up of zero or more sections, and is terminated by + an EOF (we knew that). +

      2. + A section is made up of a section header followed by zero or more + parameter lines. +

      3. + A section header is identified by an opening bracket and terminated by the closing bracket. The enclosed NAME identifies - the section.

      4. A parameter line is divided into a NAME and a VALUE. The *first* + the section. +

      5. + A parameter line is divided into a NAME and a VALUE. The *first* equal sign on the line separates the NAME from the VALUE. The - VALUE is terminated by a newline character (NL = '\n').

      6.2.1. About params.c

      The parsing of the config file is a bit unusual if you are used to + VALUE is terminated by a newline character (NL = '\n'). +

    About params.c

    +The parsing of the config file is a bit unusual if you are used to lex, yacc, bison, etc. Both lexical analysis (scanning) and parsing are performed by params.c. Values are loaded via callbacks to -loadparm.c.

    Chapter 7. NetBIOS in a Unix World

    7.1. Introduction

    This is a short document that describes some of the issues that +loadparm.c. +

    Chapter7.NetBIOS in a Unix World

    Andrew Tridgell

    April 1995

    Table of Contents

    Introduction
    Usernames
    File Ownership
    Passwords
    Locking
    Deny Modes
    Trapdoor UIDs
    Port numbers
    Protocol Complexity

    Introduction

    +This is a short document that describes some of the issues that confront a SMB implementation on unix, and how Samba copes with -them. They may help people who are looking at unix<->PC -interoperability.

    It was written to help out a person who was writing a paper on unix to -PC connectivity.

    7.2. Usernames

    The SMB protocol has only a loose username concept. Early SMB +them. They may help people who are looking at unix<->PC +interoperability. +

    +It was written to help out a person who was writing a paper on unix to +PC connectivity. +

    Usernames

    +The SMB protocol has only a loose username concept. Early SMB protocols (such as CORE and COREPLUS) have no username concept at all. Even in later protocols clients often attempt operations (particularly printer operations) without first validating a username -on the server.

    Unix security is based around username/password pairs. A unix box +on the server. +

    +Unix security is based around username/password pairs. A unix box should not allow clients to do any substantive operation without some -sort of validation.

    The problem mostly manifests itself when the unix server is in "share -level" security mode. This is the default mode as the alternative -"user level" security mode usually forces a client to connect to the +sort of validation. +

    +The problem mostly manifests itself when the unix server is in "share +level" security mode. This is the default mode as the alternative +"user level" security mode usually forces a client to connect to the server as the same user for each connected share, which is -inconvenient in many sites.

    In "share level" security the client normally gives a username in the -"session setup" protocol, but does not supply an accompanying -password. The client then connects to resources using the "tree -connect" protocol, and supplies a password. The problem is that the +inconvenient in many sites. +

    +In "share level" security the client normally gives a username in the +"session setup" protocol, but does not supply an accompanying +password. The client then connects to resources using the "tree +connect" protocol, and supplies a password. The problem is that the user on the PC types the username and the password in different contexts, unaware that they need to go together to give access to the server. The username is normally the one the user typed in when they -"logged onto" the PC (this assumes Windows for Workgroups). The -password is the one they chose when connecting to the disk or printer.

    The user often chooses a totally different username for their login as +"logged onto" the PC (this assumes Windows for Workgroups). The +password is the one they chose when connecting to the disk or printer. +

    +The user often chooses a totally different username for their login as for the drive connection. Often they also want to access different drives as different usernames. The unix server needs some way of -divining the correct username to combine with each password.

    Samba tries to avoid this problem using several methods. These succeed +divining the correct username to combine with each password. +

    +Samba tries to avoid this problem using several methods. These succeed in the vast majority of cases. The methods include username maps, the service%user syntax, the saving of session setup usernames for later validation and the derivation of the username from the service name -(either directly or via the user= option).

    7.3. File Ownership

    The commonly used SMB protocols have no way of saying "you can't do -that because you don't own the file". They have, in fact, no concept -of file ownership at all.

    This brings up all sorts of interesting problems. For example, when +(either directly or via the user= option). +

    File Ownership

    +The commonly used SMB protocols have no way of saying "you can't do +that because you don't own the file". They have, in fact, no concept +of file ownership at all. +

    +This brings up all sorts of interesting problems. For example, when you copy a file to a unix drive, and the file is world writeable but owned by another user the file will transfer correctly but will receive the wrong date. This is because the utime() call under unix only succeeds for the owner of the file, or root, even if the file is world writeable. For security reasons Samba does all file operations as the validated user, not root, so the utime() fails. This can stuff -up shared development diectories as programs like "make" will not get -file time comparisons right.

    There are several possible solutions to this problem, including +up shared development diectories as programs like "make" will not get +file time comparisons right. +

    +There are several possible solutions to this problem, including username mapping, and forcing a specific username for particular -shares.

    7.4. Passwords

    Many SMB clients uppercase passwords before sending them. I have no +shares. +

    Passwords

    +Many SMB clients uppercase passwords before sending them. I have no idea why they do this. Interestingly WfWg uppercases the password only if the server is running a protocol greater than COREPLUS, so -obviously it isn't just the data entry routines that are to blame.

    Unix passwords are case sensitive. So if users use mixed case -passwords they are in trouble.

    Samba can try to cope with this by either using the "password level" +obviously it isn't just the data entry routines that are to blame. +

    +Unix passwords are case sensitive. So if users use mixed case +passwords they are in trouble. +

    +Samba can try to cope with this by either using the "password level" option which causes Samba to try the offered password with up to the -specified number of case changes, or by using the "password server" +specified number of case changes, or by using the "password server" option which allows Samba to do its validation via another machine -(typically a WinNT server).

    Samba supports the password encryption method used by SMB +(typically a WinNT server). +

    +Samba supports the password encryption method used by SMB clients. Note that the use of password encryption in Microsoft -networking leads to password hashes that are "plain text equivalent". +networking leads to password hashes that are "plain text equivalent". This means that it is *VERY* important to ensure that the Samba smbpasswd file containing these password hashes is only readable by the root user. See the documentation ENCRYPTION.txt for more -details.

    7.5. Locking

    Since samba 2.2, samba supports other types of locking as well. This -section is outdated.

    The locking calls available under a DOS/Windows environment are much +details. +

    Locking

    +Since samba 2.2, samba supports other types of locking as well. This +section is outdated. +

    +The locking calls available under a DOS/Windows environment are much richer than those available in unix. This means a unix server (like Samba) choosing to use the standard fcntl() based unix locking calls -to implement SMB locking has to improvise a bit.

    One major problem is that dos locks can be in a 32 bit (unsigned) +to implement SMB locking has to improvise a bit. +

    +One major problem is that dos locks can be in a 32 bit (unsigned) range. Unix locking calls are 32 bits, but are signed, giving only a 31 bit range. Unfortunately OLE2 clients use the top bit to select a -locking range used for OLE semaphores.

    To work around this problem Samba compresses the 32 bit range into 31 +locking range used for OLE semaphores. +

    +To work around this problem Samba compresses the 32 bit range into 31 bits by appropriate bit shifting. This seems to work but is not ideal. In a future version a separate SMB lockd may be added to cope -with the problem.

    It also doesn't help that many unix lockd daemons are very buggy and +with the problem. +

    +It also doesn't help that many unix lockd daemons are very buggy and crash at the slightest provocation. They normally go mostly unused in a unix environment because few unix programs use byte range locking. The stress of huge numbers of lock requests from dos/windows -clients can kill the daemon on some systems.

    The second major problem is the "opportunistic locking" requested by +clients can kill the daemon on some systems. +

    +The second major problem is the "opportunistic locking" requested by some clients. If a client requests opportunistic locking then it is asking the server to notify it if anyone else tries to do something on the same file, at which time the client will say if it is willing to give up its lock. Unix has no simple way of implementing -opportunistic locking, and currently Samba has no support for it.

    7.6. Deny Modes

    When a SMB client opens a file it asks for a particular "deny mode" to +opportunistic locking, and currently Samba has no support for it. +

    Deny Modes

    +When a SMB client opens a file it asks for a particular "deny mode" to be placed on the file. These modes (DENY_NONE, DENY_READ, DENY_WRITE, DENY_ALL, DENY_FCB and DENY_DOS) specify what actions should be allowed by anyone else who tries to use the file at the same time. If DENY_READ is placed on the file, for example, then any attempt to open -the file for reading should fail.

    Unix has no equivalent notion. To implement this Samba uses either lock +the file for reading should fail. +

    +Unix has no equivalent notion. To implement this Samba uses either lock files based on the files inode and placed in a separate lock directory or a shared memory implementation. The lock file method is clumsy and consumes processing and file resources, the shared memory implementation is vastly prefered and is turned on -by default for those systems that support it.

    7.7. Trapdoor UIDs

    A SMB session can run with several uids on the one socket. This +by default for those systems that support it. +

    Trapdoor UIDs

    +A SMB session can run with several uids on the one socket. This happens when a user connects to two shares with different usernames. To cope with this the unix server needs to switch uids within the one process. On some unixes (such as SCO) this is not possible. This means that on those unixes the client is restricted to -a single uid.

    Note that you can also get the "trapdoor uid" message for other -reasons. Please see the FAQ for details.

    7.8. Port numbers

    There is a convention that clients on sockets use high "unprivilaged" -port numbers (>1000) and connect to servers on low "privilaged" port +a single uid. +

    +Note that you can also get the "trapdoor uid" message for other +reasons. Please see the FAQ for details. +

    Port numbers

    +There is a convention that clients on sockets use high "unprivilaged" +port numbers (>1000) and connect to servers on low "privilaged" port numbers. This is enforced in Unix as non-root users can't open a -socket for listening on port numbers less than 1000.

    Most PC based SMB clients (such as WfWg and WinNT) don't follow this +socket for listening on port numbers less than 1000. +

    +Most PC based SMB clients (such as WfWg and WinNT) don't follow this convention completely. The main culprit is the netbios nameserving on udp port 137. Name query requests come from a source port of 137. This is a problem when you combine it with the common firewalling technique of not allowing incoming packets on low port numbers. This means that these clients can't query a netbios nameserver on the other side of a -low port based firewall.

    The problem is more severe with netbios node status queries. I've +low port based firewall. +

    +The problem is more severe with netbios node status queries. I've found that WfWg, Win95 and WinNT3.5 all respond to netbios node status queries on port 137 no matter what the source port was in the request. This works between machines that are both using port 137, but @@ -2755,421 +1033,179 @@ it means it's not possible for a unix user to do a node status request to any of these OSes unless they are running as root. The answer comes back, but it goes to port 137 which the unix user can't listen on. Interestingly WinNT3.1 got this right - it sends node status -responses back to the source port in the request.

    7.9. Protocol Complexity

    There are many "protocol levels" in the SMB protocol. It seems that +responses back to the source port in the request. +

    Protocol Complexity

    +There are many "protocol levels" in the SMB protocol. It seems that each time new functionality was added to a Microsoft operating system, they added the equivalent functions in a new protocol level of the SMB -protocol to "externalise" the new capabilities.

    This means the protocol is very "rich", offering many ways of doing +protocol to "externalise" the new capabilities. +

    +This means the protocol is very "rich", offering many ways of doing each file operation. This means SMB servers need to be complex and large. It also means it is very difficult to make them bug free. It is not just Samba that suffers from this problem, other servers such as WinNT don't support every variation of every call and it has almost certainly been a headache for MS developers to support the myriad of -SMB calls that are available.

    There are about 65 "top level" operations in the SMB protocol (things +SMB calls that are available. +

    +There are about 65 "top level" operations in the SMB protocol (things like SMBread and SMBwrite). Some of these include hundreds of sub-functions (SMBtrans has at least 120 sub-functions, like DosPrintQAdd and NetSessionEnum). All of them take several options that can change the way they work. Many take dozens of possible -"information levels" that change the structures that need to be -returned. Samba supports all but 2 of the "top level" functions. It +"information levels" that change the structures that need to be +returned. Samba supports all but 2 of the "top level" functions. It supports only 8 (so far) of the SMBtrans sub-functions. Even NT -doesn't support them all.

    Samba currently supports up to the "NT LM 0.12" protocol, which is the +doesn't support them all. +

    +Samba currently supports up to the "NT LM 0.12" protocol, which is the one preferred by Win95 and WinNT3.5. Luckily this protocol level has a -"capabilities" field which specifies which super-duper new-fangled +"capabilities" field which specifies which super-duper new-fangled options the server suports. This helps to make the implementation of -this protocol level much easier.

    There is also a problem with the SMB specications. SMB is a X/Open +this protocol level much easier. +

    +There is also a problem with the SMB specications. SMB is a X/Open spec, but the X/Open book is far from ideal, and fails to cover many important issues, leaving much to the imagination. Microsoft recently renamed the SMB protocol CIFS (Common Internet File System) and have published new specifications. These are far superior to the old X/Open documents but there are still undocumented calls and features. This specification is actively being worked on by a CIFS developers -mailing list hosted by Microsft.

    Chapter 8. Tracing samba system calls

    This file describes how to do a system call trace on Samba to work out +mailing list hosted by Microsft. +

    Chapter8.Tracing samba system calls

    Andrew Tridgell

    Samba Team

    +This file describes how to do a system call trace on Samba to work out what its doing wrong. This is not for the faint of heart, but if you -are reading this then you are probably desperate.

    Actually its not as bad as the the above makes it sound, just don't -expect the output to be very pretty :-)

    Ok, down to business. One of the big advantages of unix systems is +are reading this then you are probably desperate. +

    +Actually its not as bad as the the above makes it sound, just don't +expect the output to be very pretty :-) +

    +Ok, down to business. One of the big advantages of unix systems is that they nearly all come with a system trace utility that allows you to monitor all system calls that a program is making. This is extremely using for debugging and also helps when trying to work out why something is slower than you expect. You can use system tracing -without any special compilation options.

    The system trace utility is called different things on different +without any special compilation options. +

    +The system trace utility is called different things on different systems. On Linux systems its called strace. Under SunOS 4 its called trace. Under SVR4 style systems (including solaris) its called -truss. Under many BSD systems its called ktrace.

    The first thing you should do is read the man page for your native +truss. Under many BSD systems its called ktrace. +

    +The first thing you should do is read the man page for your native system call tracer. In the discussion below I'll assume its called strace as strace is the only portable system tracer (its available for free for many unix types) and its also got some of the nicest -features.

    Next, try using strace on some simple commands. For example, strace -ls or strace echo hello.

    +features. +

    +Next, try using strace on some simple commands. For example, strace +ls or strace echo hello. +

    You'll notice that it produces a LOT of output. It is showing you the arguments to every system call that the program makes and the result. Very little happens in a program without a system call so you get lots of output. You'll also find that it produces a lot of -"preamble" stuff showing the loading of shared libraries etc. Ignore -this (unless its going wrong!)

    For example, the only line that really matters in the strace echo -hello output is:

    write(1, "hello\n", 6)                  = 6

    all the rest is just setting up to run the program.

    Ok, now you're familiar with strace. To use it on Samba you need to +"preamble" stuff showing the loading of shared libraries etc. Ignore +this (unless its going wrong!) +

    +For example, the only line that really matters in the strace echo +hello output is: +

    +write(1, "hello\n", 6)                  = 6
+

    all the rest is just setting up to run the program.

    +Ok, now you're familiar with strace. To use it on Samba you need to strace the running smbd daemon. The way I tend ot use it is to first login from my Windows PC to the Samba server, then use smbstatus to find which process ID that client is attached to, then as root I do -strace -p PID to attach to that process. I normally redirect the +strace -p PID to attach to that process. I normally redirect the stderr output from this command to a file for later perusal. For -example, if I'm using a csh style shell:

    strace -f -p 3872 >& strace.out

    or with a sh style shell:

    strace -f -p 3872 > strace.out 2>&1

    Note the "-f" option. This is only available on some systems, and +example, if I'm using a csh style shell: +

    strace -f -p 3872 >& strace.out

    or with a sh style shell:

    strace -f -p 3872 > strace.out 2>&1

    +Note the "-f" option. This is only available on some systems, and allows you to trace not just the current process, but any children it forks. This is great for finding printing problems caused by the -"print command" being wrong.

    Once you are attached you then can do whatever it is on the client +"print command" being wrong. +

    +Once you are attached you then can do whatever it is on the client that is causing problems and you will capture all the system calls -that smbd makes.

    So how do you interpret the results? Generally I search through the +that smbd makes. +

    +So how do you interpret the results? Generally I search through the output for strings that I know will appear when the problem happens. For example, if I am having touble with permissions on a file I would search for that files name in the strace output and look at the surrounding lines. Another trick is to match up file descriptor -numbers and "follow" what happens to an open file until it is closed.

    Beyond this you will have to use your initiative. To give you an idea +numbers and "follow" what happens to an open file until it is closed. +

    +Beyond this you will have to use your initiative. To give you an idea of what you are looking for here is a piece of strace output that -shows that /dev/null is not world writeable, which -causes printing to fail with Samba:

    [pid 28268] open("/dev/null", O_RDWR)   = -1 EACCES (Permission denied)
-[pid 28268] open("/dev/null", O_WRONLY) = -1 EACCES (Permission denied)

    The process is trying to first open /dev/null read-write -then read-only. Both fail. This means /dev/null has -incorrect permissions.

    Chapter 9. NT Domain RPC's

    9.1. Introduction

    This document contains information to provide an NT workstation with login -services, without the need for an NT server. It is the sgml version of http://mailhost.cb1.com/~lkcl/cifsntdomain.txt, controlled by Luke.

    It should be possible to select a domain instead of a workgroup (in the NT +shows that /dev/null is not world writeable, which +causes printing to fail with Samba: +

    +[pid 28268] open("/dev/null", O_RDWR)   = -1 EACCES (Permission denied)
+[pid 28268] open("/dev/null", O_WRONLY) = -1 EACCES (Permission denied)
+

    +The process is trying to first open /dev/null read-write +then read-only. Both fail. This means /dev/null has +incorrect permissions. +

    Chapter9.NT Domain RPC's

    Luke Leighton

    Duncan Stansfield

    01 November 97(version 0.0.24)

    Table of Contents

    Introduction
    Sources
    Credits
    Notes and Structures
    Notes
    Enumerations
    Structures
    MSRPC over Transact Named Pipe
    MSRPC Pipes
    Header
    Tail
    RPC Bind / Bind Ack
    NTLSA Transact Named Pipe
    LSA Open Policy
    LSA Query Info Policy
    LSA Enumerate Trusted Domains
    LSA Open Secret
    LSA Close
    LSA Lookup SIDS
    LSA Lookup Names
    NETLOGON rpc Transact Named Pipe
    LSA Request Challenge
    LSA Authenticate 2
    LSA Server Password Set
    LSA SAM Logon
    LSA SAM Logoff
    \\MAILSLOT\NET\NTLOGON
    Query for PDC
    SAM Logon
    SRVSVC Transact Named Pipe
    Net Share Enum
    Net Server Get Info
    Cryptographic side of NT Domain Authentication
    Definitions
    Protocol
    Comments
    SIDs and RIDs
    Well-known SIDs
    Well-known RIDS

    Introduction

    +This document contains information to provide an NT workstation with login +services, without the need for an NT server. It is the sgml version of http://mailhost.cb1.com/~lkcl/cifsntdomain.txt, controlled by Luke. +

    +It should be possible to select a domain instead of a workgroup (in the NT workstation's TCP/IP settings) and after the obligatory reboot, type in a username, password, select a domain and successfully log in. I would appreciate any feedback on your experiences with this process, and any -comments, corrections and additions to this document.

    The packets described here can be easily derived from (and are probably +comments, corrections and additions to this document. +

    +The packets described here can be easily derived from (and are probably better understood using) Netmon.exe. You will need to use the version of Netmon that matches your system, in order to correctly decode the NETLOGON, lsarpc and srvsvc Transact pipes. This document is derived from NT Service Pack 1 and its corresponding version of Netmon. It is intended that an annotated packet trace be produced, which will likely be more -instructive than this document.

    Also needed, to fully implement NT Domain Login Services, is the +instructive than this document. +

    +Also needed, to fully implement NT Domain Login Services, is the document describing the cryptographic part of the NT authentication. This document is available from comp.protocols.smb; from the ntsecurity.net -digest and from the samba digest, amongst other sources.

    A copy is available from:

    http://ntbugtraq.rc.on.ca/SCRIPTS/WA.EXE?A2=ind9708;L=ntbugtraq;O=A;P=2935

    http://mailhost.cb1.com/~lkcl/crypt.html

    A c-code implementation, provided by Linus Nordberg -of this protocol is available from:

    http://samba.org/cgi-bin/mfs/01/digest/1997/97aug/0391.html

    http://mailhost.cb1.com/~lkcl/crypt.txt

    Also used to provide debugging information is the Check Build version of +digest and from the samba digest, amongst other sources. +

    +A copy is available from: +

    http://ntbugtraq.rc.on.ca/SCRIPTS/WA.EXE?A2=ind9708;L=ntbugtraq;O=A;P=2935

    http://mailhost.cb1.com/~lkcl/crypt.html

    +A c-code implementation, provided by Linus Nordberg +of this protocol is available from: +

    http://samba.org/cgi-bin/mfs/01/digest/1997/97aug/0391.html

    http://mailhost.cb1.com/~lkcl/crypt.txt

    +Also used to provide debugging information is the Check Build version of NT workstation, and enabling full debugging in NETLOGON. This is -achieved by setting the following REG_SZ registry key to 0x1ffffff:

    HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters

    Incorrect direct editing of the registry can cause your +achieved by setting the following REG_SZ registry key to 0x1ffffff: +

    HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters

    Incorrect direct editing of the registry can cause your machine to fail. Then again, so can incorrect implementation of this -protocol. See "Liability:" above.

    Bear in mind that each packet over-the-wire will have its origin in an +protocol. See "Liability:" above.

    +Bear in mind that each packet over-the-wire will have its origin in an API call. Therefore, there are likely to be structures, enumerations -and defines that are usefully documented elsewhere.

    This document is by no means complete or authoritative. Missing sections -include, but are not limited to:

    1. Mappings of RIDs to usernames (and vice-versa).

    2. What a User ID is and what a Group ID is.

    3. The exact meaning/definition of various magic constants or enumerations.

    4. The reply error code and use of that error code when a +and defines that are usefully documented elsewhere. +

      +This document is by no means complete or authoritative. Missing sections +include, but are not limited to: +

      1. Mappings of RIDs to usernames (and vice-versa).

      2. What a User ID is and what a Group ID is.

      3. The exact meaning/definition of various magic constants or enumerations.

      4. The reply error code and use of that error code when a workstation becomes a member of a domain (to be described later). Failure to return this error code will make the workstation report -that it is already a member of the domain.

      5. the cryptographic side of the NetrServerPasswordSet command, +that it is already a member of the domain.

      6. the cryptographic side of the NetrServerPasswordSet command, which would allow the workstation to change its password. This password is used to generate the long-term session key. [It is possible to reject this -command, and keep the default workstation password].

      9.1.1. Sources

      cket Traces from Netmonitor (Service Pack 1 and above)
      ul Ashton and Luke Leighton's other "NT Domain" doc.
      FS documentation - cifs6.txt
      FS documentation - cifsrap2.txt

      9.1.2. Credits

      Paul Ashton: loads of work with Net Monitor; understanding the NT authentication system; reference implementation of the NT domain support on which this document is originally based.
      Duncan Stansfield: low-level analysis of MSRPC Pipes.
      Linus Nordberg: producing c-code from Paul's crypto spec.
      Windows Sourcer development team

      9.2. Notes and Structures

      9.2.1. Notes

      1. In the SMB Transact pipes, some "Structures", described here, appear to be +command, and keep the default workstation password].

      Sources

      cket Traces from Netmonitor (Service Pack 1 and above)
      ul Ashton and Luke Leighton's other "NT Domain" doc.
      FS documentation - cifs6.txt
      FS documentation - cifsrap2.txt

      Credits

      Paul Ashton: loads of work with Net Monitor; understanding the NT authentication system; reference implementation of the NT domain support on which this document is originally based.
      Duncan Stansfield: low-level analysis of MSRPC Pipes.
      Linus Nordberg: producing c-code from Paul's crypto spec.
      Windows Sourcer development team

      Notes and Structures

      Notes

      1. +In the SMB Transact pipes, some "Structures", described here, appear to be 4-byte aligned with the SMB header, at their start. Exactly which -"Structures" need aligning is not precisely known or documented.

      2. In the UDP NTLOGON Mailslots, some "Structures", described here, appear to be -2-byte aligned with the start of the mailslot, at their start.

      3. Domain SID is of the format S-revision-version-auth1-auth2...authN. -e.g S-1-5-123-456-789-123-456. the 5 could be a sub-revision.

      4. any undocumented buffer pointers must be non-zero if the string buffer it +"Structures" need aligning is not precisely known or documented. +

      5. +In the UDP NTLOGON Mailslots, some "Structures", described here, appear to be +2-byte aligned with the start of the mailslot, at their start. +

      6. +Domain SID is of the format S-revision-version-auth1-auth2...authN. +e.g S-1-5-123-456-789-123-456. the 5 could be a sub-revision. +

      7. +any undocumented buffer pointers must be non-zero if the string buffer it refers to contains characters. exactly what value they should be is unknown. 0x0000 0002 seems to do the trick to indicate that the buffer exists. a NULL buffer pointer indicates that the string buffer is of zero length. @@ -3178,3707 +1214,90 @@ refers to is NOT put into (or taken out of) the SMB data stream. This is empirically derived from, for example, the LSA SAM Logon response packet, where if the buffer pointer is NULL, the user information is not inserted into the data stream. Exactly what happens with an array of buffer pointers -is not known, although an educated guess can be made.

      8. an array of structures (a container) appears to have a count and a pointer. +is not known, although an educated guess can be made. +

      9. +an array of structures (a container) appears to have a count and a pointer. if the count is zero, the pointer is also zero. no further data is put into or taken out of the SMB data stream. if the count is non-zero, then the pointer is also non-zero. immediately following the pointer is the count again, followed by an array of container sub-structures. the count -appears a third time after the last sub-structure.

      9.2.2. Enumerations

      9.2.2.1. MSRPC Header type

      command number in the msrpc packet header

      MSRPC_Request:

      0x00

      MSRPC_Response:

      0x02

      MSRPC_Bind:

      0x0B

      MSRPC_BindAck:

      0x0C

      9.2.2.2. MSRPC Packet info

      The meaning of these flags is undocumented

      FirstFrag:

      0x01

      LastFrag:

      0x02

      NotaFrag:

      0x04

      RecRespond:

      0x08

      NoMultiplex:

      0x10

      NotForIdemp:

      0x20

      NotforBcast:

      0x40

      NoUuid:

      0x80

      9.2.3. Structures

      9.2.3.1. VOID *

      sizeof VOID* is 32 bits.

      9.2.3.2. char

      sizeof char is 8 bits.

      9.2.3.3. UTIME

      UTIME is 32 bits, indicating time in seconds since 01jan1970. documented in cifs6.txt (section 3.5 page, page 30).

      9.2.3.4. NTTIME

      NTTIME is 64 bits. documented in cifs6.txt (section 3.5 page, page 30).

      9.2.3.5. DOM_SID (domain SID structure)

      UINT32

      num of sub-authorities in domain SID

      UINT8

      SID revision number

      UINT8

      num of sub-authorities in domain SID

      UINT8[6]

      6 bytes for domain SID - Identifier Authority.

      UINT16[n_subauths]

      domain SID sub-authorities

      Note: the domain SID is documented elsewhere.

      9.2.3.6. STR (string)

      STR (string) is a char[] : a null-terminated string of ascii characters.

      9.2.3.7. UNIHDR (unicode string header)

      UINT16

      length of unicode string

      UINT16

      max length of unicode string

      UINT32

      4 - undocumented.

      9.2.3.8. UNIHDR2 (unicode string header plus buffer pointer)

      UNIHDR

      unicode string header

      VOID*

      undocumented buffer pointer

      9.2.3.9. UNISTR (unicode string)

      UINT16[]

      null-terminated string of unicode characters.

      9.2.3.10. NAME (length-indicated unicode string)

      UINT32

      length of unicode string

      UINT16[]

      null-terminated string of unicode characters.

      9.2.3.11. UNISTR2 (aligned unicode string)

      UINT8[]

      padding to get unicode string 4-byte aligned with the start of the SMB header.

      UINT32

      max length of unicode string

      UINT32

      0 - undocumented

      UINT32

      length of unicode string

      UINT16[]

      string of uncode characters

      9.2.3.12. OBJ_ATTR (object attributes)

      UINT32

      0x18 - length (in bytes) including the length field.

      VOID*

      0 - root directory (pointer)

      VOID*

      0 - object name (pointer)

      UINT32

      0 - attributes (undocumented)

      VOID*

      0 - security descriptior (pointer)

      UINT32

      0 - security quality of service

      9.2.3.13. POL_HND (LSA policy handle)

      char[20]

      policy handle

      9.2.3.14. DOM_SID2 (domain SID structure, SIDS stored in unicode)

      UINT32

      5 - SID type

      UINT32

      0 - undocumented

      UNIHDR2

      domain SID unicode string header

      UNISTR

      domain SID unicode string

      Note: there is a conflict between the unicode string header and the unicode string itself as to which to use to indicate string length. this will need to be resolved.

      Note: the SID type indicates, for example, an alias; a well-known group etc. this is documented somewhere.

      9.2.3.15. DOM_RID (domain RID structure)

      UINT32

      5 - well-known SID. 1 - user SID (see ShowACLs)

      UINT32

      5 - undocumented

      UINT32

      domain RID

      UINT32

      0 - domain index out of above reference domains

      9.2.3.16. LOG_INFO (server, account, client structure)

      Note: logon server name starts with two '\' characters and is upper case.

      Note: account name is the logon client name from the LSA Request Challenge, with a $ on the end of it, in upper case.

      VOID*

      undocumented buffer pointer

      UNISTR2

      logon server unicode string

      UNISTR2

      account name unicode string

      UINT16

      sec_chan - security channel type

      UNISTR2

      logon client machine unicode string

      9.2.3.17. CLNT_SRV (server, client names structure)

      Note: logon server name starts with two '\' characters and is upper case.

      VOID*

      undocumented buffer pointer

      UNISTR2

      logon server unicode string

      VOID*

      undocumented buffer pointer

      UNISTR2

      logon client machine unicode string

      9.2.3.18. CREDS (credentials + time stamp)

      char[8]

      credentials

      UTIME

      time stamp

      9.2.3.19. CLNT_INFO2 (server, client structure, client credentials)

      Note: whenever this structure appears in a request, you must take a copy of the client-calculated credentials received, because they will beused in subsequent credential checks. the presumed intention is to - maintain an authenticated request/response trail.

      CLNT_SRV

      client and server names

      UINT8[]

      ???? padding, for 4-byte alignment with SMB header.

      VOID*

      pointer to client credentials.

      CREDS

      client-calculated credentials + client time

      9.2.3.20. CLNT_INFO (server, account, client structure, client credentials)

      Note: whenever this structure appears in a request, you must take a copy of the client-calculated credentials received, because they will be used in subsequent credential checks. the presumed intention is to maintain an authenticated request/response trail.

      LOG_INFO

      logon account info

      CREDS

      client-calculated credentials + client time

      9.2.3.21. ID_INFO_1 (id info structure, auth level 1)

      VOID*

      ptr_id_info_1

      UNIHDR

      domain name unicode header

      UINT32

      param control

      UINT64

      logon ID

      UNIHDR

      user name unicode header

      UNIHDR

      workgroup name unicode header

      char[16]

      arc4 LM OWF Password

      char[16]

      arc4 NT OWF Password

      UNISTR2

      domain name unicode string

      UNISTR2

      user name unicode string

      UNISTR2

      workstation name unicode string

      9.2.3.22. SAM_INFO (sam logon/logoff id info structure)

      Note: presumably, the return credentials is supposedly for the server to verify that the credential chain hasn't been compromised.

      CLNT_INFO2

      client identification/authentication info

      VOID*

      pointer to return credentials.

      CRED

      return credentials - ignored.

      UINT16

      logon level

      UINT16

      switch value

              switch (switch_value)
+appears a third time after the last sub-structure.
+

    Enumerations

    MSRPC Header type

    command number in the msrpc packet header

    MSRPC_Request:

    0x00

    MSRPC_Response:

    0x02

    MSRPC_Bind:

    0x0B

    MSRPC_BindAck:

    0x0C

    MSRPC Packet info

    The meaning of these flags is undocumented

    FirstFrag:

    0x01

    LastFrag:

    0x02

    NotaFrag:

    0x04

    RecRespond:

    0x08

    NoMultiplex:

    0x10

    NotForIdemp:

    0x20

    NotforBcast:

    0x40

    NoUuid:

    0x80

    Structures

    VOID *

    sizeof VOID* is 32 bits.

    char

    sizeof char is 8 bits.

    UTIME

    UTIME is 32 bits, indicating time in seconds since 01jan1970. documented in cifs6.txt (section 3.5 page, page 30).

    NTTIME

    NTTIME is 64 bits. documented in cifs6.txt (section 3.5 page, page 30).

    DOM_SID (domain SID structure)

    UINT32

    num of sub-authorities in domain SID

    UINT8

    SID revision number

    UINT8

    num of sub-authorities in domain SID

    UINT8[6]

    6 bytes for domain SID - Identifier Authority.

    UINT16[n_subauths]

    domain SID sub-authorities

    Note: the domain SID is documented elsewhere. +

    STR (string)

    STR (string) is a char[] : a null-terminated string of ascii characters.

    UNIHDR (unicode string header)

    UINT16

    length of unicode string

    UINT16

    max length of unicode string

    UINT32

    4 - undocumented.

    UNIHDR2 (unicode string header plus buffer pointer)

    UNIHDR

    unicode string header

    VOID*

    undocumented buffer pointer

    UNISTR (unicode string)

    UINT16[]

    null-terminated string of unicode characters.

    NAME (length-indicated unicode string)

    UINT32

    length of unicode string

    UINT16[]

    null-terminated string of unicode characters.

    UNISTR2 (aligned unicode string)

    UINT8[]

    padding to get unicode string 4-byte aligned with the start of the SMB header.

    UINT32

    max length of unicode string

    UINT32

    0 - undocumented

    UINT32

    length of unicode string

    UINT16[]

    string of uncode characters

    OBJ_ATTR (object attributes)

    UINT32

    0x18 - length (in bytes) including the length field.

    VOID*

    0 - root directory (pointer)

    VOID*

    0 - object name (pointer)

    UINT32

    0 - attributes (undocumented)

    VOID*

    0 - security descriptior (pointer)

    UINT32

    0 - security quality of service

    POL_HND (LSA policy handle)

    char[20]

    policy handle

    DOM_SID2 (domain SID structure, SIDS stored in unicode)

    UINT32

    5 - SID type

    UINT32

    0 - undocumented

    UNIHDR2

    domain SID unicode string header

    UNISTR

    domain SID unicode string

    Note: there is a conflict between the unicode string header and the unicode string itself as to which to use to indicate string length. this will need to be resolved.

    Note: the SID type indicates, for example, an alias; a well-known group etc. this is documented somewhere.

    DOM_RID (domain RID structure)

    UINT32

    5 - well-known SID. 1 - user SID (see ShowACLs)

    UINT32

    5 - undocumented

    UINT32

    domain RID

    UINT32

    0 - domain index out of above reference domains

    LOG_INFO (server, account, client structure)

    Note: logon server name starts with two '\' characters and is upper case.

    Note: account name is the logon client name from the LSA Request Challenge, with a $ on the end of it, in upper case.

    VOID*

    undocumented buffer pointer

    UNISTR2

    logon server unicode string

    UNISTR2

    account name unicode string

    UINT16

    sec_chan - security channel type

    UNISTR2

    logon client machine unicode string

    CLNT_SRV (server, client names structure)

    Note: logon server name starts with two '\' characters and is upper case.

    VOID*

    undocumented buffer pointer

    UNISTR2

    logon server unicode string

    VOID*

    undocumented buffer pointer

    UNISTR2

    logon client machine unicode string

    CREDS (credentials + time stamp)

    char[8]

    credentials

    UTIME

    time stamp

    CLNT_INFO2 (server, client structure, client credentials)

    Note: whenever this structure appears in a request, you must take a copy of the client-calculated credentials received, because they will beused in subsequent credential checks. the presumed intention is to + maintain an authenticated request/response trail.

    CLNT_SRV

    client and server names

    UINT8[]

    ???? padding, for 4-byte alignment with SMB header.

    VOID*

    pointer to client credentials.

    CREDS

    client-calculated credentials + client time

    CLNT_INFO (server, account, client structure, client credentials)

    Note: whenever this structure appears in a request, you must take a copy of the client-calculated credentials received, because they will be used in subsequent credential checks. the presumed intention is to maintain an authenticated request/response trail.

    LOG_INFO

    logon account info

    CREDS

    client-calculated credentials + client time

    ID_INFO_1 (id info structure, auth level 1)

    VOID*

    ptr_id_info_1

    UNIHDR

    domain name unicode header

    UINT32

    param control

    UINT64

    logon ID

    UNIHDR

    user name unicode header

    UNIHDR

    workgroup name unicode header

    char[16]

    arc4 LM OWF Password

    char[16]

    arc4 NT OWF Password

    UNISTR2

    domain name unicode string

    UNISTR2

    user name unicode string

    UNISTR2

    workstation name unicode string

    SAM_INFO (sam logon/logoff id info structure)

    Note: presumably, the return credentials is supposedly for the server to verify that the credential chain hasn't been compromised.

    CLNT_INFO2

    client identification/authentication info

    VOID*

    pointer to return credentials.

    CRED

    return credentials - ignored.

    UINT16

    logon level

    UINT16

    switch value

    +        switch (switch_value)
         case 1:
         {
             ID_INFO_1     id_info_1;
-        }

    9.2.3.23. GID (group id info)

    UINT32

    group id

    UINT32

    user attributes (only used by NT 3.1 and 3.51)

    9.2.3.24. DOM_REF (domain reference info)

    VOID*

    undocumented buffer pointer.

    UINT32

    num referenced domains?

    VOID*

    undocumented domain name buffer pointer.

    UINT32

    32 - max number of entries

    UINT32

    4 - num referenced domains?

    UNIHDR2

    domain name unicode string header

    UNIHDR2[num_ref_doms-1]

    referenced domain unicode string headers

    UNISTR

    domain name unicode string

    DOM_SID[num_ref_doms]

    referenced domain SIDs

    9.2.3.25. DOM_INFO (domain info, levels 3 and 5 are the same))

    UINT8[]

    ??? padding to get 4-byte alignment with start of SMB header

    UINT16

    domain name string length * 2

    UINT16

    domain name string length * 2

    VOID*

    undocumented domain name string buffer pointer

    VOID*

    undocumented domain SID string buffer pointer

    UNISTR2

    domain name (unicode string)

    DOM_SID

    domain SID

    9.2.3.26. USER_INFO (user logon info)

    Note: it would be nice to know what the 16 byte user session key is for.

    NTTIME

    logon time

    NTTIME

    logoff time

    NTTIME

    kickoff time

    NTTIME

    password last set time

    NTTIME

    password can change time

    NTTIME

    password must change time

    UNIHDR

    username unicode string header

    UNIHDR

    user's full name unicode string header

    UNIHDR

    logon script unicode string header

    UNIHDR

    profile path unicode string header

    UNIHDR

    home directory unicode string header

    UNIHDR

    home directory drive unicode string header

    UINT16

    logon count

    UINT16

    bad password count

    UINT32

    User ID

    UINT32

    Group ID

    UINT32

    num groups

    VOID*

    undocumented buffer pointer to groups.

    UINT32

    user flags

    char[16]

    user session key

    UNIHDR

    logon server unicode string header

    UNIHDR

    logon domain unicode string header

    VOID*

    undocumented logon domain id pointer

    char[40]

    40 undocumented padding bytes. future expansion?

    UINT32

    0 - num_other_sids?

    VOID*

    NULL - undocumented pointer to other domain SIDs.

    UNISTR2

    username unicode string

    UNISTR2

    user's full name unicode string

    UNISTR2

    logon script unicode string

    UNISTR2

    profile path unicode string

    UNISTR2

    home directory unicode string

    UNISTR2

    home directory drive unicode string

    UINT32

    num groups

    GID[num_groups]

    group info

    UNISTR2

    logon server unicode string

    UNISTR2

    logon domain unicode string

    DOM_SID

    domain SID

    DOM_SID[num_sids]

    other domain SIDs?

    9.2.3.27. SH_INFO_1_PTR (pointers to level 1 share info strings)

    Note: see cifsrap2.txt section5, page 10.

    0 for shi1_type indicates a Disk.
    1 for shi1_type indicates a Print Queue.
    2 for shi1_type indicates a Device.
    3 for shi1_type indicates an IPC pipe.
    0x8000 0000 (top bit set in shi1_type) indicates a hidden share.

    VOID*

    shi1_netname - pointer to net name

    UINT32

    shi1_type - type of share. 0 - undocumented.

    VOID*

    shi1_remark - pointer to comment.

    9.2.3.28. SH_INFO_1_STR (level 1 share info strings)

    UNISTR2

    shi1_netname - unicode string of net name

    UNISTR2

    shi1_remark - unicode string of comment.

    9.2.3.29. SHARE_INFO_1_CTR

    share container with 0 entries:

    UINT32

    0 - EntriesRead

    UINT32

    0 - Buffer

    share container with > 0 entries:

    UINT32

    EntriesRead

    UINT32

    non-zero - Buffer

    UINT32

    EntriesRead

    SH_INFO_1_PTR[EntriesRead]

    share entry pointers

    SH_INFO_1_STR[EntriesRead]

    share entry strings

    UINT8[]

    padding to get unicode string 4-byte aligned with start of the SMB header.

    UINT32

    EntriesRead

    UINT32

    0 - padding

    9.2.3.30. SERVER_INFO_101

    Note: see cifs6.txt section 6.4 - the fields described therein will be of assistance here. for example, the type listed below is the same as fServerType, which is described in 6.4.1.

    SV_TYPE_WORKSTATION

    0x00000001 All workstations

    SV_TYPE_SERVER

    0x00000002 All servers

    SV_TYPE_SQLSERVER

    0x00000004 Any server running with SQL server

    SV_TYPE_DOMAIN_CTRL

    0x00000008 Primary domain controller

    SV_TYPE_DOMAIN_BAKCTRL

    0x00000010 Backup domain controller

    SV_TYPE_TIME_SOURCE

    0x00000020 Server running the timesource service

    SV_TYPE_AFP

    0x00000040 Apple File Protocol servers

    SV_TYPE_NOVELL

    0x00000080 Novell servers

    SV_TYPE_DOMAIN_MEMBER

    0x00000100 Domain Member

    SV_TYPE_PRINTQ_SERVER

    0x00000200 Server sharing print queue

    SV_TYPE_DIALIN_SERVER

    0x00000400 Server running dialin service.

    SV_TYPE_XENIX_SERVER

    0x00000800 Xenix server

    SV_TYPE_NT

    0x00001000 NT server

    SV_TYPE_WFW

    0x00002000 Server running Windows for

    SV_TYPE_SERVER_NT

    0x00008000 Windows NT non DC server

    SV_TYPE_POTENTIAL_BROWSER

    0x00010000 Server that can run the browser service

    SV_TYPE_BACKUP_BROWSER

    0x00020000 Backup browser server

    SV_TYPE_MASTER_BROWSER

    0x00040000 Master browser server

    SV_TYPE_DOMAIN_MASTER

    0x00080000 Domain Master Browser server

    SV_TYPE_LOCAL_LIST_ONLY

    0x40000000 Enumerate only entries marked "local"

    SV_TYPE_DOMAIN_ENUM

    0x80000000 Enumerate Domains. The pszServer and pszDomain parameters must be NULL.

    UINT32

    500 - platform_id

    VOID*

    pointer to name

    UINT32

    5 - major version

    UINT32

    4 - minor version

    UINT32

    type (SV_TYPE_... bit field)

    VOID*

    pointer to comment

    UNISTR2

    sv101_name - unicode string of server name

    UNISTR2

    sv_101_comment - unicode string of server comment.

    UINT8[]

    padding to get unicode string 4-byte aligned with start of the SMB header.

    9.3. MSRPC over Transact Named Pipe

    For details on the SMB Transact Named Pipe, see cifs6.txt

    9.3.1. MSRPC Pipes

    The MSRPC is conducted over an SMB Transact Pipe with a name of -\PIPE\. You must first obtain a 16 bit file handle, by -sending a SMBopenX with the pipe name \PIPE\srvsvc for + } +

    GID (group id info)

    UINT32

    group id

    UINT32

    user attributes (only used by NT 3.1 and 3.51)

    DOM_REF (domain reference info)

    VOID*

    undocumented buffer pointer.

    UINT32

    num referenced domains?

    VOID*

    undocumented domain name buffer pointer.

    UINT32

    32 - max number of entries

    UINT32

    4 - num referenced domains?

    UNIHDR2

    domain name unicode string header

    UNIHDR2[num_ref_doms-1]

    referenced domain unicode string headers

    UNISTR

    domain name unicode string

    DOM_SID[num_ref_doms]

    referenced domain SIDs

    DOM_INFO (domain info, levels 3 and 5 are the same))

    UINT8[]

    ??? padding to get 4-byte alignment with start of SMB header

    UINT16

    domain name string length * 2

    UINT16

    domain name string length * 2

    VOID*

    undocumented domain name string buffer pointer

    VOID*

    undocumented domain SID string buffer pointer

    UNISTR2

    domain name (unicode string)

    DOM_SID

    domain SID

    USER_INFO (user logon info)

    Note: it would be nice to know what the 16 byte user session key is for.

    NTTIME

    logon time

    NTTIME

    logoff time

    NTTIME

    kickoff time

    NTTIME

    password last set time

    NTTIME

    password can change time

    NTTIME

    password must change time

    UNIHDR

    username unicode string header

    UNIHDR

    user's full name unicode string header

    UNIHDR

    logon script unicode string header

    UNIHDR

    profile path unicode string header

    UNIHDR

    home directory unicode string header

    UNIHDR

    home directory drive unicode string header

    UINT16

    logon count

    UINT16

    bad password count

    UINT32

    User ID

    UINT32

    Group ID

    UINT32

    num groups

    VOID*

    undocumented buffer pointer to groups.

    UINT32

    user flags

    char[16]

    user session key

    UNIHDR

    logon server unicode string header

    UNIHDR

    logon domain unicode string header

    VOID*

    undocumented logon domain id pointer

    char[40]

    40 undocumented padding bytes. future expansion?

    UINT32

    0 - num_other_sids?

    VOID*

    NULL - undocumented pointer to other domain SIDs.

    UNISTR2

    username unicode string

    UNISTR2

    user's full name unicode string

    UNISTR2

    logon script unicode string

    UNISTR2

    profile path unicode string

    UNISTR2

    home directory unicode string

    UNISTR2

    home directory drive unicode string

    UINT32

    num groups

    GID[num_groups]

    group info

    UNISTR2

    logon server unicode string

    UNISTR2

    logon domain unicode string

    DOM_SID

    domain SID

    DOM_SID[num_sids]

    other domain SIDs?

    SH_INFO_1_PTR (pointers to level 1 share info strings)

    Note: see cifsrap2.txt section5, page 10.

    0 for shi1_type indicates a Disk.
    1 for shi1_type indicates a Print Queue.
    2 for shi1_type indicates a Device.
    3 for shi1_type indicates an IPC pipe.
    0x8000 0000 (top bit set in shi1_type) indicates a hidden share.
    VOID*

    shi1_netname - pointer to net name

    UINT32

    shi1_type - type of share. 0 - undocumented.

    VOID*

    shi1_remark - pointer to comment.

    SH_INFO_1_STR (level 1 share info strings)

    UNISTR2

    shi1_netname - unicode string of net name

    UNISTR2

    shi1_remark - unicode string of comment.

    SHARE_INFO_1_CTR

    share container with 0 entries:

    UINT32

    0 - EntriesRead

    UINT32

    0 - Buffer

    share container with > 0 entries:

    UINT32

    EntriesRead

    UINT32

    non-zero - Buffer

    UINT32

    EntriesRead

    SH_INFO_1_PTR[EntriesRead]

    share entry pointers

    SH_INFO_1_STR[EntriesRead]

    share entry strings

    UINT8[]

    padding to get unicode string 4-byte aligned with start of the SMB header.

    UINT32

    EntriesRead

    UINT32

    0 - padding

    SERVER_INFO_101

    Note: see cifs6.txt section 6.4 - the fields described therein will be of assistance here. for example, the type listed below is the same as fServerType, which is described in 6.4.1.

    SV_TYPE_WORKSTATION

    0x00000001 All workstations

    SV_TYPE_SERVER

    0x00000002 All servers

    SV_TYPE_SQLSERVER

    0x00000004 Any server running with SQL server

    SV_TYPE_DOMAIN_CTRL

    0x00000008 Primary domain controller

    SV_TYPE_DOMAIN_BAKCTRL

    0x00000010 Backup domain controller

    SV_TYPE_TIME_SOURCE

    0x00000020 Server running the timesource service

    SV_TYPE_AFP

    0x00000040 Apple File Protocol servers

    SV_TYPE_NOVELL

    0x00000080 Novell servers

    SV_TYPE_DOMAIN_MEMBER

    0x00000100 Domain Member

    SV_TYPE_PRINTQ_SERVER

    0x00000200 Server sharing print queue

    SV_TYPE_DIALIN_SERVER

    0x00000400 Server running dialin service.

    SV_TYPE_XENIX_SERVER

    0x00000800 Xenix server

    SV_TYPE_NT

    0x00001000 NT server

    SV_TYPE_WFW

    0x00002000 Server running Windows for

    SV_TYPE_SERVER_NT

    0x00008000 Windows NT non DC server

    SV_TYPE_POTENTIAL_BROWSER

    0x00010000 Server that can run the browser service

    SV_TYPE_BACKUP_BROWSER

    0x00020000 Backup browser server

    SV_TYPE_MASTER_BROWSER

    0x00040000 Master browser server

    SV_TYPE_DOMAIN_MASTER

    0x00080000 Domain Master Browser server

    SV_TYPE_LOCAL_LIST_ONLY

    0x40000000 Enumerate only entries marked "local"

    SV_TYPE_DOMAIN_ENUM

    0x80000000 Enumerate Domains. The pszServer and pszDomain parameters must be NULL.

    UINT32

    500 - platform_id

    VOID*

    pointer to name

    UINT32

    5 - major version

    UINT32

    4 - minor version

    UINT32

    type (SV_TYPE_... bit field)

    VOID*

    pointer to comment

    UNISTR2

    sv101_name - unicode string of server name

    UNISTR2

    sv_101_comment - unicode string of server comment.

    UINT8[]

    padding to get unicode string 4-byte aligned with start of the SMB header.

    MSRPC over Transact Named Pipe

    For details on the SMB Transact Named Pipe, see cifs6.txt

    MSRPC Pipes

    +The MSRPC is conducted over an SMB Transact Pipe with a name of +\PIPE\. You must first obtain a 16 bit file handle, by +sending a SMBopenX with the pipe name \PIPE\srvsvc for example. You can then perform an SMB Trans, -and must carry out an SMBclose on the file handle once you are finished.

    Trans Requests must be sent with two setup UINT16s, no UINT16 params (none +and must carry out an SMBclose on the file handle once you are finished. +

    +Trans Requests must be sent with two setup UINT16s, no UINT16 params (none known about), and UINT8 data parameters sufficient to contain the MSRPC header, and MSRPC data. The first UINT16 setup parameter must be either 0x0026 to indicate an RPC, or 0x0001 to indicate Set Named Pipe Handle state. The second UINT16 parameter must be the file handle for the pipe, -obtained above.

    The Data section for an API Command of 0x0026 (RPC pipe) in the Trans +obtained above. +

    +The Data section for an API Command of 0x0026 (RPC pipe) in the Trans Request is the RPC Header, followed by the RPC Data. The Data section for an API Command of 0x0001 (Set Named Pipe Handle state) is two bytes. The -only value seen for these two bytes is 0x00 0x43.

    MSRPC Responses are sent as response data inside standard SMB Trans -responses, with the MSRPC Header, MSRPC Data and MSRPC tail.

    It is suspected that the Trans Requests will need to be at least 2-byte +only value seen for these two bytes is 0x00 0x43. +

    +MSRPC Responses are sent as response data inside standard SMB Trans +responses, with the MSRPC Header, MSRPC Data and MSRPC tail. +

    +It is suspected that the Trans Requests will need to be at least 2-byte aligned (probably 4-byte). This is standard practice for SMBs. It is also independent of the observed 4-byte alignments with the start of the MSRPC header, including the 4-byte alignment between the MSRPC header and the -MSRPC data.

    First, an SMBtconX connection is made to the IPC$ share. The connection +MSRPC data. +

    +First, an SMBtconX connection is made to the IPC$ share. The connection must be made using encrypted passwords, not clear-text. Then, an SMBopenX is made on the pipe. Then, a Set Named Pipe Handle State must be sent, after which the pipe is ready to accept API commands. Lastly, and SMBclose -is sent.

    To be resolved:

    lkcl/01nov97 there appear to be two additional bytes after the null-terminated \PIPE\ name for the RPC pipe. Values seen so far are -listed below:

            initial SMBopenX request:         RPC API command 0x26 params:
-        "\\PIPE\\lsarpc"                  0x65 0x63; 0x72 0x70; 0x44 0x65;
-        "\\PIPE\\srvsvc"                  0x73 0x76; 0x4E 0x00; 0x5C 0x43;

    9.3.2. Header

    [section to be rewritten, following receipt of work by Duncan Stansfield]

    Interesting note: if you set packed data representation to 0x0100 0000 -then all 4-byte and 2-byte word ordering is turned around!

    The start of each of the NTLSA and NETLOGON named pipes begins with:

    offset: 00

    Variable type: UINT8

    Variable data: 5 - RPC major version

    offset: 01

    Variable type: UINT8

    Variable data: 0 - RPC minor version

    offset: 02

    Variable type: UINT8

    Variable data: 2 - RPC response packet

    offset: 03

    Variable type: UINT8

    Variable data: 3 - (FirstFrag bit-wise or with LastFrag)

    offset: 04

    Variable type: UINT32

    Variable data: 0x1000 0000 - packed data representation

    offset: 08

    Variable type: UINT16

    Variable data: fragment length - data size (bytes) inc header and tail.

    offset: 0A

    Variable type: UINT16

    Variable data: 0 - authentication length

    offset: 0C

    Variable type: UINT32

    Variable data: call identifier. matches 12th UINT32 of incoming RPC data.

    offset: 10

    Variable type: UINT32

    Variable data: allocation hint - data size (bytes) minus header and tail.

    offset: 14

    Variable type: UINT16

    Variable data: 0 - presentation context identifier

    offset: 16

    Variable type: UINT8

    Variable data: 0 - cancel count

    offset: 17

    Variable type: UINT8

    Variable data: in replies: 0 - reserved; in requests: opnum - see #defines.

    offset: 18

    Variable type: ......

    Variable data: start of data (goes on for allocation_hint bytes)

    9.3.2.1. RPC_Packet for request, response, bind and bind acknowledgement

    UINT8 versionmaj

    reply same as request (0x05)

    UINT8 versionmin

    reply same as request (0x00)

    UINT8 type

    one of the MSRPC_Type enums

    UINT8 flags

    reply same as request (0x00 for Bind, 0x03 for Request)

    UINT32 representation

    reply same as request (0x00000010)

    UINT16 fraglength

    the length of the data section of the SMB trans packet

    UINT16 authlength

    UINT32 callid

    call identifier. (e.g. 0x00149594)

    * stub USE TvPacket

    the remainder of the packet depending on the "type"

    9.3.2.2. Interface identification

    the interfaces are numbered. as yet I haven't seen more than one interface used on the same pipe name srvsvc

    abstract (0x4B324FC8, 0x01D31670, 0x475A7812, 0x88E16EBF, 0x00000003)
-transfer (0x8A885D04, 0x11C91CEB, 0x0008E89F, 0x6048102B, 0x00000002)

    9.3.2.3. RPC_Iface RW

    UINT8 byte[16]

    16 bytes of number

    UINT32 version

    the interface number

    9.3.2.4. RPC_ReqBind RW

    the remainder of the packet after the header if "type" was Bind in the response header, "type" should be BindAck

    UINT16 maxtsize

    maximum transmission fragment size (0x1630)

    UINT16 maxrsize

    max receive fragment size (0x1630)

    UINT32 assocgid

    associated group id (0x0)

    UINT32 numelements

    the number of elements (0x1)

    UINT16 contextid

    presentation context identifier (0x0)

    UINT8 numsyntaxes

    the number of syntaxes (has always been 1?)(0x1)

    UINT8[]

    4-byte alignment padding, against SMB header

    * abstractint USE RPC_Iface

    num and vers. of interface client is using

    * transferint USE RPC_Iface

    num and vers. of interface to use for replies

    9.3.2.5. RPC_Address RW

    UINT16 length

    length of the string including null terminator

    * port USE string

    the string above in single byte, null terminated form

    9.3.2.6. RPC_ResBind RW

    the response to place after the header in the reply packet

    UINT16 maxtsize

    same as request

    UINT16 maxrsize

    same as request

    UINT32 assocgid

    zero

    * secondaddr USE RPC_Address

    the address string, as described earlier

    UINT8[]

    4-byte alignment padding, against SMB header

    UINT8 numresults

    the number of results (0x01)

    UINT8[]

    4-byte alignment padding, against SMB header

    UINT16 result

    result (0x00 = accept)

    UINT16 reason

    reason (0x00 = no reason specified)

    * transfersyntax USE RPC_Iface

    the transfer syntax from the request

    9.3.2.7. RPC_ReqNorm RW

    the remainder of the packet after the header for every other other request

    UINT32 allochint

    the size of the stub data in bytes

    UINT16 prescontext

    presentation context identifier (0x0)

    UINT16 opnum

    operation number (0x15)

    * stub USE TvPacket

    a packet dependent on the pipe name (probably the interface) and the op number)

    9.3.2.8. RPC_ResNorm RW

    UINT32 allochint

    # size of the stub data in bytes

    UINT16 prescontext

    # presentation context identifier (same as request)

    UINT8 cancelcount

    # cancel count? (0x0)

    UINT8 reserved

    # 0 - one byte padding

    * stub USE TvPacket

    # the remainder of the reply

    9.3.3. Tail

    The end of each of the NTLSA and NETLOGON named pipes ends with:

    ......

    end of data

    UINT32

    return code

    9.3.4. RPC Bind / Bind Ack

    RPC Binds are the process of associating an RPC pipe (e.g \PIPE\lsarpc) -with a "transfer syntax" (see RPC_Iface structure). The purpose for doing -this is unknown.

    Note: The RPC_ResBind SMB Transact request is sent with two uint16 setup parameters. The first is 0x0026; the second is the file handle - returned by the SMBopenX Transact response.

    Note: The RPC_ResBind members maxtsize, maxrsize and assocgid are the same in the response as the same members in the RPC_ReqBind. The +is sent. +

    +To be resolved: +

    +lkcl/01nov97 there appear to be two additional bytes after the null-terminated \PIPE\ name for the RPC pipe. Values seen so far are +listed below:

    +        initial SMBopenX request:         RPC API command 0x26 params:
+        "\\PIPE\\lsarpc"                  0x65 0x63; 0x72 0x70; 0x44 0x65;
+        "\\PIPE\\srvsvc"                  0x73 0x76; 0x4E 0x00; 0x5C 0x43;
+

    Header

    [section to be rewritten, following receipt of work by Duncan Stansfield]

    Interesting note: if you set packed data representation to 0x0100 0000 +then all 4-byte and 2-byte word ordering is turned around!

    The start of each of the NTLSA and NETLOGON named pipes begins with:

    offset: 00

    Variable type: UINT8

    Variable data: 5 - RPC major version

    offset: 01

    Variable type: UINT8

    Variable data: 0 - RPC minor version

    offset: 02

    Variable type: UINT8

    Variable data: 2 - RPC response packet

    offset: 03

    Variable type: UINT8

    Variable data: 3 - (FirstFrag bit-wise or with LastFrag)

    offset: 04

    Variable type: UINT32

    Variable data: 0x1000 0000 - packed data representation

    offset: 08

    Variable type: UINT16

    Variable data: fragment length - data size (bytes) inc header and tail.

    offset: 0A

    Variable type: UINT16

    Variable data: 0 - authentication length

    offset: 0C

    Variable type: UINT32

    Variable data: call identifier. matches 12th UINT32 of incoming RPC data.

    offset: 10

    Variable type: UINT32

    Variable data: allocation hint - data size (bytes) minus header and tail.

    offset: 14

    Variable type: UINT16

    Variable data: 0 - presentation context identifier

    offset: 16

    Variable type: UINT8

    Variable data: 0 - cancel count

    offset: 17

    Variable type: UINT8

    Variable data: in replies: 0 - reserved; in requests: opnum - see #defines.

    offset: 18

    Variable type: ......

    Variable data: start of data (goes on for allocation_hint bytes)

    RPC_Packet for request, response, bind and bind acknowledgement

    UINT8 versionmaj

    reply same as request (0x05)

    UINT8 versionmin

    reply same as request (0x00)

    UINT8 type

    one of the MSRPC_Type enums

    UINT8 flags

    reply same as request (0x00 for Bind, 0x03 for Request)

    UINT32 representation

    reply same as request (0x00000010)

    UINT16 fraglength

    the length of the data section of the SMB trans packet

    UINT16 authlength

    UINT32 callid

    call identifier. (e.g. 0x00149594)

    * stub USE TvPacket

    the remainder of the packet depending on the "type"

    Interface identification

    the interfaces are numbered. as yet I haven't seen more than one interface used on the same pipe name srvsvc

    +abstract (0x4B324FC8, 0x01D31670, 0x475A7812, 0x88E16EBF, 0x00000003)
+transfer (0x8A885D04, 0x11C91CEB, 0x0008E89F, 0x6048102B, 0x00000002)
+

    RPC_Iface RW

    UINT8 byte[16]

    16 bytes of number

    UINT32 version

    the interface number

    RPC_ReqBind RW

    the remainder of the packet after the header if "type" was Bind in the response header, "type" should be BindAck

    UINT16 maxtsize

    maximum transmission fragment size (0x1630)

    UINT16 maxrsize

    max receive fragment size (0x1630)

    UINT32 assocgid

    associated group id (0x0)

    UINT32 numelements

    the number of elements (0x1)

    UINT16 contextid

    presentation context identifier (0x0)

    UINT8 numsyntaxes

    the number of syntaxes (has always been 1?)(0x1)

    UINT8[]

    4-byte alignment padding, against SMB header

    * abstractint USE RPC_Iface

    num and vers. of interface client is using

    * transferint USE RPC_Iface

    num and vers. of interface to use for replies

    RPC_Address RW

    UINT16 length

    length of the string including null terminator

    * port USE string

    the string above in single byte, null terminated form

    RPC_ResBind RW

    the response to place after the header in the reply packet

    UINT16 maxtsize

    same as request

    UINT16 maxrsize

    same as request

    UINT32 assocgid

    zero

    * secondaddr USE RPC_Address

    the address string, as described earlier

    UINT8[]

    4-byte alignment padding, against SMB header

    UINT8 numresults

    the number of results (0x01)

    UINT8[]

    4-byte alignment padding, against SMB header

    UINT16 result

    result (0x00 = accept)

    UINT16 reason

    reason (0x00 = no reason specified)

    * transfersyntax USE RPC_Iface

    the transfer syntax from the request

    RPC_ReqNorm RW

    the remainder of the packet after the header for every other other request

    UINT32 allochint

    the size of the stub data in bytes

    UINT16 prescontext

    presentation context identifier (0x0)

    UINT16 opnum

    operation number (0x15)

    * stub USE TvPacket

    a packet dependent on the pipe name (probably the interface) and the op number)

    RPC_ResNorm RW

    UINT32 allochint

    # size of the stub data in bytes

    UINT16 prescontext

    # presentation context identifier (same as request)

    UINT8 cancelcount

    # cancel count? (0x0)

    UINT8 reserved

    # 0 - one byte padding

    * stub USE TvPacket

    # the remainder of the reply

    Tail

    The end of each of the NTLSA and NETLOGON named pipes ends with:

    ......

    end of data

    UINT32

    return code

    RPC Bind / Bind Ack

    +RPC Binds are the process of associating an RPC pipe (e.g \PIPE\lsarpc) +with a "transfer syntax" (see RPC_Iface structure). The purpose for doing +this is unknown. +

    Note: The RPC_ResBind SMB Transact request is sent with two uint16 setup parameters. The first is 0x0026; the second is the file handle + returned by the SMBopenX Transact response.

    Note: The RPC_ResBind members maxtsize, maxrsize and assocgid are the same in the response as the same members in the RPC_ReqBind. The RPC_ResBind member transfersyntax is the same in the response as - the

    Note: The RPC_ResBind response member secondaddr contains the name of what is presumed to be the service behind the RPC pipe. The - mapping identified so far is:

    initial SMBopenX request:

    RPC_ResBind response:

    "\\PIPE\\srvsvc"

    "\\PIPE\\ntsvcs"

    "\\PIPE\\samr"

    "\\PIPE\\lsass"

    "\\PIPE\\lsarpc"

    "\\PIPE\\lsass"

    "\\PIPE\\wkssvc"

    "\\PIPE\\wksvcs"

    "\\PIPE\\NETLOGON"

    "\\PIPE\\NETLOGON"

    Note: The RPC_Packet fraglength member in both the Bind Request and Bind Acknowledgment must contain the length of the entire RPC data, including the RPC_Packet header.

    Request:

    RPC_Packet
    RPC_ReqBind

    Response:

    RPC_Packet
    RPC_ResBind

    9.3.5. NTLSA Transact Named Pipe

    The sequence of actions taken on this pipe are:

    Establish a connection to the IPC$ share (SMBtconX). use encrypted passwords.
    Open an RPC Pipe with the name "\\PIPE\\lsarpc". Store the file handle.
    Using the file handle, send a Set Named Pipe Handle state to 0x4300.
    Send an LSA Open Policy request. Store the Policy Handle.
    Using the Policy Handle, send LSA Query Info Policy requests, etc.
    Using the Policy Handle, send an LSA Close.
    Close the IPC$ share.

    Defines for this pipe, identifying the query are:

    LSA Open Policy:

    0x2c

    LSA Query Info Policy:

    0x07

    LSA Enumerate Trusted Domains:

    0x0d

    LSA Open Secret:

    0xff

    LSA Lookup SIDs:

    0xfe

    LSA Lookup Names:

    0xfd

    LSA Close:

    0x00

    9.3.6. LSA Open Policy

    Note: The policy handle can be anything you like.

    9.3.6.1. Request

    VOID*

    buffer pointer

    UNISTR2

    server name - unicode string starting with two '\'s

    OBJ_ATTR

    object attributes

    UINT32

    1 - desired access

    9.3.6.2. Response

    POL_HND

    LSA policy handle

    return

    0 - indicates success

    9.3.7. LSA Query Info Policy

    Note: The info class in response must be the same as that in the request.

    9.3.7.1. Request

    POL_HND

    LSA policy handle

    UINT16

    info class (also a policy handle?)

    9.3.7.2. Response

    VOID*

    undocumented buffer pointer

    UINT16

    info class (same as info class in request).

    switch (info class)
+	the
    Note:	The RPC_ResBind response member secondaddr contains the name of what is presumed to be the service behind the RPC pipe.  The
+	mapping identified so far is:
    initial SMBopenX request:
    RPC_ResBind response:
    "\\PIPE\\srvsvc"
    "\\PIPE\\ntsvcs"
    "\\PIPE\\samr"
    "\\PIPE\\lsass"
    "\\PIPE\\lsarpc"
    "\\PIPE\\lsass"
    "\\PIPE\\wkssvc"
    "\\PIPE\\wksvcs"
    "\\PIPE\\NETLOGON"
    "\\PIPE\\NETLOGON"
    Note:	The RPC_Packet fraglength member in both the Bind Request and Bind Acknowledgment must contain the length of the entire RPC data, including the RPC_Packet header.
    Request:
    RPC_Packet
    RPC_ReqBind
    Response:
    RPC_Packet
    RPC_ResBind

    NTLSA Transact Named Pipe

    The sequence of actions taken on this pipe are:

    Establish a connection to the IPC$ share (SMBtconX). use encrypted passwords.
    Open an RPC Pipe with the name "\\PIPE\\lsarpc". Store the file handle.
    Using the file handle, send a Set Named Pipe Handle state to 0x4300.
    Send an LSA Open Policy request. Store the Policy Handle.
    Using the Policy Handle, send LSA Query Info Policy requests, etc.
    Using the Policy Handle, send an LSA Close.
    Close the IPC$ share.

    Defines for this pipe, identifying the query are:

    LSA Open Policy:

    0x2c

    LSA Query Info Policy:

    0x07

    LSA Enumerate Trusted Domains:

    0x0d

    LSA Open Secret:

    0xff

    LSA Lookup SIDs:

    0xfe

    LSA Lookup Names:

    0xfd

    LSA Close:

    0x00

    LSA Open Policy

    Note: The policy handle can be anything you like.

    Request

    VOID*

    buffer pointer

    UNISTR2

    server name - unicode string starting with two '\'s

    OBJ_ATTR

    object attributes

    UINT32

    1 - desired access

    Response

    POL_HND

    LSA policy handle

    return

    0 - indicates success

    LSA Query Info Policy

    Note: The info class in response must be the same as that in the request.

    Request

    POL_HND

    LSA policy handle

    UINT16

    info class (also a policy handle?)

    Response

    VOID*

    undocumented buffer pointer

    UINT16

    info class (same as info class in request).

    +switch (info class)
 case 3:
 case 5:
 {
 DOM_INFO domain info, levels 3 and 5 (are the same).
 }
 
-return    0 - indicates success

    9.3.8. LSA Enumerate Trusted Domains

    9.3.8.1. Request

    no extra data

    9.3.8.2. Response

    UINT32

    0 - enumeration context

    UINT32

    0 - entries read

    UINT32

    0 - trust information

    return

    0x8000 001a - "no trusted domains" success code

    9.3.9. LSA Open Secret

    9.3.9.1. Request

    no extra data

    9.3.9.2. Response

    UINT32

    0 - undocumented

    UINT32

    0 - undocumented

    UINT32

    0 - undocumented

    UINT32

    0 - undocumented

    UINT32

    0 - undocumented

    return 0x0C00 0034 - "no such secret" success code

    9.3.10. LSA Close

    9.3.10.1. Request

    POL_HND

    policy handle to be closed

    9.3.10.2. Response

    POL_HND

    0s - closed policy handle (all zeros)

    return 0 - indicates success

    9.3.11. LSA Lookup SIDS

    Note: num_entries in response must be same as num_entries in request.

    9.3.11.1. Request

    POL_HND

    LSA policy handle

    UINT32

    num_entries

    VOID*

    undocumented domain SID buffer pointer

    VOID*

    undocumented domain name buffer pointer

    VOID*[num_entries] undocumented domain SID pointers to be looked up.

    DOM_SID[num_entries] domain SIDs to be looked up.

    char[16]

    completely undocumented 16 bytes.

    9.3.11.2. Response

    DOM_REF

    domain reference response

    UINT32

    num_entries (listed above)

    VOID*

    undocumented buffer pointer

    UINT32

    num_entries (listed above)

    DOM_SID2[num_entries]

    domain SIDs (from Request, listed above).

    UINT32

    num_entries (listed above)

    return 0 - indicates success

    9.3.12. LSA Lookup Names

    Note: num_entries in response must be same as num_entries in request.

    9.3.12.1. Request

    POL_HND

    LSA policy handle

    UINT32

    num_entries

    UINT32

    num_entries

    VOID*

    undocumented domain SID buffer pointer

    VOID*

    undocumented domain name buffer pointer

    NAME[num_entries]

    names to be looked up.

    char[]

    undocumented bytes - falsely translated SID structure?

    9.3.12.2. Response

    DOM_REF

    domain reference response

    UINT32

    num_entries (listed above)

    VOID*

    undocumented buffer pointer

    UINT32

    num_entries (listed above)

    DOM_RID[num_entries]

    domain SIDs (from Request, listed above).

    UINT32

    num_entries (listed above)

    return 0 - indicates success

    9.4. NETLOGON rpc Transact Named Pipe

    The sequence of actions taken on this pipe are:

    tablish a connection to the IPC$ share (SMBtconX). use encrypted passwords.
    en an RPC Pipe with the name "\\PIPE\\NETLOGON". Store the file handle.
    ing the file handle, send a Set Named Pipe Handle state to 0x4300.
    eate Client Challenge. Send LSA Request Challenge. Store Server Challenge.
    lculate Session Key. Send an LSA Auth 2 Challenge. Store Auth2 Challenge.
    lc/Verify Client Creds. Send LSA Srv PW Set. Calc/Verify Server Creds.
    lc/Verify Client Creds. Send LSA SAM Logon . Calc/Verify Server Creds.
    lc/Verify Client Creds. Send LSA SAM Logoff. Calc/Verify Server Creds.
    ose the IPC$ share.

    Defines for this pipe, identifying the query are

    LSA Request Challenge:

    0x04

    LSA Server Password Set:

    0x06

    LSA SAM Logon:

    0x02

    LSA SAM Logoff:

    0x03

    LSA Auth 2:

    0x0f

    LSA Logon Control:

    0x0e

    9.4.1. LSA Request Challenge

    Note: logon server name starts with two '\' characters and is upper case.

    Note: logon client is the machine, not the user.

    Note: the initial LanManager password hash, against which the challenge is issued, is the machine name itself (lower case). there will becalls issued (LSA Server Password Set) which will change this, later. refusing these calls allows you to always deal with the same password (i.e the LM# of the machine name in lower case).

    9.4.1.1. Request

    VOID*

    undocumented buffer pointer

    UNISTR2

    logon server unicode string

    UNISTR2

    logon client unicode string

    char[8]

    client challenge

    9.4.1.2. Response

    char[8]

    server challenge

    return 0 - indicates success

    9.4.2. LSA Authenticate 2

    Note: in between request and response, calculate the client credentials, and check them against the client-calculated credentials (this process uses the previously received client credentials).

    Note: neg_flags in the response is the same as that in the request.

    Note: you must take a copy of the client-calculated credentials received here, because they will be used in subsequent authentication packets.

    9.4.2.1. Request

    LOG_INFO

    client identification info

    char[8]

    client-calculated credentials

    UINT8[]

    padding to 4-byte align with start of SMB header.

    UINT32

    neg_flags - negotiated flags (usual value is 0x0000 01ff)

    9.4.2.2. Response

    char[8]

    server credentials.

    UINT32

    neg_flags - same as neg_flags in request.

    return 0 - indicates success. failure value unknown.

    9.4.3. LSA Server Password Set

    Note: the new password is suspected to be a DES encryption using the old password to generate the key.

    Note: in between request and response, calculate the client credentials, and check them against the client-calculated credentials (this process uses the previously received client credentials).

    Note: the server credentials are constructed from the client-calculated credentials and the client time + 1 second.

    Note: you must take a copy of the client-calculated credentials received here, because they will be used in subsequent authentication packets.

    9.4.3.1. Request

    CLNT_INFO

    client identification/authentication info

    char[]

    new password - undocumented.

    9.4.3.2. Response

    CREDS

    server credentials. server time stamp appears to be ignored.

    return 0 - indicates success; 0xC000 006a indicates failure

    9.4.4. LSA SAM Logon

    Note: valid_user is True iff the username and password hash are valid for - the requested domain.

    9.4.4.1. Request

    SAM_INFO

    sam_id structure

    9.4.4.2. Response

    VOID*

    undocumented buffer pointer

    CREDS

    server credentials. server time stamp appears to be ignored.

    if (valid_user)
+return    0 - indicates success
+

    LSA Enumerate Trusted Domains

    Request

    no extra data

    Response

    UINT32

    0 - enumeration context

    UINT32

    0 - entries read

    UINT32

    0 - trust information

    return

    0x8000 001a - "no trusted domains" success code

    LSA Open Secret

    Request

    no extra data

    Response

    UINT32

    0 - undocumented

    UINT32

    0 - undocumented

    UINT32

    0 - undocumented

    UINT32

    0 - undocumented

    UINT32

    0 - undocumented

    return 0x0C00 0034 - "no such secret" success code

    LSA Close

    Request

    POL_HND

    policy handle to be closed

    Response

    POL_HND

    0s - closed policy handle (all zeros)

    return 0 - indicates success

    LSA Lookup SIDS

    Note: num_entries in response must be same as num_entries in request.

    Request

    POL_HND

    LSA policy handle

    UINT32

    num_entries

    VOID*

    undocumented domain SID buffer pointer

    VOID*

    undocumented domain name buffer pointer

    VOID*[num_entries] undocumented domain SID pointers to be looked up. +

    DOM_SID[num_entries] domain SIDs to be looked up.

    char[16]

    completely undocumented 16 bytes.

    Response

    DOM_REF

    domain reference response

    UINT32

    num_entries (listed above)

    VOID*

    undocumented buffer pointer

    UINT32

    num_entries (listed above)

    DOM_SID2[num_entries]

    domain SIDs (from Request, listed above).

    UINT32

    num_entries (listed above)

    return 0 - indicates success

    LSA Lookup Names

    Note: num_entries in response must be same as num_entries in request.

    Request

    POL_HND

    LSA policy handle

    UINT32

    num_entries

    UINT32

    num_entries

    VOID*

    undocumented domain SID buffer pointer

    VOID*

    undocumented domain name buffer pointer

    NAME[num_entries]

    names to be looked up.

    char[]

    undocumented bytes - falsely translated SID structure?

    Response

    DOM_REF

    domain reference response

    UINT32

    num_entries (listed above)

    VOID*

    undocumented buffer pointer

    UINT32

    num_entries (listed above)

    DOM_RID[num_entries]

    domain SIDs (from Request, listed above).

    UINT32

    num_entries (listed above)

    return 0 - indicates success

    NETLOGON rpc Transact Named Pipe

    The sequence of actions taken on this pipe are:

    tablish a connection to the IPC$ share (SMBtconX). use encrypted passwords.
    en an RPC Pipe with the name "\\PIPE\\NETLOGON". Store the file handle.
    ing the file handle, send a Set Named Pipe Handle state to 0x4300.
    eate Client Challenge. Send LSA Request Challenge. Store Server Challenge.
    lculate Session Key. Send an LSA Auth 2 Challenge. Store Auth2 Challenge.
    lc/Verify Client Creds. Send LSA Srv PW Set. Calc/Verify Server Creds.
    lc/Verify Client Creds. Send LSA SAM Logon . Calc/Verify Server Creds.
    lc/Verify Client Creds. Send LSA SAM Logoff. Calc/Verify Server Creds.
    ose the IPC$ share.

    Defines for this pipe, identifying the query are

    LSA Request Challenge:

    0x04

    LSA Server Password Set:

    0x06

    LSA SAM Logon:

    0x02

    LSA SAM Logoff:

    0x03

    LSA Auth 2:

    0x0f

    LSA Logon Control:

    0x0e

    LSA Request Challenge

    Note: logon server name starts with two '\' characters and is upper case.

    Note: logon client is the machine, not the user.

    Note: the initial LanManager password hash, against which the challenge is issued, is the machine name itself (lower case). there will becalls issued (LSA Server Password Set) which will change this, later. refusing these calls allows you to always deal with the same password (i.e the LM# of the machine name in lower case).

    Request

    VOID*

    undocumented buffer pointer

    UNISTR2

    logon server unicode string

    UNISTR2

    logon client unicode string

    char[8]

    client challenge

    Response

    char[8]

    server challenge

    return 0 - indicates success

    LSA Authenticate 2

    Note: in between request and response, calculate the client credentials, and check them against the client-calculated credentials (this process uses the previously received client credentials).

    Note: neg_flags in the response is the same as that in the request.

    Note: you must take a copy of the client-calculated credentials received here, because they will be used in subsequent authentication packets.

    Request

    LOG_INFO

    client identification info

    char[8]

    client-calculated credentials

    UINT8[]

    padding to 4-byte align with start of SMB header.

    UINT32

    neg_flags - negotiated flags (usual value is 0x0000 01ff)

    Response

    char[8]

    server credentials.

    UINT32

    neg_flags - same as neg_flags in request.

    return 0 - indicates success. failure value unknown.

    LSA Server Password Set

    Note: the new password is suspected to be a DES encryption using the old password to generate the key.

    Note: in between request and response, calculate the client credentials, and check them against the client-calculated credentials (this process uses the previously received client credentials).

    Note: the server credentials are constructed from the client-calculated credentials and the client time + 1 second.

    Note: you must take a copy of the client-calculated credentials received here, because they will be used in subsequent authentication packets.

    Request

    CLNT_INFO

    client identification/authentication info

    char[]

    new password - undocumented.

    Response

    CREDS

    server credentials. server time stamp appears to be ignored.

    return 0 - indicates success; 0xC000 006a indicates failure

    LSA SAM Logon

    +Note: valid_user is True iff the username and password hash are valid for + the requested domain. +

    Request

    SAM_INFO

    sam_id structure

    Response

    VOID*

    undocumented buffer pointer

    CREDS

    server credentials. server time stamp appears to be ignored.

    +if (valid_user)
 {
 	UINT16      3 - switch value indicating USER_INFO structure.
     VOID*     non-zero - pointer to USER_INFO structure
@@ -6896,1325 +1315,117 @@ else
     UINT32    1 - Authoritative response; 0 - Non-Auth?
 
     return    0xC000 0064 - NT_STATUS_NO_SUCH_USER.
-}

    9.4.5. LSA SAM Logoff

    Note: presumably, the SAM_INFO structure is validated, and a (currently - undocumented) error code returned if the Logoff is invalid.

    9.4.5.1. Request

    SAM_INFO

    sam_id structure

    9.4.5.2. Response

    VOID*

    undocumented buffer pointer

    CREDS

    server credentials. server time stamp appears to be ignored.

    return 0 - indicates success. undocumented failure indication.

    9.5. \\MAILSLOT\NET\NTLOGON

    Note: mailslots will contain a response mailslot, to which the response - should be sent. the target NetBIOS name is REQUEST_NAME<20>, where - REQUEST_NAME is the name of the machine that sent the request.

    9.5.1. Query for PDC

    Note: NTversion, LMNTtoken, LM20token in response are the same as those given in the request.

    9.5.1.1. Request

    UINT16

    0x0007 - Query for PDC

    STR

    machine name

    STR

    response mailslot

    UINT8[]

    padding to 2-byte align with start of mailslot.

    UNISTR

    machine name

    UINT32

    NTversion

    UINT16

    LMNTtoken

    UINT16

    LM20token

    9.5.1.2. Response

    UINT16

    0x000A - Respose to Query for PDC

    STR

    machine name (in uppercase)

    UINT8[]

    padding to 2-byte align with start of mailslot.

    UNISTR

    machine name

    UNISTR

    domain name

    UINT32

    NTversion (same as received in request)

    UINT16

    LMNTtoken (same as received in request)

    UINT16

    LM20token (same as received in request)

    9.5.2. SAM Logon

    Note: machine name in response is preceded by two '\' characters.

    Note: NTversion, LMNTtoken, LM20token in response are the same as those given in the request.

    Note: user name in the response is presumably the same as that in the request.

    9.5.2.1. Request

    UINT16

    0x0012 - SAM Logon

    UINT16

    request count

    UNISTR

    machine name

    UNISTR

    user name

    STR

    response mailslot

    UINT32

    alloweable account

    UINT32

    domain SID size

    char[sid_size]

    domain SID, of sid_size bytes.

    UINT8[]

    ???? padding to 4? 2? -byte align with start of mailslot.

    UINT32

    NTversion

    UINT16

    LMNTtoken

    UINT16

    LM20token

    9.5.2.2. Response

    UINT16

    0x0013 - Response to SAM Logon

    UNISTR

    machine name

    UNISTR

    user name - workstation trust account

    UNISTR

    domain name

    UINT32

    NTversion

    UINT16

    LMNTtoken

    UINT16

    LM20token

    9.6. SRVSVC Transact Named Pipe

    Defines for this pipe, identifying the query are:

    Net Share Enum

    0x0f

    Net Server Get Info

    0x15

    9.6.1. Net Share Enum

    Note: share level and switch value in the response are presumably the same as those in the request.

    Note: cifsrap2.txt (section 5) may be of limited assistance here.

    9.6.1.1. Request

    VOID*

    pointer (to server name?)

    UNISTR2

    server name

    UINT8[]

    padding to get unicode string 4-byte aligned with the start of the SMB header.

    UINT32

    share level

    UINT32

    switch value

    VOID*

    pointer to SHARE_INFO_1_CTR

    SHARE_INFO_1_CTR

    share info with 0 entries

    UINT32

    preferred maximum length (0xffff ffff)

    9.6.1.2. Response

    UINT32

    share level

    UINT32

    switch value

    VOID*

    pointer to SHARE_INFO_1_CTR

    SHARE_INFO_1_CTR

    share info (only added if share info ptr is non-zero)

    return 0 - indicates success

    9.6.2. Net Server Get Info

    Note: level is the same value as in the request.

    9.6.2.1. Request

    UNISTR2

    server name

    UINT32

    switch level

    9.6.2.2. Response

    UINT32

    switch level

    VOID*

    pointer to SERVER_INFO_101

    SERVER_INFO_101

    server info (only added if server info ptr is non-zero)

    return 0 - indicates success

    9.7. Cryptographic side of NT Domain Authentication

    9.7.1. Definitions

    Add(A1,A2)

    Intel byte ordered addition of corresponding 4 byte words in arrays A1 and A2

    E(K,D)

    DES ECB encryption of 8 byte data D using 7 byte key K

    lmowf()

    Lan man hash

    ntowf()

    NT hash

    PW

    md4(machine_password) == md4(lsadump $machine.acc) == -pwdump(machine$) (initially) == md4(lmowf(unicode(machine)))

    ARC4(K,Lk,D,Ld)

    ARC4 encryption of data D of length Ld with key K of length Lk

    v[m..n(,l)]

    subset of v from bytes m to n, optionally padded with zeroes to length l

    Cred(K,D)

    E(K[7..7,7],E(K[0..6],D)) computes a credential

    Time()

    4 byte current time

    Cc,Cs

    8 byte client and server challenges Rc,Rs: 8 byte client and server credentials

    9.7.2. Protocol

    C->S ReqChal,Cc S->C Cs

    C & S compute session key Ks = E(PW[9..15],E(PW[0..6],Add(Cc,Cs)))

    C: Rc = Cred(Ks,Cc) C->S Authenticate,Rc S: Rs = Cred(Ks,Cs), -assert(Rc == Cred(Ks,Cc)) S->C Rs C: assert(Rs == Cred(Ks,Cs))

    On joining the domain the client will optionally attempt to change its +} +

    LSA SAM Logoff

    +Note: presumably, the SAM_INFO structure is validated, and a (currently + undocumented) error code returned if the Logoff is invalid. +

    Request

    SAM_INFO

    sam_id structure

    Response

    VOID*

    undocumented buffer pointer

    CREDS

    server credentials. server time stamp appears to be ignored.

    return 0 - indicates success. undocumented failure indication.

    \\MAILSLOT\NET\NTLOGON

    +Note: mailslots will contain a response mailslot, to which the response + should be sent. the target NetBIOS name is REQUEST_NAME<20>, where + REQUEST_NAME is the name of the machine that sent the request. +

    Query for PDC

    Note: NTversion, LMNTtoken, LM20token in response are the same as those given in the request.

    Request

    UINT16

    0x0007 - Query for PDC

    STR

    machine name

    STR

    response mailslot

    UINT8[]

    padding to 2-byte align with start of mailslot.

    UNISTR

    machine name

    UINT32

    NTversion

    UINT16

    LMNTtoken

    UINT16

    LM20token

    Response

    UINT16

    0x000A - Respose to Query for PDC

    STR

    machine name (in uppercase)

    UINT8[]

    padding to 2-byte align with start of mailslot.

    UNISTR

    machine name

    UNISTR

    domain name

    UINT32

    NTversion (same as received in request)

    UINT16

    LMNTtoken (same as received in request)

    UINT16

    LM20token (same as received in request)

    SAM Logon

    Note: machine name in response is preceded by two '\' characters.

    Note: NTversion, LMNTtoken, LM20token in response are the same as those given in the request.

    Note: user name in the response is presumably the same as that in the request.

    Request

    UINT16

    0x0012 - SAM Logon

    UINT16

    request count

    UNISTR

    machine name

    UNISTR

    user name

    STR

    response mailslot

    UINT32

    alloweable account

    UINT32

    domain SID size

    char[sid_size]

    domain SID, of sid_size bytes.

    UINT8[]

    ???? padding to 4? 2? -byte align with start of mailslot.

    UINT32

    NTversion

    UINT16

    LMNTtoken

    UINT16

    LM20token

    Response

    UINT16

    0x0013 - Response to SAM Logon

    UNISTR

    machine name

    UNISTR

    user name - workstation trust account

    UNISTR

    domain name

    UINT32

    NTversion

    UINT16

    LMNTtoken

    UINT16

    LM20token

    SRVSVC Transact Named Pipe

    Defines for this pipe, identifying the query are:

    Net Share Enum

    0x0f

    Net Server Get Info

    0x15

    Net Share Enum

    Note: share level and switch value in the response are presumably the same as those in the request.

    Note: cifsrap2.txt (section 5) may be of limited assistance here.

    Request

    VOID*

    pointer (to server name?)

    UNISTR2

    server name

    UINT8[]

    padding to get unicode string 4-byte aligned with the start of the SMB header.

    UINT32

    share level

    UINT32

    switch value

    VOID*

    pointer to SHARE_INFO_1_CTR

    SHARE_INFO_1_CTR

    share info with 0 entries

    UINT32

    preferred maximum length (0xffff ffff)

    Response

    UINT32

    share level

    UINT32

    switch value

    VOID*

    pointer to SHARE_INFO_1_CTR

    SHARE_INFO_1_CTR

    share info (only added if share info ptr is non-zero)

    return 0 - indicates success

    Net Server Get Info

    Note: level is the same value as in the request.

    Request

    UNISTR2

    server name

    UINT32

    switch level

    Response

    UINT32

    switch level

    VOID*

    pointer to SERVER_INFO_101

    SERVER_INFO_101

    server info (only added if server info ptr is non-zero)

    return 0 - indicates success

    Cryptographic side of NT Domain Authentication

    Definitions

    Add(A1,A2)

    Intel byte ordered addition of corresponding 4 byte words in arrays A1 and A2

    E(K,D)

    DES ECB encryption of 8 byte data D using 7 byte key K

    lmowf()

    Lan man hash

    ntowf()

    NT hash

    PW

    md4(machine_password) == md4(lsadump $machine.acc) == +pwdump(machine$) (initially) == md4(lmowf(unicode(machine))) +

    ARC4(K,Lk,D,Ld)

    ARC4 encryption of data D of length Ld with key K of length Lk

    v[m..n(,l)]

    subset of v from bytes m to n, optionally padded with zeroes to length l

    Cred(K,D)

    E(K[7..7,7],E(K[0..6],D)) computes a credential

    Time()

    4 byte current time

    Cc,Cs

    8 byte client and server challenges Rc,Rs: 8 byte client and server credentials

    Protocol

    +C->S ReqChal,Cc
+S->C Cs
+
    +C & S compute session key Ks = E(PW[9..15],E(PW[0..6],Add(Cc,Cs)))
+
    +C: Rc = Cred(Ks,Cc)
+C->S Authenticate,Rc
+S: Rs = Cred(Ks,Cs), assert(Rc == Cred(Ks,Cc))
+S->C Rs
+C: assert(Rs == Cred(Ks,Cs))
+

    +On joining the domain the client will optionally attempt to change its password and the domain controller may refuse to update it depending -on registry settings. This will also occur weekly afterwards.

    C: Tc = Time(), Rc' = Cred(Ks,Rc+Tc) C->S ServerPasswordSet,Rc',Tc, -arc4(Ks[0..7,16],lmowf(randompassword()) C: Rc = Cred(Ks,Rc+Tc+1) S: -assert(Rc' == Cred(Ks,Rc+Tc)), Ts = Time() S: Rs' = Cred(Ks,Rs+Tc+1) -S->C Rs',Ts C: assert(Rs' == Cred(Ks,Rs+Tc+1)) S: Rs = Rs'

    User: U with password P wishes to login to the domain (incidental data -such as workstation and domain omitted)

    C: Tc = Time(), Rc' = Cred(Ks,Rc+Tc) C->S NetLogonSamLogon,Rc',Tc,U, -arc4(Ks[0..7,16],16,ntowf(P),16), arc4(Ks[0..7,16],16,lmowf(P),16) S: -assert(Rc' == Cred(Ks,Rc+Tc)) assert(passwords match those in SAM) S: -Ts = Time()

    S->C Cred(Ks,Cred(Ks,Rc+Tc+1)),userinfo(logon script,UID,SIDs,etc) C: -assert(Rs == Cred(Ks,Cred(Rc+Tc+1)) C: Rc = Cred(Ks,Rc+Tc+1)

    9.7.3. Comments

    On first joining the domain the session key could be computed by +on registry settings. This will also occur weekly afterwards. +

    +C: Tc = Time(), Rc' = Cred(Ks,Rc+Tc)
+C->S ServerPasswordSet,Rc',Tc,arc4(Ks[0..7,16],lmowf(randompassword())
+C: Rc = Cred(Ks,Rc+Tc+1)
+S: assert(Rc' == Cred(Ks,Rc+Tc)), Ts = Time()
+S: Rs' = Cred(Ks,Rs+Tc+1)
+S->C Rs',Ts
+C: assert(Rs' == Cred(Ks,Rs+Tc+1))
+S: Rs = Rs'
+

    +User: U with password P wishes to login to the domain (incidental data +such as workstation and domain omitted) +

    +C: Tc = Time(), Rc' = Cred(Ks,Rc+Tc)
+C->S NetLogonSamLogon,Rc',Tc,U,arc4(Ks[0..7,16],16,ntowf(P),16), arc4(Ks[0..7,16],16,lmowf(P),16)
+S: assert(Rc' == Cred(Ks,Rc+Tc)) assert(passwords match those in SAM)
+S: Ts = Time()
+
    +S->C Cred(Ks,Cred(Ks,Rc+Tc+1)),userinfo(logon script,UID,SIDs,etc)
+C: assert(Rs == Cred(Ks,Cred(Rc+Tc+1))
+C: Rc = Cred(Ks,Rc+Tc+1)
+

    Comments

    +On first joining the domain the session key could be computed by anyone listening in on the network as the machine password has a well known value. Until the machine is rebooted it will use this session key to encrypt NT and LM one way functions of passwords which are password equivalents. Any user who logs in before the machine has been rebooted a second time will have their password equivalent exposed. Of -course the new machine password is exposed at this time anyway.

    None of the returned user info such as logon script, profile path and -SIDs *appear* to be protected by anything other than the TCP checksum.

    The server time stamps appear to be ignored.

    The client sends a ReturnAuthenticator in the SamLogon request which I +course the new machine password is exposed at this time anyway. +

    +None of the returned user info such as logon script, profile path and +SIDs *appear* to be protected by anything other than the TCP checksum. +

    +The server time stamps appear to be ignored. +

    +The client sends a ReturnAuthenticator in the SamLogon request which I can't find a use for. However its time is used as the timestamp -returned by the server.

    The password OWFs should NOT be sent over the network reversibly +returned by the server. +

    +The password OWFs should NOT be sent over the network reversibly encrypted. They should be sent using ARC4(Ks,md4(owf)) with the server -computing the same function using the owf values in the SAM.

    9.8. SIDs and RIDs

    SIDs and RIDs are well documented elsewhere.

    A SID is an NT Security ID (see DOM_SID structure). They are of the form:

    revision-NN-SubAuth1-SubAuth2-SubAuth3...
    revision-0xNNNNNNNNNNNN-SubAuth1-SubAuth2-SubAuth3...

    currently, the SID revision is 1. -The Sub-Authorities are known as Relative IDs (RIDs).

    9.8.1. Well-known SIDs

    9.8.1.1. Universal well-known SIDs

    Null SID

    S-1-0-0

    World

    S-1-1-0

    Local

    S-1-2-0

    Creator Owner ID

    S-1-3-0

    Creator Group ID

    S-1-3-1

    Creator Owner Server ID

    S-1-3-2

    Creator Group Server ID

    S-1-3-3

    (Non-unique IDs)

    S-1-4

    9.8.1.2. NT well-known SIDs

    NT Authority

    S-1-5

    Dialup

    S-1-5-1

    Network

    S-1-5-2

    Batch

    S-1-5-3

    Interactive

    S-1-5-4

    Service

    S-1-5-6

    AnonymousLogon(aka null logon session)

    S-1-5-7

    Proxy

    S-1-5-8

    ServerLogon(aka domain controller account)

    S-1-5-8

    (Logon IDs)

    S-1-5-5-X-Y

    (NT non-unique IDs)

    S-1-5-0x15-...

    (Built-in domain)

    s-1-5-0x20

    9.8.2. Well-known RIDS

    A RID is a sub-authority value, as part of either a SID, or in the case +computing the same function using the owf values in the SAM. +

    SIDs and RIDs

    +SIDs and RIDs are well documented elsewhere. +

    +A SID is an NT Security ID (see DOM_SID structure). They are of the form: +

    revision-NN-SubAuth1-SubAuth2-SubAuth3...
    revision-0xNNNNNNNNNNNN-SubAuth1-SubAuth2-SubAuth3...

    +currently, the SID revision is 1. +The Sub-Authorities are known as Relative IDs (RIDs). +

    Well-known SIDs

    Universal well-known SIDs

    Null SID

    S-1-0-0

    World

    S-1-1-0

    Local

    S-1-2-0

    Creator Owner ID

    S-1-3-0

    Creator Group ID

    S-1-3-1

    Creator Owner Server ID

    S-1-3-2

    Creator Group Server ID

    S-1-3-3

    (Non-unique IDs)

    S-1-4

    NT well-known SIDs

    NT Authority

    S-1-5

    Dialup

    S-1-5-1

    Network

    S-1-5-2

    Batch

    S-1-5-3

    Interactive

    S-1-5-4

    Service

    S-1-5-6

    AnonymousLogon(aka null logon session)

    S-1-5-7

    Proxy

    S-1-5-8

    ServerLogon(aka domain controller account)

    S-1-5-8

    (Logon IDs)

    S-1-5-5-X-Y

    (NT non-unique IDs)

    S-1-5-0x15-...

    (Built-in domain)

    s-1-5-0x20

    Well-known RIDS

    +A RID is a sub-authority value, as part of either a SID, or in the case of Group RIDs, part of the DOM_GID structure, in the USER_INFO_1 -structure, in the LSA SAM Logon response.

    9.8.2.1. Well-known RID users

    Groupname: DOMAIN_USER_RID_ADMIN

    ????: 0x0000

    RID: 01F4

    Groupname: DOMAIN_USER_RID_GUEST

    ????: 0x0000

    RID: 01F5

    9.8.2.2. Well-known RID groups

    Groupname: DOMAIN_GROUP_RID_ADMINS

    ????: 0x0000

    RID: 0200

    Groupname: DOMAIN_GROUP_RID_USERS

    ????: 0x0000

    RID: 0201

    Groupname: DOMAIN_GROUP_RID_GUESTS

    ????: 0x0000

    RID: 0202

    9.8.2.3. Well-known RID aliases

    Groupname: DOMAIN_ALIAS_RID_ADMINS

    ????: 0x0000

    RID: 0220

    Groupname: DOMAIN_ALIAS_RID_USERS

    ????: 0x0000

    RID: 0221

    Groupname: DOMAIN_ALIAS_RID_GUESTS

    ????: 0x0000

    RID: 0222

    Groupname: DOMAIN_ALIAS_RID_POWER_USERS

    ????: 0x0000

    RID: 0223

    Groupname: DOMAIN_ALIAS_RID_ACCOUNT_OPS

    ????: 0x0000

    RID: 0224

    Groupname: DOMAIN_ALIAS_RID_SYSTEM_OPS

    ????: 0x0000

    RID: 0225

    Groupname: DOMAIN_ALIAS_RID_PRINT_OPS

    ????: 0x0000

    RID: 0226

    Groupname: DOMAIN_ALIAS_RID_BACKUP_OPS

    ????: 0x0000

    RID: 0227

    Groupname: DOMAIN_ALIAS_RID_REPLICATOR

    ????: 0x0000

    RID: 0228

    Chapter 10. Samba Printing Internals

    10.1. Abstract

    The purpose of this document is to provide some insight into +structure, in the LSA SAM Logon response. +

    Well-known RID users

    Groupname: DOMAIN_USER_RID_ADMIN

    ????: 0x0000

    RID: 01F4

    Groupname: DOMAIN_USER_RID_GUEST

    ????: 0x0000

    RID: 01F5

    Well-known RID groups

    Groupname: DOMAIN_GROUP_RID_ADMINS

    ????: 0x0000

    RID: 0200

    Groupname: DOMAIN_GROUP_RID_USERS

    ????: 0x0000

    RID: 0201

    Groupname: DOMAIN_GROUP_RID_GUESTS

    ????: 0x0000

    RID: 0202

    Well-known RID aliases

    Groupname: DOMAIN_ALIAS_RID_ADMINS

    ????: 0x0000

    RID: 0220

    Groupname: DOMAIN_ALIAS_RID_USERS

    ????: 0x0000

    RID: 0221

    Groupname: DOMAIN_ALIAS_RID_GUESTS

    ????: 0x0000

    RID: 0222

    Groupname: DOMAIN_ALIAS_RID_POWER_USERS

    ????: 0x0000

    RID: 0223

    Groupname: DOMAIN_ALIAS_RID_ACCOUNT_OPS

    ????: 0x0000

    RID: 0224

    Groupname: DOMAIN_ALIAS_RID_SYSTEM_OPS

    ????: 0x0000

    RID: 0225

    Groupname: DOMAIN_ALIAS_RID_PRINT_OPS

    ????: 0x0000

    RID: 0226

    Groupname: DOMAIN_ALIAS_RID_BACKUP_OPS

    ????: 0x0000

    RID: 0227

    Groupname: DOMAIN_ALIAS_RID_REPLICATOR

    ????: 0x0000

    RID: 0228

    Chapter10.Samba Printing Internals

    Gerald Carter

    October 2002

    Table of Contents

    Abstract
    +Printing Interface to Various Back ends +
    +Print Queue TDB's +
    +ChangeID and Client Caching of Printer Information +
    +Windows NT/2K Printer Change Notify +

    Abstract

    +The purpose of this document is to provide some insight into Samba's printing functionality and also to describe the semantics -of certain features of Windows client printing.

    10.2. Printing Interface to Various Back ends

    Samba uses a table of function pointers to seven functions. The -function prototypes are defined in the printif structure declared -in printing.h.

    • retrieve the contents of a print queue

    • pause the print queue

    • resume a paused print queue

    • delete a job from the queue

    • pause a job in the print queue

    • result a paused print job in the queue

    • submit a job to the print queue

    Currently there are only two printing back end implementations -defined.

    • a generic set of functions for working with standard UNIX - printing subsystems

    • a set of CUPS specific functions (this is only enabled if - the CUPS libraries were located at compile time).

    10.3. Print Queue TDB's

    Samba provides periodic caching of the output from the "lpq command" +of certain features of Windows client printing. +

    +Printing Interface to Various Back ends +

    +Samba uses a table of function pointers to seven functions. The +function prototypes are defined in the printif structure declared +in printing.h. +

    • retrieve the contents of a print queue

    • pause the print queue

    • resume a paused print queue

    • delete a job from the queue

    • pause a job in the print queue

    • result a paused print job in the queue

    • submit a job to the print queue

    +Currently there are only two printing back end implementations +defined. +

    • a generic set of functions for working with standard UNIX + printing subsystems

    • a set of CUPS specific functions (this is only enabled if + the CUPS libraries were located at compile time).

    +Print Queue TDB's +

    +Samba provides periodic caching of the output from the "lpq command" for performance reasons. This cache time is configurable in seconds. Obviously the longer the cache time the less often smbd will be required to exec a copy of lpq. However, the accuracy of the print -queue contents displayed to clients will be diminished as well.

    The list of currently opened print queue TDB's can be found +queue contents displayed to clients will be diminished as well. +

    +The list of currently opened print queue TDB's can be found be examining the list of tdb_print_db structures ( see print_db_head in printing.c ). A queue TDB is opened using the wrapper function printing.c:get_print_db_byname(). The function ensures that smbd @@ -8222,17 +1433,15 @@ does not open more than MAX_PRINT_DBS_OPEN in an effort to prevent a large print server from exhausting all available file descriptors. If the number of open queue TDB's exceeds the MAX_PRINT_DBS_OPEN limit, smbd falls back to a most recently used algorithm for maintaining -a list of open TDB's.

    There are two ways in which a a print job can be entered into +a list of open TDB's. +

    +There are two ways in which a a print job can be entered into a print queue's TDB. The first is to submit the job from a Windows client which will insert the job information directly into the TDB. The second method is to have the print job picked up by executing the -"lpq command".

    /* included from printing.h */
+"lpq command".
+
    +/* included from printing.h */
 struct printjob {
 	pid_t pid; /* which process launched the job */
 	int sysjob; /* the system (lp) job number */
@@ -8248,63 +1457,28 @@ struct printjob {
 	fstring user; /* the user who started the job */
 	fstring queuename; /* service number of printer for this job */
 	NT_DEVICEMODE *nt_devmode;
-};
    The current manifestation of the printjob structure contains a field
-for the UNIX job id returned from the "lpq command" and a Windows job
+};
+

    +The current manifestation of the printjob structure contains a field +for the UNIX job id returned from the "lpq command" and a Windows job ID (32-bit bounded by PRINT_MAX_JOBID). When a print job is returned -by the "lpq command" that does not match an existing job in the queue's +by the "lpq command" that does not match an existing job in the queue's TDB, a 32-bit job ID above the <*vance doesn't know what word is missing here*> is generating by adding UNIX_JOB_START to -the id reported by lpq.

    In order to match a 32-bit Windows jobid onto a 16-bit lanman print job +the id reported by lpq. +

    +In order to match a 32-bit Windows jobid onto a 16-bit lanman print job id, smbd uses an in memory TDB to match the former to a number appropriate -for old lanman clients.

    When updating a print queue, smbd will perform the following -steps ( refer to print.c:print_queue_update() ):

    1. Check to see if another smbd is currently in +for old lanman clients. +

      +When updating a print queue, smbd will perform the following +steps ( refer to print.c:print_queue_update() ): +

      1. Check to see if another smbd is currently in the process of updating the queue contents by checking the pid - stored in LOCK/printer_name. - If so, then do not update the TDB.

      2. Lock the mutex entry in the TDB and store our own pid. - Check that this succeeded, else fail.

      3. Store the updated time stamp for the new cache - listing

      4. Retrieve the queue listing via "lpq command"

      5. 	foreach job in the queue
+	stored in LOCK/printer_name.  
+	If so, then do not update the TDB.

      6. Lock the mutex entry in the TDB and store our own pid. + Check that this succeeded, else fail.

      7. Store the updated time stamp for the new cache + listing

      8. Retrieve the queue listing via "lpq command"

      9. +	foreach job in the queue
      	{
 		if the job is a UNIX job, create a new entry;
 		if the job has a Windows based jobid, then
@@ -8315,119 +1489,51 @@ CLASS="PROGRAMLISTING"
 			else
 				update the job status only
 		}
-	}

      10. Delete any jobs in the TDB that are not - in the in the lpq listing

      11. Store the print queue status in the TDB

      12. update the cache time stamp again

      Note that it is the contents of this TDB that is returned to Windows -clients and not the actual listing from the "lpq command".

      The NT_DEVICEMODE stored as part of the printjob structure is used to + }

    2. Delete any jobs in the TDB that are not + in the in the lpq listing

    3. Store the print queue status in the TDB

    4. update the cache time stamp again

    +Note that it is the contents of this TDB that is returned to Windows +clients and not the actual listing from the "lpq command". +

    +The NT_DEVICEMODE stored as part of the printjob structure is used to store a pointer to a non-default DeviceMode associated with the print job. The pointer will be non-null when the client included a Device Mode in the OpenPrinterEx() call and subsequently submitted a job for printing on that same handle. If the client did not include a Device Mode in the OpenPrinterEx() request, the nt_devmode field is NULL -and the job has the printer's device mode associated with it by default.

    Only non-default Device Mode are stored with print jobs in the print +and the job has the printer's device mode associated with it by default. +

    +Only non-default Device Mode are stored with print jobs in the print queue TDB. Otherwise, the Device Mode is obtained from the printer -object when the client issues a GetJob(level == 2) request.

    10.4. ChangeID & Client Caching of Printer Information

    [To be filled in later]

    10.5. Windows NT/2K Printer Change Notify

    When working with Windows NT+ clients, it is possible for a +object when the client issues a GetJob(level == 2) request. +

    +ChangeID and Client Caching of Printer Information +

    +[To be filled in later] +

    +Windows NT/2K Printer Change Notify +

    +When working with Windows NT+ clients, it is possible for a print server to use RPC to send asynchronous change notification events to clients for certain printer and print job attributes. This can be useful when the client needs to know that a new job has been added to the queue for a given printer or that the driver for a printer has been changed. Note that this is done entirely orthogonal to cache updates based on a new ChangeID for -a printer object.

    The basic set of RPC's used to implement change notification are

    • RemoteFindFirstPrinterChangeNotifyEx ( RFFPCN )

    • RemoteFindNextPrinterChangeNotifyEx ( RFNPCN )

    • FindClosePrinterChangeNotify( FCPCN )

    • ReplyOpenPrinter

    • ReplyClosePrinter

    • RouteRefreshPrinterChangeNotify ( RRPCN )

    One additional RPC is available to a server, but is never used by the -Windows spooler service:

    • RouteReplyPrinter()

    The opnum for all of these RPC's are defined in include/rpc_spoolss.h

    Windows NT print servers use a bizarre method of sending print +a printer object. +

    +The basic set of RPC's used to implement change notification are +

    • RemoteFindFirstPrinterChangeNotifyEx ( RFFPCN )

    • RemoteFindNextPrinterChangeNotifyEx ( RFNPCN )

    • FindClosePrinterChangeNotify( FCPCN )

    • ReplyOpenPrinter

    • ReplyClosePrinter

    • RouteRefreshPrinterChangeNotify ( RRPCN )

    +One additional RPC is available to a server, but is never used by the +Windows spooler service: +

    • RouteReplyPrinter()

    +The opnum for all of these RPC's are defined in include/rpc_spoolss.h +

    +Windows NT print servers use a bizarre method of sending print notification event to clients. The process of registering a new change notification handle is as follows. The 'C' is for client and the -'S' is for server. All error conditions have been eliminated.

    C:	Obtain handle to printer or to the printer
+'S' is for server.  All error conditions have been eliminated.
+
    +C:	Obtain handle to printer or to the printer
 	server via the standard OpenPrinterEx() call.
 S:	Respond with a valid handle to object
 
@@ -8457,453 +1563,229 @@ C:	If the change notification handle is ever released by the
 	or a piece of data was wrong.
 S:	The server closes the internal change notification handle
 	(POLICY_HND) and does not send any further change notification
-	events to the client for that printer or job.
    The current list of notification events supported by Samba can be
-found by examining the internal tables in srv_spoolss_nt.c
    • printer_notify_table[]
    • job_notify_table[]
    When an event occurs that could be monitored, smbd sends a message
+	events to the client for that printer or job.
+

    +The current list of notification events supported by Samba can be +found by examining the internal tables in srv_spoolss_nt.c +

    • printer_notify_table[]

    • job_notify_table[]

    +When an event occurs that could be monitored, smbd sends a message to itself about the change. The list of events to be transmitted are queued by the smbd process sending the message to prevent an overload of TDB usage and the internal message is sent during smbd's idle loop (refer to printing/notify.c and the functions -send_spoolss_notify2_msg() and print_notify_send_messages() ).

    The decision of whether or not the change is to be sent to connected +send_spoolss_notify2_msg() and print_notify_send_messages() ). +

    +The decision of whether or not the change is to be sent to connected clients is made by the routine which actually sends the notification. -( refer to srv_spoolss_nt.c:recieve_notify2_message() ).

    Because it possible to receive a listing of multiple changes for +( refer to srv_spoolss_nt.c:recieve_notify2_message() ). +

    +Because it possible to receive a listing of multiple changes for multiple printers, the notification events must be split into categories by the printer name. This makes it possible to group multiple change events to be sent in a single RPC according to the -printer handle obtained via a ReplyOpenPrinter().

    The actual change notification is performed using the RRPCN request -RPC. This packet contains

    • the printer handle registered with the -client's spooler on which the change occurred

    • The change_low value which was sent as part -of the last RFNPCN request from the client

    • The SPOOL_NOTIFY_INFO container with the event -information

    A SPOOL_NOTIFY_INFO contains:

    • the version and flags field are predefined -and should not be changed

    • The count field is the number of entries -in the SPOOL_NOTIFY_INFO_DATA array

    The SPOOL_NOTIFY_INFO_DATA entries contain:

    • The type defines whether or not this event -is for a printer or a print job

    • The field is the flag identifying the event

    • the notify_data union contains the new valuie of the -attribute

    • The enc_type defines the size of the structure for marshalling -and unmarshalling

    • (a) the id must be 0 for a printer event on a printer handle. +printer handle obtained via a ReplyOpenPrinter(). +

      +The actual change notification is performed using the RRPCN request +RPC. This packet contains +

      • the printer handle registered with the +client's spooler on which the change occurred

      • The change_low value which was sent as part +of the last RFNPCN request from the client

      • The SPOOL_NOTIFY_INFO container with the event +information

      +A SPOOL_NOTIFY_INFO contains: +

      • the version and flags field are predefined +and should not be changed

      • The count field is the number of entries +in the SPOOL_NOTIFY_INFO_DATA array

      +The SPOOL_NOTIFY_INFO_DATA entries contain: +

      • The type defines whether or not this event +is for a printer or a print job

      • The field is the flag identifying the event

      • the notify_data union contains the new valuie of the +attribute

      • The enc_type defines the size of the structure for marshalling +and unmarshalling

      • (a) the id must be 0 for a printer event on a printer handle. (b) the id must be the job id for an event on a printer job (c) the id must be the matching number of the printer index used in the response packet to the RFNPCN when using a print server handle for notification. Samba currently uses the snum of the printer for this which can break if the list of services -has been modified since the notification handle was registered.

      • The size is either (a) the string length in UNICODE for strings, +has been modified since the notification handle was registered.

      • The size is either (a) the string length in UNICODE for strings, (b) the size in bytes of the security descriptor, or (c) 0 for -data values.

    Chapter 11. Samba WINS Internals

    11.1. WINS Failover

    The current Samba codebase possesses the capability to use groups of WINS +data values.

    Chapter11.Samba WINS Internals

    Gerald Carter

    October 2002

    Table of Contents

    WINS Failover

    WINS Failover

    +The current Samba codebase possesses the capability to use groups of WINS servers that share a common namespace for NetBIOS name registration and -resolution. The formal parameter syntax is

    	WINS_SERVER_PARAM 	= SERVER [ SEPARATOR SERVER_LIST ]
+resolution.  The formal parameter syntax is
+
    +	WINS_SERVER_PARAM 	= SERVER [ SEPARATOR SERVER_LIST ]
 	WINS_SERVER_PARAM 	= "wins server"
 	SERVER 			= ADDR[:TAG]
 	ADDR 			= ip_addr | fqdn
 	TAG 			= string
 	SEPARATOR		= comma | \s+
-	SERVER_LIST		= SERVER [ SEPARATOR SERVER_LIST ]
    A simple example of a valid wins server setting is
    [global]
-	wins server = 192.168.1.2 192.168.1.3
    In the event that no TAG is defined in for a SERVER in the list, smbd assigns a default
+	SERVER_LIST		= SERVER [ SEPARATOR SERVER_LIST ]
+

    +A simple example of a valid wins server setting is +

    +[global]
+	wins server = 192.168.1.2 192.168.1.3
+

    +In the event that no TAG is defined in for a SERVER in the list, smbd assigns a default TAG of "*". A TAG is used to group servers of a shared NetBIOS namespace together. Upon startup, nmbd will attempt to register the netbios name value with one server in each -tagged group.

    An example using tags to group WINS servers together is show here. Note that the use of -interface names in the tags is only by convention and is not a technical requirement.

    [global]
-	wins server = 192.168.1.2:eth0 192.168.1.3:eth0 192.168.2.2:eth1

    Using this configuration, nmbd would attempt to register the server's NetBIOS name +tagged group. +

    +An example using tags to group WINS servers together is show here. Note that the use of +interface names in the tags is only by convention and is not a technical requirement. +

    +[global]
+	wins server = 192.168.1.2:eth0 192.168.1.3:eth0 192.168.2.2:eth1
+

    +Using this configuration, nmbd would attempt to register the server's NetBIOS name with one WINS server in each group. Because the "eth0" group has two servers, the second server would only be used when a registration (or resolution) request to -the first server in that group timed out.

    NetBIOS name resolution follows a similar pattern as name registration. When resolving +the first server in that group timed out. +

    +NetBIOS name resolution follows a similar pattern as name registration. When resolving a NetBIOS name via WINS, smbd and other Samba programs will attempt to query a single WINS server in a tagged group until either a positive response is obtained at least once or until a server from every tagged group has responded negatively to the name query request. If a timeout occurs when querying a specific WINS server, that server is marked as down to prevent further timeouts and the next server in the WINS group is contacted. Once marked as dead, Samba will not attempt to contact that server for name registration/resolution queries -for a period of 10 minutes.

    Chapter 12. The Upcoming SAM System

    12.1. Security in the 'new SAM'

    One of the biggest problems with passdb is it's implementation of +for a period of 10 minutes. +

    Chapter12.The Upcoming SAM System

    Andrew Bartlett

    1 October 2002

    Table of Contents

    Security in the 'new SAM'
    Standalone from UNIX
    Handles and Races in the new SAM
    Layers
    Application
    SAM Interface
    SAM Modules
    SAM Modules
    Special Module: sam_passdb
    sam_ads
    Memory Management
    Testing

    Security in the 'new SAM'

    One of the biggest problems with passdb is it's implementation of 'security'. Access control is on a 'are you root at the moment' basis, and it has no concept of NT ACLs. Things like ldapsam had to add -'magic' 'are you root' checks.

    We took this very seriously when we started work, and the new structure +'magic' 'are you root' checks.

    We took this very seriously when we started work, and the new structure is designed with this in mind, from the ground up. Each call to the SAM has a NT_TOKEN and (if relevant) an 'access desired'. This is either provided as a parameter, or implicitly supplied by the object being -accessed.

    For example, when you call 

    <
+accessed.
    
+For example, when you call 
+
     NTSTATUS sam_get_account_by_name(const SAM_CONTEXT *context, const
 NT_USER_TOKEN *access_token, uint32 access_desired, const char *domain,
-const char *name, SAM_ACCOUNT_HANDLE **account)
    The context can be NULL (and is used to allow import/export by setting
-up 2 contexts, and allowing calls on both simultaneously)
    The access token *must* be specified.  Normally the user's token out of
-current_user, this can also be a global 'system' context.
    The access desired is as per the ACL, for passing to the seaccess stuff.
    The domain/username are standard.  Even if we only have one domain,
+const char *name, SAM_ACCOUNT_HANDLE **account)
+

    +The context can be NULL (and is used to allow import/export by setting +up 2 contexts, and allowing calls on both simultaneously) +

    +The access token *must* be specified. Normally the user's token out of +current_user, this can also be a global 'system' context. +

    +The access desired is as per the ACL, for passing to the seaccess stuff. +

    +The domain/username are standard. Even if we only have one domain, keeping this ensures that we don't get 'unqualified' usernames (same -problem as we had with unqualified SIDs).

    We return a 'handle'. This is opaque to the rest of Samba, but is -operated on by get/set routines, all of which return NTSTATUS.

    The access checking is done by the SAM module. The reason it is not +problem as we had with unqualified SIDs). +

    +We return a 'handle'. This is opaque to the rest of Samba, but is +operated on by get/set routines, all of which return NTSTATUS. +

    +The access checking is done by the SAM module. The reason it is not done 'above' the interface is to ensure a 'choke point'. I put a lot of effort into the auth subsystem to ensure we never 'accidentally' forgot to check for null passwords, missed a restriction etc. I intend the SAM -to be written with the same caution.

    The reason the access checking is not handled by the interface itself is +to be written with the same caution. +

    +The reason the access checking is not handled by the interface itself is due to the different implementations it make take on. For example, on ADS, you cannot set a password over a non-SSL connection. Other backends may have similar requirements - we need to leave this policy up to the modules. They will naturally have access to 'helper' procedures -and good examples to avoid mishaps.

    (Furthermore, some backends my actually chose to push the whole ACL +and good examples to avoid mishaps. +

    +(Furthermore, some backends my actually chose to push the whole ACL issue to the remote server, and - assuming ldap for this example - bind -as the user directly)

    Each returned handle has an internal 'access permitted', which allows +as the user directly) +

    +Each returned handle has an internal 'access permitted', which allows the 'get' and 'set' routines to return 'ACCESS_DENIED' for things that were not able to be retrieved from the backend. This removes the need to specify the NT_TOKEN on every operation, and allows for 'object not -present' to be easily distinguished from 'access denied'.

    When you 'set' an object (calling sam_update_account) the internal +present' to be easily distinguished from 'access denied'. +

    +When you 'set' an object (calling sam_update_account) the internal details are again used. Each change that has been made to the object has been flagged, so as to avoid race conditions (on unmodified components) and to avoid violating any extra ACL requirements on the -actual data store (like the LDAP server).

    Finally, we have generic get_sec_desc() and set_sec_desc() routines to -allow external ACL manipulation. These do lookups based on SID.

    12.2. Standalone from UNIX

    One of the primary tenants of the 'new SAM' is that it would not attempt +actual data store (like the LDAP server). +

    +Finally, we have generic get_sec_desc() and set_sec_desc() routines to +allow external ACL manipulation. These do lookups based on SID. +

    Standalone from UNIX

    +One of the primary tenants of the 'new SAM' is that it would not attempt to deal with 'what unix id for that'. This would be left to the 'SMS' (Sid Mapping System') or SID farm, and probably administered via winbind. We have had constructive discussion on how 'basic' unix accounts like 'root' would be handled, and we think this can work. -Accounts not preexisting in unix would be served up via winbind.

    This is an *optional* part, and my preferred end-game. We have a fare -way to go before things like winbind up to it however.

    12.3. Handles and Races in the new SAM

    One of the things that the 'new SAM' work has tried to face is both +Accounts not preexisting in unix would be served up via winbind. +

    +This is an *optional* part, and my preferred end-game. We have a fare +way to go before things like winbind up to it however. +

    Handles and Races in the new SAM

    +One of the things that the 'new SAM' work has tried to face is both compatibility with existing code, and a closer alignment to the SAMR interface. I consider SAMR to be a 'primary customer' to the this work, because if we get alignment with that wrong, things get more, rather than less complex. Also, most other parts of Samba are much more -flexible with what they can allow.

    In any case, that was a decision taken as to how the general design -would progress. BTW, my understanding of SAMR may be completely flawed.

    One of the most race-prone areas of the new code is the conflicting -update problem. We have taken two approaches:

    • 'Not conflicting' conflicts. Due to the way usrmgr operates, it will +flexible with what they can allow. +

      +In any case, that was a decision taken as to how the general design +would progress. BTW, my understanding of SAMR may be completely flawed. +

      +One of the most race-prone areas of the new code is the conflicting +update problem. We have taken two approaches: +

      • 'Not conflicting' conflicts. Due to the way usrmgr operates, it will open a user, display all the properties and *save* them all, even if you -don't change any.

        For this, see what I've done in rpc_server/srv_samr_util.c. I intend +don't change any. +

        +For this, see what I've done in rpc_server/srv_samr_util.c. I intend to take this one step further, and operate on the 'handle' that the values were read from. This should mean that we only update things that -have *really* changed.

      • 'conflicting' updates: Currently we don't deal with this (in passdb +have *really* changed. +

      • +'conflicting' updates: Currently we don't deal with this (in passdb or the new sam stuff), but the design is sufficiently flexible to 'deny' -a second update. I don't foresee locking records however.

      12.4. Layers

      12.4.1. Application

      This is where smbd, samtest and whatever end-user replacement we have +a second update. I don't foresee locking records however. +

    Layers

    Application

    +This is where smbd, samtest and whatever end-user replacement we have for pdbedit sits. They use only the SAM interface, and do not get -'special knowledge' of what is below them.

    12.4.2. SAM Interface

    This level 'owns' the various handle structures, the get/set routines on +'special knowledge' of what is below them. +

    SAM Interface

    +This level 'owns' the various handle structures, the get/set routines on those structures and provides the public interface. The application layer may initialize a 'context' to be passed to all interface routines, else a default, self-initialising context will be supplied. This layser finds the appropriate backend module for the task, and tries very hard not to need to much 'knowledge'. It should just provide the required -abstraction to the modules below, and arrange for their initial loading.

    We could possibly add ACL checking at this layer, to avoid discrepancies -in implementation modules.

    12.4.3. SAM Modules

    These do not communicate with the application directly, only by setting +abstraction to the modules below, and arrange for their initial loading. +

    +We could possibly add ACL checking at this layer, to avoid discrepancies +in implementation modules. +

    SAM Modules

    +These do not communicate with the application directly, only by setting values in the handles, and receiving requests from the interface. These modules are responsible for translating values from the handle's .private into (say) an LDAP modification list. The module is expected to 'know' things like it's own domain SID, domain name, and any other state attached to the SAM. Simpler modules may call back to some helper -routine.

    12.5. SAM Modules

    12.5.1. Special Module: sam_passdb

    In order for there to be a smooth transition, kai is writing a module +routine. +

    SAM Modules

    Special Module: sam_passdb

    +In order for there to be a smooth transition, kai is writing a module that reads existing passdb backends, and translates them into SAM replies. (Also pulling data from the account policy DB etc). We also intend to write a module that does the reverse - gives the SAM a passdb -interface.

    12.5.2. sam_ads

    This is the first of the SAM modules to be committed to the tree - +interface. +

    sam_ads

    +This is the first of the SAM modules to be committed to the tree - mainly because I needed to coordinate work with metze (who authored most of it). This module aims to use Samba's libads code to provide an Active Directory LDAP client, suitable for use on a mixed-mode DC. While it is currently being tested against Win2k servers (with a password in the smb.conf file) it is expected to eventually use a (possibly modified) OpenLDAP server. We hope that this will assist in -the construction of an Samba AD DC.

    We also intend to construct a Samba 2.2/3.0 compatible ldap module, -again using libads code.

    12.6. Memory Management

    +the construction of an Samba AD DC. +

    +We also intend to construct a Samba 2.2/3.0 compatible ldap module, +again using libads code. +

    Memory Management

    The 'new SAM' development effort also concerned itself with getting a sane implementation of memory management. It was decided that we would be (as much as possible) talloc based, using an 'internal talloc @@ -8911,132 +1793,63 @@ context' on many objects. That is, the creation of an object would initiate it's own internal talloc context, and this would be used for all operations on that object. Much of this is already implemented in passdb. Also, like passdb, it will be possible to specify that some -object actually be created on a specified context.

    Memory management is important here because the APIs in the 'new SAM' do +object actually be created on a specified context. +

    +Memory management is important here because the APIs in the 'new SAM' do not use 'pdb_init()' or an equivalent. They always allocate new objects. Enumeration's are slightly different, and occur on a supplied context that 'owns' the entire list, rather than per-element. (the enumeration functions return an array of all elements - not full handles just basic (and public) info) Likewise for things that fill in a char -**.

    For example:

    NTSTATUS sam_lookup_sid(const SAM_CONTEXT *context, const NT_USER_TOKEN
+**.
+
    For example:
    +NTSTATUS sam_lookup_sid(const SAM_CONTEXT *context, const NT_USER_TOKEN
 *access_token, TALLOC_CTX *mem_ctx, const DOM_SID *sid, char **name,
-uint32 *type)
    Takes a context to allocate the 'name' on, while:
    NTSTATUS sam_get_account_by_sid(const SAM_CONTEXT *context, const
+uint32 *type)
+
    Takes a context to allocate the 'name' on, while:
    +NTSTATUS sam_get_account_by_sid(const SAM_CONTEXT *context, const
 NT_USER_TOKEN *access_token, uint32 access_desired, const DOM_SID
-*accountsid, SAM_ACCOUNT_HANDLE **account)
    Allocates a handle and stores the allocation context on that handle.
    I think that the following:
    NTSTATUS sam_enum_accounts(const SAM_CONTEXT *context, const
+*accountsid, SAM_ACCOUNT_HANDLE **account)
+
    Allocates a handle and stores the allocation context on that handle.
    I think that the following:
    +NTSTATUS sam_enum_accounts(const SAM_CONTEXT *context, const
 NT_USER_TOKEN *access_token, const DOM_SID *domainsid, uint16 acct_ctrl,
-int32 *account_count, SAM_ACCOUNT_ENUM **accounts)

    12.7. Testing

    Testing is vital in any piece of software, and Samba is certainly no +int32 *account_count, SAM_ACCOUNT_ENUM **accounts) +

    Testing

    +Testing is vital in any piece of software, and Samba is certainly no exception. In designing this new subsystem, we have taken care to ensure -it is easily tested, independent of outside protocols.

    To this end, Jelmer has constructed 'samtest'.

    This utility (see torture/samtest.c) is structured like rpcclient, but +it is easily tested, independent of outside protocols. +

    +To this end, Jelmer has constructed 'samtest'. +

    +This utility (see torture/samtest.c) is structured like rpcclient, but instead operates on the SAM subsystem. It creates a 'custom' SAM context, that may be distinct from the default values used by the rest -of the system, and can load a separate configuration file.

    A small number of commands are currently implemented, but these have +of the system, and can load a separate configuration file. +

    +A small number of commands are currently implemented, but these have already proved vital in testing. I expect SAM module authors will find -it particularly valuable.

    Example useage:

    $ bin/samtest

    > context ads:ldap://192.168.1.96
    +it particularly valuable. +

    Example useage:

    $ bin/samtest

    +> context ads:ldap://192.168.1.96
+

    (this loads a new context, using the new ADS module. The parameter is -the 'location' of the ldap server)

    > lookup_name DOMAIN abartlet
    -(returns a sid).

    Because the 'new SAM' is NT ACL based, there will be a command to -specify an arbitrary NT ACL, but for now it uses 'system' by default.

    Chapter 13. LanMan and NT Password Encryption

    13.1. Introduction

    With the development of LanManager and Windows NT +the 'location' of the ldap server) +

    +> lookup_name DOMAIN abartlet
+

    +(returns a sid). +

    +Because the 'new SAM' is NT ACL based, there will be a command to +specify an arbitrary NT ACL, but for now it uses 'system' by default. +

    Chapter13.LanMan and NT Password Encryption

    Jeremy Allison

    Samba Team


    +
    +

    19 Apr 1999

    Table of Contents

    Introduction
    How does it work?
    The smbpasswd file

    Introduction

    With the development of LanManager and Windows NT compatible password encryption for Samba, it is now able to validate user connections in exactly the same way as - a LanManager or Windows NT server.

    This document describes how the SMB password encryption + a LanManager or Windows NT server.

    This document describes how the SMB password encryption algorithm works and what issues there are in choosing whether you want to use it. You should read it carefully, especially - the part about security and the "PROS and CONS" section.

    13.2. How does it work?

    LanManager encryption is somewhat similar to UNIX + the part about security and the "PROS and CONS" section.

    How does it work?

    LanManager encryption is somewhat similar to UNIX password encryption. The server uses a file containing a hashed value of a user's password. This is created by taking the user's plaintext password, capitalising it, and either @@ -9044,265 +1857,791 @@ NAME="AEN3151" This 14 byte value is used as two 56 bit DES keys to encrypt a 'magic' eight byte value, forming a 16 byte value which is stored by the server and client. Let this value be known as - the "hashed password".

    Windows NT encryption is a higher quality mechanism, + the "hashed password".

    Windows NT encryption is a higher quality mechanism, consisting of doing an MD4 hash on a Unicode version of the user's password. This also produces a 16 byte hash value that is - non-reversible.

    When a client (LanManager, Windows for WorkGroups, Windows + non-reversible.

    When a client (LanManager, Windows for WorkGroups, Windows 95 or Windows NT) wishes to mount a Samba drive (or use a Samba resource), it first requests a connection and negotiates the protocol that the client and server will use. In the reply to this request the Samba server generates and appends an 8 byte, random value - this is stored in the Samba server after the reply is sent - and is known as the "challenge". The challenge is different for - every client connection.

    The client then uses the hashed password (16 byte values + and is known as the "challenge". The challenge is different for + every client connection.

    The client then uses the hashed password (16 byte values described above), appended with 5 null bytes, as three 56 bit DES keys, each of which is used to encrypt the challenge 8 byte - value, forming a 24 byte value known as the "response".

    In the SMB call SMBsessionsetupX (when user level security + value, forming a 24 byte value known as the "response".

    In the SMB call SMBsessionsetupX (when user level security is selected) or the call SMBtconX (when share level security is selected), the 24 byte response is returned by the client to the Samba server. For Windows NT protocol levels the above calculation is done on both hashes of the user's password and both responses are - returned in the SMB call, giving two 24 byte values.

    The Samba server then reproduces the above calculation, using + returned in the SMB call, giving two 24 byte values.

    The Samba server then reproduces the above calculation, using its own stored value of the 16 byte hashed password (read from the - smbpasswd file - described later) and the challenge + smbpasswd file - described later) and the challenge value that it kept from the negotiate protocol reply. It then checks to see if the 24 byte value it calculates matches the 24 byte value - returned to it from the client.

    If these values match exactly, then the client knew the + returned to it from the client.

    If these values match exactly, then the client knew the correct password (or the 16 byte hashed value - see security note below) and is thus allowed access. If not, then the client did not - know the correct password and is denied access.

    Note that the Samba server never knows or stores the cleartext + know the correct password and is denied access.

    Note that the Samba server never knows or stores the cleartext of the user's password - just the 16 byte hashed values derived from it. Also note that the cleartext password or 16 byte hashed values - are never transmitted over the network - thus increasing security.

    13.3. The smbpasswd file

    In order for Samba to participate in the above protocol + are never transmitted over the network - thus increasing security.

    The smbpasswd file

    In order for Samba to participate in the above protocol it must be able to look up the 16 byte hashed values given a user name. Unfortunately, as the UNIX password value is also a one way hash function (ie. it is impossible to retrieve the cleartext of the user's password given the UNIX hash of it), a separate password file containing this 16 byte value must be kept. To minimise problems with - these two password files, getting out of sync, the UNIX /etc/passwd and the smbpasswd file, - a utility, mksmbpasswd.sh, is provided to generate - a smbpasswd file from a UNIX /etc/passwd file. -

    To generate the smbpasswd file from your /etc/passwd - file use the following command :

    $ cat /etc/passwd | mksmbpasswd.sh - > /usr/local/samba/private/smbpasswd

    If you are running on a system that uses NIS, use

    $ ypcat passwd | mksmbpasswd.sh - > /usr/local/samba/private/smbpasswd

    The mksmbpasswd.sh program is found in + these two password files, getting out of sync, the UNIX + /etc/passwd and the smbpasswd file, + a utility, mksmbpasswd.sh, is provided to generate + a smbpasswd file from a UNIX /etc/passwd file. +

    To generate the smbpasswd file from your /etc/passwd + file use the following command:

    $ cat /etc/passwd | mksmbpasswd.sh + > /usr/local/samba/private/smbpasswd

    If you are running on a system that uses NIS, use

    $ ypcat passwd | mksmbpasswd.sh + > /usr/local/samba/private/smbpasswd

    The mksmbpasswd.sh program is found in the Samba source directory. By default, the smbpasswd file is - stored in :

    /usr/local/samba/private/smbpasswd

    The owner of the /usr/local/samba/private/ + stored in :

    /usr/local/samba/private/smbpasswd

    The owner of the /usr/local/samba/private/ directory should be set to root, and the permissions on it should - be set to 0500 (chmod 500 /usr/local/samba/private). -

    Likewise, the smbpasswd file inside the private directory should + be set to 0500 (chmod 500 /usr/local/samba/private). +

    Likewise, the smbpasswd file inside the private directory should be owned by root and the permissions on is should be set to 0600 - (chmod 600 smbpasswd).

    The format of the smbpasswd file is (The line has been + (chmod 600 smbpasswd).

    The format of the smbpasswd file is (The line has been wrapped here. It should appear as one entry per line in - your smbpasswd file.)

    username:uid:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:
+	your smbpasswd file.)
    +username:uid:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:
 	[Account type]:LCT-<last-change-time>:Long name
-	
    Although only the username, 
-	uid, 	XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX,
-	[Account type] and 	last-change-time sections are significant 
-	and are looked at in the Samba code.
    It is VITALLY important that there by 32 
+

    Although only the username, + uid, + XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX, + [Account type] and + last-change-time sections are significant + and are looked at in the Samba code.

    It is VITALLY important that there by 32 'X' characters between the two ':' characters in the XXX sections - the smbpasswd and Samba code will fail to validate any entries that do not have 32 characters between ':' characters. The first XXX section is for the Lanman password hash, the second is for the - Windows NT version.

    When the password file is created all users have password entries + Windows NT version.

    When the password file is created all users have password entries consisting of 32 'X' characters. By default this disallows any access as this user. When a user has a password set, the 'X' characters change to 32 ascii hexadecimal digits (0-9, A-F). These are an ascii - representation of the 16 byte hashed value of a user's password.

    To set a user to have no password (not recommended), edit the file + representation of the 16 byte hashed value of a user's password.

    To set a user to have no password (not recommended), edit the file using vi, and replace the first 11 characters with the ascii text - "NO PASSWORD" (minus the quotes).

    For example, to clear the password for user bob, his smbpasswd file - entry would look like :

    	bob:100:NO PASSWORDXXXXXXXXXXXXXXXXXXXXX:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:[U          ]:LCT-00000000:Bob's full name:/bobhome:/bobshell
-

    If you are allowing users to use the smbpasswd command to set + "NO PASSWORD" (minus the quotes).

    For example, to clear the password for user bob, his smbpasswd file + entry would look like :

    +bob:100:NO PASSWORDXXXXXXXXXXXXXXXXXXXXX:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:
+	[U          ]:LCT-00000000:Bob's full name:/bobhome:/bobshell
+

    If you are allowing users to use the smbpasswd command to set their own passwords, you may want to give users NO PASSWORD initially so they do not have to enter a previous password when changing to their new password (not recommended). In order for you to allow this the - smbpasswd program must be able to connect to the - smbd daemon as that user with no password. Enable this - by adding the line :

    null passwords = yes

    to the [global] section of the smb.conf file (this is why + smbpasswd program must be able to connect to the + smbd daemon as that user with no password. Enable this + by adding the line :

    null passwords = yes

    to the [global] section of the smb.conf file (this is why the above scenario is not recommended). Preferably, allocate your users a default password to begin with, so you do not have - to enable this on your server.

    Note : This file should be protected very + to enable this on your server.

    Note : This file should be protected very carefully. Anyone with access to this file can (with enough knowledge of the protocols) gain access to your SMB server. The file is thus more - sensitive than a normal unix /etc/passwd file.

    \ No newline at end of file + sensitive than a normal unix /etc/passwd file.

    Chapter14.Modules

    Jelmer Vernooij

    Samba Team

    19 March 2003

    Table of Contents

    Advantages
    Loading modules
    Static modules
    Shared modules
    Writing modules
    Static/Shared selection in configure.in

    Advantages

    +The new modules system has the following advantages: +

    Transparent loading of static and shared modules (no need +for a subsystem to know about modules)
    Simple selection between shared and static modules at configure time
    "preload modules" option for increasing performance for stable modules
    No nasty #define stuff anymore
    All backends are available as plugin now (including pdb_ldap and pdb_tdb)

    Loading modules

    +Some subsystems in samba use different backends. These backends can be +either statically linked in to samba or available as a plugin. A subsystem +should have a function that allows a module to register itself. For example, +the passdb subsystem has: +

    +NTSTATUS smb_register_passdb(int version, const char *name, pdb_init_function init);
+

    +This function will be called by the initialisation function of the module to +register itself. +

    Static modules

    +The modules system compiles a list of initialisation functions for the +static modules of each subsystem. This is a define. For example, +it is here currently (from include/config.h): +

    +/* Static init functions */
+#define static_init_pdb { pdb_mysql_init(); pdb_ldap_init(); pdb_smbpasswd_init(); pdb_tdbsam_init(); pdb_guest_init();}
+

    +These functions should be called before the subsystem is used. That +should be done when the subsystem is initialised or first used. +

    Shared modules

    +If a subsystem needs a certain backend, it should check if it has +already been registered. If the backend hasn't been registered already, +the subsystem should call smb_probe_module(char *subsystem, char *backend). +This function tries to load the correct module from a certain path +($LIBDIR/subsystem/backend.so). If the first character in 'backend' +is a slash, smb_probe_module() tries to load the module from the +absolute path specified in 'backend'. +

    After smb_probe_module() has been executed, the subsystem +should check again if the module has been registered. +

    Writing modules

    +Each module has an initialisation function. For modules that are +included with samba this name is 'subsystem_backend_init'. For external modules (that will never be built-in, but only available as a module) this name is always 'init_module'. (In the case of modules included with samba, the configure system will add a #define subsystem_backend_init() init_module()). +The prototype for these functions is: +

    +NTSTATUS init_module(void);
+

    This function should call one or more +registration functions. The function should return NT_STATUS_OK on success and +NT_STATUS_UNSUCCESSFUL or a more useful nt error code on failure.

    For example, pdb_ldap_init() contains: 

    +NTSTATUS pdb_ldap_init(void)
+{
+smb_register_passdb(PASSDB_INTERFACE_VERSION, "ldapsam", pdb_init_ldapsam);
+smb_register_passdb(PASSDB_INTERFACE_VERSION, "ldapsam_nua", pdb_init_ldapsam_nua);
+	return NT_STATUS_OK;
+}
+

    Static/Shared selection in configure.in

    +Some macros in configure.in generate the various defines and substs that +are necessary for the system to work correct. All modules that should +be built by default have to be added to the variable 'default_modules'. +For example, if ldap is found, pdb_ldap is added to this variable. +

    +On the bottom of configure.in, SMB_MODULE() should be called +for each module and SMB_SUBSYSTEM() for each subsystem. +

    Syntax:

    +SMB_MODULE(subsystem_backend, object files, plugin name, subsystem name, static_action, shared_action)
+SMB_SUBSYSTEM(subsystem)
+

    Also, make sure to add the correct directives to +Makefile.in. @SUBSYSTEM_STATIC@ +will be replaced with a list of objects files of the modules that need to +be linked in statically. @SUBSYSTEM_MODULES@ will +be replaced with the names of the plugins to build. +

    You must make sure all .c files that contain defines that can +be changed by ./configure are rebuilded in the 'modules_clean' make target. +Practically, this means all c files that contain static_init_subsystem; calls need to be rebuilded. +

    Chapter15.RPC Pluggable Modules

    Anthony Liguori

    IBM

    Jelmer Vernooij

    Samba Team

    January 2003

    Table of Contents

    About
    General Overview

    About

    +This document describes how to make use the new RPC Pluggable Modules features +of Samba 3.0. This architecture was added to increase the maintainability of +Samba allowing RPC Pipes to be worked on separately from the main CVS branch. +The RPM architecture will also allow third-party vendors to add functionality +to Samba through plug-ins. +

    General Overview

    +When an RPC call is sent to smbd, smbd tries to load a shared library by the +name librpc_<pipename>.so to handle the call if +it doesn't know how to handle the call internally. For instance, LSA calls +are handled by librpc_lsass.so.. +These shared libraries should be located in the <sambaroot>/lib/rpc. smbd then attempts to call the init_module function within +the shared library. Check the chapter on modules for more information. +

    +In the init_module function, the library should call +rpc_pipe_register_commands(). This function takes the following arguments: +

    +NTSTATUS rpc_pipe_register_commands(int version, const char *clnt, const char *srv,
+                               const struct api_struct *cmds, int size);
+
    version

    Version number of the RPC interface. Use the define SMB_RPC_INTERFACE_VERSION for this +argument.

    clnt

    the Client name of the named pipe

    srv

    the Server name of the named pipe

    cmds

    a list of api_structs that map RPC ordinal numbers to function calls

    size

    the number of api_structs contained in cmds

    +See rpc_server/srv_reg.c and rpc_server/srv_reg_nt.c for a small example of +how to use this library. +

    Chapter16.VFS Modules

    Alexander Bokovoy

    Stefan Metzmacher

    27 May 2003

    Table of Contents

    The Samba (Posix) VFS layer
    The general interface
    Possible VFS operation layers
    The Interaction between the Samba VFS subsystem and the modules
    Initialization and registration
    How the Modules handle per connection data
    Upgrading to the New VFS Interface
    Upgrading from 2.2.* and 3.0aplha modules
    Some Notes
    Implement TRANSPARENT functions
    Implement OPAQUE functions

    The Samba (Posix) VFS layer

    The general interface

    +Each VFS operation has a vfs_op_type, a function pointer and a handle pointer in the +struct vfs_ops and tree macros to make it easier to call the operations. +(Take a look at include/vfs.h and include/vfs_macros.h.) +

    +typedef enum _vfs_op_type {
+	SMB_VFS_OP_NOOP = -1,
+
+	...
+
+	/* File operations */
+
+	SMB_VFS_OP_OPEN,
+	SMB_VFS_OP_CLOSE,
+	SMB_VFS_OP_READ,
+	SMB_VFS_OP_WRITE,
+	SMB_VFS_OP_LSEEK,
+	SMB_VFS_OP_SENDFILE,
+
+	...
+
+	SMB_VFS_OP_LAST
+} vfs_op_type;
+

    This struct contains the function and handle pointers for all operations.

    +struct vfs_ops {
+	struct vfs_fn_pointers {
+		...
+		
+		/* File operations */
+		
+		int (*open)(struct vfs_handle_struct *handle,
+			struct connection_struct *conn,
+			const char *fname, int flags, mode_t mode);
+		int (*close)(struct vfs_handle_struct *handle,
+			struct files_struct *fsp, int fd);
+		ssize_t (*read)(struct vfs_handle_struct *handle, 
+			struct files_struct *fsp, int fd, void *data, size_t n);
+		ssize_t (*write)(struct vfs_handle_struct *handle, 
+			struct files_struct *fsp, int fd, 
+			const void *data, size_t n);
+		SMB_OFF_T (*lseek)(struct vfs_handle_struct *handle, 
+			struct files_struct *fsp, int fd, 
+			SMB_OFF_T offset, int whence);
+		ssize_t (*sendfile)(struct vfs_handle_struct *handle, 
+			int tofd, files_struct *fsp, int fromfd, 
+			const DATA_BLOB *header, SMB_OFF_T offset, size_t count);
+
+		...
+	} ops;
+	
+	struct vfs_handles_pointers {
+		...
+		
+		/* File operations */
+		
+		struct vfs_handle_struct *open;
+		struct vfs_handle_struct *close;
+		struct vfs_handle_struct *read;
+		struct vfs_handle_struct *write;
+		struct vfs_handle_struct *lseek;
+		struct vfs_handle_struct *sendfile;
+		
+		...
+	} handles;
+};
+

    +This macros SHOULD be used to call any vfs operation. +DO NOT ACCESS conn->vfs.ops.* directly !!! +

    +...
+	
+/* File operations */
+#define SMB_VFS_OPEN(conn, fname, flags, mode) \
+	((conn)->vfs.ops.open((conn)->vfs.handles.open,\
+	 (conn), (fname), (flags), (mode)))
+#define SMB_VFS_CLOSE(fsp, fd) \
+	((fsp)->conn->vfs.ops.close(\
+	(fsp)->conn->vfs.handles.close, (fsp), (fd)))
+#define SMB_VFS_READ(fsp, fd, data, n) \
+	((fsp)->conn->vfs.ops.read(\
+	(fsp)->conn->vfs.handles.read,\
+	 (fsp), (fd), (data), (n)))
+#define SMB_VFS_WRITE(fsp, fd, data, n) \
+	((fsp)->conn->vfs.ops.write(\
+	(fsp)->conn->vfs.handles.write,\
+	 (fsp), (fd), (data), (n)))
+#define SMB_VFS_LSEEK(fsp, fd, offset, whence) \
+	((fsp)->conn->vfs.ops.lseek(\
+	(fsp)->conn->vfs.handles.lseek,\
+	 (fsp), (fd), (offset), (whence)))
+#define SMB_VFS_SENDFILE(tofd, fsp, fromfd, header, offset, count) \
+	((fsp)->conn->vfs.ops.sendfile(\
+	(fsp)->conn->vfs.handles.sendfile,\
+	 (tofd), (fsp), (fromfd), (header), (offset), (count)))
+
+...
+

    Possible VFS operation layers

    +These values are used by the VFS subsystem when building the conn->vfs +and conn->vfs_opaque structs for a connection with multiple VFS modules. +Internally, Samba differentiates only opaque and transparent layers at this process. +Other types are used for providing better diagnosing facilities. +

    +Most modules will provide transparent layers. Opaque layer is for modules +which implement actual file system calls (like DB-based VFS). For example, +default POSIX VFS which is built in into Samba is an opaque VFS module. +

    +Other layer types (logger, splitter, scanner) were designed to provide different +degree of transparency and for diagnosing VFS module behaviour. +

    +Each module can implement several layers at the same time provided that only +one layer is used per each operation. +

    +typedef enum _vfs_op_layer {
+	SMB_VFS_LAYER_NOOP = -1,	/* - For using in VFS module to indicate end of array */
+					/*   of operations description */
+	SMB_VFS_LAYER_OPAQUE = 0,	/* - Final level, does not call anything beyond itself */
+	SMB_VFS_LAYER_TRANSPARENT,	/* - Normal operation, calls underlying layer after */
+					/*   possibly changing passed data */
+	SMB_VFS_LAYER_LOGGER,		/* - Logs data, calls underlying layer, logging may not */
+					/*   use Samba VFS */
+	SMB_VFS_LAYER_SPLITTER,		/* - Splits operation, calls underlying layer _and_ own facility, */
+					/*   then combines result */
+	SMB_VFS_LAYER_SCANNER		/* - Checks data and possibly initiates additional */
+					/*   file activity like logging to files _inside_ samba VFS */
+} vfs_op_layer;
+

    The Interaction between the Samba VFS subsystem and the modules

    Initialization and registration

    +As each Samba module a VFS module should have a +

    NTSTATUS vfs_example_init(void);

    function if it's staticly linked to samba or +

    NTSTATUS init_module(void);

    function if it's a shared module. +

    +This should be the only non static function inside the module. +Global variables should also be static! +

    +The module should register its functions via the +

    +NTSTATUS smb_register_vfs(int version, const char *name, vfs_op_tuple *vfs_op_tuples);
+

    function. +

    version

    should be filled with SMB_VFS_INTERFACE_VERSION

    name

    this is the name witch can be listed in the +vfs objects parameter to use this module.

    vfs_op_tuples

    +this is an array of vfs_op_tuple's. +(vfs_op_tuples is descripted in details below.) +

    +For each operation the module wants to provide it has a entry in the +vfs_op_tuple array. +

    +typedef struct _vfs_op_tuple {
+	void* op;
+	vfs_op_type type;
+	vfs_op_layer layer;
+} vfs_op_tuple;
+
    op

    the function pointer to the specified function.

    type

    the vfs_op_type of the function to specified witch operation the function provides.

    layer

    the vfs_op_layer in whitch the function operates.

    A simple example:

    +static vfs_op_tuple example_op_tuples[] = {	
+	{SMB_VFS_OP(example_connect),	SMB_VFS_OP_CONNECT,	SMB_VFS_LAYER_TRANSPARENT},
+	{SMB_VFS_OP(example_disconnect),	SMB_VFS_OP_DISCONNECT,	SMB_VFS_LAYER_TRANSPARENT},
+
+	{SMB_VFS_OP(example_rename),	SMB_VFS_OP_RENAME,	SMB_VFS_LAYER_OPAQUE},
+
+	/* This indicates the end of the array */
+	{SMB_VFS_OP(NULL),				SMB_VFS_OP_NOOP,	SMB_VFS_LAYER_NOOP}
+};
+
+NTSTATUS init_module(void)
+{
+	return smb_register_vfs(SMB_VFS_INTERFACE_VERSION, "example", example_op_tuples);
+}
+

    How the Modules handle per connection data

    Each VFS function has as first parameter a pointer to the modules vfs_handle_struct. +

    +typedef struct vfs_handle_struct {
+	struct vfs_handle_struct  *next, *prev;
+	const char *param;
+	struct vfs_ops vfs_next;
+	struct connection_struct *conn;
+	void *data;
+	void (*free_data)(void **data);
+} vfs_handle_struct;
+
    param

    this is the module parameter specified in the vfs objects parameter.

    e.g. for 'vfs objects = example:test' param would be "test".

    vfs_next

    This vfs_ops struct contains the information for calling the next module operations. +Use the vfs_next_* macros to call a next module operations and +don't access handle->vfs_next.ops.* directly!

    conn

    This is a pointer back to the connection_struct to witch the handle belongs.

    data

    This is a pointer for holding module private data. +You can alloc data with connection life time on the handle->conn->mem_ctx TALLOC_CTX. +But you can also manage the memory allocation yourself.

    free_data

    This is a function pointer to a function that free's the module private data. +If you talloc your private data on the TALLOC_CTX handle->conn->mem_ctx, +you can set this function pointer to NULL.

    Some useful MACROS for handle private data. +

    +#define SMB_VFS_HANDLE_GET_DATA(handle, datap, type, ret) { \
+	if (!(handle)||((datap=(type *)(handle)->data)==NULL)) { \
+		DEBUG(0,("%s() failed to get vfs_handle->data!\n",FUNCTION_MACRO)); \
+		ret; \
+	} \
+}
+
+#define SMB_VFS_HANDLE_SET_DATA(handle, datap, free_fn, type, ret) { \
+	if (!(handle)) { \
+		DEBUG(0,("%s() failed to set handle->data!\n",FUNCTION_MACRO)); \
+		ret; \
+	} else { \
+		if ((handle)->free_data) { \
+			(handle)->free_data(&(handle)->data); \
+		} \
+		(handle)->data = (void *)datap; \
+		(handle)->free_data = free_fn; \
+	} \
+}
+
+#define SMB_VFS_HANDLE_FREE_DATA(handle) { \
+	if ((handle) && (handle)->free_data) { \
+		(handle)->free_data(&(handle)->data); \
+	} \
+}
+

    How SMB_VFS_LAYER_TRANSPARENT functions can call the SMB_VFS_LAYER_OPAQUE functions.

    The easiest way to do this is to use the SMB_VFS_OPAQUE_* macros. +

    +...
+/* File operations */
+#define SMB_VFS_OPAQUE_OPEN(conn, fname, flags, mode) \
+	((conn)->vfs_opaque.ops.open(\
+	(conn)->vfs_opaque.handles.open,\
+	 (conn), (fname), (flags), (mode)))
+#define SMB_VFS_OPAQUE_CLOSE(fsp, fd) \
+	((fsp)->conn->vfs_opaque.ops.close(\
+	(fsp)->conn->vfs_opaque.handles.close,\
+	 (fsp), (fd)))
+#define SMB_VFS_OPAQUE_READ(fsp, fd, data, n) \
+	((fsp)->conn->vfs_opaque.ops.read(\
+	(fsp)->conn->vfs_opaque.handles.read,\
+	 (fsp), (fd), (data), (n)))
+#define SMB_VFS_OPAQUE_WRITE(fsp, fd, data, n) \
+	((fsp)->conn->vfs_opaque.ops.write(\
+	(fsp)->conn->vfs_opaque.handles.write,\
+	 (fsp), (fd), (data), (n)))
+#define SMB_VFS_OPAQUE_LSEEK(fsp, fd, offset, whence) \
+	((fsp)->conn->vfs_opaque.ops.lseek(\
+	(fsp)->conn->vfs_opaque.handles.lseek,\
+	 (fsp), (fd), (offset), (whence)))
+#define SMB_VFS_OPAQUE_SENDFILE(tofd, fsp, fromfd, header, offset, count) \
+	((fsp)->conn->vfs_opaque.ops.sendfile(\
+	(fsp)->conn->vfs_opaque.handles.sendfile,\
+	 (tofd), (fsp), (fromfd), (header), (offset), (count)))
+...
+

    How SMB_VFS_LAYER_TRANSPARENT functions can call the next modules functions.

    The easiest way to do this is to use the SMB_VFS_NEXT_* macros. +

    +...
+/* File operations */
+#define SMB_VFS_NEXT_OPEN(handle, conn, fname, flags, mode) \
+	((handle)->vfs_next.ops.open(\
+	(handle)->vfs_next.handles.open,\
+	 (conn), (fname), (flags), (mode)))
+#define SMB_VFS_NEXT_CLOSE(handle, fsp, fd) \
+	((handle)->vfs_next.ops.close(\
+	(handle)->vfs_next.handles.close,\
+	 (fsp), (fd)))
+#define SMB_VFS_NEXT_READ(handle, fsp, fd, data, n) \
+	((handle)->vfs_next.ops.read(\
+	(handle)->vfs_next.handles.read,\
+	 (fsp), (fd), (data), (n)))
+#define SMB_VFS_NEXT_WRITE(handle, fsp, fd, data, n) \
+	((handle)->vfs_next.ops.write(\
+	(handle)->vfs_next.handles.write,\
+	 (fsp), (fd), (data), (n)))
+#define SMB_VFS_NEXT_LSEEK(handle, fsp, fd, offset, whence) \
+	((handle)->vfs_next.ops.lseek(\
+	(handle)->vfs_next.handles.lseek,\
+	 (fsp), (fd), (offset), (whence)))
+#define SMB_VFS_NEXT_SENDFILE(handle, tofd, fsp, fromfd, header, offset, count) \
+	((handle)->vfs_next.ops.sendfile(\
+	(handle)->vfs_next.handles.sendfile,\
+	 (tofd), (fsp), (fromfd), (header), (offset), (count)))
+...
+

    Upgrading to the New VFS Interface

    Upgrading from 2.2.* and 3.0aplha modules

    1. +Add "vfs_handle_struct *handle, " as first parameter to all vfs operation functions. +e.g. example_connect(connection_struct *conn, const char *service, const char *user); +-> example_connect(vfs_handle_struct *handle, connection_struct *conn, const char *service, const char *user); +

    2. +Replace "default_vfs_ops." with "smb_vfs_next_". +e.g. default_vfs_ops.connect(conn, service, user); +-> smb_vfs_next_connect(conn, service, user); +

    3. +Uppercase all "vfs_next_*" functions. +e.g. smb_vfs_next_connect(conn, service, user); +-> SMB_VFS_NEXT_CONNECT(conn, service, user); +

    4. +Add "handle, " as first parameter to all VFS_NEXT_*() calls. +e.g. SMB_VFS_NEXT_CONNECT(conn, service, user); +-> SMB_VFS_NEXT_CONNECT(handle, conn, service, user); +

    5. +(Only for 2.2.* modules) +Convert the old struct vfs_ops example_ops to +a vfs_op_tuple example_op_tuples[] array. +e.g. +

      +struct vfs_ops example_ops = {
+	/* Disk operations */
+	example_connect,		/* connect */
+	example_disconnect,		/* disconnect */
+	NULL,				/* disk free *
+	/* Directory operations */
+	NULL,				/* opendir */
+	NULL,				/* readdir */
+	NULL,				/* mkdir */
+	NULL,				/* rmdir */
+	NULL,				/* closedir */
+	/* File operations */
+	NULL,				/* open */
+	NULL,				/* close */
+	NULL,				/* read  */
+	NULL,				/* write */
+	NULL,				/* lseek */
+	NULL,				/* sendfile */
+	NULL,				/* rename */
+	NULL,				/* fsync */
+	example_stat,			/* stat  */
+	example_fstat,			/* fstat */
+	example_lstat,			/* lstat */
+	NULL,				/* unlink */
+	NULL,				/* chmod */
+	NULL,				/* fchmod */
+	NULL,				/* chown */
+	NULL,				/* fchown */
+	NULL,				/* chdir */
+	NULL,				/* getwd */
+	NULL,				/* utime */
+	NULL,				/* ftruncate */
+	NULL,				/* lock */
+	NULL,				/* symlink */
+	NULL,				/* readlink */
+	NULL,				/* link */
+	NULL,				/* mknod */
+	NULL,				/* realpath */
+	NULL,				/* fget_nt_acl */
+	NULL,				/* get_nt_acl */
+	NULL,				/* fset_nt_acl */
+	NULL,				/* set_nt_acl */
+
+	NULL,				/* chmod_acl */
+	NULL,				/* fchmod_acl */
+
+	NULL,				/* sys_acl_get_entry */
+	NULL,				/* sys_acl_get_tag_type */
+	NULL,				/* sys_acl_get_permset */
+	NULL,				/* sys_acl_get_qualifier */
+	NULL,				/* sys_acl_get_file */
+	NULL,				/* sys_acl_get_fd */
+	NULL,				/* sys_acl_clear_perms */
+	NULL,				/* sys_acl_add_perm */
+	NULL,				/* sys_acl_to_text */
+	NULL,				/* sys_acl_init */
+	NULL,				/* sys_acl_create_entry */
+	NULL,				/* sys_acl_set_tag_type */
+	NULL,				/* sys_acl_set_qualifier */
+	NULL,				/* sys_acl_set_permset */
+	NULL,				/* sys_acl_valid */
+	NULL,				/* sys_acl_set_file */
+	NULL,				/* sys_acl_set_fd */
+	NULL,				/* sys_acl_delete_def_file */
+	NULL,				/* sys_acl_get_perm */
+	NULL,				/* sys_acl_free_text */
+	NULL,				/* sys_acl_free_acl */
+	NULL				/* sys_acl_free_qualifier */
+};
+

      +-> +

       
+static vfs_op_tuple example_op_tuples[] = {
+	{SMB_VFS_OP(example_connect),	SMB_VFS_OP_CONNECT,	SMB_VFS_LAYER_TRANSPARENT},
+	{SMB_VFS_OP(example_disconnect),	SMB_VFS_OP_DISCONNECT,	SMB_VFS_LAYER_TRANSPARENT},
+	
+	{SMB_VFS_OP(example_fstat), 	SMB_VFS_OP_FSTAT,	SMB_VFS_LAYER_TRANSPARENT},
+	{SMB_VFS_OP(example_stat),		SMB_VFS_OP_STAT,	SMB_VFS_LAYER_TRANSPARENT},
+	{SMB_VFS_OP(example_lstat), 	SMB_VFS_OP_LSTAT,	SMB_VFS_LAYER_TRANSPARENT},
+
+	{SMB_VFS_OP(NULL),				SMB_VFS_OP_NOOP,	SMB_VFS_LAYER_NOOP}
+};
+

      +

    6. +Move the example_op_tuples[] array to the end of the file. +

    7. +Add the init_module() function at the end of the file. +e.g. +

      +NTSTATUS init_module(void)
+{
+	return smb_register_vfs(SMB_VFS_INTERFACE_VERSION,"example",example_op_tuples);
+}
+

      +

    8. +Check if your vfs_init() function does more then just prepare the vfs_ops structs or +remember the struct smb_vfs_handle_struct. +

      If NOT you can remove the vfs_init() function.
      If YES decide if you want to move the code to the example_connect() operation or to the init_module(). And then remove vfs_init(). + e.g. a debug class registration should go into init_module() and the allocation of private data should go to example_connect().

      +

    9. +(Only for 3.0alpha* modules) +Check if your vfs_done() function contains needed code. +

      If NOT you can remove the vfs_done() function.
      If YES decide if you can move the code to the example_disconnect() operation. Otherwise register a SMB_EXIT_EVENT with smb_register_exit_event(); (Described in the modules section) And then remove vfs_done(). e.g. the freeing of private data should go to example_disconnect(). +

      +

    10. +Check if you have any global variables left. +Decide if it wouldn't be better to have this data on a connection basis. +

      If NOT leave them as they are. (e.g. this could be the variable for the private debug class.)
      If YES pack all this data into a struct. You can use handle->data to point to such a struct on a per connection basis.

      + + e.g. if you have such a struct: +

          
+struct example_privates {
+	char *some_string;
+	int db_connection;
+};
+

      +first way of doing it: +

      +static int example_connect(vfs_handle_struct *handle,
+	connection_struct *conn, const char *service, 
+	const char* user)
+{
+	struct example_privates *data = NULL;
+
+	/* alloc our private data */
+	data = (struct example_privates *)talloc_zero(conn->mem_ctx, sizeof(struct example_privates));
+	if (!data) {
+		DEBUG(0,("talloc_zero() failed\n"));
+		return -1;
+	}
+
+	/* init out private data */
+	data->some_string = talloc_strdup(conn->mem_ctx,"test");
+	if (!data->some_string) {
+		DEBUG(0,("talloc_strdup() failed\n"));
+		return -1;
+	}
+
+	data->db_connection = open_db_conn();
+
+	/* and now store the private data pointer in handle->data
+	 * we don't need to specify a free_function here because
+	 * we use the connection TALLOC context.
+	 * (return -1 if something failed.)
+	 */
+	VFS_HANDLE_SET_DATA(handle, data, NULL, struct example_privates, return -1);
+
+	return SMB_VFS_NEXT_CONNECT(handle,conn,service,user);
+}
+
+static int example_close(vfs_handle_struct *handle, files_struct *fsp, int fd)
+{
+	struct example_privates *data = NULL;
+	
+	/* get the pointer to our private data
+	 * return -1 if something failed
+	 */
+	SMB_VFS_HANDLE_GET_DATA(handle, data, struct example_privates, return -1);
+	
+	/* do something here...*/
+	DEBUG(0,("some_string: %s\n",data->some_string));
+	
+	return SMB_VFS_NEXT_CLOSE(handle, fsp, fd);
+}
+

      +second way of doing it: +

      +static void free_example_privates(void **datap)
+{
+	struct example_privates *data = (struct example_privates *)*datap;
+	
+	SAFE_FREE(data->some_string);
+	SAFE_FREE(data);
+	
+	datap = NULL;
+	
+	return;
+}
+
+static int example_connect(vfs_handle_struct *handle, 
+	connection_struct *conn, const char *service, 
+	const char* user)
+{
+	struct example_privates *data = NULL;
+
+	/* alloc our private data */
+	data = (struct example_privates *)malloc(sizeof(struct example_privates));
+	if (!data) {
+		DEBUG(0,("malloc() failed\n"));
+		return -1;
+	}
+
+	/* init out private data */
+	data->some_string = strdup(conn->mem_ctx,"test");
+	if (!data->some_string) {
+		DEBUG(0,("strdup() failed\n"));
+		return -1;
+	}
+
+	data->db_connection = open_db_conn();
+
+	/* and now store the private data pointer in handle->data
+	 * we need to specify a free_function because we used malloc() and strdup().
+	 * (return -1 if something failed.)
+	 */
+	SMB_VFS_HANDLE_SET_DATA(handle, data, NULL, struct example_privates, return -1);
+
+	return SMB_VFS_NEXT_CONNECT(handle,conn,service,user);
+}
+
+static int example_close(vfs_handle_struct *handle, files_struct *fsp, int fd)
+{
+	struct example_privates *data = NULL;
+	
+	/* get the pointer to our private data
+	 * return -1 if something failed
+	 */
+	SMB_VFS_HANDLE_GET_DATA(handle, data, struct example_privates, return -1);
+	
+	/* do something here...*/
+	DEBUG(0,("some_string: %s\n",data->some_string));
+	
+	return VFS_NEXT_CLOSE(handle, fsp, fd);
+}
+

      +

    11. +To make it easy to build 3rd party modules it would be usefull to provide +configure.in, (configure), install.sh and Makefile.in with the module. +(Take a look at the example in examples/VFS.) +

      +The configure script accepts --with-samba-source to specify +the path to the samba source tree. +It also accept --enable-developer which lets the compiler +give you more warnings. +

      +The idea is that you can extend this +configure.in and Makefile.in scripts +for your module. +

    12. +Compiling & Testing... +

      ./configure --enable-developer ...
      make
      Try to fix all compiler warnings
      make
      Testing, Testing, Testing ...

      +

    Some Notes

    Implement TRANSPARENT functions

    +Avoid writing functions like this: + +

    +static int example_close(vfs_handle_struct *handle, files_struct *fsp, int fd)
+{
+	return SMB_VFS_NEXT_CLOSE(handle, fsp, fd);
+}
+

    + +Overload only the functions you really need to! +

    Implement OPAQUE functions

    +If you want to just implement a better version of a +default samba opaque function +(e.g. like a disk_free() function for a special filesystem) +it's ok to just overload that specific function. +

    +If you want to implement a database filesystem or +something different from a posix filesystem. +Make sure that you overload every vfs operation!!! +

    +Functions your FS does not support should be overloaded by something like this: +e.g. for a readonly filesystem. +

    +static int example_rename(vfs_handle_struct *handle, connection_struct *conn,
+			char *oldname, char *newname)
+{
+	DEBUG(10,("function rename() not allowed on vfs 'example'\n"));
+	errno = ENOSYS;
+	return -1;
+}
+

    Chapter17.Notes to packagers

    Jelmer Vernooij

    Table of Contents

    Versioning
    Modules

    Versioning

    Please, please update the version number in +source/include/version.h to include the versioning of your package. This makes it easier to distinguish standard samba builds +from custom-build samba builds (distributions often patch packages). For +example, a good version would be: 

    +Version 2.999+3.0.alpha21-5 for Debian
+

    Modules

    Samba now has support for building parts of samba as plugins. This +makes it possible to, for example, put ldap or mysql support in a seperate +package, thus making it possible to have a normal samba package not +depending on ldap or mysql. To build as much parts of samba +as a plugin, run: 

    +./configure --with-shared-modules=rpc,vfs,auth,pdb,charset
+

    Chapter18.Contributing code

    Jelmer R. Vernooij

    The Samba Team

    Here are a few tips and notes that might be useful if you are + interested in modifying samba source code and getting it into + samba's main branch.

    Retrieving the source

    In order to contribute code to samba, make sure you have the + latest source. Retrieving the samba source code from CVS is + documented in the appendix of the Samba HOWTO Collection. +

    Discuss large modifications with team members

    Please discuss large modifications you are going to make + with members of the samba team. Some parts of the samba code + have one or more 'owners' - samba developers who wrote most + of the code and maintain it. +

    This way you can avoid spending your time and effort on + something that is not going to make it into the main samba branch + because someone else was working on the same thing or because your + implementation is not the correct one. +

    Patch format

    Patches to the samba tree should be in unified diff format, + e.g. files generated by diff -u. +

    If you are modifying a copy of samba you retrieved from CVS, + you can easily generate a diff file of these changes by running + cvs diff -u.

    Points of attention when modifying samba source code

    +

    Don't simply copy code from other places and modify it until it + works. Code needs to be clean and logical. Duplicate + code is to be avoided.
    Test your patch. It might take a while before one of us looks + at your patch so it will take longer before your patch when your patch + needs to go thru the review cycle again.
    Don't put seperate patches in one large diff file. This makes + it harder to read, understand and test the patch. You might + also risk not getting a good patch committed because you mixed it + with one that had issues.
    Make sure your patch complies to the samba coding style as + suggested in the coding-suggestions chapter.

    +

    Sending in bugfixes

    Bugfixes to bugs in samba should be submitted to samba's + bugzilla system, + along with a description of the bug. +

    Sending in feature patches

    Send feature patches along with a description of what the + patch is supposed to do to the + Samba-technical mailinglist and possibly to a samba team member who is (one of the) 'owners' + of the code you made modifications to. We are all busy people + so everybody tends to 'let one of the others handle it'. If nobody + responded to your patch for a week, try to send it again until you + get a response from one of us. +

    Feedback on your patch

    One of the team members will look at your patch and either + commit your patch or give comments why he won't apply it. In the + latter case you can fix your patch and re-send it until + your patch is approved.

    diff --git a/docs/htmldocs/bugreport.html b/docs/htmldocs/bugreport.html index fcc4b7e91a..01b88729ed 100644 --- a/docs/htmldocs/bugreport.html +++ b/docs/htmldocs/bugreport.html @@ -1,352 +1,119 @@ - -Reporting Bugs
    SAMBA Project Documentation
    PrevNext

    Chapter 25. Reporting Bugs

    25.1. Introduction

    The email address for bug reports for stable releases is samba@samba.org. -Bug reports for alpha releases should go to samba-technical@samba.org.

    Please take the time to read this file before you submit a bug +Chapter35.Reporting Bugs

    Chapter35.Reporting Bugs
    PrevPartV.TroubleshootingNext

    Chapter35.Reporting Bugs

    Jelmer R. Vernooij

    The Samba Team

    Someone; Tridge or Karl Auer perhaps?

    27 June 1997

    Table of Contents

    Introduction
    General info
    Debug levels
    Internal errors
    Attaching to a running process
    Patches

    Introduction

    Please report bugs using + bugzilla.

    +Please take the time to read this file before you submit a bug report. Also, please see if it has changed between releases, as we -may be changing the bug reporting mechanism at some time.

    Please also do as much as you can yourself to help track down the +may be changing the bug reporting mechanism at some time. +

    +Please also do as much as you can yourself to help track down the bug. Samba is maintained by a dedicated group of people who volunteer their time, skills and efforts. We receive far more mail about it than we can possibly answer, so you have a much higher chance of an answer -and a fix if you send us a "developer friendly" bug report that lets -us fix it fast.

    Do not assume that if you post the bug to the comp.protocols.smb +and a fix if you send us a "developer friendly" bug report that lets +us fix it fast. +

    +Do not assume that if you post the bug to the comp.protocols.smb newsgroup or the mailing list that we will read it. If you suspect that your problem is not a bug but a configuration problem then it is better to send it to the Samba mailing list, as there are (at last count) 5000 other users on -that list that may be able to help you.

    You may also like to look though the recent mailing list archives, +that list that may be able to help you. +

    +You may also like to look though the recent mailing list archives, which are conveniently accessible on the Samba web pages -at http://samba.org/samba/.

    General info

    +Before submitting a bug report check your config for silly errors. Look in your log files for obvious messages that tell you that you've misconfigured something and run testparm to test your config -file for correct syntax.

    Have you run through the diagnosis? -This is very important.

    If you include part of a log file with your bug report then be sure to +file for correct syntax. +

    +Have you run through the diagnosis? +This is very important. +

    +If you include part of a log file with your bug report then be sure to annotate it with exactly what you were doing on the client at the -time, and exactly what the results were.

    Debug levels

    +If the bug has anything to do with Samba behaving incorrectly as a server (like refusing to open a file) then the log files will probably be very useful. Depending on the problem a log level of between 3 and 10 showing the problem may be appropriate. A higher level givesmore -detail, but may use too much disk space.

    To set the debug level use log level = in your -smb.conf. You may also find it useful to set the log +detail, but may use too much disk space. +

    +To set the debug level use the log level in your +smb.conf. You may also find it useful to set the log level higher for just one machine and keep separate logs for each machine. -To do this use:

    log level = 10
+To do this use:
+
    +log level = 10
 log file = /usr/local/samba/lib/log.%m
-include = /usr/local/samba/lib/smb.conf.%m
    then create a file 
-/usr/local/samba/lib/smb.conf.machine where
-"machine" is the name of the client you wish to debug. In that file
-put any smb.conf commands you want, for example 
-log level= may be useful. This also allows you to 
+include = /usr/local/samba/lib/smb.conf.%m
+

    +then create a file +/usr/local/samba/lib/smb.conf.machine where +machine is the name of the client you wish to debug. In that file +put any smb.conf commands you want, for example +log level may be useful. This also allows you to experiment with different security systems, protocol levels etc on just -one machine.

    The smb.conf entry log level = -is synonymous with the entry debuglevel = that has been -used in older versions of Samba and is being retained for backwards -compatibility of smb.conf files.

    As the log level = value is increased you will record +one machine. +

    +The smb.conf entry log level +is synonymous with the parameter debuglevel that has +been used in older versions of Samba and is being retained for backwards +compatibility of smb.conf files. +

    +As the log level value is increased you will record a significantly increasing level of debugging information. For most -debugging operations you may not need a setting higher than 3. Nearly -all bugs can be tracked at a setting of 10, but be prepared for a VERY -large volume of log data.

    Internal errors

    +If you get a INTERNAL ERROR message in your log files +it means that Samba got an unexpected signal while running. It is probably a segmentation fault and almost certainly means a bug in Samba (unless -you have faulty hardware or system software)

    If the message came from smbd then it will probably be accompanied by +you have faulty hardware or system software). +

    +If the message came from smbd then it will probably be accompanied by a message which details the last SMB message received by smbd. This info is often very useful in tracking down the problem so please -include it in your bug report.

    You should also detail how to reproduce the problem, if -possible. Please make this reasonably detailed.

    You may also find that a core file appeared in a "corefiles" +include it in your bug report. +

    +You should also detail how to reproduce the problem, if +possible. Please make this reasonably detailed. +

    +You may also find that a core file appeared in a corefiles subdirectory of the directory where you keep your samba log files. This file is the most useful tool for tracking down the bug. To -use it you do this:

    gdb smbd core

    adding appropriate paths to smbd and core so gdb can find them. If you -don't have gdb then try "dbx". Then within the debugger use the -command "where" to give a stack trace of where the problem -occurred. Include this in your mail.

    If you known any assembly language then do a "disass" of the routine +use it you do this: +

    +	$ gdb smbd core
+

    +adding appropriate paths to smbd and core so gdb can find them. If you +don't have gdb then try dbx. Then within the debugger +use the command where to give a stack trace of where the +problem occurred. Include this in your report. +

    +If you know any assembly language then do a +disass of the routine where the problem occurred (if its in a library routine then disassemble the routine that called it) and try to work out exactly where the problem is by looking at the surrounding code. Even if you don't know assembly then incuding this info in the bug report can be -useful.

    Attaching to a running process

    +Unfortunately some unixes (in particular some recent linux kernels) refuse to dump a core file if the task has changed uid (which smbd does often). To debug with this sort of system you could try to attach -to the running process using "gdb smbd PID" where you get PID from -smbstatus. Then use "c" to continue and try to cause the core dump +to the running process using +gdb smbd PID where you get +PID from smbstatus. +Then use c to continue and try to cause the core dump using the client. The debugger should catch the fault and tell you -where it occurred.

    PrevHomeNext
    Samba and other CIFS clientsUpDiagnosing your samba server
    \ No newline at end of file +where it occurred. +

    Patches

    +The best sort of bug report is one that includes a fix! If you send us +patches please use diff -u format if your version of +diff supports it, otherwise use diff -c4. Make sure +you do the diff against a clean version of the source and let me know +exactly what version you used. +

    PrevUpNext
    Chapter34.Analysing and solving samba problemsHomePartVI.Appendixes
    diff --git a/docs/htmldocs/diagnosis.html b/docs/htmldocs/diagnosis.html index a7b2e59436..af242b6006 100644 --- a/docs/htmldocs/diagnosis.html +++ b/docs/htmldocs/diagnosis.html @@ -1,627 +1,302 @@ - -Diagnosing your samba server
    SAMBA Project Documentation
    Prev 

    Chapter 26. Diagnosing your samba server

    26.1. Introduction

    This file contains a list of tests you can perform to validate your +Chapter33.The samba checklist

    Chapter33.The samba checklist
    PrevPartV.TroubleshootingNext

    Chapter33.The samba checklist

    Andrew Tridgell

    Samba Team

    Jelmer R. Vernooij

    The Samba Team

    Wed Jan 15

    Table of Contents

    Introduction
    Assumptions
    The tests
    Still having troubles?

    Introduction

    +This file contains a list of tests you can perform to validate your Samba server. It also tells you what the likely cause of the problem is if it fails any one of these steps. If it passes all these tests -then it is probably working fine.

    You should do ALL the tests, in the order shown. We have tried to +then it is probably working fine. +

    +You should do ALL the tests, in the order shown. We have tried to carefully choose them so later tests only use capabilities verified in -the earlier tests.

    If you send one of the samba mailing lists an email saying "it doesn't work" +the earlier tests. However, do not stop at the first error as there +have been some instances when continuing with the tests has helped +to solve a problem. +

    +If you send one of the samba mailing lists an email saying "it doesn't work" and you have not followed this test procedure then you should not be surprised -your email is ignored.

    Assumptions

    +In all of the tests it is assumed you have a Samba server called +BIGSERVER and a PC called ACLIENT both in workgroup TESTGROUP. +

    +The procedure is similar for other types of clients. +

    +It is also assumed you know the name of an available share in your +smb.conf. I will assume this share is called tmp. +You can add a tmp share like this by adding the +following to smb.conf: +

    +
+[tmp]
  comment = temporary files 
  path = /tmp
- read only = yes

    THESE TESTS ASSUME VERSION 3.0.0 OR LATER OF THE SAMBA SUITE. SOME -COMMANDS SHOWN DID NOT EXIST IN EARLIER VERSIONS

    Please pay attention to the error messages you receive. If any error message -reports that your server is being unfriendly you should first check that you -IP name resolution is correctly set up. eg: Make sure your /etc/resolv.conf -file points to name servers that really do exist.

    Also, if you do not have DNS server access for name resolution please check -that the settings for your smb.conf file results in "dns proxy = no". The -best way to check this is with "testparm smb.conf"

    26.3. Tests

    26.3.2. Test 2

    Run the command "ping BIGSERVER" from the PC and "ping ACLIENT" from + read only = yes + +

    +

    Note

    +These tests assume version 3.0 or later of the samba suite. +Some commands shown did not exist in earlier versions. +

    +Please pay attention to the error messages you receive. If any error message +reports that your server is being unfriendly you should first check that your +IP name resolution is correctly set up. eg: Make sure your /etc/resolv.conf +file points to name servers that really do exist. +

    +Also, if you do not have DNS server access for name resolution please check +that the settings for your smb.conf file results in dns proxy = no. The +best way to check this is with testparm smb.conf. +

    +It is helpful to monitor the log files during testing by using the +tail -F log_file_name in a separate +terminal console (use ctrl-alt-F1 through F6 or multiple terminals in X). +Relevant log files can be found (for default installations) in +/usr/local/samba/var. Also, connection logs from +machines can be found here or possibly in /var/log/samba +depending on how or if you specified logging in your smb.conf file. +

    +If you make changes to your smb.conf file while going through these test, +don't forget to restart smbd and nmbd. +

    The tests

    Procedure33.1.Diagnosing your samba server

    1. +In the directory in which you store your smb.conf file, run the command +testparm smb.conf. If it reports any errors then your smb.conf +configuration file is faulty. +

      Note

      +Your smb.conf file may be located in: /etc/samba +Or in: /usr/local/samba/lib +

    2. +Run the command ping BIGSERVER from the PC and +ping ACLIENT from the unix box. If you don't get a valid response then your TCP/IP -software is not correctly installed.

      Note that you will need to start a "dos prompt" window on the PC to -run ping.

      If you get a message saying "host not found" or similar then your DNS -software or /etc/hosts file is not correctly setup. It is possible to +software is not correctly installed. +

      +Note that you will need to start a "dos prompt" window on the PC to +run ping. +

      +If you get a message saying host not found or similar then your DNS +software or /etc/hosts file is not correctly setup. +It is possible to run samba without DNS entries for the server and client, but I assume -you do have correct entries for the remainder of these tests.

      Another reason why ping might fail is if your host is running firewall +you do have correct entries for the remainder of these tests. +

      +Another reason why ping might fail is if your host is running firewall software. You will need to relax the rules to let in the workstation in question, perhaps by allowing access from another subnet (on Linux -this is done via the ipfwadm program.)

    26.3.3. Test 3

    Run the command "smbclient -L BIGSERVER" on the unix box. You -should get a list of available shares back.

    If you get a error message containing the string "Bad password" then -you probably have either an incorrect "hosts allow", "hosts deny" or -"valid users" line in your smb.conf, or your guest account is not -valid. Check what your guest account is using "testparm" and -temporarily remove any "hosts allow", "hosts deny", "valid users" or -"invalid users" lines.

    If you get a "connection refused" response then the smbd server may +this is done via the ipfwadm program.) +

    Note

    +Modern Linux distributions install ipchains/iptables by default. +This is a common problem that is often overlooked. +

  • +Run the command smbclient -L BIGSERVER on the unix box. You +should get a list of available shares back. +

    +If you get a error message containing the string "Bad password" then +you probably have either an incorrect hosts allow, +hosts deny or valid users line in your +smb.conf, or your guest account is not +valid. Check what your guest account is using testparm and +temporarily remove any hosts allow, hosts deny, valid users or invalid users lines. +

    +If you get a connection refused response then the smbd server may not be running. If you installed it in inetd.conf then you probably edited that file incorrectly. If you installed it as a daemon then check that it is running, and check that the netbios-ssn port is in a LISTEN -state using "netstat -a".

    If you get a "session request failed" then the server refused the -connection. If it says "Your server software is being unfriendly" then -its probably because you have invalid command line parameters to smbd, -or a similar fatal problem with the initial startup of smbd. Also -check your config file (smb.conf) for syntax errors with "testparm" +state using netstat -a. +

    Note

    +Some Unix / Linux systems use xinetd in place of +inetd. Check your system documentation for the location +of the control file/s for your particular system implementation of +this network super daemon. +

    +If you get a session request failed then the server refused the +connection. If it says "Your server software is being unfriendly" then +its probably because you have invalid command line parameters to smbd, +or a similar fatal problem with the initial startup of smbd. Also +check your config file (smb.conf) for syntax errors with testparm and that the various directories where samba keeps its log and lock -files exist.

    There are a number of reasons for which smbd may refuse or decline +files exist. +

    +There are a number of reasons for which smbd may refuse or decline a session request. The most common of these involve one or more of -the following smb.conf file entries:

    	hosts deny = ALL
+the following smb.conf file entries:
+
    +	hosts deny = ALL
 	hosts allow = xxx.xxx.xxx.xxx/yy
-	bind interfaces only = Yes
    In the above, no allowance has been made for any session requests that
+	bind interfaces only = Yes
+

    +In the above, no allowance has been made for any session requests that will automatically translate to the loopback adaptor address 127.0.0.1. -To solve this problem change these lines to:

    	hosts deny = ALL
-	hosts allow = xxx.xxx.xxx.xxx/yy 127.

    Do NOT use the "bind interfaces only" parameter where you may wish to -use the samba password change facility, or where smbclient may need to -access local service for name resolution or for local resource -connections. (Note: the "bind interfaces only" parameter deficiency +To solve this problem change these lines to: +

    +	hosts deny = ALL
+	hosts allow = xxx.xxx.xxx.xxx/yy 127.
+

    +Do not use the bind interfaces only parameter where you +may wish to +use the samba password change facility, or where smbclient may need to +access a local service for name resolution or for local resource +connections. (Note: the bind interfaces only parameter deficiency where it will not allow connections to the loopback address will be -fixed soon).

    Another common cause of these two errors is having something already running -on port 139, such as Samba (ie: smbd is running from inetd already) or -something like Digital's Pathworks. Check your inetd.conf file before trying -to start smbd as a daemon, it can avoid a lot of frustration!

    And yet another possible cause for failure of TEST 3 is when the subnet mask +fixed soon). +

    +Another common cause of these two errors is having something already running +on port 139, such as Samba +(ie: smbd is running from inetd already) or +something like Digital's Pathworks. Check your inetd.conf file before trying +to start smbd as a daemon, it can avoid a lot of frustration! +

    +And yet another possible cause for failure of this test is when the subnet mask and / or broadcast address settings are incorrect. Please check that the network interface IP Address / Broadcast Address / Subnet Mask settings are -correct and that Samba has correctly noted these in the log.nmb file.

    • 26.3.4. Test 4

    Run the command "nmblookup -B BIGSERVER __SAMBA__". You should get the -IP address of your Samba server back.

    If you don't then nmbd is incorrectly installed. Check your inetd.conf +correct and that Samba has correctly noted these in the log.nmb file. +

  • +Run the command nmblookup -B BIGSERVER __SAMBA__. You should get the +IP address of your Samba server back. +

    +If you don't then nmbd is incorrectly installed. Check your inetd.conf if you run it from there, or that the daemon is running and listening -to udp port 137.

    One common problem is that many inetd implementations can't take many +to udp port 137. +

    +One common problem is that many inetd implementations can't take many parameters on the command line. If this is the case then create a one-line script that contains the right parameters and run that from -inetd.

    • 26.3.6. Test 6

    Run the command nmblookup -d 2 '*'

    This time we are trying the same as the previous test but are trying +got the name of the PC wrong. +

    +If ACLIENT doesn't resolve via DNS then use the IP address of the +client in the above test. +

  • +Run the command nmblookup -d 2 '*' +

    +This time we are trying the same as the previous test but are trying it via a broadcast to the default broadcast address. A number of Netbios/TCPIP hosts on the network should respond, although Samba may not catch all of the responses in the short time it listens. You -should see "got a positive name query response" messages from several -hosts.

    If this doesn't give a similar result to the previous test then +should see got a positive name query response +messages from several hosts. +

    +If this doesn't give a similar result to the previous test then nmblookup isn't correctly getting your broadcast address through its -automatic mechanism. In this case you should experiment use the -"interfaces" option in smb.conf to manually configure your IP -address, broadcast and netmask.

    If your PC and server aren't on the same subnet then you will need to -use the -B option to set the broadcast address to the that of the PCs -subnet.

    This test will probably fail if your subnet mask and broadcast address are -not correct. (Refer to TEST 3 notes above).

    • 26.3.7. Test 7

    Run the command smbclient //BIGSERVER/TMP. You should +automatic mechanism. In this case you should experiment with the +interfaces option in smb.conf to manually configure your IP +address, broadcast and netmask. +

    +If your PC and server aren't on the same subnet then you will need to +use the -B option to set the broadcast address to that of the PCs +subnet. +

    +This test will probably fail if your subnet mask and broadcast address are +not correct. (Refer to TEST 3 notes above). +

  • +Run the command smbclient //BIGSERVER/TMP. You should then be prompted for a password. You should use the password of the account you are logged into the unix box with. If you want to test with -another account then add the -U >accountname< option to the end of +another account then add the -U accountname option to the end of the command line. eg: -smbclient //bigserver/tmp -Ujohndoe

    Note: It is possible to specify the password along with the username +smbclient //bigserver/tmp -Ujohndoe +

    Note

    +It is possible to specify the password along with the username as follows: -smbclient //bigserver/tmp -Ujohndoe%secret

    Once you enter the password you should get the "smb>" prompt. If you -don't then look at the error message. If it says "invalid network -name" then the service "tmp" is not correctly setup in your smb.conf.

    If it says "bad password" then the likely causes are:

    1. you have shadow passords (or some other password system) but didn't - compile in support for them in smbd -

    2. your "valid users" configuration is incorrect -

    3. you have a mixed case password and you haven't enabled the "password - level" option at a high enough level -

    4. the "path =" line in smb.conf is incorrect. Check it with testparm -

    5. you enabled password encryption but didn't create the SMB encrypted - password file -

    Once connected you should be able to use the commands -dir get put etc. -Type help >command< for instructions. You should +smbclient //bigserver/tmp -Ujohndoe%secret +

    +Once you enter the password you should get the smb> prompt. If you +don't then look at the error message. If it says invalid network +name then the service "tmp" is not correctly setup in your smb.conf. +

    +If it says bad password then the likely causes are: +

    1. + you have shadow passords (or some other password system) but didn't + compile in support for them in smbd +

    2. + your valid users configuration is incorrect +

    3. + you have a mixed case password and you haven't enabled the password + level option at a high enough level +

    4. + the path = line in smb.conf is incorrect. Check it with testparm +

    5. + you enabled password encryption but didn't map unix to samba users +

    +Once connected you should be able to use the commands +dir get put etc. +Type help command for instructions. You should especially check that the amount of free disk space shown is correct -when you type dir.

    • 26.3.8. Test 8

    On the PC type the command net view \\BIGSERVER. You will -need to do this from within a "dos prompt" window. You should get back a -list of available shares on the server.

    If you get a "network name not found" or similar error then netbios +when you type dir. +

  • +On the PC, type the command net view \\BIGSERVER. You will +need to do this from within a "dos prompt" window. You should get back a +list of available shares on the server. +

    +If you get a network name not found or similar error then netbios name resolution is not working. This is usually caused by a problem in nmbd. To overcome it you could do one of the following (you only need -to choose one of them):

    1. fixup the nmbd installation

    2. add the IP address of BIGSERVER to the "wins server" box in the - advanced tcp/ip setup on the PC.

    3. enable windows name resolution via DNS in the advanced section of - the tcp/ip setup

    4. add BIGSERVER to your lmhosts file on the PC.

    If you get a "invalid network name" or "bad password error" then the -same fixes apply as they did for the "smbclient -L" test above. In -particular, make sure your "hosts allow" line is correct (see the man -pages)

    Also, do not overlook that fact that when the workstation requests the +to choose one of them): +

    1. + fixup the nmbd installation +

    2. + add the IP address of BIGSERVER to the wins server box in the + advanced tcp/ip setup on the PC. +

    3. + enable windows name resolution via DNS in the advanced section of + the tcp/ip setup +

    4. + add BIGSERVER to your lmhosts file on the PC. +

    +If you get a invalid network name or bad password error then the +same fixes apply as they did for the smbclient -L test above. In +particular, make sure your hosts allow line is correct (see the man +pages) +

    +Also, do not overlook that fact that when the workstation requests the connection to the samba server it will attempt to connect using the name with which you logged onto your Windows machine. You need to make sure that an account exists on your Samba server with that exact same -name and password.

    If you get "specified computer is not receiving requests" or similar +name and password. +

    +If you get specified computer is not receiving requests or similar it probably means that the host is not contactable via tcp services. Check to see if the host is running tcp wrappers, and if so add an entry in -the hosts.allow file for your client (or subnet, etc.)

    • 26.3.9. Test 9

    Run the command net use x: \\BIGSERVER\TMP. You should -be prompted for a password then you should get a "command completed -successfully" message. If not then your PC software is incorrectly -installed or your smb.conf is incorrect. make sure your "hosts allow" -and other config lines in smb.conf are correct.

    It's also possible that the server can't work out what user name to -connect you as. To see if this is the problem add the line "user = -USERNAME" to the [tmp] section of smb.conf where "USERNAME" is the +the hosts.allow file for your client (or subnet, etc.) +

  • +Run the command net use x: \\BIGSERVER\TMP. You should +be prompted for a password then you should get a command completed +successfully message. If not then your PC software is incorrectly +installed or your smb.conf is incorrect. make sure your hosts allow +and other config lines in smb.conf are correct. +

    +It's also possible that the server can't work out what user name to +connect you as. To see if this is the problem add the line user = +username to the [tmp] section of +smb.conf where username is the username corresponding to the password you typed. If you find this -fixes things you may need the username mapping option.

    It might also be the case that your client only sends encrypted passwords -and you have encrypt passwords = no in smb.conf. -Turn it back on to fix.

    • 26.3.10. Test 10

    Run the command nmblookup -M TESTGROUP where -TESTGROUP is the name of the workgroup that your Samba server and +fixes things you may need the username mapping option. +

    +It might also be the case that your client only sends encrypted passwords +and you have encrypt passwords = no in smb.conf +Turn it back on to fix. +

  • +Run the command nmblookup -M testgroup where +testgroup is the name of the workgroup that your Samba server and Windows PCs belong to. You should get back the IP address of the -master browser for that workgroup.

    If you don't then the election process has failed. Wait a minute to +master browser for that workgroup. +

    +If you don't then the election process has failed. Wait a minute to see if it is just being slow then try again. If it still fails after -that then look at the browsing options you have set in smb.conf. Make -sure you have preferred master = yes to ensure that -an election is held at startup.

    • 26.3.11. Test 11

    From file manager try to browse the server. Your samba server should +that then look at the browsing options you have set in smb.conf. Make +sure you have preferred master = yes to ensure that +an election is held at startup. +

  • +>From file manager try to browse the server. Your samba server should appear in the browse list of your local workgroup (or the one you specified in smb.conf). You should be able to double click on the name -of the server and get a list of shares. If you get a "invalid -password" error when you do then you are probably running WinNT and it +of the server and get a list of shares. If you get a "invalid +password" error when you do then you are probably running WinNT and it is refusing to browse a server that has no encrypted password capability and is in user level security mode. In this case either set -security = server AND -password server = Windows_NT_Machine in your -smb.conf file, or enable encrypted passwords AFTER compiling in support -for encrypted passwords (refer to the Makefile).

    • 26.4. Still having troubles?

    Try the mailing list or newsgroup, or use the ethereal utility to -sniff the problem. The official samba mailing list can be reached at -samba@samba.org. To find -out more about samba and how to subscribe to the mailing list check -out the samba web page at -http://samba.org/samba

    Also look at the other docs in the Samba package!

    PrevHome 
    Reporting BugsUp 
    \ No newline at end of file +security = server AND +password server = Windows_NT_Machine in your +smb.conf file, or make sure encrypted passwords is +set to "yes". +

    Still having troubles?

    Read the chapter on +Analysing and Solving Problems. +

    PrevUpNext
    PartV.TroubleshootingHomeChapter34.Analysing and solving samba problems
    diff --git a/docs/htmldocs/findsmb.1.html b/docs/htmldocs/findsmb.1.html index af7100ed6f..a6013a13ec 100644 --- a/docs/htmldocs/findsmb.1.html +++ b/docs/htmldocs/findsmb.1.html @@ -1,214 +1,41 @@ - -findsmb

    findsmb

    Name

    findsmb -- list info about machines that respond to SMB - name queries on a subnet

    DESCRIPTION

    This perl script is part of the Samba suite.

    findsmb is a perl script that +findsmb

    Name

    findsmb — list info about machines that respond to SMB + name queries on a subnet

    Synopsis

    findsmb [subnet broadcast address]

    DESCRIPTION

    This perl script is part of the Samba(7) + suite.

    findsmb is a perl script that prints out several pieces of information about machines on a subnet that respond to SMB name query requests. - It uses nmblookup(1) and smbclient(1) to obtain this information. -

    OPTIONS

    -r

    Controls whether findsmb takes + It uses nmblookup(1) + and smbclient(1) + to obtain this information. +

    OPTIONS

    -r

    Controls whether findsmb takes bugs in Windows95 into account when trying to find a Netbios name registered of the remote machine. This option is disabled by default because it is specific to Windows 95 and Windows 95 machines only. - If set, nmblookup - will be called with -B option.

    subnet broadcast address

    Without this option, findsmb - will probe the subnet of the machine where - findsmb is run. This value is passed - to nmblookup as part of the - -B option.

    EXAMPLES

    The output of findsmb lists the following + If set, nmblookup(1) + will be called with -B option.

    subnet broadcast address

    Without this option, findsmb + will probe the subnet of the machine where + findsmb(1) + is run. This value is passed to + nmblookup(1) + as part of the -B option.

    EXAMPLES

    The output of findsmb lists the following information for all machines that respond to the initial - nmblookup for any name: IP address, NetBIOS name, - Workgroup name, operating system, and SMB server version.

    There will be a '+' in front of the workgroup name for + nmblookup for any name: IP address, NetBIOS name, + Workgroup name, operating system, and SMB server version.

    There will be a '+' in front of the workgroup name for machines that are local master browsers for that workgroup. There will be an '*' in front of the workgroup name for machines that are the domain master browser for that workgroup. Machines that are running Windows, Windows 95 or Windows 98 will not show any information about the operating system or server - version.

    The command with -r option - must be run on a system without nmbd running. - If nmbd is running on the system, you will + version.

    The command with -r option + must be run on a system without nmbd(8) running. + + If nmbd is running on the system, you will only get the IP address and the DNS name of the machine. To get proper responses from Windows 95 and Windows 98 machines, - the command must be run as root and with -r - option on a machine without nmbd running.

    For example, running findsmb without - -r option set would yield output similar - to the following

    IP ADDR         NETBIOS NAME   WORKGROUP/OS/VERSION 
+	the command must be run as root and with -r
+	option on a machine without nmbd running.
    For example, running findsmb 
+	without -r option set would yield output similar
+	to the following
    +IP ADDR         NETBIOS NAME   WORKGROUP/OS/VERSION 
 --------------------------------------------------------------------- 
 192.168.35.10   MINESET-TEST1  [DMVENGR]
 192.168.35.55   LINUXBOX      *[MYGROUP] [Unix] [Samba 2.0.6]
@@ -220,81 +47,15 @@ CLASS="COMPUTEROUTPUT"
 192.168.35.88   SCNT2         +[MVENGR] [Windows NT 4.0] [NT LAN Manager 4.0]
 192.168.35.93   FROGSTAR-PC    [MVENGR] [Windows 5.0] [Windows 2000 LAN Manager]
 192.168.35.97   HERBNT1       *[HERB-NT] [Windows NT 4.0] [NT LAN Manager 4.0]
-

    VERSION

    This man page is correct for version 3.0 of - the Samba suite.

    AUTHOR

    The original Samba software and related utilities +

    VERSION

    This man page is correct for version 3.0 of + the Samba suite.

    SEE ALSO

    nmbd(8), + smbclient(1), and nmblookup(1) +

    AUTHOR

    The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar - to the way the Linux kernel is developed.

    The original Samba man pages were written by Karl Auer. + to the way the Linux kernel is developed.

    The original Samba man pages were written by Karl Auer. The man page sources were converted to YODL format (another - excellent piece of Open Source software, available at - ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 - release by Jeremy Allison. The conversion to DocBook for - Samba 2.2 was done by Gerald Carter

    \ No newline at end of file + excellent piece of Open Source software, available at ftp://ftp.icce.rug.nl/pub/unix/) + and updated for the Samba 2.0 release by Jeremy Allison. The conversion to DocBook for + Samba 2.2 was done by Gerald Carter. The conversion to DocBook + XML 4.2 for Samba 3.0 was done by Alexander Bokovoy.

    diff --git a/docs/htmldocs/groupmapping.html b/docs/htmldocs/groupmapping.html index 84cf521fc9..8508edf2a5 100644 --- a/docs/htmldocs/groupmapping.html +++ b/docs/htmldocs/groupmapping.html @@ -1,235 +1,177 @@ - -Group mapping HOWTO
    SAMBA Project Documentation
    PrevNext

    Chapter 21. Group mapping HOWTO

    -Starting with Samba 3.0 alpha 2, a new group mapping function is available. The -current method (likely to change) to manage the groups is a new command called -smbgroupedit.

    The first immediate reason to use the group mapping on a PDC, is that -the domain admin group of smb.conf is -now gone. This parameter was used to give the listed users local admin rights -on their workstations. It was some magic stuff that simply worked but didn't -scale very well for complex setups.

    Let me explain how it works on NT/W2K, to have this magic fade away. -When installing NT/W2K on a computer, the installer program creates some users -and groups. Notably the 'Administrators' group, and gives to that group some -privileges like the ability to change the date and time or to kill any process -(or close too) running on the local machine. The 'Administrator' user is a -member of the 'Administrators' group, and thus 'inherit' the 'Administrators' -group privileges. If a 'joe' user is created and become a member of the -'Administrator' group, 'joe' has exactly the same rights as 'Administrator'.

    When a NT/W2K machine is joined to a domain, during that phase, the "Domain -Administrators' group of the PDC is added to the 'Administrators' group of the -workstation. Every members of the 'Domain Administrators' group 'inherit' the -rights of the 'Administrators' group when logging on the workstation.

    You are now wondering how to make some of your samba PDC users members of the -'Domain Administrators' ? That's really easy.

    1. create a unix group (usually in /etc/group), let's call it domadm

    2. add to this group the users that must be Administrators. For example if you want joe,john and mary, your entry in /etc/group will look like:

      domadm:x:502:joe,john,mary

    3. Map this domadm group to the domain admins group by running the command:

      smbgroupedit -c "Domain Admins" -u domadm

    You're set, joe, john and mary are domain administrators !

    Like the Domain Admins group, you can map any arbitrary Unix group to any NT -group. You can also make any Unix group a domain group. For example, on a domain -member machine (an NT/W2K or a samba server running winbind), you would like to -give access to a certain directory to some users who are member of a group on -your samba PDC. Flag that group as a domain group by running:

    smbgroupedit -a unixgroup -td

    You can list the various groups in the mapping database like this

    smbgroupedit -v

    PrevHomeNext
    HOWTO Access Samba source code via CVSUpSamba performance issues
    \ No newline at end of file +Chapter12.Mapping MS Windows and Unix Groups
    Chapter12.Mapping MS Windows and Unix Groups
    PrevPartIII.Advanced ConfigurationNext

    Chapter12.Mapping MS Windows and Unix Groups

    Jean Franois Micouleau

    Gerald (Jerry) Carter

    Samba Team

    John H. Terpstra

    Samba Team

    Table of Contents

    Features and Benefits
    Discussion
    Example Configuration
    Configuration Scripts
    Sample smb.conf add group script
    Script to configure Group Mapping
    Common Errors
    Adding Groups Fails
    Adding MS Windows Groups to MS Windows Groups Fails

    + Starting with Samba-3, new group mapping functionality is available to create associations + between Windows group SIDs and UNIX groups. The groupmap subcommand + included with the net tool can be used to manage these associations. +

    Warning

    + The first immediate reason to use the group mapping on a Samba PDC, is that + the domain admin group has been removed and should no longer + be specified in smb.conf. This parameter was used to give the listed users membership + in the Domain Admins Windows group which gave local admin rights on their workstations + (in default configurations). +

    Features and Benefits

    + Samba allows the administrator to create MS Windows NT4 / 200x group accounts and to + arbitrarily associate them with Unix/Linux group accounts. +

    + Group accounts can be managed using the MS Windows NT4 or MS Windows 200x MMC tools + so long as appropriate interface scripts have been provided to smb.conf +

    + Administrators should be aware that where smb.conf group interface scripts make + direct calls to the Unix/Linux system tools (eg: the shadow utilities, groupadd, + groupdel, groupmod) then the resulting Unix/Linux group names will be subject + to any limits imposed by these tools. If the tool does NOT allow upper case characters + or space characters, then the creation of an MS Windows NT4 / 200x style group of + Engineering Managers will attempt to create an identically named + Unix/Linux group, an attempt that will of course fail! +

    + There are several possible work-arounds for the operating system tools limitation. One + method is to use a script that generates a name for the Unix/Linux system group that + fits the operating system limits, and that then just passes the Unix/Linux group id (GID) + back to the calling samba interface. This will provide a dynamic work-around solution. +

    + Another work-around is to manually create a Unix/Linux group, then manually create the + MS Windows NT4 / 200x group on the Samba server and then use the net groupmap + tool to connect the two to each other. +

    Discussion

    + When installing MS Windows NT4 / 200x on a computer, the installation + program creates default users and groups. Notably the Administrators group, + and gives to that group privileges necessary privilidges to perform essential system tasks. + eg: Ability to change the date and time or to kill any process (or close too) running on the + local machine. +

    + The 'Administrator' user is a member of the 'Administrators' group, and thus inherits + 'Administrators' group privileges. If a 'joe' user is created to be a member of the + 'Administrator' group, 'joe' has exactly the same rights as 'Administrator'. +

    + When an MS Windows NT4 / W200x is made a domain member, the "Domain Adminis" group of the + PDC is added to the local 'Administrators' group of the workstation. Every member of the + 'Domain Administrators' group inherits the rights of the local 'Administrators' group when + logging on the workstation. +

    + The following steps describe how to make samba PDC users members of the 'Domain Admins' group? +

    1. + create a unix group (usually in /etc/group), let's call it domadm +

    2. add to this group the users that must be Administrators. For example + if you want joe,john and mary, your entry in /etc/group will + look like: + 

      +		domadm:x:502:joe,john,mary
+

      +

    3. + Map this domadm group to the "Domain Admins" group by running the command: +

      + 

      +		root# net groupmap add ntgroup="Domain Admins" unixgroup=domadm
+

      +

      + The quotes around "Domain Admins" are necessary due to the space in the group name. + Also make sure to leave no whitespace surrounding the equal character (=). +

    + Now joe, john and mary are domain administrators! +

    + It is possible to map any arbitrary UNIX group to any Windows NT4 / 200x group as well as + making any UNIX group a Windows domain group. For example, if you wanted to include a + UNIX group (e.g. acct) in a ACL on a local file or printer on a domain member machine, + you would flag that group as a domain group by running the following on the Samba PDC: +

    + 

    +	root# net groupmap add rid=1000 ntgroup="Accounting" unixgroup=acct
+

    +

    + Be aware that the RID parmeter is a unsigned 32 bit integer that should + normally start at 1000. However, this rid must not overlap with any RID assigned + to a user. Verifying this is done differently depending on on the passdb backend + you are using. Future versions of the tools may perform the verification automatically, + but for now the burden is on you. +

    Example Configuration

    + You can list the various groups in the mapping database by executing + net groupmap list. Here is an example: +

    + 

    +		root#  net groupmap list
+		System Administrators (S-1-5-21-2547222302-1596225915-2414751004-1002) -> sysadmin
+		Domain Admins (S-1-5-21-2547222302-1596225915-2414751004-512) -> domadmin
+		Domain Users (S-1-5-21-2547222302-1596225915-2414751004-513) -> domuser
+		Domain Guests (S-1-5-21-2547222302-1596225915-2414751004-514) -> domguest
+

    +

    + For complete details on net groupmap, refer to the net(8) man page. +

    Configuration Scripts

    + Everyone needs tools. Some of us like to create our own, others prefer to use canned tools + (ie: prepared by someone else for general use). +

    Sample smb.conf add group script

    + A script to great complying group names for use by the samba group interfaces: +

    +

    Example12.1.smbgrpadd.sh

    +
+#!/bin/bash
+
+# Add the group using normal system groupadd tool.
+groupadd smbtmpgrp00
+
+thegid=`cat /etc/group | grep smbtmpgrp00 | cut -d ":" -f3`
+
+# Now change the name to what we want for the MS Windows networking end
+cat /etc/group | sed s/smbtmpgrp00/$1/g > /etc/group
+
+# Now return the GID as would normally happen.
+echo $thegid
+exit 0
+

    +

    + The smb.conf entry for the above script would look like: + 

    +		add group script = /path_to_tool/smbgrpadd.sh %g
+

    +

    Script to configure Group Mapping

    + In our example we have created a Unix/Linux group called ntadmin. + Our script will create the additional groups Engineers, Marketoids, Gnomes: +

    +

    +#!/bin/bash
+
+net groupmap modify ntgroup="Domain Admins" unixgroup=ntadmin
+net groupmap modify ntgroup="Domain Users" unixgroup=users
+net groupmap modify ntgroup="Domain Guests" unixgroup=nobody
+net groupmap modify ntgroup="Administrators" unixgroup=root
+net groupmap modify ntgroup="Users" unixgroup=users
+net groupmap modify ntgroup="Guests" unixgroup=nobody
+net groupmap modify ntgroup="System Operators" unixgroup=sys
+net groupmap modify ntgroup="Account Operators" unixgroup=root
+net groupmap modify ntgroup="Backup Operators" unixgroup=bin
+net groupmap modify ntgroup="Print Operators" unixgroup=lp
+net groupmap modify ntgroup="Replicators" unixgroup=daemon
+net groupmap modify ntgroup="Power Users" unixgroup=sys
+
+#groupadd Engineers
+#groupadd Marketoids
+#groupadd Gnomes
+
+#net groupmap add ntgroup="Engineers"  unixgroup=Engineers    type=d
+#net groupmap add ntgroup="Marketoids" unixgroup=Marketoids   type=d
+#net groupmap add ntgroup="Gnomes"     unixgroup=Gnomes       type=d
+

    +

    + Of course it is expected that the admininstrator will modify this to suit local needs. + For information regarding the use of the net groupmap tool please + refer to the man page. +

    Common Errors

    +At this time there are many little surprises for the unwary administrator. In a real sense +it is imperative that every step of automated control scripts must be carefully tested +manually before putting them into active service. +

    Adding Groups Fails

    + This is a common problem when the groupadd is called directly + by the samba interface script for the add group script in + the smb.conf file. +

    + The most common cause of failure is an attempt to add an MS Windows group acocunt + that has either an upper case character and/or a space character in it. +

    + There are three possible work-arounds. Firstly, use only group names that comply + with the limitations of the Unix/Linux groupadd system tool. + The second involves use of the script mentioned earlier in this chapter, and the + third option is to manually create a Unix/Linux group account that can substitute + for the MS Windows group name, then use the procedure listed above to map that group + to the MS Windows group. +

    Adding MS Windows Groups to MS Windows Groups Fails

    + Samba-3 does NOT support nested groups from the MS Windows control environment. +

    PrevUpNext
    Chapter11.Account Information DatabasesHomeChapter13.File, Directory and Share Access Controls
    diff --git a/docs/htmldocs/install.html b/docs/htmldocs/install.html index 0ba79dbe26..973b6083a8 100644 --- a/docs/htmldocs/install.html +++ b/docs/htmldocs/install.html @@ -1,896 +1,155 @@ - -How to Install and Test SAMBA
    SAMBA Project Documentation
    PrevNext

    Chapter 1. How to Install and Test SAMBA

    1.2. Building the Binaries

    To do this, first run the program ./configure - in the source directory. This should automatically - configure Samba for your operating system. If you have unusual - needs then you may wish to run

    root# ./configure --help -

    first to see what special options you can enable. - Then executing

    root# make

    will create the binaries. Once it's successfully - compiled you can use

    root# make install

    to install the binaries and manual pages. You can - separately install the binaries and/or man pages using

    root# make installbin -

    and

    root# make installman -

    Note that if you are upgrading for a previous version - of Samba you might like to know that the old versions of - the binaries will be renamed with a ".old" extension. You - can go back to the previous version with

    root# make revert -

    if you find this version a disaster!

    1.4. Create the smb configuration file.

    There are sample configuration files in the examples - subdirectory in the distribution. I suggest you read them - carefully so you can see how the options go together in - practice. See the man page for all the options.

    The simplest useful configuration file would be - something like this:

    	[global]
-	   workgroup = MYGROUP
+Chapter2.How to Install and Test SAMBA
    Chapter2.How to Install and Test SAMBA
    PrevPartI.General InstallationNext
    Chapter2.How to Install and Test SAMBA
    Andrew Tridgell
    Samba Team
    Jelmer R. Vernooij
    The Samba Team
    John H. Terpstra
    Samba Team
    Karl Auer
    Table of Contents
    Obtaining and installing samba
    Configuring samba (smb.conf)
    Example Configuration
    SWAT
    Try listing the shares available on your 
+	server
    Try connecting with the unix client
    Try connecting from a DOS, WfWg, Win9x, WinNT, 
+	Win2k, OS/2, etc... client
    What If Things Don't Work?
    Common Errors
    Why are so many smbd processes eating memory?
    I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs
    Obtaining and installing samba
    
+	Binary packages of samba are included in almost any Linux or
+	Unix distribution. There are also some packages available at 
+	the samba homepage.
+	
    If you need to compile samba from source, check the 
+	appropriate appendix chapter.
    If you have already installed samba, or if your operating system
+	was pre-installed with samba, then you may not need to bother with this
+	chapter. On the other hand, you may want to read this chapter anyhow
+	for information about updating samba.
    Configuring samba (smb.conf)
    
+	Samba's configuration is stored in the smb.conf file, 
+	that usually resides in /etc/samba/smb.conf 
+	or /usr/local/samba/lib/smb.conf. You can either 
+	edit this file yourself or do it using one of the many graphical 
+	tools that are available, such as the web-based interface swat, that 
+	is included with samba.
+	
    Example Configuration
    
+	There are sample configuration files in the examples subdirectory in the
+	distribution. I suggest you read them carefully so you can see how the options
+	go together in practice. See the man page for all the options.
+	
    
+	The simplest useful configuration file would be something like this:
+	
    
+	
    +	[global]
+		workgroup = MYGROUP
 
-	   [homes]
-	      guest ok = no
-	      read only = no
-	
    which would allow connections by anyone with an 
-	account on the server, using either their login name or 
-	"homes" as the service name. (Note that I also set the 
-	workgroup that Samba is part of. See BROWSING.txt for details)
    Note that make install will not install 
-	a smb.conf file. You need to create it 
-	yourself. 
    Make sure you put the smb.conf file in the same place 
-	you specified in theMakefile (the default is to 
-	look for it in /usr/local/samba/lib/).
    For more information about security settings for the 
-	[homes] share please refer to the document UNIX_SECURITY.txt.
    1.6. Starting the smbd and nmbd
    You must choose to start smbd and nmbd either
-	as daemons or from inetd. Don't try
-	to do both!  Either you can put them in 	inetd.conf and have them started on demand
-	by inetd, or you can start them as
-	daemons either from the command line or in 	/etc/rc.local. See the man pages for details
-	on the command line options. Take particular care to read
-	the bit about what user you need to be in order to start
-	Samba.  In many cases you must be root.
    The main advantage of starting smbd
-	and nmbd using the recommended daemon method
-	is that they will respond slightly more quickly to an initial connection
-	request.
    1.6.1. Starting from inetd.conf
    NOTE; The following will be different if 
-		you use NIS or NIS+ to distributed services maps.
    Look at your /etc/services. 
-		What is defined at port 139/tcp. If nothing is defined 
-		then add a line like this:
    netbios-ssn     139/tcp
    similarly for 137/udp you should have an entry like:
    netbios-ns	137/udp
    Next edit your /etc/inetd.conf 
-		and add two lines something like this:
    		netbios-ssn stream tcp nowait root /usr/local/samba/bin/smbd smbd 
-		netbios-ns dgram udp wait root /usr/local/samba/bin/nmbd nmbd 
-		
    The exact syntax of /etc/inetd.conf 
-		varies between unixes. Look at the other entries in inetd.conf 
-		for a guide.
    NOTE: Some unixes already have entries like netbios_ns 
-		(note the underscore) in /etc/services. 
-		You must either edit /etc/services or
-		/etc/inetd.conf to make them consistent.
    NOTE: On many systems you may need to use the 
-		"interfaces" option in smb.conf to specify the IP address 
-		and netmask of your interfaces. Run ifconfig 
-		as root if you don't know what the broadcast is for your
-		net. nmbd tries to determine it at run 
-		time, but fails on some unixes. See the section on "testing nmbd" 
-		for a method of finding if you need to do this.
    !!!WARNING!!! Many unixes only accept around 5 
-		parameters on the command line in inetd.conf. 
-		This means you shouldn't use spaces between the options and 
-		arguments, or you should use a script, and start the script 
-		from inetd.
    Restart inetd, perhaps just send 
-		it a HUP. If you have installed an earlier version of 		nmbd then you may need to kill nmbd as well.

    +

    + This will allow connections by anyone with an account on the server, using either + their login name or "homes" as the service name. + (Note that the workgroup that Samba must also be set.) +

    + Make sure you put the smb.conf file in the same place + you specified in theMakefile (the default is to + look for it in /usr/local/samba/lib/). +

    + For more information about security settings for the + [homes] share please refer to the chapter + Securing Samba. +

    Test your config file with testparm

    + It's important that you test the validity of your smb.conf + file using the testparm program. If testparm runs OK + then it will list the loaded services. If not it will give an error message. +

    + Make sure it runs OK and that the services look reasonable before proceeding. +

    + Always run testparm again when you change smb.conf! +

    SWAT

    + SWAT is a web-based interface that helps you configure samba. + SWAT might not be available in the samba package on your platform, + but in a separate package. Please read the swat manpage + on compiling, installing and configuring swat from source. +

    + To launch SWAT just run your favorite web browser and + point it at http://localhost:901/. Replace + localhost + with the name of the computer you are running samba on if you + are running samba on a different computer than your browser. +

    + Note that you can attach to SWAT from any IP connected + machine but connecting from a remote machine leaves your + connection open to password sniffing as passwords will be sent + in the clear over the wire. +

    Try listing the shares available on your + server

    $ smbclient -L + yourhostname

    You should get back a list of shares available on your server. If you don't then something is incorrectly setup. Note that this method can also be used to see what shares - are available on other LanManager clients (such as WfWg).

    If you choose user level security then you may find + are available on other LanManager clients (such as WfWg).

    If you choose user level security then you may find that Samba requests a password before it will list the shares. - See the smbclient man page for details. (you + See the smbclient man page for details. (you can force it to list the shares without a password by adding the option -U% to the command line. This will not work - with non-Samba servers)

    1.10. What If Things Don't Work?

    If nothing works and you start to think "who wrote - this pile of trash" then I suggest you do step 2 again (and - again) till you calm down.

    Then you might read the file DIAGNOSIS.txt and the - FAQ. If you are still stuck then try the mailing list or - newsgroup (look in the README for details). Samba has been - successfully installed at thousands of sites worldwide, so maybe - someone else has hit your problem and has overcome it. You could - also use the WWW site to scan back issues of the samba-digest.

    When you fix the problem PLEASE send me some updates to the - documentation (or source code) so that the next person will find it - easier.

    1.10.3. Choosing the Protocol Level

    The SMB protocol has many dialects. Currently - Samba supports 5, called CORE, COREPLUS, LANMAN1, - LANMAN2 and NT1.

    You can choose what maximum protocol to support - in the smb.conf file. The default is - NT1 and that is the best for the vast majority of sites.

    In older versions of Samba you may have found it - necessary to use COREPLUS. The limitations that led to - this have mostly been fixed. It is now less likely that you - will want to use less than LANMAN1. The only remaining advantage - of COREPLUS is that for some obscure reason WfWg preserves - the case of passwords in this protocol, whereas under LANMAN1, - LANMAN2 or NT1 it uppercases all passwords before sending them, - forcing you to use the "password level=" option in some cases.

    The main advantage of LANMAN2 and NT1 is support for - long filenames with some clients (eg: smbclient, Windows NT - or Win95).

    See the smb.conf(5) manual page for more details.

    Note: To support print queue reporting you may find - that you have to use TCP/IP as the default protocol under - WfWg. For some reason if you leave Netbeui as the default - it may break the print queue reporting on some systems. - It is presumably a WfWg bug.

    1.10.5. Locking

    One area which sometimes causes trouble is locking.

    There are two types of locking which need to be - performed by a SMB server. The first is "record locking" - which allows a client to lock a range of bytes in a open file. - The second is the "deny modes" that are specified when a file - is open.

    Record locking semantics under Unix is very - different from record locking under Windows. Versions - of Samba before 2.2 have tried to use the native - fcntl() unix system call to implement proper record - locking between different Samba clients. This can not - be fully correct due to several reasons. The simplest - is the fact that a Windows client is allowed to lock a - byte range up to 2^32 or 2^64, depending on the client - OS. The unix locking only supports byte ranges up to - 2^31. So it is not possible to correctly satisfy a - lock request above 2^31. There are many more - differences, too many to be listed here.

    Samba 2.2 and above implements record locking - completely independent of the underlying unix - system. If a byte range lock that the client requests - happens to fall into the range 0-2^31, Samba hands - this request down to the Unix system. All other locks - can not be seen by unix anyway.

    Strictly a SMB server should check for locks before - every read and write call on a file. Unfortunately with the - way fcntl() works this can be slow and may overstress the - rpc.lockd. It is also almost always unnecessary as clients - are supposed to independently make locking calls before reads - and writes anyway if locking is important to them. By default - Samba only makes locking calls when explicitly asked - to by a client, but if you set "strict locking = yes" then it will - make lock checking calls on every read and write.

    You can also disable by range locking completely - using "locking = no". This is useful for those shares that - don't support locking or don't need it (such as cdroms). In - this case Samba fakes the return codes of locking calls to - tell clients that everything is OK.

    The second class of locking is the "deny modes". These - are set by an application when it opens a file to determine - what types of access should be allowed simultaneously with - its open. A client may ask for DENY_NONE, DENY_READ, DENY_WRITE - or DENY_ALL. There are also special compatibility modes called - DENY_FCB and DENY_DOS.

    PrevHomeNext
    General installationUpImproved browsing in samba
    \ No newline at end of file + with non-Samba servers)

    Try connecting with the unix client

    $ smbclient + //yourhostname/aservice

    Typically the yourhostname + would be the name of the host where you installed smbd. + The aservice is + any service you have defined in the smb.conf + file. Try your user name if you just have a [homes] + section + in smb.conf.

    For example if your unix host is bambi + and your login name is fred you would type:

    $ smbclient //bambi/fred +

    Try connecting from a DOS, WfWg, Win9x, WinNT, + Win2k, OS/2, etc... client

    Try mounting disks. eg:

    C:\WINDOWS\> net use d: \\servername\service +

    Try printing. eg:

    C:\WINDOWS\> net use lpt1: + \\servername\spoolservice

    C:\WINDOWS\> print filename +

    What If Things Don't Work?

    Then you might read the file chapter + Diagnosis and the + FAQ. If you are still stuck then try to follow + the Analysing and Solving Problems chapter + Samba has been successfully installed at thousands of sites worldwide, + so maybe someone else has hit your problem and has overcome it.

    Common Errors

    +The following questions and issues get raised on the samba mailing list over and over again. +

    Why are so many smbd processes eating memory?

    +“ +Site that is running Samba on an AIX box. They are sharing out about 2 terabytes using samba. +Samba was installed using smitty and the binaries. We seem to be experiencing a memory problem +with this box. When I do a svmon -Pu the monitoring program shows that smbd has several +processes of smbd running: +” +

    + “ +Is samba suppose to start this many different smbd processes? Or does it run as one smbd process? Also +is it normal for it to be taking up this much memory? +” +

    +

    +Inuse * 4096 = amount of memory being used by this process
+
+     Pid Command        Inuse      Pin     Pgsp  Virtual   64-bit    Mthrd
+   20950 smbd           33098     1906      181     5017        N        N
+   22262 smbd            9104     1906      5410
+   21060 smbd            9048     1906      181     5479        N        N
+   25972 smbd            8678     1906      181     5109        N        N
+   24524 smbd            8674     1906      181     5105        N        N
+   19262 smbd            8582     1906      181     5013        N        N
+   20722 smbd            8572     1906      181     5003        N        N
+   21454 smbd            8572     1906      181     5003        N        N
+   28946 smbd            8567     1906      181     4996        N        N
+   24076 smbd            8566     1906      181     4996        N        N
+   20138 smbd            8566     1906      181     4996        N        N
+   17608 smbd            8565     1906      181     4996        N        N
+   21820 smbd            8565     1906      181     4996        N        N
+   26940 smbd            8565     1906      181     4996        N        N
+   19884 smbd            8565     1906      181     4996        N        N
+    9912 smbd            8565     1906      181     4996        N        N
+   25800 smbd            8564     1906      181     4995        N        N
+   20452 smbd            8564     1906      181     4995        N        N
+   18592 smbd            8562     1906      181     4993        N        N
+   28216 smbd            8521     1906      181     4954        N        N
+   19110 smbd            8404     1906      181     4862        N        N
+
+   Total memory used:  841,592,832 bytes
+

    +

    +Samba consists on three core programs: +nmbd, smbd, winbindd. nmbd is the name server message daemon, +smbd is the server message daemon, winbindd is the daemon that +handles communication with Domain Controllers. +

    +If your system is NOT running as a WINS server, then there will be one (1) single instance of + nmbd running on your system. If it is running as a WINS server then there will be +two (2) instances - one to handle the WINS requests. +

    +smbd handles ALL connection requests and then spawns a new process for each client +connection made. That is why you are seeing so many of them, one (1) per client connection. +

    +winbindd will run as one or two daemons, depending on whether or not it is being +run in "split mode" (in which case there will be two instances). +

    I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs

    Your loopback device isn't working correctly. Make sure it's running.

    PrevUpNext
    Chapter1.Introduction to SambaHomeChapter3.FastStart for the Impatient
    diff --git a/docs/htmldocs/integrate-ms-networks.html b/docs/htmldocs/integrate-ms-networks.html index ad6aa9e225..f3038ce5a4 100644 --- a/docs/htmldocs/integrate-ms-networks.html +++ b/docs/htmldocs/integrate-ms-networks.html @@ -1,221 +1,62 @@ - -Integrating MS Windows networks with Samba
    SAMBA Project Documentation
    PrevNext

    Chapter 10. Integrating MS Windows networks with Samba

    10.2. Name Resolution in a pure Unix/Linux world

    The key configuration files covered in this section are:

    10.2.1. /etc/hosts

    Contains a static list of IP Addresses and names. -eg:

    	127.0.0.1	localhost localhost.localdomain
-	192.168.1.1	bigbox.caldera.com	bigbox	alias4box

    The purpose of /etc/hosts is to provide a +Chapter26.Integrating MS Windows networks with Samba

    Chapter26.Integrating MS Windows networks with Samba
    PrevPartIII.Advanced ConfigurationNext

    Chapter26.Integrating MS Windows networks with Samba

    John H. Terpstra

    Samba Team

    (Jan 01 2001)

    Table of Contents

    Features and Benefits
    Background Information
    Name Resolution in a pure Unix/Linux world
    /etc/hosts
    /etc/resolv.conf
    /etc/host.conf
    /etc/nsswitch.conf
    Name resolution as used within MS Windows networking
    The NetBIOS Name Cache
    The LMHOSTS file
    HOSTS file
    DNS Lookup
    WINS Lookup
    Common Errors
    My Boomerang Won't Come Back
    Very Slow Network Connections
    Samba server name change problem

    +This section deals with NetBIOS over TCP/IP name to IP address resolution. If +your MS Windows clients are NOT configured to use NetBIOS over TCP/IP then this +section does not apply to your installation. If your installation involves use of +NetBIOS over TCP/IP then this section may help you to resolve networking problems. +

    Note

    + NetBIOS over TCP/IP has nothing to do with NetBEUI. NetBEUI is NetBIOS + over Logical Link Control (LLC). On modern networks it is highly advised + to NOT run NetBEUI at all. Note also that there is NO such thing as + NetBEUI over TCP/IP - the existence of such a protocol is a complete + and utter mis-apprehension. +

    Features and Benefits

    +Many MS Windows network administrators have never been exposed to basic TCP/IP +networking as it is implemented in a Unix/Linux operating system. Likewise, many Unix and +Linux adminsitrators have not been exposed to the intricacies of MS Windows TCP/IP based +networking (and may have no desire to be either). +

    +This chapter gives a short introduction to the basics of how a name can be resolved to +it's IP address for each operating system environment. +

    Background Information

    +Since the introduction of MS Windows 2000 it is possible to run MS Windows networking +without the use of NetBIOS over TCP/IP. NetBIOS over TCP/IP uses UDP port 137 for NetBIOS +name resolution and uses TCP port 139 for NetBIOS session services. When NetBIOS over +TCP/IP is disabled on MS Windows 2000 and later clients then only TCP port 445 will be +used and UDP port 137 and TCP port 139 will not. +

    Note

    +When using Windows 2000 or later clients, if NetBIOS over TCP/IP is NOT disabled, then +the client will use UDP port 137 (NetBIOS Name Service, also known as the Windows Internet +Name Service or WINS), TCP port 139 AND TCP port 445 (for actual file and print traffic). +

    +When NetBIOS over TCP/IP is disabled the use of DNS is essential. Most installations that +disable NetBIOS over TCP/IP today use MS Active Directory Service (ADS). ADS requires +Dynamic DNS with Service Resource Records (SRV RR) and with Incremental Zone Transfers (IXFR). +Use of DHCP with ADS is recommended as a further means of maintaining central control +over client workstation network configuration. +

    Name Resolution in a pure Unix/Linux world

    +The key configuration files covered in this section are: +

    • /etc/hosts

    • /etc/resolv.conf

    • /etc/host.conf

    • /etc/nsswitch.conf

    /etc/hosts

    +Contains a static list of IP Addresses and names. +eg: +

    +	127.0.0.1	localhost localhost.localdomain
+	192.168.1.1	bigbox.caldera.com	bigbox	alias4box
+

    +The purpose of /etc/hosts is to provide a name resolution mechanism so that uses do not need to remember -IP addresses.

    Network packets that are sent over the physical network transport +IP addresses. +

    +Network packets that are sent over the physical network transport layer communicate not via IP addresses but rather using the Media Access Control address, or MAC address. IP Addresses are currently 32 bits in length and are typically presented as four (4) decimal -numbers that are separated by a dot (or period). eg: 168.192.1.1

    MAC Addresses use 48 bits (or 6 bytes) and are typically represented +numbers that are separated by a dot (or period). eg: 168.192.1.1. +

    +MAC Addresses use 48 bits (or 6 bytes) and are typically represented as two digit hexadecimal numbers separated by colons. eg: -40:8e:0a:12:34:56

    Every network interfrace must have an MAC address. Associated with +40:8e:0a:12:34:56 +

    +Every network interface must have an MAC address. Associated with a MAC address there may be one or more IP addresses. There is NO relationship between an IP address and a MAC address, all such assignments are arbitary or discretionary in nature. At the most basic level all @@ -224,18 +65,15 @@ addresses must be globally unique, and generally remains fixed for any particular interface, the assignment of an IP address makes sense from a network management perspective. More than one IP address can be assigned per MAC address. One address must be the primary IP address, -this is the address that will be returned in the ARP reply.

    When a user or a process wants to communicate with another machine -the protocol implementation ensures that the "machine name" or "host -name" is resolved to an IP address in a manner that is controlled +this is the address that will be returned in the ARP reply. +

    +When a user or a process wants to communicate with another machine +the protocol implementation ensures that the "machine name" or "host +name" is resolved to an IP address in a manner that is controlled by the TCP/IP configuration control files. The file -/etc/hosts is one such file.

    When the IP address of the destination interface has been +/etc/hosts is one such file. +

    +When the IP address of the destination interface has been determined a protocol called ARP/RARP is used to identify the MAC address of the target interface. ARP stands for Address Resolution Protocol, and is a broadcast oriented method that @@ -245,98 +83,41 @@ address. Network interfaces are programmed to respond to two MAC addresses only; their own unique address and the address ff:ff:ff:ff:ff:ff. The reply packet from an ARP request will contain the MAC address and the primary IP address for each -interface.

    The /etc/hosts file is foundational to all +interface. +

    +The /etc/hosts file is foundational to all Unix/Linux TCP/IP installations and as a minumum will contain the localhost and local network interface IP addresses and the primary names by which they are known within the local machine. This file helps to prime the pump so that a basic level of name resolution can exist before any other method of name resolution -becomes available.

    /etc/resolv.conf

    +This file tells the name resolution libraries: +

    • The name of the domain to which the machine belongs -

    • The name(s) of any domains that should be +

    • The name(s) of any domains that should be automatically searched when trying to resolve unqualified host names to their IP address -

    • The name or IP address of available Domain +

    • The name or IP address of available Domain Name Servers that may be asked to perform name to address translation lookups -

    /etc/host.conf

    +/etc/host.conf is the primary means by which the setting in /etc/resolv.conf may be affected. It is a critical configuration file. This file controls the order by -which name resolution may procede. The typical structure is:

    	order hosts,bind
-	multi on

    then both addresses should be returned. Please refer to the -man page for host.conf for further details.

    /etc/nsswitch.conf

    +This file controls the actual name resolution targets. The +file typically has resolver object specifications as follows: +

    +	# /etc/nsswitch.conf
 	#
 	# Name Service Switch configuration file.
 	#
@@ -355,99 +136,75 @@ CLASS="PROGRAMLISTING"
 	ethers:		nis files
 	protocols:	nis files
 	rpc:		nis files
-	services:	nis files

    Of course, each of these mechanisms requires that the appropriate -facilities and/or services are correctly configured.

    It should be noted that unless a network request/message must be + services: nis files +

    +Of course, each of these mechanisms requires that the appropriate +facilities and/or services are correctly configured. +

    +It should be noted that unless a network request/message must be sent, TCP/IP networks are silent. All TCP/IP communications assumes a -principal of speaking only when necessary.

    Starting with version 2.2.0 samba has Linux support for extensions to +principal of speaking only when necessary. +

    +Starting with version 2.2.0 samba has Linux support for extensions to the name service switch infrastructure so that linux clients will be able to obtain resolution of MS Windows NetBIOS names to IP Addresses. To gain this functionality Samba needs to be compiled -with appropriate arguments to the make command (ie: make -nsswitch/libnss_wins.so). The resulting library should -then be installed in the /lib directory and -the "wins" parameter needs to be added to the "hosts:" line in -the /etc/nsswitch.conf file. At this point it +with appropriate arguments to the make command (ie: make +nsswitch/libnss_wins.so). The resulting library should +then be installed in the /lib directory and +the "wins" parameter needs to be added to the "hosts:" line in +the /etc/nsswitch.conf file. At this point it will be possible to ping any MS Windows machine by it's NetBIOS machine name, so long as that machine is within the workgroup to -which both the samba machine and the MS Windows machine belong.

    Name resolution as used within MS Windows networking

    +MS Windows networking is predicated about the name each machine is given. This name is known variously (and inconsistently) as -the "computer name", "machine name", "networking name", "netbios name", -"SMB name". All terms mean the same thing with the exception of -"netbios name" which can apply also to the name of the workgroup or the -domain name. The terms "workgroup" and "domain" are really just a +the "computer name", "machine name", "networking name", "netbios name", +"SMB name". All terms mean the same thing with the exception of +"netbios name" which can apply also to the name of the workgroup or the +domain name. The terms "workgroup" and "domain" are really just a simply name with which the machine is associated. All NetBIOS names are exactly 16 characters in length. The 16th character is reserved. It is used to store a one byte value that indicates service level information for the NetBIOS name that is registered. A NetBIOS machine name is therefore registered for each service type that is provided by -the client/server.

    The following are typical NetBIOS name/service type registrations:

    	Unique NetBIOS Names:
-		MACHINENAME<00>	= Server Service is running on MACHINENAME
-		MACHINENAME<03> = Generic Machine Name (NetBIOS name)
-		MACHINENAME<20> = LanMan Server service is running on MACHINENAME
-		WORKGROUP<1b> = Domain Master Browser
+the client/server.
+
    
+The following are typical NetBIOS name/service type registrations:
+
    +	Unique NetBIOS Names:
+		MACHINENAME<00>	= Server Service is running on MACHINENAME
+		MACHINENAME<03> = Generic Machine Name (NetBIOS name)
+		MACHINENAME<20> = LanMan Server service is running on MACHINENAME
+		WORKGROUP<1b> = Domain Master Browser
 
 	Group Names:
-		WORKGROUP<03> = Generic Name registered by all members of WORKGROUP
-		WORKGROUP<1c> = Domain Controllers / Netlogon Servers
-		WORKGROUP<1d> = Local Master Browsers
-		WORKGROUP<1e> = Internet Name Resolvers
    It should be noted that all NetBIOS machines register their own 
+		WORKGROUP<03> = Generic Name registered by all members of WORKGROUP
+		WORKGROUP<1c> = Domain Controllers / Netlogon Servers
+		WORKGROUP<1d> = Local Master Browsers
+		WORKGROUP<1e> = Internet Name Resolvers
+

    +It should be noted that all NetBIOS machines register their own names as per the above. This is in vast contrast to TCP/IP installations where traditionally the system administrator will determine in the /etc/hosts or in the DNS database what names -are associated with each IP address.

    One further point of clarification should be noted, the /etc/hosts +are associated with each IP address. +

    +One further point of clarification should be noted, the /etc/hosts file and the DNS records do not provide the NetBIOS name type information that MS Windows clients depend on to locate the type of service that may be needed. An example of this is what happens when an MS Windows client -wants to locate a domain logon server. It find this service and the IP +wants to locate a domain logon server. It finds this service and the IP address of a server that provides it by performing a lookup (via a NetBIOS broadcast) for enumeration of all machines that have -registered the name type *<1c>. A logon request is then sent to each +registered the name type *<1c>. A logon request is then sent to each IP address that is returned in the enumerated list of IP addresses. Which -ever machine first replies then ends up providing the logon services.

    The name "workgroup" or "domain" really can be confusing since these +ever machine first replies then ends up providing the logon services. +

    +The name "workgroup" or "domain" really can be confusing since these have the added significance of indicating what is the security -architecture of the MS Windows network. The term "workgroup" indicates +architecture of the MS Windows network. The term "workgroup" indicates that the primary nature of the network environment is that of a peer-to-peer design. In a WORKGROUP all machines are responsible for their own security, and generally such security is limited to use of @@ -455,9 +212,9 @@ just a password (known as SHARE MODE security). In most situations with peer-to-peer networking the users who control their own machines will simply opt to have no security at all. It is possible to have USER MODE security in a WORKGROUP environment, thus requiring use -of a user name and a matching password.

    MS Windows networking is thus predetermined to use machine names +of a user name and a matching password. +

    +MS Windows networking is thus predetermined to use machine names for all local and remote machine message passing. The protocol used is called Server Message Block (SMB) and this is implemented using the NetBIOS protocol (Network Basic Input Output System). NetBIOS can @@ -466,60 +223,39 @@ the resulting protocol is called NetBEUI (Network Basic Extended User Interface). NetBIOS can also be run over IPX (Internetworking Packet Exchange) protocol as used by Novell NetWare, and it can be run over TCP/IP protocols - in which case the resulting protocol is called -NBT or NetBT, the NetBIOS over TCP/IP.

    MS Windows machines use a complex array of name resolution mechanisms. +NBT or NetBT, the NetBIOS over TCP/IP. +

    +MS Windows machines use a complex array of name resolution mechanisms. Since we are primarily concerned with TCP/IP this demonstration is -limited to this area.

    10.3.1. The NetBIOS Name Cache

    All MS Windows machines employ an in memory buffer in which is +limited to this area. +

    The NetBIOS Name Cache

    +All MS Windows machines employ an in memory buffer in which is stored the NetBIOS names and IP addresses for all external machines that that machine has communicated with over the past 10-15 minutes. It is more efficient to obtain an IP address for a machine from the local cache than it is to go through all the -configured name resolution mechanisms.

    If a machine whose name is in the local name cache has been shut +configured name resolution mechanisms. +

    +If a machine whose name is in the local name cache has been shut down before the name had been expired and flushed from the cache, then an attempt to exchange a message with that machine will be subject to time-out delays. i.e.: Its name is in the cache, so a name resolution lookup will succeed, but the machine can not respond. This can be -frustrating for users - but it is a characteristic of the protocol.

    The MS Windows utility that allows examination of the NetBIOS -name cache is called "nbtstat". The Samba equivalent of this -is called "nmblookup".

    The LMHOSTS file

    +This file is usually located in MS Windows NT 4.0 or +2000 in C:\WINNT\SYSTEM32\DRIVERS\ETC and contains the IP Address and the machine name in matched pairs. The -LMHOSTS file performs NetBIOS name -to IP address mapping oriented.

    It typically looks like:

    	# Copyright (c) 1998 Microsoft Corp.
+LMHOSTS file performs NetBIOS name 
+to IP address mapping.
+
    
+It typically looks like:
+
    +	# Copyright (c) 1998 Microsoft Corp.
 	#
 	# This is a sample LMHOSTS file used by the Microsoft Wins Client (NetBIOS
 	# over TCP/IP) stack for Windows98
@@ -528,7 +264,7 @@ CLASS="PROGRAMLISTING"
 	# (NetBIOS) names.  Each entry should be kept on an individual line.
 	# The IP address should be placed in the first column followed by the
 	# corresponding computername. The address and the comptername
-	# should be separated by at least one space or tab. The "#" character
+	# should be separated by at least one space or tab. The "#" character
 	# is generally used to denote the start of a comment (see the exceptions
 	# below).
 	#
@@ -542,28 +278,28 @@ CLASS="PROGRAMLISTING"
 	#      #END_ALTERNATE
 	#      \0xnn (non-printing character support)
 	#
-	# Following any entry in the file with the characters "#PRE" will cause
+	# Following any entry in the file with the characters "#PRE" will cause
 	# the entry to be preloaded into the name cache. By default, entries are
 	# not preloaded, but are parsed only after dynamic name resolution fails.
 	#
-	# Following an entry with the "#DOM:<domain>" tag will associate the
+	# Following an entry with the "#DOM:<domain>" tag will associate the
 	# entry with the domain specified by <domain>. This affects how the
 	# browser and logon services behave in TCP/IP environments. To preload
 	# the host name associated with #DOM entry, it is necessary to also add a
 	# #PRE to the line. The <domain> is always preloaded although it will not
 	# be shown when the name cache is viewed.
 	#
-	# Specifying "#INCLUDE <filename>" will force the RFC NetBIOS (NBT)
+	# Specifying "#INCLUDE <filename>" will force the RFC NetBIOS (NBT)
 	# software to seek the specified <filename> and parse it as if it were
 	# local. <filename> is generally a UNC-based name, allowing a
 	# centralized lmhosts file to be maintained on a server.
 	# It is ALWAYS necessary to provide a mapping for the IP address of the
 	# server prior to the #INCLUDE. This mapping must use the #PRE directive.
-	# In addtion the share "public" in the example below must be in the
-	# LanManServer list of "NullSessionShares" in order for client machines to
+	# In addtion the share "public" in the example below must be in the
+	# LanManServer list of "NullSessionShares" in order for client machines to
 	# be able to read the lmhosts file successfully. This key is under
 	# \machine\system\currentcontrolset\services\lanmanserver\parameters\nullsessionshares
-	# in the registry. Simply add "public" to the list found there.
+	# in the registry. Simply add "public" to the list found there.
 	#
 	# The #BEGIN_ and #END_ALTERNATE keywords allow multiple #INCLUDE
 	# statements to be grouped together. Any single successful include
@@ -576,7 +312,7 @@ CLASS="PROGRAMLISTING"
 	# The following example illustrates all of these extensions:
 	#
 	# 102.54.94.97     rhino         #PRE #DOM:networking  #net group's DC
-	# 102.54.94.102    "appname  \0x14"                    #special app server
+	# 102.54.94.102    "appname  \0x14"                    #special app server
 	# 102.54.94.123    popular            #PRE             #source server
 	# 102.54.94.117    localsrv           #PRE             #needed for the include
 	#
@@ -585,564 +321,107 @@ CLASS="PROGRAMLISTING"
 	# #INCLUDE \\rhino\public\lmhosts
 	# #END_ALTERNATE
 	#
-	# In the above example, the "appname" server contains a special
-	# character in its name, the "popular" and "localsrv" server names are
-	# preloaded, and the "rhino" server name is specified so it can be used
-	# to later #INCLUDE a centrally maintained lmhosts file if the "localsrv"
+	# In the above example, the "appname" server contains a special
+	# character in its name, the "popular" and "localsrv" server names are
+	# preloaded, and the "rhino" server name is specified so it can be used
+	# to later #INCLUDE a centrally maintained lmhosts file if the "localsrv"
 	# system is unavailable.
 	#
 	# Note that the whole file is parsed including comments on each lookup,
 	# so keeping the number of comments to a minimum will improve performance.
 	# Therefore it is not advisable to simply add lmhosts file entries onto the
-	# end of this file.

    HOSTS file

    +This file is usually located in MS Windows NT 4.0 or 2000 in +C:\WINNT\SYSTEM32\DRIVERS\ETC and contains the IP Address and the IP hostname in matched pairs. It can be used by the name resolution infrastructure in MS Windows, depending on how the TCP/IP environment is configured. This file is in -every way the equivalent of the Unix/Linux /etc/hosts file.

    DNS Lookup

    +This capability is configured in the TCP/IP setup area in the network configuration facility. If enabled an elaborate name resolution sequence -is followed the precise nature of which isdependant on what the NetBIOS +is followed the precise nature of which is dependant on what the NetBIOS Node Type parameter is configured to. A Node Type of 0 means use NetBIOS broadcast (over UDP broadcast) is first used if the name that is the subject of a name lookup is not found in the NetBIOS name cache. If that fails then DNS, HOSTS and LMHOSTS are checked. If set to Node Type 8, then a NetBIOS Unicast (over UDP Unicast) is sent to the WINS Server to obtain a lookup before DNS, HOSTS, LMHOSTS, or broadcast -lookup is used.

    WINS Lookup

    +A WINS (Windows Internet Name Server) service is the equivaent of the rfc1001/1002 specified NBNS (NetBIOS Name Server). A WINS server stores the names and IP addresses that are registered by a Windows client -if the TCP/IP setup has been given at least one WINS Server IP Address.

    To configure Samba to be a WINS server the following parameter needs -to be added to the smb.conf file:

    	wins support = Yes

    To configure Samba to use a WINS server the following parameters are -needed in the smb.conf file:

    	wins support = No
-	wins server = xxx.xxx.xxx.xxx

    where xxx.xxx.xxx.xxx is the IP address -of the WINS server.

    10.4. How browsing functions and how to deploy stable and -dependable browsing using Samba

    As stated above, MS Windows machines register their NetBIOS names -(i.e.: the machine name for each service type in operation) on start -up. Also, as stated above, the exact method by which this name registration -takes place is determined by whether or not the MS Windows client/server -has been given a WINS server address, whether or not LMHOSTS lookup -is enabled, or if DNS for NetBIOS name resolution is enabled, etc.

    In the case where there is no WINS server all name registrations as -well as name lookups are done by UDP broadcast. This isolates name -resolution to the local subnet, unless LMHOSTS is used to list all -names and IP addresses. In such situations Samba provides a means by -which the samba server name may be forcibly injected into the browse -list of a remote MS Windows network (using the "remote announce" parameter).

    Where a WINS server is used, the MS Windows client will use UDP -unicast to register with the WINS server. Such packets can be routed -and thus WINS allows name resolution to function across routed networks.

    During the startup process an election will take place to create a -local master browser if one does not already exist. On each NetBIOS network -one machine will be elected to function as the domain master browser. This -domain browsing has nothing to do with MS security domain control. -Instead, the domain master browser serves the role of contacting each local -master browser (found by asking WINS or from LMHOSTS) and exchanging browse -list contents. This way every master browser will eventually obtain a complete -list of all machines that are on the network. Every 11-15 minutes an election -is held to determine which machine will be the master browser. By the nature of -the election criteria used, the machine with the highest uptime, or the -most senior protocol version, or other criteria, will win the election -as domain master browser.

    Clients wishing to browse the network make use of this list, but also depend -on the availability of correct name resolution to the respective IP -address/addresses.

    Any configuration that breaks name resolution and/or browsing intrinsics -will annoy users because they will have to put up with protracted -inability to use the network services.

    Samba supports a feature that allows forced synchonisation -of browse lists across routed networks using the "remote -browse sync" parameter in the smb.conf file. This causes Samba -to contact the local master browser on a remote network and -to request browse list synchronisation. This effectively bridges -two networks that are separated by routers. The two remote -networks may use either broadcast based name resolution or WINS -based name resolution, but it should be noted that the "remote -browse sync" parameter provides browse list synchronisation - and -that is distinct from name to address resolution, in other -words, for cross subnet browsing to function correctly it is -essential that a name to address resolution mechanism be provided. -This mechanism could be via DNS, /etc/hosts, -and so on.

    10.5. MS Windows security options and how to configure -Samba for seemless integration

    MS Windows clients may use encrypted passwords as part of a -challenege/response authentication model (a.k.a. NTLMv1) or -alone, or clear text strings for simple password based -authentication. It should be realized that with the SMB -protocol the password is passed over the network either -in plain text or encrypted, but not both in the same -authentication requets.

    When encrypted passwords are used a password that has been -entered by the user is encrypted in two ways:

    You should refer to the Password Encryption chapter in this HOWTO collection -for more details on the inner workings

    MS Windows 95 pre-service pack 1, MS Windows NT versions 3.x -and version 4.0 pre-service pack 3 will use either mode of -password authentication. All versions of MS Windows that follow -these versions no longer support plain text passwords by default.

    MS Windows clients have a habit of dropping network mappings that -have been idle for 10 minutes or longer. When the user attempts to -use the mapped drive connection that has been dropped, the client -re-establishes the connection using -a cached copy of the password.

    When Microsoft changed the default password mode, they dropped support for -caching of the plain text password. This means that when the registry -parameter is changed to re-enable use of plain text passwords it appears to -work, but when a dropped mapping attempts to revalidate it will fail if -the remote authentication server does not support encrypted passwords. -This means that it is definitely not a good idea to re-enable plain text -password support in such clients.

    The following parameters can be used to work around the -issue of Windows 9x client upper casing usernames and -password before transmitting them to the SMB server -when using clear text authentication.

    	passsword level = integer
-	username level = integer

    By default Samba will lower case the username before attempting -to lookup the user in the database of local system accounts. -Because UNIX usernames conventionally only contain lower case -character, the username level parameter -is rarely even needed.

    However, password on UNIX systems often make use of mixed case -characters. This means that in order for a user on a Windows 9x -client to connect to a Samba server using clear text authentication, -the password level must be set to the maximum -number of upper case letter which could appear -is a password. Note that is the server OS uses the traditional -DES version of crypt(), then a password level -of 8 will result in case insensitive passwords as seen from Windows -users. This will also result in longer login times as Samba -hash to compute the permutations of the password string and -try them one by one until a match is located (or all combinations fail).

    The best option to adopt is to enable support for encrypted passwords -where ever Samba is used. There are three configuration possibilities -for support of encrypted passwords:

    10.5.1. Use MS Windows NT as an authentication server

    This method involves the additions of the following parameters -in the smb.conf file:

    	encrypt passwords = Yes
-	security = server
-	password server = "NetBIOS_name_of_PDC"

    There are two ways of identifying whether or not a username and -password pair was valid or not. One uses the reply information provided -as part of the authentication messaging process, the other uses -just and error code.

    The down-side of this mode of configuration is the fact that -for security reasons Samba will send the password server a bogus -username and a bogus password and if the remote server fails to -reject the username and password pair then an alternative mode -of identification of validation is used. Where a site uses password -lock out after a certain number of failed authentication attempts -this will result in user lockouts.

    Use of this mode of authentication does require there to be -a standard Unix account for the user, this account can be blocked -to prevent logons by other than MS Windows clients.

    10.5.2. Make Samba a member of an MS Windows NT security domain

    This method involves additon of the following paramters in the smb.conf file:

    	encrypt passwords = Yes
-	security = domain
-	workgroup = "name of NT domain"
-	password server = *

    The use of the "*" argument to "password server" will cause samba -to locate the domain controller in a way analogous to the way -this is done within MS Windows NT.

    In order for this method to work the Samba server needs to join the -MS Windows NT security domain. This is done as follows:

    Use of this mode of authentication does require there to be -a standard Unix account for the user in order to assign -a uid once the account has been authenticated by the remote -Windows DC. This account can be blocked to prevent logons by -other than MS Windows clients by things such as setting an invalid -shell in the /etc/passwd entry.

    An alternative to assigning UIDs to Windows users on a -Samba member server is presented in the Winbind Overview chapter in -this HOWTO collection.

    10.5.3. Configure Samba as an authentication server

    This mode of authentication demands that there be on the -Unix/Linux system both a Unix style account as well as an -smbpasswd entry for the user. The Unix system account can be -locked if required as only the encrypted password will be -used for SMB client authentication.

    This method involves addition of the following parameters to -the smb.conf file:

    ## please refer to the Samba PDC HOWTO chapter later in 
-## this collection for more details
-[global]
-	encrypt passwords = Yes
-	security = user
-	domain logons = Yes
-	; an OS level of 33 or more is recommended
-	os level = 33
+if the TCP/IP setup has been given at least one WINS Server IP Address.
+
    
+To configure Samba to be a WINS server the following parameter needs 
+to be added to the smb.conf file:
+
    +	wins support = Yes
+
    
+To configure Samba to use a WINS server the following parameters are 
+needed in the smb.conf file:
+
    +	wins support = No
+	wins server = xxx.xxx.xxx.xxx
+
    
+where xxx.xxx.xxx.xxx is the IP address 
+of the WINS server.
+

    Common Errors

    +TCP/IP network configuration problems find every network administrator sooner or later. +The cause can be anything from keybaord mishaps, forgetfulness, simple mistakes, and +carelessness. Of course, noone is every deliberately careless! +

    My Boomerang Won't Come Back

    + Well, the real complaint said, "I can ping my samba server from Windows, but I can + not ping my Windows machine from the samba server." +

    + The Windows machine was at IP Address 192.168.1.2 with netmask 255.255.255.0, the + Samba server (Linux) was at IP Address 192.168.1.130 with netmast 255.255.255.128. + The machines were on a local network with no external connections. +

    + Due to inconsistent netmasks, the Windows machine was on network 192.168.1.0/24, while + the Samba server was on network 192.168.1.128/25 - logically a different network. +

    Very Slow Network Connections

    + A common causes of slow network response includes: +

    • Client is configured to use DNS and DNS server is down

    • Client is configured to use remote DNS server, but remote connection is down

    • Client is configured to use a WINS server, but there is no WINS server

    • Client is NOT configured to use a WINS server, but there is a WINS server

    • Firewall is filtering our DNS or WINS traffic

    Samba server name change problem

    + The name of the samba server was changed, samba was restarted, samba server can not be + pinged by new name from MS Windows NT4 Workstation, but it does still respond to ping using + the old name. Why? +

    + From this description three (3) things are rather obvious: +

    • WINS is NOT in use, only broadcast based name resolution is used

    • The samba server was renamed and restarted within the last 10-15 minutes

    • The old samba server name is still in the NetBIOS name cache on the MS Windows NT4 Workstation

    + To find what names are present in the NetBIOS name cache on the MS Windows NT4 machine, + open a cmd shell, then: +

    + 

    +	C:\temp\>nbtstat -n
 
-[NETLOGON]
-	path = /somewhare/in/file/system
-	read only = yes

    in order for this method to work a Unix system account needs -to be created for each user, as well as for each MS Windows NT/2000 -machine. The following structure is required.

    PrevHomeNext
    Optional configurationUpUNIX Permission Bits and Windows NT Access Control Lists
    \ No newline at end of file + NetBIOS Local Name Table + + Name Type Status + ------------------------------------------------ + SLACK <03> UNIQUE Registered + ADMININSTRATOR <03> UNIQUE Registered + SLACK <00> UNIQUE Registered + SARDON <00> GROUP Registered + SLACK <20> UNIQUE Registered + SLACK <1F> UNIQUE Registered + + + C:\Temp\>nbtstat -c + + NetBIOS Remote Cache Name Table + + Name Type Host Address Life [sec] + -------------------------------------------------------------- + FRODO <20> UNIQUE 192.168.1.1 240 + + C:\Temp\> +

    +

    + In the above example, FRODO is the Samba server and SLACK is the MS Windows NT4 Workstation. + The first listing shows the contents of the Local Name Table (ie: Identity information on + the MS Windows workstation), the second shows the NetBIOS name in the NetBIOS name cache. + The name cache contains the remote machines known to this workstation. +

    PrevUpNext
    Chapter25.PAM based Distributed AuthenticationHomeChapter27.Unicode/Charsets
    diff --git a/docs/htmldocs/introduction.html b/docs/htmldocs/introduction.html index 762d56ba6a..b4e1765f2d 100644 --- a/docs/htmldocs/introduction.html +++ b/docs/htmldocs/introduction.html @@ -1,421 +1,5 @@ - -General installation
    SAMBA Project Documentation
    PrevNext

    I. General installation

    Introduction

    This part contains general info on how to install samba +PartI.General Installation

    PartI.General Installation
    PrevNext

    General Installation

    Preparing Samba for Configuration

    This section of the Samba-HOWTO-Collection contains general info on how to install samba and how to configure the parts of samba you will most likely need. -PLEASE read this.

    Table of Contents
    1. How to Install and Test SAMBA
    1.1. Read the man pages
    1.2. Building the Binaries
    1.3. The all important step
    1.4. Create the smb configuration file.
    1.5. Test your config file with - testparm
    1.6. Starting the smbd and nmbd
    1.6.1. Starting from inetd.conf
    1.6.2. Alternative: starting it as a daemon
    1.7. Try listing the shares available on your - server
    1.8. Try connecting with the unix client
    1.9. Try connecting from a DOS, WfWg, Win9x, WinNT, - Win2k, OS/2, etc... client
    1.10. What If Things Don't Work?
    1.10.1. Diagnosing Problems
    1.10.2. Scope IDs
    1.10.3. Choosing the Protocol Level
    1.10.4. Printing from UNIX to a Client PC
    1.10.5. Locking
    1.10.6. Mapping Usernames
    2. Improved browsing in samba
    2.1. Overview of browsing
    2.2. Browsing support in samba
    2.3. Problem resolution
    2.4. Browsing across subnets
    2.4.1. How does cross subnet browsing work ?
    2.5. Setting up a WINS server
    2.6. Setting up Browsing in a WORKGROUP
    2.7. Setting up Browsing in a DOMAIN
    2.8. Forcing samba to be the master
    2.9. Making samba the domain master
    2.10. Note about broadcast addresses
    2.11. Multiple interfaces
    3. Quick Cross Subnet Browsing / Cross Workgroup Browsing guide
    3.1. Discussion
    3.2. Use of the "Remote Announce" parameter
    3.3. Use of the "Remote Browse Sync" parameter
    3.4. Use of WINS
    3.5. Do NOT use more than one (1) protocol on MS Windows machines
    3.6. Name Resolution Order
    4. LanMan and NT Password Encryption in Samba
    4.1. Introduction
    4.2. Important Notes About Security
    4.2.1. Advantages of SMB Encryption
    4.2.2. Advantages of non-encrypted passwords
    4.3. The smbpasswd Command
    PrevHomeNext
    SAMBA Project Documentation How to Install and Test SAMBA
    \ No newline at end of file +PLEASE read this.

    Table of Contents

    1. Introduction to Samba
    Background
    Terminology
    Related Projects
    SMB Methodology
    Epilogue
    Miscellaneous
    2. How to Install and Test SAMBA
    Obtaining and installing samba
    Configuring samba (smb.conf)
    Example Configuration
    SWAT
    Try listing the shares available on your + server
    Try connecting with the unix client
    Try connecting from a DOS, WfWg, Win9x, WinNT, + Win2k, OS/2, etc... client
    What If Things Don't Work?
    Common Errors
    Why are so many smbd processes eating memory?
    I'm getting "open_oplock_ipc: Failed to get local UDP socket for address 100007f. Error was Cannot assign requested" in the logs
    3. FastStart for the Impatient
    Note
    PrevUpNext
    SAMBA Project DocumentationHomeChapter1.Introduction to Samba
    diff --git a/docs/htmldocs/lmhosts.5.html b/docs/htmldocs/lmhosts.5.html index 4d7f11e64b..b96ddf8ddb 100644 --- a/docs/htmldocs/lmhosts.5.html +++ b/docs/htmldocs/lmhosts.5.html @@ -1,210 +1,37 @@ - -lmhosts

    lmhosts

    Name

    lmhosts -- The Samba NetBIOS hosts file

    Synopsis

    lmhosts is the Samba NetBIOS name to IP address mapping file.

    DESCRIPTION

    This file is part of the Samba suite.

    lmhosts is the Samba - NetBIOS name to IP address mapping file. It - is very similar to the /etc/hosts file +lmhosts

    Name

    lmhosts — The Samba NetBIOS hosts file

    Synopsis

    lmhosts is the Samba(7) NetBIOS name to IP address mapping file.

    DESCRIPTION

    This file is part of the Samba(7) suite.

    lmhosts is the Samba + NetBIOS name to IP address mapping file. It + is very similar to the /etc/hosts file format, except that the hostname component must correspond - to the NetBIOS naming format.

    FILE FORMAT

    It is an ASCII file containing one line for NetBIOS name. + to the NetBIOS naming format.

    FILE FORMAT

    It is an ASCII file containing one line for NetBIOS name. The two fields on each line are separated from each other by white space. Any entry beginning with '#' is ignored. Each line - in the lmhosts file contains the following information :

    • IP Address - in dotted decimal format.

    • NetBIOS Name - This name format is a + in the lmhosts file contains the following information:

      • IP Address - in dotted decimal format.

      • NetBIOS Name - This name format is a maximum fifteen character host name, with an optional trailing '#' character followed by the NetBIOS name type - as two hexadecimal digits.

        If the trailing '#' is omitted then the given IP + as two hexadecimal digits.

        If the trailing '#' is omitted then the given IP address will be returned for all names that match the given - name, whatever the NetBIOS name type in the lookup.

      An example follows :

      #
+		name, whatever the NetBIOS name type in the lookup.

    An example follows:

    +#
 # Sample Samba lmhosts file.
 #
 192.9.200.1	TESTPC
 192.9.200.20	NTSERVER#20
 192.9.200.21	SAMBASERVER
-

    Contains three IP to NetBIOS name mappings. The first - and third will be returned for any queries for the names "TESTPC" - and "SAMBASERVER" respectively, whatever the type component of - the NetBIOS name requested.

    The second mapping will be returned only when the "0x20" name - type for a name "NTSERVER" is queried. Any other name type will not - be resolved.

    The default location of the lmhosts file - is in the same directory as the - smb.conf(5)> file.

    VERSION

    This man page is correct for version 2.2 of - the Samba suite.

    AUTHOR

    The original Samba software and related utilities +

    Contains three IP to NetBIOS name mappings. The first + and third will be returned for any queries for the names "TESTPC" + and "SAMBASERVER" respectively, whatever the type component of + the NetBIOS name requested.

    The second mapping will be returned only when the "0x20" name + type for a name "NTSERVER" is queried. Any other name type will not + be resolved.

    The default location of the lmhosts file + is in the same directory as the smb.conf(5) file.

    VERSION

    This man page is correct for version 3.0 of the Samba suite.

    SEE ALSO

    smbclient(1), smb.conf(5), and smbpasswd(8) +

    AUTHOR

    The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar - to the way the Linux kernel is developed.

    The original Samba man pages were written by Karl Auer. + to the way the Linux kernel is developed.

    The original Samba man pages were written by Karl Auer. The man page sources were converted to YODL format (another excellent piece of Open Source software, available at - ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 + + ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 release by Jeremy Allison. The conversion to DocBook for - Samba 2.2 was done by Gerald Carter

    \ No newline at end of file + Samba 2.2 was done by Gerald Carter. The conversion to DocBook + XML 4.2 was done by Alexander Bokovoy.

    diff --git a/docs/htmldocs/msdfs.html b/docs/htmldocs/msdfs.html index f6fe1c7e1d..f8f2a3ea52 100644 --- a/docs/htmldocs/msdfs.html +++ b/docs/htmldocs/msdfs.html @@ -1,321 +1,62 @@ - -Hosting a Microsoft Distributed File System tree on Samba
    SAMBA Project Documentation
    PrevNext

    Chapter 13. Hosting a Microsoft Distributed File System tree on Samba

    13.1. Instructions

    The Distributed File System (or Dfs) provides a means of - separating the logical view of files and directories that users - see from the actual physical locations of these resources on the - network. It allows for higher availability, smoother storage expansion, - load balancing etc. For more information about Dfs, refer to Microsoft documentation.

    This document explains how to host a Dfs tree on a Unix - machine (for Dfs-aware clients to browse) using Samba.

    To enable SMB-based DFS for Samba, configure it with the - --with-msdfs option. Once built, a - Samba server can be made a Dfs server by setting the global - boolean host msdfs parameter in the smb.conf - file. You designate a share as a Dfs root using the share - level boolean msdfs root parameter. A Dfs root directory on - Samba hosts Dfs links in the form of symbolic links that point - to other servers. For example, a symbolic link - junction->msdfs:storage1\share1 in - the share directory acts as the Dfs junction. When Dfs-aware - clients attempt to access the junction link, they are redirected - to the storage location (in this case, \\storage1\share1).

    Dfs trees on Samba work with all Dfs-aware clients ranging - from Windows 95 to 2000.

    Here's an example of setting up a Dfs tree on a Samba - server.

    # The smb.conf file:
+Chapter17.Hosting a Microsoft Distributed File System tree on Samba
    Chapter17.Hosting a Microsoft Distributed File System tree on Samba
    PrevPartIII.Advanced ConfigurationNext
    Chapter17.Hosting a Microsoft Distributed File System tree on Samba
    Shirish Kalele
    Samba Team & Veritas Software

    
+				
    
+			
    12 Jul 2000
    Table of Contents
    Features and Benefits
    Common Errors
    Features and Benefits
    
+	The Distributed File System (or DFS) provides a means of separating the logical
+	view of files and directories that users see from the actual physical locations
+	of these resources on the network. It allows for higher availability, smoother
+	storage expansion, load balancing etc.
+	
    
+	For information about DFS, refer to
+	
+	Microsoft documentation at http://www.microsoft.com/NTServer/nts/downloads/winfeatures/NTSDistrFile/AdminGuide.asp.
+	
    
+	This document explains how to host a DFS tree on a Unix machine (for DFS-aware
+	clients to browse) using Samba.
+	
    
+	To enable SMB-based DFS for Samba, configure it with the --with-msdfs
+	option. Once built, a Samba server can be made a DFS server by setting the global 
+	boolean  host msdfs
+	parameter in the smb.conf  file. You designate a share as a DFS
+	root using the share level boolean 
+	msdfs root parameter. A DFS root directory on Samba hosts DFS
+	links in the form of symbolic links that point to other servers. For example, a symbolic link
+	junction->msdfs:storage1\share1 in the share directory acts
+	as the DFS junction. When DFS-aware clients attempt to access the junction link,
+	they are redirected to the storage location (in this case, \\storage1\share1).
+	
    
+	DFS trees on Samba work with all DFS-aware clients ranging from Windows 95 to 200x.
+	
    
+	Here's an example of setting up a DFS tree on a Samba server.
+	
    +# The smb.conf file:
 [global]
-	netbios name = SAMBA
+	netbios name = SMOKEY
 	host msdfs   = yes
 
 [dfs]
 	path = /export/dfsroot
 	msdfs root = yes
-	
    In the /export/dfsroot directory we set up our dfs links to 
-	other servers on the network.
    root# cd /export/dfsroot
    root# chown root /export/dfsroot
    root# chmod 755 /export/dfsroot
    root# ln -s msdfs:storageA\\shareA linka
    root# ln -s msdfs:serverB\\share,serverC\\share linkb
    You should set up the permissions and ownership of 
-	the directory acting as the Dfs root such that only designated 
+

    In the /export/dfsroot directory we set up our dfs links to + other servers on the network.

    +	root# cd /export/dfsroot
+	root# chown root /export/dfsroot
+	root# chmod 755 /export/dfsroot
+	root# ln -s msdfs:storageA\\shareA linka
+	root# ln -s msdfs:serverB\\share,serverC\\share linkb
+

    You should set up the permissions and ownership of + the directory acting as the DFS root such that only designated users can create, delete or modify the msdfs links. Also note that symlink names should be all lowercase. This limitation exists to have Samba avoid trying all the case combinations to get at the link name. Finally set up the symbolic links to point to the - network shares you want, and start Samba.

    Users on Dfs-aware clients can now browse the Dfs tree + network shares you want, and start Samba.

    Users on DFS-aware clients can now browse the DFS tree on the Samba server at \\samba\dfs. Accessing links linka or linkb (which appear as directories to the client) - takes users directly to the appropriate shares on the network.

    PrevHomeNext
    Configuring PAM for distributed but centrally -managed authenticationUpPrinting Support
    \ No newline at end of file + takes users directly to the appropriate shares on the network.

    Common Errors

    • Windows clients need to be rebooted + if a previously mounted non-dfs share is made a dfs + root or vice versa. A better way is to introduce a + new share and make it the dfs root.

    • Currently there's a restriction that msdfs + symlink names should all be lowercase.

    • For security purposes, the directory + acting as the root of the DFS tree should have ownership + and permissions set so that only designated users can + modify the symbolic links in the directory.

    PrevUpNext
    Chapter16.Interdomain Trust RelationshipsHomeChapter18.Classical Printing Support
    diff --git a/docs/htmldocs/net.8.html b/docs/htmldocs/net.8.html index b7ed1357c3..13e4be81be 100644 --- a/docs/htmldocs/net.8.html +++ b/docs/htmldocs/net.8.html @@ -1,403 +1,146 @@ - -net

    net

    Name

    net -- Tool for administration of Samba and remote - CIFS servers.

    Synopsis

    net {<ads|rap|rpc>} [-h] [-w workgroup] [-W myworkgroup] [-U user] [-I ip-address] [-p port] [-n myname] [-s conffile] [-S server] [-C comment] [-M maxusers] [-F flags] [-j jobid] [-l] [-r] [-f] [-t timeout] [-P] [-D debuglevel]

    DESCRIPTION

    This tool is part of the Samba suite.

    The samba net utility is meant to work just like the net utility - available for windows and DOS.

    OPTIONS

    -h

    Display summary of all available options. - -

    -w target-workgroup

    Sets target workgroup or domain. You have to specify either this option or the IP address or the name of a server. -

    -W workgroup

    Sets client workgroup or domain -

    -U user

    User name to use -

    -I ip-address

    IP address of target server to use. You have to specify either this option or a target workgroup or a target server. -

    -p port

    Port on the target server to connect to. -

    -n myname

    Sets name of the client. -

    -s conffile

    Specify alternative configuration file that should be loaded. -

    -S server

    Name of target server. You should specify either this option or a target workgroup or a target IP address. -

    -C comment

    FIXME -

    -M maxusers

    FIXME -

    -F flags

    FIXME -

    -j jobid

    FIXME -

    -l

    FIXME -

    -r

    FIXME -

    -f

    FIXME -

    -t timeout

    FIXME -

    -P

    Make queries to the external server using the machine account of the local server. -

    -D debuglevel

    set the debuglevel. Debug level 0 is the lowest - and 100 being the highest. This should be set to 100 if you are - planning on submitting a bug report to the Samba team (see - BUGS.txt). -

    TIME

    The NET TIME command allows you to view the time on a remote server - or synchronise the time on the local server with the time on the remote server.

    Without any options, the NET TIME command - displays the time on the remote server. -

    SYSTEM

    Displays the time on the remote server in a format ready for /bin/date -

    SET

    Tries to set the date and time of the local server to that on - the remote server using /bin/date. -

    ZONE

    Displays the timezone in hours from GMT on the remote computer. -

    RPC

    The NET RPC command allows you to do various - NT4 operations.

    JOIN -U username[%password] [options]

    Join a domain with specified username and password. Password - will be prompted if none is specified.

    JOIN [options except -U]

    to join a domain created in server manager -

    USER [misc. options] [targets]

    List users -

    USER DELETE <name> [misc options]

    delete specified user -

    USER INFO <name> [misc options]

    list the domain groups of the specified user -

    USER ADD <name> [password] [-F user flags] [misc. options

    Add specified user -

    GROUP [misc options] [targets]

    List user groups -

    GROUP DELETE <name> [misc. options] [targets]

    Delete specified group -

    GROUP ADD <name> [-C comment]

    Create specified group -

    SHARE [misc. options] [targets]

    enumerates all exported resources (network shares) on target server -

    SHARE ADD <name=serverpath> [misc. options] [targets]

    Adds a share from a server (makes the export active) -

    SHARE DELETE <sharenam

    VERSION

    This man page is incomplete for version 3.0 of the Samba - suite.

    AUTHOR

    The original Samba software and related utilities +net

    Name

    net — Tool for administration of Samba and remote + CIFS servers. +

    Synopsis

    net {<ads|rap|rpc>} [-h] [-w workgroup] [-W myworkgroup] [-U user] [-I ip-address] [-p port] [-n myname] [-s conffile] [-S server] [-l] [-P] [-D debuglevel]

    DESCRIPTION

    This tool is part of the Samba(7) suite.

    The samba net utility is meant to work just like the net utility + available for windows and DOS. The first argument should be used + to specify the protocol to use when executing a certain command. + ADS is used for ActiveDirectory, RAP is using for old (Win9x/NT3) + clients and RPC can be used for NT4 and Windows 2000. If this + argument is omitted, net will try to determine it automatically. + Not all commands are available on all protocols. +

    OPTIONS

    -h|--help

    Print a summary of command line options. +

    -w target-workgroup

    + Sets target workgroup or domain. You have to specify + either this option or the IP address or the name of a server. +

    -W workgroup

    + Sets client workgroup or domain +

    -U user

    + User name to use +

    -I ip-address

    + IP address of target server to use. You have to + specify either this option or a target workgroup or + a target server. +

    -p port

    + Port on the target server to connect to (usually 139 or 445). + Defaults to trying 445 first, then 139. +

    -n <primary NetBIOS name>

    This option allows you to override +the NetBIOS name that Samba uses for itself. This is identical +to setting the NetBIOS +name parameter in the smb.conf(5) file. However, a command +line setting will take precedence over settings in +smb.conf(5).

    -s <configuration file>

    The file specified contains the +configuration details required by the server. The +information in this file includes server-specific +information such as what printcap file to use, as well +as descriptions of all the services that the server is +to provide. See +smb.conf(5) for more information. +The default configuration file name is determined at +compile time.

    -S server

    + Name of target server. You should specify either + this option or a target workgroup or a target IP address. +

    -l

    + When listing data, give more information on each item. +

    -P

    + Make queries to the external server using the machine account of the local server. +

    -d|--debug=debuglevel

    debuglevel is an integer +from 0 to 10. The default value if this parameter is +not specified is zero.

    The higher this value, the more detail will be +logged to the log files about the activities of the +server. At level 0, only critical errors and serious +warnings will be logged. Level 1 is a reasonable level for +day to day running - it generates a small amount of +information about operations carried out.

    Levels above 1 will generate considerable +amounts of log data, and should only be used when +investigating a problem. Levels above 3 are designed for +use only by developers and generate HUGE amounts of log +data, most of which is extremely cryptic.

    Note that specifying this parameter here will +override the log +level parameter in the +smb.conf(5) file.

    COMMANDS

    TIME

    The NET TIME command allows you to view the time on a remote server + or synchronise the time on the local server with the time on the remote server.

    TIME

    Without any options, the NET TIME command +displays the time on the remote server. +

    TIME SYSTEM

    Displays the time on the remote server in a format ready for /bin/date

    TIME SET

    Tries to set the date and time of the local server to that on +the remote server using /bin/date.

    TIME ZONE

    Displays the timezone in hours from GMT on the remote computer.

    [RPC|ADS] JOIN [TYPE] [-U username[%password]] [options]

    +Join a domain. If the account already exists on the server, and +[TYPE] is MEMBER, the machine will attempt to join automatically. +(Assuming that the machine has been created in server manager) +Otherwise, a password will be prompted for, and a new account may +be created.

    +[TYPE] may be PDC, BDC or MEMBER to specify the type of server +joining the domain. +

    [RPC] OLDJOIN [options]

    Join a domain. Use the OLDJOIN option to join the domain +using the old style of domain joining - you need to create a trust +account in server manager first.

    [RPC|ADS] USER

    [RPC|ADS] USER DELETE target

    Delete specified user

    [RPC|ADS] USER LIST

    List all users

    [RPC|ADS] USER INFO target

    List the domain groups of a the specified user.

    [RPC|ADS] USER ADD name [password] [-F user flags] [-C comment]

    Add specified user.

    [RPC|ADS] GROUP

    [RPC|ADS] GROUP [misc options] [targets]

    List user groups.

    [RPC|ADS] GROUP DELETE name [misc. options]

    Delete specified group.

    [RPC|ADS] GROUP ADD name [-C comment]

    Create specified group.

    [RAP|RPC] SHARE

    [RAP|RPC] SHARE [misc. options] [targets]

    Enumerates all exported resources (network shares) on target server.

    [RAP|RPC] SHARE ADD name=serverpath [-C comment] [-M maxusers] [targets]

    Adds a share from a server (makes the export active). Maxusers +specifies the number of users that can be connected to the +share simultaneously.

    SHARE DELETE sharenam

    Delete specified share.

    [RPC|RAP] FILE

    [RPC|RAP] FILE

    List all open files on remote server.

    [RPC|RAP] FILE CLOSE fileid

    Close file with specified fileid on +remote server.

    [RPC|RAP] FILE INFO fileid

    +Print information on specified fileid. +Currently listed are: file-id, username, locks, path, permissions. +

    [RAP|RPC] FILE USER

    Note

    Currently NOT implemented.

    SESSION

    RAP SESSION

    Without any other options, SESSION enumerates all active SMB/CIFS +sessions on the target server.

    RAP SESSION DELETE|CLOSE CLIENT_NAME

    Close the specified sessions.

    RAP SESSION INFO CLIENT_NAME

    Give a list with all the open files in specified session.

    RAP SERVER DOMAIN

    List all servers in specified domain or workgroup. Defaults +to local domain.

    RAP DOMAIN

    Lists all domains and workgroups visible on the +current network.

    RAP PRINTQ

    RAP PRINTQ LIST QUEUE_NAME

    Lists the specified print queue and print jobs on the server. +If the QUEUE_NAME is omitted, all +queues are listed.

    RAP PRINTQ DELETE JOBID

    Delete job with specified id.

    RAP VALIDATE user [password]

    +Validate whether the specified user can log in to the +remote server. If the password is not specified on the commandline, it +will be prompted. +

    Note

    Currently NOT implemented.

    RAP GROUPMEMBER

    RAP GROUPMEMBER LIST GROUP

    List all members of the specified group.

    RAP GROUPMEMBER DELETE GROUP USER

    Delete member from group.

    RAP GROUPMEMBER ADD GROUP USER

    Add member to group.

    RAP ADMIN command

    Execute the specified command on +the remote server. Only works with OS/2 servers. +

    Note

    Currently NOT implemented.

    RAP SERVICE

    RAP SERVICE START NAME [arguments...]

    Start the specified service on the remote server. Not implemented yet.

    Note

    Currently NOT implemented.

    RAP SERVICE STOP

    Stop the specified service on the remote server.

    Note

    Currently NOT implemented.

    RAP PASSWORD USER OLDPASS NEWPASS

    +Change password of USER from OLDPASS to NEWPASS. +

    LOOKUP

    LOOKUP HOST HOSTNAME [TYPE]

    +Lookup the IP address of the given host with the specified type (netbios suffix). +The type defaults to 0x20 (workstation). +

    LOOKUP LDAP [DOMAIN

    Give IP address of LDAP server of specified DOMAIN. Defaults to local domain.

    LOOKUP KDC [REALM]

    Give IP address of KDC for the specified REALM. +Defaults to local realm.

    LOOKUP DC [DOMAIN]

    Give IP's of Domain Controllers for specified +DOMAIN. Defaults to local domain.

    LOOKUP MASTER DOMAIN

    Give IP of master browser for specified DOMAIN +or workgroup. Defaults to local domain.

    CACHE

    Samba uses a general caching interface called 'gencache'. It +can be controlled using 'NET CACHE'.

    All the timeout parameters support the suffixes: + +

    s - Seconds
    m - Minutes
    h - Hours
    d - Days
    w - Weeks

    + +

    CACHE ADD key data time-out

    Add specified key+data to the cache with the given timeout.

    CACHE DEL key

    Delete key from the cache.

    CACHE SET key data time-out

    Update data of existing cache entry.

    CACHE SEARCH PATTERN

    Search for the specified pattern in the cache data.

    CACHE LIST

    +List all current items in the cache. +

    CACHE FLUSH

    Remove all the current items from the cache.

    GETLOCALSID [DOMAIN]

    Print the SID of the specified domain, or if the parameter is +omitted, the SID of the domain the local server is in.

    SETLOCALSID S-1-5-21-x-y-z

    Sets domain sid for the local server to the specified SID.

    GROUPMAP

    Manage the mappings between Windows group SIDs and UNIX groups. +Parameters take the for "parameter=value". Common options include:

    • unixgroup - Name of the UNIX group

    • ntgroup - Name of the Windows NT group (must be + resolvable to a SID

    • rid - Unsigned 32-bit integer

    • sid - Full SID in the form of "S-1-..."

    • type - Type of the group; either 'domain', 'local', + or 'builtin'

    • comment - Freeform text description of the group

    GROUPMAP ADD

    Add a new group mapping entry

    net groupmap add {rid=int|sid=string} unixgroup=string [type={domain|local|builtin}] [ntgroup=string] [comment=string]

    GROUPMAP DELETE

    Delete a group mapping entry

    net groupmap delete {ntgroup=string|sid=SID}

    GROUPMAP MODIFY

    Update en existing group entry

    net groupmap modify {ntgroup=string|sid=SID} [unixgroup=string] [comment=string] [type={domain|local}

    GROUPMAP LIST

    List existing group mapping entries

    net groupmap list [verbose] [ntgroup=string] [sid=SID]

    MAXRID

    Prints out the highest RID currently in use on the local +server (by the active 'passdb backend'). +

    RPC INFO

    Print information about the domain of the remote server, +such as domain name, domain sid and number of users and groups. +

    [RPC|ADS] TESTJOIN

    Check whether participation in a domain is still valid.

    [RPC|ADS] CHANGETRUSTPW

    Force change of domain trust password.

    RPC TRUSTDOM

    RPC TRUSTDOM ADD DOMAIN

    Add a interdomain trust account for +DOMAIN to the remote server. +

    RPC TRUSTDOM DEL DOMAIM

    Remove interdomain trust account for +DOMAIN from the remote server. +

    Note

    Currently NOT implemented.

    RPC TRUSTDOM ESTABLISH DOMAIN

    +Establish a trust relationship to a trusting domain. +Interdomain account must already be created on the remote PDC. +

    RPC TRUSTDOM REVOKE DOMAIN

    Abandon relationship to trusted domain

    RPC TRUSTDOM LIST

    List all current interdomain trust relationships.

    RPC ABORTSHUTDOWN

    Abort the shutdown of a remote server.

    SHUTDOWN [-t timeout] [-r] [-f] [-C message]

    Shut down the remote server.

    -r

    +Reboot after shutdown. +

    -f

    +Force shutting down all applications. +

    -t timeout

    +Timeout before system will be shut down. An interactive +user of the system can use this time to cancel the shutdown. +

    -C message

    Display the specified message on the screen to +announce the shutdown.

    SAMDUMP

    Print out sam database of remote server. You need +to run this on either a BDC.

    VAMPIRE

    Export users, aliases and groups from remote server to +local server. Can only be run an a BDC. +

    GETSID

    Fetch domain SID and store it in the local secrets.tdb.

    ADS LEAVE

    Make the remote host leave the domain it is part of.

    ADS STATUS

    Print out status of machine account of the local machine in ADS. +Prints out quite some debug info. Aimed at developers, regular +users should use NET ADS TESTJOIN.

    ADS PRINTER

    ADS PRINTER INFO [PRINTER] [SERVER]

    +Lookup info for PRINTER on SERVER. The printer name defaults to "*", the +server name defaults to the local host.

    ADS PRINTER PUBLISH PRINTER

    Publish specified printer using ADS.

    ADS PRINTER REMOVE PRINTER

    Remove specified printer from ADS directory.

    ADS SEARCH EXPRESSION ATTRIBUTES...

    Perform a raw LDAP search on a ADS server and dump the results. The +expression is a standard LDAP search expression, and the +attributes are a list of LDAP fields to show in the results.

    Example: net ads search '(objectCategory=group)' sAMAccountName +

    ADS DN DN (attributes)

    +Perform a raw LDAP search on a ADS server and dump the results. The +DN standard LDAP DN, and the attributes are a list of LDAP fields +to show in the result. +

    Example: net ads dn 'CN=administrator,CN=Users,DC=my,DC=domain' SAMAccountName

    WORKGROUP

    Print out workgroup name for specified kerberos realm.

    HELP [COMMAND]

    Gives usage information for the specified command.

    VERSION

    This man page is complete for version 3.0 of the Samba + suite.

    AUTHOR

    The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar - to the way the Linux kernel is developed.

    The original Samba man pages were written by Karl Auer. - The current set of manpages and documentation is maintained - by the Samba Team in the same fashion as the Samba source code.

    \ No newline at end of file + to the way the Linux kernel is developed.

    The net manpage was written by Jelmer Vernooij.

    diff --git a/docs/htmldocs/nmbd.8.html b/docs/htmldocs/nmbd.8.html index 1183a14522..c282bde89d 100644 --- a/docs/htmldocs/nmbd.8.html +++ b/docs/htmldocs/nmbd.8.html @@ -1,754 +1,153 @@ - -nmbd

    nmbd

    Name

    nmbd -- NetBIOS name server to provide NetBIOS - over IP naming services to clients

    DESCRIPTION

    This program is part of the Samba suite.

    nmbd is a server that understands +nmbd

    Name

    nmbd — NetBIOS name server to provide NetBIOS + over IP naming services to clients

    Synopsis

    nmbd [-D] [-F] [-S] [-a] [-i] [-o] [-h] [-V] [-d <debug level>] [-H <lmhosts file>] [-l <log directory>] [-n <primary netbios name>] [-p <port number>] [-s <configuration file>]

    DESCRIPTION

    This program is part of the Samba(7) suite.

    nmbd is a server that understands and can reply to NetBIOS over IP name service requests, like those produced by SMB/CIFS clients such as Windows 95/98/ME, Windows NT, Windows 2000, Windows XP and LanManager clients. It also participates in the browsing protocols which make up the - Windows "Network Neighborhood" view.

    SMB/CIFS clients, when they start up, may wish to + Windows "Network Neighborhood" view.

    SMB/CIFS clients, when they start up, may wish to locate an SMB/CIFS server. That is, they wish to know what - IP number a specified host is using.

    Amongst other services, nmbd will + IP number a specified host is using.

    Amongst other services, nmbd will listen for such requests, and if its own NetBIOS name is specified it will respond with the IP number of the host it - is running on. Its "own NetBIOS name" is by + is running on. Its "own NetBIOS name" is by default the primary DNS name of the host it is running on, - but this can be overridden with the -n - option (see OPTIONS below). Thus nmbd will + but this can be overridden with the -n + option (see OPTIONS below). Thus nmbd will reply to broadcast queries for its own name(s). Additional - names for nmbd to respond on can be set - via parameters in the smb.conf(5) configuration file.

    nmbd can also be used as a WINS + names for nmbd to respond on can be set + via parameters in the smb.conf(5) configuration file.

    nmbd can also be used as a WINS (Windows Internet Name Server) server. What this basically means is that it will act as a WINS database server, creating a database from name registration requests that it receives and - replying to queries from clients for these names.

    In addition, nmbd can act as a WINS + replying to queries from clients for these names.

    In addition, nmbd can act as a WINS proxy, relaying broadcast queries from clients that do not understand how to talk the WINS protocol to a WINS - server.

    OPTIONS

    -D

    If specified, this parameter causes - nmbd to operate as a daemon. That is, + server.

    OPTIONS

    -D

    If specified, this parameter causes + nmbd to operate as a daemon. That is, it detaches itself and runs in the background, fielding - requests on the appropriate port. By default, nmbd + requests on the appropriate port. By default, nmbd will operate as a daemon if launched from a command shell. - nmbd can also be operated from the inetd + nmbd can also be operated from the inetd meta-daemon, although this is not recommended. -

    -F

    If specified, this parameter causes - the main nmbd process to not daemonize, +

    -F

    If specified, this parameter causes + the main nmbd process to not daemonize, i.e. double-fork and disassociate with the terminal. Child processes are still created as normal to service each connection request, but the main process does not exit. This operation mode is suitable for running - nmbd under process supervisors such - as supervise and svscan - from Daniel J. Bernstein's daemontools + nmbd under process supervisors such + as supervise and svscan + from Daniel J. Bernstein's daemontools package, or the AIX process monitor. -

    -S

    If specified, this parameter causes - nmbd to log to standard output rather - than a file.

    -a

    If this parameter is specified, each new - connection will append log messages to the log file. - This is the default.

    -i

    If this parameter is specified it causes the - server to run "interactively", not as a daemon, even if the +

    -S

    If specified, this parameter causes + nmbd to log to standard output rather + than a file.

    -i

    If this parameter is specified it causes the + server to run "interactively", not as a daemon, even if the server is executed on the command line of a shell. Setting this parameter negates the implicit daemon mode when run from the - command line. nmbd also logs to standard - output, as if the -S parameter had been - given.

    -o

    If this parameter is specified, the - log files will be overwritten when opened. By default, - smbd will append entries to the log - files.

    -h

    Prints the help information (usage) - for nmbd.

    -H <filename>

    NetBIOS lmhosts file. The lmhosts + command line. nmbd also logs to standard + output, as if the -S parameter had been + given.

    -h|--help

    Print a summary of command line options. +

    -H <filename>

    NetBIOS lmhosts file. The lmhosts file is a list of NetBIOS names to IP addresses that is loaded by the nmbd server and used via the name - resolution mechanism name resolve order described in smb.conf(5) - to resolve any NetBIOS name queries needed by the server. Note - that the contents of this file are NOT - used by nmbd to answer any name queries. + resolution mechanism name resolve + order described in smb.conf(5) to resolve any + NetBIOS name queries needed by the server. Note + that the contents of this file are NOT + used by nmbd to answer any name queries. Adding a line to this file affects name NetBIOS resolution - from this host ONLY.

    The default path to this file is compiled into + from this host ONLY.

    The default path to this file is compiled into Samba as part of the build process. Common defaults - are /usr/local/samba/lib/lmhosts, - /usr/samba/lib/lmhosts or - /etc/lmhosts. See the - lmhosts(5) - man page for details on the contents of this file.

    -V

    Prints the version number for - nmbd.

    -d <debug level>

    debuglevel is an integer - from 0 to 10. The default value if this parameter is - not specified is zero.

    The higher this value, the more detail will - be logged to the log files about the activities of the - server. At level 0, only critical errors and serious - warnings will be logged. Level 1 is a reasonable level for - day to day running - it generates a small amount of - information about operations carried out.

    Levels above 1 will generate considerable amounts - of log data, and should only be used when investigating - a problem. Levels above 3 are designed for use only by developers - and generate HUGE amounts of log data, most of which is extremely - cryptic.

    Note that specifying this parameter here will override - the log level - parameter in the smb.conf(5) file.

    -l <log directory>

    The -l parameter specifies a directory - into which the "log.nmbd" log file will be created - for operational data from the running nmbd - server. The default log directory is compiled into Samba - as part of the build process. Common defaults are /usr/local/samba/var/log.nmb, /usr/samba/var/log.nmb or - /var/log/log.nmb. Beware: - If the directory specified does not exist, nmbd - will log to the default debug log location defined at compile time. -

    -n <primary NetBIOS name>

    This option allows you to override - the NetBIOS name that Samba uses for itself. This is identical - to setting the NetBIOS name parameter in the - smb.conf file. However, a command - line setting will take precedence over settings in - smb.conf.

    -p <UDP port number>

    UDP port number is a positive integer value. + are /usr/local/samba/lib/lmhosts, + /usr/samba/lib/lmhosts or + /etc/samba/lmhosts. See the lmhosts(5) man page for details on the contents of this file.

    -V

    Prints the version number for +smbd.

    -s <configuration file>

    The file specified contains the +configuration details required by the server. The +information in this file includes server-specific +information such as what printcap file to use, as well +as descriptions of all the services that the server is +to provide. See +smb.conf(5) for more information. +The default configuration file name is determined at +compile time.

    -d|--debug=debuglevel

    debuglevel is an integer +from 0 to 10. The default value if this parameter is +not specified is zero.

    The higher this value, the more detail will be +logged to the log files about the activities of the +server. At level 0, only critical errors and serious +warnings will be logged. Level 1 is a reasonable level for +day to day running - it generates a small amount of +information about operations carried out.

    Levels above 1 will generate considerable +amounts of log data, and should only be used when +investigating a problem. Levels above 3 are designed for +use only by developers and generate HUGE amounts of log +data, most of which is extremely cryptic.

    Note that specifying this parameter here will +override the log +level parameter in the +smb.conf(5) file.

    -l|--logfile=logbasename

    File name for log/debug files. The extension +".client" will be appended. The log file is +never removed by the client. +

    -p <UDP port number>

    UDP port number is a positive integer value. This option changes the default UDP port number (normally 137) - that nmbd responds to name queries on. Don't + that nmbd responds to name queries on. Don't use this option unless you are an expert, in which case you - won't need help!

    -s <configuration file>

    The default configuration file name - is set at build time, typically as /usr/local/samba/lib/smb.conf, but - this may be changed when Samba is autoconfigured.

    The file specified contains the configuration details - required by the server. See smb.conf(5) for more information. -

    FILES

    /etc/inetd.conf

    If the server is to be run by the - inetd meta-daemon, this file + won't need help!

    FILES

    /etc/inetd.conf

    If the server is to be run by the + inetd meta-daemon, this file must contain suitable startup information for the - meta-daemon. See the UNIX_INSTALL.html document + meta-daemon. See the install document for details. -

    /etc/rc

    or whatever initialization script your - system uses).

    If running the server as a daemon at startup, +

    /etc/rc

    or whatever initialization script your + system uses).

    If running the server as a daemon at startup, this file will need to contain an appropriate startup - sequence for the server. See the UNIX_INSTALL.html document - for details.

    /etc/services

    If running the server via the - meta-daemon inetd, this file + sequence for the server. See the "How to Install and Test SAMBA" document + for details.

    /etc/services

    If running the server via the + meta-daemon inetd, this file must contain a mapping of service name (e.g., netbios-ssn) to service port (e.g., 139) and protocol type (e.g., tcp). - See the UNIX_INSTALL.html - document for details.

    /usr/local/samba/lib/smb.conf

    This is the default location of the - smb.conf - server configuration file. Other common places that systems - install this file are /usr/samba/lib/smb.conf - and /etc/smb.conf.

    When run as a WINS server (see the - wins support - parameter in the smb.conf(5) man page), - nmbd - will store the WINS database in the file wins.dat - in the var/locks directory configured under - wherever Samba was configured to install itself.

    If nmbd is acting as a browse master (see the local master - parameter in the smb.conf(5) man page, - nmbd - will store the browsing database in the file browse.dat - in the var/locks directory + See the "How to Install and Test SAMBA" + document for details.

    /usr/local/samba/lib/smb.conf

    This is the default location of + the smb.conf(5) server + configuration file. Other common places that systems + install this file are /usr/samba/lib/smb.conf + and /etc/samba/smb.conf.

    When run as a WINS server (see the + wins support + parameter in the smb.conf(5) man page), + nmbd + will store the WINS database in the file wins.dat + in the var/locks directory configured under + wherever Samba was configured to install itself.

    If nmbd is acting as a + browse master (see the local master + parameter in the smb.conf(5) man page, nmbd + will store the browsing database in the file browse.dat + in the var/locks directory configured under wherever Samba was configured to install itself. -

    SIGNALS

    To shut down an nmbd process it is recommended - that SIGKILL (-9) NOT be used, except as a last +

    SIGNALS

    To shut down an nmbd process it is recommended + that SIGKILL (-9) NOT be used, except as a last resort, as this may leave the name database in an inconsistent state. - The correct way to terminate nmbd is to send it - a SIGTERM (-15) signal and wait for it to die on its own.

    nmbd will accept SIGHUP, which will cause - it to dump out its namelists into the file namelist.debug - in the /usr/local/samba/var/locks - directory (or the var/locks directory configured + The correct way to terminate nmbd is to send it + a SIGTERM (-15) signal and wait for it to die on its own.

    nmbd will accept SIGHUP, which will cause + it to dump out its namelists into the file namelist.debug + in the /usr/local/samba/var/locks + directory (or the var/locks directory configured under wherever Samba was configured to install itself). This will also - cause nmbd to dump out its server database in - the log.nmb file.

    The debug log level of nmbd may be raised or lowered using - smbcontrol(1) - (SIGUSR[1|2] signals are no longer used in Samba 2.2). This is - to allow transient problems to be diagnosed, whilst still running - at a normally low log level.

    VERSION

    This man page is correct for version 3.0 of - the Samba suite.

    SEE ALSO

    inetd(8), smbd(8), - smb.conf(5) - , smbclient(1) - , testparm(1), testprns(1), and the Internet RFC's - rfc1001.txt, rfc1002.txt. + cause nmbd to dump out its server database in + the log.nmb file.

    The debug log level of nmbd may be raised or lowered + using smbcontrol(1) (SIGUSR[1|2] signals + are no longer used since Samba 2.2). This is to allow + transient problems to be diagnosed, whilst still running + at a normally low log level.

    VERSION

    This man page is correct for version 3.0 of + the Samba suite.

    SEE ALSO

    + inetd(8), smbd(8), smb.conf(5), smbclient(1), testparm(1), testprns(1), and the Internet + RFC's rfc1001.txt, rfc1002.txt. In addition the CIFS (formerly SMB) specification is available - as a link from the Web page - http://samba.org/cifs/.

    AUTHOR

    The original Samba software and related utilities + as a link from the Web page + http://samba.org/cifs/.

    AUTHOR

    The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar - to the way the Linux kernel is developed.

    The original Samba man pages were written by Karl Auer. + to the way the Linux kernel is developed.

    The original Samba man pages were written by Karl Auer. The man page sources were converted to YODL format (another - excellent piece of Open Source software, available at - ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 + excellent piece of Open Source software, available at + ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 release by Jeremy Allison. The conversion to DocBook for - Samba 2.2 was done by Gerald Carter

    \ No newline at end of file + Samba 2.2 was done by Gerald Carter. The conversion to DocBook + XML 4.2 for Samba 3.0 was done by Alexander Bokovoy.

    diff --git a/docs/htmldocs/nmblookup.1.html b/docs/htmldocs/nmblookup.1.html index 2ce322990f..46c17ce706 100644 --- a/docs/htmldocs/nmblookup.1.html +++ b/docs/htmldocs/nmblookup.1.html @@ -1,412 +1,107 @@ - -nmblookup

    nmblookup

    Name

    nmblookup -- NetBIOS over TCP/IP client used to lookup NetBIOS - names

    Synopsis

    nmblookup [-M] [-R] [-S] [-r] [-A] [-h] [-B <broadcast address>] [-U <unicast address>] [-d <debug level>] [-s <smb config file>] [-i <NetBIOS scope>] [-T] [-f] {name}

    DESCRIPTION

    This tool is part of the Samba suite.

    nmblookup is used to query NetBIOS names +nmblookup

    Name

    nmblookup — NetBIOS over TCP/IP client used to lookup NetBIOS + names

    Synopsis

    nmblookup [-M] [-R] [-S] [-r] [-A] [-h] [-B <broadcast address>] [-U <unicast address>] [-d <debug level>] [-s <smb config file>] [-i <NetBIOS scope>] [-T] [-f] {name}

    DESCRIPTION

    This tool is part of the Samba(7) suite.

    nmblookup is used to query NetBIOS names and map them to IP addresses in a network using NetBIOS over TCP/IP queries. The options allow the name queries to be directed at a particular IP broadcast area or to a particular machine. All queries - are done over UDP.

    OPTIONS

    -M

    Searches for a master browser by looking - up the NetBIOS name name with a - type of 0x1d. If name is "-" then it does a lookup on the special name - __MSBROWSE__.

    -R

    Set the recursion desired bit in the packet + are done over UDP.

    OPTIONS

    -M

    Searches for a master browser by looking + up the NetBIOS name name with a + type of 0x1d. If + name is "-" then it does a lookup on the special name + __MSBROWSE__. Please note that in order to + use the name "-", you need to make sure "-" isn't parsed as an + argument, e.g. use : + nmblookup -M -- -.

    -R

    Set the recursion desired bit in the packet to do a recursive lookup. This is used when sending a name query to a machine running a WINS server and the user wishes to query the names in the WINS server. If this bit is unset the normal (broadcast responding) NetBIOS processing code - on a machine is used instead. See rfc1001, rfc1002 for details. -

    -S

    Once the name query has returned an IP + on a machine is used instead. See RFC1001, RFC1002 for details. +

    -S

    Once the name query has returned an IP address then do a node status query as well. A node status query returns the NetBIOS names registered by a host. -

    -r

    Try and bind to UDP port 137 to send and receive UDP +

    -r

    Try and bind to UDP port 137 to send and receive UDP datagrams. The reason for this option is a bug in Windows 95 where it ignores the source port of the requesting packet and only replies to UDP port 137. Unfortunately, on most UNIX systems root privilege is needed to bind to this port, and - in addition, if the nmbd(8) - daemon is running on this machine it also binds to this port. -

    -A

    Interpret name as - an IP Address and do a node status query on this address.

    -h

    Print a help (usage) message.

    -B <broadcast address>

    Send the query to the given broadcast address. Without + in addition, if the nmbd(8) daemon is running on this machine it also binds to this port. +

    -A

    Interpret name as + an IP Address and do a node status query on this address.

    -n <primary NetBIOS name>

    This option allows you to override +the NetBIOS name that Samba uses for itself. This is identical +to setting the NetBIOS +name parameter in the smb.conf(5) file. However, a command +line setting will take precedence over settings in +smb.conf(5).

    -i <scope>

    This specifies a NetBIOS scope that +nmblookup will use to communicate with when +generating NetBIOS names. For details on the use of NetBIOS +scopes, see rfc1001.txt and rfc1002.txt. NetBIOS scopes are +very rarely used, only set this parameter +if you are the system administrator in charge of all the +NetBIOS systems you communicate with.

    -W|--workgroup=domain

    Set the SMB domain of the username. This +overrides the default domain which is the domain defined in +smb.conf. If the domain specified is the same as the servers +NetBIOS name, it causes the client to log on using the servers local +SAM (as opposed to the Domain SAM).

    -O socket options

    TCP socket options to set on the client +socket. See the socket options parameter in +the smb.conf(5) manual page for the list of valid +options.

    -h|--help

    Print a summary of command line options. +

    -B <broadcast address>

    Send the query to the given broadcast address. Without this option the default behavior of nmblookup is to send the query to the broadcast address of the network interfaces as - either auto-detected or defined in the interfaces - parameter of the smb.conf (5) file. -

    -U <unicast address>

    Do a unicast query to the specified address or - host unicast address. This option - (along with the -R option) is needed to - query a WINS server.

    -d <debuglevel>

    debuglevel is an integer from 0 to 10.

    The default value if this parameter is not specified - is zero.

    The higher this value, the more detail will be logged - about the activities of nmblookup. At level - 0, only critical errors and serious warnings will be logged.

    Levels above 1 will generate considerable amounts of - log data, and should only be used when investigating a problem. - Levels above 3 are designed for use only by developers and - generate HUGE amounts of data, most of which is extremely cryptic.

    Note that specifying this parameter here will override - the log level parameter in the smb.conf(5) file.

    -s <smb.conf>

    This parameter specifies the pathname to - the Samba configuration file, smb.conf(5). This file controls all aspects of - the Samba setup on the machine.

    -i <scope>

    This specifies a NetBIOS scope that - nmblookup will use to communicate with when - generating NetBIOS names. For details on the use of NetBIOS - scopes, see rfc1001.txt and rfc1002.txt. NetBIOS scopes are - very rarely used, only set this parameter - if you are the system administrator in charge of all the - NetBIOS systems you communicate with.

    -T

    This causes any IP addresses found in the + either auto-detected or defined in the interfaces + parameter of the smb.conf(5) file. +

    -U <unicast address>

    Do a unicast query to the specified address or + host unicast address. This option + (along with the -R option) is needed to + query a WINS server.

    -V

    Prints the version number for +smbd.

    -s <configuration file>

    The file specified contains the +configuration details required by the server. The +information in this file includes server-specific +information such as what printcap file to use, as well +as descriptions of all the services that the server is +to provide. See +smb.conf(5) for more information. +The default configuration file name is determined at +compile time.

    -d|--debug=debuglevel

    debuglevel is an integer +from 0 to 10. The default value if this parameter is +not specified is zero.

    The higher this value, the more detail will be +logged to the log files about the activities of the +server. At level 0, only critical errors and serious +warnings will be logged. Level 1 is a reasonable level for +day to day running - it generates a small amount of +information about operations carried out.

    Levels above 1 will generate considerable +amounts of log data, and should only be used when +investigating a problem. Levels above 3 are designed for +use only by developers and generate HUGE amounts of log +data, most of which is extremely cryptic.

    Note that specifying this parameter here will +override the log +level parameter in the +smb.conf(5) file.

    -l|--logfile=logbasename

    File name for log/debug files. The extension +".client" will be appended. The log file is +never removed by the client. +

    -T

    This causes any IP addresses found in the lookup to be looked up via a reverse DNS lookup into a - DNS name, and printed out before each

    IP address .... NetBIOS name

    pair that is the normal output.

    -f

    Show which flags apply to the name that has been looked up. Possible + DNS name, and printed out before each

    IP address .... NetBIOS name

    pair that is the normal output.

    -f

    + Show which flags apply to the name that has been looked up. Possible answers are zero or more of: Response, Authoritative, Truncated, Recursion_Desired, Recursion_Available, Broadcast. -

    name

    This is the NetBIOS name being queried. Depending +

    name

    This is the NetBIOS name being queried. Depending upon the previous options this may be a NetBIOS name or IP address. If a NetBIOS name then the different name types may be specified by appending '#<type>' to the name. This name may also be '*', which will return all registered names within a broadcast - area.

    EXAMPLES

    nmblookup can be used to query - a WINS server (in the same way nslookup is - used to query DNS servers). To query a WINS server, - nmblookup must be called like this:

    nmblookup -U server -R 'name'

    For example, running :

    nmblookup -U samba.org -R 'IRIX#1B'

    would query the WINS server samba.org for the domain - master browser (1B name type) for the IRIX workgroup.

    VERSION

    This man page is correct for version 3.0 of - the Samba suite.

    SEE ALSO

    nmbd(8), - samba(7), and smb.conf(5) -

    AUTHOR

    The original Samba software and related utilities + area.

    EXAMPLES

    nmblookup can be used to query + a WINS server (in the same way nslookup is + used to query DNS servers). To query a WINS server, nmblookup + must be called like this:

    nmblookup -U server -R 'name'

    For example, running :

    nmblookup -U samba.org -R 'IRIX#1B'

    would query the WINS server samba.org for the domain + master browser (1B name type) for the IRIX workgroup.

    VERSION

    This man page is correct for version 3.0 of + the Samba suite.

    SEE ALSO

    nmbd(8), samba(7), and smb.conf(5).

    AUTHOR

    The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar - to the way the Linux kernel is developed.

    The original Samba man pages were written by Karl Auer. + to the way the Linux kernel is developed.

    The original Samba man pages were written by Karl Auer. The man page sources were converted to YODL format (another - excellent piece of Open Source software, available at - ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 + excellent piece of Open Source software, available at + ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 release by Jeremy Allison. The conversion to DocBook for - Samba 2.2 was done by Gerald Carter

    \ No newline at end of file + Samba 2.2 was done by Gerald Carter. The conversion to DocBook + XML 4.2 for Samba 3.0 was done by Alexander Bokovoy.

    diff --git a/docs/htmldocs/optional.html b/docs/htmldocs/optional.html index b15515ddab..22761de9c9 100644 --- a/docs/htmldocs/optional.html +++ b/docs/htmldocs/optional.html @@ -1,898 +1,26 @@ - -Optional configuration
    SAMBA Project Documentation
    PrevNext

    III. Optional configuration

    Table of Contents
    10. Integrating MS Windows networks with Samba
    10.1. Agenda
    10.2. Name Resolution in a pure Unix/Linux world
    10.2.1. /etc/hosts
    10.2.2. /etc/resolv.conf
    10.2.3. /etc/host.conf
    10.2.4. /etc/nsswitch.conf
    10.3. Name resolution as used within MS Windows networking
    10.3.1. The NetBIOS Name Cache
    10.3.2. The LMHOSTS file
    10.3.3. HOSTS file
    10.3.4. DNS Lookup
    10.3.5. WINS Lookup
    10.4. How browsing functions and how to deploy stable and -dependable browsing using Samba
    10.5. MS Windows security options and how to configure -Samba for seemless integration
    10.5.1. Use MS Windows NT as an authentication server
    10.5.2. Make Samba a member of an MS Windows NT security domain
    10.5.3. Configure Samba as an authentication server
    10.6. Conclusions
    11. UNIX Permission Bits and Windows NT Access Control Lists
    11.1. Viewing and changing UNIX permissions using the NT - security dialogs
    11.2. How to view file security on a Samba share
    11.3. Viewing file ownership
    11.4. Viewing file or directory permissions
    11.4.1. File Permissions
    11.4.2. Directory Permissions
    11.5. Modifying file or directory permissions
    11.6. Interaction with the standard Samba create mask - parameters
    11.7. Interaction with the standard Samba file attribute - mapping
    12. Configuring PAM for distributed but centrally -managed authentication
    12.1. Samba and PAM
    12.2. Distributed Authentication
    12.3. PAM Configuration in smb.conf
    13. Hosting a Microsoft Distributed File System tree on Samba
    13.1. Instructions
    13.1.1. Notes
    14. Printing Support
    14.1. Introduction
    14.2. Configuration
    14.2.1. Creating [print$]
    14.2.2. Setting Drivers for Existing Printers
    14.2.3. Support a large number of printers
    14.2.4. Adding New Printers via the Windows NT APW
    14.2.5. Samba and Printer Ports
    14.3. The Imprints Toolset
    14.3.1. What is Imprints?
    14.3.2. Creating Printer Driver Packages
    14.3.3. The Imprints server
    14.3.4. The Installation Client
    14.4. Diagnosis
    14.4.1. Introduction
    14.4.2. Debugging printer problems
    14.4.3. What printers do I have?
    14.4.4. Setting up printcap and print servers
    14.4.5. Job sent, no output
    14.4.6. Job sent, strange output
    14.4.7. Raw PostScript printed
    14.4.8. Advanced Printing
    14.4.9. Real debugging
    15. Unified Logons between Windows NT and UNIX using Winbind
    15.1. Abstract
    15.2. Introduction
    15.3. What Winbind Provides
    15.3.1. Target Uses
    15.4. How Winbind Works
    15.4.1. Microsoft Remote Procedure Calls
    15.4.2. Name Service Switch
    15.4.3. Pluggable Authentication Modules
    15.4.4. User and Group ID Allocation
    15.4.5. Result Caching
    15.5. Installation and Configuration
    15.5.1. Introduction
    15.5.2. Requirements
    15.5.3. Testing Things Out
    15.6. Limitations
    15.7. Conclusion
    16. Passdb MySQL plugin
    16.1. Building
    16.2. Configuring
    16.3. Using plaintext passwords or encrypted password
    16.4. Getting non-column data from the table
    17. Passdb XML plugin
    17.1. Building
    17.2. Usage
    18. Stackable VFS modules
    18.1. Introduction and configuration
    18.2. Included modules
    18.2.1. audit
    18.2.2. recycle
    18.2.3. netatalk
    18.3. VFS modules available elsewhere
    18.3.1. DatabaseFS
    18.3.2. vscan
    19. Storing Samba's User/Machine Account information in an LDAP Directory
    19.1. Purpose
    19.2. Introduction
    19.3. Supported LDAP Servers
    19.4. Schema and Relationship to the RFC 2307 posixAccount
    19.5. Configuring Samba with LDAP
    19.5.1. OpenLDAP configuration
    19.5.2. Configuring Samba
    19.6. Accounts and Groups management
    19.7. Security and sambaAccount
    19.8. LDAP specials attributes for sambaAccounts
    19.9. Example LDIF Entries for a sambaAccount
    19.10. Comments
    20. HOWTO Access Samba source code via CVS
    20.1. Introduction
    20.2. CVS Access to samba.org
    20.2.1. Access via CVSweb
    20.2.2. Access via cvs
    21. Group mapping HOWTO
    22. Samba performance issues
    22.1. Comparisons
    22.2. Socket options
    22.3. Read size
    22.4. Max xmit
    22.5. Log level
    22.6. Read raw
    22.7. Write raw
    22.8. Slow Clients
    22.9. Slow Logins
    22.10. Client tuning
    PrevHomeNext
    Samba as a NT4 domain member Integrating MS Windows networks with Samba
    \ No newline at end of file +PartIII.Advanced Configuration
    PartIII.Advanced Configuration
    PrevNext

    Advanced Configuration

    Valuable Nuts and Bolts Information

    +Samba has several features that you might want or might not want to use. The chapters in this part each cover specific Samba features. +

    Table of Contents

    10. Samba / MS Windows Network Browsing Guide
    Features and Benefits
    What is Browsing?
    Discussion
    NetBIOS over TCP/IP
    TCP/IP - without NetBIOS
    DNS and Active Directory
    How Browsing Functions
    Setting up WORKGROUP Browsing
    Setting up DOMAIN Browsing
    Forcing samba to be the master
    Making samba the domain master
    Note about broadcast addresses
    Multiple interfaces
    Use of the Remote Announce parameter
    Use of the Remote Browse Sync parameter
    WINS - The Windows Internetworking Name Server
    Setting up a WINS server
    WINS Replication
    Static WINS Entries
    Helpful Hints
    Windows Networking Protocols
    Name Resolution Order
    Technical Overview of browsing
    Browsing support in samba
    Problem resolution
    Browsing across subnets
    Common Errors
    How can one flush the Samba NetBIOS name cache without restarting samba?
    My client reports "This server is not configured to list shared resources"
    11. Account Information Databases
    Features and Benefits
    Technical Information
    Important Notes About Security
    Mapping User Identifiers between MS Windows and Unix
    Account Management Tools
    The smbpasswd Command
    The pdbedit Command
    Password Backends
    Plain Text
    smbpasswd - Encrypted Password Database
    tdbsam
    ldapsam
    MySQL
    XML
    Common Errors
    Users can not logon - Users not in Samba SAM
    Users are being added to the wrong backend database
    auth methods does not work
    12. Mapping MS Windows and Unix Groups
    Features and Benefits
    Discussion
    Example Configuration
    Configuration Scripts
    Sample smb.conf add group script
    Script to configure Group Mapping
    Common Errors
    Adding Groups Fails
    Adding MS Windows Groups to MS Windows Groups Fails
    13. File, Directory and Share Access Controls
    Features and Benefits
    File System Access Controls
    MS Windows NTFS Comparison with Unix File Systems
    Managing Directories
    File and Directory Access Control
    Share Definition Access Controls
    User and Group Based Controls
    File and Directory Permissions Based Controls
    Miscellaneous Controls
    Access Controls on Shares
    Share Permissions Management
    MS Windows Access Control Lists and Unix Interoperability
    Managing UNIX permissions Using NT Security Dialogs
    Viewing File Security on a Samba Share
    Viewing file ownership
    Viewing File or Directory Permissions
    Modifying file or directory permissions
    Interaction with the standard Samba create mask + parameters
    Interaction with the standard Samba file attribute + mapping
    Common Errors
    Users can not write to a public share
    I have set force user and samba still makes root the owner of all the files + I touch!
    14. File and Record Locking
    Features and Benefits
    Discussion
    Opportunistic Locking Overview
    Samba Opportunistic Locking Control
    Example Configuration
    MS Windows Opportunistic Locking and Caching Controls
    Workstation Service Entries
    Server Service Entries
    Persistent Data Corruption
    Common Errors
    locking.tdb error messages
    Additional Reading
    15. Securing Samba
    Introduction
    Features and Benefits
    Technical Discussion of Protective Measures and Issues
    Using host based protection
    User based protection
    Using interface protection
    Using a firewall
    Using a IPC$ share deny
    NTLMv2 Security
    Upgrading Samba
    Common Errors
    Smbclient works on localhost, but the network is dead
    Why can users access home directories of other users?
    16. Interdomain Trust Relationships
    Features and Benefits
    Trust Relationship Background
    Native MS Windows NT4 Trusts Configuration
    NT4 as the Trusting Domain (ie. creating the trusted account)
    NT4 as the Trusted Domain (ie. creating trusted account's password)
    Configuring Samba NT-style Domain Trusts
    Samba-3 as the Trusting Domain
    Samba-3 as the Trusted Domain
    Common Errors
    Tell me about Trust Relationships using Samba
    17. Hosting a Microsoft Distributed File System tree on Samba
    Features and Benefits
    Common Errors
    18. Classical Printing Support
    Features and Benefits
    Technical Introduction
    What happens if you send a Job from a Client
    Printing Related Configuration Parameters
    Parameters Recommended for Use
    Parameters for Backwards Compatibility
    Parameters no longer in use
    A simple Configuration to Print with Samba-3
    Verification of "Settings in Use" with testparm
    A little Experiment to warn you
    Extended Sample Configuration to Print with Samba-3
    Detailed Explanation of the Example's Settings
    The [global] Section
    The [printers] Section
    Any [my_printer_name] Section
    Print Commands
    Default Print Commands for various Unix Print Subsystems
    Setting up your own Print Commands
    Innovations in Samba Printing since 2.2
    Client Drivers on Samba Server for Point'n'Print
    The [printer$] Section is removed from Samba-3
    Creating the [print$] Share
    Parameters in the [print$] Section
    Subdirectory Structure in [print$]
    Installing Drivers into [print$]
    Setting Drivers for existing Printers with a Client GUI
    Setting Drivers for existing Printers with +rpcclient
    "The Proof of the Pudding lies in the Eating" (Client Driver Insta +Procedure)
    The first Client Driver Installation
    IMPORTANT! Setting Device Modes on new Printers
    Further Client Driver Install Procedures
    Always make first Client Connection as root or "printer admin"
    Other Gotchas
    Setting Default Print Options for the Client Drivers
    Supporting large Numbers of Printers
    Adding new Printers with the Windows NT APW
    Weird Error Message Cannot connect under a +different Name
    Be careful when assembling Driver Files
    Samba and Printer Ports
    Avoiding the most common Misconfigurations of the Client Driver
    The Imprints Toolset
    What is Imprints?
    Creating Printer Driver Packages
    The Imprints Server
    The Installation Client
    Add Network Printers at Logon without User Interaction
    The addprinter command
    Migration of "Classical" printing to Samba-3
    Publishing Printer Information in Active Directory or LDAP
    Common Errors and Problems
    I give my root password but I don't get access
    My printjobs get spooled into the spooling directory, but then get lost
    19. CUPS Printing Support in Samba 3.0
    Introduction
    Features and Benefits
    Overview
    Basic Configuration of CUPS support
    Linking of smbd with libcups.so
    Simple smb.conf Settings for CUPS
    More complex smb.conf Settings for +CUPS
    Advanced Configuration
    Central spooling vs. "Peer-to-Peer" printing
    CUPS/Samba as a "spooling-only" Print Server; "raw" printing +with Vendor Drivers on Windows Clients
    Driver Installation Methods on Windows Clients
    Explicitly enable "raw" printing for +application/octet-stream!
    Three familiar Methods for driver upload plus a new one
    Using CUPS/Samba in an advanced Way -- intelligent printing +with PostScript Driver Download
    GDI on Windows -- PostScript on Unix
    Windows Drivers, GDI and EMF
    Unix Printfile Conversion and GUI Basics
    PostScript and Ghostscript
    Ghostscript -- the Software RIP for non-PostScript Printers
    PostScript Printer Description (PPD) Specification
    CUPS can use all Windows-formatted Vendor PPDs
    CUPS also uses PPDs for non-PostScript Printers
    The CUPS Filtering Architecture
    MIME types and CUPS Filters
    MIME type Conversion Rules
    Filter Requirements
    Prefilters
    pstops
    pstoraster
    imagetops and imagetoraster
    rasterto [printerspecific]
    CUPS Backends
    cupsomatic/Foomatic -- how do they fit into the Picture?
    The Complete Picture
    mime.convs
    "Raw" printing
    "application/octet-stream" printing
    PostScript Printer Descriptions (PPDs) for non-PS Printers
    Difference between cupsomatic/foomatic-rip and +native CUPS printing
    Examples for filtering Chains
    Sources of CUPS drivers / PPDs
    Printing with Interface Scripts
    Network printing (purely Windows)
    From Windows Clients to an NT Print Server
    Driver Execution on the Client
    Driver Execution on the Server
    Network Printing (Windows clients -- UNIX/Samba Print +Servers)
    From Windows Clients to a CUPS/Samba Print Server
    Samba receiving Jobfiles and passing them to CUPS
    Network PostScript RIP: CUPS Filters on Server -- clients use +PostScript Driver with CUPS-PPDs
    PPDs for non-PS Printers on UNIX
    PPDs for non-PS Printers on Windows
    Windows Terminal Servers (WTS) as CUPS Clients
    Printer Drivers running in "Kernel Mode" cause many +Problems
    Workarounds impose Heavy Limitations
    CUPS: a "Magical Stone"?
    PostScript Drivers with no major problems -- even in Kernel +Mode
    Setting up CUPS for driver Download
    cupsaddsmb: the unknown Utility
    Prepare your smb.conf for +cupsaddsmb
    CUPS Package of "PostScript Driver for WinNT/2k/XP"
    Recognize the different Driver Files
    Acquiring the Adobe Driver Files
    ESP Print Pro Package of "PostScript Driver for +WinNT/2k/XP"
    Caveats to be considered
    What are the Benefits of using the "CUPS PostScript Driver for +Windows NT/2k/XP" as compared to the Adobe Driver?
    Run "cupsaddsmb" (quiet Mode)
    Run "cupsaddsmb" with verbose Output
    Understanding cupsaddsmb
    How to recognize if cupsaddsm completed successfully
    cupsaddsmb with a Samba PDC
    cupsaddsmb Flowchart
    Installing the PostScript Driver on a Client
    Avoiding critical PostScript Driver Settings on the +Client
    Installing PostScript Driver Files manually (using +rpcclient)
    A Check of the rpcclient man Page
    Understanding the rpcclient man Page
    Producing an Example by querying a Windows Box
    What is required for adddriver and setdriver to succeed
    Manual Commandline Driver Installation in 15 little Steps
    Troubleshooting revisited
    The printing *.tdb Files
    Trivial DataBase Files
    Binary Format
    Losing *.tdb Files
    Using tdbbackup
    CUPS Print Drivers from Linuxprinting.org
    foomatic-rip and Foomatic explained
    foomatic-rip and Foomatic-PPD Download and Installation
    Page Accounting with CUPS
    Setting up Quotas
    Correct and incorrect Accounting
    Adobe and CUPS PostScript Drivers for Windows Clients
    The page_log File Syntax
    Possible Shortcomings
    Future Developments
    Other Accounting Tools
    Additional Material
    Auto-Deletion or Preservation of CUPS Spool Files
    CUPS Configuration Settings explained
    Pre-conditions
    Manual Configuration
    When not to use Samba to print to +CUPS
    In Case of Trouble.....
    Where to find Documentation
    How to ask for Help
    Where to find Help
    Appendix
    Printing from CUPS to Windows attached +Printers
    More CUPS filtering Chains
    Trouble Shooting Guidelines to fix typical Samba printing +Problems
    An Overview of the CUPS Printing Processes
    20. Stackable VFS modules
    Features and Benefits
    Discussion
    Included modules
    audit
    extd_audit
    fake_perms
    recycle
    netatalk
    VFS modules available elsewhere
    DatabaseFS
    vscan
    Common Errors
    21. Integrated Logon Support using Winbind
    Features and Benefits
    Introduction
    What Winbind Provides
    Target Uses
    How Winbind Works
    Microsoft Remote Procedure Calls
    Microsoft Active Directory Services
    Name Service Switch
    Pluggable Authentication Modules
    User and Group ID Allocation
    Result Caching
    Installation and Configuration
    Introduction
    Requirements
    Testing Things Out
    Conclusion
    Common Errors
    22. Advanced Network Manangement
    Features and Benefits
    Remote Server Administration
    Remote Desktop Management
    Remote Management from NoMachines.Com
    Network Logon Script Magic
    Adding printers without user intervention
    Common Errors
    23. System and Account Policies
    Features and Benefits
    Creating and Managing System Policies
    Windows 9x/Me Policies
    Windows NT4 Style Policy Files
    MS Windows 200x / XP Professional Policies
    Managing Account/User Policies
    Samba Editreg Toolset
    Windows NT4/200x
    Samba PDC
    System Startup and Logon Processing Overview
    Common Errors
    Policy Does Not Work
    24. Desktop Profile Management
    Features and Benefits
    Roaming Profiles
    Samba Configuration for Profile Handling
    Windows Client Profile Configuration Information
    Sharing Profiles between W9x/Me and NT4/200x/XP workstations
    Profile Migration from Windows NT4/200x Server to Samba
    Mandatory profiles
    Creating/Managing Group Profiles
    Default Profile for Windows Users
    MS Windows 9x/Me
    MS Windows NT4 Workstation
    MS Windows 200x/XP
    Common Errors
    How does one set up roaming profiles for just one (or a few) user/s or group/s?
    Can NOT use Roaming Profiles
    Changing the default profile
    25. PAM based Distributed Authentication
    Features and Benefits
    Technical Discussion
    PAM Configuration Syntax
    Example System Configurations
    smb.conf PAM Configuration
    Remote CIFS Authentication using winbindd.so
    Password Synchronization using pam_smbpass.so
    Common Errors
    pam_winbind problem
    26. Integrating MS Windows networks with Samba
    Features and Benefits
    Background Information
    Name Resolution in a pure Unix/Linux world
    /etc/hosts
    /etc/resolv.conf
    /etc/host.conf
    /etc/nsswitch.conf
    Name resolution as used within MS Windows networking
    The NetBIOS Name Cache
    The LMHOSTS file
    HOSTS file
    DNS Lookup
    WINS Lookup
    Common Errors
    My Boomerang Won't Come Back
    Very Slow Network Connections
    Samba server name change problem
    27. Unicode/Charsets
    Features and Benefits
    What are charsets and unicode?
    Samba and charsets
    Conversion from old names
    Japanese charsets
    28. Samba Backup Techniques
    Note
    Features and Benefits
    29. High Availability Options
    Note
    PrevUpNext
    Chapter9.MS Windows Network Configuration GuideHomeChapter10.Samba / MS Windows Network Browsing Guide
    diff --git a/docs/htmldocs/pam.html b/docs/htmldocs/pam.html index ba2bf6c922..6fa5727720 100644 --- a/docs/htmldocs/pam.html +++ b/docs/htmldocs/pam.html @@ -1,158 +1,290 @@ - -Configuring PAM for distributed but centrally -managed authentication
    SAMBA Project Documentation
    PrevNext

    Chapter 12. Configuring PAM for distributed but centrally -managed authentication

    12.1. Samba and PAM

    A number of Unix systems (eg: Sun Solaris), as well as the -xxxxBSD family and Linux, now utilize the Pluggable Authentication -Modules (PAM) facility to provide all authentication, -authorization and resource control services. Prior to the -introduction of PAM, a decision to use an alternative to -the system password database (/etc/passwd) -would require the provision of alternatives for all programs that provide -security services. Such a choice would involve provision of -alternatives to such programs as: login, -passwd, chown, etc.

    PAM provides a mechanism that disconnects these security programs -from the underlying authentication/authorization infrastructure. -PAM is configured either through one file /etc/pam.conf (Solaris), -or by editing individual files that are located in /etc/pam.d.

    The following is an example /etc/pam.d/login configuration file. +Chapter25.PAM based Distributed Authentication

    Chapter25.PAM based Distributed Authentication
    PrevPartIII.Advanced ConfigurationNext

    Chapter25.PAM based Distributed Authentication

    John H. Terpstra

    Samba Team

    Stephen Langasek

    May 31, 2003

    Table of Contents

    Features and Benefits
    Technical Discussion
    PAM Configuration Syntax
    Example System Configurations
    smb.conf PAM Configuration
    Remote CIFS Authentication using winbindd.so
    Password Synchronization using pam_smbpass.so
    Common Errors
    pam_winbind problem

    +This chapter you should help you to deploy winbind based authentication on any PAM enabled +Unix/Linux system. Winbind can be used to enable user level application access authentication +from any MS Windows NT Domain, MS Windows 200x Active Directory based domain, or any Samba +based domain environment. It will also help you to configure PAM based local host access +controls that are appropriate to your Samba configuration. +

    +In addition to knowing how to configure winbind into PAM, you will learn generic PAM managment +possibilities and in particular how to deploy tools like pam_smbpass.so to your adavantage. +

    Note

    +The use of Winbind require more than PAM configuration alone. Please refer to the Winbind chapter. +

    Features and Benefits

    +A number of Unix systems (eg: Sun Solaris), as well as the xxxxBSD family and Linux, +now utilize the Pluggable Authentication Modules (PAM) facility to provide all authentication, +authorization and resource control services. Prior to the introduction of PAM, a decision +to use an alternative to the system password database (/etc/passwd) +would require the provision of alternatives for all programs that provide security services. +Such a choice would involve provision of alternatives to such programs as: login, +passwd, chown, etc. +

    +PAM provides a mechanism that disconnects these security programs from the underlying +authentication/authorization infrastructure. PAM is configured either through one file +/etc/pam.conf (Solaris), or by editing individual files that are +located in /etc/pam.d. +

    +On PAM enabled Unix/Linux systems it is an easy matter to configure the system to use any +authentication backend, so long as the appropriate dynamically loadable library modules +are available for it. The backend may be local to the system, or may be centralised on a +remote server. +

    +PAM support modules are available for: +

    /etc/passwd

    -

    + There are several PAM modules that interact with this standard Unix user + database. The most common are called: pam_unix.so, pam_unix2.so, pam_pwdb.so + and pam_userdb.so. +

    Kerberos

    -

    + The pam_krb5.so module allows the use of any Kerberos compliant server. + This tool is used to access MIT Kerberos, Heimdal Kerberos, and potentially + Microsoft Active Directory (if enabled). +

    LDAP

    -

    + The pam_ldap.so module allows the use of any LDAP v2 or v3 compatible backend + server. Commonly used LDAP backend servers include: OpenLDAP v2.0 and v2.1, + Sun ONE iDentity server, Novell eDirectory server, Microsoft Active Directory. +

    NetWare Bindery

    -

    + The pam_ncp_auth.so module allows authentication off any bindery enabled + NetWare Core Protocol based server. +

    SMB Password

    -

    + This module, called pam_smbpass.so, will allow user authentication off + the passdb backend that is configured in the Samba smb.conf file. +

    SMB Server

    -

    + The pam_smb_auth.so module is the original MS Windows networking authentication + tool. This module has been somewhat outdated by the Winbind module. +

    Winbind

    -

    + The pam_winbind.so module allows Samba to obtain authentication from any + MS Windows Domain Controller. It can just as easily be used to authenticate + users for access to any PAM enabled application. +

    RADIUS

    -

    + There is a PAM RADIUS (Remote Access Dial-In User Service) authentication + module. In most cases the administrator will need to locate the source code + for this tool and compile and install it themselves. RADIUS protocols are + used by many routers and terminal servers. +

    +Of the above, Samba provides the pam_smbpasswd.so and the pam_winbind.so modules alone. +

    +Once configured, these permit a remarkable level of flexibility in the location and use +of distributed samba domain controllers that can provide wide are network bandwidth +efficient authentication services for PAM capable systems. In effect, this allows the +deployment of centrally managed and maintained distributed authentication from a single +user account database. +

    Technical Discussion

    +PAM is designed to provide the system administrator with a great deal of flexibility in +configuration of the privilege granting applications of their system. The local +configuration of system security controlled by PAM is contained in one of two places: +either the single system file, /etc/pam.conf; or the /etc/pam.d/ directory. +

    PAM Configuration Syntax

    +In this section we discuss the correct syntax of and generic options respected by entries to these files. +PAM specific tokens in the configuration file are case insensitive. The module paths, however, are case +sensitive since they indicate a file's name and reflect the case dependence of typical file-systems. +The case-sensitivity of the arguments to any given module is defined for each module in turn. +

    +In addition to the lines described below, there are two special characters provided for the convenience +of the system administrator: comments are preceded by a `#' and extend to the next end-of-line; also, +module specification lines may be extended with a `\' escaped newline. +

    +If the PAM authentication module (loadable link library file) is located in the +default location then it is not necessary to specify the path. In the case of +Linux, the default location is /lib/security. If the module +is located outside the default then the path must be specified as: +

    +

    +auth  required  /other_path/pam_strange_module.so
+

    +

    Anatomy of /etc/pam.d Entries

    +The remaining information in this subsection was taken from the documentation of the Linux-PAM +project. For more information on PAM, see + +http://ftp.kernel.org/pub/linux/libs/pam The Official Linux-PAM home page. +

    +A general configuration line of the /etc/pam.conf file has the following form: +

    +

    +service-name   module-type   control-flag   module-path   args
+

    +

    +Below, we explain the meaning of each of these tokens. The second (and more recently adopted) +way of configuring Linux-PAM is via the contents of the /etc/pam.d/ directory. +Once we have explained the meaning of the above tokens, we will describe this method. +

    service-name

    -

    + The name of the service associated with this entry. Frequently the service name is the conventional + name of the given application. For example, `ftpd', `rlogind' and `su', etc. . +

    + There is a special service-name, reserved for defining a default authentication mechanism. It has + the name `OTHER' and may be specified in either lower or upper case characters. Note, when there + is a module specified for a named service, the `OTHER' entries are ignored. +

    module-type

    -

    + One of (currently) four types of module. The four types are as follows: +

    • + auth: this module type provides two aspects of authenticating the user. + Firstly, it establishes that the user is who they claim to be, by instructing the application + to prompt the user for a password or other means of identification. Secondly, the module can + grant group membership (independently of the /etc/groups file discussed + above) or other privileges through its credential granting properties. +

    • + account: this module performs non-authentication based account management. + It is typically used to restrict/permit access to a service based on the time of day, currently + available system resources (maximum number of users) or perhaps the location of the applicant + user `root' login only on the console. +

    • + session: primarily, this module is associated with doing things that need + to be done for the user before/after they can be given service. Such things include the loggin + of information concerning the opening/closing of some data exchange with a user, mountin + directories, etc. +

    • + password: this last module type is required for updating the authentication + token associated with the user. Typically, there is one module for each `challenge/response' + based authentication (auth) module-type. +

    control-flag

    -

    + The control-flag is used to indicate how the PAM library will react to the success or failure of the + module it is associated with. Since modules can be stacked (modules of the same type execute in series, + one after another), the control-flags determine the relative importance of each module. The application + is not made aware of the individual success or failure of modules listed in the + /etc/pam.conf file. Instead, it receives a summary success or fail response from + the Linux-PAM library. The order of execution of these modules is that of the entries in the + /etc/pam.conf file; earlier entries are executed before later ones. + As of Linux-PAM v0.60, this control-flag can be defined with one of two syntaxes. +

    + The simpler (and historical) syntax for the control-flag is a single keyword defined to indicate the + severity of concern associated with the success or failure of a specific module. There are four such + keywords: required, requisite, sufficient and optional. +

    + The Linux-PAM library interprets these keywords in the following manner: +

    • + required: this indicates that the success of the module is required for the + module-type facility to succeed. Failure of this module will not be apparent to the user until all + of the remaining modules (of the same module-type) have been executed. +

    • + requisite: like required, however, in the case that such a module returns a + failure, control is directly returned to the application. The return value is that associated with + the first required or requisite module to fail. Note, this flag can be used to protect against the + possibility of a user getting the opportunity to enter a password over an unsafe medium. It is + conceivable that such behavior might inform an attacker of valid accounts on a system. This + possibility should be weighed against the not insignificant concerns of exposing a sensitive + password in a hostile environment. +

    • + sufficient: the success of this module is deemed `sufficient' to satisfy + the Linux-PAM library that this module-type has succeeded in its purpose. In the event that no + previous required module has failed, no more `stacked' modules of this type are invoked. (Note, + in this case subsequent required modules are not invoked.). A failure of this module is not deemed + as fatal to satisfying the application that this module-type has succeeded. +

    • + optional: as its name suggests, this control-flag marks the module as not + being critical to the success or failure of the user's application for service. In general, + Linux-PAM ignores such a module when determining if the module stack will succeed or fail. + However, in the absence of any definite successes or failures of previous or subsequent stacked + modules this module will determine the nature of the response to the application. One example of + this latter case, is when the other modules return something like PAM_IGNORE. +

    + The more elaborate (newer) syntax is much more specific and gives the administrator a great deal of control + over how the user is authenticated. This form of the control flag is delimeted with square brackets and + consists of a series of value=action tokens: + 

    +		[value1=action1 value2=action2 ...]
+

    + Here, valueI is one of the following return values: success; open_err; symbol_err; service_err; + system_err; buf_err; perm_denied; auth_err; cred_insufficient; authinfo_unavail; user_unknown; maxtries; + new_authtok_reqd; acct_expired; session_err; cred_unavail; cred_expired; cred_err; no_module_data; conv_err; + authtok_err; authtok_recover_err; authtok_lock_busy; authtok_disable_aging; try_again; ignore; abort; + authtok_expired; module_unknown; bad_item; and default. The last of these (default) can be used to set + the action for those return values that are not explicitly defined. +

    + The actionI can be a positive integer or one of the following tokens: ignore; ok; done; bad; die; and reset. + A positive integer, J, when specified as the action, can be used to indicate that the next J modules of the + current module-type will be skipped. In this way, the administrator can develop a moderately sophisticated + stack of modules with a number of different paths of execution. Which path is taken can be determined by the + reactions of individual modules. +

    • + ignore: when used with a stack of modules, the module's return status will not + contribute to the return code the application obtains. +

    • + bad: this action indicates that the return code should be thought of as indicative + of the module failing. If this module is the first in the stack to fail, its status value will be used + for that of the whole stack. +

    • + die: equivalent to bad with the side effect of terminating the module stack and + PAM immediately returning to the application. +

    • + ok: this tells PAM that the administrator thinks this return code should + contribute directly to the return code of the full stack of modules. In other words, if the former + state of the stack would lead to a return of PAM_SUCCESS, the module's return code will override + this value. Note, if the former state of the stack holds some value that is indicative of a modules + failure, this 'ok' value will not be used to override that value. +

    • + done: equivalent to ok with the side effect of terminating the module stack and + PAM immediately returning to the application. +

    • + reset: clear all memory of the state of the module stack and start again with + the next stacked module. +

    + Each of the four keywords: required; requisite; sufficient; and optional, have an equivalent expression in + terms of the [...] syntax. They are as follows: +

    +

    • + required is equivalent to [success=ok new_authtok_reqd=ok ignore=ignore default=bad] +

    • + requisite is equivalent to [success=ok new_authtok_reqd=ok ignore=ignore default=die] +

    • + sufficient is equivalent to [success=done new_authtok_reqd=done default=ignore] +

    • + optional is equivalent to [success=ok new_authtok_reqd=ok default=ignore] +

    +

    + Just to get a feel for the power of this new syntax, here is a taste of what you can do with it. With Linux-PAM-0.63, + the notion of client plug-in agents was introduced. This is something that makes it possible for PAM to support + machine-machine authentication using the transport protocol inherent to the client/server application. With the + [ ... value=action ... ] control syntax, it is possible for an application to be configured + to support binary prompts with compliant clients, but to gracefully fall over into an alternative authentication + mode for older, legacy, applications. +

    module-path

    -

    + The path-name of the dynamically loadable object file; the pluggable module itself. If the first character of the + module path is `/', it is assumed to be a complete path. If this is not the case, the given module path is appended + to the default module path: /lib/security (but see the notes above). +

    + The args are a list of tokens that are passed to the module when it is invoked. Much like arguments to a typical + Linux shell command. Generally, valid arguments are optional and are specific to any given module. Invalid arguments + are ignored by a module, however, when encountering an invalid argument, the module is required to write an error + to syslog(3). For a list of generic options see the next section. +

    + Note, if you wish to include spaces in an argument, you should surround that argument with square brackets. For example: + 

    +squid auth required pam_mysql.so user=passwd_query passwd=mada \
+        db=eminence [query=select user_name from internet_service where \
+                     user_name='%u' and password=PASSWORD('%p') and \
+                     service='web_proxy']
+

    + Note, when using this convention, you can include `[' characters inside the string, and if you wish to include a `]' + character inside the string that will survive the argument parsing, you should use `\['. In other words: + 

    +[..[..\]..]    -->   ..[..]..
+

    + Any line in (one of) the configuration file(s), that is not formatted correctly, will generally tend (erring on the + side of caution) to make the authentication process fail. A corresponding error is written to the system log files + with a call to syslog(3). +

    Example System Configurations

    +The following is an example /etc/pam.d/login configuration file. This example had all options been uncommented is probably not usable as it stacks many conditions before allowing successful completion of the login process. Essentially all conditions can be disabled -by commenting them out except the calls to pam_pwdb.so.

    #%PAM-1.0
+by commenting them out except the calls to pam_pwdb.so.
+
    PAM: original login config
    +#%PAM-1.0
 # The PAM configuration file for the `login' service
 #
-auth 		required	pam_securetty.so
-auth 		required	pam_nologin.so
-# auth 		required	pam_dialup.so
-# auth 		optional	pam_mail.so
-auth		required	pam_pwdb.so shadow md5
-# account    	requisite  	pam_time.so
-account		required	pam_pwdb.so
-session		required	pam_pwdb.so
-# session 	optional	pam_lastlog.so
-# password   	required   	pam_cracklib.so retry=3
-password	required	pam_pwdb.so shadow md5
    PAM allows use of replacable modules. Those available on a 
-sample system include:
    $ /bin/ls /lib/security
+auth         required    pam_securetty.so
+auth         required    pam_nologin.so
+# auth       required    pam_dialup.so
+# auth       optional    pam_mail.so
+auth         required    pam_pwdb.so shadow md5
+# account    requisite   pam_time.so
+account      required    pam_pwdb.so
+session      required    pam_pwdb.so
+# session    optional    pam_lastlog.so
+# password   required    pam_cracklib.so retry=3
+password     required    pam_pwdb.so shadow md5
+
    PAM: login using pam_smbpass
    
+PAM allows use of replacable modules. Those available on a sample system include:
+
    $/bin/ls /lib/security
+
     pam_access.so    pam_ftp.so          pam_limits.so     
 pam_ncp_auth.so  pam_rhosts_auth.so  pam_stress.so     
 pam_cracklib.so  pam_group.so        pam_listfile.so   
@@ -164,262 +296,227 @@ pam_pwdb.so      pam_shells.so       pam_unix.so
 pam_env.so       pam_ldap.so         pam_motd.so       
 pam_radius.so    pam_smbpass.so      pam_unix_acct.so  
 pam_wheel.so     pam_unix_auth.so    pam_unix_passwd.so
-pam_userdb.so    pam_warn.so         pam_unix_session.so
    The following example for the login program replaces the use of 
-the pam_pwdb.so module which uses the system 
-password database (/etc/passwd,
-/etc/shadow, /etc/group) with 
-the module pam_smbpass.so which uses the Samba 
+pam_userdb.so    pam_warn.so         pam_unix_session.so
+

    +The following example for the login program replaces the use of +the pam_pwdb.so module which uses the system +password database (/etc/passwd, +/etc/shadow, /etc/group) with +the module pam_smbpass.so which uses the Samba database which contains the Microsoft MD4 encrypted password hashes. This database is stored in either -/usr/local/samba/private/smbpasswd, -/etc/samba/smbpasswd, or in -/etc/samba.d/smbpasswd, depending on the +/usr/local/samba/private/smbpasswd, +/etc/samba/smbpasswd, or in +/etc/samba.d/smbpasswd, depending on the Samba implementation for your Unix/Linux system. The -pam_smbpass.so module is provided by +pam_smbpass.so module is provided by Samba version 2.2.1 or later. It can be compiled by specifying the ---with-pam_smbpass options when running Samba's -configure script. For more information -on the pam_smbpass module, see the documentation -in the source/pam_smbpass directory of the Samba -source distribution.

    #%PAM-1.0
+--with-pam_smbpass options when running Samba's
+configure script.  For more information
+on the pam_smbpass module, see the documentation
+in the source/pam_smbpass directory of the Samba 
+source distribution.
+
    +#%PAM-1.0
 # The PAM configuration file for the `login' service
 #
-auth		required	pam_smbpass.so nodelay
-account		required	pam_smbpass.so nodelay
-session		required	pam_smbpass.so nodelay
-password	required	pam_smbpass.so nodelay
    The following is the PAM configuration file for a particular 
-Linux system. The default condition uses pam_pwdb.so.
    #%PAM-1.0
+auth        required    pam_smbpass.so nodelay
+account     required    pam_smbpass.so nodelay
+session     required    pam_smbpass.so nodelay
+password    required    pam_smbpass.so nodelay
+
    
+The following is the PAM configuration file for a particular 
+Linux system. The default condition uses pam_pwdb.so.
+
    +#%PAM-1.0
 # The PAM configuration file for the `samba' service
 #
-auth       required     /lib/security/pam_pwdb.so nullok nodelay shadow audit
-account    required     /lib/security/pam_pwdb.so audit nodelay
-session    required     /lib/security/pam_pwdb.so nodelay
-password   required     /lib/security/pam_pwdb.so shadow md5
    In the following example the decision has been made to use the 
+auth       required     pam_pwdb.so nullok nodelay shadow audit
+account    required     pam_pwdb.so audit nodelay
+session    required     pam_pwdb.so nodelay
+password   required     pam_pwdb.so shadow md5
+

    +In the following example the decision has been made to use the smbpasswd database even for basic samba authentication. Such a decision could also be made for the passwd program and would thus allow the smbpasswd passwords to be changed using the passwd -program.

    #%PAM-1.0
+program.
+
    +#%PAM-1.0
 # The PAM configuration file for the `samba' service
 #
-auth       required     /lib/security/pam_smbpass.so nodelay
-account    required     /lib/security/pam_pwdb.so audit nodelay
-session    required     /lib/security/pam_pwdb.so nodelay
-password   required     /lib/security/pam_smbpass.so nodelay smbconf=/etc/samba.d/smb.conf
    Note: PAM allows stacking of authentication mechanisms. It is 
+auth       required     pam_smbpass.so nodelay
+account    required     pam_pwdb.so audit nodelay
+session    required     pam_pwdb.so nodelay
+password   required     pam_smbpass.so nodelay smbconf=/etc/samba.d/smb.conf
+

    Note

    PAM allows stacking of authentication mechanisms. It is also possible to pass information obtained within one PAM module through to the next module in the PAM stack. Please refer to the documentation for your particular system implementation for details regarding the specific capabilities of PAM in this environment. Some Linux implmentations also -provide the pam_stack.so module that allows all +provide the pam_stack.so module that allows all authentication to be configured in a single central file. The -pam_stack.so method has some very devoted followers +pam_stack.so method has some very devoted followers on the basis that it allows for easier administration. As with all issues in life though, every decision makes trade-offs, so you may want examine the -PAM documentation for further helpful information.

    12.2. Distributed Authentication

    The astute administrator will realize from this that the -combination of pam_smbpass.so, -winbindd, and rsync (see -http://rsync.samba.org/) -will allow the establishment of a centrally managed, distributed -user/password database that can also be used by all -PAM (eg: Linux) aware programs and applications. This arrangement -can have particularly potent advantages compared with the -use of Microsoft Active Directory Service (ADS) in so far as -reduction of wide area network authentication traffic.

    12.3. PAM Configuration in smb.conf

    There is an option in smb.conf called obey pam restrictions. -The following is from the on-line help for this option in SWAT;

    When Samba 2.2 is configure to enable PAM support (i.e. ---with-pam), this parameter will +PAM documentation for further helpful information. +

    smb.conf PAM Configuration

    +There is an option in smb.conf called obey pam restrictions. +The following is from the on-line help for this option in SWAT; +

    +When Samba-3 is configured to enable PAM support (i.e. +--with-pam), this parameter will control whether or not Samba should obey PAM's account and session management directives. The default behavior is to use PAM for clear text authentication only and to ignore any account or session management. Note that Samba always ignores PAM for authentication in the case of -encrypt passwords = yes. +encrypt passwords = yes. The reason is that PAM modules cannot support the challenge/response authentication mechanism needed in the presence of SMB -password encryption.

    Default: obey pam restrictions = no

    PrevHomeNext
    UNIX Permission Bits and Windows NT Access Control ListsUpHosting a Microsoft Distributed File System tree on Samba
    \ No newline at end of file +password encryption. +

    Default: obey pam restrictions = no

    Remote CIFS Authentication using winbindd.so

    +All operating systems depend on the provision of users credentials accecptable to the platform. +Unix requires the provision of a user identifier (UID) as well as a group identifier (GID). +These are both simple integer type numbers that are obtained from a password backend such +as /etc/passwd. +

    +Users and groups on a Windows NT server are assigned a relative id (rid) which is unique for +the domain when the user or group is created. To convert the Windows NT user or group into +a unix user or group, a mapping between rids and unix user and group ids is required. This +is one of the jobs that winbind performs. +

    +As winbind users and groups are resolved from a server, user and group ids are allocated +from a specified range. This is done on a first come, first served basis, although all +existing users and groups will be mapped as soon as a client performs a user or group +enumeration command. The allocated unix ids are stored in a database file under the Samba +lock directory and will be remembered. +

    +The astute administrator will realize from this that the combination of pam_smbpass.so, +winbindd, and a distributed passdb backend, such as ldap, will allow the establishment of a +centrally managed, distributed user/password database that can also be used by all PAM (eg: Linux) aware +programs and applications. This arrangement can have particularly potent advantages compared with the use of +Microsoft Active Directory Service (ADS) in so far as reduction of wide area network authentication traffic. +

    Warning

    +The rid to unix id database is the only location where the user and group mappings are +stored by winbindd. If this file is deleted or corrupted, there is no way for winbindd +to determine which user and group ids correspond to Windows NT user and group rids. +

    Password Synchronization using pam_smbpass.so

    +pam_smbpass is a PAM module which can be used on conforming systems to +keep the smbpasswd (Samba password) database in sync with the unix +password file. PAM (Pluggable Authentication Modules) is an API supported +under some Unices, such as Solaris, HPUX and Linux, that provides a +generic interface to authentication mechanisms. +

    +This module authenticates a local smbpasswd user database. If you require +support for authenticating against a remote SMB server, or if you're +concerned about the presence of suid root binaries on your system, it is +recommended that you use pam_winbind instead. +

    +Options recognized by this module are as follows: +

    Table25.1.Options recognized by pam_smbpass

    debuglog more debugging info
    auditlike debug, but also logs unknown usernames
    use_first_passdon't prompt the user for passwords; take them from PAM_ items instead
    try_first_passtry to get the password from a previous PAM module, fall back to prompting the user
    use_authtoklike try_first_pass, but *fail* if the new PAM_AUTHTOK has not been previously set. (intended for stacking password modules only)
    not_set_passdon't make passwords used by this module available to other modules.
    nodelaydon't insert ~1 second delays on authentication failure.
    nulloknull passwords are allowed.
    nonullnull passwords are not allowed. Used to override the Samba configuration.
    migrateonly meaningful in an "auth" context; used to update smbpasswd file with a password used for successful authentication.
    smbconf=filespecify an alternate path to the smb.conf file.

    +

    +Thanks go to the following people: +

    Andrew Morgan, for providing the Linux-PAM + framework, without which none of this would have happened
    Christian Gafton and Andrew Morgan again, for the + pam_pwdb module upon which pam_smbpass was originally based
    Luke Leighton for being receptive to the idea, + and for the occasional good-natured complaint about the project's status + that keep me working on it :)

    . +

    +The following are examples of the use of pam_smbpass.so in the format of Linux +/etc/pam.d/ files structure. Those wishing to implement this +tool on other platforms will need to adapt this appropriately. +

    Password Synchronisation Configuration

    +A sample PAM configuration that shows the use of pam_smbpass to make +sure private/smbpasswd is kept in sync when /etc/passwd (/etc/shadow) +is changed. Useful when an expired password might be changed by an +application (such as ssh). +

    +#%PAM-1.0
+# password-sync
+#
+auth       requisite    pam_nologin.so
+auth       required     pam_unix.so
+account    required     pam_unix.so
+password   requisite    pam_cracklib.so retry=3
+password   requisite    pam_unix.so shadow md5 use_authtok try_first_pass
+password   required     pam_smbpass.so nullok use_authtok try_first_pass
+session    required     pam_unix.so
+

    Password Migration Configuration

    +A sample PAM configuration that shows the use of pam_smbpass to migrate +from plaintext to encrypted passwords for Samba. Unlike other methods, +this can be used for users who have never connected to Samba shares: +password migration takes place when users ftp in, login using ssh, pop +their mail, etc. +

    +#%PAM-1.0
+# password-migration
+#
+auth       requisite   pam_nologin.so
+# pam_smbpass is called IF pam_unix succeeds.
+auth       requisite   pam_unix.so
+auth       optional    pam_smbpass.so migrate
+account    required    pam_unix.so
+password   requisite   pam_cracklib.so retry=3
+password   requisite   pam_unix.so shadow md5 use_authtok try_first_pass
+password   optional    pam_smbpass.so nullok use_authtok try_first_pass
+session    required    pam_unix.so
+

    Mature Password Configuration

    +A sample PAM configuration for a 'mature' smbpasswd installation. +private/smbpasswd is fully populated, and we consider it an error if +the smbpasswd doesn't exist or doesn't match the Unix password. +

    +#%PAM-1.0
+# password-mature
+#
+auth       requisite    pam_nologin.so
+auth       required     pam_unix.so
+account    required     pam_unix.so
+password   requisite    pam_cracklib.so retry=3
+password   requisite    pam_unix.so shadow md5 use_authtok try_first_pass
+password   required     pam_smbpass.so use_authtok use_first_pass
+session    required     pam_unix.so
+

    Kerberos Password Integration Configuration

    +A sample PAM configuration that shows pam_smbpass used together with +pam_krb5. This could be useful on a Samba PDC that is also a member of +a Kerberos realm. +

    +#%PAM-1.0
+# kdc-pdc
+#
+auth       requisite   pam_nologin.so
+auth       requisite   pam_krb5.so
+auth       optional    pam_smbpass.so migrate
+account    required    pam_krb5.so
+password   requisite   pam_cracklib.so retry=3
+password   optional    pam_smbpass.so nullok use_authtok try_first_pass
+password   required    pam_krb5.so use_authtok try_first_pass
+session    required    pam_krb5.so
+

    Common Errors

    +PAM can be a very fickle and sensitive to configuration glitches. Here we look at a few cases from +the Samba mailing list. +

    pam_winbind problem

    + I have the following PAM configuration: +

    +

    +auth required /lib/security/pam_securetty.so
+auth sufficient /lib/security/pam_winbind.so
+auth sufficient /lib/security/pam_unix.so use_first_pass nullok
+auth required /lib/security/pam_stack.so service=system-auth
+auth required /lib/security/pam_nologin.so
+account required /lib/security/pam_stack.so service=system-auth
+account required /lib/security/pam_winbind.so
+password required /lib/security/pam_stack.so service=system-auth
+

    +

    + When I open a new console with [ctrl][alt][F1], then I cant log in with my user "pitie". + I've tried with user "scienceu+pitie" also. +

    + Answer: The problem may lie with your inclusion of pam_stack.so + service=system-auth. That file often contains a lot of stuff that may + duplicate what you're already doing. Try commenting out the pam_stack lines + for auth and account and see if things work. If they do, look at + /etc/pam.d/system-auth and copy only what you need from it into your + /etc/pam.d/login file. Alternatively, if you want all services to use + winbind, you can put the winbind-specific stuff in /etc/pam.d/system-auth. +

    PrevUpNext
    Chapter24.Desktop Profile ManagementHomeChapter26.Integrating MS Windows networks with Samba
    diff --git a/docs/htmldocs/pdbedit.8.html b/docs/htmldocs/pdbedit.8.html index 7b85e2bb80..d77f8fcec2 100644 --- a/docs/htmldocs/pdbedit.8.html +++ b/docs/htmldocs/pdbedit.8.html @@ -1,606 +1,136 @@ - -pdbedit

    pdbedit

    Name

    pdbedit -- manage the SAM database

    DESCRIPTION

    This tool is part of the Samba suite.

    The pdbedit program is used to manage the users accounts - stored in the sam database and can only be run by root.

    The pdbedit tool uses the passdb modular interface and is +pdbedit

    Name

    pdbedit — manage the SAM database

    Synopsis

    pdbedit [-L] [-v] [-w] [-u username] [-f fullname] [-h homedir] [-D drive] [-S script] [-p profile] [-a] [-m] [-x] [-i passdb-backend] [-e passdb-backend] [-b passdb-backend] [-g] [-d debuglevel] [-s configfile] [-P account-policy] [-C value]

    DESCRIPTION

    This tool is part of the Samba(7) suite.

    The pdbedit program is used to manage the users accounts + stored in the sam database and can only be run by root.

    The pdbedit tool uses the passdb modular interface and is independent from the kind of users database used (currently there are smbpasswd, ldap, nis+ and tdb based and more can be added - without changing the tool).

    There are five main ways to use pdbedit: adding a user account, + without changing the tool).

    There are five main ways to use pdbedit: adding a user account, removing a user account, modifing a user account, listing user - accounts, importing users accounts.

    OPTIONS

    -l

    This option lists all the user accounts + accounts, importing users accounts.

    OPTIONS

    -L

    This option lists all the user accounts present in the users database. This option prints a list of user/uid pairs separated by - the ':' character.

    Example: pdbedit -l

    		sorce:500:Simo Sorce
-		samba:45:Test User
-

    -v

    This option enables the verbose listing format. + the ':' character.

    Example: pdbedit -L

    +sorce:500:Simo Sorce
+samba:45:Test User
+
    -v

    This option enables the verbose listing format. It causes pdbedit to list the users in the database, printing - out the account fields in a descriptive format.

    Example: pdbedit -l -v

    		---------------
-		username:       sorce
-		user ID/Group:  500/500
-		user RID/GRID:  2000/2001
-		Full Name:      Simo Sorce
-		Home Directory: \\BERSERKER\sorce
-		HomeDir Drive:  H:
-		Logon Script:   \\BERSERKER\netlogon\sorce.bat
-		Profile Path:   \\BERSERKER\profile
-		---------------
-		username:       samba
-		user ID/Group:  45/45
-		user RID/GRID:  1090/1091
-		Full Name:      Test User
-		Home Directory: \\BERSERKER\samba
-		HomeDir Drive:  
-		Logon Script:   
-		Profile Path:   \\BERSERKER\profile
-

    -w

    This option sets the "smbpasswd" listing format. + out the account fields in a descriptive format.

    Example: pdbedit -l -v

    +---------------
+username:       sorce
+user ID/Group:  500/500
+user RID/GRID:  2000/2001
+Full Name:      Simo Sorce
+Home Directory: \\BERSERKER\sorce
+HomeDir Drive:  H:
+Logon Script:   \\BERSERKER\netlogon\sorce.bat
+Profile Path:   \\BERSERKER\profile
+---------------
+username:       samba
+user ID/Group:  45/45
+user RID/GRID:  1090/1091
+Full Name:      Test User
+Home Directory: \\BERSERKER\samba
+HomeDir Drive:  
+Logon Script:   
+Profile Path:   \\BERSERKER\profile
+
    -w

    This option sets the "smbpasswd" listing format. It will make pdbedit list the users in the database, printing out the account fields in a format compatible with the - smbpasswd file format. (see the smbpasswd(5) for details)

    Example: pdbedit -l -w

    		sorce:500:508818B733CE64BEAAD3B435B51404EE:D2A2418EFC466A8A0F6B1DBB5C3DB80C:[UX         ]:LCT-00000000:
-		samba:45:0F2B255F7B67A7A9AAD3B435B51404EE:BC281CE3F53B6A5146629CD4751D3490:[UX         ]:LCT-3BFA1E8D:
-

    -u username

    This option specifies the username to be + smbpasswd file format. (see the + smbpasswd(5) for details)

    Example: pdbedit -L -w

    +sorce:500:508818B733CE64BEAAD3B435B51404EE:D2A2418EFC466A8A0F6B1DBB5C3DB80C:[UX         ]:LCT-00000000:
+samba:45:0F2B255F7B67A7A9AAD3B435B51404EE:BC281CE3F53B6A5146629CD4751D3490:[UX         ]:LCT-3BFA1E8D:
+
    -u username

    This option specifies the username to be used for the operation requested (listing, adding, removing). - It is required in add, remove and modify - operations and optional in list - operations.

    -f fullname

    This option can be used while adding or + It is required in add, remove and modify + operations and optional in list + operations.

    -f fullname

    This option can be used while adding or modifing a user account. It will specify the user's full - name.

    Example: -f "Simo Sorce"

    -h homedir

    This option can be used while adding or + name.

    Example: -f "Simo Sorce"

    -h homedir

    This option can be used while adding or modifing a user account. It will specify the user's home - directory network path.

    Example: -h "\\\\BERSERKER\\sorce" -

    -D drive

    This option can be used while adding or + directory network path.

    Example: -h "\\\\BERSERKER\\sorce" +

    -D drive

    This option can be used while adding or modifing a user account. It will specify the windows drive - letter to be used to map the home directory.

    Example: -d "H:" -

    -S script

    This option can be used while adding or + letter to be used to map the home directory.

    Example: -d "H:" +

    -S script

    This option can be used while adding or modifing a user account. It will specify the user's logon - script path.

    Example: -s "\\\\BERSERKER\\netlogon\\sorce.bat" -

    -p profile

    This option can be used while adding or + script path.

    Example: -s "\\\\BERSERKER\\netlogon\\sorce.bat" +

    -p profile

    This option can be used while adding or modifing a user account. It will specify the user's profile - directory.

    Example: -p "\\\\BERSERKER\\netlogon" -

    -a

    This option is used to add a user into the + directory.

    Example: -p "\\\\BERSERKER\\netlogon" +

    -G SID|rid

    + This option can be used while adding or modifying a user account. It + will specify the users' new primary group SID (Security Identifier) or + rid.

    Example: -G S-1-5-21-2447931902-1787058256-3961074038-1201

    -U SID|rid

    + This option can be used while adding or modifying a user account. It + will specify the users' new SID (Security Identifier) or + rid.

    Example: -U S-1-5-21-2447931902-1787058256-3961074038-5004

    -c account-control

    This option can be used while adding or modifying a user + account. It will specify the users' account control property. Possible + flags that can be set are: N, D, H, L, X. +

    Example: -c "[X ]"

    -a

    This option is used to add a user into the database. This command needs a user name specified with the -u switch. When adding a new user, pdbedit will also - ask for the password to be used.

    Example: pdbedit -a -u sorce - 
    new password:
-		retype new password
    -

    -m

    This option may only be used in conjunction - with the -a option. It will make + ask for the password to be used.

    Example: pdbedit -a -u sorce +

    new password:
+retype new password
+

    +

    -r

    This option is used to modify an existing user + in the database. This command needs a user name specified with the -u + switch. Other options can be specified to modify the properties of + the specified user. This flag is kept for backwards compatibility, but + it is no longer necessary to specify it. +

    -m

    This option may only be used in conjunction + with the -a option. It will make pdbedit to add a machine trust account instead of a user - account (-u username will provide the machine name).

    Example: pdbedit -a -m -u w2k-wks -

    -x

    This option causes pdbedit to delete an account + account (-u username will provide the machine name).

    Example: pdbedit -a -m -u w2k-wks +

    -x

    This option causes pdbedit to delete an account from the database. It needs a username specified with the - -u switch.

    Example: pdbedit -x -u bob

    -i passdb-backend

    Use a different passdb backend to retrieve users + -u switch.

    Example: pdbedit -x -u bob

    -i passdb-backend

    Use a different passdb backend to retrieve users than the one specified in smb.conf. Can be used to import data into - your local user database.

    This option will ease migration from one passdb backend to - another.

    Example: pdbedit -i smbpasswd:/etc/smbpasswd.old -

    -e passdb-backend

    Exports all currently available users to the - specified password database backend.

    This option will ease migration from one passdb backend to - another and will ease backing up.

    Example: pdbedit -e smbpasswd:/root/samba-users.backup

    -g

    If you specify -g, - then -i in-backend -e out-backend - applies to the group mapping instead of the user database. -

    This option will ease migration from one passdb backend to - another and will ease backing up.

    -b passdb-backend

    Use a different default passdb backend.

    Example: pdbedit -b xml:/root/pdb-backup.xml -l

    -P account-policy

    Display an account policy

    Valid policies are: minimum password age, reset count minutes, disconnect time, + your local user database.

    This option will ease migration from one passdb backend to + another.

    Example: pdbedit -i smbpasswd:/etc/smbpasswd.old +

    -e passdb-backend

    Exports all currently available users to the + specified password database backend.

    This option will ease migration from one passdb backend to + another and will ease backing up.

    Example: pdbedit -e smbpasswd:/root/samba-users.backup

    -g

    If you specify -g, + then -i in-backend -e out-backend + applies to the group mapping instead of the user database.

    This option will ease migration from one passdb backend to + another and will ease backing up.

    -b passdb-backend

    Use a different default passdb backend.

    Example: pdbedit -b xml:/root/pdb-backup.xml -l

    -P account-policy

    Display an account policy

    Valid policies are: minimum password age, reset count minutes, disconnect time, user must logon to change password, password history, lockout duration, min password length, - maximum password age and bad lockout attempt.

    Example: pdbedit -P "bad lockout attempt"

    		account policy value for bad lockout attempt is 0
-

    -V account-policy-value

    Sets an account policy to a specified value. + maximum password age and bad lockout attempt.

    Example: pdbedit -P "bad lockout attempt"

    +account policy value for bad lockout attempt is 0
+
    -C account-policy-value

    Sets an account policy to a specified value. This option may only be used in conjunction - with the -P option. -

    Example: pdbedit -P "bad lockout attempt" -V 3

    		account policy value for bad lockout attempt was 0
-		account policy value for bad lockout attempt is now 3
-

    -d|--debug=debuglevel

    debuglevel is an integer + with the -P option. +

    Example: pdbedit -P "bad lockout attempt" -C 3

    +account policy value for bad lockout attempt was 0
+account policy value for bad lockout attempt is now 3
+
    -h|--help

    Print a summary of command line options. +

    -V

    Prints the version number for +smbd.

    -s <configuration file>

    The file specified contains the +configuration details required by the server. The +information in this file includes server-specific +information such as what printcap file to use, as well +as descriptions of all the services that the server is +to provide. See +smb.conf(5) for more information. +The default configuration file name is determined at +compile time.

    -d|--debug=debuglevel

    debuglevel is an integer from 0 to 10. The default value if this parameter is -not specified is zero.

    The higher this value, the more detail will be +not specified is zero.

    The higher this value, the more detail will be logged to the log files about the activities of the server. At level 0, only critical errors and serious warnings will be logged. Level 1 is a reasonable level for day to day running - it generates a small amount of -information about operations carried out.

    Levels above 1 will generate considerable +information about operations carried out.

    Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem. Levels above 3 are designed for use only by developers and generate HUGE amounts of log -data, most of which is extremely cryptic.

    Note that specifying this parameter here will -override the log -level parameter in the smb.conf(5) file.

    -h|--help

    Print a summary of command line options.

    -s <configuration file>

    The file specified contains the -configuration details required by the server. The -information in this file includes server-specific -information such as what printcap file to use, as well -as descriptions of all the services that the server is -to provide. See smb.conf(5) for more information. -The default configuration file name is determined at -compile time.

    NOTES

    This command may be used only by root.

    VERSION

    This man page is correct for version 2.2 of - the Samba suite.

    SEE ALSO

    smbpasswd(8), - samba(7) -

    AUTHOR

    The original Samba software and related utilities +data, most of which is extremely cryptic.

    Note that specifying this parameter here will +override the log +level parameter in the +smb.conf(5) file.

    -l|--logfile=logbasename

    File name for log/debug files. The extension +".client" will be appended. The log file is +never removed by the client. +

    NOTES

    This command may be used only by root.

    VERSION

    This man page is correct for version 3.0 of + the Samba suite.

    SEE ALSO

    smbpasswd(5), samba(7)

    AUTHOR

    The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar - to the way the Linux kernel is developed.

    The original Samba man pages were written by Karl Auer. - The man page sources were converted to YODL format (another - excellent piece of Open Source software, available at - ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 - release by Jeremy Allison. The conversion to DocBook for - Samba 2.2 was done by Gerald Carter

    \ No newline at end of file + to the way the Linux kernel is developed.

    diff --git a/docs/htmldocs/printing.html b/docs/htmldocs/printing.html index 46ebbcdf84..62856e7ecf 100644 --- a/docs/htmldocs/printing.html +++ b/docs/htmldocs/printing.html @@ -1,1386 +1,2240 @@ - -Printing Support
    SAMBA Project Documentation
    PrevNext

    Chapter 14. Printing Support

    14.1. Introduction

    Beginning with the 2.2.0 release, Samba supports -the native Windows NT printing mechanisms implemented via -MS-RPC (i.e. the SPOOLSS named pipe). Previous versions of -Samba only supported LanMan printing calls.

    The additional functionality provided by the new -SPOOLSS support includes:

    There has been some initial confusion about what all this means -and whether or not it is a requirement for printer drivers to be -installed on a Samba host in order to support printing from Windows -clients. As a side note, Samba does not use these drivers in any way to process -spooled files. They are utilized entirely by the clients.

    The following MS KB article, may be of some help if you are dealing with -Windows 2000 clients: How to Add Printers with No User -Interaction in Windows 2000

    http://support.microsoft.com/support/kb/articles/Q189/1/05.ASP

    14.2. Configuration

    [print$] vs. [printer$]
     

    Previous versions of Samba recommended using a share named [printer$]. -This name was taken from the printer$ service created by Windows 9x -clients when a printer was shared. Windows 9x printer servers always have -a printer$ service which provides read-only access via no -password in order to support printer driver downloads.

    However, the initial implementation allowed for a -parameter named printer driver location -to be used on a per share basis to specify the location of -the driver files associated with that printer. Another -parameter named printer driver provided -a means of defining the printer driver name to be sent to -the client.

    14.2.1. Creating [print$]

    In order to support the uploading of printer driver -files, you must first configure a file share named [print$]. -The name of this share is hard coded in Samba's internals so -the name is very important (print$ is the service used by -Windows NT print servers to provide support for printer driver -download).

    You should modify the server's smb.conf file to add the global -parameters and to create the -following file share (of course, some of the parameter values, -such as 'path' are arbitrary and should be replaced with -appropriate values for your site):

    [global]
-    ; members of the ntadmin group should be able
-    ; to add drivers and set printer properties
-    ; root is implicitly a 'printer admin'
-    printer admin = @ntadmin
+Chapter18.Classical Printing Support
    Chapter18.Classical Printing Support
    PrevPartIII.Advanced ConfigurationNext
    Chapter18.Classical Printing Support
    Kurt Pfeifle
     Danka Deutschland GmbH 
    May 32, 2003
    Table of Contents
    Features and Benefits
    Technical Introduction
    What happens if you send a Job from a Client
    Printing Related Configuration Parameters
    Parameters Recommended for Use
    Parameters for Backwards Compatibility
    Parameters no longer in use
    A simple Configuration to Print with Samba-3
    Verification of "Settings in Use" with testparm
    A little Experiment to warn you
    Extended Sample Configuration to Print with Samba-3
    Detailed Explanation of the Example's Settings
    The [global] Section
    The [printers] Section
    Any [my_printer_name] Section
    Print Commands
    Default Print Commands for various Unix Print Subsystems
    Setting up your own Print Commands
    Innovations in Samba Printing since 2.2
    Client Drivers on Samba Server for Point'n'Print
    The [printer$] Section is removed from Samba-3
    Creating the [print$] Share
    Parameters in the [print$] Section
    Subdirectory Structure in [print$]
    Installing Drivers into [print$]
    Setting Drivers for existing Printers with a Client GUI
    Setting Drivers for existing Printers with
+rpcclient
    "The Proof of the Pudding lies in the Eating" (Client Driver Insta
+Procedure)
    The first Client Driver Installation
    IMPORTANT! Setting Device Modes on new Printers
    Further Client Driver Install Procedures
    Always make first Client Connection as root or "printer admin"
    Other Gotchas
    Setting Default Print Options for the Client Drivers
    Supporting large Numbers of Printers
    Adding new Printers with the Windows NT APW
    Weird Error Message Cannot connect under a
+different Name
    Be careful when assembling Driver Files
    Samba and Printer Ports
    Avoiding the most common Misconfigurations of the Client Driver
    The Imprints Toolset
    What is Imprints?
    Creating Printer Driver Packages
    The Imprints Server
    The Installation Client
    Add Network Printers at Logon without User Interaction
    The addprinter command
    Migration of "Classical" printing to Samba-3
    Publishing Printer Information in Active Directory or LDAP
    Common Errors and Problems
    I give my root password but I don't get access
    My printjobs get spooled into the spooling directory, but then get lost
    Features and Benefits
    
+Printing is often a mission-critical service for the users.  Samba can
+provide this service reliably and seamlessly for a client network
+consisting of Windows workstations.
+
    
+A Samba-3.0 print service may be run on a Standalone or a Domain
+member server, side by side with file serving functions, or on a
+dedicated print server. It can be made as tight or as loosely secured
+as needs dictate. Configurations may be simple or complex.  Available
+authentication schemes are essentially the same as described for file
+services in previous chapters. Overall, Samba's printing support is
+now able to replace an NT or Windows 2000 print server full-square,
+with additional benefits in many cases. Clients may download and
+install drivers and printers through their familiar "Point'n'Print"
+mechanism. Printer installations executed by "Logon Scripts" are no
+problem. Administrators can upload and manage drivers to be used by
+clients through the familiar "Add Printer Wizard". As an additional
+benefit, driver and printer management may be run from the commandline
+or through scripts, making it more efficient in case of large numbers
+of printers. If a central accounting of print jobs (tracking every
+single page and supplying the raw data for all sorts of statistical
+reports) is required, this is best supported by CUPS as the print
+subsystem underneath the Samba hood.
+
    
+This chapter deals with the foundations of Samba printing, as they
+implemented by the more traditional UNIX (BSD- and System V-style)
+printing systems. Many things apply to CUPS, the newer Common UNIX
+Printing System, too; so if you use CUPS, you might be tempted to jump
+to the next chapter -- but you will certainly miss a few things if you
+do so. Better read this chapter too.
+
    Note
    
+Most of the given examples have been verified on Windows XP
+Professional clients. Where this document describes the responses to
+commands given, bear in mind that Windows 2000 clients are very
+similar, but may differ in details. Windows NT is somewhat different
+again.
+
    Technical Introduction
    
+Samba's printing support always relies on the installed print
+subsystem of the Unix OS it runs on. Samba is a "middleman". It takes
+printfiles from Windows (or other SMB) clients and passes them to the
+real printing system for further processing. Therefore it needs to
+"talk" to two sides: to the Windows print clients and to the Unix
+printing system. Hence we must differentiate between the various
+client OS types each of which behave differently, as well as the
+various UNIX print subsystems, which themselves have different
+features and are accessed differently. This part of the Samba HOWTO
+Collection deals with the "traditional" way of Unix printing first;
+the next chapter covers in great detail the more modern
+Common UNIX Printing System
+(CUPS).
 
-[print$]
-    path = /usr/local/samba/printers
-    guest ok = yes
-    browseable = yes
-    read only = yes
-    ; since this share is configured as read only, then we need
-    ; a 'write list'.  Check the file system permissions to make
-    ; sure this account can copy files to the share.  If this
-    ; is setup to a non-root account, then it should also exist
-    ; as a 'printer admin'
-    write list = @ntadmin,root

    The write list is used to allow administrative -level user accounts to have write access in order to update files -on the share. See the smb.conf(5) -man page for more information on configuring file shares.

    The requirement for guest -ok = yes depends upon how your -site is configured. If users will be guaranteed to have -an account on the Samba host, then this is a non-issue.

    Author's Note
     

    The non-issue is that if all your Windows NT users are guaranteed to be -authenticated by the Samba server (such as a domain member server and the NT -user has already been validated by the Domain Controller in -order to logon to the Windows NT console), then guest access -is not necessary. Of course, in a workgroup environment where -you just want to be able to print without worrying about -silly accounts and security, then configure the share for -guest access. You'll probably want to add map to guest = Bad User in the [global] section as well. Make sure -you understand what this parameter does before using it -though. --jerry

    In order for a Windows NT print server to support -the downloading of driver files by multiple client architectures, -it must create subdirectories within the [print$] service -which correspond to each of the supported client architectures. -Samba follows this model as well.

    Next create the directory tree below the [print$] share -for each architecture you wish to support.

    [print$]-----
-        |-W32X86           ; "Windows NT x86"
-        |-WIN40            ; "Windows 95/98"
-        |-W32ALPHA         ; "Windows NT Alpha_AXP"
-        |-W32MIPS          ; "Windows NT R4000"
-        |-W32PPC           ; "Windows NT PowerPC"

    ATTENTION! REQUIRED PERMISSIONS
     

    In order to currently add a new driver to you Samba host, -one of two conditions must hold true:

    • The account used to connect to the Samba host - must have a uid of 0 (i.e. a root account)

    • The account used to connect to the Samba host - must be a member of the printer - admin list.

    Of course, the connected account must still possess access -to add files to the subdirectories beneath [print$]. Remember -that all file shares are set to 'read only' by default.

    Once you have created the required [print$] service and -associated subdirectories, simply log onto the Samba server using -a root (or printer admin) account -from a Windows NT 4.0/2k client. Open "Network Neighbourhood" or -"My Network Places" and browse for the Samba host. Once you have located -the server, navigate to the "Printers..." folder. -You should see an initial listing of printers -that matches the printer shares defined on your Samba host.

    14.2.2. Setting Drivers for Existing Printers

    The initial listing of printers in the Samba host's -Printers folder will have no real printer driver assigned -to them. This defaults to a NULL string to allow the use -of the local Add Printer Wizard on NT/2000 clients. -Attempting to view the printer properties for a printer -which has this default driver assigned will result in -the error message:

    Device settings cannot be displayed. The driver -for the specified printer is not installed, only spooler -properties will be displayed. Do you want to install the -driver now?

    Click "No" in the error dialog and you will be presented with -the printer properties window. The way to assign a driver to a -printer is to either

    If you wish to install printer drivers for client -operating systems other than "Windows NT x86", you will need -to use the "Sharing" tab of the printer properties dialog.

    Assuming you have connected with a root account, you -will also be able modify other printer properties such as -ACLs and device settings using this dialog box.

    A few closing comments for this section, it is possible -on a Windows NT print server to have printers -listed in the Printers folder which are not shared. Samba does -not make this distinction. By definition, the only printers of -which Samba is aware are those which are specified as shares in -smb.conf.

    Another interesting side note is that Windows NT clients do -not use the SMB printer share, but rather can print directly -to any printer on another Windows NT host using MS-RPC. This -of course assumes that the printing client has the necessary -privileges on the remote host serving the printer. The default -permissions assigned by Windows NT to a printer gives the "Print" -permissions to the "Everyone" well-known group.

    14.2.3. Support a large number of printers

    One issue that has arisen during the development -phase of Samba 2.2 is the need to support driver downloads for -100's of printers. Using the Windows NT APW is somewhat -awkward to say the list. If more than one printer are using the -same driver, the rpcclient's -setdriver command can be used to set the driver -associated with an installed driver. The following is example -of how this could be accomplished:

     
-$ rpcclient pogo -U root%secret -c "enumdrivers"
-Domain=[NARNIA] OS=[Unix] Server=[Samba 2.2.0-alpha3]
+
    Important
    CUPS users, be warned: don't just jump on to the next
+chapter. You might miss important information contained only
+here!
    
+
    What happens if you send a Job from a Client
    
+To successfully print a job from a Windows client via a Samba
+print server to a UNIX printer, there are 6 (potentially 7)
+stages:
+
    1. Windows opens a connection to the printershare
    2. Samba must authenticate the user
    3. Windows sends a copy of the printfile over the network
+into Samba's spooling area
    4. Windows closes the connection again
    5. Samba invokes the print command to hand the file over
+to the UNIX print subsystem's spooling area
    6. The Unix print subsystem processes the print
+job
    7. The printfile may need to be explicitely deleted
+from the Samba spooling area.
    Printing Related Configuration Parameters
    
+There are a number of configuration parameters in
+ controlling Samba's printing
+behaviour. Please also refer to the man page for smb.conf to
+acquire an overview about these. As with other parameters, there are
+Global Level (tagged with a "G" in the listings) and
+Service Level ("S") parameters.
+
    Service Level Parameters
    These may go into the
+[global] section of
+. In this case they define the default
+behaviour of all individual or service level shares (provided those
+don't have a different setting defined for the same parameter, thus
+overriding the global default).
    Global Parameters
    These may not go into individual
+shares.  If they go in by error, the "testparm" utility can discover
+this (if you run it) and tell you so.
    Parameters Recommended for Use
    The following smb.conf parameters directly
+related to printing are used in Samba-3. See also the
+smb.conf man page for detailed explanations:
+
    List of printing related parameters in Samba-3.
+
    Global level parameters:
    • addprinter command (G)
    • deleteprinter command (G)
    • disable spoolss (G)
    • enumports command (G)
    • load printers (G)
    • lpq cache time (G)
    • os2 driver map (G)
    • printcap name (G), printcap (G)
    • show add printer wizard (G)
    • total print jobs (G)
    • use client driver (G)
    
+
+
    Service level parameters:
    • hosts allow (S)
    • hosts deny (S)
    • lppause command (S)
    • lpq command (S)
    • lpresume command (S)
    • lprm command (S)
    • max print jobs (S)
    • min print space (S)
    • print command (S)
    • printable (S), print ok (S)
    • printer name (S), printer (S)
    • printer admin (S)
    • printing = [cups|bsd|lprng...] (S)
    • queuepause command (S)
    • queueresume command (S)
    • total print jobs (S)
    
+
    
+Samba's printing support implements the Microsoft Remote Procedure
+Calls (MS-RPC) methods for printing. These are used by Windows NT (and
+later) print servers. The old "LanMan" protocol is still supported as
+a fallback resort, and for older clients to use.  More details will
+follow further beneath.
+
    Parameters for Backwards Compatibility
    
+Two new parameters that were added in Samba 2.2.2, are still present
+in Samba-3.0. Both of these options are described in the
+smb.conf man page and are disabled by
+default. Use them with caution!
+
    disable spoolss(G)
     This is
+provided for better support of Samba 2.0.x backwards capability. It
+will disable Samba's support for MS-RPC printing and yield identical
+printing behaviour to Samba 2.0.x.
    use client driver (G)
     was provided
+for using local printer drivers on Windows NT/2000 clients. It does
+not apply to Windows 95/98/ME clients.
    Parameters "for backward compatibility only", use with caution.
+
    • disable spoolss (G)
    • use client driver (S)
    
+
    Parameters no longer in use
    
+Samba users upgrading from 2.2.x to 3.0 need to be aware that some
+previously available settings are no longer supported (as was
+announced some time ago). Here is a list of them:
+
    "old" parameters, removed in Samba-3.
+The following smb.conf parameters have been
+deprecated already in Samba 2.2 and are now completely removed from
+Samba-3.  You cannot use them in new 3.0 installations:
+
+
    • printer driver file (G)
    • total print jobs (G)
    • postscript (S)
    • printer driver (S)
    • printer driver location (S)
    
+

    A simple Configuration to Print with Samba-3

    +Here is a very simple example configuration for print related settings +in the file. If you compare it with your +own system's , you probably find some +additional parameters included there (as pre-configured by your OS +vendor). Further below is a discussion and explanation of the +parameters. Note, that this example doesn't use many parameters. +However, in many environments these are enough to provide a valid + which enables all clients to print. +

    + [global]
+         printing = bsd
+         load printers = yes
+
+ [printers]
+         path = /var/spool/samba
+         printable = yes
+         public = yes
+         writable = no
+

    +This is only an example configuration. Many settings, if not +explicitly set to a specific value, are used and set by Samba +implicitly to its own default, because these have been compiled in. +To see all settings, let root use the testparm +utility. testparm also gives warnings if you have +mis-configured certain things. Its complete output is easily 340 lines +and more. You may want to pipe it through a pager program. +

    +The syntax for the configuration file is easy to grasp. You should +know that is not very picky about its +syntax. It has been explained elsewhere in this document. A short +reminder: It even tolerates some spelling errors (like "browsable" +instead of "browseable"). Most spelling is case-insensitive. Also, you +can use "Yes|No" or "True|False" for boolean settings. Lists of names +may be separated by commas, spaces or tabs. +

    Verification of "Settings in Use" with testparm

    +To see all (or at least most) printing related settings in Samba, +including the implicitly used ones, try the command outlined below +(hit "ENTER" twice!). It greps for all occurrences of "lp", "print", +"spool", "driver", "ports" and "[" in testparm's output and gives you +a nice overview about the running smbd's print configuration. (Note +that this command does not show individually created printer shares, +or the spooling paths in each case). Here is the output of my Samba +setup, with exactly the same settings in +as shown above: +

    +root# testparm -v | egrep "(lp|print|spool|driver|ports|\[)"
+ Load smb config files from /etc/samba/smb.conf.simpleprinting
+ Processing section "[homes]"
+ Processing section "[printers]"
+ 
+ [global]
+        smb ports = 445 139
+        lpq cache time = 10
+        total print jobs = 0
+        load printers = Yes
+        printcap name = /etc/printcap
+        disable spoolss = No
+        enumports command =
+        addprinter command = 
+        deleteprinter command = 
+        show add printer wizard = Yes
+        os2 driver map =
+        printer admin =
+        min print space = 0
+        max print jobs = 1000
+        printable = No
+        printing = bsd
+        print command = lpr -r -P'%p' %s
+        lpq command = lpq -P'%p'
+        lprm command = lprm -P'%p' %j
+        lppause command =
+        lpresume command =
+        printer name =
+        use client driver = No
+
+ [homes]
+
+ [printers]
+        path = /var/spool/samba
+        printable = Yes
+
+

    +You can easily verify which settings were implicitly added by Samba's +default behaviour. Don't forget about this point: it may +be important in your future dealings with Samba. +

    Note

    testparm in Samba-3.0 behaves differently from 2.2.x: used +without the "-v" switch it only shows you the settings actually +written into ! To see the complete +configuration used, add the "-v" parameter to testparm.

    A little Experiment to warn you

    +Should you need to troubleshoot at any stage, please always come back +to this point first and verify if "testparm" shows the parameters you +expect! To give you an example from personal experience as a warning, +try to just "comment out" the load printers" +parameter. If your 2.2.x system behaves like mine, you'll see this: +

    +root# grep "load printers" /etc/samba/smb.conf
+ #      load printers = Yes
+        # This setting is commented ooouuuuut!!
+
+root# testparm -v /etc/samba/smb.conf | egrep "(load printers)"
+        load printers = Yes
+
+

    +Despite my imagination that the commenting out of this setting should +prevent Samba from publishing my printers, it still did! Oh Boy -- it +cost me quite some time to find out the reason. But I am not fooled +any more... at least not by this ;-) +

    +root# grep -A1 "load printers" /etc/samba/smb.conf
+        load printers = No
+        # This setting is what I mean!!
+ #      load printers = Yes
+        # This setting is commented ooouuuuut!!
+
+root# testparm -v smb.conf.simpleprinting | egrep "(load printers)"
+        load printers = No
+
+

    +Only when setting the parameter explicitly to +"load printers = No" +would Samba recognize my intentions. So my strong advice is: +

    • Never rely on "commented out" parameters!

    • Always set it up explicitly as you intend it to +behave.

    • Use testparm to uncover hidden +settings which might not reflect your intentions.

    +You can have a working Samba print configuration with this +minimal : +

    +root# cat /etc/samba/smb.conf-minimal
+        [printers]
+
+

    +This example should show you that you can use testparm to test any +filename for fitness as a Samba configuration. Actually, we want to +encourage you not to change your + on a working system (unless you know +exactly what you are doing)! Don't rely on an assumption that changes +will only take effect after you re-start smbd! This is not the +case. Samba re-reads its every 60 +seconds and on each new client connection. You might have to face +changes for your production clients that you didn't intend to apply at +this time! You will now note a few more interesting things. Let's now +ask testparm what the Samba print configuration +would be, if you used this minimalistic file as your real +: +

    +root#  testparm -v /etc/samba/smb.conf-minimal | egrep "(print|lpq|spool|driver|ports|[)"
+ Processing section "[printers]"
+ WARNING: [printers] service MUST be printable!
+ No path in service printers - using /tmp
+
+        lpq cache time = 10
+        total print jobs = 0
+        load printers = Yes
+        printcap name = /etc/printcap
+        disable spoolss = No
+        enumports command =
+        addprinter command =
+        deleteprinter command =
+        show add printer wizard = Yes
+        os2 driver map =
+        printer admin =
+        min print space = 0
+        max print jobs = 1000
+        printable = No
+        printing = bsd
+        print command = lpr -r -P%p %s
+        lpq command = lpq -P%p
+        printer name =
+        use client driver = No
+ [printers]
+        printable = Yes
+
+

    +testparm issued 2 warnings: +

    • because we didn't specify the +[printers] section as printable, +and

    • because we didn't tell it which spool directory to +use.

    +However, this was not fatal, and Samba-3.0 will default to values that +will work here. But, please!, don't rely on this and don't use this +example! This was only meant to make you careful to design and specify +your setup to be what you really want it to be. The outcome on your +system may vary for some parameters, since you may have a Samba built +with a different compile-time configuration. +Warning: don't put a comment sign at +the end of a valid line. It +will cause the parameter to be ignored (just as if you had put the +comment sign at the front). At first I regarded this as a bug in my +Samba version(s). But the man page states: “Internal whitespace +in a parameter value is retained verbatim.” This means that a +line consisting of, for example, +

    +printing =lprng     #This defines LPRng as the printing system"
+

    +will regard the whole of the string after the "=" +sign as the value you want to define. And this is an invalid value +that will be ignored, and a default value used instead.] +

    Extended Sample Configuration to Print with Samba-3

    +Here we show a more verbose example configuration for print related +settings in an . Below is a discussion +and explanation of the various parameters. We chose to use BSD-style +printing here, because we guess it is still the most commonly used +system on legacy Linux installations (new installs now predominantly +have CUPS, which is discussed entirely in the next chapter of this +document). Note, that this example explicitly names many parameters +which don't need to be stated because they are set by default. You +might be able to do with a leaner .

    Tip

    +if you read access it with the Samba Web Administration Tool (SWAT), +and then write it to disk again, it will be optimized in a way such +that it doesn't contain any superfluous parameters and comments. SWAT +organizes the file for best performance. Remember that each smbd +re-reads the Samba configuration once a minute, and that each +connection spawns an smbd process of its own, so it is not a bad idea +to optimize the in environments with +hundreds or thousands of clients.

    + [global]
+         printing = bsd
+         load printers = yes
+         show add printer wizard = yes
+         printcap name = /etc/printcap
+         printer admin = @ntadmin, root
+         total print jobs = 100
+         lpq cache time = 20
+         use client driver = no
+
+ [printers]
+         comment = All Printers
+         printable = yes
+         path = /var/spool/samba
+         browseable = no
+         guest ok = yes
+         public = yes
+         read only = yes
+         writable = no       
+
+ [my_printer_name]
+         comment = Printer with Restricted Access
+         path = /var/spool/samba_my_printer
+         printer admin = kurt
+         browseable = yes
+         printable = yes
+         writeable = no
+         hosts allow = 0.0.0.0
+         hosts deny = turbo_xp, 10.160.50.23, 10.160.51.60
+         guest ok = no
+

    +This also is only an example configuration. You +may not find all the settings in your own + (as pre-configured by your OS +vendor). Many configuration parameters, if not explicitly set to a +specific value, are used and set by Samba implicitly to its own +default, because these have been compiled in. To see all settings, let +root use the testparm +utility. testparm also gives warnings if you have +mis-configured certain things.. +

    Detailed Explanation of the Example's Settings

    +Following is a discussion of the settings from above shown example. +

    The [global] Section

    +The [global] section is one of 4 special +sections (along with [[homes], +[printers] and +[print$]...) It contains all parameters which +apply to the server as a whole. It is the place for parameters which +have only a "global" meaning (G). It may also contain service level +parameters (S) which then define default settings for all other +sections and shares. This way you can simplify the configuration and +avoid setting the same value repeatedly. (Within each individual +section or share you may however override these globally set "share +level" settings and specify other values). +

    printing = bsd

    this causes Samba to use default print commands +applicable for the BSD (a.k.a. RFC 1179 style or LPR/LPD) printing +system. In general, the "printing" parameter informs Samba about the +print subsystem it should expect. Samba supports CUPS, LPD, LPRNG, +SYSV, HPUX, AIX, QNX and PLP. Each of these systems defaults to a +different print command (and other queue control +commands).

    Caution

    The printing parameter is +normally a service level parameter. Since it is included here in the +[global] section, it will take effect for all +printer shares that are not defined differently. Samba-3.0 no longer +supports the SOFTQ printing system.

    load printers = yes

    this tells Samba to create automatically all +available printer shares. "Available" printer shares are discovered by +scanning the printcap file. All created printer shares are also loaded +for browsing. If you use this parameter, you do not need to specify +separate shares for each printer. Each automatically created printer +share will clone the configuration options found in the +[printers] section. (A load printers += no setting will allow you to specify each UNIX printer +you want to share separately, leaving out some you don't want to be +publicly visible and available).

    show add printer wizard = +yes

    this setting is normally +enabled by default (even if the parameter is not written into the +). It makes the Add Printer Wizard icon +show up in the Printers folder of the Samba host's +share listing (as shown in Network Neighbourhood or +by the net view command). To disable it, you need to +explicitly set it to no (commenting it out +will not suffice!). The Add Printer Wizard lets you upload printer +drivers to the [print$] share and associate it +with a printer (if the respective queue exists there before the +action), or exchange a printer's driver against any other previously +uploaded driver.

    total print jobs = 100

    this setting sets the upper limit to 100 print jobs +being active on the Samba server at any one time. Should a client +submit a job which exceeds this number, a “no more space +available on server” type of error message will be returned by +Samba to the client. A setting of "0" (the default) means there is +no limit at all! +

    printcap name = /etc/printcap

    this tells Samba where to look for a list of +available printer names. (If you use CUPS, make sure that a printcap +file is written: this is controlled by the "Printcap" directive of +cupsd.conf). +

    printer admin = @ntadmin

    members of the ntadmin group should be able to add +drivers and set printer properties ("ntadmin" is only an example name, +it needs to be a valid UNIX group name); root is implicitly always a +printer admin. The "@" sign precedes group names in +. A printer admin can do anything to +printers via the remote administration interfaces offered by MS-RPC +(see below). Note that the printer admin +parameter is normally a share level parameter, so you may associate +different groups to different printer shares in larger installations, +if you use the printer admin parameter on the +share levels). +

    lpq cache time = 20

    this controls the cache time for the results of the +lpq command. It prevents the lpq command being called too often and +reduces load on a heavily used print server. +

    use client driver = no

    if set to yes, this setting only +takes effect for Win NT/2k/XP clients (and not for Win 95/98/ME). Its +default value is No (or False). +It must not be enabled on print shares +(with a yes or true setting) which +have valid drivers installed on the Samba server! For more detailed +explanations see the man page of smb.conf. +

    The [printers] Section

    +This is the second special section. If a section with this name +appears in the smb.conf, users are able to +connect to any printer specified in the Samba host's printcap file, +because Samba on startup then creates a printer share for every +printername it finds in the printcap file. You could regard this +section as a general convenience shortcut to share all printers with +minimal configuration. It is also a container for settings which +should apply as default to all printers. (For more details see the +smb.conf man page.) Settings inside this +container must be share level parameters (S). +

    comment = All printers

    the comment is shown next to +the share if a client queries the server, either via Network +Neighbourhood or with the net view command to list +available shares. +

    printable = yes

    please note well, that the +[printers] service must be +declared as printable. If you specify otherwise, smbd will refuse to +load at startup. This parameter allows +connected clients to open, write to and submit spool files into the +directory specified with the path parameter for +this service. It is used by Samba to differentiate printer shares from +file shares.

    path = /var/spool/samba

    this must point to a directory used by Samba to spool +incoming print files. It must not be the same as the spool +directory specified in the configuration of your UNIX print +subsystem! The path would typically point to a directory +which is world writeable, with the "sticky" bit set to it. +

    browseable = no

    this is always set to no if +printable = yes. It makes the +[printer] share itself invisible in the +list of available shares in a net view command or +in the Explorer browse list. (Note that you will of course see the +individual printers). +

    guest ok = yes

    +if set to yes, then no password is required to +connect to the printers service. Access will be granted with the +privileges of the guest account. On many systems the +guest account will map to a user named "nobody". This user is in the UNIX +passwd file with an empty password, but with no valid UNIX login. +(Note: on some systems the guest account might not have the +privilege to be able to print. Test this by logging in as your +guest user using su - guest and run a system print +command like +

    lpr -P printername /etc/motd

    public = yes

    this is a synonym for guest ok = +yes. Since we have guest ok = yes, +it really doesn't need to be here! (This leads to the interesting +question: “What, if I by accident have to contradictory settings +for the same share?” The answer is: the last one encountered by +Sambe wins. The "winner" is shown by testparm. Testparm doesn't +complain about different settings of the same parameter for the same +share! You can test this by setting up multiple lines for the "guest +account" parameter with different usernames, and then run testparm to +see which one is actually used by Samba.) +

    read only = yes

    this normally (for other types of shares) prevents +users creating or modifying files in the service's directory. However, +in a "printable" service, it is always allowed to +write to the directory (if user privileges allow the connection), but +only via print spooling operations. "Normal" write operations are not +allowed.

    writeable = no

    +synonym for read only = yes +

    Any [my_printer_name] Section

    +If a section appears in the , which is +tagged as printable = yes, Samba presents it as +a printer share to its clients. Note, that Win95/98/ME clients may +have problems with connecting or loading printer drivers if the share +name has more than 8 characters! Also be very careful if you give a +printer the same name as an existing user or file share name: upon a +client's connection request to a certain sharename, Samba always tries +to find file shares with that name first; if it finds one, it will +connect to this and will never ultimately connect to a printer with +the same name! +

    comment = Printer with Restricted Access

    the comment says it all. +

    path = /var/spool/samba_my_printer

    here we set the spooling area for this printer to +another directory than the default. It is not a requirement to set it +differently, but the option is available. +

    printer admin = kurt

    the printer admin definition is different for this +explicitly defined printer share from the general +[printers] share. It is not a requirement; we +did it to show that it is possible if you want it. +

    browseable = yes

    we also made this printer browseable (so that the +clients may conveniently find it when browsing the Network +Neighbourhood). +

    printable = yes

    see explanation in last subsection. +

    writeable = no

    see explanation in last subsection. +

    hosts allow = 10.160.50.,10.160.51.

    here we exercise a certain degree of access control +by using the hosts allow and hosts deny parameters. Note, that +this is not by any means a safe bet. It is not a way to secure your +printers. This line accepts all clients from a certain subnet in a +first evaluation of access control +

    hosts deny = turbo_xp,10.160.50.23,10.160.51.60 +

    all listed hosts are not allowed here (even if they +belong to the "allowed subnets"). As you can see, you could name IP +addresses as well as NetBIOS hostnames +here. +

    guest ok = no

    this printer is not open for the guest account! +

    Print Commands

    +In each section defining a printer (or in the +[printers] section), a print +command parameter may be defined. It sets a command to +process the files which have been placed into the Samba print spool +directory for that printer. (That spool directory was, if you +remember, set up with the path +parameter). Typically, this command will submit the spool file to the +Samba host's print subsystem, using the suitable system print +command. But there is no requirement that this needs to be the +case. For debugging purposes or some other reason you may want to do +something completely different than "print" the file. An example is a +command that just copies the print file to a temporary location for +further investigation when you need to debug printing. If you craft +your own print commands (or even develop print command shell scripts), +make sure you pay attention to the need to remove the files from the +Samba spool directory. Otherwise your hard disk may soon suffer from +shortage of free space. +

    Default Print Commands for various Unix Print Subsystems

    +You learned earlier on, that Samba in most cases uses its built-in +settings for many parameters if it can not find an explicitly stated +one in its configuration file. The same is true for the +print command. The default print command varies +depending on the printing =... parameter +setting. In the commands listed below, you will notice some parameters +of the form %X where X is +p, s, J etc. These letters stand for +"printername", "spoolfile" and "job ID" respectively. They are +explained in more detail further below. Here is an overview (excluding +the special case of CUPS, which is discussed in the next chapter): +

    If this setting is active......this is used in lieu of an explicit command:
    printing = bsd|aix|lprng|plpprint command is lpr -r -P%p %s
    printing = sysv|hpuxprint command is lp -c -P%p %s; rm %s
    printing = qnxprint command is lp -r -P%p -s %s
    printing = bsd|aix|lprng|plplpq command is lpq -P%p
    printing = sysv|hpuxlpq command is lpstat -o%p
    printing = qnxlpq command is lpq -P%p
    printing = bsd|aix|lprng|plplprm command is lprm -P%p %j
    printing = sysv|hpuxlprm command is cancel %p-%j
    printing = qnxlprm command is cancel %p-%j
    printing = bsd|aix|lprng|plplppause command is lp -i %p-%j -H hold
    printing = sysv|hpuxlppause command (...is empty)
    printing = qnxlppause command (...is empty)
    printing = bsd|aix|lprng|plplpresume command is lp -i %p-%j -H resume
    printing = sysv|hpuxlpresume command (...is empty)
    printing = qnxlpresume command (...is empty)

    +We excluded the special CUPS case here, because it is discussed in the +next chapter. Just a short summary. For printing = +CUPS: If SAMBA is compiled against libcups, it uses the +CUPS API to submit jobs, etc. (It is a good idea also to set +printcap = cups in case your +cupsd.conf is set to write its autogenerated +printcap file to an unusual place). Otherwise Samba maps to the System +V printing commands with the -oraw option for printing, i.e. it uses +lp -c -d%p -oraw; rm %s With printing = +cups , and if SAMBA is compiled against libcups, any +manually set print command will be ignored! +

    +Having listed the above mappings here, you should note that there used +to be a bug in recent 2.2.x versions which +prevented the mapping from taking effect. It lead to the +"bsd|aix|lprng|plp" settings taking effect for all other systems, for +the most important commands (the print command, the +lpq command and the lprm +command). The lppause command and the +lpresume command remained empty. Of course, these +commands worked on bsd|aix|lprng|plp but they didn't work on +sysv|hpux|qnx systems. To work around this bug, you need to +explicitly set the commands. Use testparm -v to +check which command takes effect. Then check that this command is +adequate and actually works for your installed print subsystem. It is +always a good idea to explicitly set up your configuration files the +way you want them to work and not rely on any built-in defaults. +

    Setting up your own Print Commands

    +After a print job has finished spooling to a service, the +print command will be used by Samba via a +system() call to process the spool file. Usually +the command specified will submit the spool file to the host's +printing subsystem. But there is no requirement at all that this must +be the case. The print subsystem will probably not remove the spool +file on its own. So whatever command you specify on your own you +should ensure that the spool file is deleted after it has been +processed. +

    +There is no difficulty with using your own customized print commands +with the traditional printing systems. However, if you don't wish to +"roll your own", you should be well informed about the default +built-in commands that Samba uses for each printing subsystem (see the +table above). In all the commands listed in the last paragraphs you +see parameters of the form %X These are +macros, or shortcuts, used as place holders for +the names of real objects. At the time of running a command with such +a placeholder, Samba will insert the appropriate value +automatically. Print commands can handle all Samba macro +substitutions. In regard to printing, the following ones do have +special relevance: +

    • %s, %f - the path to the spool +file name

    • %p - the appropriate printer +name

    • %J - the job name as +transmitted by the client.

    • %c - the number of printed +pages of the spooled job (if known).

    • %z - the size of the spooled +print job (in bytes)

    +The print command MUST contain at least one occurrence of +%s or %f. -- The +%p is optional. If no printer name is supplied, +the %p will be silently removed from the print +command. In this case the job is sent to the default printer. +

    +If specified in the [global] section, the print +command given will be used for any printable service that does not +have its own print command specified. If there is neither a specified +print command for a printable service nor a global print command, +spool files will be created but not processed! And (most importantly): +print files will not be removed, so they will start filling your Samba +hard disk. +

    +Note that printing may fail on some UNIXes from the "nobody" +account. If this happens, create an alternative guest account and +supply it with the privilege to print. Set up this guest account in +the [global] section with the guest +account parameter. +

    +You can form quite complex print commands. You need to realize that +print commands are just passed to a UNIX shell. The shell is able to +expand the included environment variables as usual. (The syntax to +include a UNIX environment variable $variable +in or in the Samba print command is +%$variable.) To give you a working +print command example, the following will log a +print job to /tmp/print.log, print the file, then +remove it. Note that ';' is the usual separator for commands in shell +scripts: +

    +
+ print command = echo Printing %s >> /tmp/print.log; lpr -P %p %s; rm %s
+
+

    +You may have to vary your own command considerably from this example +depending on how you normally print files on your system. The default +for the print command parameter varies depending on the setting of +the printing parameter. Another example is: +

    + print command = /usr/local/samba/bin/myprintscript %p %s
+

    Innovations in Samba Printing since 2.2

    +Before version 2.2.0, Samba's print server support for Windows clients +was limited to the level of LanMan printing +calls. This is the same protocol level as Windows 9x PCs offer when +they share printers. Beginning with the 2.2.0 release, Samba started +to support the native Windows NT printing mechanisms. These are +implemented via MS-RPC (RPC = Remote +Procedure Calls ). MS-RPCs use the +SPOOLSS named pipe for all printing. +

    +The additional functionality provided by the new SPOOLSS support includes: +

    • Support for downloading printer driver files to Windows +95/98/NT/2000 clients upon demand (Point'n'Print); +

    • Uploading of printer drivers via the Windows NT +Add Printer Wizard (APW) or the +Imprints tool set (refer to http://imprints.sourceforge.net); +

    • Support for the native MS-RPC printing calls such as +StartDocPrinter, EnumJobs(), etc... (See the MSDN documentation +at http://msdn.microsoft.com/ +for more information on the Win32 printing API);

    • Support for NT Access Control +Lists (ACL) on printer objects;

    • Improved support for printer queue manipulation +through the use of internal databases for spooled job information +(implemented by various *.tdb +files).

    +One other benefit of an update is this: Samba-3 is able to publish +all its printers in Active Directory (or LDAP)! +

    +One slight difference is here: it is possible on a Windows NT print +server to have printers listed in the Printers folder which are +not shared. Samba does not make this +distinction. By definition, the only printers of which Samba is aware +are those which are specified as shares in +. The reason is that Windows NT/2k/XPprof +clients do not normally need to use the standard SMB printer share; +rather they can print directly to any printer on another Windows NT +host using MS-RPC. This of course assumes that the printing client has +the necessary privileges on the remote host serving the printer. The +default permissions assigned by Windows NT to a printer gives the +"Print" permissions to the well-known Everyone +group. (The older clients of type Win9x can only print to "shared" +printers). +

    Client Drivers on Samba Server for Point'n'Print

    +There is still confusion about what all this means: Is it or +is it not a requirement for printer drivers to be installed on a Samba +host in order to support printing from Windows clients? The +answer to this is: No, it is not a +requirement. Windows NT/2000 clients can, of +course, also run their APW to install drivers +locally (which then connect to a Samba served +print queue). This is the same method as used by Windows 9x +clients. (However, a bug existed in Samba 2.2.0 +which made Windows NT/2000 clients require that the Samba server +possess a valid driver for the printer. This was fixed in Samba +2.2.1). +

    +But it is a new option to install the printer +drivers into the [print$] share of the Samba +server, and a big convenience too. Then all +clients (including 95/98/ME) get the driver installed when they first +connect to this printer share. The uploading or +depositing of the driver into this +[print$] share, and the following binding of +this driver to an existing Samba printer share can be achieved by +different means: +

    • running the APW on an +NT/2k/XPprof client (this doesn't work from 95/98/ME +clients);

    • using the Imprints +toolset;

    • using the smbclient and +rpcclient commandline tools;

    • using cupsaddsmb(only works for +the CUPS printing system, not for LPR/LPD, LPRng +etc.).

    +Please take additional note of the following fact: Samba +does not use these uploaded drivers in any way to process spooled +files. Drivers are utilized entirely by the clients, who +download and install them via the "Point 'n'Print" mechanism supported +by Samba. The clients use these drivers to generate print files in the +format the printer (or the Unix print system) requires. Print files +received by Samba are handed over to the Unix printing system, which +is responsible for all further processing, if needed. +

    The [printer$] Section is removed from Samba-3

    +[print$] vs. [printer$] +. +Versions of Samba prior to 2.2 made it possible to use a share +named [printer$]. This name was taken from the +same named service created by Windows 9x clients when a printer was +shared by them. Windows 9x printer servers always have a +[printer$] service which provides read-only +access (with no password required) in order to support printer driver +downloads. However, Samba's initial implementation allowed for a +parameter named printer driver location to be +used on a per share basis. This specified the location of the driver +files associated with that printer. Another parameter named +printer driver provided a means of defining the +printer driver name to be sent to the client. These parameters, +including the printer driver file parameter, +are now removed and can not be used in installations of Samba-3.0. +Now the share name [print$] is used for the +location of downloadable printer drivers. It is taken from the +[print$] service created by Windows NT PCs when +a printer is shared by them. Windows NT print servers always have a +[print$] service which provides read-write +access (in the context of its ACLs) in order to support printer driver +down- and uploads. Don't fear -- this does not mean Windows 9x +clients are thrown aside now. They can use Samba's +[print$] share support just fine. +

    Creating the [print$] Share

    +In order to support the up- and downloading of printer driver files, +you must first configure a file share named +[print$]. The "public" name of this share is +hard coded in Samba's internals (because it is hardcoded in the MS +Windows clients too). It cannot be renamed since Windows clients are +programmed to search for a service of exactly this name if they want +to retrieve printer driver files. +

    +You should modify the server's file to +add the global parameters and create the +[print$] file share (of course, some of the +parameter values, such as 'path' are arbitrary and should be replaced +with appropriate values for your site): +

    + [global]
+      ; members of the ntadmin group should be able to add drivers and set
+      ; printer properties. root is implicitly always a 'printer admin'.
+      printer admin = @ntadmin
+      [....]
+
+ [printers]
+      [....]
+
+ [print$]
+      comment = Printer Driver Download Area
+      path = /etc/samba/drivers
+      browseable = yes
+      guest ok = yes
+      read only = yes
+      write list = @ntadmin, root
+

    +Of course, you also need to ensure that the directory named by the +path parameter exists on the Unix file system. +

    Parameters in the [print$] Section

    +[print$] is a special section in +. It contains settings relevant to +potential printer driver download and local installation by clients. +

    comment = Printer Driver +Download Area

    the comment appears next to the share name if it is +listed in a share list (usually Windows clients won't see it often but +it will also appear up in a smbclient -L sambaserver + output).

    path = /etc/samba/printers

    this is the path to the location of the Windows +driver file deposit from the UNIX point of +view.

    browseable = no

    this makes the [print$] share +"invisible" in Network Neighbourhood to clients. However, you can +still "mount" it from any client using the net use +g:\\sambaserver\print$ command in a "DOS box" or the +"Connect network drive" menu from Windows +Explorer.

    guest ok = yes

    this gives read only access to this share for all +guest users. Access may be used to download and install printer +drivers on clients. The requirement for guest ok = +yes depends upon how your site is configured. If users +will be guaranteed to have an account on the Samba host, then this is +a non-issue.

    Note

    +The non-issue is this: if all your Windows NT users are guaranteed to +be authenticated by the Samba server (for example if Samba +authenticates via an NT domain server and the NT user has already been +validated by the Domain Controller in order to logon to the Windows NT +session), then guest access is not necessary. Of course, in a +workgroup environment where you just want to be able to print without +worrying about silly accounts and security, then configure the share +for guest access. You'll probably want to add map to guest += Bad User in the [global] section +as well. Make sure you understand what this parameter does before +using it. +

    read only = yes

    as we don't want everybody to upload driver files (or +even change driver settings) we tagged this share as not +writeable.

    write list = @ntadmin,root

    since the [print$] was made +read only by the previous setting, we need to create a "write list" +also. UNIX groups (denoted with a leading "@" character) and users +listed here are allowed write access (as an exception to the general +public's "read-only" access), which they need to update files on the +share. Normally you will want to only name administrative level user +accounts in this setting. Check the file system permissions to make +sure these accounts can copy files to the share. If this is a non-root +account, then the account should also be mentioned in the global +printer admin parameter. See the + man page for more information on +configuring file shares.

    Subdirectory Structure in [print$]

    +In order for a Windows NT print server to support the downloading of +driver files by multiple client architectures, you must create several +subdirectories within the [print$] service +(i.e. the Unix directory named by the path +parameter). These correspond to each of the supported client +architectures. Samba follows this model as well. Just like the name of +the [print$] share itself, the subdirectories +*must* be exactly the names listed below (you may leave out the +subdirectories of architectures you don't want to support). +

    +Therefore, create a directory tree below the +[print$] share for each architecture you wish +to support. +

    +[print$]--+--
+          |--W32X86           # serves drivers to "Windows NT x86"
+          |--WIN40            # serves drivers to "Windows 95/98"
+          |--W32ALPHA         # serves drivers to "Windows NT Alpha_AXP"
+          |--W32MIPS          # serves drivers to "Windows NT R4000"
+          |--W32PPC           # serves drivers to "Windows NT PowerPC"
+

    Required permissions

    +In order to add a new driver to your Samba host, one of two conditions +must hold true: +

    • The account used to connect to the Samba host must +have a UID of 0 (i.e. a root account)

    • The account used to connect to the Samba host must be +named in the printer adminlist.

    +Of course, the connected account must still possess access to add +files to the subdirectories beneath +[print$]. Remember that all file shares are set +to 'read only' by default. +

    +Once you have created the required [print$] +service and associated subdirectories, go to a Windows NT 4.0/2k/XP +client workstation. Open Network Neighbourhood or +My Network Places and browse for the Samba host. +Once you have located the server, navigate to its Printers and +Faxes folder. You should see an initial listing of printers +that matches the printer shares defined on your Samba host. +

    Installing Drivers into [print$]

    +You have successfully created the [print$] +share in ? And Samba has re-read its +configuration? Good. But you are not yet ready to take off. The +driver files need to be present in this share, +too! So far it is still an empty share. Unfortunatly, it is not enough +to just copy the driver files over. They need to be set +up too. And that is a bit tricky, to say the least. We +will now discuss two alternative ways to install the drivers into +[print$]: +

    • using the Samba commandline utility +rpcclient with its various subcommands (here: +adddriver and setdriver) from +any UNIX workstation;

    • running a GUI (Printer +Properties and Add Printer Wizard) +from any Windows NT/2k/XP client workstation.

    +The latter option is probably the easier one (even if the only +entrance to this realm seems a little bit weird at first). +

    Setting Drivers for existing Printers with a Client GUI

    +The initial listing of printers in the Samba host's +Printers folder accessed from a client's Explorer +will have no real printer driver assigned to them. By default, in +Samba-3 (as in 2.2.1 and later) this driver name is set to a NULL +string. This must be changed now. The local Add Printer +Wizard, run from NT/2000/XP clients, will help us in this +task. +

    +However, the job to set a valid driver for the printer is not a +straightforward one: You must attempt to view the printer properties +for the printer to which you want the driver assigned. Open the +Windows Explorer, open Network Neighbourhood, browse to the Samba +host, open Samba's Printers folder, right-click the printer icon and +select Properties.... You are now trying to view printer and driver +properties for a queue which has this default NULL driver +assigned. This will result in an error message (this is normal here): +

    Device settings cannot be displayed. The driver +for the specified printer is not installed, only spooler properties +will be displayed. Do you want to install the driver +now?

    +Important:Don't click Yes! Instead, +click No in the error dialog. +Only now you will be presented with the printer properties window. From here, +the way to assign a driver to a printer is open to us. You have now the choice +either: +

    • select a driver from the popup list of installed +drivers. Initially this list will be empty. +Or

    • use the New Driver... button to +install a new printer driver (which will in fact start up the +APW).

    +Once the APW is started, the procedure is exactly the same as the one +you are familiar with in Wiindows (we assume here that you are +familiar with the printer driver installations procedure on Windows +NT). Make sure your connection is in fact setup as a user with +printer admin privileges (if in doubt, use +smbstatus to check for this). If you wish to +install printer drivers for client operating systems other than +Windows NT x86, you will need to use the +Sharing tab of the printer properties dialog. +

    +Assuming you have connected with an administrative (or root) account +(as named by the printer admin parameter), +you will also be able to modify other printer properties such as ACLs +and default device settings using this dialog. For the default device +settings, please consider the advice given further below. +

    Setting Drivers for existing Printers with +rpcclient

    +The second way to install printer drivers into +[print$] and set them up in a valid way can be +done from the UNIX command line. This involves four distinct steps: +

    1. gathering the info about the required driver files +and collecting the files together;

    2. deposit the driver files into the +[print$] share's correct subdirectories +(possibly by using smbclient);

    3. running the rpcclient +commandline utility once with the addriver +subcommand,

    4. running rpcclient a second +time with the setdriver +subcommand.

    +We will provide detailed hints for each of these steps in the next few +paragraphs. +

    Identifying the Driver Files

    +To find out about the driver files, you have two options: you could +investigate the driver CD which comes with your printer. Study the +*.inf file on the CD, if it is contained. This +may not be the possible, since the *.inf file might be +missing. Unfortunately, many vendors have now started to use their own +installation programs. These installations packages are often some +sort of Windows platform archive format, plus, the files may get +re-named during the installation process. This makes it extremely +difficult to identify the driver files you need. +

    +Then you only have the second option: install the driver first on a +Windows client *locally* and investigate which file names and paths it +uses after they are installed. (Note, that you need to repeat this +procedure for every client platform you want to support. We are going +to show it here for the W32X86 platform only, a +name used by Microsoft for all WinNT/2k/XP clients...) +

    +A good method to recognize the driver files this is to print the test +page from the driver's Properties Dialog +(General tab). Then look at the list of driver +files named on the printout. You'll need to recognize what Windows +(and Samba) are calling the Driver File , the +Data File, the Config File, +the Help File and (optionally) the +Dependent Driver Files (this may vary slightly +for Windows NT). You need to remember all names (or better take a +note) for the next steps. +

    +Another method to quickly test the driver filenames and related paths +is provided by the rpcclient utility. Run it with +enumdrivers or with the +getdriver subcommand, each in the +3 level. In the following example, +TURBO_XP is the name of the Windows PC (in this +case it was a Windows XP Professional laptop, BTW). I had installed +the driver locally to TURBO_XP while kde-bitshop is +the name of the Linux host from which I am working. We could run an +interactive rpcclient session; +then we'd get an rpcclient /> prompt and would +type the subcommands at this prompt. This is left as a good exercise +to the reader. For now we use rpcclient with the +-c parameter to execute a single subcommand +line and exit again. This is the method you would use if you want to +create scripts to automate the procedure for a large number of +printers and drivers. Note the different quotes used to overcome the +different spaces in between words: +

    +root# rpcclient -U'Danka%xxxx' -c 'getdriver "Heidelberg Digimaster 9110 (PS)" 3' TURBO_XP
+  cmd = getdriver "Heidelberg Digimaster 9110 (PS)" 3
+
+  [Windows NT x86]
+  Printer Driver Info 3:
+          Version: [2]
+          Driver Name: [Heidelberg Digimaster 9110 (PS)]
+          Architecture: [Windows NT x86]
+          Driver Path: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\HDNIS01_de.DLL]
+          Datafile: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.ppd]
+          Configfile: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\HDNIS01U_de.DLL]
+          Helpfile: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\HDNIS01U_de.HLP]
+  
+          Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.DLL]
+          Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.INI]
+          Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1KMMin.DLL]
+          Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.dat]
+          Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.cat]
+          Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.def]
+          Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.hre]
+          Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.vnd]
+          Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de.hlp]
+          Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\Hddm91c1_de_reg.HLP]
+          Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\HDNIS01Aux.dll]
+          Dependentfiles: [C:\WINNT\System32\spool\DRIVERS\W32X86\2\HDNIS01_de.NTF]
+  
+          Monitorname: []
+          Defaultdatatype: []
+
+

    +You may notice, that this driver has quite a big number of +Dependentfiles (I know worse cases however). Also, +strangely, the Driver File is here tagged as +Driver Path.... oh, well. Here we don't have yet +support for the so-called WIN40 architecture +installed. This name is used by Microsoft for the Win95/98/ME platforms. +If we want to support these, we need to install the Win95/98/ME driver +files in addition to those for W32X86 +(i.e. the WinNT72000/XP clients) onto a Windows PC. This PC +can also host the Win9x drivers, even if itself runs on Windows NT, +2000 or XP. +

    +Since the [print$] share is usually accessible +through the Network Neighbourhood, you can also use the UNC notation +from Windows Explorer to poke at it. The Win9x driver files will end +up in subdirectory "0" of the "WIN40" directory. The full path to +access them will be +\\WINDOWSHOST\print$\WIN40\0\. +

    Note

    more recent drivers on Windows 2000 and Wndows XP are +installed into the "3" subdirectory instead of the "2". The version 2 +of drivers, as used in Windows NT, were running in Kernel Mode. +Windows 2000 changed this. While it still can use the Kernel Mode +drivers (if this is enabled by the Admin), its native mode for printer +drivers is User Mode execution. This requires drivers designed for +this. These type of drivers install into the "3" subdirectory. +

    Collecting the Driver Files from a Windows Host's +[print$] Share

    +Now we need to collect all the driver files we identified. in our +previous step. Where do we get them from? Well, why not retrieve them +from the very PC and the same [print$] share +which we investigated in our last step to identify the files? We can +use smbclient to do this. We will use the paths and +names which were leaked to us by getdriver. The +listing is edited to include linebreaks for readability: +

    +root# smbclient //TURBO_XP/print\$ -U'Danka%xxxx'	\ 
+	-c 'cd W32X86/2;mget HD*_de.*             \
+	hd*ppd Hd*_de.* Hddm*dll HDN*Aux.DLL'
+  added interface ip=10.160.51.60 bcast=10.160.51.255 nmask=255.255.252.0
+  Got a positive name query response from 10.160.50.8 ( 10.160.50.8 )
+  Domain=[DEVELOPMENT] OS=[Windows 5.1] Server=[Windows 2000 LAN Manager]
+  Get file Hddm91c1_de.ABD? n
+  Get file Hddm91c1_de.def? y
+  getting file \W32X86\2\Hddm91c1_de.def of size 428 as Hddm91c1_de.def (22.0 kb/s) (average 22.0 kb/s)
+  Get file Hddm91c1_de.DLL? y
+  getting file \W32X86\2\Hddm91c1_de.DLL of size 876544 as Hddm91c1_de.DLL (737.3 kb/s) (average 737.3 kb/s)
+  [...]
+
+

    +After this command is complete, the files are in our current local +directory. You probably have noticed that this time we passed several +commands to the -c parameter, separated by semi-colons. This +effects that all commands are executed in sequence on the remote +Windows server before smbclient exits again. +

    +Don't forget to repeat the procedure for the WIN40 +architecture should you need to support Win95/98/XP clients. Remember, the +files for these architectures are in the WIN40/0/ subdir. Once we are +complete, we can run smbclient ... put to store +the collected files on the Samba server's +[print$] share. +

    Depositing the Driver Files into [print$]

    +So, now we are going to put the driver files into the +[print$] share. Remember, the UNIX path to this +share has been defined previously in your +. You also have created subdirectories +for the different Windows client types you want to support. Supposing +your [print$] share maps to the UNIX path +/etc/samba/drivers/, your driver files should now +go here: +

    • for all Windows NT, 2000 and XP clients into +/etc/samba/drivers/W32X86/ but +*not*(yet) into the "2" subdir!

    • for all Windows 95, 98 and ME clients into +/etc/samba/drivers/WIN40/ -- but *not* +(yet) into the "0" subdir!

    +We again use smbclient to transfer the driver files across the +network. We specify the same files and paths as were leaked to us by +running getdriver against the original +Windows install. However, now we are going to +store the files into a Samba/UNIX print server's +[print$] share... +

    +root# smbclient //SAMBA-CUPS/print\$ -U'root%xxxx' -c 'cd W32X86; put HDNIS01_de.DLL; \
+  put Hddm91c1_de.ppd; put HDNIS01U_de.DLL;        \
+  put HDNIS01U_de.HLP; put Hddm91c1_de.DLL;        \
+  put Hddm91c1_de.INI; put Hddm91c1KMMin.DLL;      \
+  put Hddm91c1_de.dat; put Hddm91c1_de.dat;        \
+  put Hddm91c1_de.def; put Hddm91c1_de.hre;        \
+  put Hddm91c1_de.vnd; put Hddm91c1_de.hlp;        \
+  put Hddm91c1_de_reg.HLP; put HDNIS01Aux.dll;     \
+  put HDNIS01_de.NTF'
+ added interface ip=10.160.51.60 bcast=10.160.51.255 nmask=255.255.252.0
+ Got a positive name query response from 10.160.51.162 ( 10.160.51.162 )
+ Domain=[CUPS-PRINT] OS=[Unix] Server=[Samba 2.2.7a]
+ putting file HDNIS01_de.DLL as \W32X86\HDNIS01_de.DLL (4465.5 kb/s) (average 4465.5 kb/s)
+ putting file Hddm91c1_de.ppd as \W32X86\Hddm91c1_de.ppd (12876.8 kb/s) (average 4638.9 kb/s)
+ putting file HDNIS01U_de.DLL as \W32X86\HDNIS01U_de.DLL (20249.8 kb/s) (average 5828.3 kb/s)
+ putting file HDNIS01U_de.HLP as \W32X86\HDNIS01U_de.HLP (9652.8 kb/s) (average 5899.8 kb/s)
+ putting file Hddm91c1_de.DLL as \W32X86\Hddm91c1_de.DLL (23777.7 kb/s) (average 10400.6 kb/s)
+ putting file Hddm91c1_de.INI as \W32X86\Hddm91c1_de.INI (98.6 kb/s) (average 10329.0 kb/s)
+ putting file Hddm91c1KMMin.DLL as \W32X86\Hddm91c1KMMin.DLL (22931.5 kb/s) (average 10501.7 kb/s)
+ putting file Hddm91c1_de.dat as \W32X86\Hddm91c1_de.dat (2462.8 kb/s) (average 10393.0 kb/s)
+ putting file Hddm91c1_de.dat as \W32X86\Hddm91c1_de.dat (4925.3 kb/s) (average 10356.3 kb/s)
+ putting file Hddm91c1_de.def as \W32X86\Hddm91c1_de.def (417.9 kb/s) (average 10290.1 kb/s)
+ putting file Hddm91c1_de.hre as \W32X86\Hddm91c1_de.hre (22571.3 kb/s) (average 11338.5 kb/s)
+ putting file Hddm91c1_de.vnd as \W32X86\Hddm91c1_de.vnd (3384.6 kb/s) (average 10754.3 kb/s)
+ putting file Hddm91c1_de.hlp as \W32X86\Hddm91c1_de.hlp (18406.8 kb/s) (average 10839.8 kb/s)
+ putting file Hddm91c1_de_reg.HLP as \W32X86\Hddm91c1_de_reg.HLP (20278.3 kb/s) (average 11386.3 kb/s)
+ putting file HDNIS01Aux.dll as \W32X86\HDNIS01Aux.dll (14994.6 kb/s) (average 11405.2 kb/s)
+ putting file HDNIS01_de.NTF as \W32X86\HDNIS01_de.NTF (23390.2 kb/s) (average 13170.8 kb/s)
+
+

    +Phewww -- that was a lot of typing! Most drivers are a lot smaller -- +many only having 3 generic PostScript driver files plus 1 PPD. Note, +that while we did retrieve the files from the "2" subdirectory of the +"W32X86" directory from the Windows box, we don't +put them (for now) in this same subdirectory of the Samba box! This +re-location will automatically be done by the +adddriver command which we will run shortly (and +don't forget to also put the files for the Win95/98/ME architecture +into the WIN40/ subdirectory should you need +them). +

    Check if the Driver Files are there (with smbclient)

    +For now we verify that our files are there. This can be done with +smbclient too (but of course you can log in via SSH +also and do this through a standard UNIX shell access too): +

    +root# smbclient //SAMBA-CUPS/print\$ -U 'root%xxxx' -c 'cd W32X86; pwd; dir; cd 2; pwd; dir'
+ added interface ip=10.160.51.60 bcast=10.160.51.255 nmask=255.255.252.0
+ Got a positive name query response from 10.160.51.162 ( 10.160.51.162 )
+ Domain=[CUPS-PRINT] OS=[Unix] Server=[Samba 2.2.7a]
+
+  Current directory is \\SAMBA-CUPS\print$\W32X86\
+  .                                   D        0  Sun May  4 03:56:35 2003
+  ..                                  D        0  Thu Apr 10 23:47:40 2003
+  2                                   D        0  Sun May  4 03:56:18 2003
+  HDNIS01Aux.dll                      A    15356  Sun May  4 03:58:59 2003
+  Hddm91c1KMMin.DLL                   A    46966  Sun May  4 03:58:59 2003
+  HDNIS01_de.DLL                      A   434400  Sun May  4 03:58:59 2003
+  HDNIS01_de.NTF                      A   790404  Sun May  4 03:56:35 2003
+  Hddm91c1_de.DLL                     A   876544  Sun May  4 03:58:59 2003
+  Hddm91c1_de.INI                     A      101  Sun May  4 03:58:59 2003
+  Hddm91c1_de.dat                     A     5044  Sun May  4 03:58:59 2003
+  Hddm91c1_de.def                     A      428  Sun May  4 03:58:59 2003
+  Hddm91c1_de.hlp                     A    37699  Sun May  4 03:58:59 2003
+  Hddm91c1_de.hre                     A   323584  Sun May  4 03:58:59 2003
+  Hddm91c1_de.ppd                     A    26373  Sun May  4 03:58:59 2003
+  Hddm91c1_de.vnd                     A    45056  Sun May  4 03:58:59 2003
+  HDNIS01U_de.DLL                     A   165888  Sun May  4 03:58:59 2003
+  HDNIS01U_de.HLP                     A    19770  Sun May  4 03:58:59 2003
+  Hddm91c1_de_reg.HLP                 A   228417  Sun May  4 03:58:59 2003
+                40976 blocks of size 262144. 709 blocks available
+
+  Current directory is \\SAMBA-CUPS\print$\W32X86\2\
+  .                                   D        0  Sun May  4 03:56:18 2003
+  ..                                  D        0  Sun May  4 03:56:35 2003
+  ADOBEPS5.DLL                        A   434400  Sat May  3 23:18:45 2003
+  laserjet4.ppd                       A     9639  Thu Apr 24 01:05:32 2003
+  ADOBEPSU.DLL                        A   109568  Sat May  3 23:18:45 2003
+  ADOBEPSU.HLP                        A    18082  Sat May  3 23:18:45 2003
+  PDFcreator2.PPD                     A    15746  Sun Apr 20 22:24:07 2003
+                40976 blocks of size 262144. 709 blocks available
+
+

    +Notice that there are already driver files present in the +2 subdir (probably from a previous +installation). Once the files for the new driver are there too, you +are still a few steps away from being able to use them on the +clients. The only thing you could do *now* is to retrieve them from a +client just like you retrieve ordinary files from a file share, by +opening print$ in Windows Explorer. But that wouldn't install them per +Point'n'Print. The reason is: Samba doesn't know yet that these files +are something special, namely printer driver +files and it doesn't know yet to which print queue(s) these +driver files belong. +

    Running rpcclient with +adddriver

    +So, next you must tell Samba about the special category of the files +you just uploaded into the [print$] share. This +is done by the adddriver command. It will +prompt Samba to register the driver files into its internal TDB +database files. The following command and its output has been edited, +again, for readability: +

    +root# rpcclient -Uroot%xxxx -c 'adddriver "Windows NT x86" "dm9110:HDNIS01_de.DLL: \
+  Hddm91c1_de.ppd:HDNIS01U_de.DLL:HDNIS01U_de.HLP:   \
+  NULL:RAW:Hddm91c1_de.DLL,Hddm91c1_de.INI,          \
+  Hddm91c1_de.dat,Hddm91c1_de.def,Hddm91c1_de.hre,   \
+  Hddm91c1_de.vnd,Hddm91c1_de.hlp,Hddm91c1KMMin.DLL, \
+  HDNIS01Aux.dll,HDNIS01_de.NTF,                     \
+  Hddm91c1_de_reg.HLP' SAMBA-CUPS
+
+ cmd = adddriver "Windows NT x86" "dm9110:HDNIS01_de.DLL:Hddm91c1_de.ppd:HDNIS01U_de.DLL:    \
+  HDNIS01U_de.HLP:NULL:RAW:Hddm91c1_de.DLL,Hddm91c1_de.INI, \
+  Hddm91c1_de.dat,Hddm91c1_de.def,Hddm91c1_de.hre,          \
+  Hddm91c1_de.vnd,Hddm91c1_de.hlp,Hddm91c1KMMin.DLL,        \
+  HDNIS01Aux.dll,HDNIS01_de.NTF,Hddm91c1_de_reg.HLP"
+
+ Printer Driver dm9110 successfully installed.
+
+

    +After this step the driver should be recognized by Samba on the print +server. You need to be very carefull when typing the command. Don't +exchange the order of the fields. Some changes would lead to a +NT_STATUS_UNSUCCESSFUL error +message. These become obvious. Other changes might install the driver +files successfully, but render the driver unworkable. So take care! +Hints about the syntax of the adddriver command are in the man +page. The CUPS printing chapter of this HOWTO collection provides a +more detailed description, if you should need it. +

    Check how Driver Files have been moved after +adddriver finished

    +One indication for Samba's recognition of the files as driver files is +the successfully installed message. +Another one is the fact, that our files have been moved by the +adddriver command into the 2 +subdirectory. You can check this again with +smbclient: +

    +root# smbclient //SAMBA-CUPS/print\$ -Uroot%xxxx -c 'cd W32X86;dir;pwd;cd 2;dir;pwd'
+ added interface ip=10.160.51.162 bcast=10.160.51.255 nmask=255.255.252.0
+ Domain=[CUPS-PRINT] OS=[Unix] Server=[Samba 2.2.7a]
+
+  Current directory is \\SAMBA-CUPS\print$\W32X86\
+  .                                   D        0  Sun May  4 04:32:48 2003
+  ..                                  D        0  Thu Apr 10 23:47:40 2003
+  2                                   D        0  Sun May  4 04:32:48 2003
+                40976 blocks of size 262144. 731 blocks available 
+
+  Current directory is \\SAMBA-CUPS\print$\W32X86\2\
+  .                                   D        0  Sun May  4 04:32:48 2003
+  ..                                  D        0  Sun May  4 04:32:48 2003
+  DigiMaster.PPD                      A   148336  Thu Apr 24 01:07:00 2003
+  ADOBEPS5.DLL                        A   434400  Sat May  3 23:18:45 2003
+  laserjet4.ppd                       A     9639  Thu Apr 24 01:05:32 2003
+  ADOBEPSU.DLL                        A   109568  Sat May  3 23:18:45 2003
+  ADOBEPSU.HLP                        A    18082  Sat May  3 23:18:45 2003
+  PDFcreator2.PPD                     A    15746  Sun Apr 20 22:24:07 2003
+  HDNIS01Aux.dll                      A    15356  Sun May  4 04:32:18 2003
+  Hddm91c1KMMin.DLL                   A    46966  Sun May  4 04:32:18 2003
+  HDNIS01_de.DLL                      A   434400  Sun May  4 04:32:18 2003
+  HDNIS01_de.NTF                      A   790404  Sun May  4 04:32:18 2003
+  Hddm91c1_de.DLL                     A   876544  Sun May  4 04:32:18 2003
+  Hddm91c1_de.INI                     A      101  Sun May  4 04:32:18 2003
+  Hddm91c1_de.dat                     A     5044  Sun May  4 04:32:18 2003
+  Hddm91c1_de.def                     A      428  Sun May  4 04:32:18 2003
+  Hddm91c1_de.hlp                     A    37699  Sun May  4 04:32:18 2003
+  Hddm91c1_de.hre                     A   323584  Sun May  4 04:32:18 2003
+  Hddm91c1_de.ppd                     A    26373  Sun May  4 04:32:18 2003
+  Hddm91c1_de.vnd                     A    45056  Sun May  4 04:32:18 2003
+  HDNIS01U_de.DLL                     A   165888  Sun May  4 04:32:18 2003
+  HDNIS01U_de.HLP                     A    19770  Sun May  4 04:32:18 2003
+  Hddm91c1_de_reg.HLP                 A   228417  Sun May  4 04:32:18 2003
+                40976 blocks of size 262144. 731 blocks available
+
+

    +Another verification is that the timestamp of the printing TDB files +is now updated (and possibly their filesize has increased). +

    Check if the Driver is recognized by Samba

    +Now the driver should be registered with Samba. We can easily verify +this, and will do so in a moment. However, this driver is +not yet associated with a particular +printer. We may check the driver status of the +files by at least three methods: +

    • from any Windows client browse Network Neighbourhood, +finde the Samba host and open the Samba Printers and +Faxes folder. Select any printer icon, right-click and +select the printer Properties. Click on the +Advanced tab. Here is a field indicating the +driver for that printer. A drop down menu allows you to change that +driver (be carefull to not do this unwittingly.). You can use this +list to view all drivers know to Samba. Your new one should be amongst +them. (Each type of client will only see his own architecture's +list. If you don't have every driver installed for each platform, the +list will differ if you look at it from Windows95/98/ME or +WindowsNT/2000/XP.)

    • from a Windows 2000 or XP client (not WinNT) browse +Network Neighbourhood, search for the Samba +server and open the server's Printers folder, +right-click the white background (with no printer highlighted). Select +Server Properties. On the +Drivers tab you will see the new driver listed +now. This view enables you to also inspect the list of files belonging +to that driver (this doesn't work on Windows NT, but only on +Windows 2000 and Windows XP. WinNT doesn't provide the "Drivers" +tab).. An alternative, much quicker method for Windows +2000/XP to start this dialog is by typing into a DOS box (you must of +course adapt the name to your Samba server instead of SAMBA-CUPS): +

      rundll32 printui.dll,PrintUIEntry /s /t2 /n\\SAMBA-CUPS

    • from a UNIX prompt run this command (or a variant +thereof), where SAMBA-CUPS is the name of the Samba +host and "xxxx" represents the actual Samba password assigned to root: +

      rpcclient -U'root%xxxx' -c 'enumdrivers' SAMBA-CUPS

      +You will see a listing of all drivers Samba knows about. Your new one +should be amongst them. But it is only listed under the [Windows NT +x86] heading, not under [Windows 4.0], +since we didn't install that part. Or did *you*? -- You will see a listing of +all drivers Samba knows about. Your new one should be amongst them. In our +example it is named dm9110. Note that the 3rd column +shows the other installed drivers twice, for each supported architecture one +time. Our new driver only shows up for +Windows NT 4.0 or 2000. To +have it present for Windows 95, 98 and ME you'll +have to repeat the whole procedure with the WIN40 architecture and subdirectory. +

    A sidenote: you are not bound to specific driver names

    +You can name the driver as you like. If you repeat the +adddriver step, with the same files as before, but +with a different driver name, it will work the same: +

    +root# rpcclient -Uroot%xxxx                                        \
+      -c 'adddriver "Windows NT x86"                     \
+      "myphantasydrivername:HDNIS01_de.DLL:              \
+      Hddm91c1_de.ppd:HDNIS01U_de.DLL:HDNIS01U_de.HLP:   \
+      NULL:RAW:Hddm91c1_de.DLL,Hddm91c1_de.INI,          \
+      Hddm91c1_de.dat,Hddm91c1_de.def,Hddm91c1_de.hre,   \
+      Hddm91c1_de.vnd,Hddm91c1_de.hlp,Hddm91c1KMMin.DLL, \
+      HDNIS01Aux.dll,HDNIS01_de.NTF,Hddm91c1_de_reg.HLP' SAMBA-CUPS
+  
+
+ cmd = adddriver "Windows NT x86" 
+                 "myphantasydrivername:HDNIS01_de.DLL:Hddm91c1_de.ppd:HDNIS01U_de.DLL:\
+                  HDNIS01U_de.HLP:NULL:RAW:Hddm91c1_de.DLL,Hddm91c1_de.INI,           \
+                  Hddm91c1_de.dat,Hddm91c1_de.def,Hddm91c1_de.hre,                    \
+                  Hddm91c1_de.vnd,Hddm91c1_de.hlp,Hddm91c1KMMin.DLL,                  \
+                  HDNIS01Aux.dll,HDNIS01_de.NTF,Hddm91c1_de_reg.HLP"
+
+ Printer Driver myphantasydrivername successfully installed.
+
+

    +You will also be able to bind that driver to any print queue (however, +you are responsible yourself that you associate drivers to queues +which make sense to the target printer). Note, that you can't run the +rpcclient adddriver command +repeatedly. Each run "consumes" the files you had put into the +[print$] share by moving them into the +respective subdirectories. So you must precede an +smbclient ... put command before each +rpcclient ... addriver" command. +

    La Grande Finale: Running rpcclient with +setdriver

    +Samba still needs to know which printer's driver +this is. It needs to create a mapping of the driver to a printer, and +store this info in its "memory", the TDB files. The rpcclient +setdriver command achieves exactly this: +

    +root# rpcclient -U'root%xxxx' -c 'setdriver dm9110 myphantasydrivername' SAMBA-CUPS
+ cmd = setdriver dm9110 myphantasydrivername
+ Successfully set dm9110 to driver myphantasydrivername.
+

    +Ahhhhh -- no, I didn't want to do that. Repeat, this time with the +name I intended: +

    +root# rpcclient -U'root%xxxx' -c 'setdriver dm9110 dm9110' SAMBA-CUPS
+ cmd = setdriver dm9110 dm9110
+ Succesfully set dm9110 to driver dm9110.
+

    +The syntax of the command is rpcclient +-U'root%sambapassword' -c 'setdriver +"printername" +"drivername' +SAMBA-Hostname . -- +Now we have done *most* of the work. But not yet all.... +

    Note

    +the setdriver command will only succeed if the printer is +known to +Samba already. A bug in 2.2.x prevented Samba from recognizing freshly +installed printers. You had to restart Samba, or at least send a HUP +signal to all running smbd processes to work around this: +kill -HUP `pidof smbd`.

    "The Proof of the Pudding lies in the Eating" (Client Driver Insta +Procedure)

    +A famous philosopher said once: “The Proof of the Pudding lies +in the Eating”. The proof for our setup lies in the printing. +So let's install the printer driver onto the client PCs. This is not +as straightforward as it may seem. Read on. +

    The first Client Driver Installation

    +Especially important is the installation onto the first client PC (for +each architectural platform separately). Once this is done correctly, +all further clients are easy to setup and shouldn't need further +attention. What follows is a description for the recommended first +procedure. You work now from a client workstation. First you should +guarantee that your connection is not unwittingly mapped to +bad user "nobody". In a DOS box type: +

    net use \\SAMBA-SERVER\print$ /user:root

    +Replace root, if needed, by another valid +printer admin user as given in the definition. +Should you already be connected as a different user, you'll get an error +message. There is no easy way to get rid of that connection, because +Windows doesn't seem to know a concept of "logging off" from a share +connection (don't confuse this with logging off from the local +workstation; that is a different matter). You can try to close +all Windows file explorer and Internet Explorer +windows. As a last resort, you may have to reboot. Make sure there is +no automatic re-connection set up. It may be easier to go to a +different workstation and try from there. After you have made sure you +are connected as a printer admin user (you can check this with the +smbstatus command on Samba) do this from the +Windows workstation: +

    • Open Network +Neighbourhood

    • Browse to Samba server

    • Open its Printers and +Faxes folder

    • Highlight and right-click the printer

    • Select Connect... (for WinNT4/2K +it is possibly Install...)

    +A new printer (named printername on +samba-server) should now have appeared in your +local Printer folder (check Start -- +Settings -- Control Panel +-- Printers and Faxes). +

    +Most likely you are now tempted to try and print a test page. After +all, you now can open the printer properties and on the "General" tab, +there is a button offering to do just that. But chances are that you +get an error message saying Unable to print Test +Page. The reason might be that there is not yet a +valid Device Mode set for the driver, or that the "Printer Driver +Data" set is still incomplete. +

    +You must now make sure that a valid "Device Mode" is set for the +driver. Don't fear -- we will explain now what that means. +

    IMPORTANT! Setting Device Modes on new Printers

    +In order for a printer to be truly usable by a Windows NT/2K/XP +client, it must possess: +

    • a valid Device Mode generated by +the driver for the printer (defining things like paper size, +orientation and duplex settings), and

    • a complete set of +Printer Driver Data generated by the +driver.

    +If either one of these is incomplete, the clients can produce less +than optimal output at best. In the worst cases, unreadable garbage or +nothing at all comes from the printer or they produce a harvest of +error messages when attempting to print. Samba stores the named values +and all printing related info in its internal TDB database files +(ntprinters.tdb, +ntdrivers.tdb, printing.tdb +and ntforms.tdb). +

    +What do these two words stand for? Basically, the Device Mode and the +set of Printer Driver Data is a collection of settings for all print +queue properties, initialized in a sensible way. Device Modes and +Printer Driver Data should initially be set on the print server (that is +here: the Samba host) to healthy values so that the clients can start +to use them immediately. How do we set these initial healthy values? +This can be achieved by accessing the drivers remotely from an NT (or +2k/XP) client, as is discussed in the next paragraphs. +

    +Be aware, that a valid Device Mode can only be initiated by a +printer admin, or root (the reason should be +obvious). Device Modes can only correctly be set by executing the +printer driver program itself. Since Samba can not execute this Win32 +platform driver code, it sets this field initially to NULL (which is +not a valid setting for clients to use). Fortunately, most drivers +generate themselves the Printer Driver Data that is needed, when they +are uploaded to the [print$] share with the +help of the APW or rpcclient. +

    +The generation and setting of a first valid Device Mode however +requires some "tickling" from a client, to set it on the Samba +server. The easiest means of doing so is to simply change the page +orientation on the server's printer. This "executes" enough of the +printer driver program on the client for the desired effect to happen, +and feeds back the new Device Mode to our Samba server. You can use the +native Windows NT/2K/XP printer properties page from a Window client +for this: +

    • Browse the Network Neighbourhood

    • Find the Samba server

    • Open the Samba server's Printers and + Faxes folder

    • Highlight the shared printer in question

    • Right-click the printer (you may already be here, if you +followed the last section's description)

    • At the bottom of the context menu select +Properties.... (if the menu still offers the +Connect... entry +further above, you need to click that one first to achieve the driver +installation as shown in the last section)

    • Go to the Advanced tab; click on +Printing Defaults...

    • Change the "Portrait" page setting to "Landscape" (and +back)

    • (Oh, and make sure to apply +changes between swapping the page orientation to cause the change to +actually take effect...).

    • While you're at it, you may optionally also want to +set the desired printing defaults here, which then apply to all future +client driver installations on the remaining from now +on.

    +This procedure has executed the printer driver program on the client +platform and fed back the correct Device Mode to Samba, which now +stored it in its TDB files. Once the driver is installed on the +client, you can follow the analogous steps by accessing the +local Printers folder too if you are +a Samba printer admin user. From now on printing should work as expected. +

    +Samba also includes a service level parameter name default +devmode for generating a default Device Mode for a +printer. Some drivers will function well with Samba's default set of +properties. Others may crash the client's spooler service. So use this +parameter with caution. It is always better to have the client +generate a valid device mode for the printer and store it on the +server for you. +

    Further Client Driver Install Procedures

    +Every further driver may be done by any user, along the lines +described above: Browse network, open printers folder on Samba server, +right-click printer and choose Connect.... Once +this completes (should be not more than a few seconds, but could also take +a minute, depending on network conditions), you should find the new printer in +your client workstation local Printers and +Faxes folder. +

    +You can also open your local Printers and Faxes folder by +using this command on Windows 2000 and Windows XP Professional workstations: +

    rundll32 shell32.dll,SHHelpShortcuts_RunDLL PrintersFolder +

    +or this command on Windows NT 4.0 workstations: +

    +rundll32 shell32.dll,Control_RunDLL MAIN.CPL @2 +

    +You can enter the commands either inside a DOS box window +or in the Run command... field from the +Start menu. +

    Always make first Client Connection as root or "printer admin"

    +After you installed the driver on the Samba server (in its +[print$] share, you should always make sure +that your first client installation completes correctly. Make it a habit for +yourself to build that the very first connection from a client as +printer admin. This is to make sure that: +

    • a first valid Device Mode is +really initialized (see above for more explanation details), and +that

    • the default print settings of your printer for all +further client installations are as you want them

    +Do this by changing the orientation to landscape, click +Apply, and then change it back again. Then modify +the other settings (for example, you don't want the default media size +set to Letter, when you are all using +A4, right? You may want to set the printer for +duplex as the default; etc.). +

    +To connect as root to a Samba printer, try this command from a Windows +2K/XP DOS box command prompt: +

    runas /netonly /user:root "rundll32 printui.dll,PrintUIEntry /p /t3 /n \\SAMBA-SERVER\printername" +

    +You will be prompted for root's Samba-password; type it, wait a few +seconds, click on Printing Defaults... and +proceed to set the job options as should be used as defaults by all +clients. Alternatively, instead of root you can name one other member +of the printer admins from the setting. +

    +Now all the other users downloading and installing the driver +the same way (called Point'n'Print) will +have the same defaults set for them. If you miss this step you'll +get a lot of helpdesk calls from your users. But maybe you like to +talk to people.... ;-) +

    Other Gotchas

    +Your driver is installed. It is ready for +Point'n'Print installation by the clients +now. You may have tried to download and use it +onto your first client machine now. But wait... let's make you +acquainted first with a few tips and tricks you may find useful. For +example, suppose you didn't manage to "set the defaults" on the +printer, as advised in the preceeding paragraphs? And your users +complain about various issues (such as “We need to set the paper +size for each job from Letter to A4 and it won't store it!”) +

    Setting Default Print Options for the Client Drivers

    +The last sentence might be viewed with mixed feelings by some users and +admins. They have struggled for hours and hours and couldn't arrive at +a point were their settings seemed to be saved. It is not their +fault. The confusing thing is this: in the multi-tabbed dialog that pops +up when you right-click the printer name and select +Properties..., you can arrive at two identically +looking dialogs, each claiming that they help you to set printer options, +in three different ways. Here is the definite answer to the "Samba +Default Driver Setting FAQ": +

    “I can't set and save default print options +for all users on Win2K/XP! Why not?” +How are you doing it? I bet the wrong way.... (it is not very +easy to find out, though). There are 3 different ways to bring you to +a dialog that seems to set everything. All three +dialogs look the same. Only one of them +does what you intend. +Important: you need to be Administrator or Print +Administrator to do this for all users. Here is how I reproduce it in +on XP Professional: + +

    1. The first "wrong" way: + +

      1. Open the Printers +folder.

      2. Right-click on the printer +(remoteprinter on cupshost) and +select in context menu Printing +Preferences...

      3. Look at this dialog closely and remember what it looks +like.

      +

    2. The second "wrong" way: + +

      1. Open the Printers +folder.

      2. Right-click on the printer (remoteprinter on +cupshost) and select in the context menu +Properties

      3. Click on the General +tab

      4. Click on the button Printing +Preferences...

      5. A new dialog opens. Keep this dialog open and go back +to the parent dialog.

      +

    3. The third, the "correct" way: (should you do +this from the beginning, just carry out steps 1. and 2. from second +"way" above) + +

      1. Click on the Advanced +tab. (Hmmm... if everything is "Grayed Out", then you are not logged +in as a user with enough privileges).

      2. Click on the Printing +Defaults... button.

      3. On any of the two new tabs, click on the +Advanced... button.

      4. A new dialog opens. Compare this one to the other, +identical looking one from "B.5" or A.3".

      +

    + +Do you see any difference in the two settings dialogs? I don't +either. However, only the last one, which you arrived at with steps +C.1.-6. will permanently save any settings which will then become the +defaults for new users. If you want all clients to have the same +defaults, you need to conduct these steps as administrator +(printer admin in ) +before a client downloads the driver (the clients +can later set their own per-user defaults by +following the proceduresA. +orB. above...). (This is new: Windows 2000 and +Windows XP allow per-user default settings and +the ones the administrator gives them, before they set up their own). +The "parents" of the identically looking dialogs have a slight +difference in their window names: one is called +Default Print Values for Printer Foo on Server +Bar" (which is the one you need) and the other is +called "Print Settings for Printer Foo on Server +Bar". The last one is the one you arrive at when you +right-click on the printer and select Print +Settings.... This is the one what you were +taught to use back in the days of Windows NT! So it is only natural to +try the same way with Win2k or WinXP. You wouldn't dream +that there is now a different "clicking path" to arrive at an +identically looking, but functionally different dialog to set defaults +for all users! +

    Tip

    Try (on Win2000 and WinXP) to run this command (as a user +with the right privileges): +

    +rundll32 printui.dll,PrintUIEntry /p /t3 /n\\SAMBA-SERVER\printersharename +

    +to see the tab with the Printing Defaults... +button (the one you need). Also run this command: +

    +rundll32 printui.dll,PrintUIEntry /p /t0 /n\\SAMBA-SERVER\printersharename +

    +to see the tab with the Printing Preferences... +button (the one which doesn't set system-wide defaults). You can +start the commands from inside a DOS box" or from the Start +-- Run... menu. +

    Supporting large Numbers of Printers

    +One issue that has arisen during the recent development phase of Samba +is the need to support driver downloads for 100's of printers. Using +Windows NT APW here is somewhat awkward (to say the least). If you +don't want to acquire RSS pains from such the printer installation +clicking orgy alone, you need to think about a non-interactive script. +

    +If more than one printer is using the same driver, the +rpcclient setdriver command can be used to set the +driver associated with an installed queue. If the driver is uploaded +to [print$] once and registered with the +printing TDBs, it can be used by multiple print queues. In this case +you just need to repeat the setprinter subcommand +of rpcclient for every queue (without the need to +conduct the adddriver again and again). The +following is an example of how this could be accomplished: +

    +root# rpcclient SAMBA-CUPS -U root%secret -c 'enumdrivers'
+ cmd = enumdrivers
+ 
+ [Windows NT x86]
+ Printer Driver Info 1:
+   Driver Name: [infotec  IS 2075 PCL 6]
  
-[Windows NT x86]
-Printer Driver Info 1:
-     Driver Name: [HP LaserJet 4000 Series PS]
+ Printer Driver Info 1:
+   Driver Name: [DANKA InfoStream]
  
-Printer Driver Info 1:
-     Driver Name: [HP LaserJet 2100 Series PS]
+ Printer Driver Info 1:
+   Driver Name: [Heidelberg Digimaster 9110 (PS)]
  
-Printer Driver Info 1:
-     Driver Name: [HP LaserJet 4Si/4SiMX PS]
-				  
-$ rpcclient pogo -U root%secret -c "enumprinters"
-Domain=[NARNIA] OS=[Unix] Server=[Samba 2.2.0-alpha3]
-     flags:[0x800000]
-     name:[\\POGO\hp-print]
-     description:[POGO\\POGO\hp-print,NO DRIVER AVAILABLE FOR THIS PRINTER,]
-     comment:[]
-				  
-$ rpcclient pogo -U root%secret \
->  -c "setdriver hp-print \"HP LaserJet 4000 Series PS\""
-Domain=[NARNIA] OS=[Unix] Server=[Samba 2.2.0-alpha3]
-Successfully set hp-print to driver HP LaserJet 4000 Series PS.

    14.2.4. Adding New Printers via the Windows NT APW

    By default, Samba offers all printer shares defined in smb.conf -in the "Printers..." folder. Also existing in this folder is the Windows NT -Add Printer Wizard icon. The APW will be show only if

    In order to be able to use the APW to successfully add a printer to a Samba -server, the add -printer command must have a defined value. The program -hook must successfully add the printer to the system (i.e. -/etc/printcap or appropriate files) and -smb.conf if necessary.

    When using the APW from a client, if the named printer share does -not exist, smbd will execute the add printer -command and reparse to the smb.conf -to attempt to locate the new printer share. If the share is still not defined, -an error of "Access Denied" is returned to the client. Note that the -add printer program is executed under the context -of the connected user, not necessarily a root account.

    There is a complementary delete -printer command for removing entries from the "Printers..." -folder.

    The following is an example add printer command script. It adds the appropriate entries to /etc/printcap.local (change that to what you need) and returns a line of 'Done' which is needed for the whole process to work.

    #!/bin/sh
+ Printer Driver Info 1:
+   Driver Name: [dm9110]
+
+ Printer Driver Info 1:
+   Driver Name: [myphantasydrivername]
+
+ [....]
+

    + +

    +root# rpcclient SAMBA-CUPS -U root%secret -c 'enumprinters'
+ cmd = enumprinters
+   flags:[0x800000]
+   name:[\\SAMBA-CUPS\dm9110]
+   description:[\\SAMBA-CUPS\dm9110,,110ppm HiVolume DANKA Stuttgart]
+   comment:[110 ppm HiVolume DANKA Stuttgart]
+ [....]
+

    + +

    +root# rpcclient SAMBA-CUPS -U root%secret -c 'setdriver dm9110 "Heidelberg Digimaster 9110 (PS)"'
+ cmd = setdriver dm9110 Heidelberg Digimaster 9110 (PPD)
+ Successfully set dm9110 to driver Heidelberg Digimaster 9110 (PS).
+

    + +

    +root# rpcclient SAMBA-CUPS -U root%secret -c 'enumprinters'
+ cmd = enumprinters
+   flags:[0x800000]
+   name:[\\SAMBA-CUPS\dm9110]
+   description:[\\SAMBA-CUPS\dm9110,Heidelberg Digimaster 9110 (PS),110ppm HiVolume DANKA Stuttgart]
+   comment:[110ppm HiVolume DANKA Stuttgart]
+ [....]
+

    + +

    +root# rpcclient SAMBA-CUPS -U root%secret -c 'setdriver dm9110 myphantasydrivername'
+ cmd = setdriver dm9110 myphantasydrivername
+ Successfully set dm9110 to myphantasydrivername.
+

    + +

    +root# rpcclient SAMBA-CUPS -U root%secret -c 'enumprinters'
+ cmd = enumprinters
+   flags:[0x800000]
+   name:[\\SAMBA-CUPS\dm9110]
+   description:[\\SAMBA-CUPS\dm9110,myphantasydrivername,110ppm HiVolume DANKA Stuttgart]
+   comment:[110ppm HiVolume DANKA Stuttgart]
+ [....]
+

    +It may be not easy to recognize: but the first call to +enumprinters showed the "dm9110" printer with an +empty string where the driver should have been listed (between the 2 +commas in the "description" field). After the +setdriver command succeeded, all is well. (The +CUPS Printing chapter has more info about the installation of printer +drivers with the help of rpccclient). +

    Adding new Printers with the Windows NT APW

    +By default, Samba exhibits all printer shares defined in +smb.conf in the +Printers... folder. Also located in this folder +is the Windows NT Add Printer Wizard icon. The APW will be shown only +if: +

    • ...the connected user is able to successfully execute +an OpenPrinterEx(\\server) with administrative +privileges (i.e. root or printer admin). +

      Tip

      Try this from a Windows 2K/XP DOS box command prompt: +

      +runas /netonly /user:root rundll32 printui.dll,PrintUIEntry /p /t0 /n \\SAMBA-SERVER\printersharename +

      +and click on Printing Preferences... +

    • ... contains the setting +show add printer wizard = yes (the +default).

    +The APW can do various things: +

    • upload a new driver to the Samba +[print$] share;

    • associate an uploaded driver with an existing (but +still "driverless") print queue;

    • exchange the currently used driver for an existing +print queue with one that has been uploaded before;

    • add an entirely new printer to the Samba host (only in +conjunction with a working add printer command; +a corresponding delete printer command for +removing entries from the Printers... folder +may be provided too)

    +The last one (add a new printer) requires more effort than the +previous ones. In order to use the APW to successfully add a printer +to a Samba server, the add printer command must +have a defined value. The program hook must successfully add the +printer to the Unix print system (i.e. to +/etc/printcap, +/etc/cups/printers.conf or other appropriate +files) and to if necessary. +

    +When using the APW from a client, if the named printer share does not +exist, smbd will execute the add printer +command and reparse to the +to attempt to locate the new printer share. If the share is still not +defined, an error of Access Denied is +returned to the client. Note that the add printer +command is executed under the context of the connected +user, not necessarily a root account. A map to guest = bad +user may have connected you unwittingly under the wrong +privilege; you should check it by using the +smbstatus command. +

    Weird Error Message Cannot connect under a +different Name

    +Once you are connected with the wrong credentials, there is no means +to reverse the situation other than to close all Explorer windows, and +perhaps reboot. +

    • The net use \\SAMBA-SERVER\sharename +/user:root gives you an error message: Multiple +connections to a server or a shared resource by the same user +utilizing the several user names are not allowed. Disconnect all +previous connections to the server, resp. the shared resource, and try +again.

    • Every attempt to "connect a network drive" to +\\SAMBASERVER\\print$ to z: is countered by the +pertinacious message. This network folder is currently +connected under different credentials (username and password). +Disconnect first any existing connection to this network share in +order to connect again under a different username and +password.

    +So you close all connections. You try again. You get the same +message. You check from the Samba side, using +smbstatus. Yes, there are some more +connections. You kill them all. The client still gives you the same +error message. You watch the smbd.log file on a very high debug level +and try re-connect. Same error message, but not a single line in the +log. You start to wonder if there was a connection attempt at all. You +run ethereal and tcpdump while you try to connect. Result: not a +single byte goes on the wire. Windows still gives the error +message. You close all Explorer Windows and start it again. You try to +connect - and this times it works! Windows seems to cache connection +info somewhere and doesn't keep it up to date (if you are unlucky you +might need to reboot to get rid of the error message). +

    Be careful when assembling Driver Files

    +You need to be very careful when you take notes about the files and +belonging to a particular driver. Don't confuse the files for driver +version "0" (for Win95/98/ME, going into +[print$]/WIN/0/), driver version "2" (Kernel Mode +driver for WinNT, going into [print$]/W32X86/2/ +may be used on Win2K/XP too), and driver version +"3" (non-Kernel Mode driver going into +[print$]/W32X86/3/ can not +be used on WinNT). Very often these different driver versions contain +files carrying the same name; but still the files are very different! +Also, if you look at them from the Windows Explorer (they reside in +%WINDOWS%\system32\spool\drivers\W32X86\) you +will probably see names in capital letters, while an "enumdrivers" +command from Samba would show mixed or lower case letters. So it is +easy to confuse them. If you install them manually using +rpcclient and subcommands, you may even succeed +without an error message. Only later, when you try install on a +client, you will encounter error messages like This +server has no appropriate driver for the printer. +

    +Here is an example. You are invited to look very closely at the +various files, compare their names and their spelling, and discover +the differences in the composition of the version-2 and -3 sets +Note: the version-0 set contained 40 (!) +Dependentfiles, so I left it out for space +reasons: +

    +root# rpcclient -U 'Administrator%secret' -c 'enumdrivers 3' 10.160.50.8 
+
+ Printer Driver Info 3:
+         Version: [3]
+         Driver Name: [Canon iR8500 PS3]
+         Architecture: [Windows NT x86]
+         Driver Path: [\\10.160.50.8\print$\W32X86\3\cns3g.dll]
+         Datafile: [\\10.160.50.8\print$\W32X86\3\iR8500sg.xpd]
+         Configfile: [\\10.160.50.8\print$\W32X86\3\cns3gui.dll]
+         Helpfile: [\\10.160.50.8\print$\W32X86\3\cns3g.hlp]
+ 
+         Dependentfiles: [\\10.160.50.8\print$\W32X86\3\aucplmNT.dll]
+         Dependentfiles: [\\10.160.50.8\print$\W32X86\3\ucs32p.dll]
+         Dependentfiles: [\\10.160.50.8\print$\W32X86\3\tnl32.dll]
+         Dependentfiles: [\\10.160.50.8\print$\W32X86\3\aussdrv.dll]
+         Dependentfiles: [\\10.160.50.8\print$\W32X86\3\cnspdc.dll]
+         Dependentfiles: [\\10.160.50.8\print$\W32X86\3\aussapi.dat]
+         Dependentfiles: [\\10.160.50.8\print$\W32X86\3\cns3407.dll]
+         Dependentfiles: [\\10.160.50.8\print$\W32X86\3\CnS3G.cnt]
+         Dependentfiles: [\\10.160.50.8\print$\W32X86\3\NBAPI.DLL]
+         Dependentfiles: [\\10.160.50.8\print$\W32X86\3\NBIPC.DLL]
+         Dependentfiles: [\\10.160.50.8\print$\W32X86\3\cpcview.exe]
+         Dependentfiles: [\\10.160.50.8\print$\W32X86\3\cpcdspl.exe]
+         Dependentfiles: [\\10.160.50.8\print$\W32X86\3\cpcedit.dll]
+         Dependentfiles: [\\10.160.50.8\print$\W32X86\3\cpcqm.exe]
+         Dependentfiles: [\\10.160.50.8\print$\W32X86\3\cpcspl.dll]
+         Dependentfiles: [\\10.160.50.8\print$\W32X86\3\cfine32.dll]
+         Dependentfiles: [\\10.160.50.8\print$\W32X86\3\cpcr407.dll]
+         Dependentfiles: [\\10.160.50.8\print$\W32X86\3\Cpcqm407.hlp]
+         Dependentfiles: [\\10.160.50.8\print$\W32X86\3\cpcqm407.cnt]
+         Dependentfiles: [\\10.160.50.8\print$\W32X86\3\cns3ggr.dll]
+ 
+         Monitorname: []
+         Defaultdatatype: []
+
+ Printer Driver Info 3:
+         Version: [2]
+         Driver Name: [Canon iR5000-6000 PS3]
+         Architecture: [Windows NT x86]
+         Driver Path: [\\10.160.50.8\print$\W32X86\2\cns3g.dll]
+         Datafile: [\\10.160.50.8\print$\W32X86\2\IR5000sg.xpd]
+         Configfile: [\\10.160.50.8\print$\W32X86\2\cns3gui.dll]
+         Helpfile: [\\10.160.50.8\print$\W32X86\2\cns3g.hlp]
+ 
+         Dependentfiles: [\\10.160.50.8\print$\W32X86\2\AUCPLMNT.DLL]
+         Dependentfiles: [\\10.160.50.8\print$\W32X86\2\aussdrv.dll]
+         Dependentfiles: [\\10.160.50.8\print$\W32X86\2\cnspdc.dll]
+         Dependentfiles: [\\10.160.50.8\print$\W32X86\2\aussapi.dat]
+         Dependentfiles: [\\10.160.50.8\print$\W32X86\2\cns3407.dll]
+         Dependentfiles: [\\10.160.50.8\print$\W32X86\2\CnS3G.cnt]
+         Dependentfiles: [\\10.160.50.8\print$\W32X86\2\NBAPI.DLL]
+         Dependentfiles: [\\10.160.50.8\print$\W32X86\2\NBIPC.DLL]
+         Dependentfiles: [\\10.160.50.8\print$\W32X86\2\cns3gum.dll]
+ 
+         Monitorname: [CPCA Language Monitor2]
+         Defaultdatatype: []
+
+

    +If we write the "version 2" files and the "version 3" files +into different text files and compare the result, we see this +picture: +

    +root# sdiff 2-files 3-files
 
-# Script to insert a new printer entry into printcap.local
-#
-# $1, printer name, used as the descriptive name
-# $2, share name, used as the printer name for Linux
-# $3, port name
-# $4, driver name
-# $5, location, used for the device file of the printer
-# $6, win9x location
 
-#
-# Make sure we use the location that RedHat uses for local printer defs
-PRINTCAP=/etc/printcap.local
-DATE=`date +%Y%m%d-%H%M%S`
-LP=lp
-RESTART="service lpd restart"
+ cns3g.dll                     cns3g.dll
+ iR8500sg.xpd                  iR8500sg.xpd
+ cns3gui.dll                   cns3gui.dll
+ cns3g.hlp                     cns3g.hlp
+ AUCPLMNT.DLL                | aucplmNT.dll
+                             > ucs32p.dll
+                             > tnl32.dll
+ aussdrv.dll                   aussdrv.dll
+ cnspdc.dll                    cnspdc.dll
+ aussapi.dat                   aussapi.dat
+ cns3407.dll                   cns3407.dll
+ CnS3G.cnt                     CnS3G.cnt
+ NBAPI.DLL                     NBAPI.DLL
+ NBIPC.DLL                     NBIPC.DLL
+ cns3gum.dll                 | cpcview.exe
+                             > cpcdspl.exe 
+                             > cpcqm.exe
+                             > cpcspl.dll
+                             > cfine32.dll
+                             > cpcr407.dll
+                             > Cpcqm407.hlp
+                             > cpcqm407.cnt
+                             > cns3ggr.dll
 
-# Keep a copy
-cp $PRINTCAP $PRINTCAP.$DATE
-# Add the printer to $PRINTCAP
-echo ""				 			>> $PRINTCAP
-echo "$2|$1:\\" 					>> $PRINTCAP
-echo "  :sd=/var/spool/lpd/$2:\\" 			>> $PRINTCAP
-echo "  :mx=0:ml=0:sh:\\" 				>> $PRINTCAP
-echo "  :lp=/usr/local/samba/var/print/$5.prn:" 	>> $PRINTCAP
+

    +Don't be fooled though! Driver files for each version with identical +names may be different in their content, as you can see from this size +comparison: +

    +root# for i in cns3g.hlp cns3gui.dll cns3g.dll; do                  \
+           smbclient //10.160.50.8/print\$ -U 'Administrator%xxxx' \
+           -c "cd W32X86/3; dir $i; cd .. ; cd 2; dir $i";      \
+		   done
 
-touch "/usr/local/samba/var/print/$5.prn" >> /tmp/printadd.$$ 2>&1
-chown $LP "/usr/local/samba/var/print/$5.prn" >> /tmp/printadd.$$ 2>&1
+  CNS3G.HLP               A   122981  Thu May 30 02:31:00 2002
+  CNS3G.HLP               A    99948  Thu May 30 02:31:00 2002
 
-mkdir /var/spool/lpd/$2
-chmod 700 /var/spool/lpd/$2
-chown $LP /var/spool/lpd/$2
-#echo $1 >> "/usr/local/samba/var/print/$5.prn"
-#echo $2 >> "/usr/local/samba/var/print/$5.prn"
-#echo $3 >> "/usr/local/samba/var/print/$5.prn"
-#echo $4 >> "/usr/local/samba/var/print/$5.prn"
-#echo $5 >> "/usr/local/samba/var/print/$5.prn"
-#echo $6 >> "/usr/local/samba/var/print/$5.prn"
-$RESTART >> "/usr/local/samba/var/print/$5.prn"
-# Not sure if this is needed
-touch /usr/local/samba/lib/smb.conf
-#
-# You need to return a value, but I am not sure what it means.
-#
-echo "Done"
-exit 0

    14.3. The Imprints Toolset

    The Imprints tool set provides a UNIX equivalent of the - Windows NT Add Printer Wizard. For complete information, please - refer to the Imprints web site at http://imprints.sourceforge.net/ as well as the documentation - included with the imprints source distribution. This section will - only provide a brief introduction to the features of Imprints.

    14.3.4. The Installation Client

    More information regarding the Imprints installation client - is available in the Imprints-Client-HOWTO.ps - file included with the imprints source package.

    The Imprints installation client comes in two forms.

    The installation client (in both forms) provides a means - of querying the Imprints database server for a matching - list of known printer model names as well as a means to - download and install the drivers on remote Samba and Windows - NT print servers.

    The basic installation process is in four steps and - perl code is wrapped around smbclient - and rpcclient.

    	
-foreach (supported architecture for a given driver)
-{
-     1.  rpcclient: Get the appropriate upload directory 
-         on the remote server
-     2.  smbclient: Upload the driver files
-     3.  rpcclient: Issues an AddPrinterDriver() MS-RPC
-}
-	
-4.  rpcclient: Issue an AddPrinterEx() MS-RPC to actually
-    create the printer

    One of the problems encountered when implementing - the Imprints tool set was the name space issues between - various supported client architectures. For example, Windows - NT includes a driver named "Apple LaserWriter II NTX v51.8" - and Windows 95 calls its version of this driver "Apple - LaserWriter II NTX"

    The problem is how to know what client drivers have - been uploaded for a printer. As astute reader will remember - that the Windows NT Printer Properties dialog only includes - space for one printer driver name. A quick look in the - Windows NT 4.0 system registry at

    HKLM\System\CurrentControlSet\Control\Print\Environment -

    will reveal that Windows NT always uses the NT driver - name. This is ok as Windows NT always requires that at least - the Windows NT version of the printer driver is present. - However, Samba does not have the requirement internally. - Therefore, how can you use the NT driver name if is has not - already been installed?

    The way of sidestepping this limitation is to require - that all Imprints printer driver packages include both the Intel - Windows NT and 95/98 printer drivers and that NT driver is - installed first.

    14.4. Diagnosis

    14.4.1. Introduction

    This is a short description of how to debug printing problems with -Samba. This describes how to debug problems with printing from a SMB -client to a Samba server, not the other way around. For the reverse -see the examples/printing directory.

    Ok, so you want to print to a Samba server from your PC. The first -thing you need to understand is that Samba does not actually do any -printing itself, it just acts as a middleman between your PC client -and your Unix printing subsystem. Samba receives the file from the PC -then passes the file to a external "print command". What print command -you use is up to you.

    The whole things is controlled using options in smb.conf. The most -relevant options (which you should look up in the smb.conf man page) -are:

          [global]
-        print command     - send a file to a spooler
-        lpq command       - get spool queue status
-        lprm command      - remove a job
-      [printers]
-        path = /var/spool/lpd/samba

    The following are nice to know about:

            queuepause command   - stop a printer or print queue
-        queueresume command  - start a printer or print queue

    Example:

            print command = /usr/bin/lpr -r -P%p %s
-        lpq command   = /usr/bin/lpq    -P%p %s
-        lprm command  = /usr/bin/lprm   -P%p %j
-        queuepause command = /usr/sbin/lpc -P%p stop
-        queuepause command = /usr/sbin/lpc -P%p start

    Samba should set reasonable defaults for these depending on your -system type, but it isn't clairvoyant. It is not uncommon that you -have to tweak these for local conditions. The commands should -always have fully specified pathnames, as the smdb may not have -the correct PATH values.

    When you send a job to Samba to be printed, it will make a temporary -copy of it in the directory specified in the [printers] section. -and it should be periodically cleaned out. The lpr -r option -requests that the temporary copy be removed after printing; If -printing fails then you might find leftover files in this directory, -and it should be periodically cleaned out. Samba used the lpq -command to determine the "job number" assigned to your print job -by the spooler.

    The %>letter< are "macros" that get dynamically replaced with appropriate -values when they are used. The %s gets replaced with the name of the spool -file that Samba creates and the %p gets replaced with the name of the -printer. The %j gets replaced with the "job number" which comes from -the lpq output.

    14.4.2. Debugging printer problems

    One way to debug printing problems is to start by replacing these -command with shell scripts that record the arguments and the contents -of the print file. A simple example of this kind of things might -be:

    	print command = /tmp/saveprint %p %s
+  CNS3GUI.DLL             A  1805824  Thu May 30 02:31:00 2002
+  CNS3GUI.DLL             A  1785344  Thu May 30 02:31:00 2002
 
-    #!/bin/saveprint
-    # we make sure that we are the right user
-    /usr/bin/id -p >/tmp/tmp.print
-    # we run the command and save the error messages
-    # replace the command with the one appropriate for your system
-    /usr/bin/lpr -r -P$1 $2 2>>&/tmp/tmp.print

    Then you print a file and try removing it. You may find that the -print queue needs to be stopped in order to see the queue status -and remove the job:

    
h4: {42} % echo hi >/tmp/hi
-h4: {43} % smbclient //localhost/lw4
-added interface ip=10.0.0.4 bcast=10.0.0.255 nmask=255.255.255.0
-Password: 
-Domain=[ASTART] OS=[Unix] Server=[Samba 2.0.7]
-smb: \> print /tmp/hi
-putting file /tmp/hi as hi-17534 (0.0 kb/s) (average 0.0 kb/s)
-smb: \> queue
-1049     3            hi-17534
-smb: \> cancel 1049
-Error cancelling job 1049 : code 0
-smb: \> cancel 1049
-Job 1049 cancelled
-smb: \> queue
-smb: \> exit

    The 'code 0' indicates that the job was removed. The comment -by the smbclient is a bit misleading on this. -You can observe the command output and then and look at the -/tmp/tmp.print file to see what the results are. You can quickly -find out if the problem is with your printing system. Often people -have problems with their /etc/printcap file or permissions on -various print queues.

    14.4.4. Setting up printcap and print servers

    You may need to set up some printcaps for your Samba system to use. -It is strongly recommended that you use the facilities provided by -the print spooler to set up queues and printcap information.

    Samba requires either a printcap or program to deliver printcap -information. This printcap information has the format:

      name|alias1|alias2...:option=value:...

    For almost all printing systems, the printer 'name' must be composed -only of alphanumeric or underscore '_' characters. Some systems also -allow hyphens ('-') as well. An alias is an alternative name for the -printer, and an alias with a space in it is used as a 'comment' -about the printer. The printcap format optionally uses a \ at the end of lines -to extend the printcap to multiple lines.

    Here are some examples of printcap files:

    1. pr just printer name

    2. pr|alias printer name and alias

    3. pr|My Printer printer name, alias used as comment

    4. pr:sh:\ Same as pr:sh:cm= testing - :cm= \ - testing

    5. pr:sh Same as pr:sh:cm= testing - :cm= testing

    Samba reads the printcap information when first started. If you make -changes in the printcap information, then you must do the following:

    1. make sure that the print spooler is aware of these changes. -The LPRng system uses the 'lpc reread' command to do this.

    2. make sure that the spool queues, etc., exist and have the -correct permissions. The LPRng system uses the 'checkpc -f' -command to do this.

    3. You now should send a SIGHUP signal to the smbd server to have -it reread the printcap information.

    14.4.5. Job sent, no output

    This is the most frustrating part of printing. You may have sent the -job, verified that the job was forwarded, set up a wrapper around -the command to send the file, but there was no output from the printer.

    First, check to make sure that the job REALLY is getting to the -right print queue. If you are using a BSD or LPRng print spooler, -you can temporarily stop the printing of jobs. Jobs can still be -submitted, but they will not be printed. Use:

      lpc -Pprinter stop

    Now submit a print job and then use 'lpq -Pprinter' to see if the -job is in the print queue. If it is not in the print queue then -you will have to find out why it is not being accepted for printing.

    Next, you may want to check to see what the format of the job really -was. With the assistance of the system administrator you can view -the submitted jobs files. You may be surprised to find that these -are not in what you would expect to call a printable format. -You can use the UNIX 'file' utitily to determine what the job -format actually is:

        cd /var/spool/lpd/printer   # spool directory of print jobs
-    ls                          # find job files
-    file dfA001myhost

    You should make sure that your printer supports this format OR that -your system administrator has installed a 'print filter' that will -convert the file to a format appropriate for your printer.

    14.4.6. Job sent, strange output

    Once you have the job printing, you can then start worrying about -making it print nicely.

    The most common problem is extra pages of output: banner pages -OR blank pages at the end.

    If you are getting banner pages, check and make sure that the -printcap option or printer option is configured for no banners. -If you have a printcap, this is the :sh (suppress header or banner -page) option. You should have the following in your printer.

       printer: ... :sh

    If you have this option and are still getting banner pages, there -is a strong chance that your printer is generating them for you -automatically. You should make sure that banner printing is disabled -for the printer. This usually requires using the printer setup software -or procedures supplied by the printer manufacturer.

    If you get an extra page of output, this could be due to problems -with your job format, or if you are generating PostScript jobs, -incorrect setting on your printer driver on the MicroSoft client. -For example, under Win95 there is a option:

      Printers|Printer Name|(Right Click)Properties|Postscript|Advanced|

    that allows you to choose if a Ctrl-D is appended to all jobs. -This is a very bad thing to do, as most spooling systems will -automatically add a ^D to the end of the job if it is detected as -PostScript. The multiple ^D may cause an additional page of output.

    PrevHomeNext
    Hosting a Microsoft Distributed File System tree on SambaUpUnified Logons between Windows NT and UNIX using Winbind
    \ No newline at end of file +

    +In my example were even more differences than shown here. Conclusion: +you must be very careful to select the correct driver files for each +driver version. Don't rely on the names alone. Don't interchange files +belonging to different driver versions. +

    Samba and Printer Ports

    +Windows NT/2000 print servers associate a port with each +printer. These normally take the form of LPT1:, +COM1:, FILE:, etc. Samba +must also support the concept of ports associated with a printer. By +default, only one printer port, named "Samba Printer Port", exists on +a system. Samba does not really need such a "port" in order to print; +it rather is a requirement of Windows clients. They insist on being +told about an available port when they request this info, otherwise +they throw an error message at you. So Samba fakes the port +information to keep the Windows clients happy. +

    +Note that Samba does not support the concept of "Printer Pooling" +internally either. Printer Pooling assigns a logical printer to +multiple ports as a form of load balancing or fail over. +

    +If you require that multiple ports be defined for some reason or +another (“My users and my Boss should not know that they are +working with Samba”), possesses a +enumports command which can be used to define +an external program that generates a listing of ports on a system. +

    Avoiding the most common Misconfigurations of the Client Driver

    +So - printing works, but there are still problems. Most jobs print +well, some don't print at all. Some jobs have problems with fonts, +which don't look good at all. Some jobs print fast, and some are +dead-slow. We can't cover it all; but we want to encourage you to read +the little paragraph about "Avoiding the wrong PostScript Driver +Settings" in the CUPS Printing part of this document. +

    The Imprints Toolset

    +The Imprints tool set provides a UNIX equivalent of the +Windows NT Add Printer Wizard. For complete information, please +refer to the Imprints web site +athttp://imprints.sourceforge.net/ +as well as the documentation included with the imprints source +distribution. This section will only provide a brief introduction +to the features of Imprints. +

    Attention! Maintainer required. +Unfortunately, the Imprints toolset is no longer maintained. As of +December, 2000, the project is in need of a new maintainer. The most +important skill to have is decent perl coding and an interest in +MS-RPC based printing using Samba. If you wish to volunteer, please +coordinate your efforts on the samba-technical mailing list. The +toolset is still in usable form; but only for a series of older +printer models, where there are prepared packages to use. Packages for +more up to date print devices are needed if Imprints should have a +future.

    What is Imprints?

    +Imprints is a collection of tools for supporting these goals: +

    • Providing a central repository information regarding +Windows NT and 95/98 printer driver packages

    • Providing the tools necessary for creating the +Imprints printer driver packages.

    • Providing an installation client which will obtain +printer drivers from a central internet (or intranet) Imprints Server +repository and install them on remote Samba and Windows NT4 print +servers.

    Creating Printer Driver Packages

    +The process of creating printer driver packages is beyond the scope of +this document (refer to Imprints.txt also included with the Samba +distribution for more information). In short, an Imprints driver +package is a gzipped tarball containing the driver files, related INF +files, and a control file needed by the installation client. +

    The Imprints Server

    +The Imprints server is really a database server that may be queried +via standard HTTP mechanisms. Each printer entry in the database has +an associated URL for the actual downloading of the package. Each +package is digitally signed via GnuPG which can be used to verify that +package downloaded is actually the one referred in the Imprints +database. It is strongly recommended that this security check +not be disabled. +

    The Installation Client

    +More information regarding the Imprints installation client is +available in the Imprints-Client-HOWTO.ps file +included with the imprints source package. +

    +The Imprints installation client comes in two forms. +

    • a set of command line Perl scripts

    • a GTK+ based graphical interface to the command line Perl +scripts

    +The installation client (in both forms) provides a means of querying +the Imprints database server for a matching list of known printer +model names as well as a means to download and install the drivers on +remote Samba and Windows NT print servers. +

    +The basic installation process is in four steps and perl code is +wrapped around smbclient and rpcclient +

    • + foreach (supported architecture for a given driver) +

      1. rpcclient: Get the appropriate upload directory on the remote server

      2. smbclient: Upload the driver files

      3. rpcclient: Issues an AddPrinterDriver() MS-RPC

      +

    • rpcclient: Issue an AddPrinterEx() MS-RPC to actually create the printer

    +One of the problems encountered when implementing the Imprints tool +set was the name space issues between various supported client +architectures. For example, Windows NT includes a driver named "Apple +LaserWriter II NTX v51.8" and Windows 95 calls its version of this +driver "Apple LaserWriter II NTX" +

    +The problem is how to know what client drivers have been uploaded for +a printer. An astute reader will remember that the Windows NT Printer +Properties dialog only includes space for one printer driver name. A +quick look in the Windows NT 4.0 system registry at +

    + HKLM\System\CurrentControlSet\Control\Print\Environment +

    +will reveal that Windows NT always uses the NT driver name. This is +ok as Windows NT always requires that at least the Windows NT version +of the printer driver is present. However, Samba does not have the +requirement internally. Therefore, how can you use the NT driver name +if is has not already been installed? +

    +The way of sidestepping this limitation is to require that all +Imprints printer driver packages include both the Intel Windows NT and +95/98 printer drivers and that NT driver is installed first. +

    Add Network Printers at Logon without User Interaction

    +The following MS Knowledge Base article may be of some help if you +need to handle Windows 2000 clients: How to Add Printers +with No User Interaction in Windows 2000. ( http://support.microsoft.com/default.aspx?scid=kb;en-us;189105 +). It also applies to Windows XP Professional clients. +

    +The ideas sketched out below are inspired by this article. It +describes a commandline method which can be applied to install +network and local printers and their drivers. This is most useful +if integrated in Logon Scripts. You can see what options are +available by typing in a command prompt ("DOS box") this: +

    rundll32 printui.dll,PrintUIEntry /?

    +A window pops up which shows you all of the commandline switches +available. An extensive list of examples is also provided. This is +only for Win 2k/XP. It doesn't work on WinNT. WinNT has probably some +other tools in the respective Resource Kit. Here is a suggestion about +what a client logon script might contain, with a short explanation of +what the lines actually do (it works if 2k/XP Windows clients access +printers via Samba, but works for Windows-based print servers too): +

    +rundll32 printui.dll,PrintUIEntry /dn /n "\\sambacupsserver\infotec2105-IPDS" /q
+rundll32 printui.dll,PrintUIEntry /in /n "\\sambacupsserver\infotec2105-PS"
+rundll32 printui.dll,PrintUIEntry /y /n "\\sambacupsserver\infotec2105-PS"
+

    +Here is a list of the used commandline parameters: +

    /dn

    deletes a network printer

    /q

    quiet modus

    /n

    names a printer

    /in

    adds a network printer connection

    /y

    sets printer as default printer

    +I have tested this with a Samba 2.2.7a and a Samba-3alpha24 +installation and Windows XP Professional clients. Note that this +specific command set works with network print queues (installing +local print queues requires different parameters, but this is of no +interest here). +

    • Line 1 deletes a possibly existing previous network +printer infotec2105-IPDS (which had used native +Windows drivers with LPRng that were removed from the server which was +converted to CUPS). The /q at the end eliminates +"Confirm" or error dialog boxes popping up. They should not be +presented to the user logging on.

    • Line 2 adds the new printer +infotec2105-PS (which actually is same physical +device but is now run by the new CUPS printing system and associated +with the CUPS/Adobe PS drivers). The printer and its driver +must have been added to Samba prior to the user +logging in (e.g. by a procedure as discussed earlier in this chapter, +or by running cupsaddsmb). The driver is now +auto-downloaded to the client PC where the user is about to log +in.

    • Line 3 sets the default printer to this new network +printer (there might be several other printers installed with this +same method and some may be local as well -- so we deside for a +default printer). The default printer selection may of course be +different for different users.

    +Note that the second line only works if the printer +infotec2105-PS has an already working printqueue +on "sambacupsserver", and if the printer drivers have sucessfully been +uploaded (via APW , +smbclient/rpcclient or +cupsaddsmb) into the +[print$] driver repository of Samba. Also, some +Samba versions prior to version 3.0 required a re-start of smbd after +the printer install and the driver upload, otherwise the script (or +any other client driver download) would fail. +

    +Since there no easy way to test for the existence of an installed +network printer from the logon script, the suggestion is: don't bother +checking and just allow the deinstallation/reinstallation to occur +every time a user logs in; it's really quick anyway (1 to 2 seconds). +

    +The additional benefits for this are: +

    • It puts in place any printer default setup changes +automatically at every user logon.

    • It allows for "roaming" users' login into the domain from +different workstations.

    +Since network printers are installed per user this much simplifies the +process of keeping the installation up-to-date. The extra few seconds +at logon time will not really be noticeable. Printers can be centrally +added, changed, and deleted at will on the server with no user +intervention required on the clients (you just need to keep the logon +scripts up to date). +

    The addprinter command

    +The addprinter command can be configured to be a +shell script or program executed by Samba. It is triggered by running +the APW from a client against the Samba print server. The APW asks the +user to fill in several fields (such as printer name, driver to be +used, comment, port monitor, etc.). These parameters are passed on to +Samba by the APW. If the addprinter command is designed in a way that +it can create a new printer (through writing correct printcap entries +on legacy systems, or execute the lpadmin command +on more modern systems) and create the associated share in +, then the APW will in effect really +create a new printer on Samba and the UNIX print subsystem! +

    Migration of "Classical" printing to Samba-3

    +The basic "NT-style" printer driver management has not changed +considerably in 3.0 over the 2.2.x releases (apart from many small +improvements). Here migration should be quite easy, especially if you +followed previous advice to stop using deprecated parameters in your +setup. For migrations from an existing 2.0.x setup, or if you +continued "Win9x-style" printing in your Samba 2.2 installations, it +is more of an effort. Please read the appropriate release notes and +the HOWTO Collection for 2.2. You can follow several paths. Here are +possible scenarios for migration: +

    • You need to study and apply the new Windows NT printer +and driver support. Previously used parameters "printer +driver file", " printer driver" and +"printer driver location" are no longer +supported.

    • If you want to take advantage of WinNT printer driver +support you also need to migrate theWin9x/ME drivers to the new +setup.

    • An existing printers.def file +(the one specified in the now removed parameter printer +driver file = ...) will work no longer with Samba-3.0. In +3.0, smbd attempts to locate a Win9x/ME driver files for the printer +in [print$] and additional settings in the TDB +and only there; if it fails it will not (as 2.2.x +used to do) drop down to using a printers.def +(and all associated parameters). The make_printerdef tool is removed +and there is no backwards compatibility for this.

    • You need to install a Windows 9x driver into the +[print$] share for a printer on your Samba +host. The driver files will be stored in the "WIN40/0" subdirectory of +[print$], and some other settings and info go +into the printing-related TDBs.

    • If you want to migrate an existing +printers.def file into the new setup, the current +only solution is to use the Windows NT APW to install the NT drivers +and the 9x drivers. This can be scripted using smbclient and +rpcclient. See the Imprints installation client at: +

      +http://imprints.sourceforge.net/ +

      +for an example. See also the discussion of rpcclient usage in the +"CUPS Printing" section.

    Publishing Printer Information in Active Directory or LDAP

    +We will publish an update to this section shortly. +

    Common Errors and Problems

    +Here are a few typical errors and problems people have +encountered. You can avoid them. Read on. +

    I give my root password but I don't get access

    +Don't confuse the root password which is valid for the Unix system +(and in most cases stored in the form of a one-way hash in a file +named /etc/shadow) with the password used to +authenticate against Samba!. Samba doesn't know the UNIX password; for +root to access Samba resources via Samba-type access, a Samba account +for root must be created first. This is often done with the +smbpasswd command. +

    My printjobs get spooled into the spooling directory, but then get lost

    +Don't use the existing Unix print system spool directory for the Samba +spool directory. It may seem convenient and a saving of space, but it +only leads to problems. The two must be separate. +

    PrevUpNext
    Chapter17.Hosting a Microsoft Distributed File System tree on SambaHomeChapter19.CUPS Printing Support in Samba 3.0
    diff --git a/docs/htmldocs/rpcclient.1.html b/docs/htmldocs/rpcclient.1.html index e695663c8a..47c4d914a5 100644 --- a/docs/htmldocs/rpcclient.1.html +++ b/docs/htmldocs/rpcclient.1.html @@ -1,781 +1,198 @@ - -rpcclient

    rpcclient

    Name

    rpcclient -- tool for executing client side - MS-RPC functions

    Synopsis

    rpcclient [-A authfile] [-c <command string>] [-d debuglevel] [-h] [-l logfile] [-N] [-s <smb config file>] [-U username[%password]] [-W workgroup] [-N] [-I destinationIP] {server}

    DESCRIPTION

    This tool is part of the Samba suite.

    rpcclient is a utility initially developed +rpcclient

    Name

    rpcclient — tool for executing client side + MS-RPC functions

    Synopsis

    rpcclient [-A authfile] [-c <command string>] [-d debuglevel] [-h] [-l logfile] [-N] [-s <smb config file>] [-U username[%password]] [-W workgroup] [-N] [-I destinationIP] {server}

    DESCRIPTION

    This tool is part of the Samba(7) suite.

    rpcclient is a utility initially developed to test MS-RPC functionality in Samba itself. It has undergone several stages of development and stability. Many system administrators have now written scripts around it to manage Windows NT clients from - their UNIX workstation.

    OPTIONS

    server

    NetBIOS name of Server to which to connect. + their UNIX workstation.

    OPTIONS

    server

    NetBIOS name of Server to which to connect. The server can be any SMB/CIFS server. The name is - resolved using the name resolve order line from - smb.conf(5).

    -A|--authfile=filename

    This option allows - you to specify a file from which to read the username and - password used in the connection. The format of the file is - 

    		username = <value> 
-		password = <value>
-		domain   = <value>
-

    Make certain that the permissions on the file restrict - access from unwanted users.

    -c|--command='command string'

    execute semicolon separated commands (listed - below))

    -d|--debug=debuglevel

    debuglevel is an integer + resolved using the + name resolve order line from smb.conf(5).

    -c|--command='command string'

    execute semicolon separated commands (listed + below))

    -I IP-address

    IP address is the address of the server to connect to. + It should be specified in standard "a.b.c.d" notation.

    Normally the client would attempt to locate a named + SMB/CIFS server by looking it up via the NetBIOS name resolution + mechanism described above in the name resolve order + parameter above. Using this parameter will force the client + to assume that the server is on the machine with the specified IP + address and the NetBIOS name component of the resource being + connected to will be ignored.

    There is no default for this parameter. If not supplied, + it will be determined automatically by the client as described + above.

    -V

    Prints the version number for +smbd.

    -s <configuration file>

    The file specified contains the +configuration details required by the server. The +information in this file includes server-specific +information such as what printcap file to use, as well +as descriptions of all the services that the server is +to provide. See +smb.conf(5) for more information. +The default configuration file name is determined at +compile time.

    -d|--debug=debuglevel

    debuglevel is an integer from 0 to 10. The default value if this parameter is -not specified is zero.

    The higher this value, the more detail will be +not specified is zero.

    The higher this value, the more detail will be logged to the log files about the activities of the server. At level 0, only critical errors and serious warnings will be logged. Level 1 is a reasonable level for day to day running - it generates a small amount of -information about operations carried out.

    Levels above 1 will generate considerable +information about operations carried out.

    Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem. Levels above 3 are designed for use only by developers and generate HUGE amounts of log -data, most of which is extremely cryptic.

    Note that specifying this parameter here will -override the log -level parameter in the smb.conf(5) file.

    -h|--help

    Print a summary of command line options.

    -I IP-address

    IP address is the address of the server to connect to. - It should be specified in standard "a.b.c.d" notation.

    Normally the client would attempt to locate a named - SMB/CIFS server by looking it up via the NetBIOS name resolution - mechanism described above in the name resolve order - parameter above. Using this parameter will force the client - to assume that the server is on the machine with the specified IP - address and the NetBIOS name component of the resource being - connected to will be ignored.

    There is no default for this parameter. If not supplied, - it will be determined automatically by the client as described - above.

    -l|--logfile=logbasename

    File name for log/debug files. The extension - '.client' will be appended. The log file is - never removed by the client. -

    -N|--nopass

    instruct rpcclient not to ask - for a password. By default, rpcclient will - prompt for a password. See also the -U - option.

    -s|--conf=smb.conf

    Specifies the location of the all-important - smb.conf file.

    -U|--user=username[%password]

    Sets the SMB username or username and password.

    If %password is not specified, the user will be prompted. The - client will first check the USER environment variable, then the - LOGNAME variable and if either exists, the - string is uppercased. If these environmental variables are not - found, the username GUEST is used.

    A third option is to use a credentials file which - contains the plaintext of the username and password. This - option is mainly provided for scripts where the admin does not - wish to pass the credentials on the command line or via environment - variables. If this method is used, make certain that the permissions - on the file restrict access from unwanted users. See the - -A for more details.

    Be cautious about including passwords in scripts. Also, on - many systems the command line of a running process may be seen - via the ps command. To be safe always allow - rpcclient to prompt for a password and type - it in directly.

    -W|--workgroup=domain

    Set the SMB domain of the username. This - overrides the default domain which is the domain defined in - smb.conf. If the domain specified is the same as the server's NetBIOS name, - it causes the client to log on using the server's local SAM (as - opposed to the Domain SAM).

    COMMANDS

    LSARPC

    • lsaquery

    • lookupsids - Resolve a list +data, most of which is extremely cryptic.

      Note that specifying this parameter here will +override the log +level parameter in the +smb.conf(5) file.

      -l|--logfile=logbasename

      File name for log/debug files. The extension +".client" will be appended. The log file is +never removed by the client. +

      -N

      If specified, this parameter suppresses the normal +password prompt from the client to the user. This is useful when +accessing a service that does not require a password.

      Unless a password is specified on the command line or +this parameter is specified, the client will request a +password.

      -k

      +Try to authenticate with kerberos. Only useful in +an Active Directory environment. +

      -A|--authfile=filename

      This option allows +you to specify a file from which to read the username and +password used in the connection. The format of the file is +

      +username = <value>
+password = <value>
+domain   = <value>
+

      Make certain that the permissions on the file restrict +access from unwanted users.

      -U|--user=username[%password]

      Sets the SMB username or username and password.

      If %password is not specified, the user will be prompted. The +client will first check the USER environment variable, then the +LOGNAME variable and if either exists, the +string is uppercased. If these environmental variables are not +found, the username GUEST is used.

      A third option is to use a credentials file which +contains the plaintext of the username and password. This +option is mainly provided for scripts where the admin does not +wish to pass the credentials on the command line or via environment +variables. If this method is used, make certain that the permissions +on the file restrict access from unwanted users. See the +-A for more details.

      Be cautious about including passwords in scripts. Also, on +many systems the command line of a running process may be seen +via the ps command. To be safe always allow +rpcclient to prompt for a password and type +it in directly.

      -n <primary NetBIOS name>

      This option allows you to override +the NetBIOS name that Samba uses for itself. This is identical +to setting the NetBIOS +name parameter in the smb.conf(5) file. However, a command +line setting will take precedence over settings in +smb.conf(5).

      -i <scope>

      This specifies a NetBIOS scope that +nmblookup will use to communicate with when +generating NetBIOS names. For details on the use of NetBIOS +scopes, see rfc1001.txt and rfc1002.txt. NetBIOS scopes are +very rarely used, only set this parameter +if you are the system administrator in charge of all the +NetBIOS systems you communicate with.

      -W|--workgroup=domain

      Set the SMB domain of the username. This +overrides the default domain which is the domain defined in +smb.conf. If the domain specified is the same as the servers +NetBIOS name, it causes the client to log on using the servers local +SAM (as opposed to the Domain SAM).

      -O socket options

      TCP socket options to set on the client +socket. See the socket options parameter in +the smb.conf(5) manual page for the list of valid +options.

      -h|--help

      Print a summary of command line options. +

    COMMANDS

    LSARPC

    lsaquery

    Query info policy

    lookupsids

    Resolve a list of SIDs to usernames. -

  • lookupnames - Resolve a list +

    • lookupnames

    Resolve a list of usernames to SIDs. -

  • enumtrusts

    • SAMR

    • queryuser

    • querygroup

    • queryusergroups

    • querygroupmem

    • queryaliasmem

    • querydispinfo

    • querydominfo

    • enumdomgroups

    SPOOLSS

    • adddriver <arch> <config> - - Execute an AddPrinterDriver() RPC to install the printer driver +

    enumtrusts

    Enumerate trusted domains

    enumprivs

    Enumerate privileges

    getdispname

    Get the privilege name

    lsaenumsid

    Enumerate the LSA SIDS

    lsaenumprivsaccount

    Enumerate the privileges of an SID

    lsaenumacctrights

    Enumerate the rights of an SID

    lsaenumacctwithright

    Enumerate accounts with a right

    lsaaddacctrights

    Add rights to an account

    lsaremoveacctrights

    Remove rights from an account

    lsalookupprivvalue

    Get a privilege value given its name

    lsaquerysecobj

    Query LSA security object

    LSARPC-DS

    dsroledominfo

    Get Primary Domain Information

    DFS

    dfsexist

    Query DFS support

    dfsadd

    Add a DFS share

    dfsremove

    Remove a DFS share

    dfsgetinfo

    Query DFS share info

    dfsenum

    Enumerate dfs shares

    REG

    shutdown

    Remote Shutdown

    abortshutdown

    Abort Shutdown

    SRVSVC

    srvinfo

    Server query info

    netshareenum

    Enumerate shares

    netfileenum

    Enumerate open files

    netremotetod

    Fetch remote time of day

    SAMR

    queryuser

    Query user info

    querygroup

    Query group info

    queryusergroups

    Query user groups

    querygroupmem

    Query group membership

    queryaliasmem

    Query alias membership

    querydispinfo

    Query display info

    querydominfo

    Query domain info

    enumdomusers

    Enumerate domain users

    enumdomgroups

    Enumerate domain groups

    enumalsgroups

    Enumerate alias groups

    createdomuser

    Create domain user

    samlookupnames

    Look up names

    samlookuprids

    Look up names

    deletedomuser

    Delete domain user

    samquerysecobj

    Query SAMR security object

    getdompwinfo

    Retrieve domain password info

    lookupdomain

    Look up domain

    SPOOLSS

    adddriver <arch> <config>

    + Execute an AddPrinterDriver() RPC to install the printer driver information on the server. Note that the driver files should already exist in the directory returned by - getdriverdir. Possible values for - arch are the same as those for - the getdriverdir command. - The config parameter is defined as - follows: 

    		Long Printer Name:\
-		Driver File Name:\
-		Data File Name:\
-		Config File Name:\
-		Help File Name:\
-		Language Monitor Name:\
-		Default Data Type:\
-		Comma Separated list of Files
-

    Any empty fields should be enter as the string "NULL".

    Samba does not need to support the concept of Print Monitors + getdriverdir. Possible values for + arch are the same as those for + the getdriverdir command. + The config parameter is defined as + follows: 

    +Long Printer Name:\
+Driver File Name:\
+Data File Name:\
+Config File Name:\
+Help File Name:\
+Language Monitor Name:\
+Default Data Type:\
+Comma Separated list of Files
+

    Any empty fields should be enter as the string "NULL".

    Samba does not need to support the concept of Print Monitors since these only apply to local printers whose driver can make use of a bi-directional link for communication. This field should - be "NULL". On a remote NT print server, the Print Monitor for a + be "NULL". On a remote NT print server, the Print Monitor for a driver must already be installed prior to adding the driver or - else the RPC will fail.

  • addprinter <printername> - <sharename> <drivername> <port> - - Add a printer on the remote server. This printer + else the RPC will fail.

    • addprinter <printername> + <sharename> <drivername> <port>

    + Add a printer on the remote server. This printer will be automatically shared. Be aware that the printer driver - must already be installed on the server (see adddriver) - and the portmust be a valid port name (see - enumports.

  • deldriver - Delete the + must already be installed on the server (see adddriver) + and the portmust be a valid port name (see + enumports.

    • deldriver

    Delete the specified printer driver for all architectures. This does not delete the actual driver files from the server, only the entry from the server's list of drivers. -

  • enumdata - Enumerate all +

    • enumdata

    Enumerate all printer setting data stored on the server. On Windows NT clients, these values are stored in the registry, while Samba servers store them in the printers TDB. This command corresponds to the MS Platform SDK GetPrinterData() function (* This - command is currently unimplemented).

  • enumjobs <printer> - - List the jobs and status of a given printer. + command is currently unimplemented).

    • enumdataex

    Enumerate printer data for a key

    enumjobs <printer>

    List the jobs and status of a given printer. This command corresponds to the MS Platform SDK EnumJobs() - function (* This command is currently unimplemented).

  • enumports [level] - - Executes an EnumPorts() call using the specified + function

    • enumkey

    Enumerate + printer keys

    enumports [level]

    + Executes an EnumPorts() call using the specified info level. Currently only info levels 1 and 2 are supported. -

  • enumdrivers [level] - - Execute an EnumPrinterDrivers() call. This lists the various installed +

    • enumdrivers [level]

    + Execute an EnumPrinterDrivers() call. This lists the various installed printer drivers for all architectures. Refer to the MS Platform SDK documentation for more details of the various flags and calling - options. Currently supported info levels are 1, 2, and 3.

  • enumprinters [level] - - Execute an EnumPrinters() call. This lists the various installed + options. Currently supported info levels are 1, 2, and 3.

    • enumprinters [level]

    Execute an EnumPrinters() call. This lists the various installed and share printers. Refer to the MS Platform SDK documentation for more details of the various flags and calling options. Currently - supported info levels are 0, 1, and 2.

  • getdata <printername> - - Retrieve the data for a given printer setting. See - the enumdata command for more information. + supported info levels are 1, 2 and 5.

    • getdata <printername> <valuename;>

    Retrieve the data for a given printer setting. See + the enumdata command for more information. This command corresponds to the GetPrinterData() MS Platform - SDK function (* This command is currently unimplemented).

  • getdriver <printername> - - Retrieve the printer driver information (such as driver file, + SDK function.

    • getdataex

    Get + printer driver data with + keyname

    getdriver <printername>

    + Retrieve the printer driver information (such as driver file, config file, dependent files, etc...) for the given printer. This command corresponds to the GetPrinterDriver() MS Platform SDK function. Currently info level 1, 2, and 3 are supported. -

  • getdriverdir <arch> - - Execute a GetPrinterDriverDirectory() +

    • getdriverdir <arch>

    + Execute a GetPrinterDriverDirectory() RPC to retrieve the SMB share name and subdirectory for storing printer driver files for a given architecture. Possible - values for arch are "Windows 4.0" - (for Windows 95/98), "Windows NT x86", "Windows NT PowerPC", "Windows - Alpha_AXP", and "Windows NT R4000".

  • getprinter <printername> - - Retrieve the current printer information. This command + values for arch are "Windows 4.0" + (for Windows 95/98), "Windows NT x86", "Windows NT PowerPC", "Windows + Alpha_AXP", and "Windows NT R4000".

    • getprinter <printername>

    Retrieve the current printer information. This command corresponds to the GetPrinter() MS Platform SDK function. -

  • openprinter <printername> - - Execute an OpenPrinterEx() and ClosePrinter() RPC - against a given printer.

  • setdriver <printername> - <drivername> - - Execute a SetPrinter() command to update the printer driver +

    • getprintprocdir

    Get + print processor + directory

    openprinter <printername>

    Execute an OpenPrinterEx() and ClosePrinter() RPC + against a given printer.

    setdriver <printername> + <drivername>

    Execute a SetPrinter() command to update the printer driver associated with an installed printer. The printer driver must - already be correctly installed on the print server.

    See also the enumprinters and - enumdrivers commands for obtaining a list of - of installed printers and drivers.

    GENERAL OPTIONS

    • debuglevel - Set the current - debug level used to log information.

    • help (?) - Print a listing of all + already be correctly installed on the print server.

      See also the enumprinters and + enumdrivers commands for obtaining a list of + of installed printers and drivers.

    addform

    Add form

    setform

    Set form

    getform

    Get form

    deleteform

    Delete form

    enumforms

    Enumerate form

    setprinter

    Set printer comment

    setprinterdata

    Set REG_SZ printer data

    rffpcnex

    Rffpcnex test

    NETLOGON

    logonctrl2

    Logon Control 2

    logonctrl

    Logon Control

    samsync

    Sam Synchronisation

    samdeltas

    Query Sam Deltas

    samlogon

    Sam Logon

    GENERAL COMMANDS

    debuglevel

    Set the current + debug level used to log information.

    help (?)

    Print a listing of all known commands or extended help on a particular command. -

  • quit (exit) - Exit rpcclient - .

    • BUGS

    rpcclient is designed as a developer testing tool +

    quit (exit)

    Exit rpcclient + .

    BUGS

    rpcclient is designed as a developer testing tool and may not be robust in certain areas (such as command line parsing). It has been known to generate a core dump upon failures when invalid - parameters where passed to the interpreter.

    From Luke Leighton's original rpcclient man page:

    "WARNING! The MSRPC over SMB code has + parameters where passed to the interpreter.

    From Luke Leighton's original rpcclient man page:

    WARNING! The MSRPC over SMB code has been developed from examining Network traces. No documentation is available from the original creators (Microsoft) on how MSRPC over SMB works, or how the individual MSRPC services work. Microsoft's implementation of these services has been demonstrated (and reported) - to be... a bit flaky in places.

    The development of Samba's implementation is also a bit rough, - and as more of the services are understood, it can even result in - versions of smbd(8) and rpcclient(1) - that are incompatible for some commands or services. Additionally, + to be... a bit flaky in places.

    The development of Samba's implementation is also a bit rough, + and as more of the services are understood, it can even result in + versions of smbd(8) and rpcclient(1) that are incompatible for some commands or services. Additionally, the developers are sending reports to Microsoft, and problems found or reported to Microsoft are fixed in Service Packs, which may - result in incompatibilities."

    VERSION

    This man page is correct for version 3.0 of the Samba - suite.

    AUTHOR

    The original Samba software and related utilities + result in incompatibilities.

    VERSION

    This man page is correct for version 3.0 of the Samba + suite.

    AUTHOR

    The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar - to the way the Linux kernel is developed.

    The original rpcclient man page was written by Matthew + to the way the Linux kernel is developed.

    The original rpcclient man page was written by Matthew Geddes, Luke Kenneth Casson Leighton, and rewritten by Gerald Carter. The conversion to DocBook for Samba 2.2 was done by Gerald - Carter.

    \ No newline at end of file + Carter. The conversion to DocBook XML 4.2 for Samba 3.0 was + done by Alexander Bokovoy.

    diff --git a/docs/htmldocs/samba-bdc.html b/docs/htmldocs/samba-bdc.html index ef06a89416..95d1cc4e5f 100644 --- a/docs/htmldocs/samba-bdc.html +++ b/docs/htmldocs/samba-bdc.html @@ -1,348 +1,246 @@ - -How to Act as a Backup Domain Controller in a Purely Samba Controlled Domain
    SAMBA Project Documentation
    PrevNext

    Chapter 7. How to Act as a Backup Domain Controller in a Purely Samba Controlled Domain

    7.2. Background

    What is a Domain Controller? It is a machine that is able to answer -logon requests from workstations in a Windows NT Domain. Whenever a -user logs into a Windows NT Workstation, the workstation connects to a -Domain Controller and asks him whether the username and password the -user typed in is correct. The Domain Controller replies with a lot of -information about the user, for example the place where the users -profile is stored, the users full name of the user. All this -information is stored in the NT user database, the so-called SAM.

    There are two kinds of Domain Controller in a NT 4 compatible Domain: -A Primary Domain Controller (PDC) and one or more Backup Domain -Controllers (BDC). The PDC contains the master copy of the -SAM. Whenever the SAM has to change, for example when a user changes -his password, this change has to be done on the PDC. A Backup Domain -Controller is a machine that maintains a read-only copy of the -SAM. This way it is able to reply to logon requests and authenticate -users in case the PDC is not available. During this time no changes to -the SAM are possible. Whenever changes to the SAM are done on the PDC, -all BDC receive the changes from the PDC.

    Since version 2.2 Samba officially supports domain logons for all -current Windows Clients, including Windows 2000 and XP. This text -assumes the domain to be named SAMBA. To be able to act as a PDC, some -parameters in the [global]-section of the smb.conf have to be set:

    workgroup = SAMBA
-domain master = yes
-domain logons = yes

    Several other things like a [homes] and a [netlogon] share also may be -set along with settings for the profile path, the users home drive and -others. This will not be covered in this document.

    7.3. What qualifies a Domain Controller on the network?

    Every machine that is a Domain Controller for the domain SAMBA has to -register the NetBIOS group name SAMBA#1c with the WINS server and/or -by broadcast on the local network. The PDC also registers the unique -NetBIOS name SAMBA#1b with the WINS server. The name type #1b is -normally reserved for the domain master browser, a role that has -nothing to do with anything related to authentication, but the -Microsoft Domain implementation requires the domain master browser to -be on the same machine as the PDC.

    7.5. How do I set up a Samba BDC?

    Several things have to be done:

    Finally, the BDC has to be found by the workstations. This can be done -by setting

    workgroup = samba
-domain master = no
-domain logons = yes

    in the [global]-section of the smb.conf of the BDC. This makes the BDC -only register the name SAMBA#1c with the WINS server. This is no -problem as the name SAMBA#1c is a NetBIOS group name that is meant to +Chapter6.Backup Domain Control

    Chapter6.Backup Domain Control
    PrevPartII.Server Configuration BasicsNext

    Chapter6.Backup Domain Control

    John H. Terpstra

    Samba Team

    Volker Lendecke

    Samba Team

    Table of Contents

    Features And Benefits
    Essential Background Information
    MS Windows NT4 Style Domain Control
    Active Directory Domain Control
    What qualifies a Domain Controller on the network?
    How does a Workstation find its domain controller?
    Backup Domain Controller Configuration
    Example Configuration
    Common Errors
    Machine Accounts keep expiring, what can I do?
    Can Samba be a Backup Domain Controller to an NT4 PDC?
    How do I replicate the smbpasswd file?
    Can I do this all with LDAP?

    +Before you continue reading in this section, please make sure that you are comfortable +with configuring a Samba Domain Controller as described in the +Domain Control Chapter. +

    Features And Benefits

    +This is one of the most difficult chapters to summarise. It matters not what we say here +for someone will still draw conclusions and / or approach the Samba-Team with expectations +that are either not yet capable of being delivered, or that can be achieved for more +effectively using a totally different approach. Since this HOWTO is already so large and +extensive, we have taken the decision to provide sufficient (but not comprehensive) +information regarding Backup Domain Control. In the event that you should have a persistent +concern that is not addressed in this HOWTO document then please email +John H Terpstra clearly setting out your requirements +and / or question and we will do our best to provide a solution. +

    +Samba-3 is capable of acting as a Backup Domain Controller to another Samba Primary Domain +Controller. A Samba-3 PDC can operate with an LDAP Account backend. The Samba-3 BDC can +operate with a slave LDAP server for the Account backend. This effectively gives samba a high +degree of scalability. This is a very sweet (nice) solution for large organisations. +

    +While it is possible to run a Samba-3 BDC with non-LDAP backend, the administrator will +need to figure out precisely what is the best way to replicate (copy / distribute) the +user and machine Accounts backend. +

    +The use of a non-LDAP backend SAM database is particularly problematic because Domain member +servers and workstations periodically change the machine trust account password. The new +password is then stored only locally. This means that in the absence of a centrally stored +accounts database (such as that provided with an LDAP based solution) if Samba-3 is running +as a BDC, the PDC instance of the Domain member trust account password will not reach the +PDC (master) copy of the SAM. If the PDC SAM is then replicated to BDCs this results in +overwriting of the SAM that contains the updated (changed) trust account password with resulting +breakage of the domain trust. +

    +Considering the number of comments and questions raised concerning how to configure a BDC +lets consider each possible option and look at the pro's and con's for each theoretical solution: +

    Backup Domain Backend Account Distribution Options

    • + Solution: Passwd Backend is LDAP based, BDCs use a slave LDAP server +

      + Arguments For: This is a neat and manageable solution. The LDAP based SAM (ldapsam) + is constantly kept up to date. +

      + Arguments Against: Complexity +

    • + Passdb Backend is tdbsam based, BDCs use cron based "net rcp vampire" to + suck down the Accounts database from the PDC +

      + Arguments For: It would be a nice solution +

      + Arguments Against: It does not work because Samba-3 does not support the required + protocols. This may become a later feature but is not available today. +

    • + Make use of rsync to replicate (pull down) copies of the essential account files +

      + Arguments For: It is a simple solution, easy to set up as a scheduled job +

      + Arguments Against: This will over-write the locally changed machine trust account + passwords. This is a broken and flawed solution. Do NOT do this. +

    • + Operate with an entirely local accounts database (not recommended) +

      + Arguments For: Simple, easy to maintain +

      + Arguments Against: All machine trust accounts and user accounts will be locally + maintained. Domain users will NOT be able to roam from office to office. This is + a broken and flawed solution. Do NOT do this. +

    Essential Background Information

    +A Domain Controller is a machine that is able to answer logon requests from network +workstations. Microsoft LanManager and IBM LanServer were two early products that +provided this capability. The technology has become known as the LanMan Netlogon service. +

    +When MS Windows NT3.10 was first released it supported an new style of Domain Control +and with it a new form of the network logon service that has extended functionality. +This service became known as the NT NetLogon Service. The nature of this service has +changed with the evolution of MS Windows NT and today provides a very complex array of +services that are implemented over a complex spectrum of technologies. +

    MS Windows NT4 Style Domain Control

    +Whenever a user logs into a Windows NT4 / 200x / XP Profresional Workstation, +the workstation connects to a Domain Controller (authentication server) to validate +the username and password that the user entered are valid. If the information entered +does not validate against the account information that has been stored in the Domain +Control database (the SAM, or Security Accounts Manager database) then a set of error +codes is returned to the workstation that has made the authentication request. +

    +When the username / password pair has been validated, the Domain Controller +(authentication server) will respond with full enumeration of the account information +that has been stored regarding that user in the User and Machine Accounts database +for that Domain. This information contains a complete network access profile for +the user but excludes any information that is particular to the user's desktop profile, +or for that matter it excludes all desktop profiles for groups that the user may +belong to. It does include password time limits, password uniqueness controls, +network access time limits, account validity information, machine names from which the +user may access the network, and much more. All this information was stored in the SAM +in all versions of MS Windows NT (3.10, 3.50, 3.51, 4.0). +

    +The account information (user and machine) on Domain Controllers is stored in two files, +one containing the Security information and the other the SAM. These are stored in files +by the same name in the C:\WinNT\System32\config directory. These +are the files that are involved in replication of the SAM database where Backup Domain +Controllers are present on the network. +

    +There are two situations in which it is desirable to install Backup Domain Controllers: +

    • + On the local network that the Primary Domain Controller is on if there are many + workstations and/or where the PDC is generally very busy. In this case the BDCs + will pick up network logon requests and help to add robustness to network services. +

    • + At each remote site, to reduce wide area network traffic and to add stability to + remote network operations. The design of the network, the strategic placement of + Backup Domain Controllers, together with an implementation that localises as much + of network to client interchange as possible will help to minimise wide area network + bandwidth needs (and thus costs). +

    +The PDC contains the master copy of the SAM. In the event that an administrator makes a +change to the user account database while physically present on the local network that +has the PDC, the change will likely be made directly to the PDC instance of the master +copy of the SAM. In the event that this update may be performed in a branch office the +change will likely be stored in a delta file on the local BDC. The BDC will then send +a trigger to the PDC to commence the process of SAM synchronisation. The PDC will then +request the delta from the BDC and apply it to the master SAM. THe PDC will then contact +all the BDCs in the Domain and trigger them to obtain the update and then apply that to +their own copy of the SAM. +

    +Thus the BDC is said to hold a read-only of the SAM from which +it is able to process network logon requests and to authenticate users. The BDC can +continue to provide this service, particularly while, for example, the wide area +network link to the PDC is down. Thus a BDC plays a very important role in both +maintenance of Domain security as well as in network integrity. +

    +In the event that the PDC should need to be taken out of service, or if it dies, then +one of the BDCs can be promoted to a PDC. If this happens while the original PDC is on +line then it is automatically demoted to a BDC. This is an important aspect of Domain +Controller management. The tool that is used to affect a promotion or a demotion is the +Server Manager for Domains. +

    Example PDC Configuration

    +Since version 2.2 Samba officially supports domain logons for all current Windows Clients, +including Windows NT4, 2003 and XP Professional. For samba to be enabled as a PDC some +parameters in the [global]-section of the smb.conf have to be set: +

    +	workgroup = SAMBA
+	domain master = yes
+	domain logons = yes
+

    +Several other things like a [homes] and a [netlogon] share also need to be set along with +settings for the profile path, the users home drive, etc.. This will not be covered in this +chapter, for more information please refer to the chapter on Domain Control. +

    Active Directory Domain Control

    +As of the release of MS Windows 2000 and Active Directory, this information is now stored +in a directory that can be replicated and for which partial or full administrative control +can be delegated. Samba-3 is NOT able to be a Domain Controller within an Active Directory +tree, and it can not be an Active Directory server. This means that Samba-3 also can NOT +act as a Backup Domain Contoller to an Active Directory Domain Controller. +

    What qualifies a Domain Controller on the network?

    +Every machine that is a Domain Controller for the domain SAMBA has to register the NetBIOS +group name SAMBA<#1c> with the WINS server and/or by broadcast on the local network. +The PDC also registers the unique NetBIOS name SAMBA<#1b> with the WINS server. +The name type <#1b> name is normally reserved for the Domain Master Browser, a role +that has nothing to do with anything related to authentication, but the Microsoft Domain +implementation requires the domain master browser to be on the same machine as the PDC. +

    How does a Workstation find its domain controller?

    +An MS Windows NT4 / 200x / XP Professional workstation in the domain SAMBA that wants a +local user to be authenticated has to find the domain controller for SAMBA. It does this +by doing a NetBIOS name query for the group name SAMBA<#1c>. It assumes that each +of the machines it gets back from the queries is a domain controller and can answer logon +requests. To not open security holes both the workstation and the selected domain controller +authenticate each other. After that the workstation sends the user's credentials (name and +password) to the local Domain Controller, for valdation. +

    Backup Domain Controller Configuration

    +Several things have to be done: +

    • + The domain SID has to be the same on the PDC and the BDC. This used to + be stored in the file private/MACHINE.SID. This file is not created + anymore since Samba 2.2.5 or even earlier. Nowadays the domain SID is + stored in the file private/secrets.tdb. Simply copying the secrets.tdb + from the PDC to the BDC does not work, as the BDC would + generate a new SID for itself and override the domain SID with this + new BDC SID.

      + To retrieve the domain SID from the PDC or an existing BDC and store it in the + secrets.tdb, execute 'net rpc getsid' on the BDC. +

    • + The Unix user database has to be synchronized from the PDC to the + BDC. This means that both the /etc/passwd and /etc/group have to be + replicated from the PDC to the BDC. This can be done manually + whenever changes are made, or the PDC is set up as a NIS master + server and the BDC as a NIS slave server. To set up the BDC as a + mere NIS client would not be enough, as the BDC would not be able to + access its user database in case of a PDC failure. +

    • + The Samba password database in the file private/smbpasswd has to be + replicated from the PDC to the BDC. This is a bit tricky, see the + next section. +

    • + Any netlogon share has to be replicated from the PDC to the + BDC. This can be done manually whenever login scripts are changed, + or it can be done automatically together with the smbpasswd + synchronization. +

    Example Configuration

    +Finally, the BDC has to be found by the workstations. This can be done by setting: +

    +	workgroup = SAMBA
+	domain master = no
+	domain logons = yes
+

    +in the [global]-section of the smb.conf of the BDC. This makes the BDC +only register the name SAMBA<#1c> with the WINS server. This is no +problem as the name SAMBA<#1c> is a NetBIOS group name that is meant to be registered by more than one machine. The parameter 'domain master = -no' forces the BDC not to register SAMBA#1b which as a unique NetBIOS -name is reserved for the Primary Domain Controller.

    PrevHomeNext
    How to Configure Samba as a NT4 Primary Domain ControllerUpSamba as a ADS domain member
    \ No newline at end of file +no' forces the BDC not to register SAMBA<#1b> which as a unique NetBIOS +name is reserved for the Primary Domain Controller. +

    Common Errors

    +As this is a rather new area for Samba there are not many examples that we may refer to. Keep +watching for updates to this section. +

    Machine Accounts keep expiring, what can I do?

    +This problem will occur when occur when the passdb (SAM) files are copied from a central +server but the local Backup Domain Controllers. Local machine trust account password updates +are not copied back to the central server. The newer machine account password is then over +written when the SAM is copied from the PDC. The result is that the Domain member machine +on start up will find that it's passwords does not match the one now in the database and +since the startup security check will now fail, this machine will not allow logon attempts +to procede and the account expiry error will be reported. +

    Can Samba be a Backup Domain Controller to an NT4 PDC?

    +With version 2.2, no. The native NT4 SAM replication protocols have not yet been fully +implemented. The Samba Team is working on understanding and implementing the protocols, +but this work has not been finished for version 2.2. +

    +With version 3.0, the work on both the replication protocols and a suitable storage +mechanism has progressed, and some form of NT4 BDC support is expected soon. +

    +Can I get the benefits of a BDC with Samba? Yes. The main reason for implementing a +BDC is availability. If the PDC is a Samba machine, a second Samba machine can be set up to +service logon requests whenever the PDC is down. +

    How do I replicate the smbpasswd file?

    +Replication of the smbpasswd file is sensitive. It has to be done whenever changes +to the SAM are made. Every user's password change is done in the smbpasswd file and +has to be replicated to the BDC. So replicating the smbpasswd file very often is necessary. +

    +As the smbpasswd file contains plain text password equivalents, it must not be +sent unencrypted over the wire. The best way to set up smbpasswd replication from +the PDC to the BDC is to use the utility rsync. rsync can use ssh as a transport. +Ssh itself can be set up to accept *only* rsync transfer without requiring the user +to type a password. +

    Can I do this all with LDAP?

    +The simple answer is YES. Samba's pdb_ldap code supports binding to a replica +LDAP server, and will also follow referrals and rebind to the master if it ever +needs to make a modification to the database. (Normally BDCs are read only, so +this will not occur often). +

    PrevUpNext
    Chapter5.Domain ControlHomeChapter7.Domain Membership
    diff --git a/docs/htmldocs/samba-pdc.html b/docs/htmldocs/samba-pdc.html index 93bbc727d4..65c39d9399 100644 --- a/docs/htmldocs/samba-pdc.html +++ b/docs/htmldocs/samba-pdc.html @@ -1,2606 +1,550 @@ - -How to Configure Samba as a NT4 Primary Domain Controller
    SAMBA Project Documentation
    PrevNext

    Chapter 6. How to Configure Samba as a NT4 Primary Domain Controller

    6.2. Background

    Author's Note: This document is a combination -of David Bannon's "Samba 2.2 PDC HOWTO" and "Samba NT Domain FAQ". -Both documents are superseded by this one.

    Versions of Samba prior to release 2.2 had marginal capabilities to act -as a Windows NT 4.0 Primary Domain Controller - -(PDC). With Samba 2.2.0, we are proud to announce official support for -Windows NT 4.0-style domain logons from Windows NT 4.0 and Windows -2000 clients. This article outlines the steps -necessary for configuring Samba as a PDC. It is necessary to have a -working Samba server prior to implementing the PDC functionality. If -you have not followed the steps outlined in UNIX_INSTALL.html, please make sure -that your server is configured correctly before proceeding. Another -good resource in the smb.conf(5) man -page. The following functionality should work in 2.2:

    • domain logons for Windows NT 4.0/2000 clients. -

    • placing a Windows 9x client in user level security -

    • retrieving a list of users and groups from a Samba PDC to - Windows 9x/NT/2000 clients -

    • roving (roaming) user profiles -

    • Windows NT 4.0-style system policies -

    The following pieces of functionality are not included in the 2.2 release:

    • Windows NT 4 domain trusts -

    • SAM replication with Windows NT 4.0 Domain Controllers +Chapter5.Domain Control

      Chapter5.Domain Control
      PrevPartII.Server Configuration BasicsNext

      Chapter5.Domain Control

      John H. Terpstra

      Samba Team

      Gerald (Jerry) Carter

      Samba Team

      David Bannon

      Samba Team

      Table of Contents

      Features and Benefits
      Basics of Domain Control
      Domain Controller Types
      Preparing for Domain Control
      Domain Control - Example Configuration
      Samba ADS Domain Control
      Domain and Network Logon Configuration
      Domain Network Logon Service
      Security Mode and Master Browsers
      Common Problems and Errors
      I cannot include a '$' in a machine name
      I get told "You already have a connection to the Domain...." +or "Cannot join domain, the credentials supplied conflict with an +existing set.." when creating a machine trust account.
      The system can not log you on (C000019B)....
      The machine trust account for this computer either does not +exist or is not accessible.
      When I attempt to login to a Samba Domain from a NT4/W2K workstation, +I get a message about my account being disabled.
      Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"

      The Essence of Learning: +There are many who approach MS Windows networking with incredible misconceptions. +That's OK, because it gives the rest of us plenty of opportunity to be of assistance. +Those who really want help would be well advised to become familiar with information +that is already available. +

      +The reader is advised NOT to tackle this section without having first understood +and mastered some basics. MS Windows networking is not particularly forgiving of +misconfiguration. Users of MS Windows networking are likely to complain bitterly +of persistent niggles that may be caused by broken network or system configuration. +To a great many people however, MS Windows networking starts with a domain controller +that in some magical way is expected to solve all ills. +

      +From the Samba mailing list one can readilly identify many common networking issues. +If you are not clear on the following subjects, then it will do much good to read the +sections of this HOWTO that deal with it. These are the most common causes of MS Windows +networking problems: +

      Basic TCP/IP configuration
      NetBIOS name resolution
      Authentication configuration
      User and Group configuration
      Basic File and Directory Permission Control in Unix/Linux
      Understanding of how MS Windows clients interoperate in a network + environment

      +Do not be put off; on the surface of it MS Windows networking seems so simple that any fool +can do it. In fact, it is not a good idea to set up an MS Windows network with +inadequate training and preparation. But let's get our first indelible principle out of the +way: It is perfectly OK to make mistakes! In the right place and at +the right time, mistakes are the essence of learning. It is very much +not ok to make mistakes that cause loss of productivity and impose an avoidable financial +burden on an organisation. +

      +Where is the right place to make mistakes? Only out of harm's way! If you are going to +make mistakes, then please do this on a test network, away from users and in such a way as +to not inflict pain on others. Do your learning on a test network. +

      Features and Benefits

      +What is the key benefit of Microsoft Domain security? +

      +In a word, Single Sign On, or SSO for short. To many, this is the holy +grail of MS Windows NT and beyond networking. SSO allows users in a well designed network +to log onto any workstation that is a member of the domain that their user account is in +(or in a domain that has an appropriate trust relationship with the domain they are visiting) +and they will be able to log onto the network and access resources (shares, files, and printers) +as if they are sitting at their home (personal) workstation. This is a feature of the Domain +security protocols. +

      +The benefits of Domain security are fully available to those sites that deploy a Samba PDC. +

      Note

      +Network clients of an MS Windows Domain security environment must be Domain members to be +able to gain access to the advanced features provided. Domain membership involves more than just +setting the workgroup name to the Domain name. It requires the creation of a Domain trust account +for the workstation (called a machine account). Please refer to the chapter on +Domain Membership for more information. +

      +The following functionalities are new to the Samba-3 release: +

      • + Windows NT4 domain trusts +

      • + Adding users via the User Manager for Domains. This can be done on any MS Windows + client using the Nexus toolkit that is available from Microsoft's web site. + At some later date Samba-3 may get support for the use of the Microsoft Management + Console for user management. +

      • + Introduces replaceable and multiple user account (authentication) + back ends. In the case where the back end is placed in an LDAP database, + Samba-3 confers the benefits of a back end that can be distributed, replicated, + and is highly scalable. +

      • + Implements full Unicode support. This simplifies cross locale internationalisation + support. It also opens up the use of protocols that Samba-2.2.x had but could not use due + to the need to fully support Unicode. +

      +The following functionalities are NOT provided by Samba-3: +

      • + SAM replication with Windows NT4 Domain Controllers (i.e. a Samba PDC and a Windows NT BDC or vice versa) -

      • Adding users via the User Manager for Domains -

      • Acting as a Windows 2000 Domain Controller (i.e. Kerberos and - Active Directory) -

      Please note that Windows 9x clients are not true members of a domain -for reasons outlined in this article. Therefore the protocol for -support Windows 9x-style domain logons is completely different -from NT4 domain logons and has been officially supported for some -time.

      Implementing a Samba PDC can basically be divided into 2 broad -steps.

      1. Configuring the Samba PDC -

      2. Creating machine trust accounts and joining clients - to the domain -

      There are other minor details such as user profiles, system -policies, etc... However, these are not necessarily specific -to a Samba PDC as much as they are related to Windows NT networking -concepts. They will be mentioned only briefly here.

      6.3. Configuring the Samba Domain Controller

      The first step in creating a working Samba PDC is to -understand the parameters necessary in smb.conf. I will not -attempt to re-explain the parameters here as they are more that -adequately covered in the smb.conf -man page. For convenience, the parameters have been -linked with the actual smb.conf description.

      Here is an example smb.conf for acting as a PDC:

      [global]
-    ; Basic server settings
-    netbios name = POGO
-    workgroup = NARNIA
+

    • + Acting as a Windows 2000 Domain Controller (i.e. Kerberos and + Active Directory) - In point of fact, Samba-3 DOES have some + Active Directory Domain Control ability that is at this time + purely experimental AND that is certain + to change as it becomes a fully supported feature some time + during the Samba-3 (or later) life cycle. +

    +Windows 9x / Me / XP Home clients are not true members of a domain for reasons outlined +in this chapter. The protocol for support of Windows 9x / Me style network (domain) logons +is completely different from NT4 / Win2k type domain logons and has been officially supported +for some time. These clients use the old LanMan Network Logon facilities that are supported +in Samba since approximately the Samba-1.9.15 series. +

    +Samba-3 has an implementation of group mapping between Windows NT groups +and Unix groups (this is really quite complicated to explain in a short space). This is +discussed more fully in the Group Mapping chapter. +

    +Samba-3, like an MS Windows NT4 PDC or a Windows 200x Active Directory, needs to store +user and machine trust account information in a suitable backend data store. With Samba-3 +there can be multiple back-ends for this including: +

    • + smbpasswd - the plain ascii file stored used by + earlier versions of Samba. This file configuration option requires + a Unix/Linux system account for EVERY entry (ie: both for user and for + machine accounts). This file will be located in the private + directory (default is /usr/local/samba/lib/private or on linux /etc/samba). +

    • + tdbsam - a binary database backend that will be + stored in the private directory in a file called + passdb.tdb. The key benefit of this binary format + file is that it can store binary objects that can not be accomodated + in the traditional plain text smbpasswd file. These permit the extended + account controls that MS Windows NT4 and later also have. +

    • + ldapsam - An LDAP based back-end. Permits the + LDAP server to be specified. eg: ldap://localhost or ldap://frodo.murphy.com. + Like the tdbsam, ldapsam permits the storing of extended account attributes + for control of things like: Permitted access times, password activation and + expiry, permitted points of access (workstation names), per user profile + location, and much more. +

    • + ldapsam_compat - An LDAP back-end that maintains backwards + compatibility with the behaviour of samba-2.2.x. You should use this in the process + of migrating from samba-2.2.x to samba-3 if you do not want to rebuild your LDAP + database. +

    +Read the chapter about Account Information Database for details +regarding the choices available and how to configure them. +

    Note

    +The new tdbsam and ldapsam account backends store substantially more information than +smbpasswd is capable of. The new backend database includes capacity to specify +per user settings for many parameters, over-riding global settings given in the +smb.conf file. eg: logon drive, logon home, logon path, etc. +Thus, with samba-3 it is possible to have a default system configuration for profiles, +and on a per user basis to over-ride this for those users who should not be subject +to the default configuration. +

    Basics of Domain Control

    +Over the years, public perceptions of what Domain Control really is has taken on an +almost mystical nature. Before we branch into a brief overview of Domain Control, +there are three basic types of domain controllers: +

    Domain Controller Types

    • Primary Domain Controller

    • Backup Domain Controller

    • ADS Domain Controller

    +The Primary Domain Controller or PDC plays an important role in the MS +Windows NT4 and Windows 200x Domain Control architecture, but not in the manner that so many +expect. There is folk lore that dictates that because of it's role in the MS Windows +network, the PDC should be the most powerful and most capable machine in the network. +As strange as it may seem to say this here, good over all network performance dictates that +the entire infrastructure needs to be balanced. It is advisable to invest more in the Backup +Domain Controllers and Stand-Alone (or Domain Member) servers than in the PDC. +

    +In the case of MS Windows NT4 style domains, it is the PDC seeds the Domain Control database, +a part of the Windows registry called the SAM (Security Account Manager). It plays a key +part in NT4 type domain user authentication and in synchronisation of the domain authentication +database with Backup Domain Controllers. +

    +With MS Windows 200x Server based Active Directory domains, one domain controller seeds a potential +hierachy of domain controllers, each with their own area of delegated control. The master domain +controller has the ability to override any down-stream controller, but a down-line controller has +control only over it's down-line. With Samba-3 this functionality can be implemented using an +LDAP based user and machine account back end. +

    +New to Samba-3 is the ability to use a back-end database that holds the same type of data as +the NT4 style SAM (Security Account Manager) database (one of the registry files). +The Samba-3 SAM can be specified via the smb.conf file parameter +passwd backend and valid options include +smbpasswd, tdbsam, ldapsam, nisplussam, xmlsam, mysqlsam, guest. +

    +The Backup Domain Controller or BDC plays a key role in servicing network +authentication requests. The BDC is biased to answer logon requests in preference to the PDC. +On a network segment that has a BDC and a PDC the BDC will be most likely to service network +logon requests. The PDC will answer network logon requests when the BDC is too busy (high load). +A BDC can be promoted to a PDC. If the PDC is on line at the time that a BDC is promoted to +PDC, the previous PDC is automatically demoted to a BDC. With Samba-3 this is NOT an automatic +operation; the PDB and BDC must be manually configured and changes need to be made likewise. +

    +With MS Windows NT4, it is an install time decision what type of machine the server will be. +It is possible to change the promote a BDC to a PDC and vica versa only, but the only way +to convert a domain controller to a domain member server or a stand-alone server is to +reinstall it. The install time choices offered are: +

    • Primary Domain Controller - The one that seeds the domain SAM

    • Backup Domain Controller - One that obtains a copy of the domain SAM

    • Domain Member Server - One that has NO copy of the domain SAM, rather it obtains authentication from a Domain Controller for all access controls.

    • Stand-Alone Server - One that plays NO part is SAM synchronisation, has it's own authentication database and plays no role in Domain security.

    +With MS Windows 2000 the configuration of domain control is done after the server has been +installed. Samba-3 is capable of acting fully as a native member of a Windows 200x server +Active Directory domain. +

    +New to Samba-3 is the ability to function fully as an MS Windows NT4 style Domain Controller, +excluding the SAM replication components. However, please be aware that Samba-3 support the +MS Windows 200x domain control protocols also. +

    +At this time any appearance that Samba-3 is capable of acting as an +ADS Domain Controller is limited and experimental in nature. +This functionality should not be used until the Samba-Team offers formal support for it. +At such a time, the documentation will be revised to duly reflect all configuration and +management requirements. +

    Preparing for Domain Control

    +There are two ways that MS Windows machines may interact with each other, with other servers, +and with Domain Controllers: Either as Stand-Alone systems, more commonly +called Workgroup members, or as full participants in a security system, +more commonly called Domain members. +

    +It should be noted that Workgroup membership involve no special configuration +other than the machine being configured so that the network configuration has a commonly used name +for it's workgroup entry. It is not uncommon for the name WORKGROUP to be used for this. With this +mode of configuration there are NO machine trust accounts and any concept of membership as such +is limited to the fact that all machines appear in the network neighbourhood to be logically +grouped together. Again, just to be clear: workgroup mode does not involve any security machine +accounts. +

    +Domain member machines have a machine account in the Domain accounts database. A special procedure +must be followed on each machine to affect Domain membership. This procedure, which can be done +only by the local machine Administrator account, will create the Domain machine account (if +if does not exist), and then initializes that account. When the client first logs onto the +Domain it triggers a machine password change. +

    Note

    +When running a Domain all MS Windows NT / 200x / XP Professional clients should be configured +as full Domain Members - IF A SECURE NETWORK IS WANTED. If the machine is NOT made a member of the +Domain, then it will operate like a workgroup (stand-alone) machine. Please refer the +Domain Membership chapter for information regarding + HOW to make your MS Windows clients Domain members. +

    +The following are necessary for configuring Samba-3 as an MS Windows NT4 style PDC for MS Windows +NT4 / 200x / XP clients. +

    Configuration of basic TCP/IP and MS Windows Networking
    Correct designation of the Server Role (security = user)
    Consistent configuration of Name Resolution (See chapter on Browsing and on + MS Windows network Integration)
    Domain logons for Windows NT4 / 200x / XP Professional clients
    Configuration of Roaming Profiles or explicit configuration to force local profile usage
    Configuration of Network/System Policies
    Adding and managing domain user accounts
    Configuring MS Windows client machines to become domain members

    +The following provisions are required to serve MS Windows 9x / Me Clients: +

    Configuration of basic TCP/IP and MS Windows Networking
    Correct designation of the Server Role (security = user)
    Network Logon Configuration (Since Windows 9x / XP Home are not technically domain + members, they do not really particpate in the security aspects of Domain logons as such)
    Roaming Profile Configuration
    Configuration of System Policy handling
    Installation of the Network driver "Client for MS Windows Networks" and configuration + to log onto the domain
    Placing Windows 9x / Me clients in user level security - if it is desired to allow + all client share access to be controlled according to domain user / group identities.
    Adding and managing domain user accounts

    Note

    +Roaming Profiles and System/Network policies are advanced network administration topics +that are covered in the Profile Management and +Policy Management chapters of this document. However, these are not necessarily specific +to a Samba PDC as much as they are related to Windows NT networking concepts. +

    +A Domain Controller is an SMB/CIFS server that: +

    • + Registers and advertises itself as a Domain Controller (through NetBIOS broadcasts + as well as by way of name registrations either by Mailslot Broadcasts over UDP broadcast, + to a WINS server over UDP unicast, or via DNS and Active Directory) +

    • + Provides the NETLOGON service (actually a collection of services that runs over + a number of protocols. These include the LanMan Logon service, the Netlogon service, + the Local Security Account service, and variations of them) +

    • + Provides a share called NETLOGON +

    +For Samba to provide these is rather easy to configure. Each Samba Domain Controller must provide +the NETLOGON service which Samba calls the domain logons functionality +(after the name of the parameter in the smb.conf file). Additionally, one (1) server in a Samba-3 +Domain must advertise itself as the domain master browser. This causes the Primary Domain Controller +to claim domain specific NetBIOS name that identifies it as a domain master browser for its given +domain/workgroup. Local master browsers in the same domain/workgroup on broadcast-isolated subnets +then ask for a complete copy of the browse list for the whole wide area network. Browser clients +will then contact their local master browser, and will receive the domain-wide browse list, +instead of just the list for their broadcast-isolated subnet. +

    Domain Control - Example Configuration

    +The first step in creating a working Samba PDC is to understand the parameters necessary +in smb.conf. Here we attempt to explain the parameters that are covered in +the smb.conf man page. +

    +Here is an example smb.conf for acting as a PDC: +

    +	[global]
+	    ; Basic server settings
+	    netbios name = POGO
+	    workgroup = NARNIA
+
+	    ; User and Machine Account Backends
+	    ; Choices are: tdbsam, smbpasswd, ldapsam, mysqlsam, xmlsam, guest
+	    passdb backend = ldapsam, guest
+
+	    ; we should act as the domain and local master browser
+	    os level = 64
+	    preferred master = yes
+	    domain master = yes
+	    local master = yes
+	    
+	    ; security settings (must user security = user)
+	    security = user
+	    
+	    ; encrypted passwords are a requirement for a PDC (default = Yes)
+	    encrypt passwords = yes
+	    
+	    ; support domain logons
+	    domain logons = yes
+	    
+	    ; where to store user profiles?
+	    logon path = \\%N\profiles\%u
+	    
+	    ; where is a user's home directory and where should it be mounted at?
+	    logon drive = H:
+	    logon home = \\homeserver\%u\winprofile
+	    
+	    ; specify a generic logon script for all users
+	    ; this is a relative **DOS** path to the [netlogon] share
+	    logon script = logon.cmd
 
-    ; we should act as the domain and local master browser
-    os level = 64
-    preferred master = yes
-    domain master = yes
-    local master = yes
-    
-    ; security settings (must user security = user)
-    security = user
-    
-    ; encrypted passwords are a requirement for a PDC
-    encrypt passwords = yes
-    
-    ; support domain logons
-    domain logons = yes
-    
-    ; where to store user profiles?
-    logon path = \\%N\profiles\%u
-    
-    ; where is a user's home directory and where should it
-    ; be mounted at?
-    logon drive = H:
-    logon home = \\homeserver\%u
-    
-    ; specify a generic logon script for all users
-    ; this is a relative **DOS** path to the [netlogon] share
-    logon script = logon.cmd
+	; necessary share for domain controller
+	[netlogon]
+	    path = /usr/local/samba/lib/netlogon
+	    read only = yes
+	    write list = ntadmin
+	    
+	; share for storing user profiles
+	[profiles]
+	    path = /export/smb/ntprofile
+	    read only = no
+	    create mask = 0600
+	    directory mask = 0700
+

    Note

    +The above parameters make for a full set of parameters that may define the server's mode +of operation. The following parameters are the essentials alone: -; necessary share for domain controller -[netlogon] - path = /usr/local/samba/lib/netlogon - read only = yes - write list = ntadmin - -; share for storing user profiles -[profiles] - path = /export/smb/ntprofile - read only = no - create mask = 0600 - directory mask = 0700

    There are a couple of points to emphasize in the above configuration.

    • Encrypted passwords must be enabled. For more details on how - to do this, refer to ENCRYPTION.html. -

    • The server must support domain logons and a - [netlogon] share -

    • The server must be the domain master browser in order for Windows +

      +	workgroup = NARNIA
+	domain logons = Yes
+	domain master = Yes
+	security = User
+

      + +The additional parameters shown in the longer listing above just makes for a +more complete environment. +

    +There are a couple of points to emphasize in the above configuration. +

    • + Encrypted passwords must be enabled. For more details on how + to do this, refer to Account Information Database chapter. +

    • + The server must support domain logons and have a + [netlogon] share +

    • + The server must be the domain master browser in order for Windows client to locate the server as a DC. Please refer to the various Network Browsing documentation included with this distribution for details. -

    As Samba 2.2 does not offer a complete implementation of group mapping -between Windows NT groups and Unix groups (this is really quite -complicated to explain in a short space), you should refer to the -domain admin -group smb.conf parameter for information of creating "Domain -Admins" style accounts.

    6.4. Creating Machine Trust Accounts and Joining Clients to the -Domain

    A machine trust account is a Samba account that is used to -authenticate a client machine (rather than a user) to the Samba -server. In Windows terminology, this is known as a "Computer -Account."

    The password of a machine trust account acts as the shared secret for -secure communication with the Domain Controller. This is a security -feature to prevent an unauthorized machine with the same NetBIOS name -from joining the domain and gaining access to domain user/group -accounts. Windows NT and 2000 clients use machine trust accounts, but -Windows 9x clients do not. Hence, a Windows 9x client is never a true -member of a domain because it does not possess a machine trust -account, and thus has no shared secret with the domain controller.

    A Windows PDC stores each machine trust account in the Windows -Registry. A Samba PDC, however, stores each machine trust account -in two parts, as follows: +

    Samba ADS Domain Control

    +Samba-3 is not and can not act as an Active Directory Server. It can not truly function as +an Active Directory Primary Domain Controller. The protocols for some of the functionality +the Active Directory Domain Controllers is have been partially implemented on an experimental +only basis. Please do NOT expect Samba-3 to support these protocols - nor should you depend +on any such functionality either now or in the future. The Samba-Team may well remove such +experiemental features or may change their behaviour. +

    Domain and Network Logon Configuration

    +The subject of Network or Domain Logons is discussed here because it rightly forms +an integral part of the essential functionality that is provided by a Domain Controller. +

    Domain Network Logon Service

    +All Domain Controllers must run the netlogon service (domain logons +in Samba). One Domain Controller must be configured with domain master = Yes +(the Primary Domain Controller); on ALL Backup Domain Controllers domain master = No +must be set. +

    Example Configuration

    +	[globals]
+		domain logons = Yes
+		domain master = (Yes on PDC, No on BDCs)
 
-
    • A Samba account, stored in the same location as user
-    LanMan and NT password hashes (currently
-    smbpasswd). The Samba account 
-    possesses and uses only the NT password hash.
    • A corresponding Unix account, typically stored in
-    /etc/passwd. (Future releases will alleviate the need to
-    create /etc/passwd entries.) 
    There are two ways to create machine trust accounts:
    •  Manual creation. Both the Samba and corresponding
-	Unix account are created by hand.
    •  "On-the-fly" creation. The Samba machine trust
-	account is automatically created by Samba at the time the client
-	is joined to the domain. (For security, this is the
-	recommended method.) The corresponding Unix account may be
-	created automatically or manually. 
    6.4.1. Manual Creation of Machine Trust Accounts
    The first step in manually creating a machine trust account is to
-manually create the corresponding Unix account in
-/etc/passwd.  This can be done using
-vipw or other 'add user' command that is normally
-used to create new Unix accounts.  The following is an example for a
-Linux based Samba server:
      root# /usr/sbin/useradd -g 100 -d /dev/null -c "machine 
-nickname" -s /bin/false machine_name$ 
    root# passwd -l machine_name$
    On *BSD systems, this can be done using the 'chpass' utility:
    root# chpass -a "machine_name$:*:101:100::0:0:Workstation machine_name:/dev/null:/sbin/nologin"
    The /etc/passwd entry will list the machine name 
-with a "$" appended, won't have a password, will have a null shell and no 
-home directory. For example a machine named 'doppy' would have an 
-/etc/passwd entry like this:
    doppy$:x:505:501:machine_nickname:/dev/null:/bin/false
    Above, machine_nickname can be any
-descriptive name for the client, i.e., BasementComputer.
-machine_name absolutely must be the NetBIOS
-name of the client to be joined to the domain.  The "$" must be
-appended to the NetBIOS name of the client or Samba will not recognize
-this as a machine trust account.
    Now that the corresponding Unix account has been created, the next step is to create 
-the Samba account for the client containing the well-known initial 
-machine trust account password.  This can be done using the smbpasswd(8) command 
-as shown here:
    root# smbpasswd -a -m machine_name
    where machine_name is the machine's NetBIOS
-name.  The RID of the new machine account is generated from the UID of 
-the corresponding Unix account.
    Join the client to the domain immediately
     
    	Manually creating a machine trust account using this method is the 
-	equivalent of creating a machine trust account on a Windows NT PDC using 
-	the "Server Manager".  From the time at which the account is created
-	to the time which the client joins the domain and changes the password,
-	your domain is vulnerable to an intruder joining your domain using a
-	a machine with the same NetBIOS name.  A PDC inherently trusts
-	members of the domain and will serve out a large degree of user 
-	information to such clients.  You have been warned!
-	
    6.4.2. "On-the-Fly" Creation of Machine Trust Accounts
    The second (and recommended) way of creating machine trust accounts is
-simply to allow the Samba server to create them as needed when the client
-is joined to the domain. 
    Since each Samba machine trust account requires a corresponding
-Unix account, a method for automatically creating the
-Unix account is usually supplied; this requires configuration of the
-add user script 
-option in smb.conf.  This
-method is not required, however; corresponding Unix accounts may also
-be created manually.
    Below is an example for a RedHat 6.2 Linux system.
    [global]
-   # <...remainder of parameters...>
-   add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u 
    6.4.3. Joining the Client to the Domain
    The procedure for joining a client to the domain varies with the
-version of Windows.

    6.5. Common Problems and Errors

    6.6. System Policies and Profiles

    Much of the information necessary to implement System Policies and -Roving User Profiles in a Samba domain is the same as that for -implementing these same items in a Windows NT 4.0 domain. -You should read the white paper Implementing -Profiles and Policies in Windows NT 4.0 available from Microsoft.

    Here are some additional details:

    • What about Windows NT Policy Editor? -

      To create or edit ntconfig.pol you must use - the NT Server Policy Editor, poledit.exe which - is included with NT Server but not NT Workstation. - There is a Policy Editor on a NTws - but it is not suitable for creating Domain Policies. - Further, although the Windows 95 - Policy Editor can be installed on an NT Workstation/Server, it will not - work with NT policies because the registry key that are set by the policy templates. - However, the files from the NT Server will run happily enough on an NTws. - You need poledit.exe, common.adm and winnt.adm. It is convenient - to put the two *.adm files in c:\winnt\inf which is where - the binary will look for them unless told otherwise. Note also that that - directory is 'hidden'. -

      The Windows NT policy editor is also included with the Service Pack 3 (and - later) for Windows NT 4.0. Extract the files using servicepackname /x, - i.e. that's Nt4sp6ai.exe /x for service pack 6a. The policy editor, - poledit.exe and the associated template files (*.adm) should - be extracted as well. It is also possible to downloaded the policy template - files for Office97 and get a copy of the policy editor. Another possible - location is with the Zero Administration Kit available for download from Microsoft. -

    • Can Win95 do Policies? -

      Install the group policy handler for Win9x to pick up group - policies. Look on the Win98 CD in \tools\reskit\netadmin\poledit. - Install group policies on a Win9x client by double-clicking - grouppol.inf. Log off and on again a couple of - times and see if Win98 picks up group policies. Unfortunately this needs - to be done on every Win9x machine that uses group policies.... -

      If group policies don't work one reports suggests getting the updated - (read: working) grouppol.dll for Windows 9x. The group list is grabbed - from /etc/group. -

    • How do I get 'User Manager' and 'Server Manager' -

      Since I don't need to buy an NT Server CD now, how do I get - the 'User Manager for Domains', the 'Server Manager'? -

      Microsoft distributes a version of these tools called nexus for - installation on Windows 95 systems. The tools set includes -

      • Server Manager

      • User Manager for Domains

      • Event Viewer

      Click here to download the archived file ftp://ftp.microsoft.com/Softlib/MSLFILES/NEXUS.EXE -

      The Windows NT 4.0 version of the 'User Manager for - Domains' and 'Server Manager' are available from Microsoft via ftp - from ftp://ftp.microsoft.com/Softlib/MSLFILES/SRVTOOLS.EXE -

    6.7. What other help can I get?

    There are many sources of information available in the form -of mailing lists, RFC's and documentation. The docs that come -with the samba distribution contain very good explanations of -general SMB topics such as browsing.

    • How do I get help from the mailing lists? -

      There are a number of Samba related mailing lists. Go to http://samba.org, click on your nearest mirror - and then click on Support and then click on Samba related mailing lists. -

      For questions relating to Samba TNG go to - http://www.samba-tng.org/ - It has been requested that you don't post questions about Samba-TNG to the - main stream Samba lists.

      If you post a message to one of the lists please observe the following guide lines : -

      • Always remember that the developers are volunteers, they are - not paid and they never guarantee to produce a particular feature at - a particular time. Any time lines are 'best guess' and nothing more. -

      • Always mention what version of samba you are using and what - operating system its running under. You should probably list the - relevant sections of your smb.conf file, at least the options - in [global] that affect PDC support.

      • In addition to the version, if you obtained Samba via - CVS mention the date when you last checked it out.

      • Try and make your question clear and brief, lots of long, - convoluted questions get deleted before they are completely read ! - Don't post html encoded messages (if you can select colour or font - size its html).

      • If you run one of those nifty 'I'm on holidays' things when - you are away, make sure its configured to not answer mailing lists. -

      • Don't cross post. Work out which is the best list to post to - and see what happens, i.e. don't post to both samba-ntdom and samba-technical. - Many people active on the lists subscribe to more - than one list and get annoyed to see the same message two or more times. - Often someone will see a message and thinking it would be better dealt - with on another, will forward it on for you.

      • You might include partial - log files written at a debug level set to as much as 20. - Please don't send the entire log but enough to give the context of the - error messages.

      • (Possibly) If you have a complete netmon trace ( from the opening of - the pipe to the error ) you can send the *.CAP file as well.

      • Please think carefully before attaching a document to an email. - Consider pasting the relevant parts into the body of the message. The samba - mailing lists go to a huge number of people, do they all need a copy of your - smb.conf in their attach directory?

    • How do I get off the mailing lists? -

      To have your name removed from a samba mailing list, go to the - same place you went to to get on it. Go to http://lists.samba.org, - click on your nearest mirror and then click on Support and - then click on Samba related mailing lists. Or perhaps see - here -

      Please don't post messages to the list asking to be removed, you will just - be referred to the above address (unless that process failed in some way...) -

    6.8. Domain Control for Windows 9x/ME

    The following section contains much of the original -DOMAIN.txt file previously included with Samba. Much of -the material is based on what went into the book Special -Edition, Using Samba, by Richard Sharpe.

    A domain and a workgroup are exactly the same thing in terms of network + [netlogon] + comment = Network Logon Service + path = /var/lib/samba/netlogon + guest ok = Yes + browseable = No +

    The Special Case of MS Windows XP Home Edition

    Note

    +MS Windows XP Home Edition does not have the ability to join any type of Domain +security facility. Unlike, MS Windows 9x / Me, MS Windows XP Home Edition also completely +lacks the ability to log onto a network. +

    +To be completely clear: If you want MS Windows XP Home Edition to integrate with your +MS Windows NT4 or Active Directory Domain security understand - IT CAN NOT BE DONE. +Your only choice is to buy the upgrade pack from MS Windows XP Home Edition to +MS Windows XP Professional. +

    +Now that this has been said, please do NOT ask the mailing list, or email any of the +Samba-Team members with your questions asking how to make this work. It can't be done. +

    The Special Case of Windows 9x / Me

    +A domain and a workgroup are exactly the same thing in terms of network browsing. The difference is that a distributable authentication database is associated with a domain, for secure login access to a network. Also, different access rights can be granted to users if they -successfully authenticate against a domain logon server (NT server and -other systems based on NT server support this, as does at least Samba TNG now).

    The SMB client logging on to a domain has an expectation that every other +successfully authenticate against a domain logon server. Samba-3 does this +now in the same way that MS Windows NT/2K. +

    +The SMB client logging on to a domain has an expectation that every other server in the domain should accept the same authentication information. -Network browsing functionality of domains and workgroups is -identical and is explained in BROWSING.txt. It should be noted, that browsing -is totally orthogonal to logon support.

    Issues related to the single-logon network model are discussed in this +Network browsing functionality of domains and workgroups is identical and +is explained in this documentation under the browsing discussions. +It should be noted, that browsing is totally orthogonal to logon support. +

    +Issues related to the single-logon network model are discussed in this section. Samba supports domain logons, network logon scripts, and user profiles for MS Windows for workgroups and MS Windows 9X/ME clients -which will be the focus of this section.

    When an SMB client in a domain wishes to logon it broadcast requests for a +which are the focus of this section. +

    +When an SMB client in a domain wishes to logon, it broadcasts requests for a logon server. The first one to reply gets the job, and validates its password using whatever mechanism the Samba administrator has installed. It is possible (but very stupid) to create a domain where the user database is not shared between servers, i.e. they are effectively workgroup servers advertising themselves as participating in a domain. This demonstrates how authentication is quite different from but closely -involved with domains.

    Using these features you can make your clients verify their logon via +involved with domains. +

    +Using these features you can make your clients verify their logon via the Samba server; make clients run a batch file when they logon to -the network and download their preferences, desktop and start menu.

    Before launching into the configuration instructions, it is -worthwhile lookingat how a Windows 9x/ME client performs a logon:

    1. The client broadcasts (to the IP broadcast address of the subnet it is in) - a NetLogon request. This is sent to the NetBIOS name DOMAIN<1c> at the +the network and download their preferences, desktop and start menu. +

      +MS Windows XP Home edition is NOT able to join a domain and does not permit +the use of domain logons. +

      +Before launching into the configuration instructions, it is +worthwhile to look at how a Windows 9x/ME client performs a logon: +

      1. + The client broadcasts (to the IP broadcast address of the subnet it is in) + a NetLogon request. This is sent to the NetBIOS name DOMAIN<#1c> at the NetBIOS layer. The client chooses the first response it receives, which contains the NetBIOS name of the logon server to use in the format of - \\SERVER. -

      2. The client then connects to that server, logs on (does an SMBsessetupX) and + \\SERVER. +

      3. + The client then connects to that server, logs on (does an SMBsessetupX) and then connects to the IPC$ share (using an SMBtconX). -

      4. The client then does a NetWkstaUserLogon request, which retrieves the name +

      5. + The client then does a NetWkstaUserLogon request, which retrieves the name of the user's logon script. -

      6. The client then connects to the NetLogon share and searches for this +

      7. + The client then connects to the NetLogon share and searches for said script and if it is found and can be read, is retrieved and executed by the client. After this, the client disconnects from the NetLogon share. -

      8. The client then sends a NetUserGetInfo request to the server, to retrieve +

      9. + The client then sends a NetUserGetInfo request to the server, to retrieve the user's home share, which is used to search for profiles. Since the - response to the NetUserGetInfo request does not contain much more + response to the NetUserGetInfo request does not contain much more than the user's home share, profiles for Win9X clients MUST reside in the user home directory. -

      10. The client then connects to the user's home share and searches for the +

      11. + The client then connects to the user's home share and searches for the user's profile. As it turns out, you can specify the user's home share as - a sharename and path. For example, \\server\fred\.profile. + a sharename and path. For example, \\server\fred\.winprofile. If the profiles are found, they are implemented. -

      12. The client then disconnects from the user's home share, and reconnects to - the NetLogon share and looks for CONFIG.POL, the policies file. If this is +

      13. + The client then disconnects from the user's home share, and reconnects to + the NetLogon share and looks for CONFIG.POL, the policies file. If this is found, it is read and implemented. -

      6.8.1. Configuration Instructions: Network Logons

      The main difference between a PDC and a Windows 9x logon -server configuration is that

      Therefore, a Samba PDC will also act as a Windows 9x logon -server.

      security mode and master browsers
       

      There are a few comments to make in order to tie up some +

      +The main difference between a PDC and a Windows 9x logon server configuration is that +

      • + Password encryption is not required for a Windows 9x logon server. But note + that beginning with MS Windows 98 the default setting is that plain-text + password support has been disabled. It can be re-enabled with the registry + changes that are documented in the chapter on Policies. +

      • + Windows 9x/ME clients do not require and do not use machine trust accounts. +

      +A Samba PDC will act as a Windows 9x logon server; after all, it does provide the +network logon services that MS Windows 9x / Me expect to find. +

      Security Mode and Master Browsers

      +There are a few comments to make in order to tie up some loose ends. There has been much debate over the issue of whether or not it is ok to configure Samba as a Domain Controller in security -modes other than USER. The only security mode -which will not work due to technical reasons is SHARE -mode security. DOMAIN and SERVER -mode security is really just a variation on SMB user level security.

      Actually, this issue is also closely tied to the debate on whether +modes other than USER. The only security mode +which will not work due to technical reasons is SHARE +mode security. DOMAIN and SERVER +mode security are really just a variation on SMB user level security. +

      +Actually, this issue is also closely tied to the debate on whether or not Samba must be the domain master browser for its workgroup when operating as a DC. While it may technically be possible to configure a server as such (after all, browsing and domain logons -are two distinctly different functions), it is not a good idea to -so. You should remember that the DC must register the DOMAIN#1b NetBIOS +are two distinctly different functions), it is not a good idea to do +so. You should remember that the DC must register the DOMAIN<#1b> NetBIOS name. This is the name used by Windows clients to locate the DC. Windows clients do not distinguish between the DC and the DMB. -For this reason, it is very wise to configure the Samba DC as the DMB.

      Now back to the issue of configuring a Samba DC to use a mode other -than "security = user". If a Samba host is configured to use +For this reason, it is very wise to configure the Samba DC as the DMB. +

      +Now back to the issue of configuring a Samba DC to use a mode other +than security = user. If a Samba host is configured to use another SMB server or DC in order to validate user connection requests, then it is a fact that some other machine on the network -(the "password server") knows more about user than the Samba host. +(the password server) knows more about the user than the Samba host. 99% of the time, this other host is a domain controller. Now -in order to operate in domain mode security, the "workgroup" parameter +in order to operate in domain mode security, the workgroup parameter must be set to the name of the Windows NT domain (which already -has a domain controller, right?)

      Therefore configuring a Samba box as a DC for a domain that -already by definition has a PDC is asking for trouble. -Therefore, you should always configure the Samba DC to be the DMB -for its domain.

      6.8.2. Configuration Instructions: Setting up Roaming User Profiles

      NOTE! Roaming profiles support is different -for Win9X and WinNT.

      Before discussing how to configure roaming profiles, it is useful to see how -Win9X and WinNT clients implement these features.

      Win9X clients send a NetUserGetInfo request to the server to get the user's -profiles location. However, the response does not have room for a separate -profiles location field, only the user's home share. This means that Win9X -profiles are restricted to being in the user's home directory.

      WinNT clients send a NetSAMLogon RPC request, which contains many fields, -including a separate field for the location of the user's profiles. -This means that support for profiles is different for Win9X and WinNT.

      6.8.2.2. Windows 9X Configuration

      To support Win9X clients, you must use the "logon home" parameter. Samba has -now been fixed so that "net use/home" now works as well, and it, too, relies -on the "logon home" parameter.

      By using the logon home parameter, you are restricted to putting Win9X -profiles in the user's home directory. But wait! There is a trick you -can use. If you set the following in the [global] section of your -smb.conf file:

      logon home = \\%L\%U\.profiles

      then your Win9X clients will dutifully put their clients in a subdirectory -of your home directory called .profiles (thus making them hidden).

      Not only that, but 'net use/home' will also work, because of a feature in -Win9X. It removes any directory stuff off the end of the home directory area -and only uses the server and share portion. That is, it looks like you -specified \\%L\%U for "logon home".

      6.8.2.4. Windows 9X Profile Setup

      When a user first logs in on Windows 9X, the file user.DAT is created, -as are folders "Start Menu", "Desktop", "Programs" and "Nethood". -These directories and their contents will be merged with the local -versions stored in c:\windows\profiles\username on subsequent logins, -taking the most recent from each. You will need to use the [global] -options "preserve case = yes", "short preserve case = yes" and -"case sensitive = no" in order to maintain capital letters in shortcuts -in any of the profile folders.

      The user.DAT file contains all the user's preferences. If you wish to -enforce a set of preferences, rename their user.DAT file to user.MAN, -and deny them write access to this file.

      1. On the Windows 95 machine, go to Control Panel | Passwords and - select the User Profiles tab. Select the required level of - roaming preferences. Press OK, but do _not_ allow the computer - to reboot. -

      2. On the Windows 95 machine, go to Control Panel | Network | - Client for Microsoft Networks | Preferences. Select 'Log on to - NT Domain'. Then, ensure that the Primary Logon is 'Client for - Microsoft Networks'. Press OK, and this time allow the computer - to reboot. -

      Under Windows 95, Profiles are downloaded from the Primary Logon. -If you have the Primary Logon as 'Client for Novell Networks', then -the profiles and logon script will be downloaded from your Novell -Server. If you have the Primary Logon as 'Windows Logon', then the -profiles will be loaded from the local machine - a bit against the -concept of roaming profiles, if you ask me.

      You will now find that the Microsoft Networks Login box contains -[user, password, domain] instead of just [user, password]. Type in -the samba server's domain name (or any other domain known to exist, -but bear in mind that the user will be authenticated against this -domain and profiles downloaded from it, if that domain logon server -supports it), user name and user's password.

      Once the user has been successfully validated, the Windows 95 machine -will inform you that 'The user has not logged on before' and asks you -if you wish to save the user's preferences? Select 'yes'.

      Once the Windows 95 client comes up with the desktop, you should be able -to examine the contents of the directory specified in the "logon path" -on the samba server and verify that the "Desktop", "Start Menu", -"Programs" and "Nethood" folders have been created.

      These folders will be cached locally on the client, and updated when -the user logs off (if you haven't made them read-only by then :-). -You will find that if the user creates further folders or short-cuts, -that the client will merge the profile contents downloaded with the -contents of the profile directory already on the local client, taking -the newest folders and short-cuts from each set.

      If you have made the folders / files read-only on the samba server, -then you will get errors from the w95 machine on logon and logout, as -it attempts to merge the local and the remote profile. Basically, if -you have any errors reported by the w95 machine, check the Unix file -permissions and ownership rights on the profile directory contents, -on the samba server.

      If you have problems creating user profiles, you can reset the user's -local desktop cache, as shown below. When this user then next logs in, -they will be told that they are logging in "for the first time".

      1. instead of logging in under the [user, password, domain] dialog, - press escape. -

      2. run the regedit.exe program, and look in: -

        HKEY_LOCAL_MACHINE\Windows\CurrentVersion\ProfileList -

        you will find an entry, for each user, of ProfilePath. Note the - contents of this key (likely to be c:\windows\profiles\username), - then delete the key ProfilePath for the required user. -

        [Exit the registry editor]. -

      3. WARNING - before deleting the contents of the - directory listed in - the ProfilePath (this is likely to be c:\windows\profiles\username), - ask them if they have any important files stored on their desktop - or in their start menu. delete the contents of the directory - ProfilePath (making a backup if any of the files are needed). -

        This will have the effect of removing the local (read-only hidden - system file) user.DAT in their profile directory, as well as the - local "desktop", "nethood", "start menu" and "programs" folders. -

      4. search for the user's .PWL password-caching file in the c:\windows - directory, and delete it. -

      5. log off the windows 95 client. -

      6. check the contents of the profile path (see "logon path" described - above), and delete the user.DAT or user.MAN file for the user, - making a backup if required. -

      If all else fails, increase samba's debug log levels to between 3 and 10, -and / or run a packet trace program such as tcpdump or netmon.exe, and -look for any error reports.

      If you have access to an NT server, then first set up roaming profiles -and / or netlogons on the NT server. Make a packet trace, or examine -the example packet traces provided with NT server, and see what the -differences are with the equivalent samba trace.

      6.8.2.5. Windows NT Workstation 4.0

      When a user first logs in to a Windows NT Workstation, the profile -NTuser.DAT is created. The profile location can be now specified -through the "logon path" parameter.

      [lkcl 10aug97 - i tried setting the path to -\\samba-server\homes\profile, and discovered that this fails because -a background process maintains the connection to the [homes] share -which does _not_ close down in between user logins. you have to -have \\samba-server\%L\profile, where user is the username created -from the [homes] share].

      There is a parameter that is now available for use with NT Profiles: -"logon drive". This should be set to "h:" or any other drive, and -should be used in conjunction with the new "logon home" parameter.

      The entry for the NT 4.0 profile is a _directory_ not a file. The NT -help on profiles mentions that a directory is also created with a .PDS -extension. The user, while logging in, must have write permission to -create the full profile path (and the folder with the .PDS extension) -[lkcl 10aug97 - i found that the creation of the .PDS directory failed, -and had to create these manually for each user, with a shell script. -also, i presume, but have not tested, that the full profile path must -be browseable just as it is for w95, due to the manner in which they -attempt to create the full profile path: test existence of each path -component; create path component].

      In the profile directory, NT creates more folders than 95. It creates -"Application Data" and others, as well as "Desktop", "Nethood", -"Start Menu" and "Programs". The profile itself is stored in a file -NTuser.DAT. Nothing appears to be stored in the .PDS directory, and -its purpose is currently unknown.

      You can use the System Control Panel to copy a local profile onto -a samba server (see NT Help on profiles: it is also capable of firing -up the correct location in the System Control Panel for you). The -NT Help file also mentions that renaming NTuser.DAT to NTuser.MAN -turns a profile into a mandatory one.

      [lkcl 10aug97 - i notice that NT Workstation tells me that it is -downloading a profile from a slow link. whether this is actually the -case, or whether there is some configuration issue, as yet unknown, -that makes NT Workstation _think_ that the link is a slow one is a -matter to be resolved].

      [lkcl 20aug97 - after samba digest correspondence, one user found, and -another confirmed, that profiles cannot be loaded from a samba server -unless "security = user" and "encrypt passwords = yes" (see the file -ENCRYPTION.txt) or "security = server" and "password server = ip.address. -of.yourNTserver" are used. Either of these options will allow the NT -workstation to access the samba server using LAN manager encrypted -passwords, without the user intervention normally required by NT -workstation for clear-text passwords].

      [lkcl 25aug97 - more comments received about NT profiles: the case of -the profile _matters_. the file _must_ be called NTuser.DAT or, for -a mandatory profile, NTuser.MAN].

      6.8.2.7. Sharing Profiles between W95 and NT Workstation 4.0

      Potentially outdated or incorrect material follows
       

      I think this is all bogus, but have not deleted it. (Richard Sharpe)

      The default logon path is \\%N\%U. NT Workstation will attempt to create -a directory "\\samba-server\username.PDS" if you specify the logon path -as "\\samba-server\username" with the NT User Manager. Therefore, you -will need to specify (for example) "\\samba-server\username\profile". -NT 4.0 will attempt to create "\\samba-server\username\profile.PDS", which -is more likely to succeed.

      If you then want to share the same Start Menu / Desktop with W95, you will -need to specify "logon path = \\samba-server\username\profile" [lkcl 10aug97 -this has its drawbacks: i created a shortcut to telnet.exe, which attempts -to run from the c:\winnt\system32 directory. this directory is obviously -unlikely to exist on a Win95-only host].

      If you have this set up correctly, you will find separate user.DAT and -NTuser.DAT files in the same profile directory.

      [lkcl 25aug97 - there are some issues to resolve with downloading of -NT profiles, probably to do with time/date stamps. i have found that -NTuser.DAT is never updated on the workstation after the first time that -it is copied to the local workstation profile directory. this is in -contrast to w95, where it _does_ transfer / update profiles correctly].

      6.9. DOMAIN_CONTROL.txt : Windows NT Domain Control & Samba

      Possibly Outdated Material
       

      This appendix was originally authored by John H Terpstra of - the Samba Team and is included here for posterity. -

      NOTE : -The term "Domain Controller" and those related to it refer to one specific -method of authentication that can underly an SMB domain. Domain Controllers -prior to Windows NT Server 3.1 were sold by various companies and based on -private extensions to the LAN Manager 2.1 protocol. Windows NT introduced -Microsoft-specific ways of distributing the user authentication database. -See DOMAIN.txt for examples of how Samba can participate in or create -SMB domains based on shared authentication database schemes other than the -Windows NT SAM.

      Windows NT Server can be installed as either a plain file and print server -(WORKGROUP workstation or server) or as a server that participates in Domain -Control (DOMAIN member, Primary Domain controller or Backup Domain controller). -The same is true for OS/2 Warp Server, Digital Pathworks and other similar -products, all of which can participate in Domain Control along with Windows NT.

      To many people these terms can be confusing, so let's try to clear the air.

      Every Windows NT system (workstation or server) has a registry database. -The registry contains entries that describe the initialization information -for all services (the equivalent of Unix Daemons) that run within the Windows -NT environment. The registry also contains entries that tell application -software where to find dynamically loadable libraries that they depend upon. -In fact, the registry contains entries that describes everything that anything -may need to know to interact with the rest of the system.

      The registry files can be located on any Windows NT machine by opening a -command prompt and typing:

      C:\WINNT\> dir %SystemRoot%\System32\config

      The environment variable %SystemRoot% value can be obtained by typing:

      C:\WINNT>echo %SystemRoot%

      The active parts of the registry that you may want to be familiar with are -the files called: default, system, software, sam and security.

      In a domain environment, Microsoft Windows NT domain controllers participate -in replication of the SAM and SECURITY files so that all controllers within -the domain have an exactly identical copy of each.

      The Microsoft Windows NT system is structured within a security model that -says that all applications and services must authenticate themselves before -they can obtain permission from the security manager to do what they set out -to do.

      The Windows NT User database also resides within the registry. This part of -the registry contains the user's security identifier, home directory, group -memberships, desktop profile, and so on.

      Every Windows NT system (workstation as well as server) will have its own -registry. Windows NT Servers that participate in Domain Security control -have a database that they share in common - thus they do NOT own an -independent full registry database of their own, as do Workstations and -plain Servers.

      The User database is called the SAM (Security Access Manager) database and -is used for all user authentication as well as for authentication of inter- -process authentication (i.e. to ensure that the service action a user has -requested is permitted within the limits of that user's privileges).

      The Samba team have produced a utility that can dump the Windows NT SAM into -smbpasswd format: see ENCRYPTION.txt for information on smbpasswd and -/pub/samba/pwdump on your nearest Samba mirror for the utility. This -facility is useful but cannot be easily used to implement SAM replication -to Samba systems.

      Windows for Workgroups, Windows 95, and Windows NT Workstations and Servers -can participate in a Domain security system that is controlled by Windows NT -servers that have been correctly configured. Almost every domain will have -ONE Primary Domain Controller (PDC). It is desirable that each domain will -have at least one Backup Domain Controller (BDC).

      The PDC and BDCs then participate in replication of the SAM database so that -each Domain Controlling participant will have an up to date SAM component -within its registry.

    PrevHomeNext
    User and Share security level (for servers not in a domain)UpHow to Act as a Backup Domain Controller in a Purely Samba Controlled Domain
    \ No newline at end of file +has a domain controller). If the domain does NOT already have a Domain Controller +then you do not yet have a Domain! +

    +Configuring a Samba box as a DC for a domain that already by definition has a +PDC is asking for trouble. Therefore, you should always configure the Samba DC +to be the DMB for its domain and set security = user. +This is the only officially supported mode of operation. +

    Common Problems and Errors

    I cannot include a '$' in a machine name

    +A 'machine account', (typically) stored in /etc/passwd, +takes the form of the machine name with a '$' appended. FreeBSD (and other BSD +systems?) won't create a user with a '$' in their name. +

    +The problem is only in the program used to make the entry. Once made, it works perfectly. +Create a user without the '$'. Then use vipw to edit the entry, adding +the '$'. Or create the whole entry with vipw if you like; make sure you use a unique User ID! +

    I get told "You already have a connection to the Domain...." +or "Cannot join domain, the credentials supplied conflict with an +existing set.." when creating a machine trust account.

    +This happens if you try to create a machine trust account from the +machine itself and already have a connection (e.g. mapped drive) +to a share (or IPC$) on the Samba PDC. The following command +will remove all network drive connections: +

    +	C:\WINNT\> net use * /d
+

    +Further, if the machine is already a 'member of a workgroup' that +is the same name as the domain you are joining (bad idea) you will +get this message. Change the workgroup name to something else, it +does not matter what, reboot, and try again. +

    The system can not log you on (C000019B)....

    I joined the domain successfully but after upgrading +to a newer version of the Samba code I get the message, The system +can not log you on (C000019B), Please try again or consult your +system administrator when attempting to logon. +

    +This occurs when the domain SID stored in the secrets.tdb database +is changed. The most common cause of a change in domain SID is when +the domain name and/or the server name (NetBIOS name) is changed. +The only way to correct the problem is to restore the original domain +SID or remove the domain client from the domain and rejoin. The domain +SID may be reset using either the net or rpcclient utilities. +

    +The reset or change the domain SID you can use the net command as follows: + +

    +root# net getlocalsid 'OLDNAME'
+root# net setlocalsid 'SID'
+

    +

    The machine trust account for this computer either does not +exist or is not accessible.

    +When I try to join the domain I get the message The machine account +for this computer either does not exist or is not accessible. What's +wrong? +

    +This problem is caused by the PDC not having a suitable machine trust account. +If you are using the add machine script method to create +accounts then this would indicate that it has not worked. Ensure the domain +admin user system is working. +

    +Alternatively if you are creating account entries manually then they +have not been created correctly. Make sure that you have the entry +correct for the machine trust account in smbpasswd file on the Samba PDC. +If you added the account using an editor rather than using the smbpasswd +utility, make sure that the account name is the machine NetBIOS name +with a '$' appended to it ( i.e. computer_name$ ). There must be an entry +in both /etc/passwd and the smbpasswd file. +

    +Some people have also reported +that inconsistent subnet masks between the Samba server and the NT +client can cause this problem. Make sure that these are consistent +for both client and server. +

    When I attempt to login to a Samba Domain from a NT4/W2K workstation, +I get a message about my account being disabled.

    +Enable the user accounts with smbpasswd -e username +, this is normally done as an account is created. +

    Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"

    + A domain controller has to announce on the network who it is. This usually takes a while. +

    PrevUpNext
    Chapter4.Server Types and Security ModesHomeChapter6.Backup Domain Control
    diff --git a/docs/htmldocs/samba.7.html b/docs/htmldocs/samba.7.html index 0851e99bd5..1e7add51c6 100644 --- a/docs/htmldocs/samba.7.html +++ b/docs/htmldocs/samba.7.html @@ -1,384 +1,113 @@ - -samba

    samba

    Name

    SAMBA -- A Windows SMB/CIFS fileserver for UNIX

    Synopsis

    Samba

    DESCRIPTION

    The Samba software suite is a collection of programs +samba

    Name

    Samba — A Windows SMB/CIFS fileserver for UNIX

    Synopsis

    Samba

    DESCRIPTION

    The Samba software suite is a collection of programs that implements the Server Message Block (commonly abbreviated as SMB) protocol for UNIX systems. This protocol is sometimes also referred to as the Common Internet File System (CIFS). For a - more thorough description, see http://www.ubiqx.org/cifs/. Samba also implements the NetBIOS - protocol in nmbd.

    smbd

    The smbd - daemon provides the file and print services to + more thorough description, see + http://www.ubiqx.org/cifs/. Samba also implements the NetBIOS + protocol in nmbd.

    smbd(8)

    The smbd daemon provides the file and print services to SMB clients, such as Windows 95/98, Windows NT, Windows for Workgroups or LanManager. The configuration file - for this daemon is described in smb.conf -

    nmbd

    The nmbd + for this daemon is described in smb.conf(5) +

    nmbd(8)

    The nmbd daemon provides NetBIOS nameservice and browsing support. The configuration file for this daemon - is described in smb.conf

    smbclient

    The smbclient + is described in smb.conf(5)

    smbclient(1)

    The smbclient program implements a simple ftp-like client. This is useful for accessing SMB shares on other compatible servers (such as Windows NT), and can also be used to allow a UNIX box to print to a printer attached to - any SMB server (such as a PC running Windows NT).

    testparm

    The testparm - utility is a simple syntax checker for Samba's - smb.confconfiguration file.

    testprns

    The testprns + any SMB server (such as a PC running Windows NT).

    testparm(1)

    The testparm + utility is a simple syntax checker for Samba's smb.conf(5) configuration file.

    testprns(1)

    The testprns utility supports testing printer names defined - in your printcap file used - by Samba.

    smbstatus

    The smbstatus + in your printcap file used + by Samba.

    smbstatus(1)

    The smbstatus tool provides access to information about the - current connections to smbd.

    nmblookup

    The nmblookup + current connections to smbd.

    nmblookup(1)

    The nmblookup tools allows NetBIOS name queries to be made - from a UNIX host.

    make_smbcodepage

    The make_smbcodepage - utility provides a means of creating SMB code page - definition files for your smbd server.

    smbpasswd

    The smbpasswd + from a UNIX host.

    smbgroupedit(8)

    The smbgroupedit + tool allows for mapping unix groups to NT Builtin, + Domain, or Local groups. Also it allows setting + priviledges for that group, such as saAddUser, etc.

    smbpasswd(8)

    The smbpasswd command is a tool for changing LanMan and Windows NT - password hashes on Samba and Windows NT servers.

    COMPONENTS

    The Samba suite is made up of several components. Each + password hashes on Samba and Windows NT servers.

    smbcacls(1)

    The smbcacls command is + a tool to set ACL's on remote CIFS servers.

    smbsh(1)

    The smbsh command is + a program that allows you to run a unix shell with + with an overloaded VFS.

    smbtree(1)

    The smbtree command + is a text-based network neighborhood tool.

    smbtar(1)

    The smbtar can make + backups of data on CIFS/SMB servers.

    smbspool(8)

    smbspool is a + helper utility for printing on printers connected + to CIFS servers.

    smbcontrol(1)

    smbcontrol is a utility + that can change the behaviour of running samba daemons. +

    rpcclient(1)

    rpcclient is a utility + that can be used to execute RPC commands on remote + CIFS servers.

    pdbedit(8)

    The pdbedit command + can be used to maintain the local user database on + a samba server.

    findsmb(1)

    The findsmb command + can be used to find SMB servers on the local network. +

    net(8)

    The net command + is supposed to work similar to the DOS/Windows + NET.EXE command.

    swat(8)

    swat is a web-based + interface to configuring smb.conf. +

    winbindd(8)

    winbindd is a daemon + that is used for integrating authentication and + the user database into unix.

    wbinfo(1)

    wbinfo is a utility + that retrieves and stores information related to winbind. +

    editreg(1)

    editreg is a command-line + utility that can edit windows registry files. +

    profiles(1)

    profiles is a command-line + utility that can be used to replace all occurences of + a certain SID with another SID. +

    vfstest(1)

    vfstest is a utility + that can be used to test vfs modules.

    ntlm_auth(1)

    ntlm_auth is a helper-utility + for external programs wanting to do NTLM-authentication. +

    smbmount(8), smbumount(8), smbmount(8)

    smbmount,smbmnt and smbmnt are commands that can be used to + mount CIFS/SMB shares on Linux. +

    smbcquotas(1)

    smbcquotas is a tool that + can set remote QUOTA's on server with NTFS 5.

    COMPONENTS

    The Samba suite is made up of several components. Each component is described in a separate manual page. It is strongly recommended that you read the documentation that comes with Samba and the manual pages of those components that you use. If the manual pages and documents aren't clear enough then please visit - http://devel.samba.org - for information on how to file a bug report or submit a patch.

    If you require help, visit the Samba webpage at - http://www.samba.org/ and + http://devel.samba.org + for information on how to file a bug report or submit a patch.

    If you require help, visit the Samba webpage at + http://www.samba.org/ and explore the many option available to you. -

    AVAILABILITY

    The Samba software suite is licensed under the +

    AVAILABILITY

    The Samba software suite is licensed under the GNU Public License(GPL). A copy of that license should have come with the package in the file COPYING. You are encouraged to distribute copies of the Samba suite, but - please obey the terms of this license.

    The latest version of the Samba suite can be + please obey the terms of this license.

    The latest version of the Samba suite can be obtained via anonymous ftp from samba.org in the directory pub/samba/. It is also available on several - mirror sites worldwide.

    You may also find useful information about Samba - on the newsgroup comp.protocol.smb and the Samba mailing + mirror sites worldwide.

    You may also find useful information about Samba + on the newsgroup + comp.protocol.smb and the Samba mailing list. Details on how to join the mailing list are given in - the README file that comes with Samba.

    If you have access to a WWW viewer (such as Netscape - or Mosaic) then you will also find lots of useful information, + the README file that comes with Samba.

    If you have access to a WWW viewer (such as Mozilla + or Konqueror) then you will also find lots of useful information, including back issues of the Samba mailing list, at - http://lists.samba.org.

    VERSION

    This man page is correct for version 2.2 of the - Samba suite.

    CONTRIBUTIONS

    If you wish to contribute to the Samba project, + http://lists.samba.org.

    VERSION

    This man page is correct for version 3.0 of the + Samba suite.

    CONTRIBUTIONS

    If you wish to contribute to the Samba project, then I suggest you join the Samba mailing list at - http://lists.samba.org. -

    If you have patches to submit, visit - http://devel.samba.org/ - for information on how to do it properly. We prefer patches in - diff -u format.

    CONTRIBUTORS

    Contributors to the project are now too numerous + http://lists.samba.org. +

    If you have patches to submit, visit + http://devel.samba.org/ + for information on how to do it properly. We prefer patches + in diff -u format.

    CONTRIBUTORS

    Contributors to the project are now too numerous to mention here but all deserve the thanks of all Samba - users. To see a full list, look at ftp://samba.org/pub/samba/alpha/change-log - for the pre-CVS changes and at ftp://samba.org/pub/samba/alpha/cvs.log + users. To see a full list, look at the + change-log in the source package + for the pre-CVS changes and at + http://cvs.samba.org/ for the contributors to Samba post-CVS. CVS is the Open Source source code control system used by the Samba Team to develop - Samba. The project would have been unmanageable without it.

    In addition, several commercial organizations now help - fund the Samba Team with money and equipment. For details see - the Samba Web pages at http://samba.org/samba/samba-thanks.html.

    AUTHOR

    The original Samba software and related utilities + Samba. The project would have been unmanageable without it.

    AUTHOR

    The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar - to the way the Linux kernel is developed.

    The original Samba man pages were written by Karl Auer. + to the way the Linux kernel is developed.

    The original Samba man pages were written by Karl Auer. The man page sources were converted to YODL format (another - excellent piece of Open Source software, available at - ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 + excellent piece of Open Source software, available at + ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 release by Jeremy Allison. The conversion to DocBook for - Samba 2.2 was done by Gerald Carter

    \ No newline at end of file + Samba 2.2 was done by Gerald Carter. The conversion to DocBook XML + 4.2 for Samba 3.0 was done by Alexander Bokovoy.

    diff --git a/docs/htmldocs/smb.conf.5.html b/docs/htmldocs/smb.conf.5.html index 4f02951a9c..c154347a86 100644 --- a/docs/htmldocs/smb.conf.5.html +++ b/docs/htmldocs/smb.conf.5.html @@ -1,19776 +1,269 @@ - -smb.conf

    smb.conf

    Name

    smb.conf -- The configuration file for the Samba suite

    SYNOPSIS

    The smb.conf file is a configuration - file for the Samba suite. smb.conf contains - runtime configuration information for the Samba programs. The - smb.conf file is designed to be configured and - administered by the swat(8) - program. The complete description of the file format and - possible parameters held within are here for reference purposes.

    FILE FORMAT

    The file consists of sections and parameters. A section +smb.conf

    Name

    smb.conf — The configuration file for the Samba suite

    SYNOPSIS

    The smb.conf file is a configuration + file for the Samba suite. smb.conf contains + runtime configuration information for the Samba programs. The smb.conf file + is designed to be configured and administered by the swat(8) program. The complete + description of the file format and possible parameters held within + are here for reference purposes.

    FILE FORMAT

    The file consists of sections and parameters. A section begins with the name of the section in square brackets and continues until the next section begins. Sections contain parameters of the - form

    name = value -

    The file is line-based - that is, each newline-terminated - line represents either a comment, a section name or a parameter.

    Section and parameter names are not case sensitive.

    Only the first equals sign in a parameter is significant. + form

    name = value +

    The file is line-based - that is, each newline-terminated + line represents either a comment, a section name or a parameter.

    Section and parameter names are not case sensitive.

    Only the first equals sign in a parameter is significant. Whitespace before or after the first equals sign is discarded. Leading, trailing and internal whitespace in section and parameter names is irrelevant. Leading and trailing whitespace in a parameter value is discarded. Internal whitespace within a parameter value - is retained verbatim.

    Any line beginning with a semicolon (';') or a hash ('#') - character is ignored, as are lines containing only whitespace.

    Any line ending in a '\' is continued - on the next line in the customary UNIX fashion.

    The values following the equals sign in parameters are all + is retained verbatim.

    Any line beginning with a semicolon (';') or a hash ('#') + character is ignored, as are lines containing only whitespace.

    Any line ending in a '\' is continued + on the next line in the customary UNIX fashion.

    The values following the equals sign in parameters are all either a string (no quotes needed) or a boolean, which may be given as yes/no, 0/1 or true/false. Case is not significant in boolean values, but is preserved in string values. Some items such as - create modes are numeric.

    SECTION DESCRIPTIONS

    Each section in the configuration file (except for the + create modes are numeric.

    SECTION DESCRIPTIONS

    Each section in the configuration file (except for the [global] section) describes a shared resource (known - as a "share"). The section name is the name of the + as a "share"). The section name is the name of the shared resource and the parameters within the section define - the shares attributes.

    There are three special sections, [global], + the shares attributes.

    There are three special sections, [global], [homes] and [printers], which are - described under special sections. The - following notes apply to ordinary section descriptions.

    A share consists of a directory to which access is being + described under special sections. The + following notes apply to ordinary section descriptions.

    A share consists of a directory to which access is being given plus a description of the access rights which are granted to the user of the service. Some housekeeping options are - also specifiable.

    Sections are either file share services (used by the + also specifiable.

    Sections are either file share services (used by the client as an extension of their native file systems) or printable services (used by the client to access print services - on the host running the server).

    Sections may be designated guest services, + on the host running the server).

    Sections may be designated guest services, in which case no password is required to access them. A specified - UNIX guest account is used to define access - privileges in this case.

    Sections other than guest services will require a password + UNIX guest account is used to define access + privileges in this case.

    Sections other than guest services will require a password to access them. The client provides the username. As older clients only provide passwords and not usernames, you may specify a list - of usernames to check against the password using the "user =" + of usernames to check against the password using the "user =" option in the share definition. For modern clients such as - Windows 95/98/ME/NT/2000, this should not be necessary.

    Note that the access rights granted by the server are + Windows 95/98/ME/NT/2000, this should not be necessary.

    Note that the access rights granted by the server are masked by the access rights granted to the specified or guest UNIX user by the host system. The server does not grant more - access than the host system grants.

    The following sample section defines a file space share. - The user has write access to the path /home/bar. - The share is accessed via the share name "foo":

    	 	[foo]
- 		path = /home/bar
- 		read only = no
-	
-

    The following sample section defines a printable share. + access than the host system grants.

    The following sample section defines a file space share. + The user has write access to the path /home/bar. + The share is accessed via the share name "foo":

    +
+[foo]
+	path = /home/bar
+	read only = no
+
+

    The following sample section defines a printable share. The share is readonly, but printable. That is, the only write access permitted is via calls to open, write to and close a - spool file. The guest ok parameter means + spool file. The guest ok parameter means access will be permitted as the default guest user (specified - elsewhere):

    	 	[aprinter]
- 		path = /usr/spool/public
- 		read only = yes
- 		printable = yes
- 		guest ok = yes
-	
-

    SPECIAL SECTIONS

    The [global] section

    parameters in this section apply to the server + elsewhere):

    +
+[aprinter]
+	path = /usr/spool/public
+	read only = yes
+	printable = yes
+	guest ok = yes
+
+

    SPECIAL SECTIONS

    The [global] section

    parameters in this section apply to the server as a whole, or are defaults for sections which do not specifically define certain items. See the notes - under PARAMETERS for more information.

    The [homes] section

    If a section called homes is included in the + under PARAMETERS for more information.

    The [homes] section

    If a section called homes is included in the configuration file, services connecting clients to their - home directories can be created on the fly by the server.

    When the connection request is made, the existing + home directories can be created on the fly by the server.

    When the connection request is made, the existing sections are scanned. If a match is found, it is used. If no match is found, the requested section name is treated as a user name and looked up in the local password file. If the name exists and the correct password has been given, a share is - created by cloning the [homes] section.

    Some modifications are then made to the newly - created share:

    • The share name is changed from homes to - the located username.

    • If no path was given, the path is set to - the user's home directory.

    If you decide to use a path = line + created by cloning the [homes] section.

    Some modifications are then made to the newly + created share:

    • The share name is changed from homes to + the located username.

    • If no path was given, the path is set to + the user's home directory.

    If you decide to use a path = line in your [homes] section then you may find it useful - to use the %S macro. For example :

    path = /data/pchome/%S

    would be useful if you have different home directories - for your PCs than for UNIX access.

    This is a fast and simple way to give a large number + to use the %S macro. For example :

    path = /data/pchome/%S

    would be useful if you have different home directories + for your PCs than for UNIX access.

    This is a fast and simple way to give a large number of clients access to their home directories with a minimum - of fuss.

    A similar process occurs if the requested section - name is "homes", except that the share name is not + of fuss.

    A similar process occurs if the requested section + name is "homes", except that the share name is not changed to that of the requesting user. This method of using the [homes] section works well if different users share - a client PC.

    The [homes] section can specify all the parameters + a client PC.

    The [homes] section can specify all the parameters a normal service section can specify, though some make more sense than others. The following is a typical and suitable [homes] - section:

    			 	[homes]
- 			read only = no
-		
-

    An important point is that if guest access is specified + section:

    +
+[homes]
+	read only = no
+
+

    An important point is that if guest access is specified in the [homes] section, all home directories will be - visible to all clients without a password. + visible to all clients without a password. In the very unlikely event that this is actually desirable, it - would be wise to also specify read only - access.

    Note that the browseable flag for + would be wise to also specify read only + access.

    Note that the browseable flag for auto home directories will be inherited from the global browseable flag, not the [homes] browseable flag. This is useful as - it means setting browseable = no in + it means setting browseable = no in the [homes] section will hide the [homes] share but make - any auto home directories visible.

    The [printers] section

    This section works like [homes], - but for printers.

    If a [printers] section occurs in the + any auto home directories visible.

    The [printers] section

    This section works like [homes], + but for printers.

    If a [printers] section occurs in the configuration file, users are able to connect to any printer - specified in the local host's printcap file.

    When a connection request is made, the existing sections + specified in the local host's printcap file.

    When a connection request is made, the existing sections are scanned. If a match is found, it is used. If no match is found, but a [homes] section exists, it is used as described above. Otherwise, the requested section name is treated as a printer name and the appropriate printcap file is scanned to see if the requested section name is a valid printer share name. If a match is found, a new printer share is created by cloning - the [printers] section.

    A few modifications are then made to the newly created - share:

    • The share name is set to the located printer - name

    • If no printer name was given, the printer name - is set to the located printer name

    • If the share does not permit guest access and + the [printers] section.

      A few modifications are then made to the newly created + share:

      • The share name is set to the located printer + name

      • If no printer name was given, the printer name + is set to the located printer name

      • If the share does not permit guest access and no username was given, the username is set to the located - printer name.

      Note that the [printers] service MUST be + printer name.

    Note that the [printers] service MUST be printable - if you specify otherwise, the server will refuse - to load the configuration file.

    Typically the path specified would be that of a + to load the configuration file.

    Typically the path specified would be that of a world-writeable spool directory with the sticky bit set on it. A typical [printers] entry would look like - this:

    	 	[printers]
- 			path = /usr/spool/public
- 			guest ok = yes
- 			printable = yes 
-

    All aliases given for a printer in the printcap file + this:

    
+[printers]
+	path = /usr/spool/public
+	guest ok = yes
+	printable = yes 
+

    All aliases given for a printer in the printcap file are legitimate printer names as far as the server is concerned. If your printing subsystem doesn't work like that, you will have to set up a pseudo-printcap. This is a file consisting of one or - more lines like this:

    			        alias|alias|alias|alias...    
-		
-

    Each alias should be an acceptable printer name for + more lines like this:

    +
+alias|alias|alias|alias...    
+
+

    Each alias should be an acceptable printer name for your printing subsystem. In the [global] section, specify the new file as your printcap. The server will then only recognize names found in your pseudo-printcap, which of course can contain whatever aliases you like. The same technique could be used - simply to limit access to a subset of your local printers.

    An alias, by the way, is defined as any component of the + simply to limit access to a subset of your local printers.

    An alias, by the way, is defined as any component of the first entry of a printcap record. Records are separated by newlines, components (if there are more than one) are separated by vertical - bar symbols ('|').

    NOTE: On SYSV systems which use lpstat to determine what + bar symbols ('|').

    Note

    On SYSV systems which use lpstat to determine what printers are defined on the system you may be able to use - "printcap name = lpstat" to automatically obtain a list - of printers. See the "printcap name" option - for more details.

    PARAMETERS

    parameters define the specific attributes of sections.

    Some parameters are specific to the [global] section - (e.g., security). Some parameters are usable - in all sections (e.g., create mode). All others + "printcap name = lpstat" to automatically obtain a list + of printers. See the "printcap name" option + for more details.

    PARAMETERS

    parameters define the specific attributes of sections.

    Some parameters are specific to the [global] section + (e.g., security). Some parameters are usable + in all sections (e.g., create mode). All others are permissible only in normal sections. For the purposes of the following descriptions the [homes] and [printers] - sections will be considered normal. The letter G + sections will be considered normal. The letter G in parentheses indicates that a parameter is specific to the - [global] section. The letter S + [global] section. The letter S indicates that a parameter can be specified in a service specific - section. Note that all S parameters can also be specified in + section. Note that all S parameters can also be specified in the [global] section - in which case they will define - the default behavior for all services.

    parameters are arranged here in alphabetical order - this may + the default behavior for all services.

    parameters are arranged here in alphabetical order - this may not create best bedfellows, but at least you can find them! Where there are synonyms, the preferred synonym is described, others refer - to the preferred synonym.

    VARIABLE SUBSTITUTIONS

    Many of the strings that are settable in the config file - can take substitutions. For example the option "path = - /tmp/%u" would be interpreted as "path = - /tmp/john" if the user connected with the username john.

    These substitutions are mostly noted in the descriptions below, + to the preferred synonym.

    VARIABLE SUBSTITUTIONS

    Many of the strings that are settable in the config file + can take substitutions. For example the option "path = + /tmp/%u" would be interpreted as "path = + /tmp/john" if the user connected with the username john.

    These substitutions are mostly noted in the descriptions below, but there are some general substitutions which apply whenever they - might be relevant. These are:

    %U

    session user name (the user name that the client - wanted, not necessarily the same as the one they got).

    %G

    primary group name of %U.

    %h

    the Internet hostname that Samba is running - on.

    %m

    the NetBIOS name of the client machine - (very useful).

    %L

    the NetBIOS name of the server. This allows you + might be relevant. These are:

    %U

    session user name (the user name that the client + wanted, not necessarily the same as the one they got).

    %G

    primary group name of %U.

    %h

    the Internet hostname that Samba is running + on.

    %m

    the NetBIOS name of the client machine + (very useful).

    %L

    the NetBIOS name of the server. This allows you to change your config based on what the client calls you. Your - server can have a "dual personality".

    Note that this parameter is not available when Samba listens - on port 445, as clients no longer send this information

    %M

    the Internet name of the client machine. -

    %R

    the selected protocol level after + server can have a "dual personality".

    Note that this parameter is not available when Samba listens + on port 445, as clients no longer send this information

    %M

    the Internet name of the client machine. +

    %R

    the selected protocol level after protocol negotiation. It can be one of CORE, COREPLUS, - LANMAN1, LANMAN2 or NT1.

    %d

    The process id of the current server - process.

    %a

    the architecture of the remote + LANMAN1, LANMAN2 or NT1.

    %d

    The process id of the current server + process.

    %a

    the architecture of the remote machine. Only some are recognized, and those may not be 100% reliable. It currently recognizes Samba, WfWg, Win95, WinNT and Win2k. Anything else will be known as - "UNKNOWN". If it gets it wrong then sending a level - 3 log to samba@samba.org - should allow it to be fixed.

    %I

    The IP address of the client machine.

    %T

    the current date and time.

    %D

    Name of the domain or workgroup of the current user.

    %$(envvar)

    The value of the environment variable - envar.

    The following substitutes apply only to some configuration options(only those - that are used when a connection has been established):

    %S

    the name of the current service, if any.

    %P

    the root directory of the current service, - if any.

    %u

    user name of the current service, if any.

    %g

    primary group name of %u.

    %H

    the home directory of the user given - by %u.

    %N

    the name of your NIS home directory server. + "UNKNOWN". If it gets it wrong then sending a level + 3 log to samba@samba.org + should allow it to be fixed.

    %I

    The IP address of the client machine.

    %T

    the current date and time.

    %D

    Name of the domain or workgroup of the current user.

    %$(envvar)

    The value of the environment variable + envar.

    The following substitutes apply only to some configuration options(only those + that are used when a connection has been established):

    %S

    the name of the current service, if any.

    %P

    the root directory of the current service, + if any.

    %u

    user name of the current service, if any.

    %g

    primary group name of %u.

    %H

    the home directory of the user given + by %u.

    %N

    the name of your NIS home directory server. This is obtained from your NIS auto.map entry. If you have - not compiled Samba with the --with-automount - option then this value will be the same as %L.

    %p

    the path of the service's home directory, + not compiled Samba with the --with-automount + option then this value will be the same as %L.

    %p

    the path of the service's home directory, obtained from your NIS auto.map entry. The NIS auto.map entry - is split up as "%N:%p".

    There are some quite creative things that can be done - with these substitutions and other smb.conf options.

    NAME MANGLING

    Samba supports "name mangling" so that DOS and + is split up as "%N:%p".

    There are some quite creative things that can be done + with these substitutions and other smb.conf options.

    NAME MANGLING

    Samba supports "name mangling" so that DOS and Windows clients can use files that don't conform to the 8.3 format. - It can also be set to adjust the case of 8.3 format filenames.

    There are several options that control the way mangling is + It can also be set to adjust the case of 8.3 format filenames.

    There are several options that control the way mangling is performed, and they are grouped here rather than listed separately. - For the defaults look at the output of the testparm program.

    All of these options can be set separately for each service - (or globally, of course).

    The options are:

    mangle case = yes/no

    controls if names that have characters that - aren't of the "default" case are mangled. For example, - if this is yes then a name like "Mail" would be mangled. - Default no.

    case sensitive = yes/no

    controls whether filenames are case sensitive. If + For the defaults look at the output of the testparm program.

    All of these options can be set separately for each service + (or globally, of course).

    The options are:

    mangle case = yes/no

    controls if names that have characters that + aren't of the "default" case are mangled. For example, + if this is yes then a name like "Mail" would be mangled. + Default no.

    case sensitive = yes/no

    controls whether filenames are case sensitive. If they aren't then Samba must do a filename search and match on passed - names. Default no.

    default case = upper/lower

    controls what the default case is for new - filenames. Default lower.

    preserve case = yes/no

    controls if new files are created with the + names. Default no.

    default case = upper/lower

    controls what the default case is for new + filenames. Default lower.

    preserve case = yes/no

    controls if new files are created with the case that the client passes, or if they are forced to be the - "default" case. Default yes. -

    short preserve case = yes/no

    controls if new files which conform to 8.3 syntax, + "default" case. Default yes. +

    short preserve case = yes/no

    controls if new files which conform to 8.3 syntax, that is all in upper case and of suitable length, are created - upper case, or if they are forced to be the "default" - case. This option can be use with "preserve case = yes" + upper case, or if they are forced to be the "default" + case. This option can be use with "preserve case = yes" to permit long filenames to retain their case, while short names - are lowercased. Default yes.

    By default, Samba 3.0 has the same semantics as a Windows - NT server, in that it is case insensitive but case preserving.

    NOTE ABOUT USERNAME/PASSWORD VALIDATION

    There are a number of ways in which a user can connect + are lowercased. Default yes.

    By default, Samba 3.0 has the same semantics as a Windows + NT server, in that it is case insensitive but case preserving.

    NOTE ABOUT USERNAME/PASSWORD VALIDATION

    There are a number of ways in which a user can connect to a service. The server uses the following steps in determining if it will allow a connection to a specified service. If all the steps fail, then the connection request is rejected. However, if one of the - steps succeeds, then the following steps are not checked.

    If the service is marked "guest only = yes" and the - server is running with share-level security ("security = share") - then steps 1 to 5 are skipped.

    1. If the client has passed a username/password + steps succeeds, then the following steps are not checked.

      If the service is marked "guest only = yes" and the + server is running with share-level security ("security = share") + then steps 1 to 5 are skipped.

      1. If the client has passed a username/password pair and that username/password pair is validated by the UNIX system's password programs then the connection is made as that username. Note that this includes the - \\server\service%username method of passing - a username.

      2. If the client has previously registered a username + \\server\service%username method of passing + a username.

      3. If the client has previously registered a username with the system and now supplies a correct password for that - username then the connection is allowed.

      4. The client's NetBIOS name and any previously + username then the connection is allowed.

      5. The client's NetBIOS name and any previously used user names are checked against the supplied password, if they match then the connection is allowed as the corresponding - user.

      6. If the client has previously validated a + user.

      7. If the client has previously validated a username/password pair with the server and the client has passed - the validation token then that username is used.

      8. If a "user = " field is given in the - smb.conf file for the service and the client + the validation token then that username is used.

      9. If a "user = " field is given in the + smb.conf file for the service and the client has supplied a password, and that password matches (according to the UNIX system's password checking) with one of the usernames - from the "user =" field then the connection is made as - the username in the "user =" line. If one - of the username in the "user =" list begins with a + from the "user =" field then the connection is made as + the username in the "user =" line. If one + of the username in the "user =" list begins with a '@' then that name expands to a list of names in - the group of the same name.

      10. If the service is a guest service then a - connection is made as the username given in the "guest - account =" for the service, irrespective of the - supplied password.

      COMPLETE LIST OF GLOBAL PARAMETERS

      Here is a list of all global parameters. See the section of - each parameter for details. Note that some are synonyms.

      COMPLETE LIST OF SERVICE PARAMETERS

      Here is a list of all service parameters. See the section on - each parameter for details. Note that some are synonyms.

      EXPLANATION OF EACH PARAMETER

      abort shutdown script (G)

      This parameter only exists in the HEAD cvs branch - This a full path name to a script called by - smbd(8) that - should stop a shutdown procedure issued by the shutdown script.

      This command will be run as user.

      Default: None.

      Example: abort shutdown script = /sbin/shutdown -c

      addprinter command (G)

      With the introduction of MS-RPC based printing - support for Windows NT/2000 clients in Samba 2.2, The MS Add - Printer Wizard (APW) icon is now also available in the - "Printers..." folder displayed a share listing. The APW - allows for printers to be add remotely to a Samba or Windows - NT/2000 print server.

      For a Samba host this means that the printer must be - physically added to the underlying printing system. The add - printer command defines a script to be run which - will perform the necessary operations for adding the printer - to the print system and to add the appropriate service definition - to the smb.conf file in order that it can be - shared by smbd(8) - .

      The addprinter command is - automatically invoked with the following parameter (in - order:

      • printer name

      • share name

      • port name

      • driver name

      • location

      • Windows 9x driver location -

      All parameters are filled in from the PRINTER_INFO_2 structure sent - by the Windows NT/2000 client with one exception. The "Windows 9x - driver location" parameter is included for backwards compatibility - only. The remaining fields in the structure are generated from answers - to the APW questions.

      Once the addprinter command has - been executed, smbd will reparse the smb.conf to determine if the share defined by the APW - exists. If the sharename is still invalid, then smbd - will return an ACCESS_DENIED error to the client.

      See also deleteprinter command, printing, - show add - printer wizard

      Default: none

      Example: addprinter command = /usr/bin/addprinter -

      add share command (G)

      Samba 2.2.0 introduced the ability to dynamically - add and delete shares via the Windows NT 4.0 Server Manager. The - add share command is used to define an - external program or script which will add a new service definition - to smb.conf. In order to successfully - execute the add share command, smbd - requires that the administrator be connected using a root account (i.e. - uid == 0). -

      When executed, smbd will automatically invoke the - add share command with four parameters. -

      • configFile - the location - of the global smb.conf file. -

      • shareName - the name of the new - share. -

      • pathName - path to an **existing** - directory on disk. -

      • comment - comment string to associate - with the new share. -

      This parameter is only used for add file shares. To add printer shares, - see the addprinter - command. -

      See also change share - command, delete share - command. -

      Default: none

      Example: add share command = /usr/local/bin/addshare

      add machine script (G)

      This is the full pathname to a script that will - be run by smbd(8) when a machine is added - to it's domain using the administrator username and password method.

      This option is only required when using sam back-ends tied to the - Unix uid method of RID calculation such as smbpasswd. This option is only - available in Samba 3.0.

      Default: add machine script = <empty string> -

      Example: add machine script = /usr/sbin/adduser -n -g machines -c Machine -d /dev/null -s /bin/false %u -

      ads server (G)

      If this option is specified, samba does - not try to figure out what ads server to use itself, but - uses the specified ads server. Either one DNS name or IP - address can be used.

      Default: ads server =

      Example: ads server = 192.168.1.2

      add user script (G)

      This is the full pathname to a script that will - be run AS ROOT by smbd(8) - under special circumstances described below.

      Normally, a Samba server requires that UNIX users are - created for all users accessing files on this server. For sites - that use Windows NT account databases as their primary user database - creating these users and keeping the user list in sync with the - Windows NT PDC is an onerous task. This option allows smbd to create the required UNIX users - ON DEMAND when a user accesses the Samba server.

      In order to use this option, smbd - must NOT be set to security = share - and add user script - must be set to a full pathname for a script that will create a UNIX - user given one argument of %u, which expands into - the UNIX user name to create.

      When the Windows user attempts to access the Samba server, - at login (session setup in the SMB protocol) time, smbd contacts the password server and - attempts to authenticate the given user with the given password. If the - authentication succeeds then smbd - attempts to find a UNIX user in the UNIX password database to map the - Windows user into. If this lookup fails, and add user script - is set then smbd will - call the specified script AS ROOT, expanding - any %u argument to be the user name to create.

      If this script successfully creates the user then smbd - will continue on as though the UNIX user - already existed. In this way, UNIX users are dynamically created to - match existing Windows NT accounts.

      See also security, password server, - delete user - script.

      Default: add user script = <empty string> -

      Example: add user script = /usr/local/samba/bin/add_user - %u

      add group script (G)

      This is the full pathname to a script that will - be run AS ROOT by smbd(8) when a new group is - requested. It will expand any - %g to the group name passed. - This script is only useful for installations using the - Windows NT domain administration tools. The script is - free to create a group with an arbitrary name to - circumvent unix group name restrictions. In that case - the script must print the numeric gid of the created - group on stdout. -

      admin users (S)

      This is a list of users who will be granted - administrative privileges on the share. This means that they - will do all file operations as the super-user (root).

      You should use this option very carefully, as any user in - this list will be able to do anything they like on the share, - irrespective of file permissions.

      Default: no admin users

      Example: admin users = jason

      add user to group script (G)

      Full path to the script that will be called when - a user is added to a group using the Windows NT domain administration - tools. It will be run by smbd(8) - AS ROOT. Any %g will be - replaced with the group name and any %u will - be replaced with the user name. -

      Default: add user to group script =

      Example: add user to group script = /usr/sbin/adduser %u %g

      allow hosts (S)

      Synonym for hosts allow.

      algorithmic rid base (G)

      This determines how Samba will use its - algorithmic mapping from uids/gid to the RIDs needed to construct - NT Security Identifiers.

      Setting this option to a larger value could be useful to sites - transitioning from WinNT and Win2k, as existing user and - group rids would otherwise clash with sytem users etc. -

      All UIDs and GIDs must be able to be resolved into SIDs for - the correct operation of ACLs on the server. As such the algorithmic - mapping can't be 'turned off', but pushing it 'out of the way' should - resolve the issues. Users and groups can then be assigned 'low' RIDs - in arbitary-rid supporting backends.

      Default: algorithmic rid base = 1000

      Example: algorithmic rid base = 100000

      allow trusted domains (G)

      This option only takes effect when the security option is set to - server or domain. - If it is set to no, then attempts to connect to a resource from - a domain or workgroup other than the one which smbd is running - in will fail, even if that domain is trusted by the remote server - doing the authentication.

      This is useful if you only want your Samba server to - serve resources to users in the domain it is a member of. As - an example, suppose that there are two domains DOMA and DOMB. DOMB - is trusted by DOMA, which contains the Samba server. Under normal - circumstances, a user with an account in DOMB can then access the - resources of a UNIX account with the same account name on the - Samba server even if they do not have an account in DOMA. This - can make implementing a security boundary difficult.

      Default: allow trusted domains = yes

      announce as (G)

      This specifies what type of server - nmbd - will announce itself as, to a network neighborhood browse - list. By default this is set to Windows NT. The valid options - are : "NT Server" (which can also be written as "NT"), - "NT Workstation", "Win95" or "WfW" meaning Windows NT Server, - Windows NT Workstation, Windows 95 and Windows for Workgroups - respectively. Do not change this parameter unless you have a - specific need to stop Samba appearing as an NT server as this - may prevent Samba servers from participating as browser servers - correctly.

      Default: announce as = NT Server

      Example: announce as = Win95

      announce version (G)

      This specifies the major and minor version numbers - that nmbd will use when announcing itself as a server. The default - is 4.9. Do not change this parameter unless you have a specific - need to set a Samba server to be a downlevel server.

      Default: announce version = 4.9

      Example: announce version = 2.0

      auto services (G)

      This is a synonym for the preload.

      auth methods (G)

      This option allows the administrator to chose what - authentication methods smbd will use when authenticating - a user. This option defaults to sensible values based on security. - - Each entry in the list attempts to authenticate the user in turn, until - the user authenticates. In practice only one method will ever actually - be able to complete the authentication. -

      Default: auth methods = <empty string>

      Example: auth methods = guest sam ntdomain

      available (S)

      This parameter lets you "turn off" a service. If - available = no, then ALL - attempts to connect to the service will fail. Such failures are - logged.

      Default: available = yes

      bind interfaces only (G)

      This global parameter allows the Samba admin - to limit what interfaces on a machine will serve SMB requests. It - affects file service smbd(8) and - name service nmbd(8) in slightly - different ways.

      For name service it causes nmbd to bind - to ports 137 and 138 on the interfaces listed in the interfaces parameter. nmbd - also binds to the "all addresses" interface (0.0.0.0) - on ports 137 and 138 for the purposes of reading broadcast messages. - If this option is not set then nmbd will service - name requests on all of these sockets. If bind interfaces - only is set then nmbd will check the - source address of any packets coming in on the broadcast sockets - and discard any that don't match the broadcast addresses of the - interfaces in the interfaces parameter list. - As unicast packets are received on the other sockets it allows - nmbd to refuse to serve names to machines that - send packets that arrive through any interfaces not listed in the - interfaces list. IP Source address spoofing - does defeat this simple check, however, so it must not be used - seriously as a security feature for nmbd.

      For file service it causes smbd(8) - to bind only to the interface list given in the interfaces parameter. This restricts the networks that - smbd will serve to packets coming in those - interfaces. Note that you should not use this parameter for machines - that are serving PPP or other intermittent or non-broadcast network - interfaces as it will not cope with non-permanent interfaces.

      If bind interfaces only is set then - unless the network address 127.0.0.1 is added - to the interfaces parameter list smbpasswd(8) - and swat(8) may - not work as expected due to the reasons covered below.

      To change a users SMB password, the smbpasswd - by default connects to the localhost - 127.0.0.1 - address as an SMB client to issue the password change request. If - bind interfaces only is set then unless the - network address 127.0.0.1 is added to the - interfaces parameter list then smbpasswd will fail to connect in it's default mode. - smbpasswd can be forced to use the primary IP interface - of the local host by using its -r remote machine - parameter, with remote machine set - to the IP name of the primary interface of the local host.

      The swat status page tries to connect with - smbd and nmbd at the address - 127.0.0.1 to determine if they are running. - Not adding 127.0.0.1 will cause smbd and nmbd to always show - "not running" even if they really are. This can prevent swat from starting/stopping/restarting smbd - and nmbd.

      Default: bind interfaces only = no

      blocking locks (S)

      This parameter controls the behavior of smbd(8) when given a request by a client - to obtain a byte range lock on a region of an open file, and the - request has a time limit associated with it.

      If this parameter is set and the lock range requested - cannot be immediately satisfied, samba will internally - queue the lock request, and periodically attempt to obtain - the lock until the timeout period expires.

      If this parameter is set to no, then - samba will behave as previous versions of Samba would and - will fail the lock request immediately if the lock range - cannot be obtained.

      Default: blocking locks = yes

      block size (S)

      This parameter controls the behavior of - smbd(8) when reporting disk free - sizes. By default, this reports a disk block size of 1024 bytes. -

      Changing this parameter may have some effect on the - efficiency of client writes, this is not yet confirmed. This - parameter was added to allow advanced administrators to change - it (usually to a higher value) and test the effect it has on - client write performance without re-compiling the code. As this - is an experimental option it may be removed in a future release. -

      Changing this option does not change the disk free reporting - size, just the block size unit reported to the client.

      Default: block size = 1024

      Example: block size = 65536

      browsable (S)

      See the browseable.

      browse list (G)

      This controls whether smbd(8) will serve a browse list to - a client doing a NetServerEnum call. Normally - set to yes. You should never need to change - this.

      Default: browse list = yes

      browseable (S)

      This controls whether this share is seen in - the list of available shares in a net view and in the browse list.

      Default: browseable = yes

      case sensitive (S)

      See the discussion in the section NAME MANGLING.

      Default: case sensitive = no

      casesignames (S)

      Synonym for case - sensitive.

      change notify timeout (G)

      This SMB allows a client to tell a server to - "watch" a particular directory for any changes and only reply to - the SMB request when a change has occurred. Such constant scanning of - a directory is expensive under UNIX, hence an smbd(8) daemon only performs such a scan - on each requested directory once every change notify - timeout seconds.

      Default: change notify timeout = 60

      Example: change notify timeout = 300

      Would change the scan time to every 5 minutes.

      change share command (G)

      Samba 2.2.0 introduced the ability to dynamically - add and delete shares via the Windows NT 4.0 Server Manager. The - change share command is used to define an - external program or script which will modify an existing service definition - in smb.conf. In order to successfully - execute the change share command, smbd - requires that the administrator be connected using a root account (i.e. - uid == 0). -

      When executed, smbd will automatically invoke the - change share command with four parameters. -

      • configFile - the location - of the global smb.conf file. -

      • shareName - the name of the new - share. -

      • pathName - path to an **existing** - directory on disk. -

      • comment - comment string to associate - with the new share. -

      This parameter is only used modify existing file shares definitions. To modify - printer shares, use the "Printers..." folder as seen when browsing the Samba host. -

      See also add share - command, delete - share command. -

      Default: none

      Example: change share command = /usr/local/bin/addshare

      comment (S)

      This is a text field that is seen next to a share - when a client does a queries the server, either via the network - neighborhood or via net view to list what shares - are available.

      If you want to set the string that is displayed next to the - machine name then see the server string parameter.

      Default: No comment string

      Example: comment = Fred's Files

      config file (G)

      This allows you to override the config file - to use, instead of the default (usually smb.conf). - There is a chicken and egg problem here as this option is set - in the config file!

      For this reason, if the name of the config file has changed - when the parameters are loaded then it will reload them from - the new config file.

      This option takes the usual substitutions, which can - be very useful.

      If the config file doesn't exist then it won't be loaded - (allowing you to special case the config files of just a few - clients).

      Example: config file = /usr/local/samba/lib/smb.conf.%m -

      copy (S)

      This parameter allows you to "clone" service - entries. The specified service is simply duplicated under the - current service's name. Any parameters specified in the current - section will override those in the section being copied.

      This feature lets you set up a 'template' service and - create similar services easily. Note that the service being - copied must occur earlier in the configuration file than the - service doing the copying.

      Default: no value

      Example: copy = otherservice

      create mask (S)

      A synonym for this parameter is - create mode - .

      When a file is created, the necessary permissions are - calculated according to the mapping from DOS modes to UNIX - permissions, and the resulting UNIX mode is then bit-wise 'AND'ed - with this parameter. This parameter may be thought of as a bit-wise - MASK for the UNIX modes of a file. Any bit not - set here will be removed from the modes set on a file when it is - created.

      The default value of this parameter removes the - 'group' and 'other' write and execute bits from the UNIX modes.

      Following this Samba will bit-wise 'OR' the UNIX mode created - from this parameter with the value of the force create mode - parameter which is set to 000 by default.

      This parameter does not affect directory modes. See the - parameter directory mode - for details.

      See also the force - create mode parameter for forcing particular mode - bits to be set on created files. See also the directory mode parameter for masking - mode bits on created directories. See also the inherit permissions parameter.

      Note that this parameter does not apply to permissions - set by Windows NT/2000 ACL editors. If the administrator wishes to enforce - a mask on access control lists also, they need to set the security mask.

      Default: create mask = 0744

      Example: create mask = 0775

      create mode (S)

      This is a synonym for create mask.

      csc policy (S)

      This stands for client-side caching - policy, and specifies how clients capable of offline - caching will cache the files in the share. The valid values - are: manual, documents, programs, disable.

      These values correspond to those used on Windows - servers.

      For example, shares containing roaming profiles can have - offline caching disabled using csc policy = disable - .

      Default: csc policy = manual

      Example: csc policy = programs

      deadtime (G)

      The value of the parameter (a decimal integer) - represents the number of minutes of inactivity before a connection - is considered dead, and it is disconnected. The deadtime only takes - effect if the number of open files is zero.

      This is useful to stop a server's resources being - exhausted by a large number of inactive connections.

      Most clients have an auto-reconnect feature when a - connection is broken so in most cases this parameter should be - transparent to users.

      Using this parameter with a timeout of a few minutes - is recommended for most systems.

      A deadtime of zero indicates that no auto-disconnection - should be performed.

      Default: deadtime = 0

      Example: deadtime = 15

      debug hires timestamp (G)

      Sometimes the timestamps in the log messages - are needed with a resolution of higher that seconds, this - boolean parameter adds microsecond resolution to the timestamp - message header when turned on.

      Note that the parameter debug timestamp must be on for this to have an - effect.

      Default: debug hires timestamp = no

      debug pid (G)

      When using only one log file for more then one - forked smbd-process there may be hard to follow which process - outputs which message. This boolean parameter is adds the process-id - to the timestamp message headers in the logfile when turned on.

      Note that the parameter debug timestamp must be on for this to have an - effect.

      Default: debug pid = no

      debug timestamp (G)

      Samba debug log messages are timestamped - by default. If you are running at a high debug level these timestamps - can be distracting. This boolean parameter allows timestamping - to be turned off.

      Default: debug timestamp = yes

      debug uid (G)

      Samba is sometimes run as root and sometime - run as the connected user, this boolean parameter inserts the - current euid, egid, uid and gid to the timestamp message headers - in the log file if turned on.

      Note that the parameter debug timestamp must be on for this to have an - effect.

      Default: debug uid = no

      debuglevel (G)

      Synonym for log level.

      default (G)

      A synonym for default service.

      default case (S)

      See the section on NAME MANGLING. Also note the short preserve case parameter.

      Default: default case = lower

      default devmode (S)

      This parameter is only applicable to printable services. When smbd is serving - Printer Drivers to Windows NT/2k/XP clients, each printer on the Samba - server has a Device Mode which defines things such as paper size and - orientation and duplex settings. The device mode can only correctly be - generated by the printer driver itself (which can only be executed on a - Win32 platform). Because smbd is unable to execute the driver code - to generate the device mode, the default behavior is to set this field - to NULL. -

      Most problems with serving printer drivers to Windows NT/2k/XP clients - can be traced to a problem with the generated device mode. Certain drivers - will do things such as crashing the client's Explorer.exe with a NULL devmode. - However, other printer drivers can cause the client's spooler service - (spoolsv.exe) to die if the devmode was not created by the driver itself - (i.e. smbd generates a default devmode). -

      This parameter should be used with care and tested with the printer - driver in question. It is better to leave the device mode to NULL - and let the Windows client set the correct values. Because drivers do not - do this all the time, setting default devmode = yes - will instruct smbd to generate a default one. -

      For more information on Windows NT/2k printing and Device Modes, - see the MSDN documentation. -

      Default: default devmode = no

      default service (G)

      This parameter specifies the name of a service - which will be connected to if the service actually requested cannot - be found. Note that the square brackets are NOT - given in the parameter value (see example below).

      There is no default value for this parameter. If this - parameter is not given, attempting to connect to a nonexistent - service results in an error.

      Typically the default service would be a guest ok, read-only service.

      Also note that the apparent service name will be changed - to equal that of the requested service, this is very useful as it - allows you to use macros like %S to make - a wildcard service.

      Note also that any "_" characters in the name of the service - used in the default service will get mapped to a "/". This allows for - interesting things.

      Example:

      [global]
-	default service = pub
-        
-[pub]
-	path = /%S
-

      delete group script (G)

      This is the full pathname to a script that will - be run AS ROOT by smbd(8) when a group is requested to be deleted. It will expand any %g to the group name passed. This script is only useful for installations using the Windows NT domain administration tools. -

      deleteprinter command (G)

      With the introduction of MS-RPC based printer - support for Windows NT/2000 clients in Samba 2.2, it is now - possible to delete printer at run time by issuing the - DeletePrinter() RPC call.

      For a Samba host this means that the printer must be - physically deleted from underlying printing system. The deleteprinter command defines a script to be run which - will perform the necessary operations for removing the printer - from the print system and from smb.conf. -

      The deleteprinter command is - automatically called with only one parameter: "printer name".

      Once the deleteprinter command has - been executed, smbd will reparse the smb.conf to associated printer no longer exists. - If the sharename is still valid, then smbd - will return an ACCESS_DENIED error to the client.

      See also addprinter command, printing, - show add - printer wizard

      Default: none

      Example: deleteprinter command = /usr/bin/removeprinter -

      delete readonly (S)

      This parameter allows readonly files to be deleted. - This is not normal DOS semantics, but is allowed by UNIX.

      This option may be useful for running applications such - as rcs, where UNIX file ownership prevents changing file - permissions, and DOS semantics prevent deletion of a read only file.

      Default: delete readonly = no

      delete share command (G)

      Samba 2.2.0 introduced the ability to dynamically - add and delete shares via the Windows NT 4.0 Server Manager. The - delete share command is used to define an - external program or script which will remove an existing service - definition from smb.conf. In order to successfully - execute the delete share command, smbd - requires that the administrator be connected using a root account (i.e. - uid == 0). -

      When executed, smbd will automatically invoke the - delete share command with two parameters. -

      • configFile - the location - of the global smb.conf file. -

      • shareName - the name of - the existing service. -

      This parameter is only used to remove file shares. To delete printer shares, - see the deleteprinter - command. -

      See also add share - command, change - share command. -

      Default: none

      Example: delete share command = /usr/local/bin/delshare

      delete user script (G)

      This is the full pathname to a script that will - be run by smbd(8) - when managing user's with remote RPC (NT) tools. -

      This script is called when a remote client removes a user - from the server, normally using 'User Manager for Domains' or - rpcclient. -

      This script should delete the given UNIX username. -

      Default: delete user script = <empty string> -

      Example: delete user script = /usr/local/samba/bin/del_user - %u

      delete user from group script (G)

      Full path to the script that will be called when - a user is removed from a group using the Windows NT domain administration - tools. It will be run by smbd(8) - AS ROOT. Any %g will be - replaced with the group name and any %u will - be replaced with the user name. -

      Default: delete user from group script =

      Example: delete user from group script = /usr/sbin/deluser %u %g

      delete veto files (S)

      This option is used when Samba is attempting to - delete a directory that contains one or more vetoed directories - (see the veto files - option). If this option is set to no (the default) then if a vetoed - directory contains any non-vetoed files or directories then the - directory delete will fail. This is usually what you want.

      If this option is set to yes, then Samba - will attempt to recursively delete any files and directories within - the vetoed directory. This can be useful for integration with file - serving systems such as NetAtalk which create meta-files within - directories you might normally veto DOS/Windows users from seeing - (e.g. .AppleDouble)

      Setting delete veto files = yes allows these - directories to be transparently deleted when the parent directory - is deleted (so long as the user has permissions to do so).

      See also the veto - files parameter.

      Default: delete veto files = no

      deny hosts (S)

      Synonym for hosts - deny.

      dfree command (G)

      The dfree command setting should - only be used on systems where a problem occurs with the internal - disk space calculations. This has been known to happen with Ultrix, - but may occur with other operating systems. The symptom that was - seen was an error of "Abort Retry Ignore" at the end of each - directory listing.

      This setting allows the replacement of the internal routines to - calculate the total disk space and amount available with an external - routine. The example below gives a possible script that might fulfill - this function.

      The external program will be passed a single parameter indicating - a directory in the filesystem being queried. This will typically consist - of the string ./. The script should return two - integers in ASCII. The first should be the total disk space in blocks, - and the second should be the number of available blocks. An optional - third return value can give the block size in bytes. The default - blocksize is 1024 bytes.

      Note: Your script should NOT be setuid or - setgid and should be owned by (and writeable only by) root!

      Default: By default internal routines for - determining the disk capacity and remaining space will be used. -

      Example: dfree command = /usr/local/samba/bin/dfree -

      Where the script dfree (which must be made executable) could be:

       
-		#!/bin/sh
-		df $1 | tail -1 | awk '{print $2" "$4}'
-

      or perhaps (on Sys V based systems):

       
-		#!/bin/sh
-		/usr/bin/df -k $1 | tail -1 | awk '{print $3" "$5}'
-

      Note that you may have to replace the command names - with full path names on some systems.

      directory (S)

      Synonym for path - .

      directory mask (S)

      This parameter is the octal modes which are - used when converting DOS modes to UNIX modes when creating UNIX - directories.

      When a directory is created, the necessary permissions are - calculated according to the mapping from DOS modes to UNIX permissions, - and the resulting UNIX mode is then bit-wise 'AND'ed with this - parameter. This parameter may be thought of as a bit-wise MASK for - the UNIX modes of a directory. Any bit not set - here will be removed from the modes set on a directory when it is - created.

      The default value of this parameter removes the 'group' - and 'other' write bits from the UNIX mode, allowing only the - user who owns the directory to modify it.

      Following this Samba will bit-wise 'OR' the UNIX mode - created from this parameter with the value of the force directory mode - parameter. This parameter is set to 000 by - default (i.e. no extra mode bits are added).

      Note that this parameter does not apply to permissions - set by Windows NT/2000 ACL editors. If the administrator wishes to enforce - a mask on access control lists also, they need to set the directory security mask.

      See the force - directory mode parameter to cause particular mode - bits to always be set on created directories.

      See also the create mode - parameter for masking mode bits on created files, - and the directory - security mask parameter.

      Also refer to the inherit permissions parameter.

      Default: directory mask = 0755

      Example: directory mask = 0775

      directory mode (S)

      Synonym for directory mask

      directory security mask (S)

      This parameter controls what UNIX permission bits - can be modified when a Windows NT client is manipulating the UNIX - permission on a directory using the native NT security dialog - box.

      This parameter is applied as a mask (AND'ed with) to - the changed permission bits, thus preventing any bits not in - this mask from being modified. Essentially, zero bits in this - mask may be treated as a set of bits the user is not allowed - to change.

      If not set explicitly this parameter is set to 0777 - meaning a user is allowed to modify all the user/group/world - permissions on a directory.

      Note that users who can access the - Samba server through other means can easily bypass this restriction, - so it is primarily useful for standalone "appliance" systems. - Administrators of most normal systems will probably want to leave - it as the default of 0777.

      See also the force directory security mode, security mask, - force security mode - parameters.

      Default: directory security mask = 0777

      Example: directory security mask = 0700

      disable netbios (G)

      Enabling this parameter will disable netbios support - in Samba. Netbios is the only available form of browsing in - all windows versions except for 2000 and XP.

      Note that clients that only support netbios won't be able to - see your samba server when netbios support is disabled. -

      Default: disable netbios = no

      Example: disable netbios = yes

      disable spoolss (G)

      Enabling this parameter will disable Samba's support - for the SPOOLSS set of MS-RPC's and will yield identical behavior - as Samba 2.0.x. Windows NT/2000 clients will downgrade to using - Lanman style printing commands. Windows 9x/ME will be uneffected by - the parameter. However, this will also disable the ability to upload - printer drivers to a Samba server via the Windows NT Add Printer - Wizard or by using the NT printer properties dialog window. It will - also disable the capability of Windows NT/2000 clients to download - print drivers from the Samba host upon demand. - Be very careful about enabling this parameter. -

      See also use client driver -

      Default : disable spoolss = no

      display charset (G)

      Specifies the charset that samba will use - to print messages to stdout and stderr and SWAT will use. - Should generally be the same as the unix charset. -

      Default: display charset = ASCII

      Example: display charset = UTF8

      dns proxy (G)

      Specifies that nmbd(8) - when acting as a WINS server and finding that a NetBIOS name has not - been registered, should treat the NetBIOS name word-for-word as a DNS - name and do a lookup with the DNS server for that name on behalf of - the name-querying client.

      Note that the maximum length for a NetBIOS name is 15 - characters, so the DNS name (or DNS alias) can likewise only be - 15 characters, maximum.

      nmbd spawns a second copy of itself to do the - DNS name lookup requests, as doing a name lookup is a blocking - action.

      See also the parameter wins support.

      Default: dns proxy = yes

      domain logons (G)

      If set to yes, the Samba server will serve - Windows 95/98 Domain logons for the workgroup it is in. Samba 2.2 - has limited capability to act as a domain controller for Windows - NT 4 Domains. For more details on setting up this feature see - the Samba-PDC-HOWTO included in the htmldocs/ - directory shipped with the source code.

      Default: domain logons = no

      domain master (G)

      Tell nmbd(8) to enable WAN-wide browse list - collation. Setting this option causes nmbd to - claim a special domain specific NetBIOS name that identifies - it as a domain master browser for its given workgroup. Local master browsers - in the same workgroup on broadcast-isolated - subnets will give this nmbd their local browse lists, - and then ask smbd(8) - for a complete copy of the browse list for the whole wide area - network. Browser clients will then contact their local master browser, - and will receive the domain-wide browse list, instead of just the list - for their broadcast-isolated subnet.

      Note that Windows NT Primary Domain Controllers expect to be - able to claim this workgroup specific special - NetBIOS name that identifies them as domain master browsers for - that workgroup by default (i.e. there is no - way to prevent a Windows NT PDC from attempting to do this). This - means that if this parameter is set and nmbd claims - the special name for a workgroup before a Windows - NT PDC is able to do so then cross subnet browsing will behave - strangely and may fail.

      If domain logons = yes - , then the default behavior is to enable the domain - master parameter. If domain logons is - not enabled (the default setting), then neither will domain - master be enabled by default.

      Default: domain master = auto

      dont descend (S)

      There are certain directories on some systems - (e.g., the /proc tree under Linux) that are either not - of interest to clients or are infinitely deep (recursive). This - parameter allows you to specify a comma-delimited list of directories - that the server should always show as empty.

      Note that Samba can be very fussy about the exact format - of the "dont descend" entries. For example you may need ./proc instead of just /proc. - Experimentation is the best policy :-)

      Default: none (i.e., all directories are OK - to descend)

      Example: dont descend = /proc,/dev

      dos charset (G)

      DOS SMB clients assume the server has - the same charset as they do. This option specifies which - charset Samba should talk to DOS clients. -

      The default depends on which charsets you have instaled. - Samba tries to use charset 850 but falls back to ASCII in - case it is not available. Run testparm(1) - to check the default on your system. -

      dos filemode (S)

      The default behavior in Samba is to provide - UNIX-like behavior where only the owner of a file/directory is - able to change the permissions on it. However, this behavior - is often confusing to DOS/Windows users. Enabling this parameter - allows a user who has write access to the file (by whatever - means) to modify the permissions on it. Note that a user - belonging to the group owning the file will not be allowed to - change permissions if the group is only granted read access. - Ownership of the file/directory is not changed, only the permissions - are modified.

      Default: dos filemode = no

      dos filetime resolution (S)

      Under the DOS and Windows FAT filesystem, the finest - granularity on time resolution is two seconds. Setting this parameter - for a share causes Samba to round the reported time down to the - nearest two second boundary when a query call that requires one second - resolution is made to smbd(8) - .

      This option is mainly used as a compatibility option for Visual - C++ when used against Samba shares. If oplocks are enabled on a - share, Visual C++ uses two different time reading calls to check if a - file has changed since it was last read. One of these calls uses a - one-second granularity, the other uses a two second granularity. As - the two second call rounds any odd second down, then if the file has a - timestamp of an odd number of seconds then the two timestamps will not - match and Visual C++ will keep reporting the file has changed. Setting - this option causes the two timestamps to match, and Visual C++ is - happy.

      Default: dos filetime resolution = no

      dos filetimes (S)

      Under DOS and Windows, if a user can write to a - file they can change the timestamp on it. Under POSIX semantics, - only the owner of the file or root may change the timestamp. By - default, Samba runs with POSIX semantics and refuses to change the - timestamp on a file if the user smbd is acting - on behalf of is not the file owner. Setting this option to yes allows DOS semantics and smbd will change the file - timestamp as DOS requires.

      Default: dos filetimes = no

      encrypt passwords (G)

      This boolean controls whether encrypted passwords - will be negotiated with the client. Note that Windows NT 4.0 SP3 and - above and also Windows 98 will by default expect encrypted passwords - unless a registry entry is changed. To use encrypted passwords in - Samba see the file ENCRYPTION.txt in the Samba documentation - directory docs/ shipped with the source code.

      In order for encrypted passwords to work correctly - smbd(8) must either - have access to a local smbpasswd(5) - file (see the smbpasswd(8) program for information on how to set up - and maintain this file), or set the security = [server|domain|ads] parameter which - causes smbd to authenticate against another - server.

      Default: encrypt passwords = yes

      enhanced browsing (G)

      This option enables a couple of enhancements to - cross-subnet browse propagation that have been added in Samba - but which are not standard in Microsoft implementations. -

      The first enhancement to browse propagation consists of a regular - wildcard query to a Samba WINS server for all Domain Master Browsers, - followed by a browse synchronization with each of the returned - DMBs. The second enhancement consists of a regular randomised browse - synchronization with all currently known DMBs.

      You may wish to disable this option if you have a problem with empty - workgroups not disappearing from browse lists. Due to the restrictions - of the browse protocols these enhancements can cause a empty workgroup - to stay around forever which can be annoying.

      In general you should leave this option enabled as it makes - cross-subnet browse propagation much more reliable.

      Default: enhanced browsing = yes

      enumports command (G)

      The concept of a "port" is fairly foreign - to UNIX hosts. Under Windows NT/2000 print servers, a port - is associated with a port monitor and generally takes the form of - a local port (i.e. LPT1:, COM1:, FILE:) or a remote port - (i.e. LPD Port Monitor, etc...). By default, Samba has only one - port defined--"Samba Printer Port". Under - Windows NT/2000, all printers must have a valid port name. - If you wish to have a list of ports displayed (smbd - does not use a port name for anything) other than - the default "Samba Printer Port", you - can define enumports command to point to - a program which should generate a list of ports, one per line, - to standard output. This listing will then be used in response - to the level 1 and 2 EnumPorts() RPC.

      Default: no enumports command

      Example: enumports command = /usr/bin/listports -

      exec (S)

      This is a synonym for preexec.

      fake directory create times (S)

      NTFS and Windows VFAT file systems keep a create - time for all files and directories. This is not the same as the - ctime - status change time - that Unix keeps, so Samba by default - reports the earliest of the various times Unix does keep. Setting - this parameter for a share causes Samba to always report midnight - 1-1-1980 as the create time for directories.

      This option is mainly used as a compatibility option for - Visual C++ when used against Samba shares. Visual C++ generated - makefiles have the object directory as a dependency for each object - file, and a make rule to create the directory. Also, when NMAKE - compares timestamps it uses the creation time when examining a - directory. Thus the object directory will be created if it does not - exist, but once it does exist it will always have an earlier - timestamp than the object files it contains.

      However, Unix time semantics mean that the create time - reported by Samba will be updated whenever a file is created or - or deleted in the directory. NMAKE finds all object files in - the object directory. The timestamp of the last one built is then - compared to the timestamp of the object directory. If the - directory's timestamp if newer, then all object files - will be rebuilt. Enabling this option - ensures directories always predate their contents and an NMAKE build - will proceed as expected.

      Default: fake directory create times = no

      fake oplocks (S)

      Oplocks are the way that SMB clients get permission - from a server to locally cache file operations. If a server grants - an oplock (opportunistic lock) then the client is free to assume - that it is the only one accessing the file and it will aggressively - cache file data. With some oplock types the client may even cache - file open/close operations. This can give enormous performance benefits. -

      When you set fake oplocks = yes, smbd(8) will - always grant oplock requests no matter how many clients are using - the file.

      It is generally much better to use the real oplocks support rather - than this parameter.

      If you enable this option on all read-only shares or - shares that you know will only be accessed from one client at a - time such as physically read-only media like CDROMs, you will see - a big performance improvement on many operations. If you enable - this option on shares where multiple clients may be accessing the - files read-write at the same time you can get data corruption. Use - this option carefully!

      Default: fake oplocks = no

      follow symlinks (S)

      This parameter allows the Samba administrator - to stop smbd(8) - from following symbolic links in a particular share. Setting this - parameter to no prevents any file or directory - that is a symbolic link from being followed (the user will get an - error). This option is very useful to stop users from adding a - symbolic link to /etc/passwd in their home - directory for instance. However it will slow filename lookups - down slightly.

      This option is enabled (i.e. smbd will - follow symbolic links) by default.

      Default: follow symlinks = yes

      force create mode (S)

      This parameter specifies a set of UNIX mode bit - permissions that will always be set on a - file created by Samba. This is done by bitwise 'OR'ing these bits onto - the mode bits of a file that is being created or having its - permissions changed. The default for this parameter is (in octal) - 000. The modes in this parameter are bitwise 'OR'ed onto the file - mode after the mask set in the create mask - parameter is applied.

      See also the parameter create - mask for details on masking mode bits on files.

      See also the inherit - permissions parameter.

      Default: force create mode = 000

      Example: force create mode = 0755

      would force all created files to have read and execute - permissions set for 'group' and 'other' as well as the - read/write/execute bits set for the 'user'.

      force directory mode (S)

      This parameter specifies a set of UNIX mode bit - permissions that will always be set on a directory - created by Samba. This is done by bitwise 'OR'ing these bits onto the - mode bits of a directory that is being created. The default for this - parameter is (in octal) 0000 which will not add any extra permission - bits to a created directory. This operation is done after the mode - mask in the parameter directory mask is - applied.

      See also the parameter directory mask for details on masking mode bits - on created directories.

      See also the inherit permissions parameter.

      Default: force directory mode = 000

      Example: force directory mode = 0755

      would force all created directories to have read and execute - permissions set for 'group' and 'other' as well as the - read/write/execute bits set for the 'user'.

      force directory security mode (S)

      This parameter controls what UNIX permission bits - can be modified when a Windows NT client is manipulating the UNIX - permission on a directory using the native NT security dialog box.

      This parameter is applied as a mask (OR'ed with) to the - changed permission bits, thus forcing any bits in this mask that - the user may have modified to be on. Essentially, one bits in this - mask may be treated as a set of bits that, when modifying security - on a directory, the user has always set to be 'on'.

      If not set explicitly this parameter is 000, which - allows a user to modify all the user/group/world permissions on a - directory without restrictions.

      Note that users who can access the - Samba server through other means can easily bypass this restriction, - so it is primarily useful for standalone "appliance" systems. - Administrators of most normal systems will probably want to leave - it set as 0000.

      See also the directory security mask, security mask, - force security mode - parameters.

      Default: force directory security mode = 0

      Example: force directory security mode = 700

      force group (S)

      This specifies a UNIX group name that will be - assigned as the default primary group for all users connecting - to this service. This is useful for sharing files by ensuring - that all access to files on service will use the named group for - their permissions checking. Thus, by assigning permissions for this - group to the files and directories within this service the Samba - administrator can restrict or allow sharing of these files.

      In Samba 2.0.5 and above this parameter has extended - functionality in the following way. If the group name listed here - has a '+' character prepended to it then the current user accessing - the share only has the primary group default assigned to this group - if they are already assigned as a member of that group. This allows - an administrator to decide that only users who are already in a - particular group will create files with group ownership set to that - group. This gives a finer granularity of ownership assignment. For - example, the setting force group = +sys means - that only users who are already in group sys will have their default - primary group assigned to sys when accessing this Samba share. All - other users will retain their ordinary primary group.

      If the force user - parameter is also set the group specified in - force group will override the primary group - set in force user.

      See also force - user.

      Default: no forced group

      Example: force group = agroup

      force security mode (S)

      This parameter controls what UNIX permission - bits can be modified when a Windows NT client is manipulating - the UNIX permission on a file using the native NT security dialog - box.

      This parameter is applied as a mask (OR'ed with) to the - changed permission bits, thus forcing any bits in this mask that - the user may have modified to be on. Essentially, one bits in this - mask may be treated as a set of bits that, when modifying security - on a file, the user has always set to be 'on'.

      If not set explicitly this parameter is set to 0, - and allows a user to modify all the user/group/world permissions on a file, - with no restrictions.

      Note that users who can access - the Samba server through other means can easily bypass this restriction, - so it is primarily useful for standalone "appliance" systems. - Administrators of most normal systems will probably want to leave - this set to 0000.

      See also the force directory security mode, - directory security - mask, security mask parameters.

      Default: force security mode = 0

      Example: force security mode = 700

      force user (S)

      This specifies a UNIX user name that will be - assigned as the default user for all users connecting to this service. - This is useful for sharing files. You should also use it carefully - as using it incorrectly can cause security problems.

      This user name only gets used once a connection is established. - Thus clients still need to connect as a valid user and supply a - valid password. Once connected, all file operations will be performed - as the "forced user", no matter what username the client connected - as. This can be very useful.

      In Samba 2.0.5 and above this parameter also causes the - primary group of the forced user to be used as the primary group - for all file activity. Prior to 2.0.5 the primary group was left - as the primary group of the connecting user (this was a bug).

      See also force group -

      Default: no forced user

      Example: force user = auser

      fstype (S)

      This parameter allows the administrator to - configure the string that specifies the type of filesystem a share - is using that is reported by smbd(8) - when a client queries the filesystem type - for a share. The default type is NTFS for - compatibility with Windows NT but this can be changed to other - strings such as Samba or FAT - if required.

      Default: fstype = NTFS

      Example: fstype = Samba

      getwd cache (G)

      This is a tuning option. When this is enabled a - caching algorithm will be used to reduce the time taken for getwd() - calls. This can have a significant impact on performance, especially - when the wide links - parameter is set to no.

      Default: getwd cache = yes

      group (S)

      Synonym for force - group.

      guest account (S)

      This is a username which will be used for access - to services which are specified as guest ok (see below). Whatever privileges this - user has will be available to any client connecting to the guest service. - Typically this user will exist in the password file, but will not - have a valid login. The user account "ftp" is often a good choice - for this parameter. If a username is specified in a given service, - the specified username overrides this one.

      One some systems the default guest account "nobody" may not - be able to print. Use another account in this case. You should test - this by trying to log in as your guest user (perhaps by using the - su - command) and trying to print using the - system print command such as lpr(1) or lp(1).

      This parameter does not accept % macros, because - many parts of the system require this value to be - constant for correct operation.

      Default: specified at compile time, usually - "nobody"

      Example: guest account = ftp

      guest ok (S)

      If this parameter is yes for - a service, then no password is required to connect to the service. - Privileges will be those of the guest account.

      See the section below on security for more information about this option. -

      Default: guest ok = no

      guest only (S)

      If this parameter is yes for - a service, then only guest connections to the service are permitted. - This parameter will have no effect if guest ok is not set for the service.

      See the section below on security for more information about this option. -

      Default: guest only = no

      hide dot files (S)

      This is a boolean parameter that controls whether - files starting with a dot appear as hidden files.

      Default: hide dot files = yes

      hide files(S)

      This is a list of files or directories that are not - visible but are accessible. The DOS 'hidden' attribute is applied - to any files or directories that match.

      Each entry in the list must be separated by a '/', - which allows spaces to be included in the entry. '*' - and '?' can be used to specify multiple files or directories - as in DOS wildcards.

      Each entry must be a Unix path, not a DOS path and must - not include the Unix directory separator '/'.

      Note that the case sensitivity option is applicable - in hiding files.

      Setting this parameter will affect the performance of Samba, - as it will be forced to check all files and directories for a match - as they are scanned.

      See also hide - dot files, veto files and case sensitive.

      Default: no file are hidden

      Example: hide files = - /.*/DesktopFolderDB/TrashFor%m/resource.frk/

      The above example is based on files that the Macintosh - SMB client (DAVE) available from - Thursby creates for internal use, and also still hides - all files beginning with a dot.

      hide local users(G)

      This parameter toggles the hiding of local UNIX - users (root, wheel, floppy, etc) from remote clients.

      Default: hide local users = no

      hide unreadable (G)

      This parameter prevents clients from seeing the - existance of files that cannot be read. Defaults to off.

      Default: hide unreadable = no

      hide unwriteable files (G)

      This parameter prevents clients from seeing - the existance of files that cannot be written to. Defaults to off. - Note that unwriteable directories are shown as usual. -

      Default: hide unwriteable = no

      hide special files (G)

      This parameter prevents clients from seeing - special files such as sockets, devices and fifo's in directory - listings. -

      Default: hide special files = no

      homedir map (G)

      Ifnis homedir - is yes, and smbd(8) is also acting - as a Win95/98 logon server then this parameter - specifies the NIS (or YP) map from which the server for the user's - home directory should be extracted. At present, only the Sun - auto.home map format is understood. The form of the map is:

      username server:/some/file/system

      and the program will extract the servername from before - the first ':'. There should probably be a better parsing system - that copes with different map formats and also Amd (another - automounter) maps.

      NOTE :A working NIS client is required on - the system for this option to work.

      See also nis homedir - , domain logons - .

      Default: homedir map = <empty string>

      Example: homedir map = amd.homedir

      host msdfs (G)

      This boolean parameter is only available - if Samba has been configured and compiled with the --with-msdfs option. If set to yes, - Samba will act as a Dfs server, and allow Dfs-aware clients - to browse Dfs trees hosted on the server.

      See also the msdfs root share level parameter. For - more information on setting up a Dfs tree on Samba, - refer to msdfs_setup.html. -

      Default: host msdfs = no

      hostname lookups (G)

      Specifies whether samba should use (expensive) - hostname lookups or use the ip addresses instead. An example place - where hostname lookups are currently used is when checking - the hosts deny and hosts allow. -

      Default: hostname lookups = yes

      Example: hostname lookups = no

      hosts allow (S)

      A synonym for this parameter is allow - hosts.

      This parameter is a comma, space, or tab delimited - set of hosts which are permitted to access a service.

      If specified in the [global] section then it will - apply to all services, regardless of whether the individual - service has a different setting.

      You can specify the hosts by name or IP number. For - example, you could restrict access to only the hosts on a - Class C subnet with something like allow hosts = 150.203.5. - . The full syntax of the list is described in the man - page hosts_access(5). Note that this man - page may not be present on your system, so a brief description will - be given here also.

      Note that the localhost address 127.0.0.1 will always - be allowed access unless specifically denied by a hosts deny option.

      You can also specify hosts by network/netmask pairs and - by netgroup names if your system supports netgroups. The - EXCEPT keyword can also be used to limit a - wildcard list. The following examples may provide some help:

      Example 1: allow all IPs in 150.203.*.*; except one

      hosts allow = 150.203. EXCEPT 150.203.6.66

      Example 2: allow hosts that match the given network/netmask

      hosts allow = 150.203.15.0/255.255.255.0

      Example 3: allow a couple of hosts

      hosts allow = lapland, arvidsjaur

      Example 4: allow only hosts in NIS netgroup "foonet", but - deny access from one particular host

      hosts allow = @foonet

      hosts deny = pirate

      Note that access still requires suitable user-level passwords.

      See testparm(1) - for a way of testing your host access to see if it does - what you expect.

      Default: none (i.e., all hosts permitted access) -

      Example: allow hosts = 150.203.5. myhost.mynet.edu.au -

      hosts deny (S)

      The opposite of hosts allow - - hosts listed here are NOT permitted access to - services unless the specific services have their own lists to override - this one. Where the lists conflict, the allow - list takes precedence.

      Default: none (i.e., no hosts specifically excluded) -

      Example: hosts deny = 150.203.4. badhost.mynet.edu.au -

      hosts equiv (G)

      If this global parameter is a non-null string, - it specifies the name of a file to read for the names of hosts - and users who will be allowed access without specifying a password. -

      This is not be confused with hosts allow which is about hosts - access to services and is more useful for guest services. hosts equiv may be useful for NT clients which will - not supply passwords to Samba.

      NOTE : The use of hosts equiv - can be a major security hole. This is because you are - trusting the PC to supply the correct username. It is very easy to - get a PC to supply a false username. I recommend that the - hosts equiv option be only used if you really - know what you are doing, or perhaps on a home network where you trust - your spouse and kids. And only if you really trust - them :-).

      Default: no host equivalences

      Example: hosts equiv = /etc/hosts.equiv

      include (G)

      This allows you to include one config file - inside another. The file is included literally, as though typed - in place.

      It takes the standard substitutions, except %u - , %P and %S. -

      Default: no file included

      Example: include = /usr/local/samba/lib/admin_smb.conf -

      inherit acls (S)

      This parameter can be used to ensure - that if default acls exist on parent directories, - they are always honored when creating a subdirectory. - The default behavior is to use the mode specified - when creating the directory. Enabling this option - sets the mode to 0777, thus guaranteeing that - default directory acls are propagated. -

      Default: inherit acls = no -

      inherit permissions (S)

      The permissions on new files and directories - are normally governed by create mask, directory mask, force create mode - and force - directory mode but the boolean inherit - permissions parameter overrides this.

      New directories inherit the mode of the parent directory, - including bits such as setgid.

      New files inherit their read/write bits from the parent - directory. Their execute bits continue to be determined by - map archive - , map hidden - and map system - as usual.

      Note that the setuid bit is never set via - inheritance (the code explicitly prohibits this).

      This can be particularly useful on large systems with - many users, perhaps several thousand, to allow a single [homes] - share to be used flexibly by each user.

      See also create mask - , directory mask, force create mode and force directory mode - .

      Default: inherit permissions = no

      interfaces (G)

      This option allows you to override the default - network interfaces list that Samba will use for browsing, name - registration and other NBT traffic. By default Samba will query - the kernel for the list of all active interfaces and use any - interfaces except 127.0.0.1 that are broadcast capable.

      The option takes a list of interface strings. Each string - can be in any of the following forms:

      • a network interface name (such as eth0). - This may include shell-like wildcards so eth* will match - any interface starting with the substring "eth"

      • an IP address. In this case the netmask is - determined from the list of interfaces obtained from the - kernel

      • an IP/mask pair.

      • a broadcast/mask pair.

      The "mask" parameters can either be a bit length (such - as 24 for a C class network) or a full netmask in dotted - decimal form.

      The "IP" parameters above can either be a full dotted - decimal IP address or a hostname which will be looked up via - the OS's normal hostname resolution mechanisms.

      For example, the following line:

      interfaces = eth0 192.168.2.10/24 192.168.3.10/255.255.255.0 -

      would configure three network interfaces corresponding - to the eth0 device and IP addresses 192.168.2.10 and 192.168.3.10. - The netmasks of the latter two interfaces would be set to 255.255.255.0.

      See also bind - interfaces only.

      Default: all active interfaces except 127.0.0.1 - that are broadcast capable

      invalid users (S)

      This is a list of users that should not be allowed - to login to this service. This is really a paranoid - check to absolutely ensure an improper setting does not breach - your security.

      A name starting with a '@' is interpreted as an NIS - netgroup first (if your system supports NIS), and then as a UNIX - group if the name was not found in the NIS netgroup database.

      A name starting with '+' is interpreted only - by looking in the UNIX group database. A name starting with - '&' is interpreted only by looking in the NIS netgroup database - (this requires NIS to be working on your system). The characters - '+' and '&' may be used at the start of the name in either order - so the value +&group means check the - UNIX group database, followed by the NIS netgroup database, and - the value &+group means check the NIS - netgroup database, followed by the UNIX group database (the - same as the '@' prefix).

      The current servicename is substituted for %S. - This is useful in the [homes] section.

      See also valid users - .

      Default: no invalid users

      Example: invalid users = root fred admin @wheel -

      keepalive (G)

      The value of the parameter (an integer) represents - the number of seconds between keepalive - packets. If this parameter is zero, no keepalive packets will be - sent. Keepalive packets, if sent, allow the server to tell whether - a client is still present and responding.

      Keepalives should, in general, not be needed if the socket - being used has the SO_KEEPALIVE attribute set on it (see socket options). - Basically you should only use this option if you strike difficulties.

      Default: keepalive = 300

      Example: keepalive = 600

      kernel oplocks (G)

      For UNIXes that support kernel based oplocks - (currently only IRIX and the Linux 2.4 kernel), this parameter - allows the use of them to be turned on or off.

      Kernel oplocks support allows Samba oplocks - to be broken whenever a local UNIX process or NFS operation - accesses a file that smbd(8) - has oplocked. This allows complete data consistency between - SMB/CIFS, NFS and local file access (and is a very - cool feature :-).

      This parameter defaults to on, but is translated - to a no-op on systems that no not have the necessary kernel support. - You should never need to touch this parameter.

      See also the oplocks - and level2 oplocks - parameters.

      Default: kernel oplocks = yes

      lanman auth (G)

      This parameter determines whether or not smbd will - attempt to authenticate users using the LANMAN password hash. - If disabled, only clients which support NT password hashes (e.g. Windows - NT/2000 clients, smbclient, etc... but not Windows 95/98 or the MS DOS - network client) will be able to connect to the Samba host.

      Default : lanman auth = yes

      large readwrite (G)

      This parameter determines whether or not smbd - supports the new 64k streaming read and write varient SMB requests introduced - with Windows 2000. Note that due to Windows 2000 client redirector bugs - this requires Samba to be running on a 64-bit capable operating system such - as IRIX, Solaris or a Linux 2.4 kernel. Can improve performance by 10% with - Windows 2000 clients. Defaults to on. Not as tested as some other Samba - code paths. -

      Default : large readwrite = yes

      ldap admin dn (G)

      The ldap admin dn defines the Distinguished - Name (DN) name used by Samba to contact the ldap server when retreiving - user account information. The ldap - admin dn is used in conjunction with the admin dn password - stored in the private/secrets.tdb file. See the - smbpasswd(8) man - page for more information on how to accomplish this. -

      >ldap del only sam attr (G)

      This parameter specifies whether a delete - operation in the ldapsam deletes the complete entry or only the attributes - specific to Samba. -

      Default : ldap delete dn = no

      >ldap del only sam attr (G)

      Inverted synonym for ldap delete dn. -

      ldap filter (G)

      This parameter specifies the RFC 2254 compliant LDAP search filter. - The default is to match the login name with the uid - attribute for all entries matching the sambaAccount - objectclass. Note that this filter should only return one entry. -

      Default : ldap filter = (&(uid=%u)(objectclass=sambaAccount))

      ldap port (G)

      This parameter is only available if Samba has been - configure to include the --with-ldapsam option - at compile time. -

      This option is used to control the tcp port number used to contact - the ldap server. - The default is to use the stand LDAPS port 636. -

      See Also: ldap ssl -

      Default : ldap port = 636 ; if ldap ssl = on

      Default : ldap port = 389 ; if ldap ssl = off

      ldap server (G)

      This parameter is only available if Samba has been - configure to include the --with-ldapsam option - at compile time. -

      This parameter should contain the FQDN of the ldap directory - server which should be queried to locate user account information. -

      Default : ldap server = localhost

      ldap ssl (G)

      This option is used to define whether or not Samba should - use SSL when connecting to the ldap server - This is NOT related to - Samba's previous SSL support which was enabled by specifying the - --with-ssl option to the configure - script. -

      The ldap ssl can be set to one of three values: -

      • Off = Never use SSL when querying the directory.

      • Start_tls = Use the LDAPv3 StartTLS extended operation - (RFC2830) for communicating with the directory server.

      • On = - Use SSL on the ldaps port when contacting the - ldap server. Only - available when the backwards-compatiblity --with-ldapsam option is specified - to configure. See passdb backend

      Default : ldap ssl = start_tls

      ldap suffix (G)

      Specifies where user and machine accounts are added to the tree. Can be overriden by ldap user suffix and ldap machine suffix. It also used as the base dn for all ldap searches.

      Default : none

      ldap user suffix (G)

      It specifies where users are added to the tree. -

      Default : none

      ldap machine suffix (G)

      It specifies where machines should be - added to the ldap tree. -

      Default : none

      ldap passwd sync (G)

      This option is used to define whether - or not Samba should sync the LDAP password with the NT - and LM hashes for normal accounts (NOT for - workstation, server or domain trusts) on a password - change via SAMBA. -

      The ldap passwd sync can be set to one of three values: -

      • Yes = Try to update the LDAP, NT and LM passwords and update the pwdLastSet time.

      • No = Update NT and LM passwords and update the pwdLastSet time.

      • Only = Only update the LDAP password and let the LDAP server do the rest.

      Default : ldap passwd sync = no

      ldap trust ids (G)

      Normally, Samba validates each entry - in the LDAP server against getpwnam(). This allows - LDAP to be used for Samba with the unix system using - NIS (for example) and also ensures that Samba does not - present accounts that do not otherwise exist.

      This option is used to disable this functionality, and - instead to rely on the presence of the appropriate - attributes in LDAP directly, which can result in a - significant performance boost in some situations. - Setting this option to yes effectivly assumes - that the local machine is running nss_ldap against the - same LDAP server.

      Default: ldap trust ids = No

      level2 oplocks (S)

      This parameter controls whether Samba supports - level2 (read-only) oplocks on a share.

      Level2, or read-only oplocks allow Windows NT clients - that have an oplock on a file to downgrade from a read-write oplock - to a read-only oplock once a second client opens the file (instead - of releasing all oplocks on a second open, as in traditional, - exclusive oplocks). This allows all openers of the file that - support level2 oplocks to cache the file for read-ahead only (ie. - they may not cache writes or lock requests) and increases performance - for many accesses of files that are not commonly written (such as - application .EXE files).

      Once one of the clients which have a read-only oplock - writes to the file all clients are notified (no reply is needed - or waited for) and told to break their oplocks to "none" and - delete any read-ahead caches.

      It is recommended that this parameter be turned on - to speed access to shared executables.

      For more discussions on level2 oplocks see the CIFS spec.

      Currently, if kernel - oplocks are supported then level2 oplocks are - not granted (even if this parameter is set to yes). - Note also, the oplocks - parameter must be set to yes on this share in order for - this parameter to have any effect.

      See also the oplocks - and kernel oplocks - parameters.

      Default: level2 oplocks = yes

      lm announce (G)

      This parameter determines if nmbd(8) will produce Lanman announce - broadcasts that are needed by OS/2 clients in order for them to see - the Samba server in their browse list. This parameter can have three - values, yes, no, or - auto. The default is auto. - If set to no Samba will never produce these - broadcasts. If set to yes Samba will produce - Lanman announce broadcasts at a frequency set by the parameter - lm interval. If set to auto - Samba will not send Lanman announce broadcasts by default but will - listen for them. If it hears such a broadcast on the wire it will - then start sending them at a frequency set by the parameter - lm interval.

      See also lm interval - .

      Default: lm announce = auto

      Example: lm announce = yes

      lm interval (G)

      If Samba is set to produce Lanman announce - broadcasts needed by OS/2 clients (see the lm announce parameter) then this - parameter defines the frequency in seconds with which they will be - made. If this is set to zero then no Lanman announcements will be - made despite the setting of the lm announce - parameter.

      See also lm - announce.

      Default: lm interval = 60

      Example: lm interval = 120

      load printers (G)

      A boolean variable that controls whether all - printers in the printcap will be loaded for browsing by default. - See the printers section for - more details.

      Default: load printers = yes

      local master (G)

      This option allows nmbd(8) to try and become a local master browser - on a subnet. If set to no then nmbd will not attempt to become a local master browser - on a subnet and will also lose in all browsing elections. By - default this value is set to yes. Setting this value to yes doesn't - mean that Samba will become the local master - browser on a subnet, just that nmbd will participate in elections for local master browser.

      Setting this value to no will cause nmbd - never to become a local master browser.

      Default: local master = yes

      lock dir (G)

      Synonym for lock directory.

      lock directory (G)

      This option specifies the directory where lock - files will be placed. The lock files are used to implement the - max connections - option.

      Default: lock directory = ${prefix}/var/locks

      Example: lock directory = /var/run/samba/locks -

      lock spin count (G)

      This parameter controls the number of times - that smbd should attempt to gain a byte range lock on the - behalf of a client request. Experiments have shown that - Windows 2k servers do not reply with a failure if the lock - could not be immediately granted, but try a few more times - in case the lock could later be aquired. This behavior - is used to support PC database formats such as MS Access - and FoxPro. -

      Default: lock spin count = 2 -

      lock spin time (G)

      The time in microseconds that smbd should - pause before attempting to gain a failed lock. See - lock spin - count for more details. -

      Default: lock spin time = 10 -

      locking (S)

      This controls whether or not locking will be - performed by the server in response to lock requests from the - client.

      If locking = no, all lock and unlock - requests will appear to succeed and all lock queries will report - that the file in question is available for locking.

      If locking = yes, real locking will be performed - by the server.

      This option may be useful for read-only - filesystems which may not need locking (such as - CDROM drives), although setting this parameter of no - is not really recommended even in this case.

      Be careful about disabling locking either globally or in a - specific service, as lack of locking may result in data corruption. - You should never need to set this parameter.

      Default: locking = yes

      log file (G)

      This option allows you to override the name - of the Samba log file (also known as the debug file).

      This option takes the standard substitutions, allowing - you to have separate log files for each user or machine.

      Example: log file = /usr/local/samba/var/log.%m -

      log level (G)

      The value of the parameter (a astring) allows - the debug level (logging level) to be specified in the - smb.conf file. This parameter has been - extended since the 2.2.x series, now it allow to specify the debug - level for multiple debug classes. This is to give greater - flexibility in the configuration of the system.

      The default will be the log level specified on - the command line or level zero if none was specified.

      Example: log level = 3 passdb:5 auth:10 winbind:2 -

      logon drive (G)

      This parameter specifies the local path to - which the home directory will be connected (see logon home) - and is only used by NT Workstations.

      Note that this option is only useful if Samba is set up as a - logon server.

      Default: logon drive = z:

      Example: logon drive = h:

      logon home (G)

      This parameter specifies the home directory - location when a Win95/98 or NT Workstation logs into a Samba PDC. - It allows you to do

      C:\> NET USE H: /HOME -

      from a command prompt, for example.

      This option takes the standard substitutions, allowing - you to have separate logon scripts for each user or machine.

      This parameter can be used with Win9X workstations to ensure - that roaming profiles are stored in a subdirectory of the user's - home directory. This is done in the following way:

      logon home = \\%N\%U\profile

      This tells Samba to return the above string, with - substitutions made when a client requests the info, generally - in a NetUserGetInfo request. Win9X clients truncate the info to - \\server\share when a user does net use /home - but use the whole string when dealing with profiles.

      Note that in prior versions of Samba, the logon path was returned rather than - logon home. This broke net use - /home but allowed profiles outside the home directory. - The current implementation is correct, and can be used for - profiles if you use the above trick.

      This option is only useful if Samba is set up as a logon - server.

      Default: logon home = "\\%N\%U"

      Example: logon home = "\\remote_smb_server\%U" -

      logon path (G)

      This parameter specifies the home directory - where roaming profiles (NTuser.dat etc files for Windows NT) are - stored. Contrary to previous versions of these manual pages, it has - nothing to do with Win 9X roaming profiles. To find out how to - handle roaming profiles for Win 9X system, see the logon home parameter.

      This option takes the standard substitutions, allowing you - to have separate logon scripts for each user or machine. It also - specifies the directory from which the "Application Data", - (desktop, start menu, - network neighborhood, programs - and other folders, and their contents, are loaded and displayed on - your Windows NT client.

      The share and the path must be readable by the user for - the preferences and directories to be loaded onto the Windows NT - client. The share must be writeable when the user logs in for the first - time, in order that the Windows NT client can create the NTuser.dat - and other directories.

      Thereafter, the directories and any of the contents can, - if required, be made read-only. It is not advisable that the - NTuser.dat file be made read-only - rename it to NTuser.man to - achieve the desired effect (a MANdatory - profile).

      Windows clients can sometimes maintain a connection to - the [homes] share, even though there is no user logged in. - Therefore, it is vital that the logon path does not include a - reference to the homes share (i.e. setting this parameter to - \%N\%U\profile_path will cause problems).

      This option takes the standard substitutions, allowing - you to have separate logon scripts for each user or machine.

      Note that this option is only useful if Samba is set up - as a logon server.

      Default: logon path = \\%N\%U\profile

      Example: logon path = \\PROFILESERVER\PROFILE\%U

      logon script (G)

      This parameter specifies the batch file (.bat) or - NT command file (.cmd) to be downloaded and run on a machine when - a user successfully logs in. The file must contain the DOS - style CR/LF line endings. Using a DOS-style editor to create the - file is recommended.

      The script must be a relative path to the [netlogon] - service. If the [netlogon] service specifies a path of /usr/local/samba/netlogon - , and logon script = STARTUP.BAT, then - the file that will be downloaded is:

      /usr/local/samba/netlogon/STARTUP.BAT

      The contents of the batch file are entirely your choice. A - suggested command would be to add NET TIME \\SERVER /SET - /YES, to force every machine to synchronize clocks with - the same time server. Another use would be to add NET USE - U: \\SERVER\UTILS for commonly used utilities, or NET USE Q: \\SERVER\ISO9001_QA for example.

      Note that it is particularly important not to allow write - access to the [netlogon] share, or to grant users write permission - on the batch files in a secure environment, as this would allow - the batch files to be arbitrarily modified and security to be - breached.

      This option takes the standard substitutions, allowing you - to have separate logon scripts for each user or machine.

      This option is only useful if Samba is set up as a logon - server.

      Default: no logon script defined

      Example: logon script = scripts\%U.bat

      lppause command (S)

      This parameter specifies the command to be - executed on the server host in order to stop printing or spooling - a specific print job.

      This command should be a program or script which takes - a printer name and job number to pause the print job. One way - of implementing this is by using job priorities, where jobs - having a too low priority won't be sent to the printer.

      If a %p is given then the printer name - is put in its place. A %j is replaced with - the job number (an integer). On HPUX (see printing=hpux - ), if the -p%p option is added - to the lpq command, the job will show up with the correct status, i.e. - if the job priority is lower than the set fence priority it will - have the PAUSED status, whereas if the priority is equal or higher it - will have the SPOOLED or PRINTING status.

      Note that it is good practice to include the absolute path - in the lppause command as the PATH may not be available to the server.

      See also the printing - parameter.

      Default: Currently no default value is given to - this string, unless the value of the printing - parameter is SYSV, in which case the default is :

      lp -i %p-%j -H hold

      or if the value of the printing parameter - is SOFTQ, then the default is:

      qstat -s -j%j -h

      Example for HPUX: lppause command = /usr/bin/lpalt - %p-%j -p0

      lpq cache time (G)

      This controls how long lpq info will be cached - for to prevent the lpq command being called too - often. A separate cache is kept for each variation of the lpq command used by the system, so if you use different - lpq commands for different users then they won't - share cache information.

      The cache files are stored in /tmp/lpq.xxxx - where xxxx is a hash of the lpq command in use.

      The default is 10 seconds, meaning that the cached results - of a previous identical lpq command will be used - if the cached data is less than 10 seconds old. A large value may - be advisable if your lpq command is very slow.

      A value of 0 will disable caching completely.

      See also the printing - parameter.

      Default: lpq cache time = 10

      Example: lpq cache time = 30

      lpq command (S)

      This parameter specifies the command to be - executed on the server host in order to obtain lpq - -style printer status information.

      This command should be a program or script which - takes a printer name as its only parameter and outputs printer - status information.

      Currently nine styles of printer status information - are supported; BSD, AIX, LPRNG, PLP, SYSV, HPUX, QNX, CUPS, and SOFTQ. - This covers most UNIX systems. You control which type is expected - using the printing = option.

      Some clients (notably Windows for Workgroups) may not - correctly send the connection number for the printer they are - requesting status information about. To get around this, the - server reports on the first printer service connected to by the - client. This only happens if the connection number sent is invalid.

      If a %p is given then the printer name - is put in its place. Otherwise it is placed at the end of the - command.

      Note that it is good practice to include the absolute path - in the lpq command as the $PATH - may not be available to the server. When compiled with - the CUPS libraries, no lpq command is - needed because smbd will make a library call to obtain the - print queue listing.

      See also the printing - parameter.

      Default: depends on the setting of printing

      Example: lpq command = /usr/bin/lpq -P%p

      lpresume command (S)

      This parameter specifies the command to be - executed on the server host in order to restart or continue - printing or spooling a specific print job.

      This command should be a program or script which takes - a printer name and job number to resume the print job. See - also the lppause command - parameter.

      If a %p is given then the printer name - is put in its place. A %j is replaced with - the job number (an integer).

      Note that it is good practice to include the absolute path - in the lpresume command as the PATH may not - be available to the server.

      See also the printing - parameter.

      Default: Currently no default value is given - to this string, unless the value of the printing - parameter is SYSV, in which case the default is :

      lp -i %p-%j -H resume

      or if the value of the printing parameter - is SOFTQ, then the default is:

      qstat -s -j%j -r

      Example for HPUX: lpresume command = /usr/bin/lpalt - %p-%j -p2

      lprm command (S)

      This parameter specifies the command to be - executed on the server host in order to delete a print job.

      This command should be a program or script which takes - a printer name and job number, and deletes the print job.

      If a %p is given then the printer name - is put in its place. A %j is replaced with - the job number (an integer).

      Note that it is good practice to include the absolute - path in the lprm command as the PATH may not be - available to the server.

      See also the printing - parameter.

      Default: depends on the setting of printing -

      Example 1: lprm command = /usr/bin/lprm -P%p %j -

      Example 2: lprm command = /usr/bin/cancel %p-%j -

      machine password timeout (G)

      If a Samba server is a member of a Windows - NT Domain (see the security = domain) - parameter) then periodically a running smbd(8) process will try and change the MACHINE ACCOUNT - PASSWORD stored in the TDB called private/secrets.tdb - . This parameter specifies how often this password - will be changed, in seconds. The default is one week (expressed in - seconds), the same as a Windows NT Domain member server.

      See also smbpasswd(8) - , and the security = domain) parameter.

      Default: machine password timeout = 604800

      magic output (S)

      This parameter specifies the name of a file - which will contain output created by a magic script (see the - magic script - parameter below).

      Warning: If two clients use the same magic script - in the same directory the output file content - is undefined.

      Default: magic output = <magic script name>.out -

      Example: magic output = myfile.txt

      magic script (S)

      This parameter specifies the name of a file which, - if opened, will be executed by the server when the file is closed. - This allows a UNIX script to be sent to the Samba host and - executed on behalf of the connected user.

      Scripts executed in this way will be deleted upon - completion assuming that the user has the appropriate level - of privilege and the file permissions allow the deletion.

      If the script generates output, output will be sent to - the file specified by the magic output parameter (see above).

      Note that some shells are unable to interpret scripts - containing CR/LF instead of CR as - the end-of-line marker. Magic scripts must be executable - as is on the host, which for some hosts and - some shells will require filtering at the DOS end.

      Magic scripts are EXPERIMENTAL and - should NOT be relied upon.

      Default: None. Magic scripts disabled.

      Example: magic script = user.csh

      mangle case (S)

      See the section on NAME MANGLING

      Default: mangle case = no

      mangled map (S)

      This is for those who want to directly map UNIX - file names which cannot be represented on Windows/DOS. The mangling - of names is not always what is needed. In particular you may have - documents with file extensions that differ between DOS and UNIX. - For example, under UNIX it is common to use .html - for HTML files, whereas under Windows/DOS .htm - is more commonly used.

      So to map html to htm - you would use:

      mangled map = (*.html *.htm)

      One very useful case is to remove the annoying ;1 - off the ends of filenames on some CDROMs (only visible - under some UNIXes). To do this use a map of (*;1 *;).

      Default: no mangled map

      Example: mangled map = (*;1 *;)

      mangled names (S)

      This controls whether non-DOS names under UNIX - should be mapped to DOS-compatible names ("mangled") and made visible, - or whether non-DOS names should simply be ignored.

      See the section on NAME MANGLING for details on how to control the mangling process.

      If mangling is used then the mangling algorithm is as follows:

      • The first (up to) five alphanumeric characters - before the rightmost dot of the filename are preserved, forced - to upper case, and appear as the first (up to) five characters - of the mangled name.

      • A tilde "~" is appended to the first part of the mangled - name, followed by a two-character unique sequence, based on the - original root name (i.e., the original filename minus its final - extension). The final extension is included in the hash calculation - only if it contains any upper case characters or is longer than three - characters.

        Note that the character to use may be specified using - the mangling char - option, if you don't like '~'.

      • The first three alphanumeric characters of the final - extension are preserved, forced to upper case and appear as the - extension of the mangled name. The final extension is defined as that - part of the original filename after the rightmost dot. If there are no - dots in the filename, the mangled name will have no extension (except - in the case of "hidden files" - see below).

      • Files whose UNIX name begins with a dot will be - presented as DOS hidden files. The mangled name will be created as - for other filenames, but with the leading dot removed and "___" as - its extension regardless of actual original extension (that's three - underscores).

      The two-digit hash value consists of upper case - alphanumeric characters.

      This algorithm can cause name collisions only if files - in a directory share the same first five alphanumeric characters. - The probability of such a clash is 1/1300.

      The name mangling (if enabled) allows a file to be - copied between UNIX directories from Windows/DOS while retaining - the long UNIX filename. UNIX files can be renamed to a new extension - from Windows/DOS and will retain the same basename. Mangled names - do not change between sessions.

      Default: mangled names = yes

      mangling method (G)

      controls the algorithm used for the generating - the mangled names. Can take two different values, "hash" and - "hash2". "hash" is the default and is the algorithm that has been - used in Samba for many years. "hash2" is a newer and considered - a better algorithm (generates less collisions) in the names. - However, many Win32 applications store the mangled names and so - changing to the new algorithm must not be done - lightly as these applications may break unless reinstalled.

      Default: mangling method = hash2

      Example: mangling method = hash

      mangle prefix (G)

      controls the number of prefix - characters from the original name used when generating - the mangled names. A larger value will give a weaker - hash and therefore more name collisions. The minimum - value is 1 and the maximum value is 6.

      Default: mangle prefix = 1

      Example: mangle prefix = 4

      mangled stack (G)

      This parameter controls the number of mangled names - that should be cached in the Samba server smbd(8).

      This stack is a list of recently mangled base names - (extensions are only maintained if they are longer than 3 characters - or contains upper case characters).

      The larger this value, the more likely it is that mangled - names can be successfully converted to correct long UNIX names. - However, large stack sizes will slow most directory accesses. Smaller - stacks save memory in the server (each stack element costs 256 bytes). -

      It is not possible to absolutely guarantee correct long - filenames, so be prepared for some surprises!

      Default: mangled stack = 50

      Example: mangled stack = 100

      mangling char (S)

      This controls what character is used as - the magic character in name mangling. The default is a '~' - but this may interfere with some software. Use this option to set - it to whatever you prefer.

      Default: mangling char = ~

      Example: mangling char = ^

      map archive (S)

      This controls whether the DOS archive attribute - should be mapped to the UNIX owner execute bit. The DOS archive bit - is set when a file has been modified since its last backup. One - motivation for this option it to keep Samba/your PC from making - any file it touches from becoming executable under UNIX. This can - be quite annoying for shared source code, documents, etc...

      Note that this requires the create mask - parameter to be set such that owner execute bit is not masked out - (i.e. it must include 100). See the parameter create mask for details.

      Default: map archive = yes

      map hidden (S)

      This controls whether DOS style hidden files - should be mapped to the UNIX world execute bit.

      Note that this requires the create mask - to be set such that the world execute bit is not masked out (i.e. - it must include 001). See the parameter create mask for details.

      Default: map hidden = no

      map system (S)

      This controls whether DOS style system files - should be mapped to the UNIX group execute bit.

      Note that this requires the create mask - to be set such that the group execute bit is not masked out (i.e. - it must include 010). See the parameter create mask for details.

      Default: map system = no

      map to guest (G)

      This parameter is only useful in security modes other than security = share - - i.e. user, server, - and domain.

      This parameter can take three different values, which tell - smbd(8) what to do with user - login requests that don't match a valid UNIX user in some way.

      The three settings are :

      • Never - Means user login - requests with an invalid password are rejected. This is the - default.

      • Bad User - Means user - logins with an invalid password are rejected, unless the username - does not exist, in which case it is treated as a guest login and - mapped into the guest account.

      • Bad Password - Means user logins - with an invalid password are treated as a guest login and mapped - into the guest account. Note that - this can cause problems as it means that any user incorrectly typing - their password will be silently logged on as "guest" - and - will not know the reason they cannot access files they think - they should - there will have been no message given to them - that they got their password wrong. Helpdesk services will - hate you if you set the map to - guest parameter this way :-).

      Note that this parameter is needed to set up "Guest" - share services when using security modes other than - share. This is because in these modes the name of the resource being - requested is not sent to the server until after - the server has successfully authenticated the client so the server - cannot make authentication decisions at the correct time (connection - to the share) for "Guest" shares.

      For people familiar with the older Samba releases, this - parameter maps to the old compile-time setting of the GUEST_SESSSETUP value in local.h.

      Default: map to guest = Never

      Example: map to guest = Bad User

      max connections (S)

      This option allows the number of simultaneous - connections to a service to be limited. If max connections - is greater than 0 then connections will be refused if - this number of connections to the service are already open. A value - of zero mean an unlimited number of connections may be made.

      Record lock files are used to implement this feature. The - lock files will be stored in the directory specified by the lock directory - option.

      Default: max connections = 0

      Example: max connections = 10

      max disk size (G)

      This option allows you to put an upper limit - on the apparent size of disks. If you set this option to 100 - then all shares will appear to be not larger than 100 MB in - size.

      Note that this option does not limit the amount of - data you can put on the disk. In the above case you could still - store much more than 100 MB on the disk, but if a client ever asks - for the amount of free disk space or the total disk size then the - result will be bounded by the amount specified in max - disk size.

      This option is primarily useful to work around bugs - in some pieces of software that can't handle very large disks, - particularly disks over 1GB in size.

      A max disk size of 0 means no limit.

      Default: max disk size = 0

      Example: max disk size = 1000

      max log size (G)

      This option (an integer in kilobytes) specifies - the max size the log file should grow to. Samba periodically checks - the size and if it is exceeded it will rename the file, adding - a .old extension.

      A size of 0 means no limit.

      Default: max log size = 5000

      Example: max log size = 1000

      max mux (G)

      This option controls the maximum number of - outstanding simultaneous SMB operations that Samba tells the client - it will allow. You should never need to set this parameter.

      Default: max mux = 50

      max open files (G)

      This parameter limits the maximum number of - open files that one smbd(8) file - serving process may have open for a client at any one time. The - default for this parameter is set very high (10,000) as Samba uses - only one bit per unopened file.

      The limit of the number of open files is usually set - by the UNIX per-process file descriptor limit rather than - this parameter so you should never need to touch this parameter.

      Default: max open files = 10000

      max print jobs (S)

      This parameter limits the maximum number of - jobs allowable in a Samba printer queue at any given moment. - If this number is exceeded, smbd(8) will remote "Out of Space" to the client. - See all total - print jobs. -

      Default: max print jobs = 1000

      Example: max print jobs = 5000

      max protocol (G)

      The value of the parameter (a string) is the highest - protocol level that will be supported by the server.

      Possible values are :

      • CORE: Earliest version. No - concept of user names.

      • COREPLUS: Slight improvements on - CORE for efficiency.

      • LANMAN1: First modern version of the protocol. Long filename - support.

      • LANMAN2: Updates to Lanman1 protocol. -

      • NT1: Current up to date version of - the protocol. Used by Windows NT. Known as CIFS.

      Normally this option should not be set as the automatic - negotiation phase in the SMB protocol takes care of choosing - the appropriate protocol.

      See also min - protocol

      Default: max protocol = NT1

      Example: max protocol = LANMAN1

      max smbd processes (G)

      This parameter limits the maximum number of - smbd(8) - processes concurrently running on a system and is intended - as a stopgap to prevent degrading service to clients in the event - that the server has insufficient resources to handle more than this - number of connections. Remember that under normal operating - conditions, each user will have an smbd associated with him or her - to handle connections to all shares from a given host. -

      Default: max smbd processes = 0 ## no limit

      Example: max smbd processes = 1000

      max ttl (G)

      This option tells nmbd(8) - what the default 'time to live' of NetBIOS names should be (in seconds) - when nmbd is requesting a name using either a - broadcast packet or from a WINS server. You should never need to - change this parameter. The default is 3 days.

      Default: max ttl = 259200

      max wins ttl (G)

      This option tells nmbd(8) - when acting as a WINS server ( wins support = yes) what the maximum - 'time to live' of NetBIOS names that nmbd - will grant will be (in seconds). You should never need to change this - parameter. The default is 6 days (518400 seconds).

      See also the min - wins ttl parameter.

      Default: max wins ttl = 518400

      max xmit (G)

      This option controls the maximum packet size - that will be negotiated by Samba. The default is 65535, which - is the maximum. In some cases you may find you get better performance - with a smaller value. A value below 2048 is likely to cause problems. -

      Default: max xmit = 65535

      Example: max xmit = 8192

      message command (G)

      This specifies what command to run when the - server receives a WinPopup style message.

      This would normally be a command that would - deliver the message somehow. How this is to be done is - up to your imagination.

      An example is:

      message command = csh -c 'xedit %s;rm %s' & -

      This delivers the message using xedit, then - removes it afterwards. NOTE THAT IT IS VERY IMPORTANT - THAT THIS COMMAND RETURN IMMEDIATELY. That's why I - have the '&' on the end. If it doesn't return immediately then - your PCs may freeze when sending messages (they should recover - after 30 seconds, hopefully).

      All messages are delivered as the global guest user. - The command takes the standard substitutions, although %u won't work (%U may be better - in this case).

      Apart from the standard substitutions, some additional - ones apply. In particular:

      • %s = the filename containing - the message.

      • %t = the destination that - the message was sent to (probably the server name).

      • %f = who the message - is from.

      You could make this command send mail, or whatever else - takes your fancy. Please let us know of any really interesting - ideas you have.

      Here's a way of sending the messages as mail to root:

      message command = /bin/mail -s 'message from %f on - %m' root < %s; rm %s

      If you don't have a message command then the message - won't be delivered and Samba will tell the sender there was - an error. Unfortunately WfWg totally ignores the error code - and carries on regardless, saying that the message was delivered. -

      If you want to silently delete it then try:

      message command = rm %s

      Default: no message command

      Example: message command = csh -c 'xedit %s; - rm %s' &

      min passwd length (G)

      Synonym for min password length.

      min password length (G)

      This option sets the minimum length in characters - of a plaintext password that smbd will accept when performing - UNIX password changing.

      See also unix - password sync, passwd program and passwd chat debug - .

      Default: min password length = 5

      min print space (S)

      This sets the minimum amount of free disk - space that must be available before a user will be able to spool - a print job. It is specified in kilobytes. The default is 0, which - means a user can always spool a print job.

      See also the printing - parameter.

      Default: min print space = 0

      Example: min print space = 2000

      min protocol (G)

      The value of the parameter (a string) is the - lowest SMB protocol dialect than Samba will support. Please refer - to the max protocol - parameter for a list of valid protocol names and a brief description - of each. You may also wish to refer to the C source code in - source/smbd/negprot.c for a listing of known protocol - dialects supported by clients.

      If you are viewing this parameter as a security measure, you should - also refer to the lanman - auth parameter. Otherwise, you should never need - to change this parameter.

      Default : min protocol = CORE

      Example : min protocol = NT1 # disable DOS - clients

      min wins ttl (G)

      This option tells nmbd(8) - when acting as a WINS server ( wins support = yes) what the minimum 'time to live' - of NetBIOS names that nmbd will grant will be (in - seconds). You should never need to change this parameter. The default - is 6 hours (21600 seconds).

      Default: min wins ttl = 21600

      msdfs proxy (S)

      This parameter indicates that the share is a - stand-in for another CIFS share whose location is specified by - the value of the parameter. When clients attempt to connect to - this share, they are redirected to the proxied share using - the SMB-Dfs protocol.

      Only Dfs roots can act as proxy shares. Take a look at the - msdfs root - and - host msdfs - options to find out how to set up a Dfs root share.

      Example: msdfs proxy = \otherserver\someshare

      msdfs root (S)

      This boolean parameter is only available if - Samba is configured and compiled with the --with-msdfs option. If set to yes, - Samba treats the share as a Dfs root and allows clients to browse - the distributed file system tree rooted at the share directory. - Dfs links are specified in the share directory by symbolic - links of the form msdfs:serverA\shareA,serverB\shareB - and so on. For more information on setting up a Dfs tree - on Samba, refer to msdfs_setup.html - .

      See also host msdfs -

      Default: msdfs root = no

      name cache timeout (G)

      Specifies the number of seconds it takes before - entries in samba's hostname resolve cache time out. If - the timeout is set to 0. the caching is disabled. -

      Default: name cache timeout = 660

      Example: name cache timeout = 0

      name resolve order (G)

      This option is used by the programs in the Samba - suite to determine what naming services to use and in what order - to resolve host names to IP addresses. The option takes a space - separated string of name resolution options.

      The options are :"lmhosts", "host", "wins" and "bcast". They - cause names to be resolved as follows :

      • lmhosts : Lookup an IP - address in the Samba lmhosts file. If the line in lmhosts has - no name type attached to the NetBIOS name (see the lmhosts(5) for details) then - any name type matches for lookup.

      • host : Do a standard host - name to IP address resolution, using the system /etc/hosts - , NIS, or DNS lookups. This method of name resolution - is operating system depended for instance on IRIX or Solaris this - may be controlled by the /etc/nsswitch.conf - file. Note that this method is only used if the NetBIOS name - type being queried is the 0x20 (server) name type, otherwise - it is ignored.

      • wins : Query a name with - the IP address listed in the wins server parameter. If no WINS server has - been specified this method will be ignored.

      • bcast : Do a broadcast on - each of the known local interfaces listed in the interfaces - parameter. This is the least reliable of the name resolution - methods as it depends on the target host being on a locally - connected subnet.

      Default: name resolve order = lmhosts host wins bcast -

      Example: name resolve order = lmhosts bcast host -

      This will cause the local lmhosts file to be examined - first, followed by a broadcast attempt, followed by a normal - system hostname lookup.

      netbios aliases (G)

      This is a list of NetBIOS names that nmbd(8) will advertise as additional - names by which the Samba server is known. This allows one machine - to appear in browse lists under multiple names. If a machine is - acting as a browse server or logon server none - of these names will be advertised as either browse server or logon - servers, only the primary name of the machine will be advertised - with these capabilities.

      See also netbios - name.

      Default: empty string (no additional names)

      Example: netbios aliases = TEST TEST1 TEST2

      netbios name (G)

      This sets the NetBIOS name by which a Samba - server is known. By default it is the same as the first component - of the host's DNS name. If a machine is a browse server or - logon server this name (or the first component - of the hosts DNS name) will be the name that these services are - advertised under.

      See also netbios - aliases.

      Default: machine DNS name

      Example: netbios name = MYNAME

      netbios scope (G)

      This sets the NetBIOS scope that Samba will - operate under. This should not be set unless every machine - on your LAN also sets this value.

      nis homedir (G)

      Get the home share server from a NIS map. For - UNIX systems that use an automounter, the user's home directory - will often be mounted on a workstation on demand from a remote - server.

      When the Samba logon server is not the actual home directory - server, but is mounting the home directories via NFS then two - network hops would be required to access the users home directory - if the logon server told the client to use itself as the SMB server - for home directories (one over SMB and one over NFS). This can - be very slow.

      This option allows Samba to return the home share as - being on a different server to the logon server and as - long as a Samba daemon is running on the home directory server, - it will be mounted on the Samba client directly from the directory - server. When Samba is returning the home share to the client, it - will consult the NIS map specified in homedir map and return the server - listed there.

      Note that for this option to work there must be a working - NIS system and the Samba server with this option must also - be a logon server.

      Default: nis homedir = no

      non unix account range (G)

      The non unix account range parameter specifies - the range of 'user ids' that are allocated by the various 'non unix - account' passdb backends. These backends allow - the storage of passwords for users who don't exist in /etc/passwd. - This is most often used for machine account creation. - This range of ids should have no existing local or NIS users within - it as strange conflicts can occur otherwise.

      NOTE: These userids never appear on the system and Samba will never - 'become' these users. They are used only to ensure that the algorithmic - RID mapping does not conflict with normal users. -

      Default: non unix account range = <empty string> -

      Example: non unix account range = 10000-20000

      nt acl support (S)

      This boolean parameter controls whether - smbd(8) will attempt to map - UNIX permissions into Windows NT access control lists. - This parameter was formally a global parameter in releases - prior to 2.2.2.

      Default: nt acl support = yes

      nt pipe support (G)

      This boolean parameter controls whether - smbd(8) will allow Windows NT - clients to connect to the NT SMB specific IPC$ - pipes. This is a developer debugging option and can be left - alone.

      Default: nt pipe support = yes

      nt status support (G)

      This boolean parameter controls whether smbd(8) will negotiate NT specific status - support with Windows NT/2k/XP clients. This is a developer - debugging option and should be left alone. - If this option is set to no then Samba offers - exactly the same DOS error codes that versions prior to Samba 2.2.3 - reported.

      You should not need to ever disable this parameter.

      Default: nt status support = yes

      null passwords (G)

      Allow or disallow client access to accounts - that have null passwords.

      See also smbpasswd (5).

      Default: null passwords = no

      obey pam restrictions (G)

      When Samba 2.2 is configured to enable PAM support - (i.e. --with-pam), this parameter will control whether or not Samba - should obey PAM's account and session management directives. The - default behavior is to use PAM for clear text authentication only - and to ignore any account or session management. Note that Samba - always ignores PAM for authentication in the case of encrypt passwords = yes - . The reason is that PAM modules cannot support the challenge/response - authentication mechanism needed in the presence of SMB password encryption. -

      Default: obey pam restrictions = no

      only user (S)

      This is a boolean option that controls whether - connections with usernames not in the user - list will be allowed. By default this option is disabled so that a - client can supply a username to be used by the server. Enabling - this parameter will force the server to only use the login - names from the user list and is only really - useful in share level - security.

      Note that this also means Samba won't try to deduce - usernames from the service name. This can be annoying for - the [homes] section. To get around this you could use user = - %S which means your user list - will be just the service name, which for home directories is the - name of the user.

      See also the user - parameter.

      Default: only user = no

      only guest (S)

      A synonym for guest only.

      oplock break wait time (G)

      This is a tuning parameter added due to bugs in - both Windows 9x and WinNT. If Samba responds to a client too - quickly when that client issues an SMB that can cause an oplock - break request, then the network client can fail and not respond - to the break request. This tuning parameter (which is set in milliseconds) - is the amount of time Samba will wait before sending an oplock break - request to such (broken) clients.

      DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ - AND UNDERSTOOD THE SAMBA OPLOCK CODE.

      Default: oplock break wait time = 0

      oplock contention limit (S)

      This is a very advanced - smbd(8) tuning option to - improve the efficiency of the granting of oplocks under multiple - client contention for the same file.

      In brief it specifies a number, which causes smbd not to - grant an oplock even when requested if the approximate number of - clients contending for an oplock on the same file goes over this - limit. This causes smbd to behave in a similar - way to Windows NT.

      DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ - AND UNDERSTOOD THE SAMBA OPLOCK CODE.

      Default: oplock contention limit = 2

      oplocks (S)

      This boolean option tells smbd whether to - issue oplocks (opportunistic locks) to file open requests on this - share. The oplock code can dramatically (approx. 30% or more) improve - the speed of access to files on Samba servers. It allows the clients - to aggressively cache files locally and you may want to disable this - option for unreliable network environments (it is turned on by - default in Windows NT Servers). For more information see the file - Speed.txt in the Samba docs/ - directory.

      Oplocks may be selectively turned off on certain files with a - share. See the veto oplock files parameter. On some systems - oplocks are recognized by the underlying operating system. This - allows data synchronization between all access to oplocked files, - whether it be via Samba or NFS or a local UNIX process. See the - kernel oplocks parameter for details.

      See also the kernel - oplocks and level2 oplocks parameters.

      Default: oplocks = yes

      ntlm auth (G)

      This parameter determines whether or not smbd will - attempt to authenticate users using the NTLM password hash. - If disabled, only the lanman password hashes will be used. -

      Please note that at least this option or lanman auth should be enabled in order to be able to log in. -

      Default : ntlm auth = yes

      os level (G)

      This integer value controls what level Samba - advertises itself as for browse elections. The value of this - parameter determines whether nmbd(8) - has a chance of becoming a local master browser for the WORKGROUP in the local broadcast area.

      Note :By default, Samba will win - a local master browsing election over all Microsoft operating - systems except a Windows NT 4.0/2000 Domain Controller. This - means that a misconfigured Samba host can effectively isolate - a subnet for browsing purposes. See BROWSING.txt - in the Samba docs/ directory - for details.

      Default: os level = 20

      Example: os level = 65

      os2 driver map (G)

      The parameter is used to define the absolute - path to a file containing a mapping of Windows NT printer driver - names to OS/2 printer driver names. The format is:

      <nt driver name> = <os2 driver - name>.<device name>

      For example, a valid entry using the HP LaserJet 5 - printer driver would appear as HP LaserJet 5L = LASERJET.HP - LaserJet 5L.

      The need for the file is due to the printer driver namespace - problem described in the Samba - Printing HOWTO. For more details on OS/2 clients, please - refer to the OS2-Client-HOWTO - containing in the Samba documentation.

      Default: os2 driver map = <empty string> -

      pam password change (G)

      With the addition of better PAM support in Samba 2.2, - this parameter, it is possible to use PAM's password change control - flag for Samba. If enabled, then PAM will be used for password - changes when requested by an SMB client instead of the program listed in - passwd program. - It should be possible to enable this without changing your - passwd chat - parameter for most setups. -

      Default: pam password change = no

      panic action (G)

      This is a Samba developer option that allows a - system command to be called when either smbd(8) or nmbd(8) - crashes. This is usually used to draw attention to the fact that - a problem occurred.

      Default: panic action = <empty string>

      Example: panic action = "/bin/sleep 90000"

      paranoid server security (G)

      Some version of NT 4.x allow non-guest - users with a bad passowrd. When this option is enabled, samba will not - use a broken NT 4.x server as password server, but instead complain - to the logs and exit. -

      Default: paranoid server security = yes

      passdb backend (G)

      This option allows the administrator to chose which backends to retrieve and store passwords with. This allows (for example) both - smbpasswd and tdbsam to be used without a recompile. - Multiple backends can be specified, separated by spaces. The backends will be searched in the order they are specified. New users are always added to the first backend specified. - Experimental backends must still be selected - (eg --with-tdbsam) at configure time. -

      This parameter is in two parts, the backend's name, and a 'location' - string that has meaning only to that particular backed. These are separated - by a : character.

      Available backends can include: -

      • smbpasswd - The default smbpasswd - backend. Takes a path to the smbpasswd file as an optional argument.

      • smbpasswd_nua - The smbpasswd - backend, but with support for 'not unix accounts'. - Takes a path to the smbpasswd file as an optional argument.

        See also non unix account range

      • tdbsam - The TDB based password storage - backend. Takes a path to the TDB as an optional argument (defaults to passdb.tdb - in the private dir directory.

      • tdbsam_nua - The TDB based password storage - backend, with non unix account support. Takes a path to the TDB as an optional argument (defaults to passdb.tdb - in the private dir directory.

        See also non unix account range

      • ldapsam - The LDAP based passdb - backend. Takes an LDAP URL as an optional argument (defaults to - ldap://localhost)

      • ldapsam_nua - The LDAP based passdb - backend, with non unix account support. Takes an LDAP URL as an optional argument (defaults to - ldap://localhost)

        Note: In this module, any account without a matching POSIX account is regarded - as 'non unix'.

        See also non unix account - range

        LDAP connections should be secured where - possible. This may be done using either - Start-TLS (see ldap ssl) or by - specifying ldaps:// in - the URL argument. -

      • nisplussam - The NIS+ based passdb backend. Takes name NIS domain as an optional argument. Only works with sun NIS+ servers.

      • plugin - Allows Samba to load an - arbitary passdb backend from the .so specified as a compulsary argument. -

        Any characters after the (optional) second : are passed to the plugin - for its own processing

      • unixsam - (EXPERIMENTAL) Allows samba to map all (other) available unix users

        This backend uses the standard unix database for retrieving users. Users included - in this pdb are NOT listed in samba user listings and users included in this pdb won't be - able to login. The use of this backend is to always be able to display the owner of a file - on the samba server - even when the user doesn't have a 'real' samba account in one of the - other passdb backends. -

        This backend should always be the last backend listed, since it contains all users in - the unix passdb and might 'override' mappings if specified earlier. It's meant to only return - accounts for users that aren't covered by the previous backends.

      -

      Default: passdb backend = smbpasswd guest

      Example: passdb backend = tdbsam:/etc/samba/private/passdb.tdb smbpasswd:/etc/samba/smbpasswd

      Example: passdb backend = ldapsam_nua:ldaps://ldap.example.com

      Example: passdb backend = plugin:/usr/local/samba/lib/my_passdb.so:my_plugin_args tdbsam:/etc/samba/private/passdb.tdb

      passwd chat (G)

      This string controls the "chat" - conversation that takes places between smbd and the local password changing - program to change the user's password. The string describes a - sequence of response-receive pairs that smbd(8) uses to determine what to send to the - passwd program - and what to expect back. If the expected output is not - received then the password is not changed.

      This chat sequence is often quite site specific, depending - on what local methods are used for password control (such as NIS - etc).

      Note that this parameter only is only used if the unix - password sync parameter is set to yes. This - sequence is then called AS ROOT when the SMB password - in the smbpasswd file is being changed, without access to the old - password cleartext. This means that root must be able to reset the user's password - without knowing the text of the previous password. In the presence of NIS/YP, - this means that the passwd program must be - executed on the NIS master. -

      The string can contain the macro %n which is substituted - for the new password. The chat sequence can also contain the standard - macros \n, \r, \t and \s to give line-feed, - carriage-return, tab and space. The chat sequence string can also contain - a '*' which matches any sequence of characters. - Double quotes can be used to collect strings with spaces - in them into a single string.

      If the send string in any part of the chat sequence - is a full stop ".", then no string is sent. Similarly, - if the expect string is a full stop then no string is expected.

      If the pam - password change parameter is set to yes, the chat pairs - may be matched in any order, and success is determined by the PAM result, - not any particular output. The \n macro is ignored for PAM conversions. -

      See also unix password - sync, passwd program , passwd chat debug and pam password change.

      Default: passwd chat = *new*password* %n\n - *new*password* %n\n *changed*

      Example: passwd chat = "*Enter OLD password*" %o\n - "*Enter NEW password*" %n\n "*Reenter NEW password*" %n\n "*Password - changed*"

      passwd chat debug (G)

      This boolean specifies if the passwd chat script - parameter is run in debug mode. In this mode the - strings passed to and received from the passwd chat are printed - in the smbd(8) log with a - debug level - of 100. This is a dangerous option as it will allow plaintext passwords - to be seen in the smbd log. It is available to help - Samba admins debug their passwd chat scripts - when calling the passwd program and should - be turned off after this has been done. This option has no effect if the - pam password change - paramter is set. This parameter is off by default.

      See also passwd chat - , pam password change - , passwd program - .

      Default: passwd chat debug = no

      passwd program (G)

      The name of a program that can be used to set - UNIX user passwords. Any occurrences of %u - will be replaced with the user name. The user name is checked for - existence before calling the password changing program.

      Also note that many passwd programs insist in reasonable - passwords, such as a minimum length, or the inclusion - of mixed case chars and digits. This can pose a problem as some clients - (such as Windows for Workgroups) uppercase the password before sending - it.

      Note that if the unix - password sync parameter is set to yes - then this program is called AS ROOT - before the SMB password in the smbpasswd(5) - file is changed. If this UNIX password change fails, then - smbd will fail to change the SMB password also - (this is by design).

      If the unix password sync parameter - is set this parameter MUST USE ABSOLUTE PATHS - for ALL programs called, and must be examined - for security implications. Note that by default unix - password sync is set to no.

      See also unix - password sync.

      Default: passwd program = /bin/passwd

      Example: passwd program = /sbin/npasswd %u -

      password level (G)

      Some client/server combinations have difficulty - with mixed-case passwords. One offending client is Windows for - Workgroups, which for some reason forces passwords to upper - case when using the LANMAN1 protocol, but leaves them alone when - using COREPLUS! Another problem child is the Windows 95/98 - family of operating systems. These clients upper case clear - text passwords even when NT LM 0.12 selected by the protocol - negotiation request/response.

      This parameter defines the maximum number of characters - that may be upper case in passwords.

      For example, say the password given was "FRED". If password level is set to 1, the following combinations - would be tried if "FRED" failed:

      "Fred", "fred", "fRed", "frEd","freD"

      If password level was set to 2, - the following combinations would also be tried:

      "FRed", "FrEd", "FreD", "fREd", "fReD", "frED", ..

      And so on.

      The higher value this parameter is set to the more likely - it is that a mixed case password will be matched against a single - case password. However, you should be aware that use of this - parameter reduces security and increases the time taken to - process a new connection.

      A value of zero will cause only two attempts to be - made - the password as is and the password in all-lower case.

      Default: password level = 0

      Example: password level = 4

      password server (G)

      By specifying the name of another SMB server (such - as a WinNT box) with this option, and using security = domain - or security = server you can get Samba - to do all its username/password validation via a remote server.

      This option sets the name of the password server to use. - It must be a NetBIOS name, so if the machine's NetBIOS name is - different from its Internet name then you may have to add its NetBIOS - name to the lmhosts file which is stored in the same directory - as the smb.conf file.

      The name of the password server is looked up using the - parameter name - resolve order and so may resolved - by any method and order described in that parameter.

      The password server must be a machine capable of using - the "LM1.2X002" or the "NT LM 0.12" protocol, and it must be in - user level security mode.

      NOTE: Using a password server - means your UNIX box (running Samba) is only as secure as your - password server. DO NOT CHOOSE A PASSWORD SERVER THAT - YOU DON'T COMPLETELY TRUST.

      Never point a Samba server at itself for password - serving. This will cause a loop and could lock up your Samba - server!

      The name of the password server takes the standard - substitutions, but probably the only useful one is %m - , which means the Samba server will use the incoming - client as the password server. If you use this then you better - trust your clients, and you had better restrict them with hosts allow!

      If the security parameter is set to - domain, then the list of machines in this - option must be a list of Primary or Backup Domain controllers for the - Domain or the character '*', as the Samba server is effectively - in that domain, and will use cryptographically authenticated RPC calls - to authenticate the user logging on. The advantage of using security = domain is that if you list several hosts in the - password server option then smbd - will try each in turn till it finds one that responds. This - is useful in case your primary server goes down.

      If the password server option is set - to the character '*', then Samba will attempt to auto-locate the - Primary or Backup Domain controllers to authenticate against by - doing a query for the name WORKGROUP<1C> - and then contacting each server returned in the list of IP - addresses from the name resolution source.

      If the list of servers contains both names and the '*' - character, the list is treated as a list of preferred - domain controllers, but an auto lookup of all remaining DC's - will be added to the list as well. Samba will not attempt to optimize - this list by locating the closest DC.

      If the security parameter is - set to server, then there are different - restrictions that security = domain doesn't - suffer from:

      • You may list several password servers in - the password server parameter, however if an - smbd makes a connection to a password server, - and then the password server fails, no more users will be able - to be authenticated from this smbd. This is a - restriction of the SMB/CIFS protocol when in security = server - mode and cannot be fixed in Samba.

      • If you are using a Windows NT server as your - password server then you will have to ensure that your users - are able to login from the Samba server, as when in security = server mode the network logon will appear to - come from there rather than from the users workstation.

      See also the security - parameter.

      Default: password server = <empty string> -

      Example: password server = NT-PDC, NT-BDC1, NT-BDC2, * -

      Example: password server = *

      path (S)

      This parameter specifies a directory to which - the user of the service is to be given access. In the case of - printable services, this is where print data will spool prior to - being submitted to the host for printing.

      For a printable service offering guest access, the service - should be readonly and the path should be world-writeable and - have the sticky bit set. This is not mandatory of course, but - you probably won't get the results you expect if you do - otherwise.

      Any occurrences of %u in the path - will be replaced with the UNIX username that the client is using - on this connection. Any occurrences of %m - will be replaced by the NetBIOS name of the machine they are - connecting from. These replacements are very useful for setting - up pseudo home directories for users.

      Note that this path will be based on root dir if one was specified.

      Default: none

      Example: path = /home/fred

      pid directory (G)

      This option specifies the directory where pid - files will be placed.

      Default: pid directory = ${prefix}/var/locks

      Example: pid directory = /var/run/ -

      posix locking (S)

      The smbd(8) - daemon maintains an database of file locks obtained by SMB clients. - The default behavior is to map this internal database to POSIX - locks. This means that file locks obtained by SMB clients are - consistent with those seen by POSIX compliant applications accessing - the files via a non-SMB method (e.g. NFS or local file access). - You should never need to disable this parameter.

      Default: posix locking = yes

      postexec (S)

      This option specifies a command to be run - whenever the service is disconnected. It takes the usual - substitutions. The command may be run as the root on some - systems.

      An interesting example may be to unmount server - resources:

      postexec = /etc/umount /cdrom

      See also preexec - .

      Default: none (no command executed) -

      Example: postexec = echo \"%u disconnected from %S - from %m (%I)\" >> /tmp/log

      postscript (S)

      This parameter forces a printer to interpret - the print files as PostScript. This is done by adding a %! - to the start of print output.

      This is most useful when you have lots of PCs that persist - in putting a control-D at the start of print jobs, which then - confuses your printer.

      Default: postscript = no

      preexec (S)

      This option specifies a command to be run whenever - the service is connected to. It takes the usual substitutions.

      An interesting example is to send the users a welcome - message every time they log in. Maybe a message of the day? Here - is an example:

      preexec = csh -c 'echo \"Welcome to %S!\" | - /usr/local/samba/bin/smbclient -M %m -I %I' &

      Of course, this could get annoying after a while :-)

      See also preexec close - and postexec - .

      Default: none (no command executed)

      Example: preexec = echo \"%u connected to %S from %m - (%I)\" >> /tmp/log

      preexec close (S)

      This boolean option controls whether a non-zero - return code from preexec - should close the service being connected to.

      Default: preexec close = no

      preferred master (G)

      This boolean parameter controls if nmbd(8) is a preferred master browser - for its workgroup.

      If this is set to yes, on startup, nmbd - will force an election, and it will have a slight advantage in - winning the election. It is recommended that this parameter is - used in conjunction with domain master = yes, so that nmbd can guarantee becoming a domain master.

      Use this option with caution, because if there are several - hosts (whether Samba servers, Windows 95 or NT) that are preferred - master browsers on the same subnet, they will each periodically - and continuously attempt to become the local master browser. - This will result in unnecessary broadcast traffic and reduced browsing - capabilities.

      See also os level - .

      Default: preferred master = auto

      prefered master (G)

      Synonym for preferred master for people who cannot spell :-).

      preload (G)

      This is a list of services that you want to be - automatically added to the browse lists. This is most useful - for homes and printers services that would otherwise not be - visible.

      Note that if you just want all printers in your - printcap file loaded then the load printers option is easier.

      Default: no preloaded services

      Example: preload = fred lp colorlp

      preserve case (S)

      This controls if new filenames are created - with the case that the client passes, or if they are forced to - be the default case - .

      Default: preserve case = yes

      See the section on NAME - MANGLING for a fuller discussion.

      print command (S)

      After a print job has finished spooling to - a service, this command will be used via a system() - call to process the spool file. Typically the command specified will - submit the spool file to the host's printing subsystem, but there - is no requirement that this be the case. The server will not remove - the spool file, so whatever command you specify should remove the - spool file when it has been processed, otherwise you will need to - manually remove old spool files.

      The print command is simply a text string. It will be used - verbatim after macro substitutions have been made:

      s, %p - the path to the spool - file name

      %p - the appropriate printer - name

      %J - the job - name as transmitted by the client.

      %c - The number of printed pages - of the spooled job (if known).

      %z - the size of the spooled - print job (in bytes)

      The print command MUST contain at least - one occurrence of %s or %f - - the %p is optional. At the time - a job is submitted, if no printer name is supplied the %p - will be silently removed from the printer command.

      If specified in the [global] section, the print command given - will be used for any printable service that does not have its own - print command specified.

      If there is neither a specified print command for a - printable service nor a global print command, spool files will - be created but not processed and (most importantly) not removed.

      Note that printing may fail on some UNIXes from the - nobody account. If this happens then create - an alternative guest account that can print and set the guest account - in the [global] section.

      You can form quite complex print commands by realizing - that they are just passed to a shell. For example the following - will log a print job, print the file, then remove it. Note that - ';' is the usual separator for command in shell scripts.

      print command = echo Printing %s >> - /tmp/print.log; lpr -P %p %s; rm %s

      You may have to vary this command considerably depending - on how you normally print files on your system. The default for - the parameter varies depending on the setting of the printing parameter.

      Default: For printing = BSD, AIX, QNX, LPRNG - or PLP :

      print command = lpr -r -P%p %s

      For printing = SYSV or HPUX :

      print command = lp -c -d%p %s; rm %s

      For printing = SOFTQ :

      print command = lp -d%p -s %s; rm %s

      For printing = CUPS : If SAMBA is compiled against - libcups, then printcap = cups - uses the CUPS API to - submit jobs, etc. Otherwise it maps to the System V - commands with the -oraw option for printing, i.e. it - uses lp -c -d%p -oraw; rm %s. - With printing = cups, - and if SAMBA is compiled against libcups, any manually - set print command will be ignored.

      Example: print command = /usr/local/samba/bin/myprintscript - %p %s

      print ok (S)

      Synonym for printable.

      printable (S)

      If this parameter is yes, then - clients may open, write to and submit spool files on the directory - specified for the service.

      Note that a printable service will ALWAYS allow writing - to the service path (user privileges permitting) via the spooling - of print data. The read only - parameter controls only non-printing access to - the resource.

      Default: printable = no

      printcap (G)

      Synonym for printcap name.

      printcap name (G)

      This parameter may be used to override the - compiled-in default printcap name used by the server (usually /etc/printcap). See the discussion of the [printers] section above for reasons - why you might want to do this.

      To use the CUPS printing interface set printcap name = cups - . This should be supplemented by an addtional setting - printing = cups in the [global] - section. printcap name = cups will use the - "dummy" printcap created by CUPS, as specified in your CUPS - configuration file. -

      On System V systems that use lpstat to - list available printers you can use printcap name = lpstat - to automatically obtain lists of available printers. This - is the default for systems that define SYSV at configure time in - Samba (this includes most System V based systems). If printcap name is set to lpstat on - these systems then Samba will launch lpstat -v and - attempt to parse the output to obtain a printer list.

      A minimal printcap file would look something like this:

      		print1|My Printer 1
-		print2|My Printer 2
-		print3|My Printer 3
-		print4|My Printer 4
-		print5|My Printer 5
-

      where the '|' separates aliases of a printer. The fact - that the second alias has a space in it gives a hint to Samba - that it's a comment.

      NOTE: Under AIX the default printcap - name is /etc/qconfig. Samba will assume the - file is in AIX qconfig format if the string - qconfig appears in the printcap filename.

      Default: printcap name = /etc/printcap

      Example: printcap name = /etc/myprintcap

      printer admin (S)

      This is a list of users that can do anything to - printers via the remote administration interfaces offered by MS-RPC - (usually using a NT workstation). Note that the root user always - has admin rights.

      Default: printer admin = <empty string> -

      Example: printer admin = admin, @staff

      printer driver (S)

      Note :This is a deprecated - parameter and will be removed in the next major release - following version 2.2. Please see the instructions in - the Samba 2.2. Printing - HOWTO for more information - on the new method of loading printer drivers onto a Samba server. -

      This option allows you to control the string - that clients receive when they ask the server for the printer driver - associated with a printer. If you are using Windows95 or Windows NT - then you can use this to automate the setup of printers on your - system.

      You need to set this parameter to the exact string (case - sensitive) that describes the appropriate printer driver for your - system. If you don't know the exact string to use then you should - first try with no printer driver option set and the client will - give you a list of printer drivers. The appropriate strings are - shown in a scroll box after you have chosen the printer manufacturer.

      See also printer - driver file.

      Example: printer driver = HP LaserJet 4L

      printer driver file (G)

      Note :This is a deprecated - parameter and will be removed in the next major release - following version 2.2. Please see the instructions in - the Samba 2.2. Printing - HOWTO for more information - on the new method of loading printer drivers onto a Samba server. -

      This parameter tells Samba where the printer driver - definition file, used when serving drivers to Windows 95 clients, is - to be found. If this is not set, the default is :

      SAMBA_INSTALL_DIRECTORY - /lib/printers.def

      This file is created from Windows 95 msprint.inf - files found on the Windows 95 client system. For more - details on setting up serving of printer drivers to Windows 95 - clients, see the outdated documentation file in the docs/ - directory, PRINTER_DRIVER.txt.

      See also printer driver location.

      Default: None (set in compile).

      Example: printer driver file = - /usr/local/samba/printers/drivers.def

      printer driver location (S)

      Note :This is a deprecated - parameter and will be removed in the next major release - following version 2.2. Please see the instructions in - the Samba 2.2. Printing - HOWTO for more information - on the new method of loading printer drivers onto a Samba server. -

      This parameter tells clients of a particular printer - share where to find the printer driver files for the automatic - installation of drivers for Windows 95 machines. If Samba is set up - to serve printer drivers to Windows 95 machines, this should be set to

      \\MACHINE\PRINTER$

      Where MACHINE is the NetBIOS name of your Samba server, - and PRINTER$ is a share you set up for serving printer driver - files. For more details on setting this up see the outdated documentation - file in the docs/ directory, PRINTER_DRIVER.txt.

      See also printer driver file.

      Default: none

      Example: printer driver location = \\MACHINE\PRINTER$ -

      printer name (S)

      This parameter specifies the name of the printer - to which print jobs spooled through a printable service will be sent.

      If specified in the [global] section, the printer - name given will be used for any printable service that does - not have its own printer name specified.

      Default: none (but may be lp - on many systems)

      Example: printer name = laserwriter

      printer (S)

      Synonym for printer name.

      printing (S)

      This parameters controls how printer status - information is interpreted on your system. It also affects the - default values for the print command, - lpq command, lppause command - , lpresume command, and - lprm command if specified in the - [global] section.

      Currently nine printing styles are supported. They are - BSD, AIX, - LPRNG, PLP, - SYSV, HPUX, - QNX, SOFTQ, - and CUPS.

      To see what the defaults are for the other print - commands when using the various options use the testparm(1) program.

      This option can be set on a per printer basis

      See also the discussion in the [printers] section.

      private dir (G)

      This parameters defines the directory - smbd will use for storing such files as smbpasswd - and secrets.tdb. -

      Default :private dir = ${prefix}/private

      protocol (G)

      Synonym for max protocol.

      public (S)

      Synonym for guest - ok.

      queuepause command (S)

      This parameter specifies the command to be - executed on the server host in order to pause the printer queue.

      This command should be a program or script which takes - a printer name as its only parameter and stops the printer queue, - such that no longer jobs are submitted to the printer.

      This command is not supported by Windows for Workgroups, - but can be issued from the Printers window under Windows 95 - and NT.

      If a %p is given then the printer name - is put in its place. Otherwise it is placed at the end of the command. -

      Note that it is good practice to include the absolute - path in the command as the PATH may not be available to the - server.

      Default: depends on the setting of printing -

      Example: queuepause command = disable %p

      queueresume command (S)

      This parameter specifies the command to be - executed on the server host in order to resume the printer queue. It - is the command to undo the behavior that is caused by the - previous parameter ( queuepause command).

      This command should be a program or script which takes - a printer name as its only parameter and resumes the printer queue, - such that queued jobs are resubmitted to the printer.

      This command is not supported by Windows for Workgroups, - but can be issued from the Printers window under Windows 95 - and NT.

      If a %p is given then the printer name - is put in its place. Otherwise it is placed at the end of the - command.

      Note that it is good practice to include the absolute - path in the command as the PATH may not be available to the - server.

      Default: depends on the setting of printing -

      Example: queuepause command = enable %p -

      read bmpx (G)

      This boolean parameter controls whether smbd(8) will support the "Read - Block Multiplex" SMB. This is now rarely used and defaults to - no. You should never need to set this - parameter.

      Default: read bmpx = no

      read list (S)

      This is a list of users that are given read-only - access to a service. If the connecting user is in this list then - they will not be given write access, no matter what the read only - option is set to. The list can include group names using the - syntax described in the invalid users parameter.

      See also the write list parameter and the invalid users - parameter.

      Default: read list = <empty string>

      Example: read list = mary, @students

      read only (S)

      An inverted synonym is writeable.

      If this parameter is yes, then users - of a service may not create or modify files in the service's - directory.

      Note that a printable service (printable = yes) - will ALWAYS allow writing to the directory - (user privileges permitting), but only via spooling operations.

      Default: read only = yes

      read raw (G)

      This parameter controls whether or not the server - will support the raw read SMB requests when transferring data - to clients.

      If enabled, raw reads allow reads of 65535 bytes in - one packet. This typically provides a major performance benefit. -

      However, some clients either negotiate the allowable - block size incorrectly or are incapable of supporting larger block - sizes, and for these clients you may need to disable raw reads.

      In general this parameter should be viewed as a system tuning - tool and left severely alone. See also write raw.

      Default: read raw = yes

      read size (G)

      The option read size - affects the overlap of disk reads/writes with network reads/writes. - If the amount of data being transferred in several of the SMB - commands (currently SMBwrite, SMBwriteX and SMBreadbraw) is larger - than this value then the server begins writing the data before it - has received the whole packet from the network, or in the case of - SMBreadbraw, it begins writing to the network before all the data - has been read from disk.

      This overlapping works best when the speeds of disk and - network access are similar, having very little effect when the - speed of one is much greater than the other.

      The default value is 16384, but very little experimentation - has been done yet to determine the optimal value, and it is likely - that the best value will vary greatly between systems anyway. - A value over 65536 is pointless and will cause you to allocate - memory unnecessarily.

      Default: read size = 16384

      Example: read size = 8192

      realm (G)

      This option specifies the kerberos realm to use. The realm is - used as the ADS equivalent of the NT4domain. It - is usually set to the DNS name of the kerberos server. -

      Default: realm =

      Example: realm = mysambabox.mycompany.com

      remote announce (G)

      This option allows you to setup nmbd(8) to periodically announce itself - to arbitrary IP addresses with an arbitrary workgroup name.

      This is useful if you want your Samba server to appear - in a remote workgroup for which the normal browse propagation - rules don't work. The remote workgroup can be anywhere that you - can send IP packets to.

      For example:

      remote announce = 192.168.2.255/SERVERS - 192.168.4.255/STAFF

      the above line would cause nmbd to announce itself - to the two given IP addresses using the given workgroup names. - If you leave out the workgroup name then the one given in - the workgroup - parameter is used instead.

      The IP addresses you choose would normally be the broadcast - addresses of the remote networks, but can also be the IP addresses - of known browse masters if your network config is that stable.

      See the documentation file BROWSING.txt - in the docs/ directory.

      Default: remote announce = <empty string> -

      remote browse sync (G)

      This option allows you to setup nmbd(8) to periodically request - synchronization of browse lists with the master browser of a Samba - server that is on a remote segment. This option will allow you to - gain browse lists for multiple workgroups across routed networks. This - is done in a manner that does not work with any non-Samba servers.

      This is useful if you want your Samba server and all local - clients to appear in a remote workgroup for which the normal browse - propagation rules don't work. The remote workgroup can be anywhere - that you can send IP packets to.

      For example:

      remote browse sync = 192.168.2.255 192.168.4.255 -

      the above line would cause nmbd to request - the master browser on the specified subnets or addresses to - synchronize their browse lists with the local server.

      The IP addresses you choose would normally be the broadcast - addresses of the remote networks, but can also be the IP addresses - of known browse masters if your network config is that stable. If - a machine IP address is given Samba makes NO attempt to validate - that the remote machine is available, is listening, nor that it - is in fact the browse master on its segment.

      Default: remote browse sync = <empty string> -

      restrict anonymous (G)

      This is a integer parameter, and - mirrors as much as possible the functinality the - RestrictAnonymous - registry key does on NT/Win2k.

      Default: restrict anonymous = 0

      root (G)

      Synonym for root directory".

      root dir (G)

      Synonym for root directory".

      root directory (G)

      The server will chroot() (i.e. - Change its root directory) to this directory on startup. This is - not strictly necessary for secure operation. Even without it the - server will deny access to files not in one of the service entries. - It may also check for, and deny access to, soft links to other - parts of the filesystem, or attempts to use ".." in file names - to access other directories (depending on the setting of the wide links - parameter).

      Adding a root directory entry other - than "/" adds an extra level of security, but at a price. It - absolutely ensures that no access is given to files not in the - sub-tree specified in the root directory - option, including some files needed for - complete operation of the server. To maintain full operability - of the server you will need to mirror some system files - into the root directory tree. In particular - you will need to mirror /etc/passwd (or a - subset of it), and any binaries or configuration files needed for - printing (if required). The set of files that must be mirrored is - operating system dependent.

      Default: root directory = /

      Example: root directory = /homes/smb

      root postexec (S)

      This is the same as the postexec - parameter except that the command is run as root. This - is useful for unmounting filesystems - (such as CDROMs) after a connection is closed.

      See also postexec.

      Default: root postexec = <empty string> -

      root preexec (S)

      This is the same as the preexec - parameter except that the command is run as root. This - is useful for mounting filesystems (such as CDROMs) when a - connection is opened.

      See also preexec and preexec close.

      Default: root preexec = <empty string> -

      root preexec close (S)

      This is the same as the preexec close - parameter except that the command is run as root.

      See also preexec and preexec close.

      Default: root preexec close = no

      security (G)

      This option affects how clients respond to - Samba and is one of the most important settings in the smb.conf file.

      The option sets the "security mode bit" in replies to - protocol negotiations with smbd(8) - to turn share level security on or off. Clients decide - based on this bit whether (and how) to transfer user and password - information to the server.

      The default is security = user, as this is - the most common setting needed when talking to Windows 98 and - Windows NT.

      The alternatives are security = share, - security = server or security = domain - .

      In versions of Samba prior to 2.0.0, the default was - security = share mainly because that was - the only option at one stage.

      There is a bug in WfWg that has relevance to this - setting. When in user or server level security a WfWg client - will totally ignore the password you type in the "connect - drive" dialog box. This makes it very difficult (if not impossible) - to connect to a Samba service as anyone except the user that - you are logged into WfWg as.

      If your PCs use usernames that are the same as their - usernames on the UNIX machine then you will want to use - security = user. If you mostly use usernames - that don't exist on the UNIX box then use security = - share.

      You should also use security = share if you - want to mainly setup shares without a password (guest shares). This - is commonly used for a shared printer server. It is more difficult - to setup guest shares with security = user, see - the map to guest - parameter for details.

      It is possible to use smbd in a hybrid mode where it is offers both user and share - level security under different NetBIOS aliases.

      The different settings will now be explained.

      SECURITY = SHARE -

      When clients connect to a share level security server they - need not log onto the server with a valid username and password before - attempting to connect to a shared resource (although modern clients - such as Windows 95/98 and Windows NT will send a logon request with - a username but no password when talking to a security = share - server). Instead, the clients send authentication information - (passwords) on a per-share basis, at the time they attempt to connect - to that share.

      Note that smbd ALWAYS - uses a valid UNIX user to act on behalf of the client, even in - security = share level security.

      As clients are not required to send a username to the server - in share level security, smbd uses several - techniques to determine the correct UNIX user to use on behalf - of the client.

      A list of possible UNIX usernames to match with the given - client password is constructed using the following methods :

      • If the guest - only parameter is set, then all the other - stages are missed and only the guest account username is checked. -

      • Is a username is sent with the share connection - request, then this username (after mapping - see username map), - is added as a potential username.

      • If the client did a previous logon - request (the SessionSetup SMB call) then the - username sent in this SMB will be added as a potential username. -

      • The name of the service the client requested is - added as a potential username.

      • The NetBIOS name of the client is added to - the list as a potential username.

      • Any users on the user list are added as potential usernames. -

      If the guest only parameter is - not set, then this list is then tried with the supplied password. - The first user for whom the password matches will be used as the - UNIX user.

      If the guest only parameter is - set, or no username can be determined then if the share is marked - as available to the guest account, then this - guest user will be used, otherwise access is denied.

      Note that it can be very confusing - in share-level security as to which UNIX username will eventually - be used in granting access.

      See also the section NOTE ABOUT USERNAME/PASSWORD VALIDATION.

      SECURITY = USER -

      This is the default security setting in Samba 2.2. - With user-level security a client must first "log-on" with a - valid username and password (which can be mapped using the username map - parameter). Encrypted passwords (see the encrypted passwords parameter) can also - be used in this security mode. Parameters such as user and guest only if set are then applied and - may change the UNIX user to use on this connection, but only after - the user has been successfully authenticated.

      Note that the name of the resource being - requested is not sent to the server until after - the server has successfully authenticated the client. This is why - guest shares don't work in user level security without allowing - the server to automatically map unknown users into the guest account. - See the map to guest - parameter for details on doing this.

      See also the section NOTE ABOUT USERNAME/PASSWORD VALIDATION.

      SECURITY = SERVER -

      In this mode Samba will try to validate the username/password - by passing it to another SMB server, such as an NT box. If this - fails it will revert to security = user, but note - that if encrypted passwords have been negotiated then Samba cannot - revert back to checking the UNIX password file, it must have a valid - smbpasswd file to check users against. See the - documentation file in the docs/ directory - ENCRYPTION.txt for details on how to set this - up.

      Note that from the client's point of - view security = server is the same as security = user. It only affects how the server deals - with the authentication, it does not in any way affect what the - client sees.

      Note that the name of the resource being - requested is not sent to the server until after - the server has successfully authenticated the client. This is why - guest shares don't work in user level security without allowing - the server to automatically map unknown users into the guest account. - See the map to guest - parameter for details on doing this.

      See also the section NOTE ABOUT USERNAME/PASSWORD VALIDATION.

      See also the password - server parameter and the encrypted passwords - parameter.

      SECURITY = DOMAIN -

      This mode will only work correctly if smbpasswd(8) has been used to add this - machine into a Windows NT Domain. It expects the encrypted passwords - parameter to be set to yes. In this - mode Samba will try to validate the username/password by passing - it to a Windows NT Primary or Backup Domain Controller, in exactly - the same way that a Windows NT Server would do.

      Note that a valid UNIX user must still - exist as well as the account on the Domain Controller to allow - Samba to have a valid UNIX account to map file access to.

      Note that from the client's point - of view security = domain is the same as security = user - . It only affects how the server deals with the authentication, - it does not in any way affect what the client sees.

      Note that the name of the resource being - requested is not sent to the server until after - the server has successfully authenticated the client. This is why - guest shares don't work in user level security without allowing - the server to automatically map unknown users into the guest account. - See the map to guest - parameter for details on doing this.

      BUG: There is currently a bug in the - implementation of security = domain with respect - to multi-byte character set usernames. The communication with a - Domain Controller must be done in UNICODE and Samba currently - does not widen multi-byte user names to UNICODE correctly, thus - a multi-byte username will not be recognized correctly at the - Domain Controller. This issue will be addressed in a future release.

      See also the section NOTE ABOUT USERNAME/PASSWORD VALIDATION.

      See also the password - server parameter and the encrypted passwords - parameter.

      Default: security = USER

      Example: security = DOMAIN

      security mask (S)

      This parameter controls what UNIX permission - bits can be modified when a Windows NT client is manipulating - the UNIX permission on a file using the native NT security - dialog box.

      This parameter is applied as a mask (AND'ed with) to - the changed permission bits, thus preventing any bits not in - this mask from being modified. Essentially, zero bits in this - mask may be treated as a set of bits the user is not allowed - to change.

      If not set explicitly this parameter is 0777, allowing - a user to modify all the user/group/world permissions on a file. -

      Note that users who can access the - Samba server through other means can easily bypass this - restriction, so it is primarily useful for standalone - "appliance" systems. Administrators of most normal systems will - probably want to leave it set to 0777.

      See also the force directory security mode, - directory - security mask, force security mode parameters.

      Default: security mask = 0777

      Example: security mask = 0770

      server string (G)

      This controls what string will show up in the - printer comment box in print manager and next to the IPC connection - in net view. It can be any string that you wish - to show to your users.

      It also sets what will appear in browse lists next - to the machine name.

      A %v will be replaced with the Samba - version number.

      A %h will be replaced with the - hostname.

      Default: server string = Samba %v

      Example: server string = University of GNUs Samba - Server

      set directory (S)

      If set directory = no, then - users of the service may not use the setdir command to change - directory.

      The setdir command is only implemented - in the Digital Pathworks client. See the Pathworks documentation - for details.

      Default: set directory = no

      share modes (S)

      This enables or disables the honoring of - the share modes during a file open. These - modes are used by clients to gain exclusive read or write access - to a file.

      These open modes are not directly supported by UNIX, so - they are simulated using shared memory, or lock files if your - UNIX doesn't support shared memory (almost all do).

      The share modes that are enabled by this option are - DENY_DOS, DENY_ALL, - DENY_READ, DENY_WRITE, - DENY_NONE and DENY_FCB. -

      This option gives full share compatibility and enabled - by default.

      You should NEVER turn this parameter - off as many Windows applications will break if you do so.

      Default: share modes = yes

      short preserve case (S)

      This boolean parameter controls if new files - which conform to 8.3 syntax, that is all in upper case and of - suitable length, are created upper case, or if they are forced - to be the default case - . This option can be use with preserve case = yes - to permit long filenames to retain their case, while short - names are lowered.

      See the section on NAME MANGLING.

      Default: short preserve case = yes

      show add printer wizard (G)

      With the introduction of MS-RPC based printing support - for Windows NT/2000 client in Samba 2.2, a "Printers..." folder will - appear on Samba hosts in the share listing. Normally this folder will - contain an icon for the MS Add Printer Wizard (APW). However, it is - possible to disable this feature regardless of the level of privilege - of the connected user.

      Under normal circumstances, the Windows NT/2000 client will - open a handle on the printer server with OpenPrinterEx() asking for - Administrator privileges. If the user does not have administrative - access on the print server (i.e is not root or a member of the - printer admin group), the OpenPrinterEx() - call fails and the client makes another open call with a request for - a lower privilege level. This should succeed, however the APW - icon will not be displayed.

      Disabling the show add printer wizard - parameter will always cause the OpenPrinterEx() on the server - to fail. Thus the APW icon will never be displayed. Note :This does not prevent the same user from having - administrative privilege on an individual printer.

      See also addprinter - command, deleteprinter command, printer admin

      Default :show add printer wizard = yes

      shutdown script (G)

      This parameter only exists in the HEAD cvs branch - This a full path name to a script called by - smbd(8) that - should start a shutdown procedure.

      This command will be run as the user connected to the - server.

      %m %t %r %f parameters are expanded

      %m will be substituted with the - shutdown message sent to the server.

      %t will be substituted with the - number of seconds to wait before effectively starting the - shutdown procedure.

      %r will be substituted with the - switch -r. It means reboot after shutdown - for NT. -

      %f will be substituted with the - switch -f. It means force the shutdown - even if applications do not respond for NT.

      Default: None.

      Example: abort shutdown script = /usr/local/samba/sbin/shutdown %m %t %r %f

      Shutdown script example: - 
      		#!/bin/bash
-		
-		$time=0
-		let "time/60"
-		let "time++"
-
-		/sbin/shutdown $3 $4 +$time $1 &
-
      - Shutdown does not return so we need to launch it in background. -

      See also abort shutdown script.

      smb passwd file (G)

      This option sets the path to the encrypted - smbpasswd file. By default the path to the smbpasswd file - is compiled into Samba.

      Default: smb passwd file = ${prefix}/private/smbpasswd -

      Example: smb passwd file = /etc/samba/smbpasswd -

      smb ports (G)

      Specifies which ports the server should listen on - for SMB traffic. -

      Default: smb ports = 445 139

      socket address (G)

      This option allows you to control what - address Samba will listen for connections on. This is used to - support multiple virtual interfaces on the one server, each - with a different configuration.

      By default Samba will accept connections on any - address.

      Example: socket address = 192.168.2.20 -

      socket options (G)

      This option allows you to set socket options - to be used when talking with the client.

      Socket options are controls on the networking layer - of the operating systems which allow the connection to be - tuned.

      This option will typically be used to tune your Samba - server for optimal performance for your local network. There is - no way that Samba can know what the optimal parameters are for - your net, so you must experiment and choose them yourself. We - strongly suggest you read the appropriate documentation for your - operating system first (perhaps man setsockopt - will help).

      You may find that on some systems Samba will say - "Unknown socket option" when you supply an option. This means you - either incorrectly typed it or you need to add an include file - to includes.h for your OS. If the latter is the case please - send the patch to samba@samba.org.

      Any of the supported socket options may be combined - in any way you like, as long as your OS allows it.

      This is the list of socket options currently settable - using this option:

      • SO_KEEPALIVE

      • SO_REUSEADDR

      • SO_BROADCAST

      • TCP_NODELAY

      • IPTOS_LOWDELAY

      • IPTOS_THROUGHPUT

      • SO_SNDBUF *

      • SO_RCVBUF *

      • SO_SNDLOWAT *

      • SO_RCVLOWAT *

      Those marked with a '*' take an integer - argument. The others can optionally take a 1 or 0 argument to enable - or disable the option, by default they will be enabled if you - don't specify 1 or 0.

      To specify an argument use the syntax SOME_OPTION = VALUE - for example SO_SNDBUF = 8192. Note that you must - not have any spaces before or after the = sign.

      If you are on a local network then a sensible option - might be

      socket options = IPTOS_LOWDELAY

      If you have a local network then you could try:

      socket options = IPTOS_LOWDELAY TCP_NODELAY

      If you are on a wide area network then perhaps try - setting IPTOS_THROUGHPUT.

      Note that several of the options may cause your Samba - server to fail completely. Use these options with caution!

      Default: socket options = TCP_NODELAY

      Example: socket options = IPTOS_LOWDELAY

      source environment (G)

      This parameter causes Samba to set environment - variables as per the content of the file named.

      If the value of this parameter starts with a "|" character - then Samba will treat that value as a pipe command to open and - will set the environment variables from the output of the pipe.

      The contents of the file or the output of the pipe should - be formatted as the output of the standard Unix env(1) - command. This is of the form :

      Example environment entry:

      SAMBA_NETBIOS_NAME = myhostname

      Default: No default value

      Examples: source environment = |/etc/smb.conf.sh -

      Example: source environment = - /usr/local/smb_env_vars

      use spnego (G)

      This variable controls controls whether samba will try to use Simple and Protected NEGOciation (as specified by rfc2478) with WindowsXP and Windows2000sp2 clients to agree upon an authentication mechanism. As of samba 3.0alpha it must be set to "no" for these clients to join a samba domain controller. It can be set to "yes" to allow samba to participate in an AD domain controlled by a Windows2000 domain controller.

      Default: use spnego = yes

      stat cache (G)

      This parameter determines if smbd(8) will use a cache in order to - speed up case insensitive name mappings. You should never need - to change this parameter.

      Default: stat cache = yes

      stat cache size (G)

      This parameter determines the number of - entries in the stat cache. You should - never need to change this parameter.

      Default: stat cache size = 50

      strict allocate (S)

      This is a boolean that controls the handling of - disk space allocation in the server. When this is set to yes - the server will change from UNIX behaviour of not committing real - disk storage blocks when a file is extended to the Windows behaviour - of actually forcing the disk system to allocate real storage blocks - when a file is created or extended to be a given size. In UNIX - terminology this means that Samba will stop creating sparse files. - This can be slow on some systems.

      When strict allocate is no the server does sparse - disk block allocation when a file is extended.

      Setting this to yes can help Samba return - out of quota messages on systems that are restricting the disk quota - of users.

      Default: strict allocate = no

      strict locking (S)

      This is a boolean that controls the handling of - file locking in the server. When this is set to yes - the server will check every read and write access for file locks, and - deny access if locks exist. This can be slow on some systems.

      When strict locking is no the server does file - lock checks only when the client explicitly asks for them.

      Well-behaved clients always ask for lock checks when it - is important, so in the vast majority of cases strict - locking = no is preferable.

      Default: strict locking = no

      strict sync (S)

      Many Windows applications (including the Windows - 98 explorer shell) seem to confuse flushing buffer contents to - disk with doing a sync to disk. Under UNIX, a sync call forces - the process to be suspended until the kernel has ensured that - all outstanding data in kernel disk buffers has been safely stored - onto stable storage. This is very slow and should only be done - rarely. Setting this parameter to no (the - default) means that smbd ignores the Windows applications requests for - a sync call. There is only a possibility of losing data if the - operating system itself that Samba is running on crashes, so there is - little danger in this default setting. In addition, this fixes many - performance problems that people have reported with the new Windows98 - explorer shell file copies.

      See also the sync - always> parameter.

      Default: strict sync = no

      strip dot (G)

      This is a boolean that controls whether to - strip trailing dots off UNIX filenames. This helps with some - CDROMs that have filenames ending in a single dot.

      Default: strip dot = no

      sync always (S)

      This is a boolean parameter that controls - whether writes will always be written to stable storage before - the write call returns. If this is no then the server will be - guided by the client's request in each write call (clients can - set a bit indicating that a particular write should be synchronous). - If this is yes then every write will be followed by a fsync() - call to ensure the data is written to disk. Note that - the strict sync parameter must be set to - yes in order for this parameter to have - any affect.

      See also the strict - sync parameter.

      Default: sync always = no

      syslog (G)

      This parameter maps how Samba debug messages - are logged onto the system syslog logging levels. Samba debug - level zero maps onto syslog LOG_ERR, debug - level one maps onto LOG_WARNING, debug level - two maps onto LOG_NOTICE, debug level three - maps onto LOG_INFO. All higher levels are mapped to LOG_DEBUG.

      This parameter sets the threshold for sending messages - to syslog. Only messages with debug level less than this value - will be sent to syslog.

      Default: syslog = 1

      syslog only (G)

      If this parameter is set then Samba debug - messages are logged into the system syslog only, and not to - the debug log files.

      Default: syslog only = no

      template homedir (G)

      When filling out the user information for a Windows NT - user, the winbindd(8) daemon - uses this parameter to fill in the home directory for that user. - If the string %D is present it is substituted - with the user's Windows NT domain name. If the string %U - is present it is substituted with the user's Windows - NT user name.

      Default: template homedir = /home/%D/%U

      template shell (G)

      When filling out the user information for a Windows NT - user, the winbindd(8) daemon - uses this parameter to fill in the login shell for that user.

      Default: template shell = /bin/false

      time offset (G)

      This parameter is a setting in minutes to add - to the normal GMT to local time conversion. This is useful if - you are serving a lot of PCs that have incorrect daylight - saving time handling.

      Default: time offset = 0

      Example: time offset = 60

      time server (G)

      This parameter determines if - nmbd(8) advertises itself as a time server to Windows - clients.

      Default: time server = no

      timestamp logs (G)

      Synonym for debug timestamp.

      total print jobs (G)

      This parameter accepts an integer value which defines - a limit on the maximum number of print jobs that will be accepted - system wide at any given time. If a print job is submitted - by a client which will exceed this number, then smbd will return an - error indicating that no space is available on the server. The - default value of 0 means that no such limit exists. This parameter - can be used to prevent a server from exceeding its capacity and is - designed as a printing throttle. See also - max print jobs. -

      Default: total print jobs = 0

      Example: total print jobs = 5000

      unicode (G)

      Specifies whether Samba should try - to use unicode on the wire by default. Note: This does NOT - mean that samba will assume that the unix machine uses unicode! -

      Default: unicode = yes

      unix charset (G)

      Specifies the charset the unix machine - Samba runs on uses. Samba needs to know this in order to be able to - convert text to the charsets other SMB clients use. -

      Default: unix charset = ASCII

      Example: unix charset = UTF8

      unix extensions(G)

      This boolean parameter controls whether Samba - implments the CIFS UNIX extensions, as defined by HP. - These extensions enable Samba to better serve UNIX CIFS clients - by supporting features such as symbolic links, hard links, etc... - These extensions require a similarly enabled client, and are of - no current use to Windows clients.

      Default: unix extensions = no

      unix password sync (G)

      This boolean parameter controls whether Samba - attempts to synchronize the UNIX password with the SMB password - when the encrypted SMB password in the smbpasswd file is changed. - If this is set to yes the program specified in the passwd - programparameter is called AS ROOT - - to allow the new UNIX password to be set without access to the - old UNIX password (as the SMB password change code has no - access to the old password cleartext, only the new).

      See also passwd - program, passwd chat.

      Default: unix password sync = no

      update encrypted (G)

      This boolean parameter allows a user logging - on with a plaintext password to have their encrypted (hashed) - password in the smbpasswd file to be updated automatically as - they log on. This option allows a site to migrate from plaintext - password authentication (users authenticate with plaintext - password over the wire, and are checked against a UNIX account - database) to encrypted password authentication (the SMB - challenge/response authentication mechanism) without forcing - all users to re-enter their passwords via smbpasswd at the time the - change is made. This is a convenience option to allow the change over - to encrypted passwords to be made over a longer period. Once all users - have encrypted representations of their passwords in the smbpasswd - file this parameter should be set to no.

      In order for this parameter to work correctly the encrypt passwords - parameter must be set to no when - this parameter is set to yes.

      Note that even when this parameter is set a user - authenticating to smbd must still enter a valid - password in order to connect correctly, and to update their hashed - (smbpasswd) passwords.

      Default: update encrypted = no

      use client driver (S)

      This parameter applies only to Windows NT/2000 - clients. It has no affect on Windows 95/98/ME clients. When - serving a printer to Windows NT/2000 clients without first installing - a valid printer driver on the Samba host, the client will be required - to install a local printer driver. From this point on, the client - will treat the print as a local printer and not a network printer - connection. This is much the same behavior that will occur - when disable spoolss = yes.

      The differentiating - factor is that under normal circumstances, the NT/2000 client will - attempt to open the network printer using MS-RPC. The problem is that - because the client considers the printer to be local, it will attempt - to issue the OpenPrinterEx() call requesting access rights associated - with the logged on user. If the user possesses local administator rights - but not root privilegde on the Samba host (often the case), the OpenPrinterEx() - call will fail. The result is that the client will now display an "Access - Denied; Unable to connect" message in the printer queue window (even though - jobs may successfully be printed).

      If this parameter is enabled for a printer, then any attempt - to open the printer with the PRINTER_ACCESS_ADMINISTER right is mapped - to PRINTER_ACCESS_USE instead. Thus allowing the OpenPrinterEx() - call to succeed. This parameter MUST not be able enabled - on a print share which has valid print driver installed on the Samba - server.

      See also disable spoolss -

      Default: use client driver = no

      use mmap (G)

      This global parameter determines if the tdb internals of Samba can - depend on mmap working correctly on the running system. Samba requires a coherent - mmap/read-write system memory cache. Currently only HPUX does not have such a - coherent cache, and so this parameter is set to no by - default on HPUX. On all other systems this parameter should be left alone. This - parameter is provided to help the Samba developers track down problems with - the tdb internal code. -

      Default: use mmap = yes

      use rhosts (G)

      If this global parameter is yes, it specifies - that the UNIX user's .rhosts file in their home directory - will be read to find the names of hosts and users who will be allowed - access without specifying a password.

      NOTE: The use of use rhosts - can be a major security hole. This is because you are - trusting the PC to supply the correct username. It is very easy to - get a PC to supply a false username. I recommend that the use rhosts option be only used if you really know what - you are doing.

      Default: use rhosts = no

      user (S)

      Synonym for username.

      users (S)

      Synonym for username.

      username (S)

      Multiple users may be specified in a comma-delimited - list, in which case the supplied password will be tested against - each username in turn (left to right).

      The username line is needed only when - the PC is unable to supply its own username. This is the case - for the COREPLUS protocol or where your users have different WfWg - usernames to UNIX usernames. In both these cases you may also be - better using the \\server\share%user syntax instead.

      The username line is not a great - solution in many cases as it means Samba will try to validate - the supplied password against each of the usernames in the - username line in turn. This is slow and - a bad idea for lots of users in case of duplicate passwords. - You may get timeouts or security breaches using this parameter - unwisely.

      Samba relies on the underlying UNIX security. This - parameter does not restrict who can login, it just offers hints - to the Samba server as to what usernames might correspond to the - supplied password. Users can login as whoever they please and - they will be able to do no more damage than if they started a - telnet session. The daemon runs as the user that they log in as, - so they cannot do anything that user cannot do.

      To restrict a service to a particular set of users you - can use the valid users - parameter.

      If any of the usernames begin with a '@' then the name - will be looked up first in the NIS netgroups list (if Samba - is compiled with netgroup support), followed by a lookup in - the UNIX groups database and will expand to a list of all users - in the group of that name.

      If any of the usernames begin with a '+' then the name - will be looked up only in the UNIX groups database and will - expand to a list of all users in the group of that name.

      If any of the usernames begin with a '&'then the name - will be looked up only in the NIS netgroups database (if Samba - is compiled with netgroup support) and will expand to a list - of all users in the netgroup group of that name.

      Note that searching though a groups database can take - quite some time, and some clients may time out during the - search.

      See the section NOTE ABOUT - USERNAME/PASSWORD VALIDATION for more information on how - this parameter determines access to the services.

      Default: The guest account if a guest service, - else <empty string>.

      Examples:username = fred, mary, jack, jane, - @users, @pcgroup

      username level (G)

      This option helps Samba to try and 'guess' at - the real UNIX username, as many DOS clients send an all-uppercase - username. By default Samba tries all lowercase, followed by the - username with the first letter capitalized, and fails if the - username is not found on the UNIX machine.

      If this parameter is set to non-zero the behavior changes. - This parameter is a number that specifies the number of uppercase - combinations to try while trying to determine the UNIX user name. The - higher the number the more combinations will be tried, but the slower - the discovery of usernames will be. Use this parameter when you have - strange usernames on your UNIX machine, such as AstrangeUser - .

      Default: username level = 0

      Example: username level = 5

      username map (G)

      This option allows you to specify a file containing - a mapping of usernames from the clients to the server. This can be - used for several purposes. The most common is to map usernames - that users use on DOS or Windows machines to those that the UNIX - box uses. The other is to map multiple users to a single username - so that they can more easily share files.

      The map file is parsed line by line. Each line should - contain a single UNIX username on the left then a '=' followed - by a list of usernames on the right. The list of usernames on the - right may contain names of the form @group in which case they - will match any UNIX username in that group. The special client - name '*' is a wildcard and matches any name. Each line of the - map file may be up to 1023 characters long.

      The file is processed on each line by taking the - supplied username and comparing it with each username on the right - hand side of the '=' signs. If the supplied name matches any of - the names on the right hand side then it is replaced with the name - on the left. Processing then continues with the next line.

      If any line begins with a '#' or a ';' then it is - ignored

      If any line begins with an '!' then the processing - will stop after that line if a mapping was done by the line. - Otherwise mapping continues with every line being processed. - Using '!' is most useful when you have a wildcard mapping line - later in the file.

      For example to map from the name admin - or administrator to the UNIX name root you would use:

      root = admin administrator

      Or to map anyone in the UNIX group system - to the UNIX name sys you would use:

      sys = @system

      You can have as many mappings as you like in a username - map file.

      If your system supports the NIS NETGROUP option then - the netgroup database is checked before the /etc/group - database for matching groups.

      You can map Windows usernames that have spaces in them - by using double quotes around the name. For example:

      tridge = "Andrew Tridgell"

      would map the windows username "Andrew Tridgell" to the - unix username "tridge".

      The following example would map mary and fred to the - unix user sys, and map the rest to guest. Note the use of the - '!' to tell Samba to stop processing if it gets a match on - that line.

      		!sys = mary fred
-		guest = *
-

      Note that the remapping is applied to all occurrences - of usernames. Thus if you connect to \\server\fred and fred is remapped to mary then you - will actually be connecting to \\server\mary and will need to - supply a password suitable for mary not - fred. The only exception to this is the - username passed to the password server (if you have one). The password - server will receive whatever username the client supplies without - modification.

      Also note that no reverse mapping is done. The main effect - this has is with printing. Users who have been mapped may have - trouble deleting print jobs as PrintManager under WfWg will think - they don't own the print job.

      Default: no username map

      Example: username map = /usr/local/samba/lib/users.map -

      use sendfile (S)

      If this parameter is yes, and Samba - was built with the --with-sendfile-support option, and the underlying operating - system supports sendfile system call, then some SMB read calls (mainly ReadAndX - and ReadRaw) will use the more efficient sendfile system call for files that - are exclusively oplocked. This may make more efficient use of the system CPU's - and cause Samba to be faster. This is off by default as it's effects are unknown - as yet. -

      Default: use sendfile = no

      utmp (G)

      This boolean parameter is only available if - Samba has been configured and compiled with the option --with-utmp. If set to yes then Samba will attempt - to add utmp or utmpx records (depending on the UNIX system) whenever a - connection is made to a Samba server. Sites may use this to record the - user connecting to a Samba share.

      Due to the requirements of the utmp record, we - are required to create a unique identifier for the - incoming user. Enabling this option creates an n^2 - algorithm to find this number. This may impede - performance on large installations.

      See also the utmp directory parameter.

      Default: utmp = no

      utmp directory(G)

      This parameter is only available if Samba has - been configured and compiled with the option --with-utmp. It specifies a directory pathname that is - used to store the utmp or utmpx files (depending on the UNIX system) that - record user connections to a Samba server. See also the utmp parameter. By default this is - not set, meaning the system will use whatever utmp file the - native system is set to use (usually - /var/run/utmp on Linux).

      Default: no utmp directory

      Example: utmp directory = /var/run/utmp

      wtmp directory(G)

      This parameter is only available if Samba has - been configured and compiled with the option --with-utmp. It specifies a directory pathname that is - used to store the wtmp or wtmpx files (depending on the UNIX system) that - record user connections to a Samba server. The difference with - the utmp directory is the fact that user info is kept after a user - has logged out. - - See also the utmp parameter. By default this is - not set, meaning the system will use whatever utmp file the - native system is set to use (usually - /var/run/wtmp on Linux).

      Default: no wtmp directory

      Example: wtmp directory = /var/log/wtmp

      valid users (S)

      This is a list of users that should be allowed - to login to this service. Names starting with '@', '+' and '&' - are interpreted using the same rules as described in the - invalid users parameter.

      If this is empty (the default) then any user can login. - If a username is in both this list and the invalid - users list then access is denied for that user.

      The current servicename is substituted for %S - . This is useful in the [homes] section.

      See also invalid users -

      Default: No valid users list (anyone can login) -

      Example: valid users = greg, @pcusers

      veto files(S)

      This is a list of files and directories that - are neither visible nor accessible. Each entry in the list must - be separated by a '/', which allows spaces to be included - in the entry. '*' and '?' can be used to specify multiple files - or directories as in DOS wildcards.

      Each entry must be a unix path, not a DOS path and - must not include the unix directory - separator '/'.

      Note that the case sensitive option - is applicable in vetoing files.

      One feature of the veto files parameter that it - is important to be aware of is Samba's behaviour when - trying to delete a directory. If a directory that is - to be deleted contains nothing but veto files this - deletion will fail unless you also set - the delete veto files parameter to - yes.

      Setting this parameter will affect the performance - of Samba, as it will be forced to check all files and directories - for a match as they are scanned.

      See also hide files - and case sensitive.

      Default: No files or directories are vetoed. -

      Examples:
      ; Veto any files containing the word Security, 
-; any ending in .tmp, and any directory containing the
-; word root.
-veto files = /*Security*/*.tmp/*root*/
-
-; Veto the Apple specific files that a NetAtalk server
-; creates.
-veto files = /.AppleDouble/.bin/.AppleDesktop/Network Trash Folder/

      veto oplock files (S)

      This parameter is only valid when the oplocks - parameter is turned on for a share. It allows the Samba administrator - to selectively turn off the granting of oplocks on selected files that - match a wildcarded list, similar to the wildcarded list used in the - veto files - parameter.

      Default: No files are vetoed for oplock - grants

      You might want to do this on files that you know will - be heavily contended for by clients. A good example of this - is in the NetBench SMB benchmark program, which causes heavy - client contention for files ending in .SEM. - To cause Samba not to grant oplocks on these files you would use - the line (either in the [global] section or in the section for - the particular NetBench share :

      Example: veto oplock files = /*.SEM/ -

      vfs path (S)

      This parameter specifies the directory - to look in for vfs modules. The name of every vfs object - will be prepended by this directory -

      Default: vfs path =

      Example: vfs path = /usr/lib/samba/vfs

      vfs object (S)

      This parameter specifies a shared object files that - are used for Samba VFS I/O operations. By default, normal - disk I/O operations are used but these can be overloaded - with one or more VFS objects.

      Default : no value

      vfs options (S)

      This parameter allows parameters to be passed - to the vfs layer at initialization time. - See also vfs object.

      Default : no value

      volume (S)

      This allows you to override the volume label - returned for a share. Useful for CDROMs with installation programs - that insist on a particular volume label.

      Default: the name of the share

      wide links (S)

      This parameter controls whether or not links - in the UNIX file system may be followed by the server. Links - that point to areas within the directory tree exported by the - server are always allowed; this parameter controls access only - to areas that are outside the directory tree being exported.

      Note that setting this parameter can have a negative - effect on your server performance due to the extra system calls - that Samba has to do in order to perform the link checks.

      Default: wide links = yes

      winbind cache time (G)

      This parameter specifies the number of seconds the - winbindd(8) daemon will cache - user and group information before querying a Windows NT server - again.

      Default: winbind cache type = 15

      winbind enum users (G)

      On large installations using - winbindd(8) it may be - necessary to suppress the enumeration of users through the - setpwent(), - getpwent() and - endpwent() group of system calls. If - the winbind enum users parameter is - no, calls to the getpwent system call - will not return any data.

      Warning: Turning off user - enumeration may cause some programs to behave oddly. For - example, the finger program relies on having access to the - full user list when searching for matching - usernames.

      Default: winbind enum users = yes

      winbind enum groups (G)

      On large installations using - winbindd(8) it may be - necessary to suppress the enumeration of groups through the - setgrent(), - getgrent() and - endgrent() group of system calls. If - the winbind enum groups parameter is - no, calls to the getgrent() system - call will not return any data.

      Warning: Turning off group - enumeration may cause some programs to behave oddly. -

      Default: winbind enum groups = yes -

      winbind gid (G)

      The winbind gid parameter specifies the range of group - ids that are allocated by the winbindd(8) daemon. This range of group ids should have no - existing local or NIS groups within it as strange conflicts can - occur otherwise.

      Default: winbind gid = <empty string> -

      Example: winbind gid = 10000-20000

      winbind separator (G)

      This parameter allows an admin to define the character - used when listing a username of the form of DOMAIN - \user. This parameter - is only applicable when using the pam_winbind.so - and nss_winbind.so modules for UNIX services. -

      Please note that setting this parameter to + causes problems - with group membership at least on glibc systems, as the character + - is used as a special character for NIS in /etc/group.

      Default: winbind separator = '\'

      Example: winbind separator = +

      winbind uid (G)

      The winbind gid parameter specifies the range of group - ids that are allocated by the winbindd(8) daemon. This range of ids should have no - existing local or NIS users within it as strange conflicts can - occur otherwise.

      Default: winbind uid = <empty string> -

      Example: winbind uid = 10000-20000

      winbind use default domain, winbind use default domain (G)

      This parameter specifies whether the winbindd(8) - daemon should operate on users without domain component in their username. - Users without a domain component are treated as is part of the winbindd server's - own domain. While this does not benifit Windows users, it makes SSH, FTP and e-mail - function in a way much closer to the way they would in a native unix system.

      Default: winbind use default domain = <no> -

      Example: winbind use default domain = yes

      wins hook (G)

      When Samba is running as a WINS server this - allows you to call an external program for all changes to the - WINS database. The primary use for this option is to allow the - dynamic update of external name resolution databases such as - dynamic DNS.

      The wins hook parameter specifies the name of a script - or executable that will be called as follows:

      wins_hook operation name nametype ttl IP_list -

      • The first argument is the operation and is one - of "add", "delete", or "refresh". In most cases the operation can - be ignored as the rest of the parameters provide sufficient - information. Note that "refresh" may sometimes be called when the - name has not previously been added, in that case it should be treated - as an add.

      • The second argument is the NetBIOS name. If the - name is not a legal name then the wins hook is not called. - Legal names contain only letters, digits, hyphens, underscores - and periods.

      • The third argument is the NetBIOS name - type as a 2 digit hexadecimal number.

      • The fourth argument is the TTL (time to live) - for the name in seconds.

      • The fifth and subsequent arguments are the IP - addresses currently registered for that name. If this list is - empty then the name should be deleted.

      An example script that calls the BIND dynamic DNS update - program nsupdate is provided in the examples - directory of the Samba source code.

      wins proxy (G)

      This is a boolean that controls if nmbd(8) will respond to broadcast name - queries on behalf of other hosts. You may need to set this - to yes for some older clients.

      Default: wins proxy = no

      wins server (G)

      This specifies the IP address (or DNS name: IP - address for preference) of the WINS server that nmbd(8) should register with. If you have a WINS server on - your network then you should set this to the WINS server's IP.

      You should point this at your WINS server if you have a - multi-subnetted network.

      NOTE. You need to set up Samba to point - to a WINS server if you have multiple subnets and wish cross-subnet - browsing to work correctly.

      See the documentation file BROWSING.txt - in the docs/ directory of your Samba source distribution.

      Default: not enabled

      Example: wins server = 192.9.200.1

      wins support (G)

      This boolean controls if the - nmbd(8) process in Samba will act as a WINS server. You should - not set this to yes unless you have a multi-subnetted network and - you wish a particular nmbd to be your WINS server. - Note that you should NEVER set this to yes - on more than one machine in your network.

      Default: wins support = no

      workgroup (G)

      This controls what workgroup your server will - appear to be in when queried by clients. Note that this parameter - also controls the Domain name used with the security = domain - setting.

      Default: set at compile time to WORKGROUP

      Example: workgroup = MYGROUP

      writable (S)

      Synonym for writeable for people who can't spell :-).

      write cache size (S)

      If this integer parameter is set to non-zero value, - Samba will create an in-memory cache for each oplocked file - (it does not do this for - non-oplocked files). All writes that the client does not request - to be flushed directly to disk will be stored in this cache if possible. - The cache is flushed onto disk when a write comes in whose offset - would not fit into the cache or when the file is closed by the client. - Reads for the file are also served from this cache if the data is stored - within it.

      This cache allows Samba to batch client writes into a more - efficient write size for RAID disks (i.e. writes may be tuned to - be the RAID stripe size) and can improve performance on systems - where the disk subsystem is a bottleneck but there is free - memory for userspace programs.

      The integer parameter specifies the size of this cache - (per oplocked file) in bytes.

      Default: write cache size = 0

      Example: write cache size = 262144

      for a 256k cache size per file.

      write list (S)

      This is a list of users that are given read-write - access to a service. If the connecting user is in this list then - they will be given write access, no matter what the read only - option is set to. The list can include group names using the - @group syntax.

      Note that if a user is in both the read list and the - write list then they will be given write access.

      See also the read list - option.

      Default: write list = <empty string> -

      Example: write list = admin, root, @staff -

      wins partners (G)

      A space separated list of partners' IP addresses for - WINS replication. WINS partners are always defined as push/pull - partners as defining only one way WINS replication is unreliable. - WINS replication is currently experimental and unreliable between - samba servers. -

      Default: wins partners =

      Example: wins partners = 192.168.0.1 172.16.1.2

      write ok (S)

      Inverted synonym for read only.

      write raw (G)

      This parameter controls whether or not the server - will support raw write SMB's when transferring data from clients. - You should never need to change this parameter.

      Default: write raw = yes

      writeable (S)

      Inverted synonym for read only.

      WARNINGS

      Although the configuration file permits service names + the group of the same name.

    2. If the service is a guest service then a + connection is made as the username given in the "guest + account =" for the service, irrespective of the + supplied password.

    COMPLETE LIST OF GLOBAL PARAMETERS

    Here is a list of all global parameters. See the section of + each parameter for details. Note that some are synonyms.

      COMPLETE LIST OF SERVICE PARAMETERS

      Here is a list of all service parameters. See the section on + each parameter for details. Note that some are synonyms.

        EXPLANATION OF EACH PARAMETER

        WARNINGS

        Although the configuration file permits service names to contain spaces, your client software may not. Spaces will be ignored in comparisons anyway, so it shouldn't be a - problem - but be aware of the possibility.

        On a similar note, many clients - especially DOS clients - - limit service names to eight characters. smbd(8) - has no such limitation, but attempts to connect from such + problem - but be aware of the possibility.

        On a similar note, many clients - especially DOS clients - + limit service names to eight characters. smbd(8) has no such limitation, but attempts to connect from such clients will fail if they truncate the service names. For this reason you should probably keep your service names down to eight characters - in length.

        Use of the [homes] and [printers] special sections make life + in length.

        Use of the [homes] and [printers] special sections make life for an administrator easy, but the various combinations of default attributes can be tricky. Take extreme care when designing these sections. In particular, ensure that the permissions on spool - directories are correct.

        VERSION

        This man page is correct for version 3.0 of - the Samba suite.

        AUTHOR

        The original Samba software and related utilities + directories are correct.

        VERSION

        This man page is correct for version 3.0 of the Samba suite.

        SEE ALSO

        + samba(7), smbpasswd(8), swat(8), smbd(8), nmbd(8), smbclient(1), nmblookup(1), testparm(1), testprns(1).

        AUTHOR

        The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar - to the way the Linux kernel is developed.

        The original Samba man pages were written by Karl Auer. + to the way the Linux kernel is developed.

        The original Samba man pages were written by Karl Auer. The man page sources were converted to YODL format (another - excellent piece of Open Source software, available at - ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 + excellent piece of Open Source software, available at + ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 release by Jeremy Allison. The conversion to DocBook for - Samba 2.2 was done by Gerald Carter

        \ No newline at end of file + Samba 2.2 was done by Gerald Carter. The conversion to DocBook XML 4.2 + for Samba 3.0 was done by Alexander Bokovoy.

        diff --git a/docs/htmldocs/smbcacls.1.html b/docs/htmldocs/smbcacls.1.html index e0425d481d..d7c5fed1b5 100644 --- a/docs/htmldocs/smbcacls.1.html +++ b/docs/htmldocs/smbcacls.1.html @@ -1,415 +1,95 @@ - -smbcacls

        smbcacls

        Name

        smbcacls -- Set or get ACLs on an NT file or directory names

        Synopsis

        smbcacls {//server/share} {filename} [-U username] [-A acls] [-M acls] [-D acls] [-S acls] [-C name] [-G name] [-n] [-h]

        DESCRIPTION

        This tool is part of the Samba suite.

        The smbcacls program manipulates NT Access Control - Lists (ACLs) on SMB file shares.

        OPTIONS

        The following options are available to the smbcacls program. - The format of ACLs is described in the section ACL FORMAT

        -A acls

        Add the ACLs specified to the ACL list. Existing - access control entries are unchanged.

        -M acls

        Modify the mask value (permissions) for the ACLs +smbcacls

        Name

        smbcacls — Set or get ACLs on an NT file or directory names

        Synopsis

        smbcacls {//server/share} {filename} [-D acls] [-M acls] [-A acls] [-S acls] [-C name] [-G name] [-n] [-t] [-U username] [-h] [-d]

        DESCRIPTION

        This tool is part of the Samba(7) suite.

        The smbcacls program manipulates NT Access Control + Lists (ACLs) on SMB file shares.

        OPTIONS

        The following options are available to the smbcacls program. + The format of ACLs is described in the section ACL FORMAT

        -A acls

        Add the ACLs specified to the ACL list. Existing + access control entries are unchanged.

        -M acls

        Modify the mask value (permissions) for the ACLs specified on the command line. An error will be printed for each ACL specified that was not already present in the ACL list -

        -D acls

        Delete any ACLs specified on the command line. +

        -D acls

        Delete any ACLs specified on the command line. An error will be printed for each ACL specified that was not - already present in the ACL list.

        -S acls

        This command sets the ACLs on the file with + already present in the ACL list.

        -S acls

        This command sets the ACLs on the file with only the ones specified on the command line. All other ACLs are erased. Note that the ACL specified must contain at least a revision, - type, owner and group for the call to succeed.

        -U username

        Specifies a username used to connect to the - specified service. The username may be of the form "username" in + type, owner and group for the call to succeed.

        -U username

        Specifies a username used to connect to the + specified service. The username may be of the form "username" in which case the user is prompted to enter in a password and the - workgroup specified in the smb.conf file is - used, or "username%password" or "DOMAIN\username%password" and the - password and workgroup names are used as provided.

        -C name

        The owner of a file or directory can be changed - to the name given using the -C option. + workgroup specified in the smb.conf(5) file is + used, or "username%password" or "DOMAIN\username%password" and the + password and workgroup names are used as provided.

        -C name

        The owner of a file or directory can be changed + to the name given using the -C option. The name can be a sid in the form S-1-x-y-z or a name resolved - against the server specified in the first argument.

        This command is a shortcut for -M OWNER:name. -

        -G name

        The group owner of a file or directory can - be changed to the name given using the -G + against the server specified in the first argument.

        This command is a shortcut for -M OWNER:name. +

        -G name

        The group owner of a file or directory can + be changed to the name given using the -G option. The name can be a sid in the form S-1-x-y-z or a name resolved against the server specified n the first argument. -

        This command is a shortcut for -M GROUP:name.

        -n

        This option displays all ACL information in numeric +

        This command is a shortcut for -M GROUP:name.

        -n

        This option displays all ACL information in numeric format. The default is to convert SIDs to names and ACE types - and masks to a readable string format.

        -h

        Print usage information on the smbcacls - program.

        ACL FORMAT

        The format of an ACL is one or more ACL entries separated by - either commas or newlines. An ACL entry is one of the following: 

         
+		and masks to a readable string format.
        -t

        + Don't actually do anything, only validate the correctness of + the arguments. +

        -h|--help

        Print a summary of command line options. +

        -V

        Prints the version number for +smbd.

        -s <configuration file>

        The file specified contains the +configuration details required by the server. The +information in this file includes server-specific +information such as what printcap file to use, as well +as descriptions of all the services that the server is +to provide. See +smb.conf(5) for more information. +The default configuration file name is determined at +compile time.

        -d|--debug=debuglevel

        debuglevel is an integer +from 0 to 10. The default value if this parameter is +not specified is zero.

        The higher this value, the more detail will be +logged to the log files about the activities of the +server. At level 0, only critical errors and serious +warnings will be logged. Level 1 is a reasonable level for +day to day running - it generates a small amount of +information about operations carried out.

        Levels above 1 will generate considerable +amounts of log data, and should only be used when +investigating a problem. Levels above 3 are designed for +use only by developers and generate HUGE amounts of log +data, most of which is extremely cryptic.

        Note that specifying this parameter here will +override the log +level parameter in the +smb.conf(5) file.

        -l|--logfile=logbasename

        File name for log/debug files. The extension +".client" will be appended. The log file is +never removed by the client. +

        ACL FORMAT

        The format of an ACL is one or more ACL entries separated by + either commas or newlines. An ACL entry is one of the following: 

         
 REVISION:<revision number>
 OWNER:<sid or name>
 GROUP:<sid or name>
 ACL:<sid or name>:<type>/<flags>/<mask>
-

        The revision of the ACL specifies the internal Windows +

        The revision of the ACL specifies the internal Windows NT ACL revision for the security descriptor. If not specified it defaults to 1. Using values other than 1 may - cause strange behaviour.

        The owner and group specify the owner and group sids for the + cause strange behaviour.

        The owner and group specify the owner and group sids for the object. If a SID in the format CWS-1-x-y-z is specified this is used, otherwise the name specified is resolved using the server on which - the file or directory resides.

        ACLs specify permissions granted to the SID. This SID again - can be specified in CWS-1-x-y-z format or as a name in which case - it is resolved against the server on which the file or directory - resides. The type, flags and mask values determine the type of - access granted to the SID.

        The type can be either 0 or 1 corresponding to ALLOWED or - DENIED access to the SID. The flags values are generally - zero for file ACLs and either 9 or 2 for directory ACLs. Some - common flags are:

        • #define SEC_ACE_FLAG_OBJECT_INHERIT 0x1

        • #define SEC_ACE_FLAG_CONTAINER_INHERIT 0x2

        • #define SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0x4 -

        • #define SEC_ACE_FLAG_INHERIT_ONLY 0x8

        At present flags can only be specified as decimal or - hexadecimal values.

        The mask is a value which expresses the access right + the file or directory resides.

        ACLs specify permissions granted to the SID. This SID again + can be specified in CWS-1-x-y-z format or as a name in which case + it is resolved against the server on which the file or directory + resides. The type, flags and mask values determine the type of + access granted to the SID.

        The type can be either 0 or 1 corresponding to ALLOWED or + DENIED access to the SID. The flags values are generally + zero for file ACLs and either 9 or 2 for directory ACLs. Some + common flags are:

        • #define SEC_ACE_FLAG_OBJECT_INHERIT 0x1

        • #define SEC_ACE_FLAG_CONTAINER_INHERIT 0x2

        • #define SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0x4

        • #define SEC_ACE_FLAG_INHERIT_ONLY 0x8

        At present flags can only be specified as decimal or + hexadecimal values.

        The mask is a value which expresses the access right granted to the SID. It can be given as a decimal or hexadecimal value, or by using one of the following text strings which map to the NT - file permissions of the same name.

        • R - Allow read access

        • W - Allow write access

        • X - Execute permission on the object

        • D - Delete the object

        • P - Change permissions

        • O - Take ownership

        The following combined permissions can be specified:

        • READ - Equivalent to 'RX' - permissions

        • CHANGE - Equivalent to 'RXWD' permissions -

        • FULL - Equivalent to 'RWXDPO' - permissions

        EXIT STATUS

        The smbcacls program sets the exit status + file permissions of the same name.

        • R - Allow read access

        • W - Allow write access

        • X - Execute permission on the object

        • D - Delete the object

        • P - Change permissions

        • O - Take ownership

        The following combined permissions can be specified:

        • READ - Equivalent to 'RX' + permissions

        • CHANGE - Equivalent to 'RXWD' permissions +

        • FULL - Equivalent to 'RWXDPO' + permissions

        EXIT STATUS

        The smbcacls program sets the exit status depending on the success or otherwise of the operations performed. - The exit status may be one of the following values.

        If the operation succeeded, smbcacls returns and exit - status of 0. If smbcacls couldn't connect to the specified server, + The exit status may be one of the following values.

        If the operation succeeded, smbcacls returns and exit + status of 0. If smbcacls couldn't connect to the specified server, or there was an error getting or setting the ACLs, an exit status of 1 is returned. If there was an error parsing any command line - arguments, an exit status of 2 is returned.

        VERSION

        This man page is correct for version 2.2 of - the Samba suite.

        AUTHOR

        The original Samba software and related utilities + arguments, an exit status of 2 is returned.

        VERSION

        This man page is correct for version 3.0 of the Samba suite.

        AUTHOR

        The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar - to the way the Linux kernel is developed.

        smbcacls was written by Andrew Tridgell - and Tim Potter.

        The conversion to DocBook for Samba 2.2 was done - by Gerald Carter

        \ No newline at end of file + to the way the Linux kernel is developed.

        smbcacls was written by Andrew Tridgell + and Tim Potter.

        The conversion to DocBook for Samba 2.2 was done + by Gerald Carter. The conversion to DocBook XML 4.2 for Samba 3.0 was done + by Alexander Bokovoy.

        diff --git a/docs/htmldocs/smbclient.1.html b/docs/htmldocs/smbclient.1.html index ca8cafd312..ecb85d6e85 100644 --- a/docs/htmldocs/smbclient.1.html +++ b/docs/htmldocs/smbclient.1.html @@ -1,1645 +1,424 @@ - -smbclient

        smbclient

        Name

        smbclient -- ftp-like client to access SMB/CIFS resources - on servers

        Synopsis

        smbclient {servicename} [password] [-b <buffer size>] [-d debuglevel] [-D Directory] [-U username] [-W workgroup] [-M <netbios name>] [-m maxprotocol] [-A authfile] [-N] [-l logfile] [-L <netbios name>] [-I destinationIP] [-E] [-c <command string>] [-i scope] [-O <socket options>] [-p port] [-R <name resolve order>] [-s <smb config file>] [-T<c|x>IXFqgbNan]

        DESCRIPTION

        This tool is part of the Samba suite.

        smbclient is a client that can +smbclient

        Name

        smbclient — ftp-like client to access SMB/CIFS resources + on servers

        Synopsis

        smbclient {servicename} [password] [-b <buffer size>] [-d debuglevel] [-D Directory] [-U username] [-W workgroup] [-M <netbios name>] [-m maxprotocol] [-A authfile] [-N] [-l logfile] [-L <netbios name>] [-I destinationIP] [-E] [-c <command string>] [-i scope] [-O <socket options>] [-p port] [-R <name resolve order>] [-s <smb config file>] [-T<c|x>IXFqgbNan] [-k]

        DESCRIPTION

        This tool is part of the Samba(7) suite.

        smbclient is a client that can 'talk' to an SMB/CIFS server. It offers an interface - similar to that of the ftp program (see ftp(1)). + similar to that of the ftp program (see ftp(1)). Operations include things like getting files from the server to the local machine, putting files from the local machine to the server, retrieving directory information from the server - and so on.

        OPTIONS

        servicename

        servicename is the name of the service + and so on.

        OPTIONS

        servicename

        servicename is the name of the service you want to use on the server. A service name takes the form - //server/service where server - is the NetBIOS name of the SMB/CIFS server - offering the desired service and service + //server/service where server + is the NetBIOS name of the SMB/CIFS server + offering the desired service and service is the name of the service offered. Thus to connect to - the service "printer" on the SMB/CIFS server "smbserver", - you would use the servicename //smbserver/printer -

        Note that the server name required is NOT necessarily + the service "printer" on the SMB/CIFS server "smbserver", + you would use the servicename //smbserver/printer +

        Note that the server name required is NOT necessarily the IP (DNS) host name of the server ! The name required is a NetBIOS server name, which may or may not be the same as the IP hostname of the machine running the server. -

        The server name is looked up according to either - the -R parameter to smbclient or - using the name resolve order parameter in the smb.conf file, +

        The server name is looked up according to either + the -R parameter to smbclient or + using the name resolve order parameter in + the smb.conf(5) file, allowing an administrator to change the order and methods - by which server names are looked up.

        password

        The password required to access the specified + by which server names are looked up.

        password

        The password required to access the specified service on the specified server. If this parameter is - supplied, the -N option (suppress - password prompt) is assumed.

        There is no default password. If no password is supplied + supplied, the -N option (suppress + password prompt) is assumed.

        There is no default password. If no password is supplied on the command line (either by using this parameter or adding - a password to the -U option (see - below)) and the -N option is not + a password to the -U option (see + below)) and the -N option is not specified, the client will prompt for a password, even if the desired service does not require one. (If no password is required, simply press ENTER to provide a null password.) -

        Note: Some servers (including OS/2 and Windows for +

        Note: Some servers (including OS/2 and Windows for Workgroups) insist on an uppercase password. Lowercase or mixed case passwords may be rejected by these servers. -

        Be cautious about including passwords in scripts. -

        -s smb.conf

        Specifies the location of the all important - smb.conf file.

        -O socket options

        TCP socket options to set on the client - socket. See the socket options parameter in the smb.conf (5) manpage for the list of valid - options.

        -R <name resolve order>

        This option is used by the programs in the Samba +

        Be cautious about including passwords in scripts. +

        -R <name resolve order>

        This option is used by the programs in the Samba suite to determine what naming services and in what order to resolve host names to IP addresses. The option takes a space-separated - string of different name resolution options.

        The options are :"lmhosts", "host", "wins" and "bcast". They - cause names to be resolved as follows :

        • lmhosts : Lookup an IP + string of different name resolution options.

          The options are :"lmhosts", "host", "wins" and "bcast". They + cause names to be resolved as follows:

          • lmhosts: Lookup an IP address in the Samba lmhosts file. If the line in lmhosts has - no name type attached to the NetBIOS name (see the lmhosts(5) for details) then - any name type matches for lookup.

          • host : Do a standard host - name to IP address resolution, using the system /etc/hosts - , NIS, or DNS lookups. This method of name resolution + no name type attached to the NetBIOS name (see + the lmhosts(5) for details) then + any name type matches for lookup.

          • host: Do a standard host + name to IP address resolution, using the system /etc/hosts + , NIS, or DNS lookups. This method of name resolution is operating system dependent, for instance on IRIX or Solaris this - may be controlled by the /etc/nsswitch.conf + may be controlled by the /etc/nsswitch.conf file). Note that this method is only used if the NetBIOS name type being queried is the 0x20 (server) name type, otherwise - it is ignored.

          • wins : Query a name with - the IP address listed in the wins server + it is ignored.

          • wins: Query a name with + the IP address listed in the wins server parameter. If no WINS server has - been specified this method will be ignored.

          • bcast : Do a broadcast on + been specified this method will be ignored.

          • bcast: Do a broadcast on each of the known local interfaces listed in the - interfaces + interfaces parameter. This is the least reliable of the name resolution methods as it depends on the target host being on a locally - connected subnet.

          If this parameter is not set then the name resolve order - defined in the smb.conf file parameter - (name resolve order) will be used.

          The default order is lmhosts, host, wins, bcast and without - this parameter or any entry in the name resolve order - parameter of the smb.conf file the name resolution - methods will be attempted in this order.

        -M NetBIOS name

        This options allows you to send messages, using - the "WinPopup" protocol, to another computer. Once a connection is + connected subnet.

        If this parameter is not set then the name resolve order + defined in the smb.conf(5) file parameter + (name resolve order) will be used.

        The default order is lmhosts, host, wins, bcast and without + this parameter or any entry in the name resolve order + parameter of the smb.conf(5) file the name resolution + methods will be attempted in this order.

        -M NetBIOS name

        This options allows you to send messages, using + the "WinPopup" protocol, to another computer. Once a connection is established you then type your message, pressing ^D (control-D) to - end.

        If the receiving computer is running WinPopup the user will + end.

        If the receiving computer is running WinPopup the user will receive the message and probably a beep. If they are not running WinPopup the message will be lost, and no error message will - occur.

        The message is also automatically truncated if the message + occur.

        The message is also automatically truncated if the message is over 1600 bytes, as this is the limit of the protocol. -

        One useful trick is to cat the message through - smbclient. For example: cat mymessage.txt | smbclient -M FRED will - send the message in the file mymessage.txt - to the machine FRED.

        You may also find the -U and - -I options useful, as they allow you to - control the FROM and TO parts of the message.

        See the message command parameter in the smb.conf(5) for a description of how to handle incoming - WinPopup messages in Samba.

        Note: Copy WinPopup into the startup group +

        One useful trick is to cat the message through + smbclient. For example: + cat mymessage.txt | smbclient -M FRED will + send the message in the file mymessage.txt + to the machine FRED.

        You may also find the -U and + -I options useful, as they allow you to + control the FROM and TO parts of the message.

        See the message command parameter in the smb.conf(5) for a description of how to handle incoming + WinPopup messages in Samba.

        Note: Copy WinPopup into the startup group on your WfWg PCs if you want them to always be able to receive - messages.

        -i scope

        This specifies a NetBIOS scope that smbclient will - use to communicate with when generating NetBIOS names. For details - on the use of NetBIOS scopes, see rfc1001.txt - and rfc1002.txt. - NetBIOS scopes are very rarely used, only set - this parameter if you are the system administrator in charge of all - the NetBIOS systems you communicate with.

        -N

        If specified, this parameter suppresses the normal - password prompt from the client to the user. This is useful when - accessing a service that does not require a password.

        Unless a password is specified on the command line or - this parameter is specified, the client will request a - password.

        -n NetBIOS name

        By default, the client will use the local - machine's hostname (in uppercase) as its NetBIOS name. This parameter - allows you to override the host name and use whatever NetBIOS - name you wish.

        -d debuglevel

        debuglevel is an integer from 0 to 10, or - the letter 'A'.

        The default value if this parameter is not specified - is zero.

        The higher this value, the more detail will be logged to - the log files about the activities of the - client. At level 0, only critical errors and serious warnings will - be logged. Level 1 is a reasonable level for day to day running - - it generates a small amount of information about operations - carried out.

        Levels above 1 will generate considerable amounts of log - data, and should only be used when investigating a problem. - Levels above 3 are designed for use only by developers and - generate HUGE amounts of log data, most of which is extremely - cryptic. If debuglevel is set to the letter 'A', then all - debug messages will be printed. This setting - is for developers only (and people who really want - to know how the code works internally).

        Note that specifying this parameter here will override - the log level parameter in the smb.conf (5) - file.

        -p port

        This number is the TCP port number that will be used + messages.

        -p port

        This number is the TCP port number that will be used when making connections to the server. The standard (well-known) TCP port number for an SMB/CIFS server is 139, which is the - default.

        -l logfilename

        If specified, logfilename specifies a base filename + default.

        -l logfilename

        If specified, logfilename specifies a base filename into which operational data from the running client will be - logged.

        The default base name is specified at compile time.

        The base name is used to generate actual log file names. - For example, if the name specified was "log", the debug file - would be log.client.

        The log file generated is never removed by the client. -

        -h

        Print the usage message for the client.

        -I IP-address

        IP address is the address of the server to connect to. - It should be specified in standard "a.b.c.d" notation.

        Normally the client would attempt to locate a named + logged.

        The default base name is specified at compile time.

        The base name is used to generate actual log file names. + For example, if the name specified was "log", the debug file + would be log.client.

        The log file generated is never removed by the client. +

        -h|--help

        Print a summary of command line options. +

        -I IP-address

        IP address is the address of the server to connect to. + It should be specified in standard "a.b.c.d" notation.

        Normally the client would attempt to locate a named SMB/CIFS server by looking it up via the NetBIOS name resolution - mechanism described above in the name resolve order + mechanism described above in the name resolve order parameter above. Using this parameter will force the client to assume that the server is on the machine with the specified IP address and the NetBIOS name component of the resource being - connected to will be ignored.

        There is no default for this parameter. If not supplied, + connected to will be ignored.

        There is no default for this parameter. If not supplied, it will be determined automatically by the client as described - above.

        -E

        This parameter causes the client to write messages + above.

        -E

        This parameter causes the client to write messages to the standard error stream (stderr) rather than to the standard - output stream.

        By default, the client writes messages to standard output - - typically the user's tty.

        -U username[%pass]

        Sets the SMB username or username and password. - If %pass is not specified, The user will be prompted. The client - will first check the USER environment variable, then the - LOGNAME variable and if either exists, the - string is uppercased. Anything in these variables following a '%' - sign will be treated as the password. If these environment - variables are not found, the username GUEST - is used.

        If the password is not included in these environment - variables (using the %pass syntax), smbclient will look for - a PASSWD environment variable from which - to read the password.

        A third option is to use a credentials file which - contains the plaintext of the domain name, username and password. This - option is mainly provided for scripts where the admin doesn't - wish to pass the credentials on the command line or via environment - variables. If this method is used, make certain that the permissions - on the file restrict access from unwanted users. See the - -A for more details.

        Be cautious about including passwords in scripts or in - the PASSWD environment variable. Also, on - many systems the command line of a running process may be seen - via the ps command to be safe always allow - smbclient to prompt for a password and type - it in directly.

        -A filename

        This option allows - you to specify a file from which to read the username, domain name, and - password used in the connection. The format of the file is - 

        username = <value> 
-password = <value>
-domain = <value>
-

        If the domain parameter is missing the current workgroup name - is used instead. Make certain that the permissions on the file restrict - access from unwanted users.

        -L

        This option allows you to look at what services - are available on a server. You use it as smbclient -L - host and a list should appear. The -I - option may be useful if your NetBIOS names don't + output stream.

        By default, the client writes messages to standard output + - typically the user's tty.

        -L

        This option allows you to look at what services + are available on a server. You use it as smbclient -L + host and a list should appear. The -I + option may be useful if your NetBIOS names don't match your TCP/IP DNS host names or if you are trying to reach a - host on another network.

        -t terminal code

        This option tells smbclient how to interpret + host on another network.

        -t terminal code

        This option tells smbclient how to interpret filenames coming from the remote server. Usually Asian language multibyte UNIX implementations use different character sets than - SMB/CIFS servers (EUC instead of SJIS for example). Setting this parameter will let - smbclient convert between the UNIX filenames and + SMB/CIFS servers (EUC instead of + SJIS for example). Setting this parameter will let + smbclient convert between the UNIX filenames and the SMB filenames correctly. This option has not been seriously tested - and may have some problems.

        The terminal codes include CWsjis, CWeuc, CWjis7, CWjis8, + and may have some problems.

        The terminal codes include CWsjis, CWeuc, CWjis7, CWjis8, CWjunet, CWhex, CWcap. This is not a complete list, check the Samba - source code for the complete list.

        -b buffersize

        This option changes the transmit/send buffer + source code for the complete list.

        -b buffersize

        This option changes the transmit/send buffer size when getting or putting a file from/to the server. The default is 65520 bytes. Setting this value smaller (to 1200 bytes) has been observed to speed up file transfers to and from a Win9x server. -

        -W WORKGROUP

        Override the default workgroup (domain) specified - in the workgroup parameter of the smb.conf - file for this connection. This may be needed to connect to some - servers.

        -T tar options

        smbclient may be used to create tar(1) - compatible backups of all the files on an SMB/CIFS +

        -V

        Prints the version number for +smbd.

        -s <configuration file>

        The file specified contains the +configuration details required by the server. The +information in this file includes server-specific +information such as what printcap file to use, as well +as descriptions of all the services that the server is +to provide. See +smb.conf(5) for more information. +The default configuration file name is determined at +compile time.

        -d|--debug=debuglevel

        debuglevel is an integer +from 0 to 10. The default value if this parameter is +not specified is zero.

        The higher this value, the more detail will be +logged to the log files about the activities of the +server. At level 0, only critical errors and serious +warnings will be logged. Level 1 is a reasonable level for +day to day running - it generates a small amount of +information about operations carried out.

        Levels above 1 will generate considerable +amounts of log data, and should only be used when +investigating a problem. Levels above 3 are designed for +use only by developers and generate HUGE amounts of log +data, most of which is extremely cryptic.

        Note that specifying this parameter here will +override the log +level parameter in the +smb.conf(5) file.

        -l|--logfile=logbasename

        File name for log/debug files. The extension +".client" will be appended. The log file is +never removed by the client. +

        -N

        If specified, this parameter suppresses the normal +password prompt from the client to the user. This is useful when +accessing a service that does not require a password.

        Unless a password is specified on the command line or +this parameter is specified, the client will request a +password.

        -k

        +Try to authenticate with kerberos. Only useful in +an Active Directory environment. +

        -A|--authfile=filename

        This option allows +you to specify a file from which to read the username and +password used in the connection. The format of the file is +

        +username = <value>
+password = <value>
+domain   = <value>
+

        Make certain that the permissions on the file restrict +access from unwanted users.

        -U|--user=username[%password]

        Sets the SMB username or username and password.

        If %password is not specified, the user will be prompted. The +client will first check the USER environment variable, then the +LOGNAME variable and if either exists, the +string is uppercased. If these environmental variables are not +found, the username GUEST is used.

        A third option is to use a credentials file which +contains the plaintext of the username and password. This +option is mainly provided for scripts where the admin does not +wish to pass the credentials on the command line or via environment +variables. If this method is used, make certain that the permissions +on the file restrict access from unwanted users. See the +-A for more details.

        Be cautious about including passwords in scripts. Also, on +many systems the command line of a running process may be seen +via the ps command. To be safe always allow +rpcclient to prompt for a password and type +it in directly.

        -n <primary NetBIOS name>

        This option allows you to override +the NetBIOS name that Samba uses for itself. This is identical +to setting the NetBIOS +name parameter in the smb.conf(5) file. However, a command +line setting will take precedence over settings in +smb.conf(5).

        -i <scope>

        This specifies a NetBIOS scope that +nmblookup will use to communicate with when +generating NetBIOS names. For details on the use of NetBIOS +scopes, see rfc1001.txt and rfc1002.txt. NetBIOS scopes are +very rarely used, only set this parameter +if you are the system administrator in charge of all the +NetBIOS systems you communicate with.

        -W|--workgroup=domain

        Set the SMB domain of the username. This +overrides the default domain which is the domain defined in +smb.conf. If the domain specified is the same as the servers +NetBIOS name, it causes the client to log on using the servers local +SAM (as opposed to the Domain SAM).

        -O socket options

        TCP socket options to set on the client +socket. See the socket options parameter in +the smb.conf(5) manual page for the list of valid +options.

        -T tar options

        smbclient may be used to create tar(1) + compatible backups of all the files on an SMB/CIFS share. The secondary tar flags that can be given to this option - are :

        • c - Create a tar file on UNIX. + are :

          • c - Create a tar file on UNIX. Must be followed by the name of a tar file, tape device - or "-" for standard output. If using standard output you must + or "-" for standard output. If using standard output you must turn the log level to its lowest value -d0 to avoid corrupting your tar file. This flag is mutually exclusive with the - x flag.

          • x - Extract (restore) a local + x flag.

          • x - Extract (restore) a local tar file back to a share. Unless the -D option is given, the tar files will be restored from the top level of the share. Must be - followed by the name of the tar file, device or "-" for standard - input. Mutually exclusive with the c flag. + followed by the name of the tar file, device or "-" for standard + input. Mutually exclusive with the c flag. Restored files have their creation times (mtime) set to the date saved in the tar file. Directories currently do not get - their creation dates restored properly.

          • I - Include files and directories. + their creation dates restored properly.

          • I - Include files and directories. Is the default behavior when filenames are specified above. Causes tar files to be included in an extract or create (and therefore everything else to be excluded). See example below. Filename globbing - works in one of two ways. See r below.

          • X - Exclude files and directories. + works in one of two ways. See r below.

          • X - Exclude files and directories. Causes tar files to be excluded from an extract or create. See example below. Filename globbing works in one of two ways now. - See r below.

          • b - Blocksize. Must be followed + See r below.

          • b - Blocksize. Must be followed by a valid (greater than zero) blocksize. Causes tar file to be written out in blocksize*TBLOCK (usually 512 byte) blocks. -

          • g - Incremental. Only back up +

          • g - Incremental. Only back up files that have the archive bit set. Useful only with the - c flag.

          • q - Quiet. Keeps tar from printing + c flag.

          • q - Quiet. Keeps tar from printing diagnostics as it works. This is the same as tarmode quiet. -

          • r - Regular expression include +

          • r - Regular expression include or exclude. Uses regular expression matching for excluding or excluding files if compiled with HAVE_REGEX_H. However this mode can be very slow. If not compiled with HAVE_REGEX_H, does a limited wildcard match on '*' and '?'. -

          • N - Newer than. Must be followed +

          • N - Newer than. Must be followed by the name of a file whose date is compared against files found on the share during a create. Only files newer than the file specified are backed up to the tar file. Useful only with the - c flag.

          • a - Set archive bit. Causes the + c flag.

          • a - Set archive bit. Causes the archive bit to be reset when a file is backed up. Useful with the - g and c flags. -

          Tar Long File Names

          smbclient's tar option now supports long + g and c flags. +

        Tar Long File Names

        smbclient's tar option now supports long file names both on backup and restore. However, the full path name of the file must be less than 1024 bytes. Also, when - a tar archive is created, smbclient's tar option places all + a tar archive is created, smbclient's tar option places all files in the archive with relative names, not absolute names. -

        Tar Filenames

        All file names can be given as DOS path names (with '\' +

        Tar Filenames

        All file names can be given as DOS path names (with '\\' as the component separator) or as UNIX path names (with '/' as - the component separator).

        Examples

        Restore from tar file backup.tar into myshare on mypc - (no password on share).

        smbclient //mypc/yshare "" -N -Tx backup.tar -

        Restore everything except users/docs -

        smbclient //mypc/myshare "" -N -TXx backup.tar - users/docs

        Create a tar file of the files beneath users/docs.

        smbclient //mypc/myshare "" -N -Tc - backup.tar users/docs

        Create the same tar file as above, but now use - a DOS path name.

        smbclient //mypc/myshare "" -N -tc backup.tar - users\edocs

        Create a tar file of all the files and directories in - the share.

        smbclient //mypc/myshare "" -N -Tc backup.tar * -

        -D initial directory

        Change to initial directory before starting. Probably - only of any use with the tar -T option.

        -c command string

        command string is a semicolon-separated list of - commands to be executed instead of prompting from stdin. -N is implied by -c.

        This is particularly useful in scripts and for printing stdin - to the server, e.g. -c 'print -'.

        OPERATIONS

        Once the client is running, the user is presented with - a prompt :

        smb:\>

        The backslash ("\") indicates the current working directory + the component separator).

        Examples

        Restore from tar file backup.tar into myshare on mypc + (no password on share).

        smbclient //mypc/yshare "" -N -Tx backup.tar +

        Restore everything except users/docs +

        smbclient //mypc/myshare "" -N -TXx backup.tar + users/docs

        Create a tar file of the files beneath + users/docs.

        smbclient //mypc/myshare "" -N -Tc + backup.tar users/docs

        Create the same tar file as above, but now use + a DOS path name.

        smbclient //mypc/myshare "" -N -tc backup.tar + users\edocs

        Create a tar file of all the files and directories in + the share.

        smbclient //mypc/myshare "" -N -Tc backup.tar * +

        -D initial directory

        Change to initial directory before starting. Probably + only of any use with the tar -T option.

        -c command string

        command string is a semicolon-separated list of + commands to be executed instead of prompting from stdin. + -N is implied by -c.

        This is particularly useful in scripts and for printing stdin + to the server, e.g. -c 'print -'.

        OPERATIONS

        Once the client is running, the user is presented with + a prompt :

        smb:\>

        The backslash ("\\") indicates the current working directory on the server, and will change if the current working directory - is changed.

        The prompt indicates that the client is ready and waiting to + is changed.

        The prompt indicates that the client is ready and waiting to carry out a user command. Each command is a single word, optionally followed by parameters specific to that command. Command and parameters are space-delimited unless these notes specifically state otherwise. All commands are case-insensitive. Parameters to commands may or may not be case sensitive, depending on the command. -

        You can specify file names which have spaces in them by quoting - the name with double quotes, for example "a long file name".

        Parameters shown in square brackets (e.g., "[parameter]") are +

        You can specify file names which have spaces in them by quoting + the name with double quotes, for example "a long file name".

        Parameters shown in square brackets (e.g., "[parameter]") are optional. If not given, the command will use suitable defaults. Parameters - shown in angle brackets (e.g., "<parameter>") are required. -

        Note that all commands operating on the server are actually + shown in angle brackets (e.g., "<parameter>") are required. +

        Note that all commands operating on the server are actually performed by issuing a request to the server. Thus the behavior may vary from server to server, depending on how the server was implemented. -

        The commands available are given here in alphabetical order.

        ? [command]

        If command is specified, the ? command will display +

        The commands available are given here in alphabetical order.

        ? [command]

        If command is specified, the ? command will display a brief informative message about the specified command. If no command is specified, a list of available commands will - be displayed.

        ! [shell command]

        If shell command is specified, the ! + be displayed.

        ! [shell command]

        If shell command is specified, the ! command will execute a shell locally and run the specified shell command. If no command is specified, a local shell will be run. -

        altname file

        The client will request that the server return - the "alternate" name (the 8.3 name) for a file or directory. -

        cancel jobid0 [jobid1] ... [jobidN]

        The client will request that the server cancel +

        altname file

        The client will request that the server return + the "alternate" name (the 8.3 name) for a file or directory. +

        cancel jobid0 [jobid1] ... [jobidN]

        The client will request that the server cancel the printjobs identified by the given numeric print job ids. -

        chmod file mode in octal

        This command depends on the server supporting the CIFS +

        chmod file mode in octal

        This command depends on the server supporting the CIFS UNIX extensions and will fail if the server does not. The client requests that the server change the UNIX permissions to the given octal mode, in standard UNIX format. -

        chown file uid gid

        This command depends on the server supporting the CIFS +

        chown file uid gid

        This command depends on the server supporting the CIFS UNIX extensions and will fail if the server does not. The client requests that the server change the UNIX user and group ownership to the given decimal values. Note there is currently no way to remotely look up the UNIX uid and gid values for a given name. This may be addressed in future versions of the CIFS UNIX extensions. -

        cd [directory name]

        If "directory name" is specified, the current +

        cd [directory name]

        If "directory name" is specified, the current working directory on the server will be changed to the directory specified. This operation will fail if for any reason the specified - directory is inaccessible.

        If no directory name is specified, the current working - directory on the server will be reported.

        del <mask>

        The client will request that the server attempt - to delete all files matching mask from the current working - directory on the server.

        dir <mask>

        A list of the files matching mask in the current + directory is inaccessible.

        If no directory name is specified, the current working + directory on the server will be reported.

        del <mask>

        The client will request that the server attempt + to delete all files matching mask from the current working + directory on the server.

        dir <mask>

        A list of the files matching mask in the current working directory on the server will be retrieved from the server - and displayed.

        exit

        Terminate the connection with the server and exit - from the program.

        get <remote file name> [local file name]

        Copy the file called remote file name from + and displayed.

        exit

        Terminate the connection with the server and exit + from the program.

        get <remote file name> [local file name]

        Copy the file called remote file name from the server to the machine running the client. If specified, name - the local copy local file name. Note that all transfers in - smbclient are binary. See also the - lowercase command.

        help [command]

        See the ? command above.

        lcd [directory name]

        If directory name is specified, the current + the local copy local file name. Note that all transfers in + smbclient are binary. See also the + lowercase command.

        help [command]

        See the ? command above.

        lcd [directory name]

        If directory name is specified, the current working directory on the local machine will be changed to the directory specified. This operation will fail if for any - reason the specified directory is inaccessible.

        If no directory name is specified, the name of the + reason the specified directory is inaccessible.

        If no directory name is specified, the name of the current working directory on the local machine will be reported. -

        link source destination

        This command depends on the server supporting the CIFS +

        link source destination

        This command depends on the server supporting the CIFS UNIX extensions and will fail if the server does not. The client requests that the server create a hard link between the source and destination files. The source file must not exist. -

        lowercase

        Toggle lowercasing of filenames for the get and - mget commands.

        When lowercasing is toggled ON, local filenames are converted +

        lowercase

        Toggle lowercasing of filenames for the get and + mget commands.

        When lowercasing is toggled ON, local filenames are converted to lowercase when using the get and mget commands. This is often useful when copying (say) MSDOS files from a server, because - lowercase filenames are the norm on UNIX systems.

        ls <mask>

        See the dir command above.

        mask <mask>

        This command allows the user to set up a mask + lowercase filenames are the norm on UNIX systems.

        ls <mask>

        See the dir command above.

        mask <mask>

        This command allows the user to set up a mask which will be used during recursive operation of the mget and - mput commands.

        The masks specified to the mget and mput commands act as + mput commands.

        The masks specified to the mget and mput commands act as filters for directories rather than files when recursion is - toggled ON.

        The mask specified with the mask command is necessary + toggled ON.

        The mask specified with the mask command is necessary to filter files within those directories. For example, if the - mask specified in an mget command is "source*" and the mask - specified with the mask command is "*.c" and recursion is + mask specified in an mget command is "source*" and the mask + specified with the mask command is "*.c" and recursion is toggled ON, the mget command will retrieve all files matching - "*.c" in all directories below and including all directories - matching "source*" in the current working directory.

        Note that the value for mask defaults to blank (equivalent - to "*") and remains so until the mask command is used to change it. + "*.c" in all directories below and including all directories + matching "source*" in the current working directory.

        Note that the value for mask defaults to blank (equivalent + to "*") and remains so until the mask command is used to change it. It retains the most recently specified value indefinitely. To avoid unexpected results it would be wise to change the value of - mask back to "*" after using the mget or mput commands.

        md <directory name>

        See the mkdir command.

        mget <mask>

        Copy all files matching mask from the server to - the machine running the client.

        Note that mask is interpreted differently during recursive + mask back to "*" after using the mget or mput commands.

        md <directory name>

        See the mkdir command.

        mget <mask>

        Copy all files matching mask from the server to + the machine running the client.

        Note that mask is interpreted differently during recursive operation and non-recursive operation - refer to the recurse and mask commands for more information. Note that all transfers in - smbclient are binary. See also the lowercase command.

        mkdir <directory name>

        Create a new directory on the server (user access - privileges permitting) with the specified name.

        mput <mask>

        Copy all files matching mask in the current working + smbclient are binary. See also the lowercase command.

        mkdir <directory name>

        Create a new directory on the server (user access + privileges permitting) with the specified name.

        mput <mask>

        Copy all files matching mask in the current working directory on the local machine to the current working directory on - the server.

        Note that mask is interpreted differently during recursive + the server.

        Note that mask is interpreted differently during recursive operation and non-recursive operation - refer to the recurse and mask - commands for more information. Note that all transfers in smbclient - are binary.

        print <file name>

        Print the specified file from the local machine - through a printable service on the server.

        See also the printmode command.

        printmode <graphics or text>

        Set the print mode to suit either binary data + commands for more information. Note that all transfers in smbclient + are binary.

        print <file name>

        Print the specified file from the local machine + through a printable service on the server.

        See also the printmode command.

        printmode <graphics or text>

        Set the print mode to suit either binary data (such as graphical information) or text. Subsequent print - commands will use the currently set print mode.

        prompt

        Toggle prompting for filenames during operation - of the mget and mput commands.

        When toggled ON, the user will be prompted to confirm + commands will use the currently set print mode.

        prompt

        Toggle prompting for filenames during operation + of the mget and mput commands.

        When toggled ON, the user will be prompted to confirm the transfer of each file during these commands. When toggled OFF, all specified files will be transferred without prompting. -

        put <local file name> [remote file name]

        Copy the file called local file name from the +

        put <local file name> [remote file name]

        Copy the file called local file name from the machine running the client to the server. If specified, - name the remote copy remote file name. Note that all transfers - in smbclient are binary. See also the lowercase command. -

        queue

        Displays the print queue, showing the job id, - name, size and current status.

        quit

        See the exit command.

        rd <directory name>

        See the rmdir command.

        recurse

        Toggle directory recursion for the commands mget - and mput.

        When toggled ON, these commands will process all directories + name the remote copy remote file name. Note that all transfers + in smbclient are binary. See also the lowercase command. +

        queue

        Displays the print queue, showing the job id, + name, size and current status.

        quit

        See the exit command.

        rd <directory name>

        See the rmdir command.

        recurse

        Toggle directory recursion for the commands mget + and mput.

        When toggled ON, these commands will process all directories in the source directory (i.e., the directory they are copying from ) and will recurse into any that match the mask specified to the command. Only files that match the mask specified using the mask command will be retrieved. See also the mask command. -

        When recursion is toggled OFF, only files from the current +

        When recursion is toggled OFF, only files from the current working directory on the source machine that match the mask specified to the mget or mput commands will be copied, and any mask specified - using the mask command will be ignored.

        rm <mask>

        Remove all files matching mask from the current - working directory on the server.

        rmdir <directory name>

        Remove the specified directory (user access - privileges permitting) from the server.

        setmode <filename> <perm=[+|\-]rsha>

        A version of the DOS attrib command to set - file permissions. For example:

        setmode myfile +r

        would make myfile read only.

        symlink source destination

        This command depends on the server supporting the CIFS + using the mask command will be ignored.

        rm <mask>

        Remove all files matching mask from the current + working directory on the server.

        rmdir <directory name>

        Remove the specified directory (user access + privileges permitting) from the server.

        setmode <filename> <perm=[+|\-]rsha>

        A version of the DOS attrib command to set + file permissions. For example:

        setmode myfile +r

        would make myfile read only.

        symlink source destination

        This command depends on the server supporting the CIFS UNIX extensions and will fail if the server does not. The client requests that the server create a symbolic hard link between the source and destination files. The source file must not exist. Note that the server will not create a link to any path that lies outside the currently connected share. This is enforced by the Samba server. -

        tar <c|x>[IXbgNa]

        Performs a tar operation - see the -T - command line option above. Behavior may be affected +

        tar <c|x>[IXbgNa]

        Performs a tar operation - see the -T + command line option above. Behavior may be affected by the tarmode command (see below). Using g (incremental) and N - (newer) will affect tarmode settings. Note that using the "-" option + (newer) will affect tarmode settings. Note that using the "-" option with tar x may not work - use the command line option instead. -

        blocksize <blocksize>

        Blocksize. Must be followed by a valid (greater +

        blocksize <blocksize>

        Blocksize. Must be followed by a valid (greater than zero) blocksize. Causes tar file to be written out in - blocksize*TBLOCK (usually 512 byte) blocks.

        tarmode <full|inc|reset|noreset>

        Changes tar's behavior with regard to archive + blocksize*TBLOCK (usually 512 byte) blocks.

        tarmode <full|inc|reset|noreset>

        Changes tar's behavior with regard to archive bits. In full mode, tar will back up everything regardless of the archive bit setting (this is the default mode). In incremental mode, tar will only back up files with the archive bit set. In reset mode, tar will reset the archive bit on all files it backs up (implies - read/write share).

        NOTES

        Some servers are fussy about the case of supplied usernames, + read/write share).

        NOTES

        Some servers are fussy about the case of supplied usernames, passwords, share names (AKA service names) and machine names. If you fail to connect try giving all parameters in uppercase. -

        It is often necessary to use the -n option when connecting +

        It is often necessary to use the -n option when connecting to some types of servers. For example OS/2 LanManager insists on a valid NetBIOS name being used, so you need to supply a valid - name that would be known to the server.

        smbclient supports long file names where the server - supports the LANMAN2 protocol or above.

        ENVIRONMENT VARIABLES

        The variable USER may contain the + name that would be known to the server.

        smbclient supports long file names where the server + supports the LANMAN2 protocol or above.

        ENVIRONMENT VARIABLES

        The variable USER may contain the username of the person using the client. This information is used only if the protocol level is high enough to support - session-level passwords.

        The variable PASSWD may contain + session-level passwords.

        The variable PASSWD may contain the password of the person using the client. This information is used only if the protocol level is high enough to support - session-level passwords.

        The variable LIBSMB_PROG may contain + session-level passwords.

        The variable LIBSMB_PROG may contain the path, executed with system(), which the client should connect to instead of connecting to a server. This functionality is primarily intended as a development aid, and works best when using a LMHOSTS - file

        INSTALLATION

        The location of the client program is a matter for + file

        INSTALLATION

        The location of the client program is a matter for individual system administrators. The following are thus - suggestions only.

        It is recommended that the smbclient software be installed - in the /usr/local/samba/bin/ or /usr/samba/bin/ directory, this directory readable + suggestions only.

        It is recommended that the smbclient software be installed + in the /usr/local/samba/bin/ or + /usr/samba/bin/ directory, this directory readable by all, writeable only by root. The client program itself should - be executable by all. The client should NOT be - setuid or setgid!

        The client log files should be put in a directory readable - and writeable only by the user.

        To test the client, you will need to know the name of a - running SMB/CIFS server. It is possible to run smbd(8) - as an ordinary user - running that server as a daemon + be executable by all. The client should NOT be + setuid or setgid!

        The client log files should be put in a directory readable + and writeable only by the user.

        To test the client, you will need to know the name of a + running SMB/CIFS server. It is possible to run smbd(8) as an ordinary user - running that server as a daemon on a user-accessible port (typically any port number over 1024) - would provide a suitable test server.

        DIAGNOSTICS

        Most diagnostics issued by the client are logged in a + would provide a suitable test server.

        DIAGNOSTICS

        Most diagnostics issued by the client are logged in a specified log file. The log file name is specified at compile time, - but may be overridden on the command line.

        The number and nature of diagnostics available depends + but may be overridden on the command line.

        The number and nature of diagnostics available depends on the debug level used by the client. If you have problems, - set the debug level to 3 and peruse the log files.

        VERSION

        This man page is correct for version 2.2 of - the Samba suite.

        AUTHOR

        The original Samba software and related utilities + set the debug level to 3 and peruse the log files.

        VERSION

        This man page is correct for version 2.2 of the Samba suite.

        AUTHOR

        The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar - to the way the Linux kernel is developed.

        The original Samba man pages were written by Karl Auer. + to the way the Linux kernel is developed.

        The original Samba man pages were written by Karl Auer. The man page sources were converted to YODL format (another - excellent piece of Open Source software, available at - ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 + excellent piece of Open Source software, available at + ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 release by Jeremy Allison. The conversion to DocBook for - Samba 2.2 was done by Gerald Carter

        \ No newline at end of file + Samba 2.2 was done by Gerald Carter. The conversion to DocBook XML 4.2 for Samba 3.0 + was done by Alexander Bokovoy.

        diff --git a/docs/htmldocs/smbcontrol.1.html b/docs/htmldocs/smbcontrol.1.html index 12662dcc04..21344b9ade 100644 --- a/docs/htmldocs/smbcontrol.1.html +++ b/docs/htmldocs/smbcontrol.1.html @@ -1,385 +1,71 @@ - -smbcontrol

        smbcontrol

        Name

        smbcontrol -- send messages to smbd, nmbd or winbindd processes

        Synopsis

        smbcontrol [-i]

        smbcontrol [destination] [message-type] [parameter]

        DESCRIPTION

        This tool is part of the Samba suite.

        smbcontrol is a very small program, which - sends messages to an smbd(8), - an nmbd(8) - or a winbindd(8) - daemon running on the system.

        OPTIONS

        -i

        Run interactively. Individual commands +smbcontrol

        Name

        smbcontrol — send messages to smbd, nmbd or winbindd processes

        Synopsis

        smbcontrol [-i] [-s]

        smbcontrol [destination] [message-type] [parameter]

        DESCRIPTION

        This tool is part of the Samba(7) suite.

        smbcontrol is a very small program, which + sends messages to a smbd(8), a nmbd(8), or a winbindd(8) daemon running on the system.

        OPTIONS

        -h|--help

        Print a summary of command line options. +

        -s <configuration file>

        The file specified contains the +configuration details required by the server. The +information in this file includes server-specific +information such as what printcap file to use, as well +as descriptions of all the services that the server is +to provide. See +smb.conf(5) for more information. +The default configuration file name is determined at +compile time.

        -i

        Run interactively. Individual commands of the form destination message-type parameters can be entered - on STDIN. An empty command line or a "q" will quit the - program.

        destination

        One of nmbd - smbd or a process ID.

        The smbd destination causes the - message to "broadcast" to all smbd daemons.

        The nmbd destination causes the + on STDIN. An empty command line or a "q" will quit the + program.

        destination

        One of nmbd, smbd or a process ID.

        The smbd destination causes the + message to "broadcast" to all smbd daemons.

        The nmbd destination causes the message to be sent to the nmbd daemon specified in the - nmbd.pid file.

        If a single process ID is given, the message is sent - to only that process.

        message-type

        One of: close-share, - debug, - force-election, ping - , profile, debuglevel, profilelevel, - or printnotify.

        The close-share message-type sends a - message to smbd which will then close the client connections to - the named share. Note that this doesn't affect client connections - to any other shares. This message-type takes an argument of the - share name for which client connections will be closed, or the - "*" character which will close all currently open shares. - This may be useful if you made changes to the access controls on the share. - This message can only be sent to smbd.

        The debug message-type allows - the debug level to be set to the value specified by the - parameter. This can be sent to any of the destinations.

        The force-election message-type can only be - sent to the nmbd destination. This message - causes the nmbd daemon to force a new browse - master election.

        The ping message-type sends the - number of "ping" messages specified by the parameter and waits - for the same number of reply "pong" messages. This can be sent to - any of the destinations.

        The profile message-type sends a - message to an smbd to change the profile settings based on the - parameter. The parameter can be "on" to turn on profile stats - collection, "off" to turn off profile stats collection, "count" - to enable only collection of count stats (time stats are - disabled), and "flush" to zero the current profile stats. This can - be sent to any smbd or nmbd destinations.

        The debuglevel message-type sends - a "request debug level" message. The current debug level setting - is returned by a "debuglevel" message. This can be - sent to any of the destinations.

        The profilelevel message-type sends - a "request profile level" message. The current profile level - setting is returned by a "profilelevel" message. This can be sent - to any smbd or nmbd destinations.

        The printnotify message-type sends a - message to smbd which in turn sends a printer notify message to - any Windows NT clients connected to a printer. This message-type - takes the following arguments: - -

        queuepause printername

        Send a queue pause change notify - message to the printer specified.

        queueresume printername

        Send a queue resume change notify - message for the printer specified.

        jobpause printername unixjobid

        Send a job pause change notify - message for the printer and unix jobid - specified.

        jobresume printername unixjobid

        Send a job resume change notify - message for the printer and unix jobid - specified.

        jobdelete printername unixjobid

        Send a job delete change notify - message for the printer and unix jobid - specified.

        - - Note that this message only sends notification that an - event has occured. It doesn't actually cause the - event to happen. - - This message can only be sent to smbd. -

        parameters

        any parameters required for the message-type

        VERSION

        This man page is correct for version 2.2 of - the Samba suite.

        SEE ALSO

        nmbd(8), - and smbd(8). -

        AUTHOR

        The original Samba software and related utilities + nmbd.pid file.

        If a single process ID is given, the message is sent + to only that process.

        message-type

        Type of message to send. See + the section MESSAGE-TYPES for details. +

        parameters

        any parameters required for the message-type

        MESSAGE-TYPES

        Available message types are:

        close-share

        Order smbd to close the client + connections to the named share. Note that this doesn't affect client + connections to any other shares. This message-type takes an argument of the + share name for which client connections will be closed, or the + "*" character which will close all currently open shares. + This may be useful if you made changes to the access controls on the share. + This message can only be sent to smbd.

        debug

        Set debug level to the value specified by the + parameter. This can be sent to any of the destinations.

        force-election

        This message causes the nmbd daemon to + force a new browse master election.

        ping

        + Send specified number of "ping" messages and + wait for the same number of reply "pong" messages. This can be sent to + any of the destinations.

        profile

        Change profile settings of a daemon, based on the + parameter. The parameter can be "on" to turn on profile stats + collection, "off" to turn off profile stats collection, "count" + to enable only collection of count stats (time stats are + disabled), and "flush" to zero the current profile stats. This can + be sent to any smbd or nmbd destinations.

        debuglevel

        + Request debuglevel of a certain daemon and write it to stdout. This + can be sent to any of the destinations.

        profilelevel

        + Request profilelevel of a certain daemon and write it to stdout. + This can be sent to any smbd or nmbd destinations.

        printnotify

        + Order smbd to send a printer notify message to any Windows NT clients + connected to a printer. This message-type takes the following arguments: +

        queuepause printername

        Send a queue pause change notify + message to the printer specified.

        queueresume printername

        Send a queue resume change notify + message for the printer specified.

        jobpause printername unixjobid

        Send a job pause change notify + message for the printer and unix jobid + specified.

        jobresume printername unixjobid

        Send a job resume change notify + message for the printer and unix jobid + specified.

        jobdelete printername unixjobid

        Send a job delete change notify + message for the printer and unix jobid + specified.

        + Note that this message only sends notification that an + event has occured. It doesn't actually cause the + event to happen. +

        This message can only be sent to smbd.

        samsync

        Order smbd to synchronise sam database from PDC (being BDC). Can only be sent to smbd.

        Note

        Not working at the moment

        samrepl

        Send sam replication message, with specified serial. Can only be sent to smbd. Should not be used manually.

        dmalloc-mark

        Set a mark for dmalloc. Can be sent to both smbd and nmbd. Only available if samba is built with dmalloc support.

        dmalloc-log-changed

        + Dump the pointers that have changed since the mark set by dmalloc-mark. + Can be sent to both smbd and nmbd. Only available if samba is built with dmalloc support.

        shutdown

        Shut down specified daemon. Can be sent to both smbd and nmbd.

        pool-usage

        Print a human-readable description of all + talloc(pool) memory usage by the specified daemon/process. Available + for both smbd and nmbd.

        drvupgrade

        Force clients of printers using specified driver + to update their local version of the driver. Can only be + sent to smbd.

        VERSION

        This man page is correct for version 3.0 of + the Samba suite.

        SEE ALSO

        nmbd(8) and smbd(8).

        AUTHOR

        The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar - to the way the Linux kernel is developed.

        The original Samba man pages were written by Karl Auer. + to the way the Linux kernel is developed.

        The original Samba man pages were written by Karl Auer. The man page sources were converted to YODL format (another - excellent piece of Open Source software, available at - ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 + excellent piece of Open Source software, available at + ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 release by Jeremy Allison. The conversion to DocBook for - Samba 2.2 was done by Gerald Carter

        \ No newline at end of file + Samba 2.2 was done by Gerald Carter. The conversion to DocBook XML 4.2 for + Samba 3.0 was done by Alexander Bokovoy.

        diff --git a/docs/htmldocs/smbd.8.html b/docs/htmldocs/smbd.8.html index 65f5f95b8d..5b71bd7196 100644 --- a/docs/htmldocs/smbd.8.html +++ b/docs/htmldocs/smbd.8.html @@ -1,780 +1,183 @@ - -smbd

        smbd

        Name

        smbd -- server to provide SMB/CIFS services to clients

        DESCRIPTION

        This program is part of the Samba suite.

        smbd is the server daemon that +smbd

        Name

        smbd — server to provide SMB/CIFS services to clients

        Synopsis

        smbd [-D] [-F] [-S] [-i] [-h] [-V] [-b] [-d <debug level>] [-l <log directory>] [-p <port number>] [-O <socket option>] [-s <configuration file>]

        DESCRIPTION

        This program is part of the Samba(7) suite.

        smbd is the server daemon that provides filesharing and printing services to Windows clients. The server provides filespace and printer services to clients using the SMB (or CIFS) protocol. This is compatible with the LanManager protocol, and can service LanManager clients. These include MSCLIENT 3.0 for DOS, Windows for Workgroups, Windows 95/98/ME, Windows NT, Windows 2000, - OS/2, DAVE for Macintosh, and smbfs for Linux.

        An extensive description of the services that the + OS/2, DAVE for Macintosh, and smbfs for Linux.

        An extensive description of the services that the server can provide is given in the man page for the configuration file controlling the attributes of those - services (see smb.conf(5) - . This man page will not describe the + services (see smb.conf(5). This man page will not describe the services, but will concentrate on the administrative aspects - of running the server.

        Please note that there are significant security - implications to running this server, and the smb.conf(5) - manpage should be regarded as mandatory reading before - proceeding with installation.

        A session is created whenever a client requests one. + of running the server.

        Please note that there are significant security + implications to running this server, and the smb.conf(5) manual page should be regarded as mandatory reading before + proceeding with installation.

        A session is created whenever a client requests one. Each client gets a copy of the server for each session. This copy then services all connections made by the client during that session. When all connections from its client are closed, - the copy of the server for that client terminates.

        The configuration file, and any files that it includes, + the copy of the server for that client terminates.

        The configuration file, and any files that it includes, are automatically reloaded every minute, if they change. You can force a reload by sending a SIGHUP to the server. Reloading the configuration file will not affect connections to any service that is already established. Either the user will have to - disconnect from the service, or smbd killed and restarted.

        OPTIONS

        -D

        If specified, this parameter causes + disconnect from the service, or smbd killed and restarted.

        OPTIONS

        -D

        If specified, this parameter causes the server to operate as a daemon. That is, it detaches itself and runs in the background, fielding requests on the appropriate port. Operating the server as a - daemon is the recommended way of running smbd for + daemon is the recommended way of running smbd for servers that provide more than casual use file and - print services. This switch is assumed if smbd - is executed on the command line of a shell. -

        -F

        If specified, this parameter causes - the main smbd process to not daemonize, + print services. This switch is assumed if smbd + is executed on the command line of a shell. +

        -F

        If specified, this parameter causes + the main smbd process to not daemonize, i.e. double-fork and disassociate with the terminal. Child processes are still created as normal to service each connection request, but the main process does not exit. This operation mode is suitable for running - smbd under process supervisors such - as supervise and svscan - from Daniel J. Bernstein's daemontools + smbd under process supervisors such + as supervise and svscan + from Daniel J. Bernstein's daemontools package, or the AIX process monitor. -

        -S

        If specified, this parameter causes - smbd to log to standard output rather - than a file.

        -i

        If this parameter is specified it causes the - server to run "interactively", not as a daemon, even if the +

        -S

        If specified, this parameter causes + smbd to log to standard output rather + than a file.

        -i

        If this parameter is specified it causes the + server to run "interactively", not as a daemon, even if the server is executed on the command line of a shell. Setting this parameter negates the implicit deamon mode when run from the - command line. smbd also logs to standard - output, as if the -S parameter had been + command line. smbd also logs to standard + output, as if the -S parameter had been given. -

        -h

        Prints the help information (usage) - for smbd.

        -V

        Prints the version number for - smbd.

        -b

        Prints information about how - Samba was built.

        -d <debug level>

        debuglevel is an integer - from 0 to 10. The default value if this parameter is - not specified is zero.

        The higher this value, the more detail will be - logged to the log files about the activities of the - server. At level 0, only critical errors and serious - warnings will be logged. Level 1 is a reasonable level for - day to day running - it generates a small amount of - information about operations carried out.

        Levels above 1 will generate considerable - amounts of log data, and should only be used when - investigating a problem. Levels above 3 are designed for - use only by developers and generate HUGE amounts of log - data, most of which is extremely cryptic.

        Note that specifying this parameter here will - override the log - level parameter in the smb.conf(5) file.

        -l <log directory>

        If specified, - log directory - specifies a log directory into which the "log.smbd" log +

        -V

        Prints the version number for +smbd.

        -s <configuration file>

        The file specified contains the +configuration details required by the server. The +information in this file includes server-specific +information such as what printcap file to use, as well +as descriptions of all the services that the server is +to provide. See +smb.conf(5) for more information. +The default configuration file name is determined at +compile time.

        -d|--debug=debuglevel

        debuglevel is an integer +from 0 to 10. The default value if this parameter is +not specified is zero.

        The higher this value, the more detail will be +logged to the log files about the activities of the +server. At level 0, only critical errors and serious +warnings will be logged. Level 1 is a reasonable level for +day to day running - it generates a small amount of +information about operations carried out.

        Levels above 1 will generate considerable +amounts of log data, and should only be used when +investigating a problem. Levels above 3 are designed for +use only by developers and generate HUGE amounts of log +data, most of which is extremely cryptic.

        Note that specifying this parameter here will +override the log +level parameter in the +smb.conf(5) file.

        -l|--logfile=logbasename

        File name for log/debug files. The extension +".client" will be appended. The log file is +never removed by the client. +

        -h|--help

        Print a summary of command line options. +

        -b

        Prints information about how + Samba was built.

        -l <log directory>

        If specified, + log directory + specifies a log directory into which the "log.smbd" log file will be created for informational and debug messages from the running server. The log file generated is never removed by the server although - its size may be controlled by the max log size - option in the smb.conf(5) file. Beware: - If the directory specified does not exist, smbd + its size may be controlled by the max log size + option in the smb.conf(5) file. Beware: + If the directory specified does not exist, smbd will log to the default debug log location defined at compile time. -

        The default log directory is specified at - compile time.

        -O <socket options>

        See the socket options - parameter in the smb.conf(5) - file for details.

        -p <port number>

        port number is a positive integer +

        The default log directory is specified at + compile time.

        -p <port number>

        port number is a positive integer value. The default value if this parameter is not - specified is 139.

        This number is the port number that will be + specified is 139.

        This number is the port number that will be used when making connections to the server from client software. The standard (well-known) port number for the SMB over TCP is 139, hence the default. If you wish to run the server as an ordinary user rather than as root, most systems will require you to use a port number greater than 1024 - ask your system administrator - for help if you are in this situation.

        In order for the server to be useful by most + for help if you are in this situation.

        In order for the server to be useful by most clients, should you configure it on a port other than 139, you will require port redirection services on port 139, details of which are outlined in rfc1002.txt - section 4.3.5.

        This parameter is not normally specified except - in the above situation.

        -s <configuration file>

        The file specified contains the - configuration details required by the server. The - information in this file includes server-specific - information such as what printcap file to use, as well - as descriptions of all the services that the server is - to provide. See smb.conf(5) for more information. - The default configuration file name is determined at - compile time.

        FILES

        /etc/inetd.conf

        If the server is to be run by the - inetd meta-daemon, this file + section 4.3.5.

        This parameter is not normally specified except + in the above situation.

        FILES

        /etc/inetd.conf

        If the server is to be run by the + inetd meta-daemon, this file must contain suitable startup information for the - meta-daemon. See the UNIX_INSTALL.html + meta-daemon. See the "How to Install and Test SAMBA" document for details. -

        /etc/rc

        or whatever initialization script your - system uses).

        If running the server as a daemon at startup, +

        /etc/rc

        or whatever initialization script your + system uses).

        If running the server as a daemon at startup, this file will need to contain an appropriate startup - sequence for the server. See the UNIX_INSTALL.html - document for details.

        /etc/services

        If running the server via the - meta-daemon inetd, this file + sequence for the server. See the "How to Install and Test SAMBA" + document for details.

        /etc/services

        If running the server via the + meta-daemon inetd, this file must contain a mapping of service name (e.g., netbios-ssn) to service port (e.g., 139) and protocol type (e.g., tcp). - See the UNIX_INSTALL.html - document for details.

        /usr/local/samba/lib/smb.conf

        This is the default location of the - smb.conf - server configuration file. Other common places that systems - install this file are /usr/samba/lib/smb.conf - and /etc/smb.conf.

        This file describes all the services the server - is to make available to clients. See smb.conf(5) for more information.

        LIMITATIONS

        On some systems smbd cannot change uid back + See the "How to Install and Test SAMBA" + document for details.

        /usr/local/samba/lib/smb.conf

        This is the default location of the smb.conf(5) server configuration file. Other common places that systems + install this file are /usr/samba/lib/smb.conf + and /etc/samba/smb.conf.

        This file describes all the services the server + is to make available to clients. See smb.conf(5) for more information.

        LIMITATIONS

        On some systems smbd cannot change uid back to root after a setuid() call. Such systems are called trapdoor uid systems. If you have such a system, you will be unable to connect from a client (such as a PC) as two different users at once. Attempts to connect the second user will result in access denied or - similar.

        ENVIRONMENT VARIABLES

        PRINTER

        If no printer name is specified to + similar.

        ENVIRONMENT VARIABLES

        PRINTER

        If no printer name is specified to printable services, most systems will use the value of - this variable (or lp if this variable is + this variable (or lp if this variable is not defined) as the name of the printer to use. This - is not specific to the server, however.

        PAM INTERACTION

        Samba uses PAM for authentication (when presented with a plaintext + is not specific to the server, however.

        PAM INTERACTION

        Samba uses PAM for authentication (when presented with a plaintext password), for account checking (is this account disabled?) and for session management. The degree too which samba supports PAM is restricted - by the limitations of the SMB protocol and the - obey pam restricions - smb.conf paramater. When this is set, the following restrictions apply: -

        • Account Validation: All accesses to a + by the limitations of the SMB protocol and the obey + pam restricions smb.conf(5) paramater. When this is set, the following restrictions apply: +

          • Account Validation: All accesses to a samba server are checked against PAM to see if the account is vaild, not disabled and is permitted to login at this time. This also applies to encrypted logins. -

          • Session Management: When not using share +

          • Session Management: When not using share level secuirty, users must pass PAM's session checks before access is granted. Note however, that this is bypassed in share level secuirty. Note also that some older pam configuration files may need a line added for session support. -

          VERSION

          This man page is correct for version 3.0 of - the Samba suite.

          DIAGNOSTICS

          Most diagnostics issued by the server are logged +

        VERSION

        This man page is correct for version 3.0 of + the Samba suite.

        DIAGNOSTICS

        Most diagnostics issued by the server are logged in a specified log file. The log file name is specified - at compile time, but may be overridden on the command line.

        The number and nature of diagnostics available depends + at compile time, but may be overridden on the command line.

        The number and nature of diagnostics available depends on the debug level used by the server. If you have problems, set - the debug level to 3 and peruse the log files.

        Most messages are reasonably self-explanatory. Unfortunately, + the debug level to 3 and peruse the log files.

        Most messages are reasonably self-explanatory. Unfortunately, at the time this man page was created, there are too many diagnostics available in the source code to warrant describing each and every diagnostic. At this stage your best bet is still to grep the source code and inspect the conditions that gave rise to the - diagnostics you are seeing.

        SIGNALS

        Sending the smbd a SIGHUP will cause it to - reload its smb.conf configuration - file within a short period of time.

        To shut down a user's smbd process it is recommended - that SIGKILL (-9) NOT + diagnostics you are seeing.

        SIGNALS

        Sending the smbd a SIGHUP will cause it to + reload its smb.conf configuration + file within a short period of time.

        To shut down a user's smbd process it is recommended + that SIGKILL (-9) NOT be used, except as a last resort, as this may leave the shared memory area in an inconsistent state. The safe way to terminate - an smbd is to send it a SIGTERM (-15) signal and wait for - it to die on its own.

        The debug log level of smbd may be raised - or lowered using smbcontrol(1) - program (SIGUSR[1|2] signals are no longer used in - Samba 2.2). This is to allow transient problems to be diagnosed, - whilst still running at a normally low log level.

        Note that as the signal handlers send a debug write, - they are not re-entrant in smbd. This you should wait until - smbd is in a state of waiting for an incoming SMB before + an smbd is to send it a SIGTERM (-15) signal and wait for + it to die on its own.

        The debug log level of smbd may be raised + or lowered using smbcontrol(1) program (SIGUSR[1|2] signals are no longer + used since Samba 2.2). This is to allow transient problems to be diagnosed, + whilst still running at a normally low log level.

        Note that as the signal handlers send a debug write, + they are not re-entrant in smbd. This you should wait until + smbd is in a state of waiting for an incoming SMB before issuing them. It is possible to make the signal handlers safe by un-blocking the signals before the select call and re-blocking - them after, however this would affect performance.

        SEE ALSO

        hosts_access(5), inetd(8), - nmbd(8), - smb.conf(5) - , smbclient(1) - , testparm(1), testprns(1), and the Internet RFC's - rfc1001.txt, rfc1002.txt. + them after, however this would affect performance.

        SEE ALSO

        hosts_access(5), inetd(8), nmbd(8), smb.conf(5), smbclient(1), testparm(1), testprns(1), and the + Internet RFC's rfc1001.txt, rfc1002.txt. In addition the CIFS (formerly SMB) specification is available - as a link from the Web page - http://samba.org/cifs/.

        AUTHOR

        The original Samba software and related utilities + as a link from the Web page + http://samba.org/cifs/.

        AUTHOR

        The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar - to the way the Linux kernel is developed.

        The original Samba man pages were written by Karl Auer. + to the way the Linux kernel is developed.

        The original Samba man pages were written by Karl Auer. The man page sources were converted to YODL format (another - excellent piece of Open Source software, available at - ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 + excellent piece of Open Source software, available at + ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 release by Jeremy Allison. The conversion to DocBook for - Samba 2.2 was done by Gerald Carter

        \ No newline at end of file + Samba 2.2 was done by Gerald Carter. The conversion to DocBook XML 4.2 for + Samba 3.0 was done by Alexander Bokovoy.

        diff --git a/docs/htmldocs/smbmnt.8.html b/docs/htmldocs/smbmnt.8.html index 06b9fb1fd3..8caedac3f5 100644 --- a/docs/htmldocs/smbmnt.8.html +++ b/docs/htmldocs/smbmnt.8.html @@ -1,179 +1,24 @@ - -smbmnt

        smbmnt

        Name

        smbmnt -- helper utility for mounting SMB filesystems

        Synopsis

        smbmnt {mount-point} [-s <share>] [-r] [-u <uid>] [-g <gid>] [-f <mask>] [-d <mask>] [-o <options>]

        DESCRIPTION

        smbmnt is a helper application used +smbmnt

        Name

        smbmnt — helper utility for mounting SMB filesystems

        Synopsis

        smbmnt {mount-point} [-s <share>] [-r] [-u <uid>] [-g <gid>] [-f <mask>] [-d <mask>] [-o <options>] [-h]

        DESCRIPTION

        smbmnt is a helper application used by the smbmount program to do the actual mounting of SMB shares. - smbmnt can be installed setuid root if you want - normal users to be able to mount their SMB shares.

        A setuid smbmnt will only allow mounts on directories owned - by the user, and that the user has write permission on.

        The smbmnt program is normally invoked - by smbmount(8) - . It should not be invoked directly by users.

        smbmount searches the normal PATH for smbmnt. You must ensure - that the smbmnt version in your path matches the smbmount used.

        OPTIONS

        -r

        mount the filesystem read-only -

        -u uid

        specify the uid that the files will - be owned by

        -g gid

        specify the gid that the files will be - owned by

        -f mask

        specify the octal file mask applied -

        -d mask

        specify the octal directory mask - applied

        -o options

        list of options that are passed as-is to smbfs, if this + smbmnt can be installed setuid root if you want + normal users to be able to mount their SMB shares.

        A setuid smbmnt will only allow mounts on directories owned + by the user, and that the user has write permission on.

        The smbmnt program is normally invoked + by smbmount(8). It should not be invoked directly by users.

        smbmount searches the normal PATH for smbmnt. You must ensure + that the smbmnt version in your path matches the smbmount used.

        OPTIONS

        -r

        mount the filesystem read-only +

        -u uid

        specify the uid that the files will + be owned by

        -g gid

        specify the gid that the files will be + owned by

        -f mask

        specify the octal file mask applied +

        -d mask

        specify the octal directory mask + applied

        -o options

        + list of options that are passed as-is to smbfs, if this command is run on a 2.4 or higher Linux kernel. -

        AUTHOR

        Volker Lendecke, Andrew Tridgell, Michael H. Warfield - and others.

        The current maintainer of smbfs and the userspace - tools smbmount, smbumount, - and smbmnt is Urban Widmark. - The SAMBA Mailing list +

        -h|--help

        Print a summary of command line options. +

        AUTHOR

        Volker Lendecke, Andrew Tridgell, Michael H. Warfield + and others.

        The current maintainer of smbfs and the userspace + tools smbmount, smbumount, + and smbmnt is Urban Widmark. + The SAMBA Mailing list is the preferred place to ask questions regarding these programs. -

        The conversion of this manpage for Samba 2.2 was performed - by Gerald Carter

        \ No newline at end of file +

        The conversion of this manpage for Samba 2.2 was performed + by Gerald Carter. The conversion to DocBook XML 4.2 for Samba 3.0 + was done by Alexander Bokovoy.

        diff --git a/docs/htmldocs/smbmount.8.html b/docs/htmldocs/smbmount.8.html index 81a3ac04b2..233dee51d7 100644 --- a/docs/htmldocs/smbmount.8.html +++ b/docs/htmldocs/smbmount.8.html @@ -1,321 +1,72 @@ - -smbmount

        smbmount

        Name

        smbmount -- mount an smbfs filesystem

        Synopsis

        smbmount {service} {mount-point} [-o options]

        DESCRIPTION

        smbmount mounts a Linux SMB filesystem. It - is usually invoked as mount.smbfs by - the mount(8) command when using the - "-t smbfs" option. This command only works in Linux, and the kernel must - support the smbfs filesystem.

        Options to smbmount are specified as a comma-separated +smbmount

        Name

        smbmount — mount an smbfs filesystem

        Synopsis

        smbmount {service} {mount-point} [-o options]

        DESCRIPTION

        smbmount mounts a Linux SMB filesystem. It + is usually invoked as mount.smbfs by + the mount(8) command when using the + "-t smbfs" option. This command only works in Linux, and the kernel must + support the smbfs filesystem.

        Options to smbmount are specified as a comma-separated list of key=value pairs. It is possible to send options other than those listed here, assuming that smbfs supports them. If you get mount failures, check your kernel log for errors on - unknown options.

        smbmount is a daemon. After mounting it keeps running until + unknown options.

        smbmount is a daemon. After mounting it keeps running until the mounted smbfs is umounted. It will log things that happen - when in daemon mode using the "machine name" smbmount, so - typically this output will end up in log.smbmount. The - smbmount process may also be called mount.smbfs.

        NOTE: smbmount - calls smbmnt(8) to do the actual mount. You - must make sure that smbmnt is in the path so - that it can be found.

        OPTIONS

        username=<arg>

        specifies the username to connect as. If - this is not given, then the environment variable USER is used. This option can also take the - form "user%password" or "user/workgroup" or - "user/workgroup%password" to allow the password and workgroup - to be specified as part of the username.

        password=<arg>

        specifies the SMB password. If this + when in daemon mode using the "machine name" smbmount, so + typically this output will end up in log.smbmount. The + smbmount process may also be called mount.smbfs.

        Note

        smbmount + calls smbmnt(8) to do the actual mount. You + must make sure that smbmnt is in the path so + that it can be found.

        OPTIONS

        username=<arg>

        specifies the username to connect as. If + this is not given, then the environment variable + USER is used. This option can also take the + form "user%password" or "user/workgroup" or + "user/workgroup%password" to allow the password and workgroup + to be specified as part of the username.

        password=<arg>

        specifies the SMB password. If this option is not given then the environment variable - PASSWD is used. If it can find - no password smbmount will prompt + PASSWD is used. If it can find + no password smbmount will prompt for a passeword, unless the guest option is - given.

        Note that passwords which contain the argument delimiter + given.

        + Note that passwords which contain the argument delimiter character (i.e. a comma ',') will failed to be parsed correctly on the command line. However, the same password defined in the PASSWD environment variable or a credentials file (see below) will be read correctly. -

        credentials=<filename>

        specifies a file that contains a username - and/or password. The format of the file is:

        		username = <value>
-		password = <value>
-
        -

        This is preferred over having passwords in plaintext in a - shared file, such as /etc/fstab. Be sure to protect any +

        credentials=<filename>

        specifies a file that contains a username and/or password. +The format of the file is: +

        +username = <value>
+password = <value>
+

        This is preferred over having passwords in plaintext in a + shared file, such as /etc/fstab. Be sure to protect any credentials file properly. -

        netbiosname=<arg>

        sets the source NetBIOS name. It defaults - to the local hostname.

        uid=<arg>

        sets the uid that will own all files on +

        krb

        Use kerberos (Active Directory).

        netbiosname=<arg>

        sets the source NetBIOS name. It defaults + to the local hostname.

        uid=<arg>

        sets the uid that will own all files on the mounted filesystem. It may be specified as either a username or a numeric uid. -

        gid=<arg>

        sets the gid that will own all files on +

        gid=<arg>

        sets the gid that will own all files on the mounted filesystem. It may be specified as either a groupname or a numeric - gid.

        port=<arg>

        sets the remote SMB port number. The default - is 139.

        fmask=<arg>

        sets the file mask. This determines the + gid.

        port=<arg>

        sets the remote SMB port number. The default + is 139.

        fmask=<arg>

        sets the file mask. This determines the permissions that remote files have in the local filesystem. - The default is based on the current umask.

        dmask=<arg>

        sets the directory mask. This determines the + This is not a umask, but the actual permissions for the files. + The default is based on the current umask.

        dmask=<arg>

        Sets the directory mask. This determines the permissions that remote directories have in the local filesystem. - The default is based on the current umask.

        debug=<arg>

        sets the debug level. This is useful for + This is not a umask, but the actual permissions for the directories. + The default is based on the current umask.

        debug=<arg>

        Sets the debug level. This is useful for tracking down SMB connection problems. A suggested value to start with is 4. If set too high there will be a lot of - output, possibly hiding the useful output.

        ip=<arg>

        sets the destination host or IP address. -

        workgroup=<arg>

        sets the workgroup on the destination

        sockopt=<arg>

        sets the TCP socket options. See the smb.conf - socket options option. -

        scope=<arg>

        sets the NetBIOS scope

        guest

        don't prompt for a password

        ro

        mount read-only

        rw

        mount read-write

        iocharset=<arg>

        sets the charset used by the Linux side for codepage + output, possibly hiding the useful output.

        ip=<arg>

        Sets the destination host or IP address. +

        workgroup=<arg>

        Sets the workgroup on the destination

        sockopt=<arg>

        Sets the TCP socket options. See the smb.conf(5) socket options option. +

        scope=<arg>

        Sets the NetBIOS scope

        guest

        Don't prompt for a password

        ro

        mount read-only

        rw

        mount read-write

        iocharset=<arg>

        + sets the charset used by the Linux side for codepage to charset translations (NLS). Argument should be the name of a charset, like iso8859-1. (Note: only kernel 2.4.0 or later) -

        codepage=<arg>

        sets the codepage the server uses. See the iocharset +

        codepage=<arg>

        + sets the codepage the server uses. See the iocharset option. Example value cp850. (Note: only kernel 2.4.0 or later) -

        ttl=<arg>

        sets how long a directory listing is cached in milliseconds +

        ttl=<arg>

        + sets how long a directory listing is cached in milliseconds (also affects visibility of file size and date changes). A higher value means that changes on the server take longer to be noticed but it can give @@ -324,141 +75,34 @@ CLASS="PARAMETER" like 10000ms (10 seconds) is probably more reasonable in many cases. (Note: only kernel 2.4.2 or later) -

        ENVIRONMENT VARIABLES

        The variable USER may contain the username of the +

        ENVIRONMENT VARIABLES

        The variable USER may contain the username of the person using the client. This information is used only if the protocol level is high enough to support session-level passwords. The variable can be used to set both username and - password by using the format username%password.

        The variable PASSWD may contain the password of the + password by using the format username%password.

        The variable PASSWD may contain the password of the person using the client. This information is used only if the protocol level is high enough to support session-level - passwords.

        The variable PASSWD_FILE may contain the pathname + passwords.

        The variable PASSWD_FILE may contain the pathname of a file to read the password from. A single line of input is - read and used as the password.

        BUGS

        Passwords and other options containing , can not be handled. + read and used as the password.

        BUGS

        Passwords and other options containing , can not be handled. For passwords an alternative way of passing them is in a credentials - file or in the PASSWD environment.

        The credentials file does not handle usernames or passwords with - leading space.

        One smbfs bug is important enough to mention here, even if it - is a bit misplaced:

        • Mounts sometimes stop working. This is usually + file or in the PASSWD environment.

          The credentials file does not handle usernames or passwords with + leading space.

          One smbfs bug is important enough to mention here, even if it + is a bit misplaced:

          • Mounts sometimes stop working. This is usually caused by smbmount terminating. Since smbfs needs smbmount to reconnect when the server disconnects, the mount will eventually go dead. An umount/mount normally fixes this. At least 2 ways to - trigger this bug are known.

          Note that the typical response to a bug report is suggestion + trigger this bug are known.

        Note that the typical response to a bug report is suggestion to try the latest version first. So please try doing that first, and always include which versions you use of relevant software - when reporting bugs (minimum: samba, kernel, distribution)

        SEE ALSO

        Documentation/filesystems/smbfs.txt in the linux kernel - source tree may contain additional options and information.

        FreeBSD also has a smbfs, but it is not related to smbmount

        For Solaris, HP-UX and others you may want to look at - smbsh(1) or at other - solutions, such as sharity or perhaps replacing the SMB server with - a NFS server.

        AUTHOR

        Volker Lendecke, Andrew Tridgell, Michael H. Warfield - and others.

        The current maintainer of smbfs and the userspace - tools smbmount, smbumount, - and smbmnt is Urban Widmark. - The SAMBA Mailing list + when reporting bugs (minimum: samba, kernel, distribution)

        SEE ALSO

        Documentation/filesystems/smbfs.txt in the linux kernel + source tree may contain additional options and information.

        FreeBSD also has a smbfs, but it is not related to smbmount

        For Solaris, HP-UX and others you may want to look at smbsh(1) or at other solutions, such as + Sharity or perhaps replacing the SMB server with a NFS server.

        AUTHOR

        Volker Lendecke, Andrew Tridgell, Michael H. Warfield + and others.

        The current maintainer of smbfs and the userspace + tools smbmount, smbumount, + and smbmnt is Urban Widmark. + The SAMBA Mailing list is the preferred place to ask questions regarding these programs. -

        The conversion of this manpage for Samba 2.2 was performed - by Gerald Carter

        \ No newline at end of file +

        The conversion of this manpage for Samba 2.2 was performed + by Gerald Carter. The conversion to DocBook XML 4.2 for Samba 3.0 + was done by Alexander Bokovoy.

        diff --git a/docs/htmldocs/smbpasswd.5.html b/docs/htmldocs/smbpasswd.5.html index ac3ab94691..556b637f4f 100644 --- a/docs/htmldocs/smbpasswd.5.html +++ b/docs/htmldocs/smbpasswd.5.html @@ -1,357 +1,89 @@ - -smbpasswd

        smbpasswd

        Name

        smbpasswd -- The Samba encrypted password file

        Synopsis

        smbpasswd

        DESCRIPTION

        This tool is part of the Samba suite.

        smbpasswd is the Samba encrypted password file. It contains +smbpasswd

        Name

        smbpasswd — The Samba encrypted password file

        Synopsis

        smbpasswd

        DESCRIPTION

        This tool is part of the Samba(7) suite.

        smbpasswd is the Samba encrypted password file. It contains the username, Unix user id and the SMB hashed passwords of the user, as well as account flag information and the time the password was last changed. This file format has been evolving with - Samba and has had several different formats in the past.

        FILE FORMAT

        The format of the smbpasswd file used by Samba 2.2 - is very similar to the familiar Unix passwd(5) + Samba and has had several different formats in the past.

        FILE FORMAT

        The format of the smbpasswd file used by Samba 2.2 + is very similar to the familiar Unix passwd(5) file. It is an ASCII file containing one line for each user. Each field ithin each line is separated from the next by a colon. Any entry beginning with '#' is ignored. The smbpasswd file contains the - following information for each user:

        name

        This is the user name. It must be a name that - already exists in the standard UNIX passwd file.

        uid

        This is the UNIX uid. It must match the uid + following information for each user:

        name

        This is the user name. It must be a name that + already exists in the standard UNIX passwd file.

        uid

        This is the UNIX uid. It must match the uid field for the same user entry in the standard UNIX passwd file. If this does not match then Samba will refuse to recognize this smbpasswd file entry as being valid for a user. -

        Lanman Password Hash

        This is the LANMAN hash of the user's password, +

        Lanman Password Hash

        This is the LANMAN hash of the user's password, encoded as 32 hex digits. The LANMAN hash is created by DES encrypting a well known string with the user's password as the DES key. This is the same password used by Windows 95/98 machines. Note that this password hash is regarded as weak as it is vulnerable to dictionary attacks and if two users choose the same password this entry will be identical (i.e. the password - is not "salted" as the UNIX password is). If the user has a - null password this field will contain the characters "NO PASSWORD" + is not "salted" as the UNIX password is). If the user has a + null password this field will contain the characters "NO PASSWORD" as the start of the hex string. If the hex string is equal to 32 'X' characters then the user's account is marked as - disabled and the user will not be able to - log onto the Samba server.

        WARNING !! Note that, due to + disabled and the user will not be able to + log onto the Samba server.

        WARNING !! Note that, due to the challenge-response nature of the SMB/CIFS authentication protocol, anyone with a knowledge of this password hash will be able to impersonate the user on the network. For this - reason these hashes are known as plain text - equivalents and must NOT be made + reason these hashes are known as plain text + equivalents and must NOT be made available to anyone but the root user. To protect these passwords the smbpasswd file is placed in a directory with read and traverse access only to the root user and the smbpasswd file itself must be set to be read/write only by root, with no - other access.

        NT Password Hash

        This is the Windows NT hash of the user's + other access.

        NT Password Hash

        This is the Windows NT hash of the user's password, encoded as 32 hex digits. The Windows NT hash is created by taking the user's password as represented in 16-bit, little-endian UNICODE and then applying the MD4 - (internet rfc1321) hashing algorithm to it.

        This password hash is considered more secure than + (internet rfc1321) hashing algorithm to it.

        This password hash is considered more secure than the LANMAN Password Hash as it preserves the case of the password and uses a much higher quality hashing algorithm. However, it is still the case that if two users choose the same password this entry will be identical (i.e. the password is - not "salted" as the UNIX password is).

        WARNING !!. Note that, due to + not "salted" as the UNIX password is).

        WARNING !!. Note that, due to the challenge-response nature of the SMB/CIFS authentication protocol, anyone with a knowledge of this password hash will be able to impersonate the user on the network. For this - reason these hashes are known as plain text - equivalents and must NOT be made + reason these hashes are known as plain text + equivalents and must NOT be made available to anyone but the root user. To protect these passwords the smbpasswd file is placed in a directory with read and traverse access only to the root user and the smbpasswd file itself must be set to be read/write only by root, with no - other access.

        Account Flags

        This section contains flags that describe + other access.

        Account Flags

        This section contains flags that describe the attributes of the users account. In the Samba 2.2 release this field is bracketed by '[' and ']' characters and is always 13 characters in length (including the '[' and ']' characters). - The contents of this field may be any of the characters. -

        • U - This means - this is a "User" account, i.e. an ordinary user. Only User + The contents of this field may be any of the following characters: +

          • U - This means + this is a "User" account, i.e. an ordinary user. Only User and Workstation Trust accounts are currently supported - in the smbpasswd file.

          • N - This means the + in the smbpasswd file.

          • N - This means the account has no password (the passwords in the fields LANMAN Password Hash and NT Password Hash are ignored). Note that this - will only allow users to log on with no password if the null passwords parameter is set in the smb.conf(5) - config file.

          • D - This means the account - is disabled and no SMB/CIFS logins will be allowed for - this user.

          • W - This means this account - is a "Workstation Trust" account. This kind of account is used + will only allow users to log on with no password if the + null passwords parameter is set in the smb.conf(5) config file.

          • D - This means the account + is disabled and no SMB/CIFS logins will be allowed for this user.

          • W - This means this account + is a "Workstation Trust" account. This kind of account is used in the Samba PDC code stream to allow Windows NT Workstations - and Servers to join a Domain hosted by a Samba PDC.

          Other flags may be added as the code is extended in future. - The rest of this field space is filled in with spaces.

        Last Change Time

        This field consists of the time the account was + and Servers to join a Domain hosted by a Samba PDC.

        Other flags may be added as the code is extended in future. + The rest of this field space is filled in with spaces.

        Last Change Time

        This field consists of the time the account was last modified. It consists of the characters 'LCT-' (standing for - "Last Change Time") followed by a numeric encoding of the UNIX time + "Last Change Time") followed by a numeric encoding of the UNIX time in seconds since the epoch (1970) that the last change was made. -

        All other colon separated fields are ignored at this time.

        VERSION

        This man page is correct for version 3.0 of - the Samba suite.

        SEE ALSO

        smbpasswd(8), - samba(7), and +

        All other colon separated fields are ignored at this time.

        VERSION

        This man page is correct for version 3.0 of + the Samba suite.

        SEE ALSO

        smbpasswd(8), Samba(7), and the Internet RFC1321 for details on the MD4 algorithm. -

        AUTHOR

        The original Samba software and related utilities +

        AUTHOR

        The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar - to the way the Linux kernel is developed.

        The original Samba man pages were written by Karl Auer. + to the way the Linux kernel is developed.

        The original Samba man pages were written by Karl Auer. The man page sources were converted to YODL format (another - excellent piece of Open Source software, available at - ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 + excellent piece of Open Source software, available at + ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 release by Jeremy Allison. The conversion to DocBook for - Samba 2.2 was done by Gerald Carter

        \ No newline at end of file + Samba 2.2 was done by Gerald Carter. The conversion to DocBook XML 4.2 + for Samba 3.0 was done by Alexander Bokovoy.

        diff --git a/docs/htmldocs/smbpasswd.8.html b/docs/htmldocs/smbpasswd.8.html index da3cb9f601..7612fdd775 100644 --- a/docs/htmldocs/smbpasswd.8.html +++ b/docs/htmldocs/smbpasswd.8.html @@ -1,626 +1,163 @@ - -smbpasswd

        smbpasswd

        Name

        smbpasswd -- change a user's SMB password

        DESCRIPTION

        This tool is part of the Samba suite.

        The smbpasswd program has several different - functions, depending on whether it is run by the root - user or not. When run as a normal user it allows the user to change +smbpasswd

        Name

        smbpasswd — change a user's SMB password

        Synopsis

        smbpasswd [-a] [-x] [-d] [-e] [-D debuglevel] [-n] [-r <remote machine>] [-R <name resolve order>] [-m] [-U username[%password]] [-h] [-s] [-w pass] [-i] [-L] [username]

        DESCRIPTION

        This tool is part of the Samba(7) suite.

        The smbpasswd program has several different + functions, depending on whether it is run by the root user + or not. When run as a normal user it allows the user to change the password used for their SMB sessions on any machines that store - SMB passwords.

        By default (when run with no arguments) it will attempt to + SMB passwords.

        By default (when run with no arguments) it will attempt to change the current user's SMB password on the local machine. This is - similar to the way the passwd(1) program works. - smbpasswd differs from how the passwd program works - however in that it is not setuid root but works in - a client-server mode and communicates with a locally running - smbd(8). As a consequence in order for this to + similar to the way the passwd(1) program works. + smbpasswd differs from how the passwd program works + however in that it is not setuid root but works in + a client-server mode and communicates with a + locally running smbd(8). As a consequence in order for this to succeed the smbd daemon must be running on the local machine. On a UNIX machine the encrypted SMB passwords are usually stored in - the smbpasswd(5) file.

        When run by an ordinary user with no options, smbpasswd + the smbpasswd(5) file.

        When run by an ordinary user with no options, smbpasswd will prompt them for their old SMB password and then ask them for their new password twice, to ensure that the new password was typed correctly. No passwords will be echoed on the screen whilst being typed. If you have a blank SMB password (specified by - the string "NO PASSWORD" in the smbpasswd file) then just press - the <Enter> key when asked for your old password.

        smbpasswd can also be used by a normal user to change their + the string "NO PASSWORD" in the smbpasswd file) then just press + the <Enter> key when asked for your old password.

        smbpasswd can also be used by a normal user to change their SMB password on remote machines, such as Windows NT Primary Domain - Controllers. See the (-r) and -U options below.

        When run by root, smbpasswd allows new users to be added + Controllers. See the (-r) and -U options + below.

        When run by root, smbpasswd allows new users to be added and deleted in the smbpasswd file, as well as allows changes to - the attributes of the user in this file to be made. When run by root, - smbpasswd accesses the local smbpasswd file + the attributes of the user in this file to be made. When run by root, + smbpasswd accesses the local smbpasswd file directly, thus enabling changes to be made even if smbd is not - running.

        OPTIONS

        -a

        This option specifies that the username + running.

        OPTIONS

        -a

        This option specifies that the username following should be added to the local smbpasswd file, with the - new password typed (type <Enter> for the old password). This + new password typed (type <Enter> for the old password). This option is ignored if the username following already exists in the smbpasswd file and it is treated like a regular change password command. Note that the default passdb backends require the user to already exist in the system password file (usually - /etc/passwd), else the request to add the - user will fail.

        This option is only available when running smbpasswd - as root.

        -x

        This option specifies that the username + /etc/passwd), else the request to add the + user will fail.

        This option is only available when running smbpasswd + as root.

        -x

        This option specifies that the username following should be deleted from the local smbpasswd file. -

        This option is only available when running smbpasswd as - root.

        -d

        This option specifies that the username following - should be disabled in the local smbpasswd - file. This is done by writing a 'D' flag +

        This option is only available when running smbpasswd as + root.

        -d

        This option specifies that the username following + should be disabled in the local smbpasswd + file. This is done by writing a 'D' flag into the account control space in the smbpasswd file. Once this is done all attempts to authenticate via SMB using this username - will fail.

        If the smbpasswd file is in the 'old' format (pre-Samba 2.0 + will fail.

        If the smbpasswd file is in the 'old' format (pre-Samba 2.0 format) there is no space in the user's password entry to write - this information and the command will FAIL. See smbpasswd(5) - for details on the 'old' and new password file formats. -

        This option is only available when running smbpasswd as - root.

        -e

        This option specifies that the username following - should be enabled in the local smbpasswd file, + this information and the command will FAIL. See smbpasswd(5) for details on the 'old' and new password file formats. +

        This option is only available when running smbpasswd as + root.

        -e

        This option specifies that the username following + should be enabled in the local smbpasswd file, if the account was previously disabled. If the account was not disabled this option has no effect. Once the account is enabled then - the user will be able to authenticate via SMB once again.

        If the smbpasswd file is in the 'old' format, then smbpasswd will FAIL to enable the account. - See smbpasswd (5) for - details on the 'old' and new password file formats.

        This option is only available when running smbpasswd as root. -

        -D debuglevel

        debuglevel is an integer + the user will be able to authenticate via SMB once again.

        If the smbpasswd file is in the 'old' format, then + smbpasswd will FAIL to enable the account. + See smbpasswd(5) for + details on the 'old' and new password file formats.

        This option is only available when running smbpasswd as root. +

        -D debuglevel

        debuglevel is an integer from 0 to 10. The default value if this parameter is not specified - is zero.

        The higher this value, the more detail will be logged to the + is zero.

        The higher this value, the more detail will be logged to the log files about the activities of smbpasswd. At level 0, only - critical errors and serious warnings will be logged.

        Levels above 1 will generate considerable amounts of log + critical errors and serious warnings will be logged.

        Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic. -

        -n

        This option specifies that the username following +

        -n

        This option specifies that the username following should have their password set to null (i.e. a blank password) in - the local smbpasswd file. This is done by writing the string "NO - PASSWORD" as the first part of the first password stored in the - smbpasswd file.

        Note that to allow users to logon to a Samba server once - the password has been set to "NO PASSWORD" in the smbpasswd + the local smbpasswd file. This is done by writing the string "NO + PASSWORD" as the first part of the first password stored in the + smbpasswd file.

        Note that to allow users to logon to a Samba server once + the password has been set to "NO PASSWORD" in the smbpasswd file the administrator must set the following parameter in the [global] - section of the smb.conf file :

        null passwords = yes

        This option is only available when running smbpasswd as - root.

        -r remote machine name

        This option allows a user to specify what machine + section of the smb.conf file :

        null passwords = yes

        This option is only available when running smbpasswd as + root.

        -r remote machine name

        This option allows a user to specify what machine they wish to change their password on. Without this parameter - smbpasswd defaults to the local host. The remote - machine name is the NetBIOS name of the SMB/CIFS + smbpasswd defaults to the local host. The remote + machine name is the NetBIOS name of the SMB/CIFS server to contact to attempt the password change. This name is resolved into an IP address using the standard name resolution - mechanism in all programs of the Samba suite. See the -R - name resolve order parameter for details on changing - this resolving mechanism.

        The username whose password is changed is that of the - current UNIX logged on user. See the -U username + mechanism in all programs of the Samba suite. See the -R + name resolve order parameter for details on changing + this resolving mechanism.

        The username whose password is changed is that of the + current UNIX logged on user. See the -U username parameter for details on changing the password for a different - username.

        Note that if changing a Windows NT Domain password the + username.

        Note that if changing a Windows NT Domain password the remote machine specified must be the Primary Domain Controller for the domain (Backup Domain Controllers only have a read-only copy of the user account database and will not allow the password - change).

        Note that Windows 95/98 do not have + change).

        Note that Windows 95/98 do not have a real password database so it is not possible to change passwords - specifying a Win95/98 machine as remote machine target.

        -R name resolve order

        This option allows the user of smbpasswd to determine + specifying a Win95/98 machine as remote machine target.

        -R name resolve order

        This option allows the user of smbpasswd to determine what name resolution services to use when looking up the NetBIOS - name of the host being connected to.

        The options are :"lmhosts", "host", "wins" and "bcast". They - cause names to be resolved as follows :

        • lmhosts : Lookup an IP + name of the host being connected to.

          The options are :"lmhosts", "host", "wins" and "bcast". They + cause names to be resolved as follows:

          • lmhosts: Lookup an IP address in the Samba lmhosts file. If the line in lmhosts has - no name type attached to the NetBIOS name (see the lmhosts(5) for details) then - any name type matches for lookup.

          • host : Do a standard host - name to IP address resolution, using the system /etc/hosts - , NIS, or DNS lookups. This method of name resolution + no name type attached to the NetBIOS name (see the lmhosts(5) for details) then + any name type matches for lookup.

          • host: Do a standard host + name to IP address resolution, using the system /etc/hosts + , NIS, or DNS lookups. This method of name resolution is operating system depended for instance on IRIX or Solaris this - may be controlled by the /etc/nsswitch.conf + may be controlled by the /etc/nsswitch.conf file). Note that this method is only used if the NetBIOS name type being queried is the 0x20 (server) name type, otherwise - it is ignored.

          • wins : Query a name with - the IP address listed in the wins server + it is ignored.

          • wins: Query a name with + the IP address listed in the wins server parameter. If no WINS server has been specified this method - will be ignored.

          • bcast : Do a broadcast on + will be ignored.

          • bcast: Do a broadcast on each of the known local interfaces listed in the - interfaces parameter. This is the least + interfaces parameter. This is the least reliable of the name resolution methods as it depends on the - target host being on a locally connected subnet.

          The default order is lmhosts, host, wins, bcast - and without this parameter or any entry in the - smb.conf file the name resolution methods will - be attempted in this order.

        -m

        This option tells smbpasswd that the account + target host being on a locally connected subnet.

        The default order is lmhosts, host, wins, bcast + and without this parameter or any entry in the smb.conf(5) file the name resolution methods will + be attempted in this order.

        -m

        This option tells smbpasswd that the account being changed is a MACHINE account. Currently this is used - when Samba is being used as an NT Primary Domain Controller.

        This option is only available when running smbpasswd as root. -

        -U username

        This option may only be used in conjunction - with the -r option. When changing + when Samba is being used as an NT Primary Domain Controller.

        This option is only available when running smbpasswd as root. +

        -U username

        This option may only be used in conjunction + with the -r option. When changing a password on a remote machine it allows the user to specify the user name on that machine whose password will be changed. It is present to allow users who have different user names on - different systems to change these passwords.

        -h

        This option prints the help string for smbpasswd, selecting the correct one for running as root - or as an ordinary user.

        -s

        This option causes smbpasswd to be silent (i.e. + different systems to change these passwords.

        -h

        This option prints the help string for + smbpasswd, selecting the correct one for running as root + or as an ordinary user.

        -s

        This option causes smbpasswd to be silent (i.e. not issue prompts) and to read its old and new passwords from - standard input, rather than from /dev/tty - (like the passwd(1) program does). This option - is to aid people writing scripts to drive smbpasswd

        -w password

        This parameter is only available if Samba + standard input, rather than from /dev/tty + (like the passwd(1) program does). This option + is to aid people writing scripts to drive smbpasswd

        -w password

        This parameter is only available if Samba has been configured to use the experimental - --with-ldapsam option. The -w + --with-ldapsam option. The -w switch is used to specify the password to be used with the - ldap admin - dn. Note that the password is stored in - the private/secrets.tdb and is keyed off - of the admin's DN. This means that if the value of ldap - admin dn ever changes, the password will need to be + ldap admin + dn. Note that the password is stored in + the secrets.tdb and is keyed off + of the admin's DN. This means that if the value of ldap + admin dn ever changes, the password will need to be manually updated as well. -

        -i

        This option tells smbpasswd that the account +

        -i

        This option tells smbpasswd that the account being changed is an interdomain trust account. Currently this is used when Samba is being used as an NT Primary Domain Controller. - The account contains the info about another trusted domain.

        This option is only available when running smbpasswd as root. -

        -L

        Run in local mode.

        username

        This specifies the username for all of the - root only options to operate on. Only root + The account contains the info about another trusted domain.

        This option is only available when running smbpasswd as root. +

        -L

        Run in local mode.

        username

        This specifies the username for all of the + root only options to operate on. Only root can specify this parameter as only root has the permission needed to modify attributes directly in the local smbpasswd file. -

        NOTES

        Since smbpasswd works in client-server +

        NOTES

        Since smbpasswd works in client-server mode communicating with a local smbd for a non-root user then the smbd daemon must be running for this to work. A common problem - is to add a restriction to the hosts that may access the smbd running on the local machine by specifying a - allow hosts or deny hosts - entry in the smb.conf file and neglecting to - allow "localhost" access to the smbd.

        In addition, the smbpasswd command is only useful if Samba - has been set up to use encrypted passwords. See the file - ENCRYPTION.txt in the docs directory for details - on how to do this.

        VERSION

        This man page is correct for version 3.0 of - the Samba suite.

        SEE ALSO

        smbpasswd(5), - samba(7) -

        AUTHOR

        The original Samba software and related utilities + is to add a restriction to the hosts that may access the + smbd running on the local machine by specifying either allow + hosts or deny hosts entry in + the smb.conf(5) file and neglecting to + allow "localhost" access to the smbd.

        In addition, the smbpasswd command is only useful if Samba + has been set up to use encrypted passwords. See the document + "LanMan and NT Password Encryption in Samba" in the docs directory for details + on how to do this.

        VERSION

        This man page is correct for version 3.0 of the Samba suite.

        SEE ALSO

        smbpasswd(5), Samba(7).

        AUTHOR

        The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar - to the way the Linux kernel is developed.

        The original Samba man pages were written by Karl Auer. + to the way the Linux kernel is developed.

        The original Samba man pages were written by Karl Auer. The man page sources were converted to YODL format (another - excellent piece of Open Source software, available at - ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 + excellent piece of Open Source software, available at + ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 release by Jeremy Allison. The conversion to DocBook for - Samba 2.2 was done by Gerald Carter

        \ No newline at end of file + Samba 2.2 was done by Gerald Carter. The conversion to DocBook XML 4.2 + for Samba 3.0 was done by Alexander Bokovoy.

        diff --git a/docs/htmldocs/smbsh.1.html b/docs/htmldocs/smbsh.1.html index bab2b45cdd..935576af6b 100644 --- a/docs/htmldocs/smbsh.1.html +++ b/docs/htmldocs/smbsh.1.html @@ -1,467 +1,110 @@ - -smbsh

        smbsh

        Name

        smbsh -- Allows access to Windows NT filesystem - using UNIX commands

        DESCRIPTION

        This tool is part of the Samba suite.

        smbsh allows you to access an NT filesystem - using UNIX commands such as ls, egrep, and rcp. You must use a - shell that is dynamically linked in order for smbsh - to work correctly.

        OPTIONS

        -W WORKGROUP

        Override the default workgroup specified in the - workgroup parameter of the smb.conf file +smbsh

        Name

        smbsh — Allows access to Windows NT filesystem + using UNIX commands

        Synopsis

        smbsh [-W workgroup] [-U username] [-P prefix] [-R <name resolve order>] [-d <debug level>] [-l logfile] [-L libdir]

        DESCRIPTION

        This tool is part of the Samba(7) suite.

        smbsh allows you to access an NT filesystem + using UNIX commands such as ls, + egrep, and rcp. You must use a + shell that is dynamically linked in order for smbsh + to work correctly.

        OPTIONS

        -W WORKGROUP

        Override the default workgroup specified in the + workgroup parameter of the smb.conf(5) file for this session. This may be needed to connect to some - servers.

        -U username[%pass]

        Sets the SMB username or username and password. + servers.

        -U username[%pass]

        Sets the SMB username or username and password. If this option is not specified, the user will be prompted for both the username and the password. If %pass is not specified, the user will be prompted for the password. -

        -P prefix

        This option allows +

        -P prefix

        This option allows the user to set the directory prefix for SMB access. The default value if this option is not specified is - smb. -

        -R <name resolve order>

        This option is used to determine what naming - services and in what order to resolve - host names to IP addresses. The option takes a space-separated - string of different name resolution options.

        The options are :"lmhosts", "host", "wins" and "bcast". - They cause names to be resolved as follows :

        • lmhosts : - Lookup an IP address in the Samba lmhosts file. If the - line in lmhosts has no name type attached to the - NetBIOS name - (see the lmhosts(5) - for details) then any name type matches for lookup. -

        • host : - Do a standard host name to IP address resolution, using - the system /etc/hosts, NIS, or DNS - lookups. This method of name resolution is operating - system dependent, for instance on IRIX or Solaris this - may be controlled by the /etc/nsswitch.conf - file). Note that this method is only used - if the NetBIOS name type being queried is the 0x20 - (server) name type, otherwise it is ignored. -

        • wins : - Query a name with the IP address listed in the - wins server parameter. If no - WINS server has been specified this method will be - ignored. -

        • bcast : - Do a broadcast on each of the known local interfaces - listed in the interfaces - parameter. This is the least reliable of the name - resolution methods as it depends on the target host - being on a locally connected subnet. -

        If this parameter is not set then the name resolve order - defined in the smb.conf file parameter - (name resolve order) will be used.

        The default order is lmhosts, host, wins, bcast. Without - this parameter or any entry in the name resolve order - parameter of the smb.conf - file, the name resolution methods will be attempted in this - order.

        -d <debug level>

        debug level is an integer from 0 to 10.

        The default value if this parameter is not specified - is zero.

        The higher this value, the more detail will be logged - about the activities of nmblookup. At level - 0, only critical errors and serious warnings will be logged. -

        -l logfilename

        If specified causes all debug messages to be - written to the file specified by logfilename - . If not specified then all messages will be - written tostderr. -

        -L libdir

        This parameter specifies the location of the - shared libraries used by smbsh. The default + smb. +

        -s <configuration file>

        The file specified contains the +configuration details required by the server. The +information in this file includes server-specific +information such as what printcap file to use, as well +as descriptions of all the services that the server is +to provide. See +smb.conf(5) for more information. +The default configuration file name is determined at +compile time.

        -d|--debug=debuglevel

        debuglevel is an integer +from 0 to 10. The default value if this parameter is +not specified is zero.

        The higher this value, the more detail will be +logged to the log files about the activities of the +server. At level 0, only critical errors and serious +warnings will be logged. Level 1 is a reasonable level for +day to day running - it generates a small amount of +information about operations carried out.

        Levels above 1 will generate considerable +amounts of log data, and should only be used when +investigating a problem. Levels above 3 are designed for +use only by developers and generate HUGE amounts of log +data, most of which is extremely cryptic.

        Note that specifying this parameter here will +override the log +level parameter in the +smb.conf(5) file.

        -R <name resolve order>

        This option is used to determine what naming +services and in what order to resolve +host names to IP addresses. The option takes a space-separated +string of different name resolution options.

        The options are: "lmhosts", "host", "wins" and "bcast". +They cause names to be resolved as follows :

        • lmhosts: +Lookup an IP address in the Samba lmhosts file. If the +line in lmhosts has no name type attached to the +NetBIOS name +(see the lmhosts(5) for details) +then any name type matches for lookup. +

        • host: +Do a standard host name to IP address resolution, using +the system /etc/hosts, NIS, or DNS +lookups. This method of name resolution is operating +system dependent, for instance on IRIX or Solaris this +may be controlled by the /etc/nsswitch.conf + file). Note that this method is only used +if the NetBIOS name type being queried is the 0x20 +(server) name type, otherwise it is ignored. +

        • wins: +Query a name with the IP address listed in the +wins server parameter. If no +WINS server has been specified this method will be +ignored. +

        • bcast: +Do a broadcast on each of the known local interfaces +listed in the interfaces +parameter. This is the least reliable of the name +resolution methods as it depends on the target host +being on a locally connected subnet. +

        If this parameter is not set then the name resolve order +defined in the smb.conf(5) file parameter +(name resolve order) will be used.

        The default order is lmhosts, host, wins, bcast. Without +this parameter or any entry in the name resolve order + parameter of the smb.conf(5) file, the name resolution methods +will be attempted in this order.

        -L libdir

        This parameter specifies the location of the + shared libraries used by smbsh. The default value is specified at compile time. -

        EXAMPLES

        To use the smbsh command, execute smbsh from the prompt and enter the username and password +

        EXAMPLES

        To use the smbsh command, execute + smbsh from the prompt and enter the username and password that authenticates you to the machine running the Windows NT - operating system.

        	system% smbsh
-	Username: user
-	Password: XXXXXXX
-

        Any dynamically linked command you execute from - this shell will access the /smb directory - using the smb protocol. For example, the command ls /smb - will show a list of workgroups. The command - ls /smb/MYGROUP will show all the machines in + operating system. +

        +system% smbsh
+Username: user
+Password: XXXXXXX
+

        Any dynamically linked command you execute from + this shell will access the /smb directory + using the smb protocol. For example, the command ls /smb + will show a list of workgroups. The command + ls /smb/MYGROUP will show all the machines in the workgroup MYGROUP. The command - ls /smb/MYGROUP/<machine-name> will show the share - names for that machine. You could then, for example, use the cd command to change directories, vi to - edit files, and rcp to copy files.

        VERSION

        This man page is correct for version 3.0 of - the Samba suite.

        BUGS

        smbsh works by intercepting the standard - libc calls with the dynamically loaded versions in smbwrapper.o. Not all calls have been "wrapped", so - some programs may not function correctly under smbsh - .

        Programs which are not dynamically linked cannot make - use of smbsh's functionality. Most versions - of UNIX have a file command that will - describe how a program was linked.

        SEE ALSO

        smbd(8), - smb.conf(5) -

        AUTHOR

        The original Samba software and related utilities + ls /smb/MYGROUP/<machine-name> will show the share + names for that machine. You could then, for example, use the + cd command to change directories, vi to + edit files, and rcp to copy files.

        VERSION

        This man page is correct for version 3.0 of the Samba suite.

        BUGS

        smbsh works by intercepting the standard + libc calls with the dynamically loaded versions in + smbwrapper.o. Not all calls have been "wrapped", so + some programs may not function correctly under smbsh + .

        Programs which are not dynamically linked cannot make + use of smbsh's functionality. Most versions + of UNIX have a file command that will + describe how a program was linked.

        SEE ALSO

        smbd(8), smb.conf(5)

        AUTHOR

        The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar - to the way the Linux kernel is developed.

        The original Samba man pages were written by Karl Auer. + to the way the Linux kernel is developed.

        The original Samba man pages were written by Karl Auer. The man page sources were converted to YODL format (another - excellent piece of Open Source software, available at - ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 + excellent piece of Open Source software, available at + ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 release by Jeremy Allison. The conversion to DocBook for - Samba 2.2 was done by Gerald Carter

        \ No newline at end of file + Samba 2.2 was done by Gerald Carter. The conversion to DocBook XML 4.2 + for Samba 3.0 was done by Alexander Bokovoy.

        diff --git a/docs/htmldocs/smbspool.8.html b/docs/htmldocs/smbspool.8.html index 8dc2fbbd63..186f30ebcf 100644 --- a/docs/htmldocs/smbspool.8.html +++ b/docs/htmldocs/smbspool.8.html @@ -1,227 +1,35 @@ - -smbspool

        smbspool

        Name

        smbspool -- send a print file to an SMB printer

        Synopsis

        smbspool [job] [user] [title] [copies] [options] [filename]

        DESCRIPTION

        This tool is part of the Samba suite.

        smbspool is a very small print spooling program that +smbspool

        Name

        smbspool — send a print file to an SMB printer

        Synopsis

        smbspool {job} {user} {title} {copies} {options} [filename]

        DESCRIPTION

        This tool is part of the Samba(7) suite.

        smbspool is a very small print spooling program that sends a print file to an SMB printer. The command-line arguments are position-dependent for compatibility with the Common UNIX Printing System, but you can use smbspool with any printing system - or from a program or script.

        DEVICE URI

        smbspool specifies the destination using a Uniform Resource - Identifier ("URI") with a method of "smb". This string can take - a number of forms:

        • smb://server/printer

        • smb://workgroup/server/printer

        • smb://username:password@server/printer

        • smb://username:password@workgroup/server/printer -

        smbspool tries to get the URI from argv[0]. If argv[0] - contains the name of the program then it looks in the DEVICE_URI environment variable.

        Programs using the exec(2) functions can + or from a program or script.

        DEVICE URI

        smbspool specifies the destination using a Uniform Resource + Identifier ("URI") with a method of "smb". This string can take + a number of forms:

        • smb://server/printer

        • smb://workgroup/server/printer

        • smb://username:password@server/printer

        • smb://username:password@workgroup/server/printer

        smbspool tries to get the URI from argv[0]. If argv[0] + contains the name of the program then it looks in the + DEVICE_URI environment variable.

        Programs using the exec(2) functions can pass the URI in argv[0], while shell scripts must set the - DEVICE_URI environment variable prior to - running smbspool.

        OPTIONS

        • The job argument (argv[1]) contains the + DEVICE_URI environment variable prior to + running smbspool.

        OPTIONS

        • The job argument (argv[1]) contains the job ID number and is presently not used by smbspool. -

        • The user argument (argv[2]) contains the +

        • The user argument (argv[2]) contains the print user's name and is presently not used by smbspool. -

        • The title argument (argv[3]) contains the +

        • The title argument (argv[3]) contains the job title string and is passed as the remote file name - when sending the print job.

        • The copies argument (argv[4]) contains + when sending the print job.

        • The copies argument (argv[4]) contains the number of copies to be printed of the named file. If no filename is provided then this argument is not used by - smbspool.

        • The options argument (argv[5]) contains + smbspool.

        • The options argument (argv[5]) contains the print options in a single string and is currently - not used by smbspool.

        • The filename argument (argv[6]) contains the + not used by smbspool.

        • The filename argument (argv[6]) contains the name of the file to print. If this argument is not specified - then the print file is read from the standard input.

        VERSION

        This man page is correct for version 2.2 of - the Samba suite.

        SEE ALSO

        smbd(8), - and samba(7). -

        AUTHOR

        smbspool was written by Michael Sweet - at Easy Software Products.

        The original Samba software and related utilities + then the print file is read from the standard input.

        VERSION

        This man page is correct for version 3.0 of the Samba suite.

        SEE ALSO

        smbd(8) and Samba(7).

        AUTHOR

        smbspool was written by Michael Sweet + at Easy Software Products.

        The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar - to the way the Linux kernel is developed.

        The original Samba man pages were written by Karl Auer. + to the way the Linux kernel is developed.

        The original Samba man pages were written by Karl Auer. The man page sources were converted to YODL format (another - excellent piece of Open Source software, available at - ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 + excellent piece of Open Source software, available at + ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 release by Jeremy Allison. The conversion to DocBook for - Samba 2.2 was done by Gerald Carter

        \ No newline at end of file + Samba 2.2 was done by Gerald Carter. The conversion to DocBook XML 4.2 + for Samba 3.0 was done by Alexander Bokovoy.

        diff --git a/docs/htmldocs/smbstatus.1.html b/docs/htmldocs/smbstatus.1.html index fb7e14fadd..c1be6234c3 100644 --- a/docs/htmldocs/smbstatus.1.html +++ b/docs/htmldocs/smbstatus.1.html @@ -1,223 +1,44 @@ - -smbstatus

        smbstatus

        Name

        smbstatus -- report on current Samba connections

        Synopsis

        smbstatus [-P] [-b] [-d <debug level>] [-v] [-L] [-B] [-p] [-S] [-s <configuration file>] [-u <username>]

        DESCRIPTION

        This tool is part of the Samba suite.

        smbstatus is a very simple program to - list the current Samba connections.

        OPTIONS

        -P|--profile

        If samba has been compiled with the +smbstatus

        Name

        smbstatus — report on current Samba connections

        Synopsis

        smbstatus [-P] [-b] [-d <debug level>] [-v] [-L] [-B] [-p] [-S] [-s <configuration file>] [-u <username>]

        DESCRIPTION

        This tool is part of the Samba(7) suite.

        smbstatus is a very simple program to + list the current Samba connections.

        OPTIONS

        -P|--profile

        If samba has been compiled with the profiling option, print only the contents of the profiling - shared memory area.

        -b|--brief

        gives brief output.

        -d|--debug=<debuglevel>

        sets debugging to specified level

        -v|--verbose

        gives verbose output.

        -L|--locks

        causes smbstatus to only list locks.

        -B|--byterange

        causes smbstatus to include byte range locks. -

        -p|--processes

        print a list of smbd(8) processes and exit. - Useful for scripting.

        -S|--shares

        causes smbstatus to only list shares.

        -s|--conf=<configuration file>

        The default configuration file name is - determined at compile time. The file specified contains the - configuration details required by the server. See smb.conf(5) - for more information.

        -u|--user=<username>

        selects information relevant to - username only.

        VERSION

        This man page is correct for version 3.0 of - the Samba suite.

        SEE ALSO

        smbd(8) and - smb.conf(5).

        AUTHOR

        The original Samba software and related utilities + shared memory area.

        -b|--brief

        gives brief output.

        -V

        Prints the version number for +smbd.

        -s <configuration file>

        The file specified contains the +configuration details required by the server. The +information in this file includes server-specific +information such as what printcap file to use, as well +as descriptions of all the services that the server is +to provide. See +smb.conf(5) for more information. +The default configuration file name is determined at +compile time.

        -d|--debug=debuglevel

        debuglevel is an integer +from 0 to 10. The default value if this parameter is +not specified is zero.

        The higher this value, the more detail will be +logged to the log files about the activities of the +server. At level 0, only critical errors and serious +warnings will be logged. Level 1 is a reasonable level for +day to day running - it generates a small amount of +information about operations carried out.

        Levels above 1 will generate considerable +amounts of log data, and should only be used when +investigating a problem. Levels above 3 are designed for +use only by developers and generate HUGE amounts of log +data, most of which is extremely cryptic.

        Note that specifying this parameter here will +override the log +level parameter in the +smb.conf(5) file.

        -l|--logfile=logbasename

        File name for log/debug files. The extension +".client" will be appended. The log file is +never removed by the client. +

        -v|--verbose

        gives verbose output.

        -L|--locks

        causes smbstatus to only list locks.

        -B|--byterange

        causes smbstatus to include byte range locks. +

        -p|--processes

        print a list of smbd(8) processes and exit. + Useful for scripting.

        -S|--shares

        causes smbstatus to only list shares.

        -h|--help

        Print a summary of command line options. +

        -u|--user=<username>

        selects information relevant to + username only.

        VERSION

        This man page is correct for version 3.0 of + the Samba suite.

        SEE ALSO

        smbd(8) and smb.conf(5).

        AUTHOR

        The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar - to the way the Linux kernel is developed.

        The original Samba man pages were written by Karl Auer. + to the way the Linux kernel is developed.

        The original Samba man pages were written by Karl Auer. The man page sources were converted to YODL format (another - excellent piece of Open Source software, available at - ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 + excellent piece of Open Source software, available at + ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 release by Jeremy Allison. The conversion to DocBook for - Samba 2.2 was done by Gerald Carter

        \ No newline at end of file + Samba 2.2 was done by Gerald Carter. The conversion to DocBook XML 4.2 + for Samba 3.0 was done by Alexander Bokovoy.

        diff --git a/docs/htmldocs/smbtar.1.html b/docs/htmldocs/smbtar.1.html index d3215c6901..30058d1860 100644 --- a/docs/htmldocs/smbtar.1.html +++ b/docs/htmldocs/smbtar.1.html @@ -1,356 +1,39 @@ - -smbtar

        smbtar

        Name

        smbtar -- shell script for backing up SMB/CIFS shares - directly to UNIX tape drives

        Synopsis

        smbtar {-s server} [-p password] [-x services] [-X] [-d directory] [-u user] [-t tape] [-t tape] [-b blocksize] [-N filename] [-i] [-r] [-l loglevel] [-v] {filenames}

        DESCRIPTION

        This tool is part of the Samba suite.

        smbtar is a very small shell script on top - of smbclient(1) - which dumps SMB shares directly to tape.

        OPTIONS

        -s server

        The SMB/CIFS server that the share resides - upon.

        -x service

        The share name on the server to connect to. - The default is "backup".

        -X

        Exclude mode. Exclude filenames... from tar - create or restore.

        -d directory

        Change to initial directory - before restoring / backing up files.

        -v

        Verbose mode.

        -p password

        The password to use to access a share. - Default: none

        -u user

        The user id to connect as. Default: - UNIX login name.

        -t tape

        Tape device. May be regular file or tape - device. Default: $TAPE environmental - variable; if not set, a file called tar.out - .

        -b blocksize

        Blocking factor. Defaults to 20. See - tar(1) for a fuller explanation.

        -N filename

        Backup only files newer than filename. Could +smbtar

        Name

        smbtar — shell script for backing up SMB/CIFS shares + directly to UNIX tape drives

        Synopsis

        smbtar [-r] [-i] [-a] [-v] {-s server} [-p password] [-x services] [-X] [-N filename] [-b blocksize] [-d directory] [-l loglevel] [-u user] [-t tape] {filenames}

        DESCRIPTION

        This tool is part of the Samba(7) suite.

        smbtar is a very small shell script on top + of smbclient(1) which dumps SMB shares directly to tape.

        OPTIONS

        -s server

        The SMB/CIFS server that the share resides + upon.

        -x service

        The share name on the server to connect to. + The default is "backup".

        -X

        Exclude mode. Exclude filenames... from tar + create or restore.

        -d directory

        Change to initial directory + before restoring / backing up files.

        -v

        Verbose mode.

        -p password

        The password to use to access a share. + Default: none

        -u user

        The user id to connect as. Default: + UNIX login name.

        -a

        Reset DOS archive bit mode to + indicate file has been archived.

        -t tape

        Tape device. May be regular file or tape + device. Default: $TAPE environmental + variable; if not set, a file called tar.out + .

        -b blocksize

        Blocking factor. Defaults to 20. See + tar(1) for a fuller explanation.

        -N filename

        Backup only files newer than filename. Could be used (for example) on a log file to implement incremental - backups.

        -i

        Incremental mode; tar files are only backed + backups.

        -i

        Incremental mode; tar files are only backed up if they have the archive bit set. The archive bit is reset - after each file is read.

        -r

        Restore. Files are restored to the share - from the tar file.

        -l log level

        Log (debug) level. Corresponds to the - -d flag of smbclient(1) - .

        ENVIRONMENT VARIABLES

        The $TAPE variable specifies the + after each file is read.

        -r

        Restore. Files are restored to the share + from the tar file.

        -l log level

        Log (debug) level. Corresponds to the + -d flag of smbclient(1).

        ENVIRONMENT VARIABLES

        The $TAPE variable specifies the default tape device to write to. May be overridden - with the -t option.

        BUGS

        The smbtar script has different - options from ordinary tar and from smbclient's tar command.

        CAVEATS

        Sites that are more careful about security may not like + with the -t option.

        BUGS

        The smbtar script has different + options from ordinary tar and from smbclient's tar command.

        CAVEATS

        Sites that are more careful about security may not like the way the script handles PC passwords. Backup and restore work on entire shares; should work on file lists. smbtar works best - with GNU tar and may not work well with other versions.

        DIAGNOSTICS

        See the DIAGNOSTICS section for the - smbclient(1) - command.

        VERSION

        This man page is correct for version 3.0 of - the Samba suite.

        SEE ALSO

        smbd(8), - smbclient(1), - smb.conf(5), -

        AUTHOR

        The original Samba software and related utilities + with GNU tar and may not work well with other versions.

        DIAGNOSTICS

        See the DIAGNOSTICS section for the smbclient(1) command.

        VERSION

        This man page is correct for version 3.0 of + the Samba suite.

        SEE ALSO

        smbd(8), smbclient(1), smb.conf(5).

        AUTHOR

        The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar - to the way the Linux kernel is developed.

        Ricky Poulten - wrote the tar extension and this man page. The smbtar - script was heavily rewritten and improved by Martin Kraemer. Many + to the way the Linux kernel is developed.

        Ricky Poulten + wrote the tar extension and this man page. The smbtar + script was heavily rewritten and improved by Martin Kraemer. Many thanks to everyone who suggested extensions, improvements, bug fixes, etc. The man page sources were converted to YODL format (another - excellent piece of Open Source software, available at - ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 + excellent piece of Open Source software, available at + ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 release by Jeremy Allison. The conversion to DocBook for - Samba 2.2 was done by Gerald Carter.

        \ No newline at end of file + Samba 2.2 was done by Gerald Carter. The conversion to DocBook XML 4.2 for + Samba 3.0 was done by Alexander Bokovoy.

        diff --git a/docs/htmldocs/smbumount.8.html b/docs/htmldocs/smbumount.8.html index 993436f0c6..f0aa0f974d 100644 --- a/docs/htmldocs/smbumount.8.html +++ b/docs/htmldocs/smbumount.8.html @@ -1,141 +1,16 @@ - -smbumount

        smbumount

        Name

        smbumount -- smbfs umount for normal users

        Synopsis

        smbumount {mount-point}

        DESCRIPTION

        With this program, normal users can unmount smb-filesystems, - provided that it is suid root. smbumount has +smbumount

        Name

        smbumount — smbfs umount for normal users

        Synopsis

        smbumount {mount-point}

        DESCRIPTION

        With this program, normal users can unmount smb-filesystems, + provided that it is suid root. smbumount has been written to give normal Linux users more control over their resources. It is safe to install this program suid root, because only the user who has mounted a filesystem is allowed to unmount it again. For root it is not necessary to use smbumount. The normal umount program works perfectly well, but it would certainly be problematic - to make umount setuid root.

        OPTIONS

        mount-point

        The directory to unmount.

        AUTHOR

        Volker Lendecke, Andrew Tridgell, Michael H. Warfield - and others.

        The current maintainer of smbfs and the userspace - tools smbmount, smbumount, - and smbmnt is Urban Widmark. - The SAMBA Mailing list + to make umount setuid root.

        OPTIONS

        mount-point

        The directory to unmount.

        SEE ALSO

        smbmount(8)

        AUTHOR

        Volker Lendecke, Andrew Tridgell, Michael H. Warfield + and others.

        The current maintainer of smbfs and the userspace + tools smbmount, smbumount, + and smbmnt is Urban Widmark. + The SAMBA Mailing list is the preferred place to ask questions regarding these programs. -

        The conversion of this manpage for Samba 2.2 was performed - by Gerald Carter

        \ No newline at end of file +

        The conversion of this manpage for Samba 2.2 was performed + by Gerald Carter. The conversion to DocBook XML 4.2 for Samba 3.0 + was done by Alexander Bokovoy.

        diff --git a/docs/htmldocs/speed.html b/docs/htmldocs/speed.html index 1a05706f92..c7ae9dda2d 100644 --- a/docs/htmldocs/speed.html +++ b/docs/htmldocs/speed.html @@ -1,419 +1,143 @@ - -Samba performance issues
        SAMBA Project Documentation
        PrevNext

        Chapter 22. Samba performance issues

        22.1. Comparisons

        The Samba server uses TCP to talk to the client. Thus if you are +Chapter39.Samba Performance Tuning

        Chapter39.Samba Performance Tuning
        PrevPartVI.AppendixesNext

        Chapter39.Samba Performance Tuning

        Paul Cochrane

        Dundee Limb Fitting Centre

        Jelmer R. Vernooij

        The Samba Team

        John H. Terpstra

        Samba Team

        Table of Contents

        Comparisons
        Socket options
        Read size
        Max xmit
        Log level
        Read raw
        Write raw
        Slow Logins
        LDAP
        Client tuning
        Samba performance problem due changing kernel
        Corrupt tdb Files

        Comparisons

        +The Samba server uses TCP to talk to the client. Thus if you are trying to see if it performs well you should really compare it to programs that use the same protocol. The most readily available programs for file transfer that use TCP are ftp or another TCP based -SMB server.

        If you want to test against something like a NT or WfWg server then +SMB server. +

        +If you want to test against something like a NT or WfWg server then you will have to disable all but TCP on either the client or server. Otherwise you may well be using a totally different protocol -(such as Netbeui) and comparisons may not be valid.

        Generally you should find that Samba performs similarly to ftp at raw +(such as Netbeui) and comparisons may not be valid. +

        +Generally you should find that Samba performs similarly to ftp at raw transfer speed. It should perform quite a bit faster than NFS, -although this very much depends on your system.

        Several people have done comparisons between Samba and Novell, NFS or +although this very much depends on your system. +

        +Several people have done comparisons between Samba and Novell, NFS or WinNT. In some cases Samba performed the best, in others the worst. I suspect the biggest factor is not Samba vs some other system but the hardware and drivers used on the various systems. Given similar hardware Samba should certainly be competitive in speed with other -systems.

        Socket options

        +There are a number of socket options that can greatly affect the +performance of a TCP based server like Samba. +

        +The socket options that Samba uses are settable both on the command +line with the -O option, or in the smb.conf file. +

        +The socket options section of the smb.conf manual page describes how +to set these and gives recommendations. +

        +Getting the socket options right can make a big difference to your performance, but getting them wrong can degrade it by just as -much. The correct settings are very dependent on your local network.

        The socket option TCP_NODELAY is the one that seems to make the +much. The correct settings are very dependent on your local network. +

        +The socket option TCP_NODELAY is the one that seems to make the biggest single difference for most networks. Many people report that -adding "socket options = TCP_NODELAY" doubles the read performance of -a Samba drive. The best explanation I have seen for this is that the -Microsoft TCP/IP stack is slow in sending tcp ACKs.

        Read size

        +The option read size affects the overlap of disk +reads/writes with network reads/writes. If the amount of data being +transferred in several of the SMB commands (currently SMBwrite, SMBwriteX and SMBreadbraw) is larger than this value then the server begins writing the data before it has received the whole packet from the network, or in the case of SMBreadbraw, it begins writing to the network before -all the data has been read from disk.

        This overlapping works best when the speeds of disk and network access +all the data has been read from disk. +

        +This overlapping works best when the speeds of disk and network access are similar, having very little effect when the speed of one is much -greater than the other.

        The default value is 16384, but very little experimentation has been +greater than the other. +

        +The default value is 16384, but very little experimentation has been done yet to determine the optimal value, and it is likely that the best value will vary greatly between systems anyway. A value over 65536 is -pointless and will cause you to allocate memory unnecessarily.

        Max xmit

        +At startup the client and server negotiate a maximum transmit size, which limits the size of nearly all SMB commands. You can set the -maximum size that Samba will negotiate using the "max xmit = " option -in smb.conf. Note that this is the maximum size of SMB request that +maximum size that Samba will negotiate using the max xmit = option +in smb.conf. Note that this is the maximum size of SMB requests that Samba will accept, but not the maximum size that the *client* will accept. The client maximum receive size is sent to Samba by the client and Samba -honours this limit.

        It defaults to 65536 bytes (the maximum), but it is possible that some +honours this limit. +

        +It defaults to 65536 bytes (the maximum), but it is possible that some clients may perform better with a smaller transmit unit. Trying values -of less than 2048 is likely to cause severe problems.

        In most cases the default is the best option.

        Log level

        +If you set the log level (also known as debug level) higher than 2 then you may suffer a large drop in performance. This is because the server flushes the log file after each operation, which can be very -expensive.

        Read raw

        +The read raw operation is designed to be an optimised, low-latency file read operation. A server may choose to not support it, -however. and Samba makes support for "read raw" optional, with it -being enabled by default.

        In some cases clients don't handle "read raw" very well and actually +however. and Samba makes support for read raw optional, with it +being enabled by default. +

        +In some cases clients don't handle read raw very well and actually get lower performance using it than they get using the conventional -read operations.

        So you might like to try "read raw = no" and see what happens on your +read operations. +

        +So you might like to try read raw = no and see what happens on your network. It might lower, raise or not affect your performance. Only -testing can really tell.

        Write raw

        +The write raw operation is designed to be an optimised, low-latency file write operation. A server may choose to not support it, -however. and Samba makes support for "write raw" optional, with it -being enabled by default.

        Some machines may find "write raw" slower than normal write, in which -case you may wish to change this option.

        Slow Logins

        +Slow logins are almost always due to the password checking time. Using +the lowest practical password level will improve things. +

        LDAP

        +LDAP can be vastly improved by using the +ldap trust ids parameter. +

        Client tuning

        +Often a speed problem can be traced to the client. The client (for example Windows for Workgroups) can often be tuned for better TCP -performance.

        See your client docs for details. In particular, I have heard rumours -that the WfWg options TCPWINDOWSIZE and TCPSEGMENTSIZE can have a -large impact on performance.

        Also note that some people have found that setting DefaultRcvWindow in -the [MSTCP] section of the SYSTEM.INI file under WfWg to 3072 gives a -big improvement. I don't know why.

        My own experience wth DefaultRcvWindow is that I get much better -performance with a large value (16384 or larger). Other people have -reported that anything over 3072 slows things down enourmously. One -person even reported a speed drop of a factor of 30 when he went from -3072 to 8192. I don't know why.

        It probably depends a lot on your hardware, and the type of unix box -you have at the other end of the link.

        Paul Cochrane has done some testing on client side tuning and come -to the following conclusions:

        Install the W2setup.exe file from www.microsoft.com. This is an -update for the winsock stack and utilities which improve performance.

        Configure the win95 TCPIP registry settings to give better -perfomance. I use a program called MTUSPEED.exe which I got off the -net. There are various other utilities of this type freely available. -The setting which give the best performance for me are:

        1. MaxMTU Remove

        2. RWIN Remove

        3. MTUAutoDiscover Disable

        4. MTUBlackHoleDetect Disable

        5. Time To Live Enabled

        6. Time To Live - HOPS 32

        7. NDI Cache Size 0

        I tried virtually all of the items mentioned in the document and -the only one which made a difference to me was the socket options. It -turned out I was better off without any!!!!!

        In terms of overall speed of transfer, between various win95 clients -and a DX2-66 20MB server with a crappy NE2000 compatible and old IDE -drive (Kernel 2.0.30). The transfer rate was reasonable for 10 baseT.

        The figures are:          Put              Get 
-P166 client 3Com card:    420-440kB/s      500-520kB/s
-P100 client 3Com card:    390-410kB/s      490-510kB/s
-DX4-75 client NE2000:     370-380kB/s      330-350kB/s

        I based these test on transfer two files a 4.5MB text file and a 15MB -textfile. The results arn't bad considering the hardware Samba is -running on. It's a crap machine!!!!

        The updates mentioned in 1 and 2 brought up the transfer rates from -just over 100kB/s in some clients.

        A new client is a P333 connected via a 100MB/s card and hub. The -transfer rates from this were good: 450-500kB/s on put and 600+kB/s -on get.

        Looking at standard FTP throughput, Samba is a bit slower (100kB/s -upwards). I suppose there is more going on in the samba protocol, but -if it could get up to the rate of FTP the perfomance would be quite -staggering.

        PrevHomeNext
        Group mapping HOWTOUpAppendixes
        \ No newline at end of file +performance. Check the sections on the various clients in +Samba and Other Clients. +

        Samba performance problem due changing kernel

        +Hi everyone. I am running Gentoo on my server and samba 2.2.8a. Recently +I changed kernel version from linux-2.4.19-gentoo-r10 to +linux-2.4.20-wolk4.0s. And now I have performance issue with samba. Ok +many of you will probably say that move to vanilla sources...well I ried +it too and it didn't work. I have 100mb LAN and two computers (linux + +Windows2000). Linux server shares directory with DivX files, client +(windows2000) plays them via LAN. Before when I was running 2.4.19 kernel +everything was fine, but now movies freezes and stops...I tried moving +files between server and Windows and it's trerribly slow. +

        +Grab mii-tool and check the duplex settings on the NIC. +My guess is that it is a link layer issue, not an application +layer problem. Also run ifconfig and verify that the framing +error, collisions, etc... look normal for ethernet. +

        Corrupt tdb Files

        +Well today it happend, our first major problem using samba. +Our samba PDC server has been hosting 3 TB of data to our 500+ users +[Windows NT/XP] for the last 3 years using samba, no problem. +But today all shares went SLOW; very slow. Also the main smbd kept +spawning new processes so we had 1600+ running smbd's (normally we avg. 250). +It crashed the SUN E3500 cluster twice. After alot of searching I +decided to rm /var/locks/*.tbl. Happy again. +

        +Q1) Is there any method of keeping the *.tbl files in top condition or +how to early detect corruption? +

        +A1) Yes, run tdbbackup each time after stoping nmbd and before starting nmbd. +

        +Q2) What I also would like to mention is that the service latency seems +alot lower then before the locks cleanup, any ideas on keeping it top notch? +

        +A2) Yes! Samba answer as for Q1! +

        PrevUpNext
        Chapter38.Samba and other CIFS clientsHomeChapter40.DNS and DHCP Configuration Guide
        diff --git a/docs/htmldocs/swat.8.html b/docs/htmldocs/swat.8.html index f101a7bc26..e0719dce3d 100644 --- a/docs/htmldocs/swat.8.html +++ b/docs/htmldocs/swat.8.html @@ -1,425 +1,87 @@ - -swat

        swat

        Name

        swat -- Samba Web Administration Tool

        Synopsis

        swat [-s <smb config file>] [-a]

        DESCRIPTION

        This tool is part of the Samba suite.

        swat allows a Samba administrator to - configure the complex smb.conf(5) file via a Web browser. In addition, - a swat configuration page has help links - to all the configurable options in the smb.conf file allowing an - administrator to easily look up the effects of any change.

        swat is run from inetd

        OPTIONS

        -s smb configuration file

        The default configuration file path is +swat

        Name

        swat — Samba Web Administration Tool

        Synopsis

        swat [-s <smb config file>] [-a]

        DESCRIPTION

        This tool is part of the Samba(7) suite.

        swat allows a Samba administrator to + configure the complex smb.conf(5) file via a Web browser. In addition, + a swat configuration page has help links + to all the configurable options in the smb.conf file allowing an + administrator to easily look up the effects of any change.

        swat is run from inetd

        OPTIONS

        -s smb configuration file

        The default configuration file path is determined at compile time. The file specified contains - the configuration details required by the smbd - server. This is the file that swat will modify. + the configuration details required by the smbd(8) server. This is the file + that swat will modify. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide. - See smb.conf for more information. -

        -a

        This option disables authentication and puts - swat in demo mode. In that mode anyone will be able to modify - the smb.conf file.

        WARNING: Do NOT enable this option on a production - server.

        INSTALLATION

        After you compile SWAT you need to run make install - to install the swat binary + See smb.conf for more information. +

        -a

        This option disables authentication and puts + swat in demo mode. In that mode anyone will be able to modify + the smb.conf file.

        WARNING: Do NOT enable this option on a production + server.

        -V

        Prints the version number for +smbd.

        -s <configuration file>

        The file specified contains the +configuration details required by the server. The +information in this file includes server-specific +information such as what printcap file to use, as well +as descriptions of all the services that the server is +to provide. See +smb.conf(5) for more information. +The default configuration file name is determined at +compile time.

        -d|--debug=debuglevel

        debuglevel is an integer +from 0 to 10. The default value if this parameter is +not specified is zero.

        The higher this value, the more detail will be +logged to the log files about the activities of the +server. At level 0, only critical errors and serious +warnings will be logged. Level 1 is a reasonable level for +day to day running - it generates a small amount of +information about operations carried out.

        Levels above 1 will generate considerable +amounts of log data, and should only be used when +investigating a problem. Levels above 3 are designed for +use only by developers and generate HUGE amounts of log +data, most of which is extremely cryptic.

        Note that specifying this parameter here will +override the log +level parameter in the +smb.conf(5) file.

        -l|--logfile=logbasename

        File name for log/debug files. The extension +".client" will be appended. The log file is +never removed by the client. +

        -h|--help

        Print a summary of command line options. +

        INSTALLATION

        Swat is included as binary package with most distributions. The + package manager in this case takes care of the installation and + configuration. This section is only for those who have compiled + swat from scratch. +

        After you compile SWAT you need to run make install + to install the swat binary and the various help files and images. A default install would put - these in:

        • /usr/local/samba/bin/swat

        • /usr/local/samba/swat/images/*

        • /usr/local/samba/swat/help/*

        Inetd Installation

        You need to edit your /etc/inetd.conf - and /etc/services - to enable SWAT to be launched via inetd.

        In /etc/services you need to - add a line like this:

        swat 901/tcp

        Note for NIS/YP users - you may need to rebuild the - NIS service maps rather than alter your local /etc/services file.

        the choice of port number isn't really important + these in:

        • /usr/local/samba/bin/swat

        • /usr/local/samba/swat/images/*

        • /usr/local/samba/swat/help/*

        Inetd Installation

        You need to edit your /etc/inetd.conf + and /etc/services + to enable SWAT to be launched via inetd.

        In /etc/services you need to + add a line like this:

        swat 901/tcp

        Note for NIS/YP and LDAP users - you may need to rebuild the + NIS service maps rather than alter your local + /etc/services file.

        the choice of port number isn't really important except that it should be less than 1024 and not currently used (using a number above 1024 presents an obscure security hole depending on the implementation details of your - inetd daemon).

        In /etc/inetd.conf you should - add a line like this:

        swat stream tcp nowait.400 root - /usr/local/samba/bin/swat swat

        One you have edited /etc/services - and /etc/inetd.conf you need to send a - HUP signal to inetd. To do this use kill -1 PID - where PID is the process ID of the inetd daemon.

        Launching

        To launch SWAT just run your favorite web browser and - point it at "http://localhost:901/".

        Note that you can attach to SWAT from any IP connected - machine but connecting from a remote machine leaves your - connection open to password sniffing as passwords will be sent - in the clear over the wire.

        FILES

        /etc/inetd.conf

        This file must contain suitable startup - information for the meta-daemon.

        /etc/services

        This file must contain a mapping of service name + inetd daemon).

        In /etc/inetd.conf you should + add a line like this:

        swat stream tcp nowait.400 root + /usr/local/samba/bin/swat swat

        One you have edited /etc/services + and /etc/inetd.conf you need to send a + HUP signal to inetd. To do this use kill -1 PID + where PID is the process ID of the inetd daemon.

        LAUNCHING

        To launch SWAT just run your favorite web browser and + point it at "http://localhost:901/".

        Note that you can attach to SWAT from any IP connected + machine but connecting from a remote machine leaves your + connection open to password sniffing as passwords will be sent + in the clear over the wire.

        FILES

        /etc/inetd.conf

        This file must contain suitable startup + information for the meta-daemon.

        /etc/services

        This file must contain a mapping of service name (e.g., swat) to service port (e.g., 901) and protocol type - (e.g., tcp).

        /usr/local/samba/lib/smb.conf

        This is the default location of the smb.conf(5) - server configuration file that swat edits. Other - common places that systems install this file are /usr/samba/lib/smb.conf and /etc/smb.conf - . This file describes all the services the server - is to make available to clients.

        WARNINGS

        swat will rewrite your smb.conf - file. It will rearrange the entries and delete all - comments, include= and copy= - options. If you have a carefully crafted smb.conf then back it up or don't use swat!

        VERSION

        This man page is correct for version 2.2 of - the Samba suite.

        SEE ALSO

        inetd(5), - smbd(8), - smb.conf(5) -

        AUTHOR

        The original Samba software and related utilities + (e.g., tcp).

        /usr/local/samba/lib/smb.conf

        This is the default location of the smb.conf(5) server configuration file that swat edits. Other + common places that systems install this file are + /usr/samba/lib/smb.conf and /etc/smb.conf + . This file describes all the services the server + is to make available to clients.

        WARNINGS

        swat will rewrite your smb.conf(5) file. It will rearrange the entries and delete all + comments, include= and copy= + options. If you have a carefully crafted + smb.conf then back it up or don't use swat!

        VERSION

        This man page is correct for version 3.0 of the Samba suite.

        SEE ALSO

        inetd(5), smbd(8), smb.conf(5)

        AUTHOR

        The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar - to the way the Linux kernel is developed.

        The original Samba man pages were written by Karl Auer. + to the way the Linux kernel is developed.

        The original Samba man pages were written by Karl Auer. The man page sources were converted to YODL format (another - excellent piece of Open Source software, available at - ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 + excellent piece of Open Source software, available at + ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 release by Jeremy Allison. The conversion to DocBook for - Samba 2.2 was done by Gerald Carter

        \ No newline at end of file + Samba 2.2 was done by Gerald Carter. The conversion to DocBook XML 4.2 for + Samba 3.0 was done by Alexander Bokovoy.

        diff --git a/docs/htmldocs/testparm.1.html b/docs/htmldocs/testparm.1.html index baf11bacac..3732b53f4c 100644 --- a/docs/htmldocs/testparm.1.html +++ b/docs/htmldocs/testparm.1.html @@ -1,316 +1,51 @@ - -testparm

        testparm

        Name

        testparm -- check an smb.conf configuration file for - internal correctness

        DESCRIPTION

        This tool is part of the Samba suite.

        testparm is a very simple test program - to check an smbd configuration file for +testparm

        Name

        testparm — check an smb.conf configuration file for + internal correctness

        Synopsis

        testparm [-s] [-h] [-v] [-L <servername>] [-t <encoding>] {config filename} [hostname hostIP]

        DESCRIPTION

        This tool is part of the Samba(7) suite.

        testparm is a very simple test program + to check an smbd(8) configuration file for internal correctness. If this program reports no problems, you - can use the configuration file with confidence that smbd - will successfully load the configuration file.

        Note that this is NOT a guarantee that + can use the configuration file with confidence that smbd + will successfully load the configuration file.

        Note that this is NOT a guarantee that the services specified in the configuration file will be - available or will operate as expected.

        If the optional host name and host IP address are + available or will operate as expected.

        If the optional host name and host IP address are specified on the command line, this test program will run through the service entries reporting whether the specified host - has access to each service.

        If testparm finds an error in the smb.conf file it returns an exit code of 1 to the calling + has access to each service.

        If testparm finds an error in the + smb.conf file it returns an exit code of 1 to the calling program, else it returns an exit code of 0. This allows shell scripts - to test the output from testparm.

        OPTIONS

        -s

        Without this option, testparm + to test the output from testparm.

        OPTIONS

        -s

        Without this option, testparm will prompt for a carriage return after printing the service - names and before dumping the service definitions.

        -h

        Print usage message

        -L servername

        Sets the value of the %L macro to servername. + names and before dumping the service definitions.

        -h|--help

        Print a summary of command line options. +

        -V

        Prints the version number for +smbd.

        -L servername

        Sets the value of the %L macro to servername. This is useful for testing include files specified with the - %L macro.

        -v

        If this option is specified, testparm - will also output all options that were not used in - smb.conf and are thus set to - their defaults.

        -t encoding

        Output data in specified encoding. -

        configfilename

        This is the name of the configuration file + %L macro.

        -v

        If this option is specified, testparm + will also output all options that were not used in smb.conf(5) and are thus set to their defaults.

        -t encoding

        + Output data in specified encoding. +

        configfilename

        This is the name of the configuration file to check. If this parameter is not present then the - default smb.conf file will be checked. -

        hostname

        If this parameter and the following are - specified, then testparm will examine the hosts - allow and hosts deny - parameters in the smb.conf file to + default smb.conf(5) file will be checked. +

        hostname

        If this parameter and the following are + specified, then testparm will examine the hosts + allow and hosts deny + parameters in the smb.conf(5) file to determine if the hostname with this IP address would be - allowed access to the smbd server. If + allowed access to the smbd server. If this parameter is supplied, the hostIP parameter must also - be supplied.

        hostIP

        This is the IP address of the host specified + be supplied.

        hostIP

        This is the IP address of the host specified in the previous parameter. This address must be supplied - if the hostname parameter is supplied.

        FILES

        smb.conf

        This is usually the name of the configuration - file used by smbd. -

        DIAGNOSTICS

        The program will issue a message saying whether the + if the hostname parameter is supplied.

        FILES

        smb.conf(5)

        This is usually the name of the configuration + file used by smbd(8). +

        DIAGNOSTICS

        The program will issue a message saying whether the configuration file loaded OK or not. This message may be preceded by errors and warnings if the file did not load. If the file was loaded OK, the program then dumps all known service details - to stdout.

        VERSION

        This man page is correct for version 3.0 of - the Samba suite.

        SEE ALSO

        smb.conf(5), - smbd(8) -

        AUTHOR

        The original Samba software and related utilities + to stdout.

        VERSION

        This man page is correct for version 3.0 of + the Samba suite.

        SEE ALSO

        smb.conf(5), smbd(8)

        AUTHOR

        The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar - to the way the Linux kernel is developed.

        The original Samba man pages were written by Karl Auer. + to the way the Linux kernel is developed.

        The original Samba man pages were written by Karl Auer. The man page sources were converted to YODL format (another - excellent piece of Open Source software, available at - ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 + excellent piece of Open Source software, available at + ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 release by Jeremy Allison. The conversion to DocBook for - Samba 2.2 was done by Gerald Carter

        \ No newline at end of file + Samba 2.2 was done by Gerald Carter. The conversion to DocBook XML 4.2 + for Samba 3.0 was done by Alexander Bokovoy.

        diff --git a/docs/htmldocs/testprns.1.html b/docs/htmldocs/testprns.1.html index 0225aad9d5..ff7d4efd33 100644 --- a/docs/htmldocs/testprns.1.html +++ b/docs/htmldocs/testprns.1.html @@ -1,253 +1,38 @@ - -testprns

        testprns

        Name

        testprns -- check printer name for validity with smbd

        Synopsis

        testprns {printername} [printcapname]

        DESCRIPTION

        This tool is part of the Samba suite.

        testprns is a very simple test program +testprns

        Name

        testprns — check printer name for validity with smbd

        Synopsis

        testprns {printername} [printcapname]

        DESCRIPTION

        This tool is part of the Samba(7) suite.

        testprns is a very simple test program to determine whether a given printer name is valid for use in - a service to be provided by smbd(8).

        "Valid" in this context means "can be found in the - printcap specified". This program is very stupid - so stupid in + a service to be provided by smbd(8).

        "Valid" in this context means "can be found in the + printcap specified". This program is very stupid - so stupid in fact that it would be wisest to always specify the printcap file - to use.

        OPTIONS

        printername

        The printer name to validate.

        Printer names are taken from the first field in each + to use.

        OPTIONS

        printername

        The printer name to validate.

        Printer names are taken from the first field in each record in the printcap file, single printer names and sets - of aliases separated by vertical bars ("|") are recognized. + of aliases separated by vertical bars ("|") are recognized. Note that no validation or checking of the printcap syntax is done beyond that required to extract the printer name. It may be that the print spooling system is more forgiving or less - forgiving than testprns. However, if - testprns finds the printer then - smbd should do so as well.

        printcapname

        This is the name of the printcap file within - which to search for the given printer name.

        If no printcap name is specified testprns - will attempt to scan the printcap file name - specified at compile time.

        FILES

        /etc/printcap

        This is usually the default printcap - file to scan. See printcap (5). -

        DIAGNOSTICS

        If a printer is found to be valid, the message - "Printer name <printername> is valid" will be - displayed.

        If a printer is found to be invalid, the message - "Printer name <printername> is not valid" will be - displayed.

        All messages that would normally be logged during + forgiving than testprns. However, if + testprns finds the printer then smbd(8) should do so as well.

        printcapname

        This is the name of the printcap file within + which to search for the given printer name.

        If no printcap name is specified testprns + will attempt to scan the printcap file name + specified at compile time.

        FILES

        /etc/printcap

        This is usually the default printcap + file to scan. See printcap (5). +

        DIAGNOSTICS

        If a printer is found to be valid, the message + "Printer name <printername> is valid" will be + displayed.

        If a printer is found to be invalid, the message + "Printer name <printername> is not valid" will be + displayed.

        All messages that would normally be logged during operation of the Samba daemons are logged by this program to the - file test.log in the current directory. The + file test.log in the current directory. The program runs at debuglevel 3, so quite extensive logging information is written. The log should be checked carefully - for errors and warnings.

        Other messages are self-explanatory.

        VERSION

        This man page is correct for version 2.2 of - the Samba suite.

        SEE ALSO

        printcap(5), - smbd(8), - smbclient(1) -

        AUTHOR

        The original Samba software and related utilities + for errors and warnings.

        Other messages are self-explanatory.

        VERSION

        This man page is correct for version 3.0 of + the Samba suite.

        SEE ALSO

        printcap(5), + smbd(8), smbclient(1)

        AUTHOR

        The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar - to the way the Linux kernel is developed.

        The original Samba man pages were written by Karl Auer. + to the way the Linux kernel is developed.

        The original Samba man pages were written by Karl Auer. The man page sources were converted to YODL format (another - excellent piece of Open Source software, available at - ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 + excellent piece of Open Source software, available at + ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 release by Jeremy Allison. The conversion to DocBook for - Samba 2.2 was done by Gerald Carter

        \ No newline at end of file + Samba 2.2 was done by Gerald Carter. The conversion to DocBook XML 4.2 + for Samba 3.0 was done by Alexander Bokovoy.

        diff --git a/docs/htmldocs/type.html b/docs/htmldocs/type.html index e3f09acc18..0e0f6b7d2a 100644 --- a/docs/htmldocs/type.html +++ b/docs/htmldocs/type.html @@ -1,389 +1,9 @@ - -Type of installation
        SAMBA Project Documentation
        PrevNext

        II. Type of installation

        Table of Contents
        5. User and Share security level (for servers not in a domain)
        6. How to Configure Samba as a NT4 Primary Domain Controller
        6.1. Prerequisite Reading
        6.2. Background
        6.3. Configuring the Samba Domain Controller
        6.4. Creating Machine Trust Accounts and Joining Clients to the -Domain
        6.4.1. Manual Creation of Machine Trust Accounts
        6.4.2. "On-the-Fly" Creation of Machine Trust Accounts
        6.4.3. Joining the Client to the Domain
        6.5. Common Problems and Errors
        6.6. System Policies and Profiles
        6.7. What other help can I get?
        6.8. Domain Control for Windows 9x/ME
        6.8.1. Configuration Instructions: Network Logons
        6.8.2. Configuration Instructions: Setting up Roaming User Profiles
        6.9. DOMAIN_CONTROL.txt : Windows NT Domain Control & Samba
        7. How to Act as a Backup Domain Controller in a Purely Samba Controlled Domain
        7.1. Prerequisite Reading
        7.2. Background
        7.3. What qualifies a Domain Controller on the network?
        7.3.1. How does a Workstation find its domain controller?
        7.3.2. When is the PDC needed?
        7.4. Can Samba be a Backup Domain Controller?
        7.5. How do I set up a Samba BDC?
        7.5.1. How do I replicate the smbpasswd file?
        8. Samba as a ADS domain member
        8.1. Installing the required packages for Debian
        8.2. Installing the required packages for RedHat
        8.3. Compile Samba
        8.4. Setup your /etc/krb5.conf
        8.5. Create the computer account
        8.5.1. Possible errors
        8.6. Test your server setup
        8.7. Testing with smbclient
        8.8. Notes
        9. Samba as a NT4 domain member
        9.1. Joining an NT Domain with Samba 2.2
        9.2. Samba and Windows 2000 Domains
        9.3. Why is this better than security = server?
        PrevHomeNext
        LanMan and NT Password Encryption in Samba User and Share security level (for servers not in a domain)
        \ No newline at end of file +PartII.Server Configuration Basics
        PartII.Server Configuration Basics
        PrevNext

        Server Configuration Basics

        First Steps in Server Configuration

        +Samba can operate in various modes within SMB networks. This HOWTO section contains information on +configuring samba to function as the type of server your network requires. Please read this +section carefully. +

        Table of Contents

        4. Server Types and Security Modes
        Features and Benefits
        Server Types
        Samba Security Modes
        User Level Security
        Share Level Security
        Domain Security Mode (User Level Security)
        ADS Security Mode (User Level Security)
        Server Security (User Level Security)
        Seamless Windows Network Integration
        Common Errors
        What makes Samba a SERVER?
        What makes Samba a Domain Controller?
        What makes Samba a Domain Member?
        Constantly Losing Connections to Password Server
        5. Domain Control
        Features and Benefits
        Basics of Domain Control
        Domain Controller Types
        Preparing for Domain Control
        Domain Control - Example Configuration
        Samba ADS Domain Control
        Domain and Network Logon Configuration
        Domain Network Logon Service
        Security Mode and Master Browsers
        Common Problems and Errors
        I cannot include a '$' in a machine name
        I get told "You already have a connection to the Domain...." +or "Cannot join domain, the credentials supplied conflict with an +existing set.." when creating a machine trust account.
        The system can not log you on (C000019B)....
        The machine trust account for this computer either does not +exist or is not accessible.
        When I attempt to login to a Samba Domain from a NT4/W2K workstation, +I get a message about my account being disabled.
        Until a few minutes after Samba has started, clients get the error "Domain Controller Unavailable"
        6. Backup Domain Control
        Features And Benefits
        Essential Background Information
        MS Windows NT4 Style Domain Control
        Active Directory Domain Control
        What qualifies a Domain Controller on the network?
        How does a Workstation find its domain controller?
        Backup Domain Controller Configuration
        Example Configuration
        Common Errors
        Machine Accounts keep expiring, what can I do?
        Can Samba be a Backup Domain Controller to an NT4 PDC?
        How do I replicate the smbpasswd file?
        Can I do this all with LDAP?
        7. Domain Membership
        Features and Benefits
        MS Windows Workstation/Server Machine Trust Accounts
        Manual Creation of Machine Trust Accounts
        Using NT4 Server Manager to Add Machine Accounts to the Domain
        "On-the-Fly" Creation of Machine Trust Accounts
        Making an MS Windows Workstation or Server a Domain Member
        Domain Member Server
        Joining an NT4 type Domain with Samba-3
        Why is this better than security = server?
        Samba ADS Domain Membership
        Setup your smb.conf
        Setup your /etc/krb5.conf
        Create the computer account
        Test your server setup
        Testing with smbclient
        Notes
        Common Errors
        Can Not Add Machine Back to Domain
        Adding Machine to Domain Fails
        8. Stand-Alone Servers
        Features and Benefits
        Background
        Example Configuration
        Reference Documentation Server
        Central Print Serving
        Common Errors
        9. MS Windows Network Configuration Guide
        Note
        PrevUpNext
        Chapter3.FastStart for the ImpatientHomeChapter4.Server Types and Security Modes
        diff --git a/docs/htmldocs/vfstest.1.html b/docs/htmldocs/vfstest.1.html index 1fd7880805..7b124c070f 100644 --- a/docs/htmldocs/vfstest.1.html +++ b/docs/htmldocs/vfstest.1.html @@ -1,487 +1,43 @@ - -vfstest

        vfstest

        Name

        vfstest -- tool for testing samba VFS modules

        DESCRIPTION

        This tool is part of the Samba suite.

        vfstest is a small command line +vfstest

        Name

        vfstest — tool for testing samba VFS modules

        Synopsis

        vfstest [-d debuglevel] [-c command] [-l logfile] [-h]

        DESCRIPTION

        This tool is part of the Samba(7) suite.

        vfstest is a small command line utility that has the ability to test dso samba VFS modules. It gives the user the ability to call the various VFS functions manually and supports cascaded VFS modules. -

        OPTIONS

        -c|--command=command

        Execute the specified (colon-separated) commands. +

        OPTIONS

        -c|--command=command

        Execute the specified (colon-separated) commands. See below for the commands that are available. -

        -d|--debug=debuglevel

        debuglevel is an integer +

        -h|--help

        Print a summary of command line options. +

        -l|--logfile=logbasename

        File name for log/debug files. The extension + '.client' will be appended. The log file is never removed + by the client. +

        -V

        Prints the version number for +smbd.

        -s <configuration file>

        The file specified contains the +configuration details required by the server. The +information in this file includes server-specific +information such as what printcap file to use, as well +as descriptions of all the services that the server is +to provide. See +smb.conf(5) for more information. +The default configuration file name is determined at +compile time.

        -d|--debug=debuglevel

        debuglevel is an integer from 0 to 10. The default value if this parameter is -not specified is zero.

        The higher this value, the more detail will be +not specified is zero.

        The higher this value, the more detail will be logged to the log files about the activities of the server. At level 0, only critical errors and serious warnings will be logged. Level 1 is a reasonable level for day to day running - it generates a small amount of -information about operations carried out.

        Levels above 1 will generate considerable +information about operations carried out.

        Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem. Levels above 3 are designed for use only by developers and generate HUGE amounts of log -data, most of which is extremely cryptic.

        Note that specifying this parameter here will -override the log -level parameter in the smb.conf(5) file.

        -h|--help

        Print a summary of command line options.

        -l|--logfile=logbasename

        File name for log/debug files. The extension - '.client' will be appended. The log file is never removed - by the client. -

        COMMANDS

        VFS COMMANDS

        • load <module.so> - Load specified VFS module

        • populate <char> <size> - Populate a data buffer with the specified data -

        • showdata [<offset> <len>] - Show data currently in data buffer -

        • connect - VFS connect()

        • disconnect - VFS disconnect()

        • disk_free - VFS disk_free()

        • opendir - VFS opendir()

        • readdir - VFS readdir()

        • mkdir - VFS mkdir()

        • rmdir - VFS rmdir()

        • closedir - VFS closedir()

        • open - VFS open()

        • close - VFS close()

        • read - VFS read()

        • write - VFS write()

        • lseek - VFS lseek()

        • rename - VFS rename()

        • fsync - VFS fsync()

        • stat - VFS stat()

        • fstat - VFS fstat()

        • lstat - VFS lstat()

        • unlink - VFS unlink()

        • chmod - VFS chmod()

        • fchmod - VFS fchmod()

        • chown - VFS chown()

        • fchown - VFS fchown()

        • chdir - VFS chdir()

        • getwd - VFS getwd()

        • utime - VFS utime()

        • ftruncate - VFS ftruncate()

        • lock - VFS lock()

        • symlink - VFS symlink()

        • readlink - VFS readlink()

        • link - VFS link()

        • mknod - VFS mknod()

        • realpath - VFS realpath()

        GENERAL COMMANDS

        • conf <smb.conf> - Load a different configuration file

        • help [<command>] - Get list of commands or info about specified command

        • debuglevel <level> - Set debug level

        • freemem - Free memory currently in use

        • exit - Exit vfstest

        VERSION

        This man page is correct for version 3.0 of the Samba - suite.

        AUTHOR

        The original Samba software and related utilities +data, most of which is extremely cryptic.

        Note that specifying this parameter here will +override the log +level parameter in the +smb.conf(5) file.

        -l|--logfile=logbasename

        File name for log/debug files. The extension +".client" will be appended. The log file is +never removed by the client. +

        COMMANDS

        VFS COMMANDS

        • load <module.so> - Load specified VFS module

        • populate <char> <size> - Populate a data buffer with the specified data +

        • showdata [<offset> <len>] - Show data currently in data buffer +

        • connect - VFS connect()

        • disconnect - VFS disconnect()

        • disk_free - VFS disk_free()

        • opendir - VFS opendir()

        • readdir - VFS readdir()

        • mkdir - VFS mkdir()

        • rmdir - VFS rmdir()

        • closedir - VFS closedir()

        • open - VFS open()

        • close - VFS close()

        • read - VFS read()

        • write - VFS write()

        • lseek - VFS lseek()

        • rename - VFS rename()

        • fsync - VFS fsync()

        • stat - VFS stat()

        • fstat - VFS fstat()

        • lstat - VFS lstat()

        • unlink - VFS unlink()

        • chmod - VFS chmod()

        • fchmod - VFS fchmod()

        • chown - VFS chown()

        • fchown - VFS fchown()

        • chdir - VFS chdir()

        • getwd - VFS getwd()

        • utime - VFS utime()

        • ftruncate - VFS ftruncate()

        • lock - VFS lock()

        • symlink - VFS symlink()

        • readlink - VFS readlink()

        • link - VFS link()

        • mknod - VFS mknod()

        • realpath - VFS realpath()

        GENERAL COMMANDS

        • conf <smb.conf> - Load a different configuration file

        • help [<command>] - Get list of commands or info about specified command

        • debuglevel <level> - Set debug level

        • freemem - Free memory currently in use

        • exit - Exit vfstest

        VERSION

        This man page is correct for version 3.0 of the Samba + suite.

        AUTHOR

        The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar - to the way the Linux kernel is developed.

        The vfstest man page was written by Jelmer Vernooij.

        \ No newline at end of file + to the way the Linux kernel is developed.

        The vfstest man page was written by Jelmer Vernooij.

        diff --git a/docs/htmldocs/wbinfo.1.html b/docs/htmldocs/wbinfo.1.html index a8aa065eed..13967b3e61 100644 --- a/docs/htmldocs/wbinfo.1.html +++ b/docs/htmldocs/wbinfo.1.html @@ -1,383 +1,71 @@ - -wbinfo

        wbinfo

        Name

        wbinfo -- Query information from winbind daemon

        Synopsis

        wbinfo [-u] [-g] [-i ip] [-N netbios-name] [-n name] [-s sid] [-U uid] [-G gid] [-S sid] [-Y sid] [-t] [-m] [-r user] [-a user%password] [-A user%password] [-p]

        DESCRIPTION

        This tool is part of the Samba suite.

        The wbinfo program queries and returns information - created and used by the winbindd(8) daemon.

        The winbindd(8) daemon must be configured - and running for the wbinfo program to be able - to return information.

        OPTIONS

        -u

        This option will list all users available - in the Windows NT domain for which the winbindd(8) - daemon is operating in. Users in all trusted domains +wbinfo

        Name

        wbinfo — Query information from winbind daemon

        Synopsis

        wbinfo [-u] [-g] [-N netbios-name] [-I ip] [-n name] [-s sid] [-U uid] [-G gid] [-S sid] [-Y sid] [-t] [-m] [--sequence] [-r user] [-a user%password] [-A user%password] [--get-auth-user] [-p]

        DESCRIPTION

        This tool is part of the Samba(7) suite.

        The wbinfo program queries and returns information + created and used by the winbindd(8) daemon.

        The winbindd(8) daemon must be configured + and running for the wbinfo program to be able + to return information.

        OPTIONS

        -u

        This option will list all users available + in the Windows NT domain for which the winbindd(8) daemon is operating in. Users in all trusted domains will also be listed. Note that this operation does not assign - user ids to any users that have not already been seen by - winbindd(8).

        -g

        This option will list all groups available - in the Windows NT domain for which the winbindd(8) - daemon is operating in. Groups in all trusted domains + user ids to any users that have not already been seen by winbindd(8) + .

        -g

        This option will list all groups available + in the Windows NT domain for which the Samba(7) daemon is operating in. Groups in all trusted domains will also be listed. Note that this operation does not assign - group ids to any groups that have not already been seen by - winbindd(8).

        -N name

        The -N option - queries winbindd(8) to query the WINS + group ids to any groups that have not already been + seen by winbindd(8).

        -N name

        The -N option + queries winbindd(8) to query the WINS server for the IP address associated with the NetBIOS name - specified by the name parameter. -

        -I ip

        The -I option - queries winbindd(8) to send a node status + specified by the name parameter. +

        -I ip

        The -I option + queries winbindd(8) to send a node status request to get the NetBIOS name associated with the IP address - specified by the ip parameter. -

        -n name

        The -n option - queries winbindd(8) for the SID + specified by the ip parameter. +

        -n name

        The -n option + queries winbindd(8) for the SID associated with the name specified. Domain names can be specified before the user name by using the winbind separator character. For example CWDOM1/Administrator refers to the Administrator user in the domain CWDOM1. If no domain is specified then the - domain used is the one specified in the smb.conf - workgroup parameter.

        -s sid

        Use -s to resolve - a SID to a name. This is the inverse of the -n - option above. SIDs must be specified as ASCII strings + domain used is the one specified in the smb.conf(5) workgroup + parameter.

        -s sid

        Use -s to resolve + a SID to a name. This is the inverse of the -n + option above. SIDs must be specified as ASCII strings in the traditional Microsoft format. For example, - S-1-5-21-1455342024-3071081365-2475485837-500.

        -U uid

        Try to convert a UNIX user id to a Windows NT + S-1-5-21-1455342024-3071081365-2475485837-500.

        -U uid

        Try to convert a UNIX user id to a Windows NT SID. If the uid specified does not refer to one within - the winbind uid range then the operation will fail.

        -G gid

        Try to convert a UNIX group id to a Windows + the winbind uid range then the operation will fail.

        -G gid

        Try to convert a UNIX group id to a Windows NT SID. If the gid specified does not refer to one within - the winbind gid range then the operation will fail.

        -S sid

        Convert a SID to a UNIX user id. If the SID - does not correspond to a UNIX user mapped by winbindd(8) then the operation will fail.

        -Y sid

        Convert a SID to a UNIX group id. If the SID - does not correspond to a UNIX group mapped by winbindd(8) then the operation will fail.

        -t

        Verify that the workstation trust account + the winbind gid range then the operation will fail.

        -S sid

        Convert a SID to a UNIX user id. If the SID + does not correspond to a UNIX user mapped by winbindd(8) then the operation will fail.

        -Y sid

        Convert a SID to a UNIX group id. If the SID + does not correspond to a UNIX group mapped by winbindd(8) then + the operation will fail.

        -t

        Verify that the workstation trust account created when the Samba server is added to the Windows NT - domain is working.

        -m

        Produce a list of domains trusted by the - Windows NT server winbindd(8) contacts + domain is working.

        -m

        Produce a list of domains trusted by the + Windows NT server winbindd(8) contacts when resolving names. This list does not include the Windows NT domain the server is a Primary Domain Controller for. -

        -r username

        Try to obtain the list of UNIX group ids +

        --sequence

        Show sequence numbers of + all known domains

        -r username

        Try to obtain the list of UNIX group ids to which the user belongs. This only works for users defined on a Domain Controller. -

        -a username%password

        Attempt to authenticate a user via winbindd. +

        -a username%password

        Attempt to authenticate a user via winbindd. This checks both authenticaion methods and reports its results. -

        -A username%password

        Store username and password used by winbindd +

        -A username%password

        Store username and password used by winbindd during session setup to a domain controller. This enables winbindd to operate in a Windows 2000 domain with Restrict Anonymous turned on (a.k.a. Permissions compatiable with Windows 2000 servers only). -

        EXIT STATUS

        The wbinfo program returns 0 if the operation - succeeded, or 1 if the operation failed. If the winbindd(8) - daemon is not working wbinfo will always return - failure.

        VERSION

        This man page is correct for version 3.0 of - the Samba suite.

        AUTHOR

        The original Samba software and related utilities +

        --get-auth-user

        Print username and password used by winbindd + during session setup to a domain controller. Username + and password can be set using '-A'. Only available for + root.

        -p

        Check whether winbindd is still alive. + Prints out either 'succeeded' or 'failed'. +

        -V

        Prints the version number for +smbd.

        -h|--help

        Print a summary of command line options. +

        EXIT STATUS

        The wbinfo program returns 0 if the operation + succeeded, or 1 if the operation failed. If the winbindd(8) daemon is not working wbinfo will always return + failure.

        VERSION

        This man page is correct for version 3.0 of + the Samba suite.

        SEE ALSO

        winbindd(8)

        AUTHOR

        The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar - to the way the Linux kernel is developed.

        wbinfo and winbindd - were written by Tim Potter.

        The conversion to DocBook for Samba 2.2 was done - by Gerald Carter

        \ No newline at end of file + to the way the Linux kernel is developed.

        wbinfo and winbindd + were written by Tim Potter.

        The conversion to DocBook for Samba 2.2 was done + by Gerald Carter. The conversion to DocBook XML 4.2 for Samba + 3.0 was done by Alexander Bokovoy.

        diff --git a/docs/htmldocs/winbind.html b/docs/htmldocs/winbind.html index 1558512a61..8ba0047742 100644 --- a/docs/htmldocs/winbind.html +++ b/docs/htmldocs/winbind.html @@ -1,244 +1,74 @@ - -Unified Logons between Windows NT and UNIX using Winbind
        SAMBA Project Documentation
        PrevNext

        Chapter 15. Unified Logons between Windows NT and UNIX using Winbind

        15.1. Abstract

        Integration of UNIX and Microsoft Windows NT through - a unified logon has been considered a "holy grail" in heterogeneous +Chapter21.Integrated Logon Support using Winbind

        Chapter21.Integrated Logon Support using Winbind
        PrevPartIII.Advanced ConfigurationNext

        Chapter21.Integrated Logon Support using Winbind

        Tim Potter

        Samba Team

        Andrew Tridgell

        Samba Team

        Naag Mummaneni

        Jelmer R. Vernooij

        The Samba Team

        John H. Terpstra

        Samba Team

        27 June 2002

        Table of Contents

        Features and Benefits
        Introduction
        What Winbind Provides
        Target Uses
        How Winbind Works
        Microsoft Remote Procedure Calls
        Microsoft Active Directory Services
        Name Service Switch
        Pluggable Authentication Modules
        User and Group ID Allocation
        Result Caching
        Installation and Configuration
        Introduction
        Requirements
        Testing Things Out
        Conclusion
        Common Errors

        Features and Benefits

        Integration of UNIX and Microsoft Windows NT through + a unified logon has been considered a "holy grail" in heterogeneous computing environments for a long time. We present - winbind, a component of the Samba suite + winbind, a component of the Samba suite of programs as a solution to the unified logon problem. Winbind uses a UNIX implementation of Microsoft RPC calls, Pluggable Authentication Modules, and the Name Service Switch to allow Windows NT domain users to appear and operate as UNIX users on a UNIX machine. This paper describes the winbind system, explaining the functionality it provides, how it is configured, - and how it works internally.

        Introduction

        It is well known that UNIX and Microsoft Windows NT have different models for representing user and group information and use different technologies for implementing them. This fact has made it difficult to integrate the two systems in a satisfactory - manner.

        One common solution in use today has been to create + manner.

        One common solution in use today has been to create identically named user accounts on both the UNIX and Windows systems and use the Samba suite of programs to provide file and print services between the two. This solution is far from perfect however, as adding and deleting users on both sets of machines becomes a chore and two sets of passwords are required both of which can lead to synchronization problems between the UNIX and Windows - systems and confusion for users.

        We divide the unified logon problem for UNIX machines into - three smaller problems:

        • Obtaining Windows NT user and group information -

        • Authenticating Windows NT users -

        • Password changing for Windows NT users -

        Ideally, a prospective solution to the unified logon problem + systems and confusion for users.

        We divide the unified logon problem for UNIX machines into + three smaller problems:

        • Obtaining Windows NT user and group information +

        • Authenticating Windows NT users +

        • Password changing for Windows NT users +

        Ideally, a prospective solution to the unified logon problem would satisfy all the above components without duplication of information on the UNIX machines and without creating additional tasks for the system administrator when maintaining users and groups on either system. The winbind system provides a simple and elegant solution to all three components of the unified logon - problem.

        What Winbind Provides

        Winbind unifies UNIX and Windows NT account management by allowing a UNIX box to become a full member of a NT domain. Once this is done the UNIX box will see NT users and groups as if they were native UNIX users and groups, allowing the NT domain to be used in much the same manner that NIS+ is used within - UNIX-only environments.

        The end result is that whenever any + UNIX-only environments.

        The end result is that whenever any program on the UNIX machine asks the operating system to lookup a user or group name, the query will be resolved by asking the NT domain controller for the specified domain to do the lookup. Because Winbind hooks into the operating system at a low level (via the NSS name resolution modules in the C library) this redirection to the NT domain controller is completely - transparent.

        Users on the UNIX machine can then use NT user and group - names as they would use "native" UNIX names. They can chown files + transparent.

        Users on the UNIX machine can then use NT user and group + names as they would use "native" UNIX names. They can chown files so that they are owned by NT domain users or even login to the - UNIX machine and run a UNIX X-Window session as a domain user.

        The only obvious indication that Winbind is being used is + UNIX machine and run a UNIX X-Window session as a domain user.

        The only obvious indication that Winbind is being used is that user and group names take the form DOMAIN\user and DOMAIN\group. This is necessary as it allows Winbind to determine that redirection to a domain controller is wanted for a particular - lookup and which trusted domain is being referenced.

        Additionally, Winbind provides an authentication service + lookup and which trusted domain is being referenced.

        Additionally, Winbind provides an authentication service that hooks into the Pluggable Authentication Modules (PAM) system to provide authentication via a NT domain to any PAM enabled applications. This capability solves the problem of synchronizing passwords between systems since all passwords are stored in a single - location (on the domain controller).

        15.3.1. Target Uses

        Winbind is targeted at organizations that have an + location (on the domain controller).

        Target Uses

        Winbind is targeted at organizations that have an existing NT based domain infrastructure into which they wish to put UNIX workstations or servers. Winbind will allow these organizations to deploy UNIX workstations without having to maintain a separate account infrastructure. This greatly simplifies the administrative overhead of deploying UNIX - workstations into a NT based organization.

        Another interesting way in which we expect Winbind to + workstations into a NT based organization.

        Another interesting way in which we expect Winbind to be used is as a central part of UNIX based appliances. Appliances that provide file and print services to Microsoft based networks will be able to use Winbind to provide seamless integration of - the appliance into the domain.

        How Winbind Works

        The winbind system is designed around a client/server + architecture. A long running winbindd daemon listens on a UNIX domain socket waiting for requests to arrive. These requests are generated by the NSS and PAM - clients and processed sequentially.

        The technologies used to implement winbind are described - in detail below.

        15.4.1. Microsoft Remote Procedure Calls

        Over the last two years, efforts have been underway + clients and processed sequentially.

        The technologies used to implement winbind are described + in detail below.

        Microsoft Remote Procedure Calls

        Over the last few years, efforts have been underway by various Samba Team members to decode various aspects of the Microsoft Remote Procedure Call (MSRPC) system. This system is used for most network related operations between @@ -246,23 +76,21 @@ NAME="AEN2258">15.4.1. Microsoft Remote Procedure Calls

        Winbind uses various MSRPC calls to enumerate domain users + can be used for other purposes.

        Winbind uses various MSRPC calls to enumerate domain users and groups and to obtain detailed information about individual users or groups. Other MSRPC calls can be used to authenticate NT domain users and to change user passwords. By directly querying a Windows PDC for user and group information, winbind maps the - NT account information onto UNIX user and group names.

        Microsoft Active Directory Services

        + Since late 2001, Samba has gained the ability to + interact with Microsoft Windows 2000 using its 'Native + Mode' protocols, rather than the NT4 RPC services. + Using LDAP and Kerberos, a domain member running + winbind can enumerate users and groups in exactly the + same way as a Win2k client would, and in so doing + provide a much more efficient and + effective winbind implementation. +

        Name Service Switch

        The Name Service Switch, or NSS, is a feature that is present in many UNIX operating systems. It allows system information such as hostnames, mail aliases and user information to be resolved from different sources. For example, a standalone @@ -270,9 +98,7 @@ NAME="AEN2262">15.4.2. Name Service Switch

        %Hy_EhPj^Y=s|Ⳉxrg3kR IDbKBGIVrFtC][!AwK%˾c֍`g|.5E`q1_mwl=qYe^ PugTkA]E8 w:He^sdyA5~ m + {NemY7 4LA @0)`sW7ֹ EfgLObcތYvsJęut+Q"c쌿rs ڝy:m5kuxVGd ͍l !l5X=ܑz-l!ƀ,#S5-vK6N\x}`穛`im]f5Y$stwCD[[ @e~ /7_`%9 (͹ ƠRx v"ilՉ< )I=éOy;!BmT-w[I)!džrKA{l?xݭ%|xz( +PIGakV g)*),)yai L:K @`fnY0I3X΂=sY++T+KMF|:Sn8>]+=c4g.TXTp_7!ڝ7{xtZTmg/Ij&f}R5\ Q8SRاʟW*_yR Q6A~zX67`4u._; +-2 _+01ޱFu* +Ɣ~x<? p*j: z"w5£Mt? V\xN v{qȣf@|_s55Hm,= Q r\:uƚ4Rp=)sL ts ̥/O+ryN<5Gd]h'cA~޽5uqkQdvi8'1z>Ucbɵ%?]<=--]6;]ow|+LB=OOTr_[+ѷ;fjQEZluRV~gsQ~xep;: LkhϴP'~:i,:Iqq,JZc..D&sCْ,b!&=KoØJ|q3OV)ʮ|~b'ӶC6 +rFѫuy')IEDvaRO} G>oHSW*Vɲ2{|t\"!`&Ǘ3QY̖6]kQP b"#\qzd dg2h*,m~?# J뛎>h-]~ k,:+ +1,8 HM_\^PMtĆ+o402#p_t'ۦҡWLвnAٽvsWh$]TɇBROiE޹Z'A^l3'.S:HH]_hsơ%g(=endstream +endobj +4683 0 obj << +/Type /Page +/Contents 4684 0 R +/Resources 4682 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4681 0 R +>> endobj +4685 0 obj << +/D [4683 0 R /XYZ 85.039 786.531 null] +>> endobj +874 0 obj << +/D [4683 0 R /XYZ 85.039 766.606 null] +>> endobj +2968 0 obj << +/D [4683 0 R /XYZ 85.039 672.187 null] +>> endobj +878 0 obj << +/D [4683 0 R /XYZ 85.039 630.546 null] +>> endobj +4686 0 obj << +/D [4683 0 R /XYZ 85.039 603.932 null] +>> endobj +882 0 obj << +/D [4683 0 R /XYZ 85.039 284.675 null] +>> endobj +4687 0 obj << +/D [4683 0 R /XYZ 85.039 262.913 null] +>> endobj +4682 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F66 3248 0 R /F72 3974 0 R /F18 3977 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4690 0 obj << +/Length 4263 +/Filter /FlateDecode +>> +stream +xڵ;]sܸSy UmC=JGqjMqwkfƊn <ahX4U pDvtU,g*O':|ĎB[CVoYnui_F#-I$&F%,IU@_oWMa=_-$E` HaND4DH]j]iJYxgٛclΣsu)*[rSCRGnEįg O['bC"ʹ*=SaȿNܙ]w_t#lE8YxY(x4[kU|@ .E|ƽprdr@ӽwAY@L(! ʤV : ?P֝kAf~ynzn$B8&`G\9Ɍ~hV_{lJ!hHȉ?I/I$acQfhsw=!8w? +-S'_ +؋$;V\fQ5vDz9yjW a{(d;sɿ\;IQ! |:Nf$}|T5)/:&oo}|||& W+@H..-B6^[Xy{8 L&3s]B0i˧kSq.IXť yeoA q_8w~J<5Wn[]SZE8@€\xp0S1i ʀ+Ǟ"Iz:62ekLrm<̳Ү㛵[El a_8Zdf: x{{\Ů\$R |\L98DO1,*p ޤ* s͙XIS7't ;C'%;\|?٠7{S?ۅ J"Uy]e4 ͉֝$a4N 52v^`kݦFy8 g؟1|'MvrqnˠS{Sqú_a/*Ւ)oQ,)2ArZLks6PpvcMTcIQ ?֣uH0:.27sBP1߄sOh<\T.Y9'wGx$;কp?Ae٤LbG0j C8y 1딲ģr&\e;p5'Y ")g`s-GAu6[DNW]0F^\Xp +H4ɽ9+)k9ǔi5K6@;d @(,b+ccvn FG"pjv-|o: u Ikm(&x}KV&Si->+K0G +qRSohc @@:2HŔ쀶WxVd]Zu䋦:r? ܭ F?' $\L232zY1cd{qrϤ50NubyނQ"`h0;wiJj)'k;wBiMò\qFx<`?(i,O#4QȣLJ,"8 hpY(uNZJK!-8:eЙ[疻!Q~eN!+ Bk2xkFNEtW=Br$I$lR~[ 7+O(營\Ew`>1M57c9~xHǧr,s5wA1+ykCn06 76aq޻P +"zw jZ.`&à EgAXe$~թsjyr@.8Sq02q F7I=ކ,==vGwbcGh4\_Yw%3ΏU]T觔(<%:AyjxZ7Ӷ#en A 덴TS,|9>Y=eҍ3SN'7k+~`ő1S[ngC떗 <kWͥNTbY_P(G:EzbIRhߞ mSd2-t RjoıHC-ߞDQ<i6} H.aB'@؍U٭ak +b.iz5V%!$ݝVߌC/뛯C Bgȏ`߭;jăE 24_IH)oY {~Ϸ~$W-st ڮ<}Wr: &x9ZAh;]> XcSjgW9k\,g+vq: bIQ=cYJw$G~8 [R)nR&5 fը56vz|E_[c8b\nc DtB4\c*13oKq.wRϺ~^)LM݄_ߠמ\zT^rQ+O!ׅYz݊ri㰬QIMObfs2aJ3'n8T G還 +Uɛ-p"&*]%gA"w\eC L垜htQڼ܀;ߐ/t 26Dm~*YPLƥG"7'z T[+7+vްkaoyWmAƿ5c~ІUq;v'ywN^\5=Eׁ*K~lVX5*Zq +R3 G.*{m*ӎz:"CgﱓU)LML}p#+f +ڦ\7Vg +c(dBy JȍI/S%^z{ L}ݒ)Bv~xA?d;BrHitr=l|籟am0*he񚣓v-)j_|h0kLsyqϽ Qi/JtGdf",d]IBU%I9yӒ03endstream +endobj +4689 0 obj << +/Type /Page +/Contents 4690 0 R +/Resources 4688 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4681 0 R +>> endobj +4691 0 obj << +/D [4689 0 R /XYZ 85.039 786.531 null] +>> endobj +886 0 obj << +/D [4689 0 R /XYZ 85.039 548.572 null] +>> endobj +4692 0 obj << +/D [4689 0 R /XYZ 85.039 527.376 null] +>> endobj +4688 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F56 2898 0 R /F35 2888 0 R /F20 2873 0 R /F72 3974 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4695 0 obj << +/Length 3939 +/Filter /FlateDecode +>> +stream +xڥnF_a,d;dg !CK$<g뷮>(QIa]]]wU3/ϓYn(ߵwF~ b- kw}H~q7&)W?:"/7uއU=ց=?/= áOYz?~z履~\+ ?~ݿ/EqIIHݗx,YK$H| RAm0ϒdJ32NnSH{A. a&`=¼8n:jaG쩎u{jf^50l`ЭWj:Q!ī{>ʜ G"w`$@VV[vz +8➟fװUn0T @jj ԭC5ƺf+gڭ 9`#H&!8~=4rf k5CK[۲ O7#3 +;DAف/oC= T߶&pk!?nh>! >gіS|TU\^I! GnDm7r;#~M'^$->' $s5=,Ǚ!`a3uly1@ oٟG@E5O[X 7?@(IXVPB}>,X0 R3e6jo5Ʃד!EBeZ + T#Df6/A IeHgLYilH"Ӽ#Vsl)E'YQcߍh M(ZQcW + ß[:XBu|iİke1u"-7KY390->TeK'Y/QդcnbOPF@Ieac;'3Ȏd!aE %^ax$>9S ),}|?9IpǖԽp2G!T\S7W6 52zgdEuk֎gGCKm #M=?wV@?0]?)JDcbEќEiAF +jpqx؎ʲ0>v1JR2߅",(\*'Ciy^"?SIY'~cۢXF4  =keeTtPeR^֥"T3@pX؆ e;5c}$F#r 59ydsG./Jβ!ý3ӋbxwZu7֍4pډfQ(4Xs 5"q}em6L`#wծ޿P`n.` ˮ D.ec5A*o`Ȟ. }BL vK@488p62aYNEiTy? \uOePUnK Sbc'vA61rQĹ ޳*`o@d0޳ +DKm[%)3WUs$d V0d_9V>啬Dߵr4zfԬ!n(ʔj®o0|!#ꮂjQ2p ѹd#-Rt >^{e #x8Q{F[j0;'kjwxߨ67uiA!zZH}C5]o@83ooc{j4$#D4:˵~N`Ы^W ,< ؟'hN2gIQ 6OpM(A# lؓL2t:&:ΖBOBAq[}v]sMOHD/ьim$e4oh3X~&4 C xvXwV!ށ9C%#yP ˴ad3 !%m*+ +DE̺dgJ,/!~F@2qz`=V6p\+>Y#AQsy!2,;Vë)ZOf̝$8JZL~ڍy9AEGdz:bw^cd%y١%y̳5F!YEhWE!=6-ID@fUp%6\:d}#*"8qq0wLJ,L0m7M$YU Jw.}68(6V%Ѓ#)ӄˬ+CVzhNY1Ex&1*?YȋLIKY>*βy)|?,vbL%8.xG|1dHW!H@3j餛)mҒDpH/$b/ +N7,J 3 C\̪ ] 8N7Pĩ-Ȉ0+z"bFnN@J2 .5KgD&JPQWmvф +8C1Uؼhؙdb;GAwd/ Wȕ!s%]tG>GKw"xd˝a uN#<Me_yUd pE6HO>F{K~tc rܛb9X T<0ӤK,ң ̭xN+^q?G#ZpИrD!Hǹ".'ڗuH]HY+cYf#B;y9Vb_&mè(o?ɂ弙ԓ@ 17 'Ӆ,ՅS q7#X"ҥBo0\#v0Ĥi6%kcK )^DM-|.x+ E`'*jc8GG9AL4njN +~gV{ :c׬ZQ]N1@ +x/Yeх?O#I +%ZK:¿NЬM_dt/tR1c )9E"q4>x""\nzrdo;$A̪ԁ\k +27.2yQy]N|g649`Ӛuh 6\n=#c充BġXx= qwq`4+eNze +c,:0R9 /V\nx/1]x/ŝ0T͍od'ӗ9?|0"ͷҳ0܄AD%k쭟endstream +endobj +4694 0 obj << +/Type /Page +/Contents 4695 0 R +/Resources 4693 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4681 0 R +>> endobj +4696 0 obj << +/D [4694 0 R /XYZ 85.039 786.531 null] +>> endobj +4693 0 obj << +/Font << /F64 3118 0 R /F66 3248 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4699 0 obj << +/Length 3282 +/Filter /FlateDecode +>> +stream +xڭZK6ϯБ1<:&v6TIőXCx/DjjR@4_?0jj'~,O$Rx0lz+EP:E'Ez~Yo(T7Y{~Qޏp$|;zCχ=XU!Og?~Th*.N"?#n>ۮcg͉PlTar[LiAj +H,I4HN Ї+_})8,hԟ+~,avבz%1!azVP'xz^ozhyf ihuyOHyinqR7UTb$5Q FW+KYPjj8 WŠe +trڠ|AlJH +Ly8=]\EWnk&@$M (܋1q?tK)!A+*񾞤`Mhf:I=ݜPL07 `Ϯqu{>( Cy4vm?Pb@gcjc3۝d-EBx\~ZGݖ2]Ƌ¦cof +欱6>YcXc=)Znl6&GWh\oR_4Fr'ewFѹ; ŝtjbCRi"N +4kɻQGY.\0 %_hԵ&Lsƴ bneN^!R +nxmΟQ3-J!ًh} sh40SqAe]ύ9(4Zc$ٰa\]8;֙;қ+8]P؋dh2 zDQ}`xOI'F M3л:zh)e$Q '-ug5Ikdن\+!%xl]Z-7 Z2xǘhQuuܹi@U,&r +X|7K|u3tPmO=p r1l/|naQ\󥄾_zb}Goǰ-LR0]tElEcS=-q.~oOf9 O( (׶r?čT(I&9O.hf0H*ޟx"@0lgCQ@j`d +mCq;FB 1o_'䯓12wǛAUO7/4~1uH2pR:|P[rJ*Fb>BWtfkȓ\/_0B +Ye@C)oLx_z&yBUt^`U-~o0ǯL21 dx({9p~ r7Vl ZADǼ tYG1.xp'&9ˮMG/쀝d`ۍwD%Phsqn2u؆SW@"<= +>e:%.B)#6nd(浏_9{9=QO$N$eXQ`֖`lJq22nNYfhb I̹g8LUUa Bgɞ)$Щ-X3 RߩjWjhS(pE2'R0^(".8|$pdhD `2lb8czd-aIeg*\4J) luu'4hOǠb]|蘈k +E̤nBg.GEaџRM!<)F] ̭-![*UL1RMɣ% RzJAkI6ḯkWmٝFVE Yc0jmGw*"(r=EY>nF3&DK@=Y^֮IJ"MGa6 @U`6?WLꔃ0Fq*託l7V!47m# +:ApbLS5 ֔rpXz_[mVګ4M{)-\f3*[C w(;X(j!B>|Oaf@/Ű~> endobj +4700 0 obj << +/D [4698 0 R /XYZ 85.039 786.531 null] +>> endobj +890 0 obj << +/D [4698 0 R /XYZ 85.039 766.606 null] +>> endobj +4701 0 obj << +/D [4698 0 R /XYZ 85.039 746.481 null] +>> endobj +894 0 obj << +/D [4698 0 R /XYZ 85.039 649.92 null] +>> endobj +4702 0 obj << +/D [4698 0 R /XYZ 85.039 629.326 null] +>> endobj +898 0 obj << +/D [4698 0 R /XYZ 85.039 494.239 null] +>> endobj +4703 0 obj << +/D [4698 0 R /XYZ 85.039 473.644 null] +>> endobj +902 0 obj << +/D [4698 0 R /XYZ 85.039 361.414 null] +>> endobj +4704 0 obj << +/D [4698 0 R /XYZ 85.039 340.213 null] +>> endobj +906 0 obj << +/D [4698 0 R /XYZ 85.039 176.513 null] +>> endobj +4705 0 obj << +/D [4698 0 R /XYZ 85.039 158.039 null] +>> endobj +4697 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4708 0 obj << +/Length 3601 +/Filter /FlateDecode +>> +stream +xڥ]s6ݿB'j&bI}sl'v/}rDKJYEj٢brfc6rIJ%B4k XM˳$2o'5yj;/LgEKC]ˀ}h2ol=FĎ[r~(Q6+71X!Cl@eÃG5 yf vfG8${9WI`G2OrI'=iu.iN ڠNχPّbGnBp'(;T!L1zh/X)^SKnb2gMbXCD[.:w0s}e? WHl+P4(q_߻40eL\TJ2'"Z&L@.,]f:o\ܒg z7!GlNi2L1 +9T6Txlj߸9nEv +ttDcr}')||8ǮsBEiNdVl;Qk.+w +FAbKY)vu;d/ߏÊ+)NzE&+kYrX\Sdgt?p"#L(z6$ZZH0Z@tZ3NH. +.9uPUlGa25ά߼rPBor P`91ʇaj|˴J>w/= Zg~b7FUm0𠠂JT+ ׋pL{d njuA2 tH't#Ho)ԆZ;D$oKzgpIA$pz J OwU{8 +{vwUc)+ΉK0w11o +ph(2g=TӏgUؑzCx9BBo}jtT`'x*tCaק(^=wpLPw0jԆ-H;ꔄNj0lKeE?PS_*i-re?{s.UjCI)bw"-O ++s$HM$3x; cϚf{UZ7h'˒cMzVimk%;F lA#C_އN!*<`6+gőuQO!@w{!t[W\7/.A E/IyFJӼotGah81BWnIsݾ!MdƇiS@y^^=CJw68 A=Ed5&hO;b\MY#*C&. ܔ8u2PץKۚN`PahXu٣oH.{7 +W `A:+[W!GSg;\ +;xݜ!8y`=ZbOz w_9 / 酊|/`~Dݝײ\PK6y@k4`Ospvc1ŴԏC=_GOC{8 D967MH>.j_jKf[y+if$9 8aGMT5uqQ/#{V1D~]JYvz@aH +ڬԻ MTs>xWVV60YXh,q}z] .Y}EQ7p;tNkzRSᤌMunz.*ݯy2[K0[Q"'2xOZT-t1cYשd[]O辶B9! l$@ES9#JyםaT(u<['[ZoެQ[t g,|~L')rAkd sZftTNz%W\"8Y2A[FN>OuıR=~M^(| F޻h&Ly ..2L=q889?))>~.0|S6uډvr75B~Bv @4FM.x_uC#o!3A\?\;"Vgbaξ(+Mf FVKyz,S ~\h)?Hw2> endobj +4709 0 obj << +/D [4707 0 R /XYZ 85.039 786.531 null] +>> endobj +910 0 obj << +/D [4707 0 R /XYZ 85.039 766.606 null] +>> endobj +4710 0 obj << +/D [4707 0 R /XYZ 85.039 748.602 null] +>> endobj +914 0 obj << +/D [4707 0 R /XYZ 85.039 595.724 null] +>> endobj +4711 0 obj << +/D [4707 0 R /XYZ 85.039 577.25 null] +>> endobj +918 0 obj << +/D [4707 0 R /XYZ 85.039 394.285 null] +>> endobj +4712 0 obj << +/D [4707 0 R /XYZ 85.039 373.69 null] +>> endobj +922 0 obj << +/D [4707 0 R /XYZ 85.039 225.054 null] +>> endobj +4713 0 obj << +/D [4707 0 R /XYZ 85.039 202.338 null] +>> endobj +4706 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F35 2888 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4716 0 obj << +/Length 3959 +/Filter /FlateDecode +>> +stream +xڥZsܶ_Ku)qԉb2LOb#/$/ww \t<ցbX7\/̓Y(/{"Pkv`x&/U)URw_W(xuue*^]k o5 7_WpRDů[ 'j(.q8KZbA$Ny$0Zap%*3am#M?^S*nWagoݵ{[_]&U*7W{}b:ҙeXoV-Ѧ#9j'ء;dZ=Z0 ٳɛ{[pzҜ$M@&7> +1>0r,1neJ1u ph-r<e~Ԯ6 + g1h'e +W?sjvH$a3TGY8M;fe[I`x('Dm1"wzT(>efv85&]$(ALc~ +UBߌ2҈;.rXL d IA#m7cP=v @ w46M0tyLvnp"ߔ@dpΉfGtLP)Sl䘉4"a!/ +_I2eDNI Nw$ڜIcr>)aVL*F6c~B7nЌ3#K9X!qEFL\RFXQ7 ۆmawuz[N.#m=<%&w̥rANL>Ztt:M׶VTIL0Kr޾Ywlz`N|&bXCO,ȟu/6i福,%m[:]GXzd㾞N=mD茏ƕwhk<׷I֧fm'@B$\'i9TT ڵ:^3W}VWg4HVJ_BWQJ(/Xݲseom_Ky<#U(9kU ft9c!;2RriJ@λ4G[lW7ЭpQhMbIf̑Y H}7tJb®ܶӍqLf+7bVBrTU_'5v%TI4ĔŶX=(Vh>3#҆uz,=׀D&iZHFިQ ! cS0w"FBs8%US[+cS\!(3w8Ė0,/וq) QGP N, +0 Jѡұén4BpN> 4fE岏L;'ppdwt80aԂِAvW8RNg<;8(NY/QϡнԘk8ų=ė)+k0' NV-*Ea-ӈ&:'8SvTa ]"[M٭X6RGi=hH5z:J`ERhS;M)]-85>YVјV'^RvbƩSD#Ił+ XQeIS&ZyE#ek\HdԺ< *h W= 7xCO|b@oWrC򔇦_~! H8E:cтssUYHȳ]gisRyNo-8;H‚8@jT*̔V|N JU~4H +UG}Zgm^n(VYa ).E +1'{P5L f$sRr{-taZnw5ჳ:=fiLأ+5mb~4ͦ)ʎ:˽zk{Rӕ[kgYޢE%mіNe0;5kpvƂm2(z@Eu@i`uH5 WD%Bbz.Jg{p +F3x +BVbAq7#w|'lrCʍf4Cw4ti01<,t5U/QM`ų 8nGj3-f}[4~k9ԾU:!&t[Ry- ]! F3:ɈץuԢp*COu V֪'B\`ڎ|ZΡk892 `uAfra#nB-WΪ븨8O{8d7)lj-TB~S9fe~D֟ije-@neM=F$"_,IO">~?b#O@ ++uS)rx4;7nǭ1L'$LAP}zA#0X-a漩R +ULьIsB Ƹs2k\79E]3$Sl1޸ +:9VIT3_#R;Ssy%Y,@]&Mq2Qw8tg/@CVuěPBTd O ^˛* |,`-&'O|߭9E{12@LC@ÓB~F?0q Ͽ1qFȃa۲ lp=ms%o3"hlsaE>q?i1^#}S!oaGBKk˓IdC Lgۡp1Ɣ'+y&po"EZmg)dDXY k5n7&8As*gZ…-~?L\ +>߽U&|w?ߜCʥZҲ%hb5nkDuc 94FG(u;!vEmk|S"|׹gy"B-gS>SSq!fՆ\Ҋ.~uDJfguGsogdGM?1*q*pJ0(zNy|J$qOendstream +endobj +4715 0 obj << +/Type /Page +/Contents 4716 0 R +/Resources 4714 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4719 0 R +>> endobj +4717 0 obj << +/D [4715 0 R /XYZ 85.039 786.531 null] +>> endobj +926 0 obj << +/D [4715 0 R /XYZ 85.039 615.144 null] +>> endobj +4718 0 obj << +/D [4715 0 R /XYZ 85.039 585.74 null] +>> endobj +4714 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4722 0 obj << +/Length 2663 +/Filter /FlateDecode +>> +stream +xڵr۸_ٗJ!!gMi'J,(Q%(@"ݙ~̅?5YNzӕ,-WW/ކLN&MO:A/~ys;e 5], B78oAw0(^W7U]}2+xv$sߓߺxՔ/v@ , +'#C7ۼvdIm%y`y^-p|\,u$X1e0So`IUՆ/=5# +Vp#bVzgl)/ +1!5"}Wpt#LJ(@M[{ssȑ@`|sǚFv-NV e]hPEW|9!26'۴iʜm "ӲxDˎw.YR +=!UNdJ;ҳ0Ico @9zt$ D?vX8~c(b'Qx{0nm4r곚)>C. @4ݢ떗x˺m +l=J2m ؠ%/K CxgtKODGg$}`"zGq~n<=3h|"}dC+I.]s#a$dhDŽ%vֲ 1byֳ9\ǍY_ vYڦ_)4Qb2OxT,)oyug^aȖ>aFH)<ϧ.(:|9۔hk>MhF}1U!(Z0NDɁ)D@rP1 cz @z.a7N*geLqq 8m^w-O؟_3=21i,NhiSȊSAB(&B-)+Է˖2y)|h/+V}gXvh{q [n?[gQkpѱ8Pox '(y"ϫ6 D , Jf(4mv`\p(XxU86bl ~udfCm Ҟ<2/M +|sݥ'ǹD9f ABP$51vINF/pE-u#p. #23p&W7p %mvd16lxͰF uz_Ek?Co)?>SΨ85OYtTfhϘu`URzLD]}d'pN?lk?9*t$cfirUA֓7Xc߃o?R`Oҡ0B}g}u; ]Q} 2}tّΑwPCź*9mE \ؿ@[^E}_()Μq][(uׁ설 #e|XU]-Ƒc~TWL|(+4B4&XHV'Pqޒs|L$; )ʴݥUII9c5d(| prUwW*;w}r@Xq;On.yqfUfs}(v7ζ]ja2Fj_'߉.Oy3A;)i?M(wj'|HR +YއZhzN%o4Qx8$2b CBJk%k7>jBEfS)>o T$l8` ag,ֹ &I_0JSRw|HH7tC|I+Ը]Z1NgEϺ0d#p,PKEa@gʱ}!^to v^ HLDMUivKt +LkciƸ5>֦35^/T,/p=9@n-qPI~ f]o ABDy7 NaG[t~e:7M;+{)5-9p ģ8Lp= 7ݘdTr2Bqz j 72)}I߀Q?f>L4KۂlCU,mj p5Yt! 0J ߼`ڮάzlyK*!fcKϊñ)"-dT3V'HW%PtZO<1*vE22IܘݘO^Xkb!b5?m[JHȚA&??_}b'/BZ;ZuНSlnI:endstream +endobj +4721 0 obj << +/Type /Page +/Contents 4722 0 R +/Resources 4720 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4719 0 R +>> endobj +4723 0 obj << +/D [4721 0 R /XYZ 85.039 786.531 null] +>> endobj +930 0 obj << +/D [4721 0 R /XYZ 85.039 711.163 null] +>> endobj +4724 0 obj << +/D [4721 0 R /XYZ 85.039 689.966 null] +>> endobj +934 0 obj << +/D [4721 0 R /XYZ 85.039 661.355 null] +>> endobj +4725 0 obj << +/D [4721 0 R /XYZ 85.039 640.76 null] +>> endobj +938 0 obj << +/D [4721 0 R /XYZ 85.039 423.851 null] +>> endobj +4726 0 obj << +/D [4721 0 R /XYZ 85.039 403.257 null] +>> endobj +4720 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4729 0 obj << +/Length 2833 +/Filter /FlateDecode +>> +stream +xڵYms۸_'D)%KlV.e:DY)RGRq_}v\:m'X,ž<ܑCQ؎Ga4厖3gtO#\1,OS:vģ]'v Ośv}vF+3Vq4zcq<ڞ_~~vwv-G2kH R:PAGn00M9^`\>H{i-Ϳ"٦ٞ`7_sy4;r mâMRgf2<.g`_ޘ;m|nNc;qN8p-ZThc5jm*K=9)f$BX{ +|;#Yo,KNCͷK*3±&> Ii%nf#H"s++^d/`j%]XɍM3Is z{xʱ*Y޵vȟtlZZ`9BAvv)U>.u%x4yUN/^] \(W/d,beMY A;Ϊw\~O*] }^.< ARީ+c|)r.XuQsjZH*z"j]0YTihIhqNUNyCMwc)s1{Jp2&;O&- Mc~%mQR.D,`}AD4j$6CzUO2xʳyS&owJq!$u4Pd3ZR, P Zm4E>1 0{0Kqɸ9Yů hg0C +&TX:44/DtAdD"T\`'3_G] 8֝T.,K1h Jn(M|cm, ݋zy\2xO47/;1s%zI5wQ6-: { +tt 5mXb3a-28C( dq*-Hrkq 2QJ*lbIЄnUF&Rum0DjXzet[F`M{:TȎ-C+9sy +-`w;1*/EYW͋c? 0ڵ3UwXiu (zé-pT}2o~@ӫBHrܧB\1\iu7DL.mx]LrF ܇6ʧ6˫kY7&H6*w&:Id)\'6׫|62 IOPыER悍7E$,6MnX?Zp3v/s_vݔdZC,Gږd:<:b1wsQK몄tf\%K]&Z\_ AN\4zXg'Zeu{n+yfY'SJYxf Bv~84j +Hk,xkg.ˊÝxt`sotOO(qp'Y[(~ +\wyەFu_Zdٷ|_7ubtüڃ1&Z# kEb:Z&AJүv(~՜Կ ~*%F֍c:+"1] +y֒>K1I?+#N xv3x$к:oq%qo*n .D5?',IS s'.S.`+U?U|SAkԋ#F7e|߫k|'+Ni^o\A7'/&~m&Ȏ#o]"> endobj +4730 0 obj << +/D [4728 0 R /XYZ 85.039 786.531 null] +>> endobj +942 0 obj << +/D [4728 0 R /XYZ 85.039 374.974 null] +>> endobj +4731 0 obj << +/D [4728 0 R /XYZ 85.039 328.305 null] +>> endobj +4727 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F66 3248 0 R /F15 2884 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4734 0 obj << +/Length 1974 +/Filter /FlateDecode +>> +stream +xڵXmo6_20"~͖&]b ֡P,9"K$7߽]vQx<>QO:q <8Q@KgxH#13"ϋɋסHO$^,VA:Otv/(SMg=r_]bw0tCи2']e2_V ZM&9:'h{B&{91Y\X~ | JI' +9aq>T,ݿaku]%z2`33ܴX^IVLB#A^zLw=x v0pa;BP`W:1p; ]"|soe8b:HrSFqlйyt +Ɗ==ZnuwI}ޟ0@h:Uiv}*Fw{$xɼ1>#V5QͲ;}^PSYȷ|`oHIYf&wۢgk`329Ä"DđP m3K,\"y)ڮo69%}AǓ(Ζ$w,ʔr@gW9rLf(f0fEmiH~ 4'k ?ٙA@fg8#)p3ߎ@L"grc8{a DW{:M152f-1đ{P" ɍ Hs䦢KzVMA-Ofa6U]= FK)2_*poW߽:y{v1 n-NH8O>4M^u'u5uyw4 b~w[&]]޴B +  C{ +aaY ӛKLSb4_{95X^2UPG\'Pn.O"WF>~b\c .U_ZKя\nrWIX8L%x􌜡Q%XS{H"[݆2]sIXCu-t=@N^kpN)7bG?&lk0ԍ%#Y3 Ѝr~cGi hA*,b w9*hmQx||4:Dw!Mݽ ^h܌,&A|{? Mb:d@~;* +L 5f#fm +0ajcjn2햟Fڒ^Af5^eS87P::$t"(|b I~m22KvziS刬phGOln05]1;iMm1f7BPB9jYnXp Fda>A'_%"NycO;0 mn3Mg}nЋt8 -acFoG%fiز/|?<~c0uB@)@b70ɾ/p#50|2-endstream +endobj +4733 0 obj << +/Type /Page +/Contents 4734 0 R +/Resources 4732 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4719 0 R +>> endobj +4735 0 obj << +/D [4733 0 R /XYZ 85.039 786.531 null] +>> endobj +4732 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F72 3974 0 R /F18 3977 0 R /F35 2888 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4738 0 obj << +/Length 2567 +/Filter /FlateDecode +>> +stream +xZoBJ#t]šHJ-Թ;]HMQo;p]$"N";f,aÅ++!Yh_},\Ntq`I;L7?_}^|߷^8/]zr+7a#>_%B^t/ͮzv}/9- dmvtB_ދx,XS",7|Ev$e[r允P՛ cp̪Z UL]=32/uMVFL]uX,~Z_Б܁R/aXO m;,x*e\bJPD2<&덴ĦO,dPVm^ * 3@B ;IXL ә?ƞzz{h4ͪGĈ I(Jx_7qз;Ly%j UOƦ61ɺV1!|'w: +CVkP‰_Izl]>F'BpSC2rɰre@!ܬ(Ph@ f +FNgXZ6ZM=mZd8JJ!WX{O:'fa=ۨC @GU4!}-^}Ϸe2jUѐLɗdjR;['A WUU$YjYHVbI9)G>?Wu{(77) |/Xwq}8ԡhևb L9rbp't5|Zsscek;3mN5ti[8Y ju($7r{iL&ZrZt5ȐLS0ra]t\qӔvq:'XSy2.Y;?wʠ5gC>5*Pvu6󞖙 ; +YL O!2_< LOڽ^yvʹ{9J. 0?0tڟt͝XA<}ћupJt4SoЈ <^dMI琄Pa^ 1ZղMXj9$sX<dk/7*k+Vp\Bs۾q8Mjqcm)Vr LrIN˟ݓ,evT! +ڗlE0ٙ:~llѨA7yt yt·+|lS۳͋b]A|29칿V'(zhoE$%пϔ2aLYښ/AUݑfkkŜ L:= k[ _[URrN_KQ;M&Zg{ Rt0 endstream +endobj +4737 0 obj << +/Type /Page +/Contents 4738 0 R +/Resources 4736 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4719 0 R +>> endobj +4739 0 obj << +/D [4737 0 R /XYZ 85.039 786.531 null] +>> endobj +946 0 obj << +/D [4737 0 R /XYZ 85.039 477.837 null] +>> endobj +4740 0 obj << +/D [4737 0 R /XYZ 85.039 458.965 null] +>> endobj +950 0 obj << +/D [4737 0 R /XYZ 85.039 316.648 null] +>> endobj +4741 0 obj << +/D [4737 0 R /XYZ 85.039 297.776 null] +>> endobj +4736 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F14 2903 0 R /F20 2873 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4744 0 obj << +/Length 3307 +/Filter /FlateDecode +>> +stream +xڭZYsF~ׯۂU& Ŗ(JR[#QA%5n3 gyQ1Opj=| +b!$ 4_l|Ot\_>QyaY{w3_pFyF}zSoqd۷?|0cջʑ;"o5UGE>{vE1k$8~}3^u +(<:(q T,'_Up]d ÿJ0^ k$Y(hAˍwLH}ʳH}QyF> y +=c;N޸-觪72S58gx$znh&9pyG(CRfüF +!ah HjVsiINwGD^-Z +q˻ ANԳʮA !rԸ#ݼnv@ל{Rv+> r;DnP!=Olى ṕ[tzcE=P3?n/]T1<(?aQ$W=g^/@<8t26++iao__Y|Mu +>lLp Y7r`e.M\CR9u %6ਣ-7cL8bԣd4L'^O|r|#FSnFqN٤AW }I^ܷ hg(C6W-n5񖌪mev{˱gNXq(%Ȣ޺ĵIV)85Axv +未PS_J +H}wgwidA@S"bMj*єQ MFlI}_ ,wA/W^{۲eUi8!fn|-|GW#>x]f`zGhE7 2LD 1Iqi|lm} +F.B#h` U) CyЭ:j]%杰$7 PitUuM 9_FC(+ll+%?[ D,0{ +%Db;rrA'ćb4)MwzTi~>9{ !b(s?R A7d}TIwʵwdҐ *B?RZv+6ò߃$`f~%n}l,Uf-΅Ha$Mݾ7'%Φ;S{ +'Vq&}W nw, -8glyC,T)Ū$JpMbYs0r66TC43 =Ns6}ᬖ/VX_!4 du3!:jj)X—Ct9/n(ds8j((֚T!wŦ`~1K~ zgVUU^bK} +/[LAk~*yJʔ⨩?a &;!IAPZeؔPqqTDHyĜa.?VF8Ybs2*;p2!jJ|z~'#Nߞ)< /BEa< #DeFD~|44Teӧ^Ce?NT5U]s~~N/ȼ|OYЁX_*;STjv֑L{@n#(1knΖb3xWi-d?曥3Ft^Npbm3謏|?ӟiE;D)_V*FNEL'endstream +endobj +4743 0 obj << +/Type /Page +/Contents 4744 0 R +/Resources 4742 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4719 0 R +>> endobj +4745 0 obj << +/D [4743 0 R /XYZ 85.039 786.531 null] +>> endobj +954 0 obj << +/D [4743 0 R /XYZ 85.039 565.53 null] +>> endobj +4746 0 obj << +/D [4743 0 R /XYZ 85.039 536.126 null] +>> endobj +958 0 obj << +/D [4743 0 R /XYZ 85.039 398.412 null] +>> endobj +4747 0 obj << +/D [4743 0 R /XYZ 85.039 371.798 null] +>> endobj +4742 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F20 2873 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4750 0 obj << +/Length 2377 +/Filter /FlateDecode +>> +stream +xڥYo۶'iԳ6i%M$@1lCA[-Ė|%I_σe[y Cњ"wd?r k9V~;bdIFwGO7xp7kĮ`ppv'0OCGҹ<\}āܜ).]^^^_6VRkG#W8<2#^}my7]}&u$H@H?}_^HF0h= S~u #SgWCϏ)Hd \>l<1',6AG)KACYG|"IVƅYo sd+0Hbw +g*gZcTP6s)3-(59.Pxgx҈ʬP dhDQZ _l,$]d4Tڔ(R`,&ţ7<17!A*pn3ELG +Nz)Ro ʔ[P1.GYU,$tRS![9ua'ȚJ3ANXaA/۸ tk,=KsiGRU⚿2UW!aY$H0͜xJ~B<HR)SqK %9.}%E"[6=( 19A9fAsȸ je4=}ʋ$414g~p֊;(cÙgC..){(JS50@`UYqlGT&y@nXZfrFm9?{7'G#`(<`XQ[IngJt2"h{,;מ&滋%fU6n nٴ,bf| K2PɲiحѿyVՐiRNdS;qmPֶ@vQ\"B7ю|L9XxKJknHRyXXsyDŽOplwO@v +hnKA6ŷB@!q>K[Yqw"f؍z䧬T|u88_%x؍'+;v3<m\֣ZMjJ6CՁ`Э /Gj\ c6- k;_\5`8F|wP5ozS ±ݸ@t!t$63J&{l~PXcㇲIM"B B97P:=}O`Qk$&i/!i#hgSgWuQOZj/G2ޕ}H.QrC-Im +h!HwsҖ"~k _X1wZԾnv+3m{3%mHC@KOS|CB;F="Ye<u A Dڑq;Z,‡{˘ģ!8vUmkP0Q ڒtf6k5͒'?mS}׈8r f!:>' O:TQqxw"/Wzs"uK/d<(q(u/':݁#g3کN<峈fFDnGlIs +$D/@sHBT&G;|5\RU ?w{rwTGoz5DŽf!A=Oֽ/5WsҾ@G4RЦГ_,"Ciendstream +endobj +4749 0 obj << +/Type /Page +/Contents 4750 0 R +/Resources 4748 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4761 0 R +/Annots [ 4754 0 R 4755 0 R 4756 0 R 4757 0 R 4758 0 R 4759 0 R 4760 0 R ] +>> endobj +4754 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [147.71 383.271 511.015 395.264] +/Subtype/Link/A<> +>> endobj +4755 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [367.133 356.173 512.306 368.166] +/Subtype/Link/A<> +>> endobj +4756 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 342.624 331.441 354.616] +/Subtype/Link/A<> +>> endobj +4757 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [367.133 315.525 512.306 327.518] +/Subtype/Link/A<> +>> endobj +4758 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 301.976 331.441 313.969] +/Subtype/Link/A<> +>> endobj +4759 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [424.405 274.878 512.306 286.87] +/Subtype/Link/A<> +>> endobj +4760 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 261.329 388.713 273.321] +/Subtype/Link/A<> +>> endobj +4751 0 obj << +/D [4749 0 R /XYZ 85.039 786.531 null] +>> endobj +962 0 obj << +/D [4749 0 R /XYZ 85.039 683.458 null] +>> endobj +4752 0 obj << +/D [4749 0 R /XYZ 85.039 662.868 null] +>> endobj +966 0 obj << +/D [4749 0 R /XYZ 85.039 521.7 null] +>> endobj +4753 0 obj << +/D [4749 0 R /XYZ 85.039 492.296 null] +>> endobj +4748 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F35 2888 0 R /F11 2906 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4764 0 obj << +/Length 2964 +/Filter /FlateDecode +>> +stream +xڍYmoF_bk%iӦ +ćz(H\yffe >36W *[_U\m;ZQ,qe_.8gi2@*M⢰W7WƤ5UQq^W7E&WyDqV&W&[]ۢ>7uͯ~ ]Ey7ujc[Y-46Udd͊V*NԳjlVGz7ĢǍE>fW&>ڸ6nvݴN$e4(aVQ+sfюHZt*r8]@ƗqW93m3p9ݐP#t^~&q`4wJ4=j!T/ͣ?7RLT$Vْn48,` + `];g}i~hȰ'xaZ w|H؀6w}GU-d܃!uVDxo-m:za v]{+?;VeϠn%0(ZTeK^>0e6 %yyV4^*X|2#dI݀46g>O߇3\C'X_`(,`ֹ_ N +?c-0ed-) 1zUѣW6NƸڔn%c qӁ}H}jG|NX#C(ʻSݮqou)2?k+؞h $?9UϪR+" !_qvo͙Igcq ӳy k r8NBa`t<ӏ:7UUJF H:{ )/] [p[Ѷ + ¼hG#%adp %~aip:>^(vt~-5(^ôAcغI&ҹB͓:Nɂrj<>tqemq}۷,}9] P +J<nzlu$z+%g|SL  )طL`~E΃H^='5V0ݭ\;Elƌ@byKA4L =-T 07` GYgYj\eI !%7Z׎ݲ"( Kc6)rG&;/G)]h=rHO2 Ff_@>ΉrۋHf)KQ:?fy6xa{Xװd 43qy'['a_9O>gܕT)2cdU\ǭ'rxxz&6*- NB_ 0iJJ?N"['6♅w[*A9$dZCI}$gw}yM } 7Q"HŠ(|ְ::*s%(ǻ~*x'#x!g-r'ΎKcQqB5b"fın#$| `|Ц8 ߔ&IS0' }2V&Y;;]H<ۗt=9i'tnn +Dzn ]}y;(ǹ qn) ̞@8FâoHrT&/z hJqԡlYՀtxC2}Z4rʙ~'< 7IP_zqm-=Ԙ8뗟<\.oMUT[xG} ]ɨ깍E"w` +~[SҏS{V@-/=67(!-Lg1=ঔס3;f?2}֨ +JpesK,o\ Rnc;P +(UUmI+)A3 ۦGLsM] ]lsa$lea;'mCXYjhNX/s4 99ivga0ڀ'I4ߑ.6zMJtL;xOO 'rCpP9 +lH r9VyxV5.o*\Z-efFe ^2H|f_+a_H=o63{b-a&=7KZ86,yzgn8 Zendstream +endobj +4763 0 obj << +/Type /Page +/Contents 4764 0 R +/Resources 4762 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4761 0 R +>> endobj +4765 0 obj << +/D [4763 0 R /XYZ 85.039 786.531 null] +>> endobj +970 0 obj << +/D [4763 0 R /XYZ 85.039 766.606 null] +>> endobj +2969 0 obj << +/D [4763 0 R /XYZ 85.039 672.187 null] +>> endobj +974 0 obj << +/D [4763 0 R /XYZ 85.039 672.187 null] +>> endobj +4766 0 obj << +/D [4763 0 R /XYZ 85.039 647.469 null] +>> endobj +978 0 obj << +/D [4763 0 R /XYZ 85.039 509.087 null] +>> endobj +4767 0 obj << +/D [4763 0 R /XYZ 85.039 480.351 null] +>> endobj +982 0 obj << +/D [4763 0 R /XYZ 85.039 245.004 null] +>> endobj +4768 0 obj << +/D [4763 0 R /XYZ 85.039 200.456 null] +>> endobj +986 0 obj << +/D [4763 0 R /XYZ 85.039 115.324 null] +>> endobj +4769 0 obj << +/D [4763 0 R /XYZ 85.039 94.128 null] +>> endobj +4762 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4772 0 obj << +/Length 2867 +/Filter /FlateDecode +>> +stream +xڥ]o8=o*L-p^b˱67_X8p8|,?5qtIk5|c)(KO0Htut0d~K\bZ+||fuuwǖ՗l r:GJ:?;Zffk솱AlU]Q(*8H̊XI8ZDv^a\ +y(|X._TܒMQ V%"Zoqؕ#=T lySL&EX[5`j^b2#Hy +_/~(6qkNׇ QkSB)w=ʼ"߄c,=1 ՜8ɦ?Beu@% d/ n}aa7C0f9WM+X[l +ψ]\:!iPRĶVa<ɐ@}CD +̀6`S;FI(txvGp0ENx6 ҩRϞ3 /;az\Щ۲N6I[#;wLȽhRx"NV<, yî^D:I!rj/\Wׅ|܁ `[r iX"Yn9O|wZ[e b)%>AQEZo{^n|d'FO YEF)LneȂcV#|DY +m^/V]_":Hg$ Tey8Dڧ q +lidV)B}YE I04W:unYa8&68IRWA8m@Z/KH1"DE}p9߲E6x&:U0Fz( >7G C>:3&ZssGV}Dwzz d0˞vir+{g/w2C󕏗,U<( XT[DA: B?-Fxںĝ_}?}?c%rm>Uɶ{\!3j8+(pk>W-ȥD΁uI/nz+͋;˝jT F T*w~̥>q:L! @|;?}&C}ݟdQwuw< eGGg ʮRPRhO* ] U6ՅE$Hſ'a:bViG NǥHX,r ,ĵk5+mq ;𚱸Xd?H +qsrݍqe\;W\}Y#RK]X ؤx ]űd<#K.f5\a\wr2v4{GFb^W\]ÖG/M*stM[WgpZ igIX^t㸖j{@3/Rp{e,5ތ&q$N$\PyG &l2t.MۄS! +瞊T'0>1?Ŧ$FbËtIcM]?mȁ2=}j/$Ϊ5/-PB*XT2AE`=HCᝮqT2aK>`n{/b +n:X:N}l$ѵ[3^| ,ytHH|VJ^&o+cSĿu|9\0ڞSkZAp__ؙL(g.1{n4~ +'}*V +AqœāSǁѣg}7hQcbQ9v/Y/gYendstream +endobj +4771 0 obj << +/Type /Page +/Contents 4772 0 R +/Resources 4770 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4761 0 R +>> endobj +4773 0 obj << +/D [4771 0 R /XYZ 85.039 786.531 null] +>> endobj +990 0 obj << +/D [4771 0 R /XYZ 85.039 569.693 null] +>> endobj +4774 0 obj << +/D [4771 0 R /XYZ 85.039 548.496 null] +>> endobj +994 0 obj << +/D [4771 0 R /XYZ 85.039 432.613 null] +>> endobj +4775 0 obj << +/D [4771 0 R /XYZ 85.039 411.416 null] +>> endobj +998 0 obj << +/D [4771 0 R /XYZ 85.039 160.041 null] +>> endobj +4776 0 obj << +/D [4771 0 R /XYZ 85.039 138.844 null] +>> endobj +4770 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F20 2873 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4779 0 obj << +/Length 2273 +/Filter /FlateDecode +>> +stream +xڭYmo۶_a ", ؇,tIo76([ɢ'y,;rEC>0QQNG$#FY0z_ΔpLeq~vslF* W9iGi%,u`*MG3i?2Z,^3#5 c?@~!PJ`8_ibȏʹzR:$9&4ǟ>9.-7a|L] ێ|KWw:i.`yQcrmKKf6$ˆ_îTj!\Pn3J@En斂-'e=6$<xRլ\6v 4Cocbi>j؍o+`&a+emGDjZ$Nŕ&""WRZ +va<7sefMCF8'~b9Q`ڃm\CeWе6AHT<"RZz*(,kߟ4c%&s]zPV?E8 Iܨ)ŕzC5\p`~EOaVR1/XEY `<p%2 PDSXZn*9 myuecC9 㱒&{F͸^ëk(.G +&QX7pSc i۵Hഗ62EJ"G)C8klu҇vwG[ 7c)9Jq !f9tji$3Dz<_DԐD_Wox0r@ۻ0yQ3v "c*uMy+jۥT|5+DI( 1 >:];Ԡj?ۛן6?g;]:Z@ږ%"pxd)7a[0CQ3μ| *n) ܯN3˱{9#1`VO82> endobj +4780 0 obj << +/D [4778 0 R /XYZ 85.039 786.531 null] +>> endobj +1002 0 obj << +/D [4778 0 R /XYZ 85.039 667.526 null] +>> endobj +4781 0 obj << +/D [4778 0 R /XYZ 85.039 646.33 null] +>> endobj +1006 0 obj << +/D [4778 0 R /XYZ 85.039 356.428 null] +>> endobj +4782 0 obj << +/D [4778 0 R /XYZ 85.039 333.11 null] +>> endobj +4777 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4785 0 obj << +/Length 3176 +/Filter /FlateDecode +>> +stream +xڥZob|u) (\Niih +AZ]8u^N_H2FiX0_c.7_(Ki.#DPey+~ō^:FR)!@3ʉ; ,&=K+y~d( +S~FN%NˌGIX%Yl9Nm>$%q-8$.5AVL+)ꉭ +KrDU|k 4h<Ȯ9{K"BQb$ɞ6H2g&Tytr0" ԷgЛÖ{*td +lkn<Ŭ0߷Nbw4f+lK"~ om1L02CY=8 e&i']yZܔwV>Y>jNoPD +K3Y{LjgB:<Qt &ɨGs"S,\ }f]ΐU %F.Er0w) +A)@G\NtNg  N:ORڥPbRw+y+sZ?roCUWǾle< +jq},gd_?shXtdRʂ;TTeI8;ה^MC)8)dzlW@Y2@\h=H)ȉ:\}.nQZʢ"ZMrpeM G2O|p YɹDw% {6.OtJq'*x +ϯu!)]LPglU!H7{*ɠ.F 22W}k$jy.1̸;pO{5BdS0Jal^=?HL᧗ߏyOIąlB +YZ&jskA#1~PlGRџq"Lَr>>;cΟ_a"J!ɧz:#\]E@{: ' FڛԐKGx - CWql:eǥՕdc#yn~DoEE"o<Ŭ?G⊩y\Ue~R#d ٷL*hT<ϖ%*j6U KIxZ^wO(nT|4k4f+{J܅x@JlbsK _e=0r&q?Pm` CD+.&c“cnC,\E%60ơpk׿v_L E Zp)vBCLUݨrqÉ,=f^%$~E$GQ]𩝓s9_IDp/Ykx<:.2F6'}!2n"b/RAf@U&J&Xls\i@˻#IGd_`\X U.7*-s_vT96KځXendstream +endobj +4784 0 obj << +/Type /Page +/Contents 4785 0 R +/Resources 4783 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4761 0 R +/Annots [ 4788 0 R ] +>> endobj +4788 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [237.716 727.875 359.98 739.867] +/Subtype/Link/A<> +>> endobj +4786 0 obj << +/D [4784 0 R /XYZ 85.039 786.531 null] +>> endobj +1010 0 obj << +/D [4784 0 R /XYZ 85.039 766.606 null] +>> endobj +4787 0 obj << +/D [4784 0 R /XYZ 85.039 742.055 null] +>> endobj +1014 0 obj << +/D [4784 0 R /XYZ 85.039 685.636 null] +>> endobj +4789 0 obj << +/D [4784 0 R /XYZ 85.039 659.022 null] +>> endobj +1018 0 obj << +/D [4784 0 R /XYZ 85.039 573.889 null] +>> endobj +4790 0 obj << +/D [4784 0 R /XYZ 85.039 553.755 null] +>> endobj +1022 0 obj << +/D [4784 0 R /XYZ 85.039 469.885 null] +>> endobj +4791 0 obj << +/D [4784 0 R /XYZ 85.039 448.688 null] +>> endobj +4783 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4794 0 obj << +/Length 3201 +/Filter /FlateDecode +>> +stream +xڍY_Fط*]K{=+Mț_wπVȹ =3==_]DȔw"3m=a~z+E0KS/ Γ0J74zzaZy{ItDaǻ8NB'wyYfswojeQqXu#}U]M We0<|ouSv8Ӱ?_<)KyY]'9(,g|NDsu\%EP +jl|*U˞Z>rEo D1Z%͙Bw?y2nGW_ xtl׊>Gh~ZGe+@ q`)[Ȑ͎0r%Y}i3X@g{EXp@V}臊KⱍIkdՍiC${M#,lS'44i>YQ(ώ> )$9 +ADo=S[m]'>:3X89q*9l+Lz~CA0'h[}<#//vPikT`G'&dQ#_Sh1|\ 04L-DMe_I R ©; &Yx$2k[yXYx 0k|g1'+΋;T.Mf&#kY@bJ^xv|dҞh[ӂuW7T¹2<.g)ur--}4%7gT#NvySF ' #9I<vBf;y^|_y^~o4\ͻR2e4gׅl;D5j&x}f2XGb*TNlQuZǥ,ngAoOet$ \ɉDV_XNp 5I9I9jhڤJTc;{J^ ݳ1s Yr3;veY_W(Ce9TzQH?+iK3 ZnvZt}pu-D{̲람*heN.ٺbnh6^m<+ JH\-|7ʕ ItSŸ2kAu +V$+ ;'rm-u+;#4E&mRQHF7wу9V6A]+2 EVaՀ+Vg ?GNJZ]6{z58.{*Tv&E&l e>!$䚵~q<>_zajjns˗~{{|?K|LZh;hi9pH o {O9S_x˃'GO\o=u_D&@噙)¬09/endstream +endobj +4793 0 obj << +/Type /Page +/Contents 4794 0 R +/Resources 4792 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4761 0 R +>> endobj +4795 0 obj << +/D [4793 0 R /XYZ 85.039 786.531 null] +>> endobj +1026 0 obj << +/D [4793 0 R /XYZ 85.039 766.606 null] +>> endobj +3027 0 obj << +/D [4793 0 R /XYZ 85.039 672.187 null] +>> endobj +1030 0 obj << +/D [4793 0 R /XYZ 85.039 578.47 null] +>> endobj +4796 0 obj << +/D [4793 0 R /XYZ 85.039 549.735 null] +>> endobj +1034 0 obj << +/D [4793 0 R /XYZ 85.039 409.231 null] +>> endobj +4797 0 obj << +/D [4793 0 R /XYZ 85.039 379.827 null] +>> endobj +4792 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4800 0 obj << +/Length 3539 +/Filter /FlateDecode +>> +stream +xڥZ[s6~[K֝-6%8=7D3 ~8T_0lďu쮂3*F4?c-ςl~rdgb]}r_xww2>^z +Ke/k|ݯ@ݧ럯n׎~#Xp_gf +lbǑտZ<-x֜bmS9Ha|E~$}pOj~RiVbw  TDl-;JW Yap[LjvwY昉dy so= ~rJB_F-]^ӂޣ(ܠI"x{Lumɍ;`@ 7=S()}bG1|u(!f>p+uQw u}#]AQmE{ h{/I# O*"Z'9t6o1n5s:27Yb;62i \¢|2zK;5hY-lV`mjͬkmSYeFZH̲4YLnbŶc7Ow[M nJt'$ |扖K ^L1fK +ހc;u`d=l;7e]9 +{Ei}q5 6I`X SՔ-[k2 Y>akM +%;ʼ?h#(aIjL|yDk_i$$E: uIMٰc +됰!cuăݶ;D S[UP?Ghۼ/QX^+(UlXvE|) + ؁s0"<2]Eq< P๒EBbM{F3H}Ty0`FGUHlmGJ#-x)iYA 8cH1dT(HܟSpN⋢8~z$8dF +SK=*4v<Ò2(oQaAT%#HJTXjl$"&p +jR,M`F(GrF^fɏKyMh1t}uB΋ +9k$sO&Oi\VrƘA +xs$6CcŸ́A_:#!rq+V"$2~L:,(J=ȄΘ5Vb^.no, +B?A!V18@3ø`|#-c8e%h2߈x|˃-y*sTmɈ@#.~!EƳϢIjz) GӠq3Nr52B:}Z lPl{QR޸ygg c=A=M qr*?x-3lޘx6 +-#T[A?amp &<5@ 8b? "[k>j 79t3!8|2w{&^F(6н&e?V@vݖŜp,L(H D*ޣEY T"!Mb`lCׯ3 ZE1ҾnܩUsks62B7ܕf~=kJ`h,MN8!@`" 85Ǟz)4R[ v`[>#kY%|\kάvM/m$(#HF_Ea|az|]XBvӉodT:RU)yFW7\L)TN>r~V;Hg]+CҬJЩ90lK`I dI]7# ~q+"vj#dZ)#B,V`0:|o@rk&&XϨ![%; KrhD3t#"fIE.]tj )ĪycY.Ul[F1Loۈv\},UVA-w<6W ]88Vɪ~F15)1Z :!VT +FkC8,khkA O$=$?#9J,3~qB6L"`Mqj%S^{iZvgZ[tlCl8 "䢆2V;w24җBRM;k=WM2[ +TEU[*3S\}j6ͅ~2[ȳAQHbZng}N.}yIeYR{6➓ |{'t#$ot)aoT!V6#:,!;.*i a(bP%{9y7e!2հ47]YAs_f䆪-~O.}q&ݗ%ӕuPK +,q|乃cK.l !>u6 Im? >} ;F^B9ٖyIV,r>ڬ:v҅*JGK +[cwFזwO%V[ qWbIpIv5?Jv۳X_xHv]ݷ%I: 1/eۈ7 wQ +QB^A{ig? lItNsG?U# 4sQ~$W;~Q.H {[ʲU󀢁|9ytU2F QH7ô> endobj +4801 0 obj << +/D [4799 0 R /XYZ 85.039 786.531 null] +>> endobj +1038 0 obj << +/D [4799 0 R /XYZ 85.039 628.804 null] +>> endobj +4802 0 obj << +/D [4799 0 R /XYZ 85.039 599.4 null] +>> endobj +1042 0 obj << +/D [4799 0 R /XYZ 85.039 571.365 null] +>> endobj +4803 0 obj << +/D [4799 0 R /XYZ 85.039 549.504 null] +>> endobj +1046 0 obj << +/D [4799 0 R /XYZ 85.039 399.12 null] +>> endobj +4804 0 obj << +/D [4799 0 R /XYZ 85.039 363.917 null] +>> endobj +1050 0 obj << +/D [4799 0 R /XYZ 85.039 267.161 null] +>> endobj +4805 0 obj << +/D [4799 0 R /XYZ 85.039 237.757 null] +>> endobj +1054 0 obj << +/D [4799 0 R /XYZ 85.039 116.999 null] +>> endobj +4806 0 obj << +/D [4799 0 R /XYZ 85.039 93.681 null] +>> endobj +4798 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4810 0 obj << +/Length 3404 +/Filter /FlateDecode +>> +stream +xڭZms6_uL$H$}qsEYHbbSa(I쮪nW#%G5:/o'T<?r>}?V`aw,e^hdh@qe/wXѭZk|Npй]-M~^[=p +5eLx +;0d#vT +f=9 +] :>R!=-aW ,x!H 5w|S0n OH63FcTx+ 5 +c#QT!H{A+9(q;_YM&ΟHEM<-Z/ r!O1u|~ٵdxwi3LIhOr`" vBr)Ot\e raӂ(ۉ^(>͍t,136@z#ʢurdv,)4&)0v` A9CFD#僵%EfP[ī; +H` (:bD\y$ ṽG?Oڌ߽r)lz.i?h><[Nʄ1L }r AHb{ށjJ^@xb +E?kI] 3ut7mn{'QoD, /,",e#p?Ef v1$|mK#` +a=Lda0 ZJe#UU!]a$ޖnbvQJi^3rKF~ǮCd$D# }ƻ1oarB4"z$bIHpRI0\h R hRld Ăc7ďwE.p  <=to'XAEbv`\وӴ-pcΖ "X(.# Pz'(UЏ+4YCcܯ8YmΈ=DY!`nA1Y)FMSؑXN֩k :gNN f(xR_C"1l!" 8Wahx$d2ъ 4/傲5K(ˁQ'^- )H>-8}e1qBDz0?S!k[*: ]AE'bE_Cm%;w4ޒ1BL.<ץT xXκ*ƣ4OUW +Y[(#p٩\(qkΨ^qms[I miLS.|Ș}8bJ(%7QzgRr%dCpI;/Gh֩ +=~}H[ˆ;~E-.>z#Ygw-[jYjށnjLy+lbunm^rc@R",l9g*>=33L:})e}JVzQ f"cy`ddWk[=ŖZe+Ԗtʢ~sE mn`8"OJe_$_-vp/u]<Ur1r_*h~7Ta,c+H6N$l8'z~ve p0xuw0u's|igpC'0O4,2ڹ^1JF@_1XyB9$s,! +P po(c?EZr@W`FƏ5Ox% h˺ ["ZGr5+9X>v4R822o_-̦8i2/F pɡL^6ܞG_ bmŘO䩲 69jdTM1TD&vLPΆRwl#6o2mM4-wAa!oA>[ 3=S4}v\3o3N{8 P9azcAendstream +endobj +4809 0 obj << +/Type /Page +/Contents 4810 0 R +/Resources 4808 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4807 0 R +>> endobj +4811 0 obj << +/D [4809 0 R /XYZ 85.039 786.531 null] +>> endobj +1058 0 obj << +/D [4809 0 R /XYZ 85.039 406.8 null] +>> endobj +4812 0 obj << +/D [4809 0 R /XYZ 85.039 388.231 null] +>> endobj +4808 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4815 0 obj << +/Length 1904 +/Filter /FlateDecode +>> +stream +xڥXYo8~@iu:Ƌ}h@[-T+ wRc'XlQ41go8p'T̜$}%g?gHxFě]#G~dnԓbgu|x}zeI)]s/IRws~~Xj ;S܀7c0ya]Q(7՘ris.*VUv;8]kmPqbI^ (H+ ⸧t~04+-Ϸa@dkꆗ.XO-'102ϽXY?biQt8/F(?:@}9)`2 9=A:W<2Go PPicqLcfb!V,&SA{Tڳ<꠳g E1odRΪ(rm>xQ;ElzQoߍ=>jWuk_g^G$3Fjoğ 43=Psl%a̿gx Yb> ѱR>R(3SJ(նDkE줠]m2:FV:9 +L9%{-lExn #ٌ)y1꟫#~I>I?K?6mt^ت0C1C{> endobj +4816 0 obj << +/D [4814 0 R /XYZ 85.039 786.531 null] +>> endobj +1062 0 obj << +/D [4814 0 R /XYZ 85.039 665.133 null] +>> endobj +4817 0 obj << +/D [4814 0 R /XYZ 85.039 643.372 null] +>> endobj +1066 0 obj << +/D [4814 0 R /XYZ 85.039 587.459 null] +>> endobj +4818 0 obj << +/D [4814 0 R /XYZ 85.039 564.141 null] +>> endobj +4813 0 obj << +/Font << /F64 3118 0 R /F72 3974 0 R /F18 3977 0 R /F35 2888 0 R /F20 2873 0 R /F15 2884 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4821 0 obj << +/Length 2511 +/Filter /FlateDecode +>> +stream +xڕYY~PEn`8 d&X,@I5X#ϧH51fu|Uq=,8t8|FFkhL* \OG4* +c4߭oxn~`&kh#w2s~._NuXT9)>Pmw<)oak+fйE'o2%^H=\.+Yd+}HM+}؟OFp4(WE u?T]Ñz0 +C8,힚 nYܴڱ*2^iHF,|dxt`OhhyBCatȸEF@_< ??"je;ТR+~i%! SڤJQ/CM >zwB'ggIB4J*ǹBYx~IivMn;BaĠjekd%ڌ;{nrP&-@jtD\,C:Mr3۴v^4Qf۟О @ev(Ώx\. + EY0}D]tS4q] r޳HȒY_O!lZ0Bzf=pQ):Kwڤu%#P`~k:Rj|cB)i}&kzA&6 c8߃ԫ#|F5)-ʢ<;NS + qhE]w|&ݕ]Q]5ߐ^;kfݮw #[s4ٞw]`_ H ]sõx|i{z X4Ǫ£м)'T0;* {D jifUEJcXL29GR@4e^gϐ,rS*n3g%6v-:*e@д[̈́ȶ3,Ɣ&i)ښ+>h8Ԓ͛H`|D@adU_珫MPŒY7㱰0!sԕu;yNu/";]#R2wJhϕ %ּPH?R F'jAI8i mJ6 S Y&7 2u +=5ªPj3"r(`%#׋7pRKZ`сSZL%1xcP +G{CqBt4։@ I[#ܸ{mcW-t迅~Wί)Oݎ~XX?cG/آ1mH2.A|9 Gg$MdG+p4sn@ ^ +rKϤ O<@2@.jYoPT*XXY7dB7PuĹc' +^S(~d}aY7 SbbPI8'F$v +BpIB 0 wo{X]RPZM(v.ę1  +Sؐ,{fe(u)#$*0o5Qr=D01#j࿒"G!=RMbQnF!]ߓ=UI82]x4R!B.čIXeK2қb*H..O/Z +|{YY>%_ ,c2BrB b'J5R_O(Qx k9C.5R@C +bT3N -q.pP3v9rzrXI Fq<31\O f:x?0x>\Ny^i 0GyAjk8ԯICR⎝_@CYdD1uy7K2v^mi'[ a,Ԯ>KI9jeH@H0VR\ug?=Fї2Ea&n~RwQ6ƌ*6y2*-~됭HA( +灊.d6vpIMYN)z`5\[â:ar<bZD ++%e~}}?xkNPQZCnxg@$>mQ#Щ­]5 UDn9Z_GMw9(C[5wS +e SƌG>c{EVRT#Ur)Hc ̜ŀxh~c/& C2cŰ!Y> endobj +4824 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [291.589 551.093 894.567 563.995] +/Subtype/Link/A<> +>> endobj +4825 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 483.953 163.096 495.643] +/Subtype/Link/A<> +>> endobj +4826 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [222.168 470.404 274.124 482.094] +/Subtype/Link/A<> +>> endobj +4822 0 obj << +/D [4820 0 R /XYZ 85.039 786.531 null] +>> endobj +1070 0 obj << +/D [4820 0 R /XYZ 85.039 766.606 null] +>> endobj +3028 0 obj << +/D [4820 0 R /XYZ 85.039 647.281 null] +>> endobj +1074 0 obj << +/D [4820 0 R /XYZ 85.039 647.281 null] +>> endobj +4823 0 obj << +/D [4820 0 R /XYZ 85.039 622.563 null] +>> endobj +4819 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F35 2888 0 R /F11 2906 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4829 0 obj << +/Length 1458 +/Filter /FlateDecode +>> +stream +xڥWKoFWV +X.vAHr%&,y$>ܙy7#xN8<،|8FJ$&"2\G_G|/Sg3_p>_9ލ'ZkWxljv'f\_z3(n$ sf~lH#c_g6~n* 4mkB(0%gh^ {4ww Sя_ }N}O{3 + ղ_f:U ltDfY^ +<'6Ƌ˜Bh$0a^_ΔY}=*Lj,D+Jw5|(YdQؽ\#CG1ܴ@V .W8JwY [׾qϼ5w?QU`B~yNg^=rmq~t'"Dfsѽ#-_1oYrMw"gvQ&t||X*V%P7ר`By *esuĹGZ@2?&"lЫNOSe[ +u2+ XPԤ(K8(bZ ҾGU5x \A87R{Dҩcn(+B!j7>^[dG͞¨321Da/ȅEƕAC6b] UAqm'/5m,,_4띜d:s;b3W:|Z*heV`dzg:x^o>n=jpCOQFQqB-;TWfqQNj<㏨'1\CM0q$ +/KqPAEqBO_.)zJ;=]YAy/s`odC<HJ:[N]ܴŊ׌L6) T[bRtcQIxL)ꁷg-sƦkH̢Xșlj8}@Bo"ܺ;&558%.n^W>y. +c4r[XyEsPz`v 8ƮݳwI)os4Eד nxg$ԌQDC۴yXZ0J<KVS} U-s;̵߱8[˜4y޲&WvllzƮIc[0mwE>{N?s٢)OOT+^b#m.ԮVL$20?8"x?na*ɡ7x82!4a.9KC/8Oи_ buf<^a5M9|(;]΍ <;1a lGT Mazqͯendstream +endobj +4828 0 obj << +/Type /Page +/Contents 4829 0 R +/Resources 4827 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4807 0 R +>> endobj +4830 0 obj << +/D [4828 0 R /XYZ 85.039 786.531 null] +>> endobj +1078 0 obj << +/D [4828 0 R /XYZ 85.039 682.284 null] +>> endobj +4831 0 obj << +/D [4828 0 R /XYZ 85.039 656.275 null] +>> endobj +4827 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F14 2903 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4834 0 obj << +/Length 3253 +/Filter /FlateDecode +>> +stream +xڥZKsFWt1X%"x?6'lJlmI^*aD@$bPv݃HR1t4/<YzaH3 l]x W(8h|fregWIzQzGX~7xs$\/|?pC?X$yFa-~w]s.}6vU$u[`/Wã ss<h;͒~~Qvs#,bG|K$Iȋ !DƇ5i6 EsgV:RQ= -ғ ݁!E}ݱ7,Yh%M~hXͦ0T?Xoٲlp1˦~|5*a >V=lXb&*NwbY!(ʂW_z.6~λǮ 'JA(tv Vanxy#Y +,VkrRmJɑkZo:CBF1폓^+G+E:1)`~[NÔX5[K[r-XaˀQnݝ(;f A ?h 2j:!CovIT: p%R:=č+K7WANj*o8_|+OČiDdLh~(sTL!Y!ɺ/$@Sӫ?'"sÙ*B6^t]aeۺE +]=D`(D1@ v-t#Ү7uwSEq*.(ȘD6G +-6YfWՕѷkk+r 4 +Hs[v\w=IЫ!}|z;dnZGI_ T5w`-H4Ѐܙ.w|uo(5m'cV{aX4?(^2^sQU3DA0B{bZB$agB*(C +BP'U=M_z*.ȿ-9pEu *F@uTv suf&nf'If~3lFLܳw2Ts/+}-iat+L@vuIvw# +:5Ѡdm4Hpm:xCu'vP^zPK|nğjYEh![`n-:BZWa95wZ^}Y()䵣 M@a$f/)$8Z\%2n729wֹN"NEPw}5ܝ +*my`lھ#!}@C1xUՖe GZX`;[m&1e#\}DQ4Ĝ]Il؝lsng0oTH B}bdv˩ -^ܲ.vI. uەG{ N+`I~N*fbc:A$#LJ]z-'ax3d$ƻ@B->p WyMB!5y?R.-.I1q8W xtʝǡj8HPS`UkxdqwQg>VRL[ +kGrN$3t2 mKr/8^g:KAIe}WK$ \: +-XWc iCjR4Igy0c-K`Œlp>.> e(r)KlX'\I%<Ȫ2R=TCFX݆+Z[铃Fl5i%_0e;5'"$Dt(&'o +D#?O+^iHOM#hIFO&~2]hJnwN(ǭyỉMFGa$]WcF9<l-\95_#I 7,iմ2;<*!3lفR|-RXp[OaY $rh(p#M]dZߌכK n[')VJEgQJg=}5,ƮI ["і6g$^l X';wyVסe_xr{s/mf? )ysl?n5 kV!<}>ouGՐO{BI.̼S+SvL]~1PsInsԴωT:~&1ڪm"?}T39al*H=UKY/䔩)xuLmE%_t4*GӒ.Kz2x3%3x+KATQWFsoYvk6+'WͲޝm9R$8+ݏM +>\xŶsN:ىz4` %U$7DW> endobj +4835 0 obj << +/D [4833 0 R /XYZ 85.039 781.388 null] +>> endobj +1082 0 obj << +/D [4833 0 R /XYZ 85.039 761.463 null] +>> endobj +3029 0 obj << +/D [4833 0 R /XYZ 85.039 667.405 null] +>> endobj +1086 0 obj << +/D [4833 0 R /XYZ 85.039 667.405 null] +>> endobj +4836 0 obj << +/D [4833 0 R /XYZ 85.039 642.687 null] +>> endobj +1090 0 obj << +/D [4833 0 R /XYZ 85.039 180.371 null] +>> endobj +4837 0 obj << +/D [4833 0 R /XYZ 85.039 158.609 null] +>> endobj +4832 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F72 3974 0 R /F18 3977 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4840 0 obj << +/Length 3309 +/Filter /FlateDecode +>> +stream +xڥZ[s6~%Lx[6fd3NZets It8d_J#liF\BC۫o*UgaHHnwx R$I~:>\~wݮ7w #Ǜ:W:KW_W տx̬xNUK BpD|C teޱa+0GuzO <<2پ/vE]vZq:&Dh Ǝa4-x R#~+^y[mhmW Z:Q~fG7x i2q|:Tţ9f*5$P2m0U,D*"։DY5B''^c/?vy\| v9mǰ=WAՉмY59u59UfUkeL(ڢiv݁V%cQ}A((߁ڤeǫ#Pt0dk50#^2Heh:5^̡ㄎϡli3dM>CX "B0M9#*`uij)yy tZ4;ʹGҜ;'+t\ťV 'nH%J}[ cƀO-ޒރ8O +8P{Hr}[6΢჌D mWK Y~2]o~Iwؚ-Q SuNfxlPh h +,ha֙zu')73%9}A~7I",Gϸ!MܯDJ}Qg$ 4Ov䔾ѺcDZ!GoEq$wEmBwv$ D3 +n2ttm r4'QBr}%]q DH)X XBIYfYn $=9lA35{yU_aER,3- (sG2iLe'-9׺AKE>j?ȧdZ%a6qZ"hs<79Nۘ;V5h{ÊM}^'Ⴒ-Hifb>jjEj`8 SîX |<oRc*TUh;p@G +C$vVx*R\wtbb^JVKq{10$`sR ~(]AE23~adi6Q.WE>[c{E=k҉:Q19I-ͅ'PAv")1Λ4 \{`?EYyd%L <u70Rmc7\o,4@H"e Va`\>Dd}Y+\:~uNe1Ay?)Zf;)ԫTce +{ԛ/|\_U*!1M6<=n=4Ď& +H6;E:v"#VB'cBaۦ9uߋbOUGbૡ$!1~_R5X YNddYxpotcݍ TƎc*9}`WXƮb(F`CV]4MͷL EP/W%^p8h;ֽ ˆ^Ve_hoKەreE+JNg*J$z$DB_j*OG/nl֡C T +GkF( ǝkLJm1% +-v**Ro'X=ojx$q@Xw#a +-sL}ԓ͐ + +l$;H2NdžoR;¾zGLh?/DՋ>8}<"mTi<[ X|1#:m@i_ y늿; 橶9/tTj#]Nr^Ӑ'3":$z|4&RyDYÜܒ`+W A2qO2PI.ݓݎKÁ m:)P h h!Ze((?aG^ o +="Yp fG  4L 7 Q\fw)/R/#b QY@4-2ro -웎^KvBt(,\:D3xs -FpUu.61b?'),Xc1LC!4 Hq Ι0X>94ߢ؋G$ yHiHf9n91Hfuw':_9>IKJ$i$f9n91$fn|o.?ug, +ozif9n3f_ .$; v,ioK,]b4!?'kՅVHD0M[Yһ~5|!G?endstream +endobj +4839 0 obj << +/Type /Page +/Contents 4840 0 R +/Resources 4838 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4852 0 R +>> endobj +4841 0 obj << +/D [4839 0 R /XYZ 85.039 781.388 null] +>> endobj +1094 0 obj << +/D [4839 0 R /XYZ 85.039 607.698 null] +>> endobj +4842 0 obj << +/D [4839 0 R /XYZ 85.039 589.029 null] +>> endobj +4843 0 obj << +/D [4839 0 R /XYZ 85.039 558.748 null] +>> endobj +4844 0 obj << +/D [4839 0 R /XYZ 85.039 545.805 null] +>> endobj +4845 0 obj << +/D [4839 0 R /XYZ 85.039 534.377 null] +>> endobj +4846 0 obj << +/D [4839 0 R /XYZ 85.039 507.278 null] +>> endobj +4847 0 obj << +/D [4839 0 R /XYZ 85.039 491.608 null] +>> endobj +4848 0 obj << +/D [4839 0 R /XYZ 85.039 464.509 null] +>> endobj +4849 0 obj << +/D [4839 0 R /XYZ 85.039 450.96 null] +>> endobj +1098 0 obj << +/D [4839 0 R /XYZ 85.039 422.342 null] +>> endobj +4850 0 obj << +/D [4839 0 R /XYZ 85.039 401.146 null] +>> endobj +1102 0 obj << +/D [4839 0 R /XYZ 85.039 247.401 null] +>> endobj +4851 0 obj << +/D [4839 0 R /XYZ 85.039 229.135 null] +>> endobj +4838 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F66 3248 0 R /F72 3974 0 R /F18 3977 0 R /F20 2873 0 R /F35 2888 0 R /F56 2898 0 R /F14 2903 0 R >> +/XObject << /Im3 4330 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4855 0 obj << +/Length 3034 +/Filter /FlateDecode +>> +stream +xڭZߏ6~߿·/H,p"MS$dA]]dˑ ?f8D2IA5783!,|,҈"[$iD.6 q w^]JbDV̋g?"YgX__߼|\ ! eU՛7x+n{+G߯no~xy35 +GQ^Ld> bQ(u}ë^(yx 4 ge3p)YOSS'B !QA2^ BS@9ŋL<(k~SBOhj#topo"bEQ‰rqbԜLf91hah-uOys U3H%]o6$^WCqXƉ9e_OgKA(d^ jxxwM+{ AG |8vF$(64El 9̼#2$1KRqq`ALf9jDv%76^{Qg"A(daC j>xxȊ'gY2ɂ1Œ)w1 +YPB."l),4fq?pQBrbԴLfi1sx#1,<(!6@ooQL[-es< ?|(dB j.x\x;H\t|Sk(,>uty2 +"o X}SD c\d5SY2 <|YVy`xΑOOt(NFLdB,&k7KgUX>(dpl+%reqC z㩋QBraDLf0L"5]߸^2>.War' K3,t)!]6@Mo..udQ긨d,̐ e6K6Jnzc}\5=SY~ oۻ29ߓw: +OdGIݽQ"+]J =b-Knw;zKn)v|*kN[Xm,B2wWr+.bo'm'ՅH-֒Q)]+s[Ր+."o~;H QP͋P}]ukI&rBKqma( TzFB/馴W475Vd$kz U/BgKY|z~ёAHx,K l܁,_MUmRUGƄۦF4ܠ COmv\1)u+R|Lxg +t7ړ+C*zq!4|z)@ J}hϔl0¥ {o>=5=St}%)P{R(P~fb75@ onq&*ۗqBs +-vwyOtIBQA1!%69氾P Ov|͗a_1Ǘ&V +N?/-0!tfѵ +m0Ă!Mz fG ht54- 9ZWYɭԂ+GUzrT2XB(CmTW`8mbXJs+S]`f/eޗ:a hP$]N2doB[X5HG[lP>T͠3ӥV%Uu]8=訓ehuMqPb4dfeHzᰒɷkzoTO#DҭAfD/e[e+rz(Td2H3[2M]\Mtq;zk`d?r(ҜWʞci`|%fi!"ȎK}uZ-1T,L&ccY NhK=$hM>̋ph\Pc(ذ*\}CV5 ǞΠJD?#`UvrՋ(Îڣվu|[ h9Y ˗r_V@ͭ`&i+'眮O?3hhp\5GSY 睮s9ב4q:oQ|6:ӏHd|MI2)-h[ 짔#7y>C,gt) <=107A pi_©$_%‡pNq/~f`(ZEG|/8UVendstream +endobj +4854 0 obj << +/Type /Page +/Contents 4855 0 R +/Resources 4853 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4852 0 R +>> endobj +4856 0 obj << +/D [4854 0 R /XYZ 85.039 781.388 null] +>> endobj +1106 0 obj << +/D [4854 0 R /XYZ 85.039 428.19 null] +>> endobj +4857 0 obj << +/D [4854 0 R /XYZ 85.039 404.872 null] +>> endobj +1110 0 obj << +/D [4854 0 R /XYZ 85.039 231.197 null] +>> endobj +4858 0 obj << +/D [4854 0 R /XYZ 85.039 210.607 null] +>> endobj +4853 0 obj << +/Font << /F64 3118 0 R /F14 2903 0 R /F15 2884 0 R /F72 3974 0 R /F20 2873 0 R /F35 2888 0 R /F66 3248 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4861 0 obj << +/Length 2747 +/Filter /FlateDecode +>> +stream +xڥYYoF~jB#`+ yh-;ɐm[WE;X, }TwWUuٝ9Βvt''lpf[,F4\^\}ةΖaBo~\o}zҵn_Ʃo7_ ׺#ﷷe[o˟/>,{y3ˀ/O#ۅ0e/_V<xՔ + M VSAj`6 B5g7CA9aZ |[mbBs=Q]^irz\ +<\fm Tj@#lcBQ{kPF^C!U#m1fʯN(YU7`ƿt8%-hgbyɩ`;փdUC[.X/Af̒bPy*<}2rݵև͔\VĠ?R04ٮ*?ƎUmxinMTk!×xTYL" :8{VF,BM㹃9AOW:pi7$tSQX0 }ʼn_쥩7\Z]a'n{w76k&$z ;Nuk''Eq(l[dx[2(#-{ >o +Sdi ]6Fbtr.*16Vкǒ\@ՊqCiq 0%A&t`ڽ2>VWGa52SMe˜Q3.P[LVʴ[HߌO'"rGQ\X=؆2Nc!`!gIGXP[cAv狌 v7-m-7>;;G&Sj䎉rCG">t|2@r[6PvWrpQpxb\68ncd'k=tw;|,m[6͏ AVpUhR5=^} +%L:E].G+UBJ7LΙl)C|%p@o#kV.{E-ϒ}xQ*w9J6 . 6N=dqTs>r9`zNj!M?1>I6"8nQyAb}[ GqLӧP,Z6.%sZtG\t-|;p,E $}Yb?Pa(Leע7bXbu'o.;4g Jﭞ,pţ8Nꤶo ;м^wRJ$ 郆T6ZhFBΠu@ l\Ђwp9Sy(oܖJ`?bj +XN&p 8źdIrIV +x-<iM?Th3QehAB{*y㪰?A9'%sRogh 9ܜL5 _75zW^)z/U7ɥ̵6M%\nͥ+Xd#kdھm*vm_@k)$0mm~n/KŴh:uOuR +NU?EYjXOas.NWuXkO:=߫pn$p_G\NWOy^g +C&Jendstream +endobj +4860 0 obj << +/Type /Page +/Contents 4861 0 R +/Resources 4859 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4852 0 R +>> endobj +4862 0 obj << +/D [4860 0 R /XYZ 85.039 781.388 null] +>> endobj +1114 0 obj << +/D [4860 0 R /XYZ 85.039 761.463 null] +>> endobj +4863 0 obj << +/D [4860 0 R /XYZ 85.039 736.911 null] +>> endobj +1118 0 obj << +/D [4860 0 R /XYZ 85.039 323.41 null] +>> endobj +4864 0 obj << +/D [4860 0 R /XYZ 85.039 302.214 null] +>> endobj +4859 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F35 2888 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4867 0 obj << +/Length 1848 +/Filter /FlateDecode +>> +stream +xڥَ6_(V*.),Ї4M-tu4p$y9([+A"r83{VIB!uĉ:Iu9N̔,7z96 +%E*Sgy{ r}UXxq~xyPի?Q^竷˅ܫoq~vgG)qt6 3)t8Bq9Dh/f7,pjNDsp`&Bi'e@67yխ~~Vx.n}y :O4)o֬ +KhUV}tu]6=?$tِYwTYuٿiw=u10fۯY;n}>4]O]ztٔy)gDӛݬ^C{KI)\KyaSޡO ^ޞۦ|sqYi 1>L2ڛCøY{()(Vzzȳà )?/xˬ}3O Jjݸܙjekʕ9t4V kZzd_ׇ]c6o2ڴy0ɡ8pw ?vw"NAHɶE Ԃ5@3`j#Ӯ\vlû[1nLw\|nEn*MZ+X ;>@Es̍Ԡ  + uA +n]jOppҗ k:[<}Lh)TV5j6V\w'`W F)g[.khO QK!G+ |GP~]ZhKc(K$"W{e|J>+Rh*Q +vG8$5_v(BGG f?iE˫R9 3z'$JFSG$ v$'I;ݶLsBAHCsMTz)|-FV]2/|@,\B717w #õvݜ%_x6|50v5~o5@#z}ʷjkͺ;*^jBnH]H: (ck uMTC*0wzcq,ކ.CFh&m:RIxNŏ-|ðbn R'&&V`+c}țW/a!O/GeJC+uZ\-ץE6NV~jO6n"1Wihivp~yח?̏3QJ +@8.َϏ6 aBwPIx%/ibm |G TY W1AVTW`Pa_5 XQ oم b KG#ڎs^A^ƕ9Ӡwޢ68*suS lG{u˥7ޱR%*Yd4-#Q=BOѝS ,*sycf//) > endobj +4868 0 obj << +/D [4866 0 R /XYZ 85.039 781.388 null] +>> endobj +1122 0 obj << +/D [4866 0 R /XYZ 85.039 205.008 null] +>> endobj +4869 0 obj << +/D [4866 0 R /XYZ 85.039 186.34 null] +>> endobj +4865 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F66 3248 0 R /F72 3974 0 R /F18 3977 0 R /F20 2873 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4872 0 obj << +/Length 2308 +/Filter /FlateDecode +>> +stream +xڥYs8_VQ>^vziqfFfl]%ѕ䤹J|l;-) ̇bŞ.fi&0fyu0H0$$ [z{QΖ/λ^,4w0tD4͜wN/¹<{w">?/p=|s,tߏ~]7#,Lߏ|g+8G.-}Otu(_=+fjJqyq>At ,}/#R܍6EݩC(ob #u#8/ _}-2s)*.j@k6=USj\5LiJK],["h..̹ޕ+J@Vuy q|@e/P҈p%n Y`]en qSɷ *žE!ʶ+ʒWxի|GGkhprI̩R~Qc{FFH꓌d"B9VwuNѤF*(P$qteGsk5#GlyZsjbXwO?d{r oFFodFm +?tcrS0qі5Wdȑ q5BwMsxwo;śhwJ +R`qxjl*ވE-9x=5jc}h^K4Jzo,tkAD6"R R?%qvٖYhH{543?|"f-u(5"0·.(uݲ/_2Œ״] >#npANE,T!EHhib 49!b>!6Z6t^6 tޣJ#)} zBLҟ*pI*BD(kWX,qҡ!̮MC*lhby`>E .%Xo 8'i,;P\l9O4%L#= +&^OX%X%h%MV75L3hsBb[t3f+MaDDf"#t"۬d"Ira(bz0R* +=V4uq=ʼ%0*MgޠtTt+vZf8$TڄP,(an ȸXӎ! [lCK|lCоsjCd Ek\*peok!IƇ|eVR1^e& / l4A%Bٸ8Pذ006*w۩1lV0po[IJ +46peF+!iHnMMOD@C&$ ҶdjQ4$kB]҇I-76 R\a; +=m'&6*ۄ՜SA#?ulk<*Qq$'!IwRveu13yo1׮nJ5G&>OX7}EkwiaȈH{AB"нI$H-sAǮuCd#/ *#Z_C$4bQL2~rs4Dd+F-۞b _O 'Uz[#&ztQ8ldM^ބTIP½SE4*Yx~4*KmE؂L)9HE}6E0?,Db$lk"#| aq E8$,yRLm?=L>@G_zw09}~n.WMqn{iEsնFKHx}"%R̩) 㟟/ԻRyU)=L$1m4/=W IWmF?,<GN=z:0/2mLO3{-Շ>H΢jh= ;&rb[0E{bB/|@{.8@س("kxpMsendstream +endobj +4871 0 obj << +/Type /Page +/Contents 4872 0 R +/Resources 4870 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4852 0 R +>> endobj +4873 0 obj << +/D [4871 0 R /XYZ 85.039 781.388 null] +>> endobj +4870 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F14 2903 0 R /F56 2898 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4877 0 obj << +/Length 2438 +/Filter /FlateDecode +>> +stream +xڥkoFC +XE*""%CȾ_%eQ.p>ffg=pp~y*M'*l`P f2Y^S'a/dľd}޾]4)0<~[~B 0/_-[@`a<}%d/WaX+WwWtxOOkLJ8U2P@aM22ݾ|?Q쭚2uƓZp,Dn#LNçy;Bi#7]1!c/s6 άƂ1LpGsߞ A0K(<=cs 7'mvڣʡO{cb/w_#u@V8*^`Stg9B CyS844i'*! WLh={;i\ SWa4C ~<dÐhFK9WώC?wCvG<<~:^2Xң"!/῎WZ9_GZ]e! V(ԼnZFFQqJ.* D_7y,YEX!v QnHc#b/hPV >X}0dYB"7x|FAz[lwI Ð茝)C4M[wB{3S~Kǂ. ,_:76ϔFmoM1NwS +mϱXZ/٦a|'YStx|Z9~( P$ꡩ-V/tJx(S;f9rISΑdG1a,.+i-- M[+$ +eNŦ^{>D J6^;yr-NMyv[,{WD#s;8Pq ԜC &54qZh[̈J6ȡHshSm@*uKEǧ'+x4عb=Nn# + +.Ȃ`A8- ]3L zC3>$F"+~ hzg$zT1AX6Y?,s@ +AF$u +^>a@SjB1đn٣uQȶ *>CN*49bңt>%8/`0!5ϝᄬJ0wNGlk;y78Zr] }ÐNc4[xע.2{ s7`nu(.E?x /^xぷiZ}AO0]0(_q )qmg:޿oLBTQ!K)KDC@TL')lyJZ:ST 0ߛ޹0,.pUM ,BC[!L~X+y=HcoD{*-h_rӠEHj,crM +%5)VRpRQ^t>%[&_S- sh#^BkfDuh[aNLڕ40Ot@Q*Ϣמ-1ߦxC6Lr?9ߛϤ37|\֥7;^!maSXoxsD`ܕ1>"[U +,Ͻ>  obnUl6& Lwo^I@r 7|ʾRtE),Q']\OՅ8(Pbg/1endstream +endobj +4876 0 obj << +/Type /Page +/Contents 4877 0 R +/Resources 4875 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4852 0 R +>> endobj +4878 0 obj << +/D [4876 0 R /XYZ 85.039 781.388 null] +>> endobj +1126 0 obj << +/D [4876 0 R /XYZ 85.039 255.721 null] +>> endobj +4879 0 obj << +/D [4876 0 R /XYZ 85.039 226.923 null] +>> endobj +4875 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F14 2903 0 R /F66 3248 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4882 0 obj << +/Length 1898 +/Filter /FlateDecode +>> +stream +xڥXo6B&#J,붮Efb节[,zM݃XY Akxw݃䝤Ÿb%\?X +?tp <[HgjqKXX%[˫o҉~z)O/_R`_W#篞1?quזoW/?FX!AL޻V_,\'u+$,J7rq}TkRs.Px LƄh.Z'YsKe0ἜZ3a6͚v0W5 ;CH W=FFei}f2L5inus뺼hF9Y760nzzp<,cd#UyX<y6:&@0)HWipES]n_ikApctGRIlauۙSr+ofXWͺyd ]xP#Iߔlr!45-SBDžLΩFDIix3~ Mtſgۗ捏⡐’B + SEzwTmSc'܈pHi:7) N\iZ(h(x݊nyor +wjy֦+ڷcWE6 v?`+7pٍN=ul&P7-NPWsiuQC#ԕwb<W5\0RrT[9alm|keFYlut;lL͍.VvK.$Aa:cرg'8o4V}eGx8mRMfຘBdn caBej2tU(b~fzEQDNY[7YML%_3P5=j+ gv3'Q''%pŌn?cUE*n3c2TLDN,ɡk䠻&gAݐ³e#os+^N5Xxܥ^2A m"9 *W9Zendstream +endobj +4881 0 obj << +/Type /Page +/Contents 4882 0 R +/Resources 4880 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4884 0 R +>> endobj +4874 0 obj << +/Type /XObject +/Subtype /Form +/FormType 1 +/PTEX.FileName (./xslt/figures/tip.pdf) +/PTEX.PageNumber 1 +/PTEX.InfoDict 4885 0 R +/Matrix [1 0 0 1 0 0] +/BBox [0 0 27 27] +/Resources << +/ProcSet [ /PDF ] +/ExtGState << +/R4 4886 0 R +>>>> +/Length 4887 0 R +/Filter /FlateDecode +>> +stream +xmYK, )rEHQCxa xf~ _AefU (2$崣_~keqUk___cV,n?cO?푿^^*[`k=qKz]6\Ľ;|x5ƨDzs4݌yrZ![֘дqq8{߯:ڦY߰bi7b kAY(S+Z9KXXQeϊ#Z=OޥMhgYq̆SF!w|`an19143[qN\B4 M{, q sVyq^gZ1 }ЦֆL8GkOkX[NG4o_tUAp:]Y^vFԹC`q6j qor}gH.Ұ"ۉ {3qX=_8=e<\ ӻiҞCV`Nl~ ߯`bI<*8QB+ػƇ&/Z>Ҭܗn^u%QKs:yl!ssئˆ qUtȂ 2b1gl( #dl-K-;8K2[-ET>lե)j `{z޾P[*h]JHۏi'0oRVj7{N(@ncϵL]bH,3L_OͶQ`7s,=h݈"[c82pjA]ަD,8+b41)!ZHk% N9rORW~; ,t#S͉,vzY$6-g2Eeƛb魌7JXdLC`YyuϞI N9Ѝw塷<2d‹8o]I+s$>c +1i Ii= ϕkŊRMD<WSx&rl&Q-Ɵ~x %…=4qjs#|Q(5d oQ3UzixIݍ3-8,#Ӝ2P{&o +s&v j)CMhwC4MiKWV.\VqJQ|dL=B=*qM'*0*2gO1|:rcDR&D"wvB\HT8!F~Xl&j 9PQjk!S 3 YhPcU|B*8in_[GS8y?n 2%kvjhXlzDgx|t $]F\o70aNuZz\*n +Q0߯+#-=MUxz_3&[(tze F=of{_h9S]` +˼{)n~\ڬZqp15LIcƠԤ9~z%g^ yNiۓ:%NkjPӒ{ qo@B%6l?򻘫tTMbH +P3!A<5![5{:,R?k8 #$6??%lg_zj5zX9I/u:(=IeɊ{^EZendstream +endobj +4885 0 obj +<< +/Producer (AFPL Ghostscript 6.50) +>> +endobj +4886 0 obj +<< +/Type /ExtGState +/Name /R4 +/TR /Identity +/OPM 1 +/SM 0.02 +/SA true +>> +endobj +4887 0 obj +2934 +endobj +4883 0 obj << +/D [4881 0 R /XYZ 85.039 781.388 null] +>> endobj +4880 0 obj << +/Font << /F64 3118 0 R /F72 3974 0 R /F18 3977 0 R /F35 2888 0 R /F15 2884 0 R /F66 3248 0 R /F56 2898 0 R >> +/XObject << /Im4 4874 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4891 0 obj << +/Length 3910 +/Filter /FlateDecode +>> +stream +xڥZo6bkP-+z?7R7v9Nޕm5Zi#i}gGRԮ%Cr83/|k l@mixsBDq~}ruY +cX1̓q6%%aS@F 7E{nE'bML̉y<(cX΋?5xC-~R=C̴?(uS?z`#̏-ǁ2e9UsV=^fz&q巒G(8M0B]AYwCl1^x&cyۼH {,s>MU%yH|gD,Oh0AjW5 w٠ӊR4k*q Ɍ2g>K˳( + =! Z`zE'nؔmCVK¸bb^qx5>z?L+XPB.b9sV,qnymL!Et{gIcྐྵr&F)k#קCESi'"Weֻ@!";u,[,煢/ruj}>(}4jdFT˒-k#Šgz:vy6(4OgO[T# Xte/zƄtQ0dʀvph +bִC|J6G,u_buU A1mv0L˖h_qB,ڕ"+b(פcL mA8!XYhI2jXD[x1t"f,!i8ȝ+:/fx:Wǣ{ j2tN{BOվr%\+d(o{G|Cnl}֓i3 ɸ_-C92+cM>)ܘGiR84Mky2!Iė,:;$#%m&iT5c)xvxͦU{[UqCgݢ%:a;?2Ϲ +Xtr=o_"=ø9Z ^sۧ/+C1k_{ԍ"wʾdE ħ[Pj1,9byk}isc%9q84+E I!Y7;\R/Labv{3`WO7`1*/߫.߽W +WBy'62a;/e7Dx% +"r#ODD beWF1*H]we7#ީSCl׵5죽 s7Enm)Ur/L,e&Q]GfyZ}Ι.ͬ4(Rў>#waYi]|4 +ݖsӋMx f0lvflAOAAХ!0He*6c{mw8emh7VvR::e)z]Ku%lB$ I=$oV\5 ׳"֢锞#F܍4N4PIlʳOf_G+M9#Sh2[ F (VӴ +f +F+ܭ)8N wBg!j೹XC(^-a XIꗗ׿-A90Q1uCC<,[!MoAYw7ǃ>rbN ]~}]R2X@{ٸ]瀮I1#V+U +nh72`BM@i kbW'BԬByiJrǒ +B2r+)Њ!Eiry "ʐVMr0{^+fiL*;0zEkmz9fa*v9 \s$SGNRqhu?Fvγo:mȤ6 +1sq $rgCMG잠1I&,oф#oܫr 'un{9p`ɸ5=bXIfj%ƒSZM*̸1V'k{8YiQHţ0q8gB%IeVLU&kp~mLב%+sG=s1ċ]5 V83}[`}*G!* `VZftO(q$&^SQ2Z5RΕGjq@״WqOoe!0-endstream +endobj +4890 0 obj << +/Type /Page +/Contents 4891 0 R +/Resources 4889 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4884 0 R +>> endobj +4888 0 obj << +/Type /XObject +/Subtype /Form +/FormType 1 +/PTEX.FileName (./xslt/figures/caution.pdf) +/PTEX.PageNumber 1 +/Matrix [1 0 0 1 0 0] +/BBox [0 0 31 31] +/Resources << +/ProcSet [ /PDF ] +>> +/Length 557 +/Filter [/FlateDecode] +>> +stream +xmIn1 EOPwu$Ig0ľ6V5 oʯsO #h8:5?Ơ[IL~F PYdzZ8򑖌f(E#@xoL ۹[ + +6\>RgbWj[ +WϢ{6;F])/ԬMu;pk;̩dh> endobj +1130 0 obj << +/D [4890 0 R /XYZ 85.039 761.463 null] +>> endobj +4893 0 obj << +/D [4890 0 R /XYZ 85.039 736.911 null] +>> endobj +1134 0 obj << +/D [4890 0 R /XYZ 85.039 708.765 null] +>> endobj +4894 0 obj << +/D [4890 0 R /XYZ 85.039 686.905 null] +>> endobj +4889 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F72 3974 0 R /F18 3977 0 R /F56 2898 0 R /F35 2888 0 R /F66 3248 0 R >> +/XObject << /Im5 4888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4897 0 obj << +/Length 4366 +/Filter /FlateDecode +>> +stream +xڥko6/',zޡ@sE{Ms惼wjWIkEz!9{u?u~4Sβ*̿@ +ȭZ~:}Vk̿Mo7{ݟ߼Uޛbxݻp&ﯾh qtcp]_γgh Ǒ~s?v)5:L/ibJ_qADDvp瓚M{ 3o`m3? ]ōW Ҩ8Bϖ5Qf=Gw0x ks: qi(WAgqvxh"K4Zv%x=ѪΔ^Q}?5عa q StB0$LD=VG\$ tv~מ-WK=xhuhV V +99'J a D +C cǔC<n+X!xpEyE^WGVcS@W_H{0jU>S{h*{`h(yGAG2?Ȼe"5$R{few"ӑB/;ױ%86|E'7g"LJ3d)d7Z]э;5"[52͉\ؓd 27԰ 3$m.8gt(YyA%yuOfRB ڍ6/7~/zLj,V@Ga6 >Ձ]UG\ڢ\Q Ud e.Mֺ#<݉or,s]fz< _oXu#vˮ~2]||Xf@l|0 7Cj^8Wk(M`C`!32f +CjY[U8Iƈjqp#aLM$h{X"kZn7" p,N~Iܱ~ sACDJRHW^vD P0Uci +p0UEdǮm1|le2ʔ㻗B TNx`HXs$FYCW"!In=7נUۢ+卜FX +Vh7!kڜ#AkasBBpEMSbI2 Hucn' %;/ +fhgi.HӘxAj!5*|b`5E̪\3+T(a^!{kMeg2Zѵ;LTeӀ|o!!Hi5aS*'k,/lQ8:l2%W(EaIB'vH#L TIIOoaə*$&ܔ_$3m];8p#﹫ʅ P72,I'}ג}`@rIRwI;N=W&3)ҷv1309bSF67}e*ty*I8 fG-5OQ.!?LS ES,edAL끙y[S׆#R9P&z@_)[BTsDtb% +8r(.A iAέXzs! +b[hI>~ۡ{?ŧ88D+Jb.<23XrBU8hboN/( /jENsLs*ѐ_ n=U(j`^E@4sUB(8D]-VXM:~c̥KƁ9˧R03̬l @N#XH + 0lS&}6vz>`7O1,U:9lQ=A7!8" 5:+շ*j ϞD3{}[>Y,~N>6鳕:WIZL̙vM=U}2>Uo\5*ꎍ^`ȵ/l3Onm ǪI6$qy@4_` ΊN0TvK]1ddol~_ː^dVUsP)Wӈ[4ͫ6.!>Uzis|Y ?dVHendstream +endobj +4896 0 obj << +/Type /Page +/Contents 4897 0 R +/Resources 4895 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4884 0 R +>> endobj +4898 0 obj << +/D [4896 0 R /XYZ 85.039 781.388 null] +>> endobj +1138 0 obj << +/D [4896 0 R /XYZ 85.039 516.331 null] +>> endobj +4899 0 obj << +/D [4896 0 R /XYZ 85.039 494.47 null] +>> endobj +4895 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F20 2873 0 R /F66 3248 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4902 0 obj << +/Length 4349 +/Filter /FlateDecode +>> +stream +xڭ[oY'[%H+5xp Ȼ-dWHs１^v]4 C9$o::OHY:ϯ7 jt ŝy4_cj(,q' M﷟|nAwYݧ8w*|ϟHuo-7 P O^}9B]/1T﯀01ZwW:sͭD`tf*Qf&0OrSIdT)UcumPPîn`i|48(̄*NQ͂(XUd |*3 +J~@Vim/OG*pfS/TH_§cuk A=pB\׸IvU۝q5;jCxdP=W]&NEItLb-qIm◚9@$!ף-$CD*?s9$$Gg4{6* v-:xHOxnxb[o;q6="@-iEs(YJ˦q'}7Q=J UAjN:cY-R(-?{ze/uӓ)ݼX6Mp!.8>iϤP 3je=P}zhdl*tyKS-$5:$7]RY:ю={-ykVt׮Ū7Tv/5BMvZǏbfuRؑJ~agsKL`=po-l^ʓM^M +Sv3_h५_m 3*L}{MgUON]ȉ "omPTi?YJ6*|Rr 7k/N#'~+΍ n>ti _h5Az0%uJ 7Mlg; jOy\Ih<,TF}S#pO"rgcʭu  .Gf =a$ECęѠ;I9* !6 klɱ2,&0c35=Z L^d?|J_i07S6b~fY~6ά+z:uYQH@qh.4TlrrB5Հ]5sB6> 9tW>=Q䇃IoaaŷL7 CsY-{Ozh务9 4h۫D7(LhփV*^w]?$#Ţ!]Aл\n6 +rg*v-3tnwK#6b,’ 2l3qz ]Ծ: 3 +H΃4KĖjǩv,,ohp +ePI4n@*T,b*G^L2uM"WIvWY-ςcg+r.] #~$ǴNw$\CO&{ <ttyt20U5sV +gΊ:ؚ,0vY8 3jx34-`H?;~;\vzZ+}[w<+^A#х$DbA*`~:w*]af9mCF&62CR ֺ!kUJt 6lYߴqG}vlބJPcc2zȤvmBG;d;>k`:8Rӥ0RA2ZtO"s%Qձ{|EXkV!`"G&Wv< ,Dk`-}zNA8Zˌ ͂Y5 ͌1{Ff-0jU9j7rNe( +>+K#CeYzDei~*"O6=i54#VNf?f֯Hs$ M!"CBv-DCFNMLoXP(y_d,q<̧7&X[m^VkK~l(spSWI <29"nIZ]6i(Xv: VZynfPn'dqh#Qdb4* 6`pk#FJyO\CM/u +b$=| Nrޠf9 (pn1 ,P +$抐"M0ؘuZО= 65شJ,41쎥jʙಙ (sFC+Fc$`4hf4,Ii8v✗!M>|Y2*6a䍇vm)3rqFtԩ$(PK`ijT{{N\K( 6wRgJ2rB= +d >:q]KZp8߬@jhf7 (vzs1^UnmZ2qyeIݎ(9Rx6{z Au|5'={*]ۍ`Ȅ*/s"4 Nf`H:rrtm )*&ϝ;EmVn}u7N޷xќ?E*9={ãʝZ`Hs:Ͽog䰏h$Ys$g%LҒWɠ җ @t1c2LZ>q\iiO׏{`Dd.p>)# ĔI= OK_z9Ļ |&)m$]p<Çi.$&3wW2Ox4Y8K֮=Q.6=k2wf!6H{T9F&ɴJ0#*"2 褁KPc+:NV n Bp.WU88x/Po$gqPI'jXXR3 +]9>>)"m=wƌ+Z?Jfҍ?䗣((28Ge%(ׂ8DQ[n@[g~KMh7t&F.Y-+/x;Qfyl6tPfk/w]~iūiWgIH9_mTb y%O4x\/7j׍endstream +endobj +4901 0 obj << +/Type /Page +/Contents 4902 0 R +/Resources 4900 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4884 0 R +>> endobj +4903 0 obj << +/D [4901 0 R /XYZ 85.039 781.388 null] +>> endobj +1142 0 obj << +/D [4901 0 R /XYZ 85.039 556.978 null] +>> endobj +4904 0 obj << +/D [4901 0 R /XYZ 85.039 535.117 null] +>> endobj +1146 0 obj << +/D [4901 0 R /XYZ 85.039 165.452 null] +>> endobj +4905 0 obj << +/D [4901 0 R /XYZ 85.039 146.58 null] +>> endobj +4900 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4908 0 obj << +/Length 4030 +/Filter /FlateDecode +>> +stream +x\YoF~ׯ0=ף1ө:%I=Ց^`~*kp|[Ѹt9tX +Z\]r5>bí ++uq]VE@>gM^*Η^Z<J;*tSu'.epC&bd8,D e3FJd +Ѽˑ)M{7eL@՜ FPu-iAq2u4g` NoAO)ՙq\F•=&~C_{O\uY&69:VD KW3エQӲތ!lQyThH X53{a>'zG R;gX;O+숖=2bNH?<}3~ F_Weþ-;$vʠdx~W9VD~uNk?ViQ ,]UņNm%Კ^"wQ4\Yf{040D*khd݃HONΧU(pi'A ++J.[ 8}ֺf1 QC=a-mD>AMz \!g6rz +Wj=PRˇO$I2@OTZ 5#S(yyӚu V}lY`xX+V8MqĨVkt:˧OX +NM¿leN$VGZc6?\Q:m/vqDƾcPuCD*,*1R>}*f݄w7MfqnM#i7 1 8VZgwXvj貽[t+Y:Sÿ]ȚDh*`g`E҉!d +cba;;@͙j.5w9 5 ' MtOTRkN}X8Lzx&1[W'UX~)`v /u&1ǏU*גL}lYL9lU[>|R߉*p(/KQ|{YɰdXt*s,92aa`ռ:kF4>bdT8}AiBc>ݨ9M}[8qL#~d"_.H@iY-CeEZ ~ +̝#&= +1q4f%&3g/ T7}~UWHD>e1ʂ\,sSY~)>,F0K7MTc 9?AHʒ)<V_l +#'fN H/ g#Cp/[S[Y6 ܍PcK IB4o1/7"@""A@0at=b?HNZFd5'Pq{9rۓK}Znfs oPnզ>-tڿ0t&avB w]ю] +?(%QJ~|y\Ef +@vQ< *[z()E%<8&rg +x^|46QVvr2X- `ԣNn| +!ϜdLronQL2{ +^Lө f~}O^Zyk%ˊ8G.rմ#ZUo/@jbhc'HvX1w"53t +cw$>(sNdHI&(V|lt)zbyW"?by99VІOoؗ1CbF\BHp>"C^u[Y@|[_JS/3 ir6A-#1ہ)f>m*ͱmxpm]u=ô#Aωps~\"nwMv U,VN?KBbԩxzCCܣ&}UI o&|US +FaC:֘A $*/vH * +J +#C]rk0r^n WQ + pagB/W%G &{! #YCȊ|{9`)#EQp%$^ Tnwq`̻*9MsS7im7vt$2Zg d}U/;`fy/Ϟ퉉\q+w/_bO)l\BmI sA7kΚ1;5¡QlGemArYزXRB/|?Uf_}ļLt.FJ;Нƈ0o ɠG1X Z. ++(cgS\S6~1K>\$&Rb-Y +/)9\nS;;@n%s79bjRPg&>W*sqn+Q*I;o-v'[~ޏαꠥA,NrյpEYDOh%ahd}q; l,?|GW6:4pjv0r'G_bǝendstream +endobj +4907 0 obj << +/Type /Page +/Contents 4908 0 R +/Resources 4906 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4884 0 R +>> endobj +4909 0 obj << +/D [4907 0 R /XYZ 85.039 781.388 null] +>> endobj +1150 0 obj << +/D [4907 0 R /XYZ 85.039 678.921 null] +>> endobj +4910 0 obj << +/D [4907 0 R /XYZ 85.039 657.724 null] +>> endobj +4911 0 obj << +/D [4907 0 R /XYZ 85.039 545.939 null] +>> endobj +4906 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F66 3248 0 R /F56 2898 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4914 0 obj << +/Length 3757 +/Filter /FlateDecode +>> +stream +xڥko{qpbX4&5v}XḮ"u$e?yr)Qr>fwvg= /^e~Epy3]OeEP\ލ$Jͯ޻~2c/2rݏoows8bzcxÇ".Dzů ځ'*~}qs/ϩK^5G$$i& 00̒OEDzX,$N;n[n`lδ@DOd *<agQ=wڎi|/a7h\\s@GrW[ nԫz5G/ 3} W"JZ}]]f0`6O5BxGN4ֆr]v -[ߎHuLzwv\>@y(tzPl)ہ]Y?s `r"U=,+r춯?%0Aaq^GfCHB,t'>`NAཛrΖf~ǿϋ8^e|/Iw @-"r`Nj- pHU(dW!XV~=7qa4y{D yN"ON⁧Ě;+BZ03Y +0QAmTz>❤q+K@Y6I:/ /䅓GPh֨hrk^`"A13ҏz+c0(Ri U>Pԕ!7v=mk!`, ZKnвG]f ~{Z({u'WNOn:ީ2YF{+EPq_%J.fIC[NMG8 ##֮e4sDnm  +b"!Ĉ<(Uysv|Bp4HZ~z:9pk00_p5=Ag;~f;ړŧ4(f57 cc95ڭ#ǑfqfaWE4{[q٠lDSe ^{ԲlT:$J2kR&Ĥ.w5^ViŽo;tNVFȲqv@ypzQYy @"'{vPlkS1,d`Id]OvsY5^e?f^ך%%QƏ+ɸo,z%< MyI=#aiߟFb +7Ҳؾ{(p#T5"FE0$<Va3ƒc2Q[D}Vz%*F +,u#@\P데G ;x UZsnNCNhCͰ+Pےu_ımx؟b#\2D@.3讜Tb"AL~^9p(B"az.?&r? 1Ifk9r AC[oFחY)x[IPW`ѠyC􍓄d_F$Qp9zc5ic< =G9&Oa+ M|yRebm&Β)K=B<܅ &#)#ETL,KLȄM]ڰ(ウqr'Hhs.nVZA@3\|2J~G+\TYL9&0AM A~}݋)1g4U$s6]dd%Yw׭$Ʉ8 (GЊoM&8LlMANaUA Y6]X^،imR9bi|#GoH)TKН)F=2&T*` 9֍,'$rI4XM [SUV+<}rvZW~~ <_5jRW&ȃ~lmMg^Trg+ؙ~mWev&4fƾcGd;V/OٛWhc4RJ5LmPC8~BmT\͕f(`S@inRۙof?YO$(4gOڣDD-endstream +endobj +4913 0 obj << +/Type /Page +/Contents 4914 0 R +/Resources 4912 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4884 0 R +>> endobj +4915 0 obj << +/D [4913 0 R /XYZ 85.039 781.388 null] +>> endobj +1154 0 obj << +/D [4913 0 R /XYZ 85.039 706.019 null] +>> endobj +4916 0 obj << +/D [4913 0 R /XYZ 85.039 684.823 null] +>> endobj +4912 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F66 3248 0 R /F14 2903 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4919 0 obj << +/Length 4126 +/Filter /FlateDecode +>> +stream +xڥko6{~Enq*ZDEqfm}6)d[ڒ+~͋%·bcyϐ$t=lj$9_nϼ,7wg?DKuBWns狙Rbljswnovwn>| .]~ٻnC@!E:w||*MΟ> o)7J7gg1}γH uH?h<=74aYm\۬\:5>^tyߩ(]̂% +u΍-Jqo x=\a h]V#j[^v`VsUΐ@JtYaoW^w`܅P{K\ln瀁%1-ڋYH=~|?TlsdEv(3juosDt8r8=) ;Q*M 9d@ ,Ǭ-ENbH;8s `\ aa|渤FJaʒxU5bkJn +XJ0޷𙰒Y@@7dfKk:q% Fv,U-sn!_U8IvYn'cŶ`9^Mn[{Fy|AЌↇAHf"_iP~JZnCh,ql1jB*&o]4(6]!Ɍ`7-]`e9uL: *_T3bk7Wd&jxZ%z{͚ +$:ohB xxXVϹzܬ͎:A >[`g,D$פ-r%o4nS?nc\0VC\Gj`Nc8^EITH B䆢M)߄|ۤX(%bT"cLDxS-ڷ-Qkbwn 12 ;r֞x,ƞcr(DXy?V#q`a(E:Qa꧕@,pנ0^e۬Jw[,목[wYm/T#U Cƚ X T7Xg~dI3FCh)><#0Vڪ@ _oN+ԏ_PR +KJyjC&@)M`kƤC`-TAW&51e +L.CM.Hype7{olfg@j‘ QB˖R|.@.{|xjC~|M.bsA}Ƿ;.} ݤ"I)®&FS+~XK׺6Haز6MUFVzq80ml2 @LJGQAYB߻p۲R0Zj2 '*aվ*OSEnZL6DXAtr yFqj-ff> *!OU'X%^AsU2Ő:foV2 h*KPKK}qcnfJlTIȼm)ˆFQI +]v! Zsr-goS$۱%ͦEsMc_f˹( D1H.:pHd!jҔ>Pt?#NcdRDžcu\&v bqʻA!Q ]mmFIڝs{>5B ^8'w1WlarU%`13_Qi.ˋÊ?p5jl?M(#LTvrĘ#*І -CRX1 %jM.i HAfLpP瞢_,kLRM2cیkcq%̈'/Q)J~Rd\( ӬÚme{#~QXJQK+&JSv;jb䵼ӴXAf >Pd; N /RApܥ.{&dL,౛ˈV êlmPrFp7Vw]5-:STvnݢh)q!nrAVj$*ub"$l."e]Q^F;sf;3%2{,6C.rU/JEcVD]M|x%0-KdM݁}WIzgE8tPZ&X-5g4F ɾ2bUTGgƾ+Nz0B*i6@ے.jTrL\E$ZͻǼ~|{wl6<(H1!wM6\xB+ĔS& _C{a\Ir[ lŦ6j0/}e8(bţ!I?} ntsA^`_]0s̈́+[[vG5ytՅbSZ7%Vʻai$*TNjg2Cϲ|e/I +a76{5B4LtC|-+XK)վG4}7],+x}uwH9cȒ"ϲeNfl2 r.j]n0=Cݴ@Nh  \ŕ\ueF#xZ˴]t0p(=$Te_]+@yB7a5UGqQ9+K5 +Z`Nؘ֛2vuj"nX[m>y_,B,j`|%VE*aGgJ%(VZiFg݃W閖'#*jn^ͿH +(r}OX7S'Xh1w'izr=Ϻ)Aw'x*胙Ljd}(LƮz*A~ONDLDGv#okkNh.abBIU& ac!$'E#akR }Toؗ;IʶŐ2:>k.;H֘\J7:8 x@&W"8AYmi[5Ç<"]Z1;vt{J,7%+w[Ƀ<ڝys8kLrٯ2hjLєgM>U7߸[<{_qLcWx0i ߩICw_c /c5}Ki3v=\)yH.64Py:lW @I, +N):BZ(-'38]DbD$=7IwϠ&> endobj +4922 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [297.182 492.39 447.569 505.291] +/Subtype/Link/A<> +>> endobj +4923 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [343.406 465.291 494.306 478.193] +/Subtype/Link/A<> +>> endobj +4920 0 obj << +/D [4918 0 R /XYZ 85.039 781.388 null] +>> endobj +1158 0 obj << +/D [4918 0 R /XYZ 85.039 676.879 null] +>> endobj +4921 0 obj << +/D [4918 0 R /XYZ 85.039 645.354 null] +>> endobj +1162 0 obj << +/D [4918 0 R /XYZ 85.039 231.247 null] +>> endobj +4924 0 obj << +/D [4918 0 R /XYZ 85.039 212.981 null] +>> endobj +4917 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F35 2888 0 R /F20 2873 0 R /F66 3248 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4928 0 obj << +/Length 3737 +/Filter /FlateDecode +>> +stream +xڥZmo_!"|C]=;M 7(ٓHIq;o$EݙٙgfE.D~,6 oq#?^(X j@󧛋7K7۞Oow?}G%rljr߿{ +}fR?2=| -߹Y~,;!,!5~q[/ń^d>X:(\3ۛ8ѼTFY=o6BLˎQu?m4ylvpCʂOI9G׼!zAN(7|vx*=]86{]Yu !XQ;/8u(}A=3܄F +t0"vбa믺9n|R+W`yFygGE9{dG!^=(r~A{1K{f6f5Of7#Y)m稳1jBU#DȌ=>g^8dKrY!QD3k^C|GnٛW߿AFկ-ez>D EW;3{#~O $4$d; d?}[<"onMz@?uƇ *40Ѫ 7QZTsD > 2'bS6<7=A"=0=E+lZNOD+ܮ&Ht|?d(bСH(VMα_;K P:O %\>{r#$tP" +%\qm[\rJ(Ŏ>rdp'Ҙ l 3VF+ _4">M^rD{-cIs}%&&!pX(Bg9Д> e'< l㒐J)6|"kC8 "C'(f ̖E lTA4_xVI@yCAEe;'cAW0e ?Xs͌O ݙ|Ƒ/Yt1Y@imv5ɎKrH0Ռ/朗QmdWK I ǧ Y[(_HF@A)YC)ɳ49d'[Ʊbx,JrH!E$f|f-O4jE QSM2sFR}9kAHT̶gVp5Y53/PxsYҐZ >-hl%N9KXD;7ƐlA<n.cj;Ҕsنp vBM`Or&vLD-_0C`H!I84JN"*̙xjxŠL-2{-d]7u$%4$=}3.8hD#gkM!c71vj\F+ S? *O2K&qM#äƀZ e 5u4rC?hΗ&tmnJ&a%,mmPwF /s+R7L/ hҠCD²zJ=lN8y?" {TW18$:,e$~>]7_ۓ#I8hWc0׻uw%gJM*({w|2X M%TPḦ+y{蕔^%Lf4ܙ{tz9\s.^|#׽dtvcvP).̭k|¾i&3|C!nVDX2XhtH*CE)wg<5\ˌS2>pdU8ShCj'w1ԥ> 4tpm >Աӈȗ5i% !3X=n>r3~Ӡi8.NュcovwtCLrV^dpj867w[,~P|(fY5@Z̐p& hA8|T1 +.gYksf*-~t6^W>@S Y { +X'W &l>Tr쏮\/ۻZhZײȯd)_6.ᮩPg`{-BNB%&Ŝou;xp>MWQ}bnI'3#\x.򔌛?L߼uߗ3tg?Bw7@֮Vf-tɂ ⦐Pendstream +endobj +4927 0 obj << +/Type /Page +/Contents 4928 0 R +/Resources 4926 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4925 0 R +>> endobj +4929 0 obj << +/D [4927 0 R /XYZ 85.039 781.388 null] +>> endobj +1166 0 obj << +/D [4927 0 R /XYZ 85.039 551.001 null] +>> endobj +4930 0 obj << +/D [4927 0 R /XYZ 85.039 529.14 null] +>> endobj +1170 0 obj << +/D [4927 0 R /XYZ 85.039 286.527 null] +>> endobj +4931 0 obj << +/D [4927 0 R /XYZ 85.039 262.545 null] +>> endobj +4926 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F66 3248 0 R /F14 2903 0 R /F20 2873 0 R /F56 2898 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4934 0 obj << +/Length 3292 +/Filter /FlateDecode +>> +stream +xڥZ6(PI +h-ziElkm]dq+ɻ~lhpH 3?Όt6Ki:[Fq +BX#n~, ,f:o"=_Zk/L"IR/ww/8d"nűy~_"d(_W>5U,=C?C]P~d<6eM70SxsGnX%~e8}ewHE޷ܼwۦ|lMӲdǼN)M͚kZ6-eULs̛}ъK"sSv"GUS|WwzW֯n~ gP :4U}/Ty+TlJw ^^xKLᙸ5/kM{]~fAh^@{tn;FqG:{wF;[lSQu xl Zπ5Hl- [hJ9 9٧h`_b ?=&6}GL1 1P1@7#ݚrh,# EωݨXqNd$#]Ov20BJ@Id `+o:ER jFY+wcw2 ,{2 ݐ8 !xl:Uj` !LztZ|Dϗ|.өp+Yps".~cz D^':)L@ s-ňu O=K +y4 w#xb8Ӝp 6vL}78[)uLF^ā~{~(D:ˆȜ5wڮ$L#z50#KM]s8u6"8S8a ec Kƹ6 t[;o T'B7ܲ1k稍& :I3GiI_:+8뷿1a)z|$p!:rXP@#}/˙'B1dfr>pɼ`>E|lS4pRht(FTGp U\Ja +ۋω8 ;(H& +GN[9ZI((\Z1L ;FNB4y 8ۻ&?9c+z_2, E) +rL)ItJy>Ɯrg%+JI=dR'I^rLgлwP9P:Yg&qml| T3⨿ZZ}PIu0;H**P8U) ͆kLu>0 ‘.EL8[m₇ht P\e}~r0 \VmqcR0[M'(V}=Q403ɗK _OPp^Zft +,c{b$j\1b= tYNcB>Vc!Q4k2<>m`nnwIgcaehat oJ%6)^0r|`FjRGH֓4aS'xA5lXXw4&%9 ={g˘ϔ8vWL[a8I\Lwj5*.%W``,yy -~bZhO;V..x@7UjF)O$ܤ +{kwyY!.m\Ȅ o4L9jt^zJE 1*\ސPb-(n|.0Q#nuĀ Z*1pB?mHSsZ? L\*<_-Boz_uL|S$4^́ /UJe\9c +ʡ79C100wVsR1Uٱ AK 5 (~# (ZYS?s@?©i.YIɥ@1. ԃ(,H`(%=E}I"pˆgکaSxG&L*8"^Zax%mǣ<=I[ }{3'D*W,o O-h$!l6(lJ0Zcc8B}QxQE3Y[P9hxљ se~L! \tE_m8R_q0 m0xtW g G_ٸ%g&U3eR6~&/Er%]zUE $[ (3U/],đˆ6\64.(5}W36wjhmAl^ԱK:-[FXREV@C_$jeA̸` +O⩴q%)c||/ {6ǟ|7Cg䜧]?mvsӵUO!87%jyz#rC0{7j@somOl!RWѱ8'ij(endstream +endobj +4933 0 obj << +/Type /Page +/Contents 4934 0 R +/Resources 4932 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4925 0 R +>> endobj +4935 0 obj << +/D [4933 0 R /XYZ 85.039 781.388 null] +>> endobj +1174 0 obj << +/D [4933 0 R /XYZ 85.039 567.539 null] +>> endobj +4936 0 obj << +/D [4933 0 R /XYZ 85.039 545.678 null] +>> endobj +4932 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F20 2873 0 R /F56 2898 0 R /F74 4582 0 R /F72 3974 0 R /F18 3977 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4939 0 obj << +/Length 2940 +/Filter /FlateDecode +>> +stream +xڭYoBp F4g?]5Vp)|AAKED"cofvKgv<$t=wuotO;?bb@&N^EKGO7/O'xljsz;חo8S'syt{D;듟fY݅DB +>|F 4=s}^Qnh3_\C%{HNA7L p _sC/`!dN9<[%1sƧ2U,V9^ɬ\ Hmc`\M/l׹2";^hRU<`=XlEksh ~"K@ҘV_|ORN[_;R f+loeӚ5z< LO翤 pܿeT.l7;>wVN0Ot:D`9v*窪$G~IV&iBFPI6[GlmntW-]UWCB &(IDAf0a޶bQG2OYr죘* z-ː<Y QbZ6>Ym[S00`hͤ yf7c:agiAv$ `a3+'&uLWAObd:&_!e^>Y1 q\-dC-96;I깁[WխOlm3rQo/b:Gs"wwxͪ@to ZVoUlw;p5%Jm@[ul-#f3֞Se׏O1ca8˄3^kh֩ƙZT0FB>6` ?5HB%m/ф5ge ;7ߋ6{ hD xgb1GQW+؍R= •&л3| 5'Θyv!UDž3h4 c;/]NJ#x'R&b74G ^ ^o_# r#B' q7dqY5x62HIEnm;u D1Qv8<0y8cMwL&>1Nܘ, ;jMW gּ!_+HI%HK*khkxke\Rur52ȍ/L.q!Fk}; ?:tIR<ўF{g4jn41. pyY#.dvAi +6 ցof_,s5nu\vrwaZ=7( G"~!h]r~G^*85P\_!,BߢMSxC-^ra#s!>5ctiESg6Mx&x `v/X<ջHx@jT7"D9۽,ʜ_rc Φe7њ ]Z۫3 >!T%*vA <3F 4خڃVnH61HQ%S +݇?_ KO.dJ!z%-@tT~*vPv5Lυݐ jfؾg0Z2TrCYHhiQ5[E &E{kuSm7l ?L}S~`T՟63E܀(7mNCNb͕b6QE|߹bA),+I_ L CQ"6w#*oAƴ]A+(7G=,:6g:ŅZtA4zԲ߷Xlyj͔wDy,yn&L(K+cRSs7nXeZJ i?1MmsL^*Jb'.ϗ4xf_~Ş8i-lŃwxViD*,/0h 9NZ4E<*+ n`#ˬ|Zi#@=B #iOV]2 =~zX1卌cy na9T$Z_:h^Q^ +"endstream +endobj +4938 0 obj << +/Type /Page +/Contents 4939 0 R +/Resources 4937 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4925 0 R +>> endobj +4940 0 obj << +/D [4938 0 R /XYZ 85.039 781.388 null] +>> endobj +1178 0 obj << +/D [4938 0 R /XYZ 85.039 651.823 null] +>> endobj +4941 0 obj << +/D [4938 0 R /XYZ 85.039 629.962 null] +>> endobj +4937 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F35 2888 0 R /F72 3974 0 R /F18 3977 0 R /F14 2903 0 R /F73 4000 0 R >> +/XObject << /Im3 4330 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4944 0 obj << +/Length 4113 +/Filter /FlateDecode +>> +stream +xڥko6(PUQ^k4֫F+m%߯yvNC/5Iu?uF~$UN,8gJ0.r?\~dq7>->xzsoZkOeWWo/+2Ry7/q޽y.R^|[G[HȐ>| ׳Yzځ{{D]=9ZbŸTlobB񵉑MJVy~&D&~ks]9rc;>^5CN<|Lg*yz#BEvc_E!?xJҘa=!W+$o&GLUWmæg fUS0JP[fmCy Txm6#]>Tm X/J"%W9&E&IG˻8K; jBI' 8CIDlxrL: }\& +s7T=n"2)˂8k*eDGt {)d!K>6@#z'Wp&1Yfwܨ U]3(%hn@k>OYnϨTG`!Cc1l)7?9RmÛ:cApO{N;jS;4L'$,L"2Oo_"1KnA4Ȑ{"dO 8FgesGgB54=X(ܲ"^m'TPyqQ?[sHx?jH#OFتqrf}AFa0 SBR3A5ұQ~/5s9Abs?*L8LH5gr6 +O/(܋(f{%x0Nϰ|xed&"d@MC%eJOVMްd8?I\DZ"BXsp_xFa:63q#|T / +*@,X.cbaP +Gw5)%]qheg2\έϨSmi ҽII8+H $(:I -;mz/]7eO"8w{o: $(E 8P-*JE`; |2 +g+ +dxPw +eh&54 +pR~O_ʑ~&3帹>oX@a)yF~``z{u>Ȉ@6s2-wb`NjtYŷsƷRwyrDAYoe{)z$c3rVJJ@DŽl,ƈ C7gm +=`$W#(JD΁1clN3faHԵ.Wl7ݖZy9O@ l4=XN,DW#J' x=bH;E;(r8]٭#y(*d3FXn׾ܗ >o\jÝz/ᣰZg]1X*h貉)Vd}-MHrwm'@djI,/mRӅ/|2\k[NyC4хVrra*\vyd@%6K 5K;sDLjUa%ubqR? %bd_8P nr֔VB =gPn| wĿhP!= 9Vp/UɪzK.+B:tO6<[š5^E4N=)>/ŘZ^/_%6XB8w߹] C+6KD@*.7$"m&֗Mn6Ru7aO=}k,Xxa2UZM U%6X7b?`oANH +fgTgm+sHaBgZg[MRZw;i:ɾѣ_.WM[==7mf7 +.Sjɔ"^;ym&7z:A:]LH_)>S[*NctF jRd,X\;!#ĺ:S:gKRa©XY#r$ψ?-7R- 1+++Lq){؋I1#A<Ed޾'Ӂ_`ESE5 c,!/0Q~-iqޣf`ΰ_ľGǰ8A}3F/+A y1x;wj7Jt\ 6My44$<ĤVs1td\2l[7oߍ</\9+. E1F̮<-17 &ģ+1_ZPadm2ˆRG!.A/IJ-fB p KG^Pآه/=v, zSr9̵us˒/zxN'{y6[Dnad"`my@D́d1xO[ +n.jPJ;ضUڈ=DDbCt,\L{ ŋ;Pak4}KM9FT}v + ֑20z15H8:h:Z48!l\ }Gr A*{+-@&_*?TUy jW~:`D ˞%=4yuxsPMR~Y!rGG_jsJP@!y9ۊi(qy2`3\_T%8gC1G,&'*@96Y +{nP/Z;hnHiֽD;YeDdӧApPy#ZVwm [Z|b@%zHf$ߺ\P[V{~ϦU%^!9J T4*\lq+=T{AT['@t7" m`Ʉk\x[T0α&[}$\*VDN$d}5`ذB1/]p +=_ϣ}~Odn0D1M>4endstream +endobj +4943 0 obj << +/Type /Page +/Contents 4944 0 R +/Resources 4942 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4925 0 R +>> endobj +4945 0 obj << +/D [4943 0 R /XYZ 85.039 781.388 null] +>> endobj +1182 0 obj << +/D [4943 0 R /XYZ 85.039 761.463 null] +>> endobj +4946 0 obj << +/D [4943 0 R /XYZ 85.039 736.114 null] +>> endobj +1186 0 obj << +/D [4943 0 R /XYZ 85.039 553.141 null] +>> endobj +4947 0 obj << +/D [4943 0 R /XYZ 85.039 532.55 null] +>> endobj +4942 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F66 3248 0 R /F14 2903 0 R /F56 2898 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4950 0 obj << +/Length 4110 +/Filter /FlateDecode +>> +stream +xڭZ{۶>MڎEG3㋓ˤ>鸞-Q(R!)]?}Dɉ[{D `o^Ɖe\.zbnHoo/ԥ4H/oW&] E#`ܶOFp㈪fÑـ$6VT[ni#/+$1n.PX XT#R ++j-?u-_i}QV-:J)l.ZM=K]x5KrX!`#W?j;FL&%~"7لTcϬ&S_'z:&d'@G\nDz +N%Jj(7+[^!vybF2 e[\ͩËb">xӇgp] W[;>Wc;"y:_wC¹ |"BzqҴ3 67!ݳ,Aj;i@RN[Bтy@k~RG)Gi Sv;-P 7#qQbF"""Dg"[*լ" VkPUECj 4 +PZ:AOR+С/C}t9tl%-cL'6i1",Y0[1EpD<*8v]-;4Q!KC.^VaKg@̪6%8z]u73HpBEU`6&[#nc5dYМFZ+1[HdnXvp`|?BShL%" Amq {THu8v6X 3/~S,}c"3"ɰue!0UNC{o:EGPorx6!DNZM'D@NɳVwX[RN ljOʊƼ0 rxhl䃆ѩa &@M\F j1qУҐlX+'yȻH^یȳ>[z#O[S:/Z^8O#L٬CJ͘YmaS*~1Q +pQSlk oC.#y00d [uyŏ-3i@v %Ko֡{]eSg::'ۓ# +F@x]h:% *ۺB}OX#<ҟ 5uY-$ړ prG4;$0L)"$CNzy !42̤&>Ys3 +4K]!4Z:A +b +#'q꤃y@1p5*9"*X-lP;|h]ƙ!UOx H둟آq[#Oˍ$Ԗuj{ lg=8BLhI1a0Y>T_Zeͻ9K==1~l~g[qT@-1s:ֵsCPF7s 3l-dKqxCISpCJ_f}k|)op)]`Wsd6xGZW;x~ˍ ' E>3N稲!ȓcml+Ɩ]w5!xCx>p 8h -9)(t_°mzlRZҺڝ1::4b N)G,^ȑ+_vnTGw%U4&녴xbr\AmQ9%hasO~Vˢ]h0 %bF6BqFx`ddta uXI&S#x ImK0WYYL^~*E]e1Q% ;B>];ҩ垮T$P]KV>:o2۹OW6q-jQ)6!S@WSC,s֘Yi#pbkC?t5_M|Hl$~$#):6ׁab/LIs躯΀r nft1۹H9p@q™w>{﬈)F&F-E|c }^l(\u308t1ӕQ)}j {{lQ}l| bd03R瘕k}60 Uh'$N~/:,k,g +g3j +P m 9aU({d!(SH`|9%CXuKj0"[p72`)ϟN' +o>,*a(TR@$en&nF1X"d NH+\4,Rl(zeD$G6&Xt=@"_Ya !RB*)Bt(q^k L .l'7w | J[p}e&KL]ɝ>ƚi]i%~$_IC;#\j/Ԧ14;(|jp5Y9qC|fxccNy+wT7; p8vUH-FzuLmq 1CHbs&o2An[2 M1ɕH+61=[ +xUe@b(^"<]zͼ}ao +5Km .ȏd"2͂! SZ+,f X2΍|{ܓy fP惦/7쵡~aGa_E +=?j,S<,"~bm}_M:\'XϢ)H[~tپwE,|uJ1]MC5TTW$8\DcP5q\5MG0H^@# jLHAfVٚuHRG#d.[/|KP5l(kY*uc^]DǯO.{bdT~ȋe^~̛57\b%H 1`_q4s7VT> endobj +4951 0 obj << +/D [4949 0 R /XYZ 85.039 781.388 null] +>> endobj +1190 0 obj << +/D [4949 0 R /XYZ 85.039 761.463 null] +>> endobj +4952 0 obj << +/D [4949 0 R /XYZ 85.039 741.134 null] +>> endobj +4953 0 obj << +/D [4949 0 R /XYZ 85.039 711.743 null] +>> endobj +4954 0 obj << +/D [4949 0 R /XYZ 85.039 684.645 null] +>> endobj +4955 0 obj << +/D [4949 0 R /XYZ 85.039 656.94 null] +>> endobj +4956 0 obj << +/D [4949 0 R /XYZ 85.039 630.448 null] +>> endobj +1194 0 obj << +/D [4949 0 R /XYZ 85.039 586.054 null] +>> endobj +4957 0 obj << +/D [4949 0 R /XYZ 85.039 565.459 null] +>> endobj +4948 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F56 2898 0 R /F35 2888 0 R /F66 3248 0 R /F11 2906 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4960 0 obj << +/Length 2328 +/Filter /FlateDecode +>> +stream +xY[o۸~ϯ0 Č(R}IڍӸ.bX-T\INBr.hA8Hˁ pH`0[كv$ Ȑ:4@"t +4h_L_R pu~uv; +uwt8x#87 5~~jڪ +B ? +#m!azuJ W+ώnײ9=U}.pU @@H/*=][&'eZ'zS&GZ<.+} +h#I'eLrˆwdmU'+`ZEw?^%B|_@_eT?[4'ȳ͓_nL_gez]i]yj+Arhpz'=}-8`=<@ Z OyO1f8n`[[EΒ脶U/CL+%҇X ¤.#3uu½?) . +{l9# M׀l ;Olaz\"$ċ?ٮ=&Th@z{zK>. QET8%/ xED0VuyVUQH00%2B*SZ[lJ:ufeѹ1:Z,͌%G8۫ :\y3Tz٣D4܄ U,1?D23}U\K%R[qfj-#zo[ڬS0Nm%eiV͢,C7Џqpm ]3n'-̔cym5i(fϸmMiԘ+:3I8b`Җ,b^sKHv螆+\ +Q īJ$l֞{lggk:E̴Qzz]5 iM°ssP\_aLȤ9F¡QS~K-@T`Ǹp3O*mDrV/c^3҄Xa +a<az.%ܜ +$%?΢QVܢV'y^I۠tc+ҹּx&rYaڳLO' =x[&usy, +61;i_>͖!]Tʔ1p&ёOhJﳝY:sS<%|IcaP lQVL[.T1 M. aTq#d"=Q.E4G6"SG)qS}TsБB9aų=[ï`rSQb#C#ѷLb  R,CΣfҤ i +$y-p15Y;K8x/U=qJI -Ǽ@{pЧf. +iÂ\>2f6DlƖU*K+&zl>3UxtP(ϙdPyon/N{y } [i4~ L3&} \;z-SF)8qiQj87*pg|FV#ik!72.1V02uT&xLi9:a&vx%h:S:IYtD,N@es6f1x.$|/ wrqVcC\+n wt59Ump*K:%hcnΤvDԕD/) ,cҤ {-+/! W5Gw{iD|h&w7,8RnP<lްzycx낒\Xtgv~Wh5֘u e% =fwɥ(Mp?b&jG'|:gҚnJl}[b&ioAuaI x"GjݣjV it:MX!^j"~+ }}22 X"!rL9=7>z^:< +\+צ! +'F\ +d19g)|{ĆK`EIh_ +c'G$C;+>9>03cӿ7WHD]ث# +JZzsg61QGGBeendstream +endobj +4959 0 obj << +/Type /Page +/Contents 4960 0 R +/Resources 4958 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4962 0 R +>> endobj +4961 0 obj << +/D [4959 0 R /XYZ 85.039 781.388 null] +>> endobj +4958 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F20 2873 0 R /F14 2903 0 R /F72 3974 0 R /F18 3977 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4965 0 obj << +/Length 3219 +/Filter /FlateDecode +>> +stream +xڥZms6_ƔLlj=97C͉$$w $%Qn;M&6,bE ~(KX+/=wF~B1qMkW%ny x'ۣFc8bH;'Nqwhi({/m o{n 󞫼$4 `S*=]ec>D%&x^LV~b2nOLZi +\(2 +yUfБObq#yȹq\_o +"* +;EV<m0XTMRBYZ7\CvD2+vݓ<ȾVP@45E"ɛ <3-8YAԵ* +GL2~%JtPhkbs;Ay+]dL]PO+ٻI.43 'ە}!-XmOTNB'K^ߙV =YAf}I[Lg+źo+k)ʊUf-͊Qѱ\r!~l>` `~<,3=[_?ŸؒӕӑұYx7=1'9z{|k8enr)Lfve b3ŚhWe]:sĦCZ.wNMb֟_F;kYETxsi"g*墖ز{pUvnq9OŋOǯg7L' +ۏ5wJE^A6+Kq]HfHVw,FUCkc Df/ aJps!x8q֢n)"t/qm},q-E5L݃-~ HãN-E!mlK䀤M1Iv#ˀB7ŷu=AV"96˲ +{p@ִ߆e:fixb48*M Pj6yA,b^Bf†sTCޚJisgˣi5ųhD}6mPfEE.ju]-ޗ|BMIO>sG'@g|`=MY;(;-OsgUe'm:rO@w_aw[;;8Hb*s,6S,gvMC!y|l8Qx&Q(%>kʐDIeHz=j{Upi)ݜ NP㩘Э=/3>ѥ$-8!mQo|Z?[o=A +@'OjO$z0ODE#v9m%چ`ZЏE&([: U..yn„}E0HIo $yt F!@Tpgpgu{6v!]:d)o8{68oŜc@'< DD`B߱#߳fޠ#C Z~"6P:I,L_sswZ#f+%ߐ)P9K=8ٲ'n`yƘ 6k]dk_rBF.Of=6;W[w?(es +W>Fh~ւL9v>zw v`IING5YDѽ^ i*Ì*a0A•8& 8mYT^ȼGMul]K>m"Z [L+lpu 퍰5@ű%m#g VX 8jU^|Az-섦$_H8YHЏ.4Dx J'Pi2.pryٙJᗞw/Ư/zp}ꡮל]c>蜝\ CWj暏V> krhg*eUhp-e?̵7d{W,?7KvkJh]ePx_XڤT%x te _O (]endstream +endobj +4964 0 obj << +/Type /Page +/Contents 4965 0 R +/Resources 4963 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4962 0 R +>> endobj +4966 0 obj << +/D [4964 0 R /XYZ 85.039 781.388 null] +>> endobj +1198 0 obj << +/D [4964 0 R /XYZ 85.039 761.463 null] +>> endobj +4967 0 obj << +/D [4964 0 R /XYZ 85.039 740.731 null] +>> endobj +1202 0 obj << +/D [4964 0 R /XYZ 85.039 340.111 null] +>> endobj +4968 0 obj << +/D [4964 0 R /XYZ 85.039 319.516 null] +>> endobj +4963 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F56 2898 0 R /F35 2888 0 R /F14 2903 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4971 0 obj << +/Length 2224 +/Filter /FlateDecode +>> +stream +xY[OH~Wd{gՎ)+ff#1 :3C@:emRsΥ. pWSA0.z> +1"̏Og!ۧq\]5·GGJ)Gl8pv4 +g| s _O/&ÑpN/><\]^}@9O{' fB"?A L` et/sxf(Uśr[ڐ\UÑ+]s/B1 QkgH[KΝ߅Ҹr12|y,9|Q$wc.V,ϡWz|`ٸh.&'e 6pDqĤfURFV@_|l/^{ŬR=Ѻ z }6' l˺.QC} +9g[=8 5[UɐWؿӬ/τ 2TgN[.vn#jj/uWd#KoA+$X`l#J~/B-/F;/ ^8F5[o;6D}| yS~%՛=R؃7$ : {{ůk=ύ$m +]ϻbDo`.b  ZkZ ?S0bi=o6mg~S2`=r^V8"GѤ(- ]DyRl`[DBP瑮Kvm"OA tܙg5)v)uN^Viˊ4b#C+ h`IIKJRp¹>([NkL c#ͫM[9h4RagbRd w*50IӡD@$֕ +x nRj +1RTZiۼ11\3@2%^yfA+\0MeT5ۘ:p^%ZK[2o;2Ȅ4M2 U΅AiaF)ZyV6@fUt|jceqRZؾ2on?dHqH ت(j[%{ra"}]"αK4gh6ijB|lEGˢ΁q_pa#]W^7=gzꩴzm/yn$\O+95=o2wU籇΍ӫ6X^8-VX̹:|Wdendstream +endobj +4970 0 obj << +/Type /Page +/Contents 4971 0 R +/Resources 4969 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4962 0 R +>> endobj +4972 0 obj << +/D [4970 0 R /XYZ 85.039 781.388 null] +>> endobj +1206 0 obj << +/D [4970 0 R /XYZ 85.039 309.498 null] +>> endobj +4973 0 obj << +/D [4970 0 R /XYZ 85.039 288.903 null] +>> endobj +4969 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F66 3248 0 R /F56 2898 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4976 0 obj << +/Length 2180 +/Filter /FlateDecode +>> +stream +xkoFT!"p8i&.EbB*IYYR%61;s : n`#n!d܁9Wܐ*OGlp,txZ˷Ӌ!w.^Nrf0}v>sv##l ̇?lyg6+`1s9lSgGGnQўЩC*dzׁ::B1c(M߆|-H93='>P s·cvEvI/x!c9:;?됒PqƟN:‡/Hyt4X>qbd:~y9٪L>HǑ_<@Nc;:OZEP؟F,'OO9y5# P7WR)҉>i1K~EUR~Ije`zC_6m\骴qy)8,vPL6d(&QL"pTf{iѶzc+&BMyvѩt}E.;T^] ' (Lh%j&~ w2,4|b\zT{5DDB$9[2iNhx>%| +uWq@nW+C8?}VeqR]eh^0.nXWAVe;Ewc$#ĚEuZh?t֚jD2èk^ȰVPm(Fg N=P^;,@S`('kڋgO  d@S҂'֣!y#@@"'d$oI3Bbݨ1n Jby*г Zv {hOe`_E 'Jōz  +܌Qi͘L 2[,mlʰ Y;fl[8e(c#zOqH-\FONRZT<ӒXI `&zR-XAq{ȼUVpFV2tN5mH!-?[y@'s,R +_ײ ̘VBFvCU2U賈(&PnѕLB!l[ǣ6Zm6 *S^ 0㡩Qښ)_D LvxM3%,ff@*BW+a1E!dۚش(ʏF-5'_َpDnP{$ Tv֍} +=*j/WK̦ȬoG +t`LGB}p%."\˕ +!Ðs2M>p$NGMdN +mɋ$8Ma` eQKZ,ly‚۬c-".6كcwv*Ml#Ƕ&~Q*箂,Dlk:Mz}>җ8#&6׫chzQ3:GO3k؍zvwinPWnw,u~>=jοJ:&b^ovȋ1˾}C~czw8s>|.pСՠ;xWqExMiJ > endobj +4977 0 obj << +/D [4975 0 R /XYZ 85.039 781.388 null] +>> endobj +1210 0 obj << +/D [4975 0 R /XYZ 85.039 309.498 null] +>> endobj +4978 0 obj << +/D [4975 0 R /XYZ 85.039 289.509 null] +>> endobj +4974 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F66 3248 0 R /F20 2873 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4981 0 obj << +/Length 2247 +/Filter /FlateDecode +>> +stream +xڽYmo8_Cef*Q)MMķvw Rbml'I~g893CJEU܉`xv;Ӂ=[y;:xu,qgtc63J?G/ݞR*u{Qd+Qt0/gnOg??\ ֵ*u?~>x7jj 1߃y'>LŶc,(f_(Zڵ/FYfڍ2k1R(:ppz|q6䢿fbt4Mg*eQ"i;=16AuVu{F1Ƌx-7(y4K +~u"-6LXiB9-Ba.@:'9P81A͛)pE]ir iJ]%U6F9m8Z>Ha2¦k`JhcY4H+}WUd +y!V& rA }|/2BuOᬶH޽GZr$U@ia^#yzjk +lDz,UqYIir&6kAY)YYo\lRR)8"vW@4Iq-&)(fa6"Bt0_-6F0_.eŴ +r[[jDjmR!3Q,5` apxru#&ͪ(wfmm̂Ж@"EX\cٕ˅l\*ZoꠣxIWTiI4YBF봵h-l.ǴXU!G/k K-XWne>s5Ȩ ueY:ݮ<`(kLi1PÒ @F 0* ZI۸YkH .D 06I1~O3fImO2=~2t,aHQp:eh :q5eۚC>뉗:m {Jbo +3 7x{7]Bes"'T6^m􋲞]+ZC_гaM2Ht9$]ĵ{~W)}zy.&\K̢94Z1G㾫d@v"=RRѕ8O$2ˬ h23!Ck\p{o$FTG;3fs< @$/'H=Gkbf49Rx2Dx|'"=kqWew>3YQիa~ϘWs|!M(#-p?>?O8Jۆ!, #|6\|di:G=E +%Qɢ^[B1Kwo`'s3HЛeoi͇"Cxɪ7=:0ɢkG˪jc >g'dAO (Vƙ8hVE-9Tp8ȇ˂O=IC%s®mɒvmyPGV|6-$nv`(􀘖;`<=?=d(֌&{{$S[o!r;M" Fm1`a@B[ٓP&qȣCy(/߾ ;>?2+=Zi[z#BVCmSA~/%UUxscof[`M[6Ny@8U6 +.T)ϯ'rYa{Փl}~&vͪ( ?lAIew5 d"MDTWO+$|&WxW[V̪x#-[hoF;s(endstream +endobj +4980 0 obj << +/Type /Page +/Contents 4981 0 R +/Resources 4979 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4962 0 R +>> endobj +4982 0 obj << +/D [4980 0 R /XYZ 85.039 781.388 null] +>> endobj +1214 0 obj << +/D [4980 0 R /XYZ 85.039 581.088 null] +>> endobj +4983 0 obj << +/D [4980 0 R /XYZ 85.039 562.614 null] +>> endobj +4979 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F20 2873 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4986 0 obj << +/Length 3875 +/Filter /FlateDecode +>> +stream +xZYo6~0ܲHQ׼,K-i>gI҇ 6(gHB]![쒠7-&MA#9l\Vhmox.RA&A^u2 Ei?T7AL7T[;d{ &Xx?`2ҶŢaKmkZizZHgTJ#²`u^5jU״ LtC6\T@)Wrti}J(S'&vuuv;p,ypHeU" oHݨQ]?F}Y| :rr(G$.v)q<3_%8S%\t'(pDq#GY}J2+4 +*2q+G'gWSs~%2'1WͯIQ5,m(Dܑݖ7-] ֡Bw~Rź +LԽ-d|c.7ovZU}ii"O3թ'},D]U:C&7a"Ah`L{U De6J(Z +!nns +kХ$bp&+{CUK2mivdHv[СAw,ǁBVy ǬO;#  `]YL^ +-LIi*ZJKH@fzV>ɝ3"[9-7cZ|V2]o7+)XA:3N,XhL 9 Gڻ"gqdra+'E)j:]U =Ls h FBbfW}[Qԇ#)Y+`29.Z\PL-2 +URF ->,P\=}pݝe;ppηeF . -$rĹ릾t/-d4}%܂Ë?1uUq=`&6"!%U!|HWeW,X;Hh+\$},hV', +1${]+*2H;QTHq,'31gӮ*)DE~C~*oVHpk3ڲcb4Bʖ@E'Yz#n97>?_Y:87KC: o,_W +7oz1y 6XaB Ԁwh!xdq$(^YL0~pdG pI98_Sx%n'5:`Zd!b%P`+jύUtaƹ :ZbG):ae4RH"R~d>Cգue'5mdEeU1VM҂TZ hb^C2gvB8p | e'dC+wr&hQ@DY r/mJ ) ӌk6}VqA$2eyyC B$G^w@SDZ7gn%j&fL#J,sb7Zy6G)KX+42[k +ҒxSQ펺GrZ~̥>qΠE@6q蹑ONΦ$Uk!Ch "ӔD !%s1J@?=cOxufBS[ .`U%?lQ<Šهl;, \K9D>4de=J\" }9Ê._™ļ3{Q|`]fSs!LCTW.Ɛ[ߓ$2ī/pcz-Z@=j8/, Y΢-sÁ:u+I1=rN) <}4HaD( ߱!!,?CWOO@׻C|=$`{9,xA9nc%7> ؞_B+;i.G:#سX  ՂIf=ʯ$zK@zbTpKu#yk|}? ;n|qDȘ %EM8 4̋xFLk4|A%ަ>d)oPG2lYC EjkgE{#/e*#3Ϳu-Aq"6k&DwUP ^rxȬȮF P$|1  n;e޳,e" +X"ٌ>Tτn|%Y㪩%v9J +7lQ˝ֶo `߲Q/K96Co34/?8N^˩׍N =V]cJ?HSM Jw9m_?~x5!u6?=t`B? iKL\${?&oZrendstream +endobj +4985 0 obj << +/Type /Page +/Contents 4986 0 R +/Resources 4984 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4962 0 R +>> endobj +4987 0 obj << +/D [4985 0 R /XYZ 85.039 781.388 null] +>> endobj +1218 0 obj << +/D [4985 0 R /XYZ 85.039 648.228 null] +>> endobj +4988 0 obj << +/D [4985 0 R /XYZ 85.039 628.239 null] +>> endobj +1222 0 obj << +/D [4985 0 R /XYZ 85.039 135.763 null] +>> endobj +4989 0 obj << +/D [4985 0 R /XYZ 85.039 115.169 null] +>> endobj +4984 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F20 2873 0 R /F66 3248 0 R /F14 2903 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4992 0 obj << +/Length 1970 +/Filter /FlateDecode +>> +stream +xڵXOH"]S=O@K)(ǑV ۩PqSȾ ?;TAPߟ= =9Fey5q}i G؎OɛH)eH_ GOCi_ 6`z~|:q|o }eL'zo&ŹB:}}l#]*06rc+=ƽQLM(ei1m2h:9cQM\|!ɢ^w;3HƟҠH YUay0NǦdLs(J9%"7_Ի3&oS!^{m e=?>=ޥ>I(vG|VĻ[tvEfIFڲc/D4ﶌ}:9l Rh7jlLBG/\G)\'4b?t@14vpgy]h{Oo:?: v(r!mX0vYdUރƔr9eyy%*H9vr-"lb͗Ñ {o1&Ws\pp^8!hj< /GOyq ɓ +&IT fh(@Via6y!m/c~r6Xl^m3h_lkm + U4OV,PW@Q雙`9$h0X֦ +-.BA +E&߱dnAS.YFx]R5;@Zu:KzL*Fњʫ/ +Zun!jŒFcr}s,I+ɲ󄮒 eh`Qf ENҐPk6YԈ&E!zx6.,xXV<֮YE ̋ 1M/9h6} m(jǦ:MV;ⱎ^) NHx@X @sຐ!TV.\odHTDnα)S%?4lZBɑ`e~ھӅAVuqYf +K{B($iA!Gnخ>` +y*-mڰov%*Zt:- yo P%anھo/ d%Ә@X$rV`Ƌe\A=7V?)~=lqn\b;Ste9cLJ7.q%EL׽8WYtL.M|TT5.SHZI)W>O cI!pi˴l*ΐ:[ LӔ8BQMSu+b⨄as;$zg$(4/$]eP3&KA]|Y3cO֑]maֶsOK~jwCJMK'[fY{Ԏ {|Wq+Z,0*b/~5O`}ŦYۛGtTF]զ4$=I'`N_:e|O-4y%:yr;_P\"/Cܲ +CZy6Kf9&"98q #+Z:dQ 8؂&%x 3xacaCM궑j=0{P.8W'nbFF'S4~",pzyGo#Y~ ~٩4l Aa̼LLw*dW ;6^%G.r$|\P/ {'!ul {S1oius[tC١Xendstream +endobj +4991 0 obj << +/Type /Page +/Contents 4992 0 R +/Resources 4990 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4995 0 R +>> endobj +4993 0 obj << +/D [4991 0 R /XYZ 85.039 781.388 null] +>> endobj +1226 0 obj << +/D [4991 0 R /XYZ 85.039 404.948 null] +>> endobj +4994 0 obj << +/D [4991 0 R /XYZ 85.039 384.354 null] +>> endobj +4990 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F56 2898 0 R /F66 3248 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +4998 0 obj << +/Length 3809 +/Filter /FlateDecode +>> +stream +xڥZo6XXk%z}ʾ&hb).Jfso^Xv+)r8y0̃YJgq*If͙7[7gP,d1yssCg^:&yRwyw/^|Cڹϗn ߹ #͏WW? o@(7JZV΢ !hWA5IЉbs €b +Nyioo vyׇ>*MtQD {&^i`ieQpY;,ĥ)t,0a, N0 :w5dn׸j(U~%+2BGS/imZo72\%oM F4.ޗW|G:>Qz7s?g[N5lfN.r垪di<&}p".E·ç~I!LWa0%(1GY ~MLq\1.kЁ2.ɐQؐ :Lf5{!4FA8@F> z>z.2}HUYق|r [Szݖ.itY!(7[6mr=yncWcYS5HCK= oL޲# ם\ED{XY+_מcŔcD h{cf0-f}Q="bҝ +*I~s +%c(ܜS=B9 T| D\{݃":=G31l +C8-d蚐ʱEϝ t7E I `iü8 /rDc̘*4Qai'=ǖl匐,Æg<*IK{v>0]3dA,sXϵpEp4I@Qͮʹk#JBڰ`eS_]Mand"Řte߳%|ZRweCW"Mt캢= #ƆK.kaI8H%==G +.ėD5 +U8kkOn1G xsyq`O"J(c7j vL~ZقX!dQZgĐPqV1\J䖴*I){5z+2{\9srzgC oLz3wώu2sGtxqr!?'CRA9MD*,@;#Dq(}}i6 7 u3"}5AFqd9; *u$[Qh]OR-IO{eIDַqX"[7ܢbe~T:vU<ʁ*9UZШz 4F\ӌRng43Ќ=S <]oR3Ⲳ& p "g;.1}@˾SHF  D'+D)ԂFOכTho +Jx\ -UIoPqrqC)ʼrT6P=S =]oReJ * }u)#׋[Ok>W?rWR4X=.ѥ;%elJ4$9 RPypUTbrRn*xھP,#Q9}*IgB*~.+1i-Λ3 +d9(^0QDFqqae~4>Qq{kc}F"qc1*u)2)q+ҷ VϹ )=Ł1a?p!M ֫N?OT%p8 `džtT +HʙB{)&@OڄJCFUlc`tnɨPs([*-tdI%/'stYĥz'{)_7//lUBJ))P +p~|H Lϙ4=Pqv줛:`'n'Pj_PR@~G6.[̷ G,{vn=<,X-!YlJC8 +PU8qBiKox})m9~\SO'wZ\x:uF> (Gd>;=tOy?)mAl){bxA^Th () E=j.EAX{R.> endobj +4999 0 obj << +/D [4997 0 R /XYZ 85.039 781.388 null] +>> endobj +1230 0 obj << +/D [4997 0 R /XYZ 85.039 625.193 null] +>> endobj +5000 0 obj << +/D [4997 0 R /XYZ 85.039 581.115 null] +>> endobj +1234 0 obj << +/D [4997 0 R /XYZ 85.039 526.667 null] +>> endobj +5001 0 obj << +/D [4997 0 R /XYZ 85.039 507.795 null] +>> endobj +4996 0 obj << +/Font << /F64 3118 0 R /F72 3974 0 R /F18 3977 0 R /F20 2873 0 R /F15 2884 0 R /F14 2903 0 R /F66 3248 0 R /F56 2898 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5004 0 obj << +/Length 4267 +/Filter /FlateDecode +>> +stream +xڥ[Y6~_1;UT0$38n%yEJbY"xo_AR@h4n4`ڃ4r=]'4^5^H-~ks3/^q"7yŏoRI:/>t;޼|B>?y7_3=nS,n\rˆez˕,~м(Tt/3kN,Ϋ)0VFMnE&\I乑@5 @CQ9om;ߣZıį_a]SPKdMmuȅN)7L]?OwefAU07(D9M[-Wr}  uzM7>Hd8=е-};rJR"~}h/ ݿbJ*zaG.} ۞kH֪ +֊M`VÚ"bR7Nb3'*t}u!LTenF#~ЏQU"bJ0ã.Z+^ ~%w1#7.{Ro#(E)PbѶ\BN-EgEI * kYE{t)atix6$հ(9xEB=7ЮPa@^n>euI&Ax3V'DCmufǎU0Cߓ3y9No+hS} <-N\5vݖ㚿ڶ@d4 +byIЭ D6 +iC ߉ӑ=lqUi䁃_Qh툐CHZ)BZ|usl|e;b"}cm9le B +熪{qB1 T ȚфڂUAH _h aS`q6#hɰѩJ]@'0@ *zKH0-PPg=Œmv\v;%п =RE \|ExPryX/< +ǰD)YAD? YlS3@uKrXb/&Z^r `U3GG8(츽-ɿ62 Php S.E'p(_b"P3>z|"%$,gI]BZk ~ӱFo!D A=A 2Y +Oa<'H5}AMM-9Ld`_YΦ`IAK,Zs 8P53G͡c| xˆ[zij,{];b>Mj!W8 Aj$TC\kkQ7Q$АwJ"\҂t+V q=\ҏpIs#e9Tcvu+S;AkItSo _߾4 ൑2M+rlYz9JMˉ  i.)20p~xi}i8 'B{@ZzmbB$0>bܷ%0:W#]b|64pn18p׵AW8%7.t7=P<˼uEs8Č(^`j' + 0yl] +C9{Iz;Wa(aI(gR-kG08 |nY1iusXV#uĉCK9vLBd\Qצ9f B\/ D[!vx>V4#J#810x,"!࠺[6,#Po+Xn3ϣty'WLzTؐNٸ}eY:,^ (BqJ#D'o˻a'Nh g==Ek8YDJO k6Z" ~TnYo>cn.ߓ/ +~zA +%czoV*PPFO$HWyXDu.,CɄߜNl~FH@;%<,=fUǮT6oe7waJ(XYD酻̂0ͥ8M/\*3mvp[X{ɕ$,hGa)Ş\@́ޘpz;b6G{AGF7O!"ߚN&Rm2)M}7sh- _oV]&JmNAe0"?^^YAS'@tc߬XXgZT֨{ =XHn nz-^Yh"SXTvdʥ?sLL9ߪ4 N{Pێ \gDNn! _tV yO'梶 ;G,pK`,{T]أgۣ6׍20sD_>/xp9fl3p̗.|sH=8p ';ɅJR7K 5Y(!P:7PVB|sWz:W~-.վyaOo]3Ƭ}huDg-D}V1YuEއM9 i!I]n% Tfo|8Myt3m\5=%PŜ|[H'f:$md ȍ\.%5l4ui[ZCvz. G*]mǬUӯEt蒁c ߬YJߒ~&Uf_GFQ1=@KZggn_ `M0IR2lZ0j+Ҥ[:|EF {zW%6aK$C˛.(=7V}´QHb;;m?o]^faT 2REc8̇tb:YA`qhp {4[pg}zBτIa.+.7Bywcڣ%~;ȒnF> endobj +5005 0 obj << +/D [5003 0 R /XYZ 85.039 781.388 null] +>> endobj +1238 0 obj << +/D [5003 0 R /XYZ 85.039 761.463 null] +>> endobj +5006 0 obj << +/D [5003 0 R /XYZ 85.039 741.134 null] +>> endobj +5002 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F14 2903 0 R /F66 3248 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5009 0 obj << +/Length 3763 +/Filter /FlateDecode +>> +stream +xڥr_JU\ .!tt0";eŒb>}` J.9zfzUEA/LQ-ֻ`q3?)X ʁyysPf;:7߼W?^\ݼ\EQ_4^^*[t?^YwG>27?hqo YGyxv+ޝR~#gg[^9QYtJ;4P*#.8@U_5wp=x}"&IQGʺ][/+pq Yj?fUW5C 7L@\m Tݔ]kWmey&\p!m{qh`+t :I#Gqv.V*  ͦXچ{\%Gyw,C= +40a}^3PeOW%\}6'$Z. +%C$C#tÆ i'gDkw/k]+@a\i7f> ܶʦ +C8s%& [{@s.Ef#]RI%͝cp {6vHުQ4ɫiƳIL,\}hȵ;L&7l#AL(Q(LxvlM@E'hCTL^^ͦFa@ 8~k:|%,:ԋO!S;=|:xSNd[ +%떗RJ6%º[ص7#ufݑ<]Z["Yx4~+7TVQ*${ + +ŗr.R?NO"uP#Lvc(Mq:fMGd1L]EǽZn5# +B(a܈UcVpEm>̅inG3Mbعb`8 󍵑  'N5s?b8v6a: ^+gSnΞwHoZW`]]r?-KԔnlV ;-.gOr 2k{¢91.˂?-=dE>QB穯HZ9(?[dfxJz l\:23kNt4If\(p u,;ަjjSb>1!?k4Z-/s>B0DL?E!|" IĊ@~lp +J*!7$$J6DWڛ)+)BIʐz(0sPSIp7r`B]FW:Zҏ $x; P8:JR"KDzae!C' dHlONPMF*|9٘t¢+Q(ʝDeYu9j(б N9U:h} CX!von,?d+Ϗ+81O-q@!1Z"RZ&!4O"@$Bb7Sg  ӌ ;)֏@Py\9poʆ☫ :6zSX-^BG8;#' ` FƎ` zAfI].i_]Kbd5GXs8V:,HY30+}P`}HLmzrb}0_=ANϛy1y} k\>eW6 +, M9Y"uČ ϭ̊);8Z%/:C8`4D XPxTf+%rtǁD ď7DdзDk9>oVDFMзo+Tő#y:=saप  ѡE ]ki7L9[!6`n=ܗ1(q ܄ U9lZQ܍BS=TЬ I$ׅ$c>ua!0EԾbԏ Nqec/siJW `*UvpTë-Ec& MqXXM†R%*}]Ro,WRܛ2-p}МדZ==Snd)c ߒ~U;s!(I`  2J =\:$WJE:8)ttB3{장~j_ߵ> sPggngSMT,&<'{vgVkR|ϏTܻQ$x@l/g ,ܐߟ?)5ؗ< +Sls D%XF也FF0(Gqvix֫ ht +s%3aZ)Oۑy؅RS,Ο9*фi'7z,4/IQٝJF`ņ7n'L7u[lmf|Z8~9B?zxNZT.c&9$窭q> ~ + ~všP}L#hV67i6zu#b`xGlWYP=YlNIJܕTIDI`j?L,:;Ͳå,^ ۰cfK%0KLl BfDn|>ҴWfl,d?J,gp~ .T"Nc|ͯ/O?}Nendstream +endobj +5008 0 obj << +/Type /Page +/Contents 5009 0 R +/Resources 5007 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4995 0 R +>> endobj +5010 0 obj << +/D [5008 0 R /XYZ 85.039 781.388 null] +>> endobj +1242 0 obj << +/D [5008 0 R /XYZ 85.039 651.823 null] +>> endobj +5011 0 obj << +/D [5008 0 R /XYZ 85.039 632.951 null] +>> endobj +1246 0 obj << +/D [5008 0 R /XYZ 85.039 455.095 null] +>> endobj +5012 0 obj << +/D [5008 0 R /XYZ 85.039 431.777 null] +>> endobj +5007 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F66 3248 0 R /F20 2873 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5015 0 obj << +/Length 4202 +/Filter /FlateDecode +>> +stream +x]s6ݿ3JKImqߤ7-/T\߯HZNi b/4RNT+݉/oO@,d1yusշqx}]NȜެ~^1ө:_$I~\{^_Ow ݟ~9_hꇷ 0Sݜz77,HȐN~?]ߝd}RQh=x[ M{[wMۺ1KLChpf V: + =iboyz 0b3fvv[`axW~eM#AnpW D4V~A\e\19J0dbY1| mޕuTFn n/|['XCA!E*BklĻÍC-ljpb # ?3^%ѶMqU#CsWطF@ͻzp>c80;Oe\AF^A- +3 +=ڣ>l^vJ#" +Bo[t/Z? L쨅Ny}^2=58t8F©Ӻ9{Hotg6¿#ɶ%a2~ oITAx~[\@/h0x5  cgU⥪^tU8< Me++xkxu!{.ҲXinZ}˂躮e8Gw~}$YB$" +oY'Q${~DIP};uܧ k%F1)dNý#~`2;803m +VT& {嶇jw]W&$.CHYv;Yh5n)Z` `>bb0'i"ze)R Cy9wE񘟍LLlT@׳Ue/u7~I= MNYL6e)u4h +)[n[o!]vnsxg ؇!#qmW.:,)3$fsUz]J{eqƦ?>l[نݸܖ?[,Nr>yUNLAOvkYunj,Z{ԔW!Znڰp49/٨5Pǿb8-/^t,|يΠ:V O M9exT>p%vS5֯@[nO"Q ]F,| +RӠn+5kl +{n6u-Fp3Elj(Ʈd7jmجY6%0ǜn-Bz3rdlr-%VZk<{b.n B75Eza][ +\+ع]9v; @m1vHӲ[#]"꫟ƒ5A B +Wӗ+\lbҘ/Su rzeީYqVxJ& d̆p|R&N7$38.H`Aw:N}ĚAQfsaP?$ѬLt/D 6g s-D҉kTe4CYtN(gY0V~{> +мC8qnH}|9IBފ v]B fM gFۇ/.+ޚ{LZc,ĝ~W,(vLrp˳$qɱ@fayt"9Ct9J:-lL\D>cS_A {> +" q,:y>f]ٚ%*JıJL3PA9ru̫ IHq=. ·SC +x3kI)Dj8:Ez^mF >&sb(cf}d:@C 1fs`fqq9fu1J1CF)/)oNnW?EćHr26R r‡3u6y&huEg@CS*pD]pnij*y$${8  1 =ҽvu"@(ۆ_%SU'aS. h@#+Ɖ̑獼T b5Ϊ"8'$r~-CE3[EH s1 ZHgq@~,:+wD73ivߐeiAU2Q*ܢ~#;?4RQ{v Ь8α{egFmZCgX Ip[1)}Y dfsG܌9V7@&zzYu;YtU7: &Tݣ]^=_wfbnk(M^ /8hY.s׉Q>4gTt&@t%ʂ9R*б ;oQ] wFj㗃7̥@يa 'H*x\Hv pjQ"ž{l?^}Ѯ+[Ж1;.2T2 =`vӢA=w;׮2YZie+hb4TI,+y*$.Cڕh>{CESnӖe_Yi<2e^ƒB14XM{P0RkI#ShcA@,/}XLU6'%rTf2:a;QSI@T^qyqgb;D"*WSX'i6Y Vz*=\:O?\ם*oy:i᮶T®+gsz8(eSPhl%hJَ({ZpQp# U0ęh}m2J^MF6\ZbL*rd* ,3^Yw ,WC@`l(71$_X0t KCRs$ +${J/U!Uĝendstream +endobj +5014 0 obj << +/Type /Page +/Contents 5015 0 R +/Resources 5013 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4995 0 R +>> endobj +5016 0 obj << +/D [5014 0 R /XYZ 85.039 781.388 null] +>> endobj +1250 0 obj << +/D [5014 0 R /XYZ 85.039 761.463 null] +>> endobj +5017 0 obj << +/D [5014 0 R /XYZ 85.039 739.701 null] +>> endobj +1254 0 obj << +/D [5014 0 R /XYZ 85.039 626.864 null] +>> endobj +5018 0 obj << +/D [5014 0 R /XYZ 85.039 606.274 null] +>> endobj +5019 0 obj << +/D [5014 0 R /XYZ 85.039 427.349 null] +>> endobj +5020 0 obj << +/D [5014 0 R /XYZ 85.039 413.8 null] +>> endobj +5021 0 obj << +/D [5014 0 R /XYZ 85.039 400.25 null] +>> endobj +5022 0 obj << +/D [5014 0 R /XYZ 85.039 373.152 null] +>> endobj +5023 0 obj << +/D [5014 0 R /XYZ 85.039 359.603 null] +>> endobj +5024 0 obj << +/D [5014 0 R /XYZ 85.039 346.054 null] +>> endobj +5025 0 obj << +/D [5014 0 R /XYZ 85.039 332.504 null] +>> endobj +5026 0 obj << +/D [5014 0 R /XYZ 85.039 305.406 null] +>> endobj +5027 0 obj << +/D [5014 0 R /XYZ 85.039 293.978 null] +>> endobj +5028 0 obj << +/D [5014 0 R /XYZ 85.039 278.308 null] +>> endobj +5029 0 obj << +/D [5014 0 R /XYZ 85.039 264.758 null] +>> endobj +5030 0 obj << +/D [5014 0 R /XYZ 85.039 237.054 null] +>> endobj +5031 0 obj << +/D [5014 0 R /XYZ 85.039 209.956 null] +>> endobj +5032 0 obj << +/D [5014 0 R /XYZ 85.039 197.012 null] +>> endobj +5033 0 obj << +/D [5014 0 R /XYZ 85.039 183.463 null] +>> endobj +5013 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F66 3248 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5036 0 obj << +/Length 3150 +/Filter /FlateDecode +>> +stream +xڽZsU18cTQ-:ND$@E۽Jڤܻۻ.-I*.su,63<2(΋ٳ`)7Ub}s<'tP/_/֯.WZkK*KϹ|y-犆o/߬+Ϲ|wX[&Y/?9{.$RGȉoΔdqGr=ZޟQnh3ޝ]}8JւcA7L)p]8TnfZ v*}IK?vZL'WlĹË v튏>,C)ԷE#7yq넌.ha`춅L֘,>X}Y +/V^ +q)_5Y6$4tnB{$fci" o/bc"pZt2{*V?#Ul8YcwUsYob̧xCā!j Pϴ^VN^f!?Im,0O+oK?S1,Ȧ6$'xwU8(cUپ`xNi !zHZZ0!06z +zEJKׯ"C?tv=|}|Uud_dAj"P!d[OK4? { S,Y +#Ɖ[ՠKAޏEV>nIkF̻f[]CZa0lYo pVADEGZe`X9l_M9(7:#L&fe c[nJg{8&1Po#x]XIq4 +N:W15Qʥ]wZc:op |!8?. deo!&Jl.rQbƒg@7Ks4rq'aj̆7?],3`+l;xs*r<>tV;lϢayo&J&, ">o@Ypf90tc.-Bh#$Xy6Biω/7f%Oe=װ)sLV2sA gt/;'LQvte]٘9ĸcLeylo%L&!1g ?cwe;ECEEJ*J~=Uai4*3|Bc.Edѧ,U+ED7dO) %{NIDDFg-,i/ՏPv|1mta+3~._W8?L6RγN2% J=X*1Aۋk<ΜLeOk`} ^eMOS3( %(dh+4v=Q&б _Bp: ㇥ ,ZP!l1wz,&]skkz(*ĩJgM[uOOuO'W.j]@צ ߟUpI3%nEbHUS(Fn? bTHO +2@QQ-7[!W6'{(ѱTZLAީU- z!>_j]\Gqz_ M >sɂeݸal1a3;>S4FUՓNN+Zt涌 y{rʪyљ.\opf9OEeRN`T{a*@G'ZE.XrluΌOQl[c:t윭q qLY"]ZXx:[Xs#@foG)9$g _HkMF\)`%+P"t9 +i }nMG퉛0Gs}kJCj5a3~ąlʬ+̍T" Bi9Ɨ鋾]Pn[BzG\YtĦEGdX'&-n|`n[{|5/GՋiv*!(8: +dcdrrP%|:_0#y4Ϣ1E(? q o,B3i-df5?HOpmiPzJWi8ѕ73TD炿j3X䨈KaԗMϟF`3g8tevSso:?h(y>pqw"6+Ml{A cIIBQӾ3sf񳴚5N|hm;JA0TOl~gh0:xcjy||"Ut(vÆ]~Zƫwv-6MaOÅSU4 =Vb\"?-C*T?/)i30$8#&^_V7拖iQSɏP{.v:CVl~E6W(O+0t}=KI!7oTAendstream +endobj +5035 0 obj << +/Type /Page +/Contents 5036 0 R +/Resources 5034 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 4995 0 R +>> endobj +5037 0 obj << +/D [5035 0 R /XYZ 85.039 781.388 null] +>> endobj +1258 0 obj << +/D [5035 0 R /XYZ 85.039 344.943 null] +>> endobj +5038 0 obj << +/D [5035 0 R /XYZ 85.039 326.275 null] +>> endobj +5034 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F66 3248 0 R /F35 2888 0 R /F20 2873 0 R /F72 3974 0 R /F18 3977 0 R /F14 2903 0 R /F56 2898 0 R >> +/XObject << /Im4 4874 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5041 0 obj << +/Length 828 +/Filter /FlateDecode +>> +stream +xW[o0~ϯ:MMƵ8H{]:ڇ41)u! %6U@cw>HTJĎjS0+PpGFibliRt>0iݳ`xrc QMEՑ _^C@ZQ kCfx +XUB+vzeW +u*Yj` +ś`RK ZKtD{1kKqtHSȘ߈"U!!Q aY8YJ^9#^ ጅnY6)Æ0*5$p-g'  :.iMEHn{#?۴U 6K❌|? +YRȥ|1WWҌ{ϙs%x& |8qMP|d-pDP]#l=tѺWr? gE&lKg4ǬAqyQLXK&OsUMxF7v껛"5$F{ϙԽǶȎO;8><UtE9u8)y0> ;2hlk +>K䭼ؚ(}۳rxgZ5UC<bO7mm!v&՘$iixR-&1?$`bb!]kB*ek,/c^U8I$ 2p%:65 BZ5ɃVOSp'bAja-WΉ4]O2[IuCGS]9ַ4VXDxW endstream +endobj +5040 0 obj << +/Type /Page +/Contents 5041 0 R +/Resources 5039 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5043 0 R +>> endobj +5042 0 obj << +/D [5040 0 R /XYZ 85.039 781.388 null] +>> endobj +5039 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5046 0 obj << +/Length 3500 +/Filter /FlateDecode +>> +stream +xڥr6_5c郛]wě8iH-E*$~ B"%L'89Od6KR4-F~cQwW?j&? zX'U$gw߼{qRz"$I\ _pHyxnq>~y*w?_Dz2<׋f+8/tp ^HIݮ.>].cjƳHԏR9R$ +(PD7m&DfPJx;N[0徧 xy=v# 7Ao`h`Ֆ +$c vo`W+d0q4fzj@@ +et߃(9 oE'};~Gyf6UV| @ +0PEp2ewvonkRp q +w»tE]p\p&06 +( bo󚩳0H~IW(4FWWKw # 킐~G4o?!ztp%c,gH\mZպDTԸ]W W "jM͊۬w2cHL;&`uZ9"eUjySLSYML ?cw6:8dB~$B *Vlf>X"^J`xu-(> +<W\ޓFCCx}p.?Ђ=-X(IU[NjM#*v\ 4,o BT(V S=j2m˦^OHm1ADqhl,O ke~"CnPWE rt2̀z 2v؃g~"FIZ'"f3Q`p + G^ +9Or"obʁNݦ!aF/3\Hq܆MrُD.9+èmhՆ"O&<`G$"lR7D6hN^X̖q!S-Op +MP/8;VR~ iV.Ae0U՟ N{!֥:|IT0R9+Faix,[T@,Q}2pm'ǙZ&bLmMfq)!ϱ_xlaKoS_rӎ(.BH^y7wpN O3y=%B"[h䔒85[X?S-)B{q3ZmQk$k[=L?0=>s4C]V`=M$mwLڒ|L06kVh]|X(dC+E~kdz|X@y>mϺ};[6E~(..taɳE( P5?+endstream +endobj +5045 0 obj << +/Type /Page +/Contents 5046 0 R +/Resources 5044 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5043 0 R +>> endobj +5047 0 obj << +/D [5045 0 R /XYZ 85.039 781.388 null] +>> endobj +1262 0 obj << +/D [5045 0 R /XYZ 85.039 691.864 null] +>> endobj +5048 0 obj << +/D [5045 0 R /XYZ 85.039 671.274 null] +>> endobj +1266 0 obj << +/D [5045 0 R /XYZ 85.039 120.719 null] +>> endobj +5049 0 obj << +/D [5045 0 R /XYZ 85.039 99.522 null] +>> endobj +5044 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F56 2898 0 R /F20 2873 0 R /F35 2888 0 R /F14 2903 0 R /F74 4582 0 R /F72 3974 0 R /F18 3977 0 R >> +/XObject << /Im4 4874 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5052 0 obj << +/Length 3652 +/Filter /FlateDecode +>> +stream +xڥks6N&&iI}&F$)RGRQ_dqž::y+Wb{杯a3%s`;>4s/9[xny7Q;GQ%6F`zw~ +Rp~8Ŭ<02[QfR\ +md_ce4c:8>H"_=NJTr xK軬z6}iug)WJ|/|Wp΢*lUD[31y\MZgKYSE~C?<lܐp"Q_y>̀8G @́y(Ct"i y#\w<Ǽ7_̀,N;5 h@K>NKc[uwFAx0z<X/ăn(dx0%>l-RKFݵ<2j] Wc9L&u,y.iF(v=hVn_"[|5]?'L61 #[2q$Y8 ڌU<&3" *Q)}ߖdN0혺4)_VUkzμ m0GqejV + 0 /yZOb(.mo +B*5J+7mq4&%BBRN ri1crL0d'D Dw߇nٓo+ ՟_BfTv4;5ʌ, R,6: +8x + +&!$q-:0BuPA+L*F>mE<8QƺþV4v3hU{A2iTKq#+ _ra@QTmDS8sNb!PbFRE&Hp- (E~S(?kX BP $|̌3&0SIL[DIԎD}'Q_dk6.8@M1Lc,NnGK+c' O +A˞0CW#x1$H% +AX9yTGr[5<9pHAd,\#8U䥌0.O\@Qr'$mZ Z q䣼$W۪VgOP[mیxs$Lqk4M54hoLCPY~![ºdxC֜}$Ѡ눨y:BE= E#mG+ !a]"TlYSԱ9)f+κu($9,bvڣ3ҦNė^ݧ`.f5U_ԙ syv ; $DWss*7(jD88Ln=`(P +46ڣ?d@tPyE9a51,C=Dh2`-GADp?wq=S +܂]W2tRk )VtX%'&h8ȂǚET7a;""E ]au Yۋ|" BsaxD切p +kQ7 . +B֣ct5 #lo__z91Vnfq \#`¿`Y],Ug~:u0,6?fX<|HIsާabN?'aBl8 +bޖfj>ƔQ@0-S"x?2ݑLN'l6SITEԸxl|=O !Pk~F*]$]O=r,rS@3qrzC &t}O$<+xjuܐ&/da+_gv,1%?ZѠnӺ~l֒&uEi8ƿ F\x$TѤǴ3pevЗLw< U8? +Γ bD} +x1eÖWBf_By 뛂.lq:h;aaG߷__ۉ6'XV2 /z@ <&pc}-]US ;/!YRL-/aa@ :bGqbUݷ 8XƗ]]Qgp&vi'\"$@h2y +big܋@ |L. t,lOys1اns+=lO; -(NmO,p݅i_/jmǁIjۊ1py46?{kO[pu:[51`H;C +G[`fWSyŴ.Pbqā*ٓpgUzA&Y㴴WSc@F,#L]&Iv ] du)`WMǧY8sTeFs~-OA&8%TlތȦFT[| +sSg{luM00PK2N/Mj/ 0Tw}u|UScT`=4KO\C[ +`_tS2îxH.Y2 y+8W%1;~BC ,78<Nb0@ڼ1'n}DܤƢSi9+W8G[^ˢ4mU^d/rCv?SW*_}?fow7#C|?j~}75dNt1}--J:vX?,endstream +endobj +5051 0 obj << +/Type /Page +/Contents 5052 0 R +/Resources 5050 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5043 0 R +>> endobj +5053 0 obj << +/D [5051 0 R /XYZ 85.039 781.388 null] +>> endobj +1270 0 obj << +/D [5051 0 R /XYZ 85.039 472.088 null] +>> endobj +5054 0 obj << +/D [5051 0 R /XYZ 85.039 451.498 null] +>> endobj +5050 0 obj << +/Font << /F64 3118 0 R /F14 2903 0 R /F15 2884 0 R /F56 2898 0 R /F74 4582 0 R /F35 2888 0 R /F20 2873 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5057 0 obj << +/Length 942 +/Filter /FlateDecode +>> +stream +xڽX[s8~W0}3 7;vg<0 ;N^ms$s]!)R;YʖK tާֻg#"??>|bŵ'釫Kq37 /r֋xTMb\,VZ_|M?Uی'ݤPR }/elY=2Kkmut<[[M'vH~ V3Q0mxc߹i|* JF?4PQ>*EYިLHZ.RWD- k҉`Qd-; h"7HVsPd@C50fM+q@F>W#q&*e~C@dM\͛w,7.@0bd/>ԳZf^_usnC]L+ۗ >~Gq4^S' +Ʉp/[)>1Wn0x +r'XjB*W(T#aCbݤ~20Z&I\U:k穽K)vvTھh[-\msn d {2MUu~k hv0}"}hC>:ݓo両$:^<\>Sendstream +endobj +5056 0 obj << +/Type /Page +/Contents 5057 0 R +/Resources 5055 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5043 0 R +>> endobj +5058 0 obj << +/D [5056 0 R /XYZ 85.039 781.388 null] +>> endobj +5055 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5061 0 obj << +/Length 1316 +/Filter /FlateDecode +>> +stream +xڭWmF_ᦩ Eս󩕒| HRwfg`ZלegyÇ P.p+F.As1] Nߏ!gnnw=_gka2_)ŕk;㱲[7U5ja;ܚ]]1EVR0_0?+5|grP{!Yk/+ywzHF Q^ɥgTǙ;(;^+j>nb sB;Aܵն/[y*isھ;,QG@ A K:fsUy<4P: 2gHWX[ï̛|w ^UޗG!d_\/Xkag 04 Aw0&`'oi 3Q|>9ZKcYW:P8`5\݃nbAqddͯEoE\"~ T)j$zΙ c9l0ۡXhrAȨT4* +H27bXGJqtQԥE2 O2dz=r#KZfOeB}8|crcC>YK)zHPkX 2We1POgW{1H%;Jv'"Rg.Ŕd TÃ6= ߖ@FHl  @B-#Xz'ȩzJ6%jy\u-pO\2/y>9d8GSWWg>[ q'/VcUgSs:?!֊.sGt윱ZA LmAW죗oZfOhiƄ,|H}⑉ꈄ8a9<&FEVe'0:qѢDsr02v GA 6D cȶy0Ly-+)Bjw2'+خ.+6ZrH:n99kYPȧ8ߎW<ফm'0|d5jqbs +}vȋ3]R*΃ړZrc> ԢI])$)#֢ dJ (p<`|969$E??U]W3qLMGjA"s@GN6#AG9 g$s~p% '3zN:Ng48#nc.A,Fl6̂ k~eE~L)u(W +Kpހ fa'̬$C.՘7Yk1,)NX +KnUMnW5+{W"*+ؐ8Cg,@jT5Sծ1:{k3,dz޴Zqv4ˆ0K\ȋa@9]܅I *0I)X&>vhiJB K8' +N H)aLyD0g3Ϝ;yCC]pC?OV(b'E4@#rBrR)3y[s ⢃\j#Pf\93biZb#YNrKnePy1ݯT_08i~ tU ~bҌ:Y`WGԶ'2:1Ed0.S^ yLw4X` b?Dlc? زcƼ3>`(=}97".NƮe#VT*ųKQ:4ZBo/ɾ,HEt}S͐nn"F'ɵ~"/rqV-g1\,a522Gw[V1:,т)N%~>pN7c0/͘/k*`7'i-z@j=Vnd\lT(l 5:^'Y ~+9Qo(ZenF{ٵGmCx,”j`` GE]quSſKSA*LS8Yt5"ۂ`G=.eTzQHg+H `ߨ`jXJpDFZ5n Gi Z$:=cx[N=)+/;28g$8ԙݴ6Ӱٸ2pUOu.:߽Pf~;J=fN)1^fJ /rٹxc=5)\=i xmE}mwe{%ꌒBjhCAcǗއ4gA7#mҙVR/\'Kd:M;QrT<# L+TpCx98Cz#cɗ6endstream +endobj +5064 0 obj << +/Type /Page +/Contents 5065 0 R +/Resources 5063 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5043 0 R +/Annots [ 5070 0 R 5071 0 R ] +>> endobj +5070 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [481.678 346.575 512.306 358.567] +/Subtype/Link/A<> +>> endobj +5071 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 333.026 267.943 345.018] +/Subtype/Link/A<> +>> endobj +5066 0 obj << +/D [5064 0 R /XYZ 85.039 781.388 null] +>> endobj +1274 0 obj << +/D [5064 0 R /XYZ 85.039 761.463 null] +>> endobj +5067 0 obj << +/D [5064 0 R /XYZ 85.039 743.459 null] +>> endobj +1278 0 obj << +/D [5064 0 R /XYZ 85.039 522.834 null] +>> endobj +5068 0 obj << +/D [5064 0 R /XYZ 85.039 490.015 null] +>> endobj +1282 0 obj << +/D [5064 0 R /XYZ 85.039 403.708 null] +>> endobj +5069 0 obj << +/D [5064 0 R /XYZ 85.039 374.304 null] +>> endobj +1286 0 obj << +/D [5064 0 R /XYZ 85.039 197.117 null] +>> endobj +5072 0 obj << +/D [5064 0 R /XYZ 85.039 175.92 null] +>> endobj +5063 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F35 2888 0 R /F56 2898 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5075 0 obj << +/Length 3464 +/Filter /FlateDecode +>> +stream +xڥZYs6~ׯPSaxU[ckqyy9&9R_}[[.yp4ЍFC$?rp.+k!Y4\S\:~'пYn7o>־[nbqXVuws}n>lVk׺G[%YF)ߝ±4|cн0^]]KO}%SXzy5EDV!u=w8t HO#,c]E֗h"۶JlJjGU]m[R< j@ͮXԷ {@9 +ugmIj^Xqywh}tԞh^H!ۮcFXbRW3jj!瑽#Q5w(̖zeC͂.Z+?N=E ś=!2fv-=eU'Jd(vsSt??pd{W,1i^v=+З~x߈|- nZ$hY"]щn״k(0bXvܘSl-}L>bcb1_8D-h3H)g-Ͷa튩>A{- 2熛?qɁgedjj2 +^]>Z.P>sBYw= %J!ڴsŮA쯢ȱQW+rq|͞o#~N0c/8/@"? )©abc'2)x[UܖqϾfLJGwY%>Sؠ]v,{ˌ 4c|Jm6Q9Bt +Y]v{v. S!M)375j?H0,}uLɠw3KDV3=Z!|=p +d97\a'A^э/ c1DGA:1S:X%F#hCF͏H*ἝYӮR@ߒ:=ر4k:T`w,P!cCY4SBSWjF'2 EVe"dH"LO?(}MTqh1<֪TЏ:M<Whzt^ǔtX ,lD3UGv/p :B!E*7 ~EގPқ?q`kF[PqM\k#wN}uX[cQ7 ]Q3eG$=8a \UvpD-a RdcN,uG"T^GQFt\aEN3u-TN:D* O GO=WB'Y@/  ncn:anFmL֬(^-%yNiJF o.<3k%q=B3l444iiVDBڥ?81_LVu0gC|ꤖ 977\Ž: }'28C2XWϣ@G;)[( $[-bʪQ~2L=q$N؋殺KYmǴLLJl{\HʥNe'N2}yݞ`Ugq:ea DtV5X֛$H~m  )\i +if&6#Ӻy93C HrH #m5 lgzggg84z]Xdxgl/ĭ o`AׯrE  2 (&Vkw: jܗ)T!x ЗIX gn94`jsy|`l22n$u}zZ&tXH\x,`a3ccMj/0IKc{B&O܁o'! Uk$!\S |oendstream +endobj +5074 0 obj << +/Type /Page +/Contents 5075 0 R +/Resources 5073 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5083 0 R +>> endobj +5076 0 obj << +/D [5074 0 R /XYZ 85.039 781.388 null] +>> endobj +1290 0 obj << +/D [5074 0 R /XYZ 85.039 761.463 null] +>> endobj +5077 0 obj << +/D [5074 0 R /XYZ 85.039 741.134 null] +>> endobj +1294 0 obj << +/D [5074 0 R /XYZ 85.039 671.875 null] +>> endobj +5078 0 obj << +/D [5074 0 R /XYZ 85.039 650.679 null] +>> endobj +1298 0 obj << +/D [5074 0 R /XYZ 85.039 556.443 null] +>> endobj +5079 0 obj << +/D [5074 0 R /XYZ 85.039 535.45 null] +>> endobj +5080 0 obj << +/D [5074 0 R /XYZ 85.039 374.715 null] +>> endobj +5081 0 obj << +/D [5074 0 R /XYZ 85.039 361.772 null] +>> endobj +5082 0 obj << +/D [5074 0 R /XYZ 85.039 348.223 null] +>> endobj +5073 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F66 3248 0 R /F35 2888 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5086 0 obj << +/Length 3845 +/Filter /FlateDecode +>> +stream +xڥkoFp._jq(ܴ׸ͥA-RTH*qKR}{_zϿLBӫ8]$݅w3?\G+ouy ԗٯΫ׷߿[,֎e'Ϋ7w ߹yun/sG?"/dY@ +ixexz\>As}]Qnhw[\pɫX` ]<" "m٤`6pu!|_Wq蹡5 sL2A9ow 9O_о|ۦAGc ~+=!DC[AP 끭@ҏݕ{}uW'y60?He_mXr6uY +/*h>?w~`.q<{56m6xbmdxg~Gmny3B@qUN0A)e,J:Lķ| -\wZ@ q& +#Ss(֨!uoCcj-|Wjnxv@cvy&a;2V7E2񩀷tuwj9)"7Z]eΊr"CbF464"X~ajOF]H4/w bJ3 @&Qd71~K\$/xyW0I[OΌО޷EJh(c8n-Bޯ)c#8FwM8ނkq o5}ELȹN|U2c]evBJu sۗ +pLL5DH|4Fq*V G]ϼnnYpTЕ!ɭ9_} 'y{0{qrK(M:̠-Ԝ!4 ׌lznAwy)\ NyKyl +(qNe ]zg%22e)1% 8fg,ӳ5xϡr/Ԥ$>mS2CҜrwH8<3xV/ZB8#YVAjذ)=)'b[l کءܧ"\1KcB} ŰjFGt.FhA #;##:V8=Kb1U:T! +4i\M٫!]-$tjSwZA,8#I$H[,2^|-;/ DHתFr3h*e:m].{QEn&@2Dec $B`(D؀!9lrmQr b2ﬕj q1qh'fYA5 kXqLnYdr3 *"N2IF'J{ :yug=_/2=iOq \KJ1:"3,]E(0G,&,}qSY-YEJa= 1y/Q|LK(hUtXE n,k^.`4PGn.~b S1:!Sg pt8ncUrc =yB/uZ0DQdIb>̩tfRs7x6ݑjA0 +u\!&`/G7ֲ -%:IB\N"ƹJM%1[:a ,=O9UgXFxMve + ƌ`[rK.b ffP4P\z>zq/ɀ$6р/<,&o5kc|*mpW,Ͼr6M;%Jô7BqJiinWwRnǍM\GWPX #.@pERNaKLe+{F )PscFx"2/I4~1I/\w}1q>.D:깜{Cyi3Vu [nD(wOű#WEESV_^`z3VKd!4V߬X-(cF"QGϖfA𔡹33q)yYalcg,fJ|-UmRD( +``Tڴ=V1 :\`S‡v_KƬ9P|‡LS~;sTw1V(i!=ĝc묶H +ы̠7At&eP@5]`4̚9%kt3@6Dq3;:s.Z$〕qї <nl5VCB934ջľȾ/"\8 +$pSX4m0+򴁐YW} +Î^R'ъL7iT4}P8uPhȴ˥`,dn+-F 2BĤQxER+9rr@+$ Akڴ8G`hؙS}gEϥZx$JN[H!6*Pُ 7(Lן +Dhk%:4"V>4}7,ӜPvyA>c$ 0EQuHj) 3D s*q?~ SrP/Rnc4]IcdXR_5䷴ 2|!H ۱uq2IuDZBBBv݌h tɪ[]|kP=R館G_փ37(9Wk'}*!|7ƽ^F} +{9Z/"xx-,1l(jH"D{6+ס'>=՞f D>BUP)jiOxɇ:9Iendstream +endobj +5085 0 obj << +/Type /Page +/Contents 5086 0 R +/Resources 5084 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5083 0 R +/Annots [ 5089 0 R ] +>> endobj +5089 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [154.728 677.397 512.306 690.299] +/Subtype/Link/A<> +>> endobj +5087 0 obj << +/D [5085 0 R /XYZ 85.039 781.388 null] +>> endobj +1302 0 obj << +/D [5085 0 R /XYZ 85.039 761.463 null] +>> endobj +5088 0 obj << +/D [5085 0 R /XYZ 85.039 721.768 null] +>> endobj +5084 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F66 3248 0 R /F35 2888 0 R /F14 2903 0 R /F56 2898 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5092 0 obj << +/Length 3813 +/Filter /FlateDecode +>> +stream +xڥZo6gP-U$Q!ͥ65.r\?+yZHo^| p8s4r='4=μ-x ZHgss3/;0Rg7W~[Ru۟|\˷o~ƮйoWk߹##WWb*U]̂B<}9w^?y({ݻ3`ʍB%ٿT%D*uTeG |?p'F^HB(ZAuNij }incCڛySEӼsfrBUYT0wqhƦEVQ5{QrĉZ",@$k%a IhYw}ȻLԕ(,w%pj +2ƈ>GyLcs1c"pl:Bˡn~_A:-$lߴr/^|Au-X+eSW%Q\Ȑ7)c]pv7QIb0">TCaRܣ2/wOJz8BX[qQ52=yY\'@a,!-7ly(1ғpqk{r(Q%rOuEɁRdhulߊǥN} 3|̪=>ll wxŸvd>)_ 7 9rA̹l%L!k![n+-}|jd1x9raBX*/&wK'~v)i/rDx8LDܣ@4)na!u<v껴UAr4"bc]?H8L,?BW/$F.:4w Q $LXO:h-nmRSQv2kZVx"_,rGec@7`@.E[i-l)|=ytꅣ9:!z[Ptţã /tܬdT1' *B:sQNWD/֒ +CBq 4 5f a J0'`7u FiLaLH0tyԂOZ cH,pFA\jnA hIz-.kMbOu>rGje=P͜#B n+JDMMK1,}ǥNFޏzkjpFkʒ ulj]6yZcM2mb.lNd_oZ vanGʲ's܀dxL[dR\l&Ay 2lpu[R+"퐣L"8J(rvN ڗYj/yp?)oR/Y *S"D³̏r`DE<w;n{h,41:~2țÁ&%R ru:/IheqlYؗKJ27~f 8c4awPjugQh LgjI ݆n +"nTC]'鍵a.o@lD@6NPTUslנJ(=VQhb}Ov>ha2t %ZdLfNP%7iM%0 +%GT(m V nO.G |MV73М4ʏ0Ne|.pŇugOch|# )HѧTDιyԝ,eXx4+QH;\FF3 3!":֖zK#9{ɭPEX[.cJ.U560F]uz혯@9椟 2\|"!e&wS=-X[JȀIn\ Dk&'|6~ oK;vtC!?}bw@Z8`4ҏ C_q`򐷠F?f=(EpR!9U^aG@];#ho] tǨz83ɬd.N?B":D/$k]Pz(œxDRI&YO oCF@%Iu1 RkWhcq?c~J" r JveW;b2K0މ#y]L@Y},1(W .M Kٔ֒%sa=9tc&&,~`g":vAQzKoG)Q>=h9dCRxUoѰ,7D[g(76͕{'Zw\b!)psv!N|7LТQD5g RNCj{ATZ Xh_OH<(@)l%6Ӷт\]? Yojh,k=W`'kx.p特$T'hỤ^-yS;^U|J}b^Dx~)5}ɚ݁M?Q–  +S}O 3C ]!/c(*|'_^2`όqtUAA]N>>Bz+/u;':_/vu4raҞi4(Nj98~_4ޑ rcP/9n@$ج$]N;©M7 yWN*7H\\ 9]Ϗzs+d}ֆ{~r&鎂鴄RZA*( =bBivThO P'?Z՝zKTpZϳ_߯gNd25/˦\g |ާendstream +endobj +5091 0 obj << +/Type /Page +/Contents 5092 0 R +/Resources 5090 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5083 0 R +>> endobj +5093 0 obj << +/D [5091 0 R /XYZ 85.039 781.388 null] +>> endobj +1306 0 obj << +/D [5091 0 R /XYZ 85.039 522.122 null] +>> endobj +5094 0 obj << +/D [5091 0 R /XYZ 85.039 493.324 null] +>> endobj +1310 0 obj << +/D [5091 0 R /XYZ 85.039 355.61 null] +>> endobj +5095 0 obj << +/D [5091 0 R /XYZ 85.039 326.206 null] +>> endobj +5090 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F14 2903 0 R /F20 2873 0 R /F56 2898 0 R /F35 2888 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5098 0 obj << +/Length 2373 +/Filter /FlateDecode +>> +stream +xڥY_FOs*bAKy7GJ6Yy/g8]{ډ_@ʿ!)$x䶫_6fJj/M?D +%:^=V[dӞҴ@VAdjBR߄פY<;$>xCiebg#˛gX?ڻv"'EElNjV~j9c|p(0[: ]**PqNp +Χ% )S.p%amuOcIpw@ {]S/v#Md0]^;3wXu;|H[>UNZ>ɉ#|ohH0 +Ak<lqlG +O74RN>2:Pl " [ܚv|nQϷ .{^}yU&ZDrʸTO. aL0(!b߻3kEH^6y zo=hF{"("!'ќ+K-#Em %rl.a)J~ι1::P@=? Qcm$@=(b0ᤢ@]b̆><' ɉ㆒_/Qj2MRSxАUn~ Jm~3(E-T)}NPc9Ue%BOPS|Sk5)6 ˕2 jn*^Q"͛!A am/ rmdI®r۰Ez|2$o8&^hBW5vɯRL PЋxz9 {9B0롄<.Wr#%3߉uA&"f|홉5x;3nBI)X1 d.G4P/b씬 J)}JqYUu0R.uc|2 Dť?D _ӴJ߄욳&؇+ݷM;`ab&o|;FudlP^?⮶WGy3ې$˦tv"=ib@0/>۟m&=Dh;~{0yC!aByEyT$4]Dnp8\P'qNsz.bufefj3!wl%ۭ}e?I5W9[qUCwoʃfz\r83'%ٹs;0x}g H0iQS)=gKG6{ؠu@>k9nP> endobj +5100 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [138.589 652.239 323.852 664.232] +/Subtype/Link/A<> +>> endobj +5099 0 obj << +/D [5097 0 R /XYZ 85.039 781.388 null] +>> endobj +1314 0 obj << +/D [5097 0 R /XYZ 85.039 610.001 null] +>> endobj +5101 0 obj << +/D [5097 0 R /XYZ 85.039 565.453 null] +>> endobj +1318 0 obj << +/D [5097 0 R /XYZ 85.039 533.344 null] +>> endobj +5102 0 obj << +/D [5097 0 R /XYZ 85.039 506.729 null] +>> endobj +1322 0 obj << +/D [5097 0 R /XYZ 85.039 464.366 null] +>> endobj +5103 0 obj << +/D [5097 0 R /XYZ 85.039 441.048 null] +>> endobj +1326 0 obj << +/D [5097 0 R /XYZ 85.039 358.24 null] +>> endobj +5104 0 obj << +/D [5097 0 R /XYZ 85.039 323.096 null] +>> endobj +5096 0 obj << +/Font << /F64 3118 0 R /F14 2903 0 R /F15 2884 0 R /F35 2888 0 R /F20 2873 0 R /F56 2898 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5107 0 obj << +/Length 3503 +/Filter /FlateDecode +>> +stream +xڅZYsF~%P\ڇرJֱ++}H0hY~AJʜo(_x'~Yq_5*T~b Ol^4;c2̛W߿(4ȏ"-obsq[#$ W8ͼO4鮮Cnwk>4 +;ݵ[~p_^T*"Mx:8_2M3s;]pIb q2nvC +a5z4ai(]E,r6z{qe~CW,Գ;q B38;^$vbX,bAlYTL!!aeG,0dwހϴb y)QQ1])FVg\8s6q2oY|y7c|oHV^5̫X.v+ +,;YgQ>aq/0%Nwlk 1E'!D*/"uw0̿e<~Ş,Z6UaXV4N<(BSS?w[Q{s-o|ҋe+i +30}{bGw+`/!!Lz,ym$_˿;#v% s2$ĴpqY$ dcmiS!FNg+穪<4)qS GA\v݀G"?J!2}H1j iUx9rAw>cKܝ*o9IEG*C?M= `(!"qy=ytj-WJ]\hĴuJNMsP.M@e%V^#3+Ǧgq4CD#+& +m?`9Wx[޲%^qU4s,pŧ[1ANxe).7ygYm=T%v,8jPu~%}糂X)Fb~Q`< C4*Gm0)^xTXt2f)(#$ᾠAØr8q7N3ؤ~F/?f05DɢYiJf_ɺϐ^$e9ߊp\M?I`%9Ke %M= )"Y۩:D!avpVJ .4  + bq吨SW\0ݼsmX8dy>1BtZ{r-BcϨ0{ϳ%P@Q](R/1: g4ۓ NHH9sJ)#%&ԷMmۡ#AsH6KhhqZbqX޹9 H z6 +NN9@$0;hp-")ں^M݂@:`Y[}l:ԩ 8!-KT.JZz݉AxPy [Sxlx[?@/~>pƛ[ nJ4>LXx皣4;Y8@J6 +lcLWw=Z5Ml٦;i@/ϊoz~G~9'ThAw3ycLS\jZ͎irAd]`})]bi?k +Tf{}|8%#c)j]XUzހUUkr0hcOGG.1)x+IL5*BK +FĿ+KU{*\+ +v Kѫ(acp+^A[ؒhOz*B-|/nl\H ڻ@ +\߰K[mUm7i:Sc}@Va*v$ADxBi*'JN)qnphMg%$c&K00#[{ȕ"<ʐނ,'jh^}ۋkt3Gtu z^u^&ccX$cU%>*jQiS/{B +7Z窯ja^x&_0hP71[+:'nާƟ$;NGFx |VP3a5 /,(Z(f_tZWp 2ORͷOv"1O?̌Ʀ~I_}ȀcA=N E?¶E y8!~O{x{KPi{{-@`ڃ~7\qk4'_z +SC:`uiN"Zc5 ae|Y q_188W;%5ɗ]^d.hM%~:} .!9DϽځ+Ϊ=,t%9D㧪1˓#1*]`ևif.#;cm1h_CErƧs "9&r$! /LO5aendstream +endobj +5106 0 obj << +/Type /Page +/Contents 5107 0 R +/Resources 5105 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5083 0 R +/Annots [ 5111 0 R 5113 0 R ] +>> endobj +5111 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [279.296 604.06 310.834 616.962] +/Subtype/Link/A<> +>> endobj +5113 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [359.407 229.072 410.369 241.974] +/Subtype/Link/A<> +>> endobj +5108 0 obj << +/D [5106 0 R /XYZ 85.039 781.388 null] +>> endobj +1330 0 obj << +/D [5106 0 R /XYZ 85.039 761.463 null] +>> endobj +3030 0 obj << +/D [5106 0 R /XYZ 85.039 667.044 null] +>> endobj +1334 0 obj << +/D [5106 0 R /XYZ 85.039 667.044 null] +>> endobj +5109 0 obj << +/D [5106 0 R /XYZ 85.039 642.326 null] +>> endobj +1338 0 obj << +/D [5106 0 R /XYZ 85.039 642.326 null] +>> endobj +5110 0 obj << +/D [5106 0 R /XYZ 85.039 621.333 null] +>> endobj +1342 0 obj << +/D [5106 0 R /XYZ 85.039 346.512 null] +>> endobj +5112 0 obj << +/D [5106 0 R /XYZ 85.039 327.64 null] +>> endobj +1346 0 obj << +/D [5106 0 R /XYZ 85.039 132.94 null] +>> endobj +5114 0 obj << +/D [5106 0 R /XYZ 85.039 103.536 null] +>> endobj +5105 0 obj << +/Font << /F20 2873 0 R /F15 2884 0 R /F66 3248 0 R /F35 2888 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5117 0 obj << +/Length 3110 +/Filter /FlateDecode +>> +stream +xڥَF}B>,X-v7O/NA|g1J⌸!E Ie-"JCǑGuЫ8yT;Cܾfn]=U#D2)8 HfUCµ 1zE2~:j4`#+By*`2ZhCl +0 .2724p(65/|1$\+Pp~=CÏaci>ǣf`%xkP x =hE+yF>HY;dl_8"98UJ r^@%K7A׫0U)ձ]I8%n Ɉ/g(9#/9Y8zƋ""kU3Gka F;g@%(N\N&Ixx@eK P{u 8 v|꙰]@GjN`[z"O(?(ۋ, +ȒlEBx}ьt)kvFP11ĉKQ j /"QNƀ{x`_!K^W1fPٱbГ"$|[ҟPeҸbtS X xkj4{y"tqS۹=S{=姼 t[riP2]9Uvlቭ!L0F os۸ ܵrGQc A~w +Y9cFVKWu-dh}DʋZ.k>AgVn<#~b\߳lȇtGR= N-`8Q a"@*@ND| O-MN\1NSǃS*e,w|8ߐ<96Br]%-MUY$pMgS?St0U>#k$Z/$~W;<̞rX퐀Tv~>Csmo'4V!?>9 ~=jtm aD*/mov#3ƌq?vq,`K=} GCe?qc;L1OLWԐ^<3he,dMzNCzLgiB v_zߵ2%Fxq<A| _xd.SEIЖXMjBR~I*Q3}oboI[BR4<`yclpu@Vhx2i(‘ГI:h()0&lmW%w5'#TgV6 $6~`_{w-jN7fH1d%w>k'i !q}sBJ`D'NݛOn5s֗ȸ;݀.i|ۅA>6\~ґ <}Ȗf5dZ޻L0p +C*Itz{NzP_Z . daI ҴJ}#\)ё-tzcĔ_e +7Vlu@ k9Es *B$.W|ZEj?4q yfngkEno!㚅~0|rJJ4W|NSӸ7r.Kʲy9 +}#$nUh~!Ę'~ i> endobj +5119 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [309.861 679.338 512.306 691.33] +/Subtype/Link/A<> +>> endobj +5120 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 668.213 136.217 676.872] +/Subtype/Link/A<> +>> endobj +5118 0 obj << +/D [5116 0 R /XYZ 85.039 781.388 null] +>> endobj +1350 0 obj << +/D [5116 0 R /XYZ 85.039 653.944 null] +>> endobj +5121 0 obj << +/D [5116 0 R /XYZ 85.039 630.626 null] +>> endobj +1354 0 obj << +/D [5116 0 R /XYZ 85.039 137.996 null] +>> endobj +5125 0 obj << +/D [5116 0 R /XYZ 85.039 119.327 null] +>> endobj +5115 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F56 2898 0 R /F35 2888 0 R /F20 2873 0 R /F11 2906 0 R /F66 3248 0 R /F69 5124 0 R /F72 3974 0 R /F18 3977 0 R >> +/XObject << /Im4 4874 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5128 0 obj << +/Length 1841 +/Filter /FlateDecode +>> +stream +xko6/ZD=? Xڭm +4m)I$NA)Rt݆ y;.y$t\NsdLWĝijs2\LN_GsMG>r>Wo.?\RJlljxus95C//op7x,bHg_N:E/i/HO>~rn:2M{Xt@}9Գ`TǬ yhEIx٥*C?ۦM޴?y-sHPz=B]ԖjUǩA$^2Lt+]UymF,ʒFGRf3":vuyڪj,os,z2ݲ,V_a.o+MaDPϼaUE="j6/xsrƠNR2hgv{HVD١k UkzBٛs^-$29Β$:вPM p$iQHy qJMTC} o5 ȌF,M9<8,.S8Sa&LFucos +,15jDƲe-+E]9C8L dAJkY<.LoOFZY!Sl I-:wcwVgKXMGII׃$6U!G Urd;v EXw+e 2 +`Yt)ؑsn*{+ ⣴O];kDuoApօ0Y h< Fft q #Mz#:bOn UqGQ.2=:3 \Ե IHU۵҆PaP>aT+խ%1HjP-&.>&g`rpxZmUU1Ia˓%D> endobj +5129 0 obj << +/D [5127 0 R /XYZ 85.039 781.388 null] +>> endobj +1358 0 obj << +/D [5127 0 R /XYZ 85.039 379.971 null] +>> endobj +5130 0 obj << +/D [5127 0 R /XYZ 85.039 356.653 null] +>> endobj +5126 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F20 2873 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5134 0 obj << +/Length 3104 +/Filter /FlateDecode +>> +stream +xڥYmoF_!0BCrڢ%4Mиع~h+-$<$ɾ;Vyٝ׵??I#S$I}Wd9&+¼9 ̐F4/oΞs3/,}"7fW7?LgJ),IRǫ\z7w>^1T97 z{9__ܼ;{}K@Re,_gMһ3UY:yޜn*]] +pSVTF:6FfcQ2I"ύPm+t=~}{3y=-mwQf^o6y8u_E?͇l,Jϋ9?fn-kw*i2ߍI})FGNgA|t¨.ZC##?.>anv//lsl9[^,S'Ztk.{~hNX.thu|)]suۙ\ji,na~!+Y\v?YU7oԡ!W ^yi0뼡ģ+s,}]{^%N֍A.n@VD-<@7Ci4$ya(@W`p2D|~g[5☮$1w[NWOa !Ѓ\k͊"xg$jMM:[{GI"6d8 +uE5܏Ln/Sht9%~5[\XsV2W49^UuFApxQ瀯g@;k$Kh tvҕ3ECo>K-3DA{Tq%Us!<!ԝV7w@^ +eZO̹Eud0؁-X JkC]5(&ˆ)f`BlD).La +03I!EiŠ̡y'7`m?jsL]!+ީM( Qv3MeL g8nx|_Gu4 +XRFSX mDۊŨծɻvi Z%ăa^ub%d[ QXaP:%!Օ+KxmW-#Rwk)EX@-m< C=8OZ)&Gj(sSQp87.$[(XbwADTi"YBeӺFhEʫ ʫ>W*nr4u;N3Pgхw"*qrPcV:sYɅUA Y9BR)M % ?44-* +7hDBt-׊g)sÎ9~楐 h(Ū:6Ph]$1w;Uc6u$z2XG4}.݌p%0⩲UpkٛDbE7Q^jOd;WS"պu̮~ePA(O9<<'"Lsxr a J,1b]o48s}okA8uo6e*J4 2M$'62] +Eܸ*qb~cc3ydO|&bPF/hu9qq4?Z3&'3^㑉/BHc^Wsiya#!fA7B%w8M?EWZX{Smʙ k!D2 +BMxG=$V.7C(Wq5-668^C l?pak4.cgF^A#`/lq ߛ#坍W)oG`1Nd h_@3Š8P)Y.f8slUc oRդvl0,$yp bz/g:hOYl4*[7JM<56+`ff/C>KO3fxn٩$O:Gnӵ" +7,? o endstream +endobj +5133 0 obj << +/Type /Page +/Contents 5134 0 R +/Resources 5132 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5131 0 R +>> endobj +5135 0 obj << +/D [5133 0 R /XYZ 85.039 781.388 null] +>> endobj +1362 0 obj << +/D [5133 0 R /XYZ 85.039 430.872 null] +>> endobj +5136 0 obj << +/D [5133 0 R /XYZ 85.039 401.468 null] +>> endobj +1366 0 obj << +/D [5133 0 R /XYZ 85.039 332.675 null] +>> endobj +5137 0 obj << +/D [5133 0 R /XYZ 85.039 311.478 null] +>> endobj +1370 0 obj << +/D [5133 0 R /XYZ 85.039 173.868 null] +>> endobj +5138 0 obj << +/D [5133 0 R /XYZ 85.039 141.654 null] +>> endobj +5132 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F20 2873 0 R /F66 3248 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5141 0 obj << +/Length 2974 +/Filter /FlateDecode +>> +stream +xڥZYsF~ׯ%da0yoVXty<@HĆ$V~$H*s>nHfi:%uVۋ`v3?^(м[^\=63Y͖w=7-_fZU/$I, |^^]=j?}^zd~wo`T_~ f\駋Y:{v+^9ho.\csfƫԏR}, ĢB퇡%QG!|[x& 櫅nU7"LqwicwA(i[\xs֨ym6o%V8)abks̕rvmyNok̓z +:/Wٖo`Xx&x:※m wgTTͿvzG]mȶOk=F9 tF&?, ؋;~'k; +:GX>ZuiRvpZ!: `%7 0#pqwXphGm|xγ2~@h6.z$6(9l8`XmB$0:Lߺ'i%tAM fK)S6PB@$?/0>r$.cB E5p(H)Ɗus +a'gУ'㖜!捭980C@t"H#›5'@Ű2x@N|WngWtSYu7iqD/ t2~x^=7:lB@4 {̆Cc`0)b)}Z!+@C!*٦ءnz P/a`l%&B%Kn0$TrPv Ы{rHlKx_0  + >Z?Odу n3|Zgi8֢Cc$^eOq=⭽/ձL Z\ |=?rVظy?LT(0~9y}8 bq`Uc>U6IHdڮX3Gh1vρfۃZЇSd,tМ& KG<>tkкqYK2Ew8?@hOrw`'p%Uk[ikovJbTFOsBL#3WXY8їQCD֧Ц, c0`eh <;6TS Pÿ rDW),ZB V'-%{,`OBL O;k]V*sۙ+䮒SꆸQ~5U6߂L8l[r lӻAyb$9?sH:ENq. @< jLn t9LzXl0ڋ WU]wj9%!qG +G./J{(k)f,9,{4м&p)p6Ҷ$dGK!Kl`I1O bhΈi^Ùݜ6Cy1H\}Q\}WS]ThۼxKG +! +]|>Zks LX/lV<(tqiHzx qw*bPjȠ ?^0REk7`8m E5zF}~`=(4h1 uD\H 4 T6HF2ؔKa5=RL88>hZ@0@ 7|8rEʉ3dZ81q8+R٩k4Xs7T!}8+|Zkà`"0DsT}9Sa21sq0CX+4d\^dYGϒ?s"& ' ~lhQlEᕻl^t1pP%~ӐCuJLs,gMi&hjf?TpCՊb?gf(|QrnF+zO:ޑO \jX'؏Q$:bʎOu_:bz}8>4q=$ +RVȁ;z2_*upD>ăhd4d3|P}~2i:CQ`8endstream +endobj +5140 0 obj << +/Type /Page +/Contents 5141 0 R +/Resources 5139 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5131 0 R +>> endobj +5142 0 obj << +/D [5140 0 R /XYZ 85.039 781.388 null] +>> endobj +1374 0 obj << +/D [5140 0 R /XYZ 85.039 665.44 null] +>> endobj +5143 0 obj << +/D [5140 0 R /XYZ 85.039 646.568 null] +>> endobj +1378 0 obj << +/D [5140 0 R /XYZ 85.039 490.045 null] +>> endobj +5144 0 obj << +/D [5140 0 R /XYZ 85.039 466.063 null] +>> endobj +5139 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F14 2903 0 R /F66 3248 0 R /F35 2888 0 R /F72 3974 0 R /F18 3977 0 R /F73 4000 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5147 0 obj << +/Length 3834 +/Filter /FlateDecode +>> +stream +xڥ]oFݿ(D %)$i8XF +}EZbM*Iq|r%Qr |/KIz*'r.W0,w?﹩^.u"7"yۛ3t6'2 ;w78i#]}^{=z?]|0;5{]?/~ݻH?]xJ'h{Û اJſR<^1D*qD%-rGy!]y\ͮ#kR +G!.sgә5b`gӴ:BYi83d|?FݶSZ `fጾp_g5oY^xSg!G.` Qq!ucÇ3xvYU5e1te@/`F ^7/4Ф0}m}3d}fH⩽^@L_.;P0źkst ¡"]Ge_L8ZeȤz9y4wE]Qyۢ&BALaQ#Yd{i ؒ1 ۑtb³2uF!55 a}l:n1p4㟪l f|ׅl2CQěBgrW?B8rױrPIpn4dǡz)ۦۛ .~},"!񫉯gJn[72g~&f,qO Y('|ϴiD  I@r tA`PVၱe +Xh%MQÐakĒϸϋy=ʸdme`e.(CAǰTb 21fPnQ2X:cp~[<\[BLE[<OKȧB2/T1h۩B[덇}{hbN&X,$^'qc0 W0?BW 21=R7J=z6>]sS{r>?.9(\3ɇB7} *Mخtl:Gqt(L `0/ {q"Ke3j Jngl BW{lHiXA S39s.K5ٻ~|"U<_5c!Do;UM=[7He?k5o|gAAp +8Du޲7I"H42S>WIPff:=pNEux +8RP=޾I0fEAE9#rђPl5AἈ|;|gW& cʪ`ʎ^9NӺf*TFx^' \iNrW ʎ1'r6;n9ցH@UTDp$: **y9Ve q"DZ53%gpⓔC/E1~c*JYc,l3r^K + (鹤O s:t"s$p8$67XĮ1G m#-8~5o'b҇t}ž=XAu+7)zȹ֦F =lUt`RVƁ)a Cqv퇔6[ XƭHjNA p!뷈~`'/=XYKʔqrg/LޙWcY 22~ |2YUYg HC#1Ou2l}87E\oć⤏ MpuQQLޜJ=7-%>IAC&D=* +7^8Ï?=y2endstream +endobj +5146 0 obj << +/Type /Page +/Contents 5147 0 R +/Resources 5145 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5131 0 R +>> endobj +5148 0 obj << +/D [5146 0 R /XYZ 85.039 781.388 null] +>> endobj +1382 0 obj << +/D [5146 0 R /XYZ 85.039 570.527 null] +>> endobj +5149 0 obj << +/D [5146 0 R /XYZ 85.039 549.331 null] +>> endobj +1386 0 obj << +/D [5146 0 R /XYZ 85.039 331.451 null] +>> endobj +5150 0 obj << +/D [5146 0 R /XYZ 85.039 284.114 null] +>> endobj +5145 0 obj << +/Font << /F64 3118 0 R /F56 2898 0 R /F15 2884 0 R /F66 3248 0 R /F20 2873 0 R /F14 2903 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5154 0 obj << +/Length 3804 +/Filter /FlateDecode +>> +stream +xڥZYoF~ׯe)@ðw@lEm$k$yhPc9&9緮nGU]գS,0_,[6GjΏH,Ed9yy}Û$Zσ|q};Q.׿y~>~2 CO2M3c]q/ޟc.B}gwBw/O9׿v3usY8ͯG,ְ_?̳_AQ(蟮+jN+qqE#(ZE~D;^*ęwטdL]"kn:bfuS[;ƺ̣IM8łFA龣~R2P=近wزZOmUr}kMZ,E#KjI =$07*J#ņr<`RkPoUB@EouAzT*L[cR{J=}}>p%P{ NKu~qCM +LV [V,KM +.*m0=ΧeuXe1 58,nq +Uų踬o_pbl-A,!^s߮XCw8õ+Ǭlwj<iO8N5v>;M41O6CEZjőR1+Rßr㈍GZ0#t + +Wl︪{tsGо=HEܐj0p%hnMg){kF$LK~G2_j|)J/CB@ȇ+8p2[ 6I[(\xxpgPW(YvbE`+ 5,V=&oL"3L,b=寳(H k *W'g0YKqZzYBe,%)#餳 v5=*S[Qz΁JГmAެ7[7"E7Naj)F߾݉V skG0PA$]*S'iY 'F.tMmւ)>J I؝D;=$- UKc"JٔD(. ,jK[Zek޸Wyݱ *EG%u!0lػB #nw%TmY3JްXpDI\~Gfv% ^S,j+az9ݏ0}ȸb-)5\bq6e @b=\BvR8 Yf ; N⺍X(m֬]; fz*0WмRvPfGdKWd @+PglJ<07`18' z"WD 3ʪ1q;]7ȝ0pH+kKwYreM|Р]ګ3*y4=Hd5ĸNT|ruf|XG4[6Hg )d`fɪDvu/hhTL|H+fͦ\tz"qW{#-;/$v)+U=@@*~PaɫޏA g>kBR / snت F8QOG-"+ ^971rul/(I 7t/|Zw1#7R]u ivs +oC1l ǗD:Vm{-ZmAկ|C8J˂m="G2qd ?Y[~#>ǩ ;&ȼ~д@,z~ڃaE@(̐rf'\/w_ƺ=qT@8K{)v7E4 !5Qa9dwW3 >  Bo[ѥ{Z` +ĬRܵf_h7Ep/[b]vMgH,wBqqN//͔9X~XSC 7`b8+qA@`N(L\t$ɘf5Z m}<퉣AP)'Ccb6EC*{̠¸nDҲC+wj}¸TdG,8+ +!UL} BNo8%QkiXӊvdNx4;`$HQvI t m<F$ u6eg[2phg&3_hO1F!v0Hk#3@Z' TqU=T͈x |`PDkEoUtCՅdcDJ.^:ovJm̚%5."Kzim ?}ƸŧG"P阹rzkըs /@%taoɨL??<ܗ0GEWb0(8-i#Wm!WN.Y+c;X׏d #}LY>J&4C cjBiD.\BmoX!c >|~ö#ȞH6PIOF +׆ + TY0vq4rAi\ȸ"@d+X>H34Z.;cz~*> endobj +5155 0 obj << +/D [5153 0 R /XYZ 85.039 781.388 null] +>> endobj +1390 0 obj << +/D [5153 0 R /XYZ 85.039 665.372 null] +>> endobj +5156 0 obj << +/D [5153 0 R /XYZ 85.039 644.175 null] +>> endobj +1394 0 obj << +/D [5153 0 R /XYZ 85.039 479.466 null] +>> endobj +5157 0 obj << +/D [5153 0 R /XYZ 85.039 459.938 null] +>> endobj +1398 0 obj << +/D [5153 0 R /XYZ 85.039 148.969 null] +>> endobj +5158 0 obj << +/D [5153 0 R /XYZ 85.039 132.625 null] +>> endobj +5152 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F66 3248 0 R /F72 3974 0 R /F18 3977 0 R /F73 4000 0 R >> +/XObject << /Im1 3965 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5161 0 obj << +/Length 2373 +/Filter /FlateDecode +>> +stream +xڭX[s~ׯ 1Hl7vIŦ'$yX +. mьس{߹JJ#W*I=7HU~QP>xrb+G3ow7Snn?0 +V7Ax&Irϼ{| +as!O4pv|D~7jwVShZ`7 tkz@>݀n\|ŲbZ[K^1'r߿d .Wj${ g+u̩mnΫ?W&Iv<@Hڂb_x@Tc8qc*v}]EJ?2N^ ђYWɕ3 ^EWs_bR =(:݊}W<ݥ~\eKN3Wڽs Z540=X9p-5?'Nz%z8/WҔ0]?߭IA>6r=oh@@4 +?Ey@ qU*V&Ω⪨~W^둟GEKoUGtNzDP29#zإ +4~7SA8 +9|T'dj`(>6ȏ!7HWq +~bah{I;S 4I_ݶDsX@*+Ozŗ_Y{&jv!RtSB8i[dZZ;1b)3^@̹5 G=4]FgrtċtK F@ `%lX!*XW5x/e2ƒg5+ +CGG#V0u.o8.x!" ,8ᙾƾ}4+뽰jӚܰ%bӥ#m=!B{l[3[l$Ɋ$p_j"E͛3HGI8y 'sO(T2CcOE9n1x'IR#Zqli sCB]զL0{p:үr)E26ʛ }Oӆ ! ։D缯:B/mh!ȋ= ;g]∭7PUgާ*vG}T+m)3u qĞ+4`Ӻ}~Uc0EhM.sǼ)Ѓ +蛊Rcp THtkktd|7jM1 RTV|lmt}{ix8Oc>׋@/RA5!j60E0ggOQ ]"o / ޔR$S]/E^͍} >zhnҴCdhbaZA'& )uU$H\*&52R7>9c y,bBX `sn +C*W&w1+(Czx\Qœ:z3N7P&3 +ሑkTռ q8hq;aND x;ذTbN>!S5T- S$Oh̵pAϚ-p4K CvihV~_d`pmqюc־FF62ڴsP^*JTjp*b0SmbGJ`8Dii(\[D `)rʘ]vI + a^0+X0 fN8-; /ސhxiHhZIWQI7)n q4<$Z@0GlzNHL%^ujYCc5 qQ(eM˱^Oq/jʣWC"_F, +z֯V+cx؞WyR%O0KDP6GޱS#4o-HZzf̼)'oaf!g#uϿ^} ;Cw!ƓDl`TE|Ih{!,UdՎ:H.'::h=[rIço&9@؇E/wHz| _C?AN#0R $%+a6+ _i-|= zK} u4V_%endstream +endobj +5160 0 obj << +/Type /Page +/Contents 5161 0 R +/Resources 5159 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5131 0 R +>> endobj +5151 0 obj << +/Type /XObject +/Subtype /Image +/Width 780 +/Height 318 +/BitsPerComponent 8 +/ColorSpace [/Indexed /DeviceRGB 31 5169 0 R] +/Length 15650 +/Filter /FlateDecode +>> +stream +x흇*EEzI_d{K%Nv&Ŷ%.g2,,3L>73mǛs$֭o+9ڃNƺak"\Zv悉_BBȅh Q "E.D-D\Z-r!j!ZBBȅh Q "E.D-D\ZQZH6^6m~Y-hR:~ksEl۶.?(<̧ ў5|>jdԥ>Zxj{iuTWj͍'.\MgozxOn#=I zw¦uKcR'`i򳹼I@ 㹽?#1-[ʴ:&XԯyrLZ Q whAsN5I/c&>=Uٜf|Z|o:8qaUxs[Tj :6\\:T` m~Ɏx`4+xp\)JwNkWS:tׂvvԞ.#bmmJjP}uQ\E ^tT+zh9Vv@ }km[_s!XzW#^փOMJHZAAp%r!j.-䭦'.o{ĖAiO &= %ǛP})`Ns4+.(W[.dxa0;PWyxWpKG.D-ܩ*ulG^PTC\(c +$MG)Ojp9Gͅ޼h9 +Vp Q ixĚJ&VGſBvTK)',B_>K(т; +pAW` 䢅Z+x!j^-]sE{5ֆտKh718m>j)Te};raVN /$P^qAW\0ȅ[2_TRDۿ*,9\h娿MzS7G~BXG3^ëK/S޾T9Owp* U]M+z~S}1^Zs[{o<M;~rCiY,r!sJS y$c$ +V͑X콕(KZD3ߺ=r!SH fBƢw>B;%|VrN23۴)_kB2L5KfiN5;Ͳ:dBZ:l3PKGL\s@pJܯ$*ڥ"~Nݱ1Ь]ֈ&(іK²z$>^sȅ pVMp 0!Rbb#G܁0YO[6LyZȫLWсj*N> Yp^摬1=gc3'\<-d_**HPd$N';&G$µn>YJL~W3z7r?1dT +}n=!V xWc.`C +eZ{f0l6P[SihH[ZWJ aϞy:q۵Nswz=oO_ +8\ +=nC*xBíSЁeSuBGَP(sf cguٳ'paС5&Plv+5j&ദE,+Wtȩ#}9r!j0\ӣ'dŸ 4B?6 zRJ 3_T LHZʓ?Qaڃ ):,2#$HK*Ab+\x*+3Pi/S9 :Óp>+x>fUiRY ' P1j1Z жxXN3h2:qABX / +.L!Xmwc-NB!˶ Q ˆ5 bItA= `"FYB`Jqv,a6ly`ՏbLZp +ΧO58D@-su'Z0= `Oy Nb @mЇFl>9} {}o O@pg29w:D7>'q-riȅhw^^mX=iGsE"ju<ܟF.D-\luasN-r!j!ZBBȅh Q "E.D-D\Z-r!j!ZBBȅh Q ""E-D.t"{\jAP*pTPQըV\L+!y; %ފk#IZxjG7 &r|P)-,ΥJ' +\UnSOB2\8P ZX-]Ee%i^bumBMAm3/DPhV{nJѻ,^k0+lB ȧ/ +­x`VBeZ?eq|` *{1B`P}BA+OU*h/X|;ZS^ O .#Fwҕ\06rz{1 ;92_0hU3[OJqh82B?n &SE_omC3{_PKorASlE>nO-<ݷZی󦓥M,HG.`IsGB.dŞ}:a̺G8@^&pxO^Oh ӯ#qrCxA +7+=C-O<L_ne/ȅG qc~Å^~"i0D1t[_ha0B3|~Ҵh{U6ɸ>R7ǩ꺑G.XBl`0[c饍&vV%ՠs=is9a#y| WXv_ȗJWr!uEyגZ`E |,BZ8uip0OLԦp!+u_a֞aqvTrpK_0oz+ +!(-|a\^QFdiNby-\`ȅ:XBl!Xm_HBktX?Tjͨ@ 7d |ԱL4- !ZҬmZ (#>Kl/'->T[o󪏶gק XG )هs.׉n-[ |~z|9WxF7igs\.5I7ߧ&=]=@O|$Nߔ7J.)߸Sx* fA 9O~or=1kϓuXI+=j!|w\ %ԴsfAt&Wis Z(aEH3E0cVSI-TP|V,o_|z[Vn!v\a08tN|"ՙȅ뭿o_66 [?йЁg.dP.ZAlk-pn`&%Im7Y*xkC)T%Tē($ˠn8lZ0N]ץ +7\x@ Eti Zy!f/ZE.b _…nnsoҋ/A\ifa\>%KغX.7ծeO\`&؏tW/}띋'lE'}T )V? NMuj-aAMœIN\؇~߷oy%p n9i՝i G*ɳY\ssS)wݖ#~\d6?B ]$gX4 -L?z79 ÃxDÕn _ JunǛS<. ,YڅąUPg'?h\[Y;5 +1uH@91 ȅk-&:!F87 +Xp +S~z'P/ [{.7 KZxG"Te ώl5|Ā1d7x b$rjoxW N_ko>ՎLV)NQ0.[ti-̅҅㫅=̣{.!qTRt0{hZ`,u,z0P4ٗF <:rVPk\3BS '- p9 iS-RsW }!J^Z\|^;WuKSG:ڭ3Rqcb]p}ͅzM-4P/WZ+"6tnB-yv2-[`(&9QbLq[8-Gʭp5h-0)\(Ԃj~j!KH~bLF:]Okf.`Ԝ4#*MT\~.q3һ"B[:3EӜA{PJȅu~7\ qbƤFjpWLsxABfɗL ;4fߓ .#o3\ȥl-D.ܷyt2&^}!U̩]7)~C5f` +X 鬅<3`WG~RbFnblNj]o}B7qšl2zv\>-3ɵhn^oBm܀Kjrἡ xC%)"!T7qNd*|u +3c&5rzt|E{pq;&u$(2|3~_W GBj4lI$UbBYSf+"no}P J>OvVW͑2^oy?c+?1^ _'4T۸`Y keyTB>^>4}"~J!5u5.8m, WpY*n NHB0p\mL&pt:$ :tE.+3$riX :-o. &!zvn9 BbVȅ?JVYZR0p7xQ<^&j)xR^n72gn0C['fϊ< %  ԣbÁe/ȅp4l-3˄Bsf]kG"I J"p\C\Is9r1\\9wlW{U JEw0~a-1 &2 jGZHf bj euL;߭/).hgUqj8~$ +BuD-ԌSTB7͘QUnU*`"r aNR[I- BViZܒd ͍#rg n5U-$#\p([\t*1y|YSha. v`b_`d7SB7Ddb޼?؏tT wJ4caK4gGu;8/Rޏu7t^5+f3;ORHٱ,?d?s 4 8M+VnPḛ k;?&;L_3ZZ7SQ#}A- OtӄԝH_P D.dC,r!_ZL`-D.O3^\ȅÅpL>44&ߵ%^%I Ϙ\~_-ʽ ++]`ݩS+ᬅŕSł)-7RO;7т|!%#pWD.|.v;eif_2ƗTAUl*<>?鳨3?+ia*4^%e d-5&3#~5Kg߷/CUP֪Z*0D.H_D ñ'bdhf霱Mycę$=6Aշ FKʽ#}-(-F)Ӻds=VǙmV g/Eij1juޑ7WT\\ZX5 +f@ @Af5-`U@*.Kx\kwk*tB¦u\r[ʜ0vV@۟=h笫p7ӕZ\\Z ۓd-%--DQа6BҰr0 qAiX5|Ohopx@]ͥ\H!d{P=!m.2~Ǘm"@$u&4QWisaxW_O^nSBvJy6.qTvd{GZ\xlRwKd.Lc-zy<륯"(-\^=-&]ޝ^hCBmey]N] + + ,զOZ;W|9]߈p;v*׽̿LWg ߙ/t?ŸΡ]r7fn~}{~|O8>૗3 < ;s ^^ ۛx$ع4JЂ[rÛӄ}+W/ԏ_#zI 2xw} Oxǝ˿w>q>o78)r!j_B0f>L>0V)j!rqr|:>;Y.1j!rqp>_5 ‰ _Q!ᲲD f +qcW؈XLn$haOΑ ߒ TZg;†l/uONT ء@oP9xOhZr t)k =jZPsuB %ra”C!ZF< e2v,E:BC:W}G6[LvYf2)a\%ngZk7!\2L}Bm \ˮ.ȅ`j|k-LGOi 7wۤG*p R2E.y_] !hiuFTʦ++dp sgW E. _^ &Ke5n2wB'DTT4rjVt&^+#"fU#,""|CBi٧eD.D.|}-̝K1{,r!rhaֻ)yiz* yi*nő _F ܾu(pVJ""̑0GZ X_%HǦ?ˏG=:&Lj"" ݇e+)+Zg-v(?([°lWS+z/sf)J. +?Ūʓ%Uȅȅ#:\ipg/m)嵮l\kU[=L@TJ%ıӅd.5kȅȅgЄ nF҆m^lJ*h\(a.J ?- eayTҕeNA9{.LEX'%dG.D.| wYOZEX!y)ycPV1F&6Z2 |'DgœeZ\͑ ߐ P'u3mf + ܐĥH ;iP;{b*rj7CWgdYiBW[x"暾u=.Z[ECGb!ca7hg֞s[nBw&pJ k.P Sm-\U2}儵B7krq(Z sڏ$~ /ORN/zZtL +P.~Rz.kۣ 0@ +q[t'U +zt XwjMe;Zom 8wix)Xu\$uBǪr9pCѵdYb6Lxv Y m}9oRtZ/`0ZP[u V+1a¿?Ko\Ǯޭ'-,NB_ӣP$z >na h]TY$p.:O^fx!p ZqE9\G 7;7~ߗ79`ԗVe7c>}hsظgxoւTo—hk +>ߘB~F 6T6;g j{1mES+< K mZN3q1rk^̹[[#]@hR)]լRN*pFO,l2jKgB +%>|*/44b.'ՍIo-{E;:4.m[0+U:ZxZ82V.AWuJ#S5.Q$@b.hbdg͢8lbYGXmL߫0H7~c) -1~"⾛ R\H6WPFZIZeJS!sm;]Q+~Tt>ajRC6oRn)i۪X?fQ/6q)TKH˸Qd+ mEʯBCP<. ;tZ`K1S:`ts_YnB%'(G{L 7jaVb_;ݏeZ &LЂNE2js"fAZ"~udwB>;!+~]6 + )0A0sA3:e$Z&m"q /g\ۮ0m]t/vSBM=W9!Biqֵ7T'k#~&NJԂqC ?'QE~fgY>Pok\煐DվɦP!Z8@]/EMЅs8*WN.s a-8߇~CX3I b0x*~SAڂӴ0Fs%*/E8-x;Sp$h*L_1 +,¸qy +ec11Po|2^81P):* 4 ^wZU-Ы\8U1{+ǝjl3o1n<̚H _Z YQ-߅󲬇,kpNʬ|Q)#s?ex߬#Mc韯XB㩦Tw8VoڊBeqWNumr-lUnެ*S\\L38-WOZ] <>$ݭc1v您CR-=#p#i!q5D.D.|q.a4!G-4vfDPXeЂq֭ȅȅoͥj@-01M>QGWb hA5?hP`oS+!%w VL3)n- g~܎~uƾN=s X;#"~WD.D.ZA>kϑ >a Q Q Q Q &rOia/׷saY&Z(x~x ?>ž<ѶW=+Z'g^D.Me}?U2; -jIXBBȅh Q "E.D-D\Z-r!j!ZBBȅh Q "E.D-D\Z_BBȅh/Zy[#" ,g<6endstream +endobj +5169 0 obj << +/Length 107 +/Filter /FlateDecode +>> +stream +x`fff777VVVFFFŽ˻ + + +|||ٜrrr--->endstream +endobj +5162 0 obj << +/D [5160 0 R /XYZ 85.039 781.388 null] +>> endobj +5163 0 obj << +/D [5160 0 R /XYZ 85.039 758.673 null] +>> endobj +5164 0 obj << +/D [5160 0 R /XYZ 85.039 758.673 null] +>> endobj +5168 0 obj << +/D [5160 0 R /XYZ 260.019 389.014 null] +>> endobj +5159 0 obj << +/Font << /F64 3118 0 R /F75 5167 0 R /F56 2898 0 R /F15 2884 0 R /F66 3248 0 R >> +/XObject << /Im6 5151 0 R >> +/ProcSet [ /PDF /Text /ImageC /ImageI ] +>> endobj +5173 0 obj << +/Length 2213 +/Filter /FlateDecode +>> +stream +xڭ˒6`| Ue"@LL*jg!Ɂ#QcJIcU~>Hjnmjv7~7ŸR#ByI*NSo0ogR$ѼYξ!<,̼fcDd\ye&Aws3tqwny-~Eu7Odw/o^O Ub~GJ?B{u($3SHjv?wϊqǻ(Y̗5Kźל19)Ry #R\Ƅb_)( N`7@%,DIeiV{iU ~9T8 _,_U(et?+0hRd˺*#,@~vO>F[DaU<ňhVMA/P@7EϪ2 +!\6t'W7J)酸oՙwlQ"AF*qW:ۮx;ڔV-por6e]03^O u&NLãV$q1q[Wj( /)E#$`3W^}54;I"UOޢMp^n7H4Ѵv>[e7UV]0qOVť9\-ηR^s25/ОFyLʫX3χMEPRIs77ã$7ʯp"O8i[ƿ&]|IZ0.T;vAh)Aݮ[$56/>ыC[:[RXA):Gm="Po1%"F#^Ԇ.Yz8*G떋ZoG_"Dټ x,1+K C_w`VQ#*9 k +HҪrNE/ +$2㛓>@d@8Mtiw +UMnGEMhU93x(=t\N6\մI!=eP%Oe\s&@nXr2px|fxبvb`ߌJOm).[{*OLPl܀NlBEE%]%כr[s܃dм);4P0Y<١m#)T=ˇvWL TH$KKDISլWɅvď_cۃS[B~z_q=9!%WY% P[&ȇNd.( `sydm. RRBxB%n̛gF f`gJ'f S*7v3Rl -Nk +w'JzMyeS*!(AUjZ׳{&\DO8?)4'Vs(;7 E +w Ls%9O9qAהG;MuHIz:бbhqe=^3IJ i/Qᗯ95W0S\B8#B]L0h6fD L\2ܞ>|m ?pι;W-94> endobj +5170 0 obj << +/Type /XObject +/Subtype /Image +/Width 780 +/Height 265 +/BitsPerComponent 8 +/ColorSpace [/Indexed /DeviceRGB 31 5180 0 R] +/Length 10989 +/Filter /FlateDecode +>> +stream +x C< 9v[򓜴 > + M[Wgݱޝ&Τ[Mfs#Zm-Ow6ZhOlw5VFZ8k{Zɕ)ZP/s\`c.0ؘ 6s\`c.0ؘ 6s\`c.0ؘ 6s\`c.0ؘ 6s\`c.0X k\`-0 si!H2-gǪyz4/>7>'s=&v=4N>a.EWrNfT _AճCUvy>/0>Oh.L(FZ_J̚x?ҫ}&8ֶa.~uݬ8 + tCGG0xbp.&Sb;k yPw9/l$XȼRO<+^-G*k.Uuږ^%n3cC) %>S[;tzx]p!9KM $OZ0;] _|/ͅTX'_,dY1 ѻ:0+b2 v9}©ocxNjl)N[mB)kT\G ӂlzJ©,'f0Z-r6Q +2ZH2MOq$ҥ*ZP_\ ڢZ TSޖeOЃ&[^2E+'*:|ZBO(B arB8خ^H` k1.;%~ˤ=w-| . WZP~o3%=6E@\P%[r: +jX(0eb)^{ -`.*W1W(]Wޘ;|ҀTe 12yzdԑFhEɀ`I= S_ em,(\Dks*Fk]]su6kFP _o0Z(Q*qR~7"t-|].u]b(Ʊhf9t,QɣTZ+'Ga5T 9=1/71;ϰ ap$ZyL,H:^(-|Lan><zxD;oQ6itLNKb.w8OIN\ZeշvH\ d8O۵͹cZ_Xy3`XL{VO\,9u?$! +1ͥ܎d3&I~\xU C;c,N툰^ ˰RC ] ti{KyԈġקZj´狊jƈPbv/x&&-l#ܬR<Hrhcx/NwnG7!mXOXv-T/$Ư߿g-d{03.\}k-\qa<NϦya\jG7!{v4 +^ W\r?0H b~*\,.j>Tw-4WZQs1OH@v}ME55:C}ͅuCCZpoi9)Ly_-|f0PaJAAqs0yw78`~4{Ad`mXv|K䪳8[]i!ǧ#PVhݻЛX;ϋ M+PG>SWΎB`{Bj1@UU> Zt-|HӃbks]"j>X:i}7 EYv{A] @ ;W tS;7`ƽ8޹0mm&_ >|C-6spGjѹPl675s\`c.0ؘ 6s\`c.0ؘ 6s\`c.0ؘ 6s\`c.0ؘ 6s\`c.0X k\`-0 s\`.`-'T0 Ym|sګ h sᱸ—7e~];\V\!ɾh!{G̅G_\}\f\(-U9sN\?魴\`\H'i /s!Ms+r)[\`.<<6j,ׅR?P1U>Vkb.}i.tH9jKN7%6Q'SMPJT1 { HV0TejQu3%־P:F:I] l!ܼX8Xg1QB"Q ]XL=dB`p\,KJ F@ :hl9#遮`yN lDžcP+"BTt`[!JhZB)Uqa,#U5QZd`FjZeYx%Dpc Nd`T94ʈ]= >H oxP.dZ\i;X=LAB¢Ҹ qA1Z3CrqsZH] v#d'-²vxήi-K8sgg.T VJtA 4Ъms..kHXnZ(Kh@2>;?$:#?]"ʹՍ5є}_sm".. tu8JcׁHUtR$ m`WLF-0~rSRtUV=W3vh;f_N~0~n@ZXsc\ZXijN/:^楈]gLqr\꯫wARC ?$sN-k0w6Tz,$[ڰџDž9-p`.` ' ]3zq_ .!߭5:TCSQB^`!igџɅXcuƧ0A@XMOΒ;`2vY'S|r\}ںyi&GG@!,DThhL'g d.0YG[(=EXK2{BY"}\x Y4ֿR)! be;RGqMW ^<\.ZQ RQpMե)fL.7ڇ X9f@swu% o1 O; `ҹխ)ni<º/Mu2 O$"#ذ5*16Usὅ5jvlH= k̈́{kMubjl?|^fϞW41ũ]튏b%EEdƆ +`nsaxIHM*f5DžQX((~g).wZ4 C.ð"*hƧt-0 4܎=SJSt&Rr/ o(#(V(nmX _ owyf.5MS25K/1X ߚ 4kAsոiКKf0X _ :(˪Z\`.\}lb2-^\`., +?8 ᳹b.0n}N# n*LSv}_C}O.| @Dfޢ8Xom=V8&NSglqb)5c(L̡B-5x Xߧq!nwR#wqzף5ڰ%􀇶ŘmCrؖei-$b0marΕxBОdc!En"PJ$X>6KPE7^hls Gx ɽCJ*isRsE-rÈa3=U+7T=s'rh!X`i 3fXeꠕMQw+3ZT|DKJ/`ٯqrJsE-lQT0Q@Mq,˪C7IP7ՠ5{kvvJ$ %QwoyS.PL>ʢMrԂ}C ̅/<)jG@H 9ZFڣViЌ-_i6QAoʅk!9 iV>\p;mS-@+ň9jkWZ +E r +##<7#1jBNT Di2QB7[I!DhөsB@A@~ .t-E`c%,O?BdYM4Gu8&Kכ$~ ̅s68V"K6ڶL!rlicr RHzR +ܗEIYTB-\u4h dZ ֏^}MshaT]{F0!Zd-ZJQ5PgkUs}\HɵT3;0Qhv6Ĉ紇 Ev!~.<:!Qe59_{ƿr(m\?t6a.^ -sg@LWswa]ʼZl)nǾƼOfu;v}uPwS- +OCI_yjp6}wԹoʅTMaG~XC1nM~HǡPJ=!%q>sχP=Mўğ7.f(Q]fmY6lvT̸4"D4$jm ps-dXtQkg|ym#:q[-?@]MoTf +Nks0ɝ\M[F$==3Hila/p]sZ:l70ǙV~8'rAJZ#9O-x9@/1i_>L8]6;SQvJ>F`}*PZ|aʂ?\0+(h+H)>a|e!k!ܿiccg}\A.O_ ~2Xg!PܰL9hBgHHBg"vz& C ҝ_ +i] ~d.M QVȠ52k4o-e3>B_H t^ 9;|dUʅp/-.MU%@/YU%JIXc\xO;Y:H^E/$u]ֿHs.ZHŸ%UjjO"e.S @&ellAH:XҗZ5.m.MX?ׂHh΀=Mq;k! +y @ J ZȂ5N~l)NbKz4 +#} +GkWȕL̅U(Q hnP̝F +:''(WB k#AΦJBGK3z~<Т0iv݆wU a_80  +y /\9Y{9d.]1ާSVylj XGi̠m멲> o bkk/̭LSH\`-|.jEv:kza]K` pY27e!ջ<\XCZh ˔pAL0m[ie]Pu]&r7Ms~"<_⏹ W|\\HL`csႬ tX;HW۔ޘ5t|)-p _# +Z>`PQ{sWiaB_Ls6:^ՑI֧6[JoPE`-UvyҤÅ}8` 7RTuxἁ&-򨆣MU7&7_ڑԯa@]Lw+:5%;Y=nHh +V +// Xq +S;үZX̻:vSDW\ϓ_q@M-Xy !NFN~+3gO2kTR_Tzt:d fu7I>{{వ}.tXҼ]eB;Poo +[IEz͉WD{ PffPgjB-ekg6{$! B?qgmS|ԑlӣp%GM N[j܋Ƿ#ڦ +Bk/}s4zױn{lޕ kSV7ӂ*"!pxkkf?^$z7}}xB˷r! #gܹBW֊iv\XbnKs~vZ`.+rqk3{!+{_ѿkoPVP3b>Tlb 4 6 <>ٲVYnصS5::TF\{j:@Pm';k,<)٣)d.0^SZ5"h>W3jG2)S{%iχ.#8!-4])]7dX=`"Df.0^q~xP4``{ω:|5teѴ%55^Vt뾬W sS`&-̦̠^P"M`=^栘 ̅@u:%%.P\ Q ;w$-H]?AEDb.0 v KDcP`RIgFO2 G|Q.Ica #ESxsdBZC 䄣K@ԗS)?[qD聤XRE #E.ܓ}W$@4fmDcߏ=j\2a>?y--:kqHؙh\p~gmc-/M<WX>-n!EnwH-dCY|K>6'i/\8T9NoB-y.w3#U@RQCDUFcm`.0Z=Xllp.6vQf'lU-rO s/y5K4gU/El+t;vрi9.6΢Be >ֈ>P[Ѝ6" ?!x' O/yzBbmZ\|TB*S=M=h4^WM&-ٴj @iU灱ٰ:^ S&HՂ񌵁ra>p!=X[w(C&d }Th$,E*f&#$NJZN~\au)jmeJJPʑF*zD 6/1a$MA-4Ez-}b 9V;Yuo#X6%A,aAϧT\XzP"Fj!qJZ0DyَST>r+˺C 3یӢIjBnB|7TQ ԮiێO% ? :"ia[ Ǻ@.!i0rF!!%"HB$iA&\-02^8Ov`mlm'+l)_^tj .6ڵpp!Ux\bW{s*CViB?%֑"uXDr:5悍r#$BPB`1r'aW[7ږ\] 4ۿLiIi$ +7k69q \cm X` +%b +_~!Wܙ *]]Wk*ΚR;tX5v56,4z=ihsd\J<5Wօ\`.q:f(XC4XOf(T/M!jc"^h^<+a$')ʽEe:ɠ)ǻef393 L=z?<FN(CRwzKS`DD+_G +y#-1kV̅ȅI~¼y.PzOXѫ6& I(Q WjV̅ɅiH pP''-=Jx߻2 9\0n&@q- '.z`•~h\xŭ^6HWpZhˮ/~AZEbɠd.0~iT_7hsIZZ`:sQ9\IŲik_qa۫@\}=L s74%&c;ܾI r5X/w.D@ͨ`.0T ՒR]ynyJ ,[Ҧj.d':닛0~6H ЩNYi/$0}?m&z)GKr@ҝ 6-^έFZ{,> +stream +x!@ +QW4?uO4U*J 0#$ݽws~s~ߗs6ƌ1ZZJi)E)sRʔ1 +!sƸx:endstream +endobj +5174 0 obj << +/D [5172 0 R /XYZ 85.039 781.388 null] +>> endobj +1402 0 obj << +/D [5172 0 R /XYZ 85.039 761.463 null] +>> endobj +5175 0 obj << +/D [5172 0 R /XYZ 85.039 741.134 null] +>> endobj +5176 0 obj << +/D [5172 0 R /XYZ 85.039 431.141 null] +>> endobj +5177 0 obj << +/D [5172 0 R /XYZ 85.039 431.141 null] +>> endobj +5178 0 obj << +/D [5172 0 R /XYZ 270.807 114.482 null] +>> endobj +5171 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F66 3248 0 R /F72 3974 0 R /F18 3977 0 R /F75 5167 0 R /F56 2898 0 R >> +/XObject << /Im1 3965 0 R /Im7 5170 0 R >> +/ProcSet [ /PDF /Text /ImageC /ImageI ] +>> endobj +5184 0 obj << +/Length 1398 +/Filter /FlateDecode +>> +stream +xڥWKs6WVjDޒ4qh8IzPJHXbo!I(/ԩg%txDžsPN"p"Dz⭉<%E*So"?߽\.R MWKf}}sTB߷Dk/z)-ztJoO_KR4`-q_-> y|\Tb8xBUXXF5V/HKЀSe qpeG([E1Q$fUN<`1p7+3* S]Dv/7YW-[Ta ,%)puXZ?kzk#){ 82G@ }}.ʈH*'RoYpEB [HlV!AN:g޼ALQ#Tm8'{SvqMUBзSH0Ѵ{ܱgw'#ɮX+[7M_+6K݅ eo'DQ áwQo`eM  `:>zdL3D)ԑ=6 ~fz6CaecL!.M3@b"vy-6lH;H{s{B{Hנ"c +TP~S_k9fg!"6'|x[>z3dGsC2c̼{~Sr;ARۃHְ rUrY j6#ER2 + +bԹh@1Nկ]A-0Ĝ!/1vE/B0!> endobj +5181 0 obj << +/Type /XObject +/Subtype /Image +/Width 780 +/Height 265 +/BitsPerComponent 8 +/ColorSpace [/Indexed /DeviceRGB 31 5190 0 R] +/Length 11734 +/Filter /FlateDecode +>> +stream +x]b: 4i!_>ɐ}nmVnK!4vln?ݎwMv&Bŷ- `gZy, T>N0>rY,XOl3bsmyIXd _`Kb$gc1 l;/^`^`czy6 lX/0/^`^`czy6 lX/0/^`^`cfgʘ~^j}҇ZJ|ڹRUZ'?]Sup2/^ +!848>BC,feɾ}Oܓy߭g>W; dKQM-Lʪr (pdo ꐭp,ba(Ц4 \c%Lp2.׺hZO7^!D-m#8:)S xQQv h= 7 =,6CGl\?ǿB @K^x!ns u>f|Ϻ`AIWzN.ߎ4J0 +~yڀ`Mhh"~EX);/ <~FyAv{F\Ѧ[}TZy!; N {(△,{zlBnC/l vOZKX(auB{NC&cw*p#VHͤ{~F?cK },(zGrB8$mg4?]/wz՘ ݑ|z +Ȃ^p&,,e}Ud{;|´1GE쿘n cUD;xjI!vamwB9 GBe&KBBm#@1^/Pʱ[(]E VRt& j93} TGp bV^rci d7E,a@oԭ/Eܛ}Ȱu+َ5z\vi1g +zam8CgSx]Krrd{1.|| I؃|k>Y?MM-6 _B:]!A?]LuCI`FKP޵O8`ˏnSrx hK]B6Fu64w6<ǂ PN._ GT/C$mdi0KaO}*b/%J*[Ȼ:f+l윕$'X@il^_.QѨJj`ֱp]mäZjjuܦ|v=Ǜ*)64Y#1/^ X/1/^`c^`Ƽzy6 l ؘX/1/^`c^`Ƽzy6 l ؘX/1/^`c^xğ&0ZJ?%'5^pV +^(`n[4o Z/3'C6 ?Q͙Rݓ?n7  .QJS^`,0/:TUYe1-2f` 73\\8TZw]n y 4M>z@zzy`!A 2C!'x3-߃T| 7^ĉJ 15\r|-m5EX/0/8^ι,qeIVF%E' %0yQ~*n-}Lu.&$ CH <ߙW^8MszB0QByxak~2X/|7^pٗ^?łcżsԊcyA- ȬކՎ-ڨOO% ¿ǂR8*#{nKgm o28?վ<ga7²EFbոEf oǂ$^8'k/_6 gas19owgTz"(q߱ܤUڰ^x3Z Bl`4mh/8ތ~l|^+7HN&ulĂ9,YQ()_mYNwzil2/ *P<$˄23QYRe;yA86s ;mGJb ^ X):X_CLDRA +S{b^x /,ƌ0`NK>: G.qbX/U/$hc.B\V-ԋ]X<>!v߾ad^x/i|n|w4 +'y^xЎLo=jΤ"`a\r#B )5ybĝÊ'Xɘ 6;P)JgA&v\}ϬƯ7`PzJB'0,gH6C "=^pZ_ Z `gy +nv590 Zɓ/-IRMBQ%oQ޷b˃&炜nJ|[KuYq鉪]+HzLRe5e.ޮV >h兢m`ދkSE('7>P봬>Jr__~,0/QgMb9 !X M{pmzpP +aanN3ZWOBE!Uc$(4ۙa OMS_g"sh0#ȌdH4%2#PrJ 9}I:46UAc\kQAi^@% ".,'z_*  uYU)1*DuyҞ(sK3k+mpse_2­G`-X6,/5E.#-%U. +Pl?B#y#i ^H#yLQіچr^e]ū ЫTuAbt1R#x<·)ej D6 P@MGBtq.2 S{?A@Y BV(O&!e3ij NH1<6za,n3zyደ@-HH(iUכUtuRy$*2SyS[wr6Z‘7"Myk?HNNaL2!m4%/Lr詜JuX/0/|C,<Hwhg!qst=K :b֧V  3cy&zB_5i8XiKI97c[BVI}xZ,(EX/:^`ScCX?)> +1YD/ShLgK vmL9~./H'kV҉}lY/x^"~/)*kGBҚtyŨ`WbAպ-)imiJdA + phqޞ:ٱKk.CK.^x᰽_}1,W%p, Wтi@`6^>!-E ۻ|6^@r/4-/(3,Oތ4D6^UκΐiS= +ܴ);4 uRe\e4`{XPX:)"@V(#,lѠy :}L OD^0>:wÂ82}1rtގd[X.z!jg΋y+0f7^N׈o SuQ^ u&-R{ֵrLZ**YRk(,5o‰zx^uÂN 4ҿpGFōSa *|x [n '*eCt}8 .mHА0/~b,0S?e;}?^Xp[:,<$$A4H[_%ư~GXab_ܿX^x wW?fP0gdw)1K@; ^hd[M^0ٴ'mه'jնXsm;,PB7#!7klX~'/,wvKh Ysqt>dBĂ/c6AhE@7J5ū$;N^xʼsI6%e#wb_(Ò v>#x+szU߰r zRiUG?+F#E +mSvvkf0x};Rpw2t_1C-z^ᄯ锝OǷ(yxW*!!ϋb1*LxgMwm 䊨 +sxl7c+ +$p~ł̸y i.*C|Wc5f]o #}}*/ KQ~*h)[J㑾>N+Z۰<,JzB+C'B񂄮Se,|c@1nGZP1X/6^@,t5m`HCX`x!yG^CE'1X/^^YK+%WzwнY/0~^(X/^弰9ͲÛ(70# dYT%pܿz¹9&;7%AV陱z_;·oTϕ_;=Mb!M陋x\Ix˜X/0/|;,t"%rXj4ƃRJpyOϬzy۲Sx +KU+E={Ϭn VoY5\ rB4Q^1) m2wBlL:471[naVJe#1\μE#psY(UC^`^X{R`ij=_*ъp0e-\ GaڹK휈jnki/Dub@+g.J:8_nEPPpd6k^VBA tD^"(GjF,^X,m.=$7etzߪ wXéiʁDUF}:1B^੧uC}sZs\!bA"PZWX/ ( % ̝Gt]y0/\/ ԬAc쨼7JGK6j*>.k&H0 ӎBH ,\nC+¯ ]QUeњ\ʝ%`+ܛXFa4*kHDӖ~ h=X`P@FW0>Z X/|^wXХà RIĜO,ޝⷬ–$b--N@mv,UoC{갤elUJSX=Hٵ[-X+*UbiQ7 &ZPn")>zZp1녴:'oy1HPH1Ʋ./R p1ļ6m)R/|>b +6:i )aaTҳ T!^ +H-oBKLa$Ur3cQS>@'`NGRQ]bMdSr[pG \wPjp׀r")tQoTp&ByXPi*ȴ(㢪2M@& ڒf Q\"@H݈( @ǧݞ7pNNΟ5P'px!ޔ^u5K;)ɓO>zLRB^lzuU?xh:&b^,$Mk#R]%b-W tS.7`j9Uٷr ÷.^AP B<%,4X輍w @0/ 3k:^"a\ƈTtB?gDp>1/|`},$Bs15>,ɷSǼUXXUҦCxvDp=ӷR9;D,˟2EF0X hΏAXhKAIENk44IWn_||Kazߙ=yPHʇM +b0,^xc^qaC+Id ?`bwh}aiB l[f{ + Q:'GbaEXX^El%^ +դ:_hDYTJGj3lC X/|qp߇b(V̍HaNDJ6"*;UsUwxKRMFkg. ,x HduIt0[ 6B"8 UCe 4Zv cVH|аn9 &LT SF̣ ܴN,3jŒ0f^;H#6c!f,ne>(z7W&N943CmAJ}QeU76S@ɣ^ 2;bYs;PŞXχΈg~UT0Ԏ*4ߴ;s,@) )IwaABy)^ cwF9†qB2h #3a{ Y(= ›ymߥ yb$ɒdҭȨŲGĂjIHJm&Ik-ރ ;/ܥ3X s]QW,Ǫ:g򂶩fY7|g(M\N~0 ;^blqHŽ@eX=aa9 +7^$dp|//0ޒ eqr.H/La 䃱4/ 0_/ ()/$G +h!(EZʳW.0fBiM I, jwH-7zK_kb!Gڴ3S0!;`΅ ^>j8w@iXiL zXmׂȩ 4TgB<.`i^h_j'v4fYUj tӣ-]],f5bNatneiSc.tUՏ%X/<5:OI9{%7h_G< _|[ЈmݔmUć\`0x팬ާAnXba%V. 'S+>XIϽuX/V6 !ݱ0Bh1b1=Wj`QHW^Hqw{ /\CX]3yB/wRRimya>n=[n «}d + J%6BLݝJ'F+g,l^Po#7`a.6E'9md5evejBVPmG^osTٺ6ZD+쾐u]?{zߜ>zm&Lvgcc?.a29 +h&uig Aӓ5JXZ`[xl,\^Pآ:() h% O&c (Lf tDpM! 5fQs<0~ j B8E OCPF&v@E%I-fa10RNkc@uMJ*b`YE@XXѰ^;t'm1heOw$Ʃh OWi,Xzĕڐ rbŬR!\8MFza򂐝Q(m/8`VJ4,nAlVLa<񊃮P.I˃B@ +m 8SHݜf>BJ*3M=N2dPunLT+`z T>K$G,vB`M!i眛傼M0҄C +`L[Ї1{@cSwp9#e4$66+jbpXZTQ Ⱥ %y. % [>h:I7#rEzH,ӸmlXUA?lX@YroP 7tcP QHDkT# KR:\`!*@XX/0/&ZѳlX B+/0 &wKG3.>Q| mHhr ЍUV”.5")peF2D },QPia#mGRNeB |t( χpX)t etSҗdcgD3a4wXhz)a^Dݟmn o= ykV4i2h 2 +΅`LA8#BפJcVCHS ,tgS +^`^M, l͜¯4%JP4]^Ԓt4"tsk2ʈujO= B/(˥h'MH0DGb^Q,(unڗ2ʘ2 4a_jX|~92WiH 7{C>"OX/0/ /@*5[n I +/m }:>6A`a5@T^`^,|^`^`,^`^`,^`^j,d^ܜy?^`^l,EQޠߦn_ 7kL/T孚%OjBlͯog?T/(ϳZG·1/|/0n _ X/0/^`^`czy6 lX/0/q۱p>^>}y:3ۧ{IO taO"uendstream +endobj +5190 0 obj << +/Length 105 +/Filter /FlateDecode +>> +stream +x@PKXB0($;Ewιz圏1J)k9}Zk!$dcb9RRCc\kx `;/endstream +endobj +5185 0 obj << +/D [5183 0 R /XYZ 85.039 781.388 null] +>> endobj +1406 0 obj << +/D [5183 0 R /XYZ 85.039 692.47 null] +>> endobj +5186 0 obj << +/D [5183 0 R /XYZ 85.039 671.274 null] +>> endobj +5187 0 obj << +/D [5183 0 R /XYZ 85.039 588.986 null] +>> endobj +5188 0 obj << +/D [5183 0 R /XYZ 85.039 588.986 null] +>> endobj +5189 0 obj << +/D [5183 0 R /XYZ 231.163 272.327 null] +>> endobj +5182 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F20 2873 0 R /F66 3248 0 R /F75 5167 0 R /F56 2898 0 R >> +/XObject << /Im8 5181 0 R >> +/ProcSet [ /PDF /Text /ImageC /ImageI ] +>> endobj +5193 0 obj << +/Length 3471 +/Filter /FlateDecode +>> +stream +xڵrF]_K* Jٖ,˥h~H |5P캶\2{&S$t=?ĉr$,'d 3'J f2=CL^:]nOo矧3Y'T97<:|y}{y}s7~&s@߽z_n?ZL-Uh~/d $}:\?M&\ _ɿV<LxW:q~a6qzA>ʃ}e)]_i@/]OEb=QM/K؍R=MU@u[ӀE^>6}4f&{hm09l1!D0r Z !ySr O-7fSlx΢Ngf@-yh8iA,}NQv3/*Ts̱P,ʑ +PrRBi־Mv-.Z4l }6j`&m @/W Q!DaZ +w\e iDO^Gڙg}#?:P4Ci^]4Ro ħZxYT|y#LCdVT!!yQ!G)~u7fpsW 422H9+쩠̑˩r-b2I㡑SdbyJkE pYpĭ@[e2^cIao&I +]h}&'&H>-vCu8+$ lZP{̌;9̳KL֢e!!$_KTʛ,HN#bCIci{+zeXW-=A`꽋\'0%;EUt[9ޑCcOFz,`8}a~ujE?Ԏ &%<0M~0rwƘ0q.ysw }1F2pSCf0F,~@p )x7cRf^;,E Ksq} Bհ8jhi{d=IY9YR]Vr'h+Gql {S}⹜1 w{.ɠklY[hثբȇnfԦj3̹9t8[|-e-^mf>CDfC6dc{/,*e9H#H +:!`A~!2odaRݪ+.Ċx 6Xxώjwx9=r&[N6i +Tgy>pD A|A;߼^1:4o'\+GȹI(`os,8+!Gȶ@=UĞg-puƽ#.;|8T,D3z9 N Vd%K4_ca|-tLE^4>a}=֚e\I6Y/E`WI`u^M&9ơ4UgB}"t9vh00(jM-ouD1(ؾKU0_Sq1 /%A+)A3et1,):>uCV҈.s߉(50q#Z/gTd + :)R;,~RY<E&ұ;K.Jm`_^ ٗ mcc<3Syk蛕mͭ*ZQK̅as 00/q]dsօ6^YN<"^d` /*[]؝=5A5j6K12Em窂V}& tar:gә"ڥrnMʍX& -LD4(A!ژ%] r#wER`ix#S[1RRDt5Vja_j9(ԉJ8|Q@grXV'Iڱ^gpߵ"3~>@/DH# +d߶\$чmP2֢튲4>ٺ~[o +1/J}ew?/,ZZs5^{9/C?q)endstream +endobj +5192 0 obj << +/Type /Page +/Contents 5193 0 R +/Resources 5191 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5179 0 R +>> endobj +5194 0 obj << +/D [5192 0 R /XYZ 85.039 781.388 null] +>> endobj +1410 0 obj << +/D [5192 0 R /XYZ 85.039 465.898 null] +>> endobj +5195 0 obj << +/D [5192 0 R /XYZ 85.039 445.901 null] +>> endobj +5191 0 obj << +/Font << /F64 3118 0 R /F72 3974 0 R /F18 3977 0 R /F20 2873 0 R /F15 2884 0 R /F66 3248 0 R >> +/XObject << /Im4 4874 0 R /Im2 4154 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5198 0 obj << +/Length 3170 +/Filter /FlateDecode +>> +stream +xZݓ۶BLG?'v\gՖv<%G +I| $eIL.o Y,AhYl +gJ /$q4SalױAdl{g1SY0$+=޾{}x} +{ *-~~noDo3 btʐ_~%@da + ld_]fXQliZԜR:0J6Huf ([TZx˼ơ+{yUqcYQW^5C}_x?pʖno_t)=)HC*;ABGG["(vy"6=^A)K +_zCAIx6&^w@}U¿N\fp#[;^򰆡vlV^7,-*+4 Wj- 3`[U=8H[%$ZՒD^i9|@vdF;.6 @:Ans`-XeSj<9AE[B)/Դ%2d"-睘μC^uLVAO[k z- ;].Gn큷SP6xb\>$FILLla3{A{SߑNUm1~[pV|n{_* <ȚQsr#I*=+`{nbR<  WIGn}||DFqgIu <~\^f[b;^Fc>t=NVmsHx#FB !9TF| ( ,Y|6Ԡu(^\f:ʷ: L `pq(c>@ӉLf4PBי +( L( \E p8;b' sHA%88X ;BtzdKhX1aNĀ@ +*xr=@[S>py 2 .>UqgUv*PA .w;cd=!8vcڅ1Y, pmj-_eSd@"vp` U[05,B^0\֓}2qoBo ҳzs&/90?,jTʧJ!DiҼJ5M`0Ǹ}$DC2ͮ)e1 +JR;7O -Fϡi}7Y'(H}1b, "[fz4bVфR T?"a(xt0mֻ"'-! JEiBOq+mL`Þ - \ Ȯ;'ޣCzJ3IcEW%K2 +C@J#=z _=@}"$"9!0@M>,^Ԃ4N/Utų; h$!Y- L8CUWŽCu: u,b)jO~r"Zj"Je)aHH1<\y@M#|(;':A? P&Ĥ+6`ҩֿ=Y2*|.ՓK2tM+{DpFͿlҀW/389P+p~r"Џs"DIzpB MLLZy-&np̎xeNhg9(O݀s!Oar̎ &xINޛg7<ͥh% ҙr~_=%GNe <<B0EDA'%j#b|zT|B$Cnش Xrj/ܟx;:gBLнg )Ib & *ꫜkQ~UŲ9Q-eCe pgThU!L}S"+uqd fۧNuw&tבPC +;%,d}4i|ϥ.(l) h24#`mhXwGA~s1Q 'K:0=I7>h9z4H=`)pd0MbAI/T^z0r`.]n`A$>Dh jqSO]-K#̏pSt,~&^g!go஬8-|Y-νP9M"r$\džTmT"ތ3Qb츜'o'5W=N˼VsWi=Ӑj& %g鳣P7\i7ue9i@_usU ;`h evx[u|^GXZ#h/o _t4o=3CnP!IxKΚT-*sLylcBKHeN +@aq~R#ǖS%̽ MDq K˦u*g.t[m婐ba~EOcf= + 6aEx2|B^E[?6<]::oiw@yX@,%IP=EHoca:Ǯ/v<b {Š3@G-^׼z/{~c??e8J⦰yw)2I咁MJʾ2 e$ O+ Y  +[FΑ)$)'Bo6C V7VNL6ɜfr񜜟Ǖ/-&kc$yt/x /lY_OL i՚ԾZ65 eSendstream +endobj +5197 0 obj << +/Type /Page +/Contents 5198 0 R +/Resources 5196 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5179 0 R +/Annots [ 5201 0 R 5202 0 R ] +>> endobj +5201 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [424.243 605.692 454.872 617.685] +/Subtype/Link/A<> +>> endobj +5202 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [155.951 592.143 306.851 604.136] +/Subtype/Link/A<> +>> endobj +5199 0 obj << +/D [5197 0 R /XYZ 85.039 781.388 null] +>> endobj +1414 0 obj << +/D [5197 0 R /XYZ 85.039 761.463 null] +>> endobj +5200 0 obj << +/D [5197 0 R /XYZ 85.039 743.459 null] +>> endobj +1418 0 obj << +/D [5197 0 R /XYZ 85.039 241.642 null] +>> endobj +5203 0 obj << +/D [5197 0 R /XYZ 85.039 222.973 null] +>> endobj +1422 0 obj << +/D [5197 0 R /XYZ 85.039 125.442 null] +>> endobj +5204 0 obj << +/D [5197 0 R /XYZ 85.039 96.038 null] +>> endobj +5196 0 obj << +/Font << /F64 3118 0 R /F20 2873 0 R /F15 2884 0 R /F66 3248 0 R /F72 3974 0 R /F18 3977 0 R /F35 2888 0 R /F73 4000 0 R /F14 2903 0 R >> +/XObject << /Im4 4874 0 R /Im2 4154 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5207 0 obj << +/Length 3775 +/Filter /FlateDecode +>> +stream +xڥkoF@q!b].@KRMKOm?0%HIqq?˥D;A} ggf罎/#_&tqqr.",=o/J8 +݌xL}y57/-Z .278xϫ7^} nnߎ/|g:tQh +$?].P=0D|w%՜TCsKP23Qh2#pa`bRR¤A`zDz :"oK4SpX8CPd0M|wQ P5vXAdvoQtW'=G`Ƙj_ieyYC]f[& `Qqhшs<<u!Q! u5Tݾn*d%z x[}s^DPf̫O?~ +|Z>jRrskyvtc0a2궧/<^qY֍U;:oD :lHѶb/F Z؏qC|ޡV%q`@po{q_n X0?ѧ&®ڭ& 8^$1]%tT]&łJ>dA)&:yB"}dR {^E/U==# eTZ]37Hkbe>d}oLQhʁv3^&B-þ<s+Cgy,*#LJ|,zS2 { oѕǔ aژB]j2ozBKԁVNϛ><}*Omi5Ν4s5H͚S+^ 8WZƑAS}V(z)aN`@ &[ ;jH^E2ʓڪ'sj;w]kiʔbbkځ` ͠AE&L0#:xV"a[g[-0$R(+ ]0F]]?Dܓr%I7G`z`(G* y۴/}Q@~>?5%U'"=^i/aJ0/}.{aM.U܇;T{gI&̕īEjVD{Φ')Pȷ׬*a]Rc-ۥiIO2m1Fea$AL,ⱡ[r=%'H.e +^DqR:{|Jx>8yZo4;6X&bg&ev }wZML4įgb*pb 40~ .7`JA.xQpΐS< 5ƥ'T|~&Vԑ9'A%=ƘXٰv3bź1SZcMZpW (Ez:kM\ȩ96D`%{ +rAdFzEѮDydcS, Kc;E&,r벞Tzײf|&>xŬY̅?rF 9mav>͙+ܟ> endobj +5209 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 538.171 193.25 549.86] +/Subtype/Link/A<> +>> endobj +5210 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [455.889 456.27 512.306 469.171] +/Subtype/Link/A<> +>> endobj +5211 0 obj << +/Type /Annot +/Border[0 0 0]/H/I/C[0 1 1] +/Rect [111.316 443.327 146.066 455.016] +/Subtype/Link/A<> +>> endobj +5208 0 obj << +/D [5206 0 R /XYZ 85.039 781.388 null] +>> endobj +1426 0 obj << +/D [5206 0 R /XYZ 85.039 374.255 null] +>> endobj +5212 0 obj << +/D [5206 0 R /XYZ 85.039 353.664 null] +>> endobj +5205 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F66 3248 0 R /F14 2903 0 R /F56 2898 0 R /F35 2888 0 R /F20 2873 0 R /F11 2906 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5215 0 obj << +/Length 2562 +/Filter /FlateDecode +>> +stream +xڥY[w6~CYj d;vӸD>}%D"~PL$`.9t6JR)th_nΤKy?;f$#Eh lkpt8Z20In:WNLng n2Nu0cLhهYih{4ZI"t Ƒy}zh7_}=W'QVHU8qfFБ:)VE GPN(ZQLxXI)8Ò26SD)ankpo;ePճ[i9c$EdL3OoL #d-GW5h::P=L{%ch-CΖcH <-g&8TIP\U˟0+E5wimӎU|hZTԓQ.r]rny?@)KLϨL8(¡Y#4uAJ `p| 7re]ArC'M"M[V)C $S(&:H"_dJB l\߳E@_^^0qUY9ΞS59E[VU0.{|(b#ST0 ^s̩ yB` ;aUӕ=fB'hJiv!M6m8Hu <WC! .[ qKڸ\'IbrXG<t֕զc92!8p}h"K8<ϐ{ .`m~)a( -t}cc0ss-AC_*W3Ҋ:8ؒ.[[5}*[cȀcnL24mi"[ze U;> DPCkyjEGYڰE\CR:^0kN~&[T9b&$RzvC(.{;7I25IT +5B^G&*2jo+:45&q)D4h|WiOihj,媮(}aI5+%B꺤+>f=dF7^d[䋆yW0!ǁ!9-]lT|H.2 w:G`{QXѬ=`JDfÑ\'Bս] *ݎ/Firgn:8wZZrB]8Iw}`^C1ҷ.e޽j) +C +hj~ e*N{Ws KFUFŶ2C'w-a-W: 4S f2[v{*/^;;ītꀩlJNs^M%~t܄7?AMi> endobj +5216 0 obj << +/D [5214 0 R /XYZ 85.039 781.388 null] +>> endobj +1430 0 obj << +/D [5214 0 R /XYZ 85.039 367.956 null] +>> endobj +5217 0 obj << +/D [5214 0 R /XYZ 85.039 347.365 null] +>> endobj +5213 0 obj << +/Font << /F64 3118 0 R /F72 3974 0 R /F18 3977 0 R /F73 4000 0 R /F35 2888 0 R /F15 2884 0 R /F20 2873 0 R /F66 3248 0 R >> +/XObject << /Im1 3965 0 R /Im2 4154 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5220 0 obj << +/Length 2599 +/Filter /FlateDecode +>> +stream +xڥYYs8~ +i1odڌ7Qy%D"ElhBK,B' B.D*IY?΄-?uuv> i.V7>&F-V޻oVZJ)Oҏ{j)ۊWMbTDâ!Ʉ 5bEU^T6olǹx/M  +"y37.e=,eU<[«j˒8 6a#!HG˷ۥ/#iF3iu][S +DzmضվAn/ݔƩ6+JeŸEVwpi"^\(18ivvu (^1p*wMk?[`h+fY^U o(y0#9%/p~+e(0$9 ,Є+5j@Z~(`D6/X)|ahXMGRDzm[R^d6W,I_;G批ejVVŰBGq]8-(# i%,EAޥB{~2/qcs"߇sju1{1 ]W6ŦO}i='Et&L_Ȟ 1`- +H? c۰D.JL:3MEt9b:64 01u) +ZFX)Pj COooRnꀎ.2_{3a2 ¢H`S ΢~QT•DbRD/Ĩ:!Du"_G本.<7&׶csjt#-J fy)lJD3ZW,Sg0ϙ!ynںӯ xфUOmaԬ(36pSe]$6NYO +(^@'A9ϘN:J쳻ba3el-rf1y `3;'d]]]DDQtJpQeO4%z sL;81ss5":gg)Dj<88W0F&#۪#nKJD8YѷYx0e^kmWг:Ͱ<$0g?'fxT˄*خ\eJ?J"d5vf I,w%'{BBg =gDڶ8E +Ik3T=A[wNrߺ: PX4]L_W9.p Ϩˏ T%ݽ5Q!X {:{y =B_Ge,/M?eFimKWut--9]#-ehg-A$>Ӵ]Aԕ-Iqqhm"#R"EK6hvZ\Dd:՛R6/:k]u y%2k+7y_P\//Ɩ;a3oxr2?>clGZC2V##e qy.HgCendstream +endobj +5219 0 obj << +/Type /Page +/Contents 5220 0 R +/Resources 5218 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5224 0 R +>> endobj +5221 0 obj << +/D [5219 0 R /XYZ 85.039 781.388 null] +>> endobj +1434 0 obj << +/D [5219 0 R /XYZ 85.039 560.955 null] +>> endobj +5222 0 obj << +/D [5219 0 R /XYZ 85.039 540.364 null] +>> endobj +1438 0 obj << +/D [5219 0 R /XYZ 85.039 111.433 null] +>> endobj +5223 0 obj << +/D [5219 0 R /XYZ 85.039 95.089 null] +>> endobj +5218 0 obj << +/Font << /F64 3118 0 R /F35 2888 0 R /F15 2884 0 R /F66 3248 0 R /F20 2873 0 R /F72 3974 0 R /F18 3977 0 R /F73 4000 0 R >> +/XObject << /Im4 4874 0 R >> +/ProcSet [ /PDF /Text ] +>> endobj +5229 0 obj << +/Length 1695 +/Filter /FlateDecode +>> +stream +xڵXK8W8Uc$Kax60a/$&q`Cv^UDjZݭ[GY!<Ȝsb=<({@|r,5"y0۱$/?/f8IP"̅g +oX:{7}3y3B_"sV/_~|ųD|t/d^NHr| +SXjr3y;5𮱬 ({ +2+xAʄߢXUAV-lb%*m@Pmx[u˿vaIjfɳzSv^` M9&4֨.KîmCnݟxA#/p&Lopdf;7-m2(Yue>bat r-QXKo]߻!}4h(,yXS:֢ר2:'Ok0&  Ѡ%b-A%9sJ7z͓)o.w02=y#O"@^@+?ua BXԔob9˹ v,,8,VЕ{ jOm AI +FĈZDVe&<Fm.•ꓩpi}V)b'In-t8jA&kD0G ɣ 508^XZ1 ` [W46^0Ϩ+ eEQPbvc-ľd,TH8Y~_j8YU cCٶm wNAk +k=`p߆rr"HHdTB.Sb n: *n"4\Q=͚ +ˣe *Հ440w%9L:ȡ#v %)j{W5*=/=ҿ߾Z(+,DdyjYnpeRT o:G YkeČ+{'բv_ څAv{_`tH] +;(v!U)Ve: H},}1![YpחC)~RMg(3O +Q ,QzzxFzh-rK)apPIbl|9] ޞsR-.N N9ev@Y90@Ԕq`9,~O|G2epČQog3N9g͚mHÏ5֞GoI8(O?ĕT@DՀg{_h%O"mX[ _ p +Pg8J.\/@A9j~^?Ɏχ!SBgI~a׃3 +gH5u]ǫ{NU3"w1e>-}7pI>޼-> endobj +5225 0 obj << +/Type /XObject +/Subtype /Image +/Width 780 +/Height 412 +/BitsPerComponent 8 +/ColorSpace [/Indexed /DeviceRGB 31 5235 0 R] +/Length 17146 +/Filter /FlateDecode +>> +stream +x]be1`v97 Mm@#u޻-$Ҳ|VJ!`{tY1CllX@y_lۮy影_:SbX@AP X YeY6ʻcAM/̈ƂjX@yczo7M9GBycI Xy. Zl7[eX@AA, ^+F\GVD}gɻDb!'X M' t_ B3:#gy +a!>g#^bWOB3X/gb 0),< IFB^@^@^@^@^5X@^@^8ҲY}}xM/9yz /,/csxm `3 ;w&y8RD&Ø0GDiAm +/4S =br4}6!L05M->~\|τEgx}g/JؖM@A1\8dgLKkϙ]4Iٝǂ7d1=S% (b0-J`a6^$wF^@^_^/& "ЖX0q :O@qNSE^8\4Ͼ>/#a^5"d/Ue~jy} + 7HCN q@^8ҧx^m$OHa#=rYx5w `l{Я/a3H%bWp8Ra˱Pⲙ| +&u95fS=nĠ2ūT [͞I;g#/F}KEqgJRk1E2X M^<Fe*f=V? ,| ҹz-Ʃ\G^Gw :U|%[3+K97ñp_il:ߔTaMT +!5N$,0^33Y]p]V;o`oF2u9uV_i {,0^$z'\x\~ވt)Tyx^U?O3Ӧ절#%J= +If(TRZB;o"f#ǛX|WőB   PdfyX s/tRG]qba#-1|?@Txqd&րgG2H g@X(,S8_icªց2*h6Sٗ69 eX4T U)*[9ܾZ}Z?3ټ5 ۈՁ03ąT{3H̀UXS5T߭78^4܏Ix,`gB0I)_Ш?Cixs/ۯQ}ǝ$/űީʝ;iX M|̺r:^Nsp8 P[;zp,B:N:Yw< mUq ` 7>/| ^l$1#uOWr˓OXc?7MQzk^T: Mj6Ⱦlk>='˞=;$Nx h̞_w܏ݢt#tܻfkPwI~ {3 /|V;XXwdگ3vL; ycX*Gs46/zJ y[fHнX@⛳u-9u6䅛7(J-WtlyO`S>!7`d i xMb9KyH>ia Lȥ6yZM t.-j`'× {m'^$cq,f#'YBwxOVs[\k HGB*fsΗBJ;ϟ',‰%a / ^ LC϶^q6Qyd`SmM)yyX6%t?2"T2Q1o#/_p.M 8$\Tu|od:+5rG,cy=H+ \G,S!tS\ϵub6QqSa =Vi^5/`WV{^`u̩j /p&,{)&/~3v!|w \\ۜolC^8}j;[B(+,z4q"hap +,lL1&_%/85q0t",@ +A i/~{2%qPDgt̄j9\»őx&O77 h kbWY tm»őD!)6XTk"M Jb6Od]q= gT%prQHWI.` /=7&#| K֞M_|g +e'=G/Q#PB$e1'K:U6:hSTo NKߓ#_0`˺:byyX@^@^@, / /   o,e֨Tw2u3fGQwڳZK]ŗ? k$]XZ%=i6R2۳mg>*2B?S57^`v`5AmΊc{crO\Хг&,#nJp~pOtB9σB,9/:"X|6y繜͸gKD3~6֣X|>^(g +XL I//֓8_l˷j吞z 3'^p3ca6SxHpȀp$Li4WЇ$Mª4Nqj3߃!G %p٭$=%/8dPxѺe)ī7|ّˬЀa6!N*=d4/Hۻ=^ oq Y_/ aD +o %#:0aݰ7khyacD C=y\l+ҵ_hU >V;?:hJYv<^0̹tҚlxABa=y4OЋ_T "JBꝰ*`3wI]f !L`I'@Xigx@Qf!9Q Ki^#e*>k؋|@伐k.Ua"? J8~_<ʎ*&#q$Tg u. 3x$uXƁ#1 6n9g< C( 2é'p{48z;6 $zNrBfSq$B٪Í&vL#xa8J$YT_*0X+^!Â|%"7RX`c׏y /x T"ʐ  CaN4 eDSTf~v^Mi//PC{s0 ޫ13!Ι.t@0IEd']+v|]iWЯW_Z4Eܾ^7dK,8?:/(b,m)mc+ T^Љa!hfb2q{!DO5PbY$TR Lo`煻X! +0]GU  ݉i >$ݬ =b;wga%A2Ȝ5t8RFN`!p-3=^PA@ f+/DXåaʧn' +t'[bĚذ)|#ǑdTE(XvḩZOs,=w@c?\\W{fb*6ӻ/9kVDGU1Up ]kqr߹/I8e`ZAe.lo>r*T.S:S1B݂r~^s΍`0o]\zy~ALWB긑  6:7)_$g}OP4/ ߕa9ca!Ί!5m,WTExD8-o@VyD&V5HRB`?Ϳ AEb!LXlIkliC@J\|a}f 2W=,яV>/ jN}&xi>nO; fO L\ \ՒV} +t Zs66q75{‰ ,BdjXXk5@gKR %'ˊ8Eǻh} O95DJ<\rZy. iVy4,$tB2'x!zo^uv^#Сr8ɣ:ːqh|;<X8V9{^p!Y&ryN Rsmy`AW%G YP,=S6}^0'yscK */r@x/: {B T߉eÜK8RU'XҖgN7w&/w΅B=ǂB"O,Y!^UI$0˲jO# IK==b8jI$đTL[ǨHXPU$렖]IxncJO~ Ž]ᑟ)KUއ$MHX`#/!=2%KERP}8mGI!Hl!a/{fḕ&R_(IbyˣlBEM曢;ݜƬJVsSI^TX.!,P c@[`mR3^Ǒ!eUNiXwbPUTן6">9q/,^],CU{`g 9A]L(7`LarjG0)q4>:m#z@QJ9LϻX30K߃B. Xbk&4 n&nIkl&f/=3 %M<ԴJŪ3ő񌣃}^rvΟ!?8~8Zo<=qL& h)8Vmf<RXx\dMaR@ELPhϑw]xQ lc)|^qI _ނ,& P/@ +f?> +_Ɔנ 3罱hh0I͞ڜ@py^O *~Pps$IIR 7,o ?khXxD.9\~nb]_ 38tbrH0 0?bXH!P ;Ig gBOL Z7u'iܡ2@Qt/> /Ⱥ5j4V UInmkuX@^x{,\VH'$F?5庀42ֿv!s-4g ‚O *I^"7g[fZC'&+T5M)_Wyx*_~{l4 VVAp-밀XP Uf+ 醆YdtuX@^xo,8*˾ sZ-^ZG:e>]lƘc1Էa.iWgO 3r[EΥb֕뎯{c!W^cHnR']$&IrgA% vQi!&Id {"d0%Ot*랻y:#Q*M^yfObCЈ^r ؏p2m;DgwVT@/*Ҋ<`cJb!Wmx֦4[a2_C*AfcjYvIƸ~uRF~r /= =:0 ?5c#?0{5G|ThΌ5k@&O +pT\m+5EX0g*E՗ʨVNW,,V-FM>A$;LǑبɧ -) wjyA/Xx7&WNcJ:w6def7xJa7Dj|JèB(!Zs|J}ѹKPA5H%<-|gb$uBOV8,/(7,eP0bf/1:s0{;{,MvCW~&e=w6>h\; Pκcp,jKCo 5yebpDa'boF"/smsS($=:/Hx.*eɲHzzL.袜~,W],,zh(?! $/(x>3trx^h&^Oj܄GB/_XWhy2HӤf!KXhŸէչ1q1nibVߘos5ETt,8xhk:.o & ]HFL,x=?Gz(Xi^@, / / /<11iyV^`X.w{b!0~o hxay!`!T}>;j~4\ѥG==m0w GkIRny$E+U= +΂D//]˶~l9DtGM`̒uSi_4QWM9xM ?v^!%Z4=iA[UH"7}3|' s?T)~{$ԴB&-CIǠ=1-@HG >p*^?Fl+U4D1oaFtmsZR>o$2!&eK2NŪJjhUꉮp/,)cM76 R%H`!O>ym$ba6.az;}ŀT’zNk^M^"gXQ,l&{{ɉU4g#q +^,ĘJPWgܜwf h#!if +5!,|`6z XAaL#bONo~c;[V^8i8`9q֭ݎ K#͏X@,< ׶KR^<4〰Of4\,gȚyvPj/3X@ XC k4mf!`B'1G _Ov06B%-JX-iNf4I/E p,MErmk0vQ] &Ŵ;jJޭG +oF R,$f`fW658R® _\L0mv&N45*&ܡ _@?IƂX@AA, PP (( + +bX@AA, P OB` ߑv0QgtF->ڬ2 rۋٿ}tvki>U 9Ul{&qO5LZxv_di@,|GB o +E2 ZKl4dK`w}0]٫]P##N7Eц:]8u?^!{+ xõca:b!X45o@)QQR3U .?|Ma9Xp|9bl&j kncܪzebϫ{ÖU,xL?~ǟq{ ?+3M0i1^0/D̋X覵+V^7_*f|U1ֹL'%s*㆝[,y.m$ÞLӛ;3RbW|86@IKX?D}9 1kUMpVWk =Wh܈3N:h47XfeqKB?SAƪwA,|M2/3^ ꜱ6o`u08C _Xe6*\+#lv{NfyX")s5@2Tgʄff/E! ^rGtn 5IGJ"?Xd0nyEt#|p _RUlsA#I6lT%Gfj<$xy D.x/""<iHUēt h +0{ MDFٌؔ$5“u!p]'aQcׂ.bf f6{ކ'0Q 8;G^E8FxjHyU{uT7 Ǟ9pX;5pB ~/C& H _zkS/W7,!S@?7F-Wp_XS=^8Xe + +x̜TFU:#| ySidkI< /{IC1gP; S zZ8an=R(“2S@ܒRD|3DķVBK!`/];W$TU5Nt\N(;Xܞknζ/GYBzR+P"", U!+6{,ꞩ K +*$45Y=B$G{fuRp +ݵ-GcezEK(ΦX֩M֦R sewdbaU:"m^1),X s4  e ̬V Kk:@tΆpA@k<%}ieNھdJߤZIY`;Ccia|hgwߩ w_aQXZGTODM^oFʳHs{~AhNGS b]&FXbDdYa?Y\CϮ[JqoxCU7R +"Yt]o͡[W X,3CUхV^Pu pK ^` + M^V)/X3 8ތe)7ѦϵE""H +nC*֭FD`o&\b >J\y`D=hkٷ "^dݰ6^cd"tprC;t:&xt &r`<O;(Ő:B`T2o lk4 7wXS'oB[7X0yGkh7miF5Z|~h;:y bXfX׼@C^3uXs_mWz^ u2'Oz{}lR j\Ý]gT?_ (/t*:6 v68^r? *w"z 5u+J^wtX  y<t&Y…Z ȵxT$ wrj Fv1 eDc_6^ Uf:{/q1 7 A:7yA gqG,|)dxDY;~74ĈǾ %;٫}޵7-:yFZj,:j +ZGg + A{:Da6|w ʰg'G^`|IȋPKuyс_Wah^h5d" eGc-^P-B#}}~3K\oB̦'.{ :0W:TEtvfۥ?rEܭ Fj4 %{iU__¦h$«׼R*試^vz_Iq\Fs[kZ OPn(zT";]+9;ZW>1x(/)Mܸ}>-:Q[ۉډuG!NQ7aj{ZRsG:1 I bBO3XNI]g顳K4^o׶KT0 5xA>dòa2ev3KǘVg1{h`OܫE@7#5BZX`Oj%G +)զG> +stream +xPSEQ5(K]A4UA{眵֭cֺ.|gssB{)sB9WJc!b֊1RJs:{endstream +endobj +5230 0 obj << +/D [5228 0 R /XYZ 85.039 781.388 null] +>> endobj +5231 0 obj << +/D [5228 0 R /XYZ 85.039 625.245 null] +>> endobj +5232 0 obj << +/D [5228 0 R /XYZ 85.039 625.245 null] +>> endobj +5233 0 obj << +/D [5228 0 R /XYZ 251.11 161.585 null] +>> endobj +1442 0 obj << +/D [5228 0 R /XYZ 85.039 113.315 null] +>> endobj +5234 0 obj << +/D [5228 0 R /XYZ 85.039 92.118 null] +>> endobj +5227 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F66 3248 0 R /F75 5167 0 R /F56 2898 0 R /F20 2873 0 R >> +/XObject << /Im9 5225 0 R >> +/ProcSet [ /PDF /Text /ImageC /ImageI ] +>> endobj +5239 0 obj << +/Length 1494 +/Filter /FlateDecode +>> +stream +xڭWKs8 Whrg*O=L۴qOm-;ڵ-W ؊3E |B"'0 ISi,wl`D8ȉDMYƳ`1L,V_×_,^FJPdl%Ir3-|X?7 "r?OS.Hh_~w׋*C3L~ +\z7Lei9h޷ɧ(ZCŨT"!$SBpmq)S-xS+= Zմ˺6a~_Դ +Npk8E0ds#9HRD!r[?rIP"9Ө4B9fB%k[b_kY +wUu߸aƧhphW4uG0ܡ&#ua5>Z|˩L{ +-5ǧdp92RA[p3 +r +yFA~NdWr/Yd-:@"NǠ?O4QF$"BO V:ZPi۾e\&CVp[m0–mwngs_]],CJa4c`{_л-Ub&t!K+ +h[G¼>6h딥x^BЯ}Ih-#%M V0ֆ0B LEϒ7Rԭ㑹ŗJumk("a.5U@ rᤛg3gxhfXXκ!zp_\i_hpERlFL|_.}m d: П"}[-x̸#9 C`XTAfM UH}ْ^{~PRy' jl`FoId z )yʺzma bpyuaUsRWA5-9skXx&pX}N_D߶% Młll m`&Ka|N+5?l~+Ӫ+.·Yv*8,L}HѽC3[e[.mQMDḚ %Gt-v0&WNƶ9ED(ƿ7p(3z7R2轝-g ?3d)endstream +endobj +5238 0 obj << +/Type /Page +/Contents 5239 0 R +/Resources 5237 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5224 0 R +>> endobj +5226 0 obj << +/Type /XObject +/Subtype /Image +/Width 780 +/Height 418 +/BitsPerComponent 8 +/ColorSpace [/Indexed /DeviceRGB 31 5245 0 R] +/Length 21835 +/Filter /FlateDecode +>> +stream +x]WC'y-٦LٹɌX*zFDDIF"""NY6f6џ `ODDla@DDX "", DD""a@DDX "", DD""a@DDX "", DDcB?=ѧ)Iށ(`L3k"v%X8gfU}G A}uH۟Ci0Kb_y@}?g'ez ^7!}$),t>z{5*䛢aCгۧ$z,H +թB8`W&X޺4?o4sIRf\$zE,`(1s= I +ڼYW{,>%ae+޺? ~me0Ӫ״_oMX(GXx,A3MsVpp'"?nV,>~bG_bE,Q /;%hF r{]Ԍy*U,\ /gZ*.◱ȕ3CCiIQY#,,Ll6ĂL؋TZx,/vE*m!, SqQz);Y,9Ww.}~?`c ³ДM ߉yA lȳ~T#,,:s¢".(zNp0~zYc=M*3sN1q !,,*ǡ_&j+s LIfNxϊIɩ$Dvrf/8zK[  iUl/DFM\.CwNxO電$zY,4XHr|I/v2ͼ8ӯC]Yp]-w~) =E?\YԁIwW+wNq/Zl{>w&{_=zʊ}Pަ~8Ia8h4`yh&B~vˣ;OU, Eܿ UğسH%o ƃܿ$z; PRj0'8="h\rp˅K*ka'i@sՒwX`vZ +1vuS]",s37r9WCwu sLNK nlbpnj޳겾:Cb_./}EV!!Od5t{g3  G܊!XYpOzu,{mX +\ +}ƍ +@Me:3T0(2*j@ +†Y H$}8t{{bW;X(ӦfsT`){ekٻ:A_,790('Тj>},\l-.8hrmчݘ0(w (,I;NS^OɈ{_ *sk:Wbm䤿G!ӕkgUk*t`}0+o+(íWgNyX?l"ė ^U(rk{/,?&I%Z,NnUfٚUQp`ҤzuRbU,x3KvM-%V̽x nr+0h*5~u{m|X`pvU:ƒ̡>ڛPoDwj<Ƃs8rFXHY,3[q{7ΑWv%bp qd"fw}@yW4ǀUVL-!.fN' 󩞄^ VJ%Z$)cl +`wBF>U]-̫{Mɭ} gI֭2  ❆:' o*qObalo;{I/d~{X8 TJ\7חi\\5v7y ZwRvd.΍SzrXH2a?7b#3"}ۄ?@CwЕPoX tavgsy$I$?r|`'Pioӗ&~OyK.c{t_GEiN +] "FOulC,0 +x73̓@[ i,ũJo it^y0sV|ޅ:w֨1`,wy5 {ZX9gkʇ8 uwѪWp$%caޟj]gh I|[D~hz~/X8q;׾-{b1ˍUV豞9(X<Ґe{Fp/@?8XPC[ehVmR\x?Ҥ4TJ}籰IؽDDo.N,UWIk޵7ZsА226v-pGgV?h +baN_挵]ټ],Ht'jY~^uٔKKծ^ |Aa9pD[ҁgԙxvgpFW\l/AUʢ(fBќ_t\-{i.W U0I5_̿)y+,pt֏}(*J-|3TMܥjNj5D=al`ܪc3|jj8xCj=βV os=寲П +ϲu@,3Yר*rVƙ7cX3e[ת7ss/AbNRo"}gs/#o#m9 +6+Lẚm%`AiwN.KdhYY28zYqrG8G} C {5C0Ł +Ӧ̽RFɉvTܾ8=vnlu#5sxK{r^ mÄX`pp1ܢ(X8eI 8l`-9T;`]CO ~̣r3jS +eTXa/ BBA #f~,` e'8c aam`&z# M˵sBxwH;kF]=1ր+4 .AbX]ua.jz=zyW /DQ +mG_B-R&ϛl 6 +`ߜ[s6!j] ؼn|5'Xo=\!\ͥzkU#35bBK0Bq*k 'q{"=x +G0Ƨj_B5 }JĠbӯ!$9P0 f%Eӛj`rcլ95AoniJC'w)%q/߂j̙fdVBe X +i^90/8J}i_·yZ5mcp~' 4W&aQ 7`yǴ䜟}.+K]QKnjlc/L$x%fwg O}#>s@ [RJ=V.p,d|G{2A>뒵/"S=m /+aa5\܊'(I\EG~;7pػd[a‹j@.`'s}+*Is,f`X%,\x],R.ƀ@I2x,Fs8h#dvaː!Ŧd/P|I,8;zYEAf } ++a«GB.Lfh!Cn`ZɅ8U[sɓ)AVf $^*grd`.[Pc-r!%Y# eY4}CvGK "tk;|MFX 䍰dyX>f:!j"c swBҥߔK~hDTaƴ [H.IaQ{b%'1Ȱ `1D>/pDê4%[Zw +>7!,\x9bY%eE3'Ʌ뇘>SMX ~m1/lɅ7VxN $ގ[LXx",\ ",T~Q]D;G$ZS:0@j[ l^U#1fj&6/a;#,C2`8U4k&8L Lۛ 9Cv1_7ሊw!,J8 PuDEluhNLA%E]жG=ZMe0F Cy?d3hf55LtsGR@1rFˉ!3aXBǠlݘ!pւzS8!g|s 1K捶V,أu-Z04A,ϓذ!glz"GLlB>cnUCװEҧH:HuRktم,DX xʩp,B]7!V2‚L3ǒ!KZcš id?xGXE uweYo CMV̈\0AvJE~NkMd X)({3)1xH~Pǚ[P50l^ڊ( `W dV~BzTR- I[uW ԧU¯7WXP. 1PUY⅚ʩ(Z1c*[u_9cOΛ*_`Ϻa Zca+O! + r`ufƂ+M Sf,pɡ>! k\Ls,%-&\gyG8rܝ\P|ˁ1lGnaldpC):c a - ,}1w4*q%xȠc7/+ .iJ{Zw1BƂ y׏NihI4ÂjW:֌RΑ@!.B5JXB=4`vƖ:`e{|a +̹_XcFU>ȄRΠHL~W`>&^h-l ֲ@ ZEU#4``ÂEŠ\2(q єA $#y  l@GMq3Xd`bn80LX zH'i!x-a z `!Ǭ]8rʬ1f:!,=!p_8@-Z䬟6΍Ȝ ?k&09 i |wk1*qԻj,ū`{u 1p[`{{pp$?$j>LY,DZ(Cݿbg˾6LYҺ69wVNhW Pf6u8uWlΟa7b8 Ӹ<c4Y2Je!{=I,b`'tT$8%,} ?B>S,V D߀r˿ ߈ vhNR˚Zzdŷw D#"tVqb:`!<"""?O/QpIh""""""""""""""""""T8RG24iؤ ^џ<-Qc!)B?/aH.-Yc^NX ",HjFX Tn ?OþDDs,T%)xIY$ DXЬ 32 +"'K.tJW-2αxgTb¹\(pq*'4@Dt g]y h[[!Ts%-,ݓfJu~#Zp6`n&܃_zQ _zٙ8dTgy7MCz5T{Iƭf\َ[5Xƅ'ʮ^\7؜ijceebˍpe.g>KAW?M8t&yR㐥lr*N\gR6h7bn=n|6.BL}}L vxЁ,e0Z)q`A2fgIf .ш&̓>Z0 r|f]$zaAQ|VEa;|mric8ۄ88nt4n~ٌ[܎KPQ.ʘל)LaK=ٍ9dKsW]e>^) +F[K{<9SIx<63ll)y7r5<1uO Gĸ4>?ba\Ɏ1(Nu#[%gB},UF,h5P-mx-N\%xR`AF +z5ɋ'%Z[ s)EMǭqqR7dq aAqJsΊ 7p>Ќ]<2 w\M|TXP<؆nmg7& Y#Д#\ӑjl#1Oq@`.XPmZ+0FG+gH[̌X.X(WXȅ=OJ=Ov{L c>dba+=apKRKۘV&JɽiP6xti\t#gϓH-J)̶1pt܍\`fD l;JV qJ2q9vW0i"J^ȅJ=OJqSJ>INK\='*عpm)|ʌ31bygsn@Tx 5^T,؄H58~fj9ͭ\=w +'k`v1OT9qmQfq- ;>d5.Qi\yN:cX@w_l;n,ZD;Y"g #"nC\yܾv> ˋn;rVwQ@ԂC_ُKB&mhC{|d<ĶĩO2zX`{aZt7(ƥ Dl1vZ{ DDB.X z*>fɇ"@Zܴ[2؎@8zW#s]dJùW}hu`KX썰` ?n +?T1ouj#ݩ$GrHi%f~B|=$ehw^CC}bv,j!Fo#} QSLЩ@47Տ&I\VcS4Q$f:$KӬ9mN9Tl"]%}ekJ.$eb=Ң좤qt~L-'1Cf) L!Pq^M._Fi8u\.d^m.n/2[ c~.o'K Eޭ< -v_,u)33jt"eW~Zh {܈@\ BoE <Ǝ-Y7!g'-8nCr.\ǀ:(:׆vz#sQtP]ׄ?;00*f8=xcfԜ:8?7= lB 5HX+kj#纊l>܆D(2O2 ² +sy!mCvgFr]tBj1$-?b@Zƀ.p_kHyzg:^=Z] B!lc'٘b~@/JYt¯qjG,!@RS5"ˁPXG/3HX4 <)XiAKǁu,GCZR~7|wp=0D}Jy18 T(⬿  6eU|-t!DX>{,J58-UCђ' P (!j +Q 1Θ"_H }E OpP 1uml6PZpRd|FMbAhD5;ʺ&e cdC# ܎. ~b%/eF*ظm1jY awcعjoU %,Z>ri|=z/ ւkQB'Pd?ͱ Bخ*URh攝\%&ɵR31g.q\-we|SH.seIC=Vbw*'8fȅz EPS WX Ըٿ WKO'i2 ٩eN.grANB)iOŞZߵFQNrKASXM`‚ZaU+,p\U5Q}0K\d$0cSj_ł7/{ 8ד4[+,,`sW\Uh%Ph°eȥ1ZZ[L_&t$B+ Ŧc!RS]T]B,TDN>+plBe)c&z-TW,Dryܧ{IhET-uUg,JH^9 +3 q1#mZ+LVS}ʅF[ґT?\\ЖROKc"f'@V a5/ca{G3vE98fZTe ~RFf0!jثJ,kKVڰC5 FOc\,VhYz$("4%\H&iU)i03F U,#֥4s)uƮ\ٮ^]ml{3G-D +{7D 9 p8 sYiuX 9#(6t \#'3~$]Y' B&_CptaIejRzX95f" ُ`XeC_GxOT{7n:*ڦg}AR/sȚkg=>jQe-T8vku?/ ~qJ.|.=*nXm!f'ęxNd4ʋhp%y5kt7ҘL=WbVWy5a0ijB~v^E$.@g|fv.?5'%ұ(Fnי1O>IڗZ/5ߚ^}cQTQ;mƂƂU?L!2zA˾A~ f㤈XXH"E.M${"X`V(>љiU.hɾ>"h/<ބ.2e:"cnC +Khw7ZڇG&]w9.COZAiFD 1~}L>*m>&ٛ29rD vKbMHc>3t?*|hYh}la֬$|)x}::'QߧIRj\X} ";*?[-#,$l*J:d,tdX5cS I)# 3[#hB(QvG=H$ᵙ̎iHfaAkPf m,|7X+WZj7Jժ7V"0Pd} 8MX*3u8`[ )Y`)4ғG +($, 2(9QṅԐ8\ + UBa ϫuJadB3bJꕍSI,Bͻ뜕KIU +r,t70,DU X@C5zxa{8˂˩jX%d#ZY#kq(aXN&Ygֆ8W#PH }U KL0^.x:RweT.ΕjC XG p2\e@lhXPPԠ"̥ SR{/<%F $ 5l<^RO +`! ,us=V.dȒPZ֍uT(,afK"DaYUf,d/Q +| 3 fx;N3‚/ o sGj{8]fkK/#Hʾn@_c1,er!5L$r`yDųr+6x.hUXo/0o)qBXl0p4TR4Ua d]pKI'_f,K25ڌ.k4}hLHrPU9FC:T޲/f!Ko sn;\}rnz`R#RմP9Z}בRSHʯ54-AUtb%޿uqɸnra~.~$»SaNNOPyU;u|j/3=t\=8ʌ, &4 XK|]u7f,va> &zO, "#:2-R&ڐ5=NWꣶ`[q@.P#LmBKc:},2rJ$z(nLm YRz&Cƒ.LAs1vmjvݷ-3aOa|/ko*!pa-o^ F>?q?;יINLumyB.yFfIQ)* +Ůi{? ؏$ gMei)eU4;5G,rVΓ} xiDD#,dUvfa|FE Cݞj={YbH?ƂJADtwe,~p7kWY'ߵFԮ[GSav]{\jע['Ɉ &bڭ.qusOW;Z +q8́y]h3-Wޯ13|fƂf;,BU,h*:.\8  S]- `Yve_ctle/!wnĸ~1r DžۣU-J+,k, dl~1xjzj04(R5,De1B,3v& P$HЪ4E +L/bQ*CH>IZΨXxˬL(:zP8;/54/sWLƏ4~ؠ O9~yD smYb_LB))g,3Ъ 3Od‚2ua'ShYN.3'PrRJ?#M&NqS,8&Y.R)Hewr! Q.x;PcV ks,VEĠlj\LH FlaD. +WxBl "ceV.{a/|1nj,\+gX2;= h;+bգȅ>TԜ{A$F}u1"{cٜ3;z\J.Tr^4 Pȅj `cƨZ֟ȅ+ +k=hf`HlY@.0Qiyt)U,Ҫ87ic/wjα؟¡u +,,rs4c,` `0v*Q 4cfz>3?4NqAW!j)T@H8t({K:n5cgT6gz{\Mv=\.@M^ h7lShvpnGXHis[Ƭ4[= >hFӴ yaa)`xMZWM// X‚ӝ?Y4tq-@ \-?f +*‹a<Xz~CE*i?6H.8]ZK?aὰ0U`1b\)?ӏJ2Z<',Yg%a`ajg3,$rͿ{(Iw |G;?ʯ ߉yZX.KZߏjVWHV6^8J>3XD4$DԜ#~֔ab|! MaH`M:\d̆s L>9\j8Z*N.Q*A~9-+`o抾oS?O)=잒eH,8X%n K/i:N猰A,Oqm\q4L? S O3?U0keS|x_cMG;:BYۄ*0v| s{e<8OGւ{OIXx,+9{-3DGX&<ɥ ųҏUmVRwˢ&j%gCƥ0oryXy+.}ti4!o/Ԥ#:Ѿssjj1SY٤Envdg(Lg+gC.J;P"pgQ@Á.pqoo^❁=5UܒBE>ŧ7O8f.^{(yU 846Tl 9a&lΡ>ٜs3WBk@8O:θQ97XEfXP 旟cA}Y q6ajL],D-Y3TM=xYsy'(=,"fjXܳZ[-[DHkqY?rX1|7vj_cl 94lKyQqp=GX'lV50Ӿ)~X+I ' ouG>8T3.,p.m:>b{fl먱bጱa{(wdfϼ:A^SX@/gAY*O&mwGޭBsףG!, z&SP(<^rTK orY٤-v4Co,;H0]/!,d͞[TUR**չi{W<| BC<0D>X8;vrb;?a{ðSObA8֪2GpBhy /!ԫ4ʹ㸷1jLқ\/.}P4e2-uwKin-«a7YrKwKpkhXR7g,t-?`",1k?CŁy-{ܺ?戟´N&] 4N_J7 /ֆ| U6~'l~ Kh aoar~, 1Nu&X1c% tc;ϚRA_x؅Fb!aQQ>26DoBZWܛnsl[qb ޑb`aMT!i;k< 2<ۦSbA1k5ʏADZ>U=X͈?-i=Q1bxq|hoS(>GXۡ?y P=Y.Tkb1Y,,RBGvOXr5aA>t#T3aBvX8Y+03Zy6VK)_+ħZ=ۡS-uagp*b QonT}C,̉m%!m 'nd%eg{ļ[byUYSo} 'mц a03żdlfG K.0a[cX8 ͶTk KmvXU){V6|b8Oդ=Ny,>vU*,ĵ|A{U~Ha ͂)uɱ!JhBHws]q X8ȝSd#<ܨ!zy,́ܮgςdY#`j 6dZ-=Oal Wg_p91s]I^ KmܰlXAwW[mE|.*3`Uݢ%Aמ mVyIr[xU2|;ܖ +u]9$Ѯ'殤7OIFXHBԗjnF8Τ{lRsn*נz7 9ʌK ىk7\SaO1LiTaT .&#u쭰Y&U4MKsksNkZjl=mgMua}yVL >UٮL/~t~`0FsqfEk!oc8%-[Lֲ`aEu$\.Qmræ }tKwt9j]f +X0U7.I5~ABk8fK-F}ĂI^?7A>pSoUL}48M VM^ȍ#.±S|P`!b 3N +[T)|I9C4dP?E⩻ḏIWL߂<%ጊS>\.LVJ^r+[˅<)/2+l X$K,&,HR $֤aDOcr} Y]F֝ XOY5"_%1j8CO`vx7)DoCߎq\m |X]s=8J,d}{4PxZaOӲ'#7m~nNS]_B_LD~aH%qKwR:ob, )N@;N﷼bqd$I `%4\w+;?uy_TZV)zBIG[˅s|Uy'XtC0W VEh1㇧2Zt$.|boTfܧ WbZi7ǕW~BC%`0>~xS؇/9\Gaߎ$ %T96ΧZlg.̏_Zt4k$ٳT 팅6 +&vrL~ g FN%& /!B:TX ? '~٧שBO +l,HrɅ čd" J-k-|P$}t$ ~?0l?!,\xq Td/0osc-6i# $^vvgȳi y\r=2O#l}Y5١AX d +^BG\1 i ^jJLy-J1%Jae/t;",\x=*,2ؼH^fy}2/Gܼ1u!-O^q Ʌ4`/\?&v3p}\ԙ9<12\+CoYs)xɅA~h#ڟgwqH.wWɘŏH.i]ln 8J $ތ9jR$$H.J\(MKaNf zYߧx'`1#,!kYܳQcMܙ`$* +U'jA1 =%7!L:Q>%5䰑a`Ƃ`.Xdw$K`ɧQ@f:R6>B}z,\?# +]~imW9u0L包JQ+ۮY׶n_"(lvP$mQr^VB7ƁZ'9Z7n2yWNY򫄶CN^0$)P0[CVFNuQb8],0Ym;L*c WVN1ۿ;e/}1VkPXaFuWf V-ÔYt<q#>nXhaY nl+,015>q8{z'&fUq| ԀgnCo$s +_ar+ +mՆ¯zJӡ^օX֨O%!,˿5&N}* rHW!p.WXFC6+,pẋb {4UyCE4T;c~R>0[:we}\1)n J X>ȋ#,D0 +Dr g +XUK/WbkeSz2#xh \W RDN1[m8 :k}pض/m~1:f2f^t*tr)|w~Rm@B5f`AP|Ŏj`rϕmr;֍%*ME2)}#C]@HUݭ +_J:5(Na+b!?AU`\dkR  |aaQ-?=5gdq"!uPb;C@DDX "a!> +stream +x`ttt"""gggWWWCCC444񵵵ѣս`a?[endstream +endobj +5240 0 obj << +/D [5238 0 R /XYZ 85.039 781.388 null] +>> endobj +5241 0 obj << +/D [5238 0 R /XYZ 85.039 733.638 null] +>> endobj +5242 0 obj << +/D [5238 0 R /XYZ 85.039 733.638 null] +>> endobj +5243 0 obj << +/D [5238 0 R /XYZ 257.292 263.979 null] +>> endobj +1446 0 obj << +/D [5238 0 R /XYZ 85.039 117.572 null] +>> endobj +5244 0 obj << +/D [5238 0 R /XYZ 85.039 96.678 null] +>> endobj +5237 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F75 5167 0 R /F56 2898 0 R /F14 2903 0 R /F35 2888 0 R /F20 2873 0 R /F66 3248 0 R >> +/XObject << /Im10 5226 0 R >> +/ProcSet [ /PDF /Text /ImageC /ImageI ] +>> endobj +5249 0 obj << +/Length 1713 +/Filter /FlateDecode +>> +stream +xڭXI8WSEeY^0&}"Vx z"/Yz0STump|'DyL8Lg]|g 뙰 +ȼ\^BG^j3Q^>Z^RJW|lj~9G.nnW7׸ (%']Ⱦzw_VogWUn~};v{2M=r~z*v_>> :u)+J&JyZE"pb{)//y|$~b&vo +@ uo5ZʁUJkoaQ[SFL ޭ[N)EY7KYL_Jl̬{_ud( }MBOPRm + RnkY(Ց0Ϲuz+j[G-L,t|M.({ +!Z;=՛A8o8msʓg͉.e@7YRM*j^3ೇqAq@PİIT~qS +Qg·sR ){+΂bC("^@'}k#NS'>P@F1D=_u5mÛ|{h BRA~?5/}soEN};:ӕ% ޤ}wH{W 6v]B p&}?d|F*RЬox-͡1k5ؽ!7vk>dh&d*3FlaWlF +L h@4Lc^aX- de2^$ &RCk{Ӳ`=Zq0RLQpjťI5F8*.Xo4Oy6-Z b@$.^b*C13KqGH7WWL$!)ZLg Ɍb~Mu}hz u0|G'a!QÂٽcV2,߶q[ՇdR5hq iLW7=7xTux- +FEwb oƎw8SWun$I+1mpۙ.Y ^KM$#sHҮ\}e̗e6.;A\[Caf(Vi;t. L`0OpDJM +øaq=ïe""סdм.ys}{ooy|BR@«M1V(zIDKN#h" ^H7I'n(g'ހ>օo1{Azj> endobj +5236 0 obj << +/Type /XObject +/Subtype /Image +/Width 780 +/Height 418 +/BitsPerComponent 8 +/ColorSpace [/Indexed /DeviceRGB 31 5254 0 R] +/Length 26233 +/Filter /FlateDecode +>> +stream +x]8 7{ $7 b cUҘ4ijY&M@9ID,XWM7瞞!nёvy/(i '/ noOl#TNnX"6ǂCZJN.<~`Ao}k8:`Nc~boңwd)5}[, w:cr^hz/ԛ>f2^N0+cAR(Ϲy2w/{+s9b.)xǶ=zW ۇCswαަ'iYf]q%l"&%b bxsvn}jʉm<Q™.1oSj™i(GytʓLt``Dco`q3'7]VS`R>Sj:k&>?(dHi@*GX06eqP P5~(}kܚ~=k (JT{ (ܯ_VEXXF4ޓ xMp^tzGMC_0&% ;r,BBPӡr}$"%= 4,\Y?}ߖx}=p4(J\Z.0,NV2g[>/`q7!8;~2( p&w ? KƁRYXxY ‘cEّ<\-~Dˑ~x7ڱz3IYX`x06ՐO/spoZ.?K1ÊON*:ƴ{ ,pS2_8})  AO;jp0jjV< aoc"?ULYy )\6Xxx \^r=Fp ]3,p;rtj;fp5mcS"@nR.> wHƹx\~:ҋwp9v>_? c\r?0oӣ&NX 傶~\xv>܂mw_ :=7mOGs| WZJO=Ƃm<(;/uvzW.<ߤ#vU:l0Ow%aO}[.6}B˅=8+Ԓ)#, E(63ξ/dlWtpl/xOU)vİem?YNL ^vysLr9*?_YBFm- E~8Ul4A-~i0Wfߓ>rOUJie۰_mV:?ߕ 2rcA\'3'LB{b<7` F +F\\8}G ?^G9\J&= ~=Y3>ZYxskޖ 'JҡXXZydy)R=?>cԣ R~طz޾x[.NȱF. ?]GA wD?pq IܧVX,o˅Q+y ? ҡs};(")KWw~!%Mx/h6w:_7䂪8A6 7Imxjp1 p:c(Bm1@edU +}D.Ў+!5(GOK.2x8&cOc/gJw7Sf 5I ;5tα-'orwkK;Y ٷ?. [IYN~r{uqڤ@*osMם Mλ.Wn +[x!,/ԅv\~ ߃\s;scr8'srsQ!F jTP kB5HwX2(O=U#΢O<B><*q4RtsC1ϊ`+\Mp}|ͧme5*AacnkBEp?hg/MI0y)ض#K˘z*EA3 `c$Y`0vs[l&b Oܘ]/ucDCU"srdSds`/n?rJAw06B׸R + /w)nHiZm§bWaㅞ?lޓv|gΟ<}Koz%ѹ˖$Rt`lU¹?I܍xof7'ݳ+4&Emrd`DV. Ex5T-@LB?bt3 M4. \\;i@*I}qUuwF Z.|…\4z+z*~,po2W欵C57#-+̜r$YF.S`' Ќr4G]`Z;4 S5\~4E+ `0>,(rD\DTPPϫZKsftXr[ϸwvgk>+mc6ڿ]`v"JэPj,V4gK!-L-#wyܙ_йLT^)LJ଍flGo Z.|2 2vGzlk,hmçq՝XrQVqB ?kE Z.hz4\Ф&X1,||Ňj7I>yZ-XcrK)#mݟZ4W멹)drLjbӾC,.LI=7g_ZqކE OA\H3(L߸`a8%L9ω(I`D0]y8Ȱ#]'1¯CԘ*3,4+}ƜpViT^)r>cI[E-ivm@A8->X%@.b2orS2,X+l/\y\V;`aa=~NXʊȅ7&5\ԍ K锢F;qW u7XGr?h,27R17XNr ULI7 +a`Dɀ I@»Zy\a;jM Z~Eq Ux$:3e=p-qB'ES[<%,h]/Ho:i{j;32g31CtHSn;)İ{3:oE5};^5֋[1Cz(Z1ޫP{1R,o7?P,UPؽe\[id":)ꭰ\X5M[5w]kl4WߏX8o,4~Wȅ_bݽIC>i[64FگKXФIcA&M44io5i7JK>bA&Mx&MRF&M4iҤI&M4iҤI&MHyy~4ۤX M.h,hrk 44yv&MU.\\ФIM8ܬrA֑OXMU]D M\-ONƂ&M 4i,hҤIƂ&M 4} KtEËE#_a㟁b¨tn}cTلևm젱pt8a*9S$$4uohS#r3c/L6xvQ0[vMWlɩ43khS|ʞvJ4;28,aBy*wgsVY? GGOizwͮ3 \Țُ{, I`75EG^~fO)M߂.Oy6=bf&_BKY吥ûKzshC EvRHC[ 1ҧapYoŬm8ZGeˬa3lU,?ҫ2*f`~܍X؂ O7XheWqUS +9;\bB曷XpV,; lxArw!cM0A&1 &2YoF5aE mK*RƱ\NSnK3,xs^Xfw1%9nwU6q]dt`.ȯpf0/wjb!d=e;Lotw%~=h]~aYE3eTy6vvlj\NK\DΟ،.2zp,8 <]{*=hl>wȅ5f.FB񚉘j6]vnf`\]+ʣϰʅPX[gV_F^F6 8!9?;p4b E<y |aX F5pkZ{Iy\0\9*hTX7 R.PTn}brboLKwH19)0DT7Y  +Ќ+t9kAAw鏱ygP.H: ёn#"wUN8l"/K[" l: `\ȎB"Tc{ba,\@;H%r t:4:>1,P*le…@oSq +-̍ł{ oȀԂmBڧBҥ~EREi;[GXO5r fJ[P&+Z\~b r=d.XPI  K;?LBkݶ3]9Zi/T^UN֑`MW'ݘC,b͟{m +b;[н\p0:fyQ9 ulk,h҄i,ht ZJ $ާǺ!ݶ:|T5׋ω'NXJcS#ܕ:^ 4GQnj]tlꯤ #3VFk} nɒ` ,xk!d\ ̽;/fIXł XjB +0ZZ`XǹYEs"Fu$Ťe^;xR .ejeE꾄FG-cMiÑ.SsɀNf4 '-H5& [? n50y <ݹ}dS^n13tf_fВn. +V֥l[X0ovvMPrfZ`NBX |n"L(-rd]G 4g0O1$2P{aw }x[fޏĂͪt$jUo*cKS`՚QFP`L4?|bdy6k]+ʍFbt3Ȧ>}7"NhA/:V́bj]uX[0rfEnMKE +@+7\.k`i6%Ȅfi)Xph++fGh5$>,4U:V*YbH^an[V .[U uLIpbC82jʷ*^+=jؤ^)b@|uʊ beuB( \ZeՈIĩV` tм$Zh@5g{bӚ\$7)%kVF\9s:b +oBˊqfT[y3MKp:NZqnl_̏D)g2%[Ge@<|&UL fg'-E^n#e *q(.9bF Ud#Y 5I,fZ8!b;VFXSD*>W?rDq0]@jx"Frt'>;o*̍~ ќ \,6)bSp+ć@1ęY`tYPRŗ[w10\34:^)`!7 +Ӓra**b^!niY]xcMtv#d(QIlb_X\p$<xT0|)M_ΙX2[ Eo|CdYNϖ=> ׊g`VvȰ`ʂTR=fb<sEuVMGӁ\q[fQ6^hъ^hDǐUܵJ'/j%0mmQxcdB8 ++\;Vyo2Ө-#u*z#  `(|#\{+\Ano+YD)X4PWCriu#d(Bm9w7=Zvq>U޶)зD-n5K*$@}^:Ƃ3gRf]g~̊ Y4JLuC$ĥ,U.PB/C.fMbu[0fS9Ue9rG8 P% '.Ă{uRʒgSll~5VӏBOw`dxDWQtuKškP,b5ͱ|{D CPYcC&P duȮ-nn* ȥ>)Wirj5kp |B)Tk4mCQYn%dr(Es_•j:{;VW#2ͺU zOzgt!Y^mz ~GpMC1^Đv˦!j' x۳ 6Et[|vdvDu}a+5-J4Xsw\gF_sXH"5Zd 'a!/{L1|2mtMÅ귱s]ߋg@˂^YgyVXLI05A! a.,ի>*-5S`s-nnB² N3wQY:5Ms7|73ɜõƂ֚]FFۇoFј%e+I/,b +4I^R*ÆnaaLJ\ؘͮdqDK\ËVLqܑP˅oƔeМ{*`X%٤EM[`ƈL ƵZbV^NyPU"~.qhGigHhx(uiqfWGoḨևydrysl 5Mtp);ӐOb_Zca.qHDX=~$Z|{pO`a͹򫴝1w +PWG.&|]!Ln)4#. hj5>p`Ihͅ{yF5ٸ;2V'] :#Ԫ(7+0 Tq9Σ MgH,[cP5XfXw?uchph4UaZX{^W,pbb!+rC%[xהbbU9eQj/l_2~1dnTXI&QSE<4`\ YC2I^ 4}3ۙT +b<YPXBEb<]W໔WejXpɘW,3ZWP6h/z/Z~"ye|zͰЬ~$L[x^2a\䈘1?b$T + 9WN$64:cat0lb䍎| '92xH¨2>biĂ&WFIQň Ϻ/MAbą9ܮX=H~>UQ,v-!~.G1ڧ8Lv/'ȅTJ,݂aYXh|l'Q@[AMbq\Nf7ó{4\Kt^\P3Z5·Ăɖr8b,F1qa:ahu/\(\XkXpӥ+r0T}ƍ =/͂s az)0ͦ =]A9t4.jvU4d"q!Y/ 76XU[X!'1WCȊddy[(: 3SlV,B>7B+fV)d6?<@Si)֚  Ab\ X;b°DL&Xj>U)/;'#qi;x߲Q@%+{\h|yꡱ> +~W2( ^,gyoE"_7qK*([ƹUwq-A@"},sa;na"_œ s/YXkB"Q+.%Ll[T.lj`tV.$JS|Ӿ"ԗ R'`"$cحI&6V}X2c󻐐^ #oXNtF`s+ +6} >UGStO XT_2bʫ[ϰks+MiQ$:z/(CWOpX8o1AxB1~ndHƍt#ԻK7Ĩv^*3H;QfV6Np?0^e짰1q8ukP5!YDʚñ[^ 9Z+Kr=paJEBjKͰ;ԛ͟]:)twMZ.P+`)$ P^<rd\k;[оt= &MH])j}gj,h d*2,Xr\/BcA"J Uoyز], Q4ZAF}f;Yq-;ⰶv{Ds&U,p˝2]a6eD]>IO{ˊl*$<>W훌o˲+>#sv"c_]u4rrbdbpPQ؜}7 +Ӥ`3'P>6pb%ou٤LXo"YwbՔhi} F^%/ +bx6iX%g <5| 0FX:3r!/VH6͒X/:4,X։ cyψQ>BG +#C\[\?hZ,Q[l(T +ߴ%Ob7]Yk&4eT0sEcu]ʯ!8Pϝ%^?Pn?+DduIU#+u=:Q,5FpW^lՔi"b+d>JʎӴӦWZxigX ng):}>s[" n^06Faq Fe]RuCpagd$W.E]{9LK`=qm..-0ingZTvL +q-Z31NP"!r2w,a8dAXR(tg@w#K)/FEm1@X-.ݫ)[|#%X䬽 Q.X\M_N7 ~7 :EX N,hkI"XФ +-4ibAM`bA&&XФ )t&MHC;5iҤI&M4iҤI&M4iҤI&M4iҤI&M׫㥚4iJ=ǜ5id_hG,I'E,4IX &MƂ&M 4i,hҤIƂ&M 4i,hҤIƂ&M 4i,hҤIƂ&M 4i,hҤIƂ&M 4i,h3#5}C,L-R<_3wrf|^CiX@.4J,'Jsdx;*j`gZ?-uL"''Z#gNSHgjՑ1 So螨(xF|#[{A^~YwŒ 'Q$O0}C.<ƂTlvr"hɣE>Q' FpIJlH6 Wm+#,5")W@X:.c@/v?dV0:)T/ -RK;qY9D: OHȅuKC/ @1eE4pM`6'"Ҋ/ev,x}S/qkFbPNa9gr$~,E?|(ri1e2I ɩG1]2w+)IF^YM]kVyW& +m`177NwrVb/9ޒxIH>s{ޏˉwRBhYժa q\VMs&& f`_i=S5O%SJ^05e(}ȭ 9 r!U?aȅx$L;ځXeͯĂ+k'X 6H\>XkVh?iiIEXNSЉTk6Vıl)Ipzt(D]KH# +̣Dr~GsuӁ\ā:X,p{&$_c/H`ۦ( %[uj3vB,;9UR)FkQR1& ㄠ`yڠJjk*VFcIׇ +K9 _/B;q8C [~$%ȅƆ7̭{K#Ӵ2^e_ D&|SkI˭eRzNb]! G08 qrĻԈ-tncaݬº'xsj⿇+/!K#k\#h:u-Ӻ2J'#]z83@&.ecQ[IƷaɸ@x]}uèm6 ߘj22RoA4*F" ^`d6Xh[l,E (ރ#YipC%n-0W6xH'z:xK<k8UJyLt(I`J"5aa^I)򃺗 e /$(ҵ@RT=s6X6b((2aa#da.TnV^~ pz Z a/k <1X/AtLT.v'+{l +h6% f9+Y*%,xB,X.xa:/7Tv8 w"֐L/l_u[ ;:սr~FZe^$`Ḵ+]\f<Ԏ-UxtWw$& +mX3>.N*GK0hGl.(-xW6RW,xFe +IVEb#\H&vXXՁ+k%2w> n ]V ߟĂI :ҿ鿀M. h-eEڛ[I‘<ܟMְbӼgLg#rAԧIM͊rnnL_Hr˅TKm(2SP҃+o75Iy3` +U4r! # /t{ܗn&Y"n\5Eȅ~?Vw Yuwt(:/ocd)#Fo6lIZkT0 #d ei]vIJw о}CƦ ]H[b$#ߍJ|ŏdE?e97ݱ< +V BvdɔH9E =B}+nS1s%w>b_9AoX@0bёc pD!?Fv",xxt|(tBsi)a[:H> džjt/;,,|!šnD/q]+Pq,b;^! :ܸv1H@tO"C,`0ͭL۬Ѿ">QŽd2OL2@'bkhFI»rH1x9yJK?#1uީvCap)\y{N1y@`tA/rALU"A ᩪ,zS_/]r8Var94R' +,:o¡;&wT@{RleWT۳MD;Gsz@?/лx<ղ*$s>;+=^yb*n If~,[VN +`?!W=8Q wОxYB 7JM쉊tSIa*|Pgm}{V2!^k?ՁuZ +j$_nkrXk$u3DP3e jZ.O_xcjeo0(7ޗ R{WZgj 7kW^/%֧ӆ YJy +8 >E1aZ.{wU'bM 6|D.ęE|V0VuR-]C;wf/2Y؎!׶Z.+>X]C]ʲ}ڰkʭ.\a, '㒟SjfI"J9u55'R4㼶&\9]b$-5I kd* +Ar|`Jίu'ynY Hn|vޢ؞M],E;e0 >Vz (jD0 ~TI2>M6L~.;%seysTG?aw'e>* ^)0!mUCkW!7ZR9 ǼYIv%g[m29SLdǽrJNQ"{B[s=c'uyGd0]Ym~T0D}OWEG)3q;nEB0h@!} 8sqlN {dG<ڵ!E=j6 mPlF}Q ZG{/7$C޵'b׿ũ*H0Ӹ) AO~mYdmMw+?֏d`+ࡽ0,^nl>/k>U +@•n,PNx;~=UX@-IbASjԕjZW:S9 :1 NnVv>"TEC4'[;L<݋D +LiqYQmeN;ކcfҶVOX0Z76Tݭl׳տ qıPTX|A!UO_$[Y +eԀ vaRH]h# iXuSGu>rkl]BlXl80qOґhz|ubY'5o-زLfh”#G@agВ/QË'%S_ HG6;z- sZt0̘HUtL_ 0}IRcOl]κ}^"KfݖԑXLn >$p]Vz뽕B^MoԄy\N:SPZ()K]1)S*f`4YZx6m|D  +`] BiƿG)d]C@#essM_DGƾ$"0%@<' $1<$>KArX# 9lq^{`UWW"U.i)YI-9l׵MlrTsNB5g-᜙\0ݙh|ʅfYI7U$i5hBl<33?Dٱ| /; $=~_6; \Y νtmy.{&j[2oJ.aJxVFkׇ wj꿖 `-એX>jS f9DEFbG͍y- +>303AgI.;j%"1Ae;K@-9h'5q<&sFmb+z0J447ʂ.C6s`3Z}=`β +nlqQh}8ʄ8чȱJvǟO"3jS,\CQ V.$ /@MBwvC8:~aYt :D#OuߨKF" .Xǿv{xUʁM<~QODM_[#HB.4.)n\V.XPpOƂ&M',.R6]Ă*bz*Egv`\*M5EF, IAei,hvX@@S"vBkw~}{#`@aZ(b9{tij FX \ r!`o\ B3¢O,8% qO{҃5p54}7B'.&XAU\7ϰ460;#$,j1Pc! ("5ͦcTG4iƳ9{Q 6 ċ[f/0=Zq>\#Yqv*44}_%!44q%ІCAtc!ejlvP:1Սm6% 0{8ZG "Txӎ_ء~ZcJ*%` \X/&gǛM߆z?+3к"\X,X.0Սea܅Ƃe1'syOXLeVc%O MKMXtIOt~tF01446~Ä-R}."s%.,ſ)58dwnk,hz:gO!&qS1_mT4cTQp{j\l@!vUݓ uba4 EV\X!8R?D ~agr{bm9xY#$XK"l-*" ~:56WQw(5#z/qM njvc@ĕ׉MDqL0vϭhj͚hhIB;\9h),q0) I8WZX7*nn'#)6Ҳc! g+3#3D0i83-"ۋCe~J`<6PQ!=#y-hX7 wj."ǁu"cܑۡ9gKq.bNb!.7 k|3-52"TDdkڹԝY:oU "2< F, 3E@wCk]ّ|J#έRp7Xkf.liI&?,̹E Qߎ.j{Ӊ%.z8 +=WÏWw Ӟ;!HzZd l۠o@%O`sC fz s4}:PƕiUb%cZrE|%dLP{ç}$1h,508,:L, \B 8ZJУj:9..M9_nLo يULD 0?>t-*.`, ҁ`ɘ6FIc1eю#Jpv( _먉m _J +6 t C|AGtf 1!c7Y[[s b1ȊႻLqW`% EL61+.|in%yp@ 7]ْ:  a,f8]SX/N0:dK m ibI|>5C;z.B*XEZ7$VB}}WZ9ShXqހu p [A j֌|?6p'l#B0iy +5f7m#2+a<|c+/,b:b,R=aL#8v:94mSz{>% oGG%~aCֆK,u0/  ١_#aap~$*ER,6lN*n1˥c$bGK H7GH"fib!T-A$v /WD=O,N7 3xϖ/mN@ڤX0s r홈W&@7Җ ]CnGt=@- QW ecX K^ffY 1_ƂH*IH ic&.uyIghkc] @hҢ#ÑOiƂt;c8*c i -/E"v +0€\AUcɔ1qo qD427Z {Y1q}-ޖip3*4jP.Vg#CwFtS u ƂXX{, spE.(G}azȬ;D[nTHmQiAW_(&jm&*YYeЎ2*슸hb$/=aWث= ӮsB=gj^i+r6o]kq7>w~}jjlSh pK;yuhySߧDƂJ!~9]r,O,? 7aN/6` JI`~o(yg/o~غ?zZ`xi J Zɋ?'/^XI/^^.s,L˥/^zdjOendstream +endobj +5254 0 obj << +/Length 107 +/Filter /FlateDecode +>> +stream +x`CCCggg£狋WWW!!!|||ttt555겲$> endobj +5251 0 obj << +/D [5248 0 R /XYZ 85.039 720.089 null] +>> endobj +5252 0 obj << +/D [5248 0 R /XYZ 85.039 720.089 null] +>> endobj +5253 0 obj << +/D [5248 0 R /XYZ 248.731 250.429 null] +>> endobj +5247 0 obj << +/Font << /F64 3118 0 R /F15 2884 0 R /F66 3248 0 R /F75 5167 0 R /F56 2898 0 R >> +/XObject << /Im11 5236 0 R >> +/ProcSet [ /PDF /Text /ImageC /ImageI ] +>> endobj +5258 0 obj << +/Length 1779 +/Filter /FlateDecode +>> +stream +xڭWI6WT"YI-z,8@'Kj,KS-bYK$|V=_&V OƱ*fۙ0Qq:/u,{Xˇގr~vJ)mxEg^Y.nLnQK{J^|+Iw-,H 1ͷ֐$~i%|7<ؙbxTUZ 7(EIdɑ;yη\1)OAe³pZ-WK4lz>GE 8Z*IȬHW0B(~ +DPlM0[0jba̯!~[x~5Ap<08n_sމ%j[D> qdFk>pEqoUk1qJ +O>|$T' Zb*y@ozIMMWPp ~QBҕN7ϼٖXr˱j`5 +];e_h9;9V[0Ql󚗷i(mG0Kt&l ?Ŵ6ْEfn),y'".qZxY#@ j(E$gUݔy +C'2T-AbOq8OyO.3mۙ!AaJwΘ䄄xɦؓ5^ù̩S4n #ZoTcE;wJY'RbP5HV#H"DѺAYmBݢ4CVfg"NܰFR +`䮂t-l[èR9xS P263UIo3<ݗfе(Nz vzpP{}W14F -d/C2HTnCV>=P*ܣs99ڧ-{S #;ݯyЋܣBRP{˷! P8Jdj#ko2@ȄLl>63~ 'y#h?mj4#﵀L *`w0¼oe5o]11E Gkx2D@q)97 7ؿ߼@BP'as\B'L&c"y}urW0v)f_i>a=йLibHȼ'P17㐕"c ]o4TZ#WJgQ?=K({s @sذeCCxH~].O$XkϸY_8nĚ2EVa2#r?qy7\=LC_U+;uW] )r<ΨhGR>{< $߅,B%X&]Ƃ5dcysendstream +endobj +5257 0 obj << +/Type /Page +/Contents 5258 0 R +/Resources 5256 0 R +/MediaBox [0 0 595.276 841.89] +/Parent 5224 0 R +>> endobj +5246 0 obj << +/Type /XObject +/Subtype /Image +/Width 780 +/Height 348 +/BitsPerComponent 8 +/ColorSpace [/Indexed /DeviceRGB 31 5265 0 R] +/Length 23954 +/Filter /FlateDecode +>> +stream +x]b* |3h6]m2ͽF9>R/a; .f۶n15۶ 4.zn6m '-ǫ/&ӣ=jZ:ӭ'y &]>=]%Diɯ`TnY?Y +רpXx gw!P3@F[b S>Ĝв0$y2Ԩz(grJVI4YQf&IbvS}j*#D=lCTi˅Ze> ˆx$,X RTJWt|.2=uEpqeӴr0/ePJJ_pD:JE<-x$e:FE=#YWE6iL$ iB9/ LNN*mۻQ&AɞJarL uI + +)e {ZL~)j 9q ]g ˃ʅx d`mKր0 |UF !t{S ^82aT\L1gs2C$Xx~*KN'&@6^sukAEHq~rx(؀AGEwa+|R.\ WbaFȕsXxy Ow䜷ۚ~S9(M׺3B5^v,MYtaBȁdtg11H x\XXd`DX 0PJז%z[tdDX(l/Z6hw|$xK. ,L7QgzeY BzvWkʡb<4n +#VwҔ,|jO,44DāX}\|` v_LJbQ+js,e|*uX*)h+U.Ҷ){k`` dɍ(>פX|U \ {۹VV:EOwvd{])pMi #Cyv^G[NX $yqwƳǟ=7wnNE8_̥UJ~S`DIzK<1~ I4Yes-TE:z WraY336m.}zzRiS0,%ZgEr̷$a'w!j\ra>XgъZ.\x@>GkvpyiB| BTt먽|r]xg ?ׂ.UmG΁s +29 ,Au^'Qg'=\.C‡>8GaA:'_=u%]Sz~)/QzCֆw}v}`Kx*L'J>/o7|}Iٷf&3Ă_1- 2°Eߦ`#_@0z<旽hi>-Yll}HKML yYNp%:^N|M"xU15_h:rN`dUՓp r tf^iAr1NRY\o:ڙN!M/2Jl5TfiV*>+ +%ƢyLb:akbkIkB&\ fkI9s 8Y6 LH6ziLs9p VZw亇4z)J5! {:(xahWvLshu8\ z"Oov.O4Cˌx:SXE++U+_R۩(u 儩,AG0) xZa]#*?.V'.\it2{aV .8TFte+T K!z-H)b^uVO ~∓U~k}h^HŴYՎ&ձŘ|u`l/S(_{IfRҮc^7Bba´POjm=iuj谫*HE`AY^Ӑ~i;# +B`td;UbT=Ա ,!^ (BwhR/퉒:IWvFEU~{V/uCJClٛ}; O6q  ;{yoP1=˭udbASB³ 4uLX(qc6Md1 NˍaG\ `X,,,zB-D(4 `JcEmN,?gZV,4al/vA%+L5Z,xXXpbePcu 2հRh VXF5&'¯4XC7N0Y:.@2^6]]P/:G,08d_,dkGlb:R%}hPY3a +@#b +9`mi4̄"DBȹZx`(IPGw`ao`Դ0K a 8cq2tm+L!SqF[}c=8Aj1Tzfiv="`J,1vlS+gmM΀p- $SVU+U VRp&(ͪNg{R>Ky_pX{ W4ӯ'=^}GOZ57gCC@}}]M]~<@}a"Caj҂/_pX;X?[G/`8,uH_0N'ʲsXsX N?GwɅ~&WKd͘4MS~  A$YWZjiSfs ZaQH/pe4hDzĜߘHܴDH )5'\\`< +aj+_IGrXpr J1!JF0l : +ⱒ`/da7=i^ a{OaỾo\ڮk5&](]N_F\|ڷd@"^ .|Cs2\p\Ȓ[MP.Zcl_q/n7ղ2)؜4YvmjB:yuذ"87v߮ ~kGGt8Vr8ɅWf2db$OO{)*BPpi֞ 4㕥Y'س*a 8dJ)膅XhV(̲){&قm>vOjL%lOLH)>:x/fZӮA$prRM)p>&To`K\|rFY(qX.r>W#![ +*bGC)f4$$ /9rvbQ~} :{dn +  .|#a} N.8Z#G۹t_ß)"} @I4#92pkוep#,Po+Wҟ;DIRDFU)Xb/ >z_@,a{΋/:V,܋/CJ/`Ez^W.|1~3Xp SD{=\hRO9{ae  +1,btraQ\8ƴ e>ǟ,TۖŸGxGG ]9ȥqpϑ /I* יR^æO㏍/ .W^!!E&\Hގ9< jY;DHtPJt$'>#M Õ9"Bd9,|+Myt]0֌K2.\|a7 {áms2o}:RYc4/ /ĜsDZaӐ|w9,O a \-ϟG>'1 3a IwXXxNG@`,Ƣ˖tD;;,>>4KR !0

        The NSS application programming interface allows winbind + for hostname information.

        The NSS application programming interface allows winbind to present itself as a source of system information when resolving UNIX usernames and groups. Winbind uses this interface, and information obtained from a Windows NT server using MSRPC @@ -280,67 +106,28 @@ NAME="AEN2262">15.4.2. Name Service Switch

        The primary control file for NSS is - /etc/nsswitch.conf. + users and groups.

        The primary control file for NSS is + /etc/nsswitch.conf. When a UNIX application makes a request to do a lookup - the C library looks in /etc/nsswitch.conf + the C library looks in /etc/nsswitch.conf for a line which matches the service type being requested, for - example the "passwd" service type is used when user or group names + example the "passwd" service type is used when user or group names are looked up. This config line species which implementations of that service should be tried and in what order. If the passwd - config line is:

        passwd: files example

        then the C library will first load a module called - /lib/libnss_files.so followed by - the module /lib/libnss_example.so. The + config line is:

        +passwd: files example
+

        then the C library will first load a module called + /lib/libnss_files.so followed by + the module /lib/libnss_example.so. The C library will dynamically load each of these modules in turn and call resolver functions within the modules to try to resolve the request. Once the request is resolved the C library returns the - result to the application.

        This NSS interface provides a very easy way for Winbind + result to the application.

        This NSS interface provides a very easy way for Winbind to hook into the operating system. All that needs to be done - is to put libnss_winbind.so in /lib/ - then add "winbind" into /etc/nsswitch.conf at + is to put libnss_winbind.so in /lib/ + then add "winbind" into /etc/nsswitch.conf at the appropriate place. The C library will then call Winbind to - resolve user and group names.

        Pluggable Authentication Modules

        Pluggable Authentication Modules, also known as PAM, is a system for abstracting authentication and authorization technologies. With a PAM module it is possible to specify different authentication methods for different system applications without @@ -348,46 +135,24 @@ NAME="AEN2278">15.4.3. Pluggable Authentication Modules

        Winbind uses the authentication management and password + a NIS database to log in over the network.

        Winbind uses the authentication management and password management PAM interface to integrate Windows NT users into a UNIX system. This allows Windows NT users to log in to a UNIX machine and be authenticated against a suitable Primary Domain Controller. These users can also change their passwords and have this change take effect directly on the Primary Domain Controller. -

        PAM is configured by providing control files in the directory - /etc/pam.d/ for each of the services that +

        PAM is configured by providing control files in the directory + /etc/pam.d/ for each of the services that require authentication. When an authentication request is made by an application the PAM code in the C library looks up this control file to determine what modules to load to do the authentication check and in what order. This interface makes adding a new authentication service for Winbind very easy, all that needs - to be done is that the pam_winbind.so module - is copied to /lib/security/ and the PAM + to be done is that the pam_winbind.so module + is copied to /lib/security/ and the PAM control files for relevant services are updated to allow authentication via winbind. See the PAM documentation - for more details.

        User and Group ID Allocation

        When a user or group is created under Windows NT is it allocated a numerical relative identifier (RID). This is slightly different to UNIX which has a range of numbers that are used to identify users, and the same range in which to identify @@ -398,20 +163,9 @@ NAME="AEN2286">15.4.4. User and Group ID Allocation

        The results of this mapping are stored persistently in + to UNIX user ids and group ids.

        The results of this mapping are stored persistently in an ID mapping database held in a tdb database). This ensures that - RIDs are mapped to UNIX IDs in a consistent way.

        Result Caching

        An active system can generate a lot of user and group name lookups. To reduce the network cost of these lookups winbind uses a caching scheme based on the SAM sequence number supplied by NT domain controllers. User or group information returned @@ -422,1182 +176,557 @@ NAME="AEN2290">15.4.5. Result Caching

        15.5. Installation and Configuration

        Many thanks to John Trostel jtrostel@snapserver.com -for providing the HOWTO for this section.

        This HOWTO describes how to get winbind services up and running + from the PDC.

        Installation and Configuration

        +Many thanks to John Trostel jtrostel@snapserver.com +for providing the HOWTO for this section. +

        +This HOWTO describes how to get winbind services up and running to control access and authenticate users on your Linux box using -the winbind services which come with SAMBA 2.2.2.

        There is also some Solaris specific information in -docs/textdocs/Solaris-Winbind-HOWTO.txt. -Future revisions of this document will incorporate that -information.

        15.5.1. Introduction

        This HOWTO describes the procedures used to get winbind up and -running on my RedHat 7.1 system. Winbind is capable of providing access +the winbind services which come with SAMBA 3.0. +

        Introduction

        +This section describes the procedures used to get winbind up and +running on a RedHat 7.1 system. Winbind is capable of providing access and authentication control for Windows Domain users through an NT or Win2K PDC for 'regular' services, such as telnet a nd ftp, as -well for SAMBA services.

        This HOWTO has been written from a 'RedHat-centric' perspective, so if +well for SAMBA services. +

        +This HOWTO has been written from a 'RedHat-centric' perspective, so if you are using another distribution, you may have to modify the instructions -somewhat to fit the way your distribution works.

        Requirements

        +If you have a samba configuration file that you are currently +using... BACK IT UP! If your system already uses PAM, +back up the /etc/pam.d directory +contents! If you haven't already made a boot disk, +MAKE ONE NOW! +

        +Messing with the pam configuration files can make it nearly impossible to log in to yourmachine. That's why you want to be able to boot back into your machine in single user mode and restore your -/etc/pam.d back to the original state they were in if -you get frustrated with the way things are going. ;-)

        The latest version of SAMBA (version 3.0 as of this writing), now +/etc/pam.d back to the original state they were in if +you get frustrated with the way things are going. ;-) +

        +The latest version of SAMBA (version 3.0 as of this writing), now includes a functioning winbindd daemon. Please refer to the -main SAMBA web page or, +main SAMBA web page or, better yet, your closest SAMBA mirror site for instructions on -downloading the source code.

        To allow Domain users the ability to access SAMBA shares and +downloading the source code. +

        +To allow Domain users the ability to access SAMBA shares and files, as well as potentially other services provided by your SAMBA machine, PAM (pluggable authentication modules) must be setup properly on your machine. In order to compile the winbind modules, you should have at least the pam libraries resident on your system. For recent RedHat systems (7.1, for instance), that -means pam-0.74-22. For best results, it is helpful to also -install the development packages in pam-devel-0.74-22.

        Testing Things Out

        +Before starting, it is probably best to kill off all the SAMBA +related daemons running on your server. Kill off all smbd, +nmbd, and winbindd processes that may be running. To use PAM, you will want to make sure that you have the -standard PAM package (for RedHat) which supplies the /etc/pam.d +standard PAM package (for RedHat) which supplies the /etc/pam.d directory structure, including the pam modules are used by pam-aware -services, several pam libraries, and the /usr/doc -and /usr/man entries for pam. Winbind built better +services, several pam libraries, and the /usr/doc +and /usr/man entries for pam. Winbind built better in SAMBA if the pam-devel package was also installed. This package includes -the header files needed to compile pam-aware applications. For instance, -my RedHat system has both pam-0.74-22 and -pam-devel-0.74-22 RPMs installed.

        15.5.3.1. Configure and compile SAMBA

        The configuration and compilation of SAMBA is pretty straightforward. +the header files needed to compile pam-aware applications. +

        Configure and compile SAMBA

        +The configuration and compilation of SAMBA is pretty straightforward. The first three steps may not be necessary depending upon -whether or not you have previously built the Samba binaries.

        root# autoconf
-root# make clean
-root# rm config.cache
-root# ./configure --with-winbind
-root# make
-root# make install

        This will, by default, install SAMBA in /usr/local/samba. +whether or not you have previously built the Samba binaries. +

        +root# autoconf
+root# make clean
+root# rm config.cache
+root# ./configure
+root# make
+root# make install
+

        +This will, by default, install SAMBA in /usr/local/samba. See the main SAMBA documentation if you want to install SAMBA somewhere else. -It will also build the winbindd executable and libraries.

        15.5.3.2. Configure nsswitch.conf and the -winbind libraries

        The libraries needed to run the winbindd daemon -through nsswitch need to be copied to their proper locations, so

        root# cp ../samba/source/nsswitch/libnss_winbind.so /lib

        I also found it necessary to make the following symbolic link:

        root# ln -s /lib/libnss_winbind.so /lib/libnss_winbind.so.2

        And, in the case of Sun solaris:

        root# ln -s /usr/lib/libnss_winbind.so /usr/lib/libnss_winbind.so.1 -root# ln -s /usr/lib/libnss_winbind.so /usr/lib/nss_winbind.so.1 -root# ln -s /usr/lib/libnss_winbind.so /usr/lib/nss_winbind.so.2

        Now, as root you need to edit /etc/nsswitch.conf to -allow user and group entries to be visible from the winbindd -daemon. My /etc/nsswitch.conf file look like -this after editing:

        	passwd:     files winbind
+It will also build the winbindd executable and libraries. 
+

        Configure nsswitch.conf and the +winbind libraries on Linux and Solaris

        +The libraries needed to run the winbindd daemon +through nsswitch need to be copied to their proper locations, so +

        +

        +root# cp ../samba/source/nsswitch/libnss_winbind.so /lib
+

        +

        +I also found it necessary to make the following symbolic link: +

        +root# ln -s /lib/libnss_winbind.so /lib/libnss_winbind.so.2 +

        And, in the case of Sun solaris:

        +root# ln -s /usr/lib/libnss_winbind.so /usr/lib/libnss_winbind.so.1
+root# ln -s /usr/lib/libnss_winbind.so /usr/lib/nss_winbind.so.1
+root# ln -s /usr/lib/libnss_winbind.so /usr/lib/nss_winbind.so.2
+

        +Now, as root you need to edit /etc/nsswitch.conf to +allow user and group entries to be visible from the winbindd +daemon. My /etc/nsswitch.conf file look like +this after editing: +

        +	passwd:     files winbind
 	shadow:     files 
-	group:      files winbind

        + group: files winbind +

        The libraries needed by the winbind daemon will be automatically -entered into the ldconfig cache the next time +entered into the ldconfig cache the next time your system reboots, but it -is faster (and you don't need to reboot) if you do it manually:

        root# /sbin/ldconfig -v | grep winbind

        This makes libnss_winbind available to winbindd -and echos back a check to you.

        15.5.3.3. Configure smb.conf

        Several parameters are needed in the smb.conf file to control -the behavior of winbindd. Configure -smb.conf These are described in more detail in -the winbindd(8) man page. My -smb.conf file was modified to -include the following entries in the [global] section:

        [global]
-     <...>
+is faster (and you don't need to reboot) if you do it manually:
+
        
+root# /sbin/ldconfig -v | grep winbind
+
        
+This makes libnss_winbind available to winbindd 
+and echos back a check to you.
+

        NSS Winbind on AIX

        (This section is only for those running AIX)

        +The winbind AIX identification module gets built as libnss_winbind.so in the +nsswitch directory of the samba source. This file can be copied to +/usr/lib/security, and the AIX naming convention would indicate that it +should be named WINBIND. A stanza like the following: +

        +WINBIND:
+        program = /usr/lib/security/WINBIND
+        options = authonly
+

        can then be added to +/usr/lib/security/methods.cfg. This module only +supports identification, but there have been success reports using the +standard winbind pam module for authentication. Use caution configuring +loadable authentication modules as it is possible to make it impossible +to logon to the system. More information about the AIX authentication +module API can be found at "Kernel Extensions and Device Support +Programming Concepts for AIX": +Chapter 18. Loadable Authentication Module Programming Interface +and more information on administering the modules at +"System Management Guide: Operating System and Devices". +

        Configure smb.conf

        +Several parameters are needed in the smb.conf file to control +the behavior of winbindd. Configure +smb.conf These are described in more detail in +the winbindd(8) man page. My +smb.conf file was modified to +include the following entries in the [global] section: +

        +[global]
+     <...>
      # separate domain and username with '+', like DOMAIN+username
-     winbind separator = +
+     winbind separator = +
      # use uids from 10000 to 20000 for domain users
-     winbind uid = 10000-20000
+     winbind uid = 10000-20000
      # use gids from 10000 to 20000 for domain groups
-     winbind gid = 10000-20000
+     winbind gid = 10000-20000
      # allow enumeration of winbind users and groups
-     winbind enum users = yes
-     winbind enum groups = yes
+     winbind enum users = yes
+     winbind enum groups = yes
      # give winbind users a real shell (only needed if they have telnet access)
-     template homedir = /home/winnt/%D/%U
-     template shell = /bin/bash

        Join the SAMBA server to the PDC domain

        +Enter the following command to make the SAMBA server join the +PDC domain, where DOMAIN is the name of +your Windows domain and Administrator is +a domain user who has administrative privileges in the domain. +

        +root# /usr/local/samba/bin/net join -S PDC -U Administrator +

        +The proper response to the command should be: "Joined the domain +DOMAIN" where DOMAIN +is your DOMAIN name. +

        Start up the winbindd daemon and test it!

        +Eventually, you will want to modify your smb startup script to automatically invoke the winbindd daemon when the other parts of SAMBA start, but it is possible to test out just the winbind portion first. To start up winbind services, enter the following -command as root:

        root# /usr/local/samba/bin/winbindd

        I'm always paranoid and like to make sure the daemon -is really running...

        root# ps -ae | grep winbindd

        This command should produce output like this, if the daemon is running

        3025 ? 00:00:00 winbindd

        Now... for the real test, try to get some information about the -users on your PDC

        root# /usr/local/samba/bin/wbinfo -u

        +command as root: +

        +root# /usr/local/samba/bin/winbindd +

        +Winbindd can now also run in 'dual daemon mode'. This will make it +run as 2 processes. The first will answer all requests from the cache, +thus making responses to clients faster. The other will +update the cache for the query that the first has just responded. +Advantage of this is that responses stay accurate and are faster. +You can enable dual daemon mode by adding -B to the commandline: +

        +root# /usr/local/samba/bin/winbindd -B +

        +I'm always paranoid and like to make sure the daemon +is really running... +

        +root# ps -ae | grep winbindd +

        +This command should produce output like this, if the daemon is running +

        +3025 ?        00:00:00 winbindd
+

        +Now... for the real test, try to get some information about the +users on your PDC +

        +root# /usr/local/samba/bin/wbinfo -u +

        This should echo back a list of users on your Windows users on -your PDC. For example, I get the following response:

        CEO+Administrator
-CEO+burdell
-CEO+Guest
-CEO+jt-ad
-CEO+krbtgt
-CEO+TsInternetUser

        Obviously, I have named my domain 'CEO' and my winbind -separator is '+'.

        You can do the same sort of thing to get group information from -the PDC:

        root# /usr/local/samba/bin/wbinfo -g
-CEO+Domain Admins
-CEO+Domain Users
-CEO+Domain Guests
-CEO+Domain Computers
-CEO+Domain Controllers
-CEO+Cert Publishers
-CEO+Schema Admins
-CEO+Enterprise Admins
-CEO+Group Policy Creator Owners

        The function 'getent' can now be used to get unified +your PDC. For example, I get the following response: +

        +	CEO+Administrator
+	CEO+burdell
+	CEO+Guest
+	CEO+jt-ad
+	CEO+krbtgt
+	CEO+TsInternetUser
+

        +Obviously, I have named my domain 'CEO' and my winbind +separator is '+'. +

        +You can do the same sort of thing to get group information from +the PDC: +

        +root# /usr/local/samba/bin/wbinfo -g
+	CEO+Domain Admins
+	CEO+Domain Users
+	CEO+Domain Guests
+	CEO+Domain Computers
+	CEO+Domain Controllers
+	CEO+Cert Publishers
+	CEO+Schema Admins
+	CEO+Enterprise Admins
+	CEO+Group Policy Creator Owners
+

        +The function 'getent' can now be used to get unified lists of both local and PDC users and groups. -Try the following command:

        root# getent passwd

        You should get a list that looks like your /etc/passwd +Try the following command: +

        +root# getent passwd +

        +You should get a list that looks like your /etc/passwd list followed by the domain users with their new uids, gids, home -directories and default shells.

        The same thing can be done for groups with the command

        root# getent group

        15.5.3.6. Fix the init.d startup scripts

        Fix the init.d startup scripts

        Linux

        +The winbindd daemon needs to start up after the +smbd and nmbd daemons are running. +To accomplish this task, you need to modify the startup scripts of your system. +They are located at /etc/init.d/smb in RedHat and +/etc/init.d/samba in Debian. script to add commands to invoke this daemon in the proper sequence. My -startup script starts up smbd, -nmbd, and winbindd from the -/usr/local/samba/bin directory directly. The 'start' -function in the script looks like this:

        start() {
-        KIND="SMB"
-        echo -n $"Starting $KIND services: "
+startup script starts up smbd, nmbd, and winbindd from the 
+/usr/local/samba/bin directory directly.  The 'start' 
+function in the script looks like this:
+
        +start() {
+        KIND="SMB"
+        echo -n $"Starting $KIND services: "
         daemon /usr/local/samba/bin/smbd $SMBDOPTIONS
         RETVAL=$?
         echo
-        KIND="NMB"
-        echo -n $"Starting $KIND services: "
+        KIND="NMB"
+        echo -n $"Starting $KIND services: "
         daemon /usr/local/samba/bin/nmbd $NMBDOPTIONS
         RETVAL2=$?
         echo
-        KIND="Winbind"
-        echo -n $"Starting $KIND services: "
+        KIND="Winbind"
+        echo -n $"Starting $KIND services: "
         daemon /usr/local/samba/bin/winbindd
         RETVAL3=$?
         echo
-        [ $RETVAL -eq 0 -a $RETVAL2 -eq 0 -a $RETVAL3 -eq 0 ] && touch /var/lock/subsys/smb || \
-           RETVAL=1
+        [ $RETVAL -eq 0 -a $RETVAL2 -eq 0 -a $RETVAL3 -eq 0 ] && \
+		touch /var/lock/subsys/smb || RETVAL=1
         return $RETVAL
-}
        The 'stop' function has a corresponding entry to shut down the 
-services and look s like this:
        stop() {
-        KIND="SMB"
-        echo -n $"Shutting down $KIND services: "
+}
+
        If you would like to run winbindd in dual daemon mode, replace 
+the line 
+
        +        daemon /usr/local/samba/bin/winbindd
+
        
+
+in the example above with:
+
+
        +        daemon /usr/local/samba/bin/winbindd -B
+
        .
+
        
+The 'stop' function has a corresponding entry to shut down the 
+services and looks like this:
+
        +stop() {
+        KIND="SMB"
+        echo -n $"Shutting down $KIND services: "
         killproc smbd
         RETVAL=$?
         echo
-        KIND="NMB"
-        echo -n $"Shutting down $KIND services: "
+        KIND="NMB"
+        echo -n $"Shutting down $KIND services: "
         killproc nmbd
         RETVAL2=$?
         echo
-        KIND="Winbind"
-        echo -n $"Shutting down $KIND services: "
+        KIND="Winbind"
+        echo -n $"Shutting down $KIND services: "
         killproc winbindd
         RETVAL3=$?
-        [ $RETVAL -eq 0 -a $RETVAL2 -eq 0 -a $RETVAL3 -eq 0 ] && rm -f /var/lock/subsys/smb
-        echo ""
+        [ $RETVAL -eq 0 -a $RETVAL2 -eq 0 -a $RETVAL3 -eq 0 ] && \
+		 rm -f /var/lock/subsys/smb
+        echo ""
         return $RETVAL
-}
        Solaris

        Winbind doesn't work on solaris 9, see the Portability chapter for details.

        On solaris, you need to modify the +/etc/init.d/samba.server startup script. It usually only starts smbd and nmbd but should now start winbindd too. If you -have samba installed in /usr/local/samba/bin, -the file could contains something like this:

        ##
-## samba.server
-##
+have samba installed in /usr/local/samba/bin, 
+the file could contains something like this:
+
        +	##
+	## samba.server
+	##
 
-if [ ! -d /usr/bin ]
-then                    # /usr not mounted
-        exit
-fi
+	if [ ! -d /usr/bin ]
+	then                    # /usr not mounted
+		exit
+	fi
 
-killproc() {            # kill the named process(es)
-        pid=`/usr/bin/ps -e |
-             /usr/bin/grep -w $1 |
-             /usr/bin/sed -e 's/^  *//' -e 's/ .*//'`
-        [ "$pid" != "" ] && kill $pid
-}
- 
-# Start/stop processes required for samba server
+	killproc() {            # kill the named process(es)
+		pid=`/usr/bin/ps -e |
+		     /usr/bin/grep -w $1 |
+		     /usr/bin/sed -e 's/^  *//' -e 's/ .*//'`
+		[ "$pid" != "" ] && kill $pid
+	}
+	 
+	# Start/stop processes required for samba server
+
+	case "$1" in
+
+	'start')
+	#
+	# Edit these lines to suit your installation (paths, workgroup, host)
+	#
+	echo Starting SMBD
+	   /usr/local/samba/bin/smbd -D -s \
+		/usr/local/samba/smb.conf
 
-case "$1" in
+	echo Starting NMBD
+	   /usr/local/samba/bin/nmbd -D -l \
+		/usr/local/samba/var/log -s /usr/local/samba/smb.conf
 
-'start')
-#
-# Edit these lines to suit your installation (paths, workgroup, host)
-#
-echo Starting SMBD
-   /usr/local/samba/bin/smbd -D -s \
-	/usr/local/samba/smb.conf
+	echo Starting Winbind Daemon
+	   /usr/local/samba/bin/winbindd
+	   ;;
 
-echo Starting NMBD
-   /usr/local/samba/bin/nmbd -D -l \
-	/usr/local/samba/var/log -s /usr/local/samba/smb.conf
+	'stop')
+	   killproc nmbd
+	   killproc smbd
+	   killproc winbindd
+	   ;;
 
-echo Starting Winbind Daemon
-   /usr/local/samba/bin/winbindd
-   ;;
+	*)
+	   echo "Usage: /etc/init.d/samba.server { start | stop }"
+	   ;;
+	esac
+
        
+Again, if you would like to run samba in dual daemon mode, replace 
+
        +	/usr/local/samba/bin/winbindd
+
        
 
-'stop')
-   killproc nmbd
-   killproc smbd
-   killproc winbindd
-   ;;
+in the script above with:
 
-*)
-   echo "Usage: /etc/init.d/samba.server { start | stop }"
-   ;;
-esac

        Restarting

        +If you restart the smbd, nmbd, and winbindd daemons at this point, you should be able to connect to the samba server as a domain member just as -if you were a local user.

        Configure Winbind and PAM

        +If you have made it this far, you know that winbindd and samba are working together. If you want to use winbind to provide authentication for other services, keep reading. The pam configuration files need to be altered in this step. (Did you remember to make backups of your original -/etc/pam.d files? If not, do it now.)

        You will need a pam module to use winbindd with these other services. This -module will be compiled in the ../source/nsswitch directory -by invoking the command

        root# make nsswitch/pam_winbind.so

        from the ../source directory. The -pam_winbind.so file should be copied to the location of +/etc/pam.d files? If not, do it now.) +

        +You will need a pam module to use winbindd with these other services. This +module will be compiled in the ../source/nsswitch directory +by invoking the command +

        +root# make nsswitch/pam_winbind.so +

        +from the ../source directory. The +pam_winbind.so file should be copied to the location of your other pam security modules. On my RedHat system, this was the -/lib/security directory. On Solaris, the pam security -modules reside in /usr/lib/security.

        root# cp ../samba/source/nsswitch/pam_winbind.so /lib/security

        15.5.3.7.1. Linux/FreeBSD-specific PAM configuration

        The /etc/pam.d/samba file does not need to be changed. I -just left this fileas it was:

        auth    required        /lib/security/pam_stack.so service=system-auth
-account required        /lib/security/pam_stack.so service=system-auth

        The other services that I modified to allow the use of winbind +/lib/security directory. On Solaris, the pam security +modules reside in /usr/lib/security. +

        +root# cp ../samba/source/nsswitch/pam_winbind.so /lib/security +

        Linux/FreeBSD-specific PAM configuration

        +The /etc/pam.d/samba file does not need to be changed. I +just left this fileas it was: +

        +	auth    required        /lib/security/pam_stack.so service=system-auth
+	account required        /lib/security/pam_stack.so service=system-auth
+

        +The other services that I modified to allow the use of winbind as an authentication service were the normal login on the console (or a terminal session), telnet logins, and ftp service. In order to enable these services, you may first need to change the entries in -/etc/xinetd.d (or /etc/inetd.conf). +/etc/xinetd.d (or /etc/inetd.conf). RedHat 7.1 uses the new xinetd.d structure, in this case you need -to change the lines in /etc/xinetd.d/telnet -and /etc/xinetd.d/wu-ftp from 

        enable = no

        to

        enable = yes

        +to change the lines in /etc/xinetd.d/telnet +and /etc/xinetd.d/wu-ftp from +

        +	enable = no
+

        +to +

        +	enable = yes
+

        For ftp services to work properly, you will also need to either have individual directories for the domain users already present on the server, or change the home directory template to a general directory for all domain users. These can be easily set using -the smb.conf global entry -template homedir.

        The /etc/pam.d/ftp file can be changed +the smb.conf global entry +template homedir. +

        +The /etc/pam.d/ftp file can be changed to allow winbind ftp access in a manner similar to the -samba file. My /etc/pam.d/ftp file was -changed to look like this:

        auth       required     /lib/security/pam_listfile.so item=user sense=deny file=/etc/ftpusers onerr=succeed
-auth       sufficient   /lib/security/pam_winbind.so
-auth       required     /lib/security/pam_stack.so service=system-auth
-auth       required     /lib/security/pam_shells.so
-account    sufficient   /lib/security/pam_winbind.so
-account    required     /lib/security/pam_stack.so service=system-auth
-session    required     /lib/security/pam_stack.so service=system-auth

        The /etc/pam.d/login file can be changed nearly the -same way. It now looks like this:

        auth       required     /lib/security/pam_securetty.so
-auth       sufficient   /lib/security/pam_winbind.so
-auth       sufficient   /lib/security/pam_unix.so use_first_pass
-auth       required     /lib/security/pam_stack.so service=system-auth
-auth       required     /lib/security/pam_nologin.so
-account    sufficient   /lib/security/pam_winbind.so
-account    required     /lib/security/pam_stack.so service=system-auth
-password   required     /lib/security/pam_stack.so service=system-auth
-session    required     /lib/security/pam_stack.so service=system-auth
-session    optional     /lib/security/pam_console.so

        In this case, I added the auth sufficient /lib/security/pam_winbind.so -lines as before, but also added the required pam_securetty.so +samba file. My /etc/pam.d/ftp file was +changed to look like this: +

        +	auth       required     /lib/security/pam_listfile.so item=user sense=deny \
+		 file=/etc/ftpusers onerr=succeed
+	auth       sufficient   /lib/security/pam_winbind.so
+	auth       required     /lib/security/pam_stack.so service=system-auth
+	auth       required     /lib/security/pam_shells.so
+	account    sufficient   /lib/security/pam_winbind.so
+	account    required     /lib/security/pam_stack.so service=system-auth
+	session    required     /lib/security/pam_stack.so service=system-auth
+

        +The /etc/pam.d/login file can be changed nearly the +same way. It now looks like this: +

        +	auth       required     /lib/security/pam_securetty.so
+	auth       sufficient   /lib/security/pam_winbind.so
+	auth       sufficient   /lib/security/pam_unix.so use_first_pass
+	auth       required     /lib/security/pam_stack.so service=system-auth
+	auth       required     /lib/security/pam_nologin.so
+	account    sufficient   /lib/security/pam_winbind.so
+	account    required     /lib/security/pam_stack.so service=system-auth
+	password   required     /lib/security/pam_stack.so service=system-auth
+	session    required     /lib/security/pam_stack.so service=system-auth
+	session    optional     /lib/security/pam_console.so
+

        +In this case, I added the 

        auth sufficient /lib/security/pam_winbind.so

        +lines as before, but also added the 

        required pam_securetty.so

        above it, to disallow root logins over the network. I also added a -sufficient /lib/security/pam_unix.so use_first_pass -line after the winbind.so line to get rid of annoying -double prompts for passwords.

        Solaris-specific configuration

        +The /etc/pam.conf needs to be changed. I changed this file so that my Domain users can logon both locally as well as telnet.The following are the changes that I made.You can customize the pam.conf file as per your requirements,but be sure of those changes because in the worst case it will leave your system -nearly impossible to boot.

        #
-#ident	"@(#)pam.conf	1.14	99/09/16 SMI"
-#
-# Copyright (c) 1996-1999, Sun Microsystems, Inc.
-# All Rights Reserved.
-#
-# PAM configuration
-#
-# Authentication management
-#
-login   auth required   /usr/lib/security/pam_winbind.so
-login	auth required 	/usr/lib/security/$ISA/pam_unix.so.1 try_first_pass 
-login	auth required 	/usr/lib/security/$ISA/pam_dial_auth.so.1 try_first_pass 
-#
-rlogin  auth sufficient /usr/lib/security/pam_winbind.so
-rlogin  auth sufficient /usr/lib/security/$ISA/pam_rhosts_auth.so.1
-rlogin	auth required 	/usr/lib/security/$ISA/pam_unix.so.1 try_first_pass
-#
-dtlogin auth sufficient /usr/lib/security/pam_winbind.so
-dtlogin	auth required 	/usr/lib/security/$ISA/pam_unix.so.1 try_first_pass
-#
-rsh	auth required	/usr/lib/security/$ISA/pam_rhosts_auth.so.1
-other   auth sufficient /usr/lib/security/pam_winbind.so
-other	auth required	/usr/lib/security/$ISA/pam_unix.so.1 try_first_pass
-#
-# Account management
-#
-login   account sufficient      /usr/lib/security/pam_winbind.so
-login	account requisite	/usr/lib/security/$ISA/pam_roles.so.1 
-login	account required	/usr/lib/security/$ISA/pam_unix.so.1 
-#
-dtlogin account sufficient      /usr/lib/security/pam_winbind.so
-dtlogin	account requisite	/usr/lib/security/$ISA/pam_roles.so.1 
-dtlogin	account required	/usr/lib/security/$ISA/pam_unix.so.1 
-#
-other   account sufficient      /usr/lib/security/pam_winbind.so
-other	account requisite	/usr/lib/security/$ISA/pam_roles.so.1 
-other	account required	/usr/lib/security/$ISA/pam_unix.so.1 
-#
-# Session management
-#
-other	session required	/usr/lib/security/$ISA/pam_unix.so.1 
-#
-# Password management
-#
-#other   password sufficient     /usr/lib/security/pam_winbind.so
-other	password required	/usr/lib/security/$ISA/pam_unix.so.1 
-dtsession auth required	/usr/lib/security/$ISA/pam_unix.so.1
-#
-# Support for Kerberos V5 authentication (uncomment to use Kerberos)
-#
-#rlogin	auth optional	/usr/lib/security/$ISA/pam_krb5.so.1 try_first_pass
-#login	auth optional	/usr/lib/security/$ISA/pam_krb5.so.1 try_first_pass
-#dtlogin	auth optional	/usr/lib/security/$ISA/pam_krb5.so.1 try_first_pass
-#other	auth optional	/usr/lib/security/$ISA/pam_krb5.so.1 try_first_pass
-#dtlogin	account optional /usr/lib/security/$ISA/pam_krb5.so.1
-#other	account optional /usr/lib/security/$ISA/pam_krb5.so.1
-#other	session optional /usr/lib/security/$ISA/pam_krb5.so.1
-#other	password optional /usr/lib/security/$ISA/pam_krb5.so.1 try_first_pass

        I also added a try_first_pass line after the winbind.so line to get rid of -annoying double prompts for passwords.

        Now restart your Samba & try connecting through your application that you -configured in the pam.conf.

        15.6. Limitations

        Winbind has a number of limitations in its current +nearly impossible to boot. +

        +	#
+	#ident	"@(#)pam.conf	1.14	99/09/16 SMI"
+	#
+	# Copyright (c) 1996-1999, Sun Microsystems, Inc.
+	# All Rights Reserved.
+	#
+	# PAM configuration
+	#
+	# Authentication management
+	#
+	login   auth required   /usr/lib/security/pam_winbind.so
+	login	auth required 	/usr/lib/security/$ISA/pam_unix.so.1 try_first_pass 
+	login	auth required 	/usr/lib/security/$ISA/pam_dial_auth.so.1 try_first_pass 
+	#
+	rlogin  auth sufficient /usr/lib/security/pam_winbind.so
+	rlogin  auth sufficient /usr/lib/security/$ISA/pam_rhosts_auth.so.1
+	rlogin	auth required 	/usr/lib/security/$ISA/pam_unix.so.1 try_first_pass
+	#
+	dtlogin auth sufficient /usr/lib/security/pam_winbind.so
+	dtlogin	auth required 	/usr/lib/security/$ISA/pam_unix.so.1 try_first_pass
+	#
+	rsh	auth required	/usr/lib/security/$ISA/pam_rhosts_auth.so.1
+	other   auth sufficient /usr/lib/security/pam_winbind.so
+	other	auth required	/usr/lib/security/$ISA/pam_unix.so.1 try_first_pass
+	#
+	# Account management
+	#
+	login   account sufficient      /usr/lib/security/pam_winbind.so
+	login	account requisite	/usr/lib/security/$ISA/pam_roles.so.1 
+	login	account required	/usr/lib/security/$ISA/pam_unix.so.1 
+	#
+	dtlogin account sufficient      /usr/lib/security/pam_winbind.so
+	dtlogin	account requisite	/usr/lib/security/$ISA/pam_roles.so.1 
+	dtlogin	account required	/usr/lib/security/$ISA/pam_unix.so.1 
+	#
+	other   account sufficient      /usr/lib/security/pam_winbind.so
+	other	account requisite	/usr/lib/security/$ISA/pam_roles.so.1 
+	other	account required	/usr/lib/security/$ISA/pam_unix.so.1 
+	#
+	# Session management
+	#
+	other	session required	/usr/lib/security/$ISA/pam_unix.so.1 
+	#
+	# Password management
+	#
+	#other   password sufficient     /usr/lib/security/pam_winbind.so
+	other	password required	/usr/lib/security/$ISA/pam_unix.so.1 
+	dtsession auth required	/usr/lib/security/$ISA/pam_unix.so.1
+	#
+	# Support for Kerberos V5 authentication (uncomment to use Kerberos)
+	#
+	#rlogin	auth optional	/usr/lib/security/$ISA/pam_krb5.so.1 try_first_pass
+	#login	auth optional	/usr/lib/security/$ISA/pam_krb5.so.1 try_first_pass
+	#dtlogin	auth optional	/usr/lib/security/$ISA/pam_krb5.so.1 try_first_pass
+	#other	auth optional	/usr/lib/security/$ISA/pam_krb5.so.1 try_first_pass
+	#dtlogin	account optional /usr/lib/security/$ISA/pam_krb5.so.1
+	#other	account optional /usr/lib/security/$ISA/pam_krb5.so.1
+	#other	session optional /usr/lib/security/$ISA/pam_krb5.so.1
+	#other	password optional /usr/lib/security/$ISA/pam_krb5.so.1 try_first_pass
+

        +I also added a try_first_pass line after the winbind.so line to get rid of +annoying double prompts for passwords. +

        +Now restart your Samba and try connecting through your application that you +configured in the pam.conf. +

        Conclusion

        The winbind system, through the use of the Name Service + Switch, Pluggable Authentication Modules, and appropriate + Microsoft RPC calls have allowed us to provide seamless + integration of Microsoft Windows NT domain users on a + UNIX system. The result is a great reduction in the administrative + cost of running a mixed UNIX and NT network.

        Common Errors

        Winbind has a number of limitations in its current released version that we hope to overcome in future - releases:

        PrevHomeNext
        Printing SupportUpPassdb MySQL plugin
        \ No newline at end of file + that may be been set for Windows NT users, this is + instead up to the PDC to enforce.

        PrevUpNext
        Chapter20.Stackable VFS modulesHomeChapter22.Advanced Network Manangement
        diff --git a/docs/htmldocs/winbindd.8.html b/docs/htmldocs/winbindd.8.html index fb8c9c0458..c1a64d6a00 100644 --- a/docs/htmldocs/winbindd.8.html +++ b/docs/htmldocs/winbindd.8.html @@ -1,644 +1,153 @@ - -winbindd

        winbindd

        Name

        winbindd -- Name Service Switch daemon for resolving names - from NT servers

        DESCRIPTION

        This program is part of the Samba suite.

        winbindd is a daemon that provides +winbindd

        Name

        winbindd — Name Service Switch daemon for resolving names + from NT servers

        Synopsis

        winbindd [-F] [-S] [-i] [-B] [-d <debug level>] [-s <smb config file>] [-n]

        DESCRIPTION

        This program is part of the Samba(7) suite.

        winbindd is a daemon that provides a service for the Name Service Switch capability that is present in most modern C libraries. The Name Service Switch allows user and system information to be obtained from different databases services such as NIS or DNS. The exact behaviour can be configured - throught the /etc/nsswitch.conf file. + throught the /etc/nsswitch.conf file. Users and groups are allocated as they are resolved to a range of user and group ids specified by the administrator of the - Samba system.

        The service provided by winbindd is called `winbind' and + Samba system.

        The service provided by winbindd is called `winbind' and can be used to resolve user and group information from a Windows NT server. The service can also provide authentication - services via an associated PAM module.

        The pam_winbind module in the 2.2.2 release only - supports the auth and account + services via an associated PAM module.

        + The pam_winbind module in the 2.2.2 release only + supports the auth and account module-types. The latter simply performs a getpwnam() to verify that the system can obtain a uid for the - user. If the libnss_winbind library has been correctly + user. If the libnss_winbind library has been correctly installed, this should always succeed. -

        The following nsswitch databases are implemented by - the winbindd service:

        hosts

        User information traditionally stored in - the hosts(5) file and used by - gethostbyname(3) functions. Names are +

        The following nsswitch databases are implemented by + the winbindd service:

        hosts

        User information traditionally stored in + the hosts(5) file and used by + gethostbyname(3) functions. Names are resolved through the WINS server or by broadcast. -

        passwd

        User information traditionally stored in - the passwd(5) file and used by - getpwent(3) functions.

        group

        Group information traditionally stored in - the group(5) file and used by - getgrent(3) functions.

        For example, the following simple configuration in the - /etc/nsswitch.conf file can be used to initially - resolve user and group information from /etc/passwd - and /etc/group and then from the - Windows NT server. 

        passwd:         files winbind
+		
        passwd
        User information traditionally stored in 
+		the passwd(5) file and used by 
+		getpwent(3) functions. 
        group
        Group information traditionally stored in 
+		the group(5) file and used by 		
+		getgrent(3) functions. 
        For example, the following simple configuration in the
+	/etc/nsswitch.conf file can be used to initially 
+	resolve user and group information from /etc/passwd
+	 and /etc/group and then from the 
+	Windows NT server.
+
        +passwd:         files winbind
 group:          files winbind
-

        The following simple configuration in the - /etc/nsswitch.conf file can be used to initially - resolve hostnames from /etc/hosts and then from the - WINS server.

        OPTIONS

        -F

        If specified, this parameter causes - the main winbindd process to not daemonize, +

        The following simple configuration in the + /etc/nsswitch.conf file can be used to initially + resolve hostnames from /etc/hosts and then from the + WINS server.

        OPTIONS

        -F

        If specified, this parameter causes + the main winbindd process to not daemonize, i.e. double-fork and disassociate with the terminal. Child processes are still created as normal to service each connection request, but the main process does not exit. This operation mode is suitable for running - winbindd under process supervisors such - as supervise and svscan - from Daniel J. Bernstein's daemontools + winbindd under process supervisors such + as supervise and svscan + from Daniel J. Bernstein's daemontools package, or the AIX process monitor. -

        -S

        If specified, this parameter causes - winbindd to log to standard output rather - than a file.

        -d debuglevel

        Sets the debuglevel to an integer between - 0 and 100. 0 is for no debugging and 100 is for reams and - reams. To submit a bug report to the Samba Team, use debug - level 100 (see BUGS.txt).

        -i

        Tells winbindd to not +

        -S

        If specified, this parameter causes + winbindd to log to standard output rather + than a file.

        -V

        Prints the version number for +smbd.

        -s <configuration file>

        The file specified contains the +configuration details required by the server. The +information in this file includes server-specific +information such as what printcap file to use, as well +as descriptions of all the services that the server is +to provide. See +smb.conf(5) for more information. +The default configuration file name is determined at +compile time.

        -d|--debug=debuglevel

        debuglevel is an integer +from 0 to 10. The default value if this parameter is +not specified is zero.

        The higher this value, the more detail will be +logged to the log files about the activities of the +server. At level 0, only critical errors and serious +warnings will be logged. Level 1 is a reasonable level for +day to day running - it generates a small amount of +information about operations carried out.

        Levels above 1 will generate considerable +amounts of log data, and should only be used when +investigating a problem. Levels above 3 are designed for +use only by developers and generate HUGE amounts of log +data, most of which is extremely cryptic.

        Note that specifying this parameter here will +override the log +level parameter in the +smb.conf(5) file.

        -l|--logfile=logbasename

        File name for log/debug files. The extension +".client" will be appended. The log file is +never removed by the client. +

        -h|--help

        Print a summary of command line options. +

        -i

        Tells winbindd to not become a daemon and detach from the current terminal. This option is used by developers when interactive debugging - of winbindd is required. - winbindd also logs to standard output, - as if the -S parameter had been given. -

        -n

        Disable caching. This means winbindd will + of winbindd is required. + winbindd also logs to standard output, + as if the -S parameter had been given. +

        -n

        Disable caching. This means winbindd will always have to wait for a response from the domain controller before it can respond to a client and this thus makes things slower. The results will however be more accurate, since results from the cache might not be up-to-date. This might also temporarily hang winbindd if the DC doesn't respond. -

        -B

        Dual daemon mode. This means winbindd will run +

        -B

        Dual daemon mode. This means winbindd will run as 2 threads. The first will answer all requests from the cache, thus making responses to clients faster. The other will update the cache for the query that the first has just responded. - Advantage of this is that responses are accurate and fast. -

        -s|--conf=smb.conf

        Specifies the location of the all-important - smb.conf file.

        NAME AND ID RESOLUTION

        Users and groups on a Windows NT server are assigned + Advantage of this is that responses stay accurate and are faster. +

        NAME AND ID RESOLUTION

        Users and groups on a Windows NT server are assigned a relative id (rid) which is unique for the domain when the user or group is created. To convert the Windows NT user or group into a unix user or group, a mapping between rids and unix user - and group ids is required. This is one of the jobs that winbindd performs.

        As winbindd users and groups are resolved from a server, user + and group ids is required. This is one of the jobs that + winbindd performs.

        As winbindd users and groups are resolved from a server, user and group ids are allocated from a specified range. This is done on a first come, first served basis, although all existing users and groups will be mapped as soon as a client performs a user or group enumeration command. The allocated unix ids are stored in a database file under the Samba lock directory and will be - remembered.

        WARNING: The rid to unix id database is the only location + remembered.

        WARNING: The rid to unix id database is the only location where the user and group mappings are stored by winbindd. If this file is deleted or corrupted, there is no way for winbindd to determine which user and group ids correspond to Windows NT user - and group rids.

        CONFIGURATION

        Configuration of the winbindd daemon - is done through configuration parameters in the smb.conf(5) - file. All parameters should be specified in the - [global] section of smb.conf.

        EXAMPLE SETUP

        To setup winbindd for user and group lookups plus + and group rids.

        CONFIGURATION

        Configuration of the winbindd daemon + is done through configuration parameters in the smb.conf(5) file. All parameters should be specified in the + [global] section of smb.conf.

        EXAMPLE SETUP

        To setup winbindd for user and group lookups plus authentication from a domain controller use something like the - following setup. This was tested on a RedHat 6.2 Linux box.

        In /etc/nsswitch.conf put the - following:

        passwd:     files winbind
+	following setup. This was tested on a RedHat 6.2 Linux box. 
        In /etc/nsswitch.conf put the 
+	following:
+
        +passwd:     files winbind
 group:      files winbind
-

        In /etc/pam.d/* replace the - auth lines with something like this: 

        auth       required	/lib/security/pam_securetty.so
+

        In /etc/pam.d/* replace the + auth lines with something like this: +

        +auth       required	/lib/security/pam_securetty.so
 auth       required	/lib/security/pam_nologin.so
 auth       sufficient	/lib/security/pam_winbind.so
 auth       required     /lib/security/pam_pwdb.so use_first_pass shadow nullok
-

        Note in particular the use of the sufficient - keyword and the use_first_pass keyword.

        Now replace the account lines with this:

        account required /lib/security/pam_winbind.so -

        The next step is to join the domain. To do that use the - smbpasswd program like this:

        smbpasswd -j DOMAIN -r PDC -U - Administrator

        The username after the -U can be any +

        Note in particular the use of the sufficient + keyword and the use_first_pass keyword.

        Now replace the account lines with this:

        account required /lib/security/pam_winbind.so +

        The next step is to join the domain. To do that use the + net program like this:

        net join -S PDC -U Administrator

        The username after the -U can be any Domain user that has administrator privileges on the machine. - Substitute your domain name for "DOMAIN" and the name of your PDC - for "PDC".

        Next copy libnss_winbind.so to - /lib and pam_winbind.so - to /lib/security. A symbolic link needs to be - made from /lib/libnss_winbind.so to - /lib/libnss_winbind.so.2. If you are using an + Substitute the name or IP of your PDC for "PDC".

        Next copy libnss_winbind.so to + /lib and pam_winbind.so + to /lib/security. A symbolic link needs to be + made from /lib/libnss_winbind.so to + /lib/libnss_winbind.so.2. If you are using an older version of glibc then the target of the link should be - /lib/libnss_winbind.so.1.

        Finally, setup a smb.conf containing directives like the - following: 

        [global]
+	/lib/libnss_winbind.so.1.
        Finally, setup a smb.conf(5) containing directives like the 
+	following:
+
        +[global]
 	winbind separator = +
         winbind cache time = 10
         template shell = /bin/bash
@@ -648,274 +157,58 @@ CLASS="PROGRAMLISTING"
         workgroup = DOMAIN
         security = domain
         password server = *
-

        Now start winbindd and you should find that your user and +

        Now start winbindd and you should find that your user and group database is expanded to include your NT users and groups, and that you can login to your unix box as a domain user, using the DOMAIN+user syntax for the username. You may wish to use the - commands getent passwd and getent group - to confirm the correct operation of winbindd.

        NOTES

        The following notes are useful when configuring and - running winbindd:

        nmbd must be running on the local machine - for winbindd to work. winbindd - queries the list of trusted domains for the Windows NT server - on startup and when a SIGHUP is received. Thus, for a running winbindd to become aware of new trust relationships between - servers, it must be sent a SIGHUP signal.

        Client processes resolving names through the winbindd - nsswitch module read an environment variable named $WINBINDD_DOMAIN. If this variable contains a comma separated - list of Windows NT domain names, then winbindd will only resolve users - and groups within those Windows NT domains.

        PAM is really easy to misconfigure. Make sure you know what + commands getent passwd and getent group + to confirm the correct operation of winbindd.

        NOTES

        The following notes are useful when configuring and + running winbindd:

        nmbd(8) must be running on the local machine + for winbindd to work. winbindd queries + the list of trusted domains for the Windows NT server + on startup and when a SIGHUP is received. Thus, for a running + winbindd to become aware of new trust relationships between + servers, it must be sent a SIGHUP signal.

        PAM is really easy to misconfigure. Make sure you know what you are doing when modifying PAM configuration files. It is possible - to set up PAM such that you can no longer log into your system.

        If more than one UNIX machine is running winbindd, + to set up PAM such that you can no longer log into your system.

        If more than one UNIX machine is running winbindd, then in general the user and groups ids allocated by winbindd will not be the same. The user and group ids will only be valid for the local - machine.

        If the the Windows NT RID to UNIX user and group id mapping - file is damaged or destroyed then the mappings will be lost.

        SIGNALS

        The following signals can be used to manipulate the - winbindd daemon.

        SIGHUP

        Reload the smb.conf(5) - file and apply any parameter changes to the running + machine.

        If the the Windows NT RID to UNIX user and group id mapping + file is damaged or destroyed then the mappings will be lost.

        SIGNALS

        The following signals can be used to manipulate the + winbindd daemon.

        SIGHUP

        Reload the smb.conf(5) file and + apply any parameter changes to the running version of winbindd. This signal also clears any cached user and group information. The list of other domains trusted - by winbindd is also reloaded.

        SIGUSR1

        The SIGUSR1 signal will cause winbindd to write status information to the winbind + by winbindd is also reloaded.

        SIGUSR1

        The SIGUSR1 signal will cause + winbindd to write status information to the winbind log file including information about the number of user and - group ids allocated by winbindd.

        Log files are stored in the filename specified by the - log file parameter.

        FILES

        /etc/nsswitch.conf(5)

        Name service switch configuration file.

        /tmp/.winbindd/pipe

        The UNIX pipe over which clients communicate with - the winbindd program. For security reasons, the + group ids allocated by winbindd.

        Log files are stored in the filename specified by the + log file parameter.

        FILES

        /etc/nsswitch.conf(5)

        Name service switch configuration file.

        /tmp/.winbindd/pipe

        The UNIX pipe over which clients communicate with + the winbindd program. For security reasons, the winbind client will only attempt to connect to the winbindd daemon - if both the /tmp/.winbindd directory - and /tmp/.winbindd/pipe file are owned by - root.

        /lib/libnss_winbind.so.X

        Implementation of name service switch library. -

        $LOCKDIR/winbindd_idmap.tdb

        Storage for the Windows NT rid to UNIX user/group + if both the /tmp/.winbindd directory + and /tmp/.winbindd/pipe file are owned by + root.

        $LOCKDIR/winbindd_privilaged/pipe

        The UNIX pipe over which 'privilaged' clients + communicate with the winbindd program. For security + reasons, access to some winbindd functions - like those needed by + the ntlm_auth utility - is restricted. By default, + only users in the 'root' group will get this access, however the administrator + may change the group permissions on $LOCKDIR/winbindd_privilaged to allow + programs like 'squid' to use ntlm_auth. + Note that the winbind client will only attempt to connect to the winbindd daemon + if both the $LOCKDIR/winbindd_privilaged directory + and $LOCKDIR/winbindd_privilaged/pipe file are owned by + root.

        /lib/libnss_winbind.so.X

        Implementation of name service switch library. +

        $LOCKDIR/winbindd_idmap.tdb

        Storage for the Windows NT rid to UNIX user/group id mapping. The lock directory is specified when Samba is initially - compiled using the --with-lockdir option. - This directory is by default /usr/local/samba/var/locks - .

        $LOCKDIR/winbindd_cache.tdb

        Storage for cached user and group information. -

        VERSION

        This man page is correct for version 3.0 of - the Samba suite.

        SEE ALSO

        nsswitch.conf(5), - samba(7), - wbinfo(1), - smb.conf(5)

        AUTHOR

        The original Samba software and related utilities + compiled using the --with-lockdir option. + This directory is by default /usr/local/samba/var/locks + .

        $LOCKDIR/winbindd_cache.tdb

        Storage for cached user and group information. +

        VERSION

        This man page is correct for version 3.0 of + the Samba suite.

        SEE ALSO

        nsswitch.conf(5), Samba(7), wbinfo(8), smb.conf(5)

        AUTHOR

        The original Samba software and related utilities were created by Andrew Tridgell. Samba is now developed by the Samba Team as an Open Source project similar - to the way the Linux kernel is developed.

        wbinfo and winbindd - were written by Tim Potter.

        The conversion to DocBook for Samba 2.2 was done - by Gerald Carter

        \ No newline at end of file + to the way the Linux kernel is developed.

        wbinfo and winbindd were + written by Tim Potter.

        The conversion to DocBook for Samba 2.2 was done + by Gerald Carter. The conversion to DocBook XML 4.2 for + Samba 3.0 was done by Alexander Bokovoy.

        diff --git a/docs/manpages/findsmb.1 b/docs/manpages/findsmb.1 index 22362f8b6d..bd9ba62b05 100644 --- a/docs/manpages/findsmb.1 +++ b/docs/manpages/findsmb.1 @@ -1,100 +1,95 @@ -.\" This manpage has been automatically generated by docbook2man -.\" from a DocBook document. This tool can be found at: -.\" -.\" Please send any bug reports, improvements, comments, patches, -.\" etc. to Steve Cheng . -.TH "FINDSMB" "1" "04 March 2003" "" "" +.\"Generated by db2man.xsl. Don't modify this, modify the source. +.de Sh \" Subsection +.br +.if t .Sp +.ne 5 +.PP +\fB\\$1\fR +.PP +.. +.de Sp \" Vertical space (when we can't use .PP) +.if t .sp .5v +.if n .sp +.. +.de Ip \" List item +.br +.ie \\n(.$>=3 .ne \\$3 +.el .ne 3 +.IP "\\$1" \\$2 +.. +.TH "FINDSMB" 1 "" "" "" .SH NAME -findsmb \- list info about machines that respond to SMB name queries on a subnet -.SH SYNOPSIS +findsmb \- list info about machines that respond to SMB name queries on a subnet +.SH "SYNOPSIS" -\fBfindsmb\fR [ \fBsubnet broadcast address\fR ] +.nf +\fBfindsmb\fR [subnet broadcast address] +.fi .SH "DESCRIPTION" + .PP -This perl script is part of the Samba suite. +This perl script is part of the \fBSamba\fR(7) suite\&. + .PP -\fBfindsmb\fR is a perl script that -prints out several pieces of information about machines -on a subnet that respond to SMB name query requests. -It uses \fB nmblookup(1)\fR to obtain this information. +\fBfindsmb\fR is a perl script that prints out several pieces of information about machines on a subnet that respond to SMB name query requests\&. It uses \fBnmblookup\fR(1) and \fBsmbclient\fR(1) to obtain this information\&. + .SH "OPTIONS" + .TP -\fB-r\fR -Controls whether \fBfindsmb\fR takes -bugs in Windows95 into account when trying to find a Netbios name -registered of the remote machine. This option is disabled by default -because it is specific to Windows 95 and Windows 95 machines only. -If set, \fBnmblookup\fR -will be called with -B option. +-r +Controls whether \fBfindsmb\fR takes bugs in Windows95 into account when trying to find a Netbios name registered of the remote machine\&. This option is disabled by default because it is specific to Windows 95 and Windows 95 machines only\&. If set, \fBnmblookup\fR(1) will be called with \fB-B\fR option\&. + + .TP -\fBsubnet broadcast address\fR -Without this option, \fBfindsmb -\fR will probe the subnet of the machine where -\fBfindsmb\fR is run. This value is passed -to \fBnmblookup\fR as part of the --B option. +subnet broadcast address +Without this option, \fBfindsmb \fR will probe the subnet of the machine where \fBfindsmb\fR(1) is run\&. This value is passed to \fBnmblookup\fR(1) as part of the \fB-B\fR option\&. + + .SH "EXAMPLES" + .PP -The output of \fBfindsmb\fR lists the following -information for all machines that respond to the initial -\fBnmblookup\fR for any name: IP address, NetBIOS name, -Workgroup name, operating system, and SMB server version. -.PP -There will be a '+' in front of the workgroup name for -machines that are local master browsers for that workgroup. There -will be an '*' in front of the workgroup name for -machines that are the domain master browser for that workgroup. -Machines that are running Windows, Windows 95 or Windows 98 will -not show any information about the operating system or server -version. +The output of \fBfindsmb\fR lists the following information for all machines that respond to the initial\fBnmblookup\fR for any name: IP address, NetBIOS name, Workgroup name, operating system, and SMB server version\&. + .PP -The command with -r option -must be run on a system without \fBnmbd\fR running. -If \fBnmbd\fR is running on the system, you will -only get the IP address and the DNS name of the machine. To -get proper responses from Windows 95 and Windows 98 machines, -the command must be run as root and with -r -option on a machine without \fBnmbd\fR running. +There will be a '+' in front of the workgroup name for machines that are local master browsers for that workgroup\&. There will be an '*' in front of the workgroup name for machines that are the domain master browser for that workgroup\&. Machines that are running Windows, Windows 95 or Windows 98 will not show any information about the operating system or server version\&. + .PP -For example, running \fBfindsmb\fR without --r option set would yield output similar -to the following +The command with \fB-r\fR option must be run on a system without \fBnmbd\fR(8)running\&. If \fBnmbd\fR is running on the system, you will only get the IP address and the DNS name of the machine\&. To get proper responses from Windows 95 and Windows 98 machines, the command must be run as root and with \fB-r\fR option on a machine without \fBnmbd\fR running\&. +.PP +For example, running \fBfindsmb\fR without \fB-r\fR option set would yield output similar to the following .nf + IP ADDR NETBIOS NAME WORKGROUP/OS/VERSION --------------------------------------------------------------------- -192.168.35.10 MINESET-TEST1 [DMVENGR] -192.168.35.55 LINUXBOX *[MYGROUP] [Unix] [Samba 2.0.6] -192.168.35.56 HERBNT2 [HERB-NT] -192.168.35.63 GANDALF [MVENGR] [Unix] [Samba 2.0.5a for IRIX] -192.168.35.65 SAUNA [WORKGROUP] [Unix] [Samba 1.9.18p10] -192.168.35.71 FROGSTAR [ENGR] [Unix] [Samba 2.0.0 for IRIX] -192.168.35.78 HERBDHCP1 +[HERB] -192.168.35.88 SCNT2 +[MVENGR] [Windows NT 4.0] [NT LAN Manager 4.0] -192.168.35.93 FROGSTAR-PC [MVENGR] [Windows 5.0] [Windows 2000 LAN Manager] -192.168.35.97 HERBNT1 *[HERB-NT] [Windows NT 4.0] [NT LAN Manager 4.0] - +192\&.168\&.35\&.10 MINESET-TEST1 [DMVENGR] +192\&.168\&.35\&.55 LINUXBOX *[MYGROUP] [Unix] [Samba 2\&.0\&.6] +192\&.168\&.35\&.56 HERBNT2 [HERB-NT] +192\&.168\&.35\&.63 GANDALF [MVENGR] [Unix] [Samba 2\&.0\&.5a for IRIX] +192\&.168\&.35\&.65 SAUNA [WORKGROUP] [Unix] [Samba 1\&.9\&.18p10] +192\&.168\&.35\&.71 FROGSTAR [ENGR] [Unix] [Samba 2\&.0\&.0 for IRIX] +192\&.168\&.35\&.78 HERBDHCP1 +[HERB] +192\&.168\&.35\&.88 SCNT2 +[MVENGR] [Windows NT 4\&.0] [NT LAN Manager 4\&.0] +192\&.168\&.35\&.93 FROGSTAR-PC [MVENGR] [Windows 5\&.0] [Windows 2000 LAN Manager] +192\&.168\&.35\&.97 HERBNT1 *[HERB-NT] [Windows NT 4\&.0] [NT LAN Manager 4\&.0] .fi + .SH "VERSION" + .PP -This man page is correct for version 3.0 of -the Samba suite. +This man page is correct for version 3\&.0 of the Samba suite\&. + .SH "SEE ALSO" + .PP -\fBnmbd(8)\fR -\fBsmbclient(1) -\fR and \fBnmblookup(1)\fR +\fBnmbd\fR(8),\fBsmbclient\fR(1), and \fBnmblookup\fR(1) + .SH "AUTHOR" + .PP -The original Samba software and related utilities -were created by Andrew Tridgell. Samba is now developed -by the Samba Team as an Open Source project similar -to the way the Linux kernel is developed. +The original Samba software and related utilities were created by Andrew Tridgell\&. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\&. + .PP -The original Samba man pages were written by Karl Auer. -The man page sources were converted to YODL format (another -excellent piece of Open Source software, available at -ftp://ftp.icce.rug.nl/pub/unix/ ) and updated for the Samba 2.0 -release by Jeremy Allison. The conversion to DocBook for -Samba 2.2 was done by Gerald Carter +The original Samba man pages were written by Karl Auer\&. The man page sources were converted to YODL format (another excellent piece of Open Source software, available at ftp://ftp\&.icce\&.rug\&.nl/pub/unix/) and updated for the Samba 2\&.0 release by Jeremy Allison\&. The conversion to DocBook for Samba 2\&.2 was done by Gerald Carter\&. The conversion to DocBook XML 4\&.2 for Samba 3\&.0 was done by Alexander Bokovoy\&. + diff --git a/docs/manpages/lmhosts.5 b/docs/manpages/lmhosts.5 index 82660f26bd..47bedda12a 100644 --- a/docs/manpages/lmhosts.5 +++ b/docs/manpages/lmhosts.5 @@ -1,86 +1,92 @@ -.\" This manpage has been automatically generated by docbook2man -.\" from a DocBook document. This tool can be found at: -.\" -.\" Please send any bug reports, improvements, comments, patches, -.\" etc. to Steve Cheng . -.TH "LMHOSTS" "5" "04 March 2003" "" "" +.\"Generated by db2man.xsl. Don't modify this, modify the source. +.de Sh \" Subsection +.br +.if t .Sp +.ne 5 +.PP +\fB\\$1\fR +.PP +.. +.de Sp \" Vertical space (when we can't use .PP) +.if t .sp .5v +.if n .sp +.. +.de Ip \" List item +.br +.ie \\n(.$>=3 .ne \\$3 +.el .ne 3 +.IP "\\$1" \\$2 +.. +.TH "LMHOSTS" 5 "" "" "" .SH NAME lmhosts \- The Samba NetBIOS hosts file -.SH SYNOPSIS +.SH "SYNOPSIS" + .PP -\fIlmhosts\fR is the Samba NetBIOS name to IP address mapping file. +\fIlmhosts\fR is the \fBSamba\fR(7) NetBIOS name to IP address mapping file\&. + .SH "DESCRIPTION" + .PP -This file is part of the Samba suite. +This file is part of the \fBSamba\fR(7) suite\&. + .PP -\fIlmhosts\fR is the \fBSamba -\fR NetBIOS name to IP address mapping file. It -is very similar to the \fI/etc/hosts\fR file -format, except that the hostname component must correspond -to the NetBIOS naming format. +\fIlmhosts\fR is the \fBSamba \fR NetBIOS name to IP address mapping file\&. It is very similar to the \fI/etc/hosts\fR file format, except that the hostname component must correspond to the NetBIOS naming format\&. + .SH "FILE FORMAT" + .PP -It is an ASCII file containing one line for NetBIOS name. -The two fields on each line are separated from each other by -white space. Any entry beginning with '#' is ignored. Each line -in the lmhosts file contains the following information : -.TP 0.2i +It is an ASCII file containing one line for NetBIOS name\&. The two fields on each line are separated from each other by white space\&. Any entry beginning with '#' is ignored\&. Each line in the lmhosts file contains the following information: + +.TP 3 \(bu -IP Address - in dotted decimal format. -.TP 0.2i +IP Address - in dotted decimal format\&. + +.TP \(bu -NetBIOS Name - This name format is a -maximum fifteen character host name, with an optional -trailing '#' character followed by the NetBIOS name type -as two hexadecimal digits. - -If the trailing '#' is omitted then the given IP -address will be returned for all names that match the given -name, whatever the NetBIOS name type in the lookup. -.PP -An example follows : -.PP +NetBIOS Name - This name format is a maximum fifteen character host name, with an optional trailing '#' character followed by the NetBIOS name type as two hexadecimal digits\&. + + +If the trailing '#' is omitted then the given IP address will be returned for all names that match the given name, whatever the NetBIOS name type in the lookup\&. +.LP + +.PP +An example follows: .nf + # -# Sample Samba lmhosts file. +# Sample Samba lmhosts file\&. # -192.9.200.1 TESTPC -192.9.200.20 NTSERVER#20 -192.9.200.21 SAMBASERVER - -.fi +192\&.9\&.200\&.1 TESTPC +192\&.9\&.200\&.20 NTSERVER#20 +192\&.9\&.200\&.21 SAMBASERVER + .fi + .PP -Contains three IP to NetBIOS name mappings. The first -and third will be returned for any queries for the names "TESTPC" -and "SAMBASERVER" respectively, whatever the type component of -the NetBIOS name requested. +Contains three IP to NetBIOS name mappings\&. The first and third will be returned for any queries for the names "TESTPC" and "SAMBASERVER" respectively, whatever the type component of the NetBIOS name requested\&. + .PP -The second mapping will be returned only when the "0x20" name -type for a name "NTSERVER" is queried. Any other name type will not -be resolved. +The second mapping will be returned only when the "0x20" name type for a name "NTSERVER" is queried\&. Any other name type will not be resolved\&. + .PP -The default location of the \fIlmhosts\fR file -is in the same directory as the -smb.conf(5)> file. +The default location of the \fIlmhosts\fR file is in the same directory as the \fBsmb.conf\fR(5) file\&. + .SH "VERSION" + .PP -This man page is correct for version 2.2 of -the Samba suite. +This man page is correct for version 3\&.0 of the Samba suite\&. + .SH "SEE ALSO" + .PP -\fBsmbclient(1) -\fR and \fB smbpasswd(8)\fR +\fBsmbclient\fR(1), \fBsmb.conf\fR(5), and \fBsmbpasswd\fR(8) + .SH "AUTHOR" + .PP -The original Samba software and related utilities -were created by Andrew Tridgell. Samba is now developed -by the Samba Team as an Open Source project similar -to the way the Linux kernel is developed. +The original Samba software and related utilities were created by Andrew Tridgell\&. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\&. + .PP -The original Samba man pages were written by Karl Auer. -The man page sources were converted to YODL format (another -excellent piece of Open Source software, available at -ftp://ftp.icce.rug.nl/pub/unix/ ) and updated for the Samba 2.0 -release by Jeremy Allison. The conversion to DocBook for -Samba 2.2 was done by Gerald Carter +The original Samba man pages were written by Karl Auer\&. The man page sources were converted to YODL format (another excellent piece of Open Source software, available atftp://ftp\&.icce\&.rug\&.nl/pub/unix/) and updated for the Samba 2\&.0 release by Jeremy Allison\&. The conversion to DocBook for Samba 2\&.2 was done by Gerald Carter\&. The conversion to DocBook XML 4\&.2 was done by Alexander Bokovoy\&. + diff --git a/docs/manpages/net.8 b/docs/manpages/net.8 index 9b25d30c4f..d473503792 100644 --- a/docs/manpages/net.8 +++ b/docs/manpages/net.8 @@ -1,151 +1,549 @@ -.\" This manpage has been automatically generated by docbook2man -.\" from a DocBook document. This tool can be found at: -.\" -.\" Please send any bug reports, improvements, comments, patches, -.\" etc. to Steve Cheng . -.TH "NET" "8" "04 March 2003" "" "" +.\"Generated by db2man.xsl. Don't modify this, modify the source. +.de Sh \" Subsection +.br +.if t .Sp +.ne 5 +.PP +\fB\\$1\fR +.PP +.. +.de Sp \" Vertical space (when we can't use .PP) +.if t .sp .5v +.if n .sp +.. +.de Ip \" List item +.br +.ie \\n(.$>=3 .ne \\$3 +.el .ne 3 +.IP "\\$1" \\$2 +.. +.TH "NET" 8 "" "" "" .SH NAME net \- Tool for administration of Samba and remote CIFS servers. -.SH SYNOPSIS +.SH "SYNOPSIS" -\fBnet\fR \fB\fR [ \fB-h\fR ] [ \fB-w workgroup\fR ] [ \fB-W myworkgroup\fR ] [ \fB-U user\fR ] [ \fB-I ip-address\fR ] [ \fB-p port\fR ] [ \fB-n myname\fR ] [ \fB-s conffile\fR ] [ \fB-S server\fR ] [ \fB-C comment\fR ] [ \fB-M maxusers\fR ] [ \fB-F flags\fR ] [ \fB-j jobid\fR ] [ \fB-l\fR ] [ \fB-r\fR ] [ \fB-f\fR ] [ \fB-t timeout\fR ] [ \fB-P\fR ] [ \fB-D debuglevel\fR ] +.nf +\fBnet\fR {} [-h] [-w workgroup] [-W myworkgroup] [-U user] [-I ip-address] + [-p port] [-n myname] [-s conffile] [-S server] [-l] [-P] [-D debuglevel] + +.fi .SH "DESCRIPTION" + .PP -This tool is part of the Samba suite. +This tool is part of the \fBSamba\fR(7) suite\&. + .PP -The samba net utility is meant to work just like the net utility -available for windows and DOS. +The samba net utility is meant to work just like the net utility available for windows and DOS\&. The first argument should be used to specify the protocol to use when executing a certain command\&. ADS is used for ActiveDirectory, RAP is using for old (Win9x/NT3) clients and RPC can be used for NT4 and Windows 2000\&. If this argument is omitted, net will try to determine it automatically\&. Not all commands are available on all protocols\&. + .SH "OPTIONS" + .TP -\fB-h\fR -Display summary of all available options. +-h|--help +Print a summary of command line options\&. + + .TP -\fB-w target-workgroup\fR -Sets target workgroup or domain. You have to specify either this option or the IP address or the name of a server. +-w target-workgroup +Sets target workgroup or domain\&. You have to specify either this option or the IP address or the name of a server\&. + + .TP -\fB-W workgroup\fR +-W workgroup Sets client workgroup or domain + + .TP -\fB-U user\fR +-U user User name to use + + .TP -\fB-I ip-address\fR -IP address of target server to use. You have to specify either this option or a target workgroup or a target server. -.TP -\fB-p port\fR -Port on the target server to connect to. -.TP -\fB-n myname\fR -Sets name of the client. -.TP -\fB-s conffile\fR -Specify alternative configuration file that should be loaded. -.TP -\fB-S server\fR -Name of target server. You should specify either this option or a target workgroup or a target IP address. -.TP -\fB-C comment\fR -FIXME -.TP -\fB-M maxusers\fR -FIXME -.TP -\fB-F flags\fR -FIXME +-I ip-address +IP address of target server to use\&. You have to specify either this option or a target workgroup or a target server\&. + + .TP -\fB-j jobid\fR -FIXME +-p port +Port on the target server to connect to (usually 139 or 445)\&. Defaults to trying 445 first, then 139\&. + + .TP -\fB-l\fR -FIXME +-n +This option allows you to override the NetBIOS name that Samba uses for itself\&. This is identical to setting the \fINetBIOS name\fR parameter in the \fBsmb.conf\fR(5) file\&. However, a command line setting will take precedence over settings in \fBsmb.conf\fR(5)\&. + + .TP -\fB-r\fR -FIXME +-s +The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fI smb\&.conf(5)\fR for more information\&. The default configuration file name is determined at compile time\&. + + .TP -\fB-f\fR -FIXME +-S server +Name of target server\&. You should specify either this option or a target workgroup or a target IP address\&. + + .TP -\fB-t timeout\fR -FIXME +-l +When listing data, give more information on each item\&. + + .TP -\fB-P\fR -Make queries to the external server using the machine account of the local server. +-P +Make queries to the external server using the machine account of the local server\&. + + .TP -\fB-D debuglevel\fR -set the debuglevel. Debug level 0 is the lowest -and 100 being the highest. This should be set to 100 if you are -planning on submitting a bug report to the Samba team (see -\fIBUGS.txt\fR). -.SH "TIME" +-d|--debug=debuglevel +\fIdebuglevel\fR is an integer from 0 to 10\&. The default value if this parameter is not specified is zero\&. + + +The higher this value, the more detail will be logged to the log files about the activities of the server\&. At level 0, only critical errors and serious warnings will be logged\&. Level 1 is a reasonable level for day to day running - it generates a small amount of information about operations carried out\&. + + +Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\&. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\&. + + +Note that specifying this parameter here will override the log level parameter in the \fIsmb\&.conf(5)\fR file\&. + + +.SH "COMMANDS" + +.SS "TIME" + .PP -The \fBNET TIME\fR command allows you to view the time on a remote server -or synchronise the time on the local server with the time on the remote server. -.TP -\fB\fR -Without any options, the \fBNET TIME\fR command -displays the time on the remote server. -.TP -\fBSYSTEM\fR -Displays the time on the remote server in a format ready for /bin/date -.TP -\fBSET\fR -Tries to set the date and time of the local server to that on -the remote server using /bin/date. -.TP -\fBZONE\fR -Displays the timezone in hours from GMT on the remote computer. -.SH "RPC" +The \fBNET TIME\fR command allows you to view the time on a remote server or synchronise the time on the local server with the time on the remote server\&. + .PP -The \fBNET RPC\fR command allows you to do various -NT4 operations. -.TP -\fBJOIN -U username[%password] [options]\fR -Join a domain with specified username and password. Password -will be prompted if none is specified. -.TP -\fBJOIN [options except -U]\fR -to join a domain created in server manager -.TP -\fBUSER [misc. options] [targets]\fR -List users +Without any options, the \fBNET TIME\fR command displays the time on the remote server\&. + +.PP +Displays the time on the remote server in a format ready for \fB/bin/date\fR + +.PP +Tries to set the date and time of the local server to that on the remote server using \fB/bin/date\fR\&. + +.PP +Displays the timezone in hours from GMT on the remote computer\&. + +.SS "[RPC|ADS] JOIN [TYPE] [-U username[%password]] [options]" + +.PP +Join a domain\&. If the account already exists on the server, and [TYPE] is MEMBER, the machine will attempt to join automatically\&. (Assuming that the machine has been created in server manager) Otherwise, a password will be prompted for, and a new account may be created\&. + +.PP +[TYPE] may be PDC, BDC or MEMBER to specify the type of server joining the domain\&. + +.SS "[RPC] OLDJOIN [options]" + +.PP +Join a domain\&. Use the OLDJOIN option to join the domain using the old style of domain joining - you need to create a trust account in server manager first\&. + +.SS "[RPC|ADS] USER" + +.PP +Delete specified user + +.PP +List all users + +.PP +List the domain groups of a the specified user\&. + +.PP +Add specified user\&. + +.SS "[RPC|ADS] GROUP" + +.PP +List user groups\&. + +.PP +Delete specified group\&. + +.PP +Create specified group\&. + +.SS "[RAP|RPC] SHARE" + +.PP +Enumerates all exported resources (network shares) on target server\&. + +.PP +Adds a share from a server (makes the export active)\&. Maxusers specifies the number of users that can be connected to the share simultaneously\&. + +.PP +Delete specified share\&. + +.SS "[RPC|RAP] FILE" + +.PP +List all open files on remote server\&. + +.PP +Close file with specified \fIfileid\fR on remote server\&. + +.PP +Print information on specified \fIfileid\fR\&. Currently listed are: file-id, username, locks, path, permissions\&. + +.RS +.Sh "Note" + +.PP +Currently NOT implemented\&. + +.RE + +.SS "SESSION" + +.PP +Without any other options, SESSION enumerates all active SMB/CIFS sessions on the target server\&. + +.PP +Close the specified sessions\&. + +.PP +Give a list with all the open files in specified session\&. + +.SS "RAP SERVER DOMAIN" + +.PP +List all servers in specified domain or workgroup\&. Defaults to local domain\&. + +.SS "RAP DOMAIN" + +.PP +Lists all domains and workgroups visible on the current network\&. + +.SS "RAP PRINTQ" + +.PP +Lists the specified print queue and print jobs on the server\&. If the \fIQUEUE_NAME\fR is omitted, all queues are listed\&. + +.PP +Delete job with specified id\&. + +.SS "RAP VALIDATE user [password]" + +.PP +Validate whether the specified user can log in to the remote server\&. If the password is not specified on the commandline, it will be prompted\&. + +.RS +.Sh "Note" + +.PP +Currently NOT implemented\&. + +.RE + +.SS "RAP GROUPMEMBER" + +.PP +List all members of the specified group\&. + +.PP +Delete member from group\&. + +.PP +Add member to group\&. + +.SS "RAP ADMIN command" + +.PP +Execute the specified \fIcommand\fR on the remote server\&. Only works with OS/2 servers\&. + +.RS +.Sh "Note" + +.PP +Currently NOT implemented\&. + +.RE + +.SS "RAP SERVICE" + +.PP +Start the specified service on the remote server\&. Not implemented yet\&. + +.RS +.Sh "Note" + +.PP +Currently NOT implemented\&. + +.RE + +.PP +Stop the specified service on the remote server\&. + +.RS +.Sh "Note" + +.PP +Currently NOT implemented\&. + +.RE + +.SS "RAP PASSWORD USER OLDPASS NEWPASS" + +.PP +Change password of \fIUSER\fR from \fIOLDPASS\fR to \fINEWPASS\fR\&. + +.SS "LOOKUP" + +.PP +Lookup the IP address of the given host with the specified type (netbios suffix)\&. The type defaults to 0x20 (workstation)\&. + +.PP +Give IP address of LDAP server of specified \fIDOMAIN\fR\&. Defaults to local domain\&. + +.PP +Give IP address of KDC for the specified \fIREALM\fR\&. Defaults to local realm\&. + +.PP +Give IP's of Domain Controllers for specified \fI DOMAIN\fR\&. Defaults to local domain\&. + +.PP +Give IP of master browser for specified \fIDOMAIN\fR or workgroup\&. Defaults to local domain\&. + +.SS "CACHE" + +.PP +Samba uses a general caching interface called 'gencache'\&. It can be controlled using 'NET CACHE'\&. + +.PP +All the timeout parameters support the suffixes: s - Secondsm - Minutesh - Hoursd - Daysw - Weeks + +.PP +Add specified key+data to the cache with the given timeout\&. + +.PP +Delete key from the cache\&. + +.PP +Update data of existing cache entry\&. + +.PP +Search for the specified pattern in the cache data\&. + +.PP +List all current items in the cache\&. + +.PP +Remove all the current items from the cache\&. + +.SS "GETLOCALSID [DOMAIN]" + +.PP +Print the SID of the specified domain, or if the parameter is omitted, the SID of the domain the local server is in\&. + +.SS "SETLOCALSID S-1-5-21-x-y-z" + +.PP +Sets domain sid for the local server to the specified SID\&. + +.SS "GROUPMAP" + +.PP +Manage the mappings between Windows group SIDs and UNIX groups\&. Parameters take the for "parameter=value"\&. Common options include: + +.TP 3 +\(bu +unixgroup - Name of the UNIX group + .TP -\fBUSER DELETE [misc options]\fR -delete specified user +\(bu +ntgroup - Name of the Windows NT group (must be resolvable to a SID + .TP -\fBUSER INFO [misc options]\fR -list the domain groups of the specified user +\(bu +rid - Unsigned 32-bit integer + .TP -\fBUSER ADD [password] [-F user flags] [misc. options\fR -Add specified user +\(bu +sid - Full SID in the form of "S-1-\&.\&.\&." + .TP -\fBGROUP [misc options] [targets]\fR -List user groups +\(bu +type - Type of the group; either 'domain', 'local', or 'builtin' + .TP -\fBGROUP DELETE [misc. options] [targets]\fR -Delete specified group +\(bu +comment - Freeform text description of the group + +.LP + +.PP +Add a new group mapping entry + +.PP +net groupmap add {rid=int|sid=string} unixgroup=string [type={domain|local|builtin}] [ntgroup=string] [comment=string] + +.PP +Delete a group mapping entry + +.PP +net groupmap delete {ntgroup=string|sid=SID} + +.PP +Update en existing group entry + +.PP +net groupmap modify {ntgroup=string|sid=SID} [unixgroup=string] [comment=string] [type={domain|local} + +.PP +List existing group mapping entries + +.PP +net groupmap list [verbose] [ntgroup=string] [sid=SID] + +.SS "MAXRID" + +.PP +Prints out the highest RID currently in use on the local server (by the active 'passdb backend')\&. + +.SS "RPC INFO" + +.PP +Print information about the domain of the remote server, such as domain name, domain sid and number of users and groups\&. + +.SS "[RPC|ADS] TESTJOIN" + +.PP +Check whether participation in a domain is still valid\&. + +.SS "[RPC|ADS] CHANGETRUSTPW" + +.PP +Force change of domain trust password\&. + +.SS "RPC TRUSTDOM" + +.PP +Add a interdomain trust account for \fIDOMAIN\fR to the remote server\&. + +.PP +Remove interdomain trust account for \fIDOMAIN\fR from the remote server\&. + +.RS +.Sh "Note" + +.PP +Currently NOT implemented\&. + +.RE + +.PP +Establish a trust relationship to a trusting domain\&. Interdomain account must already be created on the remote PDC\&. + +.PP +Abandon relationship to trusted domain + +.PP +List all current interdomain trust relationships\&. + +.SS "RPC ABORTSHUTDOWN" + +.PP +Abort the shutdown of a remote server\&. + +.SS "SHUTDOWN [-t timeout] [-r] [-f] [-C message]" + +.PP +Shut down the remote server\&. + .TP -\fBGROUP ADD [-C comment]\fR -Create specified group +-r +Reboot after shutdown\&. + + .TP -\fBSHARE [misc. options] [targets]\fR -enumerates all exported resources (network shares) on target server +-f +Force shutting down all applications\&. + + .TP -\fBSHARE ADD [misc. options] [targets]\fR -Adds a share from a server (makes the export active) +-t timeout +Timeout before system will be shut down\&. An interactive user of the system can use this time to cancel the shutdown\&. + + .TP -\fBSHARE DELETE -.\" Please send any bug reports, improvements, comments, patches, -.\" etc. to Steve Cheng . -.TH "NMBD" "8" "04 March 2003" "" "" +.\"Generated by db2man.xsl. Don't modify this, modify the source. +.de Sh \" Subsection +.br +.if t .Sp +.ne 5 +.PP +\fB\\$1\fR +.PP +.. +.de Sp \" Vertical space (when we can't use .PP) +.if t .sp .5v +.if n .sp +.. +.de Ip \" List item +.br +.ie \\n(.$>=3 .ne \\$3 +.el .ne 3 +.IP "\\$1" \\$2 +.. +.TH "NMBD" 8 "" "" "" .SH NAME -nmbd \- NetBIOS name server to provide NetBIOS over IP naming services to clients -.SH SYNOPSIS +nmbd \- NetBIOS name server to provide NetBIOS over IP naming services to clients +.SH "SYNOPSIS" -\fBnmbd\fR [ \fB-D\fR ] [ \fB-F\fR ] [ \fB-S\fR ] [ \fB-a\fR ] [ \fB-i\fR ] [ \fB-o\fR ] [ \fB-h\fR ] [ \fB-V\fR ] [ \fB-d \fR ] [ \fB-H \fR ] [ \fB-l \fR ] [ \fB-n \fR ] [ \fB-p \fR ] [ \fB-s \fR ] +.nf +\fBnmbd\fR [-D] [-F] [-S] [-a] [-i] [-o] [-h] [-V] [-d ] [-H ] [-l ] [-n ] [-p ] [-s ] + +.fi .SH "DESCRIPTION" + .PP -This program is part of the Samba suite. +This program is part of the \fBSamba\fR(7) suite\&. + .PP -\fBnmbd\fR is a server that understands -and can reply to NetBIOS over IP name service requests, like -those produced by SMB/CIFS clients such as Windows 95/98/ME, -Windows NT, Windows 2000, Windows XP and LanManager clients. It also -participates in the browsing protocols which make up the -Windows "Network Neighborhood" view. +\fBnmbd\fR is a server that understands and can reply to NetBIOS over IP name service requests, like those produced by SMB/CIFS clients such as Windows 95/98/ME, Windows NT, Windows 2000, Windows XP and LanManager clients\&. It also participates in the browsing protocols which make up the Windows "Network Neighborhood" view\&. + .PP -SMB/CIFS clients, when they start up, may wish to -locate an SMB/CIFS server. That is, they wish to know what -IP number a specified host is using. +SMB/CIFS clients, when they start up, may wish to locate an SMB/CIFS server\&. That is, they wish to know what IP number a specified host is using\&. + .PP -Amongst other services, \fBnmbd\fR will -listen for such requests, and if its own NetBIOS name is -specified it will respond with the IP number of the host it -is running on. Its "own NetBIOS name" is by -default the primary DNS name of the host it is running on, -but this can be overridden with the \fB-n\fR -option (see OPTIONS below). Thus \fBnmbd\fR will -reply to broadcast queries for its own name(s). Additional -names for \fBnmbd\fR to respond on can be set -via parameters in the \fI smb.conf(5)\fR configuration file. +Amongst other services, \fBnmbd\fR will listen for such requests, and if its own NetBIOS name is specified it will respond with the IP number of the host it is running on\&. Its "own NetBIOS name" is by default the primary DNS name of the host it is running on, but this can be overridden with the \fB-n\fR option (see OPTIONS below)\&. Thus \fBnmbd\fR will reply to broadcast queries for its own name(s)\&. Additional names for \fBnmbd\fR to respond on can be set via parameters in the \fBsmb.conf\fR(5) configuration file\&. + .PP -\fBnmbd\fR can also be used as a WINS -(Windows Internet Name Server) server. What this basically means -is that it will act as a WINS database server, creating a -database from name registration requests that it receives and -replying to queries from clients for these names. +\fBnmbd\fR can also be used as a WINS (Windows Internet Name Server) server\&. What this basically means is that it will act as a WINS database server, creating a database from name registration requests that it receives and replying to queries from clients for these names\&. + .PP -In addition, \fBnmbd\fR can act as a WINS -proxy, relaying broadcast queries from clients that do -not understand how to talk the WINS protocol to a WINS -server. +In addition, \fBnmbd\fR can act as a WINS proxy, relaying broadcast queries from clients that do not understand how to talk the WINS protocol to a WINS server\&. + .SH "OPTIONS" + .TP -\fB-D\fR -If specified, this parameter causes -\fBnmbd\fR to operate as a daemon. That is, -it detaches itself and runs in the background, fielding -requests on the appropriate port. By default, \fBnmbd\fR -will operate as a daemon if launched from a command shell. -nmbd can also be operated from the \fBinetd\fR -meta-daemon, although this is not recommended. -.TP -\fB-F\fR -If specified, this parameter causes -the main \fBnmbd\fR process to not daemonize, -i.e. double-fork and disassociate with the terminal. -Child processes are still created as normal to service -each connection request, but the main process does not -exit. This operation mode is suitable for running -\fBnmbd\fR under process supervisors such -as \fBsupervise\fR and \fBsvscan\fR -from Daniel J. Bernstein's \fBdaemontools\fR -package, or the AIX process monitor. -.TP -\fB-S\fR -If specified, this parameter causes -\fBnmbd\fR to log to standard output rather -than a file. -.TP -\fB-a\fR -If this parameter is specified, each new -connection will append log messages to the log file. -This is the default. +-D +If specified, this parameter causes \fBnmbd\fR to operate as a daemon\&. That is, it detaches itself and runs in the background, fielding requests on the appropriate port\&. By default, \fBnmbd\fR will operate as a daemon if launched from a command shell\&. nmbd can also be operated from the \fBinetd\fR meta-daemon, although this is not recommended\&. + + .TP -\fB-i\fR -If this parameter is specified it causes the -server to run "interactively", not as a daemon, even if the -server is executed on the command line of a shell. Setting this -parameter negates the implicit daemon mode when run from the -command line. \fBnmbd\fR also logs to standard -output, as if the \fB-S\fR parameter had been -given. +-F +If specified, this parameter causes the main \fBnmbd\fR process to not daemonize, i\&.e\&. double-fork and disassociate with the terminal\&. Child processes are still created as normal to service each connection request, but the main process does not exit\&. This operation mode is suitable for running \fBnmbd\fR under process supervisors such as \fBsupervise\fR and \fBsvscan\fR from Daniel J\&. Bernstein's \fBdaemontools\fR package, or the AIX process monitor\&. + + .TP -\fB-o\fR -If this parameter is specified, the -log files will be overwritten when opened. By default, -\fBsmbd\fR will append entries to the log -files. +-S +If specified, this parameter causes \fBnmbd\fR to log to standard output rather than a file\&. + + .TP -\fB-h\fR -Prints the help information (usage) -for \fBnmbd\fR. +-i +If this parameter is specified it causes the server to run "interactively", not as a daemon, even if the server is executed on the command line of a shell\&. Setting this parameter negates the implicit daemon mode when run from the command line\&. \fBnmbd\fR also logs to standard output, as if the \fB-S\fR parameter had been given\&. + + .TP -\fB-H \fR -NetBIOS lmhosts file. The lmhosts -file is a list of NetBIOS names to IP addresses that -is loaded by the nmbd server and used via the name -resolution mechanism name resolve order described in \fIsmb.conf(5)\fR -to resolve any NetBIOS name queries needed by the server. Note -that the contents of this file are \fBNOT\fR -used by \fBnmbd\fR to answer any name queries. -Adding a line to this file affects name NetBIOS resolution -from this host \fBONLY\fR. - -The default path to this file is compiled into -Samba as part of the build process. Common defaults -are \fI/usr/local/samba/lib/lmhosts\fR, -\fI/usr/samba/lib/lmhosts\fR or -\fI/etc/lmhosts\fR. See the -\fIlmhosts(5)\fR -man page for details on the contents of this file. +-h|--help +Print a summary of command line options\&. + + .TP -\fB-V\fR -Prints the version number for -\fBnmbd\fR. +-H +NetBIOS lmhosts file\&. The lmhosts file is a list of NetBIOS names to IP addresses that is loaded by the nmbd server and used via the name resolution mechanism \fIname resolve order\fR described in \fBsmb.conf\fR(5) to resolve any NetBIOS name queries needed by the server\&. Note that the contents of this file are \fBNOT\fR used by \fBnmbd\fR to answer any name queries\&. Adding a line to this file affects name NetBIOS resolution from this host \fBONLY\fR\&. + + +The default path to this file is compiled into Samba as part of the build process\&. Common defaults are \fI/usr/local/samba/lib/lmhosts\fR, \fI/usr/samba/lib/lmhosts\fR or \fI/etc/samba/lmhosts\fR\&. See the \fBlmhosts\fR(5) man page for details on the contents of this file\&. + + .TP -\fB-d \fR -debuglevel is an integer -from 0 to 10. The default value if this parameter is -not specified is zero. - -The higher this value, the more detail will -be logged to the log files about the activities of the -server. At level 0, only critical errors and serious -warnings will be logged. Level 1 is a reasonable level for -day to day running - it generates a small amount of -information about operations carried out. - -Levels above 1 will generate considerable amounts -of log data, and should only be used when investigating -a problem. Levels above 3 are designed for use only by developers -and generate HUGE amounts of log data, most of which is extremely -cryptic. - -Note that specifying this parameter here will override -the log level -parameter in the \fI smb.conf(5)\fR file. +-V +Prints the version number for \fBsmbd\fR\&. + + .TP -\fB-l \fR -The -l parameter specifies a directory -into which the "log.nmbd" log file will be created -for operational data from the running \fBnmbd\fR -server. The default log directory is compiled into Samba -as part of the build process. Common defaults are \fI /usr/local/samba/var/log.nmb\fR, \fI /usr/samba/var/log.nmb\fR or -\fI/var/log/log.nmb\fR. \fBBeware:\fR -If the directory specified does not exist, \fBnmbd\fR -will log to the default debug log location defined at compile time. +-s +The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fI smb\&.conf(5)\fR for more information\&. The default configuration file name is determined at compile time\&. + + .TP -\fB-n \fR -This option allows you to override -the NetBIOS name that Samba uses for itself. This is identical -to setting the NetBIOS name parameter in the -\fIsmb.conf\fR file. However, a command -line setting will take precedence over settings in -\fIsmb.conf\fR. +-d|--debug=debuglevel +\fIdebuglevel\fR is an integer from 0 to 10\&. The default value if this parameter is not specified is zero\&. + + +The higher this value, the more detail will be logged to the log files about the activities of the server\&. At level 0, only critical errors and serious warnings will be logged\&. Level 1 is a reasonable level for day to day running - it generates a small amount of information about operations carried out\&. + + +Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\&. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\&. + + +Note that specifying this parameter here will override the log level parameter in the \fIsmb\&.conf(5)\fR file\&. + + .TP -\fB-p \fR -UDP port number is a positive integer value. -This option changes the default UDP port number (normally 137) -that \fBnmbd\fR responds to name queries on. Don't -use this option unless you are an expert, in which case you -won't need help! +-l|--logfile=logbasename +File name for log/debug files\&. The extension \fB"\&.client"\fR will be appended\&. The log file is never removed by the client\&. + + .TP -\fB-s \fR -The default configuration file name -is set at build time, typically as \fI /usr/local/samba/lib/smb.conf\fR, but -this may be changed when Samba is autoconfigured. +-p +UDP port number is a positive integer value\&. This option changes the default UDP port number (normally 137) that \fBnmbd\fR responds to name queries on\&. Don't use this option unless you are an expert, in which case you won't need help! + -The file specified contains the configuration details -required by the server. See \fIsmb.conf(5)\fR for more information. .SH "FILES" + .TP -\fB\fI/etc/inetd.conf\fB\fR -If the server is to be run by the -\fBinetd\fR meta-daemon, this file -must contain suitable startup information for the -meta-daemon. See the UNIX_INSTALL.html document -for details. +\fI/etc/inetd\&.conf\fR +If the server is to be run by the \fBinetd\fR meta-daemon, this file must contain suitable startup information for the meta-daemon\&. See the install document for details\&. + + .TP -\fB\fI/etc/rc\fB\fR -or whatever initialization script your -system uses). - -If running the server as a daemon at startup, -this file will need to contain an appropriate startup -sequence for the server. See the UNIX_INSTALL.html document -for details. +\fI/etc/rc\fR +or whatever initialization script your system uses)\&. + + +If running the server as a daemon at startup, this file will need to contain an appropriate startup sequence for the server\&. See the "How to Install and Test SAMBA" document for details\&. + + .TP -\fB\fI/etc/services\fB\fR -If running the server via the -meta-daemon \fBinetd\fR, this file -must contain a mapping of service name (e.g., netbios-ssn) -to service port (e.g., 139) and protocol type (e.g., tcp). -See the UNIX_INSTALL.html -document for details. +\fI/etc/services\fR +If running the server via the meta-daemon \fBinetd\fR, this file must contain a mapping of service name (e\&.g\&., netbios-ssn) to service port (e\&.g\&., 139) and protocol type (e\&.g\&., tcp)\&. See the "How to Install and Test SAMBA" document for details\&. + + .TP -\fB\fI/usr/local/samba/lib/smb.conf\fB\fR -This is the default location of the -\fIsmb.conf\fR -server configuration file. Other common places that systems -install this file are \fI/usr/samba/lib/smb.conf\fR -and \fI/etc/smb.conf\fR. - -When run as a WINS server (see the -wins support -parameter in the \fIsmb.conf(5)\fR man page), -\fBnmbd\fR -will store the WINS database in the file \fIwins.dat\fR -in the \fIvar/locks\fR directory configured under -wherever Samba was configured to install itself. - -If \fBnmbd\fR is acting as a \fB browse master\fR (see the local master -parameter in the \fIsmb.conf(5)\fR man page, -\fBnmbd\fR -will store the browsing database in the file \fIbrowse.dat -\fR in the \fIvar/locks\fR directory -configured under wherever Samba was configured to install itself. +\fI/usr/local/samba/lib/smb\&.conf\fR +This is the default location of the \fBsmb.conf\fR(5) server configuration file\&. Other common places that systems install this file are \fI/usr/samba/lib/smb\&.conf\fR and \fI/etc/samba/smb\&.conf\fR\&. + + +When run as a WINS server (see the \fBwins support\fR parameter in the \fBsmb.conf\fR(5) man page), \fBnmbd\fR will store the WINS database in the file \fIwins\&.dat\fR in the \fIvar/locks\fR directory configured under wherever Samba was configured to install itself\&. + + +If \fBnmbd\fR is acting as a \fB browse master\fR (see the \fBlocal master\fR parameter in the \fBsmb.conf\fR(5) man page, \fBnmbd\fR will store the browsing database in the file \fIbrowse\&.dat \fR in the \fIvar/locks\fR directory configured under wherever Samba was configured to install itself\&. + + .SH "SIGNALS" + .PP -To shut down an \fBnmbd\fR process it is recommended -that SIGKILL (-9) \fBNOT\fR be used, except as a last -resort, as this may leave the name database in an inconsistent state. -The correct way to terminate \fBnmbd\fR is to send it -a SIGTERM (-15) signal and wait for it to die on its own. +To shut down an \fBnmbd\fR process it is recommended that SIGKILL (-9) \fBNOT\fR be used, except as a last resort, as this may leave the name database in an inconsistent state\&. The correct way to terminate \fBnmbd\fR is to send it a SIGTERM (-15) signal and wait for it to die on its own\&. + .PP -\fBnmbd\fR will accept SIGHUP, which will cause -it to dump out its namelists into the file \fInamelist.debug -\fR in the \fI/usr/local/samba/var/locks\fR -directory (or the \fIvar/locks\fR directory configured -under wherever Samba was configured to install itself). This will also -cause \fBnmbd\fR to dump out its server database in -the \fIlog.nmb\fR file. +\fBnmbd\fR will accept SIGHUP, which will cause it to dump out its namelists into the file \fInamelist\&.debug \fR in the \fI/usr/local/samba/var/locks\fR directory (or the \fIvar/locks\fR directory configured under wherever Samba was configured to install itself)\&. This will also cause \fBnmbd\fR to dump out its server database in the \fIlog\&.nmb\fR file\&. + .PP -The debug log level of nmbd may be raised or lowered using -\fBsmbcontrol(1)\fR - (SIGUSR[1|2] signals are no longer used in Samba 2.2). This is -to allow transient problems to be diagnosed, whilst still running -at a normally low log level. +The debug log level of nmbd may be raised or lowered using \fBsmbcontrol\fR(1) (SIGUSR[1|2] signals are no longer used since Samba 2\&.2)\&. This is to allow transient problems to be diagnosed, whilst still running at a normally low log level\&. + .SH "VERSION" + .PP -This man page is correct for version 3.0 of -the Samba suite. +This man page is correct for version 3\&.0 of the Samba suite\&. + .SH "SEE ALSO" + .PP -\fBinetd(8)\fR, \fBsmbd(8)\fR -\fIsmb.conf(5)\fR - \fBsmbclient(1) -\fR and the Internet RFC's -\fIrfc1001.txt\fR, \fIrfc1002.txt\fR. -In addition the CIFS (formerly SMB) specification is available -as a link from the Web page -http://samba.org/cifs/ . +\fBinetd\fR(8), \fBsmbd\fR(8), \fBsmb.conf\fR(5), \fBsmbclient\fR(1), \fBtestparm\fR(1), \fBtestprns\fR(1), and the Internet RFC's \fIrfc1001\&.txt\fR, \fIrfc1002\&.txt\fR\&. In addition the CIFS (formerly SMB) specification is available as a link from the Web page http://samba\&.org/cifs/\&. + .SH "AUTHOR" + .PP -The original Samba software and related utilities -were created by Andrew Tridgell. Samba is now developed -by the Samba Team as an Open Source project similar -to the way the Linux kernel is developed. +The original Samba software and related utilities were created by Andrew Tridgell\&. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\&. + .PP -The original Samba man pages were written by Karl Auer. -The man page sources were converted to YODL format (another -excellent piece of Open Source software, available at -ftp://ftp.icce.rug.nl/pub/unix/ ) and updated for the Samba 2.0 -release by Jeremy Allison. The conversion to DocBook for -Samba 2.2 was done by Gerald Carter +The original Samba man pages were written by Karl Auer\&. The man page sources were converted to YODL format (another excellent piece of Open Source software, available at ftp://ftp\&.icce\&.rug\&.nl/pub/unix/) and updated for the Samba 2\&.0 release by Jeremy Allison\&. The conversion to DocBook for Samba 2\&.2 was done by Gerald Carter\&. The conversion to DocBook XML 4\&.2 for Samba 3\&.0 was done by Alexander Bokovoy\&. + diff --git a/docs/manpages/nmblookup.1 b/docs/manpages/nmblookup.1 index 06e608a62e..2f16025593 100644 --- a/docs/manpages/nmblookup.1 +++ b/docs/manpages/nmblookup.1 @@ -1,160 +1,185 @@ -.\" This manpage has been automatically generated by docbook2man -.\" from a DocBook document. This tool can be found at: -.\" -.\" Please send any bug reports, improvements, comments, patches, -.\" etc. to Steve Cheng . -.TH "NMBLOOKUP" "1" "04 March 2003" "" "" +.\"Generated by db2man.xsl. Don't modify this, modify the source. +.de Sh \" Subsection +.br +.if t .Sp +.ne 5 +.PP +\fB\\$1\fR +.PP +.. +.de Sp \" Vertical space (when we can't use .PP) +.if t .sp .5v +.if n .sp +.. +.de Ip \" List item +.br +.ie \\n(.$>=3 .ne \\$3 +.el .ne 3 +.IP "\\$1" \\$2 +.. +.TH "NMBLOOKUP" 1 "" "" "" .SH NAME -nmblookup \- NetBIOS over TCP/IP client used to lookup NetBIOS names -.SH SYNOPSIS +nmblookup \- NetBIOS over TCP/IP client used to lookup NetBIOS names +.SH "SYNOPSIS" -\fBnmblookup\fR [ \fB-M\fR ] [ \fB-R\fR ] [ \fB-S\fR ] [ \fB-r\fR ] [ \fB-A\fR ] [ \fB-h\fR ] [ \fB-B \fR ] [ \fB-U \fR ] [ \fB-d \fR ] [ \fB-s \fR ] [ \fB-i \fR ] [ \fB-T\fR ] [ \fB-f\fR ] \fBname\fR +.nf +\fBnmblookup\fR [-M] [-R] [-S] [-r] [-A] [-h] [-B ] [-U ] [-d ] [-s ] [-i ] + [-T] [-f] {name} +.fi .SH "DESCRIPTION" + .PP -This tool is part of the Samba suite. +This tool is part of the \fBSamba\fR(7) suite\&. + .PP -\fBnmblookup\fR is used to query NetBIOS names -and map them to IP addresses in a network using NetBIOS over TCP/IP -queries. The options allow the name queries to be directed at a -particular IP broadcast area or to a particular machine. All queries -are done over UDP. +\fBnmblookup\fR is used to query NetBIOS names and map them to IP addresses in a network using NetBIOS over TCP/IP queries\&. The options allow the name queries to be directed at a particular IP broadcast area or to a particular machine\&. All queries are done over UDP\&. + .SH "OPTIONS" + +.TP +-M +Searches for a master browser by looking up the NetBIOS name \fIname\fR with a type of \fB0x1d\fR\&. If \fI name\fR is "-" then it does a lookup on the special name \fB__MSBROWSE__\fR\&. Please note that in order to use the name "-", you need to make sure "-" isn't parsed as an argument, e\&.g\&. use : \fBnmblookup -M -- -\fR\&. + + +.TP +-R +Set the recursion desired bit in the packet to do a recursive lookup\&. This is used when sending a name query to a machine running a WINS server and the user wishes to query the names in the WINS server\&. If this bit is unset the normal (broadcast responding) NetBIOS processing code on a machine is used instead\&. See RFC1001, RFC1002 for details\&. + + +.TP +-S +Once the name query has returned an IP address then do a node status query as well\&. A node status query returns the NetBIOS names registered by a host\&. + + .TP -\fB-M\fR -Searches for a master browser by looking -up the NetBIOS name \fIname\fR with a -type of 0x1d. If \fI name\fR is "-" then it does a lookup on the special name -__MSBROWSE__. -.TP -\fB-R\fR -Set the recursion desired bit in the packet -to do a recursive lookup. This is used when sending a name -query to a machine running a WINS server and the user wishes -to query the names in the WINS server. If this bit is unset -the normal (broadcast responding) NetBIOS processing code -on a machine is used instead. See rfc1001, rfc1002 for details. -.TP -\fB-S\fR -Once the name query has returned an IP -address then do a node status query as well. A node status -query returns the NetBIOS names registered by a host. -.TP -\fB-r\fR -Try and bind to UDP port 137 to send and receive UDP -datagrams. The reason for this option is a bug in Windows 95 -where it ignores the source port of the requesting packet -and only replies to UDP port 137. Unfortunately, on most UNIX -systems root privilege is needed to bind to this port, and -in addition, if the nmbd(8) -daemon is running on this machine it also binds to this port. -.TP -\fB-A\fR -Interpret \fIname\fR as -an IP Address and do a node status query on this address. -.TP -\fB-h\fR -Print a help (usage) message. -.TP -\fB-B \fR -Send the query to the given broadcast address. Without -this option the default behavior of nmblookup is to send the -query to the broadcast address of the network interfaces as -either auto-detected or defined in the \fIinterfaces\fR - parameter of the \fIsmb.conf (5)\fR file. -.TP -\fB-U \fR -Do a unicast query to the specified address or -host \fIunicast address\fR. This option -(along with the \fI-R\fR option) is needed to -query a WINS server. -.TP -\fB-d \fR -debuglevel is an integer from 0 to 10. - -The default value if this parameter is not specified -is zero. - -The higher this value, the more detail will be logged -about the activities of \fBnmblookup\fR. At level -0, only critical errors and serious warnings will be logged. - -Levels above 1 will generate considerable amounts of -log data, and should only be used when investigating a problem. -Levels above 3 are designed for use only by developers and -generate HUGE amounts of data, most of which is extremely cryptic. - -Note that specifying this parameter here will override -the \fI log level\fR parameter in the \fI smb.conf(5)\fR file. -.TP -\fB-s \fR -This parameter specifies the pathname to -the Samba configuration file, smb.conf(5) This file controls all aspects of -the Samba setup on the machine. -.TP -\fB-i \fR -This specifies a NetBIOS scope that -\fBnmblookup\fR will use to communicate with when -generating NetBIOS names. For details on the use of NetBIOS -scopes, see rfc1001.txt and rfc1002.txt. NetBIOS scopes are -\fBvery\fR rarely used, only set this parameter -if you are the system administrator in charge of all the -NetBIOS systems you communicate with. -.TP -\fB-T\fR -This causes any IP addresses found in the -lookup to be looked up via a reverse DNS lookup into a -DNS name, and printed out before each - -\fBIP address .... NetBIOS name\fR - -pair that is the normal output. -.TP -\fB-f\fR -Show which flags apply to the name that has been looked up. Possible -answers are zero or more of: Response, Authoritative, -Truncated, Recursion_Desired, Recursion_Available, Broadcast. -.TP -\fBname\fR -This is the NetBIOS name being queried. Depending -upon the previous options this may be a NetBIOS name or IP address. -If a NetBIOS name then the different name types may be specified -by appending '#' to the name. This name may also be -\&'*', which will return all registered names within a broadcast -area. +-r +Try and bind to UDP port 137 to send and receive UDP datagrams\&. The reason for this option is a bug in Windows 95 where it ignores the source port of the requesting packet and only replies to UDP port 137\&. Unfortunately, on most UNIX systems root privilege is needed to bind to this port, and in addition, if the \fBnmbd\fR(8) daemon is running on this machine it also binds to this port\&. + + +.TP +-A +Interpret \fIname\fR as an IP Address and do a node status query on this address\&. + + +.TP +-n +This option allows you to override the NetBIOS name that Samba uses for itself\&. This is identical to setting the \fINetBIOS name\fR parameter in the \fBsmb.conf\fR(5) file\&. However, a command line setting will take precedence over settings in \fBsmb.conf\fR(5)\&. + + +.TP +-i +This specifies a NetBIOS scope that \fBnmblookup\fR will use to communicate with when generating NetBIOS names\&. For details on the use of NetBIOS scopes, see rfc1001\&.txt and rfc1002\&.txt\&. NetBIOS scopes are \fBvery\fR rarely used, only set this parameter if you are the system administrator in charge of all the NetBIOS systems you communicate with\&. + + +.TP +-W|--workgroup=domain +Set the SMB domain of the username\&. This overrides the default domain which is the domain defined in smb\&.conf\&. If the domain specified is the same as the servers NetBIOS name, it causes the client to log on using the servers local SAM (as opposed to the Domain SAM)\&. + + +.TP +-O socket options +TCP socket options to set on the client socket\&. See the socket options parameter in the \fBsmb.conf\fR(5) manual page for the list of valid options\&. + + +.TP +-h|--help +Print a summary of command line options\&. + + +.TP +-B +Send the query to the given broadcast address\&. Without this option the default behavior of nmblookup is to send the query to the broadcast address of the network interfaces as either auto-detected or defined in the \fIinterfaces\fR parameter of the \fBsmb.conf\fR(5) file\&. + + +.TP +-U +Do a unicast query to the specified address or host \fIunicast address\fR\&. This option (along with the \fI-R\fR option) is needed to query a WINS server\&. + + +.TP +-V +Prints the version number for \fBsmbd\fR\&. + + +.TP +-s +The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fI smb\&.conf(5)\fR for more information\&. The default configuration file name is determined at compile time\&. + + +.TP +-d|--debug=debuglevel +\fIdebuglevel\fR is an integer from 0 to 10\&. The default value if this parameter is not specified is zero\&. + + +The higher this value, the more detail will be logged to the log files about the activities of the server\&. At level 0, only critical errors and serious warnings will be logged\&. Level 1 is a reasonable level for day to day running - it generates a small amount of information about operations carried out\&. + + +Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\&. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\&. + + +Note that specifying this parameter here will override the log level parameter in the \fIsmb\&.conf(5)\fR file\&. + + +.TP +-l|--logfile=logbasename +File name for log/debug files\&. The extension \fB"\&.client"\fR will be appended\&. The log file is never removed by the client\&. + + +.TP +-T +This causes any IP addresses found in the lookup to be looked up via a reverse DNS lookup into a DNS name, and printed out before each + + +\fBIP address \&.\&.\&.\&. NetBIOS name\fR + + +pair that is the normal output\&. + + +.TP +-f +Show which flags apply to the name that has been looked up\&. Possible answers are zero or more of: Response, Authoritative, Truncated, Recursion_Desired, Recursion_Available, Broadcast\&. + + +.TP +name +This is the NetBIOS name being queried\&. Depending upon the previous options this may be a NetBIOS name or IP address\&. If a NetBIOS name then the different name types may be specified by appending '#' to the name\&. This name may also be '*', which will return all registered names within a broadcast area\&. + + .SH "EXAMPLES" + .PP -\fBnmblookup\fR can be used to query -a WINS server (in the same way \fBnslookup\fR is -used to query DNS servers). To query a WINS server, -\fBnmblookup\fR must be called like this: +\fBnmblookup\fR can be used to query a WINS server (in the same way \fBnslookup\fR is used to query DNS servers)\&. To query a WINS server, \fBnmblookup\fR must be called like this: + .PP \fBnmblookup -U server -R 'name'\fR + .PP For example, running : + .PP \fBnmblookup -U samba.org -R 'IRIX#1B'\fR + .PP -would query the WINS server samba.org for the domain -master browser (1B name type) for the IRIX workgroup. +would query the WINS server samba\&.org for the domain master browser (1B name type) for the IRIX workgroup\&. + .SH "VERSION" + .PP -This man page is correct for version 3.0 of -the Samba suite. +This man page is correct for version 3\&.0 of the Samba suite\&. + .SH "SEE ALSO" + .PP -\fBnmbd(8)\fR -samba(7) and smb.conf(5) +\fBnmbd\fR(8), \fBsamba\fR(7), and \fBsmb.conf\fR(5)\&. + .SH "AUTHOR" + .PP -The original Samba software and related utilities -were created by Andrew Tridgell. Samba is now developed -by the Samba Team as an Open Source project similar -to the way the Linux kernel is developed. +The original Samba software and related utilities were created by Andrew Tridgell\&. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\&. + .PP -The original Samba man pages were written by Karl Auer. -The man page sources were converted to YODL format (another -excellent piece of Open Source software, available at -ftp://ftp.icce.rug.nl/pub/unix/ ) and updated for the Samba 2.0 -release by Jeremy Allison. The conversion to DocBook for -Samba 2.2 was done by Gerald Carter +The original Samba man pages were written by Karl Auer\&. The man page sources were converted to YODL format (another excellent piece of Open Source software, available at ftp://ftp\&.icce\&.rug\&.nl/pub/unix/) and updated for the Samba 2\&.0 release by Jeremy Allison\&. The conversion to DocBook for Samba 2\&.2 was done by Gerald Carter\&. The conversion to DocBook XML 4\&.2 for Samba 3\&.0 was done by Alexander Bokovoy\&. + diff --git a/docs/manpages/pdbedit.8 b/docs/manpages/pdbedit.8 index 82765d6dad..ab376f1c14 100644 --- a/docs/manpages/pdbedit.8 +++ b/docs/manpages/pdbedit.8 @@ -1,279 +1,331 @@ -.\" This manpage has been automatically generated by docbook2man -.\" from a DocBook document. This tool can be found at: -.\" -.\" Please send any bug reports, improvements, comments, patches, -.\" etc. to Steve Cheng . -.TH "PDBEDIT" "8" "30 March 2003" "" "" +.\"Generated by db2man.xsl. Don't modify this, modify the source. +.de Sh \" Subsection +.br +.if t .Sp +.ne 5 +.PP +\fB\\$1\fR +.PP +.. +.de Sp \" Vertical space (when we can't use .PP) +.if t .sp .5v +.if n .sp +.. +.de Ip \" List item +.br +.ie \\n(.$>=3 .ne \\$3 +.el .ne 3 +.IP "\\$1" \\$2 +.. +.TH "PDBEDIT" 8 "" "" "" .SH NAME pdbedit \- manage the SAM database -.SH SYNOPSIS +.SH "SYNOPSIS" -\fBpdbedit\fR [ \fB-l\fR ] [ \fB-v\fR ] [ \fB-w\fR ] [ \fB-u username\fR ] [ \fB-f fullname\fR ] [ \fB-h homedir\fR ] [ \fB-D drive\fR ] [ \fB-S script\fR ] [ \fB-p profile\fR ] [ \fB-a\fR ] [ \fB-m\fR ] [ \fB-x\fR ] [ \fB-i passdb-backend\fR ] [ \fB-e passdb-backend\fR ] [ \fB-g\fR ] [ \fB-b passdb-backend\fR ] [ \fB-d debuglevel\fR ] [ \fB-s configfile\fR ] [ \fB-P account-policy\fR ] [ \fB-V value\fR ] +.nf +\fBpdbedit\fR [-L] [-v] [-w] [-u username] [-f fullname] [-h homedir] [-D drive] [-S + script] [-p profile] [-a] [-m] [-x] [-i passdb-backend] [-e passdb-backend] + [-b passdb-backend] [-g] [-d debuglevel] [-s configfile] [-P account-policy] + [-C value] +.fi .SH "DESCRIPTION" + .PP -This tool is part of the Samba suite. +This tool is part of the \fBSamba\fR(7) suite\&. + .PP -The pdbedit program is used to manage the users accounts -stored in the sam database and can only be run by root. +The pdbedit program is used to manage the users accounts stored in the sam database and can only be run by root\&. + .PP -The pdbedit tool uses the passdb modular interface and is -independent from the kind of users database used (currently there -are smbpasswd, ldap, nis+ and tdb based and more can be added -without changing the tool). +The pdbedit tool uses the passdb modular interface and is independent from the kind of users database used (currently there are smbpasswd, ldap, nis+ and tdb based and more can be added without changing the tool)\&. + .PP -There are five main ways to use pdbedit: adding a user account, -removing a user account, modifing a user account, listing user -accounts, importing users accounts. +There are five main ways to use pdbedit: adding a user account, removing a user account, modifing a user account, listing user accounts, importing users accounts\&. + .SH "OPTIONS" + .TP -\fB-l\fR -This option lists all the user accounts -present in the users database. -This option prints a list of user/uid pairs separated by -the ':' character. +-L +This option lists all the user accounts present in the users database\&. This option prints a list of user/uid pairs separated by the ':' character\&. -Example: \fBpdbedit -l\fR + +Example: \fBpdbedit -L\fR .nf - sorce:500:Simo Sorce - samba:45:Test User - + +sorce:500:Simo Sorce +samba:45:Test User .fi + + .TP -\fB-v\fR -This option enables the verbose listing format. -It causes pdbedit to list the users in the database, printing -out the account fields in a descriptive format. +-v +This option enables the verbose listing format\&. It causes pdbedit to list the users in the database, printing out the account fields in a descriptive format\&. + Example: \fBpdbedit -l -v\fR .nf - --------------- - username: sorce - user ID/Group: 500/500 - user RID/GRID: 2000/2001 - Full Name: Simo Sorce - Home Directory: \\\\BERSERKER\\sorce - HomeDir Drive: H: - Logon Script: \\\\BERSERKER\\netlogon\\sorce.bat - Profile Path: \\\\BERSERKER\\profile - --------------- - username: samba - user ID/Group: 45/45 - user RID/GRID: 1090/1091 - Full Name: Test User - Home Directory: \\\\BERSERKER\\samba - HomeDir Drive: - Logon Script: - Profile Path: \\\\BERSERKER\\profile - + +--------------- +username: sorce +user ID/Group: 500/500 +user RID/GRID: 2000/2001 +Full Name: Simo Sorce +Home Directory: \\\\BERSERKER\\sorce +HomeDir Drive: H: +Logon Script: \\\\BERSERKER\\netlogon\\sorce\&.bat +Profile Path: \\\\BERSERKER\\profile +--------------- +username: samba +user ID/Group: 45/45 +user RID/GRID: 1090/1091 +Full Name: Test User +Home Directory: \\\\BERSERKER\\samba +HomeDir Drive: +Logon Script: +Profile Path: \\\\BERSERKER\\profile .fi + + .TP -\fB-w\fR -This option sets the "smbpasswd" listing format. -It will make pdbedit list the users in the database, printing -out the account fields in a format compatible with the -\fIsmbpasswd\fR file format. (see the \fIsmbpasswd(5)\fR for details) +-w +This option sets the "smbpasswd" listing format\&. It will make pdbedit list the users in the database, printing out the account fields in a format compatible with the \fIsmbpasswd\fR file format\&. (see the \fBsmbpasswd\fR(5) for details) -Example: \fBpdbedit -l -w\fR +Example: \fBpdbedit -L -w\fR + + +sorce:500:508818B733CE64BEAAD3B435B51404EE:D2A2418EFC466A8A0F6B1DBB5C3DB80C:[UX ]:LCT-00000000: +samba:45:0F2B255F7B67A7A9AAD3B435B51404EE:BC281CE3F53B6A5146629CD4751D3490:[UX ]:LCT-3BFA1E8D: -.nf - sorce:500:508818B733CE64BEAAD3B435B51404EE:D2A2418EFC466A8A0F6B1DBB5C3DB80C:[UX ]:LCT-00000000: - samba:45:0F2B255F7B67A7A9AAD3B435B51404EE:BC281CE3F53B6A5146629CD4751D3490:[UX ]:LCT-3BFA1E8D: - -.fi .TP -\fB-u username\fR -This option specifies the username to be -used for the operation requested (listing, adding, removing). -It is \fBrequired\fR in add, remove and modify -operations and \fBoptional\fR in list -operations. +-u username +This option specifies the username to be used for the operation requested (listing, adding, removing)\&. It is \fBrequired\fR in add, remove and modify operations and \fBoptional\fR in list operations\&. + + .TP -\fB-f fullname\fR -This option can be used while adding or -modifing a user account. It will specify the user's full -name. +-f fullname +This option can be used while adding or modifing a user account\&. It will specify the user's full name\&. + Example: \fB-f "Simo Sorce"\fR + + .TP -\fB-h homedir\fR -This option can be used while adding or -modifing a user account. It will specify the user's home -directory network path. +-h homedir +This option can be used while adding or modifing a user account\&. It will specify the user's home directory network path\&. + + +Example: \fB-h "\\\\BERSERKER\\sorce"\fR + -Example: \fB-h "\\\\\\\\BERSERKER\\\\sorce"\fR .TP -\fB-D drive\fR -This option can be used while adding or -modifing a user account. It will specify the windows drive -letter to be used to map the home directory. +-D drive +This option can be used while adding or modifing a user account\&. It will specify the windows drive letter to be used to map the home directory\&. + Example: \fB-d "H:"\fR + + .TP -\fB-S script\fR -This option can be used while adding or -modifing a user account. It will specify the user's logon -script path. +-S script +This option can be used while adding or modifing a user account\&. It will specify the user's logon script path\&. + + +Example: \fB-s "\\\\BERSERKER\\netlogon\\sorce.bat"\fR + -Example: \fB-s "\\\\\\\\BERSERKER\\\\netlogon\\\\sorce.bat"\fR .TP -\fB-p profile\fR -This option can be used while adding or -modifing a user account. It will specify the user's profile -directory. +-p profile +This option can be used while adding or modifing a user account\&. It will specify the user's profile directory\&. + + +Example: \fB-p "\\\\BERSERKER\\netlogon"\fR + -Example: \fB-p "\\\\\\\\BERSERKER\\\\netlogon"\fR .TP -\fB-a\fR -This option is used to add a user into the -database. This command needs a user name specified with -the -u switch. When adding a new user, pdbedit will also -ask for the password to be used. +-G SID|rid +This option can be used while adding or modifying a user account\&. It will specify the users' new primary group SID (Security Identifier) or rid\&. + + +Example: \fB-G S-1-5-21-2447931902-1787058256-3961074038-1201\fR + + +.TP +-U SID|rid +This option can be used while adding or modifying a user account\&. It will specify the users' new SID (Security Identifier) or rid\&. -Example: \fBpdbedit -a -u sorce\fR +Example: \fB-U S-1-5-21-2447931902-1787058256-3961074038-5004\fR + + +.TP +-c account-control +This option can be used while adding or modifying a user account\&. It will specify the users' account control property\&. Possible flags that can be set are: N, D, H, L, X\&. + + +Example: \fB-c "[X ]"\fR + + +.TP +-a +This option is used to add a user into the database\&. This command needs a user name specified with the -u switch\&. When adding a new user, pdbedit will also ask for the password to be used\&. + + +Example: \fBpdbedit -a -u sorce\fR .nf new password: - retype new password +retype new password .fi + + + .TP -\fB-m\fR -This option may only be used in conjunction -with the \fI-a\fR option. It will make -pdbedit to add a machine trust account instead of a user -account (-u username will provide the machine name). +-r +This option is used to modify an existing user in the database\&. This command needs a user name specified with the -u switch\&. Other options can be specified to modify the properties of the specified user\&. This flag is kept for backwards compatibility, but it is no longer necessary to specify it\&. + + +.TP +-m +This option may only be used in conjunction with the \fI-a\fR option\&. It will make pdbedit to add a machine trust account instead of a user account (-u username will provide the machine name)\&. + Example: \fBpdbedit -a -m -u w2k-wks\fR + + .TP -\fB-x\fR -This option causes pdbedit to delete an account -from the database. It needs a username specified with the --u switch. +-x +This option causes pdbedit to delete an account from the database\&. It needs a username specified with the -u switch\&. + Example: \fBpdbedit -x -u bob\fR + + .TP -\fB-i passdb-backend\fR -Use a different passdb backend to retrieve users -than the one specified in smb.conf. Can be used to import data into -your local user database. +-i passdb-backend +Use a different passdb backend to retrieve users than the one specified in smb\&.conf\&. Can be used to import data into your local user database\&. + + +This option will ease migration from one passdb backend to another\&. + + +Example: \fBpdbedit -i smbpasswd:/etc/smbpasswd.old \fR -This option will ease migration from one passdb backend to -another. -Example: \fBpdbedit -i smbpasswd:/etc/smbpasswd.old -\fR .TP -\fB-e passdb-backend\fR -Exports all currently available users to the -specified password database backend. +-e passdb-backend +Exports all currently available users to the specified password database backend\&. + + +This option will ease migration from one passdb backend to another and will ease backing up\&. -This option will ease migration from one passdb backend to -another and will ease backing up. Example: \fBpdbedit -e smbpasswd:/root/samba-users.backup\fR + + .TP -\fB-g\fR -If you specify \fI-g\fR, -then \fI-i in-backend -e out-backend\fR -applies to the group mapping instead of the user database. +-g +If you specify \fI-g\fR, then \fI-i in-backend -e out-backend\fR applies to the group mapping instead of the user database\&. + + +This option will ease migration from one passdb backend to another and will ease backing up\&. + -This option will ease migration from one passdb backend to -another and will ease backing up. .TP -\fB-b passdb-backend\fR -Use a different default passdb backend. +-b passdb-backend +Use a different default passdb backend\&. + Example: \fBpdbedit -b xml:/root/pdb-backup.xml -l\fR + + .TP -\fB-P account-policy\fR +-P account-policy Display an account policy -Valid policies are: minimum password age, reset count minutes, disconnect time, -user must logon to change password, password history, lockout duration, min password length, -maximum password age and bad lockout attempt. + +Valid policies are: minimum password age, reset count minutes, disconnect time, user must logon to change password, password history, lockout duration, min password length, maximum password age and bad lockout attempt\&. + Example: \fBpdbedit -P "bad lockout attempt"\fR .nf - account policy value for bad lockout attempt is 0 - + +account policy value for bad lockout attempt is 0 .fi + + .TP -\fB-V account-policy-value\fR -Sets an account policy to a specified value. -This option may only be used in conjunction -with the \fI-P\fR option. +-C account-policy-value +Sets an account policy to a specified value\&. This option may only be used in conjunction with the \fI-P\fR option\&. + -Example: \fBpdbedit -P "bad lockout attempt" -V 3\fR +Example: \fBpdbedit -P "bad lockout attempt" -C 3\fR .nf - account policy value for bad lockout attempt was 0 - account policy value for bad lockout attempt is now 3 - + +account policy value for bad lockout attempt was 0 +account policy value for bad lockout attempt is now 3 .fi + + .TP -\fB-d|--debug=debuglevel\fR -\fIdebuglevel\fR is an integer -from 0 to 10. The default value if this parameter is -not specified is zero. - -The higher this value, the more detail will be -logged to the log files about the activities of the -server. At level 0, only critical errors and serious -warnings will be logged. Level 1 is a reasonable level for -day to day running - it generates a small amount of -information about operations carried out. - -Levels above 1 will generate considerable -amounts of log data, and should only be used when -investigating a problem. Levels above 3 are designed for -use only by developers and generate HUGE amounts of log -data, most of which is extremely cryptic. - -Note that specifying this parameter here will -override the log -level file. +-h|--help +Print a summary of command line options\&. + + .TP -\fB-h|--help\fR -Print a summary of command line options. +-V +Prints the version number for \fBsmbd\fR\&. + + .TP -\fB-s \fR -The file specified contains the -configuration details required by the server. The -information in this file includes server-specific -information such as what printcap file to use, as well -as descriptions of all the services that the server is -to provide. See \fIsmb.conf(5)\fR for more information. -The default configuration file name is determined at -compile time. +-s +The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fI smb\&.conf(5)\fR for more information\&. The default configuration file name is determined at compile time\&. + + +.TP +-d|--debug=debuglevel +\fIdebuglevel\fR is an integer from 0 to 10\&. The default value if this parameter is not specified is zero\&. + + +The higher this value, the more detail will be logged to the log files about the activities of the server\&. At level 0, only critical errors and serious warnings will be logged\&. Level 1 is a reasonable level for day to day running - it generates a small amount of information about operations carried out\&. + + +Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\&. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\&. + + +Note that specifying this parameter here will override the log level parameter in the \fIsmb\&.conf(5)\fR file\&. + + +.TP +-l|--logfile=logbasename +File name for log/debug files\&. The extension \fB"\&.client"\fR will be appended\&. The log file is never removed by the client\&. + + .SH "NOTES" + .PP -This command may be used only by root. +This command may be used only by root\&. + .SH "VERSION" + .PP -This man page is correct for version 2.2 of -the Samba suite. +This man page is correct for version 3\&.0 of the Samba suite\&. + .SH "SEE ALSO" + .PP -smbpasswd(8) -samba(7) +\fBsmbpasswd\fR(5), \fBsamba\fR(7) + .SH "AUTHOR" + .PP -The original Samba software and related utilities -were created by Andrew Tridgell. Samba is now developed -by the Samba Team as an Open Source project similar -to the way the Linux kernel is developed. -.PP -The original Samba man pages were written by Karl Auer. -The man page sources were converted to YODL format (another -excellent piece of Open Source software, available at -ftp://ftp.icce.rug.nl/pub/unix/ ) and updated for the Samba 2.0 -release by Jeremy Allison. The conversion to DocBook for -Samba 2.2 was done by Gerald Carter +The original Samba software and related utilities were created by Andrew Tridgell\&. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\&. + diff --git a/docs/manpages/rpcclient.1 b/docs/manpages/rpcclient.1 index dcba30100b..34cb6a1fa5 100644 --- a/docs/manpages/rpcclient.1 +++ b/docs/manpages/rpcclient.1 @@ -1,358 +1,616 @@ -.\" This manpage has been automatically generated by docbook2man -.\" from a DocBook document. This tool can be found at: -.\" -.\" Please send any bug reports, improvements, comments, patches, -.\" etc. to Steve Cheng . -.TH "RPCCLIENT" "1" "04 March 2003" "" "" +.\"Generated by db2man.xsl. Don't modify this, modify the source. +.de Sh \" Subsection +.br +.if t .Sp +.ne 5 +.PP +\fB\\$1\fR +.PP +.. +.de Sp \" Vertical space (when we can't use .PP) +.if t .sp .5v +.if n .sp +.. +.de Ip \" List item +.br +.ie \\n(.$>=3 .ne \\$3 +.el .ne 3 +.IP "\\$1" \\$2 +.. +.TH "RPCCLIENT" 1 "" "" "" .SH NAME -rpcclient \- tool for executing client side MS-RPC functions -.SH SYNOPSIS +rpcclient \- tool for executing client side MS-RPC functions +.SH "SYNOPSIS" -\fBrpcclient\fR [ \fB-A authfile\fR ] [ \fB-c \fR ] [ \fB-d debuglevel\fR ] [ \fB-h\fR ] [ \fB-l logfile\fR ] [ \fB-N\fR ] [ \fB-s \fR ] [ \fB-U username[%password]\fR ] [ \fB-W workgroup\fR ] [ \fB-N\fR ] [ \fB-I destinationIP\fR ] \fBserver\fR +.nf +\fBrpcclient\fR [-A authfile] [-c ] [-d debuglevel] [-h] [-l logfile] + [-N] [-s ] [-U username[%password]] [-W workgroup] + [-N] [-I destinationIP] {server} +.fi .SH "DESCRIPTION" + .PP -This tool is part of the Samba suite. +This tool is part of the \fBSamba\fR(7) suite\&. + .PP -\fBrpcclient\fR is a utility initially developed -to test MS-RPC functionality in Samba itself. It has undergone -several stages of development and stability. Many system administrators -have now written scripts around it to manage Windows NT clients from -their UNIX workstation. +\fBrpcclient\fR is a utility initially developed to test MS-RPC functionality in Samba itself\&. It has undergone several stages of development and stability\&. Many system administrators have now written scripts around it to manage Windows NT clients from their UNIX workstation\&. + .SH "OPTIONS" + +.TP +server +NetBIOS name of Server to which to connect\&. The server can be any SMB/CIFS server\&. The name is resolved using the \fIname resolve order\fR line from \fBsmb.conf\fR(5)\&. + + .TP -\fBserver\fR -NetBIOS name of Server to which to connect. -The server can be any SMB/CIFS server. The name is -resolved using the \fIname resolve order\fR line from -\fIsmb.conf(5)\fR. +-c|--command='command string' +execute semicolon separated commands (listed below)) + + +.TP +-I IP-address +\fIIP address\fR is the address of the server to connect to\&. It should be specified in standard "a\&.b\&.c\&.d" notation\&. + + +Normally the client would attempt to locate a named SMB/CIFS server by looking it up via the NetBIOS name resolution mechanism described above in the \fIname resolve order\fR parameter above\&. Using this parameter will force the client to assume that the server is on the machine with the specified IP address and the NetBIOS name component of the resource being connected to will be ignored\&. + + +There is no default for this parameter\&. If not supplied, it will be determined automatically by the client as described above\&. + + +.TP +-V +Prints the version number for \fBsmbd\fR\&. + + +.TP +-s +The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fI smb\&.conf(5)\fR for more information\&. The default configuration file name is determined at compile time\&. + + +.TP +-d|--debug=debuglevel +\fIdebuglevel\fR is an integer from 0 to 10\&. The default value if this parameter is not specified is zero\&. + + +The higher this value, the more detail will be logged to the log files about the activities of the server\&. At level 0, only critical errors and serious warnings will be logged\&. Level 1 is a reasonable level for day to day running - it generates a small amount of information about operations carried out\&. + + +Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\&. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\&. + + +Note that specifying this parameter here will override the log level parameter in the \fIsmb\&.conf(5)\fR file\&. + + +.TP +-l|--logfile=logbasename +File name for log/debug files\&. The extension \fB"\&.client"\fR will be appended\&. The log file is never removed by the client\&. + + +.TP +-N +If specified, this parameter suppresses the normal password prompt from the client to the user\&. This is useful when accessing a service that does not require a password\&. + + +Unless a password is specified on the command line or this parameter is specified, the client will request a password\&. + + .TP -\fB-A|--authfile=filename\fR -This option allows -you to specify a file from which to read the username and -password used in the connection. The format of the file is +-k +Try to authenticate with kerberos\&. Only useful in an Active Directory environment\&. + + +.TP +-A|--authfile=filename +This option allows you to specify a file from which to read the username and password used in the connection\&. The format of the file is .nf - username = - password = - domain = - + +username = +password = +domain = .fi -Make certain that the permissions on the file restrict -access from unwanted users. -.TP -\fB-c|--command='command string'\fR -execute semicolon separated commands (listed -below)) -.TP -\fB-d|--debug=debuglevel\fR -\fIdebuglevel\fR is an integer -from 0 to 10. The default value if this parameter is -not specified is zero. - -The higher this value, the more detail will be -logged to the log files about the activities of the -server. At level 0, only critical errors and serious -warnings will be logged. Level 1 is a reasonable level for -day to day running - it generates a small amount of -information about operations carried out. - -Levels above 1 will generate considerable -amounts of log data, and should only be used when -investigating a problem. Levels above 3 are designed for -use only by developers and generate HUGE amounts of log -data, most of which is extremely cryptic. - -Note that specifying this parameter here will -override the log -level file. -.TP -\fB-h|--help\fR -Print a summary of command line options. -.TP -\fB-I IP-address\fR -\fIIP address\fR is the address of the server to connect to. -It should be specified in standard "a.b.c.d" notation. - -Normally the client would attempt to locate a named -SMB/CIFS server by looking it up via the NetBIOS name resolution -mechanism described above in the \fIname resolve order\fR -parameter above. Using this parameter will force the client -to assume that the server is on the machine with the specified IP -address and the NetBIOS name component of the resource being -connected to will be ignored. - -There is no default for this parameter. If not supplied, -it will be determined automatically by the client as described -above. -.TP -\fB-l|--logfile=logbasename\fR -File name for log/debug files. The extension -\&'.client' will be appended. The log file is -never removed by the client. -.TP -\fB-N|--nopass\fR -instruct \fBrpcclient\fR not to ask -for a password. By default, \fBrpcclient\fR will -prompt for a password. See also the \fI-U\fR -option. -.TP -\fB-s|--conf=smb.conf\fR -Specifies the location of the all-important -\fIsmb.conf\fR file. -.TP -\fB-U|--user=username[%password]\fR -Sets the SMB username or username and password. - -If %password is not specified, the user will be prompted. The -client will first check the \fBUSER\fR environment variable, then the -\fBLOGNAME\fR variable and if either exists, the -string is uppercased. If these environmental variables are not -found, the username GUEST is used. - -A third option is to use a credentials file which -contains the plaintext of the username and password. This -option is mainly provided for scripts where the admin does not -wish to pass the credentials on the command line or via environment -variables. If this method is used, make certain that the permissions -on the file restrict access from unwanted users. See the -\fI-A\fR for more details. - -Be cautious about including passwords in scripts. Also, on -many systems the command line of a running process may be seen -via the \fBps\fR command. To be safe always allow -\fBrpcclient\fR to prompt for a password and type -it in directly. -.TP -\fB-W|--workgroup=domain\fR -Set the SMB domain of the username. This -overrides the default domain which is the domain defined in -smb.conf. If the domain specified is the same as the server's NetBIOS name, -it causes the client to log on using the server's local SAM (as -opposed to the Domain SAM). + +Make certain that the permissions on the file restrict access from unwanted users\&. + + +.TP +-U|--user=username[%password] +Sets the SMB username or username and password\&. + + +If %password is not specified, the user will be prompted\&. The client will first check the \fBUSER\fR environment variable, then the \fBLOGNAME\fR variable and if either exists, the string is uppercased\&. If these environmental variables are not found, the username \fBGUEST\fR is used\&. + + +A third option is to use a credentials file which contains the plaintext of the username and password\&. This option is mainly provided for scripts where the admin does not wish to pass the credentials on the command line or via environment variables\&. If this method is used, make certain that the permissions on the file restrict access from unwanted users\&. See the \fI-A\fR for more details\&. + + +Be cautious about including passwords in scripts\&. Also, on many systems the command line of a running process may be seen via the \fBps\fR command\&. To be safe always allow \fBrpcclient\fR to prompt for a password and type it in directly\&. + + +.TP +-n +This option allows you to override the NetBIOS name that Samba uses for itself\&. This is identical to setting the \fINetBIOS name\fR parameter in the \fBsmb.conf\fR(5) file\&. However, a command line setting will take precedence over settings in \fBsmb.conf\fR(5)\&. + + +.TP +-i +This specifies a NetBIOS scope that \fBnmblookup\fR will use to communicate with when generating NetBIOS names\&. For details on the use of NetBIOS scopes, see rfc1001\&.txt and rfc1002\&.txt\&. NetBIOS scopes are \fBvery\fR rarely used, only set this parameter if you are the system administrator in charge of all the NetBIOS systems you communicate with\&. + + +.TP +-W|--workgroup=domain +Set the SMB domain of the username\&. This overrides the default domain which is the domain defined in smb\&.conf\&. If the domain specified is the same as the servers NetBIOS name, it causes the client to log on using the servers local SAM (as opposed to the Domain SAM)\&. + + +.TP +-O socket options +TCP socket options to set on the client socket\&. See the socket options parameter in the \fBsmb.conf\fR(5) manual page for the list of valid options\&. + + +.TP +-h|--help +Print a summary of command line options\&. + + .SH "COMMANDS" + +.SS "LSARPC" + +.TP +lsaquery +Query info policy + + +.TP +lookupsids +Resolve a list of SIDs to usernames\&. + + +.TP +lookupnames +Resolve a list of usernames to SIDs\&. + + +.TP +enumtrusts +Enumerate trusted domains + + +.TP +enumprivs +Enumerate privileges + + +.TP +getdispname +Get the privilege name + + +.TP +lsaenumsid +Enumerate the LSA SIDS + + +.TP +lsaenumprivsaccount +Enumerate the privileges of an SID + + +.TP +lsaenumacctrights +Enumerate the rights of an SID + + +.TP +lsaenumacctwithright +Enumerate accounts with a right + + +.TP +lsaaddacctrights +Add rights to an account + + +.TP +lsaremoveacctrights +Remove rights from an account + + +.TP +lsalookupprivvalue +Get a privilege value given its name + + +.TP +lsaquerysecobj +Query LSA security object + + +.SS "LSARPC-DS" + +.TP +dsroledominfo +Get Primary Domain Information + + .PP -\fBLSARPC\fR -.TP 0.2i -\(bu -\fBlsaquery\fR -.TP 0.2i -\(bu -\fBlookupsids\fR - Resolve a list -of SIDs to usernames. -.TP 0.2i -\(bu -\fBlookupnames\fR - Resolve a list -of usernames to SIDs. -.TP 0.2i -\(bu -\fBenumtrusts\fR -.PP -.PP -\fBSAMR\fR -.TP 0.2i -\(bu -\fBqueryuser\fR -.TP 0.2i -\(bu -\fBquerygroup\fR -.TP 0.2i -\(bu -\fBqueryusergroups\fR -.TP 0.2i -\(bu -\fBquerygroupmem\fR -.TP 0.2i -\(bu -\fBqueryaliasmem\fR -.TP 0.2i -\(bu -\fBquerydispinfo\fR -.TP 0.2i -\(bu -\fBquerydominfo\fR -.TP 0.2i -\(bu -\fBenumdomgroups\fR -.PP + + .PP -\fBSPOOLSS\fR -.TP 0.2i -\(bu -\fBadddriver \fR -- Execute an AddPrinterDriver() RPC to install the printer driver -information on the server. Note that the driver files should -already exist in the directory returned by -\fBgetdriverdir\fR. Possible values for -\fIarch\fR are the same as those for -the \fBgetdriverdir\fR command. -The \fIconfig\fR parameter is defined as -follows: +\fBDFS\fR + +.TP +dfsexist +Query DFS support + + +.TP +dfsadd +Add a DFS share + + +.TP +dfsremove +Remove a DFS share + + +.TP +dfsgetinfo +Query DFS share info + + +.TP +dfsenum +Enumerate dfs shares + + +.SS "REG" + +.TP +shutdown +Remote Shutdown + + +.TP +abortshutdown +Abort Shutdown + + +.SS "SRVSVC" + +.TP +srvinfo +Server query info + + +.TP +netshareenum +Enumerate shares + + +.TP +netfileenum +Enumerate open files + + +.TP +netremotetod +Fetch remote time of day + + +.SS "SAMR" + +.TP +queryuser +Query user info + + +.TP +querygroup +Query group info + + +.TP +queryusergroups +Query user groups + + +.TP +querygroupmem +Query group membership + + +.TP +queryaliasmem +Query alias membership + + +.TP +querydispinfo +Query display info + + +.TP +querydominfo +Query domain info + + +.TP +enumdomusers +Enumerate domain users + + +.TP +enumdomgroups +Enumerate domain groups + + +.TP +enumalsgroups +Enumerate alias groups + + +.TP +createdomuser +Create domain user + + +.TP +samlookupnames +Look up names + + +.TP +samlookuprids +Look up names + + +.TP +deletedomuser +Delete domain user + + +.TP +samquerysecobj +Query SAMR security object + + +.TP +getdompwinfo +Retrieve domain password info + + +.TP +lookupdomain +Look up domain + + +.SS "SPOOLSS" + +.TP +adddriver +Execute an AddPrinterDriver() RPC to install the printer driver information on the server\&. Note that the driver files should already exist in the directory returned by \fBgetdriverdir\fR\&. Possible values for \fIarch\fR are the same as those for the \fBgetdriverdir\fR command\&. The \fIconfig\fR parameter is defined as follows: .nf - Long Printer Name:\\ - Driver File Name:\\ - Data File Name:\\ - Config File Name:\\ - Help File Name:\\ - Language Monitor Name:\\ - Default Data Type:\\ - Comma Separated list of Files - + +Long Printer Name:\\ +Driver File Name:\\ +Data File Name:\\ +Config File Name:\\ +Help File Name:\\ +Language Monitor Name:\\ +Default Data Type:\\ +Comma Separated list of Files .fi -Any empty fields should be enter as the string "NULL". - -Samba does not need to support the concept of Print Monitors -since these only apply to local printers whose driver can make -use of a bi-directional link for communication. This field should -be "NULL". On a remote NT print server, the Print Monitor for a -driver must already be installed prior to adding the driver or -else the RPC will fail. -.TP 0.2i -\(bu -\fBaddprinter - \fR -- Add a printer on the remote server. This printer -will be automatically shared. Be aware that the printer driver -must already be installed on the server (see \fBadddriver\fR) -and the \fIport\fRmust be a valid port name (see -\fBenumports\fR. -.TP 0.2i -\(bu -\fBdeldriver\fR - Delete the -specified printer driver for all architectures. This -does not delete the actual driver files from the server, -only the entry from the server's list of drivers. -.TP 0.2i -\(bu -\fBenumdata\fR - Enumerate all -printer setting data stored on the server. On Windows NT clients, -these values are stored in the registry, while Samba servers -store them in the printers TDB. This command corresponds -to the MS Platform SDK GetPrinterData() function (* This -command is currently unimplemented). -.TP 0.2i -\(bu -\fBenumjobs \fR -- List the jobs and status of a given printer. -This command corresponds to the MS Platform SDK EnumJobs() -function (* This command is currently unimplemented). -.TP 0.2i -\(bu -\fBenumports [level]\fR -- Executes an EnumPorts() call using the specified -info level. Currently only info levels 1 and 2 are supported. -.TP 0.2i -\(bu -\fBenumdrivers [level]\fR -- Execute an EnumPrinterDrivers() call. This lists the various installed -printer drivers for all architectures. Refer to the MS Platform SDK -documentation for more details of the various flags and calling -options. Currently supported info levels are 1, 2, and 3. -.TP 0.2i -\(bu -\fBenumprinters [level]\fR -- Execute an EnumPrinters() call. This lists the various installed -and share printers. Refer to the MS Platform SDK documentation for -more details of the various flags and calling options. Currently -supported info levels are 0, 1, and 2. -.TP 0.2i -\(bu -\fBgetdata \fR -- Retrieve the data for a given printer setting. See -the \fBenumdata\fR command for more information. -This command corresponds to the GetPrinterData() MS Platform -SDK function (* This command is currently unimplemented). -.TP 0.2i -\(bu -\fBgetdriver \fR -- Retrieve the printer driver information (such as driver file, -config file, dependent files, etc...) for -the given printer. This command corresponds to the GetPrinterDriver() -MS Platform SDK function. Currently info level 1, 2, and 3 are supported. -.TP 0.2i -\(bu -\fBgetdriverdir \fR -- Execute a GetPrinterDriverDirectory() -RPC to retrieve the SMB share name and subdirectory for -storing printer driver files for a given architecture. Possible -values for \fIarch\fR are "Windows 4.0" -(for Windows 95/98), "Windows NT x86", "Windows NT PowerPC", "Windows -Alpha_AXP", and "Windows NT R4000". -.TP 0.2i -\(bu -\fBgetprinter \fR -- Retrieve the current printer information. This command -corresponds to the GetPrinter() MS Platform SDK function. -.TP 0.2i -\(bu -\fBopenprinter \fR -- Execute an OpenPrinterEx() and ClosePrinter() RPC -against a given printer. -.TP 0.2i -\(bu -\fBsetdriver -\fR -- Execute a SetPrinter() command to update the printer driver -associated with an installed printer. The printer driver must -already be correctly installed on the print server. - -See also the \fBenumprinters\fR and -\fBenumdrivers\fR commands for obtaining a list of -of installed printers and drivers. -.PP -\fBGENERAL OPTIONS\fR -.TP 0.2i -\(bu -\fBdebuglevel\fR - Set the current -debug level used to log information. -.TP 0.2i -\(bu -\fBhelp (?)\fR - Print a listing of all -known commands or extended help on a particular command. -.TP 0.2i -\(bu -\fBquit (exit)\fR - Exit \fBrpcclient -\fR. + +Any empty fields should be enter as the string "NULL"\&. + + +Samba does not need to support the concept of Print Monitors since these only apply to local printers whose driver can make use of a bi-directional link for communication\&. This field should be "NULL"\&. On a remote NT print server, the Print Monitor for a driver must already be installed prior to adding the driver or else the RPC will fail\&. + + +.TP +addprinter +Add a printer on the remote server\&. This printer will be automatically shared\&. Be aware that the printer driver must already be installed on the server (see \fBadddriver\fR) and the \fIport\fRmust be a valid port name (see \fBenumports\fR\&. + + +.TP +deldriver +Delete the specified printer driver for all architectures\&. This does not delete the actual driver files from the server, only the entry from the server's list of drivers\&. + + +.TP +enumdata +Enumerate all printer setting data stored on the server\&. On Windows NT clients, these values are stored in the registry, while Samba servers store them in the printers TDB\&. This command corresponds to the MS Platform SDK GetPrinterData() function (* This command is currently unimplemented)\&. + + +.TP +enumdataex +Enumerate printer data for a key + + +.TP +enumjobs +List the jobs and status of a given printer\&. This command corresponds to the MS Platform SDK EnumJobs() function + + +.TP +enumkey +Enumerate printer keys + + +.TP +enumports [level] +Executes an EnumPorts() call using the specified info level\&. Currently only info levels 1 and 2 are supported\&. + + +.TP +enumdrivers [level] +Execute an EnumPrinterDrivers() call\&. This lists the various installed printer drivers for all architectures\&. Refer to the MS Platform SDK documentation for more details of the various flags and calling options\&. Currently supported info levels are 1, 2, and 3\&. + + +.TP +enumprinters [level] +Execute an EnumPrinters() call\&. This lists the various installed and share printers\&. Refer to the MS Platform SDK documentation for more details of the various flags and calling options\&. Currently supported info levels are 1, 2 and 5\&. + + +.TP +getdata +Retrieve the data for a given printer setting\&. See the \fBenumdata\fR command for more information\&. This command corresponds to the GetPrinterData() MS Platform SDK function\&. + + +.TP +getdataex +Get printer driver data with keyname + + +.TP +getdriver +Retrieve the printer driver information (such as driver file, config file, dependent files, etc\&.\&.\&.) for the given printer\&. This command corresponds to the GetPrinterDriver() MS Platform SDK function\&. Currently info level 1, 2, and 3 are supported\&. + + +.TP +getdriverdir +Execute a GetPrinterDriverDirectory() RPC to retrieve the SMB share name and subdirectory for storing printer driver files for a given architecture\&. Possible values for \fIarch\fR are "Windows 4\&.0" (for Windows 95/98), "Windows NT x86", "Windows NT PowerPC", "Windows Alpha_AXP", and "Windows NT R4000"\&. + + +.TP +getprinter +Retrieve the current printer information\&. This command corresponds to the GetPrinter() MS Platform SDK function\&. + + +.TP +getprintprocdir +Get print processor directory + + +.TP +openprinter +Execute an OpenPrinterEx() and ClosePrinter() RPC against a given printer\&. + + +.TP +setdriver +Execute a SetPrinter() command to update the printer driver associated with an installed printer\&. The printer driver must already be correctly installed on the print server\&. + + +See also the \fBenumprinters\fR and \fBenumdrivers\fR commands for obtaining a list of of installed printers and drivers\&. + + +.TP +addform +Add form + + +.TP +setform +Set form + + +.TP +getform +Get form + + +.TP +deleteform +Delete form + + +.TP +enumforms +Enumerate form + + +.TP +setprinter +Set printer comment + + +.TP +setprinterdata +Set REG_SZ printer data + + +.TP +rffpcnex +Rffpcnex test + + +.SS "NETLOGON" + +.TP +logonctrl2 +Logon Control 2 + + +.TP +logonctrl +Logon Control + + +.TP +samsync +Sam Synchronisation + + +.TP +samdeltas +Query Sam Deltas + + +.TP +samlogon +Sam Logon + + +.SS "GENERAL COMMANDS" + +.TP +debuglevel +Set the current debug level used to log information\&. + + +.TP +help (?) +Print a listing of all known commands or extended help on a particular command\&. + + +.TP +quit (exit) +Exit \fBrpcclient \fR\&. + + .SH "BUGS" + .PP -\fBrpcclient\fR is designed as a developer testing tool -and may not be robust in certain areas (such as command line parsing). -It has been known to generate a core dump upon failures when invalid -parameters where passed to the interpreter. +\fBrpcclient\fR is designed as a developer testing tool and may not be robust in certain areas (such as command line parsing)\&. It has been known to generate a core dump upon failures when invalid parameters where passed to the interpreter\&. + .PP From Luke Leighton's original rpcclient man page: + .PP -\fB"WARNING!\fR The MSRPC over SMB code has -been developed from examining Network traces. No documentation is -available from the original creators (Microsoft) on how MSRPC over -SMB works, or how the individual MSRPC services work. Microsoft's -implementation of these services has been demonstrated (and reported) -to be... a bit flaky in places. +\fBWARNING!\fR The MSRPC over SMB code has been developed from examining Network traces\&. No documentation is available from the original creators (Microsoft) on how MSRPC over SMB works, or how the individual MSRPC services work\&. Microsoft's implementation of these services has been demonstrated (and reported) to be\&.\&.\&. a bit flaky in places\&. + .PP -The development of Samba's implementation is also a bit rough, -and as more of the services are understood, it can even result in -versions of \fBsmbd(8)\fR and \fBrpcclient(1)\fR -that are incompatible for some commands or services. Additionally, -the developers are sending reports to Microsoft, and problems found -or reported to Microsoft are fixed in Service Packs, which may -result in incompatibilities." +The development of Samba's implementation is also a bit rough, and as more of the services are understood, it can even result in versions of \fBsmbd\fR(8) and \fBrpcclient\fR(1) that are incompatible for some commands or services\&. Additionally, the developers are sending reports to Microsoft, and problems found or reported to Microsoft are fixed in Service Packs, which may result in incompatibilities\&. + .SH "VERSION" + .PP -This man page is correct for version 3.0 of the Samba -suite. +This man page is correct for version 3\&.0 of the Samba suite\&. + .SH "AUTHOR" + .PP -The original Samba software and related utilities -were created by Andrew Tridgell. Samba is now developed -by the Samba Team as an Open Source project similar -to the way the Linux kernel is developed. +The original Samba software and related utilities were created by Andrew Tridgell\&. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\&. + .PP -The original rpcclient man page was written by Matthew -Geddes, Luke Kenneth Casson Leighton, and rewritten by Gerald Carter. -The conversion to DocBook for Samba 2.2 was done by Gerald -Carter. +The original rpcclient man page was written by Matthew Geddes, Luke Kenneth Casson Leighton, and rewritten by Gerald Carter\&. The conversion to DocBook for Samba 2\&.2 was done by Gerald Carter\&. The conversion to DocBook XML 4\&.2 for Samba 3\&.0 was done by Alexander Bokovoy\&. + diff --git a/docs/manpages/smb.conf.5 b/docs/manpages/smb.conf.5 index 02861d492d..465a266861 100644 --- a/docs/manpages/smb.conf.5 +++ b/docs/manpages/smb.conf.5 @@ -1,7441 +1,474 @@ -.\" This manpage has been automatically generated by docbook2man -.\" from a DocBook document. This tool can be found at: -.\" -.\" Please send any bug reports, improvements, comments, patches, -.\" etc. to Steve Cheng . -.TH "SMB.CONF" "5" "30 March 2003" "" "" +.\"Generated by db2man.xsl. Don't modify this, modify the source. +.de Sh \" Subsection +.br +.if t .Sp +.ne 5 +.PP +\fB\\$1\fR +.PP +.. +.de Sp \" Vertical space (when we can't use .PP) +.if t .sp .5v +.if n .sp +.. +.de Ip \" List item +.br +.ie \\n(.$>=3 .ne \\$3 +.el .ne 3 +.IP "\\$1" \\$2 +.. +.TH "SMB.CONF" 5 "" "" "" .SH NAME smb.conf \- The configuration file for the Samba suite .SH "SYNOPSIS" -.PP -The \fIsmb.conf\fR file is a configuration -file for the Samba suite. \fIsmb.conf\fR contains -runtime configuration information for the Samba programs. The -\fIsmb.conf\fR file is designed to be configured and -administered by the \fBswat(8)\fR - program. The complete description of the file format and -possible parameters held within are here for reference purposes. -.SH "FILE FORMAT" -.PP -The file consists of sections and parameters. A section -begins with the name of the section in square brackets and continues -until the next section begins. Sections contain parameters of the -form -.PP -\fIname\fR = \fIvalue -\fR -.PP -The file is line-based - that is, each newline-terminated -line represents either a comment, a section name or a parameter. -.PP -Section and parameter names are not case sensitive. -.PP -Only the first equals sign in a parameter is significant. -Whitespace before or after the first equals sign is discarded. -Leading, trailing and internal whitespace in section and parameter -names is irrelevant. Leading and trailing whitespace in a parameter -value is discarded. Internal whitespace within a parameter value -is retained verbatim. -.PP -Any line beginning with a semicolon (';') or a hash ('#') -character is ignored, as are lines containing only whitespace. -.PP -Any line ending in a '\\' is continued -on the next line in the customary UNIX fashion. -.PP -The values following the equals sign in parameters are all -either a string (no quotes needed) or a boolean, which may be given -as yes/no, 0/1 or true/false. Case is not significant in boolean -values, but is preserved in string values. Some items such as -create modes are numeric. -.SH "SECTION DESCRIPTIONS" -.PP -Each section in the configuration file (except for the -[global] section) describes a shared resource (known -as a "share"). The section name is the name of the -shared resource and the parameters within the section define -the shares attributes. -.PP -There are three special sections, [global], -[homes] and [printers], which are -described under \fBspecial sections\fR. The -following notes apply to ordinary section descriptions. -.PP -A share consists of a directory to which access is being -given plus a description of the access rights which are granted -to the user of the service. Some housekeeping options are -also specifiable. -.PP -Sections are either file share services (used by the -client as an extension of their native file systems) or -printable services (used by the client to access print services -on the host running the server). -.PP -Sections may be designated \fBguest\fR services, -in which case no password is required to access them. A specified -UNIX \fBguest account\fR is used to define access -privileges in this case. -.PP -Sections other than guest services will require a password -to access them. The client provides the username. As older clients -only provide passwords and not usernames, you may specify a list -of usernames to check against the password using the "user =" -option in the share definition. For modern clients such as -Windows 95/98/ME/NT/2000, this should not be necessary. -.PP -Note that the access rights granted by the server are -masked by the access rights granted to the specified or guest -UNIX user by the host system. The server does not grant more -access than the host system grants. -.PP -The following sample section defines a file space share. -The user has write access to the path \fI/home/bar\fR. -The share is accessed via the share name "foo": - -.nf - [foo] - path = /home/bar - read only = no - - -.fi -.PP -The following sample section defines a printable share. -The share is readonly, but printable. That is, the only write -access permitted is via calls to open, write to and close a -spool file. The \fBguest ok\fR parameter means -access will be permitted as the default guest user (specified -elsewhere): - -.nf - [aprinter] - path = /usr/spool/public - read only = yes - printable = yes - guest ok = yes - - -.fi -.SH "SPECIAL SECTIONS" -.SS "THE [GLOBAL] SECTION" -.PP -parameters in this section apply to the server -as a whole, or are defaults for sections which do not -specifically define certain items. See the notes -under PARAMETERS for more information. -.SS "THE [HOMES] SECTION" -.PP -If a section called homes is included in the -configuration file, services connecting clients to their -home directories can be created on the fly by the server. -.PP -When the connection request is made, the existing -sections are scanned. If a match is found, it is used. If no -match is found, the requested section name is treated as a -user name and looked up in the local password file. If the -name exists and the correct password has been given, a share is -created by cloning the [homes] section. -.PP -Some modifications are then made to the newly -created share: -.TP 0.2i -\(bu -The share name is changed from homes to -the located username. -.TP 0.2i -\(bu -If no path was given, the path is set to -the user's home directory. -.PP -If you decide to use a \fBpath =\fR line -in your [homes] section then you may find it useful -to use the %S macro. For example : -.PP -\fBpath = /data/pchome/%S\fR -.PP -would be useful if you have different home directories -for your PCs than for UNIX access. -.PP -This is a fast and simple way to give a large number -of clients access to their home directories with a minimum -of fuss. -.PP -A similar process occurs if the requested section -name is "homes", except that the share name is not -changed to that of the requesting user. This method of using -the [homes] section works well if different users share -a client PC. -.PP -The [homes] section can specify all the parameters -a normal service section can specify, though some make more sense -than others. The following is a typical and suitable [homes] -section: - -.nf - [homes] - read only = no - - -.fi -.PP -An important point is that if guest access is specified -in the [homes] section, all home directories will be -visible to all clients \fBwithout a password\fR. -In the very unlikely event that this is actually desirable, it -would be wise to also specify \fBread only -access\fR. -.PP -Note that the \fBbrowseable\fR flag for -auto home directories will be inherited from the global browseable -flag, not the [homes] browseable flag. This is useful as -it means setting \fBbrowseable = no\fR in -the [homes] section will hide the [homes] share but make -any auto home directories visible. -.SS "THE [PRINTERS] SECTION" -.PP -This section works like [homes], -but for printers. -.PP -If a [printers] section occurs in the -configuration file, users are able to connect to any printer -specified in the local host's printcap file. -.PP -When a connection request is made, the existing sections -are scanned. If a match is found, it is used. If no match is found, -but a [homes] section exists, it is used as described -above. Otherwise, the requested section name is treated as a -printer name and the appropriate printcap file is scanned to see -if the requested section name is a valid printer share name. If -a match is found, a new printer share is created by cloning -the [printers] section. -.PP -A few modifications are then made to the newly created -share: -.TP 0.2i -\(bu -The share name is set to the located printer -name -.TP 0.2i -\(bu -If no printer name was given, the printer name -is set to the located printer name -.TP 0.2i -\(bu -If the share does not permit guest access and -no username was given, the username is set to the located -printer name. -.PP -Note that the [printers] service MUST be -printable - if you specify otherwise, the server will refuse -to load the configuration file. -.PP -Typically the path specified would be that of a -world-writeable spool directory with the sticky bit set on -it. A typical [printers] entry would look like -this: - -.nf - [printers] - path = /usr/spool/public - guest ok = yes - printable = yes - -.fi -.PP -All aliases given for a printer in the printcap file -are legitimate printer names as far as the server is concerned. -If your printing subsystem doesn't work like that, you will have -to set up a pseudo-printcap. This is a file consisting of one or -more lines like this: - -.nf - alias|alias|alias|alias... - - -.fi -.PP -Each alias should be an acceptable printer name for -your printing subsystem. In the [global] section, specify -the new file as your printcap. The server will then only recognize -names found in your pseudo-printcap, which of course can contain -whatever aliases you like. The same technique could be used -simply to limit access to a subset of your local printers. -.PP -An alias, by the way, is defined as any component of the -first entry of a printcap record. Records are separated by newlines, -components (if there are more than one) are separated by vertical -bar symbols ('|'). -.PP -NOTE: On SYSV systems which use lpstat to determine what -printers are defined on the system you may be able to use -"printcap name = lpstat" to automatically obtain a list -of printers. See the "printcap name" option -for more details. -.SH "PARAMETERS" -.PP -parameters define the specific attributes of sections. -.PP -Some parameters are specific to the [global] section -(e.g., \fBsecurity\fR). Some parameters are usable -in all sections (e.g., \fBcreate mode\fR). All others -are permissible only in normal sections. For the purposes of the -following descriptions the [homes] and [printers] -sections will be considered normal. The letter \fBG\fR -in parentheses indicates that a parameter is specific to the -[global] section. The letter \fBS\fR -indicates that a parameter can be specified in a service specific -section. Note that all \fBS\fR parameters can also be specified in -the [global] section - in which case they will define -the default behavior for all services. -.PP -parameters are arranged here in alphabetical order - this may -not create best bedfellows, but at least you can find them! Where -there are synonyms, the preferred synonym is described, others refer -to the preferred synonym. -.SH "VARIABLE SUBSTITUTIONS" -.PP -Many of the strings that are settable in the config file -can take substitutions. For example the option "path = -/tmp/%u" would be interpreted as "path = -/tmp/john" if the user connected with the username john. -.PP -These substitutions are mostly noted in the descriptions below, -but there are some general substitutions which apply whenever they -might be relevant. These are: -.TP -\fB%U\fR -session user name (the user name that the client -wanted, not necessarily the same as the one they got). -.TP -\fB%G\fR -primary group name of %U. -.TP -\fB%h\fR -the Internet hostname that Samba is running -on. -.TP -\fB%m\fR -the NetBIOS name of the client machine -(very useful). -.TP -\fB%L\fR -the NetBIOS name of the server. This allows you -to change your config based on what the client calls you. Your -server can have a "dual personality". - -Note that this parameter is not available when Samba listens -on port 445, as clients no longer send this information -.TP -\fB%M\fR -the Internet name of the client machine. -.TP -\fB%R\fR -the selected protocol level after -protocol negotiation. It can be one of CORE, COREPLUS, -LANMAN1, LANMAN2 or NT1. -.TP -\fB%d\fR -The process id of the current server -process. -.TP -\fB%a\fR -the architecture of the remote -machine. Only some are recognized, and those may not be -100% reliable. It currently recognizes Samba, WfWg, Win95, -WinNT and Win2k. Anything else will be known as -"UNKNOWN". If it gets it wrong then sending a level -3 log to samba@samba.org - should allow it to be fixed. -.TP -\fB%I\fR -The IP address of the client machine. -.TP -\fB%T\fR -the current date and time. -.TP -\fB%D\fR -Name of the domain or workgroup of the current user. -.TP -\fB%$(\fIenvvar\fB)\fR -The value of the environment variable -\fIenvar\fR. -.PP -The following substitutes apply only to some configuration options(only those -that are used when a connection has been established): -.TP -\fB%S\fR -the name of the current service, if any. -.TP -\fB%P\fR -the root directory of the current service, -if any. -.TP -\fB%u\fR -user name of the current service, if any. -.TP -\fB%g\fR -primary group name of %u. -.TP -\fB%H\fR -the home directory of the user given -by %u. -.TP -\fB%N\fR -the name of your NIS home directory server. -This is obtained from your NIS auto.map entry. If you have -not compiled Samba with the \fB--with-automount\fR -option then this value will be the same as %L. -.TP -\fB%p\fR -the path of the service's home directory, -obtained from your NIS auto.map entry. The NIS auto.map entry -is split up as "%N:%p". -.PP -There are some quite creative things that can be done -with these substitutions and other smb.conf options. -.SH "NAME MANGLING" -.PP -Samba supports "name mangling" so that DOS and -Windows clients can use files that don't conform to the 8.3 format. -It can also be set to adjust the case of 8.3 format filenames. -.PP -There are several options that control the way mangling is -performed, and they are grouped here rather than listed separately. -For the defaults look at the output of the testparm program. -.PP -All of these options can be set separately for each service -(or globally, of course). -.PP -The options are: -.TP -\fBmangle case = yes/no\fR -controls if names that have characters that -aren't of the "default" case are mangled. For example, -if this is yes then a name like "Mail" would be mangled. -Default \fBno\fR. -.TP -\fBcase sensitive = yes/no\fR -controls whether filenames are case sensitive. If -they aren't then Samba must do a filename search and match on passed -names. Default \fBno\fR. -.TP -\fBdefault case = upper/lower\fR -controls what the default case is for new -filenames. Default \fBlower\fR. -.TP -\fBpreserve case = yes/no\fR -controls if new files are created with the -case that the client passes, or if they are forced to be the -"default" case. Default \fByes\fR. -.TP -\fBshort preserve case = yes/no\fR -controls if new files which conform to 8.3 syntax, -that is all in upper case and of suitable length, are created -upper case, or if they are forced to be the "default" -case. This option can be use with "preserve case = yes" -to permit long filenames to retain their case, while short names -are lowercased. Default \fByes\fR. -.PP -By default, Samba 3.0 has the same semantics as a Windows -NT server, in that it is case insensitive but case preserving. -.SH "NOTE ABOUT USERNAME/PASSWORD VALIDATION" -.PP -There are a number of ways in which a user can connect -to a service. The server uses the following steps in determining -if it will allow a connection to a specified service. If all the -steps fail, then the connection request is rejected. However, if one of the -steps succeeds, then the following steps are not checked. -.PP -If the service is marked "guest only = yes" and the -server is running with share-level security ("security = share") -then steps 1 to 5 are skipped. -.TP 3 -1. -If the client has passed a username/password -pair and that username/password pair is validated by the UNIX -system's password programs then the connection is made as that -username. Note that this includes the -\\\\server\\service%\fIusername\fR method of passing -a username. -.TP 3 -2. -If the client has previously registered a username -with the system and now supplies a correct password for that -username then the connection is allowed. -.TP 3 -3. -The client's NetBIOS name and any previously -used user names are checked against the supplied password, if -they match then the connection is allowed as the corresponding -user. -.TP 3 -4. -If the client has previously validated a -username/password pair with the server and the client has passed -the validation token then that username is used. -.TP 3 -5. -If a "user = " field is given in the -\fIsmb.conf\fR file for the service and the client -has supplied a password, and that password matches (according to -the UNIX system's password checking) with one of the usernames -from the "user =" field then the connection is made as -the username in the "user =" line. If one -of the username in the "user =" list begins with a -\&'@' then that name expands to a list of names in -the group of the same name. -.TP 3 -6. -If the service is a guest service then a -connection is made as the username given in the "guest -account =" for the service, irrespective of the -supplied password. -.SH "COMPLETE LIST OF GLOBAL PARAMETERS" -.PP -Here is a list of all global parameters. See the section of -each parameter for details. Note that some are synonyms. -.TP 0.2i -\(bu -\fIabort shutdown script\fR -.TP 0.2i -\(bu -\fIadd group script\fR -.TP 0.2i -\(bu -\fIaddprinter command\fR -.TP 0.2i -\(bu -\fIadd share command\fR -.TP 0.2i -\(bu -\fIadd user script\fR -.TP 0.2i -\(bu -\fIadd user to group script\fR -.TP 0.2i -\(bu -\fIadd machine script\fR -.TP 0.2i -\(bu -\fIdelete group script\fR -.TP 0.2i -\(bu -\fIads server\fR -.TP 0.2i -\(bu -\fIalgorithmic rid base\fR -.TP 0.2i -\(bu -\fIallow trusted domains\fR -.TP 0.2i -\(bu -\fIannounce as\fR -.TP 0.2i -\(bu -\fIannounce version\fR -.TP 0.2i -\(bu -\fIauth methods\fR -.TP 0.2i -\(bu -\fIauto services\fR -.TP 0.2i -\(bu -\fIbind interfaces only\fR -.TP 0.2i -\(bu -\fIbrowse list\fR -.TP 0.2i -\(bu -\fIchange notify timeout\fR -.TP 0.2i -\(bu -\fIchange share command\fR -.TP 0.2i -\(bu -\fIconfig file\fR -.TP 0.2i -\(bu -\fIdeadtime\fR -.TP 0.2i -\(bu -\fIdebug hires timestamp\fR -.TP 0.2i -\(bu -\fIdebug pid\fR -.TP 0.2i -\(bu -\fIdebug timestamp\fR -.TP 0.2i -\(bu -\fIdebug uid\fR -.TP 0.2i -\(bu -\fIdebuglevel\fR -.TP 0.2i -\(bu -\fIdefault\fR -.TP 0.2i -\(bu -\fIdefault service\fR -.TP 0.2i -\(bu -\fIdeleteprinter command\fR -.TP 0.2i -\(bu -\fIdelete share command\fR -.TP 0.2i -\(bu -\fIdelete user script\fR -.TP 0.2i -\(bu -\fIdelete user from group script\fR -.TP 0.2i -\(bu -\fIdfree command\fR -.TP 0.2i -\(bu -\fIdisable netbios\fR -.TP 0.2i -\(bu -\fIdisable spoolss\fR -.TP 0.2i -\(bu -\fIdisplay charset\fR -.TP 0.2i -\(bu -\fIdns proxy\fR -.TP 0.2i -\(bu -\fIdomain logons\fR -.TP 0.2i -\(bu -\fIdomain master\fR -.TP 0.2i -\(bu -\fIdos charset\fR -.TP 0.2i -\(bu -\fIencrypt passwords\fR -.TP 0.2i -\(bu -\fIenhanced browsing\fR -.TP 0.2i -\(bu -\fIenumports command\fR -.TP 0.2i -\(bu -\fIgetwd cache\fR -.TP 0.2i -\(bu -\fIhide local users\fR -.TP 0.2i -\(bu -\fIhide unreadable\fR -.TP 0.2i -\(bu -\fIhide unwriteable files\fR -.TP 0.2i -\(bu -\fIhide special files\fR -.TP 0.2i -\(bu -\fIhomedir map\fR -.TP 0.2i -\(bu -\fIhost msdfs\fR -.TP 0.2i -\(bu -\fIhostname lookups\fR -.TP 0.2i -\(bu -\fIhosts equiv\fR -.TP 0.2i -\(bu -\fIinterfaces\fR -.TP 0.2i -\(bu -\fIkeepalive\fR -.TP 0.2i -\(bu -\fIkernel oplocks\fR -.TP 0.2i -\(bu -\fIlanman auth\fR -.TP 0.2i -\(bu -\fIlarge readwrite\fR -.TP 0.2i -\(bu -\fIldap admin dn\fR -.TP 0.2i -\(bu -\fIldap delete dn\fR -.TP 0.2i -\(bu -\fIldap del only sam attr\fR -.TP 0.2i -\(bu -\fIldap filter\fR -.TP 0.2i -\(bu -\fIldap port\fR -.TP 0.2i -\(bu -\fIldap server\fR -.TP 0.2i -\(bu -\fIldap ssl\fR -.TP 0.2i -\(bu -\fIldap suffix\fR -.TP 0.2i -\(bu -\fIldap user suffix\fR -.TP 0.2i -\(bu -\fIldap machine suffix\fR -.TP 0.2i -\(bu -\fIldap passwd sync\fR -.TP 0.2i -\(bu -\fIldap trust ids\fR -.TP 0.2i -\(bu -\fIlm announce\fR -.TP 0.2i -\(bu -\fIlm interval\fR -.TP 0.2i -\(bu -\fIload printers\fR -.TP 0.2i -\(bu -\fIlocal master\fR -.TP 0.2i -\(bu -\fIlock dir\fR -.TP 0.2i -\(bu -\fIlock directory\fR -.TP 0.2i -\(bu -\fIlock spin count\fR -.TP 0.2i -\(bu -\fIlock spin time\fR -.TP 0.2i -\(bu -\fIpid directory\fR -.TP 0.2i -\(bu -\fIlog file\fR -.TP 0.2i -\(bu -\fIlog level\fR -.TP 0.2i -\(bu -\fIlogon drive\fR -.TP 0.2i -\(bu -\fIlogon home\fR -.TP 0.2i -\(bu -\fIlogon path\fR -.TP 0.2i -\(bu -\fIlogon script\fR -.TP 0.2i -\(bu -\fIlpq cache time\fR -.TP 0.2i -\(bu -\fImachine password timeout\fR -.TP 0.2i -\(bu -\fImangled stack\fR -.TP 0.2i -\(bu -\fImap to guest\fR -.TP 0.2i -\(bu -\fImax disk size\fR -.TP 0.2i -\(bu -\fImax log size\fR -.TP 0.2i -\(bu -\fImax mux\fR -.TP 0.2i -\(bu -\fImax open files\fR -.TP 0.2i -\(bu -\fImax protocol\fR -.TP 0.2i -\(bu -\fImax smbd processes\fR -.TP 0.2i -\(bu -\fImax ttl\fR -.TP 0.2i -\(bu -\fImax wins ttl\fR -.TP 0.2i -\(bu -\fImax xmit\fR -.TP 0.2i -\(bu -\fImessage command\fR -.TP 0.2i -\(bu -\fImin passwd length\fR -.TP 0.2i -\(bu -\fImin password length\fR -.TP 0.2i -\(bu -\fImin protocol\fR -.TP 0.2i -\(bu -\fImin wins ttl\fR -.TP 0.2i -\(bu -\fIname cache timeout\fR -.TP 0.2i -\(bu -\fIname resolve order\fR -.TP 0.2i -\(bu -\fInetbios aliases\fR -.TP 0.2i -\(bu -\fInetbios name\fR -.TP 0.2i -\(bu -\fInetbios scope\fR -.TP 0.2i -\(bu -\fInis homedir\fR -.TP 0.2i -\(bu -\fIntlm auth\fR -.TP 0.2i -\(bu -\fInon unix account range\fR -.TP 0.2i -\(bu -\fInt pipe support\fR -.TP 0.2i -\(bu -\fInt status support\fR -.TP 0.2i -\(bu -\fInull passwords\fR -.TP 0.2i -\(bu -\fIobey pam restrictions\fR -.TP 0.2i -\(bu -\fIoplock break wait time\fR -.TP 0.2i -\(bu -\fIos level\fR -.TP 0.2i -\(bu -\fIos2 driver map\fR -.TP 0.2i -\(bu -\fIpam password change\fR -.TP 0.2i -\(bu -\fIpanic action\fR -.TP 0.2i -\(bu -\fIparanoid server security\fR -.TP 0.2i -\(bu -\fIpassdb backend\fR -.TP 0.2i -\(bu -\fIpasswd chat\fR -.TP 0.2i -\(bu -\fIpasswd chat debug\fR -.TP 0.2i -\(bu -\fIpasswd program\fR -.TP 0.2i -\(bu -\fIpassword level\fR -.TP 0.2i -\(bu -\fIpassword server\fR -.TP 0.2i -\(bu -\fIprefered master\fR -.TP 0.2i -\(bu -\fIpreferred master\fR -.TP 0.2i -\(bu -\fIpreload\fR -.TP 0.2i -\(bu -\fIprintcap\fR -.TP 0.2i -\(bu -\fIprintcap name\fR -.TP 0.2i -\(bu -\fIprinter driver file\fR -.TP 0.2i -\(bu -\fIprivate dir\fR -.TP 0.2i -\(bu -\fIprotocol\fR -.TP 0.2i -\(bu -\fIread bmpx\fR -.TP 0.2i -\(bu -\fIread raw\fR -.TP 0.2i -\(bu -\fIread size\fR -.TP 0.2i -\(bu -\fIrealm\fR -.TP 0.2i -\(bu -\fIremote announce\fR -.TP 0.2i -\(bu -\fIremote browse sync\fR -.TP 0.2i -\(bu -\fIrestrict anonymous\fR -.TP 0.2i -\(bu -\fIroot\fR -.TP 0.2i -\(bu -\fIroot dir\fR -.TP 0.2i -\(bu -\fIroot directory\fR -.TP 0.2i -\(bu -\fIsecurity\fR -.TP 0.2i -\(bu -\fIserver string\fR -.TP 0.2i -\(bu -\fIshow add printer wizard\fR -.TP 0.2i -\(bu -\fIshutdown script\fR -.TP 0.2i -\(bu -\fIsmb passwd file\fR -.TP 0.2i -\(bu -\fIsmb ports\fR -.TP 0.2i -\(bu -\fIsocket address\fR -.TP 0.2i -\(bu -\fIsocket options\fR -.TP 0.2i -\(bu -\fIsource environment\fR -.TP 0.2i -\(bu -\fIuse spnego\fR -.TP 0.2i -\(bu -\fIstat cache\fR -.TP 0.2i -\(bu -\fIstat cache size\fR -.TP 0.2i -\(bu -\fIstrip dot\fR -.TP 0.2i -\(bu -\fIsyslog\fR -.TP 0.2i -\(bu -\fIsyslog only\fR -.TP 0.2i -\(bu -\fItemplate homedir\fR -.TP 0.2i -\(bu -\fItemplate shell\fR -.TP 0.2i -\(bu -\fItime offset\fR -.TP 0.2i -\(bu -\fItime server\fR -.TP 0.2i -\(bu -\fItimestamp logs\fR -.TP 0.2i -\(bu -\fItotal print jobs\fR -.TP 0.2i -\(bu -\fIunicode\fR -.TP 0.2i -\(bu -\fIunix charset\fR -.TP 0.2i -\(bu -\fIunix extensions\fR -.TP 0.2i -\(bu -\fIunix password sync\fR -.TP 0.2i -\(bu -\fIupdate encrypted\fR -.TP 0.2i -\(bu -\fIuse mmap\fR -.TP 0.2i -\(bu -\fIuse rhosts\fR -.TP 0.2i -\(bu -\fIuse sendfile\fR -.TP 0.2i -\(bu -\fIusername level\fR -.TP 0.2i -\(bu -\fIusername map\fR -.TP 0.2i -\(bu -\fIutmp\fR -.TP 0.2i -\(bu -\fIutmp directory\fR -.TP 0.2i -\(bu -\fIwtmp directory\fR -.TP 0.2i -\(bu -\fIwinbind cache time\fR -.TP 0.2i -\(bu -\fIwinbind enum users\fR -.TP 0.2i -\(bu -\fIwinbind enum groups\fR -.TP 0.2i -\(bu -\fIwinbind gid\fR -.TP 0.2i -\(bu -\fIwinbind separator\fR -.TP 0.2i -\(bu -\fIwinbind uid\fR -.TP 0.2i -\(bu -\fIwinbind use default domain\fR -.TP 0.2i -\(bu -\fIwins hook\fR -.TP 0.2i -\(bu -\fIwins partners\fR -.TP 0.2i -\(bu -\fIwins proxy\fR -.TP 0.2i -\(bu -\fIwins server\fR -.TP 0.2i -\(bu -\fIwins support\fR -.TP 0.2i -\(bu -\fIworkgroup\fR -.TP 0.2i -\(bu -\fIwrite raw\fR -.SH "COMPLETE LIST OF SERVICE PARAMETERS" -.PP -Here is a list of all service parameters. See the section on -each parameter for details. Note that some are synonyms. -.TP 0.2i -\(bu -\fIadmin users\fR -.TP 0.2i -\(bu -\fIallow hosts\fR -.TP 0.2i -\(bu -\fIavailable\fR -.TP 0.2i -\(bu -\fIblocking locks\fR -.TP 0.2i -\(bu -\fIblock size\fR -.TP 0.2i -\(bu -\fIbrowsable\fR -.TP 0.2i -\(bu -\fIbrowseable\fR -.TP 0.2i -\(bu -\fIcase sensitive\fR -.TP 0.2i -\(bu -\fIcasesignames\fR -.TP 0.2i -\(bu -\fIcomment\fR -.TP 0.2i -\(bu -\fIcopy\fR -.TP 0.2i -\(bu -\fIcreate mask\fR -.TP 0.2i -\(bu -\fIcreate mode\fR -.TP 0.2i -\(bu -\fIcsc policy\fR -.TP 0.2i -\(bu -\fIdefault case\fR -.TP 0.2i -\(bu -\fIdefault devmode\fR -.TP 0.2i -\(bu -\fIdelete readonly\fR -.TP 0.2i -\(bu -\fIdelete veto files\fR -.TP 0.2i -\(bu -\fIdeny hosts\fR -.TP 0.2i -\(bu -\fIdirectory\fR -.TP 0.2i -\(bu -\fIdirectory mask\fR -.TP 0.2i -\(bu -\fIdirectory mode\fR -.TP 0.2i -\(bu -\fIdirectory security mask\fR -.TP 0.2i -\(bu -\fIdont descend\fR -.TP 0.2i -\(bu -\fIdos filemode\fR -.TP 0.2i -\(bu -\fIdos filetime resolution\fR -.TP 0.2i -\(bu -\fIdos filetimes\fR -.TP 0.2i -\(bu -\fIexec\fR -.TP 0.2i -\(bu -\fIfake directory create times\fR -.TP 0.2i -\(bu -\fIfake oplocks\fR -.TP 0.2i -\(bu -\fIfollow symlinks\fR -.TP 0.2i -\(bu -\fIforce create mode\fR -.TP 0.2i -\(bu -\fIforce directory mode\fR -.TP 0.2i -\(bu -\fIforce directory security mode\fR -.TP 0.2i -\(bu -\fIforce group\fR -.TP 0.2i -\(bu -\fIforce security mode\fR -.TP 0.2i -\(bu -\fIforce user\fR -.TP 0.2i -\(bu -\fIfstype\fR -.TP 0.2i -\(bu -\fIgroup\fR -.TP 0.2i -\(bu -\fIguest account\fR -.TP 0.2i -\(bu -\fIguest ok\fR -.TP 0.2i -\(bu -\fIguest only\fR -.TP 0.2i -\(bu -\fIhide dot files\fR -.TP 0.2i -\(bu -\fIhide files\fR -.TP 0.2i -\(bu -\fIhosts allow\fR -.TP 0.2i -\(bu -\fIhosts deny\fR -.TP 0.2i -\(bu -\fIinclude\fR -.TP 0.2i -\(bu -\fIinherit acls\fR -.TP 0.2i -\(bu -\fIinherit permissions\fR -.TP 0.2i -\(bu -\fIinvalid users\fR -.TP 0.2i -\(bu -\fIlevel2 oplocks\fR -.TP 0.2i -\(bu -\fIlocking\fR -.TP 0.2i -\(bu -\fIlppause command\fR -.TP 0.2i -\(bu -\fIlpq command\fR -.TP 0.2i -\(bu -\fIlpresume command\fR -.TP 0.2i -\(bu -\fIlprm command\fR -.TP 0.2i -\(bu -\fImagic output\fR -.TP 0.2i -\(bu -\fImagic script\fR -.TP 0.2i -\(bu -\fImangle case\fR -.TP 0.2i -\(bu -\fImangled map\fR -.TP 0.2i -\(bu -\fImangled names\fR -.TP 0.2i -\(bu -\fImangling char\fR -.TP 0.2i -\(bu -\fImangling method\fR -.TP 0.2i -\(bu -\fImap archive\fR -.TP 0.2i -\(bu -\fImap hidden\fR -.TP 0.2i -\(bu -\fImap system\fR -.TP 0.2i -\(bu -\fImax connections\fR -.TP 0.2i -\(bu -\fImax print jobs\fR -.TP 0.2i -\(bu -\fImin print space\fR -.TP 0.2i -\(bu -\fImsdfs proxy\fR -.TP 0.2i -\(bu -\fImsdfs root\fR -.TP 0.2i -\(bu -\fInt acl support\fR -.TP 0.2i -\(bu -\fIonly guest\fR -.TP 0.2i -\(bu -\fIonly user\fR -.TP 0.2i -\(bu -\fIoplock contention limit\fR -.TP 0.2i -\(bu -\fIoplocks\fR -.TP 0.2i -\(bu -\fIpath\fR -.TP 0.2i -\(bu -\fIposix locking\fR -.TP 0.2i -\(bu -\fIpostexec\fR -.TP 0.2i -\(bu -\fIpostscript\fR -.TP 0.2i -\(bu -\fIpreexec\fR -.TP 0.2i -\(bu -\fIpreexec close\fR -.TP 0.2i -\(bu -\fIpreserve case\fR -.TP 0.2i -\(bu -\fIprint command\fR -.TP 0.2i -\(bu -\fIprint ok\fR -.TP 0.2i -\(bu -\fIprintable\fR -.TP 0.2i -\(bu -\fIprinter\fR -.TP 0.2i -\(bu -\fIprinter admin\fR -.TP 0.2i -\(bu -\fIprinter driver\fR -.TP 0.2i -\(bu -\fIprinter driver location\fR -.TP 0.2i -\(bu -\fIprinter name\fR -.TP 0.2i -\(bu -\fIprinting\fR -.TP 0.2i -\(bu -\fIpublic\fR -.TP 0.2i -\(bu -\fIqueuepause command\fR -.TP 0.2i -\(bu -\fIqueueresume command\fR -.TP 0.2i -\(bu -\fIread list\fR -.TP 0.2i -\(bu -\fIread only\fR -.TP 0.2i -\(bu -\fIroot postexec\fR -.TP 0.2i -\(bu -\fIroot preexec\fR -.TP 0.2i -\(bu -\fIroot preexec close\fR -.TP 0.2i -\(bu -\fIsecurity mask\fR -.TP 0.2i -\(bu -\fIset directory\fR -.TP 0.2i -\(bu -\fIshare modes\fR -.TP 0.2i -\(bu -\fIshort preserve case\fR -.TP 0.2i -\(bu -\fIstrict allocate\fR -.TP 0.2i -\(bu -\fIstrict locking\fR -.TP 0.2i -\(bu -\fIstrict sync\fR -.TP 0.2i -\(bu -\fIsync always\fR -.TP 0.2i -\(bu -\fIuse client driver\fR -.TP 0.2i -\(bu -\fIuser\fR -.TP 0.2i -\(bu -\fIusername\fR -.TP 0.2i -\(bu -\fIusers\fR -.TP 0.2i -\(bu -\fIvalid users\fR -.TP 0.2i -\(bu -\fIveto files\fR -.TP 0.2i -\(bu -\fIveto oplock files\fR -.TP 0.2i -\(bu -\fIvfs path\fR -.TP 0.2i -\(bu -\fIvfs object\fR -.TP 0.2i -\(bu -\fIvfs options\fR -.TP 0.2i -\(bu -\fIvolume\fR -.TP 0.2i -\(bu -\fIwide links\fR -.TP 0.2i -\(bu -\fIwritable\fR -.TP 0.2i -\(bu -\fIwrite cache size\fR -.TP 0.2i -\(bu -\fIwrite list\fR -.TP 0.2i -\(bu -\fIwrite ok\fR -.TP 0.2i -\(bu -\fIwriteable\fR -.SH "EXPLANATION OF EACH PARAMETER" -.TP -\fBabort shutdown script (G)\fR -\fBThis parameter only exists in the HEAD cvs branch\fR -This a full path name to a script called by -\fBsmbd(8)\fR that -should stop a shutdown procedure issued by the \fIshutdown script\fR. - -This command will be run as user. - -Default: \fBNone\fR. - -Example: \fBabort shutdown script = /sbin/shutdown -c\fR -.TP -\fBaddprinter command (G)\fR -With the introduction of MS-RPC based printing -support for Windows NT/2000 clients in Samba 2.2, The MS Add -Printer Wizard (APW) icon is now also available in the -"Printers..." folder displayed a share listing. The APW -allows for printers to be add remotely to a Samba or Windows -NT/2000 print server. - -For a Samba host this means that the printer must be -physically added to the underlying printing system. The \fIadd -printer command\fR defines a script to be run which -will perform the necessary operations for adding the printer -to the print system and to add the appropriate service definition -to the \fIsmb.conf\fR file in order that it can be -shared by \fBsmbd(8)\fR - - -The \fIaddprinter command\fR is -automatically invoked with the following parameter (in -order: -.RS -.TP 0.2i -\(bu -\fIprinter name\fR -.TP 0.2i -\(bu -\fIshare name\fR -.TP 0.2i -\(bu -\fIport name\fR -.TP 0.2i -\(bu -\fIdriver name\fR -.TP 0.2i -\(bu -\fIlocation\fR -.TP 0.2i -\(bu -\fIWindows 9x driver location\fR -.RE - -All parameters are filled in from the PRINTER_INFO_2 structure sent -by the Windows NT/2000 client with one exception. The "Windows 9x -driver location" parameter is included for backwards compatibility -only. The remaining fields in the structure are generated from answers -to the APW questions. - -Once the \fIaddprinter command\fR has -been executed, \fBsmbd\fR will reparse the \fI smb.conf\fR to determine if the share defined by the APW -exists. If the sharename is still invalid, then \fBsmbd -\fR will return an ACCESS_DENIED error to the client. - -See also \fI deleteprinter command\fR, \fIprinting\fR, -\fIshow add -printer wizard\fR - -Default: \fBnone\fR - -Example: \fBaddprinter command = /usr/bin/addprinter -\fR -.TP -\fBadd share command (G)\fR -Samba 2.2.0 introduced the ability to dynamically -add and delete shares via the Windows NT 4.0 Server Manager. The -\fIadd share command\fR is used to define an -external program or script which will add a new service definition -to \fIsmb.conf\fR. In order to successfully -execute the \fIadd share command\fR, \fBsmbd\fR -requires that the administrator be connected using a root account (i.e. -uid == 0). - -When executed, \fBsmbd\fR will automatically invoke the -\fIadd share command\fR with four parameters. -.RS -.TP 0.2i -\(bu -\fIconfigFile\fR - the location -of the global \fIsmb.conf\fR file. -.TP 0.2i -\(bu -\fIshareName\fR - the name of the new -share. -.TP 0.2i -\(bu -\fIpathName\fR - path to an **existing** -directory on disk. -.TP 0.2i -\(bu -\fIcomment\fR - comment string to associate -with the new share. -.RE - -This parameter is only used for add file shares. To add printer shares, -see the \fIaddprinter -command\fR. - -See also \fIchange share -command\fR, \fIdelete share -command\fR. - -Default: \fBnone\fR - -Example: \fBadd share command = /usr/local/bin/addshare\fR -.TP -\fBadd machine script (G)\fR -This is the full pathname to a script that will -be run by smbd(8) when a machine is added -to it's domain using the administrator username and password method. - -This option is only required when using sam back-ends tied to the -Unix uid method of RID calculation such as smbpasswd. This option is only -available in Samba 3.0. - -Default: \fBadd machine script = -\fR - -Example: \fBadd machine script = /usr/sbin/adduser -n -g machines -c Machine -d /dev/null -s /bin/false %u -\fR -.TP -\fBads server (G)\fR -If this option is specified, samba does -not try to figure out what ads server to use itself, but -uses the specified ads server. Either one DNS name or IP -address can be used. - -Default: \fBads server = \fR - -Example: \fBads server = 192.168.1.2\fR -.TP -\fBadd user script (G)\fR -This is the full pathname to a script that will -be run \fBAS ROOT\fR by smbd(8) - under special circumstances described below. - -Normally, a Samba server requires that UNIX users are -created for all users accessing files on this server. For sites -that use Windows NT account databases as their primary user database -creating these users and keeping the user list in sync with the -Windows NT PDC is an onerous task. This option allows smbd to create the required UNIX users -\fBON DEMAND\fR when a user accesses the Samba server. - -In order to use this option, smbd -must \fBNOT\fR be set to \fIsecurity = share\fR -and \fIadd user script\fR -must be set to a full pathname for a script that will create a UNIX -user given one argument of \fI%u\fR, which expands into -the UNIX user name to create. - -When the Windows user attempts to access the Samba server, -at login (session setup in the SMB protocol) time, smbd contacts the \fIpassword server\fR and -attempts to authenticate the given user with the given password. If the -authentication succeeds then \fBsmbd\fR -attempts to find a UNIX user in the UNIX password database to map the -Windows user into. If this lookup fails, and \fIadd user script -\fR is set then \fBsmbd\fR will -call the specified script \fBAS ROOT\fR, expanding -any \fI%u\fR argument to be the user name to create. - -If this script successfully creates the user then \fBsmbd -\fR will continue on as though the UNIX user -already existed. In this way, UNIX users are dynamically created to -match existing Windows NT accounts. - -See also \fI security\fR, \fIpassword server\fR, -\fIdelete user -script\fR. - -Default: \fBadd user script = -\fR - -Example: \fBadd user script = /usr/local/samba/bin/add_user -%u\fR -.TP -\fBadd group script (G)\fR -This is the full pathname to a script that will -be run \fBAS ROOT\fR by smbd(8) when a new group is -requested. It will expand any -\fI%g\fR to the group name passed. -This script is only useful for installations using the -Windows NT domain administration tools. The script is -free to create a group with an arbitrary name to -circumvent unix group name restrictions. In that case -the script must print the numeric gid of the created -group on stdout. -.TP -\fBadmin users (S)\fR -This is a list of users who will be granted -administrative privileges on the share. This means that they -will do all file operations as the super-user (root). - -You should use this option very carefully, as any user in -this list will be able to do anything they like on the share, -irrespective of file permissions. - -Default: \fBno admin users\fR - -Example: \fBadmin users = jason\fR -.TP -\fBadd user to group script (G)\fR -Full path to the script that will be called when -a user is added to a group using the Windows NT domain administration -tools. It will be run by smbd(8) -\fBAS ROOT\fR. Any \fI%g\fR will be -replaced with the group name and any \fI%u\fR will -be replaced with the user name. - -Default: \fBadd user to group script = \fR - -Example: \fBadd user to group script = /usr/sbin/adduser %u %g\fR -.TP -\fBallow hosts (S)\fR -Synonym for \fIhosts allow\fR. -.TP -\fBalgorithmic rid base (G)\fR -This determines how Samba will use its -algorithmic mapping from uids/gid to the RIDs needed to construct -NT Security Identifiers. - -Setting this option to a larger value could be useful to sites -transitioning from WinNT and Win2k, as existing user and -group rids would otherwise clash with sytem users etc. - -All UIDs and GIDs must be able to be resolved into SIDs for -the correct operation of ACLs on the server. As such the algorithmic -mapping can't be 'turned off', but pushing it 'out of the way' should -resolve the issues. Users and groups can then be assigned 'low' RIDs -in arbitary-rid supporting backends. - -Default: \fBalgorithmic rid base = 1000\fR - -Example: \fBalgorithmic rid base = 100000\fR -.TP -\fBallow trusted domains (G)\fR -This option only takes effect when the \fIsecurity\fR option is set to -server or domain. -If it is set to no, then attempts to connect to a resource from -a domain or workgroup other than the one which smbd is running -in will fail, even if that domain is trusted by the remote server -doing the authentication. - -This is useful if you only want your Samba server to -serve resources to users in the domain it is a member of. As -an example, suppose that there are two domains DOMA and DOMB. DOMB -is trusted by DOMA, which contains the Samba server. Under normal -circumstances, a user with an account in DOMB can then access the -resources of a UNIX account with the same account name on the -Samba server even if they do not have an account in DOMA. This -can make implementing a security boundary difficult. - -Default: \fBallow trusted domains = yes\fR -.TP -\fBannounce as (G)\fR -This specifies what type of server -\fBnmbd\fR -will announce itself as, to a network neighborhood browse -list. By default this is set to Windows NT. The valid options -are : "NT Server" (which can also be written as "NT"), -"NT Workstation", "Win95" or "WfW" meaning Windows NT Server, -Windows NT Workstation, Windows 95 and Windows for Workgroups -respectively. Do not change this parameter unless you have a -specific need to stop Samba appearing as an NT server as this -may prevent Samba servers from participating as browser servers -correctly. - -Default: \fBannounce as = NT Server\fR - -Example: \fBannounce as = Win95\fR -.TP -\fBannounce version (G)\fR -This specifies the major and minor version numbers -that nmbd will use when announcing itself as a server. The default -is 4.9. Do not change this parameter unless you have a specific -need to set a Samba server to be a downlevel server. - -Default: \fBannounce version = 4.9\fR - -Example: \fBannounce version = 2.0\fR -.TP -\fBauto services (G)\fR -This is a synonym for the \fIpreload\fR. -.TP -\fBauth methods (G)\fR -This option allows the administrator to chose what -authentication methods \fBsmbd\fR will use when authenticating -a user. This option defaults to sensible values based on \fI security\fR. -Each entry in the list attempts to authenticate the user in turn, until -the user authenticates. In practice only one method will ever actually -be able to complete the authentication. - -Default: \fBauth methods = \fR - -Example: \fBauth methods = guest sam ntdomain\fR -.TP -\fBavailable (S)\fR -This parameter lets you "turn off" a service. If -\fIavailable = no\fR, then \fBALL\fR -attempts to connect to the service will fail. Such failures are -logged. - -Default: \fBavailable = yes\fR -.TP -\fBbind interfaces only (G)\fR -This global parameter allows the Samba admin -to limit what interfaces on a machine will serve SMB requests. It -affects file service smbd(8) and -name service nmbd(8) in slightly -different ways. - -For name service it causes \fBnmbd\fR to bind -to ports 137 and 138 on the interfaces listed in the interfaces parameter. \fBnmbd -\fR also binds to the "all addresses" interface (0.0.0.0) -on ports 137 and 138 for the purposes of reading broadcast messages. -If this option is not set then \fBnmbd\fR will service -name requests on all of these sockets. If \fIbind interfaces -only\fR is set then \fBnmbd\fR will check the -source address of any packets coming in on the broadcast sockets -and discard any that don't match the broadcast addresses of the -interfaces in the \fIinterfaces\fR parameter list. -As unicast packets are received on the other sockets it allows -\fBnmbd\fR to refuse to serve names to machines that -send packets that arrive through any interfaces not listed in the -\fIinterfaces\fR list. IP Source address spoofing -does defeat this simple check, however, so it must not be used -seriously as a security feature for \fBnmbd\fR. - -For file service it causes smbd(8) -to bind only to the interface list given in the interfaces parameter. This restricts the networks that -\fBsmbd\fR will serve to packets coming in those -interfaces. Note that you should not use this parameter for machines -that are serving PPP or other intermittent or non-broadcast network -interfaces as it will not cope with non-permanent interfaces. - -If \fIbind interfaces only\fR is set then -unless the network address \fB127.0.0.1\fR is added -to the \fIinterfaces\fR parameter list \fBsmbpasswd(8)\fR -and \fBswat(8)\fR may -not work as expected due to the reasons covered below. - -To change a users SMB password, the \fBsmbpasswd\fR -by default connects to the \fBlocalhost - 127.0.0.1\fR -address as an SMB client to issue the password change request. If -\fIbind interfaces only\fR is set then unless the -network address \fB127.0.0.1\fR is added to the -\fIinterfaces\fR parameter list then \fB smbpasswd\fR will fail to connect in it's default mode. -\fBsmbpasswd\fR can be forced to use the primary IP interface -of the local host by using its \fI-r remote machine\fR - parameter, with \fIremote machine\fR set -to the IP name of the primary interface of the local host. - -The \fBswat\fR status page tries to connect with -\fBsmbd\fR and \fBnmbd\fR at the address -\fB127.0.0.1\fR to determine if they are running. -Not adding \fB127.0.0.1\fR will cause \fB smbd\fR and \fBnmbd\fR to always show -"not running" even if they really are. This can prevent \fB swat\fR from starting/stopping/restarting \fBsmbd\fR -and \fBnmbd\fR. - -Default: \fBbind interfaces only = no\fR -.TP -\fBblocking locks (S)\fR -This parameter controls the behavior of smbd(8) when given a request by a client -to obtain a byte range lock on a region of an open file, and the -request has a time limit associated with it. - -If this parameter is set and the lock range requested -cannot be immediately satisfied, samba will internally -queue the lock request, and periodically attempt to obtain -the lock until the timeout period expires. - -If this parameter is set to no, then -samba will behave as previous versions of Samba would and -will fail the lock request immediately if the lock range -cannot be obtained. - -Default: \fBblocking locks = yes\fR -.TP -\fBblock size (S)\fR -This parameter controls the behavior of -smbd(8) when reporting disk free -sizes. By default, this reports a disk block size of 1024 bytes. - -Changing this parameter may have some effect on the -efficiency of client writes, this is not yet confirmed. This -parameter was added to allow advanced administrators to change -it (usually to a higher value) and test the effect it has on -client write performance without re-compiling the code. As this -is an experimental option it may be removed in a future release. - -Changing this option does not change the disk free reporting -size, just the block size unit reported to the client. - -Default: \fBblock size = 1024\fR - -Example: \fBblock size = 65536\fR -.TP -\fBbrowsable (S)\fR -See the \fI browseable\fR. -.TP -\fBbrowse list (G)\fR -This controls whether \fBsmbd(8)\fR will serve a browse list to -a client doing a \fBNetServerEnum\fR call. Normally -set to yes. You should never need to change -this. - -Default: \fBbrowse list = yes\fR -.TP -\fBbrowseable (S)\fR -This controls whether this share is seen in -the list of available shares in a net view and in the browse list. - -Default: \fBbrowseable = yes\fR -.TP -\fBcase sensitive (S)\fR -See the discussion in the section NAME MANGLING. - -Default: \fBcase sensitive = no\fR -.TP -\fBcasesignames (S)\fR -Synonym for case -sensitive. -.TP -\fBchange notify timeout (G)\fR -This SMB allows a client to tell a server to -"watch" a particular directory for any changes and only reply to -the SMB request when a change has occurred. Such constant scanning of -a directory is expensive under UNIX, hence an \fBsmbd(8)\fR daemon only performs such a scan -on each requested directory once every \fIchange notify -timeout\fR seconds. - -Default: \fBchange notify timeout = 60\fR - -Example: \fBchange notify timeout = 300\fR - -Would change the scan time to every 5 minutes. -.TP -\fBchange share command (G)\fR -Samba 2.2.0 introduced the ability to dynamically -add and delete shares via the Windows NT 4.0 Server Manager. The -\fIchange share command\fR is used to define an -external program or script which will modify an existing service definition -in \fIsmb.conf\fR. In order to successfully -execute the \fIchange share command\fR, \fBsmbd\fR -requires that the administrator be connected using a root account (i.e. -uid == 0). - -When executed, \fBsmbd\fR will automatically invoke the -\fIchange share command\fR with four parameters. -.RS -.TP 0.2i -\(bu -\fIconfigFile\fR - the location -of the global \fIsmb.conf\fR file. -.TP 0.2i -\(bu -\fIshareName\fR - the name of the new -share. -.TP 0.2i -\(bu -\fIpathName\fR - path to an **existing** -directory on disk. -.TP 0.2i -\(bu -\fIcomment\fR - comment string to associate -with the new share. -.RE - -This parameter is only used modify existing file shares definitions. To modify -printer shares, use the "Printers..." folder as seen when browsing the Samba host. - -See also \fIadd share -command\fR, \fIdelete -share command\fR. - -Default: \fBnone\fR - -Example: \fBchange share command = /usr/local/bin/addshare\fR -.TP -\fBcomment (S)\fR -This is a text field that is seen next to a share -when a client does a queries the server, either via the network -neighborhood or via \fBnet view\fR to list what shares -are available. - -If you want to set the string that is displayed next to the -machine name then see the \fI server string\fR parameter. - -Default: \fBNo comment string\fR - -Example: \fBcomment = Fred's Files\fR -.TP -\fBconfig file (G)\fR -This allows you to override the config file -to use, instead of the default (usually \fIsmb.conf\fR). -There is a chicken and egg problem here as this option is set -in the config file! - -For this reason, if the name of the config file has changed -when the parameters are loaded then it will reload them from -the new config file. - -This option takes the usual substitutions, which can -be very useful. - -If the config file doesn't exist then it won't be loaded -(allowing you to special case the config files of just a few -clients). - -Example: \fBconfig file = /usr/local/samba/lib/smb.conf.%m -\fR -.TP -\fBcopy (S)\fR -This parameter allows you to "clone" service -entries. The specified service is simply duplicated under the -current service's name. Any parameters specified in the current -section will override those in the section being copied. - -This feature lets you set up a 'template' service and -create similar services easily. Note that the service being -copied must occur earlier in the configuration file than the -service doing the copying. - -Default: \fBno value\fR - -Example: \fBcopy = otherservice\fR -.TP -\fBcreate mask (S)\fR -A synonym for this parameter is -\fIcreate mode\fR -\&. - -When a file is created, the necessary permissions are -calculated according to the mapping from DOS modes to UNIX -permissions, and the resulting UNIX mode is then bit-wise 'AND'ed -with this parameter. This parameter may be thought of as a bit-wise -MASK for the UNIX modes of a file. Any bit \fBnot\fR -set here will be removed from the modes set on a file when it is -created. - -The default value of this parameter removes the -\&'group' and 'other' write and execute bits from the UNIX modes. - -Following this Samba will bit-wise 'OR' the UNIX mode created -from this parameter with the value of the \fIforce create mode\fR -parameter which is set to 000 by default. - -This parameter does not affect directory modes. See the -parameter \fIdirectory mode -\fR for details. - -See also the \fIforce -create mode\fR parameter for forcing particular mode -bits to be set on created files. See also the \fIdirectory mode\fR parameter for masking -mode bits on created directories. See also the \fIinherit permissions\fR parameter. - -Note that this parameter does not apply to permissions -set by Windows NT/2000 ACL editors. If the administrator wishes to enforce -a mask on access control lists also, they need to set the \fIsecurity mask\fR. - -Default: \fBcreate mask = 0744\fR - -Example: \fBcreate mask = 0775\fR -.TP -\fBcreate mode (S)\fR -This is a synonym for \fI create mask\fR. -.TP -\fBcsc policy (S)\fR -This stands for \fBclient-side caching -policy\fR, and specifies how clients capable of offline -caching will cache the files in the share. The valid values -are: manual, documents, programs, disable. - -These values correspond to those used on Windows -servers. - -For example, shares containing roaming profiles can have -offline caching disabled using \fBcsc policy = disable -\fR. - -Default: \fBcsc policy = manual\fR - -Example: \fBcsc policy = programs\fR -.TP -\fBdeadtime (G)\fR -The value of the parameter (a decimal integer) -represents the number of minutes of inactivity before a connection -is considered dead, and it is disconnected. The deadtime only takes -effect if the number of open files is zero. - -This is useful to stop a server's resources being -exhausted by a large number of inactive connections. - -Most clients have an auto-reconnect feature when a -connection is broken so in most cases this parameter should be -transparent to users. - -Using this parameter with a timeout of a few minutes -is recommended for most systems. - -A deadtime of zero indicates that no auto-disconnection -should be performed. - -Default: \fBdeadtime = 0\fR - -Example: \fBdeadtime = 15\fR -.TP -\fBdebug hires timestamp (G)\fR -Sometimes the timestamps in the log messages -are needed with a resolution of higher that seconds, this -boolean parameter adds microsecond resolution to the timestamp -message header when turned on. - -Note that the parameter \fI debug timestamp\fR must be on for this to have an -effect. - -Default: \fBdebug hires timestamp = no\fR -.TP -\fBdebug pid (G)\fR -When using only one log file for more then one -forked smbdprocess there may be hard to follow which process -outputs which message. This boolean parameter is adds the process-id -to the timestamp message headers in the logfile when turned on. - -Note that the parameter \fI debug timestamp\fR must be on for this to have an -effect. - -Default: \fBdebug pid = no\fR -.TP -\fBdebug timestamp (G)\fR -Samba debug log messages are timestamped -by default. If you are running at a high \fIdebug level\fR these timestamps -can be distracting. This boolean parameter allows timestamping -to be turned off. - -Default: \fBdebug timestamp = yes\fR -.TP -\fBdebug uid (G)\fR -Samba is sometimes run as root and sometime -run as the connected user, this boolean parameter inserts the -current euid, egid, uid and gid to the timestamp message headers -in the log file if turned on. - -Note that the parameter \fI debug timestamp\fR must be on for this to have an -effect. - -Default: \fBdebug uid = no\fR -.TP -\fBdebuglevel (G)\fR -Synonym for \fI log level\fR. -.TP -\fBdefault (G)\fR -A synonym for \fI default service\fR. -.TP -\fBdefault case (S)\fR -See the section on NAME MANGLING. Also note the \fIshort preserve case\fR parameter. - -Default: \fBdefault case = lower\fR -.TP -\fBdefault devmode (S)\fR -This parameter is only applicable to printable services. When smbd is serving -Printer Drivers to Windows NT/2k/XP clients, each printer on the Samba -server has a Device Mode which defines things such as paper size and -orientation and duplex settings. The device mode can only correctly be -generated by the printer driver itself (which can only be executed on a -Win32 platform). Because smbd is unable to execute the driver code -to generate the device mode, the default behavior is to set this field -to NULL. - -Most problems with serving printer drivers to Windows NT/2k/XP clients -can be traced to a problem with the generated device mode. Certain drivers -will do things such as crashing the client's Explorer.exe with a NULL devmode. -However, other printer drivers can cause the client's spooler service -(spoolsv.exe) to die if the devmode was not created by the driver itself -(i.e. smbd generates a default devmode). - -This parameter should be used with care and tested with the printer -driver in question. It is better to leave the device mode to NULL -and let the Windows client set the correct values. Because drivers do not -do this all the time, setting \fBdefault devmode = yes\fR -will instruct smbd to generate a default one. - -For more information on Windows NT/2k printing and Device Modes, -see the MSDN documentation . - -Default: \fBdefault devmode = no\fR -.TP -\fBdefault service (G)\fR -This parameter specifies the name of a service -which will be connected to if the service actually requested cannot -be found. Note that the square brackets are \fBNOT\fR -given in the parameter value (see example below). - -There is no default value for this parameter. If this -parameter is not given, attempting to connect to a nonexistent -service results in an error. - -Typically the default service would be a \fIguest ok\fR, \fIread-only\fR service. - -Also note that the apparent service name will be changed -to equal that of the requested service, this is very useful as it -allows you to use macros like \fI%S\fR to make -a wildcard service. - -Note also that any "_" characters in the name of the service -used in the default service will get mapped to a "/". This allows for -interesting things. - -Example: - - -.nf -[global] - default service = pub - -[pub] - path = /%S - -.fi -.TP -\fBdelete group script (G)\fR -This is the full pathname to a script that will -be run \fBAS ROOT\fR by smbd(8) when a group is requested to be deleted. It will expand any \fI%g\fR to the group name passed. This script is only useful for installations using the Windows NT domain administration tools. -.TP -\fBdeleteprinter command (G)\fR -With the introduction of MS-RPC based printer -support for Windows NT/2000 clients in Samba 2.2, it is now -possible to delete printer at run time by issuing the -DeletePrinter() RPC call. - -For a Samba host this means that the printer must be -physically deleted from underlying printing system. The \fI deleteprinter command\fR defines a script to be run which -will perform the necessary operations for removing the printer -from the print system and from \fIsmb.conf\fR. - -The \fIdeleteprinter command\fR is -automatically called with only one parameter: \fI "printer name"\fR. - -Once the \fIdeleteprinter command\fR has -been executed, \fBsmbd\fR will reparse the \fI smb.conf\fR to associated printer no longer exists. -If the sharename is still valid, then \fBsmbd -\fR will return an ACCESS_DENIED error to the client. - -See also \fI addprinter command\fR, \fIprinting\fR, -\fIshow add -printer wizard\fR - -Default: \fBnone\fR - -Example: \fBdeleteprinter command = /usr/bin/removeprinter -\fR -.TP -\fBdelete readonly (S)\fR -This parameter allows readonly files to be deleted. -This is not normal DOS semantics, but is allowed by UNIX. - -This option may be useful for running applications such -as rcs, where UNIX file ownership prevents changing file -permissions, and DOS semantics prevent deletion of a read only file. - -Default: \fBdelete readonly = no\fR -.TP -\fBdelete share command (G)\fR -Samba 2.2.0 introduced the ability to dynamically -add and delete shares via the Windows NT 4.0 Server Manager. The -\fIdelete share command\fR is used to define an -external program or script which will remove an existing service -definition from \fIsmb.conf\fR. In order to successfully -execute the \fIdelete share command\fR, \fBsmbd\fR -requires that the administrator be connected using a root account (i.e. -uid == 0). - -When executed, \fBsmbd\fR will automatically invoke the -\fIdelete share command\fR with two parameters. -.RS -.TP 0.2i -\(bu -\fIconfigFile\fR - the location -of the global \fIsmb.conf\fR file. -.TP 0.2i -\(bu -\fIshareName\fR - the name of -the existing service. -.RE - -This parameter is only used to remove file shares. To delete printer shares, -see the \fIdeleteprinter -command\fR. - -See also \fIadd share -command\fR, \fIchange -share command\fR. - -Default: \fBnone\fR - -Example: \fBdelete share command = /usr/local/bin/delshare\fR -.TP -\fBdelete user script (G)\fR -This is the full pathname to a script that will -be run by \fBsmbd(8)\fR -when managing user's with remote RPC (NT) tools. - -This script is called when a remote client removes a user -from the server, normally using 'User Manager for Domains' or -\fBrpcclient\fR. - -This script should delete the given UNIX username. - -Default: \fBdelete user script = -\fR - -Example: \fBdelete user script = /usr/local/samba/bin/del_user -%u\fR -.TP -\fBdelete user from group script (G)\fR -Full path to the script that will be called when -a user is removed from a group using the Windows NT domain administration -tools. It will be run by smbd(8) -\fBAS ROOT\fR. Any \fI%g\fR will be -replaced with the group name and any \fI%u\fR will -be replaced with the user name. - -Default: \fBdelete user from group script = \fR - -Example: \fBdelete user from group script = /usr/sbin/deluser %u %g\fR -.TP -\fBdelete veto files (S)\fR -This option is used when Samba is attempting to -delete a directory that contains one or more vetoed directories -(see the \fIveto files\fR -option). If this option is set to no (the default) then if a vetoed -directory contains any non-vetoed files or directories then the -directory delete will fail. This is usually what you want. - -If this option is set to yes, then Samba -will attempt to recursively delete any files and directories within -the vetoed directory. This can be useful for integration with file -serving systems such as NetAtalk which create meta-files within -directories you might normally veto DOS/Windows users from seeing -(e.g. \fI.AppleDouble\fR) - -Setting \fBdelete veto files = yes\fR allows these -directories to be transparently deleted when the parent directory -is deleted (so long as the user has permissions to do so). - -See also the \fIveto -files\fR parameter. - -Default: \fBdelete veto files = no\fR -.TP -\fBdeny hosts (S)\fR -Synonym for \fIhosts -deny\fR. -.TP -\fBdfree command (G)\fR -The \fIdfree command\fR setting should -only be used on systems where a problem occurs with the internal -disk space calculations. This has been known to happen with Ultrix, -but may occur with other operating systems. The symptom that was -seen was an error of "Abort Retry Ignore" at the end of each -directory listing. - -This setting allows the replacement of the internal routines to -calculate the total disk space and amount available with an external -routine. The example below gives a possible script that might fulfill -this function. - -The external program will be passed a single parameter indicating -a directory in the filesystem being queried. This will typically consist -of the string \fI./\fR. The script should return two -integers in ASCII. The first should be the total disk space in blocks, -and the second should be the number of available blocks. An optional -third return value can give the block size in bytes. The default -blocksize is 1024 bytes. - -Note: Your script should \fBNOT\fR be setuid or -setgid and should be owned by (and writeable only by) root! - -Default: \fBBy default internal routines for -determining the disk capacity and remaining space will be used. -\fR - -Example: \fBdfree command = /usr/local/samba/bin/dfree -\fR - -Where the script dfree (which must be made executable) could be: - - -.nf - - #!/bin/sh - df $1 | tail -1 | awk '{print $2" "$4}' - -.fi - -or perhaps (on Sys V based systems): - - -.nf - - #!/bin/sh - /usr/bin/df -k $1 | tail -1 | awk '{print $3" "$5}' - -.fi - -Note that you may have to replace the command names -with full path names on some systems. -.TP -\fBdirectory (S)\fR -Synonym for \fIpath -\fR. -.TP -\fBdirectory mask (S)\fR -This parameter is the octal modes which are -used when converting DOS modes to UNIX modes when creating UNIX -directories. - -When a directory is created, the necessary permissions are -calculated according to the mapping from DOS modes to UNIX permissions, -and the resulting UNIX mode is then bit-wise 'AND'ed with this -parameter. This parameter may be thought of as a bit-wise MASK for -the UNIX modes of a directory. Any bit \fBnot\fR set -here will be removed from the modes set on a directory when it is -created. - -The default value of this parameter removes the 'group' -and 'other' write bits from the UNIX mode, allowing only the -user who owns the directory to modify it. - -Following this Samba will bit-wise 'OR' the UNIX mode -created from this parameter with the value of the \fIforce directory mode -\fR parameter. This parameter is set to 000 by -default (i.e. no extra mode bits are added). - -Note that this parameter does not apply to permissions -set by Windows NT/2000 ACL editors. If the administrator wishes to enforce -a mask on access control lists also, they need to set the \fIdirectory security mask\fR. - -See the \fIforce -directory mode\fR parameter to cause particular mode -bits to always be set on created directories. - -See also the \fIcreate mode -\fR parameter for masking mode bits on created files, -and the \fIdirectory -security mask\fR parameter. - -Also refer to the \fI inherit permissions\fR parameter. - -Default: \fBdirectory mask = 0755\fR - -Example: \fBdirectory mask = 0775\fR -.TP -\fBdirectory mode (S)\fR -Synonym for \fI directory mask\fR -.TP -\fBdirectory security mask (S)\fR -This parameter controls what UNIX permission bits -can be modified when a Windows NT client is manipulating the UNIX -permission on a directory using the native NT security dialog -box. - -This parameter is applied as a mask (AND'ed with) to -the changed permission bits, thus preventing any bits not in -this mask from being modified. Essentially, zero bits in this -mask may be treated as a set of bits the user is not allowed -to change. - -If not set explicitly this parameter is set to 0777 -meaning a user is allowed to modify all the user/group/world -permissions on a directory. - -\fBNote\fR that users who can access the -Samba server through other means can easily bypass this restriction, -so it is primarily useful for standalone "appliance" systems. -Administrators of most normal systems will probably want to leave -it as the default of 0777. - -See also the \fI force directory security mode\fR, \fIsecurity mask\fR, -\fIforce security mode -\fR parameters. - -Default: \fBdirectory security mask = 0777\fR - -Example: \fBdirectory security mask = 0700\fR -.TP -\fBdisable netbios (G)\fR -Enabling this parameter will disable netbios support -in Samba. Netbios is the only available form of browsing in -all windows versions except for 2000 and XP. - -Note that clients that only support netbios won't be able to -see your samba server when netbios support is disabled. - -Default: \fBdisable netbios = no\fR - -Example: \fBdisable netbios = yes\fR -.TP -\fBdisable spoolss (G)\fR -Enabling this parameter will disable Samba's support -for the SPOOLSS set of MS-RPC's and will yield identical behavior -as Samba 2.0.x. Windows NT/2000 clients will downgrade to using -Lanman style printing commands. Windows 9x/ME will be uneffected by -the parameter. However, this will also disable the ability to upload -printer drivers to a Samba server via the Windows NT Add Printer -Wizard or by using the NT printer properties dialog window. It will -also disable the capability of Windows NT/2000 clients to download -print drivers from the Samba host upon demand. -\fBBe very careful about enabling this parameter.\fR - -See also use client driver - -Default : \fBdisable spoolss = no\fR -.TP -\fBdisplay charset (G)\fR -Specifies the charset that samba will use -to print messages to stdout and stderr and SWAT will use. -Should generally be the same as the \fBunix charset\fR. - -Default: \fBdisplay charset = ASCII\fR - -Example: \fBdisplay charset = UTF8\fR -.TP -\fBdns proxy (G)\fR -Specifies that nmbd(8) -when acting as a WINS server and finding that a NetBIOS name has not -been registered, should treat the NetBIOS name word-for-word as a DNS -name and do a lookup with the DNS server for that name on behalf of -the name-querying client. - -Note that the maximum length for a NetBIOS name is 15 -characters, so the DNS name (or DNS alias) can likewise only be -15 characters, maximum. - -\fBnmbd\fR spawns a second copy of itself to do the -DNS name lookup requests, as doing a name lookup is a blocking -action. - -See also the parameter \fI wins support\fR. - -Default: \fBdns proxy = yes\fR -.TP -\fBdomain logons (G)\fR -If set to yes, the Samba server will serve -Windows 95/98 Domain logons for the \fIworkgroup\fR it is in. Samba 2.2 -has limited capability to act as a domain controller for Windows -NT 4 Domains. For more details on setting up this feature see -the Samba-PDC-HOWTO included in the \fIhtmldocs/\fR -directory shipped with the source code. - -Default: \fBdomain logons = no\fR -.TP -\fBdomain master (G)\fR -Tell \fB nmbd(8)\fR to enable WAN-wide browse list -collation. Setting this option causes \fBnmbd\fR to -claim a special domain specific NetBIOS name that identifies -it as a domain master browser for its given \fIworkgroup\fR. Local master browsers -in the same \fIworkgroup\fR on broadcast-isolated -subnets will give this \fBnmbd\fR their local browse lists, -and then ask \fBsmbd(8)\fR -for a complete copy of the browse list for the whole wide area -network. Browser clients will then contact their local master browser, -and will receive the domain-wide browse list, instead of just the list -for their broadcast-isolated subnet. - -Note that Windows NT Primary Domain Controllers expect to be -able to claim this \fIworkgroup\fR specific special -NetBIOS name that identifies them as domain master browsers for -that \fIworkgroup\fR by default (i.e. there is no -way to prevent a Windows NT PDC from attempting to do this). This -means that if this parameter is set and \fBnmbd\fR claims -the special name for a \fIworkgroup\fR before a Windows -NT PDC is able to do so then cross subnet browsing will behave -strangely and may fail. - -If \fBdomain logons = yes\fR -, then the default behavior is to enable the \fIdomain -master\fR parameter. If \fIdomain logons\fR is -not enabled (the default setting), then neither will \fIdomain -master\fR be enabled by default. - -Default: \fBdomain master = auto\fR -.TP -\fBdont descend (S)\fR -There are certain directories on some systems -(e.g., the \fI/proc\fR tree under Linux) that are either not -of interest to clients or are infinitely deep (recursive). This -parameter allows you to specify a comma-delimited list of directories -that the server should always show as empty. - -Note that Samba can be very fussy about the exact format -of the "dont descend" entries. For example you may need \fI ./proc\fR instead of just \fI/proc\fR. -Experimentation is the best policy :-) - -Default: \fBnone (i.e., all directories are OK -to descend)\fR - -Example: \fBdont descend = /proc,/dev\fR -.TP -\fBdos charset (G)\fR -DOS SMB clients assume the server has -the same charset as they do. This option specifies which -charset Samba should talk to DOS clients. - -The default depends on which charsets you have instaled. -Samba tries to use charset 850 but falls back to ASCII in -case it is not available. Run testparm(1) - to check the default on your system. -.TP -\fBdos filemode (S)\fR -The default behavior in Samba is to provide -UNIX-like behavior where only the owner of a file/directory is -able to change the permissions on it. However, this behavior -is often confusing to DOS/Windows users. Enabling this parameter -allows a user who has write access to the file (by whatever -means) to modify the permissions on it. Note that a user -belonging to the group owning the file will not be allowed to -change permissions if the group is only granted read access. -Ownership of the file/directory is not changed, only the permissions -are modified. - -Default: \fBdos filemode = no\fR -.TP -\fBdos filetime resolution (S)\fR -Under the DOS and Windows FAT filesystem, the finest -granularity on time resolution is two seconds. Setting this parameter -for a share causes Samba to round the reported time down to the -nearest two second boundary when a query call that requires one second -resolution is made to \fBsmbd(8)\fR - - -This option is mainly used as a compatibility option for Visual -C++ when used against Samba shares. If oplocks are enabled on a -share, Visual C++ uses two different time reading calls to check if a -file has changed since it was last read. One of these calls uses a -one-second granularity, the other uses a two second granularity. As -the two second call rounds any odd second down, then if the file has a -timestamp of an odd number of seconds then the two timestamps will not -match and Visual C++ will keep reporting the file has changed. Setting -this option causes the two timestamps to match, and Visual C++ is -happy. - -Default: \fBdos filetime resolution = no\fR -.TP -\fBdos filetimes (S)\fR -Under DOS and Windows, if a user can write to a -file they can change the timestamp on it. Under POSIX semantics, -only the owner of the file or root may change the timestamp. By -default, Samba runs with POSIX semantics and refuses to change the -timestamp on a file if the user \fBsmbd\fR is acting -on behalf of is not the file owner. Setting this option to yes allows DOS semantics and smbd will change the file -timestamp as DOS requires. - -Default: \fBdos filetimes = no\fR -.TP -\fBencrypt passwords (G)\fR -This boolean controls whether encrypted passwords -will be negotiated with the client. Note that Windows NT 4.0 SP3 and -above and also Windows 98 will by default expect encrypted passwords -unless a registry entry is changed. To use encrypted passwords in -Samba see the file ENCRYPTION.txt in the Samba documentation -directory \fIdocs/\fR shipped with the source code. - -In order for encrypted passwords to work correctly -\fBsmbd(8)\fR must either -have access to a local \fIsmbpasswd(5) -\fR program for information on how to set up -and maintain this file), or set the security = [server|domain|ads] parameter which -causes \fBsmbd\fR to authenticate against another -server. - -Default: \fBencrypt passwords = yes\fR -.TP -\fBenhanced browsing (G)\fR -This option enables a couple of enhancements to -cross-subnet browse propagation that have been added in Samba -but which are not standard in Microsoft implementations. - -The first enhancement to browse propagation consists of a regular -wildcard query to a Samba WINS server for all Domain Master Browsers, -followed by a browse synchronization with each of the returned -DMBs. The second enhancement consists of a regular randomised browse -synchronization with all currently known DMBs. - -You may wish to disable this option if you have a problem with empty -workgroups not disappearing from browse lists. Due to the restrictions -of the browse protocols these enhancements can cause a empty workgroup -to stay around forever which can be annoying. - -In general you should leave this option enabled as it makes -cross-subnet browse propagation much more reliable. - -Default: \fBenhanced browsing = yes\fR -.TP -\fBenumports command (G)\fR -The concept of a "port" is fairly foreign -to UNIX hosts. Under Windows NT/2000 print servers, a port -is associated with a port monitor and generally takes the form of -a local port (i.e. LPT1:, COM1:, FILE:) or a remote port -(i.e. LPD Port Monitor, etc...). By default, Samba has only one -port defined--"Samba Printer Port". Under -Windows NT/2000, all printers must have a valid port name. -If you wish to have a list of ports displayed (\fBsmbd -\fR does not use a port name for anything) other than -the default "Samba Printer Port", you -can define \fIenumports command\fR to point to -a program which should generate a list of ports, one per line, -to standard output. This listing will then be used in response -to the level 1 and 2 EnumPorts() RPC. - -Default: \fBno enumports command\fR - -Example: \fBenumports command = /usr/bin/listports -\fR -.TP -\fBexec (S)\fR -This is a synonym for \fIpreexec\fR. -.TP -\fBfake directory create times (S)\fR -NTFS and Windows VFAT file systems keep a create -time for all files and directories. This is not the same as the -ctime - status change time - that Unix keeps, so Samba by default -reports the earliest of the various times Unix does keep. Setting -this parameter for a share causes Samba to always report midnight -1-1-1980 as the create time for directories. - -This option is mainly used as a compatibility option for -Visual C++ when used against Samba shares. Visual C++ generated -makefiles have the object directory as a dependency for each object -file, and a make rule to create the directory. Also, when NMAKE -compares timestamps it uses the creation time when examining a -directory. Thus the object directory will be created if it does not -exist, but once it does exist it will always have an earlier -timestamp than the object files it contains. - -However, Unix time semantics mean that the create time -reported by Samba will be updated whenever a file is created or -or deleted in the directory. NMAKE finds all object files in -the object directory. The timestamp of the last one built is then -compared to the timestamp of the object directory. If the -directory's timestamp if newer, then all object files -will be rebuilt. Enabling this option -ensures directories always predate their contents and an NMAKE build -will proceed as expected. - -Default: \fBfake directory create times = no\fR -.TP -\fBfake oplocks (S)\fR -Oplocks are the way that SMB clients get permission -from a server to locally cache file operations. If a server grants -an oplock (opportunistic lock) then the client is free to assume -that it is the only one accessing the file and it will aggressively -cache file data. With some oplock types the client may even cache -file open/close operations. This can give enormous performance benefits. - -When you set \fBfake oplocks = yes\fR, \fBsmbd(8)\fR will -always grant oplock requests no matter how many clients are using -the file. - -It is generally much better to use the real \fIoplocks\fR support rather -than this parameter. - -If you enable this option on all read-only shares or -shares that you know will only be accessed from one client at a -time such as physically read-only media like CDROMs, you will see -a big performance improvement on many operations. If you enable -this option on shares where multiple clients may be accessing the -files read-write at the same time you can get data corruption. Use -this option carefully! - -Default: \fBfake oplocks = no\fR -.TP -\fBfollow symlinks (S)\fR -This parameter allows the Samba administrator -to stop \fBsmbd(8)\fR -from following symbolic links in a particular share. Setting this -parameter to no prevents any file or directory -that is a symbolic link from being followed (the user will get an -error). This option is very useful to stop users from adding a -symbolic link to \fI/etc/passwd\fR in their home -directory for instance. However it will slow filename lookups -down slightly. - -This option is enabled (i.e. \fBsmbd\fR will -follow symbolic links) by default. - -Default: \fBfollow symlinks = yes\fR -.TP -\fBforce create mode (S)\fR -This parameter specifies a set of UNIX mode bit -permissions that will \fBalways\fR be set on a -file created by Samba. This is done by bitwise 'OR'ing these bits onto -the mode bits of a file that is being created or having its -permissions changed. The default for this parameter is (in octal) -000. The modes in this parameter are bitwise 'OR'ed onto the file -mode after the mask set in the \fIcreate mask\fR -parameter is applied. - -See also the parameter \fIcreate -mask\fR for details on masking mode bits on files. - -See also the \fIinherit -permissions\fR parameter. - -Default: \fBforce create mode = 000\fR - -Example: \fBforce create mode = 0755\fR - -would force all created files to have read and execute -permissions set for 'group' and 'other' as well as the -read/write/execute bits set for the 'user'. -.TP -\fBforce directory mode (S)\fR -This parameter specifies a set of UNIX mode bit -permissions that will \fBalways\fR be set on a directory -created by Samba. This is done by bitwise 'OR'ing these bits onto the -mode bits of a directory that is being created. The default for this -parameter is (in octal) 0000 which will not add any extra permission -bits to a created directory. This operation is done after the mode -mask in the parameter \fIdirectory mask\fR is -applied. - -See also the parameter \fI directory mask\fR for details on masking mode bits -on created directories. - -See also the \fI inherit permissions\fR parameter. - -Default: \fBforce directory mode = 000\fR - -Example: \fBforce directory mode = 0755\fR - -would force all created directories to have read and execute -permissions set for 'group' and 'other' as well as the -read/write/execute bits set for the 'user'. -.TP -\fBforce directory security mode (S)\fR -This parameter controls what UNIX permission bits -can be modified when a Windows NT client is manipulating the UNIX -permission on a directory using the native NT security dialog box. - -This parameter is applied as a mask (OR'ed with) to the -changed permission bits, thus forcing any bits in this mask that -the user may have modified to be on. Essentially, one bits in this -mask may be treated as a set of bits that, when modifying security -on a directory, the user has always set to be 'on'. - -If not set explicitly this parameter is 000, which -allows a user to modify all the user/group/world permissions on a -directory without restrictions. - -\fBNote\fR that users who can access the -Samba server through other means can easily bypass this restriction, -so it is primarily useful for standalone "appliance" systems. -Administrators of most normal systems will probably want to leave -it set as 0000. - -See also the \fI directory security mask\fR, \fIsecurity mask\fR, -\fIforce security mode -\fR parameters. - -Default: \fBforce directory security mode = 0\fR - -Example: \fBforce directory security mode = 700\fR -.TP -\fBforce group (S)\fR -This specifies a UNIX group name that will be -assigned as the default primary group for all users connecting -to this service. This is useful for sharing files by ensuring -that all access to files on service will use the named group for -their permissions checking. Thus, by assigning permissions for this -group to the files and directories within this service the Samba -administrator can restrict or allow sharing of these files. - -In Samba 2.0.5 and above this parameter has extended -functionality in the following way. If the group name listed here -has a '+' character prepended to it then the current user accessing -the share only has the primary group default assigned to this group -if they are already assigned as a member of that group. This allows -an administrator to decide that only users who are already in a -particular group will create files with group ownership set to that -group. This gives a finer granularity of ownership assignment. For -example, the setting \fIforce group = +sys\fR means -that only users who are already in group sys will have their default -primary group assigned to sys when accessing this Samba share. All -other users will retain their ordinary primary group. - -If the \fIforce user -\fR parameter is also set the group specified in -\fIforce group\fR will override the primary group -set in \fIforce user\fR. - -See also \fIforce -user\fR. - -Default: \fBno forced group\fR - -Example: \fBforce group = agroup\fR -.TP -\fBforce security mode (S)\fR -This parameter controls what UNIX permission -bits can be modified when a Windows NT client is manipulating -the UNIX permission on a file using the native NT security dialog -box. - -This parameter is applied as a mask (OR'ed with) to the -changed permission bits, thus forcing any bits in this mask that -the user may have modified to be on. Essentially, one bits in this -mask may be treated as a set of bits that, when modifying security -on a file, the user has always set to be 'on'. - -If not set explicitly this parameter is set to 0, -and allows a user to modify all the user/group/world permissions on a file, -with no restrictions. - -\fBNote\fR that users who can access -the Samba server through other means can easily bypass this restriction, -so it is primarily useful for standalone "appliance" systems. -Administrators of most normal systems will probably want to leave -this set to 0000. - -See also the \fI force directory security mode\fR, -\fIdirectory security -mask\fR, \fI security mask\fR parameters. - -Default: \fBforce security mode = 0\fR - -Example: \fBforce security mode = 700\fR -.TP -\fBforce user (S)\fR -This specifies a UNIX user name that will be -assigned as the default user for all users connecting to this service. -This is useful for sharing files. You should also use it carefully -as using it incorrectly can cause security problems. - -This user name only gets used once a connection is established. -Thus clients still need to connect as a valid user and supply a -valid password. Once connected, all file operations will be performed -as the "forced user", no matter what username the client connected -as. This can be very useful. - -In Samba 2.0.5 and above this parameter also causes the -primary group of the forced user to be used as the primary group -for all file activity. Prior to 2.0.5 the primary group was left -as the primary group of the connecting user (this was a bug). - -See also \fIforce group -\fR - -Default: \fBno forced user\fR - -Example: \fBforce user = auser\fR -.TP -\fBfstype (S)\fR -This parameter allows the administrator to -configure the string that specifies the type of filesystem a share -is using that is reported by \fBsmbd(8) -\fR when a client queries the filesystem type -for a share. The default type is NTFS for -compatibility with Windows NT but this can be changed to other -strings such as Samba or FAT -if required. - -Default: \fBfstype = NTFS\fR - -Example: \fBfstype = Samba\fR -.TP -\fBgetwd cache (G)\fR -This is a tuning option. When this is enabled a -caching algorithm will be used to reduce the time taken for getwd() -calls. This can have a significant impact on performance, especially -when the \fIwide links\fR -parameter is set to no. - -Default: \fBgetwd cache = yes\fR -.TP -\fBgroup (S)\fR -Synonym for \fIforce -group\fR. -.TP -\fBguest account (S)\fR -This is a username which will be used for access -to services which are specified as \fI guest ok\fR (see below). Whatever privileges this -user has will be available to any client connecting to the guest service. -Typically this user will exist in the password file, but will not -have a valid login. The user account "ftp" is often a good choice -for this parameter. If a username is specified in a given service, -the specified username overrides this one. - -One some systems the default guest account "nobody" may not -be able to print. Use another account in this case. You should test -this by trying to log in as your guest user (perhaps by using the -\fBsu -\fR command) and trying to print using the -system print command such as \fBlpr(1)\fR or \fB lp(1)\fR. - -This parameter does not accept % macros, because -many parts of the system require this value to be -constant for correct operation. - -Default: \fBspecified at compile time, usually -"nobody"\fR - -Example: \fBguest account = ftp\fR -.TP -\fBguest ok (S)\fR -If this parameter is yes for -a service, then no password is required to connect to the service. -Privileges will be those of the \fI guest account\fR. - -See the section below on \fI security\fR for more information about this option. - -Default: \fBguest ok = no\fR -.TP -\fBguest only (S)\fR -If this parameter is yes for -a service, then only guest connections to the service are permitted. -This parameter will have no effect if \fIguest ok\fR is not set for the service. - -See the section below on \fI security\fR for more information about this option. - -Default: \fBguest only = no\fR -.TP -\fBhide dot files (S)\fR -This is a boolean parameter that controls whether -files starting with a dot appear as hidden files. - -Default: \fBhide dot files = yes\fR -.TP -\fBhide files(S)\fR -This is a list of files or directories that are not -visible but are accessible. The DOS 'hidden' attribute is applied -to any files or directories that match. - -Each entry in the list must be separated by a '/', -which allows spaces to be included in the entry. '*' -and '?' can be used to specify multiple files or directories -as in DOS wildcards. - -Each entry must be a Unix path, not a DOS path and must -not include the Unix directory separator '/'. - -Note that the case sensitivity option is applicable -in hiding files. - -Setting this parameter will affect the performance of Samba, -as it will be forced to check all files and directories for a match -as they are scanned. - -See also \fIhide -dot files\fR, \fI veto files\fR and \fIcase sensitive\fR. - -Default: \fBno file are hidden\fR - -Example: \fBhide files = -/.*/DesktopFolderDB/TrashFor%m/resource.frk/\fR - -The above example is based on files that the Macintosh -SMB client (DAVE) available from -Thursby creates for internal use, and also still hides -all files beginning with a dot. -.TP -\fBhide local users(G)\fR -This parameter toggles the hiding of local UNIX -users (root, wheel, floppy, etc) from remote clients. - -Default: \fBhide local users = no\fR -.TP -\fBhide unreadable (G)\fR -This parameter prevents clients from seeing the -existance of files that cannot be read. Defaults to off. - -Default: \fBhide unreadable = no\fR -.TP -\fBhide unwriteable files (G)\fR -This parameter prevents clients from seeing -the existance of files that cannot be written to. Defaults to off. -Note that unwriteable directories are shown as usual. - -Default: \fBhide unwriteable = no\fR -.TP -\fBhide special files (G)\fR -This parameter prevents clients from seeing -special files such as sockets, devices and fifo's in directory -listings. - -Default: \fBhide special files = no\fR -.TP -\fBhomedir map (G)\fR -If\fInis homedir -\fR is yes, and \fBsmbd(8)\fR is also acting -as a Win95/98 \fIlogon server\fR then this parameter -specifies the NIS (or YP) map from which the server for the user's -home directory should be extracted. At present, only the Sun -auto.home map format is understood. The form of the map is: - -\fBusername server:/some/file/system\fR - -and the program will extract the servername from before -the first ':'. There should probably be a better parsing system -that copes with different map formats and also Amd (another -automounter) maps. - -\fBNOTE :\fRA working NIS client is required on -the system for this option to work. - -See also \fInis homedir\fR -, \fIdomain logons\fR -\&. - -Default: \fBhomedir map = \fR - -Example: \fBhomedir map = amd.homedir\fR -.TP -\fBhost msdfs (G)\fR -This boolean parameter is only available -if Samba has been configured and compiled with the \fB --with-msdfs\fR option. If set to yes, -Samba will act as a Dfs server, and allow Dfs-aware clients -to browse Dfs trees hosted on the server. - -See also the \fI msdfs root\fR share level parameter. For -more information on setting up a Dfs tree on Samba, -refer to msdfs_setup.html - -Default: \fBhost msdfs = no\fR -.TP -\fBhostname lookups (G)\fR -Specifies whether samba should use (expensive) -hostname lookups or use the ip addresses instead. An example place -where hostname lookups are currently used is when checking -the \fBhosts deny\fR and \fBhosts allow\fR. - -Default: \fBhostname lookups = yes\fR - -Example: \fBhostname lookups = no\fR -.TP -\fBhosts allow (S)\fR -A synonym for this parameter is \fIallow -hosts\fR. - -This parameter is a comma, space, or tab delimited -set of hosts which are permitted to access a service. - -If specified in the [global] section then it will -apply to all services, regardless of whether the individual -service has a different setting. - -You can specify the hosts by name or IP number. For -example, you could restrict access to only the hosts on a -Class C subnet with something like \fBallow hosts = 150.203.5. -\fR. The full syntax of the list is described in the man -page \fIhosts_access(5)\fR. Note that this man -page may not be present on your system, so a brief description will -be given here also. - -Note that the localhost address 127.0.0.1 will always -be allowed access unless specifically denied by a \fIhosts deny\fR option. - -You can also specify hosts by network/netmask pairs and -by netgroup names if your system supports netgroups. The -\fBEXCEPT\fR keyword can also be used to limit a -wildcard list. The following examples may provide some help: - -Example 1: allow all IPs in 150.203.*.*; except one - -\fBhosts allow = 150.203. EXCEPT 150.203.6.66\fR - -Example 2: allow hosts that match the given network/netmask - -\fBhosts allow = 150.203.15.0/255.255.255.0\fR - -Example 3: allow a couple of hosts - -\fBhosts allow = lapland, arvidsjaur\fR - -Example 4: allow only hosts in NIS netgroup "foonet", but -deny access from one particular host - -\fBhosts allow = @foonet\fR - -\fBhosts deny = pirate\fR - -Note that access still requires suitable user-level passwords. - -See \fBtestparm(1)\fR - for a way of testing your host access to see if it does -what you expect. - -Default: \fBnone (i.e., all hosts permitted access) -\fR - -Example: \fBallow hosts = 150.203.5. myhost.mynet.edu.au -\fR -.TP -\fBhosts deny (S)\fR -The opposite of \fIhosts allow\fR -- hosts listed here are \fBNOT\fR permitted access to -services unless the specific services have their own lists to override -this one. Where the lists conflict, the \fIallow\fR -list takes precedence. - -Default: \fBnone (i.e., no hosts specifically excluded) -\fR - -Example: \fBhosts deny = 150.203.4. badhost.mynet.edu.au -\fR -.TP -\fBhosts equiv (G)\fR -If this global parameter is a non-null string, -it specifies the name of a file to read for the names of hosts -and users who will be allowed access without specifying a password. - -This is not be confused with \fIhosts allow\fR which is about hosts -access to services and is more useful for guest services. \fI hosts equiv\fR may be useful for NT clients which will -not supply passwords to Samba. - -\fBNOTE :\fR The use of \fIhosts equiv -\fR can be a major security hole. This is because you are -trusting the PC to supply the correct username. It is very easy to -get a PC to supply a false username. I recommend that the -\fIhosts equiv\fR option be only used if you really -know what you are doing, or perhaps on a home network where you trust -your spouse and kids. And only if you \fBreally\fR trust -them :-). - -Default: \fBno host equivalences\fR - -Example: \fBhosts equiv = /etc/hosts.equiv\fR -.TP -\fBinclude (G)\fR -This allows you to include one config file -inside another. The file is included literally, as though typed -in place. - -It takes the standard substitutions, except \fI%u -\fR, \fI%P\fR and \fI%S\fR. - -Default: \fBno file included\fR - -Example: \fBinclude = /usr/local/samba/lib/admin_smb.conf -\fR -.TP -\fBinherit acls (S)\fR -This parameter can be used to ensure -that if default acls exist on parent directories, -they are always honored when creating a subdirectory. -The default behavior is to use the mode specified -when creating the directory. Enabling this option -sets the mode to 0777, thus guaranteeing that -default directory acls are propagated. - -Default: \fBinherit acls = no\fR -.TP -\fBinherit permissions (S)\fR -The permissions on new files and directories -are normally governed by \fI create mask\fR, \fIdirectory mask\fR, \fIforce create mode\fR -and \fIforce -directory mode\fR but the boolean inherit -permissions parameter overrides this. - -New directories inherit the mode of the parent directory, -including bits such as setgid. - -New files inherit their read/write bits from the parent -directory. Their execute bits continue to be determined by -\fImap archive\fR -, \fImap hidden\fR -and \fImap system\fR -as usual. - -Note that the setuid bit is \fBnever\fR set via -inheritance (the code explicitly prohibits this). - -This can be particularly useful on large systems with -many users, perhaps several thousand, to allow a single [homes] -share to be used flexibly by each user. - -See also \fIcreate mask -\fR, \fI directory mask\fR, \fIforce create mode\fR and \fIforce directory mode\fR -\&. - -Default: \fBinherit permissions = no\fR -.TP -\fBinterfaces (G)\fR -This option allows you to override the default -network interfaces list that Samba will use for browsing, name -registration and other NBT traffic. By default Samba will query -the kernel for the list of all active interfaces and use any -interfaces except 127.0.0.1 that are broadcast capable. - -The option takes a list of interface strings. Each string -can be in any of the following forms: -.RS -.TP 0.2i -\(bu -a network interface name (such as eth0). -This may include shell-like wildcards so eth* will match -any interface starting with the substring "eth" -.TP 0.2i -\(bu -an IP address. In this case the netmask is -determined from the list of interfaces obtained from the -kernel -.TP 0.2i -\(bu -an IP/mask pair. -.TP 0.2i -\(bu -a broadcast/mask pair. -.RE - -The "mask" parameters can either be a bit length (such -as 24 for a C class network) or a full netmask in dotted -decimal form. - -The "IP" parameters above can either be a full dotted -decimal IP address or a hostname which will be looked up via -the OS's normal hostname resolution mechanisms. - -For example, the following line: - -\fBinterfaces = eth0 192.168.2.10/24 192.168.3.10/255.255.255.0 -\fR - -would configure three network interfaces corresponding -to the eth0 device and IP addresses 192.168.2.10 and 192.168.3.10. -The netmasks of the latter two interfaces would be set to 255.255.255.0. - -See also \fIbind -interfaces only\fR. - -Default: \fBall active interfaces except 127.0.0.1 -that are broadcast capable\fR -.TP -\fBinvalid users (S)\fR -This is a list of users that should not be allowed -to login to this service. This is really a \fBparanoid\fR -check to absolutely ensure an improper setting does not breach -your security. - -A name starting with a '@' is interpreted as an NIS -netgroup first (if your system supports NIS), and then as a UNIX -group if the name was not found in the NIS netgroup database. - -A name starting with '+' is interpreted only -by looking in the UNIX group database. A name starting with -\&'&' is interpreted only by looking in the NIS netgroup database -(this requires NIS to be working on your system). The characters -\&'+' and '&' may be used at the start of the name in either order -so the value \fI+&group\fR means check the -UNIX group database, followed by the NIS netgroup database, and -the value \fI&+group\fR means check the NIS -netgroup database, followed by the UNIX group database (the -same as the '@' prefix). - -The current servicename is substituted for \fI%S\fR. -This is useful in the [homes] section. - -See also \fIvalid users -\fR. - -Default: \fBno invalid users\fR - -Example: \fBinvalid users = root fred admin @wheel -\fR -.TP -\fBkeepalive (G)\fR -The value of the parameter (an integer) represents -the number of seconds between \fIkeepalive\fR -packets. If this parameter is zero, no keepalive packets will be -sent. Keepalive packets, if sent, allow the server to tell whether -a client is still present and responding. - -Keepalives should, in general, not be needed if the socket -being used has the SO_KEEPALIVE attribute set on it (see \fIsocket options\fR). -Basically you should only use this option if you strike difficulties. - -Default: \fBkeepalive = 300\fR - -Example: \fBkeepalive = 600\fR -.TP -\fBkernel oplocks (G)\fR -For UNIXes that support kernel based \fIoplocks\fR -(currently only IRIX and the Linux 2.4 kernel), this parameter -allows the use of them to be turned on or off. - -Kernel oplocks support allows Samba \fIoplocks -\fR to be broken whenever a local UNIX process or NFS operation -accesses a file that \fBsmbd(8)\fR - has oplocked. This allows complete data consistency between -SMB/CIFS, NFS and local file access (and is a \fBvery\fR -cool feature :-). - -This parameter defaults to on, but is translated -to a no-op on systems that no not have the necessary kernel support. -You should never need to touch this parameter. - -See also the \fIoplocks\fR -and \fIlevel2 oplocks -\fR parameters. - -Default: \fBkernel oplocks = yes\fR -.TP -\fBlanman auth (G)\fR -This parameter determines whether or not smbd will -attempt to authenticate users using the LANMAN password hash. -If disabled, only clients which support NT password hashes (e.g. Windows -NT/2000 clients, smbclient, etc... but not Windows 95/98 or the MS DOS -network client) will be able to connect to the Samba host. - -Default : \fBlanman auth = yes\fR -.TP -\fBlarge readwrite (G)\fR -This parameter determines whether or not smbd -supports the new 64k streaming read and write varient SMB requests introduced -with Windows 2000. Note that due to Windows 2000 client redirector bugs -this requires Samba to be running on a 64-bit capable operating system such -as IRIX, Solaris or a Linux 2.4 kernel. Can improve performance by 10% with -Windows 2000 clients. Defaults to on. Not as tested as some other Samba -code paths. - -Default : \fBlarge readwrite = yes\fR -.TP -\fBldap admin dn (G)\fR -The \fIldap admin dn\fR defines the Distinguished -Name (DN) name used by Samba to contact the ldap server when retreiving -user account information. The \fIldap -admin dn\fR is used in conjunction with the admin dn password -stored in the \fIprivate/secrets.tdb\fR file. See the -\fBsmbpasswd(8)\fR man -page for more information on how to accomplish this. -.TP -\fB>ldap del only sam attr (G)\fR -This parameter specifies whether a delete -operation in the ldapsam deletes the complete entry or only the attributes -specific to Samba. - -Default : \fBldap delete dn = no\fR -.TP -\fB>ldap del only sam attr (G)\fR -Inverted synonym for \fI ldap delete dn\fR. -.TP -\fBldap filter (G)\fR -This parameter specifies the RFC 2254 compliant LDAP search filter. -The default is to match the login name with the uid -attribute for all entries matching the sambaAccount -objectclass. Note that this filter should only return one entry. - -Default : \fBldap filter = (&(uid=%u)(objectclass=sambaAccount))\fR -.TP -\fBldap port (G)\fR -This parameter is only available if Samba has been -configure to include the \fB--with-ldapsam\fR option -at compile time. - -This option is used to control the tcp port number used to contact -the \fIldap server\fR. -The default is to use the stand LDAPS port 636. - -See Also: ldap ssl - -Default : \fBldap port = 636 ; if ldap ssl = on\fR - -Default : \fBldap port = 389 ; if ldap ssl = off\fR -.TP -\fBldap server (G)\fR -This parameter is only available if Samba has been -configure to include the \fB--with-ldapsam\fR option -at compile time. - -This parameter should contain the FQDN of the ldap directory -server which should be queried to locate user account information. - -Default : \fBldap server = localhost\fR -.TP -\fBldap ssl (G)\fR -This option is used to define whether or not Samba should -use SSL when connecting to the ldap server -This is \fBNOT\fR related to -Samba's previous SSL support which was enabled by specifying the -\fB--with-ssl\fR option to the \fIconfigure\fR -script. - -The \fIldap ssl\fR can be set to one of three values: -.RS -.TP 0.2i -\(bu -\fIOff\fR = Never use SSL when querying the directory. -.TP 0.2i -\(bu -\fIStart_tls\fR = Use the LDAPv3 StartTLS extended operation -(RFC2830) for communicating with the directory server. -.TP 0.2i -\(bu -\fIOn\fR = -Use SSL on the ldaps port when contacting the -\fIldap server\fR. Only -available when the backwards-compatiblity \fB --with-ldapsam\fR option is specified -to configure. See \fIpassdb backend\fR -.RE - -Default : \fBldap ssl = start_tls\fR -.TP -\fBldap suffix (G)\fR -Specifies where user and machine accounts are added to the tree. Can be overriden by \fBldap user suffix\fR and \fBldap machine suffix\fR. It also used as the base dn for all ldap searches. - -Default : \fBnone\fR -.TP -\fBldap user suffix (G)\fR -It specifies where users are added to the tree. - -Default : \fBnone\fR -.TP -\fBldap machine suffix (G)\fR -It specifies where machines should be -added to the ldap tree. - -Default : \fBnone\fR -.TP -\fBldap passwd sync (G)\fR -This option is used to define whether -or not Samba should sync the LDAP password with the NT -and LM hashes for normal accounts (NOT for -workstation, server or domain trusts) on a password -change via SAMBA. - -The \fIldap passwd sync\fR can be set to one of three values: -.RS -.TP 0.2i -\(bu -\fIYes\fR = Try to update the LDAP, NT and LM passwords and update the pwdLastSet time. -.TP 0.2i -\(bu -\fINo\fR = Update NT and LM passwords and update the pwdLastSet time. -.TP 0.2i -\(bu -\fIOnly\fR = Only update the LDAP password and let the LDAP server do the rest. -.RE - -Default : \fBldap passwd sync = no\fR -.TP -\fBldap trust ids (G)\fR -Normally, Samba validates each entry -in the LDAP server against getpwnam(). This allows -LDAP to be used for Samba with the unix system using -NIS (for example) and also ensures that Samba does not -present accounts that do not otherwise exist. - -This option is used to disable this functionality, and -instead to rely on the presence of the appropriate -attributes in LDAP directly, which can result in a -significant performance boost in some situations. -Setting this option to yes effectivly assumes -that the local machine is running \fBnss_ldap\fR against the -same LDAP server. - -Default: \fBldap trust ids = No\fR -.TP -\fBlevel2 oplocks (S)\fR -This parameter controls whether Samba supports -level2 (read-only) oplocks on a share. - -Level2, or read-only oplocks allow Windows NT clients -that have an oplock on a file to downgrade from a read-write oplock -to a read-only oplock once a second client opens the file (instead -of releasing all oplocks on a second open, as in traditional, -exclusive oplocks). This allows all openers of the file that -support level2 oplocks to cache the file for read-ahead only (ie. -they may not cache writes or lock requests) and increases performance -for many accesses of files that are not commonly written (such as -application .EXE files). - -Once one of the clients which have a read-only oplock -writes to the file all clients are notified (no reply is needed -or waited for) and told to break their oplocks to "none" and -delete any read-ahead caches. - -It is recommended that this parameter be turned on -to speed access to shared executables. - -For more discussions on level2 oplocks see the CIFS spec. - -Currently, if \fIkernel -oplocks\fR are supported then level2 oplocks are -not granted (even if this parameter is set to yes). -Note also, the \fIoplocks\fR -parameter must be set to yes on this share in order for -this parameter to have any effect. - -See also the \fIoplocks\fR -and \fIkernel oplocks\fR -parameters. - -Default: \fBlevel2 oplocks = yes\fR -.TP -\fBlm announce (G)\fR -This parameter determines if \fBnmbd(8)\fR will produce Lanman announce -broadcasts that are needed by OS/2 clients in order for them to see -the Samba server in their browse list. This parameter can have three -values, yes, no, or -auto. The default is auto. -If set to no Samba will never produce these -broadcasts. If set to yes Samba will produce -Lanman announce broadcasts at a frequency set by the parameter -\fIlm interval\fR. If set to auto -Samba will not send Lanman announce broadcasts by default but will -listen for them. If it hears such a broadcast on the wire it will -then start sending them at a frequency set by the parameter -\fIlm interval\fR. - -See also \fIlm interval -\fR. - -Default: \fBlm announce = auto\fR - -Example: \fBlm announce = yes\fR -.TP -\fBlm interval (G)\fR -If Samba is set to produce Lanman announce -broadcasts needed by OS/2 clients (see the \fIlm announce\fR parameter) then this -parameter defines the frequency in seconds with which they will be -made. If this is set to zero then no Lanman announcements will be -made despite the setting of the \fIlm announce\fR -parameter. - -See also \fIlm -announce\fR. - -Default: \fBlm interval = 60\fR - -Example: \fBlm interval = 120\fR -.TP -\fBload printers (G)\fR -A boolean variable that controls whether all -printers in the printcap will be loaded for browsing by default. -See the printers section for -more details. - -Default: \fBload printers = yes\fR -.TP -\fBlocal master (G)\fR -This option allows \fB nmbd(8)\fR to try and become a local master browser -on a subnet. If set to no then \fB nmbd\fR will not attempt to become a local master browser -on a subnet and will also lose in all browsing elections. By -default this value is set to yes. Setting this value to yes doesn't -mean that Samba will \fBbecome\fR the local master -browser on a subnet, just that \fBnmbd\fR will \fB participate\fR in elections for local master browser. - -Setting this value to no will cause \fBnmbd\fR -\fBnever\fR to become a local master browser. - -Default: \fBlocal master = yes\fR -.TP -\fBlock dir (G)\fR -Synonym for \fI lock directory\fR. -.TP -\fBlock directory (G)\fR -This option specifies the directory where lock -files will be placed. The lock files are used to implement the -\fImax connections\fR -option. - -Default: \fBlock directory = ${prefix}/var/locks\fR - -Example: \fBlock directory = /var/run/samba/locks\fR -.TP -\fBlock spin count (G)\fR -This parameter controls the number of times -that smbd should attempt to gain a byte range lock on the -behalf of a client request. Experiments have shown that -Windows 2k servers do not reply with a failure if the lock -could not be immediately granted, but try a few more times -in case the lock could later be aquired. This behavior -is used to support PC database formats such as MS Access -and FoxPro. - -Default: \fBlock spin count = 2\fR -.TP -\fBlock spin time (G)\fR -The time in microseconds that smbd should -pause before attempting to gain a failed lock. See -\fIlock spin -count\fR for more details. - -Default: \fBlock spin time = 10\fR -.TP -\fBlocking (S)\fR -This controls whether or not locking will be -performed by the server in response to lock requests from the -client. - -If \fBlocking = no\fR, all lock and unlock -requests will appear to succeed and all lock queries will report -that the file in question is available for locking. - -If \fBlocking = yes\fR, real locking will be performed -by the server. - -This option \fBmay\fR be useful for read-only -filesystems which \fBmay\fR not need locking (such as -CDROM drives), although setting this parameter of no -is not really recommended even in this case. - -Be careful about disabling locking either globally or in a -specific service, as lack of locking may result in data corruption. -You should never need to set this parameter. - -Default: \fBlocking = yes\fR -.TP -\fBlog file (G)\fR -This option allows you to override the name -of the Samba log file (also known as the debug file). - -This option takes the standard substitutions, allowing -you to have separate log files for each user or machine. - -Example: \fBlog file = /usr/local/samba/var/log.%m -\fR -.TP -\fBlog level (G)\fR -The value of the parameter (a astring) allows -the debug level (logging level) to be specified in the -\fIsmb.conf\fR file. This parameter has been -extended since the 2.2.x series, now it allow to specify the debug -level for multiple debug classes. This is to give greater -flexibility in the configuration of the system. - -The default will be the log level specified on -the command line or level zero if none was specified. - -Example: \fBlog level = 3 passdb:5 auth:10 winbind:2 -\fR -.TP -\fBlogon drive (G)\fR -This parameter specifies the local path to -which the home directory will be connected (see \fIlogon home\fR) -and is only used by NT Workstations. - -Note that this option is only useful if Samba is set up as a -logon server. - -Default: \fBlogon drive = z:\fR - -Example: \fBlogon drive = h:\fR -.TP -\fBlogon home (G)\fR -This parameter specifies the home directory -location when a Win95/98 or NT Workstation logs into a Samba PDC. -It allows you to do - -C:\\> \fBNET USE H: /HOME\fR - -from a command prompt, for example. - -This option takes the standard substitutions, allowing -you to have separate logon scripts for each user or machine. - -This parameter can be used with Win9X workstations to ensure -that roaming profiles are stored in a subdirectory of the user's -home directory. This is done in the following way: - -\fBlogon home = \\\\%N\\%U\\profile\fR - -This tells Samba to return the above string, with -substitutions made when a client requests the info, generally -in a NetUserGetInfo request. Win9X clients truncate the info to -\\\\server\\share when a user does \fBnet use /home\fR -but use the whole string when dealing with profiles. - -Note that in prior versions of Samba, the \fIlogon path\fR was returned rather than -\fIlogon home\fR. This broke \fBnet use -/home\fR but allowed profiles outside the home directory. -The current implementation is correct, and can be used for -profiles if you use the above trick. - -This option is only useful if Samba is set up as a logon -server. - -Default: \fBlogon home = "\\\\%N\\%U"\fR - -Example: \fBlogon home = "\\\\remote_smb_server\\%U"\fR -.TP -\fBlogon path (G)\fR -This parameter specifies the home directory -where roaming profiles (NTuser.dat etc files for Windows NT) are -stored. Contrary to previous versions of these manual pages, it has -nothing to do with Win 9X roaming profiles. To find out how to -handle roaming profiles for Win 9X system, see the \fIlogon home\fR parameter. - -This option takes the standard substitutions, allowing you -to have separate logon scripts for each user or machine. It also -specifies the directory from which the "Application Data", -(\fIdesktop\fR, \fIstart menu\fR, -\fInetwork neighborhood\fR, \fIprograms\fR -and other folders, and their contents, are loaded and displayed on -your Windows NT client. - -The share and the path must be readable by the user for -the preferences and directories to be loaded onto the Windows NT -client. The share must be writeable when the user logs in for the first -time, in order that the Windows NT client can create the NTuser.dat -and other directories. - -Thereafter, the directories and any of the contents can, -if required, be made read-only. It is not advisable that the -NTuser.dat file be made read-only - rename it to NTuser.man to -achieve the desired effect (a \fBMAN\fRdatory -profile). - -Windows clients can sometimes maintain a connection to -the [homes] share, even though there is no user logged in. -Therefore, it is vital that the logon path does not include a -reference to the homes share (i.e. setting this parameter to -\\%N\\%U\\profile_path will cause problems). - -This option takes the standard substitutions, allowing -you to have separate logon scripts for each user or machine. - -Note that this option is only useful if Samba is set up -as a logon server. - -Default: \fBlogon path = \\\\%N\\%U\\profile\fR - -Example: \fBlogon path = \\\\PROFILESERVER\\PROFILE\\%U\fR -.TP -\fBlogon script (G)\fR -This parameter specifies the batch file (.bat) or -NT command file (.cmd) to be downloaded and run on a machine when -a user successfully logs in. The file must contain the DOS -style CR/LF line endings. Using a DOS-style editor to create the -file is recommended. - -The script must be a relative path to the [netlogon] -service. If the [netlogon] service specifies a \fIpath\fR of \fI/usr/local/samba/netlogon -\fR, and \fBlogon script = STARTUP.BAT\fR, then -the file that will be downloaded is: - -\fI/usr/local/samba/netlogon/STARTUP.BAT\fR - -The contents of the batch file are entirely your choice. A -suggested command would be to add \fBNET TIME \\\\SERVER /SET -/YES\fR, to force every machine to synchronize clocks with -the same time server. Another use would be to add \fBNET USE -U: \\\\SERVER\\UTILS\fR for commonly used utilities, or \fB NET USE Q: \\\\SERVER\\ISO9001_QA\fR for example. - -Note that it is particularly important not to allow write -access to the [netlogon] share, or to grant users write permission -on the batch files in a secure environment, as this would allow -the batch files to be arbitrarily modified and security to be -breached. - -This option takes the standard substitutions, allowing you -to have separate logon scripts for each user or machine. - -This option is only useful if Samba is set up as a logon -server. - -Default: \fBno logon script defined\fR - -Example: \fBlogon script = scripts\\%U.bat\fR -.TP -\fBlppause command (S)\fR -This parameter specifies the command to be -executed on the server host in order to stop printing or spooling -a specific print job. - -This command should be a program or script which takes -a printer name and job number to pause the print job. One way -of implementing this is by using job priorities, where jobs -having a too low priority won't be sent to the printer. - -If a \fI%p\fR is given then the printer name -is put in its place. A \fI%j\fR is replaced with -the job number (an integer). On HPUX (see \fIprinting=hpux -\fR), if the \fI-p%p\fR option is added -to the lpq command, the job will show up with the correct status, i.e. -if the job priority is lower than the set fence priority it will -have the PAUSED status, whereas if the priority is equal or higher it -will have the SPOOLED or PRINTING status. - -Note that it is good practice to include the absolute path -in the lppause command as the PATH may not be available to the server. - -See also the \fIprinting -\fR parameter. - -Default: Currently no default value is given to -this string, unless the value of the \fIprinting\fR -parameter is SYSV, in which case the default is : - -\fBlp -i %p-%j -H hold\fR - -or if the value of the \fIprinting\fR parameter -is SOFTQ, then the default is: - -\fBqstat -s -j%j -h\fR - -Example for HPUX: \fBlppause command = /usr/bin/lpalt -%p-%j -p0\fR -.TP -\fBlpq cache time (G)\fR -This controls how long lpq info will be cached -for to prevent the \fBlpq\fR command being called too -often. A separate cache is kept for each variation of the \fB lpq\fR command used by the system, so if you use different -\fBlpq\fR commands for different users then they won't -share cache information. - -The cache files are stored in \fI/tmp/lpq.xxxx\fR -where xxxx is a hash of the \fBlpq\fR command in use. - -The default is 10 seconds, meaning that the cached results -of a previous identical \fBlpq\fR command will be used -if the cached data is less than 10 seconds old. A large value may -be advisable if your \fBlpq\fR command is very slow. - -A value of 0 will disable caching completely. - -See also the \fIprinting -\fR parameter. - -Default: \fBlpq cache time = 10\fR - -Example: \fBlpq cache time = 30\fR -.TP -\fBlpq command (S)\fR -This parameter specifies the command to be -executed on the server host in order to obtain \fBlpq -\fR-style printer status information. - -This command should be a program or script which -takes a printer name as its only parameter and outputs printer -status information. - -Currently nine styles of printer status information -are supported; BSD, AIX, LPRNG, PLP, SYSV, HPUX, QNX, CUPS, and SOFTQ. -This covers most UNIX systems. You control which type is expected -using the \fIprinting =\fR option. - -Some clients (notably Windows for Workgroups) may not -correctly send the connection number for the printer they are -requesting status information about. To get around this, the -server reports on the first printer service connected to by the -client. This only happens if the connection number sent is invalid. - -If a \fI%p\fR is given then the printer name -is put in its place. Otherwise it is placed at the end of the -command. - -Note that it is good practice to include the absolute path -in the \fIlpq command\fR as the \fB$PATH -\fR may not be available to the server. When compiled with -the CUPS libraries, no \fIlpq command\fR is -needed because smbd will make a library call to obtain the -print queue listing. - -See also the \fIprinting -\fR parameter. - -Default: \fBdepends on the setting of \fI printing\fB\fR - -Example: \fBlpq command = /usr/bin/lpq -P%p\fR -.TP -\fBlpresume command (S)\fR -This parameter specifies the command to be -executed on the server host in order to restart or continue -printing or spooling a specific print job. - -This command should be a program or script which takes -a printer name and job number to resume the print job. See -also the \fIlppause command -\fR parameter. - -If a \fI%p\fR is given then the printer name -is put in its place. A \fI%j\fR is replaced with -the job number (an integer). - -Note that it is good practice to include the absolute path -in the \fIlpresume command\fR as the PATH may not -be available to the server. - -See also the \fIprinting -\fR parameter. - -Default: Currently no default value is given -to this string, unless the value of the \fIprinting\fR -parameter is SYSV, in which case the default is : - -\fBlp -i %p-%j -H resume\fR - -or if the value of the \fIprinting\fR parameter -is SOFTQ, then the default is: - -\fBqstat -s -j%j -r\fR - -Example for HPUX: \fBlpresume command = /usr/bin/lpalt -%p-%j -p2\fR -.TP -\fBlprm command (S)\fR -This parameter specifies the command to be -executed on the server host in order to delete a print job. - -This command should be a program or script which takes -a printer name and job number, and deletes the print job. - -If a \fI%p\fR is given then the printer name -is put in its place. A \fI%j\fR is replaced with -the job number (an integer). - -Note that it is good practice to include the absolute -path in the \fIlprm command\fR as the PATH may not be -available to the server. - -See also the \fIprinting -\fR parameter. - -Default: \fBdepends on the setting of \fIprinting -\fB\fR - -Example 1: \fBlprm command = /usr/bin/lprm -P%p %j -\fR - -Example 2: \fBlprm command = /usr/bin/cancel %p-%j -\fR -.TP -\fBmachine password timeout (G)\fR -If a Samba server is a member of a Windows -NT Domain (see the security = domain) -parameter) then periodically a running smbd(8) process will try and change the MACHINE ACCOUNT -PASSWORD stored in the TDB called \fIprivate/secrets.tdb -\fR. This parameter specifies how often this password -will be changed, in seconds. The default is one week (expressed in -seconds), the same as a Windows NT Domain member server. - -See also \fBsmbpasswd(8) -\fR and the security = domain) parameter. - -Default: \fBmachine password timeout = 604800\fR -.TP -\fBmagic output (S)\fR -This parameter specifies the name of a file -which will contain output created by a magic script (see the -\fImagic script\fR -parameter below). - -Warning: If two clients use the same \fImagic script -\fR in the same directory the output file content -is undefined. - -Default: \fBmagic output = .out -\fR - -Example: \fBmagic output = myfile.txt\fR -.TP -\fBmagic script (S)\fR -This parameter specifies the name of a file which, -if opened, will be executed by the server when the file is closed. -This allows a UNIX script to be sent to the Samba host and -executed on behalf of the connected user. - -Scripts executed in this way will be deleted upon -completion assuming that the user has the appropriate level -of privilege and the file permissions allow the deletion. - -If the script generates output, output will be sent to -the file specified by the \fI magic output\fR parameter (see above). - -Note that some shells are unable to interpret scripts -containing CR/LF instead of CR as -the end-of-line marker. Magic scripts must be executable -\fBas is\fR on the host, which for some hosts and -some shells will require filtering at the DOS end. - -Magic scripts are \fBEXPERIMENTAL\fR and -should \fBNOT\fR be relied upon. - -Default: \fBNone. Magic scripts disabled.\fR - -Example: \fBmagic script = user.csh\fR -.TP -\fBmangle case (S)\fR -See the section on NAME MANGLING - -Default: \fBmangle case = no\fR -.TP -\fBmangled map (S)\fR -This is for those who want to directly map UNIX -file names which cannot be represented on Windows/DOS. The mangling -of names is not always what is needed. In particular you may have -documents with file extensions that differ between DOS and UNIX. -For example, under UNIX it is common to use \fI.html\fR -for HTML files, whereas under Windows/DOS \fI.htm\fR -is more commonly used. - -So to map \fIhtml\fR to \fIhtm\fR -you would use: - -\fBmangled map = (*.html *.htm)\fR - -One very useful case is to remove the annoying \fI;1 -\fR off the ends of filenames on some CDROMs (only visible -under some UNIXes). To do this use a map of (*;1 *;). - -Default: \fBno mangled map\fR - -Example: \fBmangled map = (*;1 *;)\fR -.TP -\fBmangled names (S)\fR -This controls whether non-DOS names under UNIX -should be mapped to DOS-compatible names ("mangled") and made visible, -or whether non-DOS names should simply be ignored. - -See the section on NAME MANGLING for details on how to control the mangling process. - -If mangling is used then the mangling algorithm is as follows: -.RS -.TP 0.2i -\(bu -The first (up to) five alphanumeric characters -before the rightmost dot of the filename are preserved, forced -to upper case, and appear as the first (up to) five characters -of the mangled name. -.TP 0.2i -\(bu -A tilde "~" is appended to the first part of the mangled -name, followed by a two-character unique sequence, based on the -original root name (i.e., the original filename minus its final -extension). The final extension is included in the hash calculation -only if it contains any upper case characters or is longer than three -characters. - -Note that the character to use may be specified using -the \fImangling char\fR -option, if you don't like '~'. -.TP 0.2i -\(bu -The first three alphanumeric characters of the final -extension are preserved, forced to upper case and appear as the -extension of the mangled name. The final extension is defined as that -part of the original filename after the rightmost dot. If there are no -dots in the filename, the mangled name will have no extension (except -in the case of "hidden files" - see below). -.TP 0.2i -\(bu -Files whose UNIX name begins with a dot will be -presented as DOS hidden files. The mangled name will be created as -for other filenames, but with the leading dot removed and "___" as -its extension regardless of actual original extension (that's three -underscores). -.RE - -The two-digit hash value consists of upper case -alphanumeric characters. - -This algorithm can cause name collisions only if files -in a directory share the same first five alphanumeric characters. -The probability of such a clash is 1/1300. - -The name mangling (if enabled) allows a file to be -copied between UNIX directories from Windows/DOS while retaining -the long UNIX filename. UNIX files can be renamed to a new extension -from Windows/DOS and will retain the same basename. Mangled names -do not change between sessions. - -Default: \fBmangled names = yes\fR -.TP -\fBmangling method (G)\fR -controls the algorithm used for the generating -the mangled names. Can take two different values, "hash" and -"hash2". "hash" is the default and is the algorithm that has been -used in Samba for many years. "hash2" is a newer and considered -a better algorithm (generates less collisions) in the names. -However, many Win32 applications store the mangled names and so -changing to the new algorithm must not be done -lightly as these applications may break unless reinstalled. - -Default: \fBmangling method = hash2\fR - -Example: \fBmangling method = hash\fR -.TP -\fBmangle prefix (G)\fR -controls the number of prefix -characters from the original name used when generating -the mangled names. A larger value will give a weaker -hash and therefore more name collisions. The minimum -value is 1 and the maximum value is 6. - -Default: \fBmangle prefix = 1\fR - -Example: \fBmangle prefix = 4\fR -.TP -\fBmangled stack (G)\fR -This parameter controls the number of mangled names -that should be cached in the Samba server smbd(8) - -This stack is a list of recently mangled base names -(extensions are only maintained if they are longer than 3 characters -or contains upper case characters). - -The larger this value, the more likely it is that mangled -names can be successfully converted to correct long UNIX names. -However, large stack sizes will slow most directory accesses. Smaller -stacks save memory in the server (each stack element costs 256 bytes). - -It is not possible to absolutely guarantee correct long -filenames, so be prepared for some surprises! - -Default: \fBmangled stack = 50\fR - -Example: \fBmangled stack = 100\fR -.TP -\fBmangling char (S)\fR -This controls what character is used as -the \fBmagic\fR character in name mangling. The default is a '~' -but this may interfere with some software. Use this option to set -it to whatever you prefer. - -Default: \fBmangling char = ~\fR - -Example: \fBmangling char = ^\fR -.TP -\fBmap archive (S)\fR -This controls whether the DOS archive attribute -should be mapped to the UNIX owner execute bit. The DOS archive bit -is set when a file has been modified since its last backup. One -motivation for this option it to keep Samba/your PC from making -any file it touches from becoming executable under UNIX. This can -be quite annoying for shared source code, documents, etc... - -Note that this requires the \fIcreate mask\fR -parameter to be set such that owner execute bit is not masked out -(i.e. it must include 100). See the parameter \fIcreate mask\fR for details. - -Default: \fBmap archive = yes\fR -.TP -\fBmap hidden (S)\fR -This controls whether DOS style hidden files -should be mapped to the UNIX world execute bit. - -Note that this requires the \fIcreate mask\fR -to be set such that the world execute bit is not masked out (i.e. -it must include 001). See the parameter \fIcreate mask\fR for details. - -Default: \fBmap hidden = no\fR -.TP -\fBmap system (S)\fR -This controls whether DOS style system files -should be mapped to the UNIX group execute bit. - -Note that this requires the \fIcreate mask\fR -to be set such that the group execute bit is not masked out (i.e. -it must include 010). See the parameter \fIcreate mask\fR for details. - -Default: \fBmap system = no\fR -.TP -\fBmap to guest (G)\fR -This parameter is only useful in security modes other than \fIsecurity = share\fR -- i.e. user, server, -and domain. - -This parameter can take three different values, which tell -smbd(8) what to do with user -login requests that don't match a valid UNIX user in some way. - -The three settings are : -.RS -.TP 0.2i -\(bu -Never - Means user login -requests with an invalid password are rejected. This is the -default. -.TP 0.2i -\(bu -Bad User - Means user -logins with an invalid password are rejected, unless the username -does not exist, in which case it is treated as a guest login and -mapped into the \fI guest account\fR. -.TP 0.2i -\(bu -Bad Password - Means user logins -with an invalid password are treated as a guest login and mapped -into the guest account. Note that -this can cause problems as it means that any user incorrectly typing -their password will be silently logged on as "guest" - and -will not know the reason they cannot access files they think -they should - there will have been no message given to them -that they got their password wrong. Helpdesk services will -\fBhate\fR you if you set the \fImap to -guest\fR parameter this way :-). -.RE - -Note that this parameter is needed to set up "Guest" -share services when using \fIsecurity\fR modes other than -share. This is because in these modes the name of the resource being -requested is \fBnot\fR sent to the server until after -the server has successfully authenticated the client so the server -cannot make authentication decisions at the correct time (connection -to the share) for "Guest" shares. - -For people familiar with the older Samba releases, this -parameter maps to the old compile-time setting of the GUEST_SESSSETUP value in local.h. - -Default: \fBmap to guest = Never\fR - -Example: \fBmap to guest = Bad User\fR -.TP -\fBmax connections (S)\fR -This option allows the number of simultaneous -connections to a service to be limited. If \fImax connections -\fR is greater than 0 then connections will be refused if -this number of connections to the service are already open. A value -of zero mean an unlimited number of connections may be made. - -Record lock files are used to implement this feature. The -lock files will be stored in the directory specified by the \fIlock directory\fR -option. - -Default: \fBmax connections = 0\fR - -Example: \fBmax connections = 10\fR -.TP -\fBmax disk size (G)\fR -This option allows you to put an upper limit -on the apparent size of disks. If you set this option to 100 -then all shares will appear to be not larger than 100 MB in -size. - -Note that this option does not limit the amount of -data you can put on the disk. In the above case you could still -store much more than 100 MB on the disk, but if a client ever asks -for the amount of free disk space or the total disk size then the -result will be bounded by the amount specified in \fImax -disk size\fR. - -This option is primarily useful to work around bugs -in some pieces of software that can't handle very large disks, -particularly disks over 1GB in size. - -A \fImax disk size\fR of 0 means no limit. - -Default: \fBmax disk size = 0\fR - -Example: \fBmax disk size = 1000\fR -.TP -\fBmax log size (G)\fR -This option (an integer in kilobytes) specifies -the max size the log file should grow to. Samba periodically checks -the size and if it is exceeded it will rename the file, adding -a \fI.old\fR extension. - -A size of 0 means no limit. - -Default: \fBmax log size = 5000\fR - -Example: \fBmax log size = 1000\fR -.TP -\fBmax mux (G)\fR -This option controls the maximum number of -outstanding simultaneous SMB operations that Samba tells the client -it will allow. You should never need to set this parameter. - -Default: \fBmax mux = 50\fR -.TP -\fBmax open files (G)\fR -This parameter limits the maximum number of -open files that one smbd(8) file -serving process may have open for a client at any one time. The -default for this parameter is set very high (10,000) as Samba uses -only one bit per unopened file. - -The limit of the number of open files is usually set -by the UNIX per-process file descriptor limit rather than -this parameter so you should never need to touch this parameter. - -Default: \fBmax open files = 10000\fR -.TP -\fBmax print jobs (S)\fR -This parameter limits the maximum number of -jobs allowable in a Samba printer queue at any given moment. -If this number is exceeded, \fB smbd(8)\fR will remote "Out of Space" to the client. -See all \fItotal -print jobs\fR. - -Default: \fBmax print jobs = 1000\fR - -Example: \fBmax print jobs = 5000\fR -.TP -\fBmax protocol (G)\fR -The value of the parameter (a string) is the highest -protocol level that will be supported by the server. - -Possible values are : -.RS -.TP 0.2i -\(bu -CORE: Earliest version. No -concept of user names. -.TP 0.2i -\(bu -COREPLUS: Slight improvements on -CORE for efficiency. -.TP 0.2i -\(bu -LANMAN1: First \fB modern\fR version of the protocol. Long filename -support. -.TP 0.2i -\(bu -LANMAN2: Updates to Lanman1 protocol. -.TP 0.2i -\(bu -NT1: Current up to date version of -the protocol. Used by Windows NT. Known as CIFS. -.RE - -Normally this option should not be set as the automatic -negotiation phase in the SMB protocol takes care of choosing -the appropriate protocol. - -See also \fImin -protocol\fR - -Default: \fBmax protocol = NT1\fR - -Example: \fBmax protocol = LANMAN1\fR -.TP -\fBmax smbd processes (G)\fR -This parameter limits the maximum number of -\fBsmbd(8)\fR -processes concurrently running on a system and is intended -as a stopgap to prevent degrading service to clients in the event -that the server has insufficient resources to handle more than this -number of connections. Remember that under normal operating -conditions, each user will have an smbd associated with him or her -to handle connections to all shares from a given host. - -Default: \fBmax smbd processes = 0\fR ## no limit - -Example: \fBmax smbd processes = 1000\fR -.TP -\fBmax ttl (G)\fR -This option tells nmbd(8) -what the default 'time to live' of NetBIOS names should be (in seconds) -when \fBnmbd\fR is requesting a name using either a -broadcast packet or from a WINS server. You should never need to -change this parameter. The default is 3 days. - -Default: \fBmax ttl = 259200\fR -.TP -\fBmax wins ttl (G)\fR -This option tells nmbd(8) - when acting as a WINS server ( \fIwins support = yes\fR) what the maximum -\&'time to live' of NetBIOS names that \fBnmbd\fR -will grant will be (in seconds). You should never need to change this -parameter. The default is 6 days (518400 seconds). - -See also the \fImin -wins ttl\fR parameter. - -Default: \fBmax wins ttl = 518400\fR -.TP -\fBmax xmit (G)\fR -This option controls the maximum packet size -that will be negotiated by Samba. The default is 65535, which -is the maximum. In some cases you may find you get better performance -with a smaller value. A value below 2048 is likely to cause problems. - -Default: \fBmax xmit = 65535\fR - -Example: \fBmax xmit = 8192\fR -.TP -\fBmessage command (G)\fR -This specifies what command to run when the -server receives a WinPopup style message. - -This would normally be a command that would -deliver the message somehow. How this is to be done is -up to your imagination. - -An example is: - -\fBmessage command = csh -c 'xedit %s;rm %s' &\fR - -This delivers the message using \fBxedit\fR, then -removes it afterwards. \fBNOTE THAT IT IS VERY IMPORTANT -THAT THIS COMMAND RETURN IMMEDIATELY\fR. That's why I -have the '&' on the end. If it doesn't return immediately then -your PCs may freeze when sending messages (they should recover -after 30 seconds, hopefully). - -All messages are delivered as the global guest user. -The command takes the standard substitutions, although \fI %u\fR won't work (\fI%U\fR may be better -in this case). - -Apart from the standard substitutions, some additional -ones apply. In particular: -.RS -.TP 0.2i -\(bu -\fI%s\fR = the filename containing -the message. -.TP 0.2i -\(bu -\fI%t\fR = the destination that -the message was sent to (probably the server name). -.TP 0.2i -\(bu -\fI%f\fR = who the message -is from. -.RE - -You could make this command send mail, or whatever else -takes your fancy. Please let us know of any really interesting -ideas you have. - -Here's a way of sending the messages as mail to root: - -\fBmessage command = /bin/mail -s 'message from %f on -%m' root < %s; rm %s\fR - -If you don't have a message command then the message -won't be delivered and Samba will tell the sender there was -an error. Unfortunately WfWg totally ignores the error code -and carries on regardless, saying that the message was delivered. - -If you want to silently delete it then try: - -\fBmessage command = rm %s\fR - -Default: \fBno message command\fR - -Example: \fBmessage command = csh -c 'xedit %s; -rm %s' &\fR -.TP -\fBmin passwd length (G)\fR -Synonym for \fImin password length\fR. -.TP -\fBmin password length (G)\fR -This option sets the minimum length in characters -of a plaintext password that \fBsmbd\fR will accept when performing -UNIX password changing. - -See also \fIunix -password sync\fR, \fIpasswd program\fR and \fIpasswd chat debug\fR -\&. - -Default: \fBmin password length = 5\fR -.TP -\fBmin print space (S)\fR -This sets the minimum amount of free disk -space that must be available before a user will be able to spool -a print job. It is specified in kilobytes. The default is 0, which -means a user can always spool a print job. - -See also the \fIprinting -\fR parameter. - -Default: \fBmin print space = 0\fR - -Example: \fBmin print space = 2000\fR -.TP -\fBmin protocol (G)\fR -The value of the parameter (a string) is the -lowest SMB protocol dialect than Samba will support. Please refer -to the \fImax protocol\fR -parameter for a list of valid protocol names and a brief description -of each. You may also wish to refer to the C source code in -\fIsource/smbd/negprot.c\fR for a listing of known protocol -dialects supported by clients. - -If you are viewing this parameter as a security measure, you should -also refer to the \fIlanman -auth\fR parameter. Otherwise, you should never need -to change this parameter. - -Default : \fBmin protocol = CORE\fR - -Example : \fBmin protocol = NT1\fR # disable DOS -clients -.TP -\fBmin wins ttl (G)\fR -This option tells nmbd(8) -when acting as a WINS server (\fI wins support = yes\fR) what the minimum 'time to live' -of NetBIOS names that \fBnmbd\fR will grant will be (in -seconds). You should never need to change this parameter. The default -is 6 hours (21600 seconds). - -Default: \fBmin wins ttl = 21600\fR -.TP -\fBmsdfs proxy (S)\fR -This parameter indicates that the share is a -stand-in for another CIFS share whose location is specified by -the value of the parameter. When clients attempt to connect to -this share, they are redirected to the proxied share using -the SMB-Dfs protocol. - -Only Dfs roots can act as proxy shares. Take a look at the -\fImsdfs root\fR -and -\fIhost msdfs\fR -options to find out how to set up a Dfs root share. - -Example: \fBmsdfs proxy = \\otherserver\\someshare\fR -.TP -\fBmsdfs root (S)\fR -This boolean parameter is only available if -Samba is configured and compiled with the \fB --with-msdfs\fR option. If set to yes, -Samba treats the share as a Dfs root and allows clients to browse -the distributed file system tree rooted at the share directory. -Dfs links are specified in the share directory by symbolic -links of the form \fImsdfs:serverA\\shareA,serverB\\shareB\fR -and so on. For more information on setting up a Dfs tree -on Samba, refer to msdfs_setup.html - - -See also \fIhost msdfs -\fR - -Default: \fBmsdfs root = no\fR -.TP -\fBname cache timeout (G)\fR -Specifies the number of seconds it takes before -entries in samba's hostname resolve cache time out. If -the timeout is set to 0. the caching is disabled. - -Default: \fBname cache timeout = 660\fR - -Example: \fBname cache timeout = 0\fR -.TP -\fBname resolve order (G)\fR -This option is used by the programs in the Samba -suite to determine what naming services to use and in what order -to resolve host names to IP addresses. The option takes a space -separated string of name resolution options. - -The options are :"lmhosts", "host", "wins" and "bcast". They -cause names to be resolved as follows : -.RS -.TP 0.2i -\(bu -lmhosts : Lookup an IP -address in the Samba lmhosts file. If the line in lmhosts has -no name type attached to the NetBIOS name (see the lmhosts(5) for details) then -any name type matches for lookup. -.TP 0.2i -\(bu -host : Do a standard host -name to IP address resolution, using the system \fI/etc/hosts -\fR, NIS, or DNS lookups. This method of name resolution -is operating system depended for instance on IRIX or Solaris this -may be controlled by the \fI/etc/nsswitch.conf\fR -file. Note that this method is only used if the NetBIOS name -type being queried is the 0x20 (server) name type, otherwise -it is ignored. -.TP 0.2i -\(bu -wins : Query a name with -the IP address listed in the \fI wins server\fR parameter. If no WINS server has -been specified this method will be ignored. -.TP 0.2i -\(bu -bcast : Do a broadcast on -each of the known local interfaces listed in the \fIinterfaces\fR -parameter. This is the least reliable of the name resolution -methods as it depends on the target host being on a locally -connected subnet. -.RE - -Default: \fBname resolve order = lmhosts host wins bcast -\fR - -Example: \fBname resolve order = lmhosts bcast host -\fR - -This will cause the local lmhosts file to be examined -first, followed by a broadcast attempt, followed by a normal -system hostname lookup. -.TP -\fBnetbios aliases (G)\fR -This is a list of NetBIOS names that nmbd(8) will advertise as additional -names by which the Samba server is known. This allows one machine -to appear in browse lists under multiple names. If a machine is -acting as a browse server or logon server none -of these names will be advertised as either browse server or logon -servers, only the primary name of the machine will be advertised -with these capabilities. - -See also \fInetbios -name\fR. - -Default: \fBempty string (no additional names)\fR - -Example: \fBnetbios aliases = TEST TEST1 TEST2\fR -.TP -\fBnetbios name (G)\fR -This sets the NetBIOS name by which a Samba -server is known. By default it is the same as the first component -of the host's DNS name. If a machine is a browse server or -logon server this name (or the first component -of the hosts DNS name) will be the name that these services are -advertised under. - -See also \fInetbios -aliases\fR. - -Default: \fBmachine DNS name\fR - -Example: \fBnetbios name = MYNAME\fR -.TP -\fBnetbios scope (G)\fR -This sets the NetBIOS scope that Samba will -operate under. This should not be set unless every machine -on your LAN also sets this value. -.TP -\fBnis homedir (G)\fR -Get the home share server from a NIS map. For -UNIX systems that use an automounter, the user's home directory -will often be mounted on a workstation on demand from a remote -server. - -When the Samba logon server is not the actual home directory -server, but is mounting the home directories via NFS then two -network hops would be required to access the users home directory -if the logon server told the client to use itself as the SMB server -for home directories (one over SMB and one over NFS). This can -be very slow. - -This option allows Samba to return the home share as -being on a different server to the logon server and as -long as a Samba daemon is running on the home directory server, -it will be mounted on the Samba client directly from the directory -server. When Samba is returning the home share to the client, it -will consult the NIS map specified in \fIhomedir map\fR and return the server -listed there. - -Note that for this option to work there must be a working -NIS system and the Samba server with this option must also -be a logon server. - -Default: \fBnis homedir = no\fR -.TP -\fBnon unix account range (G)\fR -The non unix account range parameter specifies -the range of 'user ids' that are allocated by the various 'non unix -account' passdb backends. These backends allow -the storage of passwords for users who don't exist in /etc/passwd. -This is most often used for machine account creation. -This range of ids should have no existing local or NIS users within -it as strange conflicts can occur otherwise. - -NOTE: These userids never appear on the system and Samba will never -\&'become' these users. They are used only to ensure that the algorithmic -RID mapping does not conflict with normal users. - -Default: \fBnon unix account range = -\fR - -Example: \fBnon unix account range = 10000-20000\fR -.TP -\fBnt acl support (S)\fR -This boolean parameter controls whether -smbd(8) will attempt to map -UNIX permissions into Windows NT access control lists. -This parameter was formally a global parameter in releases -prior to 2.2.2. - -Default: \fBnt acl support = yes\fR -.TP -\fBnt pipe support (G)\fR -This boolean parameter controls whether -smbd(8) will allow Windows NT -clients to connect to the NT SMB specific IPC$ -pipes. This is a developer debugging option and can be left -alone. - -Default: \fBnt pipe support = yes\fR -.TP -\fBnt status support (G)\fR -This boolean parameter controls whether smbd(8) will negotiate NT specific status -support with Windows NT/2k/XP clients. This is a developer -debugging option and should be left alone. -If this option is set to no then Samba offers -exactly the same DOS error codes that versions prior to Samba 2.2.3 -reported. - -You should not need to ever disable this parameter. - -Default: \fBnt status support = yes\fR -.TP -\fBnull passwords (G)\fR -Allow or disallow client access to accounts -that have null passwords. - -See also smbpasswd (5) - -Default: \fBnull passwords = no\fR -.TP -\fBobey pam restrictions (G)\fR -When Samba 2.2 is configured to enable PAM support -(i.e. --with-pam), this parameter will control whether or not Samba -should obey PAM's account and session management directives. The -default behavior is to use PAM for clear text authentication only -and to ignore any account or session management. Note that Samba -always ignores PAM for authentication in the case of \fIencrypt passwords = yes\fR -\&. The reason is that PAM modules cannot support the challenge/response -authentication mechanism needed in the presence of SMB password encryption. - -Default: \fBobey pam restrictions = no\fR -.TP -\fBonly user (S)\fR -This is a boolean option that controls whether -connections with usernames not in the \fIuser\fR -list will be allowed. By default this option is disabled so that a -client can supply a username to be used by the server. Enabling -this parameter will force the server to only use the login -names from the \fIuser\fR list and is only really -useful in share level -security. - -Note that this also means Samba won't try to deduce -usernames from the service name. This can be annoying for -the [homes] section. To get around this you could use \fBuser = -%S\fR which means your \fIuser\fR list -will be just the service name, which for home directories is the -name of the user. - -See also the \fIuser\fR -parameter. - -Default: \fBonly user = no\fR -.TP -\fBonly guest (S)\fR -A synonym for \fI guest only\fR. -.TP -\fBoplock break wait time (G)\fR -This is a tuning parameter added due to bugs in -both Windows 9x and WinNT. If Samba responds to a client too -quickly when that client issues an SMB that can cause an oplock -break request, then the network client can fail and not respond -to the break request. This tuning parameter (which is set in milliseconds) -is the amount of time Samba will wait before sending an oplock break -request to such (broken) clients. - -\fBDO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ -AND UNDERSTOOD THE SAMBA OPLOCK CODE\fR. - -Default: \fBoplock break wait time = 0\fR -.TP -\fBoplock contention limit (S)\fR -This is a \fBvery\fR advanced -smbd(8) tuning option to -improve the efficiency of the granting of oplocks under multiple -client contention for the same file. - -In brief it specifies a number, which causes smbd not to -grant an oplock even when requested if the approximate number of -clients contending for an oplock on the same file goes over this -limit. This causes \fBsmbd\fR to behave in a similar -way to Windows NT. - -\fBDO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ -AND UNDERSTOOD THE SAMBA OPLOCK CODE\fR. - -Default: \fBoplock contention limit = 2\fR -.TP -\fBoplocks (S)\fR -This boolean option tells \fBsmbd\fR whether to -issue oplocks (opportunistic locks) to file open requests on this -share. The oplock code can dramatically (approx. 30% or more) improve -the speed of access to files on Samba servers. It allows the clients -to aggressively cache files locally and you may want to disable this -option for unreliable network environments (it is turned on by -default in Windows NT Servers). For more information see the file -\fISpeed.txt\fR in the Samba \fIdocs/\fR -directory. - -Oplocks may be selectively turned off on certain files with a -share. See the \fI veto oplock files\fR parameter. On some systems -oplocks are recognized by the underlying operating system. This -allows data synchronization between all access to oplocked files, -whether it be via Samba or NFS or a local UNIX process. See the -\fIkernel oplocks\fR parameter for details. - -See also the \fIkernel -oplocks\fR and \fI level2 oplocks\fR parameters. - -Default: \fBoplocks = yes\fR -.TP -\fBntlm auth (G)\fR -This parameter determines whether or not smbd will -attempt to authenticate users using the NTLM password hash. -If disabled, only the lanman password hashes will be used. - -Please note that at least this option or \fBlanman auth\fR should be enabled in order to be able to log in. - -Default : \fBntlm auth = yes\fR -.TP -\fBos level (G)\fR -This integer value controls what level Samba -advertises itself as for browse elections. The value of this -parameter determines whether nmbd(8) -has a chance of becoming a local master browser for the \fI WORKGROUP\fR in the local broadcast area. - -\fBNote :\fRBy default, Samba will win -a local master browsing election over all Microsoft operating -systems except a Windows NT 4.0/2000 Domain Controller. This -means that a misconfigured Samba host can effectively isolate -a subnet for browsing purposes. See \fIBROWSING.txt -\fR in the Samba \fIdocs/\fR directory -for details. - -Default: \fBos level = 20\fR - -Example: \fBos level = 65 \fR -.TP -\fBos2 driver map (G)\fR -The parameter is used to define the absolute -path to a file containing a mapping of Windows NT printer driver -names to OS/2 printer driver names. The format is: - - = . - -For example, a valid entry using the HP LaserJet 5 -printer driver would appear as \fBHP LaserJet 5L = LASERJET.HP -LaserJet 5L\fR. - -The need for the file is due to the printer driver namespace -problem described in the Samba -Printing HOWTO For more details on OS/2 clients, please -refer to the OS2-Client-HOWTO - containing in the Samba documentation. - -Default: \fBos2 driver map = -\fR -.TP -\fBpam password change (G)\fR -With the addition of better PAM support in Samba 2.2, -this parameter, it is possible to use PAM's password change control -flag for Samba. If enabled, then PAM will be used for password -changes when requested by an SMB client instead of the program listed in -\fIpasswd program\fR. -It should be possible to enable this without changing your -\fIpasswd chat\fR -parameter for most setups. - -Default: \fBpam password change = no\fR -.TP -\fBpanic action (G)\fR -This is a Samba developer option that allows a -system command to be called when either smbd(8) -crashes. This is usually used to draw attention to the fact that -a problem occurred. - -Default: \fBpanic action = \fR - -Example: \fBpanic action = "/bin/sleep 90000"\fR -.TP -\fBparanoid server security (G)\fR -Some version of NT 4.x allow non-guest -users with a bad passowrd. When this option is enabled, samba will not -use a broken NT 4.x server as password server, but instead complain -to the logs and exit. - -Default: \fBparanoid server security = yes\fR -.TP -\fBpassdb backend (G)\fR -This option allows the administrator to chose which backends to retrieve and store passwords with. This allows (for example) both -smbpasswd and tdbsam to be used without a recompile. -Multiple backends can be specified, separated by spaces. The backends will be searched in the order they are specified. New users are always added to the first backend specified. -Experimental backends must still be selected -(eg --with-tdbsam) at configure time. - -This parameter is in two parts, the backend's name, and a 'location' -string that has meaning only to that particular backed. These are separated -by a : character. - -Available backends can include: -.RS -.TP 0.2i -\(bu -\fBsmbpasswd\fR - The default smbpasswd -backend. Takes a path to the smbpasswd file as an optional argument. -.TP 0.2i -\(bu -\fBsmbpasswd_nua\fR - The smbpasswd -backend, but with support for 'not unix accounts'. -Takes a path to the smbpasswd file as an optional argument. - -See also \fInon unix account range\fR -.TP 0.2i -\(bu -\fBtdbsam\fR - The TDB based password storage -backend. Takes a path to the TDB as an optional argument (defaults to passdb.tdb -in the \fIprivate dir\fR directory. -.TP 0.2i -\(bu -\fBtdbsam_nua\fR - The TDB based password storage -backend, with non unix account support. Takes a path to the TDB as an optional argument (defaults to passdb.tdb -in the \fIprivate dir\fR directory. - -See also \fInon unix account range\fR -.TP 0.2i -\(bu -\fBldapsam\fR - The LDAP based passdb -backend. Takes an LDAP URL as an optional argument (defaults to -\fBldap://localhost\fR) -.TP 0.2i -\(bu -\fBldapsam_nua\fR - The LDAP based passdb -backend, with non unix account support. Takes an LDAP URL as an optional argument (defaults to -\fBldap://localhost\fR) - -Note: In this module, any account without a matching POSIX account is regarded -as 'non unix'. - -See also \fInon unix account -range\fR - -LDAP connections should be secured where -possible. This may be done using either -Start-TLS (see \fIldap ssl\fR) or by -specifying \fIldaps://\fR in -the URL argument. -.TP 0.2i -\(bu -\fBnisplussam\fR - The NIS+ based passdb backend. Takes name NIS domain as an optional argument. Only works with sun NIS+ servers. -.TP 0.2i -\(bu -\fBplugin\fR - Allows Samba to load an -arbitary passdb backend from the .so specified as a compulsary argument. - -Any characters after the (optional) second : are passed to the plugin -for its own processing -.TP 0.2i -\(bu -\fBunixsam\fR - (EXPERIMENTAL) Allows samba to map all (other) available unix users - -This backend uses the standard unix database for retrieving users. Users included -in this pdb are NOT listed in samba user listings and users included in this pdb won't be -able to login. The use of this backend is to always be able to display the owner of a file -on the samba server - even when the user doesn't have a 'real' samba account in one of the -other passdb backends. - -This backend should always be the last backend listed, since it contains all users in -the unix passdb and might 'override' mappings if specified earlier. It's meant to only return -accounts for users that aren't covered by the previous backends. -.RE - -Default: \fBpassdb backend = smbpasswd guest\fR - -Example: \fBpassdb backend = tdbsam:/etc/samba/private/passdb.tdb smbpasswd:/etc/samba/smbpasswd \fR - -Example: \fBpassdb backend = ldapsam_nua:ldaps://ldap.example.com \fR - -Example: \fBpassdb backend = plugin:/usr/local/samba/lib/my_passdb.so:my_plugin_args tdbsam:/etc/samba/private/passdb.tdb\fR -.TP -\fBpasswd chat (G)\fR -This string controls the \fB"chat"\fR -conversation that takes places between smbd and the local password changing -program to change the user's password. The string describes a -sequence of response-receive pairs that smbd(8) uses to determine what to send to the -\fIpasswd program\fR -and what to expect back. If the expected output is not -received then the password is not changed. - -This chat sequence is often quite site specific, depending -on what local methods are used for password control (such as NIS -etc). - -Note that this parameter only is only used if the \fIunix -password sync\fR parameter is set to yes. This -sequence is then called \fBAS ROOT\fR when the SMB password -in the smbpasswd file is being changed, without access to the old -password cleartext. This means that root must be able to reset the user's password -without knowing the text of the previous password. In the presence of NIS/YP, -this means that the passwd program must be -executed on the NIS master. - -The string can contain the macro \fI%n\fR which is substituted -for the new password. The chat sequence can also contain the standard -macros \\n, \\r, \\t and \\s to give line-feed, -carriage-return, tab and space. The chat sequence string can also contain -a '*' which matches any sequence of characters. -Double quotes can be used to collect strings with spaces -in them into a single string. - -If the send string in any part of the chat sequence -is a full stop ".", then no string is sent. Similarly, -if the expect string is a full stop then no string is expected. - -If the \fIpam -password change\fR parameter is set to yes, the chat pairs -may be matched in any order, and success is determined by the PAM result, -not any particular output. The \\n macro is ignored for PAM conversions. - -See also \fIunix password -sync\fR, \fI passwd program\fR , \fIpasswd chat debug\fR and \fIpam password change\fR. - -Default: \fBpasswd chat = *new*password* %n\\n -*new*password* %n\\n *changed*\fR - -Example: \fBpasswd chat = "*Enter OLD password*" %o\\n -"*Enter NEW password*" %n\\n "*Reenter NEW password*" %n\\n "*Password -changed*"\fR -.TP -\fBpasswd chat debug (G)\fR -This boolean specifies if the passwd chat script -parameter is run in \fBdebug\fR mode. In this mode the -strings passed to and received from the passwd chat are printed -in the smbd(8) log with a -\fIdebug level\fR -of 100. This is a dangerous option as it will allow plaintext passwords -to be seen in the \fBsmbd\fR log. It is available to help -Samba admins debug their \fIpasswd chat\fR scripts -when calling the \fIpasswd program\fR and should -be turned off after this has been done. This option has no effect if the -\fIpam password change\fR -paramter is set. This parameter is off by default. - -See also \fIpasswd chat\fR -, \fIpam password change\fR -, \fIpasswd program\fR -\&. - -Default: \fBpasswd chat debug = no\fR -.TP -\fBpasswd program (G)\fR -The name of a program that can be used to set -UNIX user passwords. Any occurrences of \fI%u\fR -will be replaced with the user name. The user name is checked for -existence before calling the password changing program. - -Also note that many passwd programs insist in \fBreasonable -\fR passwords, such as a minimum length, or the inclusion -of mixed case chars and digits. This can pose a problem as some clients -(such as Windows for Workgroups) uppercase the password before sending -it. - -\fBNote\fR that if the \fIunix -password sync\fR parameter is set to yes -then this program is called \fBAS ROOT\fR -before the SMB password in the smbpasswd(5) - file is changed. If this UNIX password change fails, then -\fBsmbd\fR will fail to change the SMB password also -(this is by design). - -If the \fIunix password sync\fR parameter -is set this parameter \fBMUST USE ABSOLUTE PATHS\fR -for \fBALL\fR programs called, and must be examined -for security implications. Note that by default \fIunix -password sync\fR is set to no. - -See also \fIunix -password sync\fR. - -Default: \fBpasswd program = /bin/passwd\fR - -Example: \fBpasswd program = /sbin/npasswd %u\fR -.TP -\fBpassword level (G)\fR -Some client/server combinations have difficulty -with mixed-case passwords. One offending client is Windows for -Workgroups, which for some reason forces passwords to upper -case when using the LANMAN1 protocol, but leaves them alone when -using COREPLUS! Another problem child is the Windows 95/98 -family of operating systems. These clients upper case clear -text passwords even when NT LM 0.12 selected by the protocol -negotiation request/response. - -This parameter defines the maximum number of characters -that may be upper case in passwords. - -For example, say the password given was "FRED". If \fI password level\fR is set to 1, the following combinations -would be tried if "FRED" failed: - -"Fred", "fred", "fRed", "frEd","freD" - -If \fIpassword level\fR was set to 2, -the following combinations would also be tried: - -"FRed", "FrEd", "FreD", "fREd", "fReD", "frED", .. - -And so on. - -The higher value this parameter is set to the more likely -it is that a mixed case password will be matched against a single -case password. However, you should be aware that use of this -parameter reduces security and increases the time taken to -process a new connection. - -A value of zero will cause only two attempts to be -made - the password as is and the password in all-lower case. - -Default: \fBpassword level = 0\fR - -Example: \fBpassword level = 4\fR -.TP -\fBpassword server (G)\fR -By specifying the name of another SMB server (such -as a WinNT box) with this option, and using \fBsecurity = domain -\fR or \fBsecurity = server\fR you can get Samba -to do all its username/password validation via a remote server. - -This option sets the name of the password server to use. -It must be a NetBIOS name, so if the machine's NetBIOS name is -different from its Internet name then you may have to add its NetBIOS -name to the lmhosts file which is stored in the same directory -as the \fIsmb.conf\fR file. - -The name of the password server is looked up using the -parameter \fIname -resolve order\fR and so may resolved -by any method and order described in that parameter. - -The password server must be a machine capable of using -the "LM1.2X002" or the "NT LM 0.12" protocol, and it must be in -user level security mode. - -\fBNOTE:\fR Using a password server -means your UNIX box (running Samba) is only as secure as your -password server. \fBDO NOT CHOOSE A PASSWORD SERVER THAT -YOU DON'T COMPLETELY TRUST\fR. - -Never point a Samba server at itself for password -serving. This will cause a loop and could lock up your Samba -server! - -The name of the password server takes the standard -substitutions, but probably the only useful one is \fI%m -\fR, which means the Samba server will use the incoming -client as the password server. If you use this then you better -trust your clients, and you had better restrict them with hosts allow! - -If the \fIsecurity\fR parameter is set to -domain, then the list of machines in this -option must be a list of Primary or Backup Domain controllers for the -Domain or the character '*', as the Samba server is effectively -in that domain, and will use cryptographically authenticated RPC calls -to authenticate the user logging on. The advantage of using \fB security = domain\fR is that if you list several hosts in the -\fIpassword server\fR option then \fBsmbd -\fR will try each in turn till it finds one that responds. This -is useful in case your primary server goes down. - -If the \fIpassword server\fR option is set -to the character '*', then Samba will attempt to auto-locate the -Primary or Backup Domain controllers to authenticate against by -doing a query for the name WORKGROUP<1C> -and then contacting each server returned in the list of IP -addresses from the name resolution source. - -If the list of servers contains both names and the '*' -character, the list is treated as a list of preferred -domain controllers, but an auto lookup of all remaining DC's -will be added to the list as well. Samba will not attempt to optimize -this list by locating the closest DC. - -If the \fIsecurity\fR parameter is -set to server, then there are different -restrictions that \fBsecurity = domain\fR doesn't -suffer from: -.RS -.TP 0.2i -\(bu -You may list several password servers in -the \fIpassword server\fR parameter, however if an -\fBsmbd\fR makes a connection to a password server, -and then the password server fails, no more users will be able -to be authenticated from this \fBsmbd\fR. This is a -restriction of the SMB/CIFS protocol when in \fBsecurity = server -\fR mode and cannot be fixed in Samba. -.TP 0.2i -\(bu -If you are using a Windows NT server as your -password server then you will have to ensure that your users -are able to login from the Samba server, as when in \fB security = server\fR mode the network logon will appear to -come from there rather than from the users workstation. -.RE - -See also the \fIsecurity -\fR parameter. - -Default: \fBpassword server = \fR - -Example: \fBpassword server = NT-PDC, NT-BDC1, NT-BDC2, * -\fR - -Example: \fBpassword server = *\fR -.TP -\fBpath (S)\fR -This parameter specifies a directory to which -the user of the service is to be given access. In the case of -printable services, this is where print data will spool prior to -being submitted to the host for printing. - -For a printable service offering guest access, the service -should be readonly and the path should be world-writeable and -have the sticky bit set. This is not mandatory of course, but -you probably won't get the results you expect if you do -otherwise. - -Any occurrences of \fI%u\fR in the path -will be replaced with the UNIX username that the client is using -on this connection. Any occurrences of \fI%m\fR -will be replaced by the NetBIOS name of the machine they are -connecting from. These replacements are very useful for setting -up pseudo home directories for users. - -Note that this path will be based on \fIroot dir\fR if one was specified. - -Default: \fBnone\fR - -Example: \fBpath = /home/fred\fR -.TP -\fBpid directory (G)\fR -This option specifies the directory where pid -files will be placed. - -Default: \fBpid directory = ${prefix}/var/locks\fR - -Example: \fBpid directory = /var/run/\fR -.TP -\fBposix locking (S)\fR -The \fBsmbd(8)\fR -daemon maintains an database of file locks obtained by SMB clients. -The default behavior is to map this internal database to POSIX -locks. This means that file locks obtained by SMB clients are -consistent with those seen by POSIX compliant applications accessing -the files via a non-SMB method (e.g. NFS or local file access). -You should never need to disable this parameter. - -Default: \fBposix locking = yes\fR -.TP -\fBpostexec (S)\fR -This option specifies a command to be run -whenever the service is disconnected. It takes the usual -substitutions. The command may be run as the root on some -systems. - -An interesting example may be to unmount server -resources: - -\fBpostexec = /etc/umount /cdrom\fR - -See also \fIpreexec\fR -\&. - -Default: \fBnone (no command executed)\fR - -Example: \fBpostexec = echo \\"%u disconnected from %S -from %m (%I)\\" >> /tmp/log\fR -.TP -\fBpostscript (S)\fR -This parameter forces a printer to interpret -the print files as PostScript. This is done by adding a %! -to the start of print output. - -This is most useful when you have lots of PCs that persist -in putting a control-D at the start of print jobs, which then -confuses your printer. - -Default: \fBpostscript = no\fR -.TP -\fBpreexec (S)\fR -This option specifies a command to be run whenever -the service is connected to. It takes the usual substitutions. - -An interesting example is to send the users a welcome -message every time they log in. Maybe a message of the day? Here -is an example: - -\fBpreexec = csh -c 'echo \\"Welcome to %S!\\" | -/usr/local/samba/bin/smbclient -M %m -I %I' & \fR - -Of course, this could get annoying after a while :-) - -See also \fIpreexec close -\fR and \fIpostexec -\fR. - -Default: \fBnone (no command executed)\fR - -Example: \fBpreexec = echo \\"%u connected to %S from %m -(%I)\\" >> /tmp/log\fR -.TP -\fBpreexec close (S)\fR -This boolean option controls whether a non-zero -return code from \fIpreexec -\fR should close the service being connected to. - -Default: \fBpreexec close = no\fR -.TP -\fBpreferred master (G)\fR -This boolean parameter controls if nmbd(8) is a preferred master browser -for its workgroup. - -If this is set to yes, on startup, \fBnmbd\fR -will force an election, and it will have a slight advantage in -winning the election. It is recommended that this parameter is -used in conjunction with \fB\fI domain master\fB = yes\fR, so that \fB nmbd\fR can guarantee becoming a domain master. - -Use this option with caution, because if there are several -hosts (whether Samba servers, Windows 95 or NT) that are preferred -master browsers on the same subnet, they will each periodically -and continuously attempt to become the local master browser. -This will result in unnecessary broadcast traffic and reduced browsing -capabilities. - -See also \fIos level\fR -\&. - -Default: \fBpreferred master = auto\fR -.TP -\fBprefered master (G)\fR -Synonym for \fI preferred master\fR for people who cannot spell :-). -.TP -\fBpreload (G)\fR -This is a list of services that you want to be -automatically added to the browse lists. This is most useful -for homes and printers services that would otherwise not be -visible. - -Note that if you just want all printers in your -printcap file loaded then the \fIload printers\fR option is easier. - -Default: \fBno preloaded services\fR - -Example: \fBpreload = fred lp colorlp\fR -.TP -\fBpreserve case (S)\fR -This controls if new filenames are created -with the case that the client passes, or if they are forced to -be the \fIdefault case -\fR. - -Default: \fBpreserve case = yes\fR - -See the section on NAME -MANGLING for a fuller discussion. -.TP -\fBprint command (S)\fR -After a print job has finished spooling to -a service, this command will be used via a \fBsystem()\fR -call to process the spool file. Typically the command specified will -submit the spool file to the host's printing subsystem, but there -is no requirement that this be the case. The server will not remove -the spool file, so whatever command you specify should remove the -spool file when it has been processed, otherwise you will need to -manually remove old spool files. - -The print command is simply a text string. It will be used -verbatim after macro substitutions have been made: - -s, %p - the path to the spool -file name - -%p - the appropriate printer -name - -%J - the job -name as transmitted by the client. - -%c - The number of printed pages -of the spooled job (if known). - -%z - the size of the spooled -print job (in bytes) - -The print command \fBMUST\fR contain at least -one occurrence of \fI%s\fR or \fI%f -\fR - the \fI%p\fR is optional. At the time -a job is submitted, if no printer name is supplied the \fI%p -\fR will be silently removed from the printer command. - -If specified in the [global] section, the print command given -will be used for any printable service that does not have its own -print command specified. - -If there is neither a specified print command for a -printable service nor a global print command, spool files will -be created but not processed and (most importantly) not removed. - -Note that printing may fail on some UNIXes from the -nobody account. If this happens then create -an alternative guest account that can print and set the \fIguest account\fR -in the [global] section. - -You can form quite complex print commands by realizing -that they are just passed to a shell. For example the following -will log a print job, print the file, then remove it. Note that -\&';' is the usual separator for command in shell scripts. - -\fBprint command = echo Printing %s >> -/tmp/print.log; lpr -P %p %s; rm %s\fR - -You may have to vary this command considerably depending -on how you normally print files on your system. The default for -the parameter varies depending on the setting of the \fIprinting\fR parameter. - -Default: For \fBprinting = BSD, AIX, QNX, LPRNG -or PLP :\fR - -\fBprint command = lpr -r -P%p %s\fR - -For \fBprinting = SYSV or HPUX :\fR - -\fBprint command = lp -c -d%p %s; rm %s\fR - -For \fBprinting = SOFTQ :\fR - -\fBprint command = lp -d%p -s %s; rm %s\fR - -For printing = CUPS : If SAMBA is compiled against -libcups, then printcap = cups -uses the CUPS API to -submit jobs, etc. Otherwise it maps to the System V -commands with the -oraw option for printing, i.e. it -uses \fBlp -c -d%p -oraw; rm %s\fR. -With \fBprinting = cups\fR, -and if SAMBA is compiled against libcups, any manually -set print command will be ignored. - -Example: \fBprint command = /usr/local/samba/bin/myprintscript -%p %s\fR -.TP -\fBprint ok (S)\fR -Synonym for \fIprintable\fR. -.TP -\fBprintable (S)\fR -If this parameter is yes, then -clients may open, write to and submit spool files on the directory -specified for the service. - -Note that a printable service will ALWAYS allow writing -to the service path (user privileges permitting) via the spooling -of print data. The \fIread only -\fR parameter controls only non-printing access to -the resource. - -Default: \fBprintable = no\fR -.TP -\fBprintcap (G)\fR -Synonym for \fI printcap name\fR. -.TP -\fBprintcap name (G)\fR -This parameter may be used to override the -compiled-in default printcap name used by the server (usually \fI /etc/printcap\fR). See the discussion of the [printers] section above for reasons -why you might want to do this. - -To use the CUPS printing interface set \fBprintcap name = cups -\fR. This should be supplemented by an addtional setting -printing = cups in the [global] -section. \fBprintcap name = cups\fR will use the -"dummy" printcap created by CUPS, as specified in your CUPS -configuration file. - -On System V systems that use \fBlpstat\fR to -list available printers you can use \fBprintcap name = lpstat -\fR to automatically obtain lists of available printers. This -is the default for systems that define SYSV at configure time in -Samba (this includes most System V based systems). If \fI printcap name\fR is set to \fBlpstat\fR on -these systems then Samba will launch \fBlpstat -v\fR and -attempt to parse the output to obtain a printer list. - -A minimal printcap file would look something like this: - - -.nf - print1|My Printer 1 - print2|My Printer 2 - print3|My Printer 3 - print4|My Printer 4 - print5|My Printer 5 - -.fi - -where the '|' separates aliases of a printer. The fact -that the second alias has a space in it gives a hint to Samba -that it's a comment. - -\fBNOTE\fR: Under AIX the default printcap -name is \fI/etc/qconfig\fR. Samba will assume the -file is in AIX \fIqconfig\fR format if the string -\fIqconfig\fR appears in the printcap filename. - -Default: \fBprintcap name = /etc/printcap\fR - -Example: \fBprintcap name = /etc/myprintcap\fR -.TP -\fBprinter admin (S)\fR -This is a list of users that can do anything to -printers via the remote administration interfaces offered by MS-RPC -(usually using a NT workstation). Note that the root user always -has admin rights. - -Default: \fBprinter admin = \fR - -Example: \fBprinter admin = admin, @staff\fR -.TP -\fBprinter driver (S)\fR -\fBNote :\fRThis is a deprecated -parameter and will be removed in the next major release -following version 2.2. Please see the instructions in -the Samba 2.2. Printing -HOWTO for more information -on the new method of loading printer drivers onto a Samba server. - -This option allows you to control the string -that clients receive when they ask the server for the printer driver -associated with a printer. If you are using Windows95 or Windows NT -then you can use this to automate the setup of printers on your -system. - -You need to set this parameter to the exact string (case -sensitive) that describes the appropriate printer driver for your -system. If you don't know the exact string to use then you should -first try with no \fI printer driver\fR option set and the client will -give you a list of printer drivers. The appropriate strings are -shown in a scroll box after you have chosen the printer manufacturer. - -See also \fIprinter -driver file\fR. - -Example: \fBprinter driver = HP LaserJet 4L\fR -.TP -\fBprinter driver file (G)\fR -\fBNote :\fRThis is a deprecated -parameter and will be removed in the next major release -following version 2.2. Please see the instructions in -the Samba 2.2. Printing -HOWTO for more information -on the new method of loading printer drivers onto a Samba server. -This parameter tells Samba where the printer driver -definition file, used when serving drivers to Windows 95 clients, is -to be found. If this is not set, the default is : +.PP +The \fIsmb\&.conf\fR file is a configuration file for the Samba suite\&. \fIsmb\&.conf\fR contains runtime configuration information for the Samba programs\&. The \fIsmb\&.conf\fR file is designed to be configured and administered by the \fBswat\fR(8) program\&. The complete description of the file format and possible parameters held within are here for reference purposes\&. -\fISAMBA_INSTALL_DIRECTORY -/lib/printers.def\fR +.SH "FILE FORMAT" -This file is created from Windows 95 \fImsprint.inf -\fR files found on the Windows 95 client system. For more -details on setting up serving of printer drivers to Windows 95 -clients, see the outdated documentation file in the \fIdocs/\fR -directory, \fIPRINTER_DRIVER.txt\fR. +.PP +The file consists of sections and parameters\&. A section begins with the name of the section in square brackets and continues until the next section begins\&. Sections contain parameters of the form -See also \fI printer driver location\fR. +.PP +\fIname\fR = \fIvalue \fR -Default: \fBNone (set in compile).\fR +.PP +The file is line-based - that is, each newline-terminated line represents either a comment, a section name or a parameter\&. -Example: \fBprinter driver file = -/usr/local/samba/printers/drivers.def\fR -.TP -\fBprinter driver location (S)\fR -\fBNote :\fRThis is a deprecated -parameter and will be removed in the next major release -following version 2.2. Please see the instructions in -the Samba 2.2. Printing -HOWTO for more information -on the new method of loading printer drivers onto a Samba server. +.PP +Section and parameter names are not case sensitive\&. -This parameter tells clients of a particular printer -share where to find the printer driver files for the automatic -installation of drivers for Windows 95 machines. If Samba is set up -to serve printer drivers to Windows 95 machines, this should be set to +.PP +Only the first equals sign in a parameter is significant\&. Whitespace before or after the first equals sign is discarded\&. Leading, trailing and internal whitespace in section and parameter names is irrelevant\&. Leading and trailing whitespace in a parameter value is discarded\&. Internal whitespace within a parameter value is retained verbatim\&. -\fB\\\\MACHINE\\PRINTER$\fR +.PP +Any line beginning with a semicolon (';') or a hash ('#') character is ignored, as are lines containing only whitespace\&. -Where MACHINE is the NetBIOS name of your Samba server, -and PRINTER$ is a share you set up for serving printer driver -files. For more details on setting this up see the outdated documentation -file in the \fIdocs/\fR directory, \fI PRINTER_DRIVER.txt\fR. +.PP +Any line ending in a '\\' is continued on the next line in the customary UNIX fashion\&. -See also \fI printer driver file\fR. +.PP +The values following the equals sign in parameters are all either a string (no quotes needed) or a boolean, which may be given as yes/no, 0/1 or true/false\&. Case is not significant in boolean values, but is preserved in string values\&. Some items such as create modes are numeric\&. -Default: \fBnone\fR +.SH "SECTION DESCRIPTIONS" -Example: \fBprinter driver location = \\\\MACHINE\\PRINTER$ -\fR -.TP -\fBprinter name (S)\fR -This parameter specifies the name of the printer -to which print jobs spooled through a printable service will be sent. +.PP +Each section in the configuration file (except for the [global] section) describes a shared resource (known as a "share")\&. The section name is the name of the shared resource and the parameters within the section define the shares attributes\&. -If specified in the [global] section, the printer -name given will be used for any printable service that does -not have its own printer name specified. +.PP +There are three special sections, [global], [homes] and [printers], which are described under \fBspecial sections\fR\&. The following notes apply to ordinary section descriptions\&. -Default: \fBnone (but may be lp -on many systems)\fR +.PP +A share consists of a directory to which access is being given plus a description of the access rights which are granted to the user of the service\&. Some housekeeping options are also specifiable\&. -Example: \fBprinter name = laserwriter\fR -.TP -\fBprinter (S)\fR -Synonym for \fI printer name\fR. -.TP -\fBprinting (S)\fR -This parameters controls how printer status -information is interpreted on your system. It also affects the -default values for the \fIprint command\fR, -\fIlpq command\fR, \fIlppause command -\fR, \fIlpresume command\fR, and -\fIlprm command\fR if specified in the -[global] section. - -Currently nine printing styles are supported. They are -BSD, AIX, -LPRNG, PLP, -SYSV, HPUX, -QNX, SOFTQ, -and CUPS. - -To see what the defaults are for the other print -commands when using the various options use the testparm(1) program. - -This option can be set on a per printer basis - -See also the discussion in the [printers] section. -.TP -\fBprivate dir (G)\fR -This parameters defines the directory -smbd will use for storing such files as \fIsmbpasswd\fR -and \fIsecrets.tdb\fR. +.PP +Sections are either file share services (used by the client as an extension of their native file systems) or printable services (used by the client to access print services on the host running the server)\&. -Default :\fBprivate dir = ${prefix}/private\fR -.TP -\fBprotocol (G)\fR -Synonym for \fImax protocol\fR. -.TP -\fBpublic (S)\fR -Synonym for \fIguest -ok\fR. -.TP -\fBqueuepause command (S)\fR -This parameter specifies the command to be -executed on the server host in order to pause the printer queue. +.PP +Sections may be designated \fBguest\fR services, in which case no password is required to access them\&. A specified UNIX \fBguest account\fR is used to define access privileges in this case\&. -This command should be a program or script which takes -a printer name as its only parameter and stops the printer queue, -such that no longer jobs are submitted to the printer. +.PP +Sections other than guest services will require a password to access them\&. The client provides the username\&. As older clients only provide passwords and not usernames, you may specify a list of usernames to check against the password using the "user =" option in the share definition\&. For modern clients such as Windows 95/98/ME/NT/2000, this should not be necessary\&. -This command is not supported by Windows for Workgroups, -but can be issued from the Printers window under Windows 95 -and NT. +.PP +Note that the access rights granted by the server are masked by the access rights granted to the specified or guest UNIX user by the host system\&. The server does not grant more access than the host system grants\&. -If a \fI%p\fR is given then the printer name -is put in its place. Otherwise it is placed at the end of the command. +.PP +The following sample section defines a file space share\&. The user has write access to the path \fI/home/bar\fR\&. The share is accessed via the share name "foo": +.nf -Note that it is good practice to include the absolute -path in the command as the PATH may not be available to the -server. -Default: \fBdepends on the setting of \fIprinting -\fB\fR +[foo] + path = /home/bar + read only = no -Example: \fBqueuepause command = disable %p\fR -.TP -\fBqueueresume command (S)\fR -This parameter specifies the command to be -executed on the server host in order to resume the printer queue. It -is the command to undo the behavior that is caused by the -previous parameter (\fI queuepause command\fR). +.fi -This command should be a program or script which takes -a printer name as its only parameter and resumes the printer queue, -such that queued jobs are resubmitted to the printer. +.PP +The following sample section defines a printable share\&. The share is readonly, but printable\&. That is, the only write access permitted is via calls to open, write to and close a spool file\&. The \fBguest ok\fR parameter means access will be permitted as the default guest user (specified elsewhere): +.nf -This command is not supported by Windows for Workgroups, -but can be issued from the Printers window under Windows 95 -and NT. -If a \fI%p\fR is given then the printer name -is put in its place. Otherwise it is placed at the end of the -command. +[aprinter] + path = /usr/spool/public + read only = yes + printable = yes + guest ok = yes -Note that it is good practice to include the absolute -path in the command as the PATH may not be available to the -server. +.fi -Default: \fBdepends on the setting of \fIprinting\fB\fR +.SH "SPECIAL SECTIONS" -Example: \fBqueuepause command = enable %p -\fR -.TP -\fBread bmpx (G)\fR -This boolean parameter controls whether smbd(8) will support the "Read -Block Multiplex" SMB. This is now rarely used and defaults to -no. You should never need to set this -parameter. +.SS "The [global] section" -Default: \fBread bmpx = no\fR -.TP -\fBread list (S)\fR -This is a list of users that are given read-only -access to a service. If the connecting user is in this list then -they will not be given write access, no matter what the \fIread only\fR -option is set to. The list can include group names using the -syntax described in the \fI invalid users\fR parameter. +.PP +parameters in this section apply to the server as a whole, or are defaults for sections which do not specifically define certain items\&. See the notes under PARAMETERS for more information\&. -See also the \fI write list\fR parameter and the \fIinvalid users\fR -parameter. +.SS "The [homes] section" -Default: \fBread list = \fR +.PP +If a section called homes is included in the configuration file, services connecting clients to their home directories can be created on the fly by the server\&. -Example: \fBread list = mary, @students\fR -.TP -\fBread only (S)\fR -An inverted synonym is \fIwriteable\fR. +.PP +When the connection request is made, the existing sections are scanned\&. If a match is found, it is used\&. If no match is found, the requested section name is treated as a user name and looked up in the local password file\&. If the name exists and the correct password has been given, a share is created by cloning the [homes] section\&. -If this parameter is yes, then users -of a service may not create or modify files in the service's -directory. +.PP +Some modifications are then made to the newly created share: -Note that a printable service (\fBprintable = yes\fR) -will \fBALWAYS\fR allow writing to the directory -(user privileges permitting), but only via spooling operations. +.TP 3 +\(bu +The share name is changed from homes to the located username\&. -Default: \fBread only = yes\fR .TP -\fBread raw (G)\fR -This parameter controls whether or not the server -will support the raw read SMB requests when transferring data -to clients. - -If enabled, raw reads allow reads of 65535 bytes in -one packet. This typically provides a major performance benefit. +\(bu +If no path was given, the path is set to the user's home directory\&. -However, some clients either negotiate the allowable -block size incorrectly or are incapable of supporting larger block -sizes, and for these clients you may need to disable raw reads. +.LP -In general this parameter should be viewed as a system tuning -tool and left severely alone. See also \fIwrite raw\fR. +.PP +If you decide to use a \fBpath =\fR line in your [homes] section then you may find it useful to use the %S macro\&. For example : -Default: \fBread raw = yes\fR -.TP -\fBread size (G)\fR -The option \fIread size\fR -affects the overlap of disk reads/writes with network reads/writes. -If the amount of data being transferred in several of the SMB -commands (currently SMBwrite, SMBwriteX and SMBreadbraw) is larger -than this value then the server begins writing the data before it -has received the whole packet from the network, or in the case of -SMBreadbraw, it begins writing to the network before all the data -has been read from disk. - -This overlapping works best when the speeds of disk and -network access are similar, having very little effect when the -speed of one is much greater than the other. - -The default value is 16384, but very little experimentation -has been done yet to determine the optimal value, and it is likely -that the best value will vary greatly between systems anyway. -A value over 65536 is pointless and will cause you to allocate -memory unnecessarily. - -Default: \fBread size = 16384\fR - -Example: \fBread size = 8192\fR -.TP -\fBrealm (G)\fR -This option specifies the kerberos realm to use. The realm is -used as the ADS equivalent of the NT4\fBdomain\fR. It -is usually set to the DNS name of the kerberos server. +.PP +\fBpath = /data/pchome/%S\fR -Default: \fBrealm = \fR +.PP +would be useful if you have different home directories for your PCs than for UNIX access\&. -Example: \fBrealm = mysambabox.mycompany.com\fR -.TP -\fBremote announce (G)\fR -This option allows you to setup nmbd(8) to periodically announce itself -to arbitrary IP addresses with an arbitrary workgroup name. +.PP +This is a fast and simple way to give a large number of clients access to their home directories with a minimum of fuss\&. -This is useful if you want your Samba server to appear -in a remote workgroup for which the normal browse propagation -rules don't work. The remote workgroup can be anywhere that you -can send IP packets to. +.PP +A similar process occurs if the requested section name is "homes", except that the share name is not changed to that of the requesting user\&. This method of using the [homes] section works well if different users share a client PC\&. -For example: +.PP +The [homes] section can specify all the parameters a normal service section can specify, though some make more sense than others\&. The following is a typical and suitable [homes] section: +.nf -\fBremote announce = 192.168.2.255/SERVERS -192.168.4.255/STAFF\fR -the above line would cause \fBnmbd\fR to announce itself -to the two given IP addresses using the given workgroup names. -If you leave out the workgroup name then the one given in -the \fIworkgroup\fR -parameter is used instead. +[homes] + read only = no -The IP addresses you choose would normally be the broadcast -addresses of the remote networks, but can also be the IP addresses -of known browse masters if your network config is that stable. +.fi -See the documentation file \fIBROWSING.txt\fR -in the \fIdocs/\fR directory. +.PP +An important point is that if guest access is specified in the [homes] section, all home directories will be visible to all clients \fBwithout a password\fR\&. In the very unlikely event that this is actually desirable, it would be wise to also specify \fBread only access\fR\&. -Default: \fBremote announce = -\fR -.TP -\fBremote browse sync (G)\fR -This option allows you to setup nmbd(8) to periodically request -synchronization of browse lists with the master browser of a Samba -server that is on a remote segment. This option will allow you to -gain browse lists for multiple workgroups across routed networks. This -is done in a manner that does not work with any non-Samba servers. - -This is useful if you want your Samba server and all local -clients to appear in a remote workgroup for which the normal browse -propagation rules don't work. The remote workgroup can be anywhere -that you can send IP packets to. - -For example: - -\fBremote browse sync = 192.168.2.255 192.168.4.255 -\fR - -the above line would cause \fBnmbd\fR to request -the master browser on the specified subnets or addresses to -synchronize their browse lists with the local server. - -The IP addresses you choose would normally be the broadcast -addresses of the remote networks, but can also be the IP addresses -of known browse masters if your network config is that stable. If -a machine IP address is given Samba makes NO attempt to validate -that the remote machine is available, is listening, nor that it -is in fact the browse master on its segment. - -Default: \fBremote browse sync = -\fR -.TP -\fBrestrict anonymous (G)\fR -This is a integer parameter, and -mirrors as much as possible the functinality the -RestrictAnonymous -registry key does on NT/Win2k. +.PP +Note that the \fBbrowseable\fR flag for auto home directories will be inherited from the global browseable flag, not the [homes] browseable flag\&. This is useful as it means setting \fBbrowseable = no\fR in the [homes] section will hide the [homes] share but make any auto home directories visible\&. -Default: \fBrestrict anonymous = 0\fR -.TP -\fBroot (G)\fR -Synonym for \fIroot directory"\fR. -.TP -\fBroot dir (G)\fR -Synonym for \fIroot directory"\fR. -.TP -\fBroot directory (G)\fR -The server will \fBchroot()\fR (i.e. -Change its root directory) to this directory on startup. This is -not strictly necessary for secure operation. Even without it the -server will deny access to files not in one of the service entries. -It may also check for, and deny access to, soft links to other -parts of the filesystem, or attempts to use ".." in file names -to access other directories (depending on the setting of the \fIwide links\fR -parameter). - -Adding a \fIroot directory\fR entry other -than "/" adds an extra level of security, but at a price. It -absolutely ensures that no access is given to files not in the -sub-tree specified in the \fIroot directory\fR -option, \fBincluding\fR some files needed for -complete operation of the server. To maintain full operability -of the server you will need to mirror some system files -into the \fIroot directory\fR tree. In particular -you will need to mirror \fI/etc/passwd\fR (or a -subset of it), and any binaries or configuration files needed for -printing (if required). The set of files that must be mirrored is -operating system dependent. - -Default: \fBroot directory = /\fR - -Example: \fBroot directory = /homes/smb\fR -.TP -\fBroot postexec (S)\fR -This is the same as the \fIpostexec\fR -parameter except that the command is run as root. This -is useful for unmounting filesystems -(such as CDROMs) after a connection is closed. +.SS "The [printers] section" -See also \fI postexec\fR. +.PP +This section works like [homes], but for printers\&. -Default: \fBroot postexec = -\fR -.TP -\fBroot preexec (S)\fR -This is the same as the \fIpreexec\fR -parameter except that the command is run as root. This -is useful for mounting filesystems (such as CDROMs) when a -connection is opened. +.PP +If a [printers] section occurs in the configuration file, users are able to connect to any printer specified in the local host's printcap file\&. -See also \fI preexec\fR and \fIpreexec close\fR. +.PP +When a connection request is made, the existing sections are scanned\&. If a match is found, it is used\&. If no match is found, but a [homes] section exists, it is used as described above\&. Otherwise, the requested section name is treated as a printer name and the appropriate printcap file is scanned to see if the requested section name is a valid printer share name\&. If a match is found, a new printer share is created by cloning the [printers] section\&. -Default: \fBroot preexec = -\fR -.TP -\fBroot preexec close (S)\fR -This is the same as the \fIpreexec close -\fR parameter except that the command is run as root. +.PP +A few modifications are then made to the newly created share: -See also \fI preexec\fR and \fIpreexec close\fR. +.TP 3 +\(bu +The share name is set to the located printer name -Default: \fBroot preexec close = no\fR .TP -\fBsecurity (G)\fR -This option affects how clients respond to -Samba and is one of the most important settings in the \fI smb.conf\fR file. - -The option sets the "security mode bit" in replies to -protocol negotiations with smbd(8) - to turn share level security on or off. Clients decide -based on this bit whether (and how) to transfer user and password -information to the server. - -The default is \fBsecurity = user\fR, as this is -the most common setting needed when talking to Windows 98 and -Windows NT. - -The alternatives are \fBsecurity = share\fR, -\fBsecurity = server\fR or \fBsecurity = domain -\fR. - -In versions of Samba prior to 2.0.0, the default was -\fBsecurity = share\fR mainly because that was -the only option at one stage. - -There is a bug in WfWg that has relevance to this -setting. When in user or server level security a WfWg client -will totally ignore the password you type in the "connect -drive" dialog box. This makes it very difficult (if not impossible) -to connect to a Samba service as anyone except the user that -you are logged into WfWg as. - -If your PCs use usernames that are the same as their -usernames on the UNIX machine then you will want to use -\fBsecurity = user\fR. If you mostly use usernames -that don't exist on the UNIX box then use \fBsecurity = -share\fR. - -You should also use \fBsecurity = share\fR if you -want to mainly setup shares without a password (guest shares). This -is commonly used for a shared printer server. It is more difficult -to setup guest shares with \fBsecurity = user\fR, see -the \fImap to guest\fR -parameter for details. - -It is possible to use \fBsmbd\fR in a \fB hybrid mode\fR where it is offers both user and share -level security under different \fINetBIOS aliases\fR. - -The different settings will now be explained. - -\fBSECURITY = SHARE -\fR - -When clients connect to a share level security server they -need not log onto the server with a valid username and password before -attempting to connect to a shared resource (although modern clients -such as Windows 95/98 and Windows NT will send a logon request with -a username but no password when talking to a \fBsecurity = share -\fR server). Instead, the clients send authentication information -(passwords) on a per-share basis, at the time they attempt to connect -to that share. - -Note that \fBsmbd\fR \fBALWAYS\fR -uses a valid UNIX user to act on behalf of the client, even in -\fBsecurity = share\fR level security. - -As clients are not required to send a username to the server -in share level security, \fBsmbd\fR uses several -techniques to determine the correct UNIX user to use on behalf -of the client. - -A list of possible UNIX usernames to match with the given -client password is constructed using the following methods : -.RS -.TP 0.2i -\(bu -If the \fIguest -only\fR parameter is set, then all the other -stages are missed and only the \fIguest account\fR username is checked. -.TP 0.2i -\(bu -Is a username is sent with the share connection -request, then this username (after mapping - see \fIusername map\fR), -is added as a potential username. -.TP 0.2i -\(bu -If the client did a previous \fBlogon -\fR request (the SessionSetup SMB call) then the -username sent in this SMB will be added as a potential username. -.TP 0.2i -\(bu -The name of the service the client requested is -added as a potential username. -.TP 0.2i -\(bu -The NetBIOS name of the client is added to -the list as a potential username. -.TP 0.2i \(bu -Any users on the \fI user\fR list are added as potential usernames. -.RE +If no printer name was given, the printer name is set to the located printer name -If the \fIguest only\fR parameter is -not set, then this list is then tried with the supplied password. -The first user for whom the password matches will be used as the -UNIX user. - -If the \fIguest only\fR parameter is -set, or no username can be determined then if the share is marked -as available to the \fIguest account\fR, then this -guest user will be used, otherwise access is denied. - -Note that it can be \fBvery\fR confusing -in share-level security as to which UNIX username will eventually -be used in granting access. - -See also the section NOTE ABOUT USERNAME/PASSWORD VALIDATION. - -\fBSECURITY = USER -\fR - -This is the default security setting in Samba 2.2. -With user-level security a client must first "log-on" with a -valid username and password (which can be mapped using the \fIusername map\fR -parameter). Encrypted passwords (see the \fIencrypted passwords\fR parameter) can also -be used in this security mode. Parameters such as \fIuser\fR and \fIguest only\fR if set are then applied and -may change the UNIX user to use on this connection, but only after -the user has been successfully authenticated. - -\fBNote\fR that the name of the resource being -requested is \fBnot\fR sent to the server until after -the server has successfully authenticated the client. This is why -guest shares don't work in user level security without allowing -the server to automatically map unknown users into the \fIguest account\fR. -See the \fImap to guest\fR -parameter for details on doing this. - -See also the section NOTE ABOUT USERNAME/PASSWORD VALIDATION. - -\fBSECURITY = SERVER -\fR - -In this mode Samba will try to validate the username/password -by passing it to another SMB server, such as an NT box. If this -fails it will revert to \fBsecurity = user\fR, but note -that if encrypted passwords have been negotiated then Samba cannot -revert back to checking the UNIX password file, it must have a valid -\fIsmbpasswd\fR file to check users against. See the -documentation file in the \fIdocs/\fR directory -\fIENCRYPTION.txt\fR for details on how to set this -up. - -\fBNote\fR that from the client's point of -view \fBsecurity = server\fR is the same as \fB security = user\fR. It only affects how the server deals -with the authentication, it does not in any way affect what the -client sees. - -\fBNote\fR that the name of the resource being -requested is \fBnot\fR sent to the server until after -the server has successfully authenticated the client. This is why -guest shares don't work in user level security without allowing -the server to automatically map unknown users into the \fIguest account\fR. -See the \fImap to guest\fR -parameter for details on doing this. - -See also the section NOTE ABOUT USERNAME/PASSWORD VALIDATION. - -See also the \fIpassword -server\fR parameter and the \fIencrypted passwords\fR -parameter. - -\fBSECURITY = DOMAIN -\fR - -This mode will only work correctly if smbpasswd(8) has been used to add this -machine into a Windows NT Domain. It expects the \fIencrypted passwords\fR -parameter to be set to yes. In this -mode Samba will try to validate the username/password by passing -it to a Windows NT Primary or Backup Domain Controller, in exactly -the same way that a Windows NT Server would do. - -\fBNote\fR that a valid UNIX user must still -exist as well as the account on the Domain Controller to allow -Samba to have a valid UNIX account to map file access to. - -\fBNote\fR that from the client's point -of view \fBsecurity = domain\fR is the same as \fBsecurity = user -\fR. It only affects how the server deals with the authentication, -it does not in any way affect what the client sees. - -\fBNote\fR that the name of the resource being -requested is \fBnot\fR sent to the server until after -the server has successfully authenticated the client. This is why -guest shares don't work in user level security without allowing -the server to automatically map unknown users into the \fIguest account\fR. -See the \fImap to guest\fR -parameter for details on doing this. - -\fBBUG:\fR There is currently a bug in the -implementation of \fBsecurity = domain\fR with respect -to multi-byte character set usernames. The communication with a -Domain Controller must be done in UNICODE and Samba currently -does not widen multi-byte user names to UNICODE correctly, thus -a multi-byte username will not be recognized correctly at the -Domain Controller. This issue will be addressed in a future release. - -See also the section NOTE ABOUT USERNAME/PASSWORD VALIDATION. - -See also the \fIpassword -server\fR parameter and the \fIencrypted passwords\fR -parameter. - -Default: \fBsecurity = USER\fR - -Example: \fBsecurity = DOMAIN\fR -.TP -\fBsecurity mask (S)\fR -This parameter controls what UNIX permission -bits can be modified when a Windows NT client is manipulating -the UNIX permission on a file using the native NT security -dialog box. - -This parameter is applied as a mask (AND'ed with) to -the changed permission bits, thus preventing any bits not in -this mask from being modified. Essentially, zero bits in this -mask may be treated as a set of bits the user is not allowed -to change. - -If not set explicitly this parameter is 0777, allowing -a user to modify all the user/group/world permissions on a file. - -\fBNote\fR that users who can access the -Samba server through other means can easily bypass this -restriction, so it is primarily useful for standalone -"appliance" systems. Administrators of most normal systems will -probably want to leave it set to 0777. - -See also the \fIforce directory security mode\fR, -\fIdirectory -security mask\fR, \fIforce security mode\fR parameters. - -Default: \fBsecurity mask = 0777\fR - -Example: \fBsecurity mask = 0770\fR .TP -\fBserver string (G)\fR -This controls what string will show up in the -printer comment box in print manager and next to the IPC connection -in \fBnet view\fR. It can be any string that you wish -to show to your users. - -It also sets what will appear in browse lists next -to the machine name. - -A \fI%v\fR will be replaced with the Samba -version number. +\(bu +If the share does not permit guest access and no username was given, the username is set to the located printer name\&. -A \fI%h\fR will be replaced with the -hostname. +.LP -Default: \fBserver string = Samba %v\fR +.PP +Note that the [printers] service MUST be printable - if you specify otherwise, the server will refuse to load the configuration file\&. -Example: \fBserver string = University of GNUs Samba -Server\fR -.TP -\fBset directory (S)\fR -If \fBset directory = no\fR, then -users of the service may not use the setdir command to change -directory. +.PP +Typically the path specified would be that of a world-writeable spool directory with the sticky bit set on it\&. A typical [printers] entry would look like this: +.nf -The \fBsetdir\fR command is only implemented -in the Digital Pathworks client. See the Pathworks documentation -for details. +[printers] + path = /usr/spool/public + guest ok = yes + printable = yes +.fi -Default: \fBset directory = no\fR -.TP -\fBshare modes (S)\fR -This enables or disables the honoring of -the \fIshare modes\fR during a file open. These -modes are used by clients to gain exclusive read or write access -to a file. +.PP +All aliases given for a printer in the printcap file are legitimate printer names as far as the server is concerned\&. If your printing subsystem doesn't work like that, you will have to set up a pseudo-printcap\&. This is a file consisting of one or more lines like this: +.nf -These open modes are not directly supported by UNIX, so -they are simulated using shared memory, or lock files if your -UNIX doesn't support shared memory (almost all do). -The share modes that are enabled by this option are -DENY_DOS, DENY_ALL, -DENY_READ, DENY_WRITE, -DENY_NONE and DENY_FCB. +alias|alias|alias|alias\&.\&.\&. -This option gives full share compatibility and enabled -by default. +.fi -You should \fBNEVER\fR turn this parameter -off as many Windows applications will break if you do so. +.PP +Each alias should be an acceptable printer name for your printing subsystem\&. In the [global] section, specify the new file as your printcap\&. The server will then only recognize names found in your pseudo-printcap, which of course can contain whatever aliases you like\&. The same technique could be used simply to limit access to a subset of your local printers\&. -Default: \fBshare modes = yes\fR -.TP -\fBshort preserve case (S)\fR -This boolean parameter controls if new files -which conform to 8.3 syntax, that is all in upper case and of -suitable length, are created upper case, or if they are forced -to be the \fIdefault case -\fR. This option can be use with \fBpreserve case = yes\fR -to permit long filenames to retain their case, while short -names are lowered. - -See the section on NAME MANGLING. - -Default: \fBshort preserve case = yes\fR -.TP -\fBshow add printer wizard (G)\fR -With the introduction of MS-RPC based printing support -for Windows NT/2000 client in Samba 2.2, a "Printers..." folder will -appear on Samba hosts in the share listing. Normally this folder will -contain an icon for the MS Add Printer Wizard (APW). However, it is -possible to disable this feature regardless of the level of privilege -of the connected user. - -Under normal circumstances, the Windows NT/2000 client will -open a handle on the printer server with OpenPrinterEx() asking for -Administrator privileges. If the user does not have administrative -access on the print server (i.e is not root or a member of the -\fIprinter admin\fR group), the OpenPrinterEx() -call fails and the client makes another open call with a request for -a lower privilege level. This should succeed, however the APW -icon will not be displayed. - -Disabling the \fIshow add printer wizard\fR -parameter will always cause the OpenPrinterEx() on the server -to fail. Thus the APW icon will never be displayed. \fB Note :\fRThis does not prevent the same user from having -administrative privilege on an individual printer. - -See also \fIaddprinter -command\fR, \fIdeleteprinter command\fR, \fIprinter admin\fR - -Default :\fBshow add printer wizard = yes\fR -.TP -\fBshutdown script (G)\fR -\fBThis parameter only exists in the HEAD cvs branch\fR -This a full path name to a script called by -\fBsmbd(8)\fR that -should start a shutdown procedure. +.PP +An alias, by the way, is defined as any component of the first entry of a printcap record\&. Records are separated by newlines, components (if there are more than one) are separated by vertical bar symbols ('|')\&. -This command will be run as the user connected to the -server. +.RS +.Sh "Note" -%m %t %r %f parameters are expanded +.PP +On SYSV systems which use lpstat to determine what printers are defined on the system you may be able to use "printcap name = lpstat" to automatically obtain a list of printers\&. See the "printcap name" option for more details\&. -\fI%m\fR will be substituted with the -shutdown message sent to the server. +.RE -\fI%t\fR will be substituted with the -number of seconds to wait before effectively starting the -shutdown procedure. +.SH "PARAMETERS" -\fI%r\fR will be substituted with the -switch \fB-r\fR. It means reboot after shutdown -for NT. +.PP +parameters define the specific attributes of sections\&. -\fI%f\fR will be substituted with the -switch \fB-f\fR. It means force the shutdown -even if applications do not respond for NT. +.PP +Some parameters are specific to the [global] section (e\&.g\&., \fBsecurity\fR)\&. Some parameters are usable in all sections (e\&.g\&., \fBcreate mode\fR)\&. All others are permissible only in normal sections\&. For the purposes of the following descriptions the [homes] and [printers] sections will be considered normal\&. The letter \fBG\fR in parentheses indicates that a parameter is specific to the [global] section\&. The letter \fBS\fR indicates that a parameter can be specified in a service specific section\&. Note that all \fBS\fR parameters can also be specified in the [global] section - in which case they will define the default behavior for all services\&. -Default: \fBNone\fR. +.PP +parameters are arranged here in alphabetical order - this may not create best bedfellows, but at least you can find them! Where there are synonyms, the preferred synonym is described, others refer to the preferred synonym\&. -Example: \fBabort shutdown script = /usr/local/samba/sbin/shutdown %m %t %r %f\fR +.SH "VARIABLE SUBSTITUTIONS" -Shutdown script example: +.PP +Many of the strings that are settable in the config file can take substitutions\&. For example the option "path = /tmp/%u" would be interpreted as "path = /tmp/john" if the user connected with the username john\&. -.nf - #!/bin/bash - - $time=0 - let "time/60" - let "time++" - - /sbin/shutdown $3 $4 +$time $1 & - -.fi -Shutdown does not return so we need to launch it in background. +.PP +These substitutions are mostly noted in the descriptions below, but there are some general substitutions which apply whenever they might be relevant\&. These are: -See also \fIabort shutdown script\fR. .TP -\fBsmb passwd file (G)\fR -This option sets the path to the encrypted -smbpasswd file. By default the path to the smbpasswd file -is compiled into Samba. - -Default: \fBsmb passwd file = ${prefix}/private/smbpasswd -\fR +%U +session user name (the user name that the client wanted, not necessarily the same as the one they got)\&. -Example: \fBsmb passwd file = /etc/samba/smbpasswd -\fR -.TP -\fBsmb ports (G)\fR -Specifies which ports the server should listen on -for SMB traffic. -Default: \fBsmb ports = 445 139\fR .TP -\fBsocket address (G)\fR -This option allows you to control what -address Samba will listen for connections on. This is used to -support multiple virtual interfaces on the one server, each -with a different configuration. +%G +primary group name of %U\&. -By default Samba will accept connections on any -address. -Example: \fBsocket address = 192.168.2.20\fR .TP -\fBsocket options (G)\fR -This option allows you to set socket options -to be used when talking with the client. - -Socket options are controls on the networking layer -of the operating systems which allow the connection to be -tuned. - -This option will typically be used to tune your Samba -server for optimal performance for your local network. There is -no way that Samba can know what the optimal parameters are for -your net, so you must experiment and choose them yourself. We -strongly suggest you read the appropriate documentation for your -operating system first (perhaps \fBman setsockopt\fR -will help). - -You may find that on some systems Samba will say -"Unknown socket option" when you supply an option. This means you -either incorrectly typed it or you need to add an include file -to includes.h for your OS. If the latter is the case please -send the patch to samba@samba.org . - -Any of the supported socket options may be combined -in any way you like, as long as your OS allows it. - -This is the list of socket options currently settable -using this option: -.RS -.TP 0.2i -\(bu -SO_KEEPALIVE -.TP 0.2i -\(bu -SO_REUSEADDR -.TP 0.2i -\(bu -SO_BROADCAST -.TP 0.2i -\(bu -TCP_NODELAY -.TP 0.2i -\(bu -IPTOS_LOWDELAY -.TP 0.2i -\(bu -IPTOS_THROUGHPUT -.TP 0.2i -\(bu -SO_SNDBUF * -.TP 0.2i -\(bu -SO_RCVBUF * -.TP 0.2i -\(bu -SO_SNDLOWAT * -.TP 0.2i -\(bu -SO_RCVLOWAT * -.RE - -Those marked with a \fB'*'\fR take an integer -argument. The others can optionally take a 1 or 0 argument to enable -or disable the option, by default they will be enabled if you -don't specify 1 or 0. - -To specify an argument use the syntax SOME_OPTION = VALUE -for example \fBSO_SNDBUF = 8192\fR. Note that you must -not have any spaces before or after the = sign. - -If you are on a local network then a sensible option -might be +%h +the Internet hostname that Samba is running on\&. -\fBsocket options = IPTOS_LOWDELAY\fR -If you have a local network then you could try: - -\fBsocket options = IPTOS_LOWDELAY TCP_NODELAY\fR - -If you are on a wide area network then perhaps try -setting IPTOS_THROUGHPUT. - -Note that several of the options may cause your Samba -server to fail completely. Use these options with caution! - -Default: \fBsocket options = TCP_NODELAY\fR - -Example: \fBsocket options = IPTOS_LOWDELAY\fR .TP -\fBsource environment (G)\fR -This parameter causes Samba to set environment -variables as per the content of the file named. - -If the value of this parameter starts with a "|" character -then Samba will treat that value as a pipe command to open and -will set the environment variables from the output of the pipe. +%m +the NetBIOS name of the client machine (very useful)\&. -The contents of the file or the output of the pipe should -be formatted as the output of the standard Unix \fBenv(1) -\fR command. This is of the form : -Example environment entry: - -\fBSAMBA_NETBIOS_NAME = myhostname\fR +.TP +%L +the NetBIOS name of the server\&. This allows you to change your config based on what the client calls you\&. Your server can have a "dual personality"\&. -Default: \fBNo default value\fR -Examples: \fBsource environment = |/etc/smb.conf.sh -\fR +Note that this parameter is not available when Samba listens on port 445, as clients no longer send this information -Example: \fBsource environment = -/usr/local/smb_env_vars\fR -.TP -\fBuse spnego (G)\fR -This variable controls controls whether samba will try to use Simple and Protected NEGOciation (as specified by rfc2478) with WindowsXP and Windows2000sp2 clients to agree upon an authentication mechanism. As of samba 3.0alpha it must be set to "no" for these clients to join a samba domain controller. It can be set to "yes" to allow samba to participate in an AD domain controlled by a Windows2000 domain controller. -Default: \fBuse spnego = yes\fR .TP -\fBstat cache (G)\fR -This parameter determines if smbd(8) will use a cache in order to -speed up case insensitive name mappings. You should never need -to change this parameter. +%M +the Internet name of the client machine\&. -Default: \fBstat cache = yes\fR -.TP -\fBstat cache size (G)\fR -This parameter determines the number of -entries in the \fIstat cache\fR. You should -never need to change this parameter. -Default: \fBstat cache size = 50\fR .TP -\fBstrict allocate (S)\fR -This is a boolean that controls the handling of -disk space allocation in the server. When this is set to yes -the server will change from UNIX behaviour of not committing real -disk storage blocks when a file is extended to the Windows behaviour -of actually forcing the disk system to allocate real storage blocks -when a file is created or extended to be a given size. In UNIX -terminology this means that Samba will stop creating sparse files. -This can be slow on some systems. - -When strict allocate is no the server does sparse -disk block allocation when a file is extended. - -Setting this to yes can help Samba return -out of quota messages on systems that are restricting the disk quota -of users. - -Default: \fBstrict allocate = no\fR -.TP -\fBstrict locking (S)\fR -This is a boolean that controls the handling of -file locking in the server. When this is set to yes -the server will check every read and write access for file locks, and -deny access if locks exist. This can be slow on some systems. - -When strict locking is no the server does file -lock checks only when the client explicitly asks for them. +%R +the selected protocol level after protocol negotiation\&. It can be one of CORE, COREPLUS, LANMAN1, LANMAN2 or NT1\&. -Well-behaved clients always ask for lock checks when it -is important, so in the vast majority of cases \fBstrict -locking = no\fR is preferable. -Default: \fBstrict locking = no\fR -.TP -\fBstrict sync (S)\fR -Many Windows applications (including the Windows -98 explorer shell) seem to confuse flushing buffer contents to -disk with doing a sync to disk. Under UNIX, a sync call forces -the process to be suspended until the kernel has ensured that -all outstanding data in kernel disk buffers has been safely stored -onto stable storage. This is very slow and should only be done -rarely. Setting this parameter to no (the -default) means that smbd ignores the Windows applications requests for -a sync call. There is only a possibility of losing data if the -operating system itself that Samba is running on crashes, so there is -little danger in this default setting. In addition, this fixes many -performance problems that people have reported with the new Windows98 -explorer shell file copies. - -See also the \fIsync -always>\fR parameter. - -Default: \fBstrict sync = no\fR -.TP -\fBstrip dot (G)\fR -This is a boolean that controls whether to -strip trailing dots off UNIX filenames. This helps with some -CDROMs that have filenames ending in a single dot. - -Default: \fBstrip dot = no\fR -.TP -\fBsync always (S)\fR -This is a boolean parameter that controls -whether writes will always be written to stable storage before -the write call returns. If this is no then the server will be -guided by the client's request in each write call (clients can -set a bit indicating that a particular write should be synchronous). -If this is yes then every write will be followed by a \fBfsync() -\fR call to ensure the data is written to disk. Note that -the \fIstrict sync\fR parameter must be set to -yes in order for this parameter to have -any affect. - -See also the \fIstrict -sync\fR parameter. - -Default: \fBsync always = no\fR .TP -\fBsyslog (G)\fR -This parameter maps how Samba debug messages -are logged onto the system syslog logging levels. Samba debug -level zero maps onto syslog LOG_ERR, debug -level one maps onto LOG_WARNING, debug level -two maps onto LOG_NOTICE, debug level three -maps onto LOG_INFO. All higher levels are mapped to LOG_DEBUG. - -This parameter sets the threshold for sending messages -to syslog. Only messages with debug level less than this value -will be sent to syslog. - -Default: \fBsyslog = 1\fR -.TP -\fBsyslog only (G)\fR -If this parameter is set then Samba debug -messages are logged into the system syslog only, and not to -the debug log files. +%d +The process id of the current server process\&. -Default: \fBsyslog only = no\fR -.TP -\fBtemplate homedir (G)\fR -When filling out the user information for a Windows NT -user, the winbindd(8) daemon -uses this parameter to fill in the home directory for that user. -If the string \fI%D\fR is present it is substituted -with the user's Windows NT domain name. If the string \fI%U -\fR is present it is substituted with the user's Windows -NT user name. - -Default: \fBtemplate homedir = /home/%D/%U\fR -.TP -\fBtemplate shell (G)\fR -When filling out the user information for a Windows NT -user, the winbindd(8) daemon -uses this parameter to fill in the login shell for that user. -Default: \fBtemplate shell = /bin/false\fR .TP -\fBtime offset (G)\fR -This parameter is a setting in minutes to add -to the normal GMT to local time conversion. This is useful if -you are serving a lot of PCs that have incorrect daylight -saving time handling. +%a +the architecture of the remote machine\&. Only some are recognized, and those may not be 100% reliable\&. It currently recognizes Samba, WfWg, Win95, WinNT and Win2k\&. Anything else will be known as "UNKNOWN"\&. If it gets it wrong then sending a level 3 log to samba@samba\&.org should allow it to be fixed\&. -Default: \fBtime offset = 0\fR -Example: \fBtime offset = 60\fR .TP -\fBtime server (G)\fR -This parameter determines if -nmbd(8) advertises itself as a time server to Windows -clients. +%I +The IP address of the client machine\&. -Default: \fBtime server = no\fR -.TP -\fBtimestamp logs (G)\fR -Synonym for \fI debug timestamp\fR. -.TP -\fBtotal print jobs (G)\fR -This parameter accepts an integer value which defines -a limit on the maximum number of print jobs that will be accepted -system wide at any given time. If a print job is submitted -by a client which will exceed this number, then smbd will return an -error indicating that no space is available on the server. The -default value of 0 means that no such limit exists. This parameter -can be used to prevent a server from exceeding its capacity and is -designed as a printing throttle. See also -\fImax print jobs\fR. - -Default: \fBtotal print jobs = 0\fR - -Example: \fBtotal print jobs = 5000\fR -.TP -\fBunicode (G)\fR -Specifies whether Samba should try -to use unicode on the wire by default. Note: This does NOT -mean that samba will assume that the unix machine uses unicode! -Default: \fBunicode = yes\fR .TP -\fBunix charset (G)\fR -Specifies the charset the unix machine -Samba runs on uses. Samba needs to know this in order to be able to -convert text to the charsets other SMB clients use. +%T +the current date and time\&. -Default: \fBunix charset = ASCII\fR -Example: \fBunix charset = UTF8\fR -.TP -\fBunix extensions(G)\fR -This boolean parameter controls whether Samba -implments the CIFS UNIX extensions, as defined by HP. -These extensions enable Samba to better serve UNIX CIFS clients -by supporting features such as symbolic links, hard links, etc... -These extensions require a similarly enabled client, and are of -no current use to Windows clients. - -Default: \fBunix extensions = no\fR -.TP -\fBunix password sync (G)\fR -This boolean parameter controls whether Samba -attempts to synchronize the UNIX password with the SMB password -when the encrypted SMB password in the smbpasswd file is changed. -If this is set to yes the program specified in the \fIpasswd -program\fRparameter is called \fBAS ROOT\fR - -to allow the new UNIX password to be set without access to the -old UNIX password (as the SMB password change code has no -access to the old password cleartext, only the new). - -See also \fIpasswd -program\fR, \fI passwd chat\fR. - -Default: \fBunix password sync = no\fR -.TP -\fBupdate encrypted (G)\fR -This boolean parameter allows a user logging -on with a plaintext password to have their encrypted (hashed) -password in the smbpasswd file to be updated automatically as -they log on. This option allows a site to migrate from plaintext -password authentication (users authenticate with plaintext -password over the wire, and are checked against a UNIX account -database) to encrypted password authentication (the SMB -challenge/response authentication mechanism) without forcing -all users to re-enter their passwords via smbpasswd at the time the -change is made. This is a convenience option to allow the change over -to encrypted passwords to be made over a longer period. Once all users -have encrypted representations of their passwords in the smbpasswd -file this parameter should be set to no. - -In order for this parameter to work correctly the \fIencrypt passwords\fR -parameter must be set to no when -this parameter is set to yes. - -Note that even when this parameter is set a user -authenticating to \fBsmbd\fR must still enter a valid -password in order to connect correctly, and to update their hashed -(smbpasswd) passwords. - -Default: \fBupdate encrypted = no\fR -.TP -\fBuse client driver (S)\fR -This parameter applies only to Windows NT/2000 -clients. It has no affect on Windows 95/98/ME clients. When -serving a printer to Windows NT/2000 clients without first installing -a valid printer driver on the Samba host, the client will be required -to install a local printer driver. From this point on, the client -will treat the print as a local printer and not a network printer -connection. This is much the same behavior that will occur -when \fBdisable spoolss = yes\fR. - -The differentiating -factor is that under normal circumstances, the NT/2000 client will -attempt to open the network printer using MS-RPC. The problem is that -because the client considers the printer to be local, it will attempt -to issue the OpenPrinterEx() call requesting access rights associated -with the logged on user. If the user possesses local administator rights -but not root privilegde on the Samba host (often the case), the OpenPrinterEx() -call will fail. The result is that the client will now display an "Access -Denied; Unable to connect" message in the printer queue window (even though -jobs may successfully be printed). - -If this parameter is enabled for a printer, then any attempt -to open the printer with the PRINTER_ACCESS_ADMINISTER right is mapped -to PRINTER_ACCESS_USE instead. Thus allowing the OpenPrinterEx() -call to succeed. \fBThis parameter MUST not be able enabled -on a print share which has valid print driver installed on the Samba -server.\fR - -See also disable spoolss - -Default: \fBuse client driver = no\fR -.TP -\fBuse mmap (G)\fR -This global parameter determines if the tdb internals of Samba can -depend on mmap working correctly on the running system. Samba requires a coherent -mmap/read-write system memory cache. Currently only HPUX does not have such a -coherent cache, and so this parameter is set to no by -default on HPUX. On all other systems this parameter should be left alone. This -parameter is provided to help the Samba developers track down problems with -the tdb internal code. - -Default: \fBuse mmap = yes\fR -.TP -\fBuse rhosts (G)\fR -If this global parameter is yes, it specifies -that the UNIX user's \fI.rhosts\fR file in their home directory -will be read to find the names of hosts and users who will be allowed -access without specifying a password. - -\fBNOTE:\fR The use of \fIuse rhosts -\fR can be a major security hole. This is because you are -trusting the PC to supply the correct username. It is very easy to -get a PC to supply a false username. I recommend that the \fI use rhosts\fR option be only used if you really know what -you are doing. - -Default: \fBuse rhosts = no\fR -.TP -\fBuser (S)\fR -Synonym for \fI username\fR. -.TP -\fBusers (S)\fR -Synonym for \fI username\fR. -.TP -\fBusername (S)\fR -Multiple users may be specified in a comma-delimited -list, in which case the supplied password will be tested against -each username in turn (left to right). - -The \fIusername\fR line is needed only when -the PC is unable to supply its own username. This is the case -for the COREPLUS protocol or where your users have different WfWg -usernames to UNIX usernames. In both these cases you may also be -better using the \\\\server\\share%user syntax instead. - -The \fIusername\fR line is not a great -solution in many cases as it means Samba will try to validate -the supplied password against each of the usernames in the -\fIusername\fR line in turn. This is slow and -a bad idea for lots of users in case of duplicate passwords. -You may get timeouts or security breaches using this parameter -unwisely. - -Samba relies on the underlying UNIX security. This -parameter does not restrict who can login, it just offers hints -to the Samba server as to what usernames might correspond to the -supplied password. Users can login as whoever they please and -they will be able to do no more damage than if they started a -telnet session. The daemon runs as the user that they log in as, -so they cannot do anything that user cannot do. - -To restrict a service to a particular set of users you -can use the \fIvalid users -\fR parameter. - -If any of the usernames begin with a '@' then the name -will be looked up first in the NIS netgroups list (if Samba -is compiled with netgroup support), followed by a lookup in -the UNIX groups database and will expand to a list of all users -in the group of that name. - -If any of the usernames begin with a '+' then the name -will be looked up only in the UNIX groups database and will -expand to a list of all users in the group of that name. - -If any of the usernames begin with a '&'then the name -will be looked up only in the NIS netgroups database (if Samba -is compiled with netgroup support) and will expand to a list -of all users in the netgroup group of that name. - -Note that searching though a groups database can take -quite some time, and some clients may time out during the -search. - -See the section NOTE ABOUT -USERNAME/PASSWORD VALIDATION for more information on how -this parameter determines access to the services. - -Default: \fBThe guest account if a guest service, -else .\fR - -Examples:\fBusername = fred, mary, jack, jane, -@users, @pcgroup\fR -.TP -\fBusername level (G)\fR -This option helps Samba to try and 'guess' at -the real UNIX username, as many DOS clients send an all-uppercase -username. By default Samba tries all lowercase, followed by the -username with the first letter capitalized, and fails if the -username is not found on the UNIX machine. - -If this parameter is set to non-zero the behavior changes. -This parameter is a number that specifies the number of uppercase -combinations to try while trying to determine the UNIX user name. The -higher the number the more combinations will be tried, but the slower -the discovery of usernames will be. Use this parameter when you have -strange usernames on your UNIX machine, such as AstrangeUser -\&. - -Default: \fBusername level = 0\fR - -Example: \fBusername level = 5\fR .TP -\fBusername map (G)\fR -This option allows you to specify a file containing -a mapping of usernames from the clients to the server. This can be -used for several purposes. The most common is to map usernames -that users use on DOS or Windows machines to those that the UNIX -box uses. The other is to map multiple users to a single username -so that they can more easily share files. +%D +Name of the domain or workgroup of the current user\&. -The map file is parsed line by line. Each line should -contain a single UNIX username on the left then a '=' followed -by a list of usernames on the right. The list of usernames on the -right may contain names of the form @group in which case they -will match any UNIX username in that group. The special client -name '*' is a wildcard and matches any name. Each line of the -map file may be up to 1023 characters long. -The file is processed on each line by taking the -supplied username and comparing it with each username on the right -hand side of the '=' signs. If the supplied name matches any of -the names on the right hand side then it is replaced with the name -on the left. Processing then continues with the next line. - -If any line begins with a '#' or a ';' then it is -ignored - -If any line begins with an '!' then the processing -will stop after that line if a mapping was done by the line. -Otherwise mapping continues with every line being processed. -Using '!' is most useful when you have a wildcard mapping line -later in the file. - -For example to map from the name admin -or administrator to the UNIX name root you would use: - -\fBroot = admin administrator\fR - -Or to map anyone in the UNIX group system -to the UNIX name sys you would use: - -\fBsys = @system\fR - -You can have as many mappings as you like in a username -map file. +.TP +%$(\fIenvvar\fR) +The value of the environment variable \fIenvar\fR\&. -If your system supports the NIS NETGROUP option then -the netgroup database is checked before the \fI/etc/group -\fR database for matching groups. -You can map Windows usernames that have spaces in them -by using double quotes around the name. For example: +.PP +The following substitutes apply only to some configuration options(only those that are used when a connection has been established): -\fBtridge = "Andrew Tridgell"\fR +.TP +%S +the name of the current service, if any\&. -would map the windows username "Andrew Tridgell" to the -unix username "tridge". -The following example would map mary and fred to the -unix user sys, and map the rest to guest. Note the use of the -\&'!' to tell Samba to stop processing if it gets a match on -that line. +.TP +%P +the root directory of the current service, if any\&. -.nf - !sys = mary fred - guest = * - -.fi +.TP +%u +user name of the current service, if any\&. -Note that the remapping is applied to all occurrences -of usernames. Thus if you connect to \\\\server\\fred and fred is remapped to mary then you -will actually be connecting to \\\\server\\mary and will need to -supply a password suitable for mary not -fred. The only exception to this is the -username passed to the \fI password server\fR (if you have one). The password -server will receive whatever username the client supplies without -modification. -Also note that no reverse mapping is done. The main effect -this has is with printing. Users who have been mapped may have -trouble deleting print jobs as PrintManager under WfWg will think -they don't own the print job. +.TP +%g +primary group name of %u\&. -Default: \fBno username map\fR -Example: \fBusername map = /usr/local/samba/lib/users.map -\fR -.TP -\fBuse sendfile (S)\fR -If this parameter is yes, and Samba -was built with the --with-sendfile-support option, and the underlying operating -system supports sendfile system call, then some SMB read calls (mainly ReadAndX -and ReadRaw) will use the more efficient sendfile system call for files that -are exclusively oplocked. This may make more efficient use of the system CPU's -and cause Samba to be faster. This is off by default as it's effects are unknown -as yet. - -Default: \fBuse sendfile = no\fR .TP -\fButmp (G)\fR -This boolean parameter is only available if -Samba has been configured and compiled with the option \fB --with-utmp\fR. If set to yes then Samba will attempt -to add utmp or utmpx records (depending on the UNIX system) whenever a -connection is made to a Samba server. Sites may use this to record the -user connecting to a Samba share. - -Due to the requirements of the utmp record, we -are required to create a unique identifier for the -incoming user. Enabling this option creates an n^2 -algorithm to find this number. This may impede -performance on large installations. - -See also the \fI utmp directory\fR parameter. - -Default: \fButmp = no\fR -.TP -\fButmp directory(G)\fR -This parameter is only available if Samba has -been configured and compiled with the option \fB --with-utmp\fR. It specifies a directory pathname that is -used to store the utmp or utmpx files (depending on the UNIX system) that -record user connections to a Samba server. See also the \fIutmp\fR parameter. By default this is -not set, meaning the system will use whatever utmp file the -native system is set to use (usually -\fI/var/run/utmp\fR on Linux). - -Default: \fBno utmp directory\fR - -Example: \fButmp directory = /var/run/utmp\fR -.TP -\fBwtmp directory(G)\fR -This parameter is only available if Samba has -been configured and compiled with the option \fB --with-utmp\fR. It specifies a directory pathname that is -used to store the wtmp or wtmpx files (depending on the UNIX system) that -record user connections to a Samba server. The difference with -the utmp directory is the fact that user info is kept after a user -has logged out. -See also the \fIutmp\fR parameter. By default this is -not set, meaning the system will use whatever utmp file the -native system is set to use (usually -\fI/var/run/wtmp\fR on Linux). - -Default: \fBno wtmp directory\fR - -Example: \fBwtmp directory = /var/log/wtmp\fR -.TP -\fBvalid users (S)\fR -This is a list of users that should be allowed -to login to this service. Names starting with '@', '+' and '&' -are interpreted using the same rules as described in the -\fIinvalid users\fR parameter. - -If this is empty (the default) then any user can login. -If a username is in both this list and the \fIinvalid -users\fR list then access is denied for that user. +%H +the home directory of the user given by %u\&. -The current servicename is substituted for \fI%S -\fR. This is useful in the [homes] section. -See also \fIinvalid users -\fR +.TP +%N +the name of your NIS home directory server\&. This is obtained from your NIS auto\&.map entry\&. If you have not compiled Samba with the \fB--with-automount\fR option then this value will be the same as %L\&. -Default: \fBNo valid users list (anyone can login) -\fR -Example: \fBvalid users = greg, @pcusers\fR .TP -\fBveto files(S)\fR -This is a list of files and directories that -are neither visible nor accessible. Each entry in the list must -be separated by a '/', which allows spaces to be included -in the entry. '*' and '?' can be used to specify multiple files -or directories as in DOS wildcards. +%p +the path of the service's home directory, obtained from your NIS auto\&.map entry\&. The NIS auto\&.map entry is split up as "%N:%p"\&. -Each entry must be a unix path, not a DOS path and -must \fBnot\fR include the unix directory -separator '/'. -Note that the \fIcase sensitive\fR option -is applicable in vetoing files. +.PP +There are some quite creative things that can be done with these substitutions and other smb\&.conf options\&. -One feature of the veto files parameter that it -is important to be aware of is Samba's behaviour when -trying to delete a directory. If a directory that is -to be deleted contains nothing but veto files this -deletion will \fBfail\fR unless you also set -the \fIdelete veto files\fR parameter to -\fIyes\fR. +.SH "NAME MANGLING" -Setting this parameter will affect the performance -of Samba, as it will be forced to check all files and directories -for a match as they are scanned. +.PP +Samba supports "name mangling" so that DOS and Windows clients can use files that don't conform to the 8\&.3 format\&. It can also be set to adjust the case of 8\&.3 format filenames\&. -See also \fIhide files -\fR and \fI case sensitive\fR. +.PP +There are several options that control the way mangling is performed, and they are grouped here rather than listed separately\&. For the defaults look at the output of the testparm program\&. -Default: \fBNo files or directories are vetoed. -\fR +.PP +All of these options can be set separately for each service (or globally, of course)\&. -Examples: +.PP +The options are: -.nf -; Veto any files containing the word Security, -; any ending in .tmp, and any directory containing the -; word root. -veto files = /*Security*/*.tmp/*root*/ - -; Veto the Apple specific files that a NetAtalk server -; creates. -veto files = /.AppleDouble/.bin/.AppleDesktop/Network Trash Folder/ -.fi -.TP -\fBveto oplock files (S)\fR -This parameter is only valid when the \fIoplocks\fR -parameter is turned on for a share. It allows the Samba administrator -to selectively turn off the granting of oplocks on selected files that -match a wildcarded list, similar to the wildcarded list used in the -\fIveto files\fR -parameter. - -Default: \fBNo files are vetoed for oplock -grants\fR - -You might want to do this on files that you know will -be heavily contended for by clients. A good example of this -is in the NetBench SMB benchmark program, which causes heavy -client contention for files ending in \fI.SEM\fR. -To cause Samba not to grant oplocks on these files you would use -the line (either in the [global] section or in the section for -the particular NetBench share : - -Example: \fBveto oplock files = /*.SEM/ -\fR .TP -\fBvfs path (S)\fR -This parameter specifies the directory -to look in for vfs modules. The name of every \fBvfs object -\fR will be prepended by this directory +mangle case = yes/no +controls if names that have characters that aren't of the "default" case are mangled\&. For example, if this is yes then a name like "Mail" would be mangled\&. Default \fBno\fR\&. -Default: \fBvfs path = \fR -Example: \fBvfs path = /usr/lib/samba/vfs\fR .TP -\fBvfs object (S)\fR -This parameter specifies a shared object files that -are used for Samba VFS I/O operations. By default, normal -disk I/O operations are used but these can be overloaded -with one or more VFS objects. +case sensitive = yes/no +controls whether filenames are case sensitive\&. If they aren't then Samba must do a filename search and match on passed names\&. Default \fBno\fR\&. -Default : \fBno value\fR -.TP -\fBvfs options (S)\fR -This parameter allows parameters to be passed -to the vfs layer at initialization time. -See also \fI vfs object\fR. -Default : \fBno value\fR .TP -\fBvolume (S)\fR -This allows you to override the volume label -returned for a share. Useful for CDROMs with installation programs -that insist on a particular volume label. +default case = upper/lower +controls what the default case is for new filenames\&. Default \fBlower\fR\&. -Default: \fBthe name of the share\fR -.TP -\fBwide links (S)\fR -This parameter controls whether or not links -in the UNIX file system may be followed by the server. Links -that point to areas within the directory tree exported by the -server are always allowed; this parameter controls access only -to areas that are outside the directory tree being exported. - -Note that setting this parameter can have a negative -effect on your server performance due to the extra system calls -that Samba has to do in order to perform the link checks. - -Default: \fBwide links = yes\fR -.TP -\fBwinbind cache time (G)\fR -This parameter specifies the number of seconds the -winbindd(8) daemon will cache -user and group information before querying a Windows NT server -again. -Default: \fBwinbind cache type = 15\fR -.TP -\fBwinbind enum users (G)\fR -On large installations using -winbindd(8) it may be -necessary to suppress the enumeration of users through the -\fB setpwent()\fR, -\fBgetpwent()\fR and -\fBendpwent()\fR group of system calls. If -the \fIwinbind enum users\fR parameter is -no, calls to the \fBgetpwent\fR system call -will not return any data. - -\fBWarning:\fR Turning off user -enumeration may cause some programs to behave oddly. For -example, the finger program relies on having access to the -full user list when searching for matching -usernames. - -Default: \fBwinbind enum users = yes \fR .TP -\fBwinbind enum groups (G)\fR -On large installations using -winbindd(8) it may be -necessary to suppress the enumeration of groups through the -\fB setgrent()\fR, -\fBgetgrent()\fR and -\fBendgrent()\fR group of system calls. If -the \fIwinbind enum groups\fR parameter is -no, calls to the \fBgetgrent()\fR system -call will not return any data. - -\fBWarning:\fR Turning off group -enumeration may cause some programs to behave oddly. - -Default: \fBwinbind enum groups = yes \fR -.TP -\fBwinbind gid (G)\fR -The winbind gid parameter specifies the range of group -ids that are allocated by the winbindd(8) daemon. This range of group ids should have no -existing local or NIS groups within it as strange conflicts can -occur otherwise. +preserve case = yes/no +controls if new files are created with the case that the client passes, or if they are forced to be the "default" case\&. Default \fByes\fR\&. -Default: \fBwinbind gid = -\fR -Example: \fBwinbind gid = 10000-20000\fR .TP -\fBwinbind separator (G)\fR -This parameter allows an admin to define the character -used when listing a username of the form of \fIDOMAIN -\fR\\\fIuser\fR. This parameter -is only applicable when using the \fIpam_winbind.so\fR -and \fInss_winbind.so\fR modules for UNIX services. +short preserve case = yes/no +controls if new files which conform to 8\&.3 syntax, that is all in upper case and of suitable length, are created upper case, or if they are forced to be the "default" case\&. This option can be use with "preserve case = yes" to permit long filenames to retain their case, while short names are lowercased\&. Default \fByes\fR\&. -Please note that setting this parameter to + causes problems -with group membership at least on glibc systems, as the character + -is used as a special character for NIS in /etc/group. -Default: \fBwinbind separator = '\\'\fR +.PP +By default, Samba 3\&.0 has the same semantics as a Windows NT server, in that it is case insensitive but case preserving\&. -Example: \fBwinbind separator = +\fR -.TP -\fBwinbind uid (G)\fR -The winbind gid parameter specifies the range of group -ids that are allocated by the winbindd(8) daemon. This range of ids should have no -existing local or NIS users within it as strange conflicts can -occur otherwise. +.SH "NOTE ABOUT USERNAME/PASSWORD VALIDATION" -Default: \fBwinbind uid = -\fR +.PP +There are a number of ways in which a user can connect to a service\&. The server uses the following steps in determining if it will allow a connection to a specified service\&. If all the steps fail, then the connection request is rejected\&. However, if one of the steps succeeds, then the following steps are not checked\&. -Example: \fBwinbind uid = 10000-20000\fR -.TP -\fBwinbind use default domain\fR -.TP -\fBwinbind use default domain (G)\fR -This parameter specifies whether the winbindd(8) -daemon should operate on users without domain component in their username. -Users without a domain component are treated as is part of the winbindd server's -own domain. While this does not benifit Windows users, it makes SSH, FTP and e-mail -function in a way much closer to the way they would in a native unix system. +.PP +If the service is marked "guest only = yes" and the server is running with share-level security ("security = share") then steps 1 to 5 are skipped\&. -Default: \fBwinbind use default domain = -\fR +.TP 3 +1. +If the client has passed a username/password pair and that username/password pair is validated by the UNIX system's password programs then the connection is made as that username\&. Note that this includes the \\\\server\\service%\fIusername\fR method of passing a username\&. -Example: \fBwinbind use default domain = yes\fR .TP -\fBwins hook (G)\fR -When Samba is running as a WINS server this -allows you to call an external program for all changes to the -WINS database. The primary use for this option is to allow the -dynamic update of external name resolution databases such as -dynamic DNS. - -The wins hook parameter specifies the name of a script -or executable that will be called as follows: - -\fBwins_hook operation name nametype ttl IP_list -\fR -.RS -.TP 0.2i -\(bu -The first argument is the operation and is one -of "add", "delete", or "refresh". In most cases the operation can -be ignored as the rest of the parameters provide sufficient -information. Note that "refresh" may sometimes be called when the -name has not previously been added, in that case it should be treated -as an add. -.TP 0.2i -\(bu -The second argument is the NetBIOS name. If the -name is not a legal name then the wins hook is not called. -Legal names contain only letters, digits, hyphens, underscores -and periods. -.TP 0.2i -\(bu -The third argument is the NetBIOS name -type as a 2 digit hexadecimal number. -.TP 0.2i -\(bu -The fourth argument is the TTL (time to live) -for the name in seconds. -.TP 0.2i -\(bu -The fifth and subsequent arguments are the IP -addresses currently registered for that name. If this list is -empty then the name should be deleted. -.RE +2. +If the client has previously registered a username with the system and now supplies a correct password for that username then the connection is allowed\&. -An example script that calls the BIND dynamic DNS update -program \fBnsupdate\fR is provided in the examples -directory of the Samba source code. .TP -\fBwins proxy (G)\fR -This is a boolean that controls if nmbd(8) will respond to broadcast name -queries on behalf of other hosts. You may need to set this -to yes for some older clients. +3. +The client's NetBIOS name and any previously used user names are checked against the supplied password, if they match then the connection is allowed as the corresponding user\&. -Default: \fBwins proxy = no\fR .TP -\fBwins server (G)\fR -This specifies the IP address (or DNS name: IP -address for preference) of the WINS server that nmbd(8) should register with. If you have a WINS server on -your network then you should set this to the WINS server's IP. - -You should point this at your WINS server if you have a -multi-subnetted network. - -\fBNOTE\fR. You need to set up Samba to point -to a WINS server if you have multiple subnets and wish cross-subnet -browsing to work correctly. +4. +If the client has previously validated a username/password pair with the server and the client has passed the validation token then that username is used\&. -See the documentation file \fIBROWSING.txt\fR -in the docs/ directory of your Samba source distribution. - -Default: \fBnot enabled\fR - -Example: \fBwins server = 192.9.200.1\fR .TP -\fBwins support (G)\fR -This boolean controls if the -nmbd(8) process in Samba will act as a WINS server. You should -not set this to yes unless you have a multi-subnetted network and -you wish a particular \fBnmbd\fR to be your WINS server. -Note that you should \fBNEVER\fR set this to yes -on more than one machine in your network. - -Default: \fBwins support = no\fR +5. +If a "user = " field is given in the \fIsmb\&.conf\fR file for the service and the client has supplied a password, and that password matches (according to the UNIX system's password checking) with one of the usernames from the "user =" field then the connection is made as the username in the "user =" line\&. If one of the username in the "user =" list begins with a '@' then that name expands to a list of names in the group of the same name\&. + .TP -\fBworkgroup (G)\fR -This controls what workgroup your server will -appear to be in when queried by clients. Note that this parameter -also controls the Domain name used with the \fBsecurity = domain\fR -setting. +6. +If the service is a guest service then a connection is made as the username given in the "guest account =" for the service, irrespective of the supplied password\&. -Default: \fBset at compile time to WORKGROUP\fR +.LP -Example: \fBworkgroup = MYGROUP\fR -.TP -\fBwritable (S)\fR -Synonym for \fI writeable\fR for people who can't spell :-). -.TP -\fBwrite cache size (S)\fR -If this integer parameter is set to non-zero value, -Samba will create an in-memory cache for each oplocked file -(it does \fBnot\fR do this for -non-oplocked files). All writes that the client does not request -to be flushed directly to disk will be stored in this cache if possible. -The cache is flushed onto disk when a write comes in whose offset -would not fit into the cache or when the file is closed by the client. -Reads for the file are also served from this cache if the data is stored -within it. - -This cache allows Samba to batch client writes into a more -efficient write size for RAID disks (i.e. writes may be tuned to -be the RAID stripe size) and can improve performance on systems -where the disk subsystem is a bottleneck but there is free -memory for userspace programs. - -The integer parameter specifies the size of this cache -(per oplocked file) in bytes. - -Default: \fBwrite cache size = 0\fR - -Example: \fBwrite cache size = 262144\fR - -for a 256k cache size per file. -.TP -\fBwrite list (S)\fR -This is a list of users that are given read-write -access to a service. If the connecting user is in this list then -they will be given write access, no matter what the \fIread only\fR -option is set to. The list can include group names using the -@group syntax. +.SH "COMPLETE LIST OF GLOBAL PARAMETERS" -Note that if a user is in both the read list and the -write list then they will be given write access. +.PP +Here is a list of all global parameters\&. See the section of each parameter for details\&. Note that some are synonyms\&. -See also the \fIread list -\fR option. +.TP 3 +.LP -Default: \fBwrite list = -\fR +.SH "COMPLETE LIST OF SERVICE PARAMETERS" -Example: \fBwrite list = admin, root, @staff -\fR -.TP -\fBwins partners (G)\fR -A space separated list of partners' IP addresses for -WINS replication. WINS partners are always defined as push/pull -partners as defining only one way WINS replication is unreliable. -WINS replication is currently experimental and unreliable between -samba servers. +.PP +Here is a list of all service parameters\&. See the section on each parameter for details\&. Note that some are synonyms\&. -Default: \fBwins partners = \fR +.TP 3 +.LP -Example: \fBwins partners = 192.168.0.1 172.16.1.2\fR -.TP -\fBwrite ok (S)\fR -Inverted synonym for \fI read only\fR. -.TP -\fBwrite raw (G)\fR -This parameter controls whether or not the server -will support raw write SMB's when transferring data from clients. -You should never need to change this parameter. +.SH "EXPLANATION OF EACH PARAMETER" -Default: \fBwrite raw = yes\fR -.TP -\fBwriteable (S)\fR -Inverted synonym for \fI read only\fR. .SH "WARNINGS" + .PP -Although the configuration file permits service names -to contain spaces, your client software may not. Spaces will -be ignored in comparisons anyway, so it shouldn't be a -problem - but be aware of the possibility. +Although the configuration file permits service names to contain spaces, your client software may not\&. Spaces will be ignored in comparisons anyway, so it shouldn't be a problem - but be aware of the possibility\&. + .PP -On a similar note, many clients - especially DOS clients - -limit service names to eight characters. smbd(8) - has no such limitation, but attempts to connect from such -clients will fail if they truncate the service names. For this reason -you should probably keep your service names down to eight characters -in length. +On a similar note, many clients - especially DOS clients - limit service names to eight characters\&. \fBsmbd\fR(8) has no such limitation, but attempts to connect from such clients will fail if they truncate the service names\&. For this reason you should probably keep your service names down to eight characters in length\&. + .PP -Use of the [homes] and [printers] special sections make life -for an administrator easy, but the various combinations of default -attributes can be tricky. Take extreme care when designing these -sections. In particular, ensure that the permissions on spool -directories are correct. +Use of the [homes] and [printers] special sections make life for an administrator easy, but the various combinations of default attributes can be tricky\&. Take extreme care when designing these sections\&. In particular, ensure that the permissions on spool directories are correct\&. + .SH "VERSION" + .PP -This man page is correct for version 3.0 of -the Samba suite. +This man page is correct for version 3\&.0 of the Samba suite\&. + .SH "SEE ALSO" + .PP -samba(7) -\fBsmbpasswd(8)\fR -\fBswat(8)\fR -\fBsmbd(8)\fR -\fBnmbd(8)\fR -\fBsmbclient(1)\fR -\fBnmblookup(1)\fR -\fBtestparm(1)\fR -\fBtestprns(1)\fR +\fBsamba\fR(7), \fBsmbpasswd\fR(8), \fBswat\fR(8), \fBsmbd\fR(8), \fBnmbd\fR(8), \fBsmbclient\fR(1), \fBnmblookup\fR(1), \fBtestparm\fR(1), \fBtestprns\fR(1)\&. + .SH "AUTHOR" + .PP -The original Samba software and related utilities -were created by Andrew Tridgell. Samba is now developed -by the Samba Team as an Open Source project similar -to the way the Linux kernel is developed. +The original Samba software and related utilities were created by Andrew Tridgell\&. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\&. + .PP -The original Samba man pages were written by Karl Auer. -The man page sources were converted to YODL format (another -excellent piece of Open Source software, available at -ftp://ftp.icce.rug.nl/pub/unix/ ) and updated for the Samba 2.0 -release by Jeremy Allison. The conversion to DocBook for -Samba 2.2 was done by Gerald Carter +The original Samba man pages were written by Karl Auer\&. The man page sources were converted to YODL format (another excellent piece of Open Source software, available at ftp://ftp\&.icce\&.rug\&.nl/pub/unix/) and updated for the Samba 2\&.0 release by Jeremy Allison\&. The conversion to DocBook for Samba 2\&.2 was done by Gerald Carter\&. The conversion to DocBook XML 4\&.2 for Samba 3\&.0 was done by Alexander Bokovoy\&. + diff --git a/docs/manpages/smbcacls.1 b/docs/manpages/smbcacls.1 index aaed1ba8f5..9df06dff9b 100644 --- a/docs/manpages/smbcacls.1 +++ b/docs/manpages/smbcacls.1 @@ -1,82 +1,135 @@ -.\" This manpage has been automatically generated by docbook2man -.\" from a DocBook document. This tool can be found at: -.\" -.\" Please send any bug reports, improvements, comments, patches, -.\" etc. to Steve Cheng . -.TH "SMBCACLS" "1" "04 March 2003" "" "" +.\"Generated by db2man.xsl. Don't modify this, modify the source. +.de Sh \" Subsection +.br +.if t .Sp +.ne 5 +.PP +\fB\\$1\fR +.PP +.. +.de Sp \" Vertical space (when we can't use .PP) +.if t .sp .5v +.if n .sp +.. +.de Ip \" List item +.br +.ie \\n(.$>=3 .ne \\$3 +.el .ne 3 +.IP "\\$1" \\$2 +.. +.TH "SMBCACLS" 1 "" "" "" .SH NAME smbcacls \- Set or get ACLs on an NT file or directory names -.SH SYNOPSIS +.SH "SYNOPSIS" -\fBsmbcacls\fR \fB//server/share\fR \fBfilename\fR [ \fB-U username\fR ] [ \fB-A acls\fR ] [ \fB-M acls\fR ] [ \fB-D acls\fR ] [ \fB-S acls\fR ] [ \fB-C name\fR ] [ \fB-G name\fR ] [ \fB-n\fR ] [ \fB-h\fR ] +.nf +\fBsmbcacls\fR {//server/share} {filename} [-D acls] [-M acls] [-A acls] [-S acls] [-C name] [-G name] [-n] [-t] [-U username] [-h] [-d] + +.fi .SH "DESCRIPTION" + .PP -This tool is part of the Samba suite. +This tool is part of the \fBSamba\fR(7) suite\&. + .PP -The \fBsmbcacls\fR program manipulates NT Access Control -Lists (ACLs) on SMB file shares. +The \fBsmbcacls\fR program manipulates NT Access Control Lists (ACLs) on SMB file shares\&. + .SH "OPTIONS" + .PP -The following options are available to the \fBsmbcacls\fR program. -The format of ACLs is described in the section ACL FORMAT -.TP -\fB-A acls\fR -Add the ACLs specified to the ACL list. Existing -access control entries are unchanged. -.TP -\fB-M acls\fR -Modify the mask value (permissions) for the ACLs -specified on the command line. An error will be printed for each -ACL specified that was not already present in the ACL list -.TP -\fB-D acls\fR -Delete any ACLs specified on the command line. -An error will be printed for each ACL specified that was not -already present in the ACL list. -.TP -\fB-S acls\fR -This command sets the ACLs on the file with -only the ones specified on the command line. All other ACLs are -erased. Note that the ACL specified must contain at least a revision, -type, owner and group for the call to succeed. -.TP -\fB-U username\fR -Specifies a username used to connect to the -specified service. The username may be of the form "username" in -which case the user is prompted to enter in a password and the -workgroup specified in the \fIsmb.conf\fR file is -used, or "username%password" or "DOMAIN\\username%password" and the -password and workgroup names are used as provided. -.TP -\fB-C name\fR -The owner of a file or directory can be changed -to the name given using the \fI-C\fR option. -The name can be a sid in the form S-1-x-y-z or a name resolved -against the server specified in the first argument. - -This command is a shortcut for -M OWNER:name. -.TP -\fB-G name\fR -The group owner of a file or directory can -be changed to the name given using the \fI-G\fR -option. The name can be a sid in the form S-1-x-y-z or a name -resolved against the server specified n the first argument. - -This command is a shortcut for -M GROUP:name. -.TP -\fB-n\fR -This option displays all ACL information in numeric -format. The default is to convert SIDs to names and ACE types -and masks to a readable string format. -.TP -\fB-h\fR -Print usage information on the \fBsmbcacls -\fR program. +The following options are available to the \fBsmbcacls\fR program\&. The format of ACLs is described in the section ACL FORMAT + +.TP +-A acls +Add the ACLs specified to the ACL list\&. Existing access control entries are unchanged\&. + + +.TP +-M acls +Modify the mask value (permissions) for the ACLs specified on the command line\&. An error will be printed for each ACL specified that was not already present in the ACL list + + +.TP +-D acls +Delete any ACLs specified on the command line\&. An error will be printed for each ACL specified that was not already present in the ACL list\&. + + +.TP +-S acls +This command sets the ACLs on the file with only the ones specified on the command line\&. All other ACLs are erased\&. Note that the ACL specified must contain at least a revision, type, owner and group for the call to succeed\&. + + +.TP +-U username +Specifies a username used to connect to the specified service\&. The username may be of the form "username" in which case the user is prompted to enter in a password and the workgroup specified in the \fBsmb.conf\fR(5) file is used, or "username%password" or "DOMAIN\\username%password" and the password and workgroup names are used as provided\&. + + +.TP +-C name +The owner of a file or directory can be changed to the name given using the \fI-C\fR option\&. The name can be a sid in the form S-1-x-y-z or a name resolved against the server specified in the first argument\&. + + +This command is a shortcut for -M OWNER:name\&. + + +.TP +-G name +The group owner of a file or directory can be changed to the name given using the \fI-G\fR option\&. The name can be a sid in the form S-1-x-y-z or a name resolved against the server specified n the first argument\&. + + +This command is a shortcut for -M GROUP:name\&. + + +.TP +-n +This option displays all ACL information in numeric format\&. The default is to convert SIDs to names and ACE types and masks to a readable string format\&. + + +.TP +-t +Don't actually do anything, only validate the correctness of the arguments\&. + + +.TP +-h|--help +Print a summary of command line options\&. + + +.TP +-V +Prints the version number for \fBsmbd\fR\&. + + +.TP +-s +The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fI smb\&.conf(5)\fR for more information\&. The default configuration file name is determined at compile time\&. + + +.TP +-d|--debug=debuglevel +\fIdebuglevel\fR is an integer from 0 to 10\&. The default value if this parameter is not specified is zero\&. + + +The higher this value, the more detail will be logged to the log files about the activities of the server\&. At level 0, only critical errors and serious warnings will be logged\&. Level 1 is a reasonable level for day to day running - it generates a small amount of information about operations carried out\&. + + +Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\&. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\&. + + +Note that specifying this parameter here will override the log level parameter in the \fIsmb\&.conf(5)\fR file\&. + + +.TP +-l|--logfile=logbasename +File name for log/debug files\&. The extension \fB"\&.client"\fR will be appended\&. The log file is never removed by the client\&. + + .SH "ACL FORMAT" + .PP -The format of an ACL is one or more ACL entries separated by -either commas or newlines. An ACL entry is one of the following: +The format of an ACL is one or more ACL entries separated by either commas or newlines\&. An ACL entry is one of the following: + .PP .nf @@ -85,104 +138,109 @@ REVISION: OWNER: GROUP: ACL::// - .fi + + +.PP +The revision of the ACL specifies the internal Windows NT ACL revision for the security descriptor\&. If not specified it defaults to 1\&. Using values other than 1 may cause strange behaviour\&. + .PP -The revision of the ACL specifies the internal Windows -NT ACL revision for the security descriptor. -If not specified it defaults to 1. Using values other than 1 may -cause strange behaviour. -.PP -The owner and group specify the owner and group sids for the -object. If a SID in the format CWS-1-x-y-z is specified this is used, -otherwise the name specified is resolved using the server on which -the file or directory resides. -.PP -ACLs specify permissions granted to the SID. This SID again -can be specified in CWS-1-x-y-z format or as a name in which case -it is resolved against the server on which the file or directory -resides. The type, flags and mask values determine the type of -access granted to the SID. -.PP -The type can be either 0 or 1 corresponding to ALLOWED or -DENIED access to the SID. The flags values are generally -zero for file ACLs and either 9 or 2 for directory ACLs. Some -common flags are: -.TP 0.2i +The owner and group specify the owner and group sids for the object\&. If a SID in the format CWS-1-x-y-z is specified this is used, otherwise the name specified is resolved using the server on which the file or directory resides\&. + +.PP +ACLs specify permissions granted to the SID\&. This SID again can be specified in CWS-1-x-y-z format or as a name in which case it is resolved against the server on which the file or directory resides\&. The type, flags and mask values determine the type of access granted to the SID\&. + +.PP +The type can be either 0 or 1 corresponding to ALLOWED or DENIED access to the SID\&. The flags values are generally zero for file ACLs and either 9 or 2 for directory ACLs\&. Some common flags are: + +.TP 3 \(bu -#define SEC_ACE_FLAG_OBJECT_INHERIT 0x1 -.TP 0.2i +\fB#define SEC_ACE_FLAG_OBJECT_INHERIT 0x1\fR + +.TP \(bu -#define SEC_ACE_FLAG_CONTAINER_INHERIT 0x2 -.TP 0.2i +\fB#define SEC_ACE_FLAG_CONTAINER_INHERIT 0x2\fR + +.TP \(bu -#define SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0x4 -.TP 0.2i +\fB#define SEC_ACE_FLAG_NO_PROPAGATE_INHERIT 0x4\fR + +.TP \(bu -#define SEC_ACE_FLAG_INHERIT_ONLY 0x8 +\fB#define SEC_ACE_FLAG_INHERIT_ONLY 0x8\fR + +.LP + .PP -At present flags can only be specified as decimal or -hexadecimal values. +At present flags can only be specified as decimal or hexadecimal values\&. + .PP -The mask is a value which expresses the access right -granted to the SID. It can be given as a decimal or hexadecimal value, -or by using one of the following text strings which map to the NT -file permissions of the same name. -.TP 0.2i +The mask is a value which expresses the access right granted to the SID\&. It can be given as a decimal or hexadecimal value, or by using one of the following text strings which map to the NT file permissions of the same name\&. + +.TP 3 \(bu -\fBR\fR - Allow read access -.TP 0.2i +\fBR\fR - Allow read access + +.TP \(bu \fBW\fR - Allow write access -.TP 0.2i + +.TP \(bu \fBX\fR - Execute permission on the object -.TP 0.2i + +.TP \(bu \fBD\fR - Delete the object -.TP 0.2i + +.TP \(bu \fBP\fR - Change permissions -.TP 0.2i + +.TP \(bu \fBO\fR - Take ownership + +.LP + .PP The following combined permissions can be specified: -.TP 0.2i + +.TP 3 \(bu -\fBREAD\fR - Equivalent to 'RX' -permissions -.TP 0.2i +\fBREAD\fR - Equivalent to 'RX' permissions + +.TP \(bu \fBCHANGE\fR - Equivalent to 'RXWD' permissions -.TP 0.2i + +.TP \(bu -\fBFULL\fR - Equivalent to 'RWXDPO' -permissions +\fBFULL\fR - Equivalent to 'RWXDPO' permissions + +.LP + .SH "EXIT STATUS" + .PP -The \fBsmbcacls\fR program sets the exit status -depending on the success or otherwise of the operations performed. -The exit status may be one of the following values. +The \fBsmbcacls\fR program sets the exit status depending on the success or otherwise of the operations performed\&. The exit status may be one of the following values\&. + .PP -If the operation succeeded, smbcacls returns and exit -status of 0. If \fBsmbcacls\fR couldn't connect to the specified server, -or there was an error getting or setting the ACLs, an exit status -of 1 is returned. If there was an error parsing any command line -arguments, an exit status of 2 is returned. +If the operation succeeded, smbcacls returns and exit status of 0\&. If \fBsmbcacls\fR couldn't connect to the specified server, or there was an error getting or setting the ACLs, an exit status of 1 is returned\&. If there was an error parsing any command line arguments, an exit status of 2 is returned\&. + .SH "VERSION" + .PP -This man page is correct for version 2.2 of -the Samba suite. +This man page is correct for version 3\&.0 of the Samba suite\&. + .SH "AUTHOR" + .PP -The original Samba software and related utilities -were created by Andrew Tridgell. Samba is now developed -by the Samba Team as an Open Source project similar -to the way the Linux kernel is developed. +The original Samba software and related utilities were created by Andrew Tridgell\&. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\&. + .PP -\fBsmbcacls\fR was written by Andrew Tridgell -and Tim Potter. +\fBsmbcacls\fR was written by Andrew Tridgell and Tim Potter\&. + .PP -The conversion to DocBook for Samba 2.2 was done -by Gerald Carter +The conversion to DocBook for Samba 2\&.2 was done by Gerald Carter\&. The conversion to DocBook XML 4\&.2 for Samba 3\&.0 was done by Alexander Bokovoy\&. + diff --git a/docs/manpages/smbclient.1 b/docs/manpages/smbclient.1 index e5785acaf5..3f5718a2fa 100644 --- a/docs/manpages/smbclient.1 +++ b/docs/manpages/smbclient.1 @@ -1,798 +1,651 @@ -.\" This manpage has been automatically generated by docbook2man -.\" from a DocBook document. This tool can be found at: -.\" -.\" Please send any bug reports, improvements, comments, patches, -.\" etc. to Steve Cheng . -.TH "SMBCLIENT" "1" "04 March 2003" "" "" +.\"Generated by db2man.xsl. Don't modify this, modify the source. +.de Sh \" Subsection +.br +.if t .Sp +.ne 5 +.PP +\fB\\$1\fR +.PP +.. +.de Sp \" Vertical space (when we can't use .PP) +.if t .sp .5v +.if n .sp +.. +.de Ip \" List item +.br +.ie \\n(.$>=3 .ne \\$3 +.el .ne 3 +.IP "\\$1" \\$2 +.. +.TH "SMBCLIENT" 1 "" "" "" .SH NAME -smbclient \- ftp-like client to access SMB/CIFS resources on servers -.SH SYNOPSIS +smbclient \- ftp-like client to access SMB/CIFS resources on servers +.SH "SYNOPSIS" -\fBsmbclient\fR \fBservicename\fR [ \fBpassword\fR ] [ \fB-b \fR ] [ \fB-d debuglevel\fR ] [ \fB-D Directory\fR ] [ \fB-U username\fR ] [ \fB-W workgroup\fR ] [ \fB-M \fR ] [ \fB-m maxprotocol\fR ] [ \fB-A authfile\fR ] [ \fB-N\fR ] [ \fB-l logfile\fR ] [ \fB-L \fR ] [ \fB-I destinationIP\fR ] [ \fB-E\fR ] [ \fB-c \fR ] [ \fB-i scope\fR ] [ \fB-O \fR ] [ \fB-p port\fR ] [ \fB-R \fR ] [ \fB-s \fR ] [ \fB-TIXFqgbNan\fR ] +.nf +\fBsmbclient\fR {servicename} [password] [-b ] [-d debuglevel] [-D Directory] + [-U username] [-W workgroup] [-M ] [-m maxprotocol] [-A authfile] [-N] [-l logfile] [-L ] [-I destinationIP] [-E] [-c ] [-i scope] [-O ] [-p port] [-R ] [-s ] [-TIXFqgbNan] [-k] + +.fi .SH "DESCRIPTION" + .PP -This tool is part of the Samba suite. +This tool is part of the \fBSamba\fR(7) suite\&. + .PP -\fBsmbclient\fR is a client that can -\&'talk' to an SMB/CIFS server. It offers an interface -similar to that of the ftp program (see \fBftp(1)\fR). -Operations include things like getting files from the server -to the local machine, putting files from the local machine to -the server, retrieving directory information from the server -and so on. +\fBsmbclient\fR is a client that can 'talk' to an SMB/CIFS server\&. It offers an interface similar to that of the ftp program (see \fBftp\fR(1))\&. Operations include things like getting files from the server to the local machine, putting files from the local machine to the server, retrieving directory information from the server and so on\&. + .SH "OPTIONS" + +.TP +servicename +servicename is the name of the service you want to use on the server\&. A service name takes the form \fI//server/service\fR where \fIserver \fR is the NetBIOS name of the SMB/CIFS server offering the desired service and \fIservice\fR is the name of the service offered\&. Thus to connect to the service "printer" on the SMB/CIFS server "smbserver", you would use the servicename \fI//smbserver/printer \fR + + +Note that the server name required is NOT necessarily the IP (DNS) host name of the server ! The name required is a NetBIOS server name, which may or may not be the same as the IP hostname of the machine running the server\&. + + +The server name is looked up according to either the \fI-R\fR parameter to \fBsmbclient\fR or using the name resolve order parameter in the \fBsmb.conf\fR(5) file, allowing an administrator to change the order and methods by which server names are looked up\&. + + .TP -\fBservicename\fR -servicename is the name of the service -you want to use on the server. A service name takes the form -\fI//server/service\fR where \fIserver -\fR is the NetBIOS name of the SMB/CIFS server -offering the desired service and \fIservice\fR -is the name of the service offered. Thus to connect to -the service "printer" on the SMB/CIFS server "smbserver", -you would use the servicename \fI//smbserver/printer -\fR - -Note that the server name required is NOT necessarily -the IP (DNS) host name of the server ! The name required is -a NetBIOS server name, which may or may not be the -same as the IP hostname of the machine running the server. - -The server name is looked up according to either -the \fI-R\fR parameter to \fBsmbclient\fR or -using the name resolve order parameter in the \fIsmb.conf\fR file, -allowing an administrator to change the order and methods -by which server names are looked up. -.TP -\fBpassword\fR -The password required to access the specified -service on the specified server. If this parameter is -supplied, the \fI-N\fR option (suppress -password prompt) is assumed. - -There is no default password. If no password is supplied -on the command line (either by using this parameter or adding -a password to the \fI-U\fR option (see -below)) and the \fI-N\fR option is not -specified, the client will prompt for a password, even if -the desired service does not require one. (If no password is -required, simply press ENTER to provide a null password.) - -Note: Some servers (including OS/2 and Windows for -Workgroups) insist on an uppercase password. Lowercase -or mixed case passwords may be rejected by these servers. - -Be cautious about including passwords in scripts. -.TP -\fB-s smb.conf\fR -Specifies the location of the all important -\fIsmb.conf\fR file. -.TP -\fB-O socket options\fR -TCP socket options to set on the client -socket. See the socket options parameter in the \fI smb.conf (5)\fR manpage for the list of valid -options. -.TP -\fB-R \fR -This option is used by the programs in the Samba -suite to determine what naming services and in what order to resolve -host names to IP addresses. The option takes a space-separated -string of different name resolution options. - -The options are :"lmhosts", "host", "wins" and "bcast". They -cause names to be resolved as follows : -.RS -.TP 0.2i -\(bu -lmhosts : Lookup an IP -address in the Samba lmhosts file. If the line in lmhosts has -no name type attached to the NetBIOS name (see the lmhosts(5) for details) then -any name type matches for lookup. -.TP 0.2i -\(bu -host : Do a standard host -name to IP address resolution, using the system \fI/etc/hosts -\fR, NIS, or DNS lookups. This method of name resolution -is operating system dependent, for instance on IRIX or Solaris this -may be controlled by the \fI/etc/nsswitch.conf\fR -file). Note that this method is only used if the NetBIOS name -type being queried is the 0x20 (server) name type, otherwise -it is ignored. -.TP 0.2i -\(bu -wins : Query a name with -the IP address listed in the \fIwins server\fR -parameter. If no WINS server has -been specified this method will be ignored. -.TP 0.2i -\(bu -bcast : Do a broadcast on -each of the known local interfaces listed in the -\fIinterfaces\fR -parameter. This is the least reliable of the name resolution -methods as it depends on the target host being on a locally -connected subnet. -.RE - -If this parameter is not set then the name resolve order -defined in the \fIsmb.conf\fR file parameter -(name resolve order) will be used. - -The default order is lmhosts, host, wins, bcast and without -this parameter or any entry in the \fIname resolve order -\fR parameter of the \fIsmb.conf\fR file the name resolution -methods will be attempted in this order. -.TP -\fB-M NetBIOS name\fR -This options allows you to send messages, using -the "WinPopup" protocol, to another computer. Once a connection is -established you then type your message, pressing ^D (control-D) to -end. - -If the receiving computer is running WinPopup the user will -receive the message and probably a beep. If they are not running -WinPopup the message will be lost, and no error message will -occur. - -The message is also automatically truncated if the message -is over 1600 bytes, as this is the limit of the protocol. - -One useful trick is to cat the message through -\fBsmbclient\fR. For example: \fB cat mymessage.txt | smbclient -M FRED \fR will -send the message in the file \fImymessage.txt\fR -to the machine FRED. - -You may also find the \fI-U\fR and -\fI-I\fR options useful, as they allow you to -control the FROM and TO parts of the message. - -See the message command parameter in the \fI smb.conf(5)\fR for a description of how to handle incoming -WinPopup messages in Samba. - -\fBNote\fR: Copy WinPopup into the startup group -on your WfWg PCs if you want them to always be able to receive -messages. -.TP -\fB-i scope\fR -This specifies a NetBIOS scope that smbclient will -use to communicate with when generating NetBIOS names. For details -on the use of NetBIOS scopes, see \fIrfc1001.txt\fR -and \fIrfc1002.txt\fR. -NetBIOS scopes are \fBvery\fR rarely used, only set -this parameter if you are the system administrator in charge of all -the NetBIOS systems you communicate with. -.TP -\fB-N\fR -If specified, this parameter suppresses the normal -password prompt from the client to the user. This is useful when -accessing a service that does not require a password. - -Unless a password is specified on the command line or -this parameter is specified, the client will request a -password. -.TP -\fB-n NetBIOS name\fR -By default, the client will use the local -machine's hostname (in uppercase) as its NetBIOS name. This parameter -allows you to override the host name and use whatever NetBIOS -name you wish. -.TP -\fB-d debuglevel\fR -\fIdebuglevel\fR is an integer from 0 to 10, or -the letter 'A'. - -The default value if this parameter is not specified -is zero. - -The higher this value, the more detail will be logged to -the log files about the activities of the -client. At level 0, only critical errors and serious warnings will -be logged. Level 1 is a reasonable level for day to day running - -it generates a small amount of information about operations -carried out. - -Levels above 1 will generate considerable amounts of log -data, and should only be used when investigating a problem. -Levels above 3 are designed for use only by developers and -generate HUGE amounts of log data, most of which is extremely -cryptic. If \fIdebuglevel\fR is set to the letter 'A', then \fBall -\fR debug messages will be printed. This setting -is for developers only (and people who \fBreally\fR want -to know how the code works internally). - -Note that specifying this parameter here will override -the log level parameter in the \fIsmb.conf (5)\fR -file. -.TP -\fB-p port\fR -This number is the TCP port number that will be used -when making connections to the server. The standard (well-known) -TCP port number for an SMB/CIFS server is 139, which is the -default. -.TP -\fB-l logfilename\fR -If specified, \fIlogfilename\fR specifies a base filename -into which operational data from the running client will be -logged. - -The default base name is specified at compile time. - -The base name is used to generate actual log file names. -For example, if the name specified was "log", the debug file -would be \fIlog.client\fR. - -The log file generated is never removed by the client. -.TP -\fB-h\fR -Print the usage message for the client. -.TP -\fB-I IP-address\fR -\fIIP address\fR is the address of the server to connect to. -It should be specified in standard "a.b.c.d" notation. - -Normally the client would attempt to locate a named -SMB/CIFS server by looking it up via the NetBIOS name resolution -mechanism described above in the \fIname resolve order\fR -parameter above. Using this parameter will force the client -to assume that the server is on the machine with the specified IP -address and the NetBIOS name component of the resource being -connected to will be ignored. - -There is no default for this parameter. If not supplied, -it will be determined automatically by the client as described -above. -.TP -\fB-E\fR -This parameter causes the client to write messages -to the standard error stream (stderr) rather than to the standard -output stream. - -By default, the client writes messages to standard output -- typically the user's tty. -.TP -\fB-U username[%pass]\fR -Sets the SMB username or username and password. -If %pass is not specified, The user will be prompted. The client -will first check the \fBUSER\fR environment variable, then the -\fBLOGNAME\fR variable and if either exists, the -string is uppercased. Anything in these variables following a '%' -sign will be treated as the password. If these environment -variables are not found, the username GUEST -is used. - -If the password is not included in these environment -variables (using the %pass syntax), \fBsmbclient\fR will look for -a \fBPASSWD\fR environment variable from which -to read the password. - -A third option is to use a credentials file which -contains the plaintext of the domain name, username and password. This -option is mainly provided for scripts where the admin doesn't -wish to pass the credentials on the command line or via environment -variables. If this method is used, make certain that the permissions -on the file restrict access from unwanted users. See the -\fI-A\fR for more details. - -Be cautious about including passwords in scripts or in -the \fBPASSWD\fR environment variable. Also, on -many systems the command line of a running process may be seen -via the \fBps\fR command to be safe always allow -\fBsmbclient\fR to prompt for a password and type -it in directly. -.TP -\fB-A filename\fR -This option allows -you to specify a file from which to read the username, domain name, and -password used in the connection. The format of the file is +password +The password required to access the specified service on the specified server\&. If this parameter is supplied, the \fI-N\fR option (suppress password prompt) is assumed\&. + + +There is no default password\&. If no password is supplied on the command line (either by using this parameter or adding a password to the \fI-U\fR option (see below)) and the \fI-N\fR option is not specified, the client will prompt for a password, even if the desired service does not require one\&. (If no password is required, simply press ENTER to provide a null password\&.) + + +Note: Some servers (including OS/2 and Windows for Workgroups) insist on an uppercase password\&. Lowercase or mixed case passwords may be rejected by these servers\&. + + +Be cautious about including passwords in scripts\&. + + +.TP +-R +This option is used by the programs in the Samba suite to determine what naming services and in what order to resolve host names to IP addresses\&. The option takes a space-separated string of different name resolution options\&. + + +The options are :"lmhosts", "host", "wins" and "bcast"\&. They cause names to be resolved as follows: + + +\fBlmhosts\fR: Lookup an IP address in the Samba lmhosts file\&. If the line in lmhosts has no name type attached to the NetBIOS name (see the \fBlmhosts\fR(5) for details) then any name type matches for lookup\&. + +\fBhost\fR: Do a standard host name to IP address resolution, using the system \fI/etc/hosts \fR, NIS, or DNS lookups\&. This method of name resolution is operating system dependent, for instance on IRIX or Solaris this may be controlled by the \fI/etc/nsswitch\&.conf\fR file)\&. Note that this method is only used if the NetBIOS name type being queried is the 0x20 (server) name type, otherwise it is ignored\&. + +\fBwins\fR: Query a name with the IP address listed in the \fIwins server\fR parameter\&. If no WINS server has been specified this method will be ignored\&. + +\fBbcast\fR: Do a broadcast on each of the known local interfaces listed in the \fIinterfaces\fR parameter\&. This is the least reliable of the name resolution methods as it depends on the target host being on a locally connected subnet\&. + +If this parameter is not set then the name resolve order defined in the \fBsmb.conf\fR(5) file parameter (name resolve order) will be used\&. + + +The default order is lmhosts, host, wins, bcast and without this parameter or any entry in the \fIname resolve order \fR parameter of the \fBsmb.conf\fR(5) file the name resolution methods will be attempted in this order\&. + + +.TP +-M NetBIOS name +This options allows you to send messages, using the "WinPopup" protocol, to another computer\&. Once a connection is established you then type your message, pressing ^D (control-D) to end\&. + + +If the receiving computer is running WinPopup the user will receive the message and probably a beep\&. If they are not running WinPopup the message will be lost, and no error message will occur\&. + + +The message is also automatically truncated if the message is over 1600 bytes, as this is the limit of the protocol\&. + + +One useful trick is to cat the message through \fBsmbclient\fR\&. For example: \fB cat mymessage.txt | smbclient -M FRED \fR will send the message in the file \fImymessage\&.txt\fR to the machine FRED\&. + + +You may also find the \fI-U\fR and \fI-I\fR options useful, as they allow you to control the FROM and TO parts of the message\&. + + +See the \fImessage command\fR parameter in the \fBsmb.conf\fR(5) for a description of how to handle incoming WinPopup messages in Samba\&. + + +\fBNote\fR: Copy WinPopup into the startup group on your WfWg PCs if you want them to always be able to receive messages\&. + + +.TP +-p port +This number is the TCP port number that will be used when making connections to the server\&. The standard (well-known) TCP port number for an SMB/CIFS server is 139, which is the default\&. + + +.TP +-l logfilename +If specified, \fIlogfilename\fR specifies a base filename into which operational data from the running client will be logged\&. + + +The default base name is specified at compile time\&. + + +The base name is used to generate actual log file names\&. For example, if the name specified was "log", the debug file would be \fIlog\&.client\fR\&. + + +The log file generated is never removed by the client\&. + + +.TP +-h|--help +Print a summary of command line options\&. + + +.TP +-I IP-address +\fIIP address\fR is the address of the server to connect to\&. It should be specified in standard "a\&.b\&.c\&.d" notation\&. + + +Normally the client would attempt to locate a named SMB/CIFS server by looking it up via the NetBIOS name resolution mechanism described above in the \fIname resolve order\fR parameter above\&. Using this parameter will force the client to assume that the server is on the machine with the specified IP address and the NetBIOS name component of the resource being connected to will be ignored\&. + + +There is no default for this parameter\&. If not supplied, it will be determined automatically by the client as described above\&. + + +.TP +-E +This parameter causes the client to write messages to the standard error stream (stderr) rather than to the standard output stream\&. + + +By default, the client writes messages to standard output - typically the user's tty\&. + + +.TP +-L +This option allows you to look at what services are available on a server\&. You use it as \fBsmbclient -L host\fR and a list should appear\&. The \fI-I \fR option may be useful if your NetBIOS names don't match your TCP/IP DNS host names or if you are trying to reach a host on another network\&. + + +.TP +-t terminal code +This option tells \fBsmbclient\fR how to interpret filenames coming from the remote server\&. Usually Asian language multibyte UNIX implementations use different character sets than SMB/CIFS servers (\fBEUC\fR instead of \fB SJIS\fR for example)\&. Setting this parameter will let \fBsmbclient\fR convert between the UNIX filenames and the SMB filenames correctly\&. This option has not been seriously tested and may have some problems\&. + + +The terminal codes include CWsjis, CWeuc, CWjis7, CWjis8, CWjunet, CWhex, CWcap\&. This is not a complete list, check the Samba source code for the complete list\&. + + +.TP +-b buffersize +This option changes the transmit/send buffer size when getting or putting a file from/to the server\&. The default is 65520 bytes\&. Setting this value smaller (to 1200 bytes) has been observed to speed up file transfers to and from a Win9x server\&. + + +.TP +-V +Prints the version number for \fBsmbd\fR\&. + + +.TP +-s +The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fI smb\&.conf(5)\fR for more information\&. The default configuration file name is determined at compile time\&. + + +.TP +-d|--debug=debuglevel +\fIdebuglevel\fR is an integer from 0 to 10\&. The default value if this parameter is not specified is zero\&. + + +The higher this value, the more detail will be logged to the log files about the activities of the server\&. At level 0, only critical errors and serious warnings will be logged\&. Level 1 is a reasonable level for day to day running - it generates a small amount of information about operations carried out\&. + + +Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\&. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\&. + + +Note that specifying this parameter here will override the log level parameter in the \fIsmb\&.conf(5)\fR file\&. + + +.TP +-l|--logfile=logbasename +File name for log/debug files\&. The extension \fB"\&.client"\fR will be appended\&. The log file is never removed by the client\&. + + +.TP +-N +If specified, this parameter suppresses the normal password prompt from the client to the user\&. This is useful when accessing a service that does not require a password\&. + + +Unless a password is specified on the command line or this parameter is specified, the client will request a password\&. + + +.TP +-k +Try to authenticate with kerberos\&. Only useful in an Active Directory environment\&. + + +.TP +-A|--authfile=filename +This option allows you to specify a file from which to read the username and password used in the connection\&. The format of the file is .nf -username = + +username = password = -domain = - +domain = .fi -If the domain parameter is missing the current workgroup name -is used instead. Make certain that the permissions on the file restrict -access from unwanted users. -.TP -\fB-L\fR -This option allows you to look at what services -are available on a server. You use it as \fBsmbclient -L -host\fR and a list should appear. The \fI-I -\fR option may be useful if your NetBIOS names don't -match your TCP/IP DNS host names or if you are trying to reach a -host on another network. -.TP -\fB-t terminal code\fR -This option tells \fBsmbclient\fR how to interpret -filenames coming from the remote server. Usually Asian language -multibyte UNIX implementations use different character sets than -SMB/CIFS servers (\fBEUC\fR instead of \fB SJIS\fR for example). Setting this parameter will let -\fBsmbclient\fR convert between the UNIX filenames and -the SMB filenames correctly. This option has not been seriously tested -and may have some problems. - -The terminal codes include CWsjis, CWeuc, CWjis7, CWjis8, -CWjunet, CWhex, CWcap. This is not a complete list, check the Samba -source code for the complete list. -.TP -\fB-b buffersize\fR -This option changes the transmit/send buffer -size when getting or putting a file from/to the server. The default -is 65520 bytes. Setting this value smaller (to 1200 bytes) has been -observed to speed up file transfers to and from a Win9x server. -.TP -\fB-W WORKGROUP\fR -Override the default workgroup (domain) specified -in the workgroup parameter of the \fIsmb.conf\fR -file for this connection. This may be needed to connect to some -servers. -.TP -\fB-T tar options\fR -smbclient may be used to create \fBtar(1) -\fR compatible backups of all the files on an SMB/CIFS -share. The secondary tar flags that can be given to this option -are : -.RS -.TP 0.2i -\(bu -\fIc\fR - Create a tar file on UNIX. -Must be followed by the name of a tar file, tape device -or "-" for standard output. If using standard output you must -turn the log level to its lowest value -d0 to avoid corrupting -your tar file. This flag is mutually exclusive with the -\fIx\fR flag. -.TP 0.2i -\(bu -\fIx\fR - Extract (restore) a local -tar file back to a share. Unless the -D option is given, the tar -files will be restored from the top level of the share. Must be -followed by the name of the tar file, device or "-" for standard -input. Mutually exclusive with the \fIc\fR flag. -Restored files have their creation times (mtime) set to the -date saved in the tar file. Directories currently do not get -their creation dates restored properly. -.TP 0.2i -\(bu -\fII\fR - Include files and directories. -Is the default behavior when filenames are specified above. Causes -tar files to be included in an extract or create (and therefore -everything else to be excluded). See example below. Filename globbing -works in one of two ways. See r below. -.TP 0.2i -\(bu -\fIX\fR - Exclude files and directories. -Causes tar files to be excluded from an extract or create. See -example below. Filename globbing works in one of two ways now. -See \fIr\fR below. -.TP 0.2i -\(bu -\fIb\fR - Blocksize. Must be followed -by a valid (greater than zero) blocksize. Causes tar file to be -written out in blocksize*TBLOCK (usually 512 byte) blocks. -.TP 0.2i -\(bu -\fIg\fR - Incremental. Only back up -files that have the archive bit set. Useful only with the -\fIc\fR flag. -.TP 0.2i -\(bu -\fIq\fR - Quiet. Keeps tar from printing -diagnostics as it works. This is the same as tarmode quiet. -.TP 0.2i -\(bu -\fIr\fR - Regular expression include -or exclude. Uses regular expression matching for -excluding or excluding files if compiled with HAVE_REGEX_H. -However this mode can be very slow. If not compiled with -HAVE_REGEX_H, does a limited wildcard match on '*' and '?'. -.TP 0.2i -\(bu -\fIN\fR - Newer than. Must be followed -by the name of a file whose date is compared against files found -on the share during a create. Only files newer than the file -specified are backed up to the tar file. Useful only with the -\fIc\fR flag. -.TP 0.2i -\(bu -\fIa\fR - Set archive bit. Causes the -archive bit to be reset when a file is backed up. Useful with the -\fIg\fR and \fIc\fR flags. -.RE + +Make certain that the permissions on the file restrict access from unwanted users\&. + + +.TP +-U|--user=username[%password] +Sets the SMB username or username and password\&. + + +If %password is not specified, the user will be prompted\&. The client will first check the \fBUSER\fR environment variable, then the \fBLOGNAME\fR variable and if either exists, the string is uppercased\&. If these environmental variables are not found, the username \fBGUEST\fR is used\&. + + +A third option is to use a credentials file which contains the plaintext of the username and password\&. This option is mainly provided for scripts where the admin does not wish to pass the credentials on the command line or via environment variables\&. If this method is used, make certain that the permissions on the file restrict access from unwanted users\&. See the \fI-A\fR for more details\&. + + +Be cautious about including passwords in scripts\&. Also, on many systems the command line of a running process may be seen via the \fBps\fR command\&. To be safe always allow \fBrpcclient\fR to prompt for a password and type it in directly\&. + + +.TP +-n +This option allows you to override the NetBIOS name that Samba uses for itself\&. This is identical to setting the \fINetBIOS name\fR parameter in the \fBsmb.conf\fR(5) file\&. However, a command line setting will take precedence over settings in \fBsmb.conf\fR(5)\&. + + +.TP +-i +This specifies a NetBIOS scope that \fBnmblookup\fR will use to communicate with when generating NetBIOS names\&. For details on the use of NetBIOS scopes, see rfc1001\&.txt and rfc1002\&.txt\&. NetBIOS scopes are \fBvery\fR rarely used, only set this parameter if you are the system administrator in charge of all the NetBIOS systems you communicate with\&. + + +.TP +-W|--workgroup=domain +Set the SMB domain of the username\&. This overrides the default domain which is the domain defined in smb\&.conf\&. If the domain specified is the same as the servers NetBIOS name, it causes the client to log on using the servers local SAM (as opposed to the Domain SAM)\&. + + +.TP +-O socket options +TCP socket options to set on the client socket\&. See the socket options parameter in the \fBsmb.conf\fR(5) manual page for the list of valid options\&. + + +.TP +-T tar options +smbclient may be used to create \fBtar(1) \fR compatible backups of all the files on an SMB/CIFS share\&. The secondary tar flags that can be given to this option are : + + +\fIc\fR - Create a tar file on UNIX\&. Must be followed by the name of a tar file, tape device or "-" for standard output\&. If using standard output you must turn the log level to its lowest value -d0 to avoid corrupting your tar file\&. This flag is mutually exclusive with the \fIx\fR flag\&. + +\fIx\fR - Extract (restore) a local tar file back to a share\&. Unless the -D option is given, the tar files will be restored from the top level of the share\&. Must be followed by the name of the tar file, device or "-" for standard input\&. Mutually exclusive with the \fIc\fR flag\&. Restored files have their creation times (mtime) set to the date saved in the tar file\&. Directories currently do not get their creation dates restored properly\&. + +\fII\fR - Include files and directories\&. Is the default behavior when filenames are specified above\&. Causes tar files to be included in an extract or create (and therefore everything else to be excluded)\&. See example below\&. Filename globbing works in one of two ways\&. See r below\&. + +\fIX\fR - Exclude files and directories\&. Causes tar files to be excluded from an extract or create\&. See example below\&. Filename globbing works in one of two ways now\&. See \fIr\fR below\&. + +\fIb\fR - Blocksize\&. Must be followed by a valid (greater than zero) blocksize\&. Causes tar file to be written out in blocksize*TBLOCK (usually 512 byte) blocks\&. + +\fIg\fR - Incremental\&. Only back up files that have the archive bit set\&. Useful only with the \fIc\fR flag\&. + +\fIq\fR - Quiet\&. Keeps tar from printing diagnostics as it works\&. This is the same as tarmode quiet\&. + +\fIr\fR - Regular expression include or exclude\&. Uses regular expression matching for excluding or excluding files if compiled with HAVE_REGEX_H\&. However this mode can be very slow\&. If not compiled with HAVE_REGEX_H, does a limited wildcard match on '*' and '?'\&. + +\fIN\fR - Newer than\&. Must be followed by the name of a file whose date is compared against files found on the share during a create\&. Only files newer than the file specified are backed up to the tar file\&. Useful only with the \fIc\fR flag\&. + +\fIa\fR - Set archive bit\&. Causes the archive bit to be reset when a file is backed up\&. Useful with the \fIg\fR and \fIc\fR flags\&. \fBTar Long File Names\fR -\fBsmbclient\fR's tar option now supports long -file names both on backup and restore. However, the full path -name of the file must be less than 1024 bytes. Also, when -a tar archive is created, \fBsmbclient\fR's tar option places all -files in the archive with relative names, not absolute names. + +\fBsmbclient\fR's tar option now supports long file names both on backup and restore\&. However, the full path name of the file must be less than 1024 bytes\&. Also, when a tar archive is created, \fBsmbclient\fR's tar option places all files in the archive with relative names, not absolute names\&. + \fBTar Filenames\fR -All file names can be given as DOS path names (with '\\' -as the component separator) or as UNIX path names (with '/' as -the component separator). + +All file names can be given as DOS path names (with '\\\\' as the component separator) or as UNIX path names (with '/' as the component separator)\&. + \fBExamples\fR -Restore from tar file \fIbackup.tar\fR into myshare on mypc -(no password on share). -\fBsmbclient //mypc/yshare "" -N -Tx backup.tar -\fR +Restore from tar file \fIbackup\&.tar\fR into myshare on mypc (no password on share)\&. + + +\fBsmbclient //mypc/yshare "" -N -Tx backup.tar \fR + Restore everything except \fIusers/docs\fR -\fBsmbclient //mypc/myshare "" -N -TXx backup.tar -users/docs\fR -Create a tar file of the files beneath \fI users/docs\fR. +\fBsmbclient //mypc/myshare "" -N -TXx backup.tar users/docs\fR + + +Create a tar file of the files beneath \fI users/docs\fR\&. + + +\fBsmbclient //mypc/myshare "" -N -Tc backup.tar users/docs \fR + + +Create the same tar file as above, but now use a DOS path name\&. + + +\fBsmbclient //mypc/myshare "" -N -tc backup.tar users\edocs \fR + -\fBsmbclient //mypc/myshare "" -N -Tc -backup.tar users/docs \fR +Create a tar file of all the files and directories in the share\&. -Create the same tar file as above, but now use -a DOS path name. -\fBsmbclient //mypc/myshare "" -N -tc backup.tar -users\\edocs \fR +\fBsmbclient //mypc/myshare "" -N -Tc backup.tar * \fR -Create a tar file of all the files and directories in -the share. -\fBsmbclient //mypc/myshare "" -N -Tc backup.tar * -\fR .TP -\fB-D initial directory\fR -Change to initial directory before starting. Probably -only of any use with the tar -T option. +-D initial directory +Change to initial directory before starting\&. Probably only of any use with the tar -T option\&. + + .TP -\fB-c command string\fR -command string is a semicolon-separated list of -commands to be executed instead of prompting from stdin. \fI -N\fR is implied by \fI-c\fR. +-c command string +command string is a semicolon-separated list of commands to be executed instead of prompting from stdin\&. \fI -N\fR is implied by \fI-c\fR\&. + + +This is particularly useful in scripts and for printing stdin to the server, e\&.g\&. \fB-c 'print -'\fR\&. + -This is particularly useful in scripts and for printing stdin -to the server, e.g. \fB-c 'print -'\fR. .SH "OPERATIONS" + .PP -Once the client is running, the user is presented with -a prompt : +Once the client is running, the user is presented with a prompt : + .PP -smb:\\> +smb:\\> + .PP -The backslash ("\\") indicates the current working directory -on the server, and will change if the current working directory -is changed. +The backslash ("\\\\") indicates the current working directory on the server, and will change if the current working directory is changed\&. + .PP -The prompt indicates that the client is ready and waiting to -carry out a user command. Each command is a single word, optionally -followed by parameters specific to that command. Command and parameters -are space-delimited unless these notes specifically -state otherwise. All commands are case-insensitive. Parameters to -commands may or may not be case sensitive, depending on the command. +The prompt indicates that the client is ready and waiting to carry out a user command\&. Each command is a single word, optionally followed by parameters specific to that command\&. Command and parameters are space-delimited unless these notes specifically state otherwise\&. All commands are case-insensitive\&. Parameters to commands may or may not be case sensitive, depending on the command\&. + .PP -You can specify file names which have spaces in them by quoting -the name with double quotes, for example "a long file name". +You can specify file names which have spaces in them by quoting the name with double quotes, for example "a long file name"\&. + .PP -Parameters shown in square brackets (e.g., "[parameter]") are -optional. If not given, the command will use suitable defaults. Parameters -shown in angle brackets (e.g., "") are required. +Parameters shown in square brackets (e\&.g\&., "[parameter]") are optional\&. If not given, the command will use suitable defaults\&. Parameters shown in angle brackets (e\&.g\&., "") are required\&. + .PP -Note that all commands operating on the server are actually -performed by issuing a request to the server. Thus the behavior may -vary from server to server, depending on how the server was implemented. +Note that all commands operating on the server are actually performed by issuing a request to the server\&. Thus the behavior may vary from server to server, depending on how the server was implemented\&. + .PP -The commands available are given here in alphabetical order. -.TP -\fB? [command]\fR -If \fIcommand\fR is specified, the ? command will display -a brief informative message about the specified command. If no -command is specified, a list of available commands will -be displayed. -.TP -\fB! [shell command]\fR -If \fIshell command\fR is specified, the ! -command will execute a shell locally and run the specified shell -command. If no command is specified, a local shell will be run. -.TP -\fBaltname file\fR -The client will request that the server return -the "alternate" name (the 8.3 name) for a file or directory. -.TP -\fBcancel jobid0 [jobid1] ... [jobidN]\fR -The client will request that the server cancel -the printjobs identified by the given numeric print job ids. -.TP -\fBchmod file mode in octal\fR -This command depends on the server supporting the CIFS -UNIX extensions and will fail if the server does not. The client requests that the server -change the UNIX permissions to the given octal mode, in standard UNIX format. -.TP -\fBchown file uid gid\fR -This command depends on the server supporting the CIFS -UNIX extensions and will fail if the server does not. The client requests that the server -change the UNIX user and group ownership to the given decimal values. Note there is -currently no way to remotely look up the UNIX uid and gid values for a given name. -This may be addressed in future versions of the CIFS UNIX extensions. -.TP -\fBcd [directory name]\fR -If "directory name" is specified, the current -working directory on the server will be changed to the directory -specified. This operation will fail if for any reason the specified -directory is inaccessible. - -If no directory name is specified, the current working -directory on the server will be reported. -.TP -\fBdel \fR -The client will request that the server attempt -to delete all files matching \fImask\fR from the current working -directory on the server. -.TP -\fBdir \fR -A list of the files matching \fImask\fR in the current -working directory on the server will be retrieved from the server -and displayed. -.TP -\fBexit\fR -Terminate the connection with the server and exit -from the program. -.TP -\fBget [local file name]\fR -Copy the file called \fIremote file name\fR from -the server to the machine running the client. If specified, name -the local copy \fIlocal file name\fR. Note that all transfers in -\fBsmbclient\fR are binary. See also the -lowercase command. -.TP -\fBhelp [command]\fR -See the ? command above. -.TP -\fBlcd [directory name]\fR -If \fIdirectory name\fR is specified, the current -working directory on the local machine will be changed to -the directory specified. This operation will fail if for any -reason the specified directory is inaccessible. - -If no directory name is specified, the name of the -current working directory on the local machine will be reported. -.TP -\fBlink source destination\fR -This command depends on the server supporting the CIFS -UNIX extensions and will fail if the server does not. The client requests that the server -create a hard link between the source and destination files. The source file -must not exist. -.TP -\fBlowercase\fR -Toggle lowercasing of filenames for the get and -mget commands. - -When lowercasing is toggled ON, local filenames are converted -to lowercase when using the get and mget commands. This is -often useful when copying (say) MSDOS files from a server, because -lowercase filenames are the norm on UNIX systems. -.TP -\fBls \fR -See the dir command above. -.TP -\fBmask \fR -This command allows the user to set up a mask -which will be used during recursive operation of the mget and -mput commands. - -The masks specified to the mget and mput commands act as -filters for directories rather than files when recursion is -toggled ON. - -The mask specified with the mask command is necessary -to filter files within those directories. For example, if the -mask specified in an mget command is "source*" and the mask -specified with the mask command is "*.c" and recursion is -toggled ON, the mget command will retrieve all files matching -"*.c" in all directories below and including all directories -matching "source*" in the current working directory. - -Note that the value for mask defaults to blank (equivalent -to "*") and remains so until the mask command is used to change it. -It retains the most recently specified value indefinitely. To -avoid unexpected results it would be wise to change the value of -mask back to "*" after using the mget or mput commands. -.TP -\fBmd \fR -See the mkdir command. -.TP -\fBmget \fR -Copy all files matching \fImask\fR from the server to -the machine running the client. - -Note that \fImask\fR is interpreted differently during recursive -operation and non-recursive operation - refer to the recurse and -mask commands for more information. Note that all transfers in -\fBsmbclient\fR are binary. See also the lowercase command. -.TP -\fBmkdir \fR -Create a new directory on the server (user access -privileges permitting) with the specified name. -.TP -\fBmput \fR -Copy all files matching \fImask\fR in the current working -directory on the local machine to the current working directory on -the server. - -Note that \fImask\fR is interpreted differently during recursive -operation and non-recursive operation - refer to the recurse and mask -commands for more information. Note that all transfers in \fBsmbclient\fR -are binary. -.TP -\fBprint \fR -Print the specified file from the local machine -through a printable service on the server. - -See also the printmode command. -.TP -\fBprintmode \fR -Set the print mode to suit either binary data -(such as graphical information) or text. Subsequent print -commands will use the currently set print mode. -.TP -\fBprompt\fR -Toggle prompting for filenames during operation -of the mget and mput commands. - -When toggled ON, the user will be prompted to confirm -the transfer of each file during these commands. When toggled -OFF, all specified files will be transferred without prompting. -.TP -\fBput [remote file name]\fR -Copy the file called \fIlocal file name\fR from the -machine running the client to the server. If specified, -name the remote copy \fIremote file name\fR. Note that all transfers -in \fBsmbclient\fR are binary. See also the lowercase command. -.TP -\fBqueue\fR -Displays the print queue, showing the job id, -name, size and current status. -.TP -\fBquit\fR -See the exit command. -.TP -\fBrd \fR -See the rmdir command. -.TP -\fBrecurse\fR -Toggle directory recursion for the commands mget -and mput. - -When toggled ON, these commands will process all directories -in the source directory (i.e., the directory they are copying -from ) and will recurse into any that match the mask specified -to the command. Only files that match the mask specified using -the mask command will be retrieved. See also the mask command. - -When recursion is toggled OFF, only files from the current -working directory on the source machine that match the mask specified -to the mget or mput commands will be copied, and any mask specified -using the mask command will be ignored. -.TP -\fBrm \fR -Remove all files matching \fImask\fR from the current -working directory on the server. -.TP -\fBrmdir \fR -Remove the specified directory (user access -privileges permitting) from the server. -.TP -\fBsetmode \fR -A version of the DOS attrib command to set -file permissions. For example: +The commands available are given here in alphabetical order\&. + +.TP +? [command] +If \fIcommand\fR is specified, the ? command will display a brief informative message about the specified command\&. If no command is specified, a list of available commands will be displayed\&. + + +.TP +! [shell command] +If \fIshell command\fR is specified, the ! command will execute a shell locally and run the specified shell command\&. If no command is specified, a local shell will be run\&. + + +.TP +altname file +The client will request that the server return the "alternate" name (the 8\&.3 name) for a file or directory\&. + + +.TP +cancel jobid0 [jobid1] \&.\&.\&. [jobidN] +The client will request that the server cancel the printjobs identified by the given numeric print job ids\&. + + +.TP +chmod file mode in octal +This command depends on the server supporting the CIFS UNIX extensions and will fail if the server does not\&. The client requests that the server change the UNIX permissions to the given octal mode, in standard UNIX format\&. + + +.TP +chown file uid gid +This command depends on the server supporting the CIFS UNIX extensions and will fail if the server does not\&. The client requests that the server change the UNIX user and group ownership to the given decimal values\&. Note there is currently no way to remotely look up the UNIX uid and gid values for a given name\&. This may be addressed in future versions of the CIFS UNIX extensions\&. + + +.TP +cd [directory name] +If "directory name" is specified, the current working directory on the server will be changed to the directory specified\&. This operation will fail if for any reason the specified directory is inaccessible\&. + + +If no directory name is specified, the current working directory on the server will be reported\&. + + +.TP +del +The client will request that the server attempt to delete all files matching \fImask\fR from the current working directory on the server\&. + + +.TP +dir +A list of the files matching \fImask\fR in the current working directory on the server will be retrieved from the server and displayed\&. + + +.TP +exit +Terminate the connection with the server and exit from the program\&. + + +.TP +get [local file name] +Copy the file called \fIremote file name\fR from the server to the machine running the client\&. If specified, name the local copy \fIlocal file name\fR\&. Note that all transfers in \fBsmbclient\fR are binary\&. See also the lowercase command\&. + + +.TP +help [command] +See the ? command above\&. + + +.TP +lcd [directory name] +If \fIdirectory name\fR is specified, the current working directory on the local machine will be changed to the directory specified\&. This operation will fail if for any reason the specified directory is inaccessible\&. + + +If no directory name is specified, the name of the current working directory on the local machine will be reported\&. + + +.TP +link source destination +This command depends on the server supporting the CIFS UNIX extensions and will fail if the server does not\&. The client requests that the server create a hard link between the source and destination files\&. The source file must not exist\&. + + +.TP +lowercase +Toggle lowercasing of filenames for the get and mget commands\&. + + +When lowercasing is toggled ON, local filenames are converted to lowercase when using the get and mget commands\&. This is often useful when copying (say) MSDOS files from a server, because lowercase filenames are the norm on UNIX systems\&. + + +.TP +ls +See the dir command above\&. + + +.TP +mask +This command allows the user to set up a mask which will be used during recursive operation of the mget and mput commands\&. + + +The masks specified to the mget and mput commands act as filters for directories rather than files when recursion is toggled ON\&. + + +The mask specified with the mask command is necessary to filter files within those directories\&. For example, if the mask specified in an mget command is "source*" and the mask specified with the mask command is "*\&.c" and recursion is toggled ON, the mget command will retrieve all files matching "*\&.c" in all directories below and including all directories matching "source*" in the current working directory\&. + + +Note that the value for mask defaults to blank (equivalent to "*") and remains so until the mask command is used to change it\&. It retains the most recently specified value indefinitely\&. To avoid unexpected results it would be wise to change the value of mask back to "*" after using the mget or mput commands\&. + + +.TP +md +See the mkdir command\&. + + +.TP +mget +Copy all files matching \fImask\fR from the server to the machine running the client\&. + + +Note that \fImask\fR is interpreted differently during recursive operation and non-recursive operation - refer to the recurse and mask commands for more information\&. Note that all transfers in \fBsmbclient\fR are binary\&. See also the lowercase command\&. + + +.TP +mkdir +Create a new directory on the server (user access privileges permitting) with the specified name\&. + + +.TP +mput +Copy all files matching \fImask\fR in the current working directory on the local machine to the current working directory on the server\&. + + +Note that \fImask\fR is interpreted differently during recursive operation and non-recursive operation - refer to the recurse and mask commands for more information\&. Note that all transfers in \fBsmbclient\fR are binary\&. + + +.TP +print +Print the specified file from the local machine through a printable service on the server\&. + + +See also the printmode command\&. + + +.TP +printmode +Set the print mode to suit either binary data (such as graphical information) or text\&. Subsequent print commands will use the currently set print mode\&. + + +.TP +prompt +Toggle prompting for filenames during operation of the mget and mput commands\&. + + +When toggled ON, the user will be prompted to confirm the transfer of each file during these commands\&. When toggled OFF, all specified files will be transferred without prompting\&. + + +.TP +put [remote file name] +Copy the file called \fIlocal file name\fR from the machine running the client to the server\&. If specified, name the remote copy \fIremote file name\fR\&. Note that all transfers in \fBsmbclient\fR are binary\&. See also the lowercase command\&. + + +.TP +queue +Displays the print queue, showing the job id, name, size and current status\&. + + +.TP +quit +See the exit command\&. + + +.TP +rd +See the rmdir command\&. + + +.TP +recurse +Toggle directory recursion for the commands mget and mput\&. + + +When toggled ON, these commands will process all directories in the source directory (i\&.e\&., the directory they are copying from ) and will recurse into any that match the mask specified to the command\&. Only files that match the mask specified using the mask command will be retrieved\&. See also the mask command\&. + + +When recursion is toggled OFF, only files from the current working directory on the source machine that match the mask specified to the mget or mput commands will be copied, and any mask specified using the mask command will be ignored\&. + + +.TP +rm +Remove all files matching \fImask\fR from the current working directory on the server\&. + + +.TP +rmdir +Remove the specified directory (user access privileges permitting) from the server\&. + + +.TP +setmode +A version of the DOS attrib command to set file permissions\&. For example: + \fBsetmode myfile +r \fR -would make myfile read only. -.TP -\fBsymlink source destination\fR -This command depends on the server supporting the CIFS -UNIX extensions and will fail if the server does not. The client requests that the server -create a symbolic hard link between the source and destination files. The source file -must not exist. Note that the server will not create a link to any path that lies -outside the currently connected share. This is enforced by the Samba server. -.TP -\fBtar [IXbgNa]\fR -Performs a tar operation - see the \fI-T -\fR command line option above. Behavior may be affected -by the tarmode command (see below). Using g (incremental) and N -(newer) will affect tarmode settings. Note that using the "-" option -with tar x may not work - use the command line option instead. -.TP -\fBblocksize \fR -Blocksize. Must be followed by a valid (greater -than zero) blocksize. Causes tar file to be written out in -\fIblocksize\fR*TBLOCK (usually 512 byte) blocks. -.TP -\fBtarmode \fR -Changes tar's behavior with regard to archive -bits. In full mode, tar will back up everything regardless of the -archive bit setting (this is the default mode). In incremental mode, -tar will only back up files with the archive bit set. In reset mode, -tar will reset the archive bit on all files it backs up (implies -read/write share). + +would make myfile read only\&. + + +.TP +symlink source destination +This command depends on the server supporting the CIFS UNIX extensions and will fail if the server does not\&. The client requests that the server create a symbolic hard link between the source and destination files\&. The source file must not exist\&. Note that the server will not create a link to any path that lies outside the currently connected share\&. This is enforced by the Samba server\&. + + +.TP +tar [IXbgNa] +Performs a tar operation - see the \fI-T \fR command line option above\&. Behavior may be affected by the tarmode command (see below)\&. Using g (incremental) and N (newer) will affect tarmode settings\&. Note that using the "-" option with tar x may not work - use the command line option instead\&. + + +.TP +blocksize +Blocksize\&. Must be followed by a valid (greater than zero) blocksize\&. Causes tar file to be written out in \fIblocksize\fR*TBLOCK (usually 512 byte) blocks\&. + + +.TP +tarmode +Changes tar's behavior with regard to archive bits\&. In full mode, tar will back up everything regardless of the archive bit setting (this is the default mode)\&. In incremental mode, tar will only back up files with the archive bit set\&. In reset mode, tar will reset the archive bit on all files it backs up (implies read/write share)\&. + + .SH "NOTES" + .PP -Some servers are fussy about the case of supplied usernames, -passwords, share names (AKA service names) and machine names. -If you fail to connect try giving all parameters in uppercase. +Some servers are fussy about the case of supplied usernames, passwords, share names (AKA service names) and machine names\&. If you fail to connect try giving all parameters in uppercase\&. + .PP -It is often necessary to use the -n option when connecting -to some types of servers. For example OS/2 LanManager insists -on a valid NetBIOS name being used, so you need to supply a valid -name that would be known to the server. +It is often necessary to use the -n option when connecting to some types of servers\&. For example OS/2 LanManager insists on a valid NetBIOS name being used, so you need to supply a valid name that would be known to the server\&. + .PP -smbclient supports long file names where the server -supports the LANMAN2 protocol or above. +smbclient supports long file names where the server supports the LANMAN2 protocol or above\&. + .SH "ENVIRONMENT VARIABLES" + .PP -The variable \fBUSER\fR may contain the -username of the person using the client. This information is -used only if the protocol level is high enough to support -session-level passwords. +The variable \fBUSER\fR may contain the username of the person using the client\&. This information is used only if the protocol level is high enough to support session-level passwords\&. + .PP -The variable \fBPASSWD\fR may contain -the password of the person using the client. This information is -used only if the protocol level is high enough to support -session-level passwords. +The variable \fBPASSWD\fR may contain the password of the person using the client\&. This information is used only if the protocol level is high enough to support session-level passwords\&. + .PP -The variable \fBLIBSMB_PROG\fR may contain -the path, executed with system(), which the client should connect -to instead of connecting to a server. This functionality is primarily -intended as a development aid, and works best when using a LMHOSTS -file +The variable \fBLIBSMB_PROG\fR may contain the path, executed with system(), which the client should connect to instead of connecting to a server\&. This functionality is primarily intended as a development aid, and works best when using a LMHOSTS file + .SH "INSTALLATION" + .PP -The location of the client program is a matter for -individual system administrators. The following are thus -suggestions only. +The location of the client program is a matter for individual system administrators\&. The following are thus suggestions only\&. + .PP -It is recommended that the smbclient software be installed -in the \fI/usr/local/samba/bin/\fR or \fI /usr/samba/bin/\fR directory, this directory readable -by all, writeable only by root. The client program itself should -be executable by all. The client should \fBNOT\fR be -setuid or setgid! +It is recommended that the smbclient software be installed in the \fI/usr/local/samba/bin/\fR or \fI /usr/samba/bin/\fR directory, this directory readable by all, writeable only by root\&. The client program itself should be executable by all\&. The client should \fBNOT\fR be setuid or setgid! + .PP -The client log files should be put in a directory readable -and writeable only by the user. +The client log files should be put in a directory readable and writeable only by the user\&. + .PP -To test the client, you will need to know the name of a -running SMB/CIFS server. It is possible to run \fBsmbd(8) -\fR as an ordinary user - running that server as a daemon -on a user-accessible port (typically any port number over 1024) -would provide a suitable test server. +To test the client, you will need to know the name of a running SMB/CIFS server\&. It is possible to run \fBsmbd\fR(8) as an ordinary user - running that server as a daemon on a user-accessible port (typically any port number over 1024) would provide a suitable test server\&. + .SH "DIAGNOSTICS" + .PP -Most diagnostics issued by the client are logged in a -specified log file. The log file name is specified at compile time, -but may be overridden on the command line. +Most diagnostics issued by the client are logged in a specified log file\&. The log file name is specified at compile time, but may be overridden on the command line\&. + .PP -The number and nature of diagnostics available depends -on the debug level used by the client. If you have problems, -set the debug level to 3 and peruse the log files. +The number and nature of diagnostics available depends on the debug level used by the client\&. If you have problems, set the debug level to 3 and peruse the log files\&. + .SH "VERSION" + .PP -This man page is correct for version 2.2 of -the Samba suite. +This man page is correct for version 2\&.2 of the Samba suite\&. + .SH "AUTHOR" + .PP -The original Samba software and related utilities -were created by Andrew Tridgell. Samba is now developed -by the Samba Team as an Open Source project similar -to the way the Linux kernel is developed. +The original Samba software and related utilities were created by Andrew Tridgell\&. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\&. + .PP -The original Samba man pages were written by Karl Auer. -The man page sources were converted to YODL format (another -excellent piece of Open Source software, available at -ftp://ftp.icce.rug.nl/pub/unix/ ) and updated for the Samba 2.0 -release by Jeremy Allison. The conversion to DocBook for -Samba 2.2 was done by Gerald Carter +The original Samba man pages were written by Karl Auer\&. The man page sources were converted to YODL format (another excellent piece of Open Source software, available at ftp://ftp\&.icce\&.rug\&.nl/pub/unix/) and updated for the Samba 2\&.0 release by Jeremy Allison\&. The conversion to DocBook for Samba 2\&.2 was done by Gerald Carter\&. The conversion to DocBook XML 4\&.2 for Samba 3\&.0 was done by Alexander Bokovoy\&. + diff --git a/docs/manpages/smbcontrol.1 b/docs/manpages/smbcontrol.1 index d69e0978a4..44d419f919 100644 --- a/docs/manpages/smbcontrol.1 +++ b/docs/manpages/smbcontrol.1 @@ -1,151 +1,216 @@ -.\" This manpage has been automatically generated by docbook2man -.\" from a DocBook document. This tool can be found at: -.\" -.\" Please send any bug reports, improvements, comments, patches, -.\" etc. to Steve Cheng . -.TH "SMBCONTROL" "1" "04 March 2003" "" "" +.\"Generated by db2man.xsl. Don't modify this, modify the source. +.de Sh \" Subsection +.br +.if t .Sp +.ne 5 +.PP +\fB\\$1\fR +.PP +.. +.de Sp \" Vertical space (when we can't use .PP) +.if t .sp .5v +.if n .sp +.. +.de Ip \" List item +.br +.ie \\n(.$>=3 .ne \\$3 +.el .ne 3 +.IP "\\$1" \\$2 +.. +.TH "SMBCONTROL" 1 "" "" "" .SH NAME smbcontrol \- send messages to smbd, nmbd or winbindd processes -.SH SYNOPSIS +.SH "SYNOPSIS" -\fBsmbcontrol\fR [ \fB-i\fR ] +.nf +\fBsmbcontrol\fR [-i] [-s] +.fi - -\fBsmbcontrol\fR [ \fBdestination\fR ] [ \fBmessage-type\fR ] [ \fBparameter\fR ] +.nf +\fBsmbcontrol\fR [destination] [message-type] [parameter] +.fi .SH "DESCRIPTION" + .PP -This tool is part of the Samba suite. +This tool is part of the \fBSamba\fR(7) suite\&. + .PP -\fBsmbcontrol\fR is a very small program, which -sends messages to an smbd(8) -an nmbd(8) -or a winbindd(8) -daemon running on the system. +\fBsmbcontrol\fR is a very small program, which sends messages to a \fBsmbd\fR(8), a \fBnmbd\fR(8), or a \fBwinbindd\fR(8) daemon running on the system\&. + .SH "OPTIONS" + +.TP +-h|--help +Print a summary of command line options\&. + + +.TP +-s +The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fI smb\&.conf(5)\fR for more information\&. The default configuration file name is determined at compile time\&. + + +.TP +-i +Run interactively\&. Individual commands of the form destination message-type parameters can be entered on STDIN\&. An empty command line or a "q" will quit the program\&. + + +.TP +destination +One of \fInmbd\fR, \fIsmbd\fR or a process ID\&. + + +The \fIsmbd\fR destination causes the message to "broadcast" to all smbd daemons\&. + + +The \fInmbd\fR destination causes the message to be sent to the nmbd daemon specified in the \fInmbd\&.pid\fR file\&. + + +If a single process ID is given, the message is sent to only that process\&. + + +.TP +message-type +Type of message to send\&. See the section \fBMESSAGE-TYPES\fR for details\&. + + +.TP +parameters +any parameters required for the message-type + + +.SH "MESSAGE-TYPES" + +.PP +Available message types are: + +.TP +close-share +Order smbd to close the client connections to the named share\&. Note that this doesn't affect client connections to any other shares\&. This message-type takes an argument of the share name for which client connections will be closed, or the "*" character which will close all currently open shares\&. This may be useful if you made changes to the access controls on the share\&. This message can only be sent to \fBsmbd\fR\&. + + +.TP +debug +Set debug level to the value specified by the parameter\&. This can be sent to any of the destinations\&. + + .TP -\fB-i\fR -Run interactively. Individual commands -of the form destination message-type parameters can be entered -on STDIN. An empty command line or a "q" will quit the -program. -.TP -\fBdestination\fR -One of \fInmbd\fR -\fIsmbd\fR or a process ID. - -The \fIsmbd\fR destination causes the -message to "broadcast" to all smbd daemons. - -The \fInmbd\fR destination causes the -message to be sent to the nmbd daemon specified in the -\fInmbd.pid\fR file. - -If a single process ID is given, the message is sent -to only that process. -.TP -\fBmessage-type\fR -One of: close-share, -debug, -force-election, ping -, profile, debuglevel, profilelevel, -or printnotify. - -The close-share message-type sends a -message to smbd which will then close the client connections to -the named share. Note that this doesn't affect client connections -to any other shares. This message-type takes an argument of the -share name for which client connections will be closed, or the -"*" character which will close all currently open shares. -This may be useful if you made changes to the access controls on the share. -This message can only be sent to smbd. - -The debug message-type allows -the debug level to be set to the value specified by the -parameter. This can be sent to any of the destinations. - -The force-election message-type can only be -sent to the nmbd destination. This message -causes the \fBnmbd\fR daemon to force a new browse -master election. - -The ping message-type sends the -number of "ping" messages specified by the parameter and waits -for the same number of reply "pong" messages. This can be sent to -any of the destinations. - -The profile message-type sends a -message to an smbd to change the profile settings based on the -parameter. The parameter can be "on" to turn on profile stats -collection, "off" to turn off profile stats collection, "count" -to enable only collection of count stats (time stats are -disabled), and "flush" to zero the current profile stats. This can -be sent to any smbd or nmbd destinations. - -The debuglevel message-type sends -a "request debug level" message. The current debug level setting -is returned by a "debuglevel" message. This can be -sent to any of the destinations. - -The profilelevel message-type sends -a "request profile level" message. The current profile level -setting is returned by a "profilelevel" message. This can be sent -to any smbd or nmbd destinations. - -The printnotify message-type sends a -message to smbd which in turn sends a printer notify message to -any Windows NT clients connected to a printer. This message-type -takes the following arguments: +force-election +This message causes the \fBnmbd\fR daemon to force a new browse master election\&. + + +.TP +ping +Send specified number of "ping" messages and wait for the same number of reply "pong" messages\&. This can be sent to any of the destinations\&. + + +.TP +profile +Change profile settings of a daemon, based on the parameter\&. The parameter can be "on" to turn on profile stats collection, "off" to turn off profile stats collection, "count" to enable only collection of count stats (time stats are disabled), and "flush" to zero the current profile stats\&. This can be sent to any smbd or nmbd destinations\&. + + +.TP +debuglevel +Request debuglevel of a certain daemon and write it to stdout\&. This can be sent to any of the destinations\&. + + +.TP +profilelevel +Request profilelevel of a certain daemon and write it to stdout\&. This can be sent to any smbd or nmbd destinations\&. + + +.TP +printnotify +Order smbd to send a printer notify message to any Windows NT clients connected to a printer\&. This message-type takes the following arguments: + + + .RS + .TP -\fBqueuepause printername\fR -Send a queue pause change notify -message to the printer specified. +queuepause printername +Send a queue pause change notify message to the printer specified\&. + + .TP -\fBqueueresume printername\fR -Send a queue resume change notify -message for the printer specified. +queueresume printername +Send a queue resume change notify message for the printer specified\&. + + .TP -\fBjobpause printername unixjobid\fR -Send a job pause change notify -message for the printer and unix jobid -specified. +jobpause printername unixjobid +Send a job pause change notify message for the printer and unix jobid specified\&. + + .TP -\fBjobresume printername unixjobid\fR -Send a job resume change notify -message for the printer and unix jobid -specified. +jobresume printername unixjobid +Send a job resume change notify message for the printer and unix jobid specified\&. + + .TP -\fBjobdelete printername unixjobid\fR -Send a job delete change notify -message for the printer and unix jobid -specified. +jobdelete printername unixjobid +Send a job delete change notify message for the printer and unix jobid specified\&. + + .RE -Note that this message only sends notification that an -event has occured. It doesn't actually cause the -event to happen. -This message can only be sent to smbd. +Note that this message only sends notification that an event has occured\&. It doesn't actually cause the event to happen\&. + + +This message can only be sent to \fBsmbd\fR\&. + + .TP -\fBparameters\fR -any parameters required for the message-type +samsync +Order smbd to synchronise sam database from PDC (being BDC)\&. Can only be sent to \fBsmbd\fR\&. + +Not working at the moment + + +.TP +samrepl +Send sam replication message, with specified serial\&. Can only be sent to \fBsmbd\fR\&. Should not be used manually\&. + + +.TP +dmalloc-mark +Set a mark for dmalloc\&. Can be sent to both smbd and nmbd\&. Only available if samba is built with dmalloc support\&. + + +.TP +dmalloc-log-changed +Dump the pointers that have changed since the mark set by dmalloc-mark\&. Can be sent to both smbd and nmbd\&. Only available if samba is built with dmalloc support\&. + + +.TP +shutdown +Shut down specified daemon\&. Can be sent to both smbd and nmbd\&. + + +.TP +pool-usage +Print a human-readable description of all talloc(pool) memory usage by the specified daemon/process\&. Available for both smbd and nmbd\&. + + +.TP +drvupgrade +Force clients of printers using specified driver to update their local version of the driver\&. Can only be sent to smbd\&. + + .SH "VERSION" + .PP -This man page is correct for version 2.2 of -the Samba suite. +This man page is correct for version 3\&.0 of the Samba suite\&. + .SH "SEE ALSO" + .PP -\fBnmbd(8)\fR -and \fBsmbd(8)\fR +\fBnmbd\fR(8) and \fBsmbd\fR(8)\&. + .SH "AUTHOR" + .PP -The original Samba software and related utilities -were created by Andrew Tridgell. Samba is now developed -by the Samba Team as an Open Source project similar -to the way the Linux kernel is developed. +The original Samba software and related utilities were created by Andrew Tridgell\&. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\&. + .PP -The original Samba man pages were written by Karl Auer. -The man page sources were converted to YODL format (another -excellent piece of Open Source software, available at -ftp://ftp.icce.rug.nl/pub/unix/ ) and updated for the Samba 2.0 -release by Jeremy Allison. The conversion to DocBook for -Samba 2.2 was done by Gerald Carter +The original Samba man pages were written by Karl Auer\&. The man page sources were converted to YODL format (another excellent piece of Open Source software, available at ftp://ftp\&.icce\&.rug\&.nl/pub/unix/) and updated for the Samba 2\&.0 release by Jeremy Allison\&. The conversion to DocBook for Samba 2\&.2 was done by Gerald Carter\&. The conversion to DocBook XML 4\&.2 for Samba 3\&.0 was done by Alexander Bokovoy\&. + diff --git a/docs/manpages/smbd.8 b/docs/manpages/smbd.8 index 106c0a98e3..c7c0fac777 100644 --- a/docs/manpages/smbd.8 +++ b/docs/manpages/smbd.8 @@ -1,316 +1,230 @@ -.\" This manpage has been automatically generated by docbook2man -.\" from a DocBook document. This tool can be found at: -.\" -.\" Please send any bug reports, improvements, comments, patches, -.\" etc. to Steve Cheng . -.TH "SMBD" "8" "04 March 2003" "" "" +.\"Generated by db2man.xsl. Don't modify this, modify the source. +.de Sh \" Subsection +.br +.if t .Sp +.ne 5 +.PP +\fB\\$1\fR +.PP +.. +.de Sp \" Vertical space (when we can't use .PP) +.if t .sp .5v +.if n .sp +.. +.de Ip \" List item +.br +.ie \\n(.$>=3 .ne \\$3 +.el .ne 3 +.IP "\\$1" \\$2 +.. +.TH "SMBD" 8 "" "" "" .SH NAME smbd \- server to provide SMB/CIFS services to clients -.SH SYNOPSIS +.SH "SYNOPSIS" -\fBsmbd\fR [ \fB-D\fR ] [ \fB-F\fR ] [ \fB-S\fR ] [ \fB-i\fR ] [ \fB-h\fR ] [ \fB-V\fR ] [ \fB-b\fR ] [ \fB-d \fR ] [ \fB-l \fR ] [ \fB-p \fR ] [ \fB-O \fR ] [ \fB-s \fR ] +.nf +\fBsmbd\fR [-D] [-F] [-S] [-i] [-h] [-V] [-b] [-d ] [-l ] + [-p ] [-O ] [-s ] +.fi .SH "DESCRIPTION" + .PP -This program is part of the Samba suite. +This program is part of the \fBSamba\fR(7) suite\&. + .PP -\fBsmbd\fR is the server daemon that -provides filesharing and printing services to Windows clients. -The server provides filespace and printer services to -clients using the SMB (or CIFS) protocol. This is compatible -with the LanManager protocol, and can service LanManager -clients. These include MSCLIENT 3.0 for DOS, Windows for -Workgroups, Windows 95/98/ME, Windows NT, Windows 2000, -OS/2, DAVE for Macintosh, and smbfs for Linux. +\fBsmbd\fR is the server daemon that provides filesharing and printing services to Windows clients\&. The server provides filespace and printer services to clients using the SMB (or CIFS) protocol\&. This is compatible with the LanManager protocol, and can service LanManager clients\&. These include MSCLIENT 3\&.0 for DOS, Windows for Workgroups, Windows 95/98/ME, Windows NT, Windows 2000, OS/2, DAVE for Macintosh, and smbfs for Linux\&. + .PP -An extensive description of the services that the -server can provide is given in the man page for the -configuration file controlling the attributes of those -services (see \fIsmb.conf(5) -\fR This man page will not describe the -services, but will concentrate on the administrative aspects -of running the server. +An extensive description of the services that the server can provide is given in the man page for the configuration file controlling the attributes of those services (see \fBsmb.conf\fR(5)\&. This man page will not describe the services, but will concentrate on the administrative aspects of running the server\&. + .PP -Please note that there are significant security -implications to running this server, and the \fIsmb.conf(5)\fR -manpage should be regarded as mandatory reading before -proceeding with installation. +Please note that there are significant security implications to running this server, and the \fBsmb.conf\fR(5) manual page should be regarded as mandatory reading before proceeding with installation\&. + .PP -A session is created whenever a client requests one. -Each client gets a copy of the server for each session. This -copy then services all connections made by the client during -that session. When all connections from its client are closed, -the copy of the server for that client terminates. +A session is created whenever a client requests one\&. Each client gets a copy of the server for each session\&. This copy then services all connections made by the client during that session\&. When all connections from its client are closed, the copy of the server for that client terminates\&. + .PP -The configuration file, and any files that it includes, -are automatically reloaded every minute, if they change. You -can force a reload by sending a SIGHUP to the server. Reloading -the configuration file will not affect connections to any service -that is already established. Either the user will have to -disconnect from the service, or \fBsmbd\fR killed and restarted. +The configuration file, and any files that it includes, are automatically reloaded every minute, if they change\&. You can force a reload by sending a SIGHUP to the server\&. Reloading the configuration file will not affect connections to any service that is already established\&. Either the user will have to disconnect from the service, or \fBsmbd\fR killed and restarted\&. + .SH "OPTIONS" + .TP -\fB-D\fR -If specified, this parameter causes -the server to operate as a daemon. That is, it detaches -itself and runs in the background, fielding requests -on the appropriate port. Operating the server as a -daemon is the recommended way of running \fBsmbd\fR for -servers that provide more than casual use file and -print services. This switch is assumed if \fBsmbd -\fR is executed on the command line of a shell. +-D +If specified, this parameter causes the server to operate as a daemon\&. That is, it detaches itself and runs in the background, fielding requests on the appropriate port\&. Operating the server as a daemon is the recommended way of running \fBsmbd\fR for servers that provide more than casual use file and print services\&. This switch is assumed if \fBsmbd \fR is executed on the command line of a shell\&. + + .TP -\fB-F\fR -If specified, this parameter causes -the main \fBsmbd\fR process to not daemonize, -i.e. double-fork and disassociate with the terminal. -Child processes are still created as normal to service -each connection request, but the main process does not -exit. This operation mode is suitable for running -\fBsmbd\fR under process supervisors such -as \fBsupervise\fR and \fBsvscan\fR -from Daniel J. Bernstein's \fBdaemontools\fR -package, or the AIX process monitor. +-F +If specified, this parameter causes the main \fBsmbd\fR process to not daemonize, i\&.e\&. double-fork and disassociate with the terminal\&. Child processes are still created as normal to service each connection request, but the main process does not exit\&. This operation mode is suitable for running \fBsmbd\fR under process supervisors such as \fBsupervise\fR and \fBsvscan\fR from Daniel J\&. Bernstein's \fBdaemontools\fR package, or the AIX process monitor\&. + + .TP -\fB-S\fR -If specified, this parameter causes -\fBsmbd\fR to log to standard output rather -than a file. +-S +If specified, this parameter causes \fBsmbd\fR to log to standard output rather than a file\&. + + .TP -\fB-i\fR -If this parameter is specified it causes the -server to run "interactively", not as a daemon, even if the -server is executed on the command line of a shell. Setting this -parameter negates the implicit deamon mode when run from the -command line. \fBsmbd\fR also logs to standard -output, as if the \fB-S\fR parameter had been -given. +-i +If this parameter is specified it causes the server to run "interactively", not as a daemon, even if the server is executed on the command line of a shell\&. Setting this parameter negates the implicit deamon mode when run from the command line\&. \fBsmbd\fR also logs to standard output, as if the \fB-S\fR parameter had been given\&. + + .TP -\fB-h\fR -Prints the help information (usage) -for \fBsmbd\fR. +-V +Prints the version number for \fBsmbd\fR\&. + + .TP -\fB-V\fR -Prints the version number for -\fBsmbd\fR. +-s +The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fI smb\&.conf(5)\fR for more information\&. The default configuration file name is determined at compile time\&. + + .TP -\fB-b\fR -Prints information about how -Samba was built. +-d|--debug=debuglevel +\fIdebuglevel\fR is an integer from 0 to 10\&. The default value if this parameter is not specified is zero\&. + + +The higher this value, the more detail will be logged to the log files about the activities of the server\&. At level 0, only critical errors and serious warnings will be logged\&. Level 1 is a reasonable level for day to day running - it generates a small amount of information about operations carried out\&. + + +Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\&. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\&. + + +Note that specifying this parameter here will override the log level parameter in the \fIsmb\&.conf(5)\fR file\&. + + .TP -\fB-d \fR -\fIdebuglevel\fR is an integer -from 0 to 10. The default value if this parameter is -not specified is zero. - -The higher this value, the more detail will be -logged to the log files about the activities of the -server. At level 0, only critical errors and serious -warnings will be logged. Level 1 is a reasonable level for -day to day running - it generates a small amount of -information about operations carried out. - -Levels above 1 will generate considerable -amounts of log data, and should only be used when -investigating a problem. Levels above 3 are designed for -use only by developers and generate HUGE amounts of log -data, most of which is extremely cryptic. - -Note that specifying this parameter here will -override the log -level file. +-l|--logfile=logbasename +File name for log/debug files\&. The extension \fB"\&.client"\fR will be appended\&. The log file is never removed by the client\&. + + .TP -\fB-l \fR -If specified, -\fIlog directory\fR -specifies a log directory into which the "log.smbd" log -file will be created for informational and debug -messages from the running server. The log -file generated is never removed by the server although -its size may be controlled by the max log size -option in the \fI smb.conf(5)\fR file. \fBBeware:\fR -If the directory specified does not exist, \fBsmbd\fR -will log to the default debug log location defined at compile time. - -The default log directory is specified at -compile time. +-h|--help +Print a summary of command line options\&. + + .TP -\fB-O \fR -See the socket options -parameter in the \fIsmb.conf(5) -\fR file for details. +-b +Prints information about how Samba was built\&. + + .TP -\fB-p \fR -\fIport number\fR is a positive integer -value. The default value if this parameter is not -specified is 139. - -This number is the port number that will be -used when making connections to the server from client -software. The standard (well-known) port number for the -SMB over TCP is 139, hence the default. If you wish to -run the server as an ordinary user rather than -as root, most systems will require you to use a port -number greater than 1024 - ask your system administrator -for help if you are in this situation. - -In order for the server to be useful by most -clients, should you configure it on a port other -than 139, you will require port redirection services -on port 139, details of which are outlined in rfc1002.txt -section 4.3.5. - -This parameter is not normally specified except -in the above situation. +-l +If specified, \fIlog directory\fR specifies a log directory into which the "log\&.smbd" log file will be created for informational and debug messages from the running server\&. The log file generated is never removed by the server although its size may be controlled by the \fImax log size\fR option in the \fBsmb.conf\fR(5) file\&. \fBBeware:\fR If the directory specified does not exist, \fBsmbd\fR will log to the default debug log location defined at compile time\&. + + +The default log directory is specified at compile time\&. + + .TP -\fB-s \fR -The file specified contains the -configuration details required by the server. The -information in this file includes server-specific -information such as what printcap file to use, as well -as descriptions of all the services that the server is -to provide. See \fI smb.conf(5)\fR for more information. -The default configuration file name is determined at -compile time. +-p +\fIport number\fR is a positive integer value\&. The default value if this parameter is not specified is 139\&. + + +This number is the port number that will be used when making connections to the server from client software\&. The standard (well-known) port number for the SMB over TCP is 139, hence the default\&. If you wish to run the server as an ordinary user rather than as root, most systems will require you to use a port number greater than 1024 - ask your system administrator for help if you are in this situation\&. + + +In order for the server to be useful by most clients, should you configure it on a port other than 139, you will require port redirection services on port 139, details of which are outlined in rfc1002\&.txt section 4\&.3\&.5\&. + + +This parameter is not normally specified except in the above situation\&. + + .SH "FILES" + .TP -\fB\fI/etc/inetd.conf\fB\fR -If the server is to be run by the -\fBinetd\fR meta-daemon, this file -must contain suitable startup information for the -meta-daemon. See the UNIX_INSTALL.html -document for details. +\fI/etc/inetd\&.conf\fR +If the server is to be run by the \fBinetd\fR meta-daemon, this file must contain suitable startup information for the meta-daemon\&. See the "How to Install and Test SAMBA" document for details\&. + + .TP -\fB\fI/etc/rc\fB\fR -or whatever initialization script your -system uses). - -If running the server as a daemon at startup, -this file will need to contain an appropriate startup -sequence for the server. See the UNIX_INSTALL.html -document for details. +\fI/etc/rc\fR +or whatever initialization script your system uses)\&. + + +If running the server as a daemon at startup, this file will need to contain an appropriate startup sequence for the server\&. See the "How to Install and Test SAMBA" document for details\&. + + .TP -\fB\fI/etc/services\fB\fR -If running the server via the -meta-daemon \fBinetd\fR, this file -must contain a mapping of service name (e.g., netbios-ssn) -to service port (e.g., 139) and protocol type (e.g., tcp). -See the UNIX_INSTALL.html -document for details. +\fI/etc/services\fR +If running the server via the meta-daemon \fBinetd\fR, this file must contain a mapping of service name (e\&.g\&., netbios-ssn) to service port (e\&.g\&., 139) and protocol type (e\&.g\&., tcp)\&. See the "How to Install and Test SAMBA" document for details\&. + + .TP -\fB\fI/usr/local/samba/lib/smb.conf\fB\fR -This is the default location of the -\fIsmb.conf\fR -server configuration file. Other common places that systems -install this file are \fI/usr/samba/lib/smb.conf\fR -and \fI/etc/smb.conf\fR. - -This file describes all the services the server -is to make available to clients. See \fIsmb.conf(5)\fR for more information. +\fI/usr/local/samba/lib/smb\&.conf\fR +This is the default location of the \fBsmb.conf\fR(5) server configuration file\&. Other common places that systems install this file are \fI/usr/samba/lib/smb\&.conf\fR and \fI/etc/samba/smb\&.conf\fR\&. + + +This file describes all the services the server is to make available to clients\&. See \fBsmb.conf\fR(5) for more information\&. + + .SH "LIMITATIONS" + .PP -On some systems \fBsmbd\fR cannot change uid back -to root after a setuid() call. Such systems are called -trapdoor uid systems. If you have such a system, -you will be unable to connect from a client (such as a PC) as -two different users at once. Attempts to connect the -second user will result in access denied or -similar. +On some systems \fBsmbd\fR cannot change uid back to root after a setuid() call\&. Such systems are called trapdoor uid systems\&. If you have such a system, you will be unable to connect from a client (such as a PC) as two different users at once\&. Attempts to connect the second user will result in access denied or similar\&. + .SH "ENVIRONMENT VARIABLES" + .TP \fBPRINTER\fR -If no printer name is specified to -printable services, most systems will use the value of -this variable (or lp if this variable is -not defined) as the name of the printer to use. This -is not specific to the server, however. +If no printer name is specified to printable services, most systems will use the value of this variable (or \fBlp\fR if this variable is not defined) as the name of the printer to use\&. This is not specific to the server, however\&. + + .SH "PAM INTERACTION" + .PP -Samba uses PAM for authentication (when presented with a plaintext -password), for account checking (is this account disabled?) and for -session management. The degree too which samba supports PAM is restricted -by the limitations of the SMB protocol and the -obey pam restricions -smb.conf paramater. When this is set, the following restrictions apply: -.TP 0.2i +Samba uses PAM for authentication (when presented with a plaintext password), for account checking (is this account disabled?) and for session management\&. The degree too which samba supports PAM is restricted by the limitations of the SMB protocol and the \fIobey pam restricions\fR \fBsmb.conf\fR(5) paramater\&. When this is set, the following restrictions apply: + +.TP 3 \(bu -\fBAccount Validation\fR: All accesses to a -samba server are checked -against PAM to see if the account is vaild, not disabled and is permitted to -login at this time. This also applies to encrypted logins. -.TP 0.2i +\fBAccount Validation\fR: All accesses to a samba server are checked against PAM to see if the account is vaild, not disabled and is permitted to login at this time\&. This also applies to encrypted logins\&. + +.TP \(bu -\fBSession Management\fR: When not using share -level secuirty, users must pass PAM's session checks before access -is granted. Note however, that this is bypassed in share level secuirty. -Note also that some older pam configuration files may need a line -added for session support. +\fBSession Management\fR: When not using share level secuirty, users must pass PAM's session checks before access is granted\&. Note however, that this is bypassed in share level secuirty\&. Note also that some older pam configuration files may need a line added for session support\&. + +.LP + .SH "VERSION" + .PP -This man page is correct for version 3.0 of -the Samba suite. +This man page is correct for version 3\&.0 of the Samba suite\&. + .SH "DIAGNOSTICS" + .PP -Most diagnostics issued by the server are logged -in a specified log file. The log file name is specified -at compile time, but may be overridden on the command line. +Most diagnostics issued by the server are logged in a specified log file\&. The log file name is specified at compile time, but may be overridden on the command line\&. + .PP -The number and nature of diagnostics available depends -on the debug level used by the server. If you have problems, set -the debug level to 3 and peruse the log files. +The number and nature of diagnostics available depends on the debug level used by the server\&. If you have problems, set the debug level to 3 and peruse the log files\&. + .PP -Most messages are reasonably self-explanatory. Unfortunately, -at the time this man page was created, there are too many diagnostics -available in the source code to warrant describing each and every -diagnostic. At this stage your best bet is still to grep the -source code and inspect the conditions that gave rise to the -diagnostics you are seeing. +Most messages are reasonably self-explanatory\&. Unfortunately, at the time this man page was created, there are too many diagnostics available in the source code to warrant describing each and every diagnostic\&. At this stage your best bet is still to grep the source code and inspect the conditions that gave rise to the diagnostics you are seeing\&. + .SH "SIGNALS" + .PP -Sending the \fBsmbd\fR a SIGHUP will cause it to -reload its \fIsmb.conf\fR configuration -file within a short period of time. +Sending the \fBsmbd\fR a SIGHUP will cause it to reload its \fIsmb\&.conf\fR configuration file within a short period of time\&. + .PP -To shut down a user's \fBsmbd\fR process it is recommended -that \fBSIGKILL (-9)\fR \fBNOT\fR -be used, except as a last resort, as this may leave the shared -memory area in an inconsistent state. The safe way to terminate -an \fBsmbd\fR is to send it a SIGTERM (-15) signal and wait for -it to die on its own. +To shut down a user's \fBsmbd\fR process it is recommended that \fBSIGKILL (-9)\fR \fBNOT\fR be used, except as a last resort, as this may leave the shared memory area in an inconsistent state\&. The safe way to terminate an \fBsmbd\fR is to send it a SIGTERM (-15) signal and wait for it to die on its own\&. + .PP -The debug log level of \fBsmbd\fR may be raised -or lowered using \fBsmbcontrol(1) -\fR program (SIGUSR[1|2] signals are no longer used in -Samba 2.2). This is to allow transient problems to be diagnosed, -whilst still running at a normally low log level. +The debug log level of \fBsmbd\fR may be raised or lowered using \fBsmbcontrol\fR(1) program (SIGUSR[1|2] signals are no longer used since Samba 2\&.2)\&. This is to allow transient problems to be diagnosed, whilst still running at a normally low log level\&. + .PP -Note that as the signal handlers send a debug write, -they are not re-entrant in \fBsmbd\fR. This you should wait until -\fBsmbd\fR is in a state of waiting for an incoming SMB before -issuing them. It is possible to make the signal handlers safe -by un-blocking the signals before the select call and re-blocking -them after, however this would affect performance. +Note that as the signal handlers send a debug write, they are not re-entrant in \fBsmbd\fR\&. This you should wait until\fBsmbd\fR is in a state of waiting for an incoming SMB before issuing them\&. It is possible to make the signal handlers safe by un-blocking the signals before the select call and re-blocking them after, however this would affect performance\&. + .SH "SEE ALSO" + .PP -hosts_access(5), \fBinetd(8)\fR, -\fBnmbd(8)\fR -\fIsmb.conf(5)\fR - \fBsmbclient(1) -\fR and the Internet RFC's -\fIrfc1001.txt\fR, \fIrfc1002.txt\fR. -In addition the CIFS (formerly SMB) specification is available -as a link from the Web page -http://samba.org/cifs/ . +\fBhosts_access\fR(5), \fBinetd\fR(8), \fBnmbd\fR(8), \fBsmb.conf\fR(5), \fBsmbclient\fR(1), \fBtestparm\fR(1), \fBtestprns\fR(1), and the Internet RFC's\fIrfc1001\&.txt\fR, \fIrfc1002\&.txt\fR\&. In addition the CIFS (formerly SMB) specification is available as a link from the Web page http://samba\&.org/cifs/\&. + .SH "AUTHOR" + .PP -The original Samba software and related utilities -were created by Andrew Tridgell. Samba is now developed -by the Samba Team as an Open Source project similar -to the way the Linux kernel is developed. +The original Samba software and related utilities were created by Andrew Tridgell\&. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\&. + .PP -The original Samba man pages were written by Karl Auer. -The man page sources were converted to YODL format (another -excellent piece of Open Source software, available at -ftp://ftp.icce.rug.nl/pub/unix/ ) and updated for the Samba 2.0 -release by Jeremy Allison. The conversion to DocBook for -Samba 2.2 was done by Gerald Carter +The original Samba man pages were written by Karl Auer\&. The man page sources were converted to YODL format (another excellent piece of Open Source software, available at ftp://ftp\&.icce\&.rug\&.nl/pub/unix/) and updated for the Samba 2\&.0 release by Jeremy Allison\&. The conversion to DocBook for Samba 2\&.2 was done by Gerald Carter\&. The conversion to DocBook XML 4\&.2 for Samba 3\&.0 was done by Alexander Bokovoy\&. + diff --git a/docs/manpages/smbmnt.8 b/docs/manpages/smbmnt.8 index e8e8562a12..45515c593d 100644 --- a/docs/manpages/smbmnt.8 +++ b/docs/manpages/smbmnt.8 @@ -1,64 +1,91 @@ -.\" This manpage has been automatically generated by docbook2man -.\" from a DocBook document. This tool can be found at: -.\" -.\" Please send any bug reports, improvements, comments, patches, -.\" etc. to Steve Cheng . -.TH "SMBMNT" "8" "04 March 2003" "" "" +.\"Generated by db2man.xsl. Don't modify this, modify the source. +.de Sh \" Subsection +.br +.if t .Sp +.ne 5 +.PP +\fB\\$1\fR +.PP +.. +.de Sp \" Vertical space (when we can't use .PP) +.if t .sp .5v +.if n .sp +.. +.de Ip \" List item +.br +.ie \\n(.$>=3 .ne \\$3 +.el .ne 3 +.IP "\\$1" \\$2 +.. +.TH "SMBMNT" 8 "" "" "" .SH NAME smbmnt \- helper utility for mounting SMB filesystems -.SH SYNOPSIS +.SH "SYNOPSIS" -\fBsmbmnt\fR \fBmount-point\fR [ \fB-s \fR ] [ \fB-r\fR ] [ \fB-u \fR ] [ \fB-g \fR ] [ \fB-f \fR ] [ \fB-d \fR ] [ \fB-o \fR ] +.nf +\fBsmbmnt\fR {mount-point} [-s ] [-r] [-u ] [-g ] [-f ] [-d ] [-o ] [-h] + +.fi .SH "DESCRIPTION" + .PP -\fBsmbmnt\fR is a helper application used -by the smbmount program to do the actual mounting of SMB shares. -\fBsmbmnt\fR can be installed setuid root if you want -normal users to be able to mount their SMB shares. +\fBsmbmnt\fR is a helper application used by the smbmount program to do the actual mounting of SMB shares\&.\fBsmbmnt\fR can be installed setuid root if you want normal users to be able to mount their SMB shares\&. + .PP -A setuid smbmnt will only allow mounts on directories owned -by the user, and that the user has write permission on. +A setuid smbmnt will only allow mounts on directories owned by the user, and that the user has write permission on\&. + .PP -The \fBsmbmnt\fR program is normally invoked -by \fBsmbmount(8)\fR - It should not be invoked directly by users. +The \fBsmbmnt\fR program is normally invoked by \fBsmbmount\fR(8)\&. It should not be invoked directly by users\&. + .PP -smbmount searches the normal PATH for smbmnt. You must ensure -that the smbmnt version in your path matches the smbmount used. +smbmount searches the normal PATH for smbmnt\&. You must ensure that the smbmnt version in your path matches the smbmount used\&. + .SH "OPTIONS" + .TP -\fB-r\fR -mount the filesystem read-only +-r +mount the filesystem read-only + + .TP -\fB-u uid\fR -specify the uid that the files will -be owned by +-u uid +specify the uid that the files will be owned by + + .TP -\fB-g gid\fR -specify the gid that the files will be -owned by +-g gid +specify the gid that the files will be owned by + + .TP -\fB-f mask\fR +-f mask specify the octal file mask applied + + .TP -\fB-d mask\fR -specify the octal directory mask -applied +-d mask +specify the octal directory mask applied + + +.TP +-o options +list of options that are passed as-is to smbfs, if this command is run on a 2\&.4 or higher Linux kernel\&. + + .TP -\fB-o options\fR -list of options that are passed as-is to smbfs, if this -command is run on a 2.4 or higher Linux kernel. +-h|--help +Print a summary of command line options\&. + + .SH "AUTHOR" + .PP -Volker Lendecke, Andrew Tridgell, Michael H. Warfield -and others. +Volker Lendecke, Andrew Tridgell, Michael H\&. Warfield and others\&. + .PP -The current maintainer of smbfs and the userspace -tools \fBsmbmount\fR, \fBsmbumount\fR, -and \fBsmbmnt\fR is Urban Widmark . -The SAMBA Mailing list -is the preferred place to ask questions regarding these programs. +The current maintainer of smbfs and the userspace tools \fBsmbmount\fR, \fBsmbumount\fR, and \fBsmbmnt\fR is Urban Widmark\&. The SAMBA Mailing list is the preferred place to ask questions regarding these programs\&. + .PP -The conversion of this manpage for Samba 2.2 was performed -by Gerald Carter +The conversion of this manpage for Samba 2\&.2 was performed by Gerald Carter\&. The conversion to DocBook XML 4\&.2 for Samba 3\&.0 was done by Alexander Bokovoy\&. + diff --git a/docs/manpages/smbmount.8 b/docs/manpages/smbmount.8 index 8d7dfd8d22..fdf49c0e97 100644 --- a/docs/manpages/smbmount.8 +++ b/docs/manpages/smbmount.8 @@ -1,215 +1,219 @@ -.\" This manpage has been automatically generated by docbook2man -.\" from a DocBook document. This tool can be found at: -.\" -.\" Please send any bug reports, improvements, comments, patches, -.\" etc. to Steve Cheng . -.TH "SMBMOUNT" "8" "04 March 2003" "" "" +.\"Generated by db2man.xsl. Don't modify this, modify the source. +.de Sh \" Subsection +.br +.if t .Sp +.ne 5 +.PP +\fB\\$1\fR +.PP +.. +.de Sp \" Vertical space (when we can't use .PP) +.if t .sp .5v +.if n .sp +.. +.de Ip \" List item +.br +.ie \\n(.$>=3 .ne \\$3 +.el .ne 3 +.IP "\\$1" \\$2 +.. +.TH "SMBMOUNT" 8 "" "" "" .SH NAME smbmount \- mount an smbfs filesystem -.SH SYNOPSIS +.SH "SYNOPSIS" -\fBsmbmount\fR \fBservice\fR \fBmount-point\fR [ \fB-o options\fR ] +.nf +\fBsmbmount\fR {service} {mount-point} [-o options] +.fi .SH "DESCRIPTION" + +.PP +\fBsmbmount\fR mounts a Linux SMB filesystem\&. It is usually invoked as \fBmount.smbfs\fR by the \fBmount\fR(8) command when using the "-t smbfs" option\&. This command only works in Linux, and the kernel must support the smbfs filesystem\&. + +.PP +Options to \fBsmbmount\fR are specified as a comma-separated list of key=value pairs\&. It is possible to send options other than those listed here, assuming that smbfs supports them\&. If you get mount failures, check your kernel log for errors on unknown options\&. + +.PP +\fBsmbmount\fR is a daemon\&. After mounting it keeps running until the mounted smbfs is umounted\&. It will log things that happen when in daemon mode using the "machine name" smbmount, so typically this output will end up in \fIlog\&.smbmount\fR\&. The \fB smbmount\fR process may also be called mount\&.smbfs\&. + +.RS +.Sh "Note" + .PP -\fBsmbmount\fR mounts a Linux SMB filesystem. It -is usually invoked as \fBmount.smbfs\fR by -the \fBmount(8)\fR command when using the -"-t smbfs" option. This command only works in Linux, and the kernel must -support the smbfs filesystem. -.PP -Options to \fBsmbmount\fR are specified as a comma-separated -list of key=value pairs. It is possible to send options other -than those listed here, assuming that smbfs supports them. If -you get mount failures, check your kernel log for errors on -unknown options. -.PP -\fBsmbmount\fR is a daemon. After mounting it keeps running until -the mounted smbfs is umounted. It will log things that happen -when in daemon mode using the "machine name" smbmount, so -typically this output will end up in \fIlog.smbmount\fR. The -\fBsmbmount\fR process may also be called mount.smbfs. -.PP -\fBNOTE:\fR \fBsmbmount\fR -calls \fBsmbmnt(8)\fR to do the actual mount. You -must make sure that \fBsmbmnt\fR is in the path so -that it can be found. + \fBsmbmount\fR calls \fBsmbmnt\fR(8) to do the actual mount\&. You must make sure that \fBsmbmnt\fR is in the path so that it can be found\&. + +.RE + .SH "OPTIONS" + .TP -\fBusername=\fR -specifies the username to connect as. If -this is not given, then the environment variable \fB USER\fR is used. This option can also take the -form "user%password" or "user/workgroup" or -"user/workgroup%password" to allow the password and workgroup -to be specified as part of the username. -.TP -\fBpassword=\fR -specifies the SMB password. If this -option is not given then the environment variable -\fBPASSWD\fR is used. If it can find -no password \fBsmbmount\fR will prompt -for a passeword, unless the guest option is -given. +username= +specifies the username to connect as\&. If this is not given, then the environment variable \fB USER\fR is used\&. This option can also take the form "user%password" or "user/workgroup" or "user/workgroup%password" to allow the password and workgroup to be specified as part of the username\&. + -Note that passwords which contain the argument delimiter -character (i.e. a comma ',') will failed to be parsed correctly -on the command line. However, the same password defined -in the PASSWD environment variable or a credentials file (see -below) will be read correctly. .TP -\fBcredentials=\fR -specifies a file that contains a username -and/or password. The format of the file is: +password= +specifies the SMB password\&. If this option is not given then the environment variable \fBPASSWD\fR is used\&. If it can find no password \fBsmbmount\fR will prompt for a passeword, unless the guest option is given\&. +Note that passwords which contain the argument delimiter character (i\&.e\&. a comma ',') will failed to be parsed correctly on the command line\&. However, the same password defined in the PASSWD environment variable or a credentials file (see below) will be read correctly\&. + + +.TP +credentials= +specifies a file that contains a username and/or password\&. +The format of the file is: .nf - username = - password = - + +username = +password = .fi -This is preferred over having passwords in plaintext in a -shared file, such as \fI/etc/fstab\fR. Be sure to protect any -credentials file properly. -.TP -\fBnetbiosname=\fR -sets the source NetBIOS name. It defaults -to the local hostname. -.TP -\fBuid=\fR -sets the uid that will own all files on -the mounted filesystem. -It may be specified as either a username or a numeric uid. -.TP -\fBgid=\fR -sets the gid that will own all files on -the mounted filesystem. -It may be specified as either a groupname or a numeric -gid. -.TP -\fBport=\fR -sets the remote SMB port number. The default -is 139. -.TP -\fBfmask=\fR -sets the file mask. This determines the -permissions that remote files have in the local filesystem. -The default is based on the current umask. -.TP -\fBdmask=\fR -sets the directory mask. This determines the -permissions that remote directories have in the local filesystem. -The default is based on the current umask. -.TP -\fBdebug=\fR -sets the debug level. This is useful for -tracking down SMB connection problems. A suggested value to -start with is 4. If set too high there will be a lot of -output, possibly hiding the useful output. -.TP -\fBip=\fR -sets the destination host or IP address. -.TP -\fBworkgroup=\fR -sets the workgroup on the destination -.TP -\fBsockopt=\fR -sets the TCP socket options. See the \fIsmb.conf -\fR \fIsocket options\fR option. -.TP -\fBscope=\fR -sets the NetBIOS scope -.TP -\fBguest\fR -don't prompt for a password -.TP -\fBro\fR -mount read-only -.TP -\fBrw\fR -mount read-write -.TP -\fBiocharset=\fR -sets the charset used by the Linux side for codepage -to charset translations (NLS). Argument should be the -name of a charset, like iso8859-1. (Note: only kernel -2.4.0 or later) -.TP -\fBcodepage=\fR -sets the codepage the server uses. See the iocharset -option. Example value cp850. (Note: only kernel 2.4.0 -or later) -.TP -\fBttl=\fR -sets how long a directory listing is cached in milliseconds -(also affects visibility of file size and date -changes). A higher value means that changes on the -server take longer to be noticed but it can give -better performance on large directories, especially -over long distances. Default is 1000ms but something -like 10000ms (10 seconds) is probably more reasonable -in many cases. -(Note: only kernel 2.4.2 or later) + +This is preferred over having passwords in plaintext in a shared file, such as \fI/etc/fstab\fR\&. Be sure to protect any credentials file properly\&. + + +.TP +krb +Use kerberos (Active Directory)\&. + + +.TP +netbiosname= +sets the source NetBIOS name\&. It defaults to the local hostname\&. + + +.TP +uid= +sets the uid that will own all files on the mounted filesystem\&. It may be specified as either a username or a numeric uid\&. + + +.TP +gid= +sets the gid that will own all files on the mounted filesystem\&. It may be specified as either a groupname or a numeric gid\&. + + +.TP +port= +sets the remote SMB port number\&. The default is 139\&. + + +.TP +fmask= +sets the file mask\&. This determines the permissions that remote files have in the local filesystem\&. This is not a umask, but the actual permissions for the files\&. The default is based on the current umask\&. + + +.TP +dmask= +Sets the directory mask\&. This determines the permissions that remote directories have in the local filesystem\&. This is not a umask, but the actual permissions for the directories\&. The default is based on the current umask\&. + + +.TP +debug= +Sets the debug level\&. This is useful for tracking down SMB connection problems\&. A suggested value to start with is 4\&. If set too high there will be a lot of output, possibly hiding the useful output\&. + + +.TP +ip= +Sets the destination host or IP address\&. + + +.TP +workgroup= +Sets the workgroup on the destination + + +.TP +sockopt= +Sets the TCP socket options\&. See the \fBsmb.conf\fR(5) \fIsocket options\fR option\&. + + +.TP +scope= +Sets the NetBIOS scope + + +.TP +guest +Don't prompt for a password + + +.TP +ro +mount read-only + + +.TP +rw +mount read-write + + +.TP +iocharset= +sets the charset used by the Linux side for codepage to charset translations (NLS)\&. Argument should be the name of a charset, like iso8859-1\&. (Note: only kernel 2\&.4\&.0 or later) + + +.TP +codepage= +sets the codepage the server uses\&. See the iocharset option\&. Example value cp850\&. (Note: only kernel 2\&.4\&.0 or later) + + +.TP +ttl= +sets how long a directory listing is cached in milliseconds (also affects visibility of file size and date changes)\&. A higher value means that changes on the server take longer to be noticed but it can give better performance on large directories, especially over long distances\&. Default is 1000ms but something like 10000ms (10 seconds) is probably more reasonable in many cases\&. (Note: only kernel 2\&.4\&.2 or later) + + .SH "ENVIRONMENT VARIABLES" + .PP -The variable \fBUSER\fR may contain the username of the -person using the client. This information is used only if the -protocol level is high enough to support session-level -passwords. The variable can be used to set both username and -password by using the format username%password. +The variable \fBUSER\fR may contain the username of the person using the client\&. This information is used only if the protocol level is high enough to support session-level passwords\&. The variable can be used to set both username and password by using the format username%password\&. + .PP -The variable \fBPASSWD\fR may contain the password of the -person using the client. This information is used only if the -protocol level is high enough to support session-level -passwords. +The variable \fBPASSWD\fR may contain the password of the person using the client\&. This information is used only if the protocol level is high enough to support session-level passwords\&. + .PP -The variable \fBPASSWD_FILE\fR may contain the pathname -of a file to read the password from. A single line of input is -read and used as the password. +The variable \fBPASSWD_FILE\fR may contain the pathname of a file to read the password from\&. A single line of input is read and used as the password\&. + .SH "BUGS" + .PP -Passwords and other options containing , can not be handled. -For passwords an alternative way of passing them is in a credentials -file or in the PASSWD environment. +Passwords and other options containing , can not be handled\&. For passwords an alternative way of passing them is in a credentials file or in the PASSWD environment\&. + .PP -The credentials file does not handle usernames or passwords with -leading space. +The credentials file does not handle usernames or passwords with leading space\&. + .PP -One smbfs bug is important enough to mention here, even if it -is a bit misplaced: -.TP 0.2i +One smbfs bug is important enough to mention here, even if it is a bit misplaced: + +.TP 3 \(bu -Mounts sometimes stop working. This is usually -caused by smbmount terminating. Since smbfs needs smbmount to -reconnect when the server disconnects, the mount will eventually go -dead. An umount/mount normally fixes this. At least 2 ways to -trigger this bug are known. -.PP -Note that the typical response to a bug report is suggestion -to try the latest version first. So please try doing that first, -and always include which versions you use of relevant software -when reporting bugs (minimum: samba, kernel, distribution) +Mounts sometimes stop working\&. This is usually caused by smbmount terminating\&. Since smbfs needs smbmount to reconnect when the server disconnects, the mount will eventually go dead\&. An umount/mount normally fixes this\&. At least 2 ways to trigger this bug are known\&. + +.LP + +.PP +Note that the typical response to a bug report is suggestion to try the latest version first\&. So please try doing that first, and always include which versions you use of relevant software when reporting bugs (minimum: samba, kernel, distribution) + .SH "SEE ALSO" + .PP -Documentation/filesystems/smbfs.txt in the linux kernel -source tree may contain additional options and information. +Documentation/filesystems/smbfs\&.txt in the linux kernel source tree may contain additional options and information\&. + .PP FreeBSD also has a smbfs, but it is not related to smbmount + .PP -For Solaris, HP-UX and others you may want to look at -\fBsmbsh(1)\fR or at other -solutions, such as sharity or perhaps replacing the SMB server with -a NFS server. +For Solaris, HP-UX and others you may want to look at \fBsmbsh\fR(1) or at other solutions, such as Sharity or perhaps replacing the SMB server with a NFS server\&. + .SH "AUTHOR" + .PP -Volker Lendecke, Andrew Tridgell, Michael H. Warfield -and others. +Volker Lendecke, Andrew Tridgell, Michael H\&. Warfield and others\&. + .PP -The current maintainer of smbfs and the userspace -tools \fBsmbmount\fR, \fBsmbumount\fR, -and \fBsmbmnt\fR is Urban Widmark . -The SAMBA Mailing list -is the preferred place to ask questions regarding these programs. +The current maintainer of smbfs and the userspace tools \fBsmbmount\fR, \fBsmbumount\fR, and \fBsmbmnt\fR is Urban Widmark\&. The SAMBA Mailing list is the preferred place to ask questions regarding these programs\&. + .PP -The conversion of this manpage for Samba 2.2 was performed -by Gerald Carter +The conversion of this manpage for Samba 2\&.2 was performed by Gerald Carter\&. The conversion to DocBook XML 4\&.2 for Samba 3\&.0 was done by Alexander Bokovoy\&. + diff --git a/docs/manpages/smbpasswd.5 b/docs/manpages/smbpasswd.5 index 07b04530c3..75645d4b6a 100644 --- a/docs/manpages/smbpasswd.5 +++ b/docs/manpages/smbpasswd.5 @@ -1,157 +1,111 @@ -.\" This manpage has been automatically generated by docbook2man -.\" from a DocBook document. This tool can be found at: -.\" -.\" Please send any bug reports, improvements, comments, patches, -.\" etc. to Steve Cheng . -.TH "SMBPASSWD" "5" "04 March 2003" "" "" +.\"Generated by db2man.xsl. Don't modify this, modify the source. +.de Sh \" Subsection +.br +.if t .Sp +.ne 5 +.PP +\fB\\$1\fR +.PP +.. +.de Sp \" Vertical space (when we can't use .PP) +.if t .sp .5v +.if n .sp +.. +.de Ip \" List item +.br +.ie \\n(.$>=3 .ne \\$3 +.el .ne 3 +.IP "\\$1" \\$2 +.. +.TH "SMBPASSWD" 5 "" "" "" .SH NAME smbpasswd \- The Samba encrypted password file -.SH SYNOPSIS +.SH "SYNOPSIS" + .PP \fIsmbpasswd\fR + .SH "DESCRIPTION" + .PP -This tool is part of the Samba suite. +This tool is part of the \fBSamba\fR(7) suite\&. + .PP -smbpasswd is the Samba encrypted password file. It contains -the username, Unix user id and the SMB hashed passwords of the -user, as well as account flag information and the time the -password was last changed. This file format has been evolving with -Samba and has had several different formats in the past. +smbpasswd is the Samba encrypted password file\&. It contains the username, Unix user id and the SMB hashed passwords of the user, as well as account flag information and the time the password was last changed\&. This file format has been evolving with Samba and has had several different formats in the past\&. + .SH "FILE FORMAT" + .PP -The format of the smbpasswd file used by Samba 2.2 -is very similar to the familiar Unix \fIpasswd(5)\fR -file. It is an ASCII file containing one line for each user. Each field -ithin each line is separated from the next by a colon. Any entry -beginning with '#' is ignored. The smbpasswd file contains the -following information for each user: +The format of the smbpasswd file used by Samba 2\&.2 is very similar to the familiar Unix \fIpasswd(5)\fR file\&. It is an ASCII file containing one line for each user\&. Each field ithin each line is separated from the next by a colon\&. Any entry beginning with '#' is ignored\&. The smbpasswd file contains the following information for each user: + .TP -\fBname\fR -This is the user name. It must be a name that -already exists in the standard UNIX passwd file. +name +This is the user name\&. It must be a name that already exists in the standard UNIX passwd file\&. + + .TP -\fBuid\fR -This is the UNIX uid. It must match the uid -field for the same user entry in the standard UNIX passwd file. -If this does not match then Samba will refuse to recognize -this smbpasswd file entry as being valid for a user. +uid +This is the UNIX uid\&. It must match the uid field for the same user entry in the standard UNIX passwd file\&. If this does not match then Samba will refuse to recognize this smbpasswd file entry as being valid for a user\&. + + .TP -\fBLanman Password Hash\fR -This is the LANMAN hash of the user's password, -encoded as 32 hex digits. The LANMAN hash is created by DES -encrypting a well known string with the user's password as the -DES key. This is the same password used by Windows 95/98 machines. -Note that this password hash is regarded as weak as it is -vulnerable to dictionary attacks and if two users choose the -same password this entry will be identical (i.e. the password -is not "salted" as the UNIX password is). If the user has a -null password this field will contain the characters "NO PASSWORD" -as the start of the hex string. If the hex string is equal to -32 'X' characters then the user's account is marked as -disabled and the user will not be able to -log onto the Samba server. - -\fBWARNING !!\fR Note that, due to -the challenge-response nature of the SMB/CIFS authentication -protocol, anyone with a knowledge of this password hash will -be able to impersonate the user on the network. For this -reason these hashes are known as \fBplain text -equivalents\fR and must \fBNOT\fR be made -available to anyone but the root user. To protect these passwords -the smbpasswd file is placed in a directory with read and -traverse access only to the root user and the smbpasswd file -itself must be set to be read/write only by root, with no -other access. +Lanman Password Hash +This is the LANMAN hash of the user's password, encoded as 32 hex digits\&. The LANMAN hash is created by DES encrypting a well known string with the user's password as the DES key\&. This is the same password used by Windows 95/98 machines\&. Note that this password hash is regarded as weak as it is vulnerable to dictionary attacks and if two users choose the same password this entry will be identical (i\&.e\&. the password is not "salted" as the UNIX password is)\&. If the user has a null password this field will contain the characters "NO PASSWORD" as the start of the hex string\&. If the hex string is equal to 32 'X' characters then the user's account is marked as \fBdisabled\fR and the user will not be able to log onto the Samba server\&. + + +\fBWARNING !!\fR Note that, due to the challenge-response nature of the SMB/CIFS authentication protocol, anyone with a knowledge of this password hash will be able to impersonate the user on the network\&. For this reason these hashes are known as \fBplain text equivalents\fR and must \fBNOT\fR be made available to anyone but the root user\&. To protect these passwords the smbpasswd file is placed in a directory with read and traverse access only to the root user and the smbpasswd file itself must be set to be read/write only by root, with no other access\&. + + .TP -\fBNT Password Hash\fR -This is the Windows NT hash of the user's -password, encoded as 32 hex digits. The Windows NT hash is -created by taking the user's password as represented in -16-bit, little-endian UNICODE and then applying the MD4 -(internet rfc1321) hashing algorithm to it. - -This password hash is considered more secure than -the LANMAN Password Hash as it preserves the case of the -password and uses a much higher quality hashing algorithm. -However, it is still the case that if two users choose the same -password this entry will be identical (i.e. the password is -not "salted" as the UNIX password is). - -\fBWARNING !!\fR. Note that, due to -the challenge-response nature of the SMB/CIFS authentication -protocol, anyone with a knowledge of this password hash will -be able to impersonate the user on the network. For this -reason these hashes are known as \fBplain text -equivalents\fR and must \fBNOT\fR be made -available to anyone but the root user. To protect these passwords -the smbpasswd file is placed in a directory with read and -traverse access only to the root user and the smbpasswd file -itself must be set to be read/write only by root, with no -other access. +NT Password Hash +This is the Windows NT hash of the user's password, encoded as 32 hex digits\&. The Windows NT hash is created by taking the user's password as represented in 16-bit, little-endian UNICODE and then applying the MD4 (internet rfc1321) hashing algorithm to it\&. + + +This password hash is considered more secure than the LANMAN Password Hash as it preserves the case of the password and uses a much higher quality hashing algorithm\&. However, it is still the case that if two users choose the same password this entry will be identical (i\&.e\&. the password is not "salted" as the UNIX password is)\&. + + +\fBWARNING !!\fR\&. Note that, due to the challenge-response nature of the SMB/CIFS authentication protocol, anyone with a knowledge of this password hash will be able to impersonate the user on the network\&. For this reason these hashes are known as \fBplain text equivalents\fR and must \fBNOT\fR be made available to anyone but the root user\&. To protect these passwords the smbpasswd file is placed in a directory with read and traverse access only to the root user and the smbpasswd file itself must be set to be read/write only by root, with no other access\&. + + .TP -\fBAccount Flags\fR -This section contains flags that describe -the attributes of the users account. In the Samba 2.2 release -this field is bracketed by '[' and ']' characters and is always -13 characters in length (including the '[' and ']' characters). -The contents of this field may be any of the characters. -.RS -.TP 0.2i -\(bu -\fBU\fR - This means -this is a "User" account, i.e. an ordinary user. Only User -and Workstation Trust accounts are currently supported -in the smbpasswd file. -.TP 0.2i -\(bu -\fBN\fR - This means the -account has no password (the passwords in the fields LANMAN -Password Hash and NT Password Hash are ignored). Note that this -will only allow users to log on with no password if the \fI null passwords\fR parameter is set in the \fIsmb.conf(5) -\fR config file. -.TP 0.2i -\(bu -\fBD\fR - This means the account -is disabled and no SMB/CIFS logins will be allowed for -this user. -.TP 0.2i -\(bu -\fBW\fR - This means this account -is a "Workstation Trust" account. This kind of account is used -in the Samba PDC code stream to allow Windows NT Workstations -and Servers to join a Domain hosted by a Samba PDC. -.RE - -Other flags may be added as the code is extended in future. -The rest of this field space is filled in with spaces. +Account Flags +This section contains flags that describe the attributes of the users account\&. In the Samba 2\&.2 release this field is bracketed by '[' and ']' characters and is always 13 characters in length (including the '[' and ']' characters)\&. The contents of this field may be any of the following characters: + + +\fBU\fR - This means this is a "User" account, i\&.e\&. an ordinary user\&. Only User and Workstation Trust accounts are currently supported in the smbpasswd file\&. + +\fBN\fR - This means the account has no password (the passwords in the fields LANMAN Password Hash and NT Password Hash are ignored)\&. Note that this will only allow users to log on with no password if the \fI null passwords\fR parameter is set in the \fBsmb.conf\fR(5) config file\&. + +\fBD\fR - This means the account is disabled and no SMB/CIFS logins will be allowed for this user\&. + +\fBW\fR - This means this account is a "Workstation Trust" account\&. This kind of account is used in the Samba PDC code stream to allow Windows NT Workstations and Servers to join a Domain hosted by a Samba PDC\&. + +Other flags may be added as the code is extended in future\&. The rest of this field space is filled in with spaces\&. + + .TP -\fBLast Change Time\fR -This field consists of the time the account was -last modified. It consists of the characters 'LCT-' (standing for -"Last Change Time") followed by a numeric encoding of the UNIX time -in seconds since the epoch (1970) that the last change was made. +Last Change Time +This field consists of the time the account was last modified\&. It consists of the characters 'LCT-' (standing for "Last Change Time") followed by a numeric encoding of the UNIX time in seconds since the epoch (1970) that the last change was made\&. + + .PP -All other colon separated fields are ignored at this time. +All other colon separated fields are ignored at this time\&. + .SH "VERSION" + .PP -This man page is correct for version 3.0 of -the Samba suite. +This man page is correct for version 3\&.0 of the Samba suite\&. + .SH "SEE ALSO" + .PP -\fBsmbpasswd(8)\fR -samba(7) and -the Internet RFC1321 for details on the MD4 algorithm. +\fBsmbpasswd\fR(8), \fBSamba\fR(7), and the Internet RFC1321 for details on the MD4 algorithm\&. + .SH "AUTHOR" + .PP -The original Samba software and related utilities -were created by Andrew Tridgell. Samba is now developed -by the Samba Team as an Open Source project similar -to the way the Linux kernel is developed. +The original Samba software and related utilities were created by Andrew Tridgell\&. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\&. + .PP -The original Samba man pages were written by Karl Auer. -The man page sources were converted to YODL format (another -excellent piece of Open Source software, available at -ftp://ftp.icce.rug.nl/pub/unix/ ) and updated for the Samba 2.0 -release by Jeremy Allison. The conversion to DocBook for -Samba 2.2 was done by Gerald Carter +The original Samba man pages were written by Karl Auer\&. The man page sources were converted to YODL format (another excellent piece of Open Source software, available at ftp://ftp\&.icce\&.rug\&.nl/pub/unix/) and updated for the Samba 2\&.0 release by Jeremy Allison\&. The conversion to DocBook for Samba 2\&.2 was done by Gerald Carter\&. The conversion to DocBook XML 4\&.2 for Samba 3\&.0 was done by Alexander Bokovoy\&. + diff --git a/docs/manpages/smbpasswd.8 b/docs/manpages/smbpasswd.8 index 5c7b16c2e9..a7973871c4 100644 --- a/docs/manpages/smbpasswd.8 +++ b/docs/manpages/smbpasswd.8 @@ -1,293 +1,219 @@ -.\" This manpage has been automatically generated by docbook2man -.\" from a DocBook document. This tool can be found at: -.\" -.\" Please send any bug reports, improvements, comments, patches, -.\" etc. to Steve Cheng . -.TH "SMBPASSWD" "8" "04 March 2003" "" "" +.\"Generated by db2man.xsl. Don't modify this, modify the source. +.de Sh \" Subsection +.br +.if t .Sp +.ne 5 +.PP +\fB\\$1\fR +.PP +.. +.de Sp \" Vertical space (when we can't use .PP) +.if t .sp .5v +.if n .sp +.. +.de Ip \" List item +.br +.ie \\n(.$>=3 .ne \\$3 +.el .ne 3 +.IP "\\$1" \\$2 +.. +.TH "SMBPASSWD" 8 "" "" "" .SH NAME smbpasswd \- change a user's SMB password -.SH SYNOPSIS +.SH "SYNOPSIS" -\fBsmbpasswd\fR [ \fB-a\fR ] [ \fB-x\fR ] [ \fB-d\fR ] [ \fB-e\fR ] [ \fB-D debuglevel\fR ] [ \fB-n\fR ] [ \fB-r \fR ] [ \fB-R \fR ] [ \fB-m\fR ] [ \fB-U username[%password]\fR ] [ \fB-h\fR ] [ \fB-s\fR ] [ \fB-w pass\fR ] [ \fB-i\fR ] [ \fB-L\fR ] [ \fBusername\fR ] +.nf +\fBsmbpasswd\fR [-a] [-x] [-d] [-e] [-D debuglevel] [-n] [-r ] [-R ] [-m] [-U username[%password]] [-h] [-s] [-w pass] [-i] [-L] [username] + +.fi .SH "DESCRIPTION" + .PP -This tool is part of the Samba suite. +This tool is part of the \fBSamba\fR(7) suite\&. + .PP -The smbpasswd program has several different -functions, depending on whether it is run by the \fBroot\fR -user or not. When run as a normal user it allows the user to change -the password used for their SMB sessions on any machines that store -SMB passwords. +The smbpasswd program has several different functions, depending on whether it is run by the \fBroot\fR user or not\&. When run as a normal user it allows the user to change the password used for their SMB sessions on any machines that store SMB passwords\&. + .PP -By default (when run with no arguments) it will attempt to -change the current user's SMB password on the local machine. This is -similar to the way the \fBpasswd(1)\fR program works. -\fBsmbpasswd\fR differs from how the passwd program works -however in that it is not \fBsetuid root\fR but works in -a client-server mode and communicates with a locally running -\fBsmbd(8)\fR. As a consequence in order for this to -succeed the smbd daemon must be running on the local machine. On a -UNIX machine the encrypted SMB passwords are usually stored in -the \fIsmbpasswd(5)\fR file. +By default (when run with no arguments) it will attempt to change the current user's SMB password on the local machine\&. This is similar to the way the \fBpasswd(1)\fR program works\&. \fB smbpasswd\fR differs from how the passwd program works however in that it is not \fBsetuid root\fR but works in a client-server mode and communicates with a locally running \fBsmbd\fR(8)\&. As a consequence in order for this to succeed the smbd daemon must be running on the local machine\&. On a UNIX machine the encrypted SMB passwords are usually stored in the \fBsmbpasswd\fR(5) file\&. + .PP -When run by an ordinary user with no options, smbpasswd -will prompt them for their old SMB password and then ask them -for their new password twice, to ensure that the new password -was typed correctly. No passwords will be echoed on the screen -whilst being typed. If you have a blank SMB password (specified by -the string "NO PASSWORD" in the smbpasswd file) then just press -the key when asked for your old password. +When run by an ordinary user with no options, smbpasswd will prompt them for their old SMB password and then ask them for their new password twice, to ensure that the new password was typed correctly\&. No passwords will be echoed on the screen whilst being typed\&. If you have a blank SMB password (specified by the string "NO PASSWORD" in the smbpasswd file) then just press the key when asked for your old password\&. + .PP -smbpasswd can also be used by a normal user to change their -SMB password on remote machines, such as Windows NT Primary Domain -Controllers. See the (-r) and -U options below. +smbpasswd can also be used by a normal user to change their SMB password on remote machines, such as Windows NT Primary Domain Controllers\&. See the (\fI-r\fR) and \fI-U\fR options below\&. + .PP -When run by root, smbpasswd allows new users to be added -and deleted in the smbpasswd file, as well as allows changes to -the attributes of the user in this file to be made. When run by root, -\fBsmbpasswd\fR accesses the local smbpasswd file -directly, thus enabling changes to be made even if smbd is not -running. +When run by root, smbpasswd allows new users to be added and deleted in the smbpasswd file, as well as allows changes to the attributes of the user in this file to be made\&. When run by root, \fB smbpasswd\fR accesses the local smbpasswd file directly, thus enabling changes to be made even if smbd is not running\&. + .SH "OPTIONS" + .TP -\fB-a\fR -This option specifies that the username -following should be added to the local smbpasswd file, with the -new password typed (type for the old password). This -option is ignored if the username following already exists in -the smbpasswd file and it is treated like a regular change -password command. Note that the default passdb backends require -the user to already exist in the system password file (usually -\fI/etc/passwd\fR), else the request to add the -user will fail. - -This option is only available when running smbpasswd -as root. +-a +This option specifies that the username following should be added to the local smbpasswd file, with the new password typed (type for the old password)\&. This option is ignored if the username following already exists in the smbpasswd file and it is treated like a regular change password command\&. Note that the default passdb backends require the user to already exist in the system password file (usually \fI/etc/passwd\fR), else the request to add the user will fail\&. + + +This option is only available when running smbpasswd as root\&. + + .TP -\fB-x\fR -This option specifies that the username -following should be deleted from the local smbpasswd file. +-x +This option specifies that the username following should be deleted from the local smbpasswd file\&. + + +This option is only available when running smbpasswd as root\&. + -This option is only available when running smbpasswd as -root. .TP -\fB-d\fR -This option specifies that the username following -should be disabled in the local smbpasswd -file. This is done by writing a 'D' flag -into the account control space in the smbpasswd file. Once this -is done all attempts to authenticate via SMB using this username -will fail. - -If the smbpasswd file is in the 'old' format (pre-Samba 2.0 -format) there is no space in the user's password entry to write -this information and the command will FAIL. See \fBsmbpasswd(5) -\fR for details on the 'old' and new password file formats. - -This option is only available when running smbpasswd as -root. +-d +This option specifies that the username following should be \fBdisabled\fR in the local smbpasswd file\&. This is done by writing a \fB'D'\fR flag into the account control space in the smbpasswd file\&. Once this is done all attempts to authenticate via SMB using this username will fail\&. + + +If the smbpasswd file is in the 'old' format (pre-Samba 2\&.0 format) there is no space in the user's password entry to write this information and the command will FAIL\&. See \fBsmbpasswd\fR(5) for details on the 'old' and new password file formats\&. + + +This option is only available when running smbpasswd as root\&. + + .TP -\fB-e\fR -This option specifies that the username following -should be enabled in the local smbpasswd file, -if the account was previously disabled. If the account was not -disabled this option has no effect. Once the account is enabled then -the user will be able to authenticate via SMB once again. - -If the smbpasswd file is in the 'old' format, then \fB smbpasswd\fR will FAIL to enable the account. -See \fBsmbpasswd (5)\fR for -details on the 'old' and new password file formats. - -This option is only available when running smbpasswd as root. +-e +This option specifies that the username following should be \fBenabled\fR in the local smbpasswd file, if the account was previously disabled\&. If the account was not disabled this option has no effect\&. Once the account is enabled then the user will be able to authenticate via SMB once again\&. + + +If the smbpasswd file is in the 'old' format, then \fB smbpasswd\fR will FAIL to enable the account\&. See \fBsmbpasswd\fR(5) for details on the 'old' and new password file formats\&. + + +This option is only available when running smbpasswd as root\&. + + .TP -\fB-D debuglevel\fR -\fIdebuglevel\fR is an integer -from 0 to 10. The default value if this parameter is not specified -is zero. - -The higher this value, the more detail will be logged to the -log files about the activities of smbpasswd. At level 0, only -critical errors and serious warnings will be logged. - -Levels above 1 will generate considerable amounts of log -data, and should only be used when investigating a problem. Levels -above 3 are designed for use only by developers and generate -HUGE amounts of log data, most of which is extremely cryptic. +-D debuglevel +\fIdebuglevel\fR is an integer from 0 to 10\&. The default value if this parameter is not specified is zero\&. + + +The higher this value, the more detail will be logged to the log files about the activities of smbpasswd\&. At level 0, only critical errors and serious warnings will be logged\&. + + +Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\&. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\&. + + .TP -\fB-n\fR -This option specifies that the username following -should have their password set to null (i.e. a blank password) in -the local smbpasswd file. This is done by writing the string "NO -PASSWORD" as the first part of the first password stored in the -smbpasswd file. - -Note that to allow users to logon to a Samba server once -the password has been set to "NO PASSWORD" in the smbpasswd -file the administrator must set the following parameter in the [global] -section of the \fIsmb.conf\fR file : +-n +This option specifies that the username following should have their password set to null (i\&.e\&. a blank password) in the local smbpasswd file\&. This is done by writing the string "NO PASSWORD" as the first part of the first password stored in the smbpasswd file\&. + + +Note that to allow users to logon to a Samba server once the password has been set to "NO PASSWORD" in the smbpasswd file the administrator must set the following parameter in the [global] section of the \fIsmb\&.conf\fR file : + \fBnull passwords = yes\fR -This option is only available when running smbpasswd as -root. + +This option is only available when running smbpasswd as root\&. + + .TP -\fB-r remote machine name\fR -This option allows a user to specify what machine -they wish to change their password on. Without this parameter -smbpasswd defaults to the local host. The \fIremote -machine name\fR is the NetBIOS name of the SMB/CIFS -server to contact to attempt the password change. This name is -resolved into an IP address using the standard name resolution -mechanism in all programs of the Samba suite. See the \fI-R -name resolve order\fR parameter for details on changing -this resolving mechanism. - -The username whose password is changed is that of the -current UNIX logged on user. See the \fI-U username\fR -parameter for details on changing the password for a different -username. - -Note that if changing a Windows NT Domain password the -remote machine specified must be the Primary Domain Controller for -the domain (Backup Domain Controllers only have a read-only -copy of the user account database and will not allow the password -change). - -\fBNote\fR that Windows 95/98 do not have -a real password database so it is not possible to change passwords -specifying a Win95/98 machine as remote machine target. +-r remote machine name +This option allows a user to specify what machine they wish to change their password on\&. Without this parameter smbpasswd defaults to the local host\&. The \fIremote machine name\fR is the NetBIOS name of the SMB/CIFS server to contact to attempt the password change\&. This name is resolved into an IP address using the standard name resolution mechanism in all programs of the Samba suite\&. See the \fI-R name resolve order\fR parameter for details on changing this resolving mechanism\&. + + +The username whose password is changed is that of the current UNIX logged on user\&. See the \fI-U username\fR parameter for details on changing the password for a different username\&. + + +Note that if changing a Windows NT Domain password the remote machine specified must be the Primary Domain Controller for the domain (Backup Domain Controllers only have a read-only copy of the user account database and will not allow the password change)\&. + + +\fBNote\fR that Windows 95/98 do not have a real password database so it is not possible to change passwords specifying a Win95/98 machine as remote machine target\&. + + .TP -\fB-R name resolve order\fR -This option allows the user of smbpasswd to determine -what name resolution services to use when looking up the NetBIOS -name of the host being connected to. - -The options are :"lmhosts", "host", "wins" and "bcast". They -cause names to be resolved as follows : -.RS -.TP 0.2i -\(bu -lmhosts : Lookup an IP -address in the Samba lmhosts file. If the line in lmhosts has -no name type attached to the NetBIOS name (see the lmhosts(5) for details) then -any name type matches for lookup. -.TP 0.2i -\(bu -host : Do a standard host -name to IP address resolution, using the system \fI/etc/hosts -\fR, NIS, or DNS lookups. This method of name resolution -is operating system depended for instance on IRIX or Solaris this -may be controlled by the \fI/etc/nsswitch.conf\fR -file). Note that this method is only used if the NetBIOS name -type being queried is the 0x20 (server) name type, otherwise -it is ignored. -.TP 0.2i -\(bu -wins : Query a name with -the IP address listed in the \fIwins server\fR -parameter. If no WINS server has been specified this method -will be ignored. -.TP 0.2i -\(bu -bcast : Do a broadcast on -each of the known local interfaces listed in the -\fIinterfaces\fR parameter. This is the least -reliable of the name resolution methods as it depends on the -target host being on a locally connected subnet. -.RE - -The default order is \fBlmhosts, host, wins, bcast\fR -and without this parameter or any entry in the -\fIsmb.conf\fR file the name resolution methods will -be attempted in this order. +-R name resolve order +This option allows the user of smbpasswd to determine what name resolution services to use when looking up the NetBIOS name of the host being connected to\&. + + +The options are :"lmhosts", "host", "wins" and "bcast"\&. They cause names to be resolved as follows: + + +\fBlmhosts\fR: Lookup an IP address in the Samba lmhosts file\&. If the line in lmhosts has no name type attached to the NetBIOS name (see the \fBlmhosts\fR(5) for details) then any name type matches for lookup\&. + +\fBhost\fR: Do a standard host name to IP address resolution, using the system \fI/etc/hosts \fR, NIS, or DNS lookups\&. This method of name resolution is operating system depended for instance on IRIX or Solaris this may be controlled by the \fI/etc/nsswitch\&.conf\fR file)\&. Note that this method is only used if the NetBIOS name type being queried is the 0x20 (server) name type, otherwise it is ignored\&. + +\fBwins\fR: Query a name with the IP address listed in the \fIwins server\fR parameter\&. If no WINS server has been specified this method will be ignored\&. + +\fBbcast\fR: Do a broadcast on each of the known local interfaces listed in the \fIinterfaces\fR parameter\&. This is the least reliable of the name resolution methods as it depends on the target host being on a locally connected subnet\&. + +The default order is \fBlmhosts, host, wins, bcast\fR and without this parameter or any entry in the \fBsmb.conf\fR(5) file the name resolution methods will be attempted in this order\&. + + .TP -\fB-m\fR -This option tells smbpasswd that the account -being changed is a MACHINE account. Currently this is used -when Samba is being used as an NT Primary Domain Controller. +-m +This option tells smbpasswd that the account being changed is a MACHINE account\&. Currently this is used when Samba is being used as an NT Primary Domain Controller\&. + + +This option is only available when running smbpasswd as root\&. + -This option is only available when running smbpasswd as root. .TP -\fB-U username\fR -This option may only be used in conjunction -with the \fI-r\fR option. When changing -a password on a remote machine it allows the user to specify -the user name on that machine whose password will be changed. It -is present to allow users who have different user names on -different systems to change these passwords. +-U username +This option may only be used in conjunction with the \fI-r\fR option\&. When changing a password on a remote machine it allows the user to specify the user name on that machine whose password will be changed\&. It is present to allow users who have different user names on different systems to change these passwords\&. + + .TP -\fB-h\fR -This option prints the help string for \fB smbpasswd\fR, selecting the correct one for running as root -or as an ordinary user. +-h +This option prints the help string for \fB smbpasswd\fR, selecting the correct one for running as root or as an ordinary user\&. + + .TP -\fB-s\fR -This option causes smbpasswd to be silent (i.e. -not issue prompts) and to read its old and new passwords from -standard input, rather than from \fI/dev/tty\fR -(like the \fBpasswd(1)\fR program does). This option -is to aid people writing scripts to drive smbpasswd +-s +This option causes smbpasswd to be silent (i\&.e\&. not issue prompts) and to read its old and new passwords from standard input, rather than from \fI/dev/tty\fR (like the \fBpasswd(1)\fR program does)\&. This option is to aid people writing scripts to drive smbpasswd + + .TP -\fB-w password\fR -This parameter is only available if Samba -has been configured to use the experimental -\fB--with-ldapsam\fR option. The \fI-w\fR -switch is used to specify the password to be used with the -\fIldap admin -dn\fR Note that the password is stored in -the \fIprivate/secrets.tdb\fR and is keyed off -of the admin's DN. This means that if the value of \fIldap -admin dn\fR ever changes, the password will need to be -manually updated as well. +-w password +This parameter is only available if Samba has been configured to use the experimental \fB--with-ldapsam\fR option\&. The \fI-w\fR switch is used to specify the password to be used with the \fIldap admin dn\fR\&. Note that the password is stored in the \fIsecrets\&.tdb\fR and is keyed off of the admin's DN\&. This means that if the value of \fIldap admin dn\fR ever changes, the password will need to be manually updated as well\&. + + .TP -\fB-i\fR -This option tells smbpasswd that the account -being changed is an interdomain trust account. Currently this is used -when Samba is being used as an NT Primary Domain Controller. -The account contains the info about another trusted domain. +-i +This option tells smbpasswd that the account being changed is an interdomain trust account\&. Currently this is used when Samba is being used as an NT Primary Domain Controller\&. The account contains the info about another trusted domain\&. + + +This option is only available when running smbpasswd as root\&. + -This option is only available when running smbpasswd as root. .TP -\fB-L\fR -Run in local mode. +-L +Run in local mode\&. + + .TP -\fBusername\fR -This specifies the username for all of the -\fBroot only\fR options to operate on. Only root -can specify this parameter as only root has the permission needed -to modify attributes directly in the local smbpasswd file. +username +This specifies the username for all of the \fBroot only\fR options to operate on\&. Only root can specify this parameter as only root has the permission needed to modify attributes directly in the local smbpasswd file\&. + + .SH "NOTES" + .PP -Since \fBsmbpasswd\fR works in client-server -mode communicating with a local smbd for a non-root user then -the smbd daemon must be running for this to work. A common problem -is to add a restriction to the hosts that may access the \fB smbd\fR running on the local machine by specifying a -\fIallow hosts\fR or \fIdeny hosts\fR -entry in the \fIsmb.conf\fR file and neglecting to -allow "localhost" access to the smbd. +Since \fBsmbpasswd\fR works in client-server mode communicating with a local smbd for a non-root user then the smbd daemon must be running for this to work\&. A common problem is to add a restriction to the hosts that may access the \fB smbd\fR running on the local machine by specifying either \fIallow hosts\fR or \fIdeny hosts\fR entry in the \fBsmb.conf\fR(5) file and neglecting to allow "localhost" access to the smbd\&. + .PP -In addition, the smbpasswd command is only useful if Samba -has been set up to use encrypted passwords. See the file -\fIENCRYPTION.txt\fR in the docs directory for details -on how to do this. +In addition, the smbpasswd command is only useful if Samba has been set up to use encrypted passwords\&. See the document "LanMan and NT Password Encryption in Samba" in the docs directory for details on how to do this\&. + .SH "VERSION" + .PP -This man page is correct for version 3.0 of -the Samba suite. +This man page is correct for version 3\&.0 of the Samba suite\&. + .SH "SEE ALSO" + .PP -\fIsmbpasswd(5)\fR -samba(7) +\fBsmbpasswd\fR(5), \fBSamba\fR(7)\&. + .SH "AUTHOR" + .PP -The original Samba software and related utilities -were created by Andrew Tridgell. Samba is now developed -by the Samba Team as an Open Source project similar -to the way the Linux kernel is developed. +The original Samba software and related utilities were created by Andrew Tridgell\&. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\&. + .PP -The original Samba man pages were written by Karl Auer. -The man page sources were converted to YODL format (another -excellent piece of Open Source software, available at -ftp://ftp.icce.rug.nl/pub/unix/ ) and updated for the Samba 2.0 -release by Jeremy Allison. The conversion to DocBook for -Samba 2.2 was done by Gerald Carter +The original Samba man pages were written by Karl Auer\&. The man page sources were converted to YODL format (another excellent piece of Open Source software, available at ftp://ftp\&.icce\&.rug\&.nl/pub/unix/) and updated for the Samba 2\&.0 release by Jeremy Allison\&. The conversion to DocBook for Samba 2\&.2 was done by Gerald Carter\&. The conversion to DocBook XML 4\&.2 for Samba 3\&.0 was done by Alexander Bokovoy\&. + diff --git a/docs/manpages/smbsh.1 b/docs/manpages/smbsh.1 index 06d27090db..0e2c4a3a85 100644 --- a/docs/manpages/smbsh.1 +++ b/docs/manpages/smbsh.1 @@ -1,170 +1,141 @@ -.\" This manpage has been automatically generated by docbook2man -.\" from a DocBook document. This tool can be found at: -.\" -.\" Please send any bug reports, improvements, comments, patches, -.\" etc. to Steve Cheng . -.TH "SMBSH" "1" "04 March 2003" "" "" +.\"Generated by db2man.xsl. Don't modify this, modify the source. +.de Sh \" Subsection +.br +.if t .Sp +.ne 5 +.PP +\fB\\$1\fR +.PP +.. +.de Sp \" Vertical space (when we can't use .PP) +.if t .sp .5v +.if n .sp +.. +.de Ip \" List item +.br +.ie \\n(.$>=3 .ne \\$3 +.el .ne 3 +.IP "\\$1" \\$2 +.. +.TH "SMBSH" 1 "" "" "" .SH NAME -smbsh \- Allows access to Windows NT filesystem using UNIX commands -.SH SYNOPSIS +smbsh \- Allows access to Windows NT filesystem using UNIX commands +.SH "SYNOPSIS" -\fBsmbsh\fR [ \fB-W workgroup\fR ] [ \fB-U username\fR ] [ \fB-P prefix\fR ] [ \fB-R \fR ] [ \fB-d \fR ] [ \fB-l logfile\fR ] [ \fB-L libdir\fR ] +.nf +\fBsmbsh\fR [-W workgroup] [-U username] [-P prefix] [-R ] [-d ] [-l logfile] [-L libdir] + +.fi .SH "DESCRIPTION" + .PP -This tool is part of the Samba suite. +This tool is part of the \fBSamba\fR(7) suite\&. + .PP -\fBsmbsh\fR allows you to access an NT filesystem -using UNIX commands such as \fBls\fR, \fB egrep\fR, and \fBrcp\fR. You must use a -shell that is dynamically linked in order for \fBsmbsh\fR -to work correctly. +\fBsmbsh\fR allows you to access an NT filesystem using UNIX commands such as \fBls\fR, \fB egrep\fR, and \fBrcp\fR\&. You must use a shell that is dynamically linked in order for \fBsmbsh\fR to work correctly\&. + .SH "OPTIONS" + .TP -\fB-W WORKGROUP\fR -Override the default workgroup specified in the -workgroup parameter of the \fIsmb.conf\fR file -for this session. This may be needed to connect to some -servers. +-W WORKGROUP +Override the default workgroup specified in the workgroup parameter of the \fBsmb.conf\fR(5) file for this session\&. This may be needed to connect to some servers\&. + + .TP -\fB-U username[%pass]\fR -Sets the SMB username or username and password. -If this option is not specified, the user will be prompted for -both the username and the password. If %pass is not specified, -the user will be prompted for the password. +-U username[%pass] +Sets the SMB username or username and password\&. If this option is not specified, the user will be prompted for both the username and the password\&. If %pass is not specified, the user will be prompted for the password\&. + + .TP -\fB-P prefix\fR -This option allows -the user to set the directory prefix for SMB access. The -default value if this option is not specified is -\fBsmb\fR. +-P prefix +This option allows the user to set the directory prefix for SMB access\&. The default value if this option is not specified is \fBsmb\fR\&. + + .TP -\fB-R \fR -This option is used to determine what naming -services and in what order to resolve -host names to IP addresses. The option takes a space-separated -string of different name resolution options. - -The options are :"lmhosts", "host", "wins" and "bcast". -They cause names to be resolved as follows : -.RS -.TP 0.2i -\(bu -lmhosts : -Lookup an IP address in the Samba lmhosts file. If the -line in lmhosts has no name type attached to the -NetBIOS name -(see the lmhosts(5) -for details) then any name type matches for lookup. -.TP 0.2i -\(bu -host : -Do a standard host name to IP address resolution, using -the system \fI/etc/hosts\fR, NIS, or DNS -lookups. This method of name resolution is operating -system dependent, for instance on IRIX or Solaris this -may be controlled by the \fI/etc/nsswitch.conf -\fR file). Note that this method is only used -if the NetBIOS name type being queried is the 0x20 -(server) name type, otherwise it is ignored. -.TP 0.2i -\(bu -wins : -Query a name with the IP address listed in the -\fIwins server\fR parameter. If no -WINS server has been specified this method will be -ignored. -.TP 0.2i -\(bu -bcast : -Do a broadcast on each of the known local interfaces -listed in the \fIinterfaces\fR -parameter. This is the least reliable of the name -resolution methods as it depends on the target host -being on a locally connected subnet. -.RE - -If this parameter is not set then the name resolve order -defined in the \fIsmb.conf\fR file parameter -(name resolve order) will be used. - -The default order is lmhosts, host, wins, bcast. Without -this parameter or any entry in the \fIname resolve order -\fR parameter of the \fIsmb.conf\fR -file, the name resolution methods will be attempted in this -order. +-s +The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fI smb\&.conf(5)\fR for more information\&. The default configuration file name is determined at compile time\&. + + .TP -\fB-d \fR -debug level is an integer from 0 to 10. +-d|--debug=debuglevel +\fIdebuglevel\fR is an integer from 0 to 10\&. The default value if this parameter is not specified is zero\&. + + +The higher this value, the more detail will be logged to the log files about the activities of the server\&. At level 0, only critical errors and serious warnings will be logged\&. Level 1 is a reasonable level for day to day running - it generates a small amount of information about operations carried out\&. + + +Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\&. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\&. + + +Note that specifying this parameter here will override the log level parameter in the \fIsmb\&.conf(5)\fR file\&. -The default value if this parameter is not specified -is zero. -The higher this value, the more detail will be logged -about the activities of \fBnmblookup\fR. At level -0, only critical errors and serious warnings will be logged. .TP -\fB-l logfilename\fR -If specified causes all debug messages to be -written to the file specified by \fIlogfilename -\fR. If not specified then all messages will be -written to\fIstderr\fR. +-R +This option is used to determine what naming services and in what order to resolve host names to IP addresses\&. The option takes a space-separated string of different name resolution options\&. + + +The options are: "lmhosts", "host", "wins" and "bcast"\&. They cause names to be resolved as follows : + + +\fBlmhosts\fR: Lookup an IP address in the Samba lmhosts file\&. If the line in lmhosts has no name type attached to the NetBIOS name (see the \fBlmhosts\fR(5) for details) then any name type matches for lookup\&. + +\fBhost\fR: Do a standard host name to IP address resolution, using the system \fI/etc/hosts\fR, NIS, or DNS lookups\&. This method of name resolution is operating system dependent, for instance on IRIX or Solaris this may be controlled by the \fI/etc/nsswitch\&.conf \fR file)\&. Note that this method is only used if the NetBIOS name type being queried is the 0x20 (server) name type, otherwise it is ignored\&. + +\fBwins\fR: Query a name with the IP address listed in the \fIwins server\fR parameter\&. If no WINS server has been specified this method will be ignored\&. + +\fBbcast\fR: Do a broadcast on each of the known local interfaces listed in the \fIinterfaces\fR parameter\&. This is the least reliable of the name resolution methods as it depends on the target host being on a locally connected subnet\&. + +If this parameter is not set then the name resolve order defined in the \fBsmb.conf\fR(5) file parameter (\fIname resolve order\fR) will be used\&. + + +The default order is lmhosts, host, wins, bcast\&. Without this parameter or any entry in the \fIname resolve order \fR parameter of the \fBsmb.conf\fR(5) file, the name resolution methods will be attempted in this order\&. + + .TP -\fB-L libdir\fR -This parameter specifies the location of the -shared libraries used by \fBsmbsh\fR. The default -value is specified at compile time. +-L libdir +This parameter specifies the location of the shared libraries used by \fBsmbsh\fR\&. The default value is specified at compile time\&. + + .SH "EXAMPLES" -.PP -To use the \fBsmbsh\fR command, execute \fB smbsh\fR from the prompt and enter the username and password -that authenticates you to the machine running the Windows NT -operating system. -.PP +.PP +To use the \fBsmbsh\fR command, execute \fB smbsh\fR from the prompt and enter the username and password that authenticates you to the machine running the Windows NT operating system\&. .nf - system% \fBsmbsh\fR - Username: \fBuser\fR - Password: \fBXXXXXXX\fR - + +system% \fBsmbsh\fR +Username: \fBuser\fR +Password: \fBXXXXXXX\fR .fi + + .PP -Any dynamically linked command you execute from -this shell will access the \fI/smb\fR directory -using the smb protocol. For example, the command \fBls /smb -\fR will show a list of workgroups. The command -\fBls /smb/MYGROUP \fR will show all the machines in -the workgroup MYGROUP. The command -\fBls /smb/MYGROUP/\fR will show the share -names for that machine. You could then, for example, use the \fB cd\fR command to change directories, \fBvi\fR to -edit files, and \fBrcp\fR to copy files. +Any dynamically linked command you execute from this shell will access the \fI/smb\fR directory using the smb protocol\&. For example, the command \fBls /smb \fR will show a list of workgroups\&. The command\fBls /smb/MYGROUP \fR will show all the machines in the workgroup MYGROUP\&. The command\fBls /smb/MYGROUP/\fR will show the share names for that machine\&. You could then, for example, use the \fB cd\fR command to change directories, \fBvi\fR to edit files, and \fBrcp\fR to copy files\&. + .SH "VERSION" + .PP -This man page is correct for version 3.0 of -the Samba suite. +This man page is correct for version 3\&.0 of the Samba suite\&. + .SH "BUGS" + .PP -\fBsmbsh\fR works by intercepting the standard -libc calls with the dynamically loaded versions in \fI smbwrapper.o\fR. Not all calls have been "wrapped", so -some programs may not function correctly under \fBsmbsh -\fR. +\fBsmbsh\fR works by intercepting the standard libc calls with the dynamically loaded versions in \fI smbwrapper\&.o\fR\&. Not all calls have been "wrapped", so some programs may not function correctly under \fBsmbsh \fR\&. + .PP -Programs which are not dynamically linked cannot make -use of \fBsmbsh\fR's functionality. Most versions -of UNIX have a \fBfile\fR command that will -describe how a program was linked. +Programs which are not dynamically linked cannot make use of \fBsmbsh\fR's functionality\&. Most versions of UNIX have a \fBfile\fR command that will describe how a program was linked\&. + .SH "SEE ALSO" + .PP -\fBsmbd(8)\fR -smb.conf(5) +\fBsmbd\fR(8), \fBsmb.conf\fR(5) + .SH "AUTHOR" + .PP -The original Samba software and related utilities -were created by Andrew Tridgell. Samba is now developed -by the Samba Team as an Open Source project similar -to the way the Linux kernel is developed. +The original Samba software and related utilities were created by Andrew Tridgell\&. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\&. + .PP -The original Samba man pages were written by Karl Auer. -The man page sources were converted to YODL format (another -excellent piece of Open Source software, available at -ftp://ftp.icce.rug.nl/pub/unix/ ) and updated for the Samba 2.0 -release by Jeremy Allison. The conversion to DocBook for -Samba 2.2 was done by Gerald Carter +The original Samba man pages were written by Karl Auer\&. The man page sources were converted to YODL format (another excellent piece of Open Source software, available at ftp://ftp\&.icce\&.rug\&.nl/pub/unix/) and updated for the Samba 2\&.0 release by Jeremy Allison\&. The conversion to DocBook for Samba 2\&.2 was done by Gerald Carter\&. The conversion to DocBook XML 4\&.2 for Samba 3\&.0 was done by Alexander Bokovoy\&. + diff --git a/docs/manpages/smbspool.8 b/docs/manpages/smbspool.8 index 835494b534..a6413547b8 100644 --- a/docs/manpages/smbspool.8 +++ b/docs/manpages/smbspool.8 @@ -1,101 +1,115 @@ -.\" This manpage has been automatically generated by docbook2man -.\" from a DocBook document. This tool can be found at: -.\" -.\" Please send any bug reports, improvements, comments, patches, -.\" etc. to Steve Cheng . -.TH "SMBSPOOL" "8" "04 March 2003" "" "" +.\"Generated by db2man.xsl. Don't modify this, modify the source. +.de Sh \" Subsection +.br +.if t .Sp +.ne 5 +.PP +\fB\\$1\fR +.PP +.. +.de Sp \" Vertical space (when we can't use .PP) +.if t .sp .5v +.if n .sp +.. +.de Ip \" List item +.br +.ie \\n(.$>=3 .ne \\$3 +.el .ne 3 +.IP "\\$1" \\$2 +.. +.TH "SMBSPOOL" 8 "" "" "" .SH NAME smbspool \- send a print file to an SMB printer -.SH SYNOPSIS +.SH "SYNOPSIS" -\fBsmbspool\fR [ \fBjob\fR ] [ \fBuser\fR ] [ \fBtitle\fR ] [ \fBcopies\fR ] [ \fBoptions\fR ] [ \fBfilename\fR ] +.nf +\fBsmbspool\fR {job} {user} {title} {copies} {options} [filename] +.fi .SH "DESCRIPTION" + .PP -This tool is part of the Samba suite. +This tool is part of the \fBSamba\fR(7) suite\&. + .PP -smbspool is a very small print spooling program that -sends a print file to an SMB printer. The command-line arguments -are position-dependent for compatibility with the Common UNIX -Printing System, but you can use smbspool with any printing system -or from a program or script. +smbspool is a very small print spooling program that sends a print file to an SMB printer\&. The command-line arguments are position-dependent for compatibility with the Common UNIX Printing System, but you can use smbspool with any printing system or from a program or script\&. + .PP \fBDEVICE URI\fR + .PP -smbspool specifies the destination using a Uniform Resource -Identifier ("URI") with a method of "smb". This string can take -a number of forms: -.TP 0.2i +smbspool specifies the destination using a Uniform Resource Identifier ("URI") with a method of "smb"\&. This string can take a number of forms: + +.TP 3 \(bu smb://server/printer -.TP 0.2i + +.TP \(bu smb://workgroup/server/printer -.TP 0.2i + +.TP \(bu smb://username:password@server/printer -.TP 0.2i + +.TP \(bu smb://username:password@workgroup/server/printer + +.LP + .PP -smbspool tries to get the URI from argv[0]. If argv[0] -contains the name of the program then it looks in the \fB DEVICE_URI\fR environment variable. +smbspool tries to get the URI from argv[0]\&. If argv[0] contains the name of the program then it looks in the \fB DEVICE_URI\fR environment variable\&. + .PP -Programs using the \fBexec(2)\fR functions can -pass the URI in argv[0], while shell scripts must set the -\fBDEVICE_URI\fR environment variable prior to -running smbspool. +Programs using the \fBexec(2)\fR functions can pass the URI in argv[0], while shell scripts must set the\fBDEVICE_URI\fR environment variable prior to running smbspool\&. + .SH "OPTIONS" -.TP 0.2i + +.TP 3 \(bu -The job argument (argv[1]) contains the -job ID number and is presently not used by smbspool. -.TP 0.2i +The job argument (argv[1]) contains the job ID number and is presently not used by smbspool\&. + +.TP \(bu -The user argument (argv[2]) contains the -print user's name and is presently not used by smbspool. -.TP 0.2i +The user argument (argv[2]) contains the print user's name and is presently not used by smbspool\&. + +.TP \(bu -The title argument (argv[3]) contains the -job title string and is passed as the remote file name -when sending the print job. -.TP 0.2i +The title argument (argv[3]) contains the job title string and is passed as the remote file name when sending the print job\&. + +.TP \(bu -The copies argument (argv[4]) contains -the number of copies to be printed of the named file. If -no filename is provided then this argument is not used by -smbspool. -.TP 0.2i +The copies argument (argv[4]) contains the number of copies to be printed of the named file\&. If no filename is provided then this argument is not used by smbspool\&. + +.TP \(bu -The options argument (argv[5]) contains -the print options in a single string and is currently -not used by smbspool. -.TP 0.2i +The options argument (argv[5]) contains the print options in a single string and is currently not used by smbspool\&. + +.TP \(bu -The filename argument (argv[6]) contains the -name of the file to print. If this argument is not specified -then the print file is read from the standard input. +The filename argument (argv[6]) contains the name of the file to print\&. If this argument is not specified then the print file is read from the standard input\&. + +.LP + .SH "VERSION" + .PP -This man page is correct for version 2.2 of -the Samba suite. +This man page is correct for version 3\&.0 of the Samba suite\&. + .SH "SEE ALSO" + .PP -\fBsmbd(8)\fR -and samba(7) +\fBsmbd\fR(8) and \fBSamba\fR(7)\&. + .SH "AUTHOR" + .PP -\fBsmbspool\fR was written by Michael Sweet -at Easy Software Products. +\fBsmbspool\fR was written by Michael Sweet at Easy Software Products\&. + .PP -The original Samba software and related utilities -were created by Andrew Tridgell. Samba is now developed -by the Samba Team as an Open Source project similar -to the way the Linux kernel is developed. +The original Samba software and related utilities were created by Andrew Tridgell\&. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\&. + .PP -The original Samba man pages were written by Karl Auer. -The man page sources were converted to YODL format (another -excellent piece of Open Source software, available at -ftp://ftp.icce.rug.nl/pub/unix/ ) and updated for the Samba 2.0 -release by Jeremy Allison. The conversion to DocBook for -Samba 2.2 was done by Gerald Carter +The original Samba man pages were written by Karl Auer\&. The man page sources were converted to YODL format (another excellent piece of Open Source software, available at ftp://ftp\&.icce\&.rug\&.nl/pub/unix/) and updated for the Samba 2\&.0 release by Jeremy Allison\&. The conversion to DocBook for Samba 2\&.2 was done by Gerald Carter\&. The conversion to DocBook XML 4\&.2 for Samba 3\&.0 was done by Alexander Bokovoy\&. + diff --git a/docs/manpages/smbstatus.1 b/docs/manpages/smbstatus.1 index 9fb96f1c43..7e349dcd19 100644 --- a/docs/manpages/smbstatus.1 +++ b/docs/manpages/smbstatus.1 @@ -1,77 +1,131 @@ -.\" This manpage has been automatically generated by docbook2man -.\" from a DocBook document. This tool can be found at: -.\" -.\" Please send any bug reports, improvements, comments, patches, -.\" etc. to Steve Cheng . -.TH "SMBSTATUS" "1" "04 March 2003" "" "" +.\"Generated by db2man.xsl. Don't modify this, modify the source. +.de Sh \" Subsection +.br +.if t .Sp +.ne 5 +.PP +\fB\\$1\fR +.PP +.. +.de Sp \" Vertical space (when we can't use .PP) +.if t .sp .5v +.if n .sp +.. +.de Ip \" List item +.br +.ie \\n(.$>=3 .ne \\$3 +.el .ne 3 +.IP "\\$1" \\$2 +.. +.TH "SMBSTATUS" 1 "" "" "" .SH NAME smbstatus \- report on current Samba connections -.SH SYNOPSIS +.SH "SYNOPSIS" -\fBsmbstatus\fR [ \fB-P\fR ] [ \fB-b\fR ] [ \fB-d \fR ] [ \fB-v\fR ] [ \fB-L\fR ] [ \fB-B\fR ] [ \fB-p\fR ] [ \fB-S\fR ] [ \fB-s \fR ] [ \fB-u \fR ] +.nf +\fBsmbstatus\fR [-P] [-b] [-d ] [-v] [-L] [-B] [-p] [-S] [-s ] [-u ] +.fi .SH "DESCRIPTION" + .PP -This tool is part of the Samba suite. +This tool is part of the \fBSamba\fR(7) suite\&. + .PP -\fBsmbstatus\fR is a very simple program to -list the current Samba connections. +\fBsmbstatus\fR is a very simple program to list the current Samba connections\&. + .SH "OPTIONS" + +.TP +-P|--profile +If samba has been compiled with the profiling option, print only the contents of the profiling shared memory area\&. + + +.TP +-b|--brief +gives brief output\&. + + .TP -\fB-P|--profile\fR -If samba has been compiled with the -profiling option, print only the contents of the profiling -shared memory area. +-V +Prints the version number for \fBsmbd\fR\&. + + +.TP +-s +The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fI smb\&.conf(5)\fR for more information\&. The default configuration file name is determined at compile time\&. + + .TP -\fB-b|--brief\fR -gives brief output. +-d|--debug=debuglevel +\fIdebuglevel\fR is an integer from 0 to 10\&. The default value if this parameter is not specified is zero\&. + + +The higher this value, the more detail will be logged to the log files about the activities of the server\&. At level 0, only critical errors and serious warnings will be logged\&. Level 1 is a reasonable level for day to day running - it generates a small amount of information about operations carried out\&. + + +Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\&. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\&. + + +Note that specifying this parameter here will override the log level parameter in the \fIsmb\&.conf(5)\fR file\&. + + .TP -\fB-d|--debug=\fR -sets debugging to specified level +-l|--logfile=logbasename +File name for log/debug files\&. The extension \fB"\&.client"\fR will be appended\&. The log file is never removed by the client\&. + + .TP -\fB-v|--verbose\fR -gives verbose output. +-v|--verbose +gives verbose output\&. + + .TP -\fB-L|--locks\fR -causes smbstatus to only list locks. +-L|--locks +causes smbstatus to only list locks\&. + + .TP -\fB-B|--byterange\fR -causes smbstatus to include byte range locks. +-B|--byterange +causes smbstatus to include byte range locks\&. + + .TP -\fB-p|--processes\fR -print a list of \fBsmbd(8)\fR processes and exit. -Useful for scripting. +-p|--processes +print a list of \fBsmbd\fR(8) processes and exit\&. Useful for scripting\&. + + .TP -\fB-S|--shares\fR -causes smbstatus to only list shares. +-S|--shares +causes smbstatus to only list shares\&. + + .TP -\fB-s|--conf=\fR -The default configuration file name is -determined at compile time. The file specified contains the -configuration details required by the server. See \fIsmb.conf(5)\fR - for more information. +-h|--help +Print a summary of command line options\&. + + .TP -\fB-u|--user=\fR -selects information relevant to -\fIusername\fR only. +-u|--user= +selects information relevant to \fIusername\fR only\&. + + .SH "VERSION" + .PP -This man page is correct for version 3.0 of -the Samba suite. +This man page is correct for version 3\&.0 of the Samba suite\&. + .SH "SEE ALSO" + .PP -\fBsmbd(8)\fR and -smb.conf(5) +\fBsmbd\fR(8) and \fBsmb.conf\fR(5)\&. + .SH "AUTHOR" + .PP -The original Samba software and related utilities -were created by Andrew Tridgell. Samba is now developed -by the Samba Team as an Open Source project similar -to the way the Linux kernel is developed. +The original Samba software and related utilities were created by Andrew Tridgell\&. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\&. + .PP -The original Samba man pages were written by Karl Auer. -The man page sources were converted to YODL format (another -excellent piece of Open Source software, available at -ftp://ftp.icce.rug.nl/pub/unix/ ) and updated for the Samba 2.0 -release by Jeremy Allison. The conversion to DocBook for -Samba 2.2 was done by Gerald Carter +The original Samba man pages were written by Karl Auer\&. The man page sources were converted to YODL format (another excellent piece of Open Source software, available at ftp://ftp\&.icce\&.rug\&.nl/pub/unix/) and updated for the Samba 2\&.0 release by Jeremy Allison\&. The conversion to DocBook for Samba 2\&.2 was done by Gerald Carter\&. The conversion to DocBook XML 4\&.2 for Samba 3\&.0 was done by Alexander Bokovoy\&. + diff --git a/docs/manpages/smbtar.1 b/docs/manpages/smbtar.1 index 4ed25bbc75..00d913bdfa 100644 --- a/docs/manpages/smbtar.1 +++ b/docs/manpages/smbtar.1 @@ -1,121 +1,148 @@ -.\" This manpage has been automatically generated by docbook2man -.\" from a DocBook document. This tool can be found at: -.\" -.\" Please send any bug reports, improvements, comments, patches, -.\" etc. to Steve Cheng . -.TH "SMBTAR" "1" "04 March 2003" "" "" +.\"Generated by db2man.xsl. Don't modify this, modify the source. +.de Sh \" Subsection +.br +.if t .Sp +.ne 5 +.PP +\fB\\$1\fR +.PP +.. +.de Sp \" Vertical space (when we can't use .PP) +.if t .sp .5v +.if n .sp +.. +.de Ip \" List item +.br +.ie \\n(.$>=3 .ne \\$3 +.el .ne 3 +.IP "\\$1" \\$2 +.. +.TH "SMBTAR" 1 "" "" "" .SH NAME -smbtar \- shell script for backing up SMB/CIFS shares directly to UNIX tape drives -.SH SYNOPSIS +smbtar \- shell script for backing up SMB/CIFS shares directly to UNIX tape drives +.SH "SYNOPSIS" -\fBsmbtar\fR \fB-s server\fR [ \fB-p password\fR ] [ \fB-x services\fR ] [ \fB-X\fR ] [ \fB-d directory\fR ] [ \fB-u user\fR ] [ \fB-t tape\fR ] [ \fB-t tape\fR ] [ \fB-b blocksize\fR ] [ \fB-N filename\fR ] [ \fB-i\fR ] [ \fB-r\fR ] [ \fB-l loglevel\fR ] [ \fB-v\fR ] \fBfilenames\fR +.nf +\fBsmbtar\fR [-r] [-i] [-a] [-v] {-s server} [-p password] [-x services] [-X] [-N filename] + [-b blocksize] [-d directory] [-l loglevel] [-u user] [-t tape] {filenames} + +.fi .SH "DESCRIPTION" + .PP -This tool is part of the Samba suite. +This tool is part of the \fBSamba\fR(7) suite\&. + .PP -\fBsmbtar\fR is a very small shell script on top -of \fBsmbclient(1)\fR -which dumps SMB shares directly to tape. +\fBsmbtar\fR is a very small shell script on top of \fBsmbclient\fR(1) which dumps SMB shares directly to tape\&. + .SH "OPTIONS" + .TP -\fB-s server\fR -The SMB/CIFS server that the share resides -upon. +-s server +The SMB/CIFS server that the share resides upon\&. + + .TP -\fB-x service\fR -The share name on the server to connect to. -The default is "backup". +-x service +The share name on the server to connect to\&. The default is "backup"\&. + + .TP -\fB-X\fR -Exclude mode. Exclude filenames... from tar -create or restore. +-X +Exclude mode\&. Exclude filenames\&.\&.\&. from tar create or restore\&. + + .TP -\fB-d directory\fR -Change to initial \fIdirectory -\fR before restoring / backing up files. +-d directory +Change to initial \fIdirectory \fR before restoring / backing up files\&. + + +.TP +-v +Verbose mode\&. + + .TP -\fB-v\fR -Verbose mode. +-p password +The password to use to access a share\&. Default: none + + .TP -\fB-p password\fR -The password to use to access a share. -Default: none +-u user +The user id to connect as\&. Default: UNIX login name\&. + + .TP -\fB-u user\fR -The user id to connect as. Default: -UNIX login name. +-a +Reset DOS archive bit mode to indicate file has been archived\&. + + .TP -\fB-t tape\fR -Tape device. May be regular file or tape -device. Default: \fI$TAPE\fR environmental -variable; if not set, a file called \fItar.out -\fR. +-t tape +Tape device\&. May be regular file or tape device\&. Default: \fI$TAPE\fR environmental variable; if not set, a file called \fItar\&.out \fR\&. + + .TP -\fB-b blocksize\fR -Blocking factor. Defaults to 20. See -\fBtar(1)\fR for a fuller explanation. +-b blocksize +Blocking factor\&. Defaults to 20\&. See \fBtar(1)\fR for a fuller explanation\&. + + .TP -\fB-N filename\fR -Backup only files newer than filename. Could -be used (for example) on a log file to implement incremental -backups. +-N filename +Backup only files newer than filename\&. Could be used (for example) on a log file to implement incremental backups\&. + + .TP -\fB-i\fR -Incremental mode; tar files are only backed -up if they have the archive bit set. The archive bit is reset -after each file is read. +-i +Incremental mode; tar files are only backed up if they have the archive bit set\&. The archive bit is reset after each file is read\&. + + .TP -\fB-r\fR -Restore. Files are restored to the share -from the tar file. +-r +Restore\&. Files are restored to the share from the tar file\&. + + .TP -\fB-l log level\fR -Log (debug) level. Corresponds to the -\fI-d\fR flag of \fBsmbclient(1) -\fR. +-l log level +Log (debug) level\&. Corresponds to the \fI-d\fR flag of \fBsmbclient\fR(1)\&. + + .SH "ENVIRONMENT VARIABLES" + .PP -The \fI$TAPE\fR variable specifies the -default tape device to write to. May be overridden -with the -t option. +The \fI$TAPE\fR variable specifies the default tape device to write to\&. May be overridden with the -t option\&. + .SH "BUGS" + .PP -The \fBsmbtar\fR script has different -options from ordinary tar and from smbclient's tar command. +The \fBsmbtar\fR script has different options from ordinary tar and from smbclient's tar command\&. + .SH "CAVEATS" + .PP -Sites that are more careful about security may not like -the way the script handles PC passwords. Backup and restore work -on entire shares; should work on file lists. smbtar works best -with GNU tar and may not work well with other versions. +Sites that are more careful about security may not like the way the script handles PC passwords\&. Backup and restore work on entire shares; should work on file lists\&. smbtar works best with GNU tar and may not work well with other versions\&. + .SH "DIAGNOSTICS" + .PP -See the \fBDIAGNOSTICS\fR section for the -\fBsmbclient(1)\fR - command. +See the \fBDIAGNOSTICS\fR section for the \fBsmbclient\fR(1) command\&. + .SH "VERSION" + .PP -This man page is correct for version 3.0 of -the Samba suite. +This man page is correct for version 3\&.0 of the Samba suite\&. + .SH "SEE ALSO" + .PP -\fBsmbd(8)\fR -\fBsmbclient(1)\fR -smb.conf(5) +\fBsmbd\fR(8), \fBsmbclient\fR(1), \fBsmb.conf\fR(5)\&. + .SH "AUTHOR" + .PP -The original Samba software and related utilities -were created by Andrew Tridgell. Samba is now developed -by the Samba Team as an Open Source project similar -to the way the Linux kernel is developed. +The original Samba software and related utilities were created by Andrew Tridgell\&. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\&. + .PP -Ricky Poulten -wrote the tar extension and this man page. The \fBsmbtar\fR -script was heavily rewritten and improved by Martin Kraemer . Many -thanks to everyone who suggested extensions, improvements, bug -fixes, etc. The man page sources were converted to YODL format (another -excellent piece of Open Source software, available at -ftp://ftp.icce.rug.nl/pub/unix/ ) and updated for the Samba 2.0 -release by Jeremy Allison. The conversion to DocBook for -Samba 2.2 was done by Gerald Carter. +Ricky Poulten wrote the tar extension and this man page\&. The \fBsmbtar\fR script was heavily rewritten and improved by Martin Kraemer\&. Many thanks to everyone who suggested extensions, improvements, bug fixes, etc\&. The man page sources were converted to YODL format (another excellent piece of Open Source software, available at ftp://ftp\&.icce\&.rug\&.nl/pub/unix/) and updated for the Samba 2\&.0 release by Jeremy Allison\&. The conversion to DocBook for Samba 2\&.2 was done by Gerald Carter\&. The conversion to DocBook XML 4\&.2 for Samba 3\&.0 was done by Alexander Bokovoy\&. + diff --git a/docs/manpages/smbumount.8 b/docs/manpages/smbumount.8 index 4c3688d63f..922cf5db84 100644 --- a/docs/manpages/smbumount.8 +++ b/docs/manpages/smbumount.8 @@ -1,43 +1,56 @@ -.\" This manpage has been automatically generated by docbook2man -.\" from a DocBook document. This tool can be found at: -.\" -.\" Please send any bug reports, improvements, comments, patches, -.\" etc. to Steve Cheng . -.TH "SMBUMOUNT" "8" "04 March 2003" "" "" +.\"Generated by db2man.xsl. Don't modify this, modify the source. +.de Sh \" Subsection +.br +.if t .Sp +.ne 5 +.PP +\fB\\$1\fR +.PP +.. +.de Sp \" Vertical space (when we can't use .PP) +.if t .sp .5v +.if n .sp +.. +.de Ip \" List item +.br +.ie \\n(.$>=3 .ne \\$3 +.el .ne 3 +.IP "\\$1" \\$2 +.. +.TH "SMBUMOUNT" 8 "" "" "" .SH NAME smbumount \- smbfs umount for normal users -.SH SYNOPSIS +.SH "SYNOPSIS" -\fBsmbumount\fR \fBmount-point\fR +.nf +\fBsmbumount\fR {mount-point} +.fi .SH "DESCRIPTION" + .PP -With this program, normal users can unmount smb-filesystems, -provided that it is suid root. \fBsmbumount\fR has -been written to give normal Linux users more control over their -resources. It is safe to install this program suid root, because only -the user who has mounted a filesystem is allowed to unmount it again. -For root it is not necessary to use smbumount. The normal umount -program works perfectly well, but it would certainly be problematic -to make umount setuid root. +With this program, normal users can unmount smb-filesystems, provided that it is suid root\&. \fBsmbumount\fR has been written to give normal Linux users more control over their resources\&. It is safe to install this program suid root, because only the user who has mounted a filesystem is allowed to unmount it again\&. For root it is not necessary to use smbumount\&. The normal umount program works perfectly well, but it would certainly be problematic to make umount setuid root\&. + .SH "OPTIONS" + .TP -\fBmount-point\fR -The directory to unmount. +mount-point +The directory to unmount\&. + + .SH "SEE ALSO" + .PP -\fBsmbmount(8)\fR +\fBsmbmount\fR(8) .SH "AUTHOR" + .PP -Volker Lendecke, Andrew Tridgell, Michael H. Warfield -and others. +Volker Lendecke, Andrew Tridgell, Michael H\&. Warfield and others\&. + .PP -The current maintainer of smbfs and the userspace -tools \fBsmbmount\fR, \fBsmbumount\fR, -and \fBsmbmnt\fR is Urban Widmark . -The SAMBA Mailing list -is the preferred place to ask questions regarding these programs. +The current maintainer of smbfs and the userspace tools \fBsmbmount\fR, \fBsmbumount\fR, and \fBsmbmnt\fR is Urban Widmark\&. The SAMBA Mailing list is the preferred place to ask questions regarding these programs\&. + .PP -The conversion of this manpage for Samba 2.2 was performed -by Gerald Carter +The conversion of this manpage for Samba 2\&.2 was performed by Gerald Carter\&. The conversion to DocBook XML 4\&.2 for Samba 3\&.0 was done by Alexander Bokovoy\&. + diff --git a/docs/manpages/swat.8 b/docs/manpages/swat.8 index 6466a0a79d..36d855e725 100644 --- a/docs/manpages/swat.8 +++ b/docs/manpages/swat.8 @@ -1,141 +1,184 @@ -.\" This manpage has been automatically generated by docbook2man -.\" from a DocBook document. This tool can be found at: -.\" -.\" Please send any bug reports, improvements, comments, patches, -.\" etc. to Steve Cheng . -.TH "SWAT" "8" "04 March 2003" "" "" +.\"Generated by db2man.xsl. Don't modify this, modify the source. +.de Sh \" Subsection +.br +.if t .Sp +.ne 5 +.PP +\fB\\$1\fR +.PP +.. +.de Sp \" Vertical space (when we can't use .PP) +.if t .sp .5v +.if n .sp +.. +.de Ip \" List item +.br +.ie \\n(.$>=3 .ne \\$3 +.el .ne 3 +.IP "\\$1" \\$2 +.. +.TH "SWAT" 8 "" "" "" .SH NAME swat \- Samba Web Administration Tool -.SH SYNOPSIS +.SH "SYNOPSIS" -\fBswat\fR [ \fB-s \fR ] [ \fB-a\fR ] +.nf +\fBswat\fR [-s ] [-a] +.fi .SH "DESCRIPTION" + .PP -This tool is part of the Samba suite. +This tool is part of the \fBSamba\fR(7) suite\&. + .PP -\fBswat\fR allows a Samba administrator to -configure the complex \fI smb.conf(5)\fR file via a Web browser. In addition, -a \fBswat\fR configuration page has help links -to all the configurable options in the \fIsmb.conf\fR file allowing an -administrator to easily look up the effects of any change. +\fBswat\fR allows a Samba administrator to configure the complex \fBsmb.conf\fR(5) file via a Web browser\&. In addition, a \fBswat\fR configuration page has help links to all the configurable options in the \fIsmb\&.conf\fR file allowing an administrator to easily look up the effects of any change\&. + .PP \fBswat\fR is run from \fBinetd\fR + .SH "OPTIONS" + +.TP +-s smb configuration file +The default configuration file path is determined at compile time\&. The file specified contains the configuration details required by the \fBsmbd\fR(8) server\&. This is the file that \fBswat\fR will modify\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fIsmb\&.conf\fR for more information\&. + + +.TP +-a +This option disables authentication and puts \fBswat\fR in demo mode\&. In that mode anyone will be able to modify the \fIsmb\&.conf\fR file\&. + + +\fBWARNING: Do NOT enable this option on a production server\&. \fR + + .TP -\fB-s smb configuration file\fR -The default configuration file path is -determined at compile time. The file specified contains -the configuration details required by the \fBsmbd -\fR server. This is the file that \fBswat\fR will modify. -The information in this file includes server-specific -information such as what printcap file to use, as well as -descriptions of all the services that the server is to provide. -See \fIsmb.conf\fR for more information. +-V +Prints the version number for \fBsmbd\fR\&. + + +.TP +-s +The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fI smb\&.conf(5)\fR for more information\&. The default configuration file name is determined at compile time\&. + + .TP -\fB-a\fR -This option disables authentication and puts -\fBswat\fR in demo mode. In that mode anyone will be able to modify -the \fIsmb.conf\fR file. +-d|--debug=debuglevel +\fIdebuglevel\fR is an integer from 0 to 10\&. The default value if this parameter is not specified is zero\&. + + +The higher this value, the more detail will be logged to the log files about the activities of the server\&. At level 0, only critical errors and serious warnings will be logged\&. Level 1 is a reasonable level for day to day running - it generates a small amount of information about operations carried out\&. + + +Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\&. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\&. + + +Note that specifying this parameter here will override the log level parameter in the \fIsmb\&.conf(5)\fR file\&. + + +.TP +-l|--logfile=logbasename +File name for log/debug files\&. The extension \fB"\&.client"\fR will be appended\&. The log file is never removed by the client\&. + + +.TP +-h|--help +Print a summary of command line options\&. + -\fBWARNING: Do NOT enable this option on a production -server. \fR .SH "INSTALLATION" + +.PP +Swat is included as binary package with most distributions\&. The package manager in this case takes care of the installation and configuration\&. This section is only for those who have compiled swat from scratch\&. + .PP -After you compile SWAT you need to run \fBmake install -\fR to install the \fBswat\fR binary -and the various help files and images. A default install would put -these in: -.TP 0.2i +After you compile SWAT you need to run \fBmake install \fR to install the \fBswat\fR binary and the various help files and images\&. A default install would put these in: + +.TP 3 \(bu /usr/local/samba/bin/swat -.TP 0.2i + +.TP \(bu /usr/local/samba/swat/images/* -.TP 0.2i + +.TP \(bu /usr/local/samba/swat/help/* -.SS "INETD INSTALLATION" + +.LP + +.SS "Inetd Installation" + .PP -You need to edit your \fI/etc/inetd.conf -\fR and \fI/etc/services\fR -to enable SWAT to be launched via \fBinetd\fR. +You need to edit your \fI/etc/inetd\&.conf \fR and \fI/etc/services\fR to enable SWAT to be launched via \fBinetd\fR\&. + .PP -In \fI/etc/services\fR you need to -add a line like this: +In \fI/etc/services\fR you need to add a line like this: + .PP -\fBswat 901/tcp\fR +\fBswat 901/tcp\fR + .PP -Note for NIS/YP users - you may need to rebuild the -NIS service maps rather than alter your local \fI /etc/services\fR file. +Note for NIS/YP and LDAP users - you may need to rebuild the NIS service maps rather than alter your local \fI /etc/services\fR file\&. + .PP -the choice of port number isn't really important -except that it should be less than 1024 and not currently -used (using a number above 1024 presents an obscure security -hole depending on the implementation details of your -\fBinetd\fR daemon). +the choice of port number isn't really important except that it should be less than 1024 and not currently used (using a number above 1024 presents an obscure security hole depending on the implementation details of your\fBinetd\fR daemon)\&. + .PP -In \fI/etc/inetd.conf\fR you should -add a line like this: +In \fI/etc/inetd\&.conf\fR you should add a line like this: + .PP -\fBswat stream tcp nowait.400 root -/usr/local/samba/bin/swat swat\fR +\fBswat stream tcp nowait.400 root /usr/local/samba/bin/swat swat\fR + .PP -One you have edited \fI/etc/services\fR -and \fI/etc/inetd.conf\fR you need to send a -HUP signal to inetd. To do this use \fBkill -1 PID -\fR where PID is the process ID of the inetd daemon. -.SS "LAUNCHING" +One you have edited \fI/etc/services\fR and \fI/etc/inetd\&.conf\fR you need to send a HUP signal to inetd\&. To do this use \fBkill -1 PID \fR where PID is the process ID of the inetd daemon\&. + +.SH "LAUNCHING" + .PP -To launch SWAT just run your favorite web browser and -point it at "http://localhost:901/". +To launch SWAT just run your favorite web browser and point it at "http://localhost:901/"\&. + .PP -Note that you can attach to SWAT from any IP connected -machine but connecting from a remote machine leaves your -connection open to password sniffing as passwords will be sent -in the clear over the wire. +Note that you can attach to SWAT from any IP connected machine but connecting from a remote machine leaves your connection open to password sniffing as passwords will be sent in the clear over the wire\&. + .SH "FILES" + .TP -\fB\fI/etc/inetd.conf\fB\fR -This file must contain suitable startup -information for the meta-daemon. +\fI/etc/inetd\&.conf\fR +This file must contain suitable startup information for the meta-daemon\&. + + .TP -\fB\fI/etc/services\fB\fR -This file must contain a mapping of service name -(e.g., swat) to service port (e.g., 901) and protocol type -(e.g., tcp). +\fI/etc/services\fR +This file must contain a mapping of service name (e\&.g\&., swat) to service port (e\&.g\&., 901) and protocol type (e\&.g\&., tcp)\&. + + .TP -\fB\fI/usr/local/samba/lib/smb.conf\fB\fR -This is the default location of the \fIsmb.conf(5) -\fR server configuration file that swat edits. Other -common places that systems install this file are \fI /usr/samba/lib/smb.conf\fR and \fI/etc/smb.conf -\fR. This file describes all the services the server -is to make available to clients. +\fI/usr/local/samba/lib/smb\&.conf\fR +This is the default location of the \fBsmb.conf\fR(5) server configuration file that swat edits\&. Other common places that systems install this file are \fI /usr/samba/lib/smb\&.conf\fR and \fI/etc/smb\&.conf \fR\&. This file describes all the services the server is to make available to clients\&. + + .SH "WARNINGS" + .PP -\fBswat\fR will rewrite your \fIsmb.conf -\fR file. It will rearrange the entries and delete all -comments, \fIinclude=\fR and \fIcopy= -\fR options. If you have a carefully crafted \fI smb.conf\fR then back it up or don't use swat! +\fBswat\fR will rewrite your \fBsmb.conf\fR(5) file\&. It will rearrange the entries and delete all comments, \fIinclude=\fR and \fIcopy= \fR options\&. If you have a carefully crafted \fI smb\&.conf\fR then back it up or don't use swat! + .SH "VERSION" + .PP -This man page is correct for version 2.2 of -the Samba suite. +This man page is correct for version 3\&.0 of the Samba suite\&. + .SH "SEE ALSO" + .PP -\fBinetd(5)\fR, -\fBsmbd(8)\fR -smb.conf(5) +\fBinetd(5)\fR, \fBsmbd\fR(8), \fBsmb.conf\fR(5) + .SH "AUTHOR" + +.PP +The original Samba software and related utilities were created by Andrew Tridgell\&. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\&. + .PP -The original Samba software and related utilities -were created by Andrew Tridgell. Samba is now developed -by the Samba Team as an Open Source project similar -to the way the Linux kernel is developed. -.PP -The original Samba man pages were written by Karl Auer. -The man page sources were converted to YODL format (another -excellent piece of Open Source software, available at -ftp://ftp.icce.rug.nl/pub/unix/ ) and updated for the Samba 2.0 -release by Jeremy Allison. The conversion to DocBook for -Samba 2.2 was done by Gerald Carter +The original Samba man pages were written by Karl Auer\&. The man page sources were converted to YODL format (another excellent piece of Open Source software, available at ftp://ftp\&.icce\&.rug\&.nl/pub/unix/) and updated for the Samba 2\&.0 release by Jeremy Allison\&. The conversion to DocBook for Samba 2\&.2 was done by Gerald Carter\&. The conversion to DocBook XML 4\&.2 for Samba 3\&.0 was done by Alexander Bokovoy\&. + diff --git a/docs/manpages/testparm.1 b/docs/manpages/testparm.1 index c459eeea70..4a6d788f79 100644 --- a/docs/manpages/testparm.1 +++ b/docs/manpages/testparm.1 @@ -1,110 +1,123 @@ -.\" This manpage has been automatically generated by docbook2man -.\" from a DocBook document. This tool can be found at: -.\" -.\" Please send any bug reports, improvements, comments, patches, -.\" etc. to Steve Cheng . -.TH "TESTPARM" "1" "04 March 2003" "" "" +.\"Generated by db2man.xsl. Don't modify this, modify the source. +.de Sh \" Subsection +.br +.if t .Sp +.ne 5 +.PP +\fB\\$1\fR +.PP +.. +.de Sp \" Vertical space (when we can't use .PP) +.if t .sp .5v +.if n .sp +.. +.de Ip \" List item +.br +.ie \\n(.$>=3 .ne \\$3 +.el .ne 3 +.IP "\\$1" \\$2 +.. +.TH "TESTPARM" 1 "" "" "" .SH NAME -testparm \- check an smb.conf configuration file for internal correctness -.SH SYNOPSIS +testparm \- check an smb.conf configuration file for internal correctness +.SH "SYNOPSIS" -\fBtestparm\fR [ \fB-s\fR ] [ \fB-h\fR ] [ \fB-v\fR ] [ \fB-L \fR ] [ \fB-t \fR ] \fBconfig filename\fR [ \fBhostname hostIP\fR ] +.nf +\fBtestparm\fR [-s] [-h] [-v] [-L ] [-t ] {config filename} [hostname + hostIP] +.fi .SH "DESCRIPTION" + .PP -This tool is part of the Samba suite. +This tool is part of the \fBSamba\fR(7) suite\&. + .PP -\fBtestparm\fR is a very simple test program -to check an \fBsmbd\fR configuration file for -internal correctness. If this program reports no problems, you -can use the configuration file with confidence that \fBsmbd -\fR will successfully load the configuration file. +\fBtestparm\fR is a very simple test program to check an \fBsmbd\fR(8) configuration file for internal correctness\&. If this program reports no problems, you can use the configuration file with confidence that \fBsmbd \fR will successfully load the configuration file\&. + .PP -Note that this is \fBNOT\fR a guarantee that -the services specified in the configuration file will be -available or will operate as expected. +Note that this is \fBNOT\fR a guarantee that the services specified in the configuration file will be available or will operate as expected\&. + .PP -If the optional host name and host IP address are -specified on the command line, this test program will run through -the service entries reporting whether the specified host -has access to each service. +If the optional host name and host IP address are specified on the command line, this test program will run through the service entries reporting whether the specified host has access to each service\&. + .PP -If \fBtestparm\fR finds an error in the \fI smb.conf\fR file it returns an exit code of 1 to the calling -program, else it returns an exit code of 0. This allows shell scripts -to test the output from \fBtestparm\fR. +If \fBtestparm\fR finds an error in the \fI smb\&.conf\fR file it returns an exit code of 1 to the calling program, else it returns an exit code of 0\&. This allows shell scripts to test the output from \fBtestparm\fR\&. + .SH "OPTIONS" + +.TP +-s +Without this option, \fBtestparm\fR will prompt for a carriage return after printing the service names and before dumping the service definitions\&. + + .TP -\fB-s\fR -Without this option, \fBtestparm\fR -will prompt for a carriage return after printing the service -names and before dumping the service definitions. +-h|--help +Print a summary of command line options\&. + + .TP -\fB-h\fR -Print usage message +-V +Prints the version number for \fBsmbd\fR\&. + + .TP -\fB-L servername\fR -Sets the value of the %L macro to \fIservername\fR. -This is useful for testing include files specified with the -%L macro. +-L servername +Sets the value of the %L macro to \fIservername\fR\&. This is useful for testing include files specified with the %L macro\&. + + .TP -\fB-v\fR -If this option is specified, testparm -will also output all options that were not used in -\fIsmb.conf\fR and are thus set to -their defaults. +-v +If this option is specified, testparm will also output all options that were not used in \fBsmb.conf\fR(5) and are thus set to their defaults\&. + + .TP -\fB-t encoding\fR -Output data in specified encoding. +-t encoding +Output data in specified encoding\&. + + .TP -\fBconfigfilename\fR -This is the name of the configuration file -to check. If this parameter is not present then the -default \fIsmb.conf\fR file will be checked. +configfilename +This is the name of the configuration file to check\&. If this parameter is not present then the default \fBsmb.conf\fR(5) file will be checked\&. + + .TP -\fBhostname\fR -If this parameter and the following are -specified, then \fBtestparm\fR will examine the \fIhosts -allow\fR and \fIhosts deny\fR -parameters in the \fIsmb.conf\fR file to -determine if the hostname with this IP address would be -allowed access to the \fBsmbd\fR server. If -this parameter is supplied, the hostIP parameter must also -be supplied. +hostname +If this parameter and the following are specified, then \fBtestparm\fR will examine the \fIhosts allow\fR and \fIhosts deny\fR parameters in the \fBsmb.conf\fR(5) file to determine if the hostname with this IP address would be allowed access to the \fBsmbd\fR server\&. If this parameter is supplied, the hostIP parameter must also be supplied\&. + + .TP -\fBhostIP\fR -This is the IP address of the host specified -in the previous parameter. This address must be supplied -if the hostname parameter is supplied. +hostIP +This is the IP address of the host specified in the previous parameter\&. This address must be supplied if the hostname parameter is supplied\&. + + .SH "FILES" + .TP -\fB\fIsmb.conf\fB\fR -This is usually the name of the configuration -file used by \fBsmbd\fR. +\fBsmb.conf\fR(5) +This is usually the name of the configuration file used by \fBsmbd\fR(8)\&. + + .SH "DIAGNOSTICS" + .PP -The program will issue a message saying whether the -configuration file loaded OK or not. This message may be preceded by -errors and warnings if the file did not load. If the file was -loaded OK, the program then dumps all known service details -to stdout. +The program will issue a message saying whether the configuration file loaded OK or not\&. This message may be preceded by errors and warnings if the file did not load\&. If the file was loaded OK, the program then dumps all known service details to stdout\&. + .SH "VERSION" + .PP -This man page is correct for version 3.0 of -the Samba suite. +This man page is correct for version 3\&.0 of the Samba suite\&. + .SH "SEE ALSO" + .PP -\fIsmb.conf(5)\fR -\fBsmbd(8)\fR +\fBsmb.conf\fR(5), \fBsmbd\fR(8) + .SH "AUTHOR" + .PP -The original Samba software and related utilities -were created by Andrew Tridgell. Samba is now developed -by the Samba Team as an Open Source project similar -to the way the Linux kernel is developed. +The original Samba software and related utilities were created by Andrew Tridgell\&. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\&. + .PP -The original Samba man pages were written by Karl Auer. -The man page sources were converted to YODL format (another -excellent piece of Open Source software, available at -ftp://ftp.icce.rug.nl/pub/unix/ ) and updated for the Samba 2.0 -release by Jeremy Allison. The conversion to DocBook for -Samba 2.2 was done by Gerald Carter +The original Samba man pages were written by Karl Auer\&. The man page sources were converted to YODL format (another excellent piece of Open Source software, available at ftp://ftp\&.icce\&.rug\&.nl/pub/unix/) and updated for the Samba 2\&.0 release by Jeremy Allison\&. The conversion to DocBook for Samba 2\&.2 was done by Gerald Carter\&. The conversion to DocBook XML 4\&.2 for Samba 3\&.0 was done by Alexander Bokovoy\&. + diff --git a/docs/manpages/testprns.1 b/docs/manpages/testprns.1 index f70b383f9d..9f98ea1d59 100644 --- a/docs/manpages/testprns.1 +++ b/docs/manpages/testprns.1 @@ -1,91 +1,96 @@ -.\" This manpage has been automatically generated by docbook2man -.\" from a DocBook document. This tool can be found at: -.\" -.\" Please send any bug reports, improvements, comments, patches, -.\" etc. to Steve Cheng . -.TH "TESTPRNS" "1" "04 March 2003" "" "" +.\"Generated by db2man.xsl. Don't modify this, modify the source. +.de Sh \" Subsection +.br +.if t .Sp +.ne 5 +.PP +\fB\\$1\fR +.PP +.. +.de Sp \" Vertical space (when we can't use .PP) +.if t .sp .5v +.if n .sp +.. +.de Ip \" List item +.br +.ie \\n(.$>=3 .ne \\$3 +.el .ne 3 +.IP "\\$1" \\$2 +.. +.TH "TESTPRNS" 1 "" "" "" .SH NAME testprns \- check printer name for validity with smbd -.SH SYNOPSIS +.SH "SYNOPSIS" -\fBtestprns\fR \fBprintername\fR [ \fBprintcapname\fR ] +.nf +\fBtestprns\fR {printername} [printcapname] +.fi .SH "DESCRIPTION" + .PP -This tool is part of the Samba suite. +This tool is part of the \fBSamba\fR(7) suite\&. + .PP -\fBtestprns\fR is a very simple test program -to determine whether a given printer name is valid for use in -a service to be provided by \fB smbd(8)\fR +\fBtestprns\fR is a very simple test program to determine whether a given printer name is valid for use in a service to be provided by \fBsmbd\fR(8)\&. + .PP -"Valid" in this context means "can be found in the -printcap specified". This program is very stupid - so stupid in -fact that it would be wisest to always specify the printcap file -to use. +"Valid" in this context means "can be found in the printcap specified"\&. This program is very stupid - so stupid in fact that it would be wisest to always specify the printcap file to use\&. + .SH "OPTIONS" + .TP -\fBprintername\fR -The printer name to validate. - -Printer names are taken from the first field in each -record in the printcap file, single printer names and sets -of aliases separated by vertical bars ("|") are recognized. -Note that no validation or checking of the printcap syntax is -done beyond that required to extract the printer name. It may -be that the print spooling system is more forgiving or less -forgiving than \fBtestprns\fR. However, if -\fBtestprns\fR finds the printer then -\fBsmbd\fR should do so as well. +printername +The printer name to validate\&. + + +Printer names are taken from the first field in each record in the printcap file, single printer names and sets of aliases separated by vertical bars ("|") are recognized\&. Note that no validation or checking of the printcap syntax is done beyond that required to extract the printer name\&. It may be that the print spooling system is more forgiving or less forgiving than \fBtestprns\fR\&. However, if \fBtestprns\fR finds the printer then \fBsmbd\fR(8) should do so as well\&. + + .TP -\fBprintcapname\fR -This is the name of the printcap file within -which to search for the given printer name. +printcapname +This is the name of the printcap file within which to search for the given printer name\&. + + +If no printcap name is specified \fBtestprns \fR will attempt to scan the printcap file name specified at compile time\&. + -If no printcap name is specified \fBtestprns -\fR will attempt to scan the printcap file name -specified at compile time. .SH "FILES" + .TP -\fB\fI/etc/printcap\fB\fR -This is usually the default printcap -file to scan. See \fIprintcap (5)\fR. +\fI/etc/printcap\fR +This is usually the default printcap file to scan\&. See \fIprintcap (5)\fR\&. + + .SH "DIAGNOSTICS" + .PP -If a printer is found to be valid, the message -"Printer name is valid" will be -displayed. +If a printer is found to be valid, the message "Printer name is valid" will be displayed\&. + .PP -If a printer is found to be invalid, the message -"Printer name is not valid" will be -displayed. +If a printer is found to be invalid, the message "Printer name is not valid" will be displayed\&. + .PP -All messages that would normally be logged during -operation of the Samba daemons are logged by this program to the -file \fItest.log\fR in the current directory. The -program runs at debuglevel 3, so quite extensive logging -information is written. The log should be checked carefully -for errors and warnings. +All messages that would normally be logged during operation of the Samba daemons are logged by this program to the file \fItest\&.log\fR in the current directory\&. The program runs at debuglevel 3, so quite extensive logging information is written\&. The log should be checked carefully for errors and warnings\&. + .PP -Other messages are self-explanatory. +Other messages are self-explanatory\&. + .SH "VERSION" + .PP -This man page is correct for version 2.2 of -the Samba suite. +This man page is correct for version 3\&.0 of the Samba suite\&. + .SH "SEE ALSO" + .PP -\fIprintcap(5)\fR, -\fBsmbd(8)\fR -\fBsmbclient(1)\fR +\fIprintcap(5)\fR,\fBsmbd\fR(8), \fBsmbclient\fR(1) + .SH "AUTHOR" + .PP -The original Samba software and related utilities -were created by Andrew Tridgell. Samba is now developed -by the Samba Team as an Open Source project similar -to the way the Linux kernel is developed. +The original Samba software and related utilities were created by Andrew Tridgell\&. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\&. + .PP -The original Samba man pages were written by Karl Auer. -The man page sources were converted to YODL format (another -excellent piece of Open Source software, available at -ftp://ftp.icce.rug.nl/pub/unix/ ) and updated for the Samba 2.0 -release by Jeremy Allison. The conversion to DocBook for -Samba 2.2 was done by Gerald Carter +The original Samba man pages were written by Karl Auer\&. The man page sources were converted to YODL format (another excellent piece of Open Source software, available at ftp://ftp\&.icce\&.rug\&.nl/pub/unix/) and updated for the Samba 2\&.0 release by Jeremy Allison\&. The conversion to DocBook for Samba 2\&.2 was done by Gerald Carter\&. The conversion to DocBook XML 4\&.2 for Samba 3\&.0 was done by Alexander Bokovoy\&. + diff --git a/docs/manpages/vfstest.1 b/docs/manpages/vfstest.1 index 9877e2e461..a6d01fba57 100644 --- a/docs/manpages/vfstest.1 +++ b/docs/manpages/vfstest.1 @@ -1,195 +1,271 @@ -.\" This manpage has been automatically generated by docbook2man -.\" from a DocBook document. This tool can be found at: -.\" -.\" Please send any bug reports, improvements, comments, patches, -.\" etc. to Steve Cheng . -.TH "VFSTEST" "1" "04 March 2003" "" "" +.\"Generated by db2man.xsl. Don't modify this, modify the source. +.de Sh \" Subsection +.br +.if t .Sp +.ne 5 +.PP +\fB\\$1\fR +.PP +.. +.de Sp \" Vertical space (when we can't use .PP) +.if t .sp .5v +.if n .sp +.. +.de Ip \" List item +.br +.ie \\n(.$>=3 .ne \\$3 +.el .ne 3 +.IP "\\$1" \\$2 +.. +.TH "VFSTEST" 1 "" "" "" .SH NAME vfstest \- tool for testing samba VFS modules -.SH SYNOPSIS +.SH "SYNOPSIS" -\fBvfstest\fR [ \fB-d debuglevel\fR ] [ \fB-c command\fR ] [ \fB-l logfile\fR ] [ \fB-h\fR ] +.nf +\fBvfstest\fR [-d debuglevel] [-c command] [-l logfile] [-h] +.fi .SH "DESCRIPTION" + .PP -This tool is part of the Samba suite. +This tool is part of the \fBSamba\fR(7) suite\&. + .PP -\fBvfstest\fR is a small command line -utility that has the ability to test dso samba VFS modules. It gives the -user the ability to call the various VFS functions manually and -supports cascaded VFS modules. +\fBvfstest\fR is a small command line utility that has the ability to test dso samba VFS modules\&. It gives the user the ability to call the various VFS functions manually and supports cascaded VFS modules\&. + .SH "OPTIONS" + +.TP +-c|--command=command +Execute the specified (colon-separated) commands\&. See below for the commands that are available\&. + + +.TP +-h|--help +Print a summary of command line options\&. + + .TP -\fB-c|--command=command\fR -Execute the specified (colon-separated) commands. -See below for the commands that are available. -.TP -\fB-d|--debug=debuglevel\fR -\fIdebuglevel\fR is an integer -from 0 to 10. The default value if this parameter is -not specified is zero. - -The higher this value, the more detail will be -logged to the log files about the activities of the -server. At level 0, only critical errors and serious -warnings will be logged. Level 1 is a reasonable level for -day to day running - it generates a small amount of -information about operations carried out. - -Levels above 1 will generate considerable -amounts of log data, and should only be used when -investigating a problem. Levels above 3 are designed for -use only by developers and generate HUGE amounts of log -data, most of which is extremely cryptic. - -Note that specifying this parameter here will -override the log -level file. -.TP -\fB-h|--help\fR -Print a summary of command line options. -.TP -\fB-l|--logfile=logbasename\fR -File name for log/debug files. The extension -\&'.client' will be appended. The log file is never removed -by the client. +-l|--logfile=logbasename +File name for log/debug files\&. The extension \fB'\&.client'\fR will be appended\&. The log file is never removed by the client\&. + + +.TP +-V +Prints the version number for \fBsmbd\fR\&. + + +.TP +-s +The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fI smb\&.conf(5)\fR for more information\&. The default configuration file name is determined at compile time\&. + + +.TP +-d|--debug=debuglevel +\fIdebuglevel\fR is an integer from 0 to 10\&. The default value if this parameter is not specified is zero\&. + + +The higher this value, the more detail will be logged to the log files about the activities of the server\&. At level 0, only critical errors and serious warnings will be logged\&. Level 1 is a reasonable level for day to day running - it generates a small amount of information about operations carried out\&. + + +Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\&. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\&. + + +Note that specifying this parameter here will override the log level parameter in the \fIsmb\&.conf(5)\fR file\&. + + +.TP +-l|--logfile=logbasename +File name for log/debug files\&. The extension \fB"\&.client"\fR will be appended\&. The log file is never removed by the client\&. + + .SH "COMMANDS" + .PP \fBVFS COMMANDS\fR -.TP 0.2i + +.TP 3 \(bu -\fBload \fR - Load specified VFS module -.TP 0.2i +\fBload \fR - Load specified VFS module + +.TP \(bu \fBpopulate \fR - Populate a data buffer with the specified data -.TP 0.2i + +.TP \(bu \fBshowdata [ ]\fR - Show data currently in data buffer -.TP 0.2i + +.TP \(bu \fBconnect\fR - VFS connect() -.TP 0.2i + +.TP \(bu \fBdisconnect\fR - VFS disconnect() -.TP 0.2i + +.TP \(bu \fBdisk_free\fR - VFS disk_free() -.TP 0.2i + +.TP \(bu \fBopendir\fR - VFS opendir() -.TP 0.2i + +.TP \(bu \fBreaddir\fR - VFS readdir() -.TP 0.2i + +.TP \(bu \fBmkdir\fR - VFS mkdir() -.TP 0.2i + +.TP \(bu \fBrmdir\fR - VFS rmdir() -.TP 0.2i + +.TP \(bu \fBclosedir\fR - VFS closedir() -.TP 0.2i + +.TP \(bu \fBopen\fR - VFS open() -.TP 0.2i + +.TP \(bu \fBclose\fR - VFS close() -.TP 0.2i + +.TP \(bu \fBread\fR - VFS read() -.TP 0.2i + +.TP \(bu \fBwrite\fR - VFS write() -.TP 0.2i + +.TP \(bu \fBlseek\fR - VFS lseek() -.TP 0.2i + +.TP \(bu \fBrename\fR - VFS rename() -.TP 0.2i + +.TP \(bu \fBfsync\fR - VFS fsync() -.TP 0.2i + +.TP \(bu \fBstat\fR - VFS stat() -.TP 0.2i + +.TP \(bu \fBfstat\fR - VFS fstat() -.TP 0.2i + +.TP \(bu \fBlstat\fR - VFS lstat() -.TP 0.2i + +.TP \(bu \fBunlink\fR - VFS unlink() -.TP 0.2i + +.TP \(bu \fBchmod\fR - VFS chmod() -.TP 0.2i + +.TP \(bu \fBfchmod\fR - VFS fchmod() -.TP 0.2i + +.TP \(bu \fBchown\fR - VFS chown() -.TP 0.2i + +.TP \(bu \fBfchown\fR - VFS fchown() -.TP 0.2i + +.TP \(bu \fBchdir\fR - VFS chdir() -.TP 0.2i + +.TP \(bu \fBgetwd\fR - VFS getwd() -.TP 0.2i + +.TP \(bu \fButime\fR - VFS utime() -.TP 0.2i + +.TP \(bu \fBftruncate\fR - VFS ftruncate() -.TP 0.2i + +.TP \(bu \fBlock\fR - VFS lock() -.TP 0.2i + +.TP \(bu \fBsymlink\fR - VFS symlink() -.TP 0.2i + +.TP \(bu \fBreadlink\fR - VFS readlink() -.TP 0.2i + +.TP \(bu \fBlink\fR - VFS link() -.TP 0.2i + +.TP \(bu \fBmknod\fR - VFS mknod() -.TP 0.2i + +.TP \(bu \fBrealpath\fR - VFS realpath() + +.LP + .PP \fBGENERAL COMMANDS\fR -.TP 0.2i + +.TP 3 \(bu \fBconf \fR - Load a different configuration file -.TP 0.2i + +.TP \(bu \fBhelp []\fR - Get list of commands or info about specified command -.TP 0.2i + +.TP \(bu \fBdebuglevel \fR - Set debug level -.TP 0.2i + +.TP \(bu \fBfreemem\fR - Free memory currently in use -.TP 0.2i + +.TP \(bu \fBexit\fR - Exit vfstest + +.LP + .SH "VERSION" + .PP -This man page is correct for version 3.0 of the Samba -suite. +This man page is correct for version 3\&.0 of the Samba suite\&. + .SH "AUTHOR" + .PP -The original Samba software and related utilities -were created by Andrew Tridgell. Samba is now developed -by the Samba Team as an Open Source project similar -to the way the Linux kernel is developed. +The original Samba software and related utilities were created by Andrew Tridgell\&. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\&. + .PP -The vfstest man page was written by Jelmer Vernooij. +The vfstest man page was written by Jelmer Vernooij\&. + diff --git a/docs/manpages/wbinfo.1 b/docs/manpages/wbinfo.1 index 3cc35e494d..0481489078 100644 --- a/docs/manpages/wbinfo.1 +++ b/docs/manpages/wbinfo.1 @@ -1,139 +1,169 @@ -.\" This manpage has been automatically generated by docbook2man -.\" from a DocBook document. This tool can be found at: -.\" -.\" Please send any bug reports, improvements, comments, patches, -.\" etc. to Steve Cheng . -.TH "WBINFO" "1" "04 March 2003" "" "" +.\"Generated by db2man.xsl. Don't modify this, modify the source. +.de Sh \" Subsection +.br +.if t .Sp +.ne 5 +.PP +\fB\\$1\fR +.PP +.. +.de Sp \" Vertical space (when we can't use .PP) +.if t .sp .5v +.if n .sp +.. +.de Ip \" List item +.br +.ie \\n(.$>=3 .ne \\$3 +.el .ne 3 +.IP "\\$1" \\$2 +.. +.TH "WBINFO" 1 "" "" "" .SH NAME wbinfo \- Query information from winbind daemon -.SH SYNOPSIS +.SH "SYNOPSIS" -\fBwbinfo\fR [ \fB-u\fR ] [ \fB-g\fR ] [ \fB-i ip\fR ] [ \fB-N netbios-name\fR ] [ \fB-n name\fR ] [ \fB-s sid\fR ] [ \fB-U uid\fR ] [ \fB-G gid\fR ] [ \fB-S sid\fR ] [ \fB-Y sid\fR ] [ \fB-t\fR ] [ \fB-m\fR ] [ \fB-r user\fR ] [ \fB-a user%password\fR ] [ \fB-A user%password\fR ] [ \fB-p\fR ] +.nf +\fBwbinfo\fR [-u] [-g] [-N netbios-name] [-I ip] [-n name] [-s sid] [-U uid] [-G gid] + [-S sid] [-Y sid] [-t] [-m] [--sequence] [-r user] [-a user%password] + [-A user%password] [--get-auth-user] [-p] +.fi .SH "DESCRIPTION" + .PP -This tool is part of the Samba suite. +This tool is part of the \fBSamba\fR(7) suite\&. + .PP -The \fBwbinfo\fR program queries and returns information -created and used by the \fB winbindd(8)\fR daemon. +The \fBwbinfo\fR program queries and returns information created and used by the \fBwinbindd\fR(8) daemon\&. + .PP -The \fBwinbindd(8)\fR daemon must be configured -and running for the \fBwbinfo\fR program to be able -to return information. +The \fBwinbindd\fR(8) daemon must be configured and running for the \fBwbinfo\fR program to be able to return information\&. + .SH "OPTIONS" + +.TP +-u +This option will list all users available in the Windows NT domain for which the \fBwinbindd\fR(8) daemon is operating in\&. Users in all trusted domains will also be listed\&. Note that this operation does not assign user ids to any users that have not already been seen by \fBwinbindd\fR(8) \&. + + +.TP +-g +This option will list all groups available in the Windows NT domain for which the \fBSamba\fR(7) daemon is operating in\&. Groups in all trusted domains will also be listed\&. Note that this operation does not assign group ids to any groups that have not already been seen by \fBwinbindd\fR(8)\&. + + +.TP +-N name +The \fI-N\fR option queries \fBwinbindd\fR(8) to query the WINS server for the IP address associated with the NetBIOS name specified by the \fIname\fR parameter\&. + + +.TP +-I ip +The \fI-I\fR option queries \fBwinbindd\fR(8) to send a node status request to get the NetBIOS name associated with the IP address specified by the \fIip\fR parameter\&. + + .TP -\fB-u\fR -This option will list all users available -in the Windows NT domain for which the \fBwinbindd(8) -\fR daemon is operating in. Users in all trusted domains -will also be listed. Note that this operation does not assign -user ids to any users that have not already been seen by -\fBwinbindd(8)\fR. -.TP -\fB-g\fR -This option will list all groups available -in the Windows NT domain for which the \fBwinbindd(8) -\fR daemon is operating in. Groups in all trusted domains -will also be listed. Note that this operation does not assign -group ids to any groups that have not already been seen by -\fBwinbindd(8)\fR. -.TP -\fB-N name\fR -The \fI-N\fR option -queries \fBwinbindd(8)\fR to query the WINS -server for the IP address associated with the NetBIOS name -specified by the \fIname\fR parameter. -.TP -\fB-I ip\fR -The \fI-I\fR option -queries \fBwinbindd(8)\fR to send a node status -request to get the NetBIOS name associated with the IP address -specified by the \fIip\fR parameter. -.TP -\fB-n name\fR -The \fI-n\fR option -queries \fBwinbindd(8)\fR for the SID -associated with the name specified. Domain names can be specified -before the user name by using the winbind separator character. -For example CWDOM1/Administrator refers to the Administrator -user in the domain CWDOM1. If no domain is specified then the -domain used is the one specified in the \fIsmb.conf\fR -\fIworkgroup\fR parameter. -.TP -\fB-s sid\fR -Use \fI-s\fR to resolve -a SID to a name. This is the inverse of the \fI-n -\fR option above. SIDs must be specified as ASCII strings -in the traditional Microsoft format. For example, -S-1-5-21-1455342024-3071081365-2475485837-500. -.TP -\fB-U uid\fR -Try to convert a UNIX user id to a Windows NT -SID. If the uid specified does not refer to one within -the winbind uid range then the operation will fail. -.TP -\fB-G gid\fR -Try to convert a UNIX group id to a Windows -NT SID. If the gid specified does not refer to one within -the winbind gid range then the operation will fail. -.TP -\fB-S sid\fR -Convert a SID to a UNIX user id. If the SID -does not correspond to a UNIX user mapped by \fB winbindd(8)\fR then the operation will fail. -.TP -\fB-Y sid\fR -Convert a SID to a UNIX group id. If the SID -does not correspond to a UNIX group mapped by \fB winbindd(8)\fR then the operation will fail. -.TP -\fB-t\fR -Verify that the workstation trust account -created when the Samba server is added to the Windows NT -domain is working. -.TP -\fB-m\fR -Produce a list of domains trusted by the -Windows NT server \fBwinbindd(8)\fR contacts -when resolving names. This list does not include the Windows -NT domain the server is a Primary Domain Controller for. -.TP -\fB-r username\fR -Try to obtain the list of UNIX group ids -to which the user belongs. This only works for users -defined on a Domain Controller. -.TP -\fB-a username%password\fR -Attempt to authenticate a user via winbindd. -This checks both authenticaion methods and reports its results. -.TP -\fB-A username%password\fR -Store username and password used by winbindd -during session setup to a domain controller. This enables -winbindd to operate in a Windows 2000 domain with Restrict -Anonymous turned on (a.k.a. Permissions compatiable with -Windows 2000 servers only). +-n name +The \fI-n\fR option queries \fBwinbindd\fR(8) for the SID associated with the name specified\&. Domain names can be specified before the user name by using the winbind separator character\&. For example CWDOM1/Administrator refers to the Administrator user in the domain CWDOM1\&. If no domain is specified then the domain used is the one specified in the \fBsmb.conf\fR(5) \fIworkgroup \fR parameter\&. + + +.TP +-s sid +Use \fI-s\fR to resolve a SID to a name\&. This is the inverse of the \fI-n \fR option above\&. SIDs must be specified as ASCII strings in the traditional Microsoft format\&. For example, S-1-5-21-1455342024-3071081365-2475485837-500\&. + + +.TP +-U uid +Try to convert a UNIX user id to a Windows NT SID\&. If the uid specified does not refer to one within the winbind uid range then the operation will fail\&. + + +.TP +-G gid +Try to convert a UNIX group id to a Windows NT SID\&. If the gid specified does not refer to one within the winbind gid range then the operation will fail\&. + + +.TP +-S sid +Convert a SID to a UNIX user id\&. If the SID does not correspond to a UNIX user mapped by \fBwinbindd\fR(8) then the operation will fail\&. + + +.TP +-Y sid +Convert a SID to a UNIX group id\&. If the SID does not correspond to a UNIX group mapped by \fBwinbindd\fR(8) then the operation will fail\&. + + +.TP +-t +Verify that the workstation trust account created when the Samba server is added to the Windows NT domain is working\&. + + +.TP +-m +Produce a list of domains trusted by the Windows NT server \fBwinbindd\fR(8) contacts when resolving names\&. This list does not include the Windows NT domain the server is a Primary Domain Controller for\&. + + +.TP +--sequence +Show sequence numbers of all known domains + + +.TP +-r username +Try to obtain the list of UNIX group ids to which the user belongs\&. This only works for users defined on a Domain Controller\&. + + +.TP +-a username%password +Attempt to authenticate a user via winbindd\&. This checks both authenticaion methods and reports its results\&. + + +.TP +-A username%password +Store username and password used by winbindd during session setup to a domain controller\&. This enables winbindd to operate in a Windows 2000 domain with Restrict Anonymous turned on (a\&.k\&.a\&. Permissions compatiable with Windows 2000 servers only)\&. + + +.TP +--get-auth-user +Print username and password used by winbindd during session setup to a domain controller\&. Username and password can be set using '-A'\&. Only available for root\&. + + +.TP +-p +Check whether winbindd is still alive\&. Prints out either 'succeeded' or 'failed'\&. + + +.TP +-V +Prints the version number for \fBsmbd\fR\&. + + +.TP +-h|--help +Print a summary of command line options\&. + + .SH "EXIT STATUS" + .PP -The wbinfo program returns 0 if the operation -succeeded, or 1 if the operation failed. If the \fBwinbindd(8) -\fR daemon is not working \fBwbinfo\fR will always return -failure. +The wbinfo program returns 0 if the operation succeeded, or 1 if the operation failed\&. If the \fBwinbindd\fR(8) daemon is not working \fBwbinfo\fR will always return failure\&. + .SH "VERSION" + .PP -This man page is correct for version 3.0 of -the Samba suite. +This man page is correct for version 3\&.0 of the Samba suite\&. + .SH "SEE ALSO" + .PP -\fBwinbindd(8)\fR +\fBwinbindd\fR(8) .SH "AUTHOR" + .PP -The original Samba software and related utilities -were created by Andrew Tridgell. Samba is now developed -by the Samba Team as an Open Source project similar -to the way the Linux kernel is developed. +The original Samba software and related utilities were created by Andrew Tridgell\&. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\&. + .PP -\fBwbinfo\fR and \fBwinbindd\fR -were written by Tim Potter. +\fBwbinfo\fR and \fBwinbindd\fR were written by Tim Potter\&. + .PP -The conversion to DocBook for Samba 2.2 was done -by Gerald Carter +The conversion to DocBook for Samba 2\&.2 was done by Gerald Carter\&. The conversion to DocBook XML 4\&.2 for Samba 3\&.0 was done by Alexander Bokovoy\&. + diff --git a/docs/manpages/winbindd.8 b/docs/manpages/winbindd.8 index 696de8537b..31ed3ba332 100644 --- a/docs/manpages/winbindd.8 +++ b/docs/manpages/winbindd.8 @@ -1,242 +1,240 @@ -.\" This manpage has been automatically generated by docbook2man -.\" from a DocBook document. This tool can be found at: -.\" -.\" Please send any bug reports, improvements, comments, patches, -.\" etc. to Steve Cheng . -.TH "WINBINDD" "8" "04 March 2003" "" "" +.\"Generated by db2man.xsl. Don't modify this, modify the source. +.de Sh \" Subsection +.br +.if t .Sp +.ne 5 +.PP +\fB\\$1\fR +.PP +.. +.de Sp \" Vertical space (when we can't use .PP) +.if t .sp .5v +.if n .sp +.. +.de Ip \" List item +.br +.ie \\n(.$>=3 .ne \\$3 +.el .ne 3 +.IP "\\$1" \\$2 +.. +.TH "WINBINDD" 8 "" "" "" .SH NAME -winbindd \- Name Service Switch daemon for resolving names from NT servers -.SH SYNOPSIS +winbindd \- Name Service Switch daemon for resolving names from NT servers +.SH "SYNOPSIS" -\fBwinbindd\fR [ \fB-F\fR ] [ \fB-S\fR ] [ \fB-i\fR ] [ \fB-B\fR ] [ \fB-d \fR ] [ \fB-s \fR ] [ \fB-n\fR ] +.nf +\fBwinbindd\fR [-F] [-S] [-i] [-B] [-d ] [-s ] [-n] +.fi .SH "DESCRIPTION" + +.PP +This program is part of the \fBSamba\fR(7) suite\&. + +.PP +\fBwinbindd\fR is a daemon that provides a service for the Name Service Switch capability that is present in most modern C libraries\&. The Name Service Switch allows user and system information to be obtained from different databases services such as NIS or DNS\&. The exact behaviour can be configured throught the \fI/etc/nsswitch\&.conf\fR file\&. Users and groups are allocated as they are resolved to a range of user and group ids specified by the administrator of the Samba system\&. + +.PP +The service provided by \fBwinbindd\fR is called `winbind' and can be used to resolve user and group information from a Windows NT server\&. The service can also provide authentication services via an associated PAM module\&. + .PP -This program is part of the Samba suite. -.PP -\fBwinbindd\fR is a daemon that provides -a service for the Name Service Switch capability that is present -in most modern C libraries. The Name Service Switch allows user -and system information to be obtained from different databases -services such as NIS or DNS. The exact behaviour can be configured -throught the \fI/etc/nsswitch.conf\fR file. -Users and groups are allocated as they are resolved to a range -of user and group ids specified by the administrator of the -Samba system. -.PP -The service provided by \fBwinbindd\fR is called `winbind' and -can be used to resolve user and group information from a -Windows NT server. The service can also provide authentication -services via an associated PAM module. -.PP -The \fIpam_winbind\fR module in the 2.2.2 release only -supports the \fIauth\fR and \fIaccount\fR -module-types. The latter simply -performs a getpwnam() to verify that the system can obtain a uid for the -user. If the \fIlibnss_winbind\fR library has been correctly -installed, this should always succeed. -.PP -The following nsswitch databases are implemented by -the winbindd service: +The \fIpam_winbind\fR module in the 2\&.2\&.2 release only supports the \fIauth\fR and \fIaccount\fR module-types\&. The latter simply performs a getpwnam() to verify that the system can obtain a uid for the user\&. If the \fIlibnss_winbind\fR library has been correctly installed, this should always succeed\&. + +.PP +The following nsswitch databases are implemented by the winbindd service: + .TP -\fBhosts\fR -User information traditionally stored in -the \fIhosts(5)\fR file and used by -\fBgethostbyname(3)\fR functions. Names are -resolved through the WINS server or by broadcast. +hosts +User information traditionally stored in the \fIhosts(5)\fR file and used by \fBgethostbyname(3)\fR functions\&. Names are resolved through the WINS server or by broadcast\&. + + .TP -\fBpasswd\fR -User information traditionally stored in -the \fIpasswd(5)\fR file and used by -\fBgetpwent(3)\fR functions. +passwd +User information traditionally stored in the \fIpasswd(5)\fR file and used by \fBgetpwent(3)\fR functions\&. + + .TP -\fBgroup\fR -Group information traditionally stored in -the \fIgroup(5)\fR file and used by -\fBgetgrent(3)\fR functions. -.PP -For example, the following simple configuration in the -\fI/etc/nsswitch.conf\fR file can be used to initially -resolve user and group information from \fI/etc/passwd -\fR and \fI/etc/group\fR and then from the -Windows NT server. -.PP +group +Group information traditionally stored in the \fIgroup(5)\fR file and used by \fBgetgrent(3)\fR functions\&. + +.PP +For example, the following simple configuration in the\fI/etc/nsswitch\&.conf\fR file can be used to initially resolve user and group information from \fI/etc/passwd \fR and \fI/etc/group\fR and then from the Windows NT server\&. .nf + passwd: files winbind group: files winbind - .fi + + .PP -The following simple configuration in the -\fI/etc/nsswitch.conf\fR file can be used to initially -resolve hostnames from \fI/etc/hosts\fR and then from the -WINS server. +The following simple configuration in the\fI/etc/nsswitch\&.conf\fR file can be used to initially resolve hostnames from \fI/etc/hosts\fR and then from the WINS server\&. + .SH "OPTIONS" + .TP -\fB-F\fR -If specified, this parameter causes -the main \fBwinbindd\fR process to not daemonize, -i.e. double-fork and disassociate with the terminal. -Child processes are still created as normal to service -each connection request, but the main process does not -exit. This operation mode is suitable for running -\fBwinbindd\fR under process supervisors such -as \fBsupervise\fR and \fBsvscan\fR -from Daniel J. Bernstein's \fBdaemontools\fR -package, or the AIX process monitor. +-F +If specified, this parameter causes the main \fBwinbindd\fR process to not daemonize, i\&.e\&. double-fork and disassociate with the terminal\&. Child processes are still created as normal to service each connection request, but the main process does not exit\&. This operation mode is suitable for running \fBwinbindd\fR under process supervisors such as \fBsupervise\fR and \fBsvscan\fR from Daniel J\&. Bernstein's \fBdaemontools\fR package, or the AIX process monitor\&. + + .TP -\fB-S\fR -If specified, this parameter causes -\fBwinbindd\fR to log to standard output rather -than a file. +-S +If specified, this parameter causes \fBwinbindd\fR to log to standard output rather than a file\&. + + .TP -\fB-d debuglevel\fR -Sets the debuglevel to an integer between -0 and 100. 0 is for no debugging and 100 is for reams and -reams. To submit a bug report to the Samba Team, use debug -level 100 (see BUGS.txt). +-V +Prints the version number for \fBsmbd\fR\&. + + .TP -\fB-i\fR -Tells \fBwinbindd\fR to not -become a daemon and detach from the current terminal. This -option is used by developers when interactive debugging -of \fBwinbindd\fR is required. -\fBwinbindd\fR also logs to standard output, -as if the \fB-S\fR parameter had been given. +-s +The file specified contains the configuration details required by the server\&. The information in this file includes server-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fI smb\&.conf(5)\fR for more information\&. The default configuration file name is determined at compile time\&. + + .TP -\fB-n\fR -Disable caching. This means winbindd will -always have to wait for a response from the domain controller -before it can respond to a client and this thus makes things -slower. The results will however be more accurate, since -results from the cache might not be up-to-date. This -might also temporarily hang winbindd if the DC doesn't respond. +-d|--debug=debuglevel +\fIdebuglevel\fR is an integer from 0 to 10\&. The default value if this parameter is not specified is zero\&. + + +The higher this value, the more detail will be logged to the log files about the activities of the server\&. At level 0, only critical errors and serious warnings will be logged\&. Level 1 is a reasonable level for day to day running - it generates a small amount of information about operations carried out\&. + + +Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\&. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\&. + + +Note that specifying this parameter here will override the log level parameter in the \fIsmb\&.conf(5)\fR file\&. + + +.TP +-l|--logfile=logbasename +File name for log/debug files\&. The extension \fB"\&.client"\fR will be appended\&. The log file is never removed by the client\&. + + +.TP +-h|--help +Print a summary of command line options\&. + + .TP -\fB-B\fR -Dual daemon mode. This means winbindd will run -as 2 threads. The first will answer all requests from the cache, -thus making responses to clients faster. The other will -update the cache for the query that the first has just responded. -Advantage of this is that responses are accurate and fast. +-i +Tells \fBwinbindd\fR to not become a daemon and detach from the current terminal\&. This option is used by developers when interactive debugging of \fBwinbindd\fR is required\&. \fBwinbindd\fR also logs to standard output, as if the \fB-S\fR parameter had been given\&. + + .TP -\fB-s|--conf=smb.conf\fR -Specifies the location of the all-important -\fIsmb.conf\fR file. +-n +Disable caching\&. This means winbindd will always have to wait for a response from the domain controller before it can respond to a client and this thus makes things slower\&. The results will however be more accurate, since results from the cache might not be up-to-date\&. This might also temporarily hang winbindd if the DC doesn't respond\&. + + +.TP +-B +Dual daemon mode\&. This means winbindd will run as 2 threads\&. The first will answer all requests from the cache, thus making responses to clients faster\&. The other will update the cache for the query that the first has just responded\&. Advantage of this is that responses stay accurate and are faster\&. + + .SH "NAME AND ID RESOLUTION" + +.PP +Users and groups on a Windows NT server are assigned a relative id (rid) which is unique for the domain when the user or group is created\&. To convert the Windows NT user or group into a unix user or group, a mapping between rids and unix user and group ids is required\&. This is one of the jobs that \fB winbindd\fR performs\&. + +.PP +As winbindd users and groups are resolved from a server, user and group ids are allocated from a specified range\&. This is done on a first come, first served basis, although all existing users and groups will be mapped as soon as a client performs a user or group enumeration command\&. The allocated unix ids are stored in a database file under the Samba lock directory and will be remembered\&. + .PP -Users and groups on a Windows NT server are assigned -a relative id (rid) which is unique for the domain when the -user or group is created. To convert the Windows NT user or group -into a unix user or group, a mapping between rids and unix user -and group ids is required. This is one of the jobs that \fB winbindd\fR performs. -.PP -As winbindd users and groups are resolved from a server, user -and group ids are allocated from a specified range. This -is done on a first come, first served basis, although all existing -users and groups will be mapped as soon as a client performs a user -or group enumeration command. The allocated unix ids are stored -in a database file under the Samba lock directory and will be -remembered. -.PP -WARNING: The rid to unix id database is the only location -where the user and group mappings are stored by winbindd. If this -file is deleted or corrupted, there is no way for winbindd to -determine which user and group ids correspond to Windows NT user -and group rids. +WARNING: The rid to unix id database is the only location where the user and group mappings are stored by winbindd\&. If this file is deleted or corrupted, there is no way for winbindd to determine which user and group ids correspond to Windows NT user and group rids\&. + .SH "CONFIGURATION" + .PP -Configuration of the \fBwinbindd\fR daemon -is done through configuration parameters in the \fIsmb.conf(5) -\fR file. All parameters should be specified in the -[global] section of smb.conf. -.TP 0.2i +Configuration of the \fBwinbindd\fR daemon is done through configuration parameters in the \fBsmb.conf\fR(5) file\&. All parameters should be specified in the [global] section of smb\&.conf\&. + +.TP 3 \(bu \fIwinbind separator\fR -.TP 0.2i + +.TP \(bu \fIwinbind uid\fR -.TP 0.2i + +.TP \(bu \fIwinbind gid\fR -.TP 0.2i + +.TP \(bu \fIwinbind cache time\fR -.TP 0.2i + +.TP \(bu \fIwinbind enum users\fR -.TP 0.2i + +.TP \(bu \fIwinbind enum groups\fR -.TP 0.2i + +.TP \(bu \fItemplate homedir\fR -.TP 0.2i + +.TP \(bu \fItemplate shell\fR -.TP 0.2i + +.TP \(bu \fIwinbind use default domain\fR + +.LP + .SH "EXAMPLE SETUP" + .PP -To setup winbindd for user and group lookups plus -authentication from a domain controller use something like the -following setup. This was tested on a RedHat 6.2 Linux box. -.PP -In \fI/etc/nsswitch.conf\fR put the -following: -.PP +To setup winbindd for user and group lookups plus authentication from a domain controller use something like the following setup\&. This was tested on a RedHat 6\&.2 Linux box\&. +.PP +In \fI/etc/nsswitch\&.conf\fR put the following: .nf + passwd: files winbind group: files winbind - .fi -.PP -In \fI/etc/pam.d/*\fR replace the -\fIauth\fR lines with something like this: -.PP + +.PP +In \fI/etc/pam\&.d/*\fR replace the \fI auth\fR lines with something like this: .nf -auth required /lib/security/pam_securetty.so -auth required /lib/security/pam_nologin.so -auth sufficient /lib/security/pam_winbind.so -auth required /lib/security/pam_pwdb.so use_first_pass shadow nullok - + +auth required /lib/security/pam_securetty\&.so +auth required /lib/security/pam_nologin\&.so +auth sufficient /lib/security/pam_winbind\&.so +auth required /lib/security/pam_pwdb\&.so use_first_pass shadow nullok .fi + + .PP -Note in particular the use of the \fIsufficient\fR -keyword and the \fIuse_first_pass\fR keyword. -.PP -Now replace the account lines with this: -.PP -\fBaccount required /lib/security/pam_winbind.so -\fR +Note in particular the use of the \fIsufficient \fR keyword and the \fIuse_first_pass\fR keyword\&. + .PP -The next step is to join the domain. To do that use the -\fBsmbpasswd\fR program like this: +Now replace the account lines with this: + .PP -\fBsmbpasswd -j DOMAIN -r PDC -U -Administrator\fR +\fBaccount required /lib/security/pam_winbind.so \fR + .PP -The username after the \fI-U\fR can be any -Domain user that has administrator privileges on the machine. -Substitute your domain name for "DOMAIN" and the name of your PDC -for "PDC". +The next step is to join the domain\&. To do that use the\fBnet\fR program like this: + .PP -Next copy \fIlibnss_winbind.so\fR to -\fI/lib\fR and \fIpam_winbind.so\fR -to \fI/lib/security\fR. A symbolic link needs to be -made from \fI/lib/libnss_winbind.so\fR to -\fI/lib/libnss_winbind.so.2\fR. If you are using an -older version of glibc then the target of the link should be -\fI/lib/libnss_winbind.so.1\fR. +\fBnet join -S PDC -U Administrator\fR + .PP -Finally, setup a \fIsmb.conf\fR containing directives like the -following: +The username after the \fI-U\fR can be any Domain user that has administrator privileges on the machine\&. Substitute the name or IP of your PDC for "PDC"\&. + .PP +Next copy \fIlibnss_winbind\&.so\fR to\fI/lib\fR and \fIpam_winbind\&.so \fR to \fI/lib/security\fR\&. A symbolic link needs to be made from \fI/lib/libnss_winbind\&.so\fR to\fI/lib/libnss_winbind\&.so\&.2\fR\&. If you are using an older version of glibc then the target of the link should be\fI/lib/libnss_winbind\&.so\&.1\fR\&. +.PP +Finally, setup a \fBsmb.conf\fR(5) containing directives like the following: .nf + [global] winbind separator = + winbind cache time = 10 @@ -247,105 +245,97 @@ following: workgroup = DOMAIN security = domain password server = * - .fi + + .PP -Now start winbindd and you should find that your user and -group database is expanded to include your NT users and groups, -and that you can login to your unix box as a domain user, using -the DOMAIN+user syntax for the username. You may wish to use the -commands \fBgetent passwd\fR and \fBgetent group -\fR to confirm the correct operation of winbindd. +Now start winbindd and you should find that your user and group database is expanded to include your NT users and groups, and that you can login to your unix box as a domain user, using the DOMAIN+user syntax for the username\&. You may wish to use the commands \fBgetent passwd\fR and \fBgetent group \fR to confirm the correct operation of winbindd\&. + .SH "NOTES" + .PP -The following notes are useful when configuring and -running \fBwinbindd\fR: -.PP -\fBnmbd\fR must be running on the local machine -for \fBwinbindd\fR to work. \fBwinbindd\fR -queries the list of trusted domains for the Windows NT server -on startup and when a SIGHUP is received. Thus, for a running \fB winbindd\fR to become aware of new trust relationships between -servers, it must be sent a SIGHUP signal. +The following notes are useful when configuring and running \fBwinbindd\fR: + .PP -Client processes resolving names through the \fBwinbindd\fR -nsswitch module read an environment variable named \fB $WINBINDD_DOMAIN\fR. If this variable contains a comma separated -list of Windows NT domain names, then winbindd will only resolve users -and groups within those Windows NT domains. +\fBnmbd\fR(8) must be running on the local machine for \fBwinbindd\fR to work\&. \fBwinbindd\fR queries the list of trusted domains for the Windows NT server on startup and when a SIGHUP is received\&. Thus, for a running \fB winbindd\fR to become aware of new trust relationships between servers, it must be sent a SIGHUP signal\&. + .PP -PAM is really easy to misconfigure. Make sure you know what -you are doing when modifying PAM configuration files. It is possible -to set up PAM such that you can no longer log into your system. +PAM is really easy to misconfigure\&. Make sure you know what you are doing when modifying PAM configuration files\&. It is possible to set up PAM such that you can no longer log into your system\&. + .PP -If more than one UNIX machine is running \fBwinbindd\fR, -then in general the user and groups ids allocated by winbindd will not -be the same. The user and group ids will only be valid for the local -machine. +If more than one UNIX machine is running \fBwinbindd\fR, then in general the user and groups ids allocated by winbindd will not be the same\&. The user and group ids will only be valid for the local machine\&. + .PP -If the the Windows NT RID to UNIX user and group id mapping -file is damaged or destroyed then the mappings will be lost. +If the the Windows NT RID to UNIX user and group id mapping file is damaged or destroyed then the mappings will be lost\&. + .SH "SIGNALS" + .PP -The following signals can be used to manipulate the -\fBwinbindd\fR daemon. +The following signals can be used to manipulate the\fBwinbindd\fR daemon\&. + .TP -\fBSIGHUP\fR -Reload the \fIsmb.conf(5)\fR -file and apply any parameter changes to the running -version of winbindd. This signal also clears any cached -user and group information. The list of other domains trusted -by winbindd is also reloaded. +SIGHUP +Reload the \fBsmb.conf\fR(5) file and apply any parameter changes to the running version of winbindd\&. This signal also clears any cached user and group information\&. The list of other domains trusted by winbindd is also reloaded\&. + + .TP -\fBSIGUSR1\fR -The SIGUSR1 signal will cause \fB winbindd\fR to write status information to the winbind -log file including information about the number of user and -group ids allocated by \fBwinbindd\fR. +SIGUSR1 +The SIGUSR1 signal will cause \fB winbindd\fR to write status information to the winbind log file including information about the number of user and group ids allocated by \fBwinbindd\fR\&. + + +Log files are stored in the filename specified by the log file parameter\&. + -Log files are stored in the filename specified by the -log file parameter. .SH "FILES" + .TP -\fB\fI/etc/nsswitch.conf(5)\fB\fR -Name service switch configuration file. +\fI/etc/nsswitch\&.conf(5)\fR +Name service switch configuration file\&. + + .TP -\fB/tmp/.winbindd/pipe\fR -The UNIX pipe over which clients communicate with -the \fBwinbindd\fR program. For security reasons, the -winbind client will only attempt to connect to the winbindd daemon -if both the \fI/tmp/.winbindd\fR directory -and \fI/tmp/.winbindd/pipe\fR file are owned by -root. +/tmp/\&.winbindd/pipe +The UNIX pipe over which clients communicate with the \fBwinbindd\fR program\&. For security reasons, the winbind client will only attempt to connect to the winbindd daemon if both the \fI/tmp/\&.winbindd\fR directory and \fI/tmp/\&.winbindd/pipe\fR file are owned by root\&. + + .TP -\fB/lib/libnss_winbind.so.X\fR -Implementation of name service switch library. +$LOCKDIR/winbindd_privilaged/pipe +The UNIX pipe over which 'privilaged' clients communicate with the \fBwinbindd\fR program\&. For security reasons, access to some winbindd functions - like those needed by the \fBntlm_auth\fR utility - is restricted\&. By default, only users in the 'root' group will get this access, however the administrator may change the group permissions on $LOCKDIR/winbindd_privilaged to allow programs like 'squid' to use ntlm_auth\&. Note that the winbind client will only attempt to connect to the winbindd daemon if both the \fI$LOCKDIR/winbindd_privilaged\fR directory and \fI$LOCKDIR/winbindd_privilaged/pipe\fR file are owned by root\&. + + .TP -\fB$LOCKDIR/winbindd_idmap.tdb\fR -Storage for the Windows NT rid to UNIX user/group -id mapping. The lock directory is specified when Samba is initially -compiled using the \fI--with-lockdir\fR option. -This directory is by default \fI/usr/local/samba/var/locks -\fR. +/lib/libnss_winbind\&.so\&.X +Implementation of name service switch library\&. + + .TP -\fB$LOCKDIR/winbindd_cache.tdb\fR -Storage for cached user and group information. +$LOCKDIR/winbindd_idmap\&.tdb +Storage for the Windows NT rid to UNIX user/group id mapping\&. The lock directory is specified when Samba is initially compiled using the \fI--with-lockdir\fR option\&. This directory is by default \fI/usr/local/samba/var/locks \fR\&. + + +.TP +$LOCKDIR/winbindd_cache\&.tdb +Storage for cached user and group information\&. + + .SH "VERSION" + .PP -This man page is correct for version 3.0 of -the Samba suite. +This man page is correct for version 3\&.0 of the Samba suite\&. + .SH "SEE ALSO" + .PP -\fInsswitch.conf(5)\fR, -samba(7) -wbinfo(1) -smb.conf(5) +\fInsswitch\&.conf(5)\fR, \fBSamba\fR(7), \fBwbinfo\fR(8), \fBsmb.conf\fR(5) + .SH "AUTHOR" + .PP -The original Samba software and related utilities -were created by Andrew Tridgell. Samba is now developed -by the Samba Team as an Open Source project similar -to the way the Linux kernel is developed. +The original Samba software and related utilities were created by Andrew Tridgell\&. Samba is now developed by the Samba Team as an Open Source project similar to the way the Linux kernel is developed\&. + .PP -\fBwbinfo\fR and \fBwinbindd\fR -were written by Tim Potter. +\fBwbinfo\fR and \fBwinbindd\fR were written by Tim Potter\&. + .PP -The conversion to DocBook for Samba 2.2 was done -by Gerald Carter +The conversion to DocBook for Samba 2\&.2 was done by Gerald Carter\&. The conversion to DocBook XML 4\&.2 for Samba 3\&.0 was done by Alexander Bokovoy\&. + -- cgit