From 739bc21429fee6ceb7430eb6c5e63882f6d4f030 Mon Sep 17 00:00:00 2001 From: Volker Lendecke Date: Wed, 28 Aug 2002 04:19:15 +0000 Subject: Merge from 2_2. Volker --- docs/docbook/scripts/strip-links.pl | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) (limited to 'docs') diff --git a/docs/docbook/scripts/strip-links.pl b/docs/docbook/scripts/strip-links.pl index d89da23abe9..66bc101e086 100644 --- a/docs/docbook/scripts/strip-links.pl +++ b/docs/docbook/scripts/strip-links.pl @@ -1,13 +1,15 @@ #!/usr/bin/perl -## small script to stirp the tags from +## small script to strip the tags from ## manpages generated from docbook2man. we'll leave ## the and links for now while () { chomp ($_); - $_ =~ s/\s*\s*//g; + $_ =~ s/\s*\s+/ /g; + $_ =~ s/\s*\S//g; + $_ =~ s/\s*$//g; print "$_\n"; } -- cgit From e9cd8fb2e3104e1f9fd27277c90e1d09e55a0cf4 Mon Sep 17 00:00:00 2001 From: Volker Lendecke Date: Wed, 28 Aug 2002 08:13:29 +0000 Subject: There's no MACHINE.SID anymore... Volker --- docs/docbook/projdoc/Samba-BDC-HOWTO.sgml | 15 +++++++++++---- 1 file changed, 11 insertions(+), 4 deletions(-) (limited to 'docs') diff --git a/docs/docbook/projdoc/Samba-BDC-HOWTO.sgml b/docs/docbook/projdoc/Samba-BDC-HOWTO.sgml index 53a0959c39a..7653e3d1c03 100644 --- a/docs/docbook/projdoc/Samba-BDC-HOWTO.sgml +++ b/docs/docbook/projdoc/Samba-BDC-HOWTO.sgml @@ -157,10 +157,17 @@ Several things have to be done: -The file private/MACHINE.SID identifies the domain. When a samba -server is first started, it is created on the fly and must never be -changed again. This file has to be the same on the PDC and the BDC, -so the MACHINE.SID has to be copied from the PDC to the BDC. +The domain SID has to be the same on the PDC and the BDC. This used to +be stored in the file private/MACHINE.SID. This file is not created +anymore since Samba 2.2.5 or even earlier. Nowadays the domain SID is +stored in the file private/secrets.tdb. Simply copying the secrets.tdb +from the PDC to the BDC does not work, as the BDC would +generate a new SID for itself and override the domain SID with this +new BDC SID. + + +To retrieve the domain SID from the PDC or an existing BDC and store it in the +secrets.tdb, execute 'net rpc getsid' on the BDC. -- cgit From 076f34af8e5af7fb2d07b724522ef77f33559c82 Mon Sep 17 00:00:00 2001 From: Jelmer Vernooij Date: Wed, 28 Aug 2002 08:43:04 +0000 Subject: Adding new series of text-to-sgml converted files. Removed OS2-Client-HOWTO and put it into Other-Clients.sgml --- docs/docbook/Makefile.in | 11 +- docs/docbook/devdoc/NetBIOS.sgml | 154 ++++++++++++ docs/docbook/devdoc/dev-doc.sgml | 44 ++++ docs/docbook/manpages/smbtar.1.sgml | 2 +- docs/docbook/manpages/vfstest.1.sgml | 3 +- docs/docbook/projdoc/GROUP-MAPPING-HOWTO.sgml | 78 ++++++ docs/docbook/projdoc/OS2-Client-HOWTO.sgml | 142 ----------- docs/docbook/projdoc/Other-Clients.sgml | 332 ++++++++++++++++++++++++++ docs/docbook/projdoc/Portability.sgml | 148 ++++++++++++ docs/docbook/projdoc/samba-doc.sgml | 8 +- 10 files changed, 773 insertions(+), 149 deletions(-) create mode 100644 docs/docbook/devdoc/NetBIOS.sgml create mode 100644 docs/docbook/devdoc/dev-doc.sgml create mode 100644 docs/docbook/projdoc/GROUP-MAPPING-HOWTO.sgml delete mode 100644 docs/docbook/projdoc/OS2-Client-HOWTO.sgml create mode 100644 docs/docbook/projdoc/Other-Clients.sgml create mode 100644 docs/docbook/projdoc/Portability.sgml (limited to 'docs') diff --git a/docs/docbook/Makefile.in b/docs/docbook/Makefile.in index 612c4951354..f1fb97d1e2e 100644 --- a/docs/docbook/Makefile.in +++ b/docs/docbook/Makefile.in @@ -50,7 +50,8 @@ all: @echo "manpages - Build manpages" @echo "ps - Build PostScript version of HOWTO Collection" @echo "pdf - Build PDF version of HOWTO Collection" - @echo "html-single - Build single HTML version of HOWTO Collection" + @echo -n "html-single - Build single file HTML version of HOWTO Collection" + @echo "and developers guide" @echo "html - Build HTML version of HOWTO Collection and manpages" @echo "txt - Build plain text version of HOWTO Collection" @@ -58,8 +59,8 @@ manpages: $(MANPAGES) pdf: ../Samba-HOWTO-Collection.pdf ps: ../Samba-HOWTO-Collection.ps txt: ../Samba-HOWTO-Collection.txt -html: $(HTMLDIR)/samba-doc.html -html-single: ../Samba-HOWTO-Collection.html $(MANPAGES_HTML) +html: $(HTMLDIR)/samba-doc.html $(MANPAGES_HTML) +html-single: ../Samba-HOWTO-Collection.html ../Samba-Developers-Guide.html ../Samba-HOWTO-Collection.txt: $(SGMLDIR)/samba-doc.sgml $(DOCBOOK2TXT) -o .. $< @@ -76,6 +77,10 @@ html-single: ../Samba-HOWTO-Collection.html $(MANPAGES_HTML) $(DOCBOOK2HTML) -u -o .. $< mv ../samba-doc.html $@ +../Samba-Developers-Guide.html: devdoc/dev-doc.sgml + $(DOCBOOK2HTML) -u -o .. $< + mv ../dev-doc.html $@ + $(HTMLDIR)/samba-doc.html: $(SGMLDIR)/samba-doc.sgml $(DOCBOOK2HTML) -o $(HTMLDIR) $< diff --git a/docs/docbook/devdoc/NetBIOS.sgml b/docs/docbook/devdoc/NetBIOS.sgml new file mode 100644 index 00000000000..ec9d3af563a --- /dev/null +++ b/docs/docbook/devdoc/NetBIOS.sgml @@ -0,0 +1,154 @@ + + + + LukeLeighton + + 12 June 1997 + + +Definition of NetBIOS Protocol and Name Resolution Modes + + +NETBIOS + + +NetBIOS runs over the following tranports: TCP/IP; NetBEUI and IPX/SPX. +Samba only uses NetBIOS over TCP/IP. For details on the TCP/IP NetBIOS +Session Service NetBIOS Datagram Service, and NetBIOS Names, see +rfc1001.txt and rfc1002.txt. + + + +NetBEUI is a raw NetBIOS frame protocol implementation that allows NetBIOS +datagrams to be sent out over the 'wire' embedded within LLC frames. +NetBEUI is not required when using NetBIOS over TCP/IP protocols and it +is preferable NOT to install NetBEUI if it can be avoided. + + + +IPX/SPX is also not required when using NetBIOS over TCP/IP, and it is +preferable NOT to install the IPX/SPX transport unless you are using Novell +servers. At the very least, it is recommended that you do not install +'NetBIOS over IPX/SPX'. + + + +[When installing Windows 95, you will find that NetBEUI and IPX/SPX are +installed as the default protocols. This is because they are the simplest +to manage: no Windows 95 user-configuration is required]. + + + +NetBIOS applications (such as samba) offer their services (for example, +SMB file and print sharing) on a NetBIOS name. They must claim this name +on the network before doing so. The NetBIOS session service will then +accept connections on the application's behalf (on the NetBIOS name +claimed by the application). A NetBIOS session between the application +and the client can then commence. + + + +NetBIOS names consist of 15 characters plus a 'type' character. This is +similar, in concept, to an IP address and a TCP port number, respectively. +A NetBIOS-aware application on a host will offer different services under +different NetBIOS name types, just as a host will offer different TCP/IP +services on different port numbers. + + + +NetBIOS names must be claimed on a network, and must be defended. The use +of NetBIOS names is most suitable on a single subnet; a Local Area Network +or a Wide Area Network. + + + +NetBIOS names are either UNIQUE or GROUP. Only one application can claim a +UNIQUE NetBIOS name on a network. + + + +There are two kinds of NetBIOS Name resolution: Broadcast and Point-to-Point. + + + + + +BROADCAST NetBIOS + + +Clients can claim names, and therefore offer services on successfully claimed +names, on their broadcast-isolated subnet. One way to get NetBIOS services +(such as browsing: see ftp.microsoft.com/drg/developr/CIFS/browdiff.txt; and +SMB file/print sharing: see cifs4.txt) working on a LAN or WAN is to make +your routers forward all broadcast packets from TCP/IP ports 137, 138 and 139. + + + +This, however, is not recommended. If you have a large LAN or WAN, you will +find that some of your hosts spend 95 percent of their time dealing with +broadcast traffic. [If you have IPX/SPX on your LAN or WAN, you will find +that this is already happening: a packet analyzer will show, roughly +every twelve minutes, great swathes of broadcast traffic!]. + + + + + +NBNS NetBIOS + + +rfc1001.txt describes, amongst other things, the implementation and use +of, a 'NetBIOS Name Service'. NT/AS offers 'Windows Internet Name Service' +which is fully rfc1001/2 compliant, but has had to take specific action +with certain NetBIOS names in order to make it useful. (for example, it +deals with the registration of <1c> <1d> <1e> names all in different ways. +I recommend the reading of the Microsoft WINS Server Help files for full +details). + + + +The use of a WINS server cuts down on broadcast network traffic for +NetBIOS name resolution. It has the effect of pulling all the broadcast +isolated subnets together into a single NetBIOS scope, across your LAN +or WAN, while avoiding the use of TCP/IP broadcast packets. + + + +When you have a WINS server on your LAN, WINS clients will be able to +contact the WINS server to resolve NetBIOS names. Note that only those +WINS clients that have registered with the same WINS server will be +visible. The WINS server _can_ have static NetBIOS entries added to its +database (usually for security reasons you might want to consider putting +your domain controllers or other important servers as static entries, +but you should not rely on this as your sole means of security), but for +the most part, NetBIOS names are registered dynamically. + + + +This provides some confusion for lots of people, and is worth mentioning +here: a Browse Server is NOT a WINS Server, even if these services are +implemented in the same application. A Browse Server _needs_ a WINS server +because a Browse Server is a WINS client, which is _not_ the same thing]. + + + +Clients can claim names, and therefore offer services on successfully claimed +names, on their broadcast-isolated subnet. One way to get NetBIOS services +(such as browsing: see ftp.microsoft.com/drg/developr/CIFS/browdiff.txt; and +SMB file/print sharing: see cifs6.txt) working on a LAN or WAN is to make +your routers forward all broadcast packets from TCP/IP ports 137, 138 and 139. +You will find, however, if you do this on a large LAN or a WAN, that your +network is completely swamped by NetBIOS and browsing packets, which is why +WINS was developed to minimise the necessity of broadcast traffic. + + + +WINS Clients therefore claim names from the WINS server. If the WINS +server allows them to register a name, the client's NetBIOS session service +can then offer services on this name. Other WINS clients will then +contact the WINS server to resolve a NetBIOS name. + + + + + diff --git a/docs/docbook/devdoc/dev-doc.sgml b/docs/docbook/devdoc/dev-doc.sgml new file mode 100644 index 00000000000..f84c129f00f --- /dev/null +++ b/docs/docbook/devdoc/dev-doc.sgml @@ -0,0 +1,44 @@ + +]> + + + +SAMBA Deverlopers Guide + + + + SAMBA Team + +
samba@samba.org
+
+ + +Abstract + + +Last Update : Mon aug 26 12:41:19 CEST 2002 + + + +This book is a collection of documents that might be useful for +people developing samba or those interested in doing so. +than one person can maintain. The most recent version of this document +can be found at http://www.samba.org/ +on the "Documentation" page. Please send updates to jerry@samba.org. + + + +This documentation is distributed under the GNU General Public License (GPL) +version 2. A copy of the license is included with the Samba source +distribution. A copy can be found on-line at http://www.fsf.org/licenses/gpl.txt + + + + + +&NetBIOS; + +
diff --git a/docs/docbook/manpages/smbtar.1.sgml b/docs/docbook/manpages/smbtar.1.sgml index 4e2ee5fff0a..d1585d7ca39 100644 --- a/docs/docbook/manpages/smbtar.1.sgml +++ b/docs/docbook/manpages/smbtar.1.sgml @@ -190,7 +190,7 @@ VERSION - This man page is correct for version 2.2 of + This man page is correct for version 3.0 of the Samba suite. diff --git a/docs/docbook/manpages/vfstest.1.sgml b/docs/docbook/manpages/vfstest.1.sgml index fe1d7560d0a..11878c1c896 100644 --- a/docs/docbook/manpages/vfstest.1.sgml +++ b/docs/docbook/manpages/vfstest.1.sgml @@ -52,7 +52,8 @@ -d|--debug=debuglevel set the debuglevel. Debug level 0 is the lowest and 100 being the highest. This should be set to 100 if you are - planning on submitting a bug report to the Samba team (see BUGS.txt). + planning on submitting a bug report to the Samba team (see + BUGS.txt). diff --git a/docs/docbook/projdoc/GROUP-MAPPING-HOWTO.sgml b/docs/docbook/projdoc/GROUP-MAPPING-HOWTO.sgml new file mode 100644 index 00000000000..6d5a019fcbe --- /dev/null +++ b/docs/docbook/projdoc/GROUP-MAPPING-HOWTO.sgml @@ -0,0 +1,78 @@ + + + + Jean FranoisMicouleau + + + +Group mapping HOWTO + + +Starting with Samba 3.0 alpha 2, a new group mapping function is available. The +current method (likely to change) to manage the groups is a new command called +smbgroupedit. + + + +The first immediate reason to use the group mapping on a PDC, is that +the domain admin group of smb.conf is +now gone. This parameter was used to give the listed users local admin rights +on their workstations. It was some magic stuff that simply worked but didn't +scale very well for complex setups. + + + +Let me explain how it works on NT/W2K, to have this magic fade away. +When installing NT/W2K on a computer, the installer program creates some users +and groups. Notably the 'Administrators' group, and gives to that group some +privileges like the ability to change the date and time or to kill any process +(or close too) running on the local machine. The 'Administrator' user is a +member of the 'Administrators' group, and thus 'inherit' the 'Administrators' +group privileges. If a 'joe' user is created and become a member of the +'Administrator' group, 'joe' has exactly the same rights as 'Administrator'. + + + +When a NT/W2K machine is joined to a domain, during that phase, the "Domain +Administrators' group of the PDC is added to the 'Administrators' group of the +workstation. Every members of the 'Domain Administrators' group 'inherit' the +rights of the 'Administrators' group when logging on the workstation. + + + +You are now wondering how to make some of your samba PDC users members of the +'Domain Administrators' ? That's really easy. + + + +create a unix group (usually in /etc/group), let's call it domadm +add to this group the users that must be Administrators. For example if you want joe,john and mary, your entry in /etc/group will look like: + + +domadm:x:502:joe,john,mary + + + + +Map this domadm group to the domain admins group by running the command: + +smbgroupedit -c "Domain Admins" -u domadm + + + +You're set, joe, john and mary are domain administrators ! + + +Like the Domain Admins group, you can map any arbitrary Unix group to any NT +group. You can also make any Unix group a domain group. For example, on a domain +member machine (an NT/W2K or a samba server running winbind), you would like to +give access to a certain directory to some users who are member of a group on +your samba PDC. Flag that group as a domain group by running: + + +smbgroupedit -a unixgroup -td + +You can list the various groups in the mapping database like this +smbgroupedit -v + + diff --git a/docs/docbook/projdoc/OS2-Client-HOWTO.sgml b/docs/docbook/projdoc/OS2-Client-HOWTO.sgml deleted file mode 100644 index ca7ad6a754e..00000000000 --- a/docs/docbook/projdoc/OS2-Client-HOWTO.sgml +++ /dev/null @@ -1,142 +0,0 @@ - - - - - - JimMcDonough - - IBM -
- jerry@samba.org -
-
-
- - - 5 Mar 2001 -
- -OS2 Client HOWTO - - - FAQs - - - How can I configure OS/2 Warp Connect or - OS/2 Warp 4 as a client for Samba? - - A more complete answer to this question can be - found on - http://carol.wins.uva.nl/~leeuw/samba/warp.html. - - Basically, you need three components: - - - The File and Print Client ('IBM Peer') - - TCP/IP ('Internet support') - - The "NetBIOS over TCP/IP" driver ('TCPBEUI') - - - - Installing the first two together with the base operating - system on a blank system is explained in the Warp manual. If Warp - has already been installed, but you now want to install the - networking support, use the "Selective Install for Networking" - object in the "System Setup" folder. - - Adding the "NetBIOS over TCP/IP" driver is not described - in the manual and just barely in the online documentation. Start - MPTS.EXE, click on OK, click on "Configure LAPS" and click - on "IBM OS/2 NETBIOS OVER TCP/IP" in 'Protocols'. This line - is then moved to 'Current Configuration'. Select that line, - click on "Change number" and increase it from 0 to 1. Save this - configuration. - - If the Samba server(s) is not on your local subnet, you - can optionally add IP names and addresses of these servers - to the "Names List", or specify a WINS server ('NetBIOS - Nameserver' in IBM and RFC terminology). For Warp Connect you - may need to download an update for 'IBM Peer' to bring it on - the same level as Warp 4. See the webpage mentioned above. - - - - How can I configure OS/2 Warp 3 (not Connect), - OS/2 1.2, 1.3 or 2.x for Samba? - - You can use the free Microsoft LAN Manager 2.2c Client - for OS/2 from - - ftp://ftp.microsoft.com/BusSys/Clients/LANMAN.OS2/. - See - http://carol.wins.uva.nl/~leeuw/lanman.html for - more information on how to install and use this client. In - a nutshell, edit the file \OS2VER in the root directory of - the OS/2 boot partition and add the lines: - - - 20=setup.exe - 20=netwksta.sys - 20=netvdd.sys - - - before you install the client. Also, don't use the - included NE2000 driver because it is buggy. Try the NE2000 - or NS2000 driver from - - ftp://ftp.cdrom.com/pub/os2/network/ndis/ instead. - - - - - Are there any other issues when OS/2 (any version) - is used as a client? - - When you do a NET VIEW or use the "File and Print - Client Resource Browser", no Samba servers show up. This can - be fixed by a patch from - http://carol.wins.uva.nl/~leeuw/samba/fix.html. - The patch will be included in a later version of Samba. It also - fixes a couple of other problems, such as preserving long - filenames when objects are dragged from the Workplace Shell - to the Samba server. - - - - How do I get printer driver download working - for OS/2 clients? - - First, create a share called [PRINTDRV] that is - world-readable. Copy your OS/2 driver files there. Note - that the .EA_ files must still be separate, so you will need - to use the original install files, and not copy an installed - driver from an OS/2 system. - - Install the NT driver first for that printer. Then, - add to your smb.conf a parameter, "os2 driver map = - filename". Then, in the file - specified by filename, map the - name of the NT driver name to the OS/2 driver name as - follows: - - <nt driver name> = <os2 driver - name>.<device name>, e.g.: - HP LaserJet 5L = LASERJET.HP LaserJet 5L - - You can have multiple drivers mapped in this file. - - If you only specify the OS/2 driver name, and not the - device name, the first attempt to download the driver will - actually download the files, but the OS/2 client will tell - you the driver is not available. On the second attempt, it - will work. This is fixed simply by adding the device name - to the mapping, after which it will work on the first attempt. - - - - -
- diff --git a/docs/docbook/projdoc/Other-Clients.sgml b/docs/docbook/projdoc/Other-Clients.sgml new file mode 100644 index 00000000000..f790024c3a8 --- /dev/null +++ b/docs/docbook/projdoc/Other-Clients.sgml @@ -0,0 +1,332 @@ + + + + JimMcDonough + + IBM + + JelmerVernooij + + Samba Team +
jelmer@samba.org
+
+
+ + 5 Mar 2001 +
+ +Samba and other CIFS clients + +This chapter contains client-specific information. + + +Macintosh clients? + + +Yes. Thursby now have a CIFS Client / Server called DAVE - see + + + +They test it against Windows 95, Windows NT and samba for +compatibility issues. At the time of writing, DAVE was at version +1.0.1. The 1.0.0 to 1.0.1 update is available as a free download from +the Thursby web site (the speed of finder copies has been greatly +enhanced, and there are bug-fixes included). + + + +Alternatives - There are two free implementations of AppleTalk for +several kinds of UNIX machnes, and several more commercial ones. +These products allow you to run file services and print services +natively to Macintosh users, with no additional support required on +the Macintosh. The two free omplementations are +Netatalk, and +CAP. +What Samba offers MS +Windows users, these packages offer to Macs. For more info on these +packages, Samba, and Linux (and other UNIX-based systems) see +http://www.eats.com/linux_mac_win.html + + + + + +OS2 Client + + + How can I configure OS/2 Warp Connect or + OS/2 Warp 4 as a client for Samba? + + A more complete answer to this question can be + found on + http://carol.wins.uva.nl/~leeuw/samba/warp.html. + + Basically, you need three components: + + + The File and Print Client ('IBM Peer') + + TCP/IP ('Internet support') + + The "NetBIOS over TCP/IP" driver ('TCPBEUI') + + + + Installing the first two together with the base operating + system on a blank system is explained in the Warp manual. If Warp + has already been installed, but you now want to install the + networking support, use the "Selective Install for Networking" + object in the "System Setup" folder. + + Adding the "NetBIOS over TCP/IP" driver is not described + in the manual and just barely in the online documentation. Start + MPTS.EXE, click on OK, click on "Configure LAPS" and click + on "IBM OS/2 NETBIOS OVER TCP/IP" in 'Protocols'. This line + is then moved to 'Current Configuration'. Select that line, + click on "Change number" and increase it from 0 to 1. Save this + configuration. + + If the Samba server(s) is not on your local subnet, you + can optionally add IP names and addresses of these servers + to the "Names List", or specify a WINS server ('NetBIOS + Nameserver' in IBM and RFC terminology). For Warp Connect you + may need to download an update for 'IBM Peer' to bring it on + the same level as Warp 4. See the webpage mentioned above. + + + + How can I configure OS/2 Warp 3 (not Connect), + OS/2 1.2, 1.3 or 2.x for Samba? + + You can use the free Microsoft LAN Manager 2.2c Client + for OS/2 from + + ftp://ftp.microsoft.com/BusSys/Clients/LANMAN.OS2/. + See + http://carol.wins.uva.nl/~leeuw/lanman.html for + more information on how to install and use this client. In + a nutshell, edit the file \OS2VER in the root directory of + the OS/2 boot partition and add the lines: + + + 20=setup.exe + 20=netwksta.sys + 20=netvdd.sys + + + before you install the client. Also, don't use the + included NE2000 driver because it is buggy. Try the NE2000 + or NS2000 driver from + + ftp://ftp.cdrom.com/pub/os2/network/ndis/ instead. + + + + + Are there any other issues when OS/2 (any version) + is used as a client? + + When you do a NET VIEW or use the "File and Print + Client Resource Browser", no Samba servers show up. This can + be fixed by a patch from + http://carol.wins.uva.nl/~leeuw/samba/fix.html. + The patch will be included in a later version of Samba. It also + fixes a couple of other problems, such as preserving long + filenames when objects are dragged from the Workplace Shell + to the Samba server. + + + + How do I get printer driver download working + for OS/2 clients? + + First, create a share called [PRINTDRV] that is + world-readable. Copy your OS/2 driver files there. Note + that the .EA_ files must still be separate, so you will need + to use the original install files, and not copy an installed + driver from an OS/2 system. + + Install the NT driver first for that printer. Then, + add to your smb.conf a parameter, os2 driver map = + filename". Then, in the file + specified by filename, map the + name of the NT driver name to the OS/2 driver name as + follows: + + nt driver name = os2 "driver + name"."device name", e.g.: + HP LaserJet 5L = LASERJET.HP LaserJet 5L + + You can have multiple drivers mapped in this file. + + If you only specify the OS/2 driver name, and not the + device name, the first attempt to download the driver will + actually download the files, but the OS/2 client will tell + you the driver is not available. On the second attempt, it + will work. This is fixed simply by adding the device name + to the mapping, after which it will work on the first attempt. + + + + + +Windows for Workgroups + + +Use latest TCP/IP stack from Microsoft + +Use the latest TCP/IP stack from microsoft if you use Windows +for workgroups. + +The early TCP/IP stacks had lots of bugs. + + +Microsoft has released an incremental upgrade to their TCP/IP 32-Bit +VxD drivers. The latest release can be found on their ftp site at +ftp.microsoft.com, located in /peropsys/windows/public/tcpip/wfwt32.exe. +There is an update.txt file there that describes the problems that were +fixed. New files include WINSOCK.DLL, TELNET.EXE, WSOCK.386, VNBT.386, +WSTCP.386, TRACERT.EXE, NETSTAT.EXE, and NBTSTAT.EXE. + + + + + +Delete .pwl files after password change + + +WfWg does a lousy job with passwords. I find that if I change my +password on either the unix box or the PC the safest thing to do is to +delete the .pwl files in the windows directory. The PC will complain about not finding the files, but will soon get over it, allowing you to enter the new password. + + + +If you don't do this you may find that WfWg remembers and uses the old +password, even if you told it a new one. + + + +Often WfWg will totally ignore a password you give it in a dialog box. + + + + + +Configure WfW password handling + + +There is a program call admincfg.exe +on the last disk (disk 8) of the WFW 3.11 disk set. To install it +type EXPAND A:\ADMINCFG.EX_ C:\WINDOWS\ADMINCFG.EXE Then add an icon +for it via the "Progam Manager" "New" Menu. This program allows you +to control how WFW handles passwords. ie disable Password Caching etc +for use with security = user + + + + + +Case handling of passwords + +Windows for Workgroups uppercases the password before sending it to the server. Unix passwords can be case-sensitive though. Check the smb.conf(5) information on password level to specify what characters samba should try to uppercase when checking. + + + + + + +Windows '95/'98 + + +When using Windows 95 OEM SR2 the following updates are recommended where Samba +is being used. Please NOTE that the above change will affect you once these +updates have been installed. + + + +There are more updates than the ones mentioned here. You are referred to the +Microsoft Web site for all currently available updates to your specific version +of Windows 95. + + + +Kernel Update: KRNLUPD.EXE +Ping Fix: PINGUPD.EXE +RPC Update: RPCRTUPD.EXE +TCP/IP Update: VIPUPD.EXE +Redirector Update: VRDRUPD.EXE + + + +Also, if using MS OutLook it is desirable to install the OLEUPD.EXE fix. This +fix may stop your machine from hanging for an extended period when exiting +OutLook and you may also notice a significant speedup when accessing network +neighborhood services. + + + + + +Windows 2000 Service Pack 2 + + +There are several annoyances with Windows 2000 SP2. One of which +only appears when using a Samba server to host user profiles +to Windows 2000 SP2 clients in a Windows domain. This assumes +that Samba is a member of the domain, but the problem will +likely occur if it is not. + + + +In order to server profiles successfully to Windows 2000 SP2 +clients (when not operating as a PDC), Samba must have +nt acl support = no +added to the file share which houses the roaming profiles. +If this is not done, then the Windows 2000 SP2 client will +complain about not being able to access the profile (Access +Denied) and create multiple copies of it on disk (DOMAIN.user.001, +DOMAIN.user.002, etc...). See the +smb.conf(5) man page +for more details on this option. Also note that the +nt acl support parameter was formally a global parameter in +releases prior to Samba 2.2.2. + + + +The following is a minimal profile share: + + + + [profile] + path = /export/profile + create mask = 0600 + directory mask = 0700 + nt acl support = no + read only = no + + + +The reason for this bug is that the Win2k SP2 client copies +the security descriptor for the profile which contains +the Samba server's SID, and not the domain SID. The client +compares the SID for SAMBA\user and realizes it is +different that the one assigned to DOMAIN\user. Hence the reason +for the "access denied" message. + + + +By disabling the nt acl support parameter, Samba will send +the Win2k client a response to the QuerySecurityDescriptor +trans2 call which causes the client to set a default ACL +for the profile. This default ACL includes + + +DOMAIN\user "Full Control" + +NOTE : This bug does not occur when using winbind to +create accounts on the Samba host for Domain users. + + + +
diff --git a/docs/docbook/projdoc/Portability.sgml b/docs/docbook/projdoc/Portability.sgml new file mode 100644 index 00000000000..f2fe66b9dd5 --- /dev/null +++ b/docs/docbook/projdoc/Portability.sgml @@ -0,0 +1,148 @@ + + + + JelmerVernooij + + + +Portability + +Samba works on a wide range of platforms but the interface all the +platforms provide is not always compatible. This chapter contains +platform-specific information about compiling and using samba. + + +HPUX + + +HP's implementation of supplementary groups is, er, non-standard (for +hysterical reasons). There are two group files, /etc/group and +/etc/logingroup; the system maps UIDs to numbers using the former, but +initgroups() reads the latter. Most system admins who know the ropes +symlink /etc/group to /etc/logingroup (hard link doesn't work for reasons +too stupid to go into here). initgroups() will complain if one of the +groups you're in in /etc/logingroup has what it considers to be an invalid +ID, which means outside the range [0..UID_MAX], where UID_MAX is (I think) +60000 currently on HP-UX. This precludes -2 and 65534, the usual 'nobody' +GIDs. + + + +If you encounter this problem, make sure that the programs that are failing +to initgroups() be run as users not in any groups with GIDs outside the +allowed range. + + +This is documented in the HP manual pages under setgroups(2) and passwd(4). + + + + + +SCO Unix + + +If you run an old version of SCO Unix then you may need to get important +TCP/IP patches for Samba to work correctly. Without the patch, you may +encounter corrupt data transfers using samba. + + + +The patch you need is UOD385 Connection Drivers SLS. It is available from +SCO (ftp.sco.com, directory SLS, files uod385a.Z and uod385a.ltr.Z). + + + + + +DNIX + + +DNIX has a problem with seteuid() and setegid(). These routines are +needed for Samba to work correctly, but they were left out of the DNIX +C library for some reason. + + + +For this reason Samba by default defines the macro NO_EID in the DNIX +section of includes.h. This works around the problem in a limited way, +but it is far from ideal, some things still won't work right. + + + +To fix the problem properly you need to assemble the following two +functions and then either add them to your C library or link them into +Samba. + + + +put this in the file setegid.s: + + + + .globl _setegid +_setegid: + moveq #47,d0 + movl #100,a0 + moveq #1,d1 + movl 4(sp),a1 + trap #9 + bccs 1$ + jmp cerror +1$: + clrl d0 + rts + + + +put this in the file seteuid.s: + + + + .globl _seteuid +_seteuid: + moveq #47,d0 + movl #100,a0 + moveq #0,d1 + movl 4(sp),a1 + trap #9 + bccs 1$ + jmp cerror +1$: + clrl d0 + rts + + + +after creating the above files you then assemble them using + + +as seteuid.s +as setegid.s + + +that should produce the files seteuid.o and +setegid.o + + + +then you need to add these to the LIBSM line in the DNIX section of +the Samba Makefile. Your LIBSM line will then look something like this: + + + +LIBSM = setegid.o seteuid.o -ln + + + +You should then remove the line: + + + +#define NO_EID + + +from the DNIX section of includes.h + + + diff --git a/docs/docbook/projdoc/samba-doc.sgml b/docs/docbook/projdoc/samba-doc.sgml index e407b622dea..a50389b7f01 100644 --- a/docs/docbook/projdoc/samba-doc.sgml +++ b/docs/docbook/projdoc/samba-doc.sgml @@ -6,7 +6,6 @@ - @@ -19,6 +18,9 @@ + + + ]> @@ -78,8 +80,10 @@ Cheers, jerry &Samba-LDAP; &BROWSING; &SPEED; -&OS2-Client; +&Other-Clients; &CVS-Access; &BUGS; +&GROUP-MAPPING-HOWTO; +&Portability; -- cgit From 3b4316a7138982732fe77d42bb027a59851ee5a0 Mon Sep 17 00:00:00 2001 From: Jelmer Vernooij Date: Wed, 28 Aug 2002 08:44:37 +0000 Subject: Remove yodldocs - it has been obsolete since 2.2 --- docs/yodldocs/README-NOW | 14 -------------- 1 file changed, 14 deletions(-) delete mode 100644 docs/yodldocs/README-NOW (limited to 'docs') diff --git a/docs/yodldocs/README-NOW b/docs/yodldocs/README-NOW deleted file mode 100644 index 592d38c1351..00000000000 --- a/docs/yodldocs/README-NOW +++ /dev/null @@ -1,14 +0,0 @@ -!== -!== Notice of change of documentation format -!== - -Samba is no longer using yodl as the source markup -language for our documentation. As of release 2.2.0, -we are using DocBook V4.1 exclusively (assuming you are not -counting the ASCII files yet to be converted). - -Please see ../docbook/docbook.txt for more information -on this. - -jerry carter -SAMBA Team -- cgit From 844d7254686b4a0429f30b4d4711387429172224 Mon Sep 17 00:00:00 2001 From: Jelmer Vernooij Date: Wed, 28 Aug 2002 08:49:02 +0000 Subject: Remove obsolete text docs --- docs/textdocs/BROWSING.txt | 559 -------------------------------- docs/textdocs/BUGS.txt | 135 -------- docs/textdocs/DIAGNOSIS.txt | 321 ------------------ docs/textdocs/DNIX.txt | 69 ---- docs/textdocs/GROUP-MAPPING-HOWTO.txt | 60 ---- docs/textdocs/INSTALL.sambatar | 33 -- docs/textdocs/Imprints.txt | 47 --- docs/textdocs/Macintosh_Clients.txt | 23 -- docs/textdocs/NetBIOS.txt | 152 --------- docs/textdocs/Printing.txt | 255 --------------- docs/textdocs/README.sambatar | 23 -- docs/textdocs/SCO.txt | 19 -- docs/textdocs/SMBTAR.notes | 46 --- docs/textdocs/Solaris-Winbind-HOWTO.txt | 361 --------------------- docs/textdocs/Speed.txt | 338 ------------------- docs/textdocs/Speed2.txt | 57 ---- docs/textdocs/Win95.txt | 74 ----- docs/textdocs/WinNT.txt | 104 ------ docs/textdocs/security_level.txt | 100 ------ 19 files changed, 2776 deletions(-) delete mode 100644 docs/textdocs/BROWSING.txt delete mode 100644 docs/textdocs/BUGS.txt delete mode 100644 docs/textdocs/DIAGNOSIS.txt delete mode 100644 docs/textdocs/DNIX.txt delete mode 100644 docs/textdocs/GROUP-MAPPING-HOWTO.txt delete mode 100644 docs/textdocs/INSTALL.sambatar delete mode 100644 docs/textdocs/Imprints.txt delete mode 100644 docs/textdocs/Macintosh_Clients.txt delete mode 100644 docs/textdocs/NetBIOS.txt delete mode 100644 docs/textdocs/Printing.txt delete mode 100644 docs/textdocs/README.sambatar delete mode 100644 docs/textdocs/SCO.txt delete mode 100644 docs/textdocs/SMBTAR.notes delete mode 100644 docs/textdocs/Solaris-Winbind-HOWTO.txt delete mode 100644 docs/textdocs/Speed.txt delete mode 100644 docs/textdocs/Speed2.txt delete mode 100644 docs/textdocs/Win95.txt delete mode 100644 docs/textdocs/WinNT.txt delete mode 100644 docs/textdocs/security_level.txt (limited to 'docs') diff --git a/docs/textdocs/BROWSING.txt b/docs/textdocs/BROWSING.txt deleted file mode 100644 index 2ca41e5624e..00000000000 --- a/docs/textdocs/BROWSING.txt +++ /dev/null @@ -1,559 +0,0 @@ -Author/s: Many (Thanks to Luke, Jeremy, Andrew, etc.) -Updated: July 5, 1998 -Status: Current - For VERY Advanced Users ONLY - -Summary: This describes how to configure Samba for improved browsing. -===================================================================== - -OVERVIEW: -========= - -SMB networking provides a mechanism by which clients can access a list -of machines in a network, a so-called "browse list". This list -contains machines that are ready to offer file and/or print services -to other machines within the network. Thus it does not include -machines which aren't currently able to do server tasks. The browse -list is heavily used by all SMB clients. Configuration of SMB -browsing has been problematic for some Samba users, hence this -document. - -Browsing will NOT work if name resolution from NetBIOS names to IP -addresses does not function correctly. Use of a WINS server is highly -recommended to aid the resolution of NetBIOS (SMB) names to IP addresses. -WINS allows remote segment clients to obtain NetBIOS name_type information -that can NOT be provided by any other means of name resolution. - -===================================================================== - -BROWSING -======== -Samba now fully supports browsing. The browsing is supported by nmbd -and is also controlled by options in the smb.conf file (see smb.conf(5)). - -Samba can act as a local browse master for a workgroup and the ability -for samba to support domain logons and scripts is now available. See -DOMAIN.txt for more information on domain logons. - -Samba can also act as a domain master browser for a workgroup. This -means that it will collate lists from local browse masters into a -wide area network server list. In order for browse clients to -resolve the names they may find in this list, it is recommended that -both samba and your clients use a WINS server. - -Note that you should NOT set Samba to be the domain master for a -workgroup that has the same name as an NT Domain: on each wide area -network, you must only ever have one domain master browser per workgroup, -regardless of whether it is NT, Samba or any other type of domain master -that is providing this service. - -[Note that nmbd can be configured as a WINS server, but it is not -necessary to specifically use samba as your WINS server. NTAS can -be configured as your WINS server. In a mixed NT server and -samba environment on a Wide Area Network, it is recommended that -you use the NT server's WINS server capabilities. In a samba-only -environment, it is recommended that you use one and only one nmbd -as your WINS server]. - -To get browsing to work you need to run nmbd as usual, but will need -to use the "workgroup" option in smb.conf to control what workgroup -Samba becomes a part of. - -Samba also has a useful option for a Samba server to offer itself for -browsing on another subnet. It is recommended that this option is only -used for 'unusual' purposes: announcements over the internet, for -example. See "remote announce" in the smb.conf man page. - -If something doesn't work then hopefully the log.nmb file will help -you track down the problem. Try a debug level of 2 or 3 for finding -problems. Also note that the current browse list usually gets stored -in text form in a file called browse.dat. - -Note that if it doesn't work for you, then you should still be able to -type the server name as \\SERVER in filemanager then hit enter and -filemanager should display the list of available shares. - -Some people find browsing fails because they don't have the global -"guest account" set to a valid account. Remember that the IPC$ -connection that lists the shares is done as guest, and thus you must -have a valid guest account. - -Also, a lot of people are getting bitten by the problem of too many -parameters on the command line of nmbd in inetd.conf. This trick is to -not use spaces between the option and the parameter (eg: -d2 instead -of -d 2), and to not use the -B and -N options. New versions of nmbd -are now far more likely to correctly find your broadcast and network -address, so in most cases these aren't needed. - -The other big problem people have is that their broadcast address, -netmask or IP address is wrong (specified with the "interfaces" option -in smb.conf) - - -BROWSING ACROSS SUBNETS -======================= - -With the release of Samba 1.9.17(alpha1 and above) Samba has been -updated to enable it to support the replication of browse lists -across subnet boundaries. New code and options have been added to -achieve this. This section describes how to set this feature up -in different settings. - -To see browse lists that span TCP/IP subnets (ie. networks separated -by routers that don't pass broadcast traffic) you must set up at least -one WINS server. The WINS server acts as a DNS for NetBIOS names, allowing -NetBIOS name to IP address translation to be done by doing a direct -query of the WINS server. This is done via a directed UDP packet on -port 137 to the WINS server machine. The reason for a WINS server is -that by default, all NetBIOS name to IP address translation is done -by broadcasts from the querying machine. This means that machines -on one subnet will not be able to resolve the names of machines on -another subnet without using a WINS server. - -Remember, for browsing across subnets to work correctly, all machines, -be they Windows 95, Windows NT, or Samba servers must have the IP address -of a WINS server given to them by a DHCP server, or by manual configuration -(for Win95 and WinNT, this is in the TCP/IP Properties, under Network -settings) for Samba this is in the smb.conf file. - -How does cross subnet browsing work ? -===================================== - -Cross subnet browsing is a complicated dance, containing multiple -moving parts. It has taken Microsoft several years to get the code -that achieves this correct, and Samba lags behind in some areas. -However, with the 1.9.17 release, Samba is capable of cross subnet -browsing when configured correctly. - -Consider a network set up as follows : - - (DMB) - N1_A N1_B N1_C N1_D N1_E - | | | | | - ------------------------------------------------------- - | subnet 1 | - +---+ +---+ - |R1 | Router 1 Router 2 |R2 | - +---+ +---+ - | | - | subnet 2 subnet 3 | - -------------------------- ------------------------------------ - | | | | | | | | - N2_A N2_B N2_C N2_D N3_A N3_B N3_C N3_D - (WINS) - -Consisting of 3 subnets (1, 2, 3) conneted by two routers -(R1, R2) - these do not pass broadcasts. Subnet 1 has 5 machines -on it, subnet 2 has 4 machines, subnet 3 has 4 machines. Assume -for the moment that all these machines are configured to be in the -same workgroup (for simplicities sake). Machine N1_C on subnet 1 -is configured as Domain Master Browser (ie. it will collate the -browse lists for the workgroup). Machine N2_D is configured as -WINS server and all the other machines are configured to register -their NetBIOS names with it. - -As all these machines are booted up, elections for master browsers -will take place on each of the three subnets. Assume that machine -N1_C wins on subnet 1, N2_B wins on subnet 2, and N3_D wins on -subnet 3 - these machines are known as local master browsers for -their particular subnet. N1_C has an advantage in winning as the -local master browser on subnet 1 as it is set up as Domain Master -Browser. - -On each of the three networks, machines that are configured to -offer sharing services will broadcast that they are offering -these services. The local master browser on each subnet will -receive these broadcasts and keep a record of the fact that -the machine is offering a service. This list of records is -the basis of the browse list. For this case, assume that -all the machines are configured to offer services so all machines -will be on the browse list. - -For each network, the local master browser on that network is -considered 'authoritative' for all the names it receives via -local broadcast. This is because a machine seen by the local -master browser via a local broadcast must be on the same -network as the local master browser and thus is a 'trusted' -and 'verifiable' resource. Machines on other networks that -the local master browsers learn about when collating their -browse lists have not been directly seen - these records are -called 'non-authoritative'. - -At this point the browse lists look as follows (these are -the machines you would see in your network neighborhood if -you looked in it on a particular network right now). - -Subnet Browse Master List ------- ------------- ---- -Subnet1 N1_C N1_A, N1_B, N1_C, N1_D, N1_E - -Subnet2 N2_B N2_A, N2_B, N2_C, N2_D - -Subnet3 N3_D N3_A, N3_B, N3_C, N3_D - -Note that at this point all the subnets are separate, no -machine is seen across any of the subnets. - -Now examine subnet 2. As soon as N2_B has become the local -master browser it looks for a Domain master browser to synchronize -its browse list with. It does this by querying the WINS server -(N2_D) for the IP address associated with the NetBIOS name -WORKGROUP<1B>. This name was registerd by the Domain master -browser (N1_C) with the WINS server as soon as it was booted. - -Once N2_B knows the address of the Domain master browser it -tells it that is the local master browser for subnet 2 by -sending a MasterAnnouncement packet as a UDP port 138 packet. -It then synchronizes with it by doing a NetServerEnum2 call. This -tells the Domain Master Browser to send it all the server -names it knows about. Once the domain master browser receives -the MasterAnnouncement packet it schedules a synchronization -request to the sender of that packet. After both synchronizations -are done the browse lists look like : - -Subnet Browse Master List ------- ------------- ---- -Subnet1 N1_C N1_A, N1_B, N1_C, N1_D, N1_E, - N2_A(*), N2_B(*), N2_C(*), N2_D(*) - -Subnet2 N2_B N2_A, N2_B, N2_C, N2_D - N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*) - -Subnet3 N3_D N3_A, N3_B, N3_C, N3_D - -Servers with a (*) after them are non-authoritative names. - -At this point users looking in their network neighborhood on -subnets 1 or 2 will see all the servers on both, users on -subnet 3 will still only see the servers on their own subnet. - -The same sequence of events that occured for N2_B now occurs -for the local master browser on subnet 3 (N3_D). When it -synchronizes browse lists with the domain master browser (N1_A) -it gets both the server entries on subnet 1, and those on -subnet 2. After N3_D has synchronized with N1_C and vica-versa -the browse lists look like. - -Subnet Browse Master List ------- ------------- ---- -Subnet1 N1_C N1_A, N1_B, N1_C, N1_D, N1_E, - N2_A(*), N2_B(*), N2_C(*), N2_D(*), - N3_A(*), N3_B(*), N3_C(*), N3_D(*) - -Subnet2 N2_B N2_A, N2_B, N2_C, N2_D - N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*) - -Subnet3 N3_D N3_A, N3_B, N3_C, N3_D - N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*), - N2_A(*), N2_B(*), N2_C(*), N2_D(*) - -Servers with a (*) after them are non-authoritative names. - -At this point users looking in their network neighborhood on -subnets 1 or 3 will see all the servers on all sunbets, users on -subnet 2 will still only see the servers on subnets 1 and 2, but not 3. - -Finally, the local master browser for subnet 2 (N2_B) will sync again -with the domain master browser (N1_C) and will recieve the missing -server entries. Finally - and as a steady state (if no machines -are removed or shut off) the browse lists will look like : - -Subnet Browse Master List ------- ------------- ---- -Subnet1 N1_C N1_A, N1_B, N1_C, N1_D, N1_E, - N2_A(*), N2_B(*), N2_C(*), N2_D(*), - N3_A(*), N3_B(*), N3_C(*), N3_D(*) - -Subnet2 N2_B N2_A, N2_B, N2_C, N2_D - N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*) - N3_A(*), N3_B(*), N3_C(*), N3_D(*) - -Subnet3 N3_D N3_A, N3_B, N3_C, N3_D - N1_A(*), N1_B(*), N1_C(*), N1_D(*), N1_E(*), - N2_A(*), N2_B(*), N2_C(*), N2_D(*) - -Servers with a (*) after them are non-authoritative names. - -Synchronizations between the domain master browser and local -master browsers will continue to occur, but this should be a -steady state situation. - -If either router R1 or R2 fails the following will occur: - -1) Names of computers on each side of the inaccessible network fragments -will be maintained for as long as 36 minutes, in the network neighbourhood -lists. - -2) Attempts to connect to these inaccessible computers will fail, but the -names will not be removed from the network neighbourhood lists. - -3) If one of the fragments is cut off from the WINS server, it will only -be able to access servers on its local subnet, by using subnet-isolated -broadcast NetBIOS name resolution. The effects are similar to that of -losing access to a DNS server. - -Setting up a WINS server -======================== - -Either a Samba machine or a Windows NT Server machine may be set up -as a WINS server. To set a Samba machine to be a WINS server you must -add the following option to the smb.conf file on the selected machine : -in the [globals] section add the line - - wins support = yes - -Versions of Samba previous to 1.9.17 had this parameter default to -yes. If you have any older versions of Samba on your network it is -strongly suggested you upgrade to 1.9.17 or above, or at the very -least set the parameter to 'no' on all these machines. - -Machines with "wins support = yes" will keep a list of all NetBIOS -names registered with them, acting as a DNS for NetBIOS names. - -You should set up only ONE wins server. Do NOT set the -"wins support = yes" option on more than one Samba server. - -To set up a Windows NT Server as a WINS server you need to set up -the WINS service - see your NT documentation for details. Note that -Windows NT WINS Servers can replicate to each other, allowing more -than one to be set up in a complex subnet environment. As Microsoft -refuse to document these replication protocols Samba cannot currently -participate in these replications. It is possible in the future that -a Samba->Samba WINS replication protocol may be defined, in which -case more than one Samba machine could be set up as a WINS server -but currently only one Samba server should have the "wins support = yes" -parameter set. - -After the WINS server has been configured you must ensure that all -machines participating on the network are configured with the address -of this WINS server. If your WINS server is a Samba machine, fill in -the Samba machine IP address in the "Primary WINS Server" field of -the "Control Panel->Network->Protocols->TCP->WINS Server" dialogs -in Windows 95 or Windows NT. To tell a Samba server the IP address -of the WINS server add the following line to the [global] section of -all smb.conf files : - - wins server = - -where is either the DNS name of the WINS server -machine or its IP address. - -Note that this line MUST NOT BE SET in the smb.conf file of the Samba -server acting as the WINS server itself. If you set both the -"wins support = yes" option and the "wins server = " option then -nmbd will fail to start. - -There are two possible scenarios for setting up cross subnet browsing. -The first details setting up cross subnet browsing on a network containing -Windows 95, Samba and Windows NT machines that are not configured as -part of a Windows NT Domain. The second details setting up cross subnet -browsing on networks that contain NT Domains. - -Setting up Browsing in a WORKGROUP -================================== - -To set up cross subnet browsing on a network containing machines -in up to be in a WORKGROUP, not an NT Domain you need to set up one -Samba server to be the Domain Master Browser (note that this is *NOT* -the same as a Primary Domain Controller, although in an NT Domain the -same machine plays both roles). The role of a Domain master browser is -to collate the browse lists from local master browsers on all the -subnets that have a machine participating in the workgroup. Without -one machine configured as a domain master browser each subnet would -be an isolated workgroup, unable to see any machines on any other -subnet. It is the presense of a domain master browser that makes -cross subnet browsing possible for a workgroup. - -In an WORKGROUP environment the domain master browser must be a -Samba server, and there must only be one domain master browser per -workgroup name. To set up a Samba server as a domain master browser, -set the following option in the [global] section of the smb.conf file : - - domain master = yes - -The domain master browser should also preferrably be the local master -browser for its own subnet. In order to achieve this set the following -options in the [global] section of the smb.conf file : - - domain master = yes - local master = yes - preferred master = yes - os level = 65 - -The domain master browser may be the same machine as the WINS -server, if you require. - -Next, you should ensure that each of the subnets contains a -machine that can act as a local master browser for the -workgroup. Any NT machine should be able to do this, as will -Windows 95 machines (although these tend to get rebooted more -often, so it's not such a good idea to use these). To make a -Samba server a local master browser set the following -options in the [global] section of the smb.conf file : - - domain master = no - local master = yes - preferred master = yes - os level = 65 - -Do not do this for more than one Samba server on each subnet, -or they will war with each other over which is to be the local -master browser. - -The "local master" parameter allows Samba to act as a local master -browser. The "preferred master" causes nmbd to force a browser -election on startup and the "os level" parameter sets Samba high -enough so that it should win any browser elections. - -If you have an NT machine on the subnet that you wish to -be the local master browser then you can disable Samba from -becoming a local master browser by setting the following -options in the [global] section of the smb.conf file : - - domain master = no - local master = no - preferred master = no - os level = 0 - -Setting up Browsing in a DOMAIN -=============================== - -If you are adding Samba servers to a Windows NT Domain then -you must not set up a Samba server as a domain master browser. -By default, a Windows NT Primary Domain Controller for a Domain -name is also the Domain master browser for that name, and many -things will break if a Samba server registers the Domain master -browser NetBIOS name (DOMAIN<1B>) with WINS instead of the PDC. - -For subnets other than the one containing the Windows NT PDC -you may set up Samba servers as local master browsers as -described. To make a Samba server a local master browser set -the following options in the [global] section of the smb.conf -file : - - domain master = no - local master = yes - preferred master = yes - os level = 65 - -If you wish to have a Samba server fight the election with machines -on the same subnet you may set the "os level" parameter to lower -levels. By doing this you can tune the order of machines that -will become local master browsers if they are running. For -more details on this see the section "FORCING SAMBA TO BE THE MASTER" -below. - -If you have Windows NT machines that are members of the domain -on all subnets, and you are sure they will always be running then -you can disable Samba from taking part in browser elections and -ever becoming a local master browser by setting following options -in the [global] section of the smb.conf file : - - domain master = no - local master = no - preferred master = no - os level = 0 - -FORCING SAMBA TO BE THE MASTER -============================== - -Who becomes the "master browser" is determined by an election process -using broadcasts. Each election packet contains a number of parameters -which determine what precedence (bias) a host should have in the -election. By default Samba uses a very low precedence and thus loses -elections to just about anyone else. - -If you want Samba to win elections then just set the "os level" global -option in smb.conf to a higher number. It defaults to 0. Using 34 -would make it win all elections over every other system (except other -samba systems!) - -A "os level" of 2 would make it beat WfWg and Win95, but not NTAS. A -NTAS domain controller uses level 32. - -The maximum os level is 255 - -If you want samba to force an election on startup, then set the -"preferred master" global option in smb.conf to "yes". Samba will -then have a slight advantage over other potential master browsers -that are not preferred master browsers. Use this parameter with -care, as if you have two hosts (whether they are windows 95 or NT or -samba) on the same local subnet both set with "preferred master" to -"yes", then periodically and continually they will force an election -in order to become the local master browser. - -If you want samba to be a "domain master browser", then it is -recommended that you also set "preferred master" to "yes", because -samba will not become a domain master browser for the whole of your -LAN or WAN if it is not also a local master browser on its own -broadcast isolated subnet. - -It is possible to configure two samba servers to attempt to become -the domain master browser for a domain. The first server that comes -up will be the domain master browser. All other samba servers will -attempt to become the domain master browser every 5 minutes. They -will find that another samba server is already the domain master -browser and will fail. This provides automatic redundancy, should -the current domain master browser fail. - - -MAKING SAMBA THE DOMAIN MASTER -============================== - -The domain master is responsible for collating the browse lists of -multiple subnets so that browsing can occur between subnets. You can -make samba act as the domain master by setting "domain master = yes" -in smb.conf. By default it will not be a domain master. - -Note that you should NOT set Samba to be the domain master for a -workgroup that has the same name as an NT Domain. - -When samba is the domain master and the master browser it will listen -for master announcements (made roughly every twelve minutes) from local -master browsers on other subnets and then contact them to synchronise -browse lists. - -If you want samba to be the domain master then I suggest you also set -the "os level" high enough to make sure it wins elections, and set -"preferred master" to "yes", to get samba to force an election on -startup. - -Note that all your servers (including samba) and clients should be -using a WINS server to resolve NetBIOS names. If your clients are only -using broadcasting to resolve NetBIOS names, then two things will occur: - -a) your local master browsers will be unable to find a domain master - browser, as it will only be looking on the local subnet. - -b) if a client happens to get hold of a domain-wide browse list, and - a user attempts to access a host in that list, it will be unable to - resolve the NetBIOS name of that host. - -If, however, both samba and your clients are using a WINS server, then: - -a) your local master browsers will contact the WINS server and, as long as - samba has registered that it is a domain master browser with the WINS - server, your local master browser will receive samba's ip address - as its domain master browser. - -b) when a client receives a domain-wide browse list, and a user attempts - to access a host in that list, it will contact the WINS server to - resolve the NetBIOS name of that host. as long as that host has - registered its NetBIOS name with the same WINS server, the user will - be able to see that host. - -NOTE ABOUT BROADCAST ADDRESSES -============================== - -If your network uses a "0" based broadcast address (for example if it -ends in a 0) then you will strike problems. Windows for Workgroups -does not seem to support a 0's broadcast and you will probably find -that browsing and name lookups won't work. - - -MULTIPLE INTERFACES -=================== - -Samba now supports machines with multiple network interfaces. If you -have multiple interfaces then you will need to use the "interfaces" -option in smb.conf to configure them. See smb.conf(5) for details. - diff --git a/docs/textdocs/BUGS.txt b/docs/textdocs/BUGS.txt deleted file mode 100644 index 247998c6c7a..00000000000 --- a/docs/textdocs/BUGS.txt +++ /dev/null @@ -1,135 +0,0 @@ -Contributor: Samba Team -Updated: June 27, 1997 - -Subject: This file describes how to report Samba bugs. -============================================================================ - ->> The email address for bug reports is samba@samba.org << - -Please take the time to read this file before you submit a bug -report. Also, please see if it has changed between releases, as we -may be changing the bug reporting mechanism at some time. - -Please also do as much as you can yourself to help track down the -bug. Samba is maintained by a dedicated group of people who volunteer -their time, skills and efforts. We receive far more mail about it than -we can possibly answer, so you have a much higher chance of an answer -and a fix if you send us a "developer friendly" bug report that lets -us fix it fast. - -Do not assume that if you post the bug to the comp.protocols.smb -newsgroup or the mailing list that we will read it. If you suspect that your -problem is not a bug but a configuration problem then it is better to send -it to the Samba mailing list, as there are (at last count) 5000 other users on -that list that may be able to help you. - -You may also like to look though the recent mailing list archives, -which are conveniently accessible on the Samba web pages -at http://samba.org/samba/ - - -GENERAL INFO ------------- - -Before submitting a bug report check your config for silly -errors. Look in your log files for obvious messages that tell you that -you've misconfigured something and run testparm to test your config -file for correct syntax. - -Have you run through DIAGNOSIS.txt? This is very important. - -If you include part of a log file with your bug report then be sure to -annotate it with exactly what you were doing on the client at the -time, and exactly what the results were. - - -DEBUG LEVELS ------------- - -If the bug has anything to do with Samba behaving incorrectly as a -server (like refusing to open a file) then the log files will probably -be very useful. Depending on the problem a log level of between 3 and -10 showing the problem may be appropriate. A higher level givesmore -detail, but may use too much disk space. - -To set the debug level use "log level =" in your smb.conf. You may -also find it useful to set the log level higher for just one machine -and keep separate logs for each machine. To do this use: - -log level = 10 -log file = /usr/local/samba/lib/log.%m -include = /usr/local/samba/lib/smb.conf.%m - -then create a file "/usr/local/samba/lib/smb.conf.machine" where -"machine" is the name of the client you wish to debug. In that file -put any smb.conf commands you want, for example "log level=" may be -useful. This also allows you to experiment with different security -systems, protocol levels etc on just one machine. - -The smb.conf entry "log level =" is synonymous with the entry -"debuglevel =" that has been used in older versions of Samba and -is being retained for backwards compatibility of smb.conf files. - -As the "log level =" value is increased you will record a significantly -increasing level of debugging information. For most debugging operations -you may not need a setting higher than 3. Nearly all bugs can be tracked -at a setting of 10, but be prepared for a VERY large volume of log data. - - -INTERNAL ERRORs ---------------- - -If you get a "INTERNAL ERROR" message in your log files it means that -Samba got an unexpected signal while running. It is probably a -segmentation fault and almost certainly means a bug in Samba (unless -you have faulty hardware or system software) - -If the message came from smbd then it will probably be accompanied by -a message which details the last SMB message received by smbd. This -info is often very useful in tracking down the problem so please -include it in your bug report. - -You should also detail how to reproduce the problem, if -possible. Please make this reasonably detailed. - -You may also find that a core file appeared in a "corefiles" -subdirectory of the directory where you keep your samba log -files. This file is the most useful tool for tracking down the bug. To -use it you do this: - -gdb smbd core - -adding appropriate paths to smbd and core so gdb can find them. If you -don't have gdb then try "dbx". Then within the debugger use the -command "where" to give a stack trace of where the problem -occurred. Include this in your mail. - -If you known any assembly language then do a "disass" of the routine -where the problem occurred (if its in a library routine then -disassemble the routine that called it) and try to work out exactly -where the problem is by looking at the surrounding code. Even if you -don't know assembly then incuding this info in the bug report can be -useful. - - -ATTACHING TO A RUNNING PROCESS ------------------------------- - -Unfortunately some unixes (in particular some recent linux kernels) -refuse to dump a core file if the task has changed uid (which smbd -does often). To debug with this sort of system you could try to attach -to the running process using "gdb smbd PID" where you get PID from -smbstatus. Then use "c" to continue and try to cause the core dump -using the client. The debugger should catch the fault and tell you -where it occurred. - - -PATCHES -------- - -The best sort of bug report is one that includes a fix! If you send us -patches please use "diff -u" format if your version of diff supports -it, otherwise use "diff -c4". Make sure your do the diff against a -clean version of the source and let me know exactly what version you -used. - diff --git a/docs/textdocs/DIAGNOSIS.txt b/docs/textdocs/DIAGNOSIS.txt deleted file mode 100644 index 2816610a9cb..00000000000 --- a/docs/textdocs/DIAGNOSIS.txt +++ /dev/null @@ -1,321 +0,0 @@ -Contributor: Andrew Tridgell -Updated: November 1, 1999 - -Subject: DIAGNOSING YOUR SAMBA SERVER -=========================================================================== - -This file contains a list of tests you can perform to validate your -Samba server. It also tells you what the likely cause of the problem -is if it fails any one of these steps. If it passes all these tests -then it is probably working fine. - -You should do ALL the tests, in the order shown. I have tried to -carefully choose them so later tests only use capabilities verified in -the earlier tests. - -If you send me an email saying "it doesn't work" and you have not -followed this test procedure then you should not be surprised if I -ignore your email. - - -ASSUMPTIONS ------------ - -In all of the tests I assume you have a Samba server called BIGSERVER -and a PC called ACLIENT both in workgroup TESTGROUP. I also assume the -PC is running windows for workgroups with a recent copy of the -microsoft tcp/ip stack. Alternatively, your PC may be running Windows -95 or Windows NT (Workstation or Server). - -The procedure is similar for other types of clients. - -I also assume you know the name of an available share in your -smb.conf. I will assume this share is called "tmp". You can add a -"tmp" share like by adding the following to smb.conf: - -[tmp] - comment = temporary files - path = /tmp - read only = yes - - -THESE TESTS ASSUME VERSION 2.0.6 OR LATER OF THE SAMBA SUITE. SOME -COMMANDS SHOWN DID NOT EXIST IN EARLIER VERSIONS - -Please pay attention to the error messages you receive. If any error message -reports that your server is being unfriendly you should first check that you -IP name resolution is correctly set up. eg: Make sure your /etc/resolv.conf -file points to name servers that really do exist. - -Also, if you do not have DNS server access for name resolution please check -that the settings for your smb.conf file results in "dns proxy = no". The -best way to check this is with "testparm smb.conf" - - -TEST 1: -------- - -In the directory in which you store your smb.conf file, run the command -"testparm smb.conf". If it reports any errors then your smb.conf -configuration file is faulty. - -Note: Your smb.conf file may be located in: /etc - Or in: /usr/local/samba/lib - - -TEST 2: -------- - -run the command "ping BIGSERVER" from the PC and "ping ACLIENT" from -the unix box. If you don't get a valid response then your TCP/IP -software is not correctly installed. - -Note that you will need to start a "dos prompt" window on the PC to -run ping. - -If you get a message saying "host not found" or similar then your DNS -software or /etc/hosts file is not correctly setup. It is possible to -run samba without DNS entries for the server and client, but I assume -you do have correct entries for the remainder of these tests. - -Another reason why ping might fail is if your host is running firewall -software. You will need to relax the rules to let in the workstation -in question, perhaps by allowing access from another subnet (on Linux -this is done via the ipfwadm program.) - - -TEST 3: -------- - -Run the command "smbclient -L BIGSERVER" on the unix box. You -should get a list of available shares back. - -If you get a error message containing the string "Bad password" then -you probably have either an incorrect "hosts allow", "hosts deny" or -"valid users" line in your smb.conf, or your guest account is not -valid. Check what your guest account is using "testparm" and -temporarily remove any "hosts allow", "hosts deny", "valid users" or -"invalid users" lines. - -If you get a "connection refused" response then the smbd server may -not be running. If you installed it in inetd.conf then you probably edited -that file incorrectly. If you installed it as a daemon then check that -it is running, and check that the netbios-ssn port is in a LISTEN -state using "netstat -a". - -If you get a "session request failed" then the server refused the -connection. If it says "Your server software is being unfriendly" then -its probably because you have invalid command line parameters to smbd, -or a similar fatal problem with the initial startup of smbd. Also -check your config file (smb.conf) for syntax errors with "testparm" -and that the various directories where samba keeps its log and lock -files exist. - -There are a number of reasons for which smbd may refuse or decline -a session request. The most common of these involve one or more of -the following smb.conf file entries: - hosts deny = ALL - hosts allow = xxx.xxx.xxx.xxx/yy - bind interfaces only = Yes - -In the above, no allowance has been made for any session requests that -will automatically translate to the loopback adaptor address 127.0.0.1. -To solve this problem change these lines to: - hosts deny = ALL - hosts allow = xxx.xxx.xxx.xxx/yy 127. -Do NOT use the "bind interfaces only" parameter where you may wish to -use the samba password change facility, or where smbclient may need to -access local service for name resolution or for local resource -connections. (Note: the "bind interfaces only" parameter deficiency -where it will not allow connections to the loopback address will be -fixed soon). - -Another common cause of these two errors is having something already running -on port 139, such as Samba (ie: smbd is running from inetd already) or -something like Digital's Pathworks. Check your inetd.conf file before trying -to start smbd as a daemon, it can avoid a lot of frustration! - -And yet another possible cause for failure of TEST 3 is when the subnet mask -and / or broadcast address settings are incorrect. Please check that the -network interface IP Address / Broadcast Address / Subnet Mask settings are -correct and that Samba has correctly noted these in the log.nmb file. - -TEST 4: -------- - -Run the command "nmblookup -B BIGSERVER __SAMBA__". You should get the -IP address of your Samba server back. - -If you don't then nmbd is incorrectly installed. Check your inetd.conf -if you run it from there, or that the daemon is running and listening -to udp port 137. - -One common problem is that many inetd implementations can't take many -parameters on the command line. If this is the case then create a -one-line script that contains the right parameters and run that from -inetd. - - -TEST 5: -------- - -run the command "nmblookup -B ACLIENT '*'" - -You should get the PCs IP address back. If you don't then the client -software on the PC isn't installed correctly, or isn't started, or you -got the name of the PC wrong. - -If ACLIENT doesn't resolve via DNS then use the IP address of the -client in the above test. - - -TEST 6: -------- - -Run the command "nmblookup -d 2 '*'" - -This time we are trying the same as the previous test but are trying -it via a broadcast to the default broadcast address. A number of -Netbios/TCPIP hosts on the network should respond, although Samba may -not catch all of the responses in the short time it listens. You -should see "got a positive name query response" messages from several -hosts. - -If this doesn't give a similar result to the previous test then -nmblookup isn't correctly getting your broadcast address through its -automatic mechanism. In this case you should experiment use the -"interfaces" option in smb.conf to manually configure your IP -address, broadcast and netmask. - -If your PC and server aren't on the same subnet then you will need to -use the -B option to set the broadcast address to the that of the PCs -subnet. - -This test will probably fail if your subnet mask and broadcast address are -not correct. (Refer to TEST 3 notes above). - -TEST 7: -------- - -Run the command "smbclient //BIGSERVER/TMP". You should then be -prompted for a password. You should use the password of the account -you are logged into the unix box with. If you want to test with -another account then add the -U option to the end of -the command line. eg: smbclient //bigserver/tmp -Ujohndoe - -Note: It is possible to specify the password along with the username -as follows: - smbclient //bigserver/tmp -Ujohndoe%secret - -Once you enter the password you should get the "smb>" prompt. If you -don't then look at the error message. If it says "invalid network -name" then the service "tmp" is not correctly setup in your smb.conf. - -If it says "bad password" then the likely causes are: - -- you have shadow passords (or some other password system) but didn't -compile in support for them in smbd -- your "valid users" configuration is incorrect -- you have a mixed case password and you haven't enabled the "password -level" option at a high enough level -- the "path =" line in smb.conf is incorrect. Check it with testparm -- you enabled password encryption but didn't create the SMB encrypted -password file - -Once connected you should be able to use the commands "dir" "get" -"put" etc. Type "help " for instructions. You should -especially check that the amount of free disk space shown is correct -when you type "dir". - - -TEST 8: -------- - -On the PC type the command "net view \\BIGSERVER". You will need to do -this from within a "dos prompt" window. You should get back a list of -available shares on the server. - -If you get a "network name not found" or similar error then netbios -name resolution is not working. This is usually caused by a problem in -nmbd. To overcome it you could do one of the following (you only need -to choose one of them): - -- fixup the nmbd installation -- add the IP address of BIGSERVER to the "wins server" box in the -advanced tcp/ip setup on the PC. -- enable windows name resolution via DNS in the advanced section of -the tcp/ip setup -- add BIGSERVER to your lmhosts file on the PC. - -If you get a "invalid network name" or "bad password error" then the -same fixes apply as they did for the "smbclient -L" test above. In -particular, make sure your "hosts allow" line is correct (see the man -pages) - -Also, do not overlook that fact that when the workstation requests the -connection to the samba server it will attempt to connect using the -name with which you logged onto your Windows machine. You need to make -sure that an account exists on your Samba server with that exact same -name and password. - -If you get "specified computer is not receiving requests" or similar -it probably means that the host is not contactable via tcp services. -Check to see if the host is running tcp wrappers, and if so add an entry in -the hosts.allow file for your client (or subnet, etc.) - - -TEST 9: --------- - -Run the command "net use x: \\BIGSERVER\TMP". You should be prompted -for a password then you should get a "command completed successfully" -message. If not then your PC software is incorrectly installed or your -smb.conf is incorrect. make sure your "hosts allow" and other config -lines in smb.conf are correct. - -It's also possible that the server can't work out what user name to -connect you as. To see if this is the problem add the line "user = -USERNAME" to the [tmp] section of smb.conf where "USERNAME" is the -username corresponding to the password you typed. If you find this -fixes things you may need the username mapping option. - -TEST 10: --------- - -Run the command "nmblookup -M TESTGROUP" where TESTGROUP is the name -of the workgroup that your Samba server and Windows PCs belong to. You -should get back the IP address of the master browser for that -workgroup. - -If you don't then the election process has failed. Wait a minute to -see if it is just being slow then try again. If it still fails after -that then look at the browsing options you have set in smb.conf. Make -sure you have "preferred master = yes" to ensure that an election is -held at startup. - -TEST 11: --------- - -From file manager try to browse the server. Your samba server should -appear in the browse list of your local workgroup (or the one you -specified in smb.conf). You should be able to double click on the name -of the server and get a list of shares. If you get a "invalid -password" error when you do then you are probably running WinNT and it -is refusing to browse a server that has no encrypted password -capability and is in user level security mode. In this case either set -"security = server" AND "password server = Windows_NT_Machine" in your -smb.conf file, or enable encrypted passwords AFTER compiling in support -for encrypted passwords (refer to the Makefile). - - -Still having troubles? ----------------------- - -Try the mailing list or newsgroup, or use the tcpdump-smb utility to -sniff the problem. The official samba mailing list can be reached at -samba@samba.org. To find out more about samba and how to -subscribe to the mailing list check out the samba web page at - http://samba.org/samba - -Also look at the other docs in the Samba package! - diff --git a/docs/textdocs/DNIX.txt b/docs/textdocs/DNIX.txt deleted file mode 100644 index 51005e6ec8c..00000000000 --- a/docs/textdocs/DNIX.txt +++ /dev/null @@ -1,69 +0,0 @@ -DNIX has a problem with seteuid() and setegid(). These routines are -needed for Samba to work correctly, but they were left out of the DNIX -C library for some reason. - -For this reason Samba by default defines the macro NO_EID in the DNIX -section of includes.h. This works around the problem in a limited way, -but it is far from ideal, some things still won't work right. - -To fix the problem properly you need to assemble the following two -functions and then either add them to your C library or link them into -Samba. - -put this in the file setegid.s: - - .globl _setegid -_setegid: - moveq #47,d0 - movl #100,a0 - moveq #1,d1 - movl 4(sp),a1 - trap #9 - bccs 1$ - jmp cerror -1$: - clrl d0 - rts - - -put this in the file seteuid.s: - - .globl _seteuid -_seteuid: - moveq #47,d0 - movl #100,a0 - moveq #0,d1 - movl 4(sp),a1 - trap #9 - bccs 1$ - jmp cerror -1$: - clrl d0 - rts - -after creating the above files you then assemble them using - -as seteuid.s -as setegid.s - -that should produce the files seteuid.o and setegid.o - -then you need to add these to the LIBSM line in the DNIX section of -the Samba Makefile. Your LIBSM line will then look something like this: - -LIBSM = setegid.o seteuid.o -ln - -You should then remove the line: - -#define NO_EID - -from the DNIX section of includes.h - -Then recompile and try it out! - -Note that this file was derived from an email from Peter Olsson -. I don't have DNIX myself, so you're probably better -off contacting Peter if you have problems. - -Andrew - diff --git a/docs/textdocs/GROUP-MAPPING-HOWTO.txt b/docs/textdocs/GROUP-MAPPING-HOWTO.txt deleted file mode 100644 index c266f56548d..00000000000 --- a/docs/textdocs/GROUP-MAPPING-HOWTO.txt +++ /dev/null @@ -1,60 +0,0 @@ -Samba 3.0 prealpha guide to group mapping ---------------------------------------------------- - -Jean Franois Micouleau (jfm@samba.org) - -Starting with Samba 3.0 alpha 2, a new group mapping function is available. The -current method (likely to change) to manage the groups is a new command called -smbgroupedit. - -The first immediate reason to use the group mapping on a PDC, is that -the 'domain admin group' of smb.conf is now gone. This parameter was -used to give the listed users local admin rights on their -workstations. It was some magic stuff that simply worked but didn't -scale very well for complex setups. - -Let me explain how it works on NT/W2K, to have this magic fade away. -When installing NT/W2K on a computer, the installer program creates some users -and groups. Notably the 'Administrators' group, and gives to that group some -privileges like the ability to change the date and time or to kill any process -(or close too) running on the local machine. The 'Administrator' user is a -member of the 'Administrators' group, and thus 'inherit' the 'Administrators' -group privileges. If a 'joe' user is created and become a member of the -'Administrator' group, 'joe' has exactly the same rights as 'Administrator'. - -When a NT/W2K machine is joined to a domain, during that phase, the "Domain -Administrators' group of the PDC is added to the 'Administrators' group of the -workstation. Every members of the 'Domain Administrators' group 'inherit' the -rights of the 'Administrators' group when logging on the workstation. - - -You are now wondering how to make some of your samba PDC users members of the -'Domain Administrators' ? That's really easy. - -1) create a unix group (usually in /etc/group), let's call it domadm -2) add to this group the users that must be Administrators. For example if you -want joe,john and mary, your entry in /etc/group will look like: - - domadm:x:502:joe,john,mary - -3) map this domadm group to the 'domain admins' group by running the command: - - smbgroupedit -c "Domain Admins" -u domadm - -you're set, joe, john and mary are domain administrators ! - - - -Like the Domain Admins group, you can map any arbitrary Unix group to any NT -group. You can also make any Unix group a domain group. For example, on a domain -member machine (an NT/W2K or a samba server running winbind), you would like to -give access to a certain directory to some users who are member of a group on -your samba PDC. Flag that group as a domain group by running: - - smbgroupedit -a unixgroup -td - - -You can list the various groups in the mapping database like this - - smbgroupedit -v - diff --git a/docs/textdocs/INSTALL.sambatar b/docs/textdocs/INSTALL.sambatar deleted file mode 100644 index 413f54d3c65..00000000000 --- a/docs/textdocs/INSTALL.sambatar +++ /dev/null @@ -1,33 +0,0 @@ -Contributor: Ricky Poulten -Date: Unknown -Status: Current - -Subject: Using smbtar -============================================================================= - -Please see the readme and the man page for general info. - -1) Follow the samba installation instructions. - -2) If all goes well, test it out by creating a share on your PC (called -backup for example) then doing something like, - - ./smbtar -s mypc -t /dev/rmt/0ubn -x backup - -substituting whatever your tape drive is for the -t option, or set your -tape environmental variable. - -If all does not go well, feel free to mail the author (poultenr@logica.co.uk) -about bug reports / help / money / pizza / etc. - -3) Read the man page and the NOTES file for more information - -4) Work smbtar into your usual nightly backup scheme (presuming you -have one :-}). - - -NOTE: - -If you have problems with smbtar then it's probably best to contact the -author Ricky Poulten (poultenr@logica.co.uk). - diff --git a/docs/textdocs/Imprints.txt b/docs/textdocs/Imprints.txt deleted file mode 100644 index 4ea9782bd38..00000000000 --- a/docs/textdocs/Imprints.txt +++ /dev/null @@ -1,47 +0,0 @@ -================================================================== - - -Imprints (Installation Manager of Printer driver -Retreival and Installation for Samba) is a project to -implement a UNIX equivalent of the Windows NT APW. -It has been taken on in part by the Samba Team, VA Linux -Systems and Hewlett-Packard. The Imprints toolset seeks -to provide central repository for users and administrators -to locate, download, and install all variations Window -95/98/NT printer drivers on Samba print servers. - -The server portion of Imprints is composed of a database -server which contains information and locations of various -printer driver packages. This server can be queried over -standard HTTP get requests and should therefore be available -to most administrators behind firewalls. The server's -database consists of records containing data about each -known printer driver package. For example, each driver -record contains a URL from which the Imprints installation -client can download the package as well as a public key which -can be used to verify the package's integrity. - -Once downloaded, the installation client will attempt to -install the printer driver on the defined remote server -using the username and password provided by the administrator. -If the username/password pair can be authenticated by the -remote server (and has the appropriate authorization), then -the printer driver(s) is (are) installed and the new Printer -is created. - -From Samba's point of view, the process of creating a new -printer via the Imprints installation client is identical to -that of using the Windows NT APW. In fact, Imprints utilizes -Samba's rpcclient and smbclient tools to issue the same MS-RPC -and file copy operations as an NT client. This means that -Imprints can also be used to install printers on remote Windows -NT print servers. - -For more information on Imprints, visit the project homepage -at - - http://imprints.sourceforge.net/. - - - - diff --git a/docs/textdocs/Macintosh_Clients.txt b/docs/textdocs/Macintosh_Clients.txt deleted file mode 100644 index dfac97e1aa2..00000000000 --- a/docs/textdocs/Macintosh_Clients.txt +++ /dev/null @@ -1,23 +0,0 @@ -> Are there any Macintosh clients for Samba? - -Yes. Thursby now have a CIFS Client / Server called DAVE - see -http://www.thursby.com/ - -They test it against Windows 95, Windows NT and samba for -compatibility issues. At the time of writing, DAVE was at version -1.0.1. The 1.0.0 to 1.0.1 update is available as a free download from -the Thursby web site (the speed of finder copies has been greatly -enhanced, and there are bug-fixes included). - -Alternatives - There are two free implementations of AppleTalk for -several kinds of UNIX machnes, and several more commercial ones. -These products allow you to run file services and print services -natively to Macintosh users, with no additional support required on -the Macintosh. The two free omplementations are Netatalk, -http://www.umich.edu/~rsug/netatalk/, and CAP, -http://www.cs.mu.oz.au/appletalk/atalk.html. What Samba offers MS -Windows users, these packages offer to Macs. For more info on these -packages, Samba, and Linux (and other UNIX-based systems) see -http://www.eats.com/linux_mac_win.html - - diff --git a/docs/textdocs/NetBIOS.txt b/docs/textdocs/NetBIOS.txt deleted file mode 100644 index ca0dcc84b72..00000000000 --- a/docs/textdocs/NetBIOS.txt +++ /dev/null @@ -1,152 +0,0 @@ -Contributor: lkcl - samba@samba.org - Copyright 1997 Luke Kenneth Casson Leighton -Date: March 1997 -Status: Current -Updated: 12jun97 - -Subject: Definition of NetBIOS Protocol and Name Resolution Modes -============================================================================= - -======= -NETBIOS -======= - -NetBIOS runs over the following tranports: TCP/IP; NetBEUI and IPX/SPX. -Samba only uses NetBIOS over TCP/IP. For details on the TCP/IP NetBIOS -Session Service NetBIOS Datagram Service, and NetBIOS Names, see -rfc1001.txt and rfc1002.txt. - -NetBEUI is a raw NetBIOS frame protocol implementation that allows NetBIOS -datagrams to be sent out over the 'wire' embedded within LLC frames. -NetBEUI is not required when using NetBIOS over TCP/IP protocols and it -is preferable NOT to install NetBEUI if it can be avoided. - -IPX/SPX is also not required when using NetBIOS over TCP/IP, and it is -preferable NOT to install the IPX/SPX transport unless you are using Novell -servers. At the very least, it is recommended that you do not install -'NetBIOS over IPX/SPX'. - -[When installing Windows 95, you will find that NetBEUI and IPX/SPX are -installed as the default protocols. This is because they are the simplest -to manage: no Windows 95 user-configuration is required]. - - -NetBIOS applications (such as samba) offer their services (for example, -SMB file and print sharing) on a NetBIOS name. They must claim this name -on the network before doing so. The NetBIOS session service will then -accept connections on the application's behalf (on the NetBIOS name -claimed by the application). A NetBIOS session between the application -and the client can then commence. - -NetBIOS names consist of 15 characters plus a 'type' character. This is -similar, in concept, to an IP address and a TCP port number, respectively. -A NetBIOS-aware application on a host will offer different services under -different NetBIOS name types, just as a host will offer different TCP/IP -services on different port numbers. - -NetBIOS names must be claimed on a network, and must be defended. The use -of NetBIOS names is most suitable on a single subnet; a Local Area Network -or a Wide Area Network. - -NetBIOS names are either UNIQUE or GROUP. Only one application can claim a -UNIQUE NetBIOS name on a network. - -There are two kinds of NetBIOS Name resolution: Broadcast and Point-to-Point. - - -================= -BROADCAST NetBIOS -================= - -Clients can claim names, and therefore offer services on successfully claimed -names, on their broadcast-isolated subnet. One way to get NetBIOS services -(such as browsing: see ftp.microsoft.com/drg/developr/CIFS/browdiff.txt; and -SMB file/print sharing: see cifs4.txt) working on a LAN or WAN is to make -your routers forward all broadcast packets from TCP/IP ports 137, 138 and 139. - -This, however, is not recommended. If you have a large LAN or WAN, you will -find that some of your hosts spend 95 percent of their time dealing with -broadcast traffic. [If you have IPX/SPX on your LAN or WAN, you will find -that this is already happening: a packet analyzer will show, roughly -every twelve minutes, great swathes of broadcast traffic!]. - - -============ -NBNS NetBIOS -============ - -rfc1001.txt describes, amongst other things, the implementation and use -of, a 'NetBIOS Name Service'. NT/AS offers 'Windows Internet Name Service' -which is fully rfc1001/2 compliant, but has had to take specific action -with certain NetBIOS names in order to make it useful. (for example, it -deals with the registration of <1c> <1d> <1e> names all in different ways. -I recommend the reading of the Microsoft WINS Server Help files for full -details). - -Samba also offers WINS server capabilities. Samba does not interact -with NT/AS (WINS replication), so if you have a mixed NT server and -Samba server environment, it is recommended that you use the NT server's -WINS capabilities, instead of samba's WINS server capabilities. - -The use of a WINS server cuts down on broadcast network traffic for -NetBIOS name resolution. It has the effect of pulling all the broadcast -isolated subnets together into a single NetBIOS scope, across your LAN -or WAN, while avoiding the use of TCP/IP broadcast packets. - -When you have a WINS server on your LAN, WINS clients will be able to -contact the WINS server to resolve NetBIOS names. Note that only those -WINS clients that have registered with the same WINS server will be -visible. The WINS server _can_ have static NetBIOS entries added to its -database (usually for security reasons you might want to consider putting -your domain controllers or other important servers as static entries, -but you should not rely on this as your sole means of security), but for -the most part, NetBIOS names are registered dynamically. - -[It is important to mention that samba's browsing capabilities (as a WINS -client) must have access to a WINS server. if you are using samba also -as a WINS server, then it will have a direct short-cut into the WINS -database. - -This provides some confusion for lots of people, and is worth mentioning -here: a Browse Server is NOT a WINS Server, even if these services are -implemented in the same application. A Browse Server _needs_ a WINS server -because a Browse Server is a WINS client, which is _not_ the same thing]. - -Clients can claim names, and therefore offer services on successfully claimed -names, on their broadcast-isolated subnet. One way to get NetBIOS services -(such as browsing: see ftp.microsoft.com/drg/developr/CIFS/browdiff.txt; and -SMB file/print sharing: see cifs6.txt) working on a LAN or WAN is to make -your routers forward all broadcast packets from TCP/IP ports 137, 138 and 139. -You will find, however, if you do this on a large LAN or a WAN, that your -network is completely swamped by NetBIOS and browsing packets, which is why -WINS was developed to minimise the necessity of broadcast traffic. - -WINS Clients therefore claim names from the WINS server. If the WINS -server allows them to register a name, the client's NetBIOS session service -can then offer services on this name. Other WINS clients will then -contact the WINS server to resolve a NetBIOS name. - - -======================= -Samba WINS Capabilities -======================= - -To configure samba as a WINS server, you must add "wins support = yes" to -the [global] section of your smb.conf file. This will enable WINS server -capabilities in nmbd. - -To configure samba as a WINS client, you must add "wins server = x.x.x.x" -to the [global] section of your smb.conf file, where x.x.x.x is the TCP/IP -address of your WINS server. The browsing capabilities in nmbd will then -register (and resolve) WAN-wide NetBIOS names with this WINS server. - -Note that if samba has "wins support = yes", then the browsing capabilities -will _not_ use the "wins server" option to resolve NetBIOS names: it will -go directly to the internal WINS database for NetBIOS name resolution. It -is therefore invalid to have both "wins support = yes" and -"wins server = x.x.x.x". Note, in particular, that if you configure the -"wins server" parameter to be the ip address of your samba server itself -(as might one intuitively think), that you will run into difficulties. -Do not use both parameters! - - diff --git a/docs/textdocs/Printing.txt b/docs/textdocs/Printing.txt deleted file mode 100644 index 2c50e5f4fe6..00000000000 --- a/docs/textdocs/Printing.txt +++ /dev/null @@ -1,255 +0,0 @@ -Contributor: Unknown -Revised by: Patrick Powell -Date: August 11, 2000 -Status: Current - -Subject: Debugging Printing Problems -============================================================================= - -This is a short description of how to debug printing problems with -Samba. This describes how to debug problems with printing from a SMB -client to a Samba server, not the other way around. For the reverse -see the examples/printing directory. - -Please send enhancements to this file to samba@samba.org - -Ok, so you want to print to a Samba server from your PC. The first -thing you need to understand is that Samba does not actually do any -printing itself, it just acts as a middleman between your PC client -and your Unix printing subsystem. Samba receives the file from the PC -then passes the file to a external "print command". What print command -you use is up to you. - -The whole things is controlled using options in smb.conf. The most -relevant options (which you should look up in the smb.conf man page) -are: - [global] - print command - send a file to a spooler - lpq command - get spool queue status - lprm command - remove a job - [printers] - path = /var/spool/lpd/samba - -The following are nice to know about: - - queuepause command - stop a printer or print queue - queueresume command - start a printer or print queue - -Example: - print command = /usr/bin/lpr -r -P%p %s - lpq command = /usr/bin/lpq -P%p %s - lprm command = /usr/bin/lprm -P%p %j - queuepause command = /usr/sbin/lpc -P%p stop - queuepause command = /usr/sbin/lpc -P%p start - -Samba should set reasonable defaults for these depending on your -system type, but it isn't clairvoyant. It is not uncommon that you -have to tweak these for local conditions. The commands should -always have fully specified pathnames, as the smdb may not have -the correct PATH values. - -When you send a job to Samba to be printed, it will make a temporary -copy of it in the directory specified in the [printers] section. -and it should be periodically cleaned out. The lpr -r option -requests that the temporary copy be removed after printing; If -printing fails then you might find leftover files in this directory, -and it should be periodically cleaned out. Samba used the lpq -command to determine the "job number" assigned to your print job -by the spooler. - -The % are "macros" that get dynamically replaced with appropriate -values when they are used. The %s gets replaced with the name of the spool -file that Samba creates and the %p gets replaced with the name of the -printer. The %j gets replaced with the "job number" which comes from -the lpq output. - -DEBUGGING PRINTER PROBLEMS - -One way to debug printing problems is to start by replacing these -command with shell scripts that record the arguments and the contents -of the print file. A simple example of this kind of things might -be: - - print command = /tmp/saveprint %p %s - - #!/bin/saveprint - # we make sure that we are the right user - /usr/bin/id -p >/tmp/tmp.print - # we run the command and save the error messages - # replace the command with the one appropriate for your system - /usr/bin/lpr -r -P$1 $2 2>>&/tmp/tmp.print - -Then you print a file and try removing it. You may find that the -print queue needs to be stopped in order to see the queue status -and remove the job: - -h4: {42} % echo hi >/tmp/hi -h4: {43} % smbclient //localhost/lw4 -added interface ip=10.0.0.4 bcast=10.0.0.255 nmask=255.255.255.0 -Password: -Domain=[ASTART] OS=[Unix] Server=[Samba 2.0.7] -smb: \> print /tmp/hi -putting file /tmp/hi as hi-17534 (0.0 kb/s) (average 0.0 kb/s) -smb: \> queue -1049 3 hi-17534 -smb: \> cancel 1049 -Error cancelling job 1049 : code 0 -smb: \> cancel 1049 -Job 1049 cancelled -smb: \> queue -smb: \> exit - -The 'code 0' indicates that the job was removed. The comment -by the smbclient is a bit misleading on this. -You can observe the command output and then and look at the -/tmp/tmp.print file to see what the results are. You can quickly -find out if the problem is with your printing system. Often people -have problems with their /etc/printcap file or permissions on -various print queues. - -WHAT PRINTERS DO I HAVE - -You can use the 'testprns' program to check to see if the printer -name you are using is recognized by Samba. For example, you can -use: - - testprns printer /etc/printcap - -Samba can get its printcap information from a file or from a program. -You can try the following to see the format of the extracted -information: - - testprns -a printer /etc/printcap - - testprns -a printer '|/bin/cat printcap' - -SETTING UP PRINTCAP AND PRINT SERVERS - -You may need to set up some printcaps for your Samba system to use. -It is strongly recommended that you use the facilities provided by -the print spooler to set up queues and printcap information. - -Samba requires either a printcap or program to deliver printcap -information. This printcap information has the format: - - name|alias1|alias2...:option=value:... - -For almost all printing systems, the printer 'name' must be composed -only of alphanumeric or underscore '_' characters. Some systems also -allow hyphens ('-') as well. An alias is an alternative name for the -printer, and an alias with a space in it is used as a 'comment' -about the printer. The printcap format optionally uses a \ at the end of lines -to extend the printcap to multiple lines. - - -Here are some examples of printcap files: - -pr just printer name -pr|alias printer name and alias -pr|My Printer printer name, alias used as comment -pr:sh:\ Same as pr:sh:cm= testing - :cm= \ - testing -pr:sh Same as pr:sh:cm= testing - :cm= testing - -Samba reads the printcap information when first started. If you make -changes in the printcap information, then you must do the following: - -a) make sure that the print spooler is aware of these changes. - The LPRng system uses the 'lpc reread' command to do this. - -b) make sure that the spool queues, etc., exist and have the - correct permissions. The LPRng system uses the 'checkpc -f' - command to do this. - -c) You now should send a SIGHUP signal to the smbd server to have - it reread the printcap information. - -JOB SENT, NO OUTPUT - -This is the most frustrating part of printing. You may have sent the -job, verified that the job was forwarded, set up a wrapper around -the command to send the file, but there was no output from the printer. - -First, check to make sure that the job REALLY is getting to the -right print queue. If you are using a BSD or LPRng print spooler, -you can temporarily stop the printing of jobs. Jobs can still be -submitted, but they will not be printed. Use: - - lpc -Pprinter stop - -Now submit a print job and then use 'lpq -Pprinter' to see if the -job is in the print queue. If it is not in the print queue then -you will have to find out why it is not being accepted for printing. - -Next, you may want to check to see what the format of the job really -was. With the assistance of the system administrator you can view -the submitted jobs files. You may be surprised to find that these -are not in what you would expect to call a printable format. -You can use the UNIX 'file' utitily to determine what the job -format actually is: - - cd /var/spool/lpd/printer # spool directory of print jobs - ls # find job files - file dfA001myhost - -You should make sure that your printer supports this format OR that -your system administrator has installed a 'print filter' that will -convert the file to a format appropriate for your printer. - -JOB SENT, STRANGE OUTPUT - -Once you have the job printing, you can then start worrying about -making it print nicely. - -The most common problem is extra pages of output: banner pages -OR blank pages at the end. - -If you are getting banner pages, check and make sure that the -printcap option or printer option is configured for no banners. -If you have a printcap, this is the :sh (suppress header or banner -page) option. You should have the following in your printer. - - printer: ... :sh - -If you have this option and are still getting banner pages, there -is a strong chance that your printer is generating them for you -automatically. You should make sure that banner printing is disabled -for the printer. This usually requires using the printer setup software -or procedures supplied by the printer manufacturer. - -If you get an extra page of output, this could be due to problems -with your job format, or if you are generating PostScript jobs, -incorrect setting on your printer driver on the MicroSoft client. -For example, under Win95 there is a option: - - Printers|Printer Name|(Right Click)Properties|Postscript|Advanced| - -that allows you to choose if a Ctrl-D is appended to all jobs. -This is a very bad thing to do, as most spooling systems will -automatically add a ^D to the end of the job if it is detected as -PostScript. The multiple ^D may cause an additional page of output. - -RAW POSTSCRIPT PRINTED - -This is a problem that is usually caused by either the print spooling -system putting information at the start of the print job that makes -the printer think the job is a text file, or your printer simply -does not support PostScript. You may need to enable 'Automatic -Format Detection' on your printer. - -ADVANCED PRINTING - -Note that you can do some pretty magic things by using your -imagination with the "print command" option and some shell scripts. -Doing print accounting is easy by passing the %U option to a print -command shell script. You could even make the print command detect -the type of output and its size and send it to an appropriate -printer. - -DEBUGGING - -If the above debug tips don't help, then maybe you need to bring in -the bug guns, system tracing. See Tracing.txt in this directory. ------------------------------------------------------------------------------ diff --git a/docs/textdocs/README.sambatar b/docs/textdocs/README.sambatar deleted file mode 100644 index af7250c2a49..00000000000 --- a/docs/textdocs/README.sambatar +++ /dev/null @@ -1,23 +0,0 @@ -Contributor/s: Martin.Kraemer - and Ricky Poulten (ricky@logcam.co.uk) -Date: Unknown - circa 1994 -Status: Obsoleted - smbtar has been a stable part of Samba - since samba-1.9.13 - -Subject: Sambatar (now smbtar) -============================================================================= - -This is version 1.4 of my small extension to samba that allows PC shares -to be backed up directly to a UNIX tape. It only has been tested under -Solaris 2.3, Linux 1.1.59 and DG/UX 5.4r3.10 with version 1.9.13 of samba. - -See the file INSTALL for installation instructions, and -the man page and NOTES file for some basic usage. Please let me know if you -have any problems getting it to work under your flavour of Unix. - -This is only (yet another) intermediate version of sambatar. -This version also comes with an extra gift, zen.bas, written in -microsoft qbasic by a colleague. It is (apparently) based on a 70s -British sci-fi series known as Blake's 7. If you have any questions -about this program, or any suggestions (e.g. what about servillan.bas -?), feel free to mail the author (of zen.bas) greenm@lilhd.logica.com. diff --git a/docs/textdocs/SCO.txt b/docs/textdocs/SCO.txt deleted file mode 100644 index 7c01aa57c6c..00000000000 --- a/docs/textdocs/SCO.txt +++ /dev/null @@ -1,19 +0,0 @@ -Contributor: Geza Makay -Date: Unknown -Status: Obsolete - Dates to SCO Unix v3.2.4 approx. - -Subject: TCP/IP Bug in SCO Unix -============================================================================ - -There is an annoying TCPIP bug in SCO Unix. This causes corruption when -transferring files with Samba. - -Geza Makay (makayg@math.u-szeged.hu) sends this information: - -The patch you need is UOD385 Connection Drivers SLS. It is available from -SCO (ftp.sco.com, directory SLS, files uod385a.Z and uod385a.ltr.Z). - -You do not need anything else but the above patch. It installs in seconds, -and corrected the Excel problem. We also had some other minor problems (not -only with Samba) that disappeared by installing this patch. - diff --git a/docs/textdocs/SMBTAR.notes b/docs/textdocs/SMBTAR.notes deleted file mode 100644 index 679d776f56c..00000000000 --- a/docs/textdocs/SMBTAR.notes +++ /dev/null @@ -1,46 +0,0 @@ -Contributor: Unknown -Date: 1994 -Status: Mostly Current - refer man page - -Subject: Smbtar -============================================================================ - -Intro ------ - -sambatar is just a small extension to the smbclient program distributed with -samba. A basic front end shell script, smbtar, is provided as an interface -to the smbclient extensions. - -Extensions ----------- - -This release adds the following extensions to smbclient, - -tar [c|x] filename - creates or restores from a tar file. The tar file may be a tape -or a unix tar file. tar's behaviour is modified with the newer and tarmode -commands. - -tarmode [full|inc|reset|noreset] - With no arguments, tarmode prints the current tar mode (by default full, -noreset). In full mode, every file is backed up during a tar command. -In incremental, only files with the dos archive bit set are backed up. -The archive bit is reset if in reset mode, or left untouched if in noreset. -In reset mode, the share has to be writable, which makes sambatar even -less secure. An alternative might be to use tarmode inc noreset which -would implement an "expanding incremental" backup (which some may prefer -anyway). - -setmode filename - This is a "freebie" - nothing really to do with sambatar. This -is a crude attrib like command (only the other way around). Setmode string -is a combination of +-rhsa. So for example -rh would reset the read only -bit on filename. - -newer filename - This is in fact part of the 1.9.13 samba distribution, but comes -into its own with sambatar. This causes tar (or get, mget, etc) to -only copy files newer than the specified file name. Could be used -against the previous nights (or whatever) log file to implement incremental -backups. diff --git a/docs/textdocs/Solaris-Winbind-HOWTO.txt b/docs/textdocs/Solaris-Winbind-HOWTO.txt deleted file mode 100644 index a81bacf4864..00000000000 --- a/docs/textdocs/Solaris-Winbind-HOWTO.txt +++ /dev/null @@ -1,361 +0,0 @@ -!== -!== Solaris-Winbind-HOWTO.txt -!== -Contributors: Naag Mummaneni -Updated: May 2, 2002 -Status: Current - -Subject: Installing and Configuring Winbind on Solaris -============================================================================= - -Installation and Configuration of Winbind on Solaris. ------------------------------------------------------ - -This HOWTO describes how to get winbind services up and running to control -access and authenticate users on your Solaris box using the winbind services -which come with SAMBA 2.2.x latest CVS Checkout.Make sure you are using the -latest Samba 2.2.x cvs checkout as other versions come with a lots of bugs -regarding winbind .And even the Latest Samba Stable Release is also not an -exception to this. - -Introduction ------------- - -This HOWTO describes the procedures used to get winbind up and running on a -Solaris system. Winbind is capable of providing access and authentication -control for Windows Domain users through an NT or Win2K PDC for 'regular' -services, such as telnet and ftp, as well for SAMBA services. - -Why should I to this? - -This allows the SAMBA administrator to rely on the authentication mechanisms -on the NT/Win2K PDC for the authentication of domain members. NT/Win2K users -no longer need to have separate accounts on the SAMBA server. - -Who should be reading this document? - -This HOWTO is designed for system administrators. If you are implementing -SAMBA on a file server and wish to (fairly easily) integrate existing -NT/Win2K users from your PDC onto the SAMBA server, this HOWTO is for you. - -Requirements ------------- - -If you have a samba configuration file that you are currently using... BACK -IT UP! If your system already uses PAM, back up the /etc/pam.conf file ! If -you haven't already made a boot disk, MAKEONE NOW! Messing with the pam -configuration file can make it nearly impossible to log in to yourmachine. -That's why you want to be able to boot back into your machine in single user -mode and restore your /etc/pam.conf back to the original state they were in -if you get frustrated with the way things are going. ;-) Please refer to the -main SAMBA web page or, better yet, your closest SAMBA mirror site for -instructions on downloading the source code of Samba 2.2.x from the SAMBA -CVS repository. To allow Domain users the ability to access SAMBA shares and -files, as well as potentially other services provided by your SAMBA machine, -PAM (pluggable authentication modules) must be setup properly on your -machine. In order to compile the winbind modules, you should have at least -the pam libraries resident on your system. Solaris 7/8 has its pam modules -coming with the distribution itself. - -Testing Things Out ------------------- - -Before starting, it is probably best to kill off all the SAMBA related -daemons running on your server. Kill off all smbd, nmbd, and winbindd -processes that may be running. - - -Configure and compile SAMBA ---------------------------- - -The configuration and compilation of SAMBA is pretty straightforward. The -first three steps may not be necessary depending upon whether or not you -have previously built the Samba binaries. - -root# autoconf -root# make clean -root# rm config.cache -root# ./configure --with-winbind --with-pam -root# make -root# make install - -This will, by default, install SAMBA in /usr/local/samba. See the main SAMBA -documentation if you want to install SAMBA somewhere else. It will also -build the winbindd executable and libraries. - -Configure nsswitch.conf and the winbind libraries -------------------------------------------------- - -The libraries needed to run the winbindd daemon through nsswitch need to be -copied to their proper locations, so - -root# cp ../samba/source/nsswitch/libnss_winbind.so /usr/lib - -I also found it necessary to make the following symbolic links: - -root# ln -s /usr/lib/libnss_winbind.so /usr/lib/libnss_winbind.so.1 -root# ln -s /usr/lib/libnss_winbind.so /usr/lib/libnss_winbind.so.2 -root# ln -s /usr/lib/libnss_winbind.so /usr/lib/nss_winbind.so.1 -root# ln -s /usr/lib/libnss_winbind.so /usr/lib/nss_winbind.so.2 - -Now, as root you need to edit /etc/nsswitch.conf to allow user and group -entries to be visible from the winbindd daemon. My /etc/nsswitch.conf file -look like this after editing: - - passwd: files winbind - group: files winbind - - -Configure smb.conf ------------------- - -Several parameters are needed in the smb.conf file to control the behavior -of winbindd. Configure smb.conf These are described in more detail in the -winbindd(8) man page. My smb.conf file was modified to include the following -entries in the [global] section: - -[global] - <...> - # The previous documentation says to - # as the "winbind seperator " directive also but - # it is no longer supported. - - # use uids from 10000 to 20000 for domain users - winbind uid = 10000-20000 - - # use gids from 10000 to 20000 for domain groups - winbind gid = 10000-20000 - - # allow enumeration of winbind users and groups - winbind enum users = yes - winbind enum groups = yes - - # give winbind users a real shell (only needed if - # they have telnet access) - template homedir = /home/winnt/%D/%U - template shell = /bin/bash - - -Join the SAMBA server to the PDC domain ---------------------------------------- - -Enter the following command to make the SAMBA server join the PDC domain, -where DOMAIN is the name of your Windows domain and Administrator is a -domain user who has administrative privileges in the domain. - -root# /usr/local/samba/bin/smbpasswd -j DOMAIN -r PDC -U Administrator - -The proper response to the command should be: "Joined the domain DOMAIN" -where DOMAIN is your DOMAIN name. - -Start up the winbindd daemon and test it! - -Eventually, you will want to modify your smb startup script to automatically -invoke the winbindd daemon when the other parts of SAMBA start, but it is -possible to test out just the winbind portion first. To start up winbind -services, enter the following command as root: - -root# /usr/local/samba/bin/winbindd - -I'm always paranoid and like to make sure the daemon is really running... - -root# ps -ae | grep winbindd - -This command should produce output like this, if the daemon is running - - 3025 ? 00:00:00 winbindd - -Now... for the real test, try to get some information about the users on -your PDC - -root# /usr/local/samba/bin/wbinfo -u - -This should echo back a list of users on your Windows users on your PDC. For -example, I get the following response: - -CEO\Administrator -CEO\burdell -CEO\Guest -CEO\jt-ad -CEO\krbtgt -CEO\TsInternetUser - -root# /usr/local/samba/bin/wbinfo -g - -CEO\Domain Admins -CEO\Domain Users -CEO\Domain Guests -CEO\Domain Computers -CEO\Domain Controllers -CEO\Cert Publishers -CEO\Schema Admins -CEO\Enterprise Admins -CEO\Group Policy Creator Owners - -The function 'getent' can now be used to get unified lists of both local and -PDC users and groups. Try the following command: - -root# getent passwd - -You should get a list that looks like your /etc/passwd list followed by the domain users with their new -uids, gids, home directories and default shells. - -The same thing can be done for groups with the command - -root# getent group - -Fix the /etc/rc.d/init.d/samba.server startup files The winbindd daemon -needs to start up after the smbd and nmbd daemons are running. To accomplish -this task, you need to modify the /etc/init.d/samba.server script to add -commands to invoke this daemon in the proper sequence. My -/etc/init.d/samba.server file starts up smbd, nmbd, and winbindd from the -/usr/local/samba/bin directory directly. - -## -## samba.server -## - -if [ ! -d /usr/bin ] -then # /usr not mounted - exit -fi - -killproc() { # kill the named process(es) - pid=`/usr/bin/ps -e | - /usr/bin/grep -w $1 | - /usr/bin/sed -e 's/^ *//' -e 's/ .*//'` - [ "$pid" != "" ] && kill $pid -} - -# Start/stop processes required for samba server - -case "$1" in - -'start') -# -# Edit these lines to suit your installation (paths, workgroup, host) -# -echo Starting SMBD - /usr/local/samba/bin/smbd -D -s \ - /usr/local/samba/smb.conf - -echo Starting NMBD - /usr/local/samba/bin/nmbd -D -l \ - /usr/local/samba/var/log -s /usr/local/samba/smb.conf - -echo Starting Winbind Daemon - /usr/local/samba/bin/winbindd - ;; - -'stop') - killproc nmbd - killproc smbd - killproc winbindd - ;; - -*) - echo "Usage: /etc/init.d/samba.server { start | stop }" - ;; -esac - -If you restart the smbd, nmbd, and winbindd daemons at this point, you -should be able to connect to the samba server as a domain member just as if -you were a local user. - - -Configure Winbind and PAM -------------------------- - -If you have made it this far, you know that winbindd and samba are working -together. If you want to use winbind to provide authentication for other -services, keep reading. The pam configuration file need to be altered in -this step. (Did you remember to make backups of your original /etc/pam.conf -file? If not, do it now.) You will need a pam module to use winbindd with -these other services. This module will be compiled in the ../source/nsswitch -directory by default when we used ./configure --with-pam option. - -root# make nsswitch/pam_winbind.so - -from the ../source directory. The pam_winbind.so file should be copied to -the location of your other pam security modules. On my Solaris 8, this was -the /usr/lib/security directory. - -root# cp ../samba/source/nsswitch/pam_winbind.so /usr/lib/security - -The /etc/pam.conf need to be changed. I changed this file so that my Domain -users can logon both locally as well as telnet.The following are the changes -that I made.You can customize the pam.conf file as per your requirements,but -be sure of those changes because in the worst case it will leave your system -nearly impossible to boot. - -# -#ident "@(#)pam.conf 1.14 99/09/16 SMI" -# -# Copyright (c) 1996-1999, Sun Microsystems, Inc. -# All Rights Reserved. -# -# PAM configuration -# -# Authentication management -# -login auth required /usr/lib/security/pam_winbind.so -login auth required /usr/lib/security/$ISA/pam_unix.so.1 try_first_pass -login auth required /usr/lib/security/$ISA/pam_dial_auth.so.1 try_first_pass -# -rlogin auth sufficient /usr/lib/security/pam_winbind.so -rlogin auth sufficient /usr/lib/security/$ISA/pam_rhosts_auth.so.1 -rlogin auth required /usr/lib/security/$ISA/pam_unix.so.1 try_first_pass -# -dtlogin auth sufficient /usr/lib/security/pam_winbind.so -dtlogin auth required /usr/lib/security/$ISA/pam_unix.so.1 try_first_pass -# -rsh auth required /usr/lib/security/$ISA/pam_rhosts_auth.so.1 -other auth sufficient /usr/lib/security/pam_winbind.so -other auth required /usr/lib/security/$ISA/pam_unix.so.1 try_first_pass -# -# Account management -# -login account sufficient /usr/lib/security/pam_winbind.so -login account requisite /usr/lib/security/$ISA/pam_roles.so.1 -login account required /usr/lib/security/$ISA/pam_unix.so.1 -# -dtlogin account sufficient /usr/lib/security/pam_winbind.so -dtlogin account requisite /usr/lib/security/$ISA/pam_roles.so.1 -dtlogin account required /usr/lib/security/$ISA/pam_unix.so.1 -# -other account sufficient /usr/lib/security/pam_winbind.so -other account requisite /usr/lib/security/$ISA/pam_roles.so.1 -other account required /usr/lib/security/$ISA/pam_unix.so.1 -# -# Session management -# -other session required /usr/lib/security/$ISA/pam_unix.so.1 -# -# Password management -# -#other password sufficient /usr/lib/security/pam_winbind.so -other password required /usr/lib/security/$ISA/pam_unix.so.1 -dtsession auth required /usr/lib/security/$ISA/pam_unix.so.1 -# -# Support for Kerberos V5 authentication (uncomment to use Kerberos) -# -#rlogin auth optional /usr/lib/security/$ISA/pam_krb5.so.1 try_first_pass -#login auth optional /usr/lib/security/$ISA/pam_krb5.so.1 try_first_pass -#dtlogin auth optional /usr/lib/security/$ISA/pam_krb5.so.1 try_first_pass -#other auth optional /usr/lib/security/$ISA/pam_krb5.so.1 try_first_pass -#dtlogin account optional /usr/lib/security/$ISA/pam_krb5.so.1 -#other account optional /usr/lib/security/$ISA/pam_krb5.so.1 -#other session optional /usr/lib/security/$ISA/pam_krb5.so.1 -#other password optional /usr/lib/security/$ISA/pam_krb5.so.1 try_first_pass - -I also added a try_first_pass line after the winbind.so line to get rid of -annoying double prompts for passwords. - -Now restart your Samba & try connecting through your application that you -configured in the pam.conf. - - - -!== -!== end of Solaris-Winbind-HOWTO.txt -!== diff --git a/docs/textdocs/Speed.txt b/docs/textdocs/Speed.txt deleted file mode 100644 index b82db8f8f4d..00000000000 --- a/docs/textdocs/Speed.txt +++ /dev/null @@ -1,338 +0,0 @@ - -Subject: Samba performance issues -============================================================================ - -This file tries to outline the ways to improve the speed of a Samba server. - -COMPARISONS ------------ - -The Samba server uses TCP to talk to the client. Thus if you are -trying to see if it performs well you should really compare it to -programs that use the same protocol. The most readily available -programs for file transfer that use TCP are ftp or another TCP based -SMB server. - -If you want to test against something like a NT or WfWg server then -you will have to disable all but TCP on either the client or -server. Otherwise you may well be using a totally different protocol -(such as Netbeui) and comparisons may not be valid. - -Generally you should find that Samba performs similarly to ftp at raw -transfer speed. It should perform quite a bit faster than NFS, -although this very much depends on your system. - -Several people have done comparisons between Samba and Novell, NFS or -WinNT. In some cases Samba performed the best, in others the worst. I -suspect the biggest factor is not Samba vs some other system but the -hardware and drivers used on the various systems. Given similar -hardware Samba should certainly be competitive in speed with other -systems. - - -OPLOCKS -------- - -Oplocks are the way that SMB clients get permission from a server to -locally cache file operations. If a server grants an oplock -(opportunistic lock) then the client is free to assume that it is the -only one accessing the file and it will agressively cache file -data. With some oplock types the client may even cache file open/close -operations. This can give enormous performance benefits. - -With the release of Samba 1.9.18 we now correctly support opportunistic -locks. This is turned on by default, and can be turned off on a share- -by-share basis by setting the parameter : - -oplocks = False - -We recommend that you leave oplocks on however, as current benchmark -tests with NetBench seem to give approximately a 30% improvement in -speed with them on. This is on average however, and the actual -improvement seen can be orders of magnitude greater, depending on -what the client redirector is doing. - -Previous to Samba 1.9.18 there was a 'fake oplocks' option. This -option has been left in the code for backwards compatibility reasons -but it's use is now deprecated. A short summary of what the old -code did follows. - -LEVEL2 OPLOCKS --------------- - -With Samba 2.0.5 a new capability - level2 (read only) oplocks is -supported (although the option is off by default - see the smb.conf -man page for details). Turning on level2 oplocks (on a share-by-share basis) -by setting the parameter : - -level2 oplocks = true - -should speed concurrent access to files that are not commonly written -to, such as application serving shares (ie. shares that contain common -.EXE files - such as a Microsoft Office share) as it allows clients to -read-ahread cache copies of these files. - -Old 'fake oplocks' option - deprecated. ---------------------------------------- - -Samba can also fake oplocks, by granting a oplock whenever a client -asks for one. This is controlled using the smb.conf option "fake -oplocks". If you set "fake oplocks = yes" then you are telling the -client that it may agressively cache the file data for all opens. - -Enabling 'fake oplocks' on all read-only shares or shares that you know -will only be accessed from one client at a time you will see a big -performance improvement on many operations. If you enable this option -on shares where multiple clients may be accessing the files read-write -at the same time you can get data corruption. - -SOCKET OPTIONS --------------- - -There are a number of socket options that can greatly affect the -performance of a TCP based server like Samba. - -The socket options that Samba uses are settable both on the command -line with the -O option, or in the smb.conf file. - -The "socket options" section of the smb.conf manual page describes how -to set these and gives recommendations. - -Getting the socket options right can make a big difference to your -performance, but getting them wrong can degrade it by just as -much. The correct settings are very dependent on your local network. - -The socket option TCP_NODELAY is the one that seems to make the -biggest single difference for most networks. Many people report that -adding "socket options = TCP_NODELAY" doubles the read performance of -a Samba drive. The best explanation I have seen for this is that the -Microsoft TCP/IP stack is slow in sending tcp ACKs. - - -READ SIZE ---------- - -The option "read size" affects the overlap of disk reads/writes with -network reads/writes. If the amount of data being transferred in -several of the SMB commands (currently SMBwrite, SMBwriteX and -SMBreadbraw) is larger than this value then the server begins writing -the data before it has received the whole packet from the network, or -in the case of SMBreadbraw, it begins writing to the network before -all the data has been read from disk. - -This overlapping works best when the speeds of disk and network access -are similar, having very little effect when the speed of one is much -greater than the other. - -The default value is 16384, but very little experimentation has been -done yet to determine the optimal value, and it is likely that the best -value will vary greatly between systems anyway. A value over 65536 is -pointless and will cause you to allocate memory unnecessarily. - - -MAX XMIT --------- - -At startup the client and server negotiate a "maximum transmit" size, -which limits the size of nearly all SMB commands. You can set the -maximum size that Samba will negotiate using the "max xmit = " option -in smb.conf. Note that this is the maximum size of SMB request that -Samba will accept, but not the maximum size that the *client* will accept. -The client maximum receive size is sent to Samba by the client and Samba -honours this limit. - -It defaults to 65536 bytes (the maximum), but it is possible that some -clients may perform better with a smaller transmit unit. Trying values -of less than 2048 is likely to cause severe problems. - -In most cases the default is the best option. - - -LOCKING -------- - -By default Samba does not implement strict locking on each read/write -call (although it did in previous versions). If you enable strict -locking (using "strict locking = yes") then you may find that you -suffer a severe performance hit on some systems. - -The performance hit will probably be greater on NFS mounted -filesystems, but could be quite high even on local disks. - - -SHARE MODES ------------ - -Some people find that opening files is very slow. This is often -because of the "share modes" code needed to fully implement the dos -share modes stuff. You can disable this code using "share modes = -no". This will gain you a lot in opening and closing files but will -mean that (in some cases) the system won't force a second user of a -file to open the file read-only if the first has it open -read-write. For many applications that do their own locking this -doesn't matter, but for some it may. Most Windows applications -depend heavily on "share modes" working correctly and it is -recommended that the Samba share mode support be left at the -default of "on". - -The share mode code in Samba has been re-written in the 1.9.17 -release following tests with the Ziff-Davis NetBench PC Benchmarking -tool. It is now believed that Samba 1.9.17 implements share modes -similarly to Windows NT. - -NOTE: In the most recent versions of Samba there is an option to use -shared memory via mmap() to implement the share modes. This makes -things much faster. See the Makefile for how to enable this. - - -LOG LEVEL ---------- - -If you set the log level (also known as "debug level") higher than 2 -then you may suffer a large drop in performance. This is because the -server flushes the log file after each operation, which can be very -expensive. - - -WIDE LINKS ----------- - -The "wide links" option is now enabled by default, but if you disable -it (for better security) then you may suffer a performance hit in -resolving filenames. The performance loss is lessened if you have -"getwd cache = yes", which is now the default. - - -READ RAW --------- - -The "read raw" operation is designed to be an optimised, low-latency -file read operation. A server may choose to not support it, -however. and Samba makes support for "read raw" optional, with it -being enabled by default. - -In some cases clients don't handle "read raw" very well and actually -get lower performance using it than they get using the conventional -read operations. - -So you might like to try "read raw = no" and see what happens on your -network. It might lower, raise or not affect your performance. Only -testing can really tell. - - -WRITE RAW ---------- - -The "write raw" operation is designed to be an optimised, low-latency -file write operation. A server may choose to not support it, -however. and Samba makes support for "write raw" optional, with it -being enabled by default. - -Some machines may find "write raw" slower than normal write, in which -case you may wish to change this option. - -READ PREDICTION ---------------- - -Samba can do read prediction on some of the SMB commands. Read -prediction means that Samba reads some extra data on the last file it -read while waiting for the next SMB command to arrive. It can then -respond more quickly when the next read request arrives. - -This is disabled by default. You can enable it by using "read -prediction = yes". - -Note that read prediction is only used on files that were opened read -only. - -Read prediction should particularly help for those silly clients (such -as "Write" under NT) which do lots of very small reads on a file. - -Samba will not read ahead more data than the amount specified in the -"read size" option. It always reads ahead on 1k block boundaries. - - -MEMORY MAPPING --------------- - -Samba supports reading files via memory mapping them. One some -machines this can give a large boost to performance, on others it -makes not difference at all, and on some it may reduce performance. - -To enable you you have to recompile Samba with the -DUSE_MMAP option -on the FLAGS line of the Makefile. - -Note that memory mapping is only used on files opened read only, and -is not used by the "read raw" operation. Thus you may find memory -mapping is more effective if you disable "read raw" using "read raw = -no". - - -SLOW CLIENTS ------------- - -One person has reported that setting the protocol to COREPLUS rather -than LANMAN2 gave a dramatic speed improvement (from 10k/s to 150k/s). - -I suspect that his PC's (386sx16 based) were asking for more data than -they could chew. I suspect a similar speed could be had by setting -"read raw = no" and "max xmit = 2048", instead of changing the -protocol. Lowering the "read size" might also help. - - -SLOW LOGINS ------------ - -Slow logins are almost always due to the password checking time. Using -the lowest practical "password level" will improve things a lot. You -could also enable the "UFC crypt" option in the Makefile. - -CLIENT TUNING -------------- - -Often a speed problem can be traced to the client. The client (for -example Windows for Workgroups) can often be tuned for better TCP -performance. - -See your client docs for details. In particular, I have heard rumours -that the WfWg options TCPWINDOWSIZE and TCPSEGMENTSIZE can have a -large impact on performance. - -Also note that some people have found that setting DefaultRcvWindow in -the [MSTCP] section of the SYSTEM.INI file under WfWg to 3072 gives a -big improvement. I don't know why. - -My own experience wth DefaultRcvWindow is that I get much better -performance with a large value (16384 or larger). Other people have -reported that anything over 3072 slows things down enourmously. One -person even reported a speed drop of a factor of 30 when he went from -3072 to 8192. I don't know why. - -It probably depends a lot on your hardware, and the type of unix box -you have at the other end of the link. - - -MY RESULTS ----------- - -Some people want to see real numbers in a document like this, so here -they are. I have a 486sx33 client running WfWg 3.11 with the 3.11b -tcp/ip stack. It has a slow IDE drive and 20Mb of ram. It has a SMC -Elite-16 ISA bus ethernet card. The only WfWg tuning I've done is to -set DefaultRcvWindow in the [MSTCP] section of system.ini to 16384. My -server is a 486dx3-66 running Linux. It also has 20Mb of ram and a SMC -Elite-16 card. You can see my server config in the examples/tridge/ -subdirectory of the distribution. - -I get 490k/s on reading a 8Mb file with copy. -I get 441k/s writing the same file to the samba server. - -Of course, there's a lot more to benchmarks than 2 raw throughput -figures, but it gives you a ballpark figure. - -I've also tested Win95 and WinNT, and found WinNT gave me the best -speed as a samba client. The fastest client of all (for me) is -smbclient running on another linux box. Maybe I'll add those results -here someday ... - - diff --git a/docs/textdocs/Speed2.txt b/docs/textdocs/Speed2.txt deleted file mode 100644 index a8c3e7381fd..00000000000 --- a/docs/textdocs/Speed2.txt +++ /dev/null @@ -1,57 +0,0 @@ -Contributor: Paul Cochrane -Organization: Dundee Limb Fitting Centre -Date: Fri, 10 Apr 1998 -Subject: Samba SPEED.TXT comment -============================================================================= - -This might be relevant to Client Tuning. I have been trying various methods -of getting win95 to talk to Samba quicker. The results I have come up with -are: - -1. Install the W2setup.exe file from www.microsoft.com. This is an -update for the winsock stack and utilities which improve performance. - -2. Configure the win95 TCPIP registry settings to give better -perfomance. I use a program called MTUSPEED.exe which I got off the -net. There are various other utilities of this type freely available. -The setting which give the best performance for me are: - -(a) MaxMTU Remove -(b) RWIN Remove -(c) MTUAutoDiscover Disable -(d) MTUBlackHoleDetect Disable -(e) Time To Live Enabled -(f) Time To Live - HOPS 32 -(g) NDI Cache Size 0 - -3. I tried virtually all of the items mentioned in the document and -the only one which made a difference to me was the socket options. It -turned out I was better off without any!!!!! - -In terms of overall speed of transfer, between various win95 clients -and a DX2-66 20MB server with a crappy NE2000 compatible and old IDE -drive (Kernel 2.0.30). The transfer rate was reasonable for 10 baseT. - -The figures are: Put Get -P166 client 3Com card: 420-440kB/s 500-520kB/s -P100 client 3Com card: 390-410kB/s 490-510kB/s -DX4-75 client NE2000: 370-380kB/s 330-350kB/s - -I based these test on transfer two files a 4.5MB text file and a 15MB -textfile. The results arn't bad considering the hardware Samba is -running on. It's a crap machine!!!! - -The updates mentioned in 1 and 2 brought up the transfer rates from -just over 100kB/s in some clients. - -A new client is a P333 connected via a 100MB/s card and hub. The -transfer rates from this were good: 450-500kB/s on put and 600+kB/s -on get. - -Looking at standard FTP throughput, Samba is a bit slower (100kB/s -upwards). I suppose there is more going on in the samba protocol, but -if it could get up to the rate of FTP the perfomance would be quite -staggering. - -Paul Cochrane - diff --git a/docs/textdocs/Win95.txt b/docs/textdocs/Win95.txt deleted file mode 100644 index 69330c512d4..00000000000 --- a/docs/textdocs/Win95.txt +++ /dev/null @@ -1,74 +0,0 @@ -Copyright (C) 1997 - Samba-Team -Contributed Date: August 20, 1997 -Last Update: August 20, 1997 - -Subject: Windows 95 and Samba Interoperability -=============================================================================== - -Password Handling: ------------------- -Microsoft periodically release updates to all their operating systems. Some of -these are welcomed while others cause us to change the way we do things. Few -people like change, particularly if the change is unexpected. The best advice -always is to read the documentation provided BEFORE applying an update. - -One of the recent Win95 updates (VRDRUPD.EXE) disables plain text (also called -clear text) password authentication. The effects of this updates are desirable -where MS Windows NT is providing the password authentication service. This -update is most undesirable where Samba must provide the authentication service -unless Samba has been specifically configured to use encrypted passwords _AND_ -has been linked with the libdes library. - -If the above conditions have not been complied with, and you are using Samba, -then Windows 95 clients will NOT be able to authenticate to a Samba server. - -To re-enable plain text password capabilities AFTER applying this update -you must create a new value in the Windows 95 registry. - -Either foillow the following procedure or just double click on the -file Win95_PlainPassword.reg for an easier way to do this. - -Procedure: -1) Launch the Registry Editor as follows: - Click on: /Start/Run - Type "regedit" and press enter. - -2) Double click on: HKEY_LOCAL_MACHINE - -3) Locate the following Key: - /HKEY_LOCAL_MACHINE/System/CurrentControlSet/Services/VxD/VNETSUP - -4) From the menu bar select Edit/New/DWORD Value - -5) Rename the entry from "New Value #1" to: - EnablePlainTextPassword - -6) Press Enter, then double click on the new entry. - A dialog box will pop up and enable you to set a value. - You must set this value to 1. - -------------------------------------------------------------------------------- - -Windows 95 Updates: -------------------- -When using Windows 95 OEM SR2 the following updates are recommended where Samba -is being used. Please NOTE that the above change will affect you once these -updates have been installed. - -There are more updates than the ones mentioned here. You are referred to the -Microsoft Web site for all currently available updates to your specific version -of Windows 95. - -Kernel Update: KRNLUPD.EXE -Ping Fix: PINGUPD.EXE -RPC Update: RPCRTUPD.EXE -TCP/IP Update: VIPUPD.EXE -Redirector Update: VRDRUPD.EXE - -Also, if using MS OutLook it is desirable to install the OLEUPD.EXE fix. This -fix may stop your machine from hanging for an extended period when exiting -OutLook and you may also notice a significant speedup when accessing network -neighborhood services. - -------------------------------------------------------------------------------- -The above password information was provided by: Jochen Huppertz diff --git a/docs/textdocs/WinNT.txt b/docs/textdocs/WinNT.txt deleted file mode 100644 index 5c72fb08aa7..00000000000 --- a/docs/textdocs/WinNT.txt +++ /dev/null @@ -1,104 +0,0 @@ -Contributors: Various - Password Section - Copyright (C) 1997 - John H Terpstra - Printing Section - Copyright (C) 1997 - Matthew Harrell - Priting Info - Copyright (C) 1997 - Frank Varnavas -Updated: October 16, 1997 -Status: Current - -Subject: Samba and Windows NT Password Handling -============================================================================= - -There are some particular issues with Samba and Windows NT. - -Passwords: -========== -One of the most annoying problems with WinNT is that NT refuses to -connect to a server that is in user level security mode and that -doesn't support password encryption unless it first prompts the user -for a password. - -This means even if you have the same password on the NT box and the -Samba server you will get prompted for a password. Entering the -correct password will get you connected only if Windows NT can -communicate with Samba using a compatible mode of password security. - -All versions of Windows NT prior to 4.0 Service Pack 3 could negotiate -plain text (clear text) passwords. Windows NT 4.0 Service Pack 3 changed -this default behaviour so it now will only handle encrypted passwords. -The following registry entry change will re-enable clear text password -handling: - -Run regedt32.exe and locate the hive key entry: -HKEY_LOCAL_MACHINE\system\CurrentControlSet\Services\Rdr\Parameters\ - -Add the following value: - EnablePlainTextPassword:REG_DWORD=1 - -Alternatively, use the NT4_PlainPassword.reg file in this directory (either -by double clicking on it, or run regedt32.exe and select "Import Registry -File" from the "Registry" Menu). - -The other major ramification of this feature of NT is that it can't -browse a user level non-encrypted server unless it already has a -connection open. This is because there is no spot for a password -prompt in the browser window. It works fine if you already have a -drive mounted (for example, one auto mounted on startup). -===================================================================== - -Printing: -========= -When you mount a printer using the print manager in NT you may find -the following info from Matthew Harrell -useful: - ------------- - I noticed in your change-log you noted that some people were -still unable to use print manager under NT. If this is the same problem -that I encountered, it's caused by the length of time it takes NT to -determine if the printer is ready. - -The problem occurs when you double-click on a printer to connect it to -the NT machine. Because it's unable to determine if the printer is ready -in the short span of time it has, it assumes it isn't and gives some -strange error about not having enough resources (I forget what the error -is). A solution to this that seems to work fine for us is to click -once on the printer, look at the bottom of the window and wait until -it says it's ready, then clilck on "OK". - -By the way, this problem probably occurs in our group because the -Samba server doesn't actually have the printers - it queues them to -remote printers either on other machines or using their own network -cards. Because of this "middle layer", it takes an extra amount of -time for the NT machine to get verification that the printer queue -actually exists. - -I hope this helped in some way... - -===================================================================== -Printing Info: --------------- - -From: Frank Varnavas -Subject: RE: Samba as a print server - -When an NT client attempts to connect to a printer on a non-NT print -server the attempt is failed with an error, something like: - - "You have insufficient access to your computer to perform the - operation because a driver needs to be installed" - -This is because domain users must have 'Power User' status on the -desktop to connect to printers on a non-NT print server. - -This error occurs regardless of whether the driver in question is -already installed or not. What it really means is that the server is -a non-NT server and the client does not have permission to create -printers locally. Apparently when a connection to a non-NT print -server is made the printer is defined locally. Such an action can be -performed by either a local administrator or a Power User. -Unfortunately there is no way to limit the powers of a Power User, nor -is there any way to grant the Printer Creation right to another group. - -This permission policy is documented in PSS database WINNT, ID Q101874 - -Frank Varnavas (varnavas@ny.ubs.com) diff --git a/docs/textdocs/security_level.txt b/docs/textdocs/security_level.txt deleted file mode 100644 index f4e0df7139c..00000000000 --- a/docs/textdocs/security_level.txt +++ /dev/null @@ -1,100 +0,0 @@ -Contributor: Andrew Tridgell -Updated: June 27, 1997 -Status: Current - -Subject: Description of SMB security levels. -=========================================================================== - -Samba supports the following options to the global smb.conf parameter -"security =": - share, user, server - -Note: Samba-2.0.0 now adds the "domain" security mode. Please refer to -the smb.conf man page for usage information and to the document -docs/textdocs/DOMAIN_MEMBER.txt for further background details. - -Of the above, "security = server" means that Samba reports to clients that -it is running in "user mode" but actually passes off all authentication -requests to another "user mode" server. This requires an additional -parameter "password server =" that points to the real authentication server. -That real authentication server can be another Samba server or can be a -Windows NT server, the later natively capable of encrypted password support. - -Below is a more complete description of security levels. -=========================================================================== - -A SMB server tells the client at startup what "security level" it is -running. There are two options "share level" and "user level". Which -of these two the client receives affects the way the client then tries -to authenticate itself. It does not directly affect (to any great -extent) the way the Samba server does security. I know this is -strange, but it fits in with the client/server approach of SMB. In SMB -everything is initiated and controlled by the client, and the server -can only tell the client what is available and whether an action is -allowed. - -I'll describe user level security first, as its simpler. In user level -security the client will send a "session setup" command directly after -the protocol negotiation. This contains a username and password. The -server can either accept or reject that username/password -combination. Note that at this stage the server has no idea what -share the client will eventually try to connect to, so it can't base -the "accept/reject" on anything other than: - -- the username/password -- the machine that the client is coming from - -If the server accepts the username/password then the client expects to -be able to mount any share (using a "tree connection") without -specifying a password. It expects that all access rights will be as -the username/password specified in the "session setup". - -It is also possible for a client to send multiple "session setup" -requests. When the server responds it gives the client a "uid" to use -as an authentication tag for that username/password. The client can -maintain multiple authentication contexts in this way (WinDD is an -example of an application that does this) - - -Ok, now for share level security. In share level security the client -authenticates itself separately for each share. It will send a -password along with each "tree connection" (share mount). It does not -explicitly send a username with this operation. The client is -expecting a password to be associated with each share, independent of -the user. This means that samba has to work out what username the -client probably wants to use. It is never explicitly sent the -username. Some commercial SMB servers such as NT actually associate -passwords directly with shares in share level security, but samba -always uses the unix authentication scheme where it is a -username/password that is authenticated, not a "share/password". - -Many clients send a "session setup" even if the server is in share -level security. They normally send a valid username but no -password. Samba records this username in a list of "possible -usernames". When the client then does a "tree connection" it also adds -to this list the name of the share they try to connect to (useful for -home directories) and any users listed in the "user =" smb.conf -line. The password is then checked in turn against these "possible -usernames". If a match is found then the client is authenticated as -that user. - -Finally "server level" security. In server level security the samba -server reports to the client that it is in user level security. The -client then does a "session setup" as described earlier. The samba -server takes the username/password that the client sends and attempts -to login to the "password server" by sending exactly the same -username/password that it got from the client. If that server is in -user level security and accepts the password then samba accepts the -clients connection. This allows the samba server to use another SMB -server as the "password server". - -You should also note that at the very start of all this, where the -server tells the client what security level it is in, it also tells -the client if it supports encryption. If it does then it supplies the -client with a random "cryptkey". The client will then send all -passwords in encrypted form. You have to compile samba with encryption -enabled to support this feature, and you have to maintain a separate -smbpasswd file with SMB style encrypted passwords. It is -cryptographically impossible to translate from unix style encryption -to SMB style encryption, although there are some fairly simple management -schemes by which the two could be kept in sync. -- cgit From 24103c2c20cd0727792be7efeb868ae988ffbd9b Mon Sep 17 00:00:00 2001 From: Jelmer Vernooij Date: Wed, 28 Aug 2002 09:02:38 +0000 Subject: Remove obsolete files Update generated docs --- docs/README.Win2kSP2 | 56 - docs/Samba-HOWTO-Collection.pdf | 8519 ++++++++++++++++++----------------- docs/docbook/stylesheets/ldp.dsl.in | 256 -- docs/manpages/findsmb.1 | 36 +- docs/manpages/smbclient.1 | 164 +- 5 files changed, 4466 insertions(+), 4565 deletions(-) delete mode 100644 docs/README.Win2kSP2 delete mode 100644 docs/docbook/stylesheets/ldp.dsl.in (limited to 'docs') diff --git a/docs/README.Win2kSP2 b/docs/README.Win2kSP2 deleted file mode 100644 index 49a8fbf4ae1..00000000000 --- a/docs/README.Win2kSP2 +++ /dev/null @@ -1,56 +0,0 @@ -!== -!== README.Win2kSP2 -!== - -Author: Gerald (Jerry) Carter - -================================================================== - -There are several annoyances with Windows 2000 SP2. One of which -only appears when using a Samba server to host user profiles -to Windows 2000 SP2 clients in a Windows domain. This assumes -that Samba is a member of the domain, but the problem will -likely occur if it is not. - -In order to server profiles successfully to Windows 2000 SP2 -clients (when not operating as a PDC), Samba must have - - nt acl support = no - -added to the file share which houses the roaming profiles. -If this is not done, then the Windows 2000 SP2 client will -complain about not being able to access the profile (Access -Denied) and create multiple copies of it on disk (DOMAIN.user.001, -DOMAIN.user.002, etc...). See the smb.conf(5) man page -for more details on this option. Also note that the "nt acl support" -parameter was formally a global parameter in releases prior -to Samba 2.2.2. - -The following is a minimal profile share - - [profile] - path = /export/profile - create mask = 0600 - directory mask = 0700 - nt acl support = no - read only = no - -The reason for this bug is that the Win2k SP2 client copies -the security descriptor for the profile which contains -the Samba server's SID, and not the domain SID. The client -compares the SID for SAMBA\user and realizes it is -different that the one assigned to DOMAIN\user. Hence the reason -for the "access denied" message. - -By disabling the "nt acl support" parameter, Samba will send -the Win2k client a response to the QuerySecurityDescriptor -trans2 call which causes the client to set a default ACL -for the profile. This default ACL includes - - DOMAIN\user "Full Control" - - -NOTE : This bug does not occur when using winbind to -create accounts on the Samba host for Domain users. - - diff --git a/docs/Samba-HOWTO-Collection.pdf b/docs/Samba-HOWTO-Collection.pdf index e47621a0b84..85326c8b8ce 100644 --- a/docs/Samba-HOWTO-Collection.pdf +++ b/docs/Samba-HOWTO-Collection.pdf @@ -1,6 +1,6 @@ -%PDF-1.2 +%PDF-1.3 % -1 0 obj<>endobj +1 0 obj<>endobj 2 0 obj<>endobj 3 0 obj<>endobj 4 0 obj<>endobj @@ -9,528 +9,686 @@ 7 0 obj<>endobj 8 0 obj<>endobj 9 0 obj<>endobj -10 0 obj<>endobj -11 0 obj<>endobj -12 0 obj<>endobj -13 0 obj<>endobj -14 0 obj<>endobj -15 0 obj<>endobj -16 0 obj<>endobj -17 0 obj<>endobj -18 0 obj<>endobj -19 0 obj[14 0 R +10 0 obj<>endobj +11 0 obj<>endobj +12 0 obj<>endobj +13 0 obj<>endobj +14 0 obj<>endobj +15 0 obj<>endobj +16 0 obj<>endobj +17 0 obj<>endobj +18 0 obj<>endobj +19 0 obj<>endobj +20 0 obj<>endobj +21 0 obj<>endobj +22 0 obj<>endobj +23 0 obj<>endobj +24 0 obj<>endobj +25 0 obj<>endobj +26 0 obj<>endobj +27 0 obj<>endobj +28 0 obj<>endobj +29 0 obj<>endobj +30 0 obj<>endobj +31 0 obj<>endobj +32 0 obj<>endobj +33 0 obj<>endobj +34 0 obj<>endobj +35 0 obj<>endobj +36 0 obj<>endobj +37 0 obj<>endobj +38 0 obj<>endobj +39 0 obj<>endobj +40 0 obj<>endobj +41 0 obj<>endobj +42 0 obj<>endobj +43 0 obj<>endobj +44 0 obj<>endobj +45 0 obj<>endobj +46 0 obj<>endobj +47 0 obj<>endobj +48 0 obj<>endobj +49 0 obj<>endobj +50 0 obj<>endobj +51 0 obj<>endobj +52 0 obj<>endobj +53 0 obj<>endobj +54 0 obj<>endobj +55 0 obj<>endobj +56 0 obj<>endobj +57 0 obj<>endobj +58 0 obj[14 0 R +15 0 R 16 0 R +17 0 R 18 0 R -]endobj -20 0 obj<>endobj -21 0 obj<>endobj -22 0 obj[21 0 R -]endobj -23 0 obj<>endobj -24 0 obj<>endobj -25 0 obj<>endobj -26 0 obj<>endobj -27 0 obj[24 0 R +19 0 R +20 0 R +21 0 R +22 0 R +23 0 R +24 0 R +25 0 R 26 0 R -]endobj -28 0 obj<>endobj -29 0 obj<>endobj -30 0 obj<>endobj -31 0 obj<>endobj -32 0 obj<>endobj -33 0 obj<>endobj -34 0 obj[29 0 R +27 0 R +28 0 R +29 0 R +30 0 R 31 0 R +32 0 R 33 0 R -]endobj -35 0 obj<>endobj -36 0 obj<>endobj -37 0 obj<>endobj -38 0 obj<>endobj -39 0 obj[36 0 R +34 0 R +35 0 R +36 0 R +37 0 R 38 0 R -]endobj -40 0 obj<>endobj -41 0 obj<>endobj -42 0 obj[41 0 R -]endobj -43 0 obj<>endobj -44 0 obj<>endobj -45 0 obj<>endobj -46 0 obj<>endobj -47 0 obj[44 0 R +39 0 R +40 0 R +41 0 R +42 0 R +43 0 R +44 0 R +45 0 R 46 0 R -]endobj -48 0 obj<>endobj -49 0 obj<>endobj -50 0 obj<>endobj -51 0 obj<>endobj -52 0 obj<>endobj -53 0 obj<>endobj -54 0 obj[49 0 R +47 0 R +48 0 R +49 0 R +50 0 R 51 0 R +52 0 R 53 0 R -]endobj -55 0 obj<>endobj -56 0 obj<>endobj -57 0 obj[56 0 R -]endobj -58 0 obj<>endobj -59 0 obj<>endobj -60 0 obj<>endobj -61 0 obj<>endobj -62 0 obj<>endobj -63 0 obj<>endobj -64 0 obj<>endobj -65 0 obj<>endobj -66 0 obj<>endobj -67 0 obj<>endobj -68 0 obj<>endobj -69 0 obj<>endobj -70 0 obj[59 0 R +54 0 R +55 0 R +56 0 R +57 0 R]endobj +59 0 obj<>endobj +60 0 obj<>endobj +61 0 obj<>endobj +62 0 obj<>endobj +63 0 obj<>endobj +64 0 obj<>endobj +65 0 obj<>endobj +66 0 obj<>endobj +67 0 obj<>endobj +68 0 obj<>endobj +69 0 obj<>endobj +70 0 obj<>endobj +71 0 obj<>endobj +72 0 obj<>endobj +73 0 obj<>endobj +74 0 obj<>endobj +75 0 obj<>endobj +76 0 obj<>endobj +77 0 obj<>endobj +78 0 obj<>endobj +79 0 obj<>endobj +80 0 obj<>endobj +81 0 obj<>endobj +82 0 obj<>endobj +83 0 obj<>endobj +84 0 obj<>endobj +85 0 obj<>endobj +86 0 obj<>endobj +87 0 obj<>endobj +88 0 obj<>endobj +89 0 obj<>endobj +90 0 obj<>endobj +91 0 obj<>endobj +92 0 obj<>endobj +93 0 obj<>endobj +94 0 obj<>endobj +95 0 obj<>endobj +96 0 obj<>endobj +97 0 obj<>endobj +98 0 obj<>endobj +99 0 obj<>endobj +100 0 obj<>endobj +101 0 obj<>endobj +102 0 obj<>endobj +103 0 obj[59 0 R +60 0 R 61 0 R +62 0 R 63 0 R +64 0 R 65 0 R +66 0 R 67 0 R +68 0 R 69 0 R -]endobj -71 0 obj<>endobj -72 0 obj<>endobj -73 0 obj<>endobj -74 0 obj<>endobj -75 0 obj<>endobj -76 0 obj<>endobj -77 0 obj[72 0 R +70 0 R +71 0 R +72 0 R +73 0 R 74 0 R +75 0 R 76 0 R -]endobj -78 0 obj<>endobj -79 0 obj<>endobj -80 0 obj<>endobj -81 0 obj<>endobj -82 0 obj<>endobj -83 0 obj<>endobj -84 0 obj<>endobj -85 0 obj<>endobj -86 0 obj<>endobj -87 0 obj<>endobj -88 0 obj<>endobj -89 0 obj[78 0 R +77 0 R +78 0 R +79 0 R 80 0 R +81 0 R 82 0 R +83 0 R 84 0 R +85 0 R 86 0 R +87 0 R 88 0 R -]endobj -90 0 obj<>endobj -91 0 obj<>endobj -92 0 obj[91 0 R -]endobj -93 0 obj<>endobj -94 0 obj<>endobj -95 0 obj<>endobj -96 0 obj<>endobj -97 0 obj<>endobj -98 0 obj<>endobj -99 0 obj<>endobj -100 0 obj<>endobj -101 0 obj[94 0 R +89 0 R +90 0 R +91 0 R +92 0 R +93 0 R +94 0 R +95 0 R 96 0 R +97 0 R 98 0 R +99 0 R 100 0 R -]endobj -102 0 obj<>endobj -103 0 obj<>endobj -104 0 obj<>endobj -105 0 obj<>endobj -106 0 obj<>endobj -107 0 obj<>endobj -108 0 obj<>endobj -109 0 obj<>endobj -110 0 obj[103 0 R +101 0 R +102 0 R]endobj +104 0 obj<>endobj +105 0 obj<>endobj +106 0 obj<>endobj +107 0 obj<>endobj +108 0 obj<>endobj +109 0 obj<>endobj +110 0 obj<>endobj +111 0 obj<>endobj +112 0 obj<>endobj +113 0 obj<>endobj +114 0 obj<>endobj +115 0 obj<>endobj +116 0 obj<>endobj +117 0 obj<>endobj +118 0 obj<>endobj +119 0 obj<>endobj +120 0 obj<>endobj +121 0 obj<>endobj +122 0 obj<>endobj +123 0 obj<>endobj +124 0 obj<>endobj +125 0 obj<>endobj +126 0 obj<>endobj +127 0 obj<>endobj +128 0 obj<>endobj +129 0 obj<>endobj +130 0 obj<>endobj +131 0 obj<>endobj +132 0 obj<>endobj +133 0 obj<>endobj +134 0 obj<>endobj +135 0 obj<>endobj +136 0 obj<>endobj +137 0 obj<>endobj +138 0 obj<>endobj +139 0 obj<>endobj +140 0 obj<>endobj +141 0 obj<>endobj +142 0 obj<>endobj +143 0 obj<>endobj +144 0 obj<>endobj +145 0 obj<>endobj +146 0 obj<>endobj +147 0 obj[104 0 R 105 0 R +106 0 R 107 0 R +108 0 R 109 0 R -]endobj -111 0 obj<>endobj -112 0 obj<>endobj -113 0 obj[112 0 R -]endobj -114 0 obj<>endobj -115 0 obj<>endobj -116 0 obj<>endobj -117 0 obj<>endobj -118 0 obj<>endobj -119 0 obj<>endobj -120 0 obj[115 0 R +110 0 R +111 0 R +112 0 R +113 0 R +114 0 R +115 0 R +116 0 R 117 0 R +118 0 R 119 0 R -]endobj -121 0 obj<>endobj -122 0 obj<>endobj -123 0 obj<>endobj -124 0 obj<>endobj -125 0 obj<>endobj -126 0 obj<>endobj -127 0 obj[122 0 R +120 0 R +121 0 R +122 0 R +123 0 R 124 0 R +125 0 R 126 0 R -]endobj -128 0 obj<>endobj -129 0 obj<>endobj -130 0 obj<>endobj -131 0 obj<>endobj -132 0 obj<>endobj -133 0 obj<>endobj -134 0 obj[129 0 R +127 0 R +128 0 R +129 0 R +130 0 R 131 0 R +132 0 R 133 0 R -]endobj -135 0 obj<>endobj -136 0 obj<>endobj -137 0 obj<>endobj -138 0 obj<>endobj -139 0 obj<>endobj -140 0 obj<>endobj -141 0 obj<>endobj -142 0 obj<>endobj -143 0 obj[136 0 R +134 0 R +135 0 R +136 0 R +137 0 R 138 0 R +139 0 R 140 0 R +141 0 R 142 0 R -]endobj -144 0 obj<>endobj -145 0 obj<>endobj -146 0 obj[145 0 R -]endobj -147 0 obj<>endobj -148 0 obj<>endobj -149 0 obj[148 0 R -]endobj -150 0 obj<>endobj -151 0 obj<>endobj -152 0 obj[151 0 R -]endobj -153 0 obj<>endobj -154 0 obj<>endobj -155 0 obj<>endobj -156 0 obj<>endobj -157 0 obj<>endobj -158 0 obj<>endobj -159 0 obj<>endobj -160 0 obj<>endobj -161 0 obj<>endobj -162 0 obj<>endobj -163 0 obj<>endobj -164 0 obj<>endobj -165 0 obj<>endobj -166 0 obj<>endobj -167 0 obj[154 0 R +143 0 R +144 0 R +145 0 R +146 0 R]endobj +148 0 obj<>endobj +149 0 obj<>endobj +150 0 obj<>endobj +151 0 obj<>endobj +152 0 obj<>endobj +153 0 obj<>endobj +154 0 obj<>endobj +155 0 obj<>endobj +156 0 obj<>endobj +157 0 obj<>endobj +158 0 obj<>endobj +159 0 obj<>endobj +160 0 obj<>endobj +161 0 obj<>endobj +162 0 obj<>endobj +163 0 obj<>endobj +164 0 obj<>endobj +165 0 obj<>endobj +166 0 obj<>endobj +167 0 obj<>endobj +168 0 obj<>endobj +169 0 obj<>endobj +170 0 obj<>endobj +171 0 obj<>endobj +172 0 obj<>endobj +173 0 obj<>endobj +174 0 obj<>endobj +175 0 obj<>endobj +176 0 obj<>endobj +177 0 obj<>endobj +178 0 obj<>endobj +179 0 obj<>endobj +180 0 obj<>endobj +181 0 obj<>endobj +182 0 obj<>endobj +183 0 obj<>endobj +184 0 obj<>endobj +185 0 obj<>endobj +186 0 obj<>endobj +187 0 obj<>endobj +188 0 obj<>endobj +189 0 obj<>endobj +190 0 obj<>endobj +191 0 obj<>endobj +192 0 obj[148 0 R +149 0 R +150 0 R +151 0 R +152 0 R +153 0 R +154 0 R +155 0 R 156 0 R +157 0 R 158 0 R +159 0 R 160 0 R +161 0 R 162 0 R +163 0 R 164 0 R +165 0 R 166 0 R -]endobj -168 0 obj<>endobj -169 0 obj<>endobj -170 0 obj<>endobj -171 0 obj<>endobj -172 0 obj<>endobj -173 0 obj<>endobj -174 0 obj<>endobj -175 0 obj<>endobj -176 0 obj[169 0 R +167 0 R +168 0 R +169 0 R +170 0 R 171 0 R +172 0 R 173 0 R +174 0 R 175 0 R -]endobj -177 0 obj<>endobj -178 0 obj<>endobj -179 0 obj<>endobj -180 0 obj<>endobj -181 0 obj<>endobj -182 0 obj<>endobj -183 0 obj<>endobj -184 0 obj<>endobj -185 0 obj<>endobj -186 0 obj<>endobj -187 0 obj<>endobj -188 0 obj<>endobj -189 0 obj<>endobj -190 0 obj<>endobj -191 0 obj<>endobj -192 0 obj<>endobj -193 0 obj<>endobj -194 0 obj<>endobj -195 0 obj<>endobj -196 0 obj<>endobj -197 0 obj<>endobj -198 0 obj<>endobj -199 0 obj<>endobj -200 0 obj<>endobj -201 0 obj<>endobj -202 0 obj<>endobj -203 0 obj<>endobj -204 0 obj<>endobj -205 0 obj<>endobj -206 0 obj<>endobj -207 0 obj<>endobj -208 0 obj<>endobj -209 0 obj<>endobj -210 0 obj<>endobj -211 0 obj<>endobj -212 0 obj<>endobj -213 0 obj<>endobj -214 0 obj<>endobj -215 0 obj<>endobj -216 0 obj<>endobj -217 0 obj<>endobj -218 0 obj<>endobj -219 0 obj<>endobj -220 0 obj<>endobj -221 0 obj[178 0 R +176 0 R +177 0 R +178 0 R +179 0 R 180 0 R +181 0 R 182 0 R +183 0 R 184 0 R +185 0 R 186 0 R +187 0 R 188 0 R +189 0 R 190 0 R -192 0 R +191 0 R]endobj +193 0 obj<>endobj +194 0 obj<>endobj +195 0 obj<>endobj +196 0 obj<>endobj +197 0 obj<>endobj +198 0 obj<>endobj +199 0 obj<>endobj +200 0 obj<>endobj +201 0 obj<>endobj +202 0 obj<>endobj +203 0 obj<>endobj +204 0 obj<>endobj +205 0 obj<>endobj +206 0 obj<>endobj +207 0 obj<>endobj +208 0 obj<>endobj +209 0 obj<>endobj +210 0 obj<>endobj +211 0 obj<>endobj +212 0 obj<>endobj +213 0 obj<>endobj +214 0 obj<>endobj +215 0 obj<>endobj +216 0 obj<>endobj +217 0 obj<>endobj +218 0 obj<>endobj +219 0 obj<>endobj +220 0 obj<>endobj +221 0 obj<>endobj +222 0 obj<>endobj +223 0 obj<>endobj +224 0 obj<>endobj +225 0 obj<>endobj +226 0 obj<>endobj +227 0 obj<>endobj +228 0 obj<>endobj +229 0 obj<>endobj +230 0 obj<>endobj +231 0 obj<>endobj +232 0 obj<>endobj +233 0 obj[193 0 R 194 0 R +195 0 R 196 0 R +197 0 R 198 0 R +199 0 R 200 0 R +201 0 R 202 0 R +203 0 R 204 0 R +205 0 R 206 0 R +207 0 R 208 0 R +209 0 R 210 0 R +211 0 R 212 0 R +213 0 R 214 0 R +215 0 R 216 0 R +217 0 R 218 0 R +219 0 R 220 0 R -]endobj -222 0 obj<>endobj -223 0 obj<>endobj -224 0 obj<>endobj -225 0 obj<>endobj -226 0 obj<>endobj -227 0 obj<>endobj -228 0 obj[223 0 R +221 0 R +222 0 R +223 0 R +224 0 R 225 0 R +226 0 R 227 0 R -]endobj -229 0 obj<>endobj -230 0 obj<>endobj -231 0 obj<>endobj -232 0 obj<>endobj -233 0 obj[230 0 R -232 0 R -]endobj -234 0 obj<>endobj -235 0 obj<>endobj -236 0 obj[235 0 R -]endobj -237 0 obj<>endobj -238 0 obj<>endobj -239 0 obj<>endobj -240 0 obj<>endobj -241 0 obj<>endobj -242 0 obj<>endobj -243 0 obj<>endobj -244 0 obj<>endobj -245 0 obj[238 0 R +228 0 R +229 0 R +230 0 R +231 0 R +232 0 R]endobj +234 0 obj<>endobj +235 0 obj<>endobj +236 0 obj<>endobj +237 0 obj<>endobj +238 0 obj<>endobj +239 0 obj<>endobj +240 0 obj<>endobj +241 0 obj<>endobj +242 0 obj<>endobj +243 0 obj<>endobj +244 0 obj<>endobj +245 0 obj<>endobj +246 0 obj<>endobj +247 0 obj<>endobj +248 0 obj<>endobj +249 0 obj<>endobj +250 0 obj<>endobj +251 0 obj<>endobj +252 0 obj<>endobj +253 0 obj<>endobj +254 0 obj<>endobj +255 0 obj<>endobj +256 0 obj<>endobj +257 0 obj<>endobj +258 0 obj<>endobj +259 0 obj<>endobj +260 0 obj<>endobj +261 0 obj<>endobj +262 0 obj<>endobj +263 0 obj<>endobj +264 0 obj<>endobj +265 0 obj<>endobj +266 0 obj<>endobj +267 0 obj<>endobj +268 0 obj<>endobj +269 0 obj<>endobj +270 0 obj<>endobj +271 0 obj<>endobj +272 0 obj<>endobj +273 0 obj<>endobj +274 0 obj[235 0 R +237 0 R +239 0 R 240 0 R +241 0 R 242 0 R +243 0 R 244 0 R -]endobj -246 0 obj<>endobj -247 0 obj<>endobj -248 0 obj<>endobj -249 0 obj<>endobj -250 0 obj<>endobj -251 0 obj<>endobj -252 0 obj<>endobj -253 0 obj<>endobj -254 0 obj<>endobj -255 0 obj<>endobj -256 0 obj<>endobj -257 0 obj<>endobj -258 0 obj<>endobj -259 0 obj<>endobj -260 0 obj<>endobj -261 0 obj<>endobj -262 0 obj[247 0 R +245 0 R +246 0 R +247 0 R +248 0 R 249 0 R +250 0 R 251 0 R +252 0 R 253 0 R +254 0 R 255 0 R +256 0 R 257 0 R +258 0 R 259 0 R +260 0 R 261 0 R -]endobj -263 0 obj<>endobj -264 0 obj<>endobj -265 0 obj<>endobj -266 0 obj<>endobj -267 0 obj[264 0 R +262 0 R +263 0 R +264 0 R +265 0 R 266 0 R -]endobj -268 0 obj<>endobj -269 0 obj<>endobj -270 0 obj[269 0 R -]endobj -271 0 obj<>endobj -272 0 obj<>endobj -273 0 obj<>endobj -274 0 obj<>endobj -275 0 obj<>endobj -276 0 obj<>endobj -277 0 obj<>endobj -278 0 obj<>endobj -279 0 obj<>endobj -280 0 obj<>endobj -281 0 obj<>endobj -282 0 obj<>endobj -283 0 obj[272 0 R -274 0 R +267 0 R +268 0 R +269 0 R +270 0 R +271 0 R +272 0 R +273 0 R]endobj +275 0 obj<>endobj +276 0 obj<>endobj +277 0 obj<>endobj +278 0 obj<>endobj +279 0 obj<>endobj +280 0 obj<>endobj +281 0 obj<>endobj +282 0 obj<>endobj +283 0 obj<>endobj +284 0 obj<>endobj +285 0 obj<>endobj +286 0 obj<>endobj +287 0 obj<>endobj +288 0 obj<>endobj +289 0 obj<>endobj +290 0 obj<>endobj +291 0 obj<>endobj +292 0 obj<>endobj +293 0 obj<>endobj +294 0 obj<>endobj +295 0 obj<>endobj +296 0 obj<>endobj +297 0 obj<>endobj +298 0 obj<>endobj +299 0 obj<>endobj +300 0 obj<>endobj +301 0 obj<>endobj +302 0 obj<>endobj +303 0 obj<>endobj +304 0 obj<>endobj +305 0 obj<>endobj +306 0 obj<>endobj +307 0 obj<>endobj +308 0 obj<>endobj +309 0 obj<>endobj +310 0 obj<>endobj +311 0 obj<>endobj +312 0 obj<>endobj +313 0 obj<>endobj +314 0 obj<>endobj +315 0 obj<>endobj +316 0 obj<>endobj +317 0 obj<>endobj +318 0 obj<>endobj +319 0 obj<>endobj +320 0 obj<>endobj +321 0 obj<>endobj +322 0 obj<>endobj +323 0 obj<>endobj +324 0 obj<>endobj +325 0 obj<>endobj +326 0 obj[275 0 R 276 0 R +277 0 R 278 0 R +279 0 R 280 0 R +281 0 R 282 0 R -]endobj -284 0 obj<>endobj -285 0 obj<>endobj -286 0 obj<>endobj -287 0 obj<>endobj -288 0 obj<>endobj -289 0 obj<>endobj -290 0 obj<>endobj -291 0 obj<>endobj -292 0 obj[285 0 R +283 0 R +284 0 R +285 0 R +286 0 R 287 0 R +288 0 R 289 0 R +290 0 R 291 0 R -]endobj -293 0 obj<>endobj -294 0 obj<>endobj -295 0 obj<>endobj -296 0 obj<>endobj -297 0 obj<>endobj -298 0 obj<>endobj -299 0 obj<>endobj -300 0 obj<>endobj -301 0 obj<>endobj -302 0 obj<>endobj -303 0 obj<>endobj -304 0 obj<>endobj -305 0 obj<>endobj -306 0 obj<>endobj -307 0 obj[294 0 R +292 0 R +293 0 R +294 0 R +295 0 R 296 0 R +297 0 R 298 0 R +299 0 R 300 0 R +301 0 R 302 0 R +303 0 R 304 0 R +305 0 R 306 0 R -]endobj -308 0 obj<>endobj -309 0 obj<>endobj -310 0 obj[309 0 R -]endobj -311 0 obj<>endobj -312 0 obj<>endobj -313 0 obj[312 0 R -]endobj -314 0 obj<>endobj -315 0 obj<>endobj -316 0 obj[315 0 R -]endobj -317 0 obj<>endobj -318 0 obj<>endobj -319 0 obj<>endobj -320 0 obj<>endobj -321 0 obj<>endobj -322 0 obj<>endobj -323 0 obj<>endobj -324 0 obj<>endobj -325 0 obj[318 0 R +307 0 R +308 0 R +309 0 R +310 0 R +311 0 R +312 0 R +313 0 R +314 0 R +315 0 R +316 0 R +317 0 R +318 0 R +319 0 R 320 0 R +321 0 R 322 0 R +323 0 R 324 0 R -]endobj -326 0 obj<>endobj -327 0 obj<>endobj -328 0 obj[327 0 R -]endobj -329 0 obj<>endobj -330 0 obj<>endobj -331 0 obj<>endobj -332 0 obj<>endobj -333 0 obj<>endobj -334 0 obj<>endobj -335 0 obj[330 0 R +325 0 R]endobj +327 0 obj<>endobj +328 0 obj<>endobj +329 0 obj<>endobj +330 0 obj<>endobj +331 0 obj<>endobj +332 0 obj<>endobj +333 0 obj<>endobj +334 0 obj<>endobj +335 0 obj<>endobj +336 0 obj<>endobj +337 0 obj<>endobj +338 0 obj<>endobj +339 0 obj<>endobj +340 0 obj<>endobj +341 0 obj<>endobj +342 0 obj<>endobj +343 0 obj<>endobj +344 0 obj<>endobj +345 0 obj<>endobj +346 0 obj<>endobj +347 0 obj<>endobj +348 0 obj<>endobj +349 0 obj<>endobj +350 0 obj<>endobj +351 0 obj<>endobj +352 0 obj<>endobj +353 0 obj<>endobj +354 0 obj<>endobj +355 0 obj<>endobj +356 0 obj<>endobj +357 0 obj<>endobj +358 0 obj<>endobj +359 0 obj<>endobj +360 0 obj<>endobj +361 0 obj<>endobj +362 0 obj<>endobj +363 0 obj<>endobj +364 0 obj<>endobj +365 0 obj<>endobj +366 0 obj<>endobj +367 0 obj<>endobj +368 0 obj<>endobj +369 0 obj<>endobj +370 0 obj<>endobj +371 0 obj<>endobj +372 0 obj<>endobj +373 0 obj<>endobj +374 0 obj<>endobj +375 0 obj<>endobj +376 0 obj<>endobj +377 0 obj<>endobj +378 0 obj[327 0 R +328 0 R +329 0 R +330 0 R +331 0 R 332 0 R +333 0 R 334 0 R -]endobj -336 0 obj<>endobj -337 0 obj<>endobj -338 0 obj[337 0 R -]endobj -339 0 obj<>endobj -340 0 obj<>endobj -341 0 obj[340 0 R -]endobj -342 0 obj<>endobj -343 0 obj<>endobj -344 0 obj<>endobj -345 0 obj<>endobj -346 0 obj<>endobj -347 0 obj<>endobj -348 0 obj<>endobj -349 0 obj<>endobj -350 0 obj<>endobj -351 0 obj<>endobj -352 0 obj<>endobj -353 0 obj<>endobj -354 0 obj<>endobj -355 0 obj<>endobj -356 0 obj<>endobj -357 0 obj<>endobj -358 0 obj<>endobj -359 0 obj<>endobj -360 0 obj<>endobj -361 0 obj<>endobj -362 0 obj<>endobj -363 0 obj<>endobj -364 0 obj<>endobj -365 0 obj<>endobj -366 0 obj<>endobj -367 0 obj<>endobj -368 0 obj<>endobj -369 0 obj<>endobj -370 0 obj<>endobj -371 0 obj<>endobj -372 0 obj<>endobj -373 0 obj<>endobj -374 0 obj<>endobj -375 0 obj<>endobj -376 0 obj<>endobj -377 0 obj<>endobj -378 0 obj<>endobj -379 0 obj<>endobj -380 0 obj<>endobj -381 0 obj<>endobj -382 0 obj<>endobj -383 0 obj<>endobj -384 0 obj<>endobj -385 0 obj<>endobj -386 0 obj<>endobj -387 0 obj<>endobj -388 0 obj[342 0 R +335 0 R +336 0 R +337 0 R +338 0 R +339 0 R +340 0 R +341 0 R +342 0 R 343 0 R 344 0 R 345 0 R @@ -565,9 +723,59 @@ 374 0 R 375 0 R 376 0 R -377 0 R -378 0 R -379 0 R +377 0 R]endobj +379 0 obj<>endobj +380 0 obj<>endobj +381 0 obj<>endobj +382 0 obj<>endobj +383 0 obj<>endobj +384 0 obj<>endobj +385 0 obj<>endobj +386 0 obj<>endobj +387 0 obj<>endobj +388 0 obj<>endobj +389 0 obj<>endobj +390 0 obj<>endobj +391 0 obj<>endobj +392 0 obj<>endobj +393 0 obj<>endobj +394 0 obj<>endobj +395 0 obj<>endobj +396 0 obj<>endobj +397 0 obj<>endobj +398 0 obj<>endobj +399 0 obj<>endobj +400 0 obj<>endobj +401 0 obj<>endobj +402 0 obj<>endobj +403 0 obj<>endobj +404 0 obj<>endobj +405 0 obj<>endobj +406 0 obj<>endobj +407 0 obj<>endobj +408 0 obj<>endobj +409 0 obj<>endobj +410 0 obj<>endobj +411 0 obj<>endobj +412 0 obj<>endobj +413 0 obj<>endobj +414 0 obj<>endobj +415 0 obj<>endobj +416 0 obj<>endobj +417 0 obj<>endobj +418 0 obj<>endobj +419 0 obj<>endobj +420 0 obj<>endobj +421 0 obj<>endobj +422 0 obj<>endobj +423 0 obj<>endobj +424 0 obj<>endobj +425 0 obj<>endobj +426 0 obj<>endobj +427 0 obj<>endobj +428 0 obj<>endobj +429 0 obj<>endobj +430 0 obj[379 0 R 380 0 R 381 0 R 382 0 R @@ -576,51 +784,8 @@ 385 0 R 386 0 R 387 0 R -]endobj -389 0 obj<>endobj -390 0 obj<>endobj -391 0 obj<>endobj -392 0 obj<>endobj -393 0 obj<>endobj -394 0 obj<>endobj -395 0 obj<>endobj -396 0 obj<>endobj -397 0 obj<>endobj -398 0 obj<>endobj -399 0 obj<>endobj -400 0 obj<>endobj -401 0 obj<>endobj -402 0 obj<>endobj -403 0 obj<>endobj -404 0 obj<>endobj -405 0 obj<>endobj -406 0 obj<>endobj -407 0 obj<>endobj -408 0 obj<>endobj -409 0 obj<>endobj -410 0 obj<>endobj -411 0 obj<>endobj -412 0 obj<>endobj -413 0 obj<>endobj -414 0 obj<>endobj -415 0 obj<>endobj -416 0 obj<>endobj -417 0 obj<>endobj -418 0 obj<>endobj -419 0 obj<>endobj -420 0 obj<>endobj -421 0 obj<>endobj -422 0 obj<>endobj -423 0 obj<>endobj -424 0 obj<>endobj -425 0 obj<>endobj -426 0 obj<>endobj -427 0 obj<>endobj -428 0 obj<>endobj -429 0 obj<>endobj -430 0 obj<>endobj -431 0 obj<>endobj -432 0 obj[389 0 R +388 0 R +389 0 R 390 0 R 391 0 R 392 0 R @@ -660,55 +825,31 @@ 426 0 R 427 0 R 428 0 R -429 0 R -430 0 R -431 0 R -]endobj -433 0 obj<>endobj -434 0 obj<>endobj -435 0 obj<>endobj -436 0 obj<>endobj -437 0 obj<>endobj -438 0 obj<>endobj -439 0 obj<>endobj -440 0 obj<>endobj -441 0 obj<>endobj -442 0 obj<>endobj -443 0 obj<>endobj -444 0 obj<>endobj -445 0 obj<>endobj -446 0 obj<>endobj -447 0 obj<>endobj -448 0 obj<>endobj -449 0 obj<>endobj -450 0 obj<>endobj -451 0 obj<>endobj -452 0 obj<>endobj -453 0 obj<>endobj -454 0 obj<>endobj -455 0 obj<>endobj -456 0 obj<>endobj -457 0 obj<>endobj -458 0 obj<>endobj -459 0 obj<>endobj -460 0 obj<>endobj -461 0 obj<>endobj -462 0 obj<>endobj -463 0 obj<>endobj -464 0 obj<>endobj -465 0 obj<>endobj -466 0 obj<>endobj -467 0 obj<>endobj -468 0 obj<>endobj -469 0 obj<>endobj -470 0 obj<>endobj -471 0 obj<>endobj -472 0 obj<>endobj -473 0 obj<>endobj -474 0 obj<>endobj -475 0 obj<>endobj -476 0 obj<>endobj -477 0 obj[433 0 R +429 0 R]endobj +431 0 obj<>endobj +432 0 obj<>endobj +433 0 obj<>endobj +434 0 obj<>endobj +435 0 obj<>endobj +436 0 obj<>endobj +437 0 obj<>endobj +438 0 obj<>endobj +439 0 obj<>endobj +440 0 obj<>endobj +441 0 obj<>endobj +442 0 obj<>endobj +443 0 obj<>endobj +444 0 obj<>endobj +445 0 obj<>endobj +446 0 obj<>endobj +447 0 obj<>endobj +448 0 obj<>endobj +449 0 obj<>endobj +450 0 obj<>endobj +451 0 obj<>endobj +452 0 obj[431 0 R +432 0 R +433 0 R 434 0 R 435 0 R 436 0 R @@ -726,3678 +867,3764 @@ 448 0 R 449 0 R 450 0 R -451 0 R -452 0 R -453 0 R -454 0 R -455 0 R -456 0 R -457 0 R -458 0 R -459 0 R -460 0 R -461 0 R -462 0 R -463 0 R +451 0 R]endobj +453 0 obj<>endobj +454 0 obj<>endobj +455 0 obj[454 0 R]endobj +456 0 obj<>endobj +457 0 obj<>endobj +458 0 obj<>endobj +459 0 obj<>endobj +460 0 obj[457 0 R +459 0 R]endobj +461 0 obj<>endobj +462 0 obj<>endobj +463 0 obj<>endobj +464 0 obj<>endobj +465 0 obj<>endobj +466 0 obj<>endobj +467 0 obj[462 0 R 464 0 R -465 0 R -466 0 R -467 0 R -468 0 R -469 0 R -470 0 R -471 0 R -472 0 R -473 0 R -474 0 R -475 0 R -476 0 R -]endobj -478 0 obj<>endobj -479 0 obj<>endobj -480 0 obj<>endobj -481 0 obj<>endobj -482 0 obj<>endobj -483 0 obj<>endobj -484 0 obj<>endobj -485 0 obj<>endobj -486 0 obj<>endobj -487 0 obj<>endobj -488 0 obj<>endobj -489 0 obj<>endobj -490 0 obj<>endobj -491 0 obj<>endobj -492 0 obj<>endobj -493 0 obj<>endobj -494 0 obj<>endobj -495 0 obj<>endobj -496 0 obj<>endobj -497 0 obj<>endobj -498 0 obj<>endobj -499 0 obj<>endobj -500 0 obj<>endobj -501 0 obj<>endobj -502 0 obj<>endobj -503 0 obj<>endobj -504 0 obj<>endobj -505 0 obj<>endobj -506 0 obj<>endobj -507 0 obj<>endobj -508 0 obj<>endobj -509 0 obj<>endobj -510 0 obj<>endobj -511 0 obj<>endobj -512 0 obj<>endobj -513 0 obj<>endobj -514 0 obj<>endobj -515 0 obj<>endobj -516 0 obj<>endobj -517 0 obj<>endobj -518 0 obj<>endobj -519 0 obj<>endobj -520 0 obj<>endobj -521 0 obj<>endobj -522 0 obj[478 0 R -479 0 R -480 0 R -481 0 R -482 0 R -483 0 R +466 0 R]endobj +468 0 obj<>endobj +469 0 obj<>endobj +470 0 obj<>endobj +471 0 obj<>endobj +472 0 obj[469 0 R +471 0 R]endobj +473 0 obj<>endobj +474 0 obj<>endobj +475 0 obj[474 0 R]endobj +476 0 obj<>endobj +477 0 obj<>endobj +478 0 obj<>endobj +479 0 obj<>endobj +480 0 obj[477 0 R +479 0 R]endobj +481 0 obj<>endobj +482 0 obj<>endobj +483 0 obj<>endobj +484 0 obj<>endobj +485 0 obj<>endobj +486 0 obj<>endobj +487 0 obj[482 0 R 484 0 R -485 0 R -486 0 R -487 0 R -488 0 R -489 0 R -490 0 R -491 0 R -492 0 R -493 0 R +486 0 R]endobj +488 0 obj<>endobj +489 0 obj<>endobj +490 0 obj[489 0 R]endobj +491 0 obj<>endobj +492 0 obj<>endobj +493 0 obj<>endobj +494 0 obj<>endobj +495 0 obj<>endobj +496 0 obj<>endobj +497 0 obj<>endobj +498 0 obj<>endobj +499 0 obj<>endobj +500 0 obj<>endobj +501 0 obj<>endobj +502 0 obj<>endobj +503 0 obj[492 0 R 494 0 R -495 0 R 496 0 R -497 0 R 498 0 R -499 0 R 500 0 R -501 0 R -502 0 R -503 0 R -504 0 R -505 0 R -506 0 R +502 0 R]endobj +504 0 obj<>endobj +505 0 obj<>endobj +506 0 obj<>endobj +507 0 obj<>endobj +508 0 obj<>endobj +509 0 obj<>endobj +510 0 obj<>endobj +511 0 obj[505 0 R 507 0 R -508 0 R 509 0 R -510 0 R -511 0 R -512 0 R -513 0 R +510 0 R]endobj +512 0 obj<>endobj +513 0 obj<>endobj +514 0 obj<>endobj +515 0 obj<>endobj +516 0 obj<>endobj +517 0 obj<>endobj +518 0 obj<>endobj +519 0 obj<>endobj +520 0 obj<>endobj +521 0 obj<>endobj +522 0 obj<>endobj +523 0 obj[512 0 R 514 0 R -515 0 R 516 0 R -517 0 R 518 0 R -519 0 R 520 0 R -521 0 R -]endobj -523 0 obj<>endobj -524 0 obj<>endobj -525 0 obj<>endobj -526 0 obj<>endobj -527 0 obj<>endobj -528 0 obj<>endobj -529 0 obj<>endobj -530 0 obj<>endobj -531 0 obj<>endobj -532 0 obj<>endobj -533 0 obj<>endobj -534 0 obj<>endobj -535 0 obj<>endobj -536 0 obj<>endobj -537 0 obj<>endobj -538 0 obj<>endobj -539 0 obj<>endobj -540 0 obj<>endobj -541 0 obj<>endobj -542 0 obj<>endobj -543 0 obj<>endobj -544 0 obj<>endobj -545 0 obj<>endobj -546 0 obj<>endobj -547 0 obj<>endobj -548 0 obj<>endobj -549 0 obj<>endobj -550 0 obj<>endobj -551 0 obj<>endobj -552 0 obj<>endobj -553 0 obj<>endobj -554 0 obj<>endobj -555 0 obj[523 0 R -524 0 R -525 0 R -526 0 R -527 0 R -528 0 R -529 0 R +522 0 R]endobj +524 0 obj<>endobj +525 0 obj<>endobj +526 0 obj[525 0 R]endobj +527 0 obj<>endobj +528 0 obj<>endobj +529 0 obj<>endobj +530 0 obj<>endobj +531 0 obj<>endobj +532 0 obj<>endobj +533 0 obj<>endobj +534 0 obj<>endobj +535 0 obj<>endobj +536 0 obj<>endobj +537 0 obj[528 0 R 530 0 R -531 0 R 532 0 R -533 0 R 534 0 R -535 0 R -536 0 R -537 0 R -538 0 R -539 0 R -540 0 R +536 0 R]endobj +538 0 obj<>endobj +539 0 obj<>endobj +540 0 obj<>endobj +541 0 obj<>endobj +542 0 obj<>endobj +543 0 obj<>endobj +544 0 obj[539 0 R 541 0 R -542 0 R -543 0 R -544 0 R -545 0 R -546 0 R -547 0 R -548 0 R -549 0 R -550 0 R +543 0 R]endobj +545 0 obj<>endobj +546 0 obj<>endobj +547 0 obj[546 0 R]endobj +548 0 obj<>endobj +549 0 obj<>endobj +550 0 obj<>endobj +551 0 obj<>endobj +552 0 obj<>endobj +553 0 obj<>endobj +554 0 obj[549 0 R 551 0 R -552 0 R -553 0 R -554 0 R -]endobj -556 0 obj<>endobj -557 0 obj<>endobj -558 0 obj<>endobj -559 0 obj<>endobj -560 0 obj<>endobj -561 0 obj<>endobj -562 0 obj<>endobj -563 0 obj<>endobj -564 0 obj<>endobj -565 0 obj<>endobj -566 0 obj<>endobj -567 0 obj<>endobj -568 0 obj<>endobj -569 0 obj<>endobj -570 0 obj<>endobj -571 0 obj<>endobj -572 0 obj<>endobj -573 0 obj<>endobj -574 0 obj<>endobj -575 0 obj<>endobj -576 0 obj<>endobj -577 0 obj<>endobj -578 0 obj<>endobj -579 0 obj<>endobj -580 0 obj<>endobj -581 0 obj<>endobj -582 0 obj<>endobj -583 0 obj<>endobj -584 0 obj<>endobj -585 0 obj<>endobj -586 0 obj<>endobj -587 0 obj<>endobj -588 0 obj<>endobj -589 0 obj<>endobj -590 0 obj<>endobj -591 0 obj<>endobj -592 0 obj<>endobj -593 0 obj<>endobj -594 0 obj<>endobj -595 0 obj<>endobj -596 0 obj<>endobj -597 0 obj<>endobj -598 0 obj<>endobj -599 0 obj<>endobj -600 0 obj<>endobj -601 0 obj<>endobj -602 0 obj<>endobj -603 0 obj<>endobj -604 0 obj<>endobj -605 0 obj<>endobj -606 0 obj<>endobj -607 0 obj<>endobj -608 0 obj<>endobj -609 0 obj<>endobj -610 0 obj<>endobj -611 0 obj<>endobj -612 0 obj<>endobj -613 0 obj<>endobj -614 0 obj<>endobj -615 0 obj<>endobj -616 0 obj<>endobj -617 0 obj<>endobj -618 0 obj<>endobj -619 0 obj<>endobj -620 0 obj<>endobj -621 0 obj<>endobj -622 0 obj<>endobj -623 0 obj<>endobj -624 0 obj<>endobj -625 0 obj<>endobj -626 0 obj<>endobj -627 0 obj<>endobj -628 0 obj<>endobj -629 0 obj<>endobj -630 0 obj<>endobj -631 0 obj<>endobj -632 0 obj<>endobj -633 0 obj<>endobj -634 0 obj<>endobj -635 0 obj<>endobj -636 0 obj<>endobj -637 0 obj<>endobj -638 0 obj<>endobj -639 0 obj<>endobj -640 0 obj<>endobj -641 0 obj<>endobj -642 0 obj<>endobj -643 0 obj<>endobj -644 0 obj<>endobj -645 0 obj<>endobj -646 0 obj<>endobj -647 0 obj<>endobj -648 0 obj<>endobj -649 0 obj<>endobj -650 0 obj<>endobj -651 0 obj<>endobj -652 0 obj<>endobj -653 0 obj<>endobj -654 0 obj<>endobj -655 0 obj<>endobj -656 0 obj<>endobj -657 0 obj<>endobj -658 0 obj<>endobj -659 0 obj<>endobj -660 0 obj<>endobj -661 0 obj<>endobj -662 0 obj<>endobj -663 0 obj<>endobj -664 0 obj<>endobj -665 0 obj<>endobj -666 0 obj<>endobj -667 0 obj<>endobj -668 0 obj<>endobj -669 0 obj<>endobj -670 0 obj<>endobj -671 0 obj<>endobj -672 0 obj<>endobj -673 0 obj<>endobj -674 0 obj<>endobj -675 0 obj<>endobj -676 0 obj<>endobj -677 0 obj<>endobj -678 0 obj<>endobj -679 0 obj<>endobj -680 0 obj<>endobj -681 0 obj<>endobj -682 0 obj<>endobj -683 0 obj<>endobj -684 0 obj<>endobj -685 0 obj<>endobj -686 0 obj<>endobj -687 0 obj<>endobj -688 0 obj<>endobj -689 0 obj<>endobj -690 0 obj<>endobj -691 0 obj<>endobj -692 0 obj<>endobj -693 0 obj<>endobj -694 0 obj<>endobj -695 0 obj<>endobj -696 0 obj<>endobj -697 0 obj<>endobj -698 0 obj<>endobj -699 0 obj<>endobj -700 0 obj<>endobj -701 0 obj<>endobj -702 0 obj<>endobj -703 0 obj<>endobj -704 0 obj<>endobj -705 0 obj<>endobj -706 0 obj<>endobj -707 0 obj<>endobj -708 0 obj<>endobj -709 0 obj<>endobj -710 0 obj<>endobj -711 0 obj<>endobj -712 0 obj<>endobj -713 0 obj<>endobj -714 0 obj<>endobj -715 0 obj<>endobj -716 0 obj<>endobj -717 0 obj<>endobj -718 0 obj<>endobj -719 0 obj<>endobj -720 0 obj<>endobj -721 0 obj<>endobj -722 0 obj<>endobj -723 0 obj<>endobj -724 0 obj<>endobj -725 0 obj<>endobj -726 0 obj<>endobj -727 0 obj<>endobj -728 0 obj<>endobj -729 0 obj<>endobj -730 0 obj<>endobj -731 0 obj<>endobj -732 0 obj<>endobj -733 0 obj<>endobj -734 0 obj<>endobj -735 0 obj<>endobj -736 0 obj<>endobj -737 0 obj<>endobj -738 0 obj<>endobj -739 0 obj<>endobj -740 0 obj<>endobj -741 0 obj<>endobj -742 0 obj<>endobj -743 0 obj<>endobj -744 0 obj<>endobj -745 0 obj<>endobj -746 0 obj<>endobj -747 0 obj<>endobj -748 0 obj<>endobj -749 0 obj<>endobj -750 0 obj<>endobj -751 0 obj<>endobj -752 0 obj<>endobj -753 0 obj<>endobj -754 0 obj<>endobj -755 0 obj<>endobj -756 0 obj<>endobj -757 0 obj<>endobj -758 0 obj<>endobj -759 0 obj<>endobj -760 0 obj<>endobj -761 0 obj<>endobj -762 0 obj<>endobj -763 0 obj<>endobj -764 0 obj<>endobj -765 0 obj<>endobj -766 0 obj<>endobj -767 0 obj<>endobj -768 0 obj<>endobj -769 0 obj<>endobj -770 0 obj<>endobj -771 0 obj<>endobj -772 0 obj<>endobj -773 0 obj<>endobj -774 0 obj<>endobj -775 0 obj<>endobj -776 0 obj<>endobj -777 0 obj<>endobj -778 0 obj<>endobj -779 0 obj<>endobj -780 0 obj<>endobj -781 0 obj<>endobj -782 0 obj<>endobj -783 0 obj<>endobj -784 0 obj<>endobj -785 0 obj<>endobj -786 0 obj<>endobj -787 0 obj<>endobj -788 0 obj<>endobj -789 0 obj<>endobj -790 0 obj<>endobj -791 0 obj<>endobj -792 0 obj<>endobj -793 0 obj<>endobj -794 0 obj<>endobj +556 0 obj<>endobj +557 0 obj<>endobj +558 0 obj<>endobj +559 0 obj<>endobj +560 0 obj<>endobj +561 0 obj[556 0 R +558 0 R +560 0 R]endobj +562 0 obj<>endobj +563 0 obj<>endobj +564 0 obj<>endobj +565 0 obj<>endobj +566 0 obj<>endobj +567 0 obj<>endobj +568 0 obj<>endobj +569 0 obj<>endobj +570 0 obj[563 0 R +565 0 R +567 0 R +569 0 R]endobj +571 0 obj<>endobj +572 0 obj<>endobj +573 0 obj<>endobj +574 0 obj<>endobj +575 0 obj<>endobj +576 0 obj<>endobj +577 0 obj[572 0 R +574 0 R +576 0 R]endobj +578 0 obj<>endobj +579 0 obj<>endobj +580 0 obj[579 0 R]endobj +581 0 obj<>endobj +582 0 obj<>endobj +583 0 obj[582 0 R]endobj +584 0 obj<>endobj +585 0 obj<>endobj +586 0 obj<>endobj +587 0 obj<>endobj +588 0 obj<>endobj +589 0 obj<>endobj +590 0 obj<>endobj +591 0 obj<>endobj +592 0 obj<>endobj +593 0 obj<>endobj +594 0 obj<>endobj +595 0 obj<>endobj +596 0 obj<>endobj +597 0 obj<>endobj +598 0 obj<>endobj +599 0 obj<>endobj +600 0 obj[585 0 R +587 0 R +589 0 R +591 0 R +593 0 R +595 0 R +597 0 R +599 0 R]endobj +601 0 obj<>endobj +602 0 obj<>endobj +603 0 obj<>endobj +604 0 obj<>endobj +605 0 obj<>endobj +606 0 obj<>endobj +607 0 obj<>endobj +608 0 obj<>endobj +609 0 obj[602 0 R +604 0 R +606 0 R +608 0 R]endobj +610 0 obj<>endobj +611 0 obj<>endobj +612 0 obj<>endobj +613 0 obj<>endobj +614 0 obj<>endobj +615 0 obj<>endobj +616 0 obj<>endobj +617 0 obj<>endobj +618 0 obj<>endobj +619 0 obj<>endobj +620 0 obj<>endobj +621 0 obj<>endobj +622 0 obj<>endobj +623 0 obj<>endobj +624 0 obj<>endobj +625 0 obj<>endobj +626 0 obj<>endobj +627 0 obj<>endobj +628 0 obj<>endobj +629 0 obj<>endobj +630 0 obj<>endobj +631 0 obj<>endobj +632 0 obj<>endobj +633 0 obj<>endobj +634 0 obj<>endobj +635 0 obj<>endobj +636 0 obj<>endobj +637 0 obj<>endobj +638 0 obj<>endobj +639 0 obj<>endobj +640 0 obj<>endobj +641 0 obj<>endobj +642 0 obj<>endobj +643 0 obj<>endobj +644 0 obj<>endobj +645 0 obj<>endobj +646 0 obj<>endobj +647 0 obj<>endobj +648 0 obj<>endobj +649 0 obj<>endobj +650 0 obj<>endobj +651 0 obj<>endobj +652 0 obj<>endobj +653 0 obj<>endobj +654 0 obj<>endobj +655 0 obj<>endobj +656 0 obj[611 0 R +613 0 R +615 0 R +617 0 R +619 0 R +621 0 R +623 0 R +625 0 R +627 0 R +629 0 R +631 0 R +633 0 R +635 0 R +637 0 R +639 0 R +641 0 R +643 0 R +645 0 R +647 0 R +649 0 R +651 0 R +653 0 R +655 0 R]endobj +657 0 obj<>endobj +658 0 obj<>endobj +659 0 obj<>endobj +660 0 obj<>endobj +661 0 obj[658 0 R +660 0 R]endobj +662 0 obj<>endobj +663 0 obj<>endobj +664 0 obj<>endobj +665 0 obj<>endobj +666 0 obj[663 0 R +665 0 R]endobj +667 0 obj<>endobj +668 0 obj<>endobj +669 0 obj[668 0 R]endobj +670 0 obj<>endobj +671 0 obj<>endobj +672 0 obj<>endobj +673 0 obj<>endobj +674 0 obj[671 0 R +673 0 R]endobj +675 0 obj<>endobj +676 0 obj<>endobj +677 0 obj<>endobj +678 0 obj<>endobj +679 0 obj[676 0 R +678 0 R]endobj +680 0 obj<>endobj +681 0 obj<>endobj +682 0 obj<>endobj +683 0 obj<>endobj +684 0 obj<>endobj +685 0 obj<>endobj +686 0 obj<>endobj +687 0 obj<>endobj +688 0 obj<>endobj +689 0 obj<>endobj +690 0 obj<>endobj +691 0 obj<>endobj +692 0 obj<>endobj +693 0 obj<>endobj +694 0 obj<>endobj +695 0 obj<>endobj +696 0 obj[681 0 R +683 0 R +685 0 R +687 0 R +689 0 R +691 0 R +693 0 R +695 0 R]endobj +697 0 obj<>endobj +698 0 obj<>endobj +699 0 obj<>endobj +700 0 obj<>endobj +701 0 obj[698 0 R +700 0 R]endobj +702 0 obj<>endobj +703 0 obj<>endobj +704 0 obj[703 0 R]endobj +705 0 obj<>endobj +706 0 obj<>endobj +707 0 obj<>endobj +708 0 obj<>endobj +709 0 obj<>endobj +710 0 obj<>endobj +711 0 obj<>endobj +712 0 obj<>endobj +713 0 obj<>endobj +714 0 obj<>endobj +715 0 obj<>endobj +716 0 obj<>endobj +717 0 obj[706 0 R +708 0 R +710 0 R +712 0 R +714 0 R +716 0 R]endobj +718 0 obj<>endobj +719 0 obj<>endobj +720 0 obj<>endobj +721 0 obj<>endobj +722 0 obj<>endobj +723 0 obj<>endobj +724 0 obj<>endobj +725 0 obj<>endobj +726 0 obj[719 0 R +721 0 R +723 0 R +725 0 R]endobj +727 0 obj<>endobj +728 0 obj<>endobj +729 0 obj[728 0 R]endobj +730 0 obj<>endobj +731 0 obj<>endobj +732 0 obj<>endobj +733 0 obj<>endobj +734 0 obj<>endobj +735 0 obj<>endobj +736 0 obj<>endobj +737 0 obj<>endobj +738 0 obj<>endobj +739 0 obj<>endobj +740 0 obj<>endobj +741 0 obj<>endobj +742 0 obj[731 0 R +733 0 R +735 0 R +737 0 R +739 0 R +741 0 R]endobj +743 0 obj<>endobj +744 0 obj<>endobj +745 0 obj[744 0 R]endobj +746 0 obj<>endobj +747 0 obj<>endobj +748 0 obj[747 0 R]endobj +749 0 obj<>endobj +750 0 obj<>endobj +751 0 obj[750 0 R]endobj +752 0 obj<>endobj +753 0 obj<>endobj +754 0 obj<>endobj +755 0 obj<>endobj +756 0 obj<>endobj +757 0 obj<>endobj +758 0 obj<>endobj +759 0 obj<>endobj +760 0 obj[753 0 R +755 0 R +757 0 R +759 0 R]endobj +761 0 obj<>endobj +762 0 obj<>endobj +763 0 obj[762 0 R]endobj +764 0 obj<>endobj +765 0 obj<>endobj +766 0 obj<>endobj +767 0 obj<>endobj +768 0 obj<>endobj +769 0 obj<>endobj +770 0 obj[765 0 R +767 0 R +769 0 R]endobj +771 0 obj<>endobj +772 0 obj<>endobj +773 0 obj[772 0 R]endobj +774 0 obj<>endobj +775 0 obj<>endobj +776 0 obj<>endobj +777 0 obj<>endobj +778 0 obj<>endobj +779 0 obj<>endobj +780 0 obj<>endobj +781 0 obj<>endobj +782 0 obj<>endobj +783 0 obj<>endobj +784 0 obj<>endobj +785 0 obj<>endobj +786 0 obj<>endobj +787 0 obj<>endobj +788 0 obj<>endobj +789 0 obj<>endobj +790 0 obj<>endobj +791 0 obj<>endobj +792 0 obj<>endobj +793 0 obj<>endobj +794 0 obj<>endobj +795 0 obj<>endobj +796 0 obj<>endobj +797 0 obj<>endobj +798 0 obj<>endobj +799 0 obj<>endobj +800 0 obj<>endobj +801 0 obj<>endobj +802 0 obj<>endobj +803 0 obj<>endobj +804 0 obj<>endobj +805 0 obj<>endobj +806 0 obj<>endobj +807 0 obj<>endobj +808 0 obj<>endobj +809 0 obj<>endobj +810 0 obj<>endobj +811 0 obj<>endobj +812 0 obj<>endobj +813 0 obj<>endobj +814 0 obj<>endobj +815 0 obj<>endobj +816 0 obj<>endobj +817 0 obj<>endobj +818 0 obj<>endobj +819 0 obj<>endobj +820 0 obj<>endobj +821 0 obj<>endobj +822 0 obj<>endobj +823 0 obj<>endobj +824 0 obj<>endobj +825 0 obj<>endobj +826 0 obj<>endobj +827 0 obj<>endobj +828 0 obj<>endobj +829 0 obj<>endobj +830 0 obj<>endobj +831 0 obj<>endobj +832 0 obj<>endobj +833 0 obj<>endobj +834 0 obj<>endobj +835 0 obj<>endobj +836 0 obj<>endobj +837 0 obj<>endobj +838 0 obj<>endobj +839 0 obj<>endobj +840 0 obj<>endobj +841 0 obj<>endobj +842 0 obj<>endobj +843 0 obj<>endobj +844 0 obj<>endobj +845 0 obj<>endobj +846 0 obj<>endobj +847 0 obj<>endobj +848 0 obj<>endobj +849 0 obj<>endobj +850 0 obj<>endobj +851 0 obj<>endobj +852 0 obj<>endobj +853 0 obj<>endobj +854 0 obj<>endobj +855 0 obj<>endobj +856 0 obj<>endobj +857 0 obj<>endobj +858 0 obj<>endobj +859 0 obj<>endobj +860 0 obj<>endobj +861 0 obj<>endobj +862 0 obj<>endobj +863 0 obj<>endobj +864 0 obj<>endobj +865 0 obj<>endobj +866 0 obj<>endobj +867 0 obj<>endobj +868 0 obj<>endobj +869 0 obj<>endobj +870 0 obj<>endobj +871 0 obj<>endobj +872 0 obj<>endobj +873 0 obj<>endobj +874 0 obj<>endobj +875 0 obj<>endobj +876 0 obj<>endobj +877 0 obj<>endobj +878 0 obj<>endobj +879 0 obj<>endobj +880 0 obj<>endobj +881 0 obj<>endobj +882 0 obj<>endobj +883 0 obj<>endobj +884 0 obj<>endobj +885 0 obj<>endobj +886 0 obj<>endobj +887 0 obj<>endobj +888 0 obj<>endobj +889 0 obj<>endobj +890 0 obj<>endobj +891 0 obj<>endobj +892 0 obj<>endobj +893 0 obj<>endobj +894 0 obj<>endobj +895 0 obj<>endobj +896 0 obj<>endobj +897 0 obj<>endobj +898 0 obj<>endobj +899 0 obj<>endobj +900 0 obj<>endobj +901 0 obj<>endobj +902 0 obj<>endobj +903 0 obj<>endobj +904 0 obj<>endobj +905 0 obj<>endobj +906 0 obj<>endobj +907 0 obj<>endobj +908 0 obj<>endobj +909 0 obj<>endobj +910 0 obj<>endobj +911 0 obj<>endobj +912 0 obj<>endobj +913 0 obj<>endobj +914 0 obj<>endobj +915 0 obj<>endobj +916 0 obj<>endobj +917 0 obj<>endobj +918 0 obj<>endobj +919 0 obj<>endobj +920 0 obj<>endobj +921 0 obj<>endobj +922 0 obj<>endobj +923 0 obj<>endobj +924 0 obj<>endobj +925 0 obj<>endobj +926 0 obj<>endobj +927 0 obj<>endobj +928 0 obj<>endobj +929 0 obj<>endobj +930 0 obj<>endobj +931 0 obj<>endobj +932 0 obj<>endobj +933 0 obj<>endobj +934 0 obj<>endobj +935 0 obj<>endobj +936 0 obj<>endobj +937 0 obj<>endobj +938 0 obj<>endobj +939 0 obj<>endobj +940 0 obj<>endobj +941 0 obj<>endobj +942 0 obj<>endobj +943 0 obj<>endobj +944 0 obj<>endobj +945 0 obj<>endobj +946 0 obj<>endobj +947 0 obj<>endobj +948 0 obj<>endobj +949 0 obj<>endobj +950 0 obj<>endobj +951 0 obj<>endobj +952 0 obj<>endobj +953 0 obj<>endobj +954 0 obj<>endobj +955 0 obj<>endobj +956 0 obj<>endobj +957 0 obj<>endobj +958 0 obj<>endobj +959 0 obj<>endobj +960 0 obj<>endobj +961 0 obj<>endobj +962 0 obj<>endobj +963 0 obj<>endobj +964 0 obj<>endobj +965 0 obj<>endobj +966 0 obj<>endobj +967 0 obj<>endobj +968 0 obj<>endobj +969 0 obj<>endobj +970 0 obj<>endobj +971 0 obj<>endobj +972 0 obj<>endobj +973 0 obj<>endobj +974 0 obj<>endobj +975 0 obj<>endobj +976 0 obj<>endobj +977 0 obj<>endobj +978 0 obj<>endobj +979 0 obj<>endobj +980 0 obj<>endobj +981 0 obj<>endobj +982 0 obj<>endobj +983 0 obj<>endobj +984 0 obj<>endobj +985 0 obj<>endobj +986 0 obj<>endobj +987 0 obj<>endobj +988 0 obj<>endobj +989 0 obj<>endobj +990 0 obj<>endobj +991 0 obj<>endobj +992 0 obj<>endobj +993 0 obj<>endobj +994 0 obj<>endobj +995 0 obj<>endobj +996 0 obj<>endobj +997 0 obj<>endobj +998 0 obj<>endobj +999 0 obj<>endobj +1000 0 obj<>endobj +1001 0 obj<>endobj +1002 0 obj<>endobj +1003 0 obj<>endobj +1004 0 obj<>endobj +1005 0 obj<>endobj +1006 0 obj<>endobj +1007 0 obj<>endobj +1008 0 obj<>endobj +1009 0 obj<>endobj +1010 0 obj<>endobj +1011 0 obj<>endobj -795 0 obj<>>>/Annots 19 0 R>>endobj -796 0 obj<>stream -x}SMs0+vr"3lcI8K.-mQI.I6i kwsLJ$0&ч -|JV؉È|&>?iFde֢1ܔL6ö^O|o'%x̰M'03TMFqSmL"&z , =osnDW5CQR4oĂY4EcOj b*1LRS*/LV}+=y<9ION9*%B^p=DFmht L eac+kW)k0j)@ -.ò%*@XP-&0鞃A{vǷŀ1+C"_S&Cfr|́g69h'PklgnГj=z[l-8:oxA[๬ׂ3r#=|4q/`>+dqǦ)/"\ҫ}(ϑަ!=ͮMV6N.Z*G,HqMѫJ$K_0h0\ +g}Z3q.prG -<_370cendstream -endobj -797 0 obj -652 -endobj -798 0 obj<>>>/Annots 22 0 R>>endobj -799 0 obj<>stream -xV]s6|ׯ:cS>,ovNf륏 H(ޑ4eK{{ 5JiV3PVÆfSfmNd:'R5Q{J):zoCTUE!ݯw?n:颫s=O*[nhzK)jeQ{} J~lŻk(7!zkhbIQKT][8"huk =*%D !L:wsgF:Xt[v{F[D\ci*sз]/`t*[fwyv^˺#_4lJ6\ΰfLw=v">\α\큷#_h%g, hwUSt; -&+%.116xLHmHCX\X:/N/YN7ƳaG-ݷʙwҽʛVrLxַ^ս8AdcfzLfǰ숄/΢󧄶Otmjcj3 \TM|6Z/d`zr؄)D]'=T4 y`V\\J}u>s/mxIW`hc1=QSt - ]NGkvxmzZE,22jc; 6d[hfz@tԍod1"/w闼&aig%>5`^:G PdEeu*3ċD,HJ P@a"'@MݜpٗQ.-10x.T5^!i$Up(z86j˧w"]v*;]r|oo j/SUܵ`C -wBL.k)I:uv#K|q>*)oQ咾(^wi"^ PEԀyʽ h궒K蝎L 03MQb hM q!;#sM'PD"{sȥpMr4,N~$&%i?:>!endstream -endobj -800 0 obj -1091 -endobj -801 0 obj<>>>>>endobj -802 0 obj<>stream -xV]oH}ﯸ AG4ۦEtc{=f-{ BZ_sνߎ4)dIYsrszs4IV+?Lh^&+NZIl'q.Wd`L|fM9m -].ɒ6yx{Bl4M ]z3ze|%5)eFlh*T-gp84:GuV>ڔ$cT;T< >! F}0dp𠡾KѤ.,r*"X^^| \zjwE}T~0~4jP|ԓl9:DB8]@Z h)ACYTN֨_;@{NƵ3n1|%mkc*bEdϜ0/hkԉtMYOu-Rq6H)ZAgC -ƠNṉB'RZ<4Ez %u$"WIp`XBaCd\}8ׯ.79!:1{~FN'mBqNU ʹ(7[cyZ(V*n"f~c.7kJ+ֶ &'y5DH6":^;,"K:Rb'is!PGO(4pS8sFK. `Mr#H, 2д[/0+& 3o#Y0VR9I_Fy阑 |sapa -v:6hU#\䷐> !9v~T Af?#~t) 1Y "Av_I]AMV\ [J+D8EI?Uӄ~/_'k s=oϵ>_M5N3u?Ŭendstream -endobj -803 0 obj -1435 -endobj -804 0 obj<>>>>>endobj -805 0 obj<>stream -xWaO8ίҴiK[OvCe9iJ'7qZClM[X@ -E޼{S1zRR}}uv3?]1 #| IM K>suN&!4IZq4\Йa*g]*KDٻQj@q{#i||&sd\/yR9M%*ˤ#uEts}O4YgԴr2%+͓JB,l'v8OI8c(d}6tIyz{P0Putas])œ$Q5k'tr$S?A  cdB(.`K笝Nd!EA,3Z;TtrcE1*;B=A1=TXҙAx%q/\đ]NHg/*0O(~*RBsUVFTkB$S=T^mWムRlV+m!t X,B0/&87]5,* p=47Ps -) Y2P_J,. -뫱k6Hlh I S bMzv![#m aYEv#jjSjFiP10_T:zD-ђӞ-D?ptC`Sq%4 -a7@`8 ]rLaت^L>>>>>endobj -808 0 obj<>stream -xVaOFίJ$$&$!*wIw6nQ^'K]w ͮ]BC v={dDC|h}r24ш+ٔp8$%(H9Rg$GZ 6VZ:M #].E"2~<@ԻI>sN;PcO1Y+$)wɒ4Qm0fKjH:(,QU!uvMuHP)z!ʕAs49DϦxSKC/i8=+(FpɜXڳQ^BPtMhU}/#1}[Q%T?-Ԏ_ڵn(۲ukݘh-DJ{dr @Ψkkf?)0SeQԵL]5tG׶kXϯRIJb2xc y Q --x &ݐ2zyA*5"}MM."\(=[#C{>:.d-p=MA{wwLdY]S9") C`-#J6g zK6 -)gi]6ĸxeNrhֺl\!7r[-퍏5VxU@0ndWTSCΣB΢=TM {a6$?sn8ABO_1& FKd9_aEhvSoĽdWzaW0DI~.Wksk\IpN5 sbby!UeكJCOBF``B+ x_aڀռa.~hUr~'oLx5C>>>>>endobj -811 0 obj<>stream -xWn8}W pT_\ -,ma q cPmHW{GmEHΙ3gO4<8| ͗xsz9^GOkiZkk<-l7?~??akXHv"E[Ot][ږK'6JKKpC<&J:N-X e豃FdÛaS&tAݚ^98M8Μ0B֞J)rJKq=3<C -n_fRqʞ"`_!P) -mi֭J[m f|}CK[R.=p"R Ƞ$ˤsJvWeN_ʁ<:kFEtU쒳T]-5v2YwIҦZ!oea5) ΉivsŢp]& \)*P  ݮҢRLw7 9 y'A&H: 6 -iʲ\UI%T؞-FY:lr -@ I, 7 g> e,ur1LNn~BJu,Hx(ۯ{(A,|L&3]+deПfo:1yrUꇊԉFp#|dgv#ir.wRT׊jpȡ8^h%2qt}BQޝѪ:aR[aOIBa>04>UEG4ɬY" MW.ٜKY$l=ByOH>%o8:c_́aBWkEʀ To3N>K^Mp8 -X8d!!0(ZfԪ,ѡ6G.ٮ>醿wκt7ޏnOe-}!^TQoh Sɽ~5;Sb@4OFt2-߽x;!sYACH`U֣E,mU{<1Dp)SdFZ*$#RfArAu\02Czn9̽'0uYaޛ5z׊[JLS3zS`NpMWf*0{\Pbd wLg,p='e(X.#< ՟P0$ۯ!@ r#D.qʬas -EuH?X!#rn5 -׈)$meg# -U~] -0IZqQt:/F|n.`3/ MG=v -pM%4TX}j7zvS*xJV\|Jn045P^nf5oU** *[` ŦPKSLY|`@)#d+ִ"@n[p﬛]"EZ=vr^_g 1opcvojR 8:ׅ^r}rrendstream -endobj -812 0 obj -1505 -endobj -813 0 obj<>>>>>endobj -814 0 obj<>stream -xWn8}W )hm'q>V6&n.hJJRq{fH9bQP,q.gΙ~ߙt29bWg4=E7S<4& -i6dGs B5yK.+@._,M:aR'LG˃ =KkZYMUQn ,f:f3v kyuSuFp6ӦA~$;]Hw3 -^?t]m̑'TZGuc߅Hgb3toƐzOȇ $MaW#S5'3nj^e#^젔t|vNO<Q+||͟876RuZzeFB=g;.3! ؠl9|5_jV;`_e@H SiNIbծQJ8NTEs$> $^mH|yxh -vL-tӃL|sS]<[J[`cl~i -:=dQ@#Y8 -D)Kp z}:4v Gݫzh_fR(C -,;4gۨ`;yQeе6u[隃Q9O2Te{Z\b4:{B- :]UЀ@E,$3d$X^%R$!H,Z:|8#t>-Xh XbK<#Dp9m ~ -/4{+Tg0Za!A|:v{8m(e4 - \錧M=rw -T/RIa0d-A#nTc@pQ"KR#4Y6R.V Jly9.wQFeb&+3h IS3,< a®:@b hf@__v#]UPhY<8Y&jX=3@S2 MC93kVl!-FIA&`}< -W&Us]U`WWLs& u`ޢ 71sc hӤ1~L2 qCץ*tH *; yۆV&7R8 1)[1}ZvPpȻ }Kli(_֡#]g F\FL -e/CQV5v>I3EV:&KWyi$#W7'y>J^/E4l@Ƽ#ӥLH{OqW"&v8;/<7s󴏀0]r3ae csKR`Nb1+Pn;JmTzy㚅}?ÒYĥVa%>?29bՒneIW?P?{q ӕ;քl :߅tV<?Lendstream -endobj -815 0 obj -1723 -endobj -816 0 obj<>>>>>endobj -817 0 obj<>stream -xVMoFW |iĔDɒ ŖLӠaE.ŭ]v7Kqؠ@að潙dBcLhtNIy>>Y'₾{|SX!.6 fd%e|p棛K -g>_\Ps|EUKKa@JqJhKN;AN'i_ɬus6 z -I@k][6In-g4t\9T!)1J;T(Wɨv63Г(T*j&HAk3\C.js)l2mS,ԣ,p8*kv, ITMP"`jY96pN¨(8 -NۼfnŮ828ȰfJˠ; ]n"}ߐ)ZF.'XX%S(VfMpV9 -0]FKD%vPB]hiU -[0m rRTJG ͑+=NRW -kMQ`(D 1EAP|}4q`Q`/m9{|<ޭ\BHWKRutt)+tF7"Z{R0!4 /ZKoE߯?DV!AWvĴ3u `T4ū(t"s2ptm5tj-ށ׈ I"u VPeT5dPYRTy`z޴@RM}]sB -3/g@__):**U!1uZ0YnGS|@pO`6d Ó̕,c -SwN5u]75euD'/{=yYL,41ոdMMܿ;`sos$d` RŽ5#:*[nzPeEjIYS>3;LKn#-Sƶ#ٿ`&ѓbts7 ?8{0-:=tuendstream -endobj -818 0 obj -1398 -endobj -819 0 obj<>>>>>endobj -820 0 obj<>stream -xWMOH+JlFa9ìXFҶImj33%"]*81^:fqp{sK|8ƉxF9N99M9I|.쌿p9ܞicZ{Ͷ|ĩrMT[J46UT f[nUo~DqݘMcD 6:?}JD*/4uϦ@b?i|OcZhm t4}%WԆ~>;{SQh Qj)n>AY'*}~oأCS6#[m˔RMT /-Ikj445 -ٵBMztFAZGT -!: !YYrpGBfzuDzIR+WFFurYpOU>fiA -HHw T2 soeZT&Y)< - Žd8wi:3.ny`teaLG*=Zc|%{5t<!Y#LO) ĉFkà -t2:TJtPgBi}@x>Un@0Cn8WХL&Do .,Qx( EU[&aQzeҕd)b-JP@/鈵䥂Kv A$PLaI# cԏe|d{^8uv(~bBIݛWDpn{%X=)WHicGpyƷJ  J5ƈ(UPpPErޠƖXkqT &46 -5O5R4A=MxkaŔR*OWšŵf_KxidrvOt3Mbx%=8d6"b}Gs?:!({͏ <-ڜc?,;Z/endstream -endobj -821 0 obj -1601 -endobj -822 0 obj<>>>>>endobj -823 0 obj<>stream -xWNI}+jy`  J+!ݡۘ]EA9NUt?]?:}PK^hZR't:4-o,R%\ D!=YׇNTj!kZ)`7{QO{b!\~~;iqVa}B 竼J)K* -IBhҽB /BNz렬8qz?]Ȃ= r -Wؼ -[k26ڮh'8 z.sQ<(KSh[k?dKa6`. e!$;ʒt:OB(3G  (jcwIKuu ګXP3g+B fYҍ  p_/$Zf\Z0<5撁%ZPRH@qBċUfj`{eIk L{k٠ kdGÔ>7Q&R7c1]WIY~+===\~|z:_Z4E老k' tI`x2.F5G1!T'b#0S -ZJa08D<2_^mIHh僌~[.iW@Y2B[T2@5jo`q\yDL[J49[OZD ?F"\(H5$_8dHQ| `;5_Рk.>]!,Z!Ĕ8!ɅΛ=zJןnthDk+ԨBzhڎŠdr jlTYO04yrUz!^9kY˻I(2掋Eҋts x=;4#rW,a^o>y6|uʰ Zo֒z:eKd}vkJA,z䋲5~akMlt?QkкetIr!W֟M'~a}Lo\iKk sH@ BK#q6<",u=%Q.YkWA(tSbA^RH̥ K5ZkB;ڌ& -s)yU)-g`@|_54({<0" -: -[+>2cKxK6K (s|{]kW=dp -kfk93v|d+5i>^4ׅvi8ꤣ=n[8  آ4=~:?M?dcn_=0endstream -endobj -824 0 obj -1469 -endobj -825 0 obj<>>>>>endobj -826 0 obj<>stream -x}Vao6_q00`9v-M6K(Djd~(Rn-6{wݻbF;՜7frMJ%m}FpKBde5Z_2\%~ _ ګ -eJJwrrCj3x6"Mml_\dv́a,ҴQ3í#i|i+ܐTE\( XKa_\V= -1 iPbZ&MDG!s=m芿rlvu@i9zoi\hyRyt"p"+2h2gƏmWĔ%sTm'ǿύ#tܴEJ\]M$Mvo>K_ +$ -0-UjJyaMQ'8 \M g7s| m$Q,/PBi2R_dzi]?Lɷ&ש6@1!H2֪LTvp譫խ9H 3=_LjT_D:ޠ">jc:=[#0L [0 uk(D ]Z"P |`iN*4P qF{ P9#m0:(1: 3xH,q -"^"e!C{z"R.Rwe,Zl#7 *BrJAl۪2uzN&ΟCfS1>iUdG3mk S۝bOUP^Ͱ6؍Ijx0O5Dbm~VMͻ=-p1~'ҧm.{Jeť8Q9SI}ۀNh!⨂v_w!'#A8une' mͺgZg]?&$p͡ n岨=#=ŘyƘҶۄeeOtN' -#Wy7ә0QWj)V}$i ܇ LoH p(k?糅[)PdK )>̘ScޖvJ}nꗩ!$Èv…SSM?2^a,O` ʋv$$6~s;O,5!Мg3EoTgk dkXhd6x7ۼ[TTKVkNBl)=pIը=[>`A >>>>>endobj -829 0 obj<>stream -xWnF}W I؅umAQ\JL]fYR jÆDr.;sΙ1; Q\=)]4Q4hRؚ"E̬T%dtUYGJTrB9T-ً2ߐ|}C |0Ǘӯ#:G$0b6W#] "*\C*7DD -qܮgFS)鸢k-9,mBO΢}{{H%c+BD[ 6T|Zg:JU5땕(\>)hyتtQ"mYVՒ,^JgrX脬sfK# 3 .V/N΄85j_2>r%1/\.#ف U/uRmQK$m-^>+24V:;Ws`p; Q!OiZe&d}Xݵ{\mkjx[RIo e^lc$`]Jڀ{6_CU8L@A:==&O.y?< 1ʌ=Gg{DeDS%'%ф >|50!iCizfyӟ7Oq0 /m'Ds-]>$xըl$MkhO< w[@*i:zZLSf^̀ym76pE?Ex\M ǥ;ҋ-g-ňy`ݵ5>0#d耚t 뢗Ci$9W M* k$h=D;&{bm腓*ҚDoڔ:&4|4 /XM#oH Ε%酵%Ծa ;> a7aQCs,uIG4y>f.~F\tƘX8 OޙEmNx{TfB#B=9p(g;LzQTBB|,˨FG:o2i]!UNPTd3ٸ -d|ws̀O(Z0z9WK8- o=- -a|D}n[m,9)v%PS+h!SݔV ^j.҄.L.s|/O0>t} 00?ǨJ\4ATr|>>>/Annots 27 0 R>>endobj -832 0 obj<>stream -xR۲0}+ouƦRhxyrFO) N@qNe(ALOcAC(kd,crYpvЊ/zhଙNMOԚ"I-ϩuSگpB/t;=9Aݦz~7O*T)*Jt C;j5]!;ZCP=CIM]kt}%,ޖ'X#x`$'@$/:jU@8xlM:תP靖A `fXQp!(Ӛ[>Wp՘d; G$sOIJj.~|SF*Drq4Ɩggs&Θ -#'!OgB4{9Ŝ^zqiZ-rLsᄏ<)ȹWNO.]ۥN6 _}endstream -endobj -833 0 obj -445 -endobj -834 0 obj<>>>>>endobj -835 0 obj<>stream -xV]s6}W#)66&Ѵޙ&sKEؒk g0靶sLlhݳkҘfsя4X,`A"8ZҖw%`X>=P<tAܿǓl5)/Uܼ[ҽһr)M /~DxLfQYIkvM!KLn/Mi{ЙSFJVdIΐbSH˪0QE&*aIYh*O1yhjU! -^a<iS9舘ɓ(K~ 'qEΎF)UÉ֏O UmO& bcʿ̽X8JNHmDżӦx:ϽG,6k=x/Pm*WZjd*kp2eFoՎkpJYZ1Hd|<BcuW0$rٚ=W'0ZjΛ"Z=zx0A)Pl|x@k$qDHq ?5զ(z>ଁ3-t;nYQ?AvJ3eGghݠQh 1רpp2q^?Q7m>\7`(]u92kLRX5^ ]8hka!ep|C8a ښO^?\je\SzkͭlZ(ʶa6 oM#Ll=CDfTQ9e-@h٬lL `ɰb'-k-,2V4 Z&YcB m1 AzX􃐬A o)7l\-[!P-:oK3۩ٛtHh*lj<*PӍr5hejGT3VIQ9k3Oy9v*[bϫ7+B5.D6 -# -w8Mw8/lP *1AP8yÜTI؏U%؜Z)^2/f5ƵDmݕ6Q{9`c,.)}/.hr v+pM%B.bYiqar KҤ3hpFy=)endstream -endobj -836 0 obj -1212 -endobj -837 0 obj<>>>>>endobj -838 0 obj<>stream -xWr8+rʢے99[U&'Qj.@$("&-5ML25,[$^ 㵠VVod毒]oL6d%7qL״X6͚Y?m:y$퉴GcIi/mnE*Bݾ%eV:Эs&UˌDbx|!J%Nd4~9MW'gn&3!Rxe+[vnDYӂsj++NyLJ6&-|m%BU9 R*,.YZ4J^cCó. !ȃ7nO/`8V(`E_qPZOlp0nR"o^ -H ҧByTu(CQ _/C E47;BfS>!r^M 0WF{kiwbF۾!X}m.l3KwdB3f¦P|/2J&W(Ee\hRХ9Ee -p}ap0,VSiP}^"yA Q4>>>>>endobj -841 0 obj<>stream -xWn6}W ܇zD8oI^KhTIʎgHVHli8svfEJsZk닻yrsC?v/sZi - - [9{J@ >mH Y}L;L|+In& -,)M -zR9ڨJ5#_JoEEZZ&/Vz2?4*UuR(L]\#sw$ØU -l~c݇nN\JWw 9'z#V>M^ڝ?ިmkQr||&C{@=Rh)Kan'I"J"RPclAEbF<#Vhhttq+Ea֚9>wu8\dVe"G^hC`_D]s{cNqzTD2̙|4x mM>Xxf{~=uK"/l"ZV(F \iBRk]brqp}C`;ٱCߜ/| -$ie-E#*j<[`nQG8_oOziB>AV#<4n\ 0JWs"H>;԰3{s/L1.s4nU( -C\4@K͢@]T)>)yۂ14r -JirD&Bk/p -H}̀ۢ@18ɓЖx Ms q-erQPĠ0s Fc8Pan$&ޔ%F9T*] KZa&;xV -q$%4 =F!e;AS3RN&ye8&#_(SP\1Hy &jO~L[nc\c<'cTW+ Gð>jPP^ k2|e -'_Q88La$&ؗ -T -tz5[~:(U&phȰu_Јb6\k$.u δ wx=L dae"3m${XtCssGmv*Ӻ0@,ʁco8)!z6 6IoL"4|7Jf KPqRKB|eQ0Q0y*qt^63g٠0f##ɱ&_'Q_P$V=; jF@g)냈`49"9+ 9b w;֗mzˑGa. )Bxqr"?f,fNT-=  ;Y^`:Fpd|GAlPp8HhK!88yG!2|"S̓ࠐ8f!v>>>>>endobj -844 0 obj<>stream -xX]S7}W6ԐN N)ͤȻ+m$-slff0l~{wz0tDcʃdq0蟝Ůˀ~9=)^#~JZ ; };Z`{ [<|N:S}!FўzrSG6(D22 m,&b9*TX'٧T/MO(w88MhzK8<#2v/{A1Ky4j7 -e\"y.8ظǕȇ9‹p>yL LU~C@BynsqUm(aY!Z,&a=9|lR\"IpI岃5NȿT 2F{H|6JI++ w4Ta.X@rI~k)^(pJ\}:$EY!\ ;QM(FzB.YJ:NcqT ^!,c5uD%PP4@EfX`0'%HtH8/y?%\%R`r**O ]~l@wLǩS%t ]OO kD Ew -Gct}Q`>Id-.ZY9M`# d:a|B YߛX7 M XU4^0]mLLv#': 1N`HN l(ĬʃbzrP[@h?:0 w|sU/H{AcyRK"C]AJi{;@*ز "VAkM,e]OfͻF B#*T pdj`K *t;yr`d8ä56$QBQ7_7 䀹<9n SG^j-ql8Qz!S Ѧ7bl+"\H7|rRuI -_s7~<X]&6땀Xx֔`Ξ=&0.*l?i8J <&2 2_[Yb!HBS߉5苺"H7FP+Mq 5.0K%'bgs:u^B;TWyXˇԙ\vuu+Yv:  G [uC(HO ?=yPMwg6n%2S3,x idǭ9] -hPK5 3#b1l.(äb@-?sX0&hi2üz[%0dP#Sa(AQĴy&[\HF}VEKƻv6&G`m=J0,Bax8>\>!?cg=sz?c%tyejzf~gtkl>>>>>endobj -847 0 obj<>stream -xWmO8ί/ 7NU.GZM\%S{NSR3̌l*D;?'ӥ~gӧBҌw%Y}`1zp)Eߥ(:YZڹdbDBpNf#gHs$ ʤ^cpa$Mi*ɖ2vя.{G4Jd۔ %-2IʒқXU!IK |Ky.`ϖq,er@SQBoY.t(ְÀN'J+ Kmr PBYb23o-/3I;I#)Kp: ?1T*١M<W=S-X8o`5^ ؼdm8E8'_d2zV'@2|$-cdPlA U`o*r,uB5f^_El$;7e -H$=KWeB-Ta Z6&nay* &dv:T\rViht<6EU }+*4\Gkeʂ7R)A9\g;1 Zum<{Z^gHS"Q襧RJm,p= 6'r*d1)wMs- vZPZ1lnkviʕ͸Ss䫓r` pݖl^V| Gw_of9|jp]4x]Fy2ߵIUkmt;/ 1)d)t_e%j50cS -SL,9t(y^ċO"~`2u~b\:2 RXN+Wnc 2d 3}l&Tj]$Upjn2֚Xp؍VXT(@5{pb̡s'oP10ʹX`ѵ^h;<)F9,*$ $t@a*v@O Drj(V=1x)]w ?/kGHӜ-lioyɧ/Du}\Z'0W|f|5Kxyag)SEX\UfxM;QX,A_G`7:ٜĘ-R6U"L -d)Fqb.]~BnyFn.`q@-(50`zpa[LMTM;!&CcUR+/[,E~7-K};'o@ <Hi:]lz#H$oϪKӣ^g%=_oL\rwBby[{ΕӺ_;學/O*endstream -endobj -848 0 obj -1741 -endobj -849 0 obj<>>>>>endobj -850 0 obj<>stream -xW]OH}W\% $!o@n$HYnjbɴ;c{qZBiil8?C:)EUp0 sJ3|z+x -;/? lV -$XIJqD+H:iSR5R|;Î0DRZ[BfaJ]DF֤Nx$퓂0L΄ki0VdO4\;v+akG -p*58N^.Su8S$Pb_ZovԽ1%3|6>/)WؑHSLY*GAɴծ+ʅB9 z%4cӥ^Sq?tl5Ҕ"Q:{·XHn}H*] &$qLs2[8FhP&-׭&ʢ9pMw.٧i -( *Ũ8J. l5nO>JZzi2׿NU -{b|$H E=B$9Z#_ -=?vQøg~-&lSN>}Բ8s@EM`nf pi|:.H xe*쎹*Δ6QyxMj":cgK# t&yM 9%=wNo{W4W,c؃eN" GՆKxV'¶Anej{Mp;h{6x0$806&[Cn>ҍ)4?[mi_mj'Rg)xyeM~#mladX"2Y&N1=H=(y]bX$(SZeeF~Cag[Q.- jO8,v'6m%^ - hMAb{ru./h,džbF\pk@#ў:i,I}|3zhtbʋM/JWz0 [chAStҕIʍ቏w1 ,( '0h488xUp5f5gV٨]{Of~r]a:䥎+!˨(z'Ce+,xvieV'ef2BKa2@sMϢ -I(Xg Ww,n~hpߠq&wHbRUx͗kظ(s&HyPjj%"кɊe3@C% )h-|Q(WWp5nTKW&F9m67:h@ 5ri"(k45G}:^z])"ϨHt<*mWշ9uܫ<#0Mpw5DU܂B;cCY⼖bSW.W[Ug"P"ʂ^=v]VƗޝo˻Kwebc?:^gc0 %,endstream -endobj -851 0 obj -1653 -endobj -852 0 obj<>>>>>endobj -853 0 obj<>stream -xWO:}N)I{iHp^MWM\YPNI3&]ݡUm|?9( RZLtNYut::$<DŽY2ߧIba%_-,_.(js|V49Mqso<ϣixd˰aCl-h'-݊JR6ϲyxO_T&IYr$UBjGfP$cJ(]O$=Mat+EB1v%4Ғ%s'Xx -HB|TqzGb2Y8bR!է1Yښ -ai-GO-HOPP 'tV"zlRTkA&miq6,VGE9i)s6Hyw;7:aGqmT)?t{/)LBp%ֵi}=4sCN1# y!}.]+[2@(.aV6%svVu!u 5CÓB+{|w6;KHYB_͖ HHٴ:sʠ}LKG.@.,#s[j=P( -mk,U"+:q_UCUa|M/ I袋M|=Fs8,5T@*T/BeBhy!`w߉'T"h\Μg(Bz 2MI8JvL@b_%^!X•WlhoH &1 s`M?`e{AHVb _|iC9&tA%( E&%ktL.!ԕF^'KȿG8r3 VFɮrD$#!(H[ĎEԺ V̘HJnj< >b O+dcHvk'(p.nZH|:;wpj _*t]Ѵ6yU P\ZdOYʄ4 -xyrEk,>nD^ ґvcQ0a}J`e3#|~Hr8  ìB`y萧97O^؟;,_ -JBǀp_ TwJ`ˠq^0!(FAh 5r;KVf,%0-c!vpGi2aVXLIԂK \a~xyχ7q5d'6`;fj,Rց²ӺevZGxkU2=Tr0H b8\:ƽ!tKLA)pXC5~:|*ʵdq L2i#_PD (ր, -Pl: vAX_I8/4 ߯.1>>>/Annots 34 0 R>>endobj -856 0 obj<>stream -xXn}WI Xn0gƞM$Ȧk&Q>s7$@ͮS眪֯Wsߜ6 Z)-wWvWd nX$[rr~ϰK7W4.v<.%=:na, jxȑTxW^xۢXG_?==k75hhP,TOE:9{6>`(Цj&j`Sve8 Gs]3! @ V毙8={!uUCpl'DUm@@:=*dѳҴl=<=_/('7No -ZNIl31n|>JWA跷@6gj5u8S_Ȟ?רt{5"C^{J_LAkqFFWp'Tg]. -]郾NHTj, >TLmz[MT򒨄vo?;iZkɑ7@ec2Q` } -iUlOz~'&LmSD90g?F-EC(?j/J&|`P9k`XOC`5<v^uW"v??}㗇]X(;RW8מvKUFM7 .KbmćYחv꠷0⊖(q,/x$A wxV`5*" ~u B쁥z=3 -Fޕ`kΪhYAdM?>q\ϪzTտPop8y"럮^GJ@tl_=2V+nY9^TOx6Yݽ$!LGmBH?&!-\|.L,N,㟿|}AsÍPke -?MUiqiȢ ONJp-+)Dv6)IBCs_&] -m7/blɃ[[+N}QArELc0.ʎ ->8ݯp -t jqFX4oHXk&CGgT --׵oB XT]~Be 3*r䭛J~:W!FS* Ѝ*="\jOhX[ǰI'*jgA ɡ %ֵb$,ۆ]."K0lFDwauwxb -Hr-TM `\\hWua-e >C$krȚ 2[q3ڡwuúp>|-3u"btѣ}1 ɤ6vY31H.` xG;}1[nB:_{Y-%cPYJSKB xڊJ53!ye.i˗kRomg9m g*,C)@w#Md !Y"6k1ߤQⷐϹy:MKV|$ubǒEqQڗ-lVKu,W?7fDBZ~o=\|Op -CH>ȳ8mM2Ǐ&a<~~x~r6=ش)Lf!{0$b -'endstream -endobj -857 0 obj -2022 -endobj -858 0 obj<>>>>>endobj -859 0 obj<>stream -xW]OH}W\)TIH`%R<"d3cB;c;PiVԉgǹ{yci28X|]S0+|$t4,>hܼK8~՘NH-am)E!)/2?\<_MC;' )KFo J*Legl5qڍ6)o"NtpϒP2DSlDXe!Eiɭ#U "Lm<p+ؖa_~2KgJDL;Q,"EUpR -CN:[JS ߒ*-6^XR -񪊺.uFuUCKho*Y7~gm5]ieW!Xuw9 _9#R9.б%f[áQ"NiuΥESWE/YY dF]qGe[3O.W1+Ʃ9|ZuHQ3x'3#3LQDleIZn5ȓB8x\ L],U8˄m@ŖD):e)9j -i?q[$4\i^7h8nm$RZHV-UBU >p7IlV(BM澭w5N8{Hķ7 Z6;)kްQ)h" -<.u'HS,#2KՈ8NRM-oi[!Z{ʤ6mM*H k+69 n{dA@qx ]m4mRl˙1eF~ZxwTBAP+?-Mk -D +I]*`{^yVQ|}E#ƼD(,"~Nz?0Z-j̬0e6ARӃCcAK>#ShN* cd2gzpCo6YC|$1XFD3_PNE~!hx{LF HZk79pW{XT9gϕma1g KL'<uL`/+K-Qf"U/ВcnexrQ+ -;~pi>CSZHPIO U]4glcʌ '\'3S G'΁`bH= k{F{Yx -x*MR5x/铆qKO6DL@"f'g(lݗo_^.u!2ŸG1~IuΧ8fh?#fgendstream -endobj -860 0 obj -1525 -endobj -861 0 obj<>>>/Annots 39 0 R>>endobj -862 0 obj<>stream -xVo6|ZItC7 Dl%i;,HV` Xy{;~oEoDzCJu;ou񘚏r.A(%-Kɛ}b-8~ Pxק(G4O݂.͓ t?ϪHdN΅*(х-uɒF+rKg?+iJrU!I$?ͿԉzAS3/ ~%UnG:w~݉&Ѿ&s#2'(o݃*zLc)uJt-u=>@JϤӉǨЃ(YuV%*jiХ[. jZH|Ɗ"eJz<gC)X}*RQ*&~ Hoґ)-̵߼ \DD~v"7ARP$ez t \c La[!Mք쌴م؉ U2.Px8 -)6 }O}j 'U+"bY 74œX2 x* -fVڹssn Qk;fȓ>xpiE_#l[*FBA{{h $=TwJ]5o)' iFqmF+{Cd Shc0`zZmAz~p%yL4 <œЕk5VإjǗU",U?G, ]ҟ+ZJ7:B]9oNG}.qQ,VPendstream -endobj -863 0 obj -1423 -endobj -864 0 obj<>>>>>endobj -865 0 obj<>stream -xTMo0 W0ˉ81mWҏ-z)0(Tߏ$: öD>=> F0{ D=fp|5~ a21gS|OSPR.bǷs /1{6B^Ce&,e %<)](-a!iw_A|;> 2H'#owo%WCaj40[SU2!(z?<PKCFX(a -鹪 aN J&0OnyQ@ ^)’BbT\ԡ_s1ٖ;\U!U5/hH7 8dgf U(E_)T!IժPKoȓG1c-8\ 2C"7R(^Im-ezA9Q ה^XII Ɗf9T'rvƾBeGkۇk}b Vrb8kqHª ̸)S널F 1Q̄>C;P?s/m3Mq09|Ni;IuOKB7wmyc4t֝dR^ ZfBkD+R7Fd<cm-[IJ??Ȥendstream -endobj -866 0 obj -736 -endobj -867 0 obj<>>>>>endobj -868 0 obj<>stream -xW[o6~ϯ8@6{hi:{ msH⸿~!EIV4, -(5swis] هٯYvwGncF7 wxϗ솬 h"[OPоi--f+N콴B9oպ ߬:b \joEY*[DwXUhͶζ/lѽւ.XܺٺI 3r0wt_k7= ˒ g<dS)]?_6*w[ )~)VKIO!ll>?J5OD8\PX0V}Otvn)Ir2b!&ş:g|r}~  ᣽p`l1^&1`]d*}> RAf)ej` -d7sR1Bر;[v:!|gNcY'S"fc֬p(y,V5mûn Qx ^LfiqfBH&Nh媈2HT6vI.-"ώJo@̓a`,tPQ(*+  \QIO2Ze ^)Ks&,=>:9s:FXیEFp'Azu2RsSU|сT5yurl:ѯC!hnSa1`S%6Y"_&Z;ݳc]*88BYE<{xCrgNQ텾P3iƤz˧uy6K92p6KJh=!ܟRӴ9>؄5F\Kpn$KZy.Z] U|Mȁ8Kz\sSkߘ 9q,a#Oƃѥ{ LX%AX%"<E[*8`L~ԻKbиQy@s})J8d(>=Abl.;vxZ)|Lz_JpxM!ǵRUʧMRB:?2G$/XԘ~F/[g}oXs74HD]6YcZ>>>/Annots 42 0 R>>endobj -871 0 obj<>stream -xXnF}W PQ]}pPihWR܄2d{f)*6ZeqwgfŔ&jFo?/&u/f&4 f4Zj\\-'"X=\ TwdJ-V Q)?l)կן.»yszDTE)VZRI"XTb#lG*{muRdCYɘX^5Lh L> -=`EFCEG;A[A7*"6&͠dR!= Z,&1 V -`ֈDޝ -TvDA9Q*-Nm۩Өhu8B } CO]ɷ:0OgF)F)esKPcRctl`)A0CyåzAB>V3 igb@2ɜlq&P/p7#<XBV4"P nب S\b7͓iN]0A\6W-*}yR9GmTT]8?HgS-s Hek(y?eRLv.SKg+ >[!"P0]&m| 4А⒋ϼ4N ryQ@=^YD]V\pFImCʤ%Iv-X2ûk}Jyp)趥7'm@ތWx+B8"e_WF8* SNz|tyAX|=ݦW357(~b~\b4]L7[JЯh@0X,`,ʷanll8pI7m2eS.lBJS!0e/-W/n0m~8+^[Jsnd;P~[\` h ,p4_8:&xbtpD 5PpǺA -'v]Dv;cUN+߿n?ax5.1_ͱ3G_/Į1endstream -endobj -872 0 obj -1701 -endobj -873 0 obj<>>>/Annots 47 0 R>>endobj -874 0 obj<>stream -xUn8+ޭP1,.zpm-\hJKRqRr,vM3ӯYB1ZȩfcFIBE|qLE9 -,KAO醤"憸%2K'"]QVpGm~]#%q׵,McUR+<7%H)K'2`eHﵪ7[c%@@.P?}%̓ Wvl1ZUdy\4%ɇjJ%o[Qш>4d5]c7dm /͞Y8сw(uFXOrExsFTG^LmtGhiR jD{O hWTMo(Cun#F rVp^  -w -nSk"HΟnnPmx'0_ےrF#3c# )Fj}[Q(M-K+GnEVXqF²PJԼoDß6W r@rU{ -8Ar4J)߄}%mT_.hl5F{XL4tG~Bp9_vN)9d!# ;j`qkaw:E.g_ YX4-,,`dY4ڷkd4ϚNW}+`e h|^"PulpfXN{, R_01=sz^ -c0(aWz'W̿/:~C_DЃ.{0T42;%G_gMendstream -endobj -875 0 obj -822 -endobj -876 0 obj<>>>/Annots 54 0 R>>endobj -877 0 obj<>stream -xWnF}W Ї*D;@ -I!(ZKr%nBrU.)E3C.))Mٹ93.1tAq~qs7V+{ LS E*SEUzs &rTdkqpnme*OHCNE=]օ̒˖+Vrv2}`vLz}{ZDUS1HLR7|zC\%6) iX/092QCEFx*,UҌHxd=x<5V{cT%_T 3(r>b`GI2_z\`b?V5? -PO_4Am6Xcٲ$sW,9BkFih0́n>t\~k;qlek+ '7h.RHsr>d\C(% tQ )6ݽQbxYk˼peno}ފb3M *u%HLd:[-fv T,ĥ|be$ebvg1ؠX#s - OK2va]2hv,vMJс#, u&%HG -gD,pE%U nd~ڲ7~oOj7[MJ%߂:!}endstream -endobj -878 0 obj -1534 -endobj -879 0 obj<>>>>>endobj -880 0 obj<>stream -xuTn0+VUKq8&Msk".z&鈉E$eAߡ$'Z0 \cgc'Ǫo'sl\YW*̳|>+AG45bjFhk@t1eX[_Ju@kOڋj2cV,1fe1h޻6&+n&'!"v۩Cp'g MV$DF~qݴ-,!Z 2:oi:xg0lf.]퍈ndhQ^ -608ANђcMdz,.0"Wc,pCZuz(̳eN4wt]C/aΓ}(ęc QieUn$t?{8ɦ"YΆP6j,봟endstream -endobj -881 0 obj -687 -endobj -882 0 obj<>>>/Annots 57 0 R>>endobj -883 0 obj<>stream -xXMoFW rbdE{s ; P$i$="W6.$,hEaEr>{3'soN](Nݟ^bF[Y}Nt67Yr]՞V)}/}e8KLې9}76w>޿dFg%l$WYm+Ӵ ?xݝ]?J)}3zg -eBփۆn D:o}zJ9$7t%罿Ś~;2Vlܩjh%y]jh2RS2mrdYiEC,5j͓E_tiG aCG|wv6f1b]e6⚕W~ Yp@@َ;' M1WBhJr~h2ÓHP3KA2,n! ATBC otD6 ^0sԥšNJs@`_, Xhõp-4)ldUOxBȡN,|N6zmB8+*/baȀ>$)Ն7F}?B睓]3=+x EǺl|▁Ͳ9O8Ihyl?b_I۸۷@ Z=~rS PSÑϓ/]$3endstream -endobj -884 0 obj -1797 -endobj -885 0 obj<>>>>>endobj -886 0 obj<>stream -xXMo8W t -?R'"IEmmr%*f#Z}CJ$ -'ə7o<ߣ oBgS)-.G'74"xL4^,T2r+h6<[ѽ(=#QzCVxRᴡڨgUGjhL'dTWL̈Ñdzi’zգD,4vj9Q-銖q *t* -$qsɒndR+Ǯ& 1˄+@¨< Ue!9Z7s(|ͼ5io[cFtm֍0[''v؟DPYq|S@g!E9ꄓ]Rٓr2ჯG(2gdNg 'xX1ONFUL(SUHT*]ـC1L9ا^lQ +|Cog5lf']rz@ʺmѾ!J ڙDEl8CMv "F;OKtj=^trs,O|pyAqDtf!ɡ_M,oӳS=gc> ֿ6endstream -endobj -887 0 obj -1782 -endobj -888 0 obj<>>>>>endobj -889 0 obj<>stream -xWr6+vtRfْmͩi&M6_ }$ -r:ֈgSϔ3SV_]|锖orryyIlh:u-قrtZFxoli<ՖV%UZզ^Z֕9)tqo.j21.>Dlcziu> -vGۍj|K)5eԛv<d vO"|r jokkx[ї%I PUw?Z1+k,}HaBH LMeHUޏy38L*MՀ*mTcYMIrJN귲/",J={%=|:=U׶ЯڝWJSV"HM?:",祶[T%Cߢ6׃RSp"R:"G(q0 >X[k(d6UB4ʩJeٮj1+wMc]VUc@"V2.GeқHBW1ZTzST(S&9q/s[L{O6`uj%VY8Y.vG}Y''4n K`UC#ѝcӆ=kt/حds辈äXCntA6DE~A[: -Rؼc[!NM. -t%UL\2X;5R &Kx2-A;8=LهK0#Xxkg+Wmbzk }|sN@Rz|{KMl% v$3NYzù>|J^ \Ҩ q)~.$gHa`9!WѳÐ!HUL$8L ai9?I$Tk'f3TjeqJ{.Η+=\^Π޸Q7n8@J΍lI*a9ӨI^F2-ܐ\F8yetD~hb{8] ۑQf]['5P$2$8h/onjf598+rtNww>NTO[?%&t/*7,eE):5gk:Eoc֛r&v")^'U W9ۉR2HР7:mqBM졯qnLsr78att2йg o,=cOoZ5!L(* -&ax}ih?dD:7bc(lk? nKD twOXp0F퍋'nĂẇxIV;w*ƹpg|1|w`ytoȤ߆o3Zs1j@gbendstream -endobj -890 0 obj -1613 -endobj -891 0 obj<>>>/Annots 70 0 R>>endobj -892 0 obj<>stream -xXM6zHФ4mc.\^3+$}3$JvE$|yoW bL91% 62_.h8VhcTڔ:myJGZ^}iv<>T`}KJ3>UѫOoQmIvّ&27UelQg?(ծoYl0d >ٚ;ܽP]]J}CXɂ&(IHx!fLQղ[#SVW>!%~Ji>arZۇ>s TRY 9%2{[y#u5'TՓd5"#کReDo#IVD]jdK^)(l-9A]k2UgxQ75}+NS-٣]4D,`{WUʲ }ץuݼKƨïV5*Ԝk7M8ԈٽfjnJB9'VwwJgç9jp1^Σ{ͦQ XM?56miij^m!vGӳ}Eq|~r~)i0wW -IYk"*]ic[gETj̓ɘzNG1([Ch;>۴Q߇4]Sh6TwRdyQ[!&[ sˍ}[8xX9j>!랺L3!_j0cӦuCgN".Ax~NScߛ8@(d+0@R.=1O)E܆@nܖڲL[< I,gH< \>gIgZܦ0 2ȂQlG@ז̖A[@׶n`r dB g䞺QsV0J3>r<W7Ոf©t@cHhOlymHlÝfx K q'g;&8 -yt8gm5 ?v1X#ǖQ8db5[ߋ~촴S"<@I.'ȸxgZWiiX`6W[{\ ,9 rUPdK-=QgD}:}o)i$C[4T26HpZ/?T  9tbLv"Z"xөZC_M;~W+/t!yѕ(un -"SS7d2]gW[SUCjoz*KY)8'r0 \hNw|aw-V͞oum&.GNN@pΔUNzPFWUq]{Ep{D&gw*()B"nMNƲfw:oݷ)$焉FS L*͗k˳Zh)rө٘Y~$u}Qc+},*sUMi~`^oҧ)/pO7߾?J/6縀˴bpŷ1~AZ "(!$ ONoHHendstream -endobj -893 0 obj -1657 -endobj -894 0 obj<>>>>>endobj -895 0 obj<>stream -xn0EAViw (6-]dCStF"]UuvE6VH9s=Ii6 ZIV)e;64O9erz)W^:UiC -Z$dEPNT*(y }b]Y>N̩_Y'u6W\;%uǗ)QJdw -reyO kM.WdA ~xB]5] eHold@GȠEL0pysKE"p -<4@3[pwMǓ -ys;ײ -ȉ)g`lrO+Wis0A'оGDH])=h<HaMҚ]eW8(e}PZ -ESHkQSF97jOtλ1h>uW)d,ERyO{l`#.F5Rӑ\ёsQl1T- `PVoRAC>D`ARs$@#&0[)ct&f]<&.T쭼*iȰ02/M$Ge{L})|`+ȿYeϹH3E0BSi0 b$Ӌ׬!N$3Q00NCӁǓ>Dh޿̈́R7$vkc_sJ|my.sxčF:Jy`P׸"Jqԙ ϓ}R>>>/Annots 77 0 R>>endobj -898 0 obj<>stream -xWrF+]%M~(q"ɲIK`I`a,@I샤(:KRcw{YL}4Ih08{8](b;ɔ~WΛY$Z*4oJ X -J$zxfWn ՙDqD˦Y6J!ű2sZ%op 5iS-s)<!H)E7t*Yt#Je -CrYȲާnnp@:=s̢1i*7/+e/+lCȖo2Ž[a-!4?CVSUmnNY[#Y P,7h:k,B=SozIO>LP݀b#Q $ .Ѥ\,$m~@42THDfM'7[U[t,kPrgn 4^7Xu?mZպTH4-|O,z١=ܐLkgF֬ܕ6(_wfG F+pUle -SZ UrҽjDmgHnBbD4/< |u@ *F=IoY$Cꇾʋ{u~Hj>kb7>"sKÇ"i 0D-7 {F ]頏Gv;StGf^6fsvG?pk"b<*Qj>aR8.l PYN:,Kc鵚j}ܰwh=6L$¢(7sGSeepvɄ藲r) q> -*7mP)nzqg̫;,fFֻp#~ _endstream -endobj -899 0 obj -1753 -endobj -900 0 obj<>>>/Annots 89 0 R>>endobj -901 0 obj<>stream -xXێF}##H#v6Y,<ȖDd+(=UݼH#g7<ӷӧN񏛈?eLɂߟnՊ)%djߣl"i[0saFQDO[iS&SzJGO{4UuwWidyO_owty%?yQ)س|LVuFMSdT/[#6$dM%\fr Q809tq$Gp* -Urc40+Ɩw2QWNLZh~+;vŪ1X#/֑K[?;p:e#~#2['+l%>̤Mz -Fx2` xԹ6B0YL[?)1pcv hēhBoB7==4ۧ<9Capl邏BHl\ſJVquf|Q!+`s33OGUnԭ*9Cb)OXH9Q^GbV9m_T`pxs"w^e˓V#Jk^ G|W`sň=m=`OOdԙ-rfyp2Y+F}; i,Hi) -swn9ЦA ^Thj)(\rh*i ak3֒V^.H:$L:8$13؜ߐ@&*.x{I5 )@Sx1G/)Z.E.b,t x}2nOUR<&1`LT5Қr!6Zޫw}͸U zoXk|1!4]+ MNjIm9smaYwK.CN<}J3řJ d-im,ԺDE ɛ%(9z26'^ -MŵoZ|=H>6~BuZk5ҡjh73K3ȃs`*ThDT,PV||{5_>aȧyf|>̖K%sދ :endstream -endobj -902 0 obj -2101 -endobj -903 0 obj<>>>/Annots 92 0 R>>endobj -904 0 obj<>stream -xWmoF_1E 퇊R5U r^;U|ٵ 8HmPxwwfyד5jQMf~ڿ%+hR{w=%7qL&]|{8jM78㿷/'M:k)Sy+~g}Rqs6վw468o\ ^i&cp?O^=~4n|udr\=[L9ZNY{|~3?MoMoir3f:cl6H^/q"3q㶛kyIŤ@&j$qH 喂D=;LD AkmS"KKJة@Jdž̤X&}A=k>_K8Hc5OD -^ʓ$Ziom5n<ڳ> voobN(EmuVe,OD '2:O}xsE&W l;-\B^#)=IBeR -g@r$.'SF[T!m1`oBi08&[* :Q -ElHP+̱M >Z$؍72M"H7Q " S{W,HyuRL[RT$W!%q鬙>1 -S"f)(SɳrH1WvqdTAzgF+屮<m?JzZG]9[&:1jnxDSm, SśTXkԠ:TQ&@k6Ef% ^K<]xV+)ĥ6&&y^ &BhG!Af3R1L>TiHɬDꯙHbỸ0^xF.kܬݸ$u}}dVE/}^ѻ}9-XWPyf m-c ׁ[I?fb ->0Bb/;?9J])Q,"I[a -vQr&x~3#> >Lind(.Z{t$ -2kl)#P+{! ւƆ Nי! hy"P?Pb>>>/Annots 101 0 R>>endobj -907 0 obj<>stream -xXao6_q6bE Κ$vDj%Q#8ٯ;Je#ZMQ#2)޻w PO.7C/S8>GZR¯`l>u 4OӨ3.TҢZ*-dXOi)EY*Px ITj{ -ViaODbnBؽZFUHT)UFֲT-2t *H4cVl`Sf Z - -oe$"O3kZ kH}ϯX&bUTJƤ0{-]2v@sw-{ ^ G} ^K -yHkeݯZjUzlӒ hr~C?F;zh*K+@˄^ @4AwmfuCfV`ژ YPGuby/3U`"'ϦkDGy"S"ޏo4C|4fqX] ]6Yj*P| Cꗳ =+29# L1ka4p΄.DQ`b}mp4;3w(5',P !JZOc|W*V\!œ.;{ -Nl7Z\OntZV2gz{GW-?/ߍ][ӹg3xMQJllGdqOVf` yP&(f{Bw$[lߣqt]55g>V[ -N}՞?i*IF2צa LR=f ;&"U$F:yō3 V~;f[.g4:u - ܆\HSjb2Zhx 7pMN VLKY4N]<;\rx<p<-W y'ga#&{^t/f{l#7Юc\}|48h7| -G\6s/*579.T+ͦ-njGh*S]ru59 k籬cf$ʽ%c'%<}MgE1^mm'GԷS$Hz|>YWono˸`7j+G "7J yKNNd+"ߴb -L9ZoMwCl`BWHP^Q"0c*ޜY*XM)]8ٿQWB}+z_TPfe{1 C[u{Y{!@Qufendstream -endobj -908 0 obj -1839 -endobj -909 0 obj<>>>/Annots 110 0 R>>endobj -910 0 obj<>stream -xWMs6Wش(єKpueC. IHHB@ʯ[h%v;IbQJcIi6iNE}jqtvQb'Ō%xLbd*jRT# Ic!ˢ(Ydk ^$m$Kn#b']Q4&268|EmJiB4릑Js ,v$h&BHc]qJ~?JY2<˓jJir]U1r -6HSPm%k5ua4I>:|SY5TJhNMO`@QQڣ||IJW`c%<)%cPY)f^xIrY(ꥀJЭ6>2a>ng4 Z](mq -+!)M:mVB)$7-RջEc?&]]{_BbdۭI[T7H i!+zmNH7 na!pAY P;dݧZjn/I5o1}٧xBF$CU ˆER7Sx7(AWP$|})R+V~U Pιj@в^&pBT@EIKQ~@oHCc^ҮW-@G2z+ k[ݜxή`ޞG^&nV\|j:,(kʦpչ٧,I)Y ;"G2M[{v *(;s.zOO7,0jNk4 ϟ@7: -e#D_K{rVCy?MY:9vLkOޣңW^%9N>O7NT]@Է͂.1!c'V?)+(& '&d:K*|]Lg-bAx9Wz/d{{B1#8}yv:t[SHXˤSO8q[%FǖhR|/43Z1zQ l.!^i@,1|s~Z.Xr@-2x9wƳJ;`4}XNV`u*|ȯa[ /*wPNXC}ntvȓ'l~Fi+ob BEgf3vreϺqg=ԸPZ\v~[$Τ0qhèa -K'08d -(78 uuD}9K'INz&P{QB !@=KOB^ʝ`G[s>>>>>endobj -913 0 obj<>stream -xWn7}W\IA#Yp817n"} 5CIGH{%9Z -6dsQ=i0lsnvavL&t|+|Ҡ7i8}ﭤ%_)^z=-a~4,]e-(W+EQɩ9V [lMдT9zC[irO~-<"{+Iˆæ|L$.{:[V.xVit)/ѝgC|vo6>N3H;CL~NfU~OZfOʉE![FxWxy;0ag|OQwafv h)ԍv1oWzi&>mJ\9b,FLB@B-tk41f_;kTVVT NuDd8SL8Q䭐|K1B;C & <%1BT(-Aڂ\fU EĠe{A1y4N< rZYQBɢ@8^ڥ@ZrHu?]Hc$0:1M5['A)#FG%.f%&H0<'eek $]@I2&$N˂`f, -];gLJ&#%ʭ[rFlo,DMiXA.͢r@CC`HeX% YB,'BQD|fK0,prU YjJ 5eA]r7X_ -tyUeia~/0Aj"x5_hz~hG7I$j f݇dXn/ F /gWc"tywU,.Mye>(gނ<4"'}:#F`⇟'ָӰd q. Pl38vH B&h8@.CU 9LIV+#S&BM -LuRj%-T% - Vҡs5'yNK<}~ÀD#CE۫^g*xz_Cb~r ^=7*9=0ʵ6;;22vq.7zG2@:__#*F,pFiqCJoě+Qj;"R C4\˜' -O]p=ZѯаQ"'s/c0Tؠ1[SRmʓ̀Vb:|NN/~Q̀+gk BϯZ 3G࢐`/ᓻgB{5!t "Ŏ|p"a"jRCopbYƻ7gX;& -Z-~1"QQid8||L2ydT D"E4(M&"<+C -:Spzu94m8ª4סΟ./ѓ4{qkdds`V;^k= q0e 5endstream -endobj -914 0 obj -1526 -endobj -915 0 obj<>>>/Annots 113 0 R>>endobj -916 0 obj<>stream -xWMo8W-Go Ewc  Z-%8mEIEP}y͛W)M/eFjrtN=,V(hLSe2OzjUpJ74퍮A;AY2MYd3:S>'p8i0xf8Z6Ja)/EsmG'In%5IkR )[hCFVRXi?P4NgGPECYYYm0xC{]UWT -WڄF+%Z$\6G[2t9# H"aG_ThjBZm='Kn(Ƕ}E%GHYXv'W#۪:g3HFZ:iÇn$p8;bdEmXz/a&'?K[0GzYDVyq} *JnL=$hy>[䅓{KnCI!]bKֻsn%άҹpȍN̹C'b(o7H4텪,)GtR 0E'_2Gt!t^(jV -ddu{781$v?BHES DD$ $W;U)¼  -둫iCb )ĶXF50 $Pf3R[H< :^YOe -u𵐡wkd. P<]i$^&tԡjX!~},9*3H}UM~lX:2`~4Z7 Y]) Ģem(H"G.0#lyc?vjksZP^!sYJ!L[~@<J_Ћ J<4&,oyJ)_}!|>G Ԕ.dUx97d.͸t8pG( >Ȥn_W -Ju2"zh{~{? )z|u%:`0~nP684b.Y 2u{ȝXUod5)2{fn@СWex5wW{gWX>o߁3+K`+Mi~+;oRZykzp{'y<tڧ]%ΕS?08I+],!p]yFɻêqX~^/-|-D endstream -endobj -917 0 obj -1405 -endobj -918 0 obj<>>>>>endobj -919 0 obj<>stream -xW]o6}ϯ,b#n Xð ЇvDL(R!);;[maKEy=<\dJNzFWT''o'l[aBlF5_ĭTa.s\l-F擫lޏ\]aRA!W4в-87htW2+uʄtcs-kbyw^et9eyȦ3ٲ-&͜tϜ]ZyŸ .P)}Td+Z-@@.zRtڪEFS2ϥ?M/c8 - 잼t.X^K8ڊ)3.8^Bⲝ|uÖ"XeqARg[Ih(BDGo Trr؃dC@ LɬiVQVhQ .L@w-Ba"ȉUY6\0_ "eAY$Ji\8agN(c#4FA [iypS2"`m=fޮ-Dc1 _kPz΀1C3W)MuNj }:߮U-Z]~׿ILz#V 7z[nJTY>ͅ{ei@:؏bL\aer; 衕-ڨ#C?sc#Uۍ;ǘgT+PhnuS=NFU s-'Qn@Dn )-\S`A=n{WN> ͗67Wֻq (t4YCg b}1";w"9Hv$<_J}GIc?8)5VRJ`E4 #EXy] -6Rǚ,B)C=K -2m 'Tܑ}FܳYF#De/Un1YJAl=#j/E2pu$ juo~X=5$vq~GJkg@_iCStߐS;*_Ih!r2H4V(\"!Hl#h0ZSo(lyp=6'5D -*>݉JUґDWV R-1uQc{Bg_ Z], 9ZnN9wsNQ^`q9")]*ԃ屄߳ cZ.7C1qѢ@x N%]|h>`<<suϕSLLu"`x+{ϑ9Gv5bU0iRH%~,vdχ1iϓL#endstream -endobj -920 0 obj -1444 -endobj -921 0 obj<>>>>>endobj -922 0 obj<>stream -xVYoF~"I%Rv EZEQyX+q#.-7,+{94'YB)e(Ǭ0ig)I+?G$Nbw2N҇8J&)tLى~HQ({X7?";GIDo]UƨI^/_NR>Hf`?PKڊ{rr |A@`$e:a-awS)\!LWs*W-dY͌j -@i310AC0붒5^gT)#"$zضQRbc$$ j {/hfhŭ /zYX0\wsؓVR%6l (<;l -TN.U,V=reWKi6TIkZ.ŏ 9 }D|>9+ p!^uz¦echczPry=rit, -YH)AX[Ơr_ CyVR-eaDRn D8! 6ԫ g_(ĊIɬT.5uc2+Oa3QںaMXD{Q+IRɟL&+a7@Gaq87tu}>\_|VwZ[i.>]j)m.}>`3tss%'9!x(?JXk&nmC{} /i;8G+_u@?u&Kbynry2Etbe~LS;heiE U5kc4/Ԣo NL&ڃ+zrh"XhGF]aq5Kt=FgAoJ77K-1Ҷ%#ڪlSv:IƏ;v[ZBa E< -n lBzPlEe 6 `V[aFZ!|~ Q21cY`I_ xgR0O+\{oϏ!sί}0|POטڞk#*Bf G^k9+/ZqwK7"/CZ޾Gz^пXZ.IƔCvhet=vac1esN<( r3"s~q烽e=y~ʦvw{cͻ-2"^-WF7:[% A`5JҤ﷓}o~endstream -endobj -923 0 obj -1321 -endobj -924 0 obj<>>>>>endobj -925 0 obj<>stream -xWoHbJ@#C6Tmk*E:-^gA?ƐU(ɈlLgSa4íqehJL~iZa̦C8h?`[Mh?y>E|:&4 -g2V< {οZܟh, 3X:a+Ԏr*-VlL<ݪl|3^^yUIƓ/96tō*y'{`t+PIMi3hxr'$򅵩v*]ay'kr<=#uv2۴[G͍\|5M 3(A'a`&GLR(|(:Q>Ǎ 4yUY_+ 1B|%걷eV/5J@樚]BQyigbƥB -HwTxK,n.O񖣱[슍=ݝWEUQS_X d Y!.(eѸa*"Q1(.OYBp,%4 vzBg?Od3XX{ !r~c4CW}~Cެs2ϖb%I@J#M#ƐƳY;@CwZOp]re԰D^ Q89bVsPip[ π,! yoPodnV"mqSEm*Pfő$F;% +$<-l͑VǺZ*5"ܪ=1x>Uٙ@}sUaS#NJdMcr -38|iq4YE40b%ZfXv8,{ne X}?VM D( R1",8&XV{8E']xYG& [PV ڀS<l7zrxHXOT}4Bp3?TٿUL|9XH*aԔ  S49xuJ2c!2RGbPD:4* qH'%,P4 -ô|qOK1'\B%Ɲ0OE⒩__I=nU%^'R חe4E# MjE=`R^x ,"i2@de䌭A|?puendstream -endobj -926 0 obj -1583 -endobj -927 0 obj<>>>>>endobj -928 0 obj<>stream -xWmOHί:A%p$7ZN˵9NB'-&b54?$y{yf 1~S:tNYyzy`,SϘ&i2 ԚVxwL$={2.\L.wz.F3JSZ|qF\Ǵ̎V.U FŖx|09Hdr'itꑯ+FEؠk$yJu\%"9ֳ1ȾVxKZM|(s98-CKc'ko\ST;MAo]S(oxjkcMAXC(m'c}@uNt} Z0z0EAx9Hu^UU7U!|L؃iLs4`G`t}N)pcOOO@_$De8 P5" 34dtZԌ]Q,XXTna ВšL[Ʌ#˖\KT,Ż@Ł@RkZ1 U`޵`U|珕#:7:#(%LU`&G}ʬA|@ Ժ֡O FJ `1a]^ 1Ek=m[ݏU>!s~}{Pi^P$+LYI"me\w ~P}dWb~:ms5;qh;nA%L&8XThqGFB!k^XQ@QNk6ӻ MEޭC2.^0pv}rTYX{]F=A^{#T&Bx lDt`&AtWf.!6kzզ -" aJ)}!6@c.[*B!k_UYxัL=?Y"~2>āNYo)Lvwl4^CV^z9/܃}g<߄8ZWT  xD&$ң,[t67G;& Gx>IN#,>a;&b\k8gbGA9ͲěeS,Nj'_UQ"{d:|JT+,[+{! }IQ"TV?HE ׿Ql\Xg[ evtK2-ZZ?;z"w˒ldRg+>yd ƅ}E;&5$NFbۣ-s ZPs7h-xw - Bay6IdbGmآd PaKV*$7C]8iۉ2^Y".߾n3+˚-ef' XG1gg3,lu?ST8endstream -endobj -929 0 obj -1506 -endobj -930 0 obj<>>>>>endobj -931 0 obj<>stream -xuN0yQةV _ ?4UcAY"qY+Yfv=RUL`")$|#4t? о{@iz-R H S-rx⌚ʱiZܚCJPd,GBQˀ#/0`SIKT;=ˢf4x(xKj%i-geʻ~a'5J3Ʃow[Ěwؑo L3߱tEk0Ruendstream -endobj -932 0 obj -276 -endobj -933 0 obj<>>>/Annots 120 0 R>>endobj -934 0 obj<>stream -x}WnF}W ilIkX@X+1eK=3v(̙34)]h~Aq~~uau4K-&tFX^l-j 3?xE 6~qU"xNN[^ǵM݁2xoN|pw|M#)5I䂦prvUVTei2O-o[#?l3VU:MRYkmOMOtv!dߎ?0 D2f(UA+joLokSV+mƉި:sJB>uI]xd̴4*AE2-$*˖ATW)-9W$"i$&s]:_"lpXw7phu,ަ(Ԉ-NYEcAI45FD+KZ$f_I>sW<<5 mښ8=/*pL)*Z'U8<'w}Y H.Kew1IШ5:RU4pl2nr,-rݨ -"o7;Q(S%y1舞޴>cc4e[.wر^DVZثC CmS֎zDzP"~;Gci 0}8[2:GcHho`Wonkj"xXgF90nz}-W5GWYHIH2#qpt Zx/&/_" @ԡ,9?q&)fi}mHeTėyqb`/@Hyzxo=Ԉ8o}'.߹zqK-`]*"endstream -endobj -935 0 obj -1797 -endobj -936 0 obj<>>>>>endobj -937 0 obj<>stream -xVnF+<9H`9rpȥ1.fd6AaȠٙ7o?5݆hO[Zi_Î%jE:ϑL _'kLab3P6R5[ٵ -׶F53B_Ԥ'U^5pBp0bE|7^/낣L)@Ʀ'jA&K:jTsRC`h!a;pm4GQvTkH KK.L|kso9'e* DR}Rd*AcrNZ[!tS8$$YGSF0X#q5&DreCs)yrNmJlҡ 'z5EHutpŢ,@&?Z U,ɤ"_ߑbQN2E%a2~(H+P&Ƹ/YduTƂ88!w+Ҫր&o -.¡D uOƊQ:!fl43t/9k;yTrF/-,=KHMZ@g^I:VM#^RGϢ2˹EW4rkI}Rf;rYy\qet1W{ ,6^:b?b4T޵"121IƴPyYpQhg@¦w>ϚK1q'ۢ P <>Y4r ѻo;w::gұ@rT^F pW1[LMr:%y=j‗|0^u50oӞg"7  fyaq;vVHܱfa@@G*xrf4g)0BF.Mt}yW0ޱ_^]ݳ?>=~?HgXrMᠷm:vk=$6]p`endstream -endobj -938 0 obj -1153 -endobj -939 0 obj<>>>/Annots 127 0 R>>endobj -940 0 obj<>stream -xW]oF|X(%JWp;mќ0=/ikI[R!%@@5Ւ|@F~rZ=]*Ǚ(Ү;MQfP8}́EȞu=S -ȴ!c! HtuMi %K3=\JE"C\KG*&]3@ i!˶"71y)ˣWGg62d,לQQ2I|N5Mzw)c>Mpl ƄK i -jCەU(ctaCNa h]j%Ҋ231G*_o6\>Jke*wma-uCm@2--8_5=nR /.a]$P3 -i%(@ iYIR-gɫU'hpZbqK2kTu?u";麱s0!.:Áqt3L~ vۨlx|(q|)/`<|+=q@FUάA5$=FN'a=S1D_9f'Yow{|8z ROuQ.m]~/5s|>y0)n߃WwA/aW1hrY`\SD0S-_DFEw:W rʉ7E*T-ו"u Ϲ--?7-mS^/_LܑԦAtK7@(r7Q4[RPӭec1xm0إ҇3y:w5[ce}2" K [ S`P;`zĸ>L?;ɞ߫1:J!%,K"$zW`| ƕn vSyiN} -<-L6= L\9_M,|i8=qDžĵ#v]W<{`a>aAiT*9-ym+eȚFAaߜw߀-i~6-Wy4? U?endstream -endobj -941 0 obj -1500 -endobj -942 0 obj<>>>/Annots 134 0 R>>endobj -943 0 obj<>stream -xW]oF|%na"%KrG]VuNIbB򘻣ei6HYܝ]};i1O)-.,F󗘿l%4OOp9DtYrCTVL EU^$t|I`{4|*cIFF)-r#':` L h<g -bV~(?9?enzT0 U A l܁'U:K )ݤ9|}=" -2V͜Egm <;'|Kvt:p{7,,6FKJ0۞@)u'E\VZ/ D-BK/wNpܬאuj'Atʺ2t{{6O2jegdʨB h K Gy'<*X)+xJzlg.;j>^͡Qݣt0loR]ds~7+68}fb9֝:|*H<kµ@0f/nt)$: 7%1,q./V`G[f*CyOoCF#;Z}`&*||2K6;[ms|*#s~Nendstream -endobj -944 0 obj -1711 -endobj -945 0 obj<>>>/Annots 143 0 R>>endobj -946 0 obj<>stream -x}WMs6WQiRLNt<8n{"! I0i} @$D7eo߾b$|Eiyn{a{G1 |b/kZmVQL%hW=򩫏 Jqjmf/iNeJF \.2У(wLFTL/o!pY9o*No8=sH"Zwrv^:CDtxP*5G'M<zRU~뭓,?F╄ ]/I7Mz[t"rp挦d6gG/,!bFAq o}8;FXJ;ᰪY:@!jZYZVT+-}:;8VX,=S'A-DO!24W< xW`QQ&e]#4t KϦVRC|v]KGU2cG81ZW?9[E wYT8H>Yԗ m!H gX@IV#Lp6ї梪`w(DMIcJ)*jd%J!QVh.\m!UmE{"MUwȲSuׂohFwM*=VaxF89d۾extf<Ѥ ++¶,dEe -9MK_'}Y +P'Ѡ0;/)N^RKYz0]KT)[GQT8qW/´H2c;k8 -]I6zߎAI:cMK5N,S -r}dr9y^Cm bZ# hu:25^Bu̚ygApRqlXyÆ^fTн"Q%߳D1t*iAy >S kFvĤlYRҖnRۆtibxw.,ޏ胜 'vՁbJM#Ac,4e;CrX=|iexz]aedC2\0'5e.LF` -4Rk^|g;^^VE#z.\{ǨڢC}ۉzņɌlٔJU#crȲ.0 1NyVY5΋-e6>2٫~ܩw'ig }@u0A/OrbU9ySs*I7kg4O t汛<Թ{,5fY,iς%&E^wc`S -I9Tٷݙ]ρg1TۻwtZc^<|zwC~ENKw$q4LYr֎)V`KeſPendstream -endobj -947 0 obj -1490 -endobj -948 0 obj<>>>>>endobj -949 0 obj<>stream -xWMoFW zrP[dGrzK08n =".%ŨM"͛ד\\V ZJR[\ܾť3YndO]|>OdF:eNk+M]~jɥ/aTT>-7vS _g xM&bCwZ5YqY4O?LR;f4ym.#/#iTI/+Od~c3j]7˪m;S;[jx\ KƔz&Tx)1eҩtc@LOpƝZUQ|k-Og7.X.P)SVx a8={ITQ3y(VmmLpi[h`ǽ*w&AViqŽM\ޯ%uB i -@ê4Ƚ'!>R%:7^*jfԨPr.D -8gy8kmBtUa@!$#<*3:C`չɋk(3&of k͡Wo^>M !0ftQȓuؑMMC@ҥujº0I -٢'B#NrЖ`(#eиRThfh@kBLСfM$EAWuZ΂z}}XIT"&$Q[zc$<5<5e!b;A$vBC @W5PԚvȐ1SծtL NfXSiHr g74 xRk&JrSRJyIqk5vv@ZA^Xc@7ҭ׺BCQ !&PB}rptqKHh7|dh$^v_&9_n0f1;,~ w7J;q?o/$[hTSM99@V:X/t-^D88 b) {hJmU |v >vd@r`U󠘤eu"w2fx$q7`s,&x#5N >Iႄ8 -%wڃOǺDR3¹'/F JKN`kbrŎ3:hFxa ` -r}PM*[FDD!ssxE^N"_NwFÚ1XٸLfSz9X ##=F,^`MS2~5ԧcz^"7,S^]32yk7զendstream -endobj -950 0 obj -1670 -endobj -951 0 obj<>>>>>endobj -952 0 obj<>stream -xWMsHWtT%_$hn-,1\ZX"͘Z3?IJ@Lw~uŜf5-).m.^6[|r}{CflFt+ E>|BE)a#9bQl#2\)OdGm,ZoŌ'9!m mu[\u"|2J:يuEuPis<圢%QטQ`/}Mf[{Q^\OW}&{mO8SCθ/3ҞM.HŒFEj~Q!u(ѻχ4< OiS ~vԠkⲴ?l2U+WIGc.Neک4nG{Skjg=GMz(pڱuڔ/ :-vWkx8UNTeclY%d]9י i_ppӡH?z&k`)>yG4k9`Az'hФ7 z?(h+oiyie>.s.W5}S/ZMNS?$e]!\p£!#a7uA´ngEOLxΨEly P 8=в@O2&q{bCEGb2J)N=jdSFL&Ac^a<\zJ`G& Tc%@:1DŽ>mb^lq_LRI&% %@~;Ij sDFHYV==q0m{T 2L /f/c6?}z|ν  9*"z :U6؝>>>>>endobj -955 0 obj<>stream -xXMs6Wش%439u+e["A1H0hU})Jd~}'3ğ{]Ӳē;|(2e~:e<'UkZhZw[|^loqt?:}FbqF'EVsFZnZ5;Ov*T͚]Rحgt>6 /q6|C ەJy0:% -V5ٚ,C|SsFX[խgHV6b&[^U]o>u8 *hKҨ2xuT\'Rс]8aΣumgRAL%‘3R"r.=}YPZք)\_97ks,=d ֈłTۚ*5n];U׌ ڕ -ȡmլ*p6%r#;rΩrK`˘IYv- B$x0~,Upħ]U5=*0y@0ת@@vsat2cOW1P,IT+.:Lj3Z OB^2TDϗ Ozavw3$⩱kbT i@o#*7g`|#P2k5s)V] %wB!wVP4L 4 >PR0յ-12Bp]u ڷ:gƌWL5[ ,ˆ3)QEٶ+î+bbs-DNH}U -b=.r0ژUj[tm$\/ |˫]O4yhj\^o3mc I+k@l~E =)(]E+phV _/FLѯ CQ ?r1 C / w˚g=tcH+fm Mo0|/: -!vBh]p擈BB S$$=HqQ҃+ -zLqs0&#,W 0H%f!r[e.ҫ_'P4 )x>K㫌M^&Z^<ʜ -e퇏]t[ #-*݄>y {S~u O075v PnzDCEb^c^.Gy|}lQڨWΜmB2@:bp<Έ|8LН(GVcwPW[W[miNK  [()[QCˊʑA+TaoY;")zc^ˢ(LmLը,Q!Nd?<> YBz= zk!䦒;G7SM% -J(!^kE~a9ɺOQJCwR`e+X7Y $+u : ]!2YG/yIn8a:K%?*B2A}*Y6v$S[UgF-^1R)2HEvJw[+^jn>>>/Annots 146 0 R>>endobj -958 0 obj<>stream -xWr6}W[[(ْuⶹ4V&}L"! 6 0)Y߳ R6$E`/gϞ]8>#&48y3?9hD%\ͦ4bxqqAtW~GsO꒪ Dw9-MrJXM۵pYOr29pU?leRUg)]XzxrAg0A 34gR -*ˌ]$Yo .o. \l42*NI9AV !҅_9;'` JUŇ-b+zyiM;[`TLjΊOw:e+j<^`kd/EmQaҺ@bJ< 9_' ]%&)~OQ,#ˮi4,]x6 'W/txvK7;0W'p(J.2^K8)\=8#)oPi4}HpD!7u(3˥|/PڤkZ++Mn72qN iC -sװ 8_!WL=D*BVңqWDqsc5.ͪ -Z*| ]5PrTSy͗BFv+Ұ+F%\tj/,y\A,B,z§~bRHg] Rb&)Y]B*@5jF 8ymQZl1gw/nhzD-tfEqĀΫK ,3TΨ&T`8ņQ$F-Tдֹ(*[Pi!]6\Gmbug2Cp~.=k,'s9/>UYsD>p((+m dy%H9w:J'v }m,»Ks0VF?jm(JZ^X -3W F=U -q(x]!SBwX5ڈz0_Y74hO(X/ Q[:u§e`6ll O柚a~,v$xf:,kus}q~ecg|m8״7t,&<,y -Iٹϴp8!NFJ ÝGR<\y)0=o{+c};5+v|AHqWCsxnL).H#j|D彠Q43~N%r8bփM̀K<#yBR%Z' -[0xMXӠT A n$;d7U1s+c'2 }`1=] /O^+tH)_2ϢCw3v_w~7k^FWr8e(#noBY<~6M d:yr9a;?O"endstream -endobj -959 0 obj -1766 -endobj -960 0 obj<>>>/Annots 149 0 R>>endobj -961 0 obj<>stream -xXMs6WH(˖3=t4i3nN.$$!& w iuzdK&>w=毳Xj!WgogDzJ̣֙|.t'}[N9I.PMe Q~W,e]u:͓b6"Gۈ4Δ[Qw8\Irzl."Z oOZj+('ĵl -}ة6?p​0pAztjSFfhIvGq;|*Fpaq+|Tۃ!}}{#*+LɬUm+t~[#_&UM -N;y}͔OZN6G6n$24W$hM$ҙA; )ܢ!Ewz٠3*MmS}P!3XzUԖ+/=WvM4V#)+v)ig%2aM85A)0ʯg?H> gr0nb=L6ThVLJzډݦQ=y9{ qt$*}fϊLuUegG 䰂l -#9Hl~'hRf$TGt{(ݷeoz}05T uw*ȋz4E2S0'PΔ:}]<ҫ:B.}qɱ` 5g8I]E@Us @?&2nG'桇#`+58~uDM1!/VH~ Nڝ7nd7ۭh \;l@ᨆ4.&#!* 0, -JYi!LӃJbQQ avBjWnJUUAeTY\){h)T'1 _E*SM]Ka7 >>>/Annots 152 0 R>>endobj -964 0 obj<>stream -xWێ6}W Ї*Zd/yKڦCz[?.PPe1+.)c3$ݴ&6\93k#ZǴXQZM&?&peN|.iYbHʱwN~}t+E\0<`haKQD6ken}N46\QH?:WfDQ*%ݽݛr02WjBb?'Y])K#D1B&(L[ɕ 5R%NTi-˜/e*D<:S>)!mn}T剒V| U"(Q0JЇ8-)i|#4Z7/.b wY Fsgn}k+RjT]TKC+ g}%MGxMqh,6,ySP`ڬ<v@uTeyC !mG{;9ZkfNE9 ;AH%TYtVn*4liT!9!-NG\@a25n">ٹe|uQrP$ps]&dOUK"׹]4Ν|s:cvڥJbqG-.Qm92#yR]!g# l|e5_sPe/g}!a],?e]%d&t@Ͻ֢gA#vzTVFWW!0LONF⑇wy'oI^E"~Ibr7Z*0_J3cnc>F~Q@P3iSGA= 8&U6o0^=g1 |l"V[LY^7?˴3%F52]{5,rOKroW]&endstream -endobj -965 0 obj -1403 -endobj -966 0 obj<>>>/Annots 167 0 R>>endobj -967 0 obj<>stream -xWnF}WLQ")Q^qQ+r%!Ҫ~|쒺6dܙ9s𯋈BF4i4x9x5ٌz2i<{%?U͘K?MiiTYeFVQ^EIkBmjE:nULmÛ.@D83mB?A} ql-2U -UFMn>I\~[`/ (MS $.ቿ*1d @F+N.s<ۣ9/ I܏9jR+⇡ݗ]i`1MY)=?sh9+"XiG!$yhCBHf+Rh0%spw#kxL:dJa_m6X!<9?Ɠpѝ~WW^PQYˢ=U[̠+ecKk,*iI4C~'#1hl|ⴲ ֍*e!"\|6ߣܸCYyȁCaV5>Awt}y¼Y =%(iHcZ: |S -mt޶J~5邦acP(F 2uz|3a.Os֪F ZZU*mtj=bZpSmW=n7,}c9S|A}‰S@F WyЧyثg$VhKMBj(Lj*~w04h>3 zڈ:P3 5v;H4͑Th]^ݩ4N9U(dh¨c P ;uQ+cE1),6lmav}lkc.SF>w)yHaFf3iI؈-X8\3FzTULVgmh $C+-R7a85LvER̚Trrj{}udgmZzqB? wƁj0{vMׂ}z]AU MLP.Q3SUto^%۠- S0k)w!/zCWէVwww΂7]-e^x9J l@:ul>>>>>endobj -970 0 obj<>stream -xV]o8}W\u+hJB(P:hՖ2[tٕV،ANeڧ)Rru=FD#Ҽq7nF'iPstţ7"a#hCgeݚծ X6! !v@pܡKggqUsQ]ѡv$٧ry`ʹg55Cb}' S?5s9anGP:ҙL_,rsFwH^$gdpAMTԤDo6p-\L9,mqM͠A{6߲4@fH#"i >p1'#i ͕,VL<1\ -)8өhw>⍑ - ¥Le$DǶ -oCXeB[m0;߰|U7ryx C7O -gf|r<%O7t;M֢%.b >+Dle&LA5M+ P>x%bT9'Airs}vIPvNs0揟 Li+[F"WZ%Z0n jɭXf‰K$iggFY(÷BfG7j@}kfH^s!1mqRř\fI4¤bO]I(o;U)T}]New:q/k\r8,>xG( 1rlITqe8)|>sQT*RbM5IJEܣG/X-]&Tt>ɍu2 Ȣ[bII -꯬* $3KMM3y΢#hr܂m\@;,}8iݹ QV]a!t7*²e[tܬTFlhr,PEbm+*pahʟ;h`"e_Rsgkg;ΎǮsoi*wXڠM~]OҮfZ^ٹmz彈w'O'GtZɓf+v.!ꅧLc[!< njNw4y&OG#v//RN?-k rn#܆EޜzOWW7 4iXt3[x;{w[R*;MZ{=8u CG_!_endstream -endobj -971 0 obj -1242 -endobj -972 0 obj<>>>>>endobj -973 0 obj<>stream -xVkoHί8Ԑ~TBDmjncu?jqlw6nF*Hǹxpac ^uNΛ)/ݸ}rt] G=mDn`Ey#ۯD )BASGS01ba<@aR_;.,Fg?Xpt[=,~ !˯y+&[IT8C᜛*joYbYQߓa3?G!x :2p/U.ԭrj;-P(Uע)ڞҿ9t%-PթP@r}q)H!B,󜩵.E~KeDd)"  -d$Uw@?6:|0??{HI[z18<ֹA~PT!}Z:?< -VyliLwݶ|x - 9G45oY&uN*%{<{lm\g2rv|}PKDJ&<1mFVCm;,ߍ0]✯ o F`Xь2C] -QKYf ,65 ret.vo&;K e&Y"ZQ5a2{~5Of_L^+~k56݋aݠ=@$~sP7_Z']<ۅY鞍YTĦf=7G&L^<'4f-8R{MO_1~Wx-rE 8Y#`BħdPB" u+|(MG95#mMG?fendstream -endobj -974 0 obj -965 -endobj -975 0 obj<>>>>>endobj -976 0 obj<>stream -xV]oF}W\m[ >TIQ*!U= Mwu9gWg@} h21Yn0锎/f7}!?S2oCnhDdYiom)Lvӧp >$r-TRVl+C*G49̓Bkۥ6UѥVZw==ݷ &Ju,Ȋl!#-S|~:_燃p̣777M_V4+b/jwt~9EVk烒߷CtqIQiZ~5/畯o/6ܾfJ~G,H OJ&tuA0z#iEǜ tu3CjAx䢇/0O~ *~pF# XQ% }Pɠtgu!"rG%K,Ze׵f׺JZHT@AqR;p+3S(+H΄)[ylI\w -r -a!k0/8NFZUt19[E8b[IH$9Ka<\04`jt(Jz% ;;0d : qm - -yboKmHs:rȪXj7R HPefN!2ގT);2viX@3{,kܫ&f7Dgb#i!MUXnh˨EZ3 #xuBd[rO3. [دe7mʳSɉ54VƕQ o#\cM~̺;8 EZDMWfD' - #N$ Q,[4+JivvFWkr:-O־9FxvkMkBpis'O nn:2xQ=FK3\]x5^-}G>G_:+.endstream -endobj -977 0 obj -1140 -endobj -978 0 obj<>>>>>endobj -979 0 obj<>stream -xWn8}Ẉ %,`l֏Zm&T\./m<I93sbL#i6)ŇQ2˭^%SM2!'iG4Ofdr5ZhW[ɨ'U+34  b/s#Z8N.Y2NOe;'凯~+SR)}~RkVj]85Oû++:{G p+$z/šdVJKʬdl #eFRRf- -HUQ>O*Nѽ1 &"l'AojzN= [ҽTXk`,Gij @>|=MڰBn3 -@R%Y*aKTըXX ݸvYv Y@Efz֑ ]]ރ6ya9߇݌VaXKeF,ցy0\ȰC6TTS 6yFi eIV=lګ8L#wo68Ҟ_a2;jHCdF[D |9peXПC]1@^Wm k-r(j)VbvwV0`uϴuv+.1p;5 l "6E"ЙzQYrf(4Hs~2 sI0NA(]@>V[(A|E-c-t`0 W9D4"VCEÓ+]4*erv \eﱲp0F'P8=n6&NHS.:7y+-b|C.֧ƳsG0!%I[LZ=s+Rq:q-2E-pJ!ΘonC] }l❎Guu_G4NݼޓS^gŝOggZG9q{*A%Ҵ>0ߞ*ý{1о\endstream -endobj -980 0 obj -1405 -endobj -981 0 obj<>>>>>endobj -982 0 obj<>stream -xWm8ί~`%!,hVBtIH+q$N=;vH`e4HVgOQwzUH FOBXߵgQ[ ]]AEa;Na^P Zpݟ,O 6XG3f9/4N]#[}T |)Qx+FzkZyxJ4bLG /-)G>>>>>endobj -985 0 obj<>stream -xV]oF|ׯX E%}s0n}(`#u y܇Ib u)-'4]PVomdӇ-ϘIjdBVR;c}t;+8z6y\&xgNZ"LѢ"QpvT,XףFO_v8PF8`LHQ]+S*2?/%t]\L -)lpxAy.sgۨRZ(<Ɖ^9&ծxCd$6KMVk;*9E\-͌<=4缰&XZz+gEZf+5ܵT&XgXq'\2Xt0x,᫱fDXQ+ D}t{E)|:NOdGU+F`'Kϖ. juDU N#J(*)P?K5;KڙF7XL-yg<:<#;yu$,T%xfE>*AsҢE0jH}c,p3gh}fz`c`K]vԝ -P˗DʯAa;m#_T G0l* ׈\K2+BXD\#0^WtoPc uBKhJ̆ 7lX G8w_΍u q;۬7J'eۙsNnoI Gc0`C>āZ*wĀ?˫ w5ZX# sm9N> -BA0iӎIi{8&q\BcLBV{|铝sv܊QkUf3O7wHgvCeQˬ3xVFs%G#F9}V775۾3BZsp9)`G_!NƜ0xN tZ}MGZzd6~12(],rś5=Ze`P#3#+5l]؜-g.>b1M"c-endstream -endobj -986 0 obj -1240 -endobj -987 0 obj<>>>/Annots 176 0 R>>endobj -988 0 obj<>stream -xXMsHWtqY*-&Aj!b=jk,I#FRGeX?^~Ï|DEdp{A!-Vx3"a0/QzR; -G[*-]le֕ҥQ0"U:]|;R4޽3r;2)M+v3v8t?*SRgb a}d4WzeV*MΟ ,7ȇFyU)U5;ޫR+0]r%娿[4]}{ze0Gϯʵ+t -wDi/̈́-8*Eu,3Ney٨pk$Pr4) 7%?dMPC :Jk/HD=xLrh3ڂ(i* UYD AЏEK bbל@ݤ]FGA- .+MUA@@Y2 5*XxΑ箤Y ;8pݨ'$OPfl+KXS%BYi Q3-;qOLѨ<>V&F.T;k%-dQN90IϔG_ﻻLۖɠ9_ǐO&aOmF kWu1 -1~:AIv ,摇/ghf@;l*vC@@2〺x;AoyHYPү:hd^$R\ -{ Vac  a(x(m43ut5tUQ(v=\~IY,f\2@JLY)["-A,Ծ'^N z](' 7-/cOF~f2C}x.{<Ta vKY7Uպso`F*45@ \-tX| i]so?E-;^\HUqg

>>>/Annots 221 0 R>>endobj -991 0 obj<>stream -xXMsHWekkI 6ru:ط8A D_ &_{H@bW 43uOw]ߧ8QDI~ o0b65jA"?̋g.LD8|ƿ]8voh+ WHB\7PXS$ũ ~R|䕐t( -Fߨ+?nFqOZQ4vCrY>>p*N?~7))(ڵR,QrfC-04HD8& NjW)o7[ t6 XU8ٍM;prP6q=rvOt~U #6G9(%>>I#ꟗW_P]!Ys#$ޏ_&w{endstream -endobj -992 0 obj -1578 -endobj -993 0 obj<>>>/Annots 228 0 R>>endobj -994 0 obj<>stream -xXkoD_qUHƉ&-RX> B"4'w7 s! H6ι?R'ńsʪҔV4^*q2i QY}YNunj$ĺyBtkt-)V!hDVSn sIW.VϾY R۳<|1Itr  x1ܾ7V%{~}›. 0N l 'Ek÷yrW[IF֏4-rDZ*'̠UI lJx", b1 0CH0ѮkG %>lυq(+ ,VLXo )+% Ǘ])-磨 iAOtn ha PPY־[ cbݸeI"8'LΘZ(QMp5ҐҖ)(ծȾzuJvIY8X~5Գ1SIcsh~C(Y0H9%v%3څfTtL,yѹ͊\ngB}mWIrS -(x -\0}GsZ>w+x?ݯ (Pc :\^E$Gx~iP<)n;1~"0ʲ&[@nZcU8cV +Fֺ,eV'lڀMl55jUş F:2`'ͫHM~ L|_9>(>"ݲ[CB++(^>D:@s W(A4Q[T7`&nck0PGݠ!fB6G5AP-25^8]\L: vvAH=H( AAe`9JHщ?aQ:ړNSkOP`ƭ 2'W QT -ׯ4(mN;Di2TS#P&?ȸdNky;xx{,v~-JN܂G/LL(S. usvk.nH.Q> >HjhX\4>~Ӧ6jL=2Bწ969r8R q$' '^7k-Ј oDi\:;)N%)Ÿoefvl8?>\Lߵf^-;9BxvXendstream -endobj -995 0 obj -1869 -endobj -996 0 obj<>>>/Annots 233 0 R>>endobj -997 0 obj<>stream -xWmo6_qK;"ٲIIlvk\ 2 l%8ޯs(+N~Hs?%44PZ~ 锶?M!s4'TJQl &Iv -@N@dzLhJcgbqqԜꭄ댢BK?Zrs$CWo`F/ܿ#rCk+[QۍZbjIXdvHk*Z[-'ٔWV3(!IcBg @|JVtaJwX,kDFY6[YW{_u_7W$\U48|% |wG#OCr{mfTiA{m]>ϕ߈6 XGlnnaS(戔P&mZU3 - >$΅֯L+Yֽx[bnM ꭬߼MG=U}4r >B(Ͱv$ąk_D1T(,ק*aR֕  -Ydk#5e)L}ꎚk@RSZJQqZUd+"e In#i;}BJ0V_(6kMX)S[1ε֪P.0Mf6Xe 'iA /rbҞ;/ڀ'-bY7~mrPKMQ0[p쒝]R5Hԣ*HPT|c֬}H8HSSG^y455:m ePMi -'~M$I<~A]z,B%U2S!<KY@Ι0^/E'ߑӹEĥеA%,[濏Udcku+r)A;! Eg44tfHҌ~{) +Yʒ`XrhaTҝB<hm^kJ æ=C?] -s(CˆC9uHsBp1B3:8>Ub|K \B\쎫,沴ܐ`9d -ZsQ.䢔tRBd) #4qwTENWj4✳ҏn4>Cgm C7Y4+Y΅YVq|aVazBBWMCa\9ΐհnՓ"vc N[ C7gПDN6.CbK섧7#7HI 5K!>>>>>endobj -1003 0 obj<>stream -xW]OJ}WVM|@ +1012 0 obj<>/XObject<<>>>>>>endobj +1013 0 obj<>stream +x+2T0BCs#c3\..}7K#4K=3cS`g`NvurT(JM.QpO.M+I, r +endstream +endobj +1014 0 obj<>/XObject<<>>>>/Annots 58 0 R>>endobj +1015 0 obj<>stream +x\r# }߯8U5%8*bɵycTHjt1$ѶU\3gh4f(YWfU]-^WOdmEV.⅃kGhIZ5)vͤBe~Rc\qi,zFȚ9UjLlB95%c4Gz nË̛I؊k^<ה|1%A1S"S`J4SHfٱPΌcuұjJNZL" 88)Ʃ)a:FzLe+<ٱHJ*[ylT;ʆqE.3kP'amC&aҌƪ)U!ɔ9M1NM ㊢gTC1md &aZ1cUa +et$C`4854+1 : -: cuL +l]Iƪrz=A@rCnn0NeECnNbZ: ԔX 9JsI(=ӵ b +s5S`67aL=bUaE&P@R8pAA#=V۬N, *qtPdM`!4mkZy /Gϕ :%%L!H'Ay M$11"WqJ"ƭ]EIv7H)jެxzZ7*]+ )125}J7fՄxgd\ÎX +ァnf[7ju/K&޾ѽǸ^~` ?rݍD=x[^߮l:"GJޡ +S]]j8-qfgrm\06g O'ow2fo_f߼,$Y$-ý:esEהQU'9DW#3WcGLځ[ +W;zH=ՑRrXhтxwJv +}𣽷Yo'+"ZXzY=Na^p3" ); +7FwsZ. ++!c4 +Jj>{<,iF:'+~8qVi(Aw> w;qA[[*քѩ}D~4;>hgdL-qb*;hD7F GO<#c3go +>CN^$~@e# Fи'BuF8'ndS t4CzIj'bu}'"ބX oqWO^0Y mQKZaI"-ėfy `ǒ78s9#jl{ !.|)S쿶k?U&n~@A:p*O?}'r|~ +g:DS+t+Cd7^>ڻDqo|yyBߦP՝کx8Mm?_3LG;5/p>|ls/\C|zKendstream +endobj +1016 0 obj<>/XObject<<>>>>/Annots 103 0 R>>endobj +1017 0 obj<>stream +x\r}WCB)ʒR$,d}Nt@4uqRE`f{z6KQj% mFaƇlY1ApQ59NdAF*yQLZ2PLJpu#(DC61j,t0ئq0I%uhW,cu;X2cJ>U46hwmB I2m7`ôHܵZOh'cڦz*TccLKpbVp1i!$1XB`B&f Ce,fT2[YUC,a!0Nf.e,9M%*II,i08V=ksm=bc&KYXv04nEM2[H"0X8X`; E4"2[%b խ53 b .oI(艌d 5" Agil'L,ae $XƲ7%,JňE`AWE%Xa% w[ʂe :KXT [%X`'YPW,fⱌjUd Apd 57#0Xc h>1ئKX`Rq4$.IIvZd7q:Gb"),21Rl-vH,aQV'33Ie [ Xr膫b,֢gczVdЧWo=2 DUvIܴ8FW +aFF2ƴ56Ld( +|!ǮG"ˆd 6lN$[b%dG 0qjqD%!98۲i9Ib|:g񕃱h,a;(`<0Lvk -H mhr(zB, @8Bꎕ>jJJBb>v~v/A +b6tg$cf X²g;l%u7"5̌ŝH,cHXgÞ)J%[Gd,j@,a8p<1cQ"l#I"blU\gEౌ`D9(qAk +\CH3#;leS#( +.DIF2$NY`X¢~=>XP0Yl$ɪ,`JJs Zs&µĆG"^X*R(GF.<8H##5,aTX¢?U7(ɖDL\(4db,I瑡aZ|r< +|ڡ+diq6(nּ}̜d,D,ae{!H* 1EΆP ,pM!% :C},a.086'>3c0 XpX4f*rj +\TlPEDw٠86n,c +;K,Z>g Cp8tJ +ZhBSiA*LD2[IBC$"0[ΉMP}`Px9kY<˵mz\Y'I\2SHkn Ӣk~Pگ FN + 41C%,Ms0tcElX0Fv1Y8&c,c a6Anw1w$Nr5D2Ƃ ;` 8rcmf`q!jXପ2Vfߑʌ"(*սsiCрtp3.2`\fS#`Z"íP&sdr-:" p$Sn\iSסֳ"QeBm9%}L/SBw[HdBeA,-xR뤼7NnLLkBĄ.qg'wəc܃Uvrxdrg~{>Ϟqe#ɵ1Q!=~~12J&L{8+G +\>'yU4buҥ;6i|_Hhb{!4b?<.O'/35RHpBQkUZ|vd`h֯dd}y[\i.*?&.Pjof~3 .t4m4qa0*;Gj3Kێ]aV +F %Baʅ=Pՠ7W?I=>8XhR<|^*;w?||2(2SG3u1_ EdBBg3#}BZ)JE='!I^m`~W2œ AD,ݫ ;A$|%F"G<#lӉ$>xxFiήW32`+i,\ĩѰ0Ge(\J&OWV+ +rs1 &]NZߗp)$n2?B;RWkEp#5s'_(}Xg~2[\f YR6 ~/@I]ՆO]=sQ$F E`M+U-!#n|֟.~O;bݾGx3zX0{T2wb*]^2u +4|ֆ*>vO!]-8uRjƍ}t`9hlmE;RhX곜^]%ޛdĔ]&Qw)|Fo5 -WnWW:A9Z p%dFHZhqu|iwhLdgK@%+~Yk? Q +{7U{.N'$gkp!}~CZ拾b)l~=o RYz~H7VL"_ABnT!nT{]mpr+|r>A ,~um/9pyf$^ÝaNޢ9|OOO.aKS-&G:;"YPU *CA t~@;x9OxPQoMcۣm +=ݷ?zF$u'.~Xish?n|'ryTuKe54wС>&ϻYPp5捤$d*mWdџK['n8M)^L.f†#i^w<ҋi"۾+ee3-N߭$k jܘu5 \?-ߘ RdHӗ:^$N&kz-yu+%ً~vM.qoNjɣ>/XObject<<>>>>/Annots 147 0 R>>endobj +1019 0 obj<>stream +x[s ~_q'wyɇNGԙq-yW:I b՞:=BRi`aڳR:Lʐ;aՠ` +`f9HRe`1Wz 0RDpcE:20q7+WA^G9,!r>X^IbˀulEAñÞKF Eg=B̑i'@bx .N|7BғvA#= !6n,fp: ={ vJ۹c6I{Gig`8DZ9iIBk8JJCSxoNXa1WI|F,Rt޴U1XڳE0u,arFP]"8)&FzLCҙXѥSE%ucD0gFvж{Na`cERN,A(FN)Bdf +3#0Eʰ؀ɕ°ܰ|fQcRVe䆍,if(h +u,?hk`qWu"#Q #ȉYxh  @% ctyaEL-k"^-2mE+`,-ҔCm5,?”TZSleEh RDG5X1,ܳԧe UQHlȥHKHibFvԸy76U:!Ҫ O2X\%(JAN;rB䶵#=&ˑTc\=SDzLv):Lu,0,Hei| +$7u6bF9=QQ_P࿵iPU.翵Q`RB +F(Qll*ZyHrB­4%U 1B ~E!k\rD B91 zt"k 8艚3N@u0c4ApqlCl!Nz"hDKPfN!̂d'l  C@'ЧvepA_ B#$j%}%3NbXu\w~ g9Ol΢E'W|tҳVfح8iɕg +I<,=&>Q{RΛm8YݑplՔz1jblYd^̊QS$(!/]E&NAT+$mvIT[<*ttp7~i8qiLud u4Ʌ=nf'4tվ6EI4L7# qX!UJ®j\ KM2/bU\K}褶3v঳}7}̗v3ŌDy.?M1Ɯ7]n(MhټoD)q95qF5؅[SMF^jCg]q?,ݲ2]52ᨀW2k2 ]6`-Aq.,hMSqÎILQh`],&yM +Ttɘ_uאceTp#LGۅl]I]GtfˡXԫ snWϽ,XCs`bGْeF,c ([x̰&ޗ^kW9naV[TzbUXReN0rPrxZ֙,ކHXq]N^Mn֭ %EFBkHIr]׭d<[=q4Ұb԰~[d]% +em=wD)}48nۄeYnK0W,l~-"DŽB C%e 9 Y?#R4v/LPo8kԵ ro$(wo3S//< pnMv̛\F 7 v#jU@\CCBHΆSNBz`{#}fHJLYMw-]kYuRYNRt gLO .XjY|%8RJ1QvjR@Z9'LxPx շ 5)$%+z:9ݭvNv[ܳ |M +=pw$̎* X$ZV9RV= ,icNcJLx٢"v4RB |qsܱwcԄaP=4G}lpM}s˿fgb=}:Q7dgFÃn>1?٧sr4ھYś@ծav+%qlo 9& d#}$:YƏ|ĿRx|_鲍[\c[M3jk2z6{xNNٚᙒ=wteu6u09a6>z;Zx9CH#\$8/~05i\.$S'T(YlbG&9B.jzwm[_O#[znendstream +endobj +1020 0 obj<>/XObject<<>>>>/Annots 192 0 R>>endobj +1021 0 obj<>stream +x\r }W)q,s3yIq[$m1EQ#YQԒ3xW,oRah4Fdg&d|0='O&u.&G.'UuPGp9i%q.?(#de~lە/'>h,cY5P1تlaIżE!4?#2[4bEV,am10XⱄSY1زC[ԢPCDk@$&N3Vu y% .EYK8 "M;X/E\WȪGj#2e m +Tu5$ + Vt &tEl0q'q[հ?1X2f2' •W&rsE\q'<Ҧe 4e032>V7\U.Pp[Pb IJie c# +yl +fMRDB%6,a(Tcy` g c,% sb-Z2ۨ1l2eR.d C!46lYq0X4YP'ff,61XD*Jk5y4 %91:5ͩ9_^OWG# dS0Xl؂b ~>3aXa1Z2 W2u+ĺ\ư=>g1JCeXf` >-4Ȅ3cQWNe :u% 23$c1*Y 3"2FbԠ0r?D3gb mtQmlx(2! aװ|Q833aQFA– U Ĵ81A#%aJt7` +d0ӄeH{,61XW;Kl<IYUS sl'"d|SHbkb P$s&Ϋ;@ D!Si $cg,ayK}b`Q՗j:f +$8GlNI-I/IEd,zq|(c՘'ʀªI2VQb 6j^I۔nb&(dcEG%(e  l3cppC 2hPH`'B,a1Xb&];9;bō\8&Q82ñ9Kc%,JD,aY7Uƪ2U6U"(aTP# +Z8J$Neva9U 3ikmGtb#< +)P,g9Tꆊ8lSqzD6#өF{Nܚ2!Aph8""IrѤˌ.IcQ8H?Y48P{4N@ Hҍ>X61"2Q{zKI3dʦU5>?<\r_n7;mKLy$aGLjۯe 0C,ہ|>|F>ڮ;yYAu/ \4h<ɧ8geBT<ʻ8'A׋l urOQhzuq| 9X"kV] !Zhk\\~ܓ}{ZFY'/XjCi*mh;yů|5HHn j\4 +nԕB"rf23"`]Qj_ՔywitF >+͡Pѣ6~WW$UDUpdQæe{⡲PuM=+8슢J[IQZV|tJ?t$r}rJmΦН>AiJư! uJst9mݗo^ Jk *㼾PL氖Bl[ŲW$ls6iѢ~^p^>0jZU +؃@t=5:qFr fVG0We& +թE7q0"d'$]uD$"vn}߽y{{|n =N&,AkkX&o paďp3ML i5SR! +ǿy2ȭoP< "diCp=!BAbv+P^]h#3XVhbFd-¡R]Wd-`*Qw ^:u^lPݥyNW m:}3Tsp mf~N"דy%]ElQR2B9ޅL7?ӡhڡOSUA8n&p_Ý,%@O!fb(TLQ⏷F?^D JkW ;Ǽ} ;y!W =kgj97W?<ժY(F +[Zi_9 Qmcif:1T 7/qbE InZYOEs7d9 MvӰWcGӻ2I ?xԦLQ,tSAn$=^]f ~Sݎ 7R*)睷AnWQFrv9/ 6d~CFʌ~ K;~~^lCMYwLɍGN.^wt0=obvjQzz!1!f[dx7j7|erdP]~?i9?]piLսzuq\W + ۂa 6jpnLqC6+ER*j Z>:'k\V6n/>R=>/XObject<<>>>>/Annots 233 0 R>>endobj +1023 0 obj<>stream +x[Ms7W-rՊSJvIRb_hrd1!9!%'u7nPڢI7o@Fcϳ,I4yRluNR<x#=IURt́er}f*Im8WINZJ =PE$墂M+7sH hCuͤL59vxi> l)K,7M|SA4g`m* BY!Ș*FFg+k0 k0ض k*3Tl1ؼt`rRZ՝ZUV#c|ϊ58_Y1o+V`|e3v`-WVb`9+k0b{y5F``b5m_5,rW c(k0 b2~IWgHaȼLb{Ajr~iX`/;Lȴ5lOi[ɺY`.*`K0`~-[Wq[ǬFEfd5l_G3)DlCLгX k00ED1b^LJy=&R1d^VH #8uk1?mX"_+ˣXz΀&@+ۼ@QLhh1X'Fm ,! hC[ilXbEm rCp@ 2!N&e&9<.hCǵ*g fPC"a,Yi,L{.1⦜䞅X H`8e +X6떑ֳҍnn}[>q%9 +N to4JZ \ZD .dOxҰ@:{bE/g FÞ-'BPaɠ BP:+)B ҁB2P03BJCPwae T䬧4V:`j4j[wcL$irsԳJLn\ӲOoEs L '"'A鍊]?R+rqsh7g\OWbVnvW'pR'c< Ę%V=94iNA PI JB0t\l5uziOut@ǟ,,/dA aS+Ϻj5gy5Fv/hclG%wv@DQFЫk]Ӈ\̄X\>F̚6h\nrpbi\*Z}ǫJ:55 +'=c U:h,d (FGD^B{_ jU50]ye\ޠ^t(s/۞D8\IewJACgt~]?`8igˉvw}_JijNۏD#h춶|g+\]2['ju퐅t:š?;(,Z|7rsOS\?KBM4#乙/LO)@8̆0`Kqu?L @-k}RߺYWZAe<|o26TST$f'33 +</d\= tz^y\`yy/hf>9zC5Akߴ|Z3'|6AMEDnNl}dR|!g-ϑ.e4zw^x:]-D^9!BzoՃ [}(^nQ5:D!V YU9~+ůOO?nYHcdvQd,3*Hy sh9 Ba EEvHBw&T'8NP /un:sq!ʾl_:0!>M62|ksk 8}bnv'W 8`8 _qЩw҃|V}=W/~W׋ emh~@_ Eendstream +endobj +1024 0 obj<>/XObject<<>>>>>>endobj +1025 0 obj<>stream +xA0 g;Gz3Ѹ?@H$"oN^LӤ{k_AR s"MpA[XlDŽf i+A/GBhrPC8$yײm'R?Us跡F.]Ƃ jq?xyƜ;endstream +endobj +1026 0 obj<>/XObject<<>>>>/Annots 274 0 R>>endobj +1027 0 obj<>stream +xY[SH~Wt2U .M*&a؇y6($$;#b\2tnjJ&jU̼~C>}C/Qq`q"1ue%ΩU+0$y%1)F&Ma V 3y6MKFDG8V`ց^s`q+0MXVb?lB>tjϙ,' Ւ}dcMfcfA"+0RGXVb +5;V`|,+p )^|VVbZcw|DJ 6a,En>XwChCG IZRb1]++0 S HL-~:Z]_\4ϝCA'OS_w晨T]^]ퟰѯQvfA3u#ҳx.Z +?s[ꊺRFq^Zuzej_c?tg^u޴U]J7Tީ|$njo9S}ں]Qꖕ3ۼyoJnZ8,Nx*k$+(TpCӃdզWks;#/'unwyqⵔn.X%aFF&˟:oj5vFCy=~ޚ0Gb5BV@QQꓮto~-V@*쟧4dJ P{e1*vORtϜ?moVyJYTW[:TiDD6+{^<^MyQ~3馰.>bɗ[M_Uf +T6PS[Br[&ChF>\pyߛV靚]?t@FXgD`cV_b.'V8Jsv +dnS"}᥺n4$ܖK4o)Mo4M!WMMhނ"f:UMy8fJw T]tCq):^B.LlĄnQ> f5tS2?% B:e]u>&}Vrbڄ=Ly53^jr(}tUtbbWO'Gؙo'?;\\|y8S'|'3"8S[yw7g}vHgh[uSWc|Xbq x#o[}Sc%,8zaV7G*^iϵ/j\ԝ-% W};%t{G_NMa`zի{ۑ_1XIzdG)>.X(%X؟"zުڋY۫|M2|Ex%'9 \>endstream +endobj +1028 0 obj<>/XObject<<>>>>/Annots 326 0 R>>endobj +1029 0 obj<>stream +xZ]s|ׯ؇<8 O)>\e霓*$IB@%v:BSWs3=7.l<7?-fۺyyqWg.OGs!ªQft٘SUq>Z +'6S8)bgV14xIo]"L],d63@N (NRY`!_`Hc#t +"4빼\Rax6 x2e*1 OP$3iLhP LI8XABș6>IR1%c8T1c .'JXEV1%@%ao] t%^ # H0  *%+.ϑiSi ɴ p*9m 3!3,dI뇦s+Ґ S*~h2IPᩛC#P4X_m078R &Kf.iKX`)csp}EV1Sg*e#+| +5 U>+FNluˊ.٠e[7y&ml)gK@ S' ΔpC!ZV 6!}qbu'`Hu`ȘU {F+c9U g J1q2eC&`藘6.abhp9 1IƮiFʳxz0b 0Y`a81w1aC +4/DzC}妒xvr;V0XX`qS#ש˺0Xe' M*{B"# O23P$ݸgqպ[m]봱^v^KνpWmٸksm]o6EqX;|%lh +/AwmqW--^\n]=6nWUqe{M~|,T՗IN|إ_GwSw+廵Vn]?DJ7un+eX8hw纫 c~`OEk]{[8C5 s)]vrb8us^Ke4n +?#n`<)a}x {5-w]Uh;گnvs,&x6sPw/1_} o@'O>/XObject<<>>>>/Annots 378 0 R>>endobj +1031 0 obj<>stream +xZ]oF}a +IU`p"vۂh$~ϹC\W~ϝ;~b3K47$D rI1IL^ȬM627' +|>*NI$3,IAdNb "1ljVaE"eT)@Hn,K%[2pȤ88/$vwfВgfiL`gS-,j_ U$Z1,E1  ,F3 :NAlNAzFB^Uj 5GZUd)%ը@HW*Hܙ, +rK5 PU,:9#XN=+B #d!IflRUlU`Zq@sS:591X903~`0{Vc)ƬAQ/U )yRcy>1؂UU$ G4{Va7 +E4ksj VMy,Gp*ȓh7_ SQ3J-9!4e +XaHc$GjL8(Vax;K`V|86a+!ʝȓ/0Xt)(u5&+qP`;V ;{Cg9Q&4sNX'9+PrC8Ƣ99uv'a+y# +ukf₇XÊsd 8Vņ,.xHX~t8a SApi:QB|OK<1Ǡx/psGc^d 3 +z\Hman:qCn=nq'4,C^b)9DfQ)&_s޼1}7foUގ,GRg%AkoaIy iaݙ5GbA_D,[sao5 +{ ъGSnm}@\GfgA a6iw?y۾+7BgAnkQ^agNϖMU/]!m6.Wf/âNuEծkgի@rǢMtjSUt+V4G2|) '6Ѻl6omiC=m6lI\-{+x Zo lHXk4[?-:WOTlGqAi쌏}UOuq!pnh[x{8rTq=eǨ@J8'JikeW\}ݛ/ېY +n7_E4eSuun6z{\x%(\VS_p@_ g +FœdMUrD0V 2Iܵ8/ޛժ:=|^ݪGhl^CXf#I{vs:a/6'  w砬]k+P3(kQoeDZ0[)4 dxج^vq VhulR8\}3).yW;"+)3m +rR.|lLֻ)tX儓/m>C@+ oF@ål,ݶ7gUz{l?P3D{%G~\nv,!v:laM/ OS}L]8}1T6rv vFpzS2#Jx wm_qY5US +樃!Fxt^= +s݅Ʃ _s[ܵ^~8\8c#;;<:{Gh s0HVґpIݓrM+yYPKOgW;tq͏.&1t7ې{<$C?z;13& iv0݉^Z?PшoQOGon.ߝqGZámFSOg ^om )P RF?' endstream +endobj +1032 0 obj<>/XObject<<>>>>/Annots 430 0 R>>endobj +1033 0 obj<>stream +xZ]SH}W[!E RY4-$=綬bhrpt?ۂ?NB'4yd,'i#דtvlsm09M2̣Y'SQr)RcqtZhVayxjVᵉ4V`SMH* ^N DˆRDml2;504f$ +n3#1#cdSY\ȕx!a1dgo5r6^XĻ`gU>c}zD Z@0`QX* V~Xfp8'Ni 6zeA^ +`8 +M2e#  +BVHj 6̦ 5*YJ; +N*DNSI 'l\0Uv Xr.cWFVcv':Va(0tFm ;Q ;}PA8RcESp(ɱ՘p0b*fҲEt: tJBO\6lkrI+TIm:Va^ZBc%-@vjqf#ґ,62Xf*Ly(YaZ8RpZ ;H99Rc(@ +9+YT#'tI=V $IŠUy`k6b@ QT1c-(XH|"TȯR"oچrtq)B|eGKk&"{JK2'v8 Z1 +n.FQtw "4w|rsױ[ǹoi'|*?fYN@ C!^=eoؕ:Sf]slY4?WfS/MoۃS俚l=v}װXo;pbcud?WSw9BңëPo Ci*dK5;SS.si7_6?]{4 ++o^}%I۲^XU1FpkOӼozd~יߺxU.Me qocӮm%og7n<qmUok+mM%r`ɿijiWϪy ͋j]"sKs[$s5}#KzA5DxvnqK?KHo+&N v6RhbDz[tpvyW/pp{yDDڿo;.7S6ڧ^j}XWdV\o]v h\oW6ʉcr}RfL{|./۶6/zbjwN +`c_ 7iʇf׳JrDwXuݪ X.|@8.NC4wΧuRxm]r[ulofã;x3ibUVV9km&xZw46w"fYm1b@\^(o5{R9foriGLw9_׺>b` C61kz=-J45y2+1} +WV@#j˗c9r1VX=#M_Uk\plGVM3|7?}2ޛX0ÿ1uϮ> 3ڈbp;||wWcY?{\H',)|wgendstream +endobj +1034 0 obj<>/XObject<<>>>>/Annots 452 0 R>>endobj +1035 0 obj<>stream +xnFsi1%BNI$47)ZV*)I];t?ٙ^( +OQQRuXA'E yt< Z< 5̢ aRl( 5;&ˆƩ3C* $Qa? l(ƼȚ@8 ӠbspqD *899*Jx|CF Uku`I8 HL +>P(Y2Tl%CE +g+jE`du3W3[ɬJFA+MQIQI>gPxd<汾᱾D}OSOuөNXvSmOjp7;U0睩d^䠒9|UDeR<e$L!Ԑ ىE7 ,Tbrӛ-ӻF̳s<6jW$1o5!c+*Gɩaj n;f XOj=9U0<#ʩf +![_#W p OɾFc[bC+f|7ŏNm5FfDkh`Ȑ=C6i8CD #8!<UWbK<&OH17PCE.1QY0ԂORڠprrϤ88&+sYcuϻnw)-<\CZWgH5+~3Z~+!]`iDpi<^Ooh86f"_קZE49Sް-x HxU6muDij;PSSI-Uy){z:bw>χY_ِ>c1 +_'ƳD*eZv}{z;u/б72E/L‰ٴ(ѶGkDv}[nB/z6͍J˪֙U5eS7. s~7c3tX =e^OR}gx]^c>7/ pX{F7ǭl33Z}]]s7-ze0kTum"gj9 euyG>lB[^-/\]q]> +Na ٳ>ww޵߶S< w,ƛM?te5p7<8b!_Aendstream +endobj +1036 0 obj<>/XObject<<>>>>/Annots 455 0 R>>endobj +1037 0 obj<>stream +xVMo6WL6bڲ-)=n|鑖(D$!Im -~̛7oQFSeQ~EE;)G_>fh1_D>j"_9WK|)Bq腅|&?݌&4Ҧ6e'rE?KiH6lG "8zTGkdIVJC))ˆs%0|}P%tSP* Rjld+꽪,Ȁ@Zc;h{~}7C8Aּ7ȶN;F +H޶*{uRARB}pwi%V"_i,g|oXџZ2ƳψwIsA[C"62#wJ:-yeL܎.L|BX{7*{Y1畎ifb6T:^7%SվF:Z-\1/r=8ٝmbd10xAbWz?'ŏASE(h׶oJ}LY%YFwI!vY&l )A'Q-l(Uz`Zy +}@R)D ߦՓPXJ9˗ctzjq D"Bz;Uh Gl6`U=gar\πņ,QA2mil +E:GX ̝ˀo@yDz>7{2zKo*: q( Ez6Oa@0XQ(MGWVwhhDݬ=+ٯ٩ɸ!z)7KthM;bc,g;NJJUFy! ~F)=[(DʅH4*)Y'a7tËΛ;F&Ϻ Ҡ1}Fu9{Rmt2;+e֎Uk(}?^a` :FYNfcɏ`@f9kĹm >7oATV4 _V#endstream +endobj +1038 0 obj<>/XObject<<>>>>>>endobj +1039 0 obj<>stream +xV]o6}ϯK]?8vi M4@IF"JsIivԴ8v,~s;S:|IYs0I&4?:JVX /+fGdԃo/^ߞ|,WSZ 4Y$tJ%JkRʌ.TZTZ&/_`nASXasd u%ˉfS'.;R:ؖ_GMseesUi>:ǙִBat:yE[[r&̄&'%U!x464M)a²WDpnpq#JTXu;$)/E29"qOdMsJQ%)w9hemRQ'T*2h ВtKBo|$̴!D8i} +s$y,զDh$ۇaYH zVp8х @5`w^&PaRW2pr酪͋bsߏu4vΣ>YOj$(`Մ:K 1E@'d] A#q-x̄۴( =SAtIZ|md +G 04 fļe!9[}5|n\V qm2QP*ƵJ'7/i Ka +'R|Z>E] C5]wo~39rlPj|EEyhǓ:41KS̾m,ď}1BvF#>3MpW#RVHmxkDwZO}'x%#5k( yY.Ђ~}،b3e76&HyI ݓ RB`ef4E~Q=a"1Ǿlwhb0WSs6(Vz\cz}ת+֮n;^`vŮ69V]ޝ%ӞbHCy /_\BkV^fAP\RAStq~hρ~'uu>]b_i]z} V'p;N0r6{o{=4ߐendstream +endobj +1040 0 obj<>/XObject<<>>>>>>endobj +1041 0 obj<>stream +xWkS7ίux72IZfBm&3Ȼ2Vؕ +?0%)a8sP:јjix2ʆ4{ZIӽއ 4xrBӂpߧiݘ;f a7{N{K%C>/pM9*\iYXOӞ.植_(}~/&Q<;ɶ!iw وjgʸs:ڌ Y*U +[.in,N\-LS&]X^w]KI?pErV: `DdѢ5|t"<VPTA 4~RUcDʽem +L$4}F7QD edSҵ` v\LVHrc7E;id07TJYy7J4%jC X%HEDL0CQW\͗++]5)^pwLr+]7:sDԜRn)\PaϞGJuY#\}"+Nއd-@nmO/H"‡m4yUC5B odD<^:2v ļL)L>#6<5Bc +q3d@"HhsQf"=)rQlmSٿ +rU? Gq095Uf*u'JVaF`{R-BԎq; ۟Wara) eɣSPA=7i*ΝLaSn ީRyer׼rtq4 q6˚g`^3 +!ԅ +!+7!/)?X~k9:k詄+ 6,-m=-mFiS}(g"l}y2w~ni,sJ>ʼbVJz8ٮ/*h/b;P( uضPmc aqR6Y8@WG?բP[pi]廫CݳdKz Zqe̽f_#@JsaFFR{asbiKSUܽuM k…Cox LGI;'c|ʘ k7ߞӕ50xɃcwӅ<|+0ry/Xlendstream +endobj +1042 0 obj<>/XObject<<>>>>>>endobj +1043 0 obj<>stream +xVOF_1=j'!?Њ+Gt@I6Yws5!}ځ=w{3(.~c?8F]'р{+%-i/oOQףּ?y}s9xD%xg|w4KZq4h䚆g4++ȭ$ٕ(%(T.$ik,eyZUr!<_.K˙r۵<{i_ѝ;vu/~) Ӌ q§ғ6A=fz't;NH$=4Z^hh"2r?wW7wW3q4PA)=9~9|bXRyX+|70d߰}+1%r(>4)s('[ z+ZTڔ}|܉ C#֙ ?Ї ߨ;F6WP~wM5TFHc®qotE2?/CwL@_L|m?ȚC+-NlDV>/XObject<<>>>>>>endobj +1045 0 obj<>stream +xV]s8}ϯp1!@:;̤-ɋl pcKԒ!=WɄ/KG{g!x@#J~Ч"p2KIkrto<N8|{U0iO>|RRdLQJ@StC.M8 +$I[ahY:ꪤ]\$T,]W*OIXdZG? /(&EH)30E/6ؠ;=]mb,Ξn## xTRa.j1T'U!6ӊ:İL$`=3`d%,di09ʣhdt(?| EA€n3QdjC O Xl{Ъy;v jklNlr =]X(3#?h蝤@_)kQ喖oHP 쀢mf PxR sXo -Qfl Ա}JʴtSƙ6;2E$Z[u дƜ.2^,LL4@3W\tQ\ :9˽O" \~f`B(\&`ժ,$`+iNe n|eymGa]^ ކw^!*^k[F/ԁs~C@и.g!~iS %i/?t#')#iH, ah` c;v2Yf^g4F^d>I7ϊg)L-rܺ6V, +HEW +c0ʳGng7 +U#GU~l-e!2n&6ive]`a\W+,'k1he̫uvaBi >n+,T)#@]6AdHa"98`{ rmGĝj&1;k X!E8a.gP#Ln>rJ%v`GL ]]>o#[JL7} `U! e(J+ϵ)zi]!Vb9<ff}RĎnf LtӶ-l>6Y\r͑&ƔGWmZ:h,U!b#waOLͺ}c qjKdK7p= $W&4p?Nnpy"6'G!nj7،qS0PQsǧIlg J$<w㾩<[U7Ƌ8i}S_2uqGLݵ"zX|"#>/XObject<<>>>>>>endobj +1047 0 obj<>stream +xmVmoH_1ʗ+RKҒ>EB-G!N{MڻfwMȿu Bic23_f4ſ-t=S?s:Xgjb(/VGf紪kq!tJxV̦޸V_9fYMkEۍ)7\iuR?wd5)Pt:_xѨ1(n]\=Yc Rw$_!o ;mb`d0jfD!N1Qf`5HB(g ݁ 8A&OOJmlB91yKv녂X]ު/ qe(MEFc@9tv++@~ t*^Ӡ)03^_|k{u1c#Srx"¼:!軲`*$*UMppQ? 4/P +ivBr߁ 6 rS0٭*e 7W77ohI\hsm4JT+1r^Kr(-d>س +fz㗃.K˰"55w/Ӕ`rYxtA3=D eF 7NQhNÚw&u +w$kLr-p_)Nto.w_veG([>^8]qWϗrqk7~.{;endstream +endobj +1048 0 obj<>/XObject<<>>>>>>endobj +1049 0 obj<>stream +xVMs6Wd&>kٙAD3LLDj`Њ}dc{[u21~&di~q|p0}.;]_tLY _gs +1_\E㥅#RAMkɉz'I$fn^^LIBk)+&rH2+G$F{#ArLI^:8,BS#milMГT!)RBXOr*^>'(#2דY5!,kv IR(xHFV0w^6M#0*Ә7حUG:()JˤnzϨM[TZ܄ +Wtdl&ꠑ b[% (VmjLl8GrшW V%;Ja+{ D_Nj Hր92NGa?),p#$ 7Ue\S frYtv@*E[6&rf?m}Kںa:3m:9 +~ .τ''_2QӠ._^ɕ *U%l1) (ZrpT{7t=^ܩGmZw Ί'p .1F@WTɸL4u]759M3""|VQ ߰.z)G裎PoAҺ1Vc[GCFoi/#+ETTD)JW)-@tBofk>(]޾[RqJ.7Wi@' ]hh:hrGo +zWIkI=@`AYi-YK_DQ/b,@8Uvߞgdendstream +endobj +1050 0 obj<>/XObject<<>>>>>>endobj +1051 0 obj<>stream +xWNH%_CB0#f24&=ݙn$m!ݮzޫ 3ŔN1tJO5rc&Z5?]в 9>e~x~S4wTjLSr肌D? XcRwW9R5Ը2Y|#Mf`I4=I)-uhh:1|ﭥf)wulA:?*e,8YnR)]s-Ѓnxg7axGEO2kg𴼸_RpeQ ټySHhTU"N1UT#[oLUq'|CZ#umz@cw DuASP;*Y9ˇ,]k7KRX|+$9%렛v \dB0ʪ;iVmwҶF#4vbjO yyep2,"B[뎬+E!u `QdaYa*j'SmV@L32R/J,c[7`ՅTR[> ,oD14G_-G~ցa;x `:Vmfmyc>ldoF5WރWuzWF'^O~WxMdFJE]@T\.TO BqIT7&SWޣzac(ŇZd(8HQɰ4X*t7V"MQ_B۝H/ҢCo=%*Wh(W2)]t8{ً7OAd[8J]fA +HHlܥs'ƾ^ D(z:+z~PguR|g%òp7El|o օ'-mj~|P@Nk)gRb~Xaӽp̸0 +X7$@:J1S{>$k$V(<:88\h-PA'yRsEV}=^t:Un i_5ظThGki7 ܐ&ۮN "*0C=6s؋tglI$H@YD r- "o ,3#zTӣ"/i>ٶb ,+R&-Jap@.`8k͓Srv A$@`?R;,`;S]IJk8Op:u?q`tv}Pzxmtw Nj*&}Oͣ-Yep#MttesNNjU`HQ\2 q5:bxeCjFrnT֨-`&S3[i+|,pEG򋣛oKH|;c c@RV UxNߪ dSf'y %/,bn3mU&\q!_o}.ԍvoI9:=i|;n cp<>`סb.xɌ\}/Dendstream +endobj +1052 0 obj<>/XObject<<>>>>>>endobj +1053 0 obj<>stream +xWNI}+j7lo@ +izZi%$3Ӷ;t;=8==d DQ$c{rSoG}_&zY'وF࿓4zlA6hp5;:<~fs$_LhVz4+5FAY3z ɕ)I \ғ5zӡpxJ9Wz)Q +VZvM)XaG! +]m*3t G,[k?dC1CH^UP!j/9<^%uxQf@yɯvRr17 ~>;M0e4aet2)"S ,4\n|枞.\]>=u2䗶%-=*c@˜QSc^m|JkcHC$2}7` ,F^@\(ȨP.W[Nڕm+g]ѧ\kfqjO Q +h3~kgksH4dt;oU 7P'K Y#OIS+l1Se)ĀսO`?!X +Bfty{]^u{s7ߏ_Gk M!#O(}f7PO12ǎ_-wj.`*(_؁@hj,f&J: +ʢ;dW|`2Ra`5a'uT4Do7BlbuEW4o 7Tk7VmS=qIK =ޱzYb^T"|\QZ[Ԯrgmu̞{9Pws&g>|Ѹ_C"H<1hW\cnaLONPv_8(/p~\I7&Fendstream +endobj +1054 0 obj<>/XObject<<>>>>>>endobj +1055 0 obj<>stream +xuWn8}W ,j9v\-z]ضƻy%b#*)eIȹ9sfbJrFW Jʋ%>g%elKibWN ./ifUi-]Mg8>=>-qxTSBԈ\I +%uMɻ?o?~ͩQLMC.7M=MI5eU˔2cIP%|ӫxa>(/4'f]k7Z=<^yLי?'~BBgϜw}" zhQdZz: QIn_= dNڝujdk`XZ뚔863*p(޶ysLH8(=)}Y}9XY?WH_ PH[B!|{uL?('ւWtNluvɉH(TJZ=1 +kP3B "F$A?X+8uSj冈88ʀrH{^^"P 4ǝF$; XDj:y\-˻gijJU@/k7 -=v^]?0t8ahGfGgjX)P>p*Bzc>OAz@#'7=tsyۖQ;YD][rC]:WRf?܅=:FU?"PsFcLssսT–sʹw HC/BZ)Vo?-@2xX:߃(qmfdYA: bqwi՜5d` [;,*z,n-v6bNW**j$L'w2P7Qpx8ߧшfs;9,7 i#ʵTiGpNZ/#`5~*'g6$BU }Ob!'>BfKIvc,)WmtMއ!>Ów >!LNQ{4d׶\7*p\KD2i. #12ˆ\U "IP%QLe:tA Km1r*\,d^jS}.2`G i*[a1ZljT+tCVč)WA-UVpPtƆZ^E< D EVF= -'wW7>\}NpB2OQ|媐Nr#Kѥ*gQ9Ֆi=C=u*KʌDZ6448xN ޮjŘ"{G̵qN:tk ['dڧn$)FT2NJ02e)\-y ؠ2m'0i16HDP(7p0 -%+Gsˆ-ěXF,RdKh-De8-%*],6l 3.FB -o1/8'%mHQ{AzMMϽNB^%t{ yti&j 1`8q}#GORN x/@.[:|쭍<'gfF\W5tK KQ04c}{׺.X9X)BO<@V[Cޞb6 -~EP;.@ -~Ќz+Cic6T7eSW/bMx7Q$ۑU1l,Q/t&֮`c)Pak(s&; mf$@8*C⸦J khw)-kAη4'A-i,+?gARQ`jDH "d~u@2?ЭF+1;:P>?F$xh -mVҥ ggB _sXWGT6:abcieǗsxp8x r6>NBa/r?*UFj>>>/Annots 236 0 R>>endobj -1006 0 obj<>stream -xXMs6WMJǢ-+8uJ3T߷IALi5.޾}#c)/^.nWhHe4)$mxݒFSZmpp>EsZ!h#z8Rd*QҒ)},FeҾX})F`}lIRzc\h2֊H!3K]~'>[Y`=|-I4fu.% .Jw:bJrnf/J`Ê@[~7ٝ}z<30|b9F9fhQ?e(!o -H]㢵 .'gH$p>cuj9P&y4 -Vg',\ :YE 0X'؊-հukxjYP>OCy>'2@tX)#>0p s8^*~abΊRYŠ}gkڣ_hbm2Ȗna>=XDר9Kx2,,a 21zdIS}:yeKxG7AO\UfemuX1vg5 -ƢQlIV2*w\G5`6ڔ)m鴡qBPY`$p֝BJN*; D%ov`ìZЖ.)1ynt$ҼɃҺވPOR+']$@`6Be;WqՍSt;8r:JsGs e<s4Z$ڐ#`8(+#`P"Ơ"RUqdjv*ME.VXik,5DDrق\8l*96H(GPNL"~?e#}. pU.jz7{xܐ;h^BC" W:;sօY{@Ek; U odA;cXZ(Ǻv{}G&'$n eQX??tf+(o]>yeA W'[T@-uve@\@>=Sf?1Y0tJOAGE MN5:;5: ~٠i'*ʺ ;2Ý;vB5w\Ő3Ɓ_ӛ#OFH4&q\H8֘8叶}Qõm>$sbJ{j*fTvMX}կWۂ%G屙SagPzȷwS#7q<FQ;pz5HMvu2r~;t\9Vs𯫄w:&C7 GXlJ/WU7Q~ fubBK9y"Cɰn ^}OerOdPh\ -wϽb+YϏ -Oh n>>>/Annots 245 0 R>>endobj -1009 0 obj<>stream -xXnH}Wԛ@DIyYbH~iMca7{H] lRSNjF%EŻbLq?B, iy byvAaH -V”6}jGRCZkRe7O:Ĥl;&i2g&>l6Yl'ۏw7ɧ߾n I*04l,pLX}<M$WKWgbK6S&wRyL.J."=LPp\Wm PԍXIL]ftߦJOF'IV_~||w,YJ~?KV_S"&r: z΂U@ʓEK=-(R9};pG+.g*&g2Ҏ{ar>S[s,/JShLjy7/Nۨt@@GRA`Ʈ1 Li{1TUbiYXo4vƤ)0w%\$R=)->%YvsD8ب]ngԡ\sNjFEiQʺ)sݍeM& - nK0[dHF)?v$&`qF%sd;&hrìc1hm, Ќ+tdg:pgi ^)O:Ũz\6h -+5 -L fQZ)>[ξWHӹ*|!'WO:xr†^<%21uwVFiG6PtXEbs1b(܍L Z&\3y"ybrx_O2lP qP$ÑNn Efޤ֑P(`h23~k\!osY:giIdSDC"n"(: -V A7Pr-Q4d; jdVD,8QM$iTqψP, B+Y68NR󈦬ϟ>MntREdS NDH672=昫H;Q;0@_:Xɢ(CH?$ul&v?&>])x%a},ޠWn; QM+PC&"N`SIRB]&*bIk%3.l0fg웗I3KR9XN9ϓںGsyY@X>S0SA/&PGX$G@6♞GWmaQ]XJMۉ5ƙmJRcQ36=məBԶ-|:݀2Ƕ>pr؆ -_c 7.h'7X5T- -,!JV% rh¥^u&H: QN<I7?/GxLφ - g** Ll}`01Fze:p?9vN8_Bl6޿{ ec p~?9 rdE 6uZ#DcAYcendstream -endobj -1010 0 obj -2019 -endobj -1011 0 obj<>>>/Annots 262 0 R>>endobj -1012 0 obj<>stream -xXMoFWTDG.mc3#ȖȘd3M˾oWݤlg=$0`bz$>BE4R\\Oz74_W ~Os[f6yDOMTJU~v=),VJDZHdSI4Aꀰo3C?8hc;3+.6+Ui(ekj7U!%Lw7iuI:kSƭn8"=;s(γ;vA8¶NMA𷥑$KV&jcv}hʒ*ٱ]xۡJ3:UL,GL!G&r[0Dơk]+&EL~,VҝԚ=Ɋ:WkZJ8Cq;*1`aQy6W .BgiwhڼlsUSgeG*Hm -ߐ}s/s N #慂 HEJOOAg4E e;ORVnJXƧAy°\P ZWqݢ|fkXf -A$ԁ=W^)=ncƤ NJ$8e)AU^?vAa^ z-9*IXAr) [6ٙu%vw0Cҝ%}]gg-lp8(r3{[GGq8Q1;Bendstream -endobj -1013 0 obj -1871 -endobj -1014 0 obj<>>>/Annots 267 0 R>>endobj -1015 0 obj<>stream -xX]sۺ}>YH$ȹ/woLHBbA+iɬ̝LٳhFSbNTGG'h6^\.hY4N,FWvv ]:ׁZEO E1?Mr>F+maє&lFU=m/BMZhUl -~ ZgtvĿS<ǹn"Unc^nrUT OEh/3a~>(mv;xj񎶌6_Q\ηGG|5Qd"níD+uY֖SrÞQdFN!`@Mgw+Z * 7i(G,V+KwSn6>?ܵ#UFPC91|YҽdSPE 4-4O#&1|j= G{&,HQ'Td 0Fd=2 w՘s}DяiEd5XkCV%w(-cmI—Uxu(ʁ3Wx 2 .Pc<Û?۔?0ӌC\F3i)-x -7)Ţ;våD΄6AZHrU+!2O 7@7Fk2W&!sx 4Mj}6&ܔnq9)iIڙBٌFA6ڃPOI4H -͛"5uKU#39Kr\b0#S^Z[c-zqS6),g41"}V|=)j2`+ -x>e|]91guMо¶ #Hr9BW"p0bGނ'B5T O0z+|h4RskAxη՚Vq B?o\hHsIkpd<}.SUVUϚDNǚÈV0ݸqTr1&N>٣$Xp~Yv:{X&UkܪU!EmEhV=zA#5coϾ\i@nǹ/w}dd^jU +Ӻ 8/}C7CWWmCo|EN>k's>n}Կ oVZe}aF׽>ラSnmу~2mnRWq.b/-o5 fKx(A]*7P^Ћ|L1.0Y6\cw=h՝ s5o UFwl ͝Y WZNh/IxXa`mQEj58^RXГi`eEV{$z˷\]BÑ뒿Ӟ]AC E3`}kYE6'siwWtw>~<&BTqbx8 gB#?tnendstream -endobj -1016 0 obj -2245 -endobj -1017 0 obj<>>>>>endobj -1018 0 obj<>stream -xW]o۸}ϯnqdw@6M[} -Q1ITI*=3lGbqo)qfΜ3ߏt1't6>ZxL'9 -:NOOi/'+tARh򦹯F'H9My=7 7΃MFTZֺੰ2ͯoG4eX?{hδ_kG^i,i -?KvN/y7WF7pic =PKPȖHOfٔ UJ>/FbUE|߁0ls*=\+]lojKs^uQU@<{!q'joTc|-/̨6*8FEJ-!ެ+Mw.ݒ]k_9i;cAVr/ZyW56߀AOZaL3c+|ezbwp1D WjG|V c^"z 7T\ D30pJgkbXF-D$~l@Ͻz(jKL ) q?F4"{|Ar*)#g{i:HPChqdkaWT71NnwZe;)!|g:l X8[YUizijlA7>GI^I;z<9=а* -( n `ILϠm0'yM2wԨZۏ7? "5wyj|7e!x؂zt:P~@YoF ) 8W+vR,}ϻOL8~oFgٌ∮a/Z -g@JN:n²"XQwnf'#4c/Xeq5Mn ݎ>qn<ҳ(;A( /Q+v;gǞ˹Wq3-_2exx' 1LJT$+2 !t.}";oxp'e,$s^ESھ{|jIB6S^ C&'/ -4yl? -77 U#V`ݡ\VRw7{ fVryb?L3_@PaP70$lPޣzwS'Ő%8jep2pyj񗑋{1o28T Z8~c|Hwh»!^JvcQG @.\U`hNj~&Mm?@y@ - v"#d󴻍vn2Kg_#dqGZD:,*Q&*L(LXQ`ʲ*oa"|_dz s&leدP0=3wv`,Ot97 rBjٞs$ci+ O5Y&"]8T<7 ą錸%W`0H/4qM=uP <-`Lǩ^}`{= [ٷY$YqǶgȡʍ (s:\%D'Nʇ|970i./o.o.7C*{׎?O^,)ߊ }_(~endstream -endobj -1019 0 obj -1911 -endobj -1020 0 obj<>>>>>endobj -1021 0 obj<>stream -xWnF}WL]YdYEavbVRKiZDE"$W.{f$}k 8;3g {4Őz~t;?vcWc!#ǟ\R7f?8~~#=Gԧ{ޥy4}<;:gZy,Igɖ \-:DX1QIB$ T D" )Ct5{xpMW:7tֻryYd 'H (d0=\ tipM9%Y&5.6DvU` &à2HH F¾U2tP.ed13.hY -Q*9g2/me+*Ś"̑K"`-*9V 0R!>[kcQ@gZ h8gISMrQ2DFS B -,\*d.3KQ_Y98Ǵ:lWHo]uc*%"\=soISi?̈2JGvW<.̄[ -%(7OڥS_Ān$jH=xx۩5آMZ|͓٣FzE٩RO#=guTqg 9"}UsFUүU}.FNrM.lxr%Ð7ru;LT@L:nA)dn$&a4"U暑Pf5=^ cCXu8j.v}5+M&'ٮU,DžFTmlD@uom4rV4J@cMcZ斨FÛ!`qVL+?"-Q,L+9)W8Z砒5+?\mڕC e2&7"?2yc%lw&G:ѿ8endstream -endobj -1022 0 obj -1797 -endobj -1023 0 obj<>>>>>endobj -1024 0 obj<>stream -xWO9_1’R?@9 -T*gM\v6?ػfJY{~yfO=||@#J^2]ɘsK+)ɰz`}dp4><$=7^^ҳɧau}4rq1cZKZ/ʥ拴rNVrYz7svJjBS!!{t?M~e KSHR̤_K)7 ]B4TQ:O'lXn~fJ`97S h4؁@g{q26wL-J+8}H`!!WVzkd]ژBR:A n+ -MQ38f S"Qh -O-} s<'G0y% &8'1T뤮7@ZEzt̎kV{dQC,Hc&iv]zZ c0}i" %2 o8YEnf" +vpbpem |<8m$~LIE>o֍vwG'>+hWYƋcWM$+g[x˽C 0乜FF#,cAK5K=}V^Wz &[fjƨE>2pDO94AmEe3c|vcݏo980asN8a }|+8rh!bB"없rzcx$׃rVnб(.߇fw@F d`gw'sA8H4xuw}4ļ1iY@88*k~Ti@q>Kp(NrEW٣3<}0y>7xu/endstream -endobj -1025 0 obj -1681 -endobj -1026 0 obj<>>>>>endobj -1027 0 obj<>stream -xW]s6|ыIǎqqFiSv: JHB@;c:eݽ㗣S:)]ѳ Wo%xqINf'''4Ϗ?6v4zz>ΖҞӄ6U.tx.m3ےvz~M?>:"o*@utotUѽ[~< egTq$3@[#oSC{n6_8 m:)檢Z+h"+Z@jLԗ&רƖ䬪MTLT5:Uqv1;gؒEcT8ܧLe!eLC H8>z&Qbk|qrZևA c̈滍))ȫz7F՚cpYWk䏣aB6Vp 29(EZVL0 -`gp6! l00)O"n6O&dO&$H?ꐵ@$VʣVHݷy/۪уLH4e+4ZNєA =KZhcpضƯ 8tF;yN?9s[P x | n&_ٶ*բL  {%*,CF~7:7A$G -qe*8@ỮFcf >M; Ž`Kj?[F𰕵VQ}C8wIּOAP $eaHv#mJ2@%# hb jBV6!ƗɌz{HXu8хiГjk햑?Ţ郱+f Դ4p8Ԛ-Px)0`1r_)̙翑`7x -&KH;g!~nHcFsW ? A4 itR4WtmN@_)'#E4Fޥ4!D4YՄ|-q>6QvX!2rfj"NZmo,AipړȘ% ݓD\5|KF:"iSZ[nS|Y$A( !ϲ@7;Y) m V;Hb͛`me㳃Q80!㈴Fψ buĪX/s|9 cL?YU֮˯o:ߔ27yݟo~eɲa_H'[wb鞾Ľ@$9ѓ6f* 21 {hoB2n@ZકYkx%i!1=iY+t%-eԫto$A#-.~-Q>o1&ۋ~1t*pLnY%;LM[: -t ώ -Pww^Wǵ {{l:zTlcqnoVH\Gp1yo4_Qql`W 쵲ļ/Qxٚ[پ.sFQ&A>˒W.!(;ޏ) -h4ՒMDgz"( 产Y\me$Шvn…bM®{:tSvXr>;etNPp:Ymo_t}uz~6;˫ fW׬LkWP>ɾ˳hg3ߍmJl>>>>>endobj -1030 0 obj<>stream -xX]oH|h8H/>܃w l|b0FPbDr3C)W3dt H49]]Ug3tyCiu+h9-2&yFSjjk&/JMZ;iTʈ2R[tFVfƤ K:mLJalJer/$!rcDTm*r϶:Kx&w *KҥӔtc*jNU+w4WPz;Zi׺K)d6 }Dd 5HH{VƚUՠ2צR8.mjZԉÁ1[U} m-cKa7U,`Zڨ&I۝cy\Q;H Z"w~Q[|Sk?^C8+2b_8}P:hQpeEkkTI6~ɭߩ KŸg`2]ϧh/|rܾ"M.넾uffy tL9ǣ~@3uE>uHʼnҬ-pLpZغDICf)(T=FE^o](Q)4iT>~>A_г^ur4v}7 Ch@KqM3ˍ[.c-BAAYRX@BR|%[pRE9u*-CQ&'ndkS@^k_)- 53i-(hJ/CD`9 -y_~9|A,(skt;T7!4F-,ꌍŃ@טjS+=15X>>>>>endobj -1033 0 obj<>stream -xW]oF|Xh-4'NZZ -PƉӡy_ FC'Ԏ6㳿8n_O!(7VRl\jXXtN5ʤ"I2i\_y7vҦV2"c.=Fc^:HK> pt^:i9{N$(:6} . %Urs JtQԍ}U:1kͤ}rW+GO 9o -ژ\!cnk+,|gd+;#09Hl,نkSc)ND{(؆Đ4o.8mWkG#ȕEa,!ul7GB866qF:ҿF2F4[ 8tC]~->j`WcpEg oƃ -l ^1B=(@>& -R=o3+uRg v l~wB24O;%k%^$ӊINOg*I@w ,^f7@RTGOx}p]+$[ @D1j#iu2\\F7SR &'Z(D dBP@S(_E^d@GzN#ޞ{p9 -f^\l8Fa6m#Ӵ:tǁ)2@^XOKyQ1Eorא_`~M=TJ]J -U륈! fԅ -[%`/3-}$_D5 RSjMڃ^vw< t2fLtwW|؟GC'Ѹe4IU;,Î6{BXF7h-Ԯ-MU&kh;}, osdP?PKa"ܱdXVLNL=*!U=~>Gվù1@8i4cPbKp vys[xIڂu&79y9k( -=I ԢX rCi.m'.7$ElAhH ~ ē (6JK{\N?Ud9bI{DYVf1(Xi% 2sJŔK 2G5KE]z Ny80P5ԘHQּ01ɣxJ(VXxO~AaVx.V;<&;pyLMTl3o5I1 -xAF0{.O; -2jD¦ɢ - n-n"2wM"́_0h_CT=ͮ' czcς_:ְGv>>>>>endobj -1036 0 obj<>stream -xW]OH}WܗX}=Ʉ]S8'$zQEwf1ͯO1OϢSltJl\JRu"dJ’T8ʐ2$"Ҩ‘ zzx~6.HI4;'E*+rməJ -=GSzOqH7j = -9zGǪ\elitZ% h^nGLE5|ŚrQTJ]&4m@VUzHVS&GN&)ɤ0$BɷBݹlmQ_kZV/HKaev3PPs{IM QNLؤ -T&F*J%8kK?*.` nua' -, ;V]8Ȁ\?Be$i턑(_ &{u!rȲ2-RD=34b -\e)!EDwH#cc@n\iE8S - @įл416zsHJ_ЂcOL"\`wE$-kȗ;vt^:/=Wxv) ;br7ŋşaQJsO'݇"|9.,nj͒PS?Kf;RD"k?Rl/ 5Q[2Ci=k],j V\`f-%hUfސEKbeR> UAiCW,.,1>v[okFt^??ߚ \;Gx BFQCB*F1W$A~̒) *^4r QSAzx -;ٻ`^AB)}W52ByK Ԟh &Wr^A]oBQATqU5TZ>JGv!j{/P~{ }|+cFd⴩6A*F݆.!PnO+w5~@7)L9vǬb<L _ӔB6{?ƳYǽF!U(|'6F%ApYl|{y =ɰl$w%<^%,}\;lAR?ڱ-:a)tJg7Mv1S_۾d# Qo'pG)YA3Yt*aLJx0߂ks/&Xg_Rq2vh ݊.Vyq(l,;+K֟ngO㻇Y~-ۺcR~; 5*d)F_%h_ -w ʘwS>hhǤW`KK,^(Ux$r W;w›VR1~ @)^Rd]Dӈ_a\Û'GH^9O ->>#X)|it`y1ng$endstream -endobj -1037 0 obj -1723 -endobj -1038 0 obj<>>>>>endobj -1039 0 obj<>stream -xmRn0g..Cv캹5&clvZ{*FȒ{} -hJlj)uُ -EnI6z"str5 Mn"mHo -D>>>/Annots 270 0 R>>endobj -1042 0 obj<>stream -xW]oH}ϯҾ)q|4 %0'lm;cܙ㺰Z!U؞{ 1Ŵ| lhØ&EtEN_#i7f?8~9MƴbI}Ǜ JG4]' KV"KzsgcMf~q,EUmmdvȷڏi*.0фiѭF>ʪJg)RUq2Yiy5%ADRg42JŽ$YTCsت6tTՁ Ծ6N;,cxƱϗ1i2G >vAܾa\Si2KrȶrP wiKw6rS9R/bD)1-FtO%D{"es?"\dއOH8a=)A=VvFtVRJ.MqX\;Uh&8 ֛:Ζ<|~.d Vϥ{'Ağp -$g"D)BթUfVjc1"z4̔UwHXVUjHBAzDPmoiN<³*@\r눮ֵY7@CiS*`hBgQ" !)?8\EN`><qC9珽khʅ9= 3WH -͜v8aŊoD\OfANSx ˪qN-*t>bкEE)Yi;RC;y6RK]4}?i>Gdw ~?I T;)/A'N' jyO&#ꜰ9]! DK7˷RhѢ! +L4#Iƒ %Р.wkcɩ]O*Ы4   ۩D ,10=0ACS!.E ԣdu3P_-Nk dZha%8OCiGdl 25CЗR̠/od5Y q81?N&0qN?J bG6D#f@SE] s D<p -ˣjO, -M.+_';yF]⩄@7g^9 f$?jӚYxq~seϏ&+4[ Fb9 A1hSendstream -endobj -1043 0 obj -1563 -endobj -1044 0 obj<>>>>>endobj -1045 0 obj<>stream -xWn8|W`6b)(riP?4"^ 䅖(D";lUME;eɐ7وSJ˓ ZˀF#gJR~ '|:LJ_2=q2LQf%AMdphʕH9kPR]eBV,o'4Ƚ O/nIV<6 pvB#¤ʊ$QT*h#,Wr C#zrSϒ…FYZE52Iw -JI_kYS}]z. SI'K"ݐ}%>++ZH(L/s.W %SFaFw2W1 - il&+ӺRnOS ʸמ,d>.oѣ vsMXtPlkJ0@*(y]"g!wKi%3(,1L:- G P f2ϢH8Ѐ%JidQBIDk23pف(=ĭ6=!&FCђ aB~+ 4f|]b;8Sw)p(3h֣HYdYZ;{}  Fhp2rNDc -ʄo]>+ -싨 kxd`ն`AgRro`C~P)Un YB2:zRL=1 kixKcn"&9Y1'eten`V~QP)c`^9o PBıc|lW_! pJF,T!V5y_eq 4;쩐E8DyV O]maΘnq<k?,vyrc*l)X^GRhonSbsU03iaqCo vm8z0N?F \zS/l ,s`B/#0+|lxt?~XD'#:#Ac,ؖb67 Nox͒95Mgzs˽)V߂g‰>^h*+ae6j_ U=V4˄QlD1đAmؗA<†ǻ#rpt-3PKxa]dQ*MB;;ɂXoL|TAg팻Hu%_5LY-[@xBN\ivzFb]ҧ=#>$ VՋ5ZkT.?0Qk̋h-NCD*fJm1=Nœ}K'x:jQN6 8~*ͫQni..k?ǞS`y4t iς2_@Rƌz 7f#,feq2@)>|q,_QЪ -endstream -endobj -1046 0 obj -1588 -endobj -1047 0 obj<>>>>>endobj -1048 0 obj<>stream -xTMo6W<"9=EAs6聖,n%R!GK㶇€`QkyQ_F]Tf&5>/)嫛dA -dM |DW)}M9Jm9MqYViC@~6Ki!"KLj3/r`T -5nUs5dxmRXSMw>&G?58;FLO?~ӄׇ{×'^؍eQX6ܒ:txS _hlZز2‘閏rIہZ aS *Jc3#[׺瞏 ">L8rQJϣӭr}:5٦[$ - J$diM@RMGq(Nn,JKH] 0a~Yt?ĶXz~s*$Qx }TN-aо0ORmHIJ`E&?#~\]x -SZWa,< --R<F}?Kgf/PVt7 mxlmVۃ& :_?E5lO:PM.@VhnTWdG0l>B@7?A7:~0vQ<pG I>>>/Annots 283 0 R>>endobj -1051 0 obj<>stream -xX]s8}ϯ5/C` ٪}v:vyE-d﹒ Iv>+K_{1M/넦WZ^o(r7W Zf4&|>DUKC,ZUnIk_4DS\bBd݃4MY*7V$J|wHwgxqGؘJ[w~FqܮJyr,e:m - SQkiiTkj<̂A?da:Cm@{T)D!3Iź`eD-s8ab#Es@;5VԔxckQf}KuʪƦ2k7ytQ" U<G -mImP.̙IaPj BᔴCr)c#70s&6:i#> E1EG<^o|u}c.JYv'_?_Unc6R]{̦ьf๠4BC}G?Zz %PPWFmtiBj}m)Rn*)Y&1b^! M2c%jb`g~]ϿZh2j*D)ґAL6Js觕$!'em@o ;pFmI -Ʉ3]\F ~&L0s?r4L"z`Yr]' C=h^[ݹL<E m3ӷg^𼃢:YPf6A -/C8 1qP7'WGGlUGu{JQ!}i <uvnZ@ӔD $֪yE1P( Nr@ - qcX y r(+؂ gRX9N{U{bI. b)b ¤jj_nӍEvuHDб({7), ^6+iXKH+o 1DI ;A^+HO S=BBe ]sس )!G9`Ƹ[A’y>xH8x^].bTTu]FH B Hl)8LcL~oY/c<qM@nB'a:)VHy$7)xs ];9#b#\yt<|o&1$  i28?s'gD]Bp \ -]4p &WLmC>>>/Annots 292 0 R>>endobj -1054 0 obj<>stream -xXasH_ѕJIH`Xg}g{}U 0jF&{=# Nv/ݯ{YH}4h08;uqyq&:k\)! 'c| Vnb {7C -CZh2Eiwbti2UvCQDN&[˜mB+ 2*+%}h~M)Q.wH$ҔF~Z|=S7wW̭JA}3\l$<RUn YMƖK]Yn孉Dn覉(ͽJ4kKET""#TE&Nr%R& EQ;|88 v^M)"7W ЖJ1˕%8Un;9NhU8<[CQAVI)&<&ˠ 9莑 nyFA{>h63F:OHYQ o*E)]n.9\NqzONTK\q!e+}O_΢0 -ty9DYd4O*+\^@@H^ZrsaxhWvIq Ҕl-~mP$ fxI^ ~n]J$,=0RD(NR9N_`R`JBr~.O]V=A a0hP]n%\Ȓ%:\;Q2[i,>za~/dl1Tna*H 5MFKolt"Ӑy,q._b=HkbQsӪ)Zg -pN*'Jq/e!HƝ W$ ,D qcY9A(=f)ވ=R]14 8U0<&χ>n~+X8/HQX2!rqz_;׿O|pz?UK9쏹M8_q6;M?LM~NqG8Б INFL5E}˨oS :3suYԍDc\tܡ5P3CeTVPu{fc|l8:YQRb8C5_5;CxOK9DnFw$X`Alĝ#!~mө#e4Q8T:d (%6GOz9)គ O_lPh-mEcI`L .XU'l]ĕ2W)Rk#̢7rISsr@unq(mۇhOK9&U9 Zwb]`P5,|N#xsj9ҺhsI;*r}bMI9hčڝ)=H~yw_!-y0fendstream -endobj -1055 0 obj -2114 -endobj -1056 0 obj<>>>>>endobj -1057 0 obj<>stream -xV]o8}W\R >3UyCĀg88Rf&_ߏsν{'B i4(<-:-:`>l1)^ p: -d$a;pO4nTCl. n1-h:SZ-n8&}Zm - t%hܖn3qeW.3^oNMc -*Zo8M M*"dld:Gs h1^&<[ Ңb]c($s:k>l E1S̢Quo_=FU67 .߹Ngtu=H_.o>>>/Annots 307 0 R>>endobj -1060 0 obj<>stream -xWMF+v+A[ć=v8^n!A@!3b}޴>qv3ݯ_w hEC:׋Na6X`hOi<}4;)4Q0)$,"?>u)LmQVfS{fRv;KcIx+%)V~ 3uCo9tzbwiУP" w F!n(D Ǵ#*;g3t&%+C,0<V1&\y܋3=0pqoܪℯMHsZRSKGD=hX=JY0 odJ # Ƿo~o3 M_7F{8ݼu8a׾942[*7c)p髽pܨT"k%Ѓ,J˂xkd%<Jwh4Cr\aΡ_3RdńwkEC'&oE&@eHиT#_ -ܝR@8+} -n/566̓8]2]K[ms&?Drq !,U؊(|@hGp{<pPmkO{ ^+zGWg]jXU@ޜo}V0TΓ*G/֎$c@dw4u-:eȞu,&]yp LpR2lO%WPخ7mfVm+ X+ْ!C7Lnw1ج珌k)}4⭀Ƶ_Jn'3nXzp-*/j}k - Ge|.nyt"DQwJHʵV̸D -U C"1\Z4iuW1hcq>>>/Annots 310 0 R>>endobj -1063 0 obj<>stream -xW[o6~ϯ8;ȃ-[fÀeD;$+Za-[Ew9bL?nfo.~\\G..t14m?X~06)v-Ikă'U!-8U;Q=$+X%eLX;u?%UV> ͐־|AoAUtX s{m%*M#g$X>S!riK˷7Up.uuUiI|_fB.hא(G.3ˏ#5"U -DVy+mU *[,;JtU2-G8 JU&_DYڎb/h2)I4n~;TϜhOɜ-&]Kmէ:6{% [˅70a=|A*b`Bj3 _LoE;Ct,:ֺ"t5!& EÇ;N[4Gqe;uw30y=y⎚T^jJ[je{Y6E}lsJ=^2 6'YMi(ŨŠ:b]ҟ`Q4˶tY(4BE*dS;:^&y}l >H$9*/Uh&& hR[C4 **1eO_B0*ciBLk%Ҩ/FT|whKy*PJ#&tBehZJOWM?!`జbvO4p!|˜S_7_َߌ] - ^vo,{uo咓/F P[m%s3J·5X5œ2>Jq3h,d uWBl[]3;e(KALS+/.+ 8FAp}-vQ3?ZZwn Wwܑ`̹~pL'lm-~ ! S7P"?8KR\  H(Nydv 1t\$6I{6لgmOqq%;eI`{}7^<ۙO,˜zQ奌qoaٝK<>?Za@/G0"[|>^hsw9Wi:p<mO<vF!a@w$%{ UYyL: Rkxk8xs45IoD_?u"?_GaZכW`ܕ;֩/j1_;c&6UcbA>xSoQ+flvTd|~IF+/P<~8x6 :|}b:ɯ^~Uendstream -endobj -1064 0 obj -1779 -endobj -1065 0 obj<>>>/Annots 313 0 R>>endobj -1066 0 obj<>stream -xX]o}XH}@dK 4Mo"Ê\I\KFgvIJ4)n3sf§4?(]\=o2GzLrI+^gإ/ﱩO:iz:"D͋ŧ "Wٚ6"Q!sCs]fiLROda迿\Ȭ0 ZFzE1e!a7 -;y>ΟL! -3c4m1xUyPd1,ʈe"G. -;&T[ Ѹz^G^lRycVȵHJI@@3<qkkj#->;mDa?FrϧQJICFRP" tvNTl /w(bCBmv˨5zM)⧥WdZBN,>Qe.lJAl˂?5c[ -Q|H 7G6qv' -v]TQY)u5 -{sRy!r>I*>1J4t"S1> =ξ"ȾɥmR?>zwpevڅּ տp{IŶg$F).M*>\aJ5r? FIgYbf^K)m1ѯ;^ҩ ;y5hA{Ukx ?>|h ߺӅljp߰cY$PA@+j]"Hd1ot{"nnL4,oi:PaK~ij,SkEFht#Bſ~ƿSpvžt -Ee(1-Zq"w2hޘ.2zzt:WNmtVmq90=Rx[A*F,UnsW[9Iqʶh-0!z'1\C2 jCOgpXe؍j3N Km""юv +QOn PLj 9Cf/TU)jxׯ n% +|bu.:t~@z +X*ܸDAeOD/@h8[R&u Eq]UV'{I3^6_0ū؀|XP4*iϩ۬O4j?̾=G9C-f= p93%/Hxghzd;V?Γb$k]Q-j!|>& +7>WIE8l7xiHrHGvXyH*ovx;p 1n_7b+\o3o?{K7F$Mvx9 ;|9Uhgq}nendstream +endobj +1056 0 obj<>/XObject<<>>>>/Annots 460 0 R>>endobj +1057 0 obj<>stream +xWSFb/qfldž0-I (NdɾD): }IVd{vm!-&4Sf' \OWiJ<`܃d)x pw`B)\`~8^cMN4[+//1S JF-jؤ(㒜M]@:JWLz`jcJ+RE %$#]ՖL{{9*,J Hq䡢83G#>^,tt/)r3y4eqI0 N:}4| #Puʈz۫w_=u!le/ aiɲh:V: RKL +4AS1[J] ~z/\}p{j( 4t-!4+L-q$mAv2]/,u0v eαYU JTT--p>IC=nrc3#)MC1{FŐ? kc r O;Zol빓,#KԉwAkMwdIs;%عTe%=%X(ḭp̻J̬ڔttM}׏|0ԫSwaʗJ4 4`y<ٍ*/A nY*ʱ.+XTlϯr4bX*yMY(.T5 IA妀)_hR3Kk T+e +&>J*tT#C!ٲZ=Ƒ zI J"ʹ'cmBh!F|X]HLk Dn`mر6N?tlqrP(4#UF 0|&dCFs "͡|񆩁g0؍hmqiV4~{2Ydn3HnQjɗ>&e7KW$[2KΖ7KT +=X]DB^ux,Vw3*uc~#c[bc)+^DD?y|#(['S=9V O_mpq| ؆7]D]endstream +endobj +1058 0 obj<>/XObject<<>>>>>>endobj +1059 0 obj<>stream +xVn6+kْM7MK.D[l$R$}CJl X8y1Z,).ќutI{!Y?]S2X՚9g7 -"<4)}/UܼXҽҋr9M / ~īptF ]DqDy&8$hkT.S#Bғ<ҾՙSF*B+[Y2đ:CR])=@.+@!@/BX’S:8B3Ӏ̺Y|9ģMiǨ'by*JS$_EPltD%mMrn4[HVn_i{y3yVќL'8$sZ+s/x";Lcd^h@y& +|߁duf$@1ʬm;s3yTC/+eUJkhWFd?ACNHwm8IOEiYͳlh3@~ H5,{QY.2^U@]okM>/XObject<<>>>>>>endobj +1061 0 obj<>stream +xW]s8}ﯸf$e +]fY.ٗ(R{d;ftι^Ji3^PV]M)Y2jJ*‹r,.Hg/ޯ&甦.dZ:'8Ni +Q^#Kr^&-|meBNRep*R>ɒDY`#ej2y(KI7WSHl>~ V:~7qIږfWG|KB紕ZJ(,Գ̩@"BzեK[ !)ړ)p>ݷQpR;ߚDn%pm/̫' ~6(Ѳo9#d#j'_8ԧcbtNQr + ӭj8|=clvR#!8* AhyC LZT.)C6d$UPBYa!TE%_qvL_$|B7$&CRhoMYq *p?AQqPKV)]Bk$; 5HM8̩F옑wu 7/=4't^N'N8`\r Wq%xH'_W|\A*U*g^(\,sNy+P(m:6(\Ӎ5"@4V?(!RGa9w'ZQQk c~䜭bwr/[Ԧk_'w4r7ׯEB_qgDp\U(,poR>W4NMYmHЬ#@P`'|+e>>v5beBuh <k{@΁H8"*jY m.`;<òsݰ,3h#v +5#G)+ϭ1\1KN\FjOa + !Uh~aQ.HLiIRl8&o(0NcLA7mGRFOx蔵eG0Rm +wlϸ;̪pBARXmd7kxLVV!b$F^v{Ha.ũGK e{y pXBoE +%O1fA NkzK52 y]7iL+q i(lXJ@*b".6*:LcTۡ*Zz -$X'>b82E@_"69]'6^aaʃ q,y[gc쇮b]i{6Mͯ2,-o7Jw&+Ơ=VեWm)*,tYPSôfBX,x%cm%: 𿢶8/U0w~)STA&tt9 Ueaq' P˚hE +'Qso^G.Hi^GV |A/[ާBw&y +So ,g3g].VQg~Jendstream +endobj +1062 0 obj<>/XObject<<>>>>>>endobj +1063 0 obj<>stream +xWS7_|(L?)LHC4f:l+I[dk6aݷoJ{w@CPV} !Vlb׻k̰ r~&>5?Z}R/=S +*d`uOGtC{-7 ,yp$Ijot43cs_"$a囝^CrT䢢S6Bfϭڗ0λŜ+nW;HstC17/GH R9&uv/}X)^m"jgAvgG*kL}Xol+nE'/.i0mt4 ,!;u@!"'B]PZ,x#<&Q!*џ"Ss0 K)ԐÓ1.rJ<:5')J<s@!qhC]ݦ0վ -8jXY7ǹLU Jdt%n2FaWhD9 jKU$>*]?XdB>{y)mBCS4)%UM:5+7dƳB!d}"9bZH6m^(ml|G_%fZГ ry码KCsjNY3n_V(Ữ `Cr@Tvt3&R<%E*Je+Zk^'uUؿ?@2 r&ل^7+) +nZ)Gd0N i%,`wuN3`@rc"ܼд(Iĉ6*jXRqb^m3N0 +6~0%=g2' ÛQLJrX} =p߹GJJaӫd {ip8˨;ƣqTHlr؏AV^i<7l&rڭYYFLM4twPބ+8RӓojzDA8@pbA>n: R'9c}Wp<*EdasSm RHP ""css&0!4pcuݘ,TQm8-`谋ܔI+6wY J4%g -A"'UJ *!a2yKdYι |\h/Z>׋>`+f;;WAg EܒO9h:hy`K3d8͙8&z;C3cD)4X ۴>6>`IWUr 8[<)@( :^߶ f( j5>6 hE: Mg|o_p/5.h5cƱ`kyJGvM#6AjiUFFfe|aQ1ڑu*E>|};2_cq  _J`R5wpkوoQtkWL_8i"М GC\[r֎O'gҰϏO >"]endstream +endobj +1064 0 obj<>/XObject<<>>>>>>endobj +1065 0 obj<>stream +xX]s۶}ӉdrmN;qZW-e҇@$$"& %߳ P6ٳ ?t~B3ʪpD's|='4-dx~5?84_h F4ώxh;FZ;ѝ4/ʒ*]-d}~aRΖ%[;;J5ʹ[o3g76S%*eCikb۲)g9 ۖ@FSm + +ϨRYaj86즦zRDǤv4/'Wt8L'5c𘂥ʨ`liSZ3E@S+SNhcP\#m<9!;.OG>(WA-pS:𭼷Q Ƅ4@ ĩix:8vXSVV*g&8( }=ZEx30;«`)8,Xzn ~O P? +pQt{C2U#H*CNw ņ'%za׀9sgR'd8]y@73r>XrmѳtK}"x,[ϦEѾ$B"#oV^ t%l#@0k ti>7)C'țg*^P}((6WS/n쀿=9CP}a,۽TtSH@^D4IǻߋƬxz +9T@e[ ~TyxM*4JNYq_׻ᚆʦ {m) tl#"6O6G<~{y]Rڷ܃[8\lyV(}꒶\̰N,4H밈w"r)_:y)@1jknRM{Gτ cL#BE +3(ڲl}Pq$J\I8ҤryU=P.a=Tz`9b] ?(g"b7H=:6pKx28q}BnI7"ԏ +5U| &c r*bl@I3G {(y)0-lm@4E6Ʀjߘx3X/1ޯä*8>oS.&tvs"~n 5\#Ttн08?._8}2f#F{endstream +endobj +1066 0 obj<>/XObject<<>>>>>>endobj +1067 0 obj<>stream +xXmo6_1pdk;A^E'q $\ޢhDRqm[69/<( it1sʃ (Y%'A0PO>%kI:OTkg4k' \;J׈Ra2Q˜9}S:7G2F +/Mm|Io,Idp:Jۧ'O4$7c8"s~4!bp2kOiV:'Rdk%iQJuFPօ?b5CBKcK&׹7!pU + (Q==:s5Je-Q.pT[Vң,DëKzP5,kUl8_]*DY!}F@n<܎n +D=i)y<}DЮ3ӎ4W!f_wdhwd{`affZZ&~} (EHnɭMSIϲh,Ջʡ Rh3V" jbV/MUQ[gBA,`~?;]NVzŃ B +h3W!t|-SG3؏VRKuy2RZz(`&B-ל /kB.$`K?E ]cDF=ݏg Xݣkp*ʵqu<,mhVf6Pc|vo>J6'n>|)7%?8:r;8lÏ.\O16O&OqH&?{6MZhO*tiь\SUXFtք޶2B?qQaEA{bh7FeK{ *C}BK,6nrٙhm~^Opa=4U@J8g2.iG hY DEZ;r%e|bI BEex! aR!e[P͙oo0$cR5\- @9}fe?~i!Gx[ +DQc\Sl776kؿ%[QS3e e}"B)¹=ݼ-[I\{φ\0Sv]˗܋xi[ZY~ݜ,댑:ܘ8DAΘܢPvR ܒy[,<=bN%WlF"aGyb| W<Zlj`^WVy\YhR|g"<]shU(T՝װqN +/ <7%fMQ̡99rމ9dtѶ6F ;PRwtM^YnZ4mݧۺZi5Xtͫ55^m+M KCҔwRݻ4pBJ"m +HY;W@?z+G[ W7a5zAIYM(xQ+,}pq檠@+k +JJr}c;v2 yOHo]x#)K1UaМ,2Bb m@7"+)0lۣle><.O +|p=Gk~d c cȿ;%~1s_$:/endstream +endobj +1068 0 obj<>/XObject<<>>>>>>endobj +1069 0 obj<>stream +xWn8}W MDN +C.,hH*Jv{|C&H`Sp̙3GjC.GM^;Rb]A}A O\ώZtI\CLn,:°5iSBM!H-^IRJ$%\09kϳ\B'"Q!Q;l7lĬِ|iHRIR"$̂ +-L6S >@t9tAKM?<<'-ɟ!:zMfq <YE*o.p a3Yd=LDcǰ`MGlw6DbՎ-wF2v@vH()c@:\O'WQaaf>/XObject<<>>>>>>endobj +1071 0 obj<>stream +xXn8+.rG~ufL41pdCIF"U㿟sIJV&A|9^ق^.֔UgdN"Y/H󛇳ݜ>7GNe>lBk%ֵiI_gs:_̓+ͳl%݊`|Bð1 )KtD7Z2[ɏށ$HhbEJSژUzGVgN)tN\֥9u"-%/z9`]/Rg>wJ'IYNˆ~(DV(--S!S5UoҢD%2GOښ$..% Q$w%)Mxߓ ]LI\9+LN +xRSpȼOp.\\" +Q{p%8 YvPQ*Y*zoArlF\LaC1OmH%̧-ifYSW'<ʸ{CȄl| %Qo3ZK,_(>%ђsQa%%Qkӻ\s5KNtSjurEu{O;ǶcMʵ`<n̳x6@$| QWJs!2QJH' bw!Cj!ҽi@@RNûMhm բ|:FjzW$6pŐe+$Cdtv;n8Ȟ ͉iLjֆ@kH䝾J1%؁mX/ - {igΠoQɭ@5@{n }Wukq5⛡`l9]{4wD?iNc&]:@V@p1Xq_tֿCn\=٫74|ܾ`ON1,5Ca3wūhjN2hvu7D2endstream -endobj -1067 0 obj -1836 -endobj -1068 0 obj<>>>/Annots 316 0 R>>endobj -1069 0 obj<>stream -xUێ6}Ẉ2IɺXndM>-+*Ea%lk̙?>I9ǃU< N2<puxa *DDQx=\^hi&AC>zNL Ns7z#('(ŇxP{XLVq^)K$Ef - /|$V4Y.?ATZQmh+4jB)ԲɿĠ(d#6״x%\iރlj!BOyuݷT+%L?qS{x¢`(1gɄEWUZfKwz[KJ%T[t^ӻ{cǴP״NԱ&ק,}'%Q-BM*2˫^ۼoy<<=Am-0N2G`/KTGLƜ"SZ0{7 ҇Oa.CB=E~<[w#^Y.\ʐ[;E*#8{;dlN9Ȑesߘz{'a\*`cJ2fB-7̸J =rϟ?!{. -\ÃPS71Ι .Zݾ0Z@l2i7̤SE.εs{:TbW`;ۘav;Wd;-Ook*{è,՗^endstream -endobj -1070 0 obj -860 -endobj -1071 0 obj<>>>>>endobj -1072 0 obj<>stream -xWMoFW | Ȍ([SXEuQ,ɥ Rf$@Qݙ7o޼Yy1)~No(.Wo~|O) -V9M?ɮ?mThOw =Uw[S.&c)*U7?$lܾ%sĹƵYB[FxeAYwe~^ngo#n3UR2!ZmL2gel8l6!5y=5 TR؆hrhυ`L#=Zo(w`]ZH$HUCY)R -߂ԨcGbل7Zm B;PeIܕl\la֭Wq_ب@vT': LdT*M/,mzB%Id~@Yc/X(d - -lU]EK<>=/O_I99Z6K#ęL砹NE<-_:F+ހ*s` +#8܃ye% &1:yC5LMU207ZC.9GD<)L[G9A{r,U̜~Dl律=>CQ]lW` ~g}ʹ;^Qі u8TD1*y>y x]Tev*MpCzg^o^oz{r~*\yHy][ @ΨRSfEJzrWqK\0d0GTʄ2%(z_>>-{#+9/1*.uI_+6Xԗ(.'C -2gc<<'sFr4$}]ϑ =!ӊaha L=a'b{!#|R/yޅܣqmtމ$ -[(RF%9rEE["XNU-ZAQY gl y' n|^ -68}Gr59IO b -ˁ=4P|z \󾃅- -/l5B'Auf - Y7~P/9K/ -:= Uydzǵ: m;KcDڋ3g;Z斳fYBCp3UG2 mTQ5du5EO1]]9Zc^ S^ \qeЪ26V?ӗ~9[bH֭~0Es}\!x|嵄gsuG5M%f([p6Ku~d6\_VXXf>>>>>endobj -1075 0 obj<>stream -xWr6+v<=#1$[v.I'>uc$Ȭig$-$ i97/h5>dt]\\*=/yDMJ]Q-;ol}} o:[b}NVPf3BTF]Y+vUB)5LYRˆ#ߪjYلѪݓL'݆Si/jbֆL_5ٳCl/AQWخ̐ÓhR%oMN[R*-Mv^O3'G>gz+NFz;|Aubxj^ZzYgXT^M=+(0:Oeb @  RuneP82 -Bt6&qŘ`] ^2H\vbG -CXQ)tH}6Į5:5cw©F͙Ӂ!TD(^3V'pnZK|c__~-{ Ru.A~ ɵ@|RU(nx>SeSXPyW%,I1AV`J⺦8V7Ihm"mJ`j L*H-.]k,TZn6Xt$.mM +6}k;5,乖 cX^Z1E!\a9&-'Txb=X0an #zdu|>?]pRW`S:Z0!&D0CBN 1>?:mO0#5B^hc<+E =*-2a/1ql:t,H,$|s)ƄOe4&ro7 54$ rt2("&d#Fr}񢰈> OkcJ%8W0(GfN/v^OT/w8gϿtA')܏pqpνVbT\ͤdZH3; Rmx=߁Nt/FYgaTLdNzMrH#B}%$ z._`p2,5 ֋<IJ;zH_eu0-O>ݾmUxsiX>]֘q\r"n7!uendstream -endobj -1076 0 obj -1726 -endobj -1077 0 obj<>>>>>endobj -1078 0 obj<>stream -xX[o8~8o`G:*m;m}AZ`!fllW_BЕV Rps%:ߌ.4<|yttyIy)]]4IFt6:ǝl-.0 i4ۧw?)2?ǁV׉%_˛1DIesݠzsߖ:?>?~I'r# a76}CM/kħͣ]6O&x=@ymsQY/Hv4ps?u01JI7i3q{Re^F9 .NϤ4gKN֥AuYMȭ5=&z4=r i%4JXKS,>cL0_KgBҒ.InԂۣz6lmDԆ5^a)hI R+Ji*IV`2Kj*TV T V/$%:#e`^ -HF-~'%T9ZNzXPZǦ.-e;#*ˋpO^2*нt׷[2K8- ~cxLfU.Su|`3ЪdI@p #eK j>>>>>endobj -1081 0 obj<>stream -xWQo8~Wc{Jz:=UwR Đ,`w$4ju}:$ljo3ZhRHѮ5^wKCo&lσԕ*v!gw|-b+VYyC/R9tXnrUd?D-"OVH?iV8a l|iDpCT CbBZPzyG<usrn9ǖn&rKwӎU+;k^R}vjKl{զoDN!Tw/v063t_YP2p1`m& -_p ?X\_c/f\ڷPjP1iM<DXSZuD':Ks^Z4jJpX =N@B - {8nӌ9mLRg1!C@Jml$KGtfC}/!g9Zm\8"}(7y0\= /42VALH\EEvA`poP6mz:<22qׅm&jh焆jؕ \&bn*} /6y>DVʜ|`@7/JyZ>N7%Ӏn%Í KߑbaW~WDa-]^Rۤ\ڞM $Gn sPئes7Y:UPҶ'T&*.% -Gb?qø$;SbUӟj=1u=VX^Gr\ID"-.]Ji$U|0͚ɝޣfd>ѫJ-%ceEzp hxai:LQLT^ -8":pQl|w]|{..QVendstream -endobj -1082 0 obj -1265 -endobj -1083 0 obj<>>>>>endobj -1084 0 obj<>stream -xWnF}W Q%;@ ر!J[ -0VRڄܥ]{fv)t4Fhr˙9gֿ%4OB)攖GWd|~NݥaBgs\O&S^5 apo&tA簵V1}rvw/NWZn_>Mh4Ms8m֕rzw=F*rV$V2KC|]~aE ' ʕAkua+^׎ߒ"TuM~KRhV#WcEڍ7$ 6OUme~~[9Zku6)2ʱum~*¦ЊR[yS5%M}BƷ0͂[56EHT/59 Gg:ǧۜ4Gm8N)Wptn>j‘^{Вa!#rǖPV3oS4Ιu(?Q^M+(x@ Qx+R lv'-.Z66ڌ0λ1DܒC*rh7tA]R(Lj#qN UsUj]{ rk[E |4pV;TiQPG_?] r>*$AΡXqTu~O^ #lD*K[`GT":ρ9SBv*Ne-!!m’̯ .0Y%G73Qєt=8f=,9Nh M[U;ݢiTt+Xz^jpڋ@wpYy j^ JLZq-bÓ+cpc -9]Bit1peϛ®U~Xm},jhO5вfi,z!`7_m' T btBx aP -="6 d ˰o@%l6BfqPDprOfp4%C+ˢ0'kFTw{/A~,('Y~Og>oRHZ+*O $B(lede8~Bipl,U7p"A--߯Z_MŪ::_"i >7* PϘ7&4zmĒٴ)^4fgm"=Ak0_wIdf[DX ܶ7Ja+98HWҥw&ADEl6$owW[oSI(sQ  -ě8p&=ugI$7PƁ[q6&{& -͆E%[S&o`.mOrQ>r:>QzD{1ZL']vy84s)Tendstream -endobj -1085 0 obj -1519 -endobj -1086 0 obj<>>>>>endobj -1087 0 obj<>stream -xWێG}߯(Kp0 lK7f}0 =ӍgLLXGbKX:uŐ;^LhU\%oA6 sM)I(Yunץ4Tn%=d[ai)VlSAWTT$,~Qs*j)ii'L(3!Y%˽6_%/#`>+HS#%̞'_sW!A Q,E K aeo ?PtO -a¡q {2O}L._iU,?%ܧۻy0+MwLzc9Lzo42 M4+D($\Hay\qM" _ \U[,\o@J¿>{UӪ7(,ȢtD!9cGFn%Xq -Y"AToYL6}f=@ vDsHh>7x -P0w(t]ӊBf2*i/(N^A&tK;W2| ӡ-F"U,V{nrf-m(W8ni:@ٕTd@jG+#d%x} l0,ytN+hGPVQ\TWݠ XuD걦!S}bsrj.4G*u|=h%hYY5 ї?kh?]_LJ&ˆgH}O`R.~>i483YVn|! Ƃ`"\F1 ԁk7x{yIibz,Inx - e@,Cdz/ -S;l_ϑterŘ!=wOuK{`}2#6]71BO0NkJ/L^V(cn1Xihلo% u E:n"2ZY%z=zr~Գm/%K ZȥƘC4B㹧gOMY[AmmN)K`rV=j(;Z%,8iH끧-FG b-;T+#yΏ=)oMmac -Oendstream -endobj -1088 0 obj -1553 -endobj -1089 0 obj<>>>>>endobj -1090 0 obj<>stream -xWn6}W jv|KsiKJlm$1!)EVtM'33sLht>(-M z})7x3b0b'JI ln -w̦ٛ'cݼ .(H >RU.҂r,g*ԧ[oH0S^R1|.e"Rc4eEf<ó FsD k Ŋ6ՔrV -Ik,_p Uіt@6[]e%0[gnL\܅6B$T;x `w6?L -D(ML)'ZNRKSM7P~i^JM]vXoUŀ*h+^fA$ڦ!2\\4ܥz7 -|n#S-Lvt*Hi9<{t1l %3C wl2OX{X REBIIxO][B%n>"yrVXƍL!NV8g4B'Ppa/*1`>G}d0+tpwwpԜ#%D65/i3CNƚ>+md-p޲SC!M=2U9X(u+U:z.܇QZYBoMZ`Ƨ|͙\bO&ݫr窝h,Wk~=uue'_Vk ^EL8=^_u}y59]iDk_zV"i5{cZLC -=m[F{'SC|ة! 63Y/ /uչ)0:0=|1hfhԙ)\[h쒧sh&K- I'{'!IĒTV1bsM$h_ihףWZ_-/)xM'b ]'Qd`}2Y>>>>>endobj -1093 0 obj<>stream -xWMoFWLur[d˶ -` `QZXP%7&wUҊ}̒V"mQ͛gcߘn'tuCy}8yFkZ(h4Fݐ>&7vM^ՙ(JMA7`hrr ˒^iThܯe;Rt`Mr=*rxCO*/.W ;ݨEʝ XOl[g!jT=mK{\\暞3/KVUN⷏=`x*Гz U7;ЏPo9±\v^;Ǔ!WqE;VnねRh~Հ֕TEn#㞯![qެKA}`?>S xr]]V  LBjބ)#`O_?$X&O(2*/W5-hilzA.|q*\ WU"դǥBZ㻩ۚz4zZQ3|PMh7\?| ήtӠbwwA;9tkP .4W++^A.$5ڸm0`qWsdhu^9$aIH.iBI9L]d"%uҗtٖZP ( ͦT3qg4h66C0g!uƸB*V$.Ym[ S~_f5Q9%1d)N *hQ !|-#KO&nVhnPH[]2oXHHU`?#qC0!ͦ%JՕ/mARZR8M`Y`.v)KTOf'AD{zǽ.ĕix؈X8> XI]8҉ >JgNTzJm<.FBH!:~FbNCJ|(4[o1}/v .FN&čRc04ZVXKˁJ[͓DzO̎4W9%= FoCKR_+`A":­o~1tbzON6zITXuNR&F>_ ,e[P=Hq~r"Y[Zb*ҞAC&nN(akLLUZ/V\v >>>>>endobj -1096 0 obj<>stream -xUMO@WeFq1-,&9yiieIhV*-V$ohtF2Sm% GeF/\bԋi!&/VZ8CIOi4:F4WR{ڊ1Ŀ&5NeFrW(}(i*7[<)txGf炴($ |ͣhޮ/c'J{I+D{h-qnB@<ʩ^>LйYsÍ5hhJ+zFODVLUk" -EY{T*9ʓ" P#th]1Z+$}cawu-橹jjC֔ :V +VcZʸ:"*,Ñy"F5 -xyۄprlߗ=MY4|C:(¯e9o!IMMyE"_)~zX. -C}XӳVȯXDQ"?H3?^5_[{y ˥5EDHP+*٩@*Ȃm㪲4#Q wp!^R2~8[D<;@qM#8PќXl]{8@oͮMnsE{U_ ke$ı'|hieXx>Gg32Wx1AXW",!U -DA 8=؟e&P9M=o^t/뻛ke͓D"3iU}'3uY0Σ -{q#endstream -endobj -1097 0 obj -905 -endobj -1098 0 obj<>>>>>endobj -1099 0 obj<>stream -xWn6}Wܗ)(=,Rؒ1PesH{.IǶ6 Cƕs9P~V JZiqCuwv:zLZ|sUCb6Ó~# 7=KZ SKR\kש,rMeASޚ2/yj#sq/ ^zZ`)bQ4fZفN5ZRa(+a3, B$;v6"0|E'`k@(([t\)j'o^NcqTˆCsNko -ޜML -O'=䱇Y -& e(ڔDhl~%?fjfC0d-x?Se46NN׌<BZ< l0}4t;y:9kVK0'P$ʠpQn> yIkDӼ2G,!`zm뷘Ȧ7 ngޚreXHi-c vlZg; `N[X5JIJP\09sQ"613#9LCdV -88BV :\ u_޶>>>>>endobj -1102 0 obj<>stream -xVOF~8$*ԣ\KRIӿߌmNfO4ϔ3XPRܬN?i:U+%RDɄVɩ!jM!T+Jޯqlq/ le~ʏ{8m!LG< n=%A*QL5A6{ݖ<Ї%/ CvES ih7]D"]6>xƔi K328}TeB_d<D{:ms]ApLf@ YGW0!L٢K9|G-~(vρk{@+tQJZvj x1:RFW^؂zV*Z  [ef}@Ӧ[Ru +sYvM CLqy8MYS(UݚvE7_' Ǵu±ՠfceSSH wgLm "g.|P35"C/.~蕋+#)H,j8 LYOt8E#FTmTbA,W$AX*7 m$jb -{ÏHr>dG2wG(RS'5~#ğKOGW$ΙuUچ?t,K-4" yCotڽ!pAP~]XL PnЃ~8nŋ*-p^ - bWF\ pq[Y2I6Pk -BݬFg+aZp`rAbV+@UzXFSZ,'[5}u3Mעz3no/gxYOO;|q-ȇ'3~$Tendstream -endobj -1103 0 obj -1411 -endobj -1104 0 obj<>>>>>endobj -1105 0 obj<>stream -xW]OF}W\奡oBJnEU^&bxgƄ;iH`\M }G8hCZ[kMѺk%&<YMRyC M3GB-U&J.K/ Մz6_ӣ*jT¡u1&l1(ХjHϪjxv1Ѫų"^MmT8:QXpޭ!im;wM4R^\petRTT|PHCxk8k؆k`gkAKg, ;Wm@UUQk OCί?_rMc \J 2eݩz[&RǶ,q!MО{EU*mM+t@>TT 3GV(SzXBF ҃LZ/U2 -,1Yrq drwX։- 1E/=|[v>N/qNQڹLB4[e13>>>>>endobj -1108 0 obj<>stream -xVMOH+J,#'N ݑvfw!h%.xU㙅J+ xU?4OJ Mg'˓('4N1-t,m͇7_P9Otp5y -&s4Seu%i|?P7W,M䮍Ju _8RdTa+#m%1d"w\]U*qBB{3U{x6/?gֆIXe98RA;{FM p@}=BHߖ'f)>/s|NW1h^^]<_yW%m K8j:!ANV :PkUpF:nk/|PIR=gu` |\4 --ݐ hU^pgc {ivij6fu=}`?:v+kLz_N/G~:NUNjl~^o`tԞ397*@A "AAYp֡\5*ATRT-|4 -U:BK^H3Q(‹ٚр;KޕVyˌf¼ X/ji,ʘ gH%!d-!Z#cULAc( Bm4`k`dL'?tBQ0"uaߤ/8p⋌*k [FrZY/Hq?A}!a, VLGhGH'*u&HlV+ok=N[ǥcVb{ѭq ->>>>>endobj -1111 0 obj<>stream -xV]OH|W 7NBDt|"+8]]UǟOg)>>^iV!~Op)]+KZDLiIl,r<$L%S RRm&OH6QGsK"݉ʸ3AN7*'KTxPDV!|RTtNIip}I{9TH ɀh0eQ(m`$A٫Ṣ\QAXjP6TDVX~!ut&@PP8UJ,0.EDKH01@VaoR:\/g,ӻ|+zeI)&N^ DucQ7ȣ&0SyZQi&\Rî -*kt]xjiu ZD\ťqig%,W/܆01[p9 Թ7W}&NY;h]̭e"Obe -7r\B+r/n|@:^f1І!("zA'95'!0z`.m­]+$.1K61(eZe8~uCT. ][RfMIaNip -aLzt+@MK R͞|in/ ob!<äq*wuA -6ݼrQ (F7@Ȍl#4N-EV戺$G͜TH[T -YY( |Y} !~vUY@6|\A+JDޱ!l)6P"I S!4 -XB4P (.ё\æi^@73' Yξ,f7+;튠~5e^!x`l|)#QkT#! у޵\ftF]}LTڙdoB?X0]\vEEjC99m$ZempIP?NF]z -0dE5~uyIv]ks7ذ^AX$`IzO^>FdB -F^P>-,vO\7qP>xZ̙,F4B!l酉G-:)l 03F痩͉y :y&,<"S;7KԋOCh<0)q?endstream -endobj -1112 0 obj -1441 -endobj -1113 0 obj<>>>>>endobj -1114 0 obj<>stream -xWr6}WlL-7rMDq:M կYvqi={B|E4)SZ\O)ho 3 -0 i.EӕNFRB֩rG4WtdUuoEQir{I[_L*]_ޮ4Ou"JWWf5M*5 !^YQU&3 ij:%|ک\9%m9J#7{Iw*ipD!T+^rvA -ލh}/ȝfd,S8nP{l{*ͩ!ΈR-ޭ?Vvڑn}|*c$#}'ҵ%˙dˁ;T ĝP2 >Kڨ> Nx?C2#/&hPͅGD_drfeQ88㗋qELg[|\GI^x t.g˽kLך>rQ5+$~orߧٜD -W ;99p;e\ BP/$daR!=,RPӚ_zy7Fy[B@ւ2݂f90AXo8 h|]m8h ;A0 Q~=qIipo$|l%4Pdq3>|֗,;ƃpq  G'ѣ~jDUu6S-6g4]eY7r0HoonFS6RX%V~uqr֠,% _,-#9nrKLɰb0Dq41N3qm;U3 OU4\87z.3OÃ'J -x4JfSYi0`S "C#0PZiAlӱg"y[i(͎=$K6\UT'C齱F0vN CDc.P3KSoKN݌9\@ʓ #h&YݗFn:^Xaf;RnS|C{菁*)k^{@-O!g&r8>>>>>endobj -1117 0 obj<>stream -xMQN0+Tn"$NI;{6M;;;N8JhNnt 8EX&xD-Q;wɞ%|!Fk?-r |Y`ܠhj"&Deks}J8bŖ4>npH+Qu@hk띫ޑO:4aob7,I }k|kK316 )WיKjr)$bd?7/?"}K[X{7v_LDKdBoS 5@Wendstream -endobj -1118 0 obj -305 -endobj -1119 0 obj<>>>/Annots 325 0 R>>endobj -1120 0 obj<>stream -xW]oF}ϯ%6VU%]|B{奿mHPDbםs=h@}(hxNiyt5;fLADqG`DF҂W`>0=Ov?48ޤ'+v quK굽!9N0yGSb5> BфRBh0¬Z+%SGЫ#D<(O:NEx#^qQtv ,FIxSASF%`P,JS] $ e7irJZkHTFx!c'rn. SatlreE,6˄\YƧ 4sdh\ (]ꊔ4\+;5 O]4[I TFO&GnO'W$9iR/F|Ry Xo00~ -'OĻ)IIGZqkWyj8%lt(39?viGG DOF;D3  pj:a}m#cUίHTU&ԡ*i S{ )qT{+` k,YiP` QhrP8 - !z22(QJpFZ')!s.ek lMy0mch1Ӆg>UJzOb]RlqՔ*=ULVa'%,,y#θMd-P1PODꪭ Z9ݛt#7H.ƕƕa]ph 6<{K~m(fHrHxV/]>нP(֔ƾW`"-}vQ ,"Xi  o 6^U֦hCv -ӣx֢>[ Oyԁm<{u;M0Zz`$ ok"\0uPB h+Y]XUb>L,M۾;rfW&IkuF(8+gƄ}m>{ :-R *23`&r=@;%ڹ{Г<@Tz_nadpZ. uvuҢP7Qk$2 ?I\n7ްapAD9\@GV}>}}7 ߰p_(iEP(dd*˭}?Bx7kVƻ}?^2:qݡG@endstream -endobj -1121 0 obj -1599 -endobj -1122 0 obj<>>>/Annots 328 0 R>>endobj -1123 0 obj<>stream -xVao6_q'phI'H3, 0eDU~Qrb;!![ݻwhBI{gSdFb4QS#AW"+|rMI;(G\y>>|RӶR[oDDLJ:>(jO#\ۆRKf1}=9kmLJ.=M(zWەSJKsY,$+#5䳸ņ)⧇{ɑ8x"FT10 ͙2(6%BQFՋ5W'9e-(0^Rr05bK'')J3(լS0Qv"bҦ[ic.Ӥ* {30#=z5lr$Ɠ4R(}6ƊUmFn@AimU+VK2jT)N{J<"CLi-KP>Ho+Aކvo7P& 9Uc#h/ꓓkQ @`7TE@F`$5HX -2ʠ VGڽֵJj˹DB?<|eI &=TX4֬._Iu "xG/(fW&8*NNU, -Ș鍹lrX`zH+m,Ϋ"xcAӿ0xC~I]kZ" 7P䊅Hl8ƛh-4 6Zml&Q9xT3ݺ{7f8'HՆ_;3U{ `6b FylKzK[$ܗ"UOhRb)Ή>ӭ?'y{5=|b^0yIAhk-(OVx -AΫgA4u&fjtaHU^^c5d{b--Sd%<;!6?q -ܟi]!* :D -|tQ%ic(d|dLe>>>/Annots 335 0 R>>endobj -1126 0 obj<>stream -xWQo6~ϯ8)Ȗ8NuK[hm0/4E٬%Q#)k"H,Y'www,)~Rh Y:P6U'%r&)RLLJGUJ݋j-șJEٔ.9޿kAw|z/Ydǥ 5y+6u4S5F7Q4I$jeMkkJ>!7Z?}xmjZ ']o༪$oY\nզGGt.MUijՍs G{ai]𾶢q$^+:xN܊ԇjxu*$뼍1^2BE$|3Z(|YJRgɔ*g亿+k?IW|pnd˨U&ׅ#dsBfO#zN&yWwWB2xt5PלUT 5Y&̽GdY -s:gg|[Jȭգ-ٶfv]jYBuYx7@cp+4R+B@Fȝ(PrY9 ;$@ B*:qpa) djD]Уq~D!?F{:uu:6mE3 Q!^ ,Kܲ!=:JڃI^(Vڨ u>,1^s!Pm]QyssnCP*W\ZN N -X$ 7[QrwGϲ)]=nF_uu;$6~TP-t;4oUjZ|QǐO0@=׫BऩPu9UoMׄ͠.B/qSupAceY2 -!g;r+/Z! ҈<W")GyE3n +K d8 PGċ$V0{9xk:F~B/zG-P*]Ô'BNo>|7Mm߉6~cnhhVK}:2Ӂ*TlA=Z-e Fغ*&0pIܢ"_#1%0#hCd+OqZ=zZq:Ʊum^5/a\H"xqp3:.M4x cn% c,~, [akhž u<-4POmELR_W!Z'U9`䭎w' -{HBĒktq ї=*3crw0;鶉-9KAӡN)1 d/x5IS篳6gendstream -endobj -1127 0 obj -1482 -endobj -1128 0 obj<>>>>>endobj -1129 0 obj<>stream -xTn0+9))ڮOu^ȥH%@@ST0 Hrvgvv?F b%Ou6 Ih:!Gq#K)ZTLT`[r]'pJ2|7\H0F~-L)eӰ6wC*r؇_&#̱PMf"֋+zUR;=-$<*!++mUJ0#U^)T;pV"VUv5hmZ["kPE"rAw[&( [ X)2WJĒt'\H5bb#j5%tn~=BC -bb% W_=No\N -`{“g -hYCD]8c"B%}qqIܴ - u [OdM"۳Jf,{Nq:IwDJ[3SkM:Cb%/# lGsS1Ј'y4&I?' endstream -endobj -1130 0 obj -662 -endobj -1131 0 obj<>>>/Annots 338 0 R>>endobj -1132 0 obj<>stream -x}Wao6_q0,Rٲ)Plvak ( %j$~:F-xݻ?9/ՂwTo6m.zMNj˜7 ݬW].;jހgr`=-洩anM%Kyk=}Խt[z3lË ޙߤ/y+,3E瑱ui t⅛Fnva _@&PPm~kMğV)\`._аi -CњH䜌~]SԄE -T6j<7_ wZw8GkҝVqX@OǀVEZRcwsʱv(JmmOѫwtjFG&!rl![L@!:8T6'U2wHTerDo*-3yU]d?B, dws;7^fVslz(q@鼎DQbN5Yh4  &p9s $Q -!:X@[@C3c5fBKe`9XNdX s:61-='+$:=vuP;U/c-8[S% LNr&t&[8b#,_Hxiu+/IdZfL21W<7oӼy8╢>r'r|zɚ) <1`ƱxQЄ*3_#Dbj@ 7jX -{]/_Ž[g+S`#hq] njendstream -endobj -1133 0 obj -1667 -endobj -1134 0 obj<>>>>>endobj -1135 0 obj<>stream -xW]oF|23?d@ 4iH;(Y{e01R̞= t}N *ړw4ӪbyMfl6U1mU6Vgo'3:;_dX֚;\&Gͳ*}nWn~(u&)")uկ*ZʵD]%K)龎_d\N` *\G먀AIbW Dk*4&UaMBRj:i[xI HQ05)ai'\TӨlcQP -.D:n'^nՁd52A`#Yz=jS.2G"%Q#__܄\78q^oaWWFZ5]r&RoW' .]-/%].sw4}WW eۨU iU,}%pԚsZ>|n|PCP\Cd(| @3f"Z 2PEL63!(f k 9 ,et6([wlmg4듁u ^ϋഉ0/avMW@Q`0{Nïm v:j;ktYHGStimFjh٩N@0"l5<"j3%&חQ: x*N e@~2C=#P (j?WhFml ?Lz 5ϲO^G pnZl_^՗ow0x+v|,m?>Շb]{|?O{endstream -endobj -1136 0 obj -1642 -endobj -1137 0 obj<>>>/Annots 341 0 R>>endobj -1138 0 obj<>stream -xUn0y9R19mzD_ [5IPSdjwBx $s""YAh]ap'mna<ΡCwpVA d)E*y+u -bXOLEq}֝6͎@5|*$$eB۩*.HD\?2nxz<P.>{ky{15T;/dn(8j>aΙkou(2v/v!+QQqkG qendstream -endobj -1139 0 obj -290 -endobj -1140 0 obj<>>>/Annots 388 0 R>>endobj -1141 0 obj<>stream -x՜[s+-JUa%KJǤKyHM J鞞=]!99g{zznGu5u5kɴ#)Z~j.G 7]U>^W6UDv(If,owju^nq$Tuӌ/Op\diC@,=4 Lhp$e$T"=f]ʏG'_m3WN^ub}0|Mk>1EszD^41ؑpv\f &OLۑ0G֓mXa~|Z~@*0&Q+r^j - tD ~\ 26m x0˫=;  y;^c;5V!(;>5=;ҝڞ ,fhF2ݭo.۫)Il.E*0鴎a"zܯG ! y0}j;'(?!5 4L_20 ! 9Eр+aԂƺc:Wp-n\niT]| i9 bQOQWNΛaѼ)] -$fzoj7eӫ7›2A0ޔu3FTpCFjyҡ 1>wñT`t2s58l1Tԋa"b/]? .j Dڇj9{S9;^#cP: }鄦Oz#4ugMyI#7cBz/~" 0G$ݏdkD2"#H$V| -xħ:#XDZP]7OX4RNä rٸOۚ>9q Y຦{ Hpv\<7#%@tq$xm@@$a!@5,$6gcp=,$~y~ҲD}u#mԘH"~HJ薽7@0#F'M$8&G!I 97Br$U|>;P DQzI`H v;2Jo:Hb v;\L¬4>ۑ~L"L`#a;Iw㙄f8[E@`fD.7I)Ifc"iR1uЯ&9\/yY&;*bXF ,бV6>)$Z$D6*LFϾYB b^7n(eUzA{}L\թ}yL;e Y+}-qX ~kfL0f(,e]<`H&MD|ya!0S9Itϔ DLnm~8gJ G۳' 1@ùX AU"{C$Zx%"!H imA 5tﮗSƌd&'[.z uc&jbM+r{.c%u,qo_zKaO&H g 1}3 ٧@<=6bw6 y۴ZH/6Hq -6B 4Ap(1d0o ] D/@e1н6LA v;28O 5!`#As QF'o譋=u]u+/Л#bۡk&>فv 5},15+ PdqLDk`#!ٖ ɶE-&::YWNt1XA2BPЇM5_&%nGFaLP:1#AwqR]6i,d]&!UH2!Y Y0JZuAw)IEF/ȺӘ,ej]#$K0!Y`5B.k?uqՏgr5ȺHԈِ7gdmO(-kdYu,*Z]H@`?5zAfE:I\ ;\#$30!`5B2- g0.L/ȸ8b-G?YLۑQɸL0f$u׽`?"Kd\=1![yWT2"Fy6$>Ͷ%lv?"RE)w7~kѠjoqJQL6 ,d"bQZfY2"=WnY9ALWbl=vڒQۢNmކ'#}O^~m_R`3LȞX#u#Ͼ }k κ3.9x7 q o7tֱ3 %!Ia~`puGZ8SLboDg9*dڠ~Hݹ}8H''NcB{l )=i~Ɋ,)3օ̂>kuA6%{^'~s? a4ckA>FۑjLy @0$epG {8|7ƩxG$0NXnGUA"t ga#awsﱲ$⢗rerZos]X"b 2ϐBzy'@ݾ7Э"øxZo\^ l~38 ^"闠^bם qwl=I`qB3'C|r]}$iؿ6ב1Ϗ&SGhD3DBd+j -}OC]^'LE<8 NFPfsFF]>ݍiz 3_TNMv.H#~ӏu&8} jဩuo4K‡;w$X -:XG"Q^ n&HE'`k #[D/F4>D%? F2%>3ċÊ^E 3  3dHC HT cۑ1LIfưnG}?g*a#&ϖ~.}n~] b<1hb|; 馗ʣE_&o-t׋߬^M/T"ݸPV'?_^\dՀ:53~H֟7,COaj\t3&V3{I'۷gC 2i7Z3 cK ~ןVhb0\6jw8`ED#3Vxrɂ-s~y& 5l|@Bxz?.PW}I+,W"bgendstream -endobj -1142 0 obj -4385 -endobj -1143 0 obj<>>>/Annots 432 0 R>>endobj -1144 0 obj<>stream -x͜[s+!C` ,Y"QRy@Mp3=3{ndWX====ռY=wOU3._Nj6荒j:Nó՛M5\Tx~8{ BOۃv6VnY;z%_껧]UըͬvM*6bZvO^Jr(\i|}0rw+h[+S/m?YdS 5E#ΠJXv -)!txؔDnRB}_ joZ/U3XeYiqӺiqRRlz ?FLJwd7a{s0g&M`8]ݬIigJpOZݜgv5sT W0^zqR5XD_jq~A6Jd9C UWc!0Ũ6J2,vU۷b=#mnι>k9N<KwUt2&}Rcf(zƫJ,yMhq|*3upA%p^y;YV3#<= -ɀxx9G/OnB`csجcgş (GF -RJJ4X`a&m퍫#Z_Ŏ)Hra~b{yߤVb-zW HUa!0mHӸBZ`A*0So[Ŏfw9dct0DEx_Hz䪙/ghC(E="U3ꫵMsa2?rc (5 t3PIʬCl)Zs^%`sE(#VYBE(uɵ :"Ghxv<( }vI<ٿX1#fMmC} ]Ǚ=⬏Wd% +mLa3[,aچˋɨj* -Xn{qer7C*`!j+elkL X% \0XygL X -:& -kO+D  Z6A }YS)XKHjR#vlg) -9AZ`D=t {X`DL" f2 ۊcDqqZIXD,0Fn60QP>Q~/P7 m\H74`(Q#=nTslH`MZ]շ#œ4<^q{뺝]ju{,o5=UeMTF+/.t\Y/=OуU`ES CA8=jY zpo7yqskYgU`-{~u}fROvey(<( G3>5 k<ЇdvAfrsq{fd  Tm h20"W!X+6{ɗkihpAzڹq\$b͹H dX <'Fh윲88M-eŪ:1N{-*F(됂 -0z-yOzafF(v𾅍_LR3Vv58u}H z3^ M4a%k-Y&ZI{!גܩ ى(ԟt2++Mf@<$5bգ1%?p%~z)FAH/7 b-HXCaR*Qoed`chἘT1; '8D45,疕 -xg(8+*%e\DQ:#%VäQVI VS:Gt]]'!)o/~<0(6bௌQE"qy9ceCP" 8!pq"-9/f9㸠IF>ZsfE"\`+g KK!3  g#Z,T2d`\#hncB=q|wY -_=楤4LSXf$&Z21d\a>%7`RnWn&C染Ym3sxQY3X,@1ޛQ *}uޛ!,;{3!x%(W&Pt2 RLAmQi.m weBzz8p1ƫ: -$ظŘRVHB$au;^uQNvP|j<ڹa) Iw`P1i4'!g`21no}ف$qd3OmHu? aܗu<:OQ`1fkXu u3#= ^b"{)㸸ᢣr?y o>/>hkDrӄ 5lfvQ}@4aNr}a{߳3vtd\ 3#Q[7욆pT =zCKBᄕOdEpRϭ?WL5g,%xAJ(iSBxsgٲlPCbZB)DlJ.Fv[ܙ4 `P; ?EbE X?xA:P0QyY9]8C됾DK&'S15%͂ZY, Ĩ22.#V#qUG0R>xMd8Zs"Bb{hyZwB,ıZsp c % -qs4V}آH xAb( l1-O=9+8^ҋpAy{TX zL1bZDҙѥL_ 9 >%[zC&'O_2iYW, |.MC*~IGUb?dg(SIF(gF^UFy!" X*B;,mO09+zi+qPTbe"b@.^ıe''\Krd*d=3seգ?^qz2vHB<{_pRendstream -endobj -1145 0 obj -4944 -endobj -1146 0 obj<>>>/Annots 477 0 R>>endobj -1147 0 obj<>stream -x͜mESxh)KqokC |Wwuj"l6 g瞪jjTPvjf]uqYM')|]WգޟO7AhUŷa2n4z^9UqWյ|5z3:T]U'N|vU=m& ۻx1n$q|WOfV^8f^- abY/sGHyD:$vSS)1N1ؿk^'OתDjZQGQE.Ǩ[j`RGqZg˒ ,1c@SȮÝY.) 2'fd̩ ^,%- ͘q@,+I`6B]_B>U|H6MI(63ܴClnm% /.uZ$#r$PQ)):vgHs/Hs VniVrD;1K}ہ+Uf'\5|>D8d*hDZ+J -ocR#IB)"Hj=#D/r9nο^IB}ٮ߮BjgDxz8梂b0`XvosHxI̤5.קUa4$XTxS0yAG@J <'˔΀ݭًBPJU1l<((N;<ޠ>hYJ8I$8mj'Axt& y Vb@j rS<AFW6BF G\^-p:x$4dH5OȻ9gn1 +*^d,-jS% 4G1(6{Z!9q*Y2)$Jg "D$3]HLں% 3>cm׹/$&;Zm_d9PZIx -:-OJ;$0Qw %vm5 ',ɖdI=¨`4K{$fyxw'I!Il<ߜdlԈT緖Z#V4X d>F2XdcsO2!z vCJ"Ac ``1b + 3d9_S@%1IkSqBPf J <(W ,X-'5 e.y{];+^y{X83P!('R Cϴ3z̫OT26#3䆒x z]{dcUm=n\9Qr{1ؙx - -KFB_Ryp=ȔcW&# +tn/VP0K.(K -qN= -uaBψYX0z!ENg}:>!}߉A` -ۆ'Ip%K rJ 22`抈Qet:NC8QL"޼X`L bv <{7ee^wHh-O2)rk=LҒK g*Rh!!-wyD|`2`!׾/qg -$2#Va„;[}Ua9GHAႬ9YC3#-Yñ9 B7o8BY-e+gwaƽJqOqɽ}8S`%$pACt/D8J:| -9b=7I Y|03, ڄ 2cmMp nތکfТjSQ"zS"jU Q͈bޥcp;?*.X$)'5R^!##D,Nb9զnrE, Ͱ4c9ȃHh!"5ϓ@*Fk%5=$^<6 m`;X X3tŐP -9S6-j( qåq85SQv]Ŧ -~a@%83ϢL~Ąo3(KX̻/xw3Ws$jb^/sP":B}'p˕ mOҊd"9'DnDW~x}! (mͮ2K_~:wi!-̬f8 %8O? -0w,Y -îFKv]Ȋ/Bb7Ca2-x^8B )Pwo>r ""=xMȯoFv6Kr>+c%cxt R#| @79{0"xoE:Q8_88#۾HC8텷o{3 Bre2 _ o6p]†jx ˺/G2@6=8AQGg~x=<#ȣ>n,bqXhdL\@X|D ]۾hŠ-&JSA,qdD$G|\}}X|ƨ ՗pf?endstream -endobj -1148 0 obj -4511 -endobj -1149 0 obj<>>>/Annots 522 0 R>>endobj -1150 0 obj<>stream -x͜[+;Ysn$'/)]"GKhcJKJv~}N ޕ*g#h4 |PMWMMV^?i?WϪlN^_Ng)0^Moo}@(5ӫ4df2-zr!_wFmf~6j1=,;w'>{/^:1 YcyZ:GfR7YӿY\n?uhGy:H52v\d6n(ADa(M{H 8ʟJ},ۥH-'ٯoޏ< VVg^~SmqfH_>=7nqZvNdp 5mSi6mғje`0+ZjY$&ɀUXa" !R5 ߩ(p1-WnwB2 .tpËfOct]b ߻G`'QA=2( BTwo*v?\0,HI<&L!t!+2X T[R*Qœ`Zc8ij DXMQLpEĩNQU\f~?ޮ㐞']-P`2+P]x~οm߮}ㅶ/‹kڶjB qۛKi 4`[ökxufQ8%'Wboz޼_$2!2o?.W&Q't)?d%B*'),- -X Uh &G ,uqmR ڎ!I*[ p|G>k@%Zp{;L; }gMq,+.\eaƱ -P1']^>/[UR7=VJJ -ځ},PT p\ף=dV+U<2@[ d}Ub9hqiW+$ÝQrY -©hz ]7 41l7\vs~@p8 *nx-o1πTֹX!+ѿѧ1ȳ - Pa+\T3^>yU2lla.C7h=ىWf pA rn !y,$`q-H kC&f\L#yaXD-9RMN /W79$`SKY6IRje -ʌ3 -xO ,d6? Oa9,9j^ti1čyPFE̲x"B͠G NuW;ǘ"Yl: ВPVQ#S 8RBlLv.oW &c&!ՔSmlqɨ@Y.nw8义 QØTք@#jf\[_xn$6\PW`ӳ$(Vt@ľ(&$cN!zc9X$=z* 0%ޯip/ VM{ظ"8kAZRps833^= V1 zFLivaLav1z'/ f"W%A[pA[Kc5[ -2AU-G[, UIQgĄk_!OU,k+T&])~ĹTRY}mD* $.pc9d˦$!l"`Rkl3C!qv%V >F4Td$ؾ>adܻEͻX6 HԦ$1e4s\V C얇I - V|}X 0yvѦH\ ,o !:Uu9iuf$gpAf-"y$B{MSx ->fr;ҦHAfy2naSyĂ[i,{ƒȤA## ? 6#gmF%8@cNB{=S!a@T-)LPGa"}q7NUO92([cf%ʄ\q mbI|eZ;4zE(#i)wtps5o3J7&>f,Wa\H ]ntnKRho.3!b fSP2OQx @I}8Qc-3ID^榈JJ<\I(يXh4%K -њi$Ǿ3dBbfb5{W 65r^A@fi֓yhfRU@/ @o{p'1Wq5!2Ҁ~,!A=b\ 될ً,+p\w!ֿn7Sj7Rc? ڀ~)'bW2}M(ƚ w+!ԛݣ -o 5^VT-%̱ʃ y~SҨ¨62j+y2 fzHTˠC$ 9Pt `|csC&%l&{f$νz*#vYfrc=Ca>Az2 kO()܅BEGrEVζoS Y8=lNO&s0,=Y%Dwaq% $C`؎GIǡX,d&I< -1$J?[$-IKd4Cˑ""~6@Vц ԗ]7¤/(B#"ẅؙqmvF%88م9 @*=:GylWLa5/Yyǣmvj#ބ!)"JIƀZiE_H2Ht ^D0A[="oV&I -g (-i}8ƞ9WMU#)ʇ6dog+RZ/ 1DRT'0,-&8 -Bsm?;ыE۰͢jLաM -z󍲱x/~ӏ\f $>Ͳ'`-5K`̄s @a\T`/-4 [!@Y/wWs0Df+qqɄ~Tϰ?NE dĻLLKKlS_;7$ iywh"fBFVLYd#dY7 xUQF9\@x`~+ƜkΰL8b͉F_>>>/Annots 555 0 R>>endobj -1153 0 obj<>stream -x͛o7W)[ڧI/micE^YZJ3rCqE(,/!YSd2l9{su]yvuM7+v^gWY>sjφg:++o~:Yuo6-q]2m]hx6qem-Hփ!Pz+J"U[eye"n(eI"|ȵ& -D\d/c§~yIU; c|(Yw2j%m;>PiP#K(BhAn4I0\P(TyZGTuOkkL+6= kD`]SƇP -"5+%- ^ -!LeCCD:"sK玶ňWyq>J/u3s0։]?1 صRpċ6l 85n֏sIQ1E_c?LDnwr0۾بU}ꄪjh>&o I:X'n~ -^,a\͔p%8|s\kL 2|AcC%SrA= #iK,'S6$)cd ,hRMA| q3mv 4 S5::T -T;,>XB\qloyCˮ73 g ,bw!kC`t" (g,rE:Xn8Y1Ŭp86w20m2r굻kI"X QnXy8;%MJ -lXDJ-;oDMCbO!ϭ#@ÍgoV;fe ۘ#JȖj6wC؏*.GyWl5g3!%75-Hf" 'sl|&'j<ǭ -r8pqs,Kˡ ,>; 7@>*5I0..Z33ua[JK\l덪ވƇ~'&u%6 ;%Ö-}8<pY~UK1%7T@N/B]00G4Cu_ݹ_]'m-a*n4Դsoo4I EQUW"o &˕5v|Hn_^|xs:ՖaK{G;endstream -endobj -1154 0 obj -3118 -endobj -1155 0 obj<>endobj -1156 0 obj<>endobj -1157 0 obj<>endobj -1158 0 obj<>endobj -1159 0 obj<>endobj -1160 0 obj<>endobj -1161 0 obj<>endobj -1162 0 obj<>endobj -1163 0 obj<>endobj -1164 0 obj<>endobj -1165 0 obj<>endobj -1166 0 obj<>endobj -1167 0 obj<>endobj -1168 0 obj<>endobj -1169 0 obj<>endobj -1170 0 obj<>endobj -1171 0 obj<>endobj -1172 0 obj<>endobj -1173 0 obj<>endobj -1174 0 obj<>endobj -1175 0 obj<>endobj -1176 0 obj<>endobj -1177 0 obj<>endobj -1178 0 obj<>endobj -1179 0 obj<>endobj -1180 0 obj<>endobj -1181 0 obj<>endobj -1182 0 obj<>endobj -1183 0 obj<>endobj -1184 0 obj<>endobj -1185 0 obj<>endobj -1186 0 obj<>endobj -1187 0 obj<>endobj -1188 0 obj<>endobj -1189 0 obj<>endobj -1190 0 obj<>endobj -1191 0 obj<>endobj -1192 0 obj<>endobj -1193 0 obj<>endobj -1194 0 obj<>endobj -1195 0 obj<>endobj -1196 0 obj<>endobj -1197 0 obj<>endobj -1198 0 obj<>endobj -1199 0 obj<>endobj -1200 0 obj<>endobj -1201 0 obj<>endobj -1202 0 obj<>endobj -1203 0 obj<>endobj -1204 0 obj<>endobj -1205 0 obj<>endobj -1206 0 obj<>endobj -1207 0 obj<>endobj -1208 0 obj<>endobj -1209 0 obj<>endobj -1210 0 obj<>endobj -1211 0 obj<>endobj -1212 0 obj<>endobj -1213 0 obj<>endobj -1214 0 obj<>endobj -1215 0 obj<>endobj -1216 0 obj<>endobj -1217 0 obj<>endobj -1218 0 obj<>endobj -1219 0 obj<>endobj -1220 0 obj<>endobj -1221 0 obj<>endobj -1222 0 obj<>endobj -1223 0 obj<>endobj -1224 0 obj<>endobj -1225 0 obj<>endobj -1226 0 obj<>endobj -1227 0 obj<>endobj -1228 0 obj<>endobj -1229 0 obj<>endobj -1230 0 obj<>endobj -1231 0 obj<>endobj -1232 0 obj<>endobj -1233 0 obj<>endobj -1234 0 obj<>endobj -1235 0 obj<>endobj -1236 0 obj<>endobj -1237 0 obj<>endobj -1238 0 obj<>endobj -1239 0 obj<>endobj -1240 0 obj<>endobj -1241 0 obj<>endobj -1242 0 obj<>endobj -1243 0 obj<>endobj -1244 0 obj<>endobj -1245 0 obj<>endobj -1246 0 obj<>endobj -1247 0 obj<>endobj -1248 0 obj<>endobj -1249 0 obj<>endobj -1250 0 obj<>endobj -1251 0 obj<>endobj -1252 0 obj<>endobj -1253 0 obj<>endobj -1254 0 obj<>endobj -1255 0 obj<>endobj -1256 0 obj<>endobj -1257 0 obj<>endobj -1258 0 obj<>endobj -1259 0 obj<>endobj -1260 0 obj<>endobj -1261 0 obj<>endobj -1262 0 obj<>endobj -1263 0 obj<>endobj -1264 0 obj<>endobj -1265 0 obj<>endobj -1266 0 obj<>endobj -1267 0 obj<>endobj -1268 0 obj<>endobj -1269 0 obj<>endobj -1270 0 obj<>endobj -1271 0 obj<>endobj -1272 0 obj<>endobj -1273 0 obj<>endobj -1274 0 obj<>endobj -1275 0 obj<>endobj -1276 0 obj<>endobj -1277 0 obj<>endobj -1278 0 obj<>endobj -1279 0 obj<>endobj -1280 0 obj<>endobj -1281 0 obj<>endobj -1282 0 obj<>endobj -1283 0 obj<>endobj -1284 0 obj<>endobj -1285 0 obj<>endobj -1286 0 obj<>endobj -1287 0 obj<>endobj -1288 0 obj<>endobj -1289 0 obj<>endobj -1290 0 obj<>endobj -1291 0 obj<>endobj -1292 0 obj<>endobj -1293 0 obj<>endobj -1294 0 obj<>endobj -1295 0 obj<>endobj -1296 0 obj<>endobj -1297 0 obj<>endobj -1298 0 obj<>endobj -1299 0 obj<>endobj -1300 0 obj<>endobj -1301 0 obj<>endobj -1302 0 obj<>endobj -1303 0 obj<>endobj -1304 0 obj<>endobj -1305 0 obj<>endobj -1306 0 obj<>endobj -1307 0 obj<>endobj -1308 0 obj<>endobj -1309 0 obj<>endobj -1310 0 obj<>endobj -1311 0 obj<>endobj -1312 0 obj<>endobj -1313 0 obj<>endobj -1314 0 obj<>endobj -1315 0 obj<>endobj -1316 0 obj<>endobj -1317 0 obj<>endobj -1318 0 obj<>endobj -1319 0 obj<>endobj -1320 0 obj<>endobj -1321 0 obj<>endobj -1322 0 obj<>endobj -1323 0 obj<>endobj -1324 0 obj<>endobj -1325 0 obj<>endobj -1326 0 obj<>endobj -1327 0 obj<>endobj -1328 0 obj<>endobj -1329 0 obj<>endobj -1330 0 obj<>endobj -1331 0 obj<>endobj -1332 0 obj<>endobj -1333 0 obj<>endobj -1334 0 obj<>endobj -1335 0 obj<>endobj -1336 0 obj<>endobj -1337 0 obj<>endobj -1338 0 obj<>endobj -1339 0 obj<>endobj -1340 0 obj<>endobj -1341 0 obj<>endobj -1342 0 obj<>endobj -1343 0 obj<>endobj -1344 0 obj<>endobj -1345 0 obj<>endobj -1346 0 obj<>endobj -1347 0 obj<>endobj -1348 0 obj<>endobj -1349 0 obj<>endobj -1350 0 obj<>endobj -1351 0 obj<>endobj -1352 0 obj<>endobj -1353 0 obj<>endobj -1354 0 obj<>endobj -1355 0 obj<>endobj -1356 0 obj<>endobj -1357 0 obj<>endobj -1358 0 obj<>endobj -1359 0 obj<>endobj -1360 0 obj<>endobj -1361 0 obj<>endobj -1362 0 obj<>endobj -1363 0 obj<>endobj -1364 0 obj<>endobj -1365 0 obj<>endobj -1366 0 obj<>1<>6<>]>>>>endobj +1F`^H>SGF`Y#;?Bv#87 L]؞+_PńHX?=] +=zDn*{I`Uqg6zTjA̐!wghטxEI#^؂@2v2H-[d zz)nmSuLV'B̐5lR {كm0\(:V4^2 +]%s$aY+Ee }&B_C|+d饩o# 11 1np-&*,%?-Ԯt[;U#04^R+Fd$i!I:{hYw?@IDo"vЍudmY|H+KҖYiᦫx*MzBx$g͊<fǮoZ[k44-)魸3'-:˪m~@2!)/X_H$ϳ րtxO\߼0bo d +6he}<'xz;A{1c4lV2rg,ASj4J#8߮Xe +Q7}@bF;wo !#Vrram񒆄tl] <6HBC +S7@c<7PIi!X >4Ȱ1stj 9 sKljv_>~G7`- #!9?bu +h +Cf(TI0rGR,Ÿ-3 >/Hr2p>+ ?;'x K8tN>?$J?z'vb~> 緄6IoUtwk>/XObject<<>>>>/Annots 467 0 R>>endobj +1073 0 obj<>stream +xXQs6~;+asvfۻL^hH*Jq|>(igND|ь7՜i2 +?ͦdJUfer>0:ۛ5vhklW׋d +1jJX WvnAmvz^&cI=ѶT5^iu*kQ?*<܎꽾/!H1TL64]%s?U򔨄n??H +͵/52vieo2ם)UV8tpMV*7@}P5M} JTVve!^ ճa6[]OqKR+|0smjyUWlt|e^x1Fnq"r6lOa?ғO vտ~>}B ?O-}݈ ]ڢqJ֜KrEǪ@Nħ"( QSU +D\Xbw*8v\alOڷ^>3X2, __0+¹t275%m=4uRM?joh-:Yf þkd -lE{eccdNf74J];cӘ~i>@*\([%PJ7Dđ +Cpn0tL 3j&=&v9^nz?>vɞ]@ W>0@Lq CNJl<3FRug#_fo|v>#w +2ș ~+\Y2"HߖQ](d blJ Oܨ8PTGյ.JZ\_$YV(@^yLم W@rL67EIk<_ EKhK]yrX4=JL7i՜KrtF؆/F=ZY?vCS`*82J h*$0+N 2僢@f Y`UuWjAa4d XȔ\Lj WbpkNWpD$s]9y1P +^5O"A޹L_".(i蔣.&=Ķh B2'6I*ׄ[}#|ۮVE_X"E|Z=L +SKFPi+ IpaK¿Mh'EH )ϡӏm cck42fPuˎo^Η\n;UlU$m$:ŭZ8ܹ6v WtrF.UÒOF*MkptSM1և9;dg=,>g!k/1p/m47๋EqMΓ +#"f< l@6^(CE;w5Nc¼0w:KU:!L_uIJK ՆE_] ;+_sF{-sp^LdbV@3\EǃI!l6IX3٘rt.&SFlc{`h%@fm ̓IqANFtsBQ 4L(PfFϓȮrE[vDW=4w,=4Cm>/XObject<<>>>>/Annots 472 0 R>>endobj +1075 0 obj<>stream +xW]oH}ϯ[RݍԄBTR48=tf 3cNVV4q^~OL> FgGhHՒGOl8q,p»fP ?A7`OM7WiDX ^iIg]FqDFeev$ DeײY"lJ2Roe ǰٙ3CkRVnUpDf|ݐZ*.+WZW3S,DKZfջUi?Y&zcNK֣nT'L*=3y\m-io>ۏqy$+kwvbRqwk$5)M$B8l\"Ӹoh+, #/8lDQ]k@rt+j )`ۺr*ʅ=W"<5NT*luE֠O51#ppQU}\xXⅰw0_fXeyg+ۥP4?<<2E- ee]rDП҅viy~]*D.V xiD +Lu-JP%|F"h*,R7;XX+eQ-., FC<ľ%Q +& D&x~2PyPG cn}09^RJ'<~V0ΎŬawB=}3 +O߲ʰs37X!"f<t9 kAwMbCGcj=?D _{BspD_z!7*/ +^.aQpI uvz}z͐7'Q|u;gU-Xd+&ocL6BS ơy{zc< "Ì<,c'>3/"oLЍ>/XObject<<>>>>>>endobj +1077 0 obj<>stream +xVnF|W}pHE)NKn (X+ pPdذ-s33g>bJ'GIi0s>H ;1<=&= ߧtҜף4;ORQu!s*JV+yK)H.HGV\➖ax7T=3)(+ h  -+G{ toY=gts~}JglT1d(И M +-q!%@˹feN|UYYjZ6? ҽx6VH\ W^1A[W$tL59Ϗʟ} VWXK t)Yu"2SFi^pAa%Xpbf>vfd J>\*bY&[Ip9 4mβb5*6OJ_ҧRrhFazJCJtf{,ڲyhE&[ر8 _I#oIrй{VIL -*s @N9eZ6Rl|:?beHD%$YT2EŒ=ӈxVcm~@h̙*()2=DFe~JAMn^{JxI_|Ў܏A?>n? ܰD׎It{`LXN5 rP xn5!+xe# صU(،6Hة_zwClsfot@{L*;,,n$VjV39 ?c13LF.yahVu*ՐY*)8+2$Y 10Ec[A`k TH;AMn~~.h:Kv!i-̸za0rb m]nx>GVcbk`m`Gĺ(΀|:p8Hs443;ryfq{L>^Rp!$7Ҫy=. Xo(~ҝΦ)u/%D_Ҏ=d' # i Y{ C\ ضdQޛ`=f` Fp4Cl@#]' $yendstream +endobj +1078 0 obj<>/XObject<<>>>>>>endobj +1079 0 obj<>stream +xW]o6}ϯ@6Z#nCڵO+![hDKJ[IC~s量isZ%ه;Zh˫kZ4f3䓏yiiG7j6Rj,?_>ћ>&ފ:P-bĢʅWFf=J\,.yF^ Xif*7CF~fCjD༬M=MVWI8˪H|6VȒctxzM)xUw6)Unźts"T#WpÇ?7Q@Ȁ7ƪ#*.V)~[eFS!sx ۂC +YP5=`2NN87`.kI: (d*}>Vf= ؛Pd巠l2A4\V })7'sHyuL܆ؼ4` 1? +>|lU#M <ۅP5g֠\\f9`e^ +\(BBZ>ԒXû%]H[P&OszI7Vԡ`%d#--C5a[ђ6 +%x4k9Qp7U->,ΣtPHATuU}(àCy^*&$ݿ)c8RjhU_)!wru2*GCйktLF0h;'BLyr^3U%ztl9 6.4X&Gd>9Ǎ;vsN$Gkɓb!|d\|`87s*wbfO+I<k2Uϐy6k2ds.\[v;+mC24ݭh8XC5\s8+Hv֓)6 u#^(#΢a> u .6Nݽڮ\fԸorͥc'4uSNWAn y6{k] AR U2>..G|7.5>X1쏳%endstream +endobj +1080 0 obj<>/XObject<<>>>>/Annots 475 0 R>>endobj +1081 0 obj<>stream +xXmo6_q0b9v8))[o6Z,9Rd9) x)]{J]^S\]Dwzi~3I)?(_<_GSCEtlvELfAğe<;dAvMBpb%qmࣣt%IttNωL$z{H~e2IN\^rAe43JbŶEV6SqFzJtn.PexPV$*'}홰-3e;:mpL$4GQ:IJQʨpr= J^}@,eɚYlm -U4ullT"z  C&ZbvNVJDu`a36Zd.(}m 'ߑN;LP8HΨUZoCjo}0FcEt?3*q\U +},**Ef2s h"TDb7TǺ.]{+1\}nԜnIgnT2zQc/D_: ;sF𭀻ovj{71j52r;_&TֈA xN'ZZm=\yu" +In1]a:/LRgB$xyh{L@' ȊɧGC 1T{GD5xF{J9OHv '+dãfmDALh]V[A6$X#rJd^/Y#]>i]8 Z㖰sGwHBER(yFw{ 4@rrKf(z?AP +7.V>ijAC5h; +(O 'a0ɼJkѱc,/ˆSehws $?ў j'@ +!0RO$ X܆ubʆk9t t%GC^+CFAeU'03f=9Yܯ~DXf\fwHp)0λ&K8xKZ;!<!CH_*Qb+"5C)-*o~{wn)- NdE)gbԽ)v% +ٸi5\4=woA}/x1[dtyA%@~vj~Xr3?endstream +endobj +1082 0 obj<>/XObject<<>>>>/Annots 480 0 R>>endobj +1083 0 obj<>stream +xTM6W̭^ R)zfHk셖FtIj]>JvV j޼y KL)+xEEY)) GH,ΩHs8msO.fbͭEtU:)dauv_YggXUӷWrJZUKUrYLO醤&g{P{i4aiGc|Z>ފu|S}E;JP)PfYL7V;Ņ.q +}Aa2:(#,,j7!jvOK2;>Ay+ǎk1,8DŽRQ}(Z:%#%5SrCQz}~P_mEPgLkSkN>/XObject<<>>>>/Annots 487 0 R>>endobj +1085 0 obj<>stream +xW]F}W\)%x1)v!ڥ҇=$ !;cp+@ܹܻb/Ř&sJ( f8SAI4rz]=q4:/&QLW +_~t-jp4Gc;]BGxW8]7#Zo|uC›f/4q;A8-rUIUʌV*/ןz#P:RTZ)hzE"Xŋ`o8iϢ8ꪴTF 9EjIz/KMXzut2o!vdAX(%7;Jx 3ʔiiO^T9iIZKeUyIaqb8IV:S& ey23.I99SGr\hI_Jd\%4JR +T( Jݡ-/LZR^=Gu9zΗN9j.ϹPޜ`?y`ڞV_^iI>Cq&<"}u$ϷWZ$D8Փ/0UNոp'eN"EJHJ,:BS"p3l[wcr47sdHnㅷZݭARH +"y,]Dw )?LEiQr4n5HE j\syU)װ"zh=.2Ϝҟ]Ƒs\N=?%we R_[`(KAǴV+zjSҞ?_ո7ɐKP`)aE  6:8%#),(j XVR&j, t!gU-bV x~#+ѳG39F] 洛?`eYX~n\ouq!16 \֜J~j:bq3k?24JwD=DX¦;$߱t΅[y}vH0ā05 Vu`՝94 +{"5MH0ߐ4VE _a@qo{dOWsMCG7t^m =Aɛ75kۛ*Ϛan9H[(+PX,i{ Ug"{A?\~gt~fFZ;ȲzIZ61./Yڞ=$;C@. >c[LS +v.oĀI~Mh֞}`? 2S$ +gvb֗{2ap<߀fo(]xi/&~j +=endstream +endobj +1086 0 obj<>/XObject<<>>>>>>endobj +1087 0 obj<>stream +xuAo0 -j7=r۰vEZm,y\~OmA aZd72bCYm"]Ӻ*瘎,O˃f,6UI;EȳZN.ڈi ρB`OZIORk !u/k`; $" (Hvϋ%jwjód =}"z>/XObject<<>>>>/Annots 490 0 R>>endobj +1089 0 obj<>stream +xWMo8W rrD (n{ȅh[TI)^}CJ$ ,E{oFSߔV3/)-Fd_c_?fUɒ +]UMtL{OtL }Wr.Msav%-n=՞rs8IK/ک@w NwJwrO#.L8Fi$ZI+X$TԳc^V !$y3FC&N^K=i뻌>؊݋ + mX<ڢt vAmpJ[_Q, ֍6x:*-,heDt+B +MA$0{Ӝ-aEi܊ZW,t- NQ<ݬA I5,N-bƔ O) <ʌ#vy>j+30\=ZNf7TC€F G?:'U8+*,bSWGbxr2E̿6`*q }8fZJQ C!MM-E]sl(<6(g@.#@"mt"ͷl{fms2Da+)gF\XA, +2Jl)%nPʖKuyץ(i t5A8u5c/X]E:q+网~Y|M W*v^T` k(Zz`J įe.u c|EBe,p~o[u_>Wi0ϘPQPdC^! (HD Eـ^Bh +ymmR!1TA:"w^ +qX<y Elߎ]uG#73!EkDC4͸6nۈ:{:Gky}6@tN3PkԚJ~&t) Hd܌Cl+~ZgΣYo~P4Rv "mi44̖qՇϏrY>tY5 [!Ґja !5eIo̤O*NWړBli7g/?˚ JU,J޺2eD_Fۗ FZ7%4!ҹӶQNWނr?3f1bhNaG}jzu^n5r0;$Zuv[j& + S9ƕ/:pUlr!u^-=(eбvr〫f 8XnGiM(@v +g +<ɵ)I cljk*8>]V< ņw>1؛niqֆ2!Ɖ't+ /.M5C d& 2qo  6Sm&KrS[Lam=K 6oԳ1$_3r/q4uy^jy:lz_+endstream +endobj +1090 0 obj<>/XObject<<>>>>>>endobj +1091 0 obj<>stream +xXS8~ L@(pR{Eeb[>I&}+ݔ2W~*MtzL'sO9N|FRfG'pbwx=)"!ptD8Z$ +K+.(y.J8Z,6Oxr+R`wB"UVvPᴡҨgGfm'cź(d$k "Ɍ`Ƅ%x%G O$3iJSJaْ.hᔠL"CaicIFIuU~?\ >$pXNhȳPXf)q|.a҈eekt`ZWF a5>9 7~G g)S{"wI=PE'u%Y$x2dX|2%תxJA"4<+ɕJL0\eZVM`]kk7oN2S3iiiRU"~Df_Z;8y6u<@JK/bNsM)#Ql"&_Mlpd,FW\}~x>hR\>y髯`+[.n>{M(R4]l yB4A'bQCYTY8nq+7d+0鷫K@*%Ja-)D89uA.1wPA0#gdƽ^ +ګir>)9Ǣ4t BN8t(D]A 7FE[we{̏+h.h>t-d{Ő44gi7ҡtB&C9cQV^u΂M[NM޵O+[bl~htU-YF'􌑶E)јFْ ?'XD@\(KrSK*|s+#%L@)p~!4Oli_>--o(A|!Z4=fz)yfh D!; u|c#N=S= +w;Y[ +s?7<="/2U;l4^y-C۠z<(6akk Sb1O <5aCt d3I>LQvT( W{)f5P38%@^* Aeid^Z2FqL`d8YwtQkދ +.O+.\t?zU螋~gaCW ۚgO ~Яt$, O +h, 4+a #FȴHDžxjǧfAuI8(=Iz\wwH(A_5H[?Av%yv LzT_-`pue,:F5.S>xa>jVpw itoM} +RFv<_Yݖ'pW^vȆ`Dk m;P酵@2cY0<@f2aiZc()趫747yhZSp'i(h6YscID}ӍIXsE2; /Q}k:Pt8%bhi&.;Dm[7 m +HU Fdxcq_ xw|͝r+LYݺy:g'Njs3z*qp3v~pzo-mvv:pƫ'3xcf~dendstream +endobj +1092 0 obj<>/XObject<<>>>>>>endobj +1093 0 obj<>stream +xWr6 +0>yg';-4ӝ&mN{ȅ(ԒR}(RىGk8i劒bvAk|.g%eb9]/>oN.i>M[5mR $GQns锓Aҹ)UҖ9eXvuc;oo~/_ܢҤ͗O\$H˖2UHJ ;@FÔrrZ)\&R:戄C:[^"lX]ͮfͤ*30oS(rXVl$/t:TY!<%;9H +ҧ8*~) +y=ޒB%N*ToJ_Ҷkgi勴T}B'-.SZ>iS0%Q8!RV$Vչ8.lSJយ)0>"[LV@lNr4yX3xzBbY`Ft;?2>heHƭ1j(]"~coUIH&>#bOAr `o$|?QJEԯ LoqxmT+(=,1Q/<4We_3z>vt~7XFwAc2dkBB~ ,xc=>[o<=,/W +|bLÛhKA&ڲA`d1=LПD6Vt$Bþ&CNFylw6X<|hK`]so}?[4%Tůplr}9[Wlɟ'뤈Cendstream +endobj +1094 0 obj<>/XObject<<>>>>/Annots 503 0 R>>endobj +1095 0 obj<>stream +xXMo6W rp6zpФ4m\e"z;3$.v(({3v1)A6E +y}1MC}b9ǿ jXf ߵ*D!]NR7hh^&3X[bH2ߢѰtt5OgbZ6hI%4dY\U mt-9hU F6NOF Y6K-mfsqn lJ;]g))l& `ody XxeVhv']Q1I[h ݪ;ٜLP o;o +:` +f taSL=N#8|'|Bͭ,N(uG +׊[cyVYCjgrwu#}12Z&-!jE'jieMs>$:ls9t&*.@*YZnd9\GX[cdc-; +8=ަwф~I&),^0:]鈥z]z.󡒃4uIjZ^eRs9p\0 ocYDt Qi@A; A]aԸeNMgP`*gj4L?*}$ֿ d(rfz>t_c"YmԙTA;#D`pjCqrXb:m>d(8r]׃֧w\ч.*0a5`إ\HwjKnd}.[.jTZv< !0RXZ2fA?Y:neq>`i}d׃B$%>Oo/ǏƮȖ1C/S) P6l}OB+(j(]% hh:qØAKU& ++R+=|!i9R52VA11{jv$-d :X-TUlztU HMfꙬ$Bi.-)zbUDsLd|E;(RSqH 2&m%?ֹ7e9Sot>/XObject<<>>>>>>endobj +1097 0 obj<>stream +xO06K=TBEp؋븍.U=vEUgs0)>3JX/dJoi:9F>,,7ɺpL6shG:mF3Җ *}Li<_%Klႚuz&Nw'e+t("#,#' :2JᄱI+؝x- P/kXFի$MƝԊN!uLed,1Umxt 61vY!i'xNQ*ç+TttB5"̥`8@ƙ վɝP^3*ыd vxt,?!mPks}HxM@Fsa-!>)aH:( qI<{bږ_?J*r$ @!Z'j!! +doاjz.!r3u1[(0+ +Ҋ{* Ş4{ks0d > #;"G~l'pC;Icd >٬kGVxaHo%x>׼*ھqs`Fy7LIZㅁxn;2LS\endstream +endobj +1098 0 obj<>/XObject<<>>>>/Annots 511 0 R>>endobj +1099 0 obj<>stream +xWvH+j"9'-]d$l ԶB- _?Wg8uVIL=iܧp'8Eo~o UNx8dh/&фᝩ>Np2𿖴<80RA1|{ +=/h&]OÉQފrʑD义(r s+T1D"e[ZD'ke-7b^Q$oSi^ap,-uM̵He @%0[,{7{ n+gtI,D׉/egMH?ѽB0pz!庼pFȊ_~_X3Ȇw*pZ%7"ؖN)ku 0Ldt['dT:n10ezC Oxwe[l(LJFf#h TTXvYG0i*&Jt=q 1 + Q%,5^3`S0j >סI"+Ӎ2`0su +N74%>Fnd l`{+[IUCjݮȵF@/l-Sш$X,MJ?SozK$ 3eBʒ.|P#DrٲX趡M&P!r%5?xު/cYbɩ6 <PE6Ǝ]`odYb+^"E:r+?b=`HP}:H(04fA85xsh@gc-L0VB9KSG)C.-<,*0ȳ7 nt*]F%5L-#x:d|J4fvg4LumF@6 7D gX6*W?DĤc40TT ct;NEd^ZғnT8ea P;#?4OO 3i{8[w>JZ݀ɻ¦lF0aHя:VGv]t}ڦ1Lqw]Erk!Rj^_{1 DzWZ܅_}u6a(./ZbRa CeYvn AĿB(MyWhkLj)%񝕑e̟mivxNE Dcݚ/+ҎJTa9Qqc +x + оs:Q32 +%Ċ'osS3 ?KV*l [쎑@8W>mpy&!p9x Eσg2[[H6 +Md͏!|(X{Ə%[it5 +b̪n9ΗV[iM§LE1)<h⾆şendstream +endobj +1100 0 obj<>/XObject<<>>>>/Annots 523 0 R>>endobj +1101 0 obj<>stream +xXYoF~-RwyHzEZyX+6UvI+,/)JQ9V9栿\4OH3Q07\DQl1 ftLEF|fq0b~E 41__-sZL0hW|r:(EE(pM5v#ּ nÒ'FrE gyWKA~rBnvK<{rz˜s0vni톮~Hwkb{F!? %B25󻇞$ ȬܦW.ʀ^]R8aZp x$L ժL }ٴ(}F: +26іJC-QSˌJXL8 L+:ʕX[ǦX +,VrVaQ\'b?cbTQ r .ݪ|.>*s)qv(~Ut?nSk^9H_cZ$fÝwUk_4xnh?o܋frCk嫀axAJ9JeScGêds8'y^l*k`֝`zRYtU%r%q]Un4.S1ۧD/@FzĀ*\Z?z"hfN [=_k%0.Aeh{M-\ +VK;6S+iMLSmoH (F92kPOdwZZT܂YyNL~cYDt dr$Ku0Wuez&PPKs4iP,j\YWr.ԚB(j h{`uH7kjKfNI.À+CAK.%aG]CkG|`>W^_i*@K5_faL^gY@S0 Ufc>/XObject<<>>>>/Annots 526 0 R>>endobj +1103 0 obj<>stream +xXF_Q"-+  LC@4`;ݜn3a߫n IVJnW; ~z: |)km+?ֺ;K߻z->ݷwz]^O_*iS_Z6j!~ 6~k8W'TIn[wϵ65;moգ]4nt:]9:[(OͿhy:_ T¢nxz>8:=:=ݡ?z]Vj2-.Ə4/%..9֤Wo2}ݿӄtʔ2MA2ɢ#0$AtLII"YΈK/9 wEс_&rCF{P>[DQUnlˍJ%^:-u>^ Mc) +Z-H =z˄3K߮bIݭQݝaL#<(c&N!PS<( .tpҥzs4jgFyux #1;CdI%YF3vh@.fG,`LCe8\Er% s fO&wԁ̰J48rRf;zf, 1X&⌔=#/%+l?:pY&\e‚je*k{t ZΩ\RK:S˨_j^hV=.?ch4eAv\(zxGOBJh c?؉dk{ $ Q(?.8dE4E@G*R U0-x42m]aZUO^_?TC-p SWm ]&4)nҵ&%̝b=JB;P  #$Tf =Z^AU^ji'Ub2 yC^HWWҷ_{VEs&mZE>|sYJN + N~ F>HT*YvgsX$+ Օ BJE[ZY!d6Ҧ-Y-2Fjˢ>[Ed9=>.hx#E\%"c) !Xc̣׋BsPXAw府WRKS{%TSCdo_YRBT{[dXP Կy.om4??`%4mxv'߾'E7нd xU?!eendstream +endobj +1104 0 obj<>/XObject<<>>>>/Annots 537 0 R>>endobj +1105 0 obj<>stream +xXaOHί;]*c' Hbo[:ߛ]o@J-Q7y3͘/~!Eٞ}RҜ7(qv//0:Aԫ{5v^m3}e; !CŰvˌok,3 +z{s.nmgkv[;?z8ۯW Q;jr , ZA::Ɨ{†Y͒zucs~6;=0Nb&QuGeQ"A($^TI^R|U= +{UE\RRR-&Q&Z/q_KLUɼHx,{vpjg.qVhBÛ;U&W SDigc=Mt՜239\ u0ࢤڐ|4h.sh:?LZTQ&kY՞F*Do75kط({FPLVƅQI{&bZ&D=I4U+"%DV&O .R4f"[§cG nS*ԃG*~2*Ѿ,o\`߰u2vt5Lz"EDj; 89^RGr+T<蓩4@}߅{뙜4l(׋RGeRTOsk:tqKOëóty}KwWcM.n^~2ul$~ee*g?_g&6FV(ZϗijFk4s[:(lv"h,I#4=&]!'^۠Ξ~bVuQ9A]s#k~0!In|xn[g^? na10;auendKnm#qIF +u!ڡY'7=$ΒnBfM1I:k%ڵf!TSdۉMM~. go3|4JgXI F--;Cx1Tz&Ǜ\a(AN:ȏagw7= \cWl1sp<{dKc#`QKV-JYݔqt9#ϺYMWz b*:4'#Q% +X>F|<͵<' +Lφ|!u!-0n&>мTb`;φbFW0rUY-87 LjlqCٜHF"rJY9fntqn&q̵ +)0d*JUeH94Y5٤J:@B{j# <>+feɊ\Ch L/P::D]~%܃nVbdld[F. WXxW,gg3wp-<հV,S g]HKzůG#[13β7/6,A-A? ^P~glΆI hN(@1B]~R/`(?X޻endstream +endobj +1106 0 obj<>/XObject<<>>>>/Annots 544 0 R>>endobj +1107 0 obj<>stream +xWMs8 W`rrgbٖe_i3ӦVZmT\)*v;M" q2)h|AYy2X|z{2_^D OYR2_E[Ay?ϗQt%%%_Kڜ9HP9oq±xxMͧxCC`6[=~2=\^,t+f#GYkAV5ښg7Np?=8=UUI<t{>CFw6$љV=n;"(I#u)HV|dw@ +7&=?cSf_}Ez͢(x^6ƒ(&Q-U&/䵞kw +p#zy\nDS3Uq֕ {]gTRtv +~*sh,q[EB*uحvQ-PMʒB8Q,%pGt!!Ybxkd؝m;'~}8P'*D6} + ~;az2Q<=W +YM%`Vi!9E!  m*H[ø6tMG8z-9]J% {dulr >#NFe.US@d,Q^ϣh|aP(7C@}Y(N$dZ>譬$\,@=\ }>6`?LTndtSg2<ԍ(7xt>hɑA'{5ʑZG7)طt"*yF +H!`j s/H$~-z"=scJ)~4ӝeޥ 2ۉJD Q(".ڍtsjN_>wyc8Df܊GqÊg ,3Vqтm;Jm8DgFo[}jX}aT1/B!-<Ȋr);gB&JҎ}zFԇv0s]`OPtIjV€kᢱfm1wFZW +3R1ҎMv?ٻjs4[mr5[١k}~ oh?nq80^Ʈ]Lbb-oғOJ"endstream +endobj +1108 0 obj<>/XObject<<>>>>>>endobj +1109 0 obj<>stream +xWr6}WIڌn%/Iܦ:f: IH@ɚNgPyhĶBpouգq#Jnҥ`i8g$-/^.^RG%M4]AV:KJuQ2\HM}4'>:hLi? 0-*9I$ɭOޔdg0JD tIidhQ%-[R/2z2iIP!Eiki\ hKpAV@+ХC҅p̕ݔzW‰O +ɜJQ?K;qd8k3adF)+mly~BV,2 ~c6o*ZR["ڐuB" ~Fep![,BÃ$>kٳ>4ea"]O[W6·; +5+)n~u sg?+`"Qp)_}0]o*~7Qxg>zEj*^Y[3JͲ/so=oP/oZ?{Ɉ2|w'ָJF۷,s Rq.QRW:/ԋ\dX [HUTx>~қNkHڡيuF,IY6AF +tmHdz>G\I2 ,ы +G[>C=WCIۛ^2y{:!epϳ~ڠ碓`|]69]#ƪ +b0b+i2E#InY\ PmDv*[yXc G4)?5)6S"+KĂػ7&.2bi^tC!C +D%8(?$}$"g kQN +ҊHoeႆ'ÙmdI{EE`%>VP@>$(x]ň=9:CT­!A"lqhk ,YͭWa7[zeڳ +Axrw/FӃq>\;~+<P(dJ6Ҥ{,ain c";&NlPl@j!ӠE/@z(X1ramJy|*c4ǛAM2 97MB_yc :ѸzpNNyt vuK S +9olq{.KVuDNp/o(fo+~ܲ¯t lW +^S-2 +rvrl䷲Ȱ"q|=zn5Fr %3G8T /75}2q_Yd>/XObject<<>>>>/Annots 547 0 R>>endobj +1111 0 obj<>stream +xUMo@WLoD*k voF9Jk\|Y`7.q;@89PYFf?f{gBvW"3ta)d[Mo l<$Cw_-^\b ʅ /GY +Z +'ip?` DbxڰJރZ6p[=CٽӨyJQ0f!ƽ*u4#˻{ڑi.VZ>"[Ӽ ?` )Rފ'EEHDz^f9?ó bu 33tNUx qFރk/˥n3]Z`Kz{ّF`#r:Ą]Ei6<_z~$v\;tOo2,HW(Gk4pT;\Vf񈑕)UD^%z-JTex>Jh#:_tj櫚&{'I=3,*&OREwM瀮/> 1Z;;O +X H3Qx[,:G+)GUE3!Hm"9_ +^>r]Ɵ`{^Fgh)W1e3xowA 5٠f+@ÁW'YF8}F a8` +6;AJՊzbbTr%w +( q;o[4mQ( +3|h4I!Ng!J6lWpՃ(-E9hdNџoY䄋֙> Ԫ}Ot?k\IBK_!endstream +endobj +1112 0 obj<>/XObject<<>>>>>>endobj +1113 0 obj<>stream +xW]o7|X0IrIФ1."Ixw<6<<;Kd8t"w3Ʉ7%QQ1~-h%;I ]iYaleIX=ƓŻhtw2+vʄZ&FSWq^,IFLplI+4+/ٌW.uJ CRx + 7.姭 +k(\d#G;9.&5p|-ZI83sxm;'cx-⇣H8ۚ2+'Nb! uӖ"XeY6ej='o-$4qװ(BBG (g,G0RP.S2a-`:niA!UZwT =h:'E*,,d! 2l4 hh6zTb+w_ႨG!47HZHӌ>Raz][db.,֠ :yd-sR +[vȕk꒴耄x|]Lb_^,叼at57K7MEJ\wap ]T 4Ho,WrB7w{.S Z@qݵ BoW\}lv#߄9*d 6"nʑ{;ޥPmnYMPKFPҭCܶ)\P4=h[PN>y>kt'Gz~BCZF2 :{\R8}k݇upŸ)CH[ %endstream +endobj +1114 0 obj<>/XObject<<>>>>>>endobj +1115 0 obj<>stream +xVmOFίꎆ'NLBʼn;*U&UU$^b{@_{gv"eg !0xIq0 0N45}4ʽD`),Wdj2 aa͂Q,PiYZ iyGє\,ӣa+*HYkz^ +m!~(\$,a34* +Q6aI,e’|t] ,I=Z{dE#pNbH7@!ʼn>!GAn0E50 +]ٸX/k~a`0?SSO]pEXojB3EPpt]6r*!j4hXcR"^S/V""$QFړ5'cx#]yOWC8ُzKe%h0az`J_$UW WjDLcjUU)4 l"-x]B=@W_;W??8L2lN%M'$`D2voHSmW5V4=bE,dl:^(EyՆ+Cž.HG}3(8'e^$4|H%0J/KXTsXiUbkn2e6,mJr av{bGEbI^/۾؟p 3޿@#˼k5kN}1Lc>,|WZabB%0zV? 3} 3Ft2%G6eyYendstream +endobj +1116 0 obj<>/XObject<<>>>>>>endobj +1117 0 obj<>stream +xWoHbJBFTm*PUtZ6ή?8U(!͛dLg|B3&Wє9_i}vy5\l1eB8~vFtM#ei Ue +RyސA;byKS[M N؊2\J%[6ӭ9Okho+G7*[){_ꌏW^G$ɗtce:OV|s i_2SBSZLxis[wc]J>/XObject<<>>>>>>endobj +1119 0 obj<>stream +xVnF}W NXd9q @.MT+r%mL2ܥ%%ZQ:1@s9s|=4lh6'S.xҴ*Y/Ƨlx7+Z{CF;2}EI3>jKa^fò26 +w/IN)3NrkkVو.#Z韗66/S9eh\4[Mi<\Lf/Wߺ:ϨP| Vj\]UxZ> *,i<sҼL&<Py3yN +8A 9Hu^UYV_KǙ,hCׅ$aPs\3ċVͳ +eJ^;:h&9HˤTm1EG3a) :*6LI:h9LDPmTE4H_( Dp3i>J 2-Oc~>;D~]G:b8S@U_}2mI_BlkKVO7#/{ /Qu")Pt PB貄?7Bw`Ҡq8܀07Dej8l@61pΜG3sSӡ΃AL#穪&XWP"h v=\>:`ՍxAVT+ l;1b8Yy[{k Q[iıWdֱ%[Y+x7(4Xő~UXQ :2I[':4ۇw[)+:N{QQ u'镖r'atxgV0nL*lrT?bב6)"+?;ȅq#OBlxh kfA}ys_Xo]ZPU_t\'X>8Ol]oOlgendstream +endobj +1120 0 obj<>/XObject<<>>>>>>endobj +1121 0 obj<>stream +xuN0EH(vP@4UcAD%Ks|F1 QQ,bI!2dZ;;`RZ4`>/XObject<<>>>>/Annots 554 0 R>>endobj +1123 0 obj<>stream +xWMoFW t ش$K\ NZprbE$$]Z7$En )Ǜ7oFic(_3e42zpO~/ˇl7tqn:#CzK_VYr.^*UZP9O⤛=i@ujmN*׆QT9+-w +RE\IL\'7ۇwwphdL2D>וE,TD{f?KI45XE@վEbv,vq\ q.[ԁ3\R6]soj8w>|Yd`iq}!q(7+&Bo # #d1HM.0F:(+Ǻ!VEc{{OM.qV؄ĘmXa(M2.{rcN9,uoFW aq?bendstream +endobj +1124 0 obj<>/XObject<<>>>>>>endobj +1125 0 obj<>stream +xVMo6W tΡM{"{%F"UoFEyo޼ق[vI elixMq?ZbAG6-sͩf"@ڠUoT'sXjMoɺI(lN/9-7(7ʞ)  +rF`6 7mxߴg**WXZo9}@MU&tC*th#АQJ/>(!\2!+(i*=$J;j&kMVg)'#3gWL8;gWOKAvy/Xw Y`I!P)XZdz`kvX?[Yj5 \:=ňFB:uؓbٌ~FW];a)uS)Ȧ$c +vHfµTCj$;|E*WX &LF}'#LȵQMY\yvhN]K{$Se-/1 w@tJ‹]g  ++S㬹k +4ĝDC CDO/Ϗ]&z?Ql\ +s#2Ys7h Zxj-uswE]UM'\=j8g>ř6׵$%’U4L,r:h1G*s#ir2{h̳:%To^L'O0/) + Th[o\wkL QwB!2ˈl jg,^@G;zՔ328 `Pz'l.(_?؅K6L6_2/I l:w1LeE@OR<܃W4$e6?7o} e-C*mxo~+Uzݙ;vn7;`/ ~~?~ endstream +endobj +1126 0 obj<>/XObject<<>>>>/Annots 561 0 R>>endobj +1127 0 obj<>stream +xWo6a +IJe;vR2 V{2%іIH*#%`E 'ɻw1"'وSJ0 E^43DpD%Qx<4fWᘢ0`u|9ĪYt^a-\c=#֦v#.zk iC7I)+5ddR#yEE ߜh-DHBMU^IT;~loa-L( Y8e 7ԥ)/+@s=I{eN~"o;׿S7$o'Q2=53~4}y옻m'K1٭X$=Q +֛8&t)ۻO%4d%2BHCEJHUBl^*ƒjC I[*d*u]*K‡+$MjHCpZjuN^S@{ojtntMv +JyaDbWȓe*_d6JܦY}OՖ"ɉrtj5MrסuK(Wf +8KLm$P Ћd.)֢J24W/EqJ +mUN@K m*Q|x WrKJCnk̬S 3$yEB|y4O&Ue* R(b">'~p숶#GjrKTM!$,n!I4CGw8giܻ&i|JhEF FVǨ{Ğԕ2D#kQ hѶrwڿw&Fs4C.,PXY^8}Wm#F+K.%F9f^4 +! Z%שd{Qrin=2G9][ PO56CN@k۷[ͭnBOLzG[ڣ[1tʄ){]X45LpY$M\6W8ncN\U&lz/xyC}`endstream +endobj +1128 0 obj<>/XObject<<>>>>/Annots 570 0 R>>endobj +1129 0 obj<>stream +xW]o6}ϯK!Ql3!P`IE1,{%f#*Iѿ߹rehD&y?=р7iL %Q?MGQL$SNQ3Vh8Ҥ?f||7O~u9x2_Lpv<NΣq<`˫XoīȎ!>G)>c7~alg!p0zy#֦fD͗(d6y䔋6!gi8$-HW8w-i\W "C/©'QK拴!$ zQ͓k(:.H1; {7_Hw9Ϗߠ +:=Z<bbU"S:pMCY7-_L3H8orKYes|%\'K4ih)$Z(YdѢS*X T +lvsYb[Li0.OH>A0𷂔1j/QII^r* mWFPsBWeg} +<`MXnEQS)u >fFI9 _A !&w v`}ũږ1@b0*3_XkfS-]JApgDvcyv@R@m wnLR(^8L=@R8({99 9t +piZCm^nKֈ@.^3~@K^hBʔ;k٢!+:ϙ»|no\pD,9KQe] /u,*KmR=wn;=@xRr%P3ύ LrzǕ}UMǓX˥WA҆`Sw| 6MAx2bAy<`B6 +j6&̶ h(|Nd>Ӑ߇M+VGzׂbࠑe&XvuFIk`t4O]_鼬pc˜s^: +f*$&2VԳuiuL$NH`,U&mț lMV*duvUSW`+^xzؾx鍮Կ2 `Qxrּ bڟ 6>teqGqmϝO1^KGxNfqh>/XObject<<>>>>/Annots 577 0 R>>endobj +1131 0 obj<>stream +x}VMo6W3Sd)tƋ -Q67%);Re)ؖHǛ7o7ƴtNi%#1|I4͓4 +z:[$׭|h:I8;La)>Yx8ڝKG&Z뱤8ixghw'ݺ7a?s1_.hFN;JWFZ:Oސ3sp&'^ZR(%; vsMƞ,CFt5&xL]dIrS! |IqY/> .D%Pٰ)G J㳌i!3AyYjox%EI8/U`~?Bd 2 k%)G$[*ĦLeax +#9 \KkM頊6c/3NɎ3Fwa]æB{|* A_ʓVw:|?:S8Vtn¦oO( 6H= SAWop-ЎEA=']ǯ6pâ>Km f S0 Ԕ"Be1&"X c3MeaNQ e5`5%=;>Ee"l! ߱u 3~kY4LQƎ W)+T9 jb* jqKܶUbL_!?5JY>w"Rk}SqCER8P[#3[{v^XQtڙc8vBYnи;>Dt-p Ԇv&TdK 1Ssv]B`+Ԁ9w^?Quv ̕f5CgQQr^w+b>9ɣ\>[YD[ h+=sI&ˏ=%\"hPPwA7xviBm(9ЂTH:]y3e]^31u+QVhbvۉ7*k9,;0CES,". uGUQc'1GC,>/XObject<<>>>>>>endobj +1133 0 obj<>stream +xWMoFW rrP[drzK08n =".%(M-6l͛ד\k.\^KR\.j~5[fdb1x>y,.dF֩$rU5|&ɌNWuF7V>ϓ 9_,aTT>!7vSlpo6UcK-Vnmj耞>ve(iڵ\}C\1z I)yb/0n}& V[Ze6K۝-mdycJ=ZZ{]J7cH iY\aMA5ȷg7.Vth +e2ewp;;xDwgr_ۭQy"Tۘ$^Ҷ80;U"]LߝiAŒF58M]>}8^UZcu4i3HϧTIn,j΍JḤ' i4*X;}3ߪYcZYUf/!;p)|̶bՏ^ [~E2<4L@@v cBP\5iIMWR]Dֺ)%xR-B`y:d:lz P ]T&| $mѠDMC%I,1%=WT: L!VJ"WQɤ>`bސ*pIײak |,H}zjIfXSՀ@PvQyih  D2YJAdNt ӔAQ6$5m(TIaRQRޣRZm 7`]n Rh,M|,eI%#ήB:$dmlt:5lPfp@Q(K46fg|dd h:W~\f7`JA˃~ux}_GIre ?7#FHG.UZbp݁n p ,-H?An4bǢ9aPAy h򭢜v< +@0vߎKlFw>GSڎfp0:s] +چEE6ή G ޸oP@!kb| PDv +;c&-S,`Dzhg(@FMk/F+;;RWun@̀XIP RD*q3ۇ1ONKbwթLa[ `@{&'c!& ϧq/cB̤pp̰I T?س`k1N 0uljrPA߱/=t#~X7HN +F#[(wlgIy.NtgT!l 1찌O՘ee0Z//?ppĀ #-F(#[+LXyscݿ4ޓMllu}'>/endstream +endobj +1134 0 obj<>/XObject<<>>>>>>endobj +1135 0 obj<>stream +xWr6+vrRflYeY=*q3+| DL @Uoiw:I"o{u6~fAW+J˳tFWs\os?N.|pMo}X]Oo}^>a{viI9mwZVfM'߼r:W*Ek(ᡡ+_9TdD< ڦwFz[۟g3_!l_5n7:^'>Rǖ:d:R{e|n:g3 ++bJ?.k#mK^yQ9jt+@Łl׶:E5<#)QdC_(MjB;Q_69Q)*DQjJnf)Jc(nrjMlQ +S *j6p>t45npj2c\7Rjy·+gZ2Й5:ɑCdH +EF5Y0۞&Hduq1Z#0iRIUUt)؝QTT"х`yGxf,xIv,L;kofO%o̦U`z|Kz0)lӤf?A{ 8SP|>Qp%ł}er":Ԑl&P]h#WGأCk.'3UZ71tcq=(.6H] > 2wtӁgA2 X(GVOUCnV׹EXe J ,4#jT158s攨a0^NG + %+\%rr%$'f_p 螖J w*&VDUW `D /Xi +:u.aO"=z9p.S9d ,Yowupc(Y;0ғ|G%!Xd(ٳT# Q$Q2`rrJaιql~ȴL  +A ^F:1fu~@!S@&bnOJRe +B( j|ЍNަϰVS%D8r2YR'lR2f:Cx: /$#@M1q0 x^9!7=LV*q{ʧN'xƔ1> }G}nP'(٢>":.4Q頄v?LhXv}…Q-8J*PTi,TK7&ׇLŀ((SE谭PqAX<|aҢ#,Yh9w;Nja΄El=@n euc>ak,2(钷۸t~Qh׮1aaƒPY缒lVۃV%VbQ\tU^{e W,&꽟߷BS\2MS3),x&aPE 9 2@1V$amDžendstream +endobj +1136 0 obj<>/XObject<<>>>>>>endobj +1137 0 obj<>stream +xXMoFW |rdrrs[)hoŊ\J\fwiU}3(APAjw>߼y ]τfS>ʮhz{݌?T|\\~~OZr{-$ɦ=Z\Wߍ 7\$^plo>'i>?'IQU@XOZnZ5[/v*fE~냮}F_ޯbrMkGn>lc^Lն:p/`A;mIenKS;C3UET*{jt`844Σ%m!Rΐ.m +f˜ +e&xӜ}EPߦAG06j䱾+Ac]ژfi8^[*&HhǪ'A+cIp&5Y9۵Ɵ'( +oȡ]eM@>=-u?x~ N;IAR*mMW\٦h?E_^į+bZY:>U#qbތK*_# r] Q}KF^KP[ukKu&VkiKl n͘1cjj%kgh LAaW|3(VR^1(@ώgC&dZ0M; vTڗZ?P~xH&0}٬ xZ47-s1O;mPA׀@OibUɪk3Zp/ouC7̻5Y@XS +s ၉`Z`B5汮[cɱTg +?ľlFH:8DU]B<9nnL8cjBTۢxܪ +qG[{ -ğyA~%;+qwah`djQQ}W61̤% +T1=>̑ 5}59K؀3덀h8Ɍ~k'<}w?α1]ƮQ*[6y۶a,1 ȍ3(^`6F~vaDǝ|9;eEAi ;g1J!YЭ +̎m&$̰lFyiP^\CʲlI{sխVj|5ģ0슾5l[ziU|4oҨ )`[zG*̿Q[Ee'=[s4.^ǎ]1D6r4BN ܭ+'WNn!P4qTQRwG.wt.V94B1:(ɱ B.426(OQsYA"sU;8(J_zzZ{I')&FѲH}L6=y HS#Id +< +YB1= +z !LKDrRO?T>/|A ^+h=~MD٧6x/n1SXVJh&hK|EGQF}yIZ?" QeWpm>/XObject<<>>>>/Annots 580 0 R>>endobj +1139 0 obj<>stream +xWMs6WΌE[-ɧ6mXDB"`Ҳ}.Hi&1}o.>9~4tFiytl:Kft5Ur҇d,^9;O.+̮`tt'Ƌ,n.h<sZfb -sZJ5 )zKsmk8KAk雱+c3z~GZ):W5,Ph_-i4&p9 ^l?` R_h9 .~pP鲦YaVgA7lh@!`J+hm +$> B?([w2UGπ랥(Н{wK ?K)B㾢E,h:1}E)Ѽ^#Xh?J ߄\D)RQcA +.k涁>.L梲]@% ^j1?W|*jL +u̬?i4\!hrkvҾ>ļ.w%vmQ*u>tn[,CB5mKvޭ8.̮ QS +*!mklH)~A,U +))8*nHj+ם2J6!`Xl9=5Y8?}[~j@'(!ţ7+te%z߭eܾnDޒG}X;xVn2Ѕ7Ok'PS@N |s*1ҧmK]81/Wd*k{֓.n)i' ~9e'yGՔfs~-LLg ?h>/XObject<<>>>>/Annots 583 0 R>>endobj +1141 0 obj<>stream +xX]oH|=H(=l|}yˈ&9Z!i,X-s>*ŴbEIq5ftE+ZnyNӁ`)\QL"SA1oO9}u?}*>v-zO9 A!ZDvNsY.dfKFxRynϞLӷ7”WNUQeC~![UcaYDU*t),.|nݔv^h3Jt:qfp=Pj eb=jTZmyԎJS)SϚ>)I.$..Nz.UJo̒lY<"^@ڤ.QsOxX"TN_|װ"OؚDfS1D lL. Y*S:12iM~y|G!;S-zGL-q pm2İ?]*ʤcD`OnpIjLJ '7uU]+3 l$L{MO0i8ML8_)E'Moi]8}տ 5L+ʨHĦdW`5e3C@\&s`tG@q#z3}Q,,Ԅgtaw+UDl07J'UDpS + 3ATRsO CBe[[Qj⹻q^iϰAčD{JB=x*b,vv# +b*L^tΆ2gUVc$=AU½r>)*,y;큨&=ąDk&\1Mr5~uf(9׆tI!!#5Iչc\^֔oZGʇ[iBϲKeCȹmw| x ^-f)2U.k b *E3d ޝݻC} 7X2 +! I1 :shSuw_EQї k輦@w+{MyOh{eF } GW +n Mξ$u&P2m]0~y)@Fݾu/>-'3"hm0ą!CR1Hw aC,H ϫ*[xP! s}h0ϴ9Kww@ 1+% r7P`p89xA8eYI+p+H<3?{0KygOsSƮ*qﳱg_11d¤F3g 8 b'3~W@'}ˍI~M)pk(|*@uIciKɄI|;tFb6 Zmy$=8+^h0xwvQ+]&0zW@~]uendstream +endobj +1142 0 obj<>/XObject<<>>>>/Annots 600 0 R>>endobj +1143 0 obj<>stream +xWmo6_q@QEcɒۀt]~h-ާe(H'Jq 9JuR Msoϑ^4¿f!W#oD !R,n@7ǫp<Fޜr +7iW]67A0ǡf-)jt +9vmX}A]t[cزn+ -`]֛Zt>eb2,Ve5E;Jd*ꬺ&UJd+z =3kSEGvfIIZR. hIt\粨DtA*YnDCx`+*}d\ni,b*K*"U$ /2+eDPRJA1 "wG"UÁ0fx8qh`Ͱ-栋 < F`q0*L$T;8Nqro@9YK]@Z.jtC*iS,YQ/JN&#.=Хճch<躌`цCC'z7)Mu +^Qؕ\<4%,P"#,^? vVX8P~ 7XI:; g6c*:BM0 ;?];^6Gpc$kN*"sjNz{Mǀk6ewUx.HRmdiGePZ{縫7GvO*Xδ~@{Ӌ\vU墙 C"KNlH/ymW'Xy(y_8hc՜qȖW}mgӞ+0R qg5K8Al_*M;*K.Dd*Q]1!NID\v.^0to%_,f]N \#ERnY; +F@j#ET] fZD@B<`Gg71,EFQ\"(qvRcuU5kt nl$z]d-Á!&ĥlMR7NM\Ѡ`~=i~Jq e0VFDAqV'C1^VD;󍢫cq>|yw6A-Bް}\ N^\7Ӈ_p?Dְ35i@ҫCYa_ز3CJL?\sx^gTMrV *:V`,KO W3Ee/\:9FXօd#~m{vwpJ=6 RZbtH)eh$BV$b7 +Řd\k<kq+*[2vr˘#f}wx_0Ac.KyThszڱa0ųYh Ճ,V>vNfo675oՈendstream +endobj +1144 0 obj<>/XObject<<>>>>>>endobj +1145 0 obj<>stream +xVn6}WLq,:IIZ,HIMG"UkREq,Z S9g诳"axyu&9~O_sX$ lt{q cqE88׫ϟpr_/Pt!'!dFZzUYUU1YP=w]ҧC8l9v%m՗ )Y( # +XZQ5 Yijf>uwSe-Pk%p^9ЇGR[BJٟkFѣRVel 9܂spґ"=V564HlUSK@H ;ʇdxb$ Yxŵڝ2m]<ĩ(`RQn OSsiV!,uUXLtZ X+ +ثVbzm)XCa r4C*^+cDVzʨ#GCm*|J[}66Tz~vus3F͓H/=I(o:vĞfRX +5ӠK8iz ' pjl4;<7L768\EsbFr|ĺ_%qLWKyQųAZ\jHCHm&8"m(dŒ &CZq +}Z9:i`yݫ{kݯj .VYqvˠG^}$o%˛IγF,N~kl|ztf7.fE 9#ml/TcȩVpMP;>ro>\p㹛gz=1g38:(/4]dni׷h\tk*w U&_ q;J186_ +ܭ] scG;KUἿbjt%G0 GW4] _c]$ ^-\лݐSAw!'vUBB%к]T8Olў&=_!endstream +endobj +1146 0 obj<>/XObject<<>>>>>>endobj +1147 0 obj<>stream +xVmo6_qȌboŐ4VyY#l}E:b#I5ݑR8Vu/)RD=sm=ׇcHV/ha45ä`9OAv^{f`p }~/b_?VNV4|ot t`N8_*a|d~)s!RNj v!e +^L@iTr.1YsiASS.^Sa4:RkHuQ@=ZC(h /A`.yX|T\.f̹/y舆9o,>X;pi-{'3_p]05KJ,)3YU^JnBFȔq\Y;.F8DY\滇T!M\+$]A!:ݧskL~?z q'U RIq: W)o~w0ߏTp#+Q73Lc%$Z +yf&[̞dA1n-a0 nJ ržcfQBs9"YkӮfʟGs(>qZ&6cqai)7kj|'LH$SQE5U85)NŨ5=hR0p-JE !Gt rBf͸&i͍.<ߥ51rbfs +݇I\(8h}TQ'e5wrչz:@㛳W;; "4tw.4aڴ pTؗд2_!Dm<"ys~vp烷5P^ x6^S# EQWv[uYbͰz;<{sL3MlHR|WW AT7DJaAs +k~p#B+NF +]𳔕0kgL%^kVG<ӗF9ۨ'|:$\/Nx #2FLw /S{ 7-{Qh2&)Czu~j +dendstream +endobj +1148 0 obj<>/XObject<<>>>>>>endobj +1149 0 obj<>stream +xVkoHί8Ԑ*!@ZED$Rv[PCil{glSu78qOocշ813Dy˹ 4F}̃,dϿܾ=!̇Nj?o ,X_钧aAHJmVRJG&˟n +(g)̞oz\եڧٞRp-|B'xRB(D1C` "U>Y%Ltg/kO,ohu@>"RSi%bn V`ӞEQZSxcT(sY5Q՞͈i-}f ]&xnsI6m2Xkt'*HD֏7ql.l9mb8!!Y3T"$M&yիߙw]5ё!AZ W!W&d*)y'N˂y_qb|'X6EvQmB\%*#QH5’X,u熡dJN.O/9"P"{g0#ʻuX%;;LիW{aPJk7c]CG_ zRJ&N8xsy?s +S !RCjkѓ^ÜId0SX]ap<ǣ $:h WyOendstream +endobj +1150 0 obj<>/XObject<<>>>>>>endobj +1151 0 obj<>stream +xWnF}W HI%9AP$MHQQ0PȕUvI+BH$M wr̜ᗋ1wL ]O)+/FɈ3 I+nܜ{q};Nh-lٯVsJeRuVKXi?;ň\.r6E"G]?Lx&,jx ߮#7 de޽<꟩Μ!Q{'[{U-UQ.d+Kz,+i)I, ILWpR N&Õ)ץP\ύ ϕ{/QyADA %>Ns,tR7p.Lj2w($] Vzt@kEZ"mP0ѳ3QhpU&j+ZiC9T&m܁"I;Q2.pOR%eƗ}ǢkNݕrB5p[IKm%Z +%}kNA+{Ƥ`Nq <\2{U>r-uxS=0҆kr +b&*%Ijuc2VGIVP ́`=P(mֲ3Zys&tG_)#%%'߯1VОCu q-bҩ3Si#,xj~ TYcT} }8`&?,&#AF,A;`Pf[J/=l3 n, 7qA;@=-S u# duE&T,2+mJQĴÙ |`5a-_mKt,*Yqq bw? L˼! 5K)jeS3 +$9]}U'*".Ȑm,w,7Ofɘ1=rO'VfΤR&z{1lZNAfЏ  +^;/َw3Z$tnMf'Mqk[Q#t* *U `ʬେ6C& +ހG3!%66hmK;4TeWֲXˍûgZeq8%2t(6 /U/5v[zr.޹!NE('u8q#rkk\x!g.Iqq1'1-=QU**R9A[BBO[ + Q +EՠtH_nO޿~E_!ot֔$0^& <~X\=,҇-7d6G7l=yendstream +endobj +1152 0 obj<>/XObject<<>>>>>>endobj +1153 0 obj<>stream +xWn6}W 6}pX@zC/4EȤU3Y:K1D9 aԇ!M'ׇx;& ,b1? ԭ1{*o~"<5emi],Y ҉uj+בPk_8nK-h%)BDoza1gƱR(=ZJM:(r Qrqm39(]$OŹN\ՙM_fVX+Ѩ30,$axͱ"?+nLR_3B)LCkmX́;H~ϥrWBxNIeO4q?nMJ tXwe־v&>Q=V_]S{yjT6ggfA zpDYBCr9pX130E8U8Nj6!'FN~8JX`7,S,A?rDiB[A LcNR? +T p"iY  # +1DьSg[MVqd3Da=j%)3Vtjmkf,` +Jw]z#\'H۳[%, bJ #*FAD\^7] +R#TMծX踠sĀ[3 &qnD6Tƍ#!ZءHEk<ՆBC.!4 Ns'fbKI VZ$G_ԋ8HrDh_:~R7|5\-V&(W٨r4sF~*'kk/`\ZXbzQ#KF}=kCj&C^xxyn- ]s{Y{ZK*D)2Y#:e-mXJX&};X4Ӧ|ǟܮ؎kYޭ!p -^I 2JG+mihKBZU"'ȗ.84y+w߽4uD6zYfu7F/I?CS*?r{s}z ][{V>p?SAo81Dn54EӉU)Int +%JIHު2Te.2k ECvdfa8Ƽp7v(~e\貔cnmQUyn-I޼Rg)!m? >g'O&F{G>B #s6kci/ -LA~*DɰKaNpIk]I+Zc1#"5y˷K|;r` d>PIZ'`ڀT>1&8_qu]Dgg}ƣ /'H}@-@A"D:>wXԌ6χ.؛Ks(L*YX8},:=;n"Z(~ya +_ @<.SmB%M,I]M{_kaw>/XObject<<>>>>>>endobj +1157 0 obj<>stream +xmQM0WqU$ +WxI="b[ɌBGi*+4ՆmZ /~|Ѣ?1z Wzu'DٖxpVM)gόB0,u[6̸Gb쓱w4G0NHNA΄Gx_LT +) |xw:MVVguΚ|썌Qwr|0 On! :0b4!c# &;qK,͆|(9O!M&E'uԜԳ&,S*b'k7_Us`).(ot/6Usq3Ný_ºp·lf@fއ\endstream +endobj +1158 0 obj<>/XObject<<>>>>/Annots 609 0 R>>endobj +1159 0 obj<>stream +xWnF}W Rhočqb郁bEMH.{f1$"ڝg ǿ& ~/?:0h4S) ?eЉanWit {B;MN4 |l<-.i00`u qīXսgnr99OPO4K wRUQƮteY +)D*R'/>!;+k+SMliǻa8{!aa@N;TQKo20lL ҇ɥ^X++ 0ņNMEOLJSj8:U*<6Yg֦N@i*7dJ' U<`+REBJr"b0KUUkE6emlR]zmviȳ 8%>KMnIg7 `mc{Ow ewp ZjɤN z~.م7?ރ `BilpL!]U&d;ŪN;[]B3BbU]M|wLEa j+_1!Z4f-o.>BjVJ*-ۦ3 >Tt:?=RdRMfjZ +>"k@3!d6U*=vI{d$@N%&WmU.Ll -QP:߫M91:%'p6?.D}t\fjxLeEFVF(2VzB-X 29[8 vvy +^X-L%%/g=.}ۻ۷AZm5G!BURcmU?WPن^AXk. + ZBE9P'(h6zgpKUjWY"!bD{ =xzv5&nTraec4 U&} qabE4$~D[FϠl 3aK ?qW_88AR˜b CkYQ9pqW._(HD] x]+cgi+):yCqބZzɤzU` o 8j#'ATˮ@ ?+au5جMG0'd G2 +rmg7ӽQ0[{f: xo|<^::,nendstream +endobj +1160 0 obj<>/XObject<<>>>>/Annots 656 0 R>>endobj +1161 0 obj<>stream +xWKsHWek+$a 6r9퍹l9 J4x~ݣATV߭'>ϧ808{c3oBi7)I8 3 H +g^A9]݃'t+Fc<+(H^Dg4eĠ(({ MfgxXP,鏧g"PC:Qb3Džcj +Å3VTPz=. ŋIBv`ƱCd$@g=_ @ # upj-\ ]}z\|z\`2q~l8=nvpH.'~1 +/DFȏiDDУUV&+Wd֚UP*TV24U+M`7қ9xYj LIaqUYWo^S֒hS,LEgUhGTDjXR[,yYcx2(+C]Ԇ6z9͎ ]k浾#EVO2:] +Ţp 4+XgjY zjeD?gմк<+mfBQ.6idUu l(BJ?TQ皘bcM7p.Z<(?̥G|^B_:2^6K /"[PvC^j*TJ3 ._丹VMf8t (ZsVS6y銈R\y 9B7h-\?# Ep.8=Rι'bi,V +)JgMDA]h\aJӉ9~/ +euD!7ZI\x|Dշa +>"d8y$XNqTK4r [j=_KrKpCw}`.„ХZ:Gz6*[ϖ'XXx"\r;7^具6=Fw.9F'wQ5ӎtR:шC< C?‹4aO~hMNhBO>Y Lendstream +endobj +1162 0 obj<>/XObject<<>>>>/Annots 661 0 R>>endobj +1163 0 obj<>stream +xWnF}W XNӦ4Qч(VbB*K^ta(8erfg@!])OYwǀd4fCٔj]N~OWφ2^˚./g&G L HZx{ɗnf'# hX +jfygdy:jBעTT, UGCXO%Wxt.f"6FmVtI Œ!:D;7z AjS6G +ܦ*r4ȅ cpl}:|qѻJ ++p=> +S|Y75<Wj)dA-qT֙r爬尐N͎a4gg`C@][ @ #^Uɗ.\blHOJE,ފwU>+5RTՆ>7%y%^0iUq+@gpsٕ9mt÷8<(@DQôG,jA+aD HB +C J,q"45[dݦ$\7ʥ]@Kw/Fba66Tf:.{}jcF~/Dv o/>8 G(mnp|$Aw+kč%瘂ᔹ?C)[ ѫ]c0I5,rΆ+N +g0b +4ΤAOBC-gڀ!ѓu8a8vV誒&G*݆6*|dLbP))Эcy)X]q\Ǽ^A1E:=$Blmr=@ԞkkikL0"U.Qķw+P`TR-9Y,2ȄJ9VZ3RsK0W:,mݷ[AIbm>^bA<C-Nh\{:̜Rh7̯d8.ДX@? .0 "A}ơBxIvYw06]mn X+iwxn7Ġ(%Bv#^LY#׈ݮ*xpb6+o+_`atyhjy7  2*AXF{@)h/ٖQ{#oJiᡘ + I(\\]r Bby$s2tK#%F{-4̶(S6aKXirǁXB X(Hj AK<_/Ł|ܩvfƚ +HÙth-WǞj@tivɿa"Wendstream +endobj +1164 0 obj<>/XObject<<>>>>/Annots 666 0 R>>endobj +1165 0 obj<>stream +xWkoF_uRD,JdIvqR)UE]'$]B)<Ҳ;{v{IJ}Ki`DyuOxÿR~C(PEQ2 +%ݸAvi8c[Zd0c6I85p*^\0&{Mw=4!&c.>Mt)=&פּ¯7VeI 58]|$-*fINX.dqFk4wKbSk߲>uA b.%~ ]64PSo65{QJs߅f<ٶ,YsG[*{qPva2dǗsacFnc'xVew=7S7 ["p)3s'B(Yק; M37THj(k9yD>%Tu] Ƶ+f֔8^njAoScx{: S Wől Q̈́6 J37 i&a(pȨsơriƬUvet~10"L)h@8N-\_tKx);Rnt&]YkFr[+.O*g) 꺵6gPϷ-a[ͼv&O:uwTMUqdozڅ*H4֝mmRWP +U2xP%5l}=8qΡ v{Ҿ{͵\ǭ[BjY3:M*iF%Y?rO+w]A*Y(xQn<1;\?:gz-t+JT'cA|lXɏ%a=GPD +]5//_J75K)DQh RKBR#[,c<))r5|)Bױhc:z`-931JbAxU.a#=gxS)勳Sdm#Gq 2dFKQ/\@~* ED`|ydCfô;[:o]_P^:_oYm%$K"u9lnȔ{uvYݟ|P )cvXsX}UnZlh*ۃ2t/Ccq=}IX鴔 Fpp';`5jҹ$ЃOzPnD 勔6hʹҏsp堭zqjxzPE C]C(αzz'S#?+ޓ`*L-+ .J3_p$9=o$%O,(!,V{xtz{S.v^YC]Kᕺ6tX3Eq>/XObject<<>>>>>>endobj +1167 0 obj<>stream +xWnF}WLf +ؖha+q!XQ@/+r)mLr]ҊgvIb4 /;3g93|4~i21E 4tGk$%G׋9 HtB`@(xȜʍJC2QiI+=JK$(֙P)=<[KYmH$HWxV1ڭ6ŧgqr#JRzR\ ݋l%Hęʕ-(ՓX*)27v爖̿Y%$ZiхV)%B\CAծ|078 n6ٍҘ3[% P˾Z)Q"oӿ;\˃,{ Wjv.+ʨrs)=4n4Ϲq2 +rG:q|M$'G +!̈́A|L}uLDK* -&D=D%)զ*b:pzw/3lǻX9&LH]vQn- 5Opyh +=b5 +X2FV2"ƈt.χtkv:ozsj `33?U(j+6| iMU>W>3K}9s{Eε"F367tHk 3 ᙐ̓mP{rEY$UsĸNƎQ|Y//6ӖwKi#)mnʔo2:Db*AlAv#ewW]aܽ4[=pp:!Ha˒gxha4{\>߿_,I~~gjpSdnc x^&( NkUFΒ.ONE6q%bRoњz=N%\3e"5VLGl)mh 3K9Ŵ}:_ႦzJM cr0\/ߴƕZ;x'#I"Tnm SX\L\nq +n>X~# 6'sɶkOxN. /yBUZr؞I>{4# +ԴF{Q]0+tO =ՖMqXǻxEdEp9|C&?Y6[uJ,5~kWX#v a4Vk1VawfL7ķ..~j_}}k' ²^ ,Qo2wwt>9')d[s dendstream +endobj +1168 0 obj<>/XObject<<>>>>/Annots 669 0 R>>endobj +1169 0 obj<>stream +xWmO9_1Z5`MҼˉpEIHw!.t%3lR<3G'>4pLiGXNfшF >𿒴 _13DS}.(aXti;؅Ynk]`>zm;?[zkNhҾZcw6nk]0~[Kk<"sivi7R(+tihrD?$ʌJҧSJ*Q+Ju&[j S]dv.N2Flw>hTW8ou\ AbMR9eS|#~'F+YZZV!ߵ*#>;0]lu!ҕ*!%fPlW^k++ +*& 1I<qS[}18ܮT1FĶ9ǃt/=F${IiXWݮ}khSpv•Ȍܾ^GUޓ S++bI[]@kW GfsdD6i֟kR!J#?5V6qCN1.r]2S)𔔥Af.V8+Mұɣ@-[c}en;ɑ)Qag)RȤBq8-0΁K4ЕPu:[&_ p1v"8Hf IB"Y c6-]zԍ(E4 MB|EI2S(ovs[jreGᰜw5BZ< I[)N$]T䋴bSk +P &pJ4M{,F̵-Juexe +0:)0=O3H +J=+Pd $[60 :Wl+=F[EWM m(mط@¢`lDŽ +dUH8pđиRDU"roN񭵟XKR7Y#]7 34*u^Xg0_.84m39[w9 d̄fpK__`4>Y +7B 1T#A|3#gU8P-f=1J FjݬbVtieeΨgcuO]h.UZiEC^ d;G1+n|>"o,wWy'[6 ҙܴ;ox5p<i4 i<2ޜ\~>/XObject<<>>>>/Annots 674 0 R>>endobj +1171 0 obj<>stream +xXr8}W4[6e],yumd"e2$I@C{ARIʲ%ݍӧO7ŐHg5>!|h8F4Mkh2wxbx34O ;^!&є&?\bp?ᐖ#\W?I'Hvݽ7u ĪLൃ$H۫S1Ž<*QV=TNAW!a.6ox  kM:@AiEް*:ŊN;%Z9d s3)-ZGr5[jQ~ =arX"B;sGoXV(zQ&mT8ţsݦZ[zZA'׈?`E*Tܕ2|J7vB&#9nk=jEZΥ~ʵ6jeu0vDM:Tr:HC +sYls^*t\bf|y,FYͺdƣr<:Fʪ{ tC4dmװV *0Ӛyke|KE)d KMh^)H8XWi\cI7PAr 2-q`盪I+H9&sC 1}uzl6`~1?. `[{V +ɩHdƈ'=[Ӧؿ ecD,Y>-Ow~]Dwޝ[K,xYs)oL'ڦv˗R=q(>Tyrk^|e?8w+uAp-n|ûͣ-~ oqh7BtBA+:!1CL#yW1j}Y2|*%ބOBʪ/^ ܔ +4$ѧ)«lN:ټ.%=c\i 7J[mupC~|FbRIIsܹp%õȶ^@Ǖl2ƃ*w(^$-"($°RA*pfUz D[/>_܎i: 㻷9wam)-j63t{tn6a;wˋ/Z (|endstream +endobj +1172 0 obj<>/XObject<<>>>>/Annots 679 0 R>>endobj +1173 0 obj<>stream +xX]oF}/B>-}Y8q56Nڠ^F䐚a9C+=w(Eۧ],~sν_/4)f4_R\\L ǔ?~bZE Z,Yz~b~5h1fX.e\4&emoBdRr{I;i%JdXbrRSQ"wu)QY]. KZ;AYbjJom)2ńF9$logܞlKH4 R*}^8xg{eRc)2ihoqF:(6:4)ɯ ۈ6(K'`%t&)LA^nKc"SQnNh{9E{uL훨12[(ЭFudE{iS!ޠi'@TcS*d}#j «lo|8QH4'S(F׉S|PJ(-*siEJ8'Щ,7.:96q7K? Wh~'}doRUřts[,ēMm@1 *DƮG"wDIgfNbAH-1@Ev+3ib%CӁ\ +놌-ʆ@*/!<ԲxbSJjO&G{nJ }~; "cǹ׾m(.c<ųG @TĴW E05fm"$+ O!Z.K" jC_g(fRF/ek@Θb 'c!*tx-NKZ Hhճff:[Z@E".(Y"{#ΕߍLJ!=~:{"zO" 4dJShKOZ}|F{.;: 2Ss#z}O~ZP@O6}Gq`>,zTqeI!8bVCpCh.H$"BC +txwwO>1-+dRe;AuwYݫgo{od4W5"gneQr5|XJEÚBٸ6'1Р f)g4ȇk<:GWYϱUQ#EΓedWd1zHϟw[AxE9[B*ocKR{uj|l3T1z8zmF@46 0G|џVG8i`j<5bkA/\L9Y6{Ujxk`+\ rO\UIC q4_ m$}'^!꙾ീvܪst* A¶v`z#j>/XObject<<>>>>/Annots 696 0 R>>endobj +1175 0 obj<>stream +xXMsFWt)) ?˖,ŎVdZa )I6.UIfunvҧ~4pLIqҋzxÿۓh4D*h0G)dhԿ.xqrċ$t=ڋ=)V1'9;ĵ|̫}?_L%ɓNPvx9 +g=du0Ʃh,Z G*Oz~}sA>͗x:y*ht޹ %n*Ӵ4,]!4.X~y6W ܫ'=:aЍ~й[ó `aPC5/:= u풼;##"`ޞQsIԈօi*qssŭwfX"vf*eMQS7km8?ϜĆƋ&fF.b~">m}7|?aU^e^ejM*/7S)`-37gtRzGZ D=s8XLЄu:Ru징cDf|o;㓐׷of`*#IMww{47P $kx6\%q?J\o~][_W0(d7{M~@x0+60I[BY($tMU{>DɄP!&Ѵp[ +qK+Tof}c<9}_n"5&"E.b R3gt *IxF<=?$7=30)}OkVS$"ݡ`hGzv[ّRsRþh!b *K$m$bwo*kq^Cv J-w7RV"ZU@k ]VE̱Ũq'Dރ2Y(9H\+wPܱo-zWh ŗk[i3G[ -`{_ժT|UGOc$(ٴjN}e +W;kLOc o{ 88 +W*|_ː Fm#frΩ+'bjϡGwW^ +-^T[b=o2XxYC +H>17ڥ4g %DŽ4@u8 *!_.!+:[ijk¿[pWHVH]aaBaرQI{0h&oP%b^,=ڴ'r̋qi # OYK+𬳜-/"Fh +\iu}G-K!aONd81q9> t=?4[^rGNȚeӂ OrџZĿ{3GޞmVX ;ae^ԟ~qxa_K<2L28*dcfc_ 0k 4LjđM\: ')d$*N !BH0W%_>)M\{ts!v"BC5} *k@jSm٠e&t~Yi7<^AUbAXWl$טC:gf+iY/4|iYO:endstream +endobj +1176 0 obj<>/XObject<<>>>>/Annots 701 0 R>>endobj +1177 0 obj<>stream +xXr۸}W܇Tȴ$ےcg3f$(l s9BϦ4SZrNiu6I&?/dIIrEMO:]^%t=_$3<]ϓIb.j3o$gw볋OW4:3h3z֪my|B% JuՔItMΈTfDBndڨFgi6a|BKĽF*jI>>SJi 25\^Rfv=JW||6t8乔"Bկ8ȼ-#mepNxCNJ֎FTL裮ʤFX/rFr/jGjqTQIkN&r+ ޟ7,Ū¹T;V[ , CGe̗UC&s+3L:m9l=df˛dS=N: +.xHW@ցZ>ZTi3JqĈ %5%Yte>3#+^mfG#*k~H|}mvǔ*}%!/+R"й>8h66=ot^k]h+O P8 pV(/4h,&g&/YmhQKќqA^(*:uR'9G-{e@iں\!p)CAX[ >1I3=πNf`3F742LpsɼΒeBjZ%.諪3}t=гY2L ʻ =e Q:lkjӢ3mNբ_<><% .W0,Ue!ۃryxX۲3–1Y JϣkȤ9Ȕgcӿ-|5=ҋJ a2~ +62ๅuxڼnHC'}9ISY ֠"x5S9H%kdW 5j:>کTdsja09wx칀Ԩx ,A$a *_ B;QkA/z$CŌvL'ቈPjK38}3zZ'l4rG8Z'&o/`TR1LK㈛ ga㡀 3VВؖ΅*IďBf-nKp4N|"N+ch?'4mU*J|/ !r|@PTr1ȦD]PJguBb(xQq jd\qjf(CmQ)u/yXiҙ, lUgۂ1Ԩ1a :86\qu2R+{z{ٞz000r97 ҈w +3zdv:([  +hv#`]1<35];l¦$t<g*<ˆiBaf`keä*0c,e')B2CaѯyG^]ֵ0#H%;#X è3Ry P F^dIm%8=D!&|XRYY j ]+㮆g$<3,}oR-b8^ m_1ݼ~65,#r0|% 5,nZsPۭp 'c}'HVF5"H'i4]v],q<j஀ʵwd+VԚC_ q*4+6Xvb9)sO0-_F!A\{" 5w_Vo1a4;R FN G5p +I;͑#|1hšq 8x<;%@6/994c2>9oXT?гK߲\*8q2y-2~; da/w;}NAwB5·K/|~1K'0|UxboE*Y̗j ~}Fendstream +endobj +1178 0 obj<>/XObject<<>>>>>>endobj +1179 0 obj<>stream +xXko_1uQlzXEak;eE.͍I.3\Jݦm8<̬;h:ф"?dz)~Ҕʍ4_/42eٔ -e)΍.k3]Rb#EjWlKxѮ>mf _xQ +M6 ^vtAgQ4WfSG| ˣ 'ј۲q oV >WeBN*Pj+֯Vi*¸OgRue/;{oR;*M?u?OOwD~ĆFtj>ꟶ:NA>9 G)c0E>25Mj/]]51vbDgac*,*W03L5^bEn>JnxYALi}A;)C( |Hxɚ$°F`p~Clx.!p2&7;~p۱7}cQ̔q58Rz6DC1>*9z(Zb5yN*w^鵏Ui[ma4F~a.TQaALB9 +UBIt1lCQcV4t' @^6X~.O$GʐŚJ^`xokdLo3 20Ҿ)ݖMtc{]<Ǜ;T- +<-@req5N$e{m5m0*A\gU+1ӽWo{a|8!cwߤs|5G]Ukcp-CrlUyW" F]u6X`зqx> #s- QiQp(؆Qf^ZXR [\YfK2X>{V|kfl +n!:xc5nBlUt Չ z?4#ʉRW_^Q\eךWXWD`d]?[1ъ#t6bb6y&X39R8Ա)w4y~Yp}-nD2 1a)fP&r66fzRv,'Z]y?7e4+El=\B %eo/L$nibQ~S`I:b#}H +WEˀoYfiT4\h5s$@:rpyka#|ߞ%,'C F +eN& h^}#a)0>PZ=;uXOhD]=Ҡwp=‘işODN=*m'N2Y~ @C̭폠Xj08/ѩ)G'z kExoED[;c +j2Hi]MiDO|aj{ݤh6DMgػx|Z?~pll%d=.۔f NF4Ӊl[+H76nx_)LːوΦCYL }<[]_qendstream +endobj +1180 0 obj<>/XObject<<>>>>>>endobj +1181 0 obj<>stream +xWkoF_ `$F=C6Mm<>/XObject<<>>>>>>endobj +1183 0 obj<>stream +xXoFb/rGvIѠ(+ X+ic.# ofʤArg͛7o99]ٜ/k<_]Ң,fEF;O/CήMmd'\'Lgg5)jv6*ƓGM(l5^yjzAS +^eч\[] >lGMh7NU~D.htbb8x9G)KZi [I*Q"-ckOe\.w岉hU߮E48So$Ne2kg+*fm%Z#l|ۦ+U~"l8j3H~kFmko? v$t ǯ~#Jc*!p_*o-=ٵڡu!Э-$#@":\Z;]gvM{ۢo}u pb^߁`MQhL9{0$ax_K8=lzB|g:[ҽuIOw^ YDP0tP5P@KT@ପnGPd8Vmچ IVMrN R<#N׌qE42ѭɝv{4=p`ADG)-eE [Kت3r{7M2m>8` F0~!Ξ9cSvzGhs]ZU"?Vay wT8YqhG"'y4ajLN' +u8 mn:I‡hE+HmXa"!7F5luFTE":bPcxX}K&qee 3  As>ͺ]Z2x$.O1exѥGH_G?2r8pFNjqdLK_GKϥ!e k tG< +iذjDD,cpZ.:PM{n Ncc|+ҾnrO_UiNDz oJ$>^X54c)pNiSAGh=? +ΣBwj"`eH`נH7O`%` מ|s6c(6Qa;T`[͚m^,}`$#-.4 )Ϥ*9v6*1#x cm#`~(GciON(R1 _UزAV5jz9]>/ivP.Pu8ϘpbSb,1AӤZRAj}ƴgL0 tX\SMd="ש^Ay5%)p2rO.ApXM~쯫} ؀^h)vl|⍗H_ѧ>/XObject<<>>>>>>endobj +1185 0 obj<>stream +xX]oF|8(-ɶ>'nZ*" +y/"yQ}gHNݝ󷋑HLz"b |?ofS9ƗUb}~qqFFbg'X$b_L%:ZPX+SQ9e¬ų5kgH<OM'|تX^fzFԻ׋P F/rhf2(P!s|ק LQV|Ύ[V%eDgANI.?;=)Jd=vBZK9g ?Ƈ$7 +2+ ύ*"4:۷oǩYoPA'!IH+U̎lwF 8V>  Ʒbp=&# U _31d;$IԪ@R;<wB !$sEg RA,ʘ!t*ȀtIsBl)"]3c2e-ZBUır&Li!쎜r+uyF椳>w0ptsז}[Y*10JRn(ND Nڧ]\VR;Aʁ?'|a~ Yh8EJ{IE{o!>͋⯄A`$4p$;H,` 5#ɞ8̮f/\bրѧTmJ aZbwbOT(#:6N5bmM6 !|MUSgĽ +EH86\/_w'VTąw]j,!^zy,lvݘw!*3^,Ծ M,N4,s2Ǚ.D5=r\tHh8f7uݴTVP/p؞ #T& }eM{7kʲk N;˻%<"ƕ`Ul}EX$3_Wbij,T6YMVK Zxr{tYB!,Zdز( }lYĻ@Ȭ:ϭ(]_G1SWKxL" E3Wf4Gk&Lniu~_1s(A`:Hl ֛wz,p{xv;R/z54/7ӛh:$Hb6X-.dlendstream +endobj +1186 0 obj<>/XObject<<>>>>>>endobj +1187 0 obj<>stream +x}Wo6``[ Čg~H8Y!%:,HwjZ׶\ݽِ;و.g1`(f4~Whb/~~uviL!4hDDLsZH7f$@VϋI^'NzZ-K!Q^=iG=TgTv3\ڜg/A߸(f/S~JD'_,;Etl:95[\1'\QyoE XM.ukzB +fOptN0D!_kBdI3QJlҿDh*\rwtWn'T?+QN kRe+S[[/ +J;j4xy3Қ:.~ɔss*J.텀=Rh B:wep\ob9q?VK_-C!(~کB46N݊tRAun9 UGeMAs)wT$ 409VKgWCX +9|xkh_L#cMt>W /G*SG{ +~Iɭ2 <5w]i0`)))z;awee5fdc-WʂqxA=ӣ/^A;Ѻi)ֱ(&7;cy3 @wnaL\XFz}xpN{]u?#m7/V8ca8^5VvN0Ťo Vf%tj)OUg[>LZF D# aAEZNLm(u +%,aՌƅ/ +cZF9FnHSI'\]%b,0]t4+1*oEnCaXUqxo[|_^NzQ&Hc%k-28ZfҸ-\k"6|7L]Ntsw}|p\}WNj +76Hh:3 +k8z^ B `}3a7so<9Ț"/wy&dagCl<%g#KSm5ΗU+zT|F|2%t_< ¥qu?endstream +endobj +1188 0 obj<>/XObject<<>>>>>>endobj +1189 0 obj<>stream +xW]OH|W"EHa N@; e Ǚc8] oFGs:XPR;{_i68]ҼY k+B84)_4$Z&*S Ϧ\ *+ᔮ8 e GRiWgRmUꍥ똖JyL$MKΊum񺦛ޜ;b9Wr_OVbQ]̵MkmPB ?`}RT-R}o[G5ޅزB +(ʌO@KAd-\D^k^bjr )蔵]$6}=@F9% +O` 2cTP*Y W#7p +.d #Ad<^EHBVOQ"}o&NY-pBF|EMJxRE*g١ĹWɳZW]B"q|0Ƌձ K˃a OW)Zd0l C b fj=ȘJ074 +, _Irrx`{ʾ_֜(f_[^7A u`oOVx&p}CַZUq0_X6,%ǚ\-5%uLr"7BOԓŏКNn`-v 2PP0o3LQ~m"v&Mx%7w+Io?V[((R?X|qF>K :1F1Gn/㿻 \;+x{y3 {X) +hK<$y*c՞&p*}l6P Ka2kb*q8eWs ޣX8ޗnlG>cbs)v\ D4_p+ӣ9vlG?1Kl8-u]Vc`z;?'uxtKz|.❿v\9Jendstream +endobj +1190 0 obj<>/XObject<<>>>>>>endobj +1191 0 obj<>stream +xmT]O0|ط+M)M!p9xqMk`;oG;5{wggvALcbJ&t>B ј.$Ji&xo<ǔUH e%!|<Iݐβ:.IZj(Flȭj5K—p!B5ؾD'`LgY40CR\cɈeW2 +P٩6@ȦKI6NUy+ݔTi"˼ϣ[,)$JIDLroX]-9}>kO-b}i2Y Eө_?Wendstream +endobj +1192 0 obj<>/XObject<<>>>>/Annots 704 0 R>>endobj +1193 0 obj<>stream +xW]oJ}WԗTRU壹C܂+}X:u)gv`ܫ*Jٝ3g Ͻi: %yo _l|:h|§lOY4lG$܋bM^{1qIբwz{A!-Vi2"uIrrg}[.K+<%\ސ1\V:pP+h.˴uc>8#d%keMTkvz;8GFS#WrNה U3(CϩOe&'I!⵰Dˊe&i/\u]?/BtoTRKzWZӉcCO__,`f+úuzWPy༐jP}*F6QoQ- +.s-5tN[]=+҅qv)РAA#zB}jZ( *px(d Tǥgc+Ağ(O6 +o$nܕt0>W) +#Z #7Y]2SxgI#ؔ;S/i)#P#5TVz`L'gcMWu >~%h\-6ThуDMώH !p!Fei8ݘ6L9o.*NOCߺ:j0hGբ'W|ד*J\ּD;l39 Zk.*J:`(i`C4sGRIM4)n?jiVip84$_[#U"hS|vTZ ^{: +m+PLD7^VNVCVp830mZږ%LA\>&'v!.@B TxƜ^TcR$ nTz )ǐQXG?&Y݌V5:9bW`g&U+p6uဃG@6 LKػG{o:x b4*P +Nu"10PF=ɗJИatn!]4#{ՂWI}l!IH!4{=E- n  ["l/yA#[#h\+iɗف}'c>pe+È%QiB^0e4fBNwlBpqX +>07>CWw;;^M҆9}_IlڀwLl9d:`g0ORbabi"t]4caJ7^/&Mq#t^0ttģ /5y1/8Nf٘s {֓Lendstream +endobj +1194 0 obj<>/XObject<<>>>>>>endobj +1195 0 obj<>stream +xWn8}W [l@QҠyhE( -Q6tE* Iيd"ms9sɐ7وSJ˓A2 d>*I09?K&&޸\ޜpBNs|Zod diI7S=Z'2r3RY)hWՇ<0Xfm-ϗA8 +  +j++rD کT8ZXGr0G#zrSЭ 9+x=iQJQjoUeMx6LNǝ.CtM&Y4(G+"}2̾?Nv 4 +2㹒aMhaHGf#5Y֕r;Zƭv8ghe!Sw]_Q6VꇷGmU0Q%t;.%mc,xrn)dƥE<\&I7G䰔=e2_"ꑰ\`fl*$m?{@QB5. +DHK @b^IX{ vf$tUtk5|nmb@%z2$q;TKaL:pG*LuLV֮E{ֺ|0@8Xɾ4 \ + tNBk^!zU)WBVlzh=IV*d e,6| q&5ZwN:D5M!KVfXBIBr3@f/BP*85wO)ġpk3GSF5ɗn (K~`?__Ia?qœPX +;F DJ,]X<݋ "ZxR mӍʭ쉶կ}@'1rLY0P$lAq4{\\cv'-*=_R@#*PǓFNU?;Q66sg _3(VFbQz{ X|ۢtu# N` J,E)X4Y2R݇tFoy(V?&g‰DNh+!J 09Tԋ{Xh4yGtBY< -m0{*awlU/؂e/'BQ)OB"Z<6jCh?8 rFb 0d;5䥓k酊!6uL9%sV 3g?^2@I rIKTCHxf)tUܚn;Xs~{$fװ1+NV{V`i6;dưcv$a0{;-'Q`͓9(7`VڿPD:ap7:o^28R5\{lh|=->fr8;|L~>acJ񲂽Ŷͅl + Φs,p05?NjYendstream +endobj +1196 0 obj<>/XObject<<>>>>>>endobj +1197 0 obj<>stream +xTMo@+F!4*bCU|e=ƛڻ8kCBޙy͛y0O L`!&QtZ˖l#T +auyq&o׏1i4Ý"\_CO˙ښM«\W#-_V!\BYdNn3شPVF# @eYf*"U"0 7VƗ;d?k]d) hzj@"g/yĵdMYZ{g]_G8l_Fq2KNZJ +\pn5T4/M=N8 +:;Nzf͖V9r +moX&g5@08-oa Q |7k tv@9ۗ ]ZbO?āW=w܍=I)~ՙO qHC^8SE;PU㈝E^> mkb/Nٿ4n GD:<Թ5U#7O/,|xِ*8V˨)uzCR9,s1 +ks.!4g~+ذ!`mk>/XObject<<>>>>/Annots 717 0 R>>endobj +1199 0 obj<>stream +xXrF}Wt%T V֊U9b1>e ɉ 2t@@RQ KN?.b㿘P_1?b釋E4dM(I(Fbu3 h_U?Cd9KUY~_' ,Fhl#͂xY4*tu +HO!_)`>Q_8,K϶ +I>~IcɌG^om4`Ajrڑ;+]x@C{qNRt@AݒVs D0@`uҶD.̂\tEh)'lЇj+X=޿1F?~Gn+Tb,uU-1oX{rCN}毝Jp݇^)LLffB0YԝNF_5BN:"-*E/afWz{MZoaipؗ3- v$pwɺEeE֥IG/?D*XÄH4.w;W:!wwiȸ>t q?@Y1/%{UzLm3)4FkI],c'IaQD'`Pz2HWB+Ќa%:ē)Sn 7P2fVWOL@쬥r!W@{Qfs]zk,Jx^Qc0,`^Vn$/?U{Vr\B:";z` 56 b&xHo\|zoV}ZTqGaĚbbM TCXa`y%תjq.m yL=ELFTK+C3( `f 7g>'.WyAy3/ճ+Tž%2q. +Ý/ + -F2~{iʹ nƳ 4|:b&M벴 +xF%8]ti|vh18 :_r "y(id[5X9'~2e"j, dKւaz :M ȍ,gHyXE 4|zkHqLuC2(8-mݎ= chy(&^{>QkQl!^2iॸ !!˦ l17\._.Xendstream +endobj +1200 0 obj<>/XObject<<>>>>/Annots 726 0 R>>endobj +1201 0 obj<>stream +xX]sF}11ܧRnm5xH l,iUʄsw%I8`sϽzOF!gݠooO^r8 +BJWSB3O>xVgᰋc0 `_Bw ]]ASe-)1ږt|Yf@Wv8޹ +ev{증"7"%-4iKy_U,:Nɔy [YmXSȕ, +~9v 5\8UY {&J+JlM(ef!}ԅVNIdIeDȘDVJBFV;WYun*Q0fE8U#۵sGV剈بQ'l%ebRV% +w? xkT hR- +ı "=$[G֓3d0o:z>} g@(9@0dђ:`"Z=Ǩ٥õsmt8np\QU^s8 >9o( ul T"DC :I+:E,[aAKa`5F)!y;U w +<\wz)JZ|ty 0%Gm F,"JLsZ`MS8<2mKg<1F&* D`<oFendstream +endobj +1202 0 obj<>/XObject<<>>>>/Annots 729 0 R>>endobj +1203 0 obj<>stream +xVn8}W 8@,[cniXP"m+ +I IɲmĐL b_ sȊ$xa\sZp+}`:y4f?<80_Ez0~\A ϗ1:>r+wY28H??Y30N5'Tf*F%2k.U`NvLե~Žʓ.5?ƢHdtx%d!F&ۋ\U`rVks-ȑwJ8NF4wauYn +3sV\'joۄPέEp2aG(j;Bqe4` +Zwyl\`pJc o㺖౭,͔X|N]4UΎON4UBU^0I<c%F@Q#RT2 +0ײmՐmvu=*˒^[ 3t#^u!=RXM$ZM3D4@͐ZmS=^K n/yz]f(6.ǔh_vG,!NXϛP^[R;̈Cnv3Vbf:  e& ݻ +Q$tsG*&Ж++\ܺTH&ЙF( duܲR_12͏ _Wz'3py;"ƒ5h0]M^ܽ=2E؊(nx Lf@'w4 !0&w@c-";qM2_`V2Z8&N{j*s(㠼h8̟bgY/+'?փREmendstream +endobj +1204 0 obj<>/XObject<<>>>>/Annots 742 0 R>>endobj +1205 0 obj<>stream +xWmsF ίЄiCf` :r/sIӃo{ Nl>_Ikr7mgzɄޕHz$l0_&Cf7'wQ gcoV-RXL^p&Co WMo!2ٔ5{N XxqYMGfɍ|X WMfAF#X WMn^A$10CO'fy|1e(N`q ;i$ +0Rfr$)d鰒M){uV`9'x'Q (KrSŔ)8 IjH +p3 ǘV Id-#حϟ!J {UF +A?@vT"ٵɺ_bk&UkqȰԉrt#2cvJG%#L>v"4Gsi׉2L|~ݯ ׍Ve柟>̫S' +Ue!/FH֋H8%*aQoB:G{W6nC`0kqu=-hHςن4##kFq_? ];"-m4l\+laLbuFk&$sDN|i$,,Vi(yQUĀ 4ѻ[H0[QXwʻB*,n1қ4S0 WK쵁2 ?DZCxhgcN[.#?poaG~c_ߥaչVq|E^X-{ǵʯqcu=&EeGC͙BbKGcȓ*G/IL]dʯh: 8k"Y]#{\֗`P%[md.HSG*=9TPؚ7KfVCϫNDw?ʎZ KQ~@ȑ}a>~xx*:hx^jha%e2>tԳ'g 7}s NR'E%2G W%-LET~D~M AuhaJJ'8K+MB((yR?vZp3ybsř X :r  GpcXNZJP1 q1Q2/DZÒ;3DtyW"_Bj N"MyGQ%)NjxZ,OG&Gʚ +[aʋoVX3{V79Â>vIu=ވ&tNXQaQ QLr9{ۚ +[y\KC:acV{6W;@չej nY5ZE0I#|[^YY+jp’*#IZ{d1Ǔ7 g擮o?Ldendstream +endobj +1206 0 obj<>/XObject<<>>>>/Annots 745 0 R>>endobj +1207 0 obj<>stream +xX]6}_qg:ǒdهR, %aAD`KA{d@N;$u=Wx1>h2јiN ),yɓX) `"QK>g\~@-N:B;צI5Z56Vr^`΍-G@&P]  ۃsjw(wx5kP)^d3Mחo/{w("8<#ۇgre?A9WnX,2!Kr2I'5U `.jAi Vn'5`;AZj6z[Ak8"y}`(`OBo xr#53@'` [a脜4ϼ~~?\:EDAB2g B<T8d}oqU-TV"Dph S4&C!fFkIMy=$ʸ%b Ԁy"v[f6B-{r^ߪ tw&TD %omkQԔed6.I<-/9|™Q{E.|űP.Fk(k71^o869׷nf|p6;~w{w~yBlոpfu#WQ~bg'"c%4t =q),AA;q3eU{&?K ]\&t0ef#ͦ,~okcWðv9G.NX<GsO?H +u!0#>卍\ohƺxԥ."?yhfN6**0/rd3[>/XObject<<>>>>/Annots 748 0 R>>endobj +1209 0 obj<>stream +xXmOHί!UJĵH|I(HTr6&18ޜn3v^L½ޝ}gu⑋o:>5N\{Cn+ܦ)<{ {J\LN]†G9[nw;4 a&AMi>lvrbiOcZj-Z<2Xc+εLJg oFJًKu\ &4bXwY% +DB3IIqi)YMRDfHa㓜˴|xiZb%3cJfN֚"XT)\]%*(wG~DS!<7zNG>Qw + lqb+c08%V ExFIDLbUg%g>:4xϠCSx0Rd*}z Yyh3CmHW9ERzNmʔDFH$^ +Xfڙ]*C{U3ߨa4Me1nOy9 +ijN 3יF -."gEi*,~:Zh=dR$xY/i āZJÊ߱14A<'qVU$sQqkRfcdP T/>1qԙYz:HC+C#׵K-Xاn;^kw:fs|9Sٺބ7|!{Nh7;W1vQZ~݆w1{>5.EkQ|:,濋2 ݧ?>ϊ10=mWvHʌQy{RҶt8PR?wQTHX[ƿ j< n.1U\wtbe>/XObject<<>>>>/Annots 751 0 R>>endobj +1211 0 obj<>stream +xTKo@W̱+~D6qj{zY'-|u@0>$x<D?(:B݇q (I䅧[GohF+[tv U3]y&@^!:sM]["4V(d2*r_=P+>/XObject<<>>>>>>endobj +1213 0 obj<>stream +xWMSF+UF؆`7[!fS8CHFȚ4HxGF&) +0h?^~hAs|-hky2?WķTȃ|Lm.>6l]nhcV{ZKn{9킱[2SuK,VUS\[$;rx7^Ţ\!j\ynwe:Zg&ԔiW2ڶ2eIe|2eWJcqa$9/.cgױ$qB҄h,sUƆmZRkupXT/Gƶ8wD&gR{δpdC~KZU]_8 {Ry|h=q IUkH&7pv4!Rg ]JRUפ:fygg~:RTR-18QYWkzd#fk3̘.j1DNwvA6,!SU0upU'Qմã<￐s @slƗ&dXf2_<v~d̶R8jě0@ ~׃ppy tvbh7]} VLcgo4ۄaKgevOS<+ua8w}X5C^ QU*%V*#Nsn;&#X狼a0,NN/b>wOgOgS"FFс 8K +,@an =TsOUjf嶈x.g2oH2eԳ2w{BϷ֊Ai&r/1*/IU&Kf% +ei9ɬz   xPQÇdkK!Cրz?q_+T0S-fORҽjZ(ܣPʥ)n{EDi 5S>\1K4*qJ> >(1:#xzZ4ئR;g@  >V ٕqfgM2JN Kܭ` c[C}2 hBsRХؕQ#odKz&B5Igj:8lH:,GYH dY{ʼnSM0esebŢZFqЗLTwVxD ^x1 vKkt18L$_Rlʾ.:UPNr (jAK $Xy1 ny|(}E봘q88krږѿA*no^^.] ^lj9оendstream +endobj +1214 0 obj<>/XObject<<>>>>>>endobj +1215 0 obj<>stream +xWnF}W UIeYRq][m^+r)mLrR| Ib(8/;3gΜ}= +ht:0= Gt6 49~X>'p5?:8 y3GsF#{5db2"]-)l-7IBKMj`%MN]PR|tt#шp zIt2z1}y<,ld\JdcReqíUݰ2'l“\. u&[QAtskY%v:^T2Ljs̊6*1Q1܄S.%6=\D2zc32n_I}Y2qQbF+=4# +估Hp8{k Q +$Yr$1hKP6f2c2_h!׈&|pe8 .W,6{DcVD4^wW+|Jpܐ@^ *bp2[ +J-cwQ xb>]pMEb} eDu}rT|" L2 3#uS8gH@V$ΤefaW#UPwT{ÉX\C$pƜ&AĥKIp tRcp6 骩A9rNj׫X 3(scЉR'.Ëa0[TU 0Żz*d.y,DFrW-N +'&TB?s8NKC +6B򊼮*XqpWNpmًVRH0Kc Ǭ?\AV%˜y8֠\c^}Pe|s=l8i<PR@6W+qOPqlB$HYQ qa8xv Vqk'i6OeEkbZ[K (/,oU+1PS]/жא9fc+|FM\p:c:BfA 3zWM^ sѳ:Ve2gl*l*IHZǴ5@EL:'myj`oMPBQ~ ,wìH"zG6 ~,eρq:D^8gΎ>c AgBdҩծ~hq:l +=R+5SꍗhJ:p5cƢ䁿gII翪P\J'hpFTP|ձ9i2Ij A%C'3R'J-Yn׭6)N*G F* ug0L&F Sg2gal;:wp!d +CȿB-\p&U5UHԊ=L8V|liA %kKހ$eOqI0 T@J%ч*'#;{=Zn>]U+hxendstream +endobj +1216 0 obj<>/XObject<<>>>>>>endobj +1217 0 obj<>stream +x}XmOHίoyသN'%PN~A6lqwM{f_g M%'ػ;3<3?4!h|J`pj@aQ  AvqnonCvloۄש^` WƼ^Rzj|~Bpq?%\5ss6*$CإY9tZy2& zQ"нMc62 2,":Ȋh{.|ޛGge_Сq,іBy jitS2"> #3<}ێs}}OdiN%0s&TzO|#%m< ^-_=Q D^;!wJWxڹU[M6#<|PGѡ9n =pI<7&foSwpKw 3' YfTw泠_ݕʍSƝ],Z;ָ | +Vx HTcuK|3HMHr9vRy!OElؚRq7$+hӨFh&ʀ'1 +$#^ +1q&ZZW_rSNceBqcZ:5{<@eAo(b1:Wp6\L7wqwWY@D]PHl0SαptwtoF@LuSA:4a3yjeY:Z&­do&_'VU 'U^G"B\ޢՖs4~ xw݋inAThl ɹw +SլFPeP +9G18̧E}e9¿$Ә\;} 0RM  +k TJ 8,jOe]r"1 ;H`cШgߩ%͍RWyxse1~[z:Z9^C[׏g#Eq4%;k˞oE֧$c4endstream +endobj +1218 0 obj<>/XObject<<>>>>>>endobj +1219 0 obj<>stream +xWK0+IcԮZ$dx퀶3vوR$gb23o&0 BL7 \b (l $ER%VG#3k -; DiQ+G'A6]>O4N8s܍}hY;W(fɲfCjYN-gi<<,%8Ѳ7F™/Ƈ6H0 +C|5O5wPs퀹>pm(l #`[|[=0A*ʖJ ˬ8 s7HS\QpbQUP2SA; + uG.ʵҥRPKH4dk90&/V7+vym%wOXːGw&|6dtA~1b},8- &fAE%TG?i۩`ڝ2ȲK$R+)st{G>6jp[N[q|l1[1,-EXĴLnPC!3,Kx%37>)D"4F[.EC=:Ne=ifSQ&*hH 'd#¬wæ]\Iw /yƗ) k$~]DΨwh=bb- FHtwxٽ=,JHTjx]Ng,ksuNB`Yq(*AM1P!r;5†#6 HT5߫' +N\_m ~҉=Y'y"mG9e^$iM>t8qѰ|NV0WEG_IQF~CnxÔZZb,Vhe>/XObject<<>>>>>>endobj +1221 0 obj<>stream +xWn6}W ))I zhQ}%$$=CĒ83sΌMh -t11.&Zs_#[.i2U#r1]F7on,{!WJu-TCNZlW49U:gUUƩ4,k[hL"+%[w#$\IñJ%] z˖!)swՈ,֪u%2|ˆM-Eï̩@84KU'L{h#զ\֔Z^e'(\mƕ}zP6od_nUb|a(<FWZ?q>F49*{2nR7{+{v|$4ޓD+)T;9\d)<择2pv БZm]Hh3<-{wD@$IiސE- ̪ZU A])8Ż +Qraվб;/:i8bLf,G@ [A L霏}#QkJt,Uܴ\.] {B}g@Bs z¤nns_oQ}L^hm4B:(Vt@?6^UHj= v[IJǰIUt99IS#{+ z+h+VO `HJ9lvO)&ЃA7 m7 iͽv1rk̷pJrseqi i.QNH'_HlO]ñjN?/OO:yn,A ,`1ȆiȢ}de8w~Ge´ +LЬ?[œ&Wd} Zk a?x "΁.5#goF-3]$%#F[:kyy%fa^jr=};#;#x#?5ԣg$^#.|酟dd1[KTfՅEB!tptit@>/XObject<<>>>>>>endobj +1223 0 obj<>stream +xWnF+.Ȍ$[\4 hC 9̐Q=wH)jmə?'O]/ U]A[LC ݬܭ3>4D|)%ۮ413ԊʿcG~U<z"ޔUE(+j4F& '&sJWj6r2L*aJmІ3ujהAb (]B0P.ÑwzF ą h.QܔnCMzާTlsND-52G[{>(@ykxXeeϱC!_Xׄ'/oh T3/.|;dîvČf޽yMbr\?gtTNֹ+#2ಐ=CWYNH$J`Ahk0ׂ^ ۀ.OxS~ R?ye ` +zkZmctUI3$Q5+.W.E]眅:+Ѹ,G=ȣ'$PE 8(ۀNFTLT@<\5\#\fZ8c-n hDL;xzƴ$him3>Bͩ9V >}Ry60UXiQZ|]}!c%Zjx"uǕ8@9PEjNhUm{ xVkT+(y3dRr.Щ1qBT0-Glu7^qqdMO,4xr9cqS +F`MJ6W4réظ@PUFt$}$lj~1YOdUP/hcWH62eĵ%l'Y4GF~iK#D7C@Fh淓:/q` +f+V7E{guJhCP@9XH@hKn4c1!ЫF&1\}F.4.prHydx-tVR\ +VіMa74+Wuuڕ;k o-½8pCƘ C+6v +ZGJ.)Νg>&oMu܆|nhQ& 81"dg(-v0Qccb{Tn˦@B':y޴37/x +3><i^H?p_l:G#E:ccɗendstream +endobj +1224 0 obj<>/XObject<<>>>>>>endobj +1225 0 obj<>stream +xWMSF+:>AZkT6U6  Y+!0FX i>gFFE.lk?{s44i4(?xS:MO))1EpC +ؚ̦;UB;UZmqhc p".6k˺bݾ栛wk^lV{( +&8&4eG*ZSm/"(tjӉN;*jkJLu +{x ud,Hq +Y"h0ZYl; u6aY hZvȪ5O +>1#o"T5~;F2mEQ9wh-ƿ գ-- 0$Dl yUf0< +֔ˌ20_SL'M]äQw=ש=?q.YnE(1M:kWFDn=2=4މf7Uiu1 i5s4N?lD)eFkoKq(swoo>׈?Nfdc[![8H%endstream +endobj +1226 0 obj<>/XObject<<>>>>>>endobj +1227 0 obj<>stream +xWMoFW tH$˲]m*ȕ rI }3IJ."cQzou1)fNWKJi2,YҴ _,fVtJqC^ٚ*֊jGW%6ZUuSi|5B]U:BZW#nrr4xX'v1*#AQBxo<ߩW'&":^uEn+*]mm'u^WΠ&tnxp(?IT*4wҘ' +%{G;kO_/;-A +]i5gR\B|ԔfmQ5r +KgJ tRWer`3Bkc

)tޛ5Aj9fۀLVEfa~mZm+T0@0 <5% @g't7Bsoa*!Y遮kBTe뙙JawC]"Td(jjp6)56S6=\sB!:Ev}tG32jiv%Y}7vb'>@ьᛡ|l`>u9xprâ(6%X ()/xH/{ۘ*ER2;^OģkgKBF!pnNCzukjFIHe'e%ijB*ڻr)..b7x0ZwP'sS7:O-A7djm3"DXm' +Wxr-[6="#K88;e!x}oτ.WUeQY +W9@Q Gkn?Iݚ,_2Ek)0A oFU0xR eNUGmxQ# %*pG©OF5qi|A[#])*kX0>rC'#z;/mLt_mھ.y+|{xwp>QVCG&./ Mʋ|69c|Ǯd>o_endstream +endobj +1230 0 obj<>/XObject<<>>>>>>endobj +1231 0 obj<>stream +xWn6}Wܗ):=,R1PesHw.IǶ: CƵs9P~QJYb^i+Z6>(˛b9}psZuC37VA:*W=KZ SKRҿ_k7zY,Pʂm 5y2\*V2p१7 +Я'ZI +ZoOHlxՒ +Fu\v ӬN(Z祈07pٍ$/:ɏf:(B JJEi?VtsIza,NtJxwh)r +z/Q=H@ ~zɰenz$qMƝHϨVR|P5Ě z"H$}gwR'IJO$p oj }#^.PoIxzzyN%Ѣ P'j,}FxIV4IۓWt.XMFMA_@qtn}PDOVx%Hn銄ػ+ KxQ0nГqa(\c 8N=0Hvyb <чV^i5lkG6$n0[o;*8:nXvl3VfoՉ~t=Tv0`ųF9RDqno"zvmwZf|,߉Qah$ȀFS38ow:(vEb..8H }2D +z +d~41 m&°I_ɸT +{~◽*1r> z+ߜAW@{Uqlw~kIEj^b"z<81,ACы \B/Yw+&*Jgab<4cF}W5lC={KJ +]Qp #}>@9 _^'R/mǗ|-o'^endstream +endobj +1232 0 obj<>/XObject<<>>>>>>endobj +1233 0 obj<>stream +xWMoFW tH,+)uZ%"ҊfH@jg޼yfń7)hL,|yS9M/w4*CV)!xL/ l ++K[;:!&IyRu]Dc+ڽjM>Q 4̢)~itԽj#PStK?z O&q,cD! n=%A\A/*D%FڠDh +W} xbGIKdMYD]6z;|Giӷs.T+䯀׃0Cwv +L6Z ud+ G ٢@?PT_"6^WNG,K&bA+JeVk(tבXB8*( 0]-{W*T}֙Ɗ,[> .iS-m g`ƺ:ʜ-ɮ>p)-i͚jІRU)kg_tC Wd [͵f`a?hrTRJ`{nYTG#K)9uAK!tH U ꅕfb<@[H|%Ta<)QOR_G[oi/[@o:czf?I߈+q:hׁ7bOUچmlzZ`=o\̧/x~]^x!(Od,KbZ(Al$E ˑT]צBpt7bݱF+er fFCʫB؄6UqudV ==9!dOv0l(fqĂv`'7Ry9uM4ZMi@uϑ? +\WA]uI`g6&ǰ^[P{:S]+q~-=ƅW^1a)ݱ[CҒ7˛E%~I>&ʒˋJAr +[nڪ]D] Z\_g BT`%vU|K0T4r wWo?3Z|׈ۇ[3O6i\q{-/z=_seendstream +endobj +1234 0 obj<>/XObject<<>>>>>>endobj +1235 0 obj<>stream +xuWao6_q9CڎY[uaeDx~H)vI޽{q5)ft;jL)]KX9~"r!LiaQLi2AȝB&?L>OKAT[A@'DS.`dPzO#2W&Ujd.7((roEZd4G+zBdlڶj0+skXK}L 3@Ǎcb{ .MmZ!@hOҽ1O![\8Cr mo^:ڌ8\Rg,qNmuW3UH[[Vz /I +^Jʃ{ -8Ŋk()D@N%5Q^UXSeL8D䒺oQ2\Mn'S&{<.4G9Yj[U'Ct*J=X]f<.о4$prFrL\~uB_ +:bd-?dqtnfzpX(@.GtmQ_{k3I% wtBSX#a@~vhNX?u]lk/s&bب̴:?ZT qp 2cZ}C) 2},F,Ț5pО#9m<ߦQ9rN9G!5N(ٛA!EITA&qޣc'oEA B^ ggCfNrQ~!jP#&r,1$7h3Ɖp9 MLDF e1ۥ"z4t5B A#ct&w+W5rY.J-nVcup\*GP0{d s;_*hX]6eߗuٟgd0p7y5[}C"\R% O V̎`h ]G װxrde` {%f3i32'ci SZؗ,q|a6X%n7C?s/x}t ,0g "rvxհMAv4/sg䫽rЭ+k-05/ p Zu7Y "e>|@߬ɤ&kyهLݤ?0z_/Rð2Ϗ)endstream +endobj +1236 0 obj<>/XObject<<>>>>>>endobj +1237 0 obj<>stream +xVn6+4 8evCmmqM +IYUoH9PА͛7|HisZ(+/fɌV*zvryfWm.~#k}u&'dh]"DŽ\Vt6_a5_#&&mwp2W"2-JliQ.w~JƓQgʕ<=]^Zr2kBl):F kv; RTw +|9Ni(Kcqj霬U#K攉 nF;&Sj RTczjL Ɋ}ZmŤJ+Nҩ=|r26^VY*Hr>[kϬ0I2\SƂL0ęrzVA d + C@rً#ZE>UL)dVrSHg;j|#}dZPc@@ql.>HqƨMȬRl/XOL'%t$# FR{H蓧2^EL@84Q` 2M +Dx<``}wx#oϯvv{ȵgka +13A*tWmi +_[RX'2PR0z}S[g&j3f06Ap)J}lp Qrgp>Z4X Bp\CLVe.aa#('nTv4rgiso< _dEПp>^pnWXM / L7p}f\4L/p7?: +hNXF k4^pdOXX~ *~`iGC=n``<JÌRl9P(;1d$JTX\N:݌d;7@¦*t+:5=V qu.3"w"{ lf1S,߲slQa~sd#G#x%x AcKlʱ̨Rl nP0VLs* p-k!q@[ bpaOuHLWx^/\-nWQ?)QóQ^\xt9^0[_6\>endstream +endobj +1238 0 obj<>/XObject<<>>>>>>endobj +1239 0 obj<>stream +xVO8_1emhRIDGq:dI4IQ`O(u7ozOAy}OWK܋;mypt9$ߧe' -C^R*Sb#* TV$xJPؘl,{q=I6Q9/.ξ/(MrI*˟=Ļ gQF057ke12)LE)1042d'|K[K <佹q[:{G˸4ڙ> 1IQ$$r8ܞ9G@_~tyJ> 5 +-RUy>2y7bn1`I, (āhʪ@nA{,5ozvvݧ5g]PEdM!a=`n#3FV#c~z)[#MO#Z d3U( ȡGJC=Vԁ"LC +bYylYI$ݨ3+ B3Zx^ 8u2mXJpBIncZ"_#^%EM+;%ؒHXůpJwt _ZEs5Gc]_נ9"W ,.`Iw2ҖLU |σf:C;eQ+4b4ݸYsx{iĽ[.$1ӏ4:lZaB%YnJ]'p4F&ޘNaKendstream +endobj +1240 0 obj<>/XObject<<>>>>>>endobj +1241 0 obj<>stream +xVr6}WlL-7_MDI:u կYr&3Z='hS2< e0tFRK|}q:xR*M 2FaHlqNT?ICxBY}9`b$ ( b~e7Hwou!邏+WN=IFf@o?,߭݌nETJ +xDx @QԌQ2'e\#@G:'=RVN +A36D:D~-"$(Sy.RINc%^Xt'qq4#[K@s+/Du]_A kr5j27KYѓ0J7V#J Kx0SoJJI +IY_.k("=e<]E$㛀V" +6RXB6V^{E6H+Z߀"BmQRa+`8 w7Fa8"={&X xuw+J& I1y-Y!-;5h@οꨊ/9`4siS30SYIM&-EASUE*,S>ӭO\6u{]m,;ѽ:5.;Uvhn#]?wZO:X'Z +v9B\ESr6uY0[N '#H.٭v:N*hOGGZ\-mג6Ihe_<\Rc a8}lɰ~T']y|Rp@l UMrE0٣jH({G by~>ӱ}fu.zӆwZK UsV%t97d0<_\7VAy\֚gQ{hV(( R>ar}}Txfl`aZC\sqNx8ǚop 8Pt3.7iBI]kZ_[;=EW9:]0Sx(?N4endstream +endobj +1242 0 obj<>/XObject<<>>>>/Annots 760 0 R>>endobj +1243 0 obj<>stream +xWnF}W bI%9@P؆/Ԧ$WrW]ZKg/j㴨 &wvg̙3G8?"Q|6Ft6C*i8橠9S|>p2c$hǒ8)O)aGFjԏ+GZwA09v8 +i…F -2IWuP4nUKݧ뽧!]d]GM/>GakGp BьRVw0OlJ+%SG<{9$aI}:2p7Zr.DT{R5cDu/pr[H'I(&-}uV>ЕH+e͚qn& SatreA,vXl\Y<Ɠ #0A^ +(=는3[+d=`ii4 RF&Gd-dz/Ox_8M`N x4z/F:pvO|'tdVE[.gwsFCsO j 8XGnCmZ"$F86{d "K߶r+dE@UM S0Rd{JTCYiGir6xGv@DjBg.&μ\jہqIs΋,k|5mFiGɓ'xj,ajo%+o}[鱰ۭLNOy|+ ~IycW*s /OZ57/ki)jNZm&<ĒcNkqPtI|(!W#d$S "O|tǮg8:;.OzuwN j˭;7W[h xkVpY%Nͼ~'O7=d%>=9@3/+ eC8 0q/|Ꙍ5?w  +֒&t?8 + 1f ̼C]wh>7 U9E#L̤7wdihfDko*F;!mWR0A8y; kWkYtPu`!-7/hU:bYچv! 5 @ox- N Eau#1!En>FfLHd*| jCW7soϏ>4=kUj +Zr~$hMO&SOCzZ>zq/endstream +endobj +1244 0 obj<>/XObject<<>>>>/Annots 763 0 R>>endobj +1245 0 obj<>stream +xVnF+>)%YR 'ȍqm"FŊ\J. wiU~{,ZR[a Ù7o[/"i2$o^4]131&gs1i ==-^Ms܏_)d2ル7~Mє g ܤ!E$&.oؑ[v +8ӗ>>i[|yJI:⯽F3`~b*Ovx=(jŸ|.wԒeLoOd+8Zƒ} O?zPU課[eGFncTC4o7W;/O6U6ԧpՅcCчp)6>7^BiًY5FԩJ@K5٬QЍ'i uJl](45++2*wr5BeJ13Xd y[أvU%!5hbnBMlWi$(mx~ }_oAhSAPTj>/XObject<<>>>>/Annots 770 0 R>>endobj +1247 0 obj<>stream +xW]o6}ϯKS#qȖY22SMl O=~ƻ͗7caa>J,-a.KSOYv #gf-Ȳ| O|+ZgqUyWeB>=>ѯR*AkAtV*&WV/hqrzzOfs\uKzxkNzmuNi:l bkH;NUU9DCِjvښVOau9з7@_uJ7z;oțt]{!K%yrqԵ/pQiI㥣t.ܽ1Gޮ:g4z<9vї +:o#@ HN2Fv +ᷠ|uLtMNsOl7tItM5; cA5yClgzVԍ:&5aۭ+-^WQVio +cU?/#+b 4 +^ Yu9s}M -]{ɺ$78 b\֧Swivͥq>@rYi "96]PbtLimM'9,VRU1'it=Y3g;ͳ#sN(;D6z*z&]Pcl z`dC) lo|1u'Kh"ò%3sC,'TZyKtVVzTVjP. Jv,t\XPh9ʗ&?""*e7y,HXc. "X3ʈ<\WMc8O~MѨ̎F|OQNLk X|gzr/6bU{8]A;|/C*2&,etcE[j E90 X)[L}pڨ@@ 4u83^C3& +k걹=E>/XObject<<>>>>>>endobj +1249 0 obj<>stream +xTn@+J{r{}Ze6Hx L;3Nd+*^&1"X$e$ +#̣4̐.|(|rs8F^l@^ʽEP`Y+ڍlW|k$z?3^:$ SFUmq((ȼBQXډZz W)4\lRgBqZ*knW5ga92cY~k-ݑ.,H3P{Ю"8TO\A~Qo^#AdfZM!tˁ-3\Y*Ǧ_ؿH]|e_j[cFt^r^Onq1 mTrTP(HJ4tL݆'_)OP)͢R[&ʰ4 H;ezZӟd~jX1rvg oYξsirtSr3ܿgHvդ "J/C>XKŽO:NC&͖a6OCq<Ϯ_{;_endstream +endobj +1250 0 obj<>/XObject<<>>>>/Annots 773 0 R>>endobj +1251 0 obj<>stream +x}Wao6_q0Rٲ'-Plvak NJH*ޑXݻw9-͒V*E&[x9JT.\>~lC 7jfStl+Z.h[a-mwٯ;_e;nۯqe~V\}[`gG-"h&5`A0L(mHc全vI^'9^3lA/V);\.  a1<3mO5::'_W%gtE0VK 1[q"ueZ$PIL ɝţ @J9{>/Z%BL+Rk#{vF&h*<# tYl5>͎Z>lDJbt\'aGn&2}E6DZ6n1ƘPwJ:d[) R3; @J̒!#\e&88l |yA H @HhG!Q)bh}K; UDj-@=`Bt<bMROixG3{=*}Bs\f[vʐn36V(粅>`tP֨9;gZOAE'DIh^[Aƒ$Xv߰ՏFF0(-+Zz>t5R4Dc:x2=LK=KkR*k s{Qվ^,NqFOi{vGҍ ~CO0}ɨ QhNء#C2zv!\+{0 +i} AB 0BI![(go W0=֭2z=&3W,eʋ0b6 v qV*tH.0Cbs:z/vfGB #OEJAdՃ|Tt<m>]*4فg@@kֶx*ޅwo𒴆a2ex<ί_u:ܝb7/@Qg#Gl{77Pf^w~h&ƶΚaSMGV!,H. x*y,!ȔApyLd8wD{ < *7̡o4m)#пPǽ3u=&A%q6+c!mg0!kQEJ]U-|\Nzg]<+ bE +QƑs}O`Yon?`kYVendstream +endobj +1252 0 obj<>/XObject<<>>>>>>endobj +1253 0 obj<>stream +xWn7+TbYe)Ѓ؀&M@_#.\Zl @%93o{C{4)TGɔWM|8\avx}vN-kY\]Ҳ"NiY+M˟؃d8Ť1i./^ {~Ԗ~?o"ŝn.֤%D{J]=iTBkG]GV:p)Q?w|MU[(Rq L8}B +UҷLaI;>:@:N gɜ\G.l9 ʠ)>T(ƙڔ%vrd%5d +hwCr17:(a[#9<WwL)GU@ +)1˅K.BJ|`FrE Bۮ 7SRII-i2WO|Bw.%1w`'v]NܠZ +m4?:F$LG2 ;6L(ABsX"_QM KV[^:013W9'sxw<]G߷BBBŤ[Npܟ8 XB'q-* as*E+.@ +CV&t/A:&?ɸDWC+LUWBԴ11ojͻP;@FWoEeIJڀ>WbgZjVBŮ L@AI~a AkZ데(N A=&[bTAb*/!Oo2}L7.(z)~*n90~JJ+di֑`T=TCrM(QU<|`Iǐpj\/@- #ΥY )Lk-#U}Yvd;r dm!C@90'FݲX嚎 T&h G^y6+ + @S?bJ p,ǘkB.TuB `!z6$iCsBWP#*Gri$ WL5[Nnҏ,{sbB $wT SP_3[TOHΙ'%ɔgY'Zc0j2AX + }0k~NߠU0L#1caxϡMi3ؗb}`p~HDѳ7|+Sh<A 1G]Dk{Q Uk1F]I#k67_nÓޑ>Dak`F+&'-+)C ɩ$ Nc_M/"ma $N\!_>]ӷbg_?8p j8w.诣/لendstream +endobj +1254 0 obj<>endobj +1255 0 obj<>endobj +1256 0 obj<>endobj +1257 0 obj<>endobj +1258 0 obj<>endobj +1259 0 obj<>endobj +1260 0 obj<>endobj +1261 0 obj<>endobj +1262 0 obj<>endobj +1263 0 obj<>endobj +1264 0 obj<>endobj +1265 0 obj<>endobj +1266 0 obj<>endobj +1267 0 obj<>endobj +1268 0 obj<>endobj +1269 0 obj<>endobj +1270 0 obj<>endobj +1271 0 obj<>endobj +1272 0 obj<>endobj +1273 0 obj<>endobj +1274 0 obj<>endobj +1275 0 obj<>endobj +1276 0 obj<>endobj +1277 0 obj<>endobj +1278 0 obj<>endobj +1279 0 obj<>endobj +1280 0 obj<>endobj +1281 0 obj<>endobj +1282 0 obj<>endobj +1283 0 obj<>endobj +1284 0 obj<>endobj +1285 0 obj<>endobj +1286 0 obj<>endobj +1287 0 obj<>endobj +1288 0 obj<>endobj +1289 0 obj<>endobj +1290 0 obj<>endobj +1291 0 obj<>endobj +1292 0 obj<>endobj +1293 0 obj<>endobj +1294 0 obj<>endobj +1295 0 obj<>endobj +1296 0 obj<>endobj +1297 0 obj<>endobj +1298 0 obj<>endobj +1299 0 obj<>endobj +1300 0 obj<>endobj +1301 0 obj<>endobj +1302 0 obj<>endobj +1303 0 obj<>endobj +1304 0 obj<>endobj +1305 0 obj<>endobj +1306 0 obj<>endobj +1307 0 obj<>endobj +1308 0 obj<>endobj +1309 0 obj<>endobj +1310 0 obj<>endobj +1311 0 obj<>endobj +1312 0 obj<>endobj +1313 0 obj<>endobj +1314 0 obj<>endobj +1315 0 obj<>endobj +1316 0 obj<>endobj +1317 0 obj<>endobj +1318 0 obj<>endobj +1319 0 obj<>endobj +1320 0 obj<>endobj +1321 0 obj<>endobj +1322 0 obj<>endobj +1323 0 obj<>endobj +1324 0 obj<>endobj +1325 0 obj<>endobj +1326 0 obj<>endobj +1327 0 obj<>endobj +1328 0 obj<>endobj +1329 0 obj<>endobj +1330 0 obj<>endobj +1331 0 obj<>endobj +1332 0 obj<>endobj +1333 0 obj<>endobj +1334 0 obj<>endobj +1335 0 obj<>endobj +1336 0 obj<>endobj +1337 0 obj<>endobj +1338 0 obj<>endobj +1339 0 obj<>endobj +1340 0 obj<>endobj +1341 0 obj<>endobj +1342 0 obj<>endobj +1343 0 obj<>endobj +1344 0 obj<>endobj +1345 0 obj<>endobj +1346 0 obj<>endobj +1347 0 obj<>endobj +1348 0 obj<>endobj +1349 0 obj<>endobj +1350 0 obj<>endobj +1351 0 obj<>endobj +1352 0 obj<>endobj +1353 0 obj<>endobj +1354 0 obj<>endobj +1355 0 obj<>endobj +1356 0 obj<>endobj +1357 0 obj<>endobj +1358 0 obj<>endobj +1359 0 obj<>endobj +1360 0 obj<>endobj +1361 0 obj<>endobj +1362 0 obj<>endobj +1363 0 obj<>endobj +1364 0 obj<>endobj +1365 0 obj<>endobj +1366 0 obj<>endobj +1367 0 obj<>endobj +1368 0 obj<>endobj +1369 0 obj<>endobj +1370 0 obj<>endobj +1371 0 obj<>endobj +1372 0 obj<>endobj +1373 0 obj<>endobj +1374 0 obj<>endobj +1375 0 obj<>endobj +1376 0 obj<>endobj +1377 0 obj<>endobj +1378 0 obj<>endobj +1379 0 obj<>endobj +1380 0 obj<>endobj +1381 0 obj<>endobj +1382 0 obj<>endobj +1383 0 obj<>endobj +1384 0 obj<>endobj +1385 0 obj<>endobj +1386 0 obj<>endobj +1387 0 obj<>endobj +1388 0 obj<>endobj +1389 0 obj<>endobj +1390 0 obj<>endobj +1391 0 obj<>endobj +1392 0 obj<>endobj +1393 0 obj<>endobj +1394 0 obj<>endobj +1395 0 obj<>endobj +1396 0 obj<>endobj +1397 0 obj<>endobj +1398 0 obj<>endobj +1399 0 obj<>endobj +1400 0 obj<>endobj +1401 0 obj<>endobj +1402 0 obj<>endobj +1403 0 obj<>endobj +1404 0 obj<>endobj +1405 0 obj<>endobj +1406 0 obj<>endobj +1407 0 obj<>endobj +1408 0 obj<>endobj +1409 0 obj<>endobj +1410 0 obj<>endobj +1411 0 obj<>endobj +1412 0 obj<>endobj +1413 0 obj<>endobj +1414 0 obj<>endobj +1415 0 obj<>endobj +1416 0 obj<>endobj +1417 0 obj<>endobj +1418 0 obj<>endobj +1419 0 obj<>endobj +1420 0 obj<>endobj +1421 0 obj<>endobj +1422 0 obj<>endobj +1423 0 obj<>endobj +1424 0 obj<>endobj +1425 0 obj<>endobj +1426 0 obj<>endobj +1427 0 obj<>endobj +1428 0 obj<>endobj +1429 0 obj<>endobj +1430 0 obj<>endobj +1431 0 obj<>endobj +1432 0 obj<>endobj +1433 0 obj<>endobj +1434 0 obj<>endobj +1435 0 obj<>endobj +1436 0 obj<>endobj +1437 0 obj<>endobj +1438 0 obj<>endobj +1439 0 obj<>endobj +1440 0 obj<>endobj +1441 0 obj<>endobj +1442 0 obj<>endobj +1443 0 obj<>endobj +1444 0 obj<>endobj +1445 0 obj<>endobj +1446 0 obj<>endobj +1447 0 obj<>endobj +1448 0 obj<>endobj +1449 0 obj<>endobj +1450 0 obj<>endobj +1451 0 obj<>endobj +1452 0 obj<>endobj +1453 0 obj<>endobj +1454 0 obj<>endobj +1455 0 obj<>endobj +1456 0 obj<>endobj +1457 0 obj<>endobj +1458 0 obj<>endobj +1459 0 obj<>endobj +1460 0 obj<>endobj +1461 0 obj<>endobj +1462 0 obj<>endobj +1463 0 obj<>endobj +1464 0 obj<>endobj +1465 0 obj<>endobj +1466 0 obj<>endobj +1467 0 obj<>1<>6<>7<>12<>18<>23<>33<>36<>38<>43<>50<>55<>57<>60<>73<>90<>93<>100<>109<>115<>117<>119<>]>>>>endobj xref -0 1367 +0 1468 0000000000 65535 f 0000000015 00000 n -0000000244 00000 n -0000001810 00000 n -0000001884 00000 n -0000001963 00000 n -0000002045 00000 n -0000002131 00000 n -0000002209 00000 n -0000002286 00000 n -0000002365 00000 n -0000002442 00000 n -0000002524 00000 n -0000002583 00000 n -0000002635 00000 n -0000002720 00000 n -0000002773 00000 n -0000002857 00000 n -0000002923 00000 n -0000003007 00000 n -0000003045 00000 n -0000003097 00000 n -0000003182 00000 n -0000003206 00000 n -0000003259 00000 n -0000003344 00000 n -0000003397 00000 n -0000003482 00000 n -0000003513 00000 n -0000003559 00000 n -0000003644 00000 n -0000003689 00000 n -0000003773 00000 n -0000003818 00000 n -0000003902 00000 n -0000003940 00000 n -0000003983 00000 n -0000004068 00000 n -0000004111 00000 n -0000004195 00000 n -0000004226 00000 n -0000004280 00000 n -0000004364 00000 n -0000004388 00000 n -0000004439 00000 n +0000000250 00000 n +0000001816 00000 n +0000001890 00000 n +0000001969 00000 n +0000002051 00000 n +0000002137 00000 n +0000002215 00000 n +0000002292 00000 n +0000002371 00000 n +0000002455 00000 n +0000002532 00000 n +0000002614 00000 n +0000002673 00000 n +0000002775 00000 n +0000002878 00000 n +0000002980 00000 n +0000003082 00000 n +0000003185 00000 n +0000003288 00000 n +0000003391 00000 n +0000003494 00000 n +0000003597 00000 n +0000003700 00000 n +0000003803 00000 n +0000003906 00000 n +0000004009 00000 n +0000004112 00000 n +0000004215 00000 n +0000004318 00000 n +0000004421 00000 n 0000004524 00000 n -0000004572 00000 n -0000004657 00000 n -0000004688 00000 n -0000004806 00000 n -0000004890 00000 n -0000004931 00000 n -0000005016 00000 n -0000005057 00000 n -0000005142 00000 n -0000005180 00000 n -0000005224 00000 n -0000005309 00000 n -0000005333 00000 n -0000005377 00000 n -0000005461 00000 n -0000005503 00000 n -0000005588 00000 n -0000005637 00000 n -0000005722 00000 n -0000005771 00000 n -0000005854 00000 n -0000005901 00000 n -0000005986 00000 n -0000006032 00000 n -0000006116 00000 n -0000006175 00000 n -0000006237 00000 n -0000006322 00000 n -0000006379 00000 n -0000006464 00000 n -0000006557 00000 n -0000006641 00000 n -0000006679 00000 n -0000006784 00000 n -0000006825 00000 n -0000006909 00000 n -0000006955 00000 n -0000007040 00000 n -0000007079 00000 n -0000007164 00000 n -0000007206 00000 n -0000007291 00000 n -0000007333 00000 n -0000007418 00000 n -0000007477 00000 n -0000007521 00000 n -0000007606 00000 n -0000007630 00000 n -0000007677 00000 n -0000007762 00000 n -0000007814 00000 n -0000007899 00000 n -0000007948 00000 n +0000004627 00000 n +0000004730 00000 n +0000004833 00000 n +0000004936 00000 n +0000005038 00000 n +0000005141 00000 n +0000005244 00000 n +0000005347 00000 n +0000005450 00000 n +0000005553 00000 n +0000005656 00000 n +0000005759 00000 n +0000005862 00000 n +0000005965 00000 n +0000006068 00000 n +0000006171 00000 n +0000006274 00000 n +0000006377 00000 n +0000006480 00000 n +0000006583 00000 n +0000006685 00000 n +0000006788 00000 n +0000006891 00000 n +0000006993 00000 n +0000007094 00000 n +0000007195 00000 n +0000007519 00000 n +0000007621 00000 n +0000007724 00000 n +0000007827 00000 n +0000007930 00000 n 0000008033 00000 n -0000008082 00000 n -0000008167 00000 n -0000008214 00000 n -0000008267 00000 n -0000008354 00000 n -0000008403 00000 n -0000008490 00000 n -0000008539 00000 n -0000008625 00000 n -0000008689 00000 n -0000008776 00000 n -0000008826 00000 n -0000008890 00000 n -0000008977 00000 n -0000009003 00000 n -0000009044 00000 n -0000009130 00000 n -0000009180 00000 n -0000009266 00000 n -0000009312 00000 n -0000009399 00000 n -0000009441 00000 n -0000009489 00000 n +0000008136 00000 n +0000008239 00000 n +0000008342 00000 n +0000008445 00000 n +0000008548 00000 n +0000008651 00000 n +0000008754 00000 n +0000008857 00000 n +0000008960 00000 n +0000009062 00000 n +0000009165 00000 n +0000009268 00000 n +0000009371 00000 n +0000009473 00000 n 0000009576 00000 n -0000009623 00000 n -0000009710 00000 n -0000009751 00000 n -0000009837 00000 n -0000009879 00000 n -0000009921 00000 n -0000010008 00000 n -0000010057 00000 n -0000010144 00000 n -0000010191 00000 n -0000010278 00000 n -0000010320 00000 n -0000010373 00000 n -0000010460 00000 n -0000010504 00000 n -0000010591 00000 n -0000010648 00000 n -0000010735 00000 n -0000010831 00000 n -0000010917 00000 n -0000010967 00000 n -0000011029 00000 n -0000011116 00000 n -0000011142 00000 n -0000011191 00000 n -0000011278 00000 n -0000011304 00000 n -0000011351 00000 n -0000011436 00000 n -0000011462 00000 n -0000011511 00000 n -0000011598 00000 n -0000011641 00000 n -0000011728 00000 n -0000011771 00000 n -0000011858 00000 n -0000011907 00000 n -0000011994 00000 n -0000012043 00000 n -0000012130 00000 n -0000012178 00000 n -0000012265 00000 n -0000012311 00000 n -0000012398 00000 n -0000012472 00000 n -0000012519 00000 n -0000012606 00000 n -0000012653 00000 n -0000012740 00000 n -0000012789 00000 n -0000012876 00000 n -0000012923 00000 n -0000013010 00000 n -0000013060 00000 n -0000013107 00000 n -0000013194 00000 n -0000013241 00000 n -0000013326 00000 n -0000013370 00000 n -0000013456 00000 n -0000013498 00000 n -0000013584 00000 n -0000013624 00000 n -0000013710 00000 n -0000013758 00000 n -0000013844 00000 n -0000013889 00000 n -0000013975 00000 n -0000014019 00000 n -0000014105 00000 n -0000014156 00000 n -0000014242 00000 n -0000014291 00000 n -0000014377 00000 n -0000014422 00000 n -0000014508 00000 n -0000014550 00000 n -0000014636 00000 n -0000014679 00000 n -0000014765 00000 n -0000014807 00000 n -0000014893 00000 n -0000014937 00000 n -0000015023 00000 n -0000015060 00000 n -0000015146 00000 n -0000015187 00000 n -0000015273 00000 n -0000015315 00000 n -0000015401 00000 n -0000015438 00000 n -0000015524 00000 n -0000015565 00000 n -0000015651 00000 n -0000015694 00000 n -0000015780 00000 n -0000015826 00000 n -0000015912 00000 n -0000016106 00000 n -0000016153 00000 n -0000016240 00000 n -0000016289 00000 n -0000016376 00000 n -0000016425 00000 n -0000016511 00000 n -0000016553 00000 n -0000016601 00000 n -0000016687 00000 n -0000016733 00000 n -0000016820 00000 n -0000016854 00000 n -0000016969 00000 n -0000017056 00000 n -0000017082 00000 n -0000017164 00000 n -0000017251 00000 n -0000017336 00000 n -0000017423 00000 n -0000017478 00000 n -0000017565 00000 n -0000017621 00000 n -0000017708 00000 n -0000017758 00000 n -0000017806 00000 n -0000017893 00000 n -0000017967 00000 n -0000018054 00000 n -0000018122 00000 n -0000018209 00000 n -0000018263 00000 n -0000018350 00000 n -0000018418 00000 n -0000018505 00000 n -0000018579 00000 n -0000018666 00000 n -0000018714 00000 n -0000018801 00000 n -0000018858 00000 n -0000018945 00000 n -0000019027 00000 n -0000019082 00000 n -0000019169 00000 n -0000019250 00000 n -0000019337 00000 n -0000019371 00000 n -0000019423 00000 n -0000019510 00000 n -0000019536 00000 n -0000019592 00000 n -0000019679 00000 n -0000019748 00000 n -0000019835 00000 n -0000019886 00000 n -0000019973 00000 n -0000020060 00000 n -0000020147 00000 n -0000020203 00000 n -0000020290 00000 n -0000020339 00000 n -0000020426 00000 n -0000020492 00000 n -0000020544 00000 n -0000020631 00000 n -0000020686 00000 n -0000020773 00000 n -0000020820 00000 n -0000020907 00000 n -0000020954 00000 n -0000021041 00000 n -0000021091 00000 n -0000021131 00000 n -0000021218 00000 n -0000021261 00000 n -0000021348 00000 n -0000021392 00000 n -0000021479 00000 n -0000021522 00000 n -0000021609 00000 n -0000021652 00000 n -0000021739 00000 n -0000021780 00000 n -0000021867 00000 n -0000021914 00000 n -0000022001 00000 n -0000022075 00000 n -0000022122 00000 n -0000022208 00000 n -0000022234 00000 n -0000022286 00000 n -0000022372 00000 n -0000022398 00000 n -0000022452 00000 n -0000022539 00000 n -0000022565 00000 n -0000022644 00000 n -0000022731 00000 n -0000022813 00000 n -0000022899 00000 n -0000022974 00000 n -0000023061 00000 n -0000023134 00000 n -0000023221 00000 n -0000023271 00000 n -0000023349 00000 n -0000023436 00000 n -0000023462 00000 n -0000023525 00000 n -0000023612 00000 n -0000023675 00000 n -0000023762 00000 n -0000023816 00000 n -0000023903 00000 n -0000023945 00000 n -0000023991 00000 n -0000024078 00000 n -0000024104 00000 n -0000024145 00000 n -0000024232 00000 n -0000024258 00000 n -0000024363 00000 n -0000024469 00000 n -0000024575 00000 n -0000024681 00000 n -0000024787 00000 n -0000024893 00000 n -0000024999 00000 n -0000025105 00000 n -0000025211 00000 n -0000025317 00000 n -0000025423 00000 n -0000025529 00000 n -0000025635 00000 n -0000025741 00000 n -0000025847 00000 n -0000025953 00000 n -0000026059 00000 n -0000026165 00000 n -0000026271 00000 n -0000026376 00000 n -0000026482 00000 n -0000026588 00000 n -0000026694 00000 n -0000026800 00000 n -0000026906 00000 n -0000027012 00000 n -0000027118 00000 n -0000027224 00000 n -0000027330 00000 n -0000027436 00000 n -0000027542 00000 n -0000027648 00000 n -0000027754 00000 n -0000027860 00000 n -0000027966 00000 n -0000028071 00000 n -0000028177 00000 n -0000028283 00000 n -0000028389 00000 n -0000028495 00000 n -0000028601 00000 n -0000028707 00000 n -0000028813 00000 n -0000028918 00000 n -0000029022 00000 n -0000029126 00000 n -0000029512 00000 n -0000029618 00000 n -0000029724 00000 n -0000029830 00000 n -0000029936 00000 n -0000030042 00000 n -0000030148 00000 n -0000030254 00000 n -0000030360 00000 n -0000030465 00000 n -0000030571 00000 n -0000030677 00000 n -0000030783 00000 n -0000030888 00000 n -0000030994 00000 n -0000031100 00000 n -0000031205 00000 n -0000031311 00000 n -0000031417 00000 n +0000009679 00000 n +0000009781 00000 n +0000009884 00000 n +0000009987 00000 n +0000010090 00000 n +0000010193 00000 n +0000010296 00000 n +0000010399 00000 n +0000010502 00000 n +0000010605 00000 n +0000010708 00000 n +0000010810 00000 n +0000010913 00000 n +0000011016 00000 n +0000011119 00000 n +0000011222 00000 n +0000011325 00000 n +0000011428 00000 n +0000011531 00000 n +0000011634 00000 n +0000011737 00000 n +0000011840 00000 n +0000011942 00000 n +0000012044 00000 n +0000012372 00000 n +0000012475 00000 n +0000012579 00000 n +0000012682 00000 n +0000012786 00000 n +0000012890 00000 n +0000012994 00000 n +0000013098 00000 n +0000013202 00000 n +0000013306 00000 n +0000013410 00000 n +0000013514 00000 n +0000013618 00000 n +0000013721 00000 n +0000013825 00000 n +0000013929 00000 n +0000014032 00000 n +0000014136 00000 n +0000014240 00000 n +0000014344 00000 n +0000014447 00000 n +0000014551 00000 n +0000014655 00000 n +0000014759 00000 n +0000014863 00000 n +0000014967 00000 n +0000015071 00000 n +0000015175 00000 n +0000015279 00000 n +0000015383 00000 n +0000015487 00000 n +0000015591 00000 n +0000015695 00000 n +0000015799 00000 n +0000015903 00000 n +0000016007 00000 n +0000016111 00000 n +0000016214 00000 n +0000016318 00000 n +0000016422 00000 n +0000016526 00000 n +0000016629 00000 n +0000016731 00000 n +0000016833 00000 n +0000017194 00000 n +0000017297 00000 n +0000017401 00000 n +0000017505 00000 n +0000017609 00000 n +0000017713 00000 n +0000017817 00000 n +0000017921 00000 n +0000018025 00000 n +0000018129 00000 n +0000018232 00000 n +0000018336 00000 n +0000018440 00000 n +0000018544 00000 n +0000018648 00000 n +0000018752 00000 n +0000018856 00000 n +0000018960 00000 n +0000019064 00000 n +0000019167 00000 n +0000019271 00000 n +0000019375 00000 n +0000019479 00000 n +0000019583 00000 n +0000019687 00000 n +0000019791 00000 n +0000019895 00000 n +0000019999 00000 n +0000020103 00000 n +0000020207 00000 n +0000020311 00000 n +0000020415 00000 n +0000020518 00000 n +0000020622 00000 n +0000020726 00000 n +0000020830 00000 n +0000020934 00000 n +0000021038 00000 n +0000021142 00000 n +0000021246 00000 n +0000021350 00000 n +0000021454 00000 n +0000021558 00000 n +0000021661 00000 n +0000021763 00000 n +0000022132 00000 n +0000022235 00000 n +0000022339 00000 n +0000022443 00000 n +0000022547 00000 n +0000022651 00000 n +0000022755 00000 n +0000022859 00000 n +0000022963 00000 n +0000023067 00000 n +0000023171 00000 n +0000023275 00000 n +0000023379 00000 n +0000023483 00000 n +0000023587 00000 n +0000023691 00000 n +0000023795 00000 n +0000023899 00000 n +0000024003 00000 n +0000024107 00000 n +0000024211 00000 n +0000024315 00000 n +0000024418 00000 n +0000024522 00000 n +0000024626 00000 n +0000024730 00000 n +0000024834 00000 n +0000024938 00000 n +0000025042 00000 n +0000025145 00000 n +0000025249 00000 n +0000025353 00000 n +0000025457 00000 n +0000025561 00000 n +0000025664 00000 n +0000025768 00000 n +0000025872 00000 n +0000025976 00000 n +0000026080 00000 n +0000026184 00000 n +0000026288 00000 n +0000026625 00000 n +0000026678 00000 n +0000026765 00000 n +0000026819 00000 n +0000026905 00000 n +0000026972 00000 n +0000027058 00000 n +0000027161 00000 n +0000027265 00000 n +0000027369 00000 n +0000027473 00000 n +0000027577 00000 n +0000027681 00000 n +0000027785 00000 n +0000027889 00000 n +0000027993 00000 n +0000028097 00000 n +0000028201 00000 n +0000028305 00000 n +0000028409 00000 n +0000028513 00000 n +0000028617 00000 n +0000028721 00000 n +0000028825 00000 n +0000028929 00000 n +0000029033 00000 n +0000029136 00000 n +0000029240 00000 n +0000029344 00000 n +0000029448 00000 n +0000029552 00000 n +0000029656 00000 n +0000029760 00000 n +0000029864 00000 n +0000029968 00000 n +0000030072 00000 n +0000030176 00000 n +0000030280 00000 n +0000030383 00000 n +0000030485 00000 n +0000030587 00000 n +0000030900 00000 n +0000031004 00000 n +0000031107 00000 n +0000031211 00000 n +0000031315 00000 n +0000031419 00000 n 0000031523 00000 n -0000031629 00000 n -0000031735 00000 n -0000031841 00000 n -0000031947 00000 n -0000032053 00000 n -0000032159 00000 n -0000032264 00000 n -0000032370 00000 n -0000032476 00000 n -0000032582 00000 n -0000032688 00000 n -0000032794 00000 n -0000032900 00000 n -0000033006 00000 n -0000033112 00000 n -0000033218 00000 n -0000033324 00000 n -0000033430 00000 n -0000033536 00000 n -0000033642 00000 n -0000033747 00000 n -0000033852 00000 n -0000033956 00000 n -0000034060 00000 n -0000034422 00000 n -0000034528 00000 n -0000034634 00000 n -0000034740 00000 n -0000034846 00000 n -0000034952 00000 n -0000035058 00000 n -0000035163 00000 n -0000035269 00000 n -0000035375 00000 n -0000035480 00000 n -0000035586 00000 n -0000035692 00000 n -0000035798 00000 n -0000035903 00000 n -0000036009 00000 n -0000036115 00000 n -0000036221 00000 n -0000036327 00000 n -0000036433 00000 n -0000036539 00000 n -0000036645 00000 n -0000036751 00000 n -0000036857 00000 n -0000036963 00000 n -0000037069 00000 n -0000037175 00000 n -0000037281 00000 n -0000037387 00000 n -0000037493 00000 n -0000037599 00000 n -0000037704 00000 n -0000037810 00000 n -0000037916 00000 n -0000038022 00000 n -0000038128 00000 n -0000038234 00000 n -0000038340 00000 n -0000038446 00000 n -0000038552 00000 n -0000038659 00000 n -0000038766 00000 n -0000038872 00000 n -0000038977 00000 n -0000039082 00000 n -0000039452 00000 n -0000039559 00000 n -0000039665 00000 n -0000039772 00000 n -0000039879 00000 n -0000039986 00000 n -0000040093 00000 n -0000040200 00000 n -0000040307 00000 n -0000040414 00000 n -0000040521 00000 n -0000040627 00000 n -0000040734 00000 n -0000040841 00000 n -0000040948 00000 n -0000041055 00000 n -0000041162 00000 n -0000041269 00000 n -0000041376 00000 n -0000041483 00000 n -0000041590 00000 n -0000041697 00000 n -0000041804 00000 n -0000041911 00000 n -0000042017 00000 n -0000042124 00000 n -0000042231 00000 n -0000042338 00000 n -0000042445 00000 n -0000042552 00000 n -0000042659 00000 n -0000042766 00000 n -0000042873 00000 n -0000042980 00000 n -0000043087 00000 n -0000043194 00000 n -0000043301 00000 n -0000043407 00000 n -0000043514 00000 n -0000043621 00000 n -0000043728 00000 n -0000043835 00000 n -0000043941 00000 n -0000044046 00000 n -0000044151 00000 n -0000044521 00000 n -0000044628 00000 n -0000044735 00000 n -0000044842 00000 n -0000044949 00000 n -0000045056 00000 n -0000045163 00000 n -0000045270 00000 n -0000045377 00000 n -0000045484 00000 n -0000045591 00000 n -0000045698 00000 n -0000045805 00000 n -0000045912 00000 n -0000046018 00000 n -0000046125 00000 n -0000046232 00000 n -0000046339 00000 n -0000046446 00000 n -0000046553 00000 n -0000046659 00000 n -0000046766 00000 n -0000046873 00000 n -0000046980 00000 n -0000047087 00000 n -0000047193 00000 n -0000047300 00000 n -0000047407 00000 n -0000047514 00000 n -0000047621 00000 n -0000047728 00000 n -0000047835 00000 n -0000047940 00000 n -0000048214 00000 n -0000048248 00000 n -0000048282 00000 n -0000052100 00000 n -0000052149 00000 n -0000052198 00000 n -0000052247 00000 n -0000052296 00000 n -0000052345 00000 n -0000052394 00000 n -0000052443 00000 n -0000052492 00000 n -0000052541 00000 n -0000052590 00000 n -0000052639 00000 n -0000052688 00000 n -0000052737 00000 n -0000052786 00000 n -0000052835 00000 n -0000052884 00000 n -0000052933 00000 n -0000052982 00000 n -0000053031 00000 n -0000053080 00000 n -0000053129 00000 n -0000053178 00000 n -0000053227 00000 n -0000053276 00000 n -0000053325 00000 n -0000053374 00000 n -0000053423 00000 n -0000053472 00000 n -0000053521 00000 n -0000053570 00000 n -0000053619 00000 n -0000053668 00000 n -0000053717 00000 n -0000053766 00000 n -0000053815 00000 n -0000053864 00000 n -0000053913 00000 n -0000053962 00000 n -0000054011 00000 n -0000054060 00000 n -0000054109 00000 n -0000054158 00000 n -0000054207 00000 n -0000054256 00000 n -0000054305 00000 n -0000054354 00000 n -0000054403 00000 n -0000054452 00000 n -0000054501 00000 n -0000054550 00000 n -0000054599 00000 n -0000054648 00000 n -0000054697 00000 n -0000054746 00000 n -0000054795 00000 n -0000054844 00000 n -0000054893 00000 n -0000054942 00000 n -0000054991 00000 n -0000055040 00000 n -0000055089 00000 n -0000055138 00000 n -0000055187 00000 n -0000055236 00000 n -0000055285 00000 n -0000055335 00000 n -0000055384 00000 n -0000055433 00000 n -0000055483 00000 n +0000031627 00000 n +0000031731 00000 n +0000031835 00000 n +0000031939 00000 n +0000032043 00000 n +0000032147 00000 n +0000032251 00000 n +0000032355 00000 n +0000032459 00000 n +0000032563 00000 n +0000032667 00000 n +0000032771 00000 n +0000032875 00000 n +0000032979 00000 n +0000033082 00000 n +0000033186 00000 n +0000033290 00000 n +0000033394 00000 n +0000033497 00000 n +0000033601 00000 n +0000033705 00000 n +0000033808 00000 n +0000033912 00000 n +0000034016 00000 n +0000034120 00000 n +0000034224 00000 n +0000034328 00000 n +0000034432 00000 n +0000034536 00000 n +0000034640 00000 n +0000034744 00000 n +0000034847 00000 n +0000034951 00000 n +0000035055 00000 n +0000035159 00000 n +0000035263 00000 n +0000035367 00000 n +0000035471 00000 n +0000035575 00000 n +0000035679 00000 n +0000035783 00000 n +0000035887 00000 n +0000035990 00000 n +0000036092 00000 n +0000036194 00000 n +0000036619 00000 n +0000036722 00000 n +0000036826 00000 n +0000036930 00000 n +0000037034 00000 n +0000037138 00000 n +0000037242 00000 n +0000037346 00000 n +0000037450 00000 n +0000037554 00000 n +0000037658 00000 n +0000037761 00000 n +0000037865 00000 n +0000037969 00000 n +0000038072 00000 n +0000038176 00000 n +0000038280 00000 n +0000038384 00000 n +0000038487 00000 n +0000038591 00000 n +0000038695 00000 n +0000038799 00000 n +0000038903 00000 n +0000039007 00000 n +0000039111 00000 n +0000039215 00000 n +0000039319 00000 n +0000039423 00000 n +0000039527 00000 n +0000039631 00000 n +0000039735 00000 n +0000039839 00000 n +0000039943 00000 n +0000040047 00000 n +0000040151 00000 n +0000040254 00000 n +0000040358 00000 n +0000040462 00000 n +0000040566 00000 n +0000040670 00000 n +0000040774 00000 n +0000040878 00000 n +0000040982 00000 n +0000041086 00000 n +0000041190 00000 n +0000041294 00000 n +0000041398 00000 n +0000041502 00000 n +0000041606 00000 n +0000041709 00000 n +0000041810 00000 n +0000041912 00000 n +0000042337 00000 n +0000042441 00000 n +0000042545 00000 n +0000042649 00000 n +0000042753 00000 n +0000042857 00000 n +0000042961 00000 n +0000043065 00000 n +0000043168 00000 n +0000043272 00000 n +0000043376 00000 n +0000043480 00000 n +0000043584 00000 n +0000043688 00000 n +0000043792 00000 n +0000043896 00000 n +0000044000 00000 n +0000044104 00000 n +0000044208 00000 n +0000044312 00000 n +0000044416 00000 n +0000044519 00000 n +0000044623 00000 n +0000044727 00000 n +0000044831 00000 n +0000044935 00000 n +0000045039 00000 n +0000045143 00000 n +0000045247 00000 n +0000045351 00000 n +0000045455 00000 n +0000045559 00000 n +0000045663 00000 n +0000045767 00000 n +0000045870 00000 n +0000045974 00000 n +0000046078 00000 n +0000046182 00000 n +0000046286 00000 n +0000046390 00000 n +0000046494 00000 n +0000046598 00000 n +0000046702 00000 n +0000046806 00000 n +0000046910 00000 n +0000047014 00000 n +0000047118 00000 n +0000047222 00000 n +0000047326 00000 n +0000047429 00000 n +0000047531 00000 n +0000047633 00000 n +0000048058 00000 n +0000048162 00000 n +0000048266 00000 n +0000048370 00000 n +0000048473 00000 n +0000048577 00000 n +0000048681 00000 n +0000048785 00000 n +0000048889 00000 n +0000048993 00000 n +0000049096 00000 n +0000049200 00000 n +0000049304 00000 n +0000049408 00000 n +0000049512 00000 n +0000049615 00000 n +0000049719 00000 n +0000049823 00000 n +0000049927 00000 n +0000050031 00000 n +0000050135 00000 n +0000050239 00000 n +0000050424 00000 n +0000050477 00000 n +0000050564 00000 n +0000050589 00000 n +0000050643 00000 n +0000050730 00000 n +0000050784 00000 n +0000050871 00000 n +0000050904 00000 n +0000050952 00000 n +0000051039 00000 n +0000051086 00000 n +0000051172 00000 n +0000051219 00000 n +0000051305 00000 n +0000051346 00000 n +0000051391 00000 n +0000051478 00000 n +0000051523 00000 n +0000051609 00000 n +0000051642 00000 n +0000051697 00000 n +0000051783 00000 n +0000051808 00000 n +0000051861 00000 n +0000051948 00000 n +0000051998 00000 n +0000052085 00000 n +0000052118 00000 n +0000052237 00000 n +0000052323 00000 n +0000052366 00000 n +0000052453 00000 n +0000052496 00000 n +0000052583 00000 n +0000052624 00000 n +0000052670 00000 n +0000052757 00000 n +0000052782 00000 n +0000052828 00000 n +0000052915 00000 n +0000052961 00000 n +0000053046 00000 n +0000053090 00000 n +0000053177 00000 n +0000053228 00000 n +0000053315 00000 n +0000053364 00000 n +0000053451 00000 n +0000053499 00000 n +0000053585 00000 n +0000053650 00000 n +0000053713 00000 n +0000053800 00000 n +0000053858 00000 n +0000053945 00000 n +0000054039 00000 n +0000054125 00000 n +0000054227 00000 n +0000054276 00000 n +0000054379 00000 n +0000054422 00000 n +0000054508 00000 n +0000054556 00000 n +0000054643 00000 n +0000054684 00000 n +0000054771 00000 n +0000054815 00000 n +0000054902 00000 n +0000054946 00000 n +0000055032 00000 n +0000055097 00000 n +0000055143 00000 n +0000055230 00000 n +0000055255 00000 n +0000055304 00000 n +0000055391 00000 n +0000055445 00000 n 0000055532 00000 n -0000055581 00000 n -0000055631 00000 n -0000055681 00000 n -0000055731 00000 n -0000055781 00000 n -0000055831 00000 n -0000055881 00000 n -0000055931 00000 n -0000055981 00000 n -0000056030 00000 n -0000056080 00000 n -0000056130 00000 n -0000056180 00000 n -0000056229 00000 n -0000056279 00000 n -0000056329 00000 n -0000056379 00000 n -0000056429 00000 n -0000056479 00000 n -0000056529 00000 n -0000056579 00000 n -0000056629 00000 n -0000056679 00000 n -0000056729 00000 n -0000056778 00000 n -0000056827 00000 n -0000056877 00000 n -0000056927 00000 n -0000056977 00000 n -0000057027 00000 n -0000057077 00000 n -0000057126 00000 n -0000057176 00000 n -0000057226 00000 n -0000057276 00000 n -0000057325 00000 n -0000057375 00000 n -0000057425 00000 n -0000057475 00000 n -0000057525 00000 n -0000057575 00000 n -0000057625 00000 n -0000057675 00000 n -0000057725 00000 n -0000057775 00000 n -0000057824 00000 n -0000057874 00000 n -0000057924 00000 n -0000057974 00000 n -0000058024 00000 n -0000058074 00000 n -0000058123 00000 n -0000058173 00000 n -0000058223 00000 n -0000058273 00000 n -0000058323 00000 n -0000058373 00000 n -0000058423 00000 n -0000058473 00000 n -0000058523 00000 n -0000058573 00000 n -0000058622 00000 n -0000058672 00000 n -0000058722 00000 n -0000058772 00000 n -0000058822 00000 n -0000058872 00000 n -0000058922 00000 n -0000058972 00000 n -0000059021 00000 n -0000059071 00000 n -0000059121 00000 n -0000059171 00000 n +0000055583 00000 n +0000055670 00000 n +0000055721 00000 n +0000055807 00000 n +0000055861 00000 n +0000055947 00000 n +0000056004 00000 n +0000056054 00000 n +0000056141 00000 n +0000056191 00000 n +0000056277 00000 n +0000056341 00000 n +0000056428 00000 n +0000056469 00000 n +0000056533 00000 n +0000056620 00000 n +0000056645 00000 n +0000056687 00000 n +0000056773 00000 n +0000056824 00000 n +0000056911 00000 n +0000056958 00000 n +0000057045 00000 n +0000057086 00000 n +0000057135 00000 n +0000057222 00000 n +0000057270 00000 n +0000057357 00000 n +0000057399 00000 n +0000057485 00000 n +0000057526 00000 n +0000057569 00000 n +0000057656 00000 n +0000057706 00000 n +0000057793 00000 n +0000057841 00000 n +0000057928 00000 n +0000057982 00000 n +0000058067 00000 n +0000058116 00000 n +0000058161 00000 n +0000058248 00000 n +0000058305 00000 n +0000058392 00000 n +0000058488 00000 n +0000058574 00000 n +0000058615 00000 n +0000058677 00000 n +0000058764 00000 n +0000058789 00000 n +0000058838 00000 n +0000058925 00000 n +0000058950 00000 n +0000058998 00000 n +0000059085 00000 n +0000059135 00000 n 0000059221 00000 n -0000059270 00000 n -0000059320 00000 n -0000059370 00000 n -0000059420 00000 n -0000059470 00000 n -0000059520 00000 n -0000059570 00000 n -0000059620 00000 n -0000059670 00000 n -0000059720 00000 n -0000059770 00000 n -0000059820 00000 n -0000059870 00000 n -0000059920 00000 n -0000059970 00000 n -0000060020 00000 n -0000060070 00000 n -0000060119 00000 n -0000060168 00000 n -0000060217 00000 n -0000060266 00000 n -0000060315 00000 n -0000060364 00000 n -0000060413 00000 n -0000060462 00000 n -0000060511 00000 n -0000060560 00000 n -0000060609 00000 n -0000060658 00000 n -0000060707 00000 n -0000060756 00000 n -0000060805 00000 n -0000060854 00000 n -0000060903 00000 n -0000060952 00000 n +0000059265 00000 n +0000059351 00000 n +0000059395 00000 n +0000059481 00000 n +0000059531 00000 n +0000059617 00000 n +0000059667 00000 n +0000059752 00000 n +0000059801 00000 n +0000059885 00000 n +0000059932 00000 n +0000060016 00000 n +0000060097 00000 n +0000060145 00000 n +0000060232 00000 n +0000060280 00000 n +0000060367 00000 n +0000060417 00000 n +0000060504 00000 n +0000060552 00000 n +0000060639 00000 n +0000060688 00000 n +0000060736 00000 n +0000060823 00000 n +0000060871 00000 n +0000060956 00000 n 0000061001 00000 n -0000061050 00000 n -0000061099 00000 n -0000061148 00000 n -0000061197 00000 n -0000061246 00000 n -0000061295 00000 n -0000061344 00000 n -0000061393 00000 n -0000061442 00000 n -0000061491 00000 n -0000061540 00000 n -0000061589 00000 n -0000061638 00000 n -0000061687 00000 n -0000061736 00000 n -0000061785 00000 n -0000061834 00000 n -0000061883 00000 n -0000061932 00000 n -0000061981 00000 n -0000062030 00000 n -0000062079 00000 n -0000062128 00000 n -0000062177 00000 n -0000062226 00000 n -0000062275 00000 n -0000062324 00000 n -0000062373 00000 n -0000062422 00000 n -0000062471 00000 n -0000062520 00000 n -0000062569 00000 n -0000062618 00000 n -0000062667 00000 n -0000062717 00000 n -0000062767 00000 n -0000062816 00000 n -0000062865 00000 n -0000062915 00000 n -0000062964 00000 n -0000063013 00000 n -0000063062 00000 n -0000063111 00000 n -0000063161 00000 n -0000063210 00000 n -0000063259 00000 n -0000063308 00000 n -0000063358 00000 n -0000063408 00000 n -0000063457 00000 n -0000063506 00000 n -0000063555 00000 n -0000063605 00000 n -0000063654 00000 n -0000063703 00000 n -0000064784 00000 n -0000064940 00000 n -0000065663 00000 n -0000065684 00000 n -0000065858 00000 n -0000067020 00000 n -0000067042 00000 n -0000067193 00000 n -0000068699 00000 n -0000068721 00000 n -0000068881 00000 n -0000070317 00000 n -0000070339 00000 n -0000070517 00000 n -0000071777 00000 n -0000071799 00000 n -0000071941 00000 n -0000073517 00000 n -0000073539 00000 n -0000073672 00000 n -0000075466 00000 n -0000075488 00000 n -0000075630 00000 n -0000077099 00000 n -0000077121 00000 n -0000077263 00000 n -0000078935 00000 n -0000078957 00000 n -0000079099 00000 n -0000080639 00000 n -0000080661 00000 n -0000080803 00000 n -0000082401 00000 n -0000082423 00000 n -0000082565 00000 n -0000084245 00000 n -0000084267 00000 n -0000084414 00000 n -0000084930 00000 n -0000084951 00000 n -0000085112 00000 n -0000086395 00000 n -0000086417 00000 n -0000086578 00000 n -0000088333 00000 n -0000088355 00000 n -0000088515 00000 n -0000090160 00000 n -0000090182 00000 n -0000090324 00000 n -0000092387 00000 n -0000092409 00000 n -0000092551 00000 n -0000094363 00000 n -0000094385 00000 n -0000094527 00000 n -0000096251 00000 n -0000096273 00000 n -0000096424 00000 n -0000098191 00000 n -0000098213 00000 n -0000098388 00000 n -0000100481 00000 n -0000100503 00000 n -0000100663 00000 n -0000102259 00000 n -0000102281 00000 n -0000102456 00000 n -0000103950 00000 n -0000103972 00000 n -0000104124 00000 n -0000104931 00000 n -0000104952 00000 n -0000105103 00000 n -0000106741 00000 n -0000106763 00000 n -0000106928 00000 n -0000108700 00000 n -0000108722 00000 n -0000108887 00000 n -0000109780 00000 n -0000109801 00000 n -0000109975 00000 n -0000111580 00000 n -0000111602 00000 n -0000111745 00000 n -0000112503 00000 n -0000112524 00000 n -0000112707 00000 n -0000114575 00000 n -0000114597 00000 n -0000114766 00000 n -0000116619 00000 n -0000116641 00000 n -0000116801 00000 n -0000118485 00000 n -0000118507 00000 n -0000118680 00000 n -0000120408 00000 n -0000120430 00000 n -0000120581 00000 n -0000121505 00000 n -0000121526 00000 n -0000121710 00000 n -0000123534 00000 n -0000123556 00000 n -0000123730 00000 n -0000125902 00000 n -0000125924 00000 n -0000126117 00000 n -0000128044 00000 n -0000128066 00000 n -0000128251 00000 n -0000130161 00000 n -0000130183 00000 n -0000130359 00000 n -0000132161 00000 n -0000132183 00000 n -0000132353 00000 n -0000133950 00000 n -0000133972 00000 n -0000134157 00000 n -0000135633 00000 n -0000135655 00000 n -0000135797 00000 n -0000137312 00000 n -0000137334 00000 n -0000137476 00000 n -0000138868 00000 n -0000138890 00000 n -0000139032 00000 n -0000140686 00000 n -0000140708 00000 n -0000140850 00000 n -0000142427 00000 n -0000142449 00000 n -0000142582 00000 n -0000142929 00000 n -0000142950 00000 n -0000143116 00000 n -0000144984 00000 n -0000145006 00000 n -0000145129 00000 n -0000146353 00000 n -0000146375 00000 n -0000146568 00000 n -0000148139 00000 n -0000148161 00000 n -0000148336 00000 n -0000150118 00000 n -0000150140 00000 n -0000150296 00000 n -0000151857 00000 n -0000151879 00000 n -0000152031 00000 n -0000153772 00000 n -0000153794 00000 n -0000153936 00000 n -0000155698 00000 n -0000155720 00000 n -0000155871 00000 n -0000157762 00000 n -0000157784 00000 n -0000157941 00000 n -0000159778 00000 n -0000159800 00000 n -0000159994 00000 n -0000162017 00000 n -0000162039 00000 n -0000162214 00000 n -0000163688 00000 n -0000163710 00000 n -0000163885 00000 n -0000165348 00000 n -0000165370 00000 n -0000165539 00000 n -0000166852 00000 n -0000166874 00000 n -0000167016 00000 n -0000168052 00000 n -0000168073 00000 n -0000168224 00000 n -0000169435 00000 n -0000169457 00000 n -0000169608 00000 n -0000171084 00000 n -0000171106 00000 n -0000171248 00000 n -0000172297 00000 n -0000172318 00000 n -0000172470 00000 n -0000173781 00000 n -0000173803 00000 n -0000173988 00000 n -0000175841 00000 n -0000175863 00000 n -0000176029 00000 n -0000177678 00000 n -0000177700 00000 n -0000177885 00000 n -0000179825 00000 n -0000179847 00000 n -0000180031 00000 n -0000181789 00000 n -0000181811 00000 n -0000181982 00000 n -0000183590 00000 n -0000183613 00000 n -0000183784 00000 n -0000185659 00000 n -0000185682 00000 n -0000185869 00000 n -0000187735 00000 n -0000187758 00000 n -0000187936 00000 n -0000190028 00000 n -0000190051 00000 n -0000190228 00000 n -0000192172 00000 n -0000192195 00000 n -0000192373 00000 n -0000194691 00000 n -0000194714 00000 n -0000194868 00000 n -0000196852 00000 n -0000196875 00000 n -0000197037 00000 n -0000198907 00000 n -0000198930 00000 n -0000199083 00000 n -0000200837 00000 n -0000200860 00000 n -0000200994 00000 n -0000202869 00000 n -0000202892 00000 n -0000203036 00000 n -0000205111 00000 n -0000205134 00000 n -0000205287 00000 n -0000207083 00000 n -0000207106 00000 n -0000207240 00000 n -0000209036 00000 n -0000209059 00000 n -0000209184 00000 n -0000209640 00000 n -0000209662 00000 n -0000209821 00000 n -0000211457 00000 n -0000211480 00000 n -0000211634 00000 n -0000213295 00000 n -0000213318 00000 n -0000213462 00000 n -0000214348 00000 n -0000214370 00000 n -0000214557 00000 n -0000216715 00000 n -0000216738 00000 n -0000216916 00000 n -0000219103 00000 n -0000219126 00000 n -0000219279 00000 n -0000220382 00000 n -0000220405 00000 n -0000220583 00000 n -0000222083 00000 n -0000222106 00000 n -0000222293 00000 n -0000224145 00000 n -0000224168 00000 n -0000224355 00000 n -0000226264 00000 n -0000226287 00000 n -0000226446 00000 n -0000227379 00000 n -0000227401 00000 n -0000227536 00000 n -0000229072 00000 n -0000229095 00000 n -0000229230 00000 n -0000231029 00000 n -0000231052 00000 n -0000231186 00000 n -0000232882 00000 n -0000232905 00000 n -0000233039 00000 n -0000234377 00000 n -0000234400 00000 n -0000234553 00000 n -0000236145 00000 n -0000236168 00000 n -0000236321 00000 n -0000237947 00000 n -0000237970 00000 n -0000238123 00000 n -0000239419 00000 n -0000239442 00000 n -0000239577 00000 n -0000241225 00000 n -0000241248 00000 n -0000241383 00000 n -0000242361 00000 n -0000242383 00000 n -0000242527 00000 n -0000244136 00000 n -0000244159 00000 n -0000244303 00000 n -0000245787 00000 n -0000245810 00000 n -0000245945 00000 n -0000247608 00000 n -0000247631 00000 n -0000247766 00000 n -0000249027 00000 n -0000249050 00000 n -0000249185 00000 n -0000250699 00000 n -0000250722 00000 n -0000250857 00000 n -0000252634 00000 n -0000252657 00000 n -0000252782 00000 n -0000253160 00000 n -0000253182 00000 n -0000253351 00000 n -0000255023 00000 n -0000255046 00000 n -0000255205 00000 n -0000256396 00000 n -0000256419 00000 n -0000256578 00000 n -0000258133 00000 n -0000258156 00000 n -0000258308 00000 n -0000259043 00000 n -0000259065 00000 n -0000259233 00000 n -0000260973 00000 n -0000260996 00000 n -0000261149 00000 n -0000262864 00000 n -0000262887 00000 n -0000263046 00000 n -0000263409 00000 n -0000263431 00000 n -0000263590 00000 n -0000268048 00000 n -0000268071 00000 n -0000268230 00000 n -0000273247 00000 n -0000273270 00000 n -0000273429 00000 n -0000278013 00000 n -0000278036 00000 n -0000278195 00000 n -0000283045 00000 n -0000283068 00000 n -0000283227 00000 n -0000286418 00000 n -0000286441 00000 n -0000286500 00000 n -0000286609 00000 n -0000286793 00000 n -0000286915 00000 n -0000287054 00000 n -0000287194 00000 n -0000287346 00000 n -0000287500 00000 n -0000287644 00000 n -0000287789 00000 n -0000287946 00000 n -0000288112 00000 n -0000288265 00000 n -0000288457 00000 n -0000288594 00000 n -0000288726 00000 n -0000288848 00000 n -0000288988 00000 n -0000289134 00000 n -0000289254 00000 n -0000289370 00000 n -0000289553 00000 n -0000289661 00000 n -0000289782 00000 n -0000289897 00000 n -0000290015 00000 n -0000290133 00000 n -0000290251 00000 n -0000290369 00000 n -0000290487 00000 n -0000290605 00000 n -0000290723 00000 n -0000290841 00000 n -0000290959 00000 n -0000291079 00000 n -0000291199 00000 n -0000291317 00000 n -0000291514 00000 n -0000291616 00000 n -0000291768 00000 n -0000291890 00000 n -0000292018 00000 n -0000292144 00000 n -0000292274 00000 n -0000292436 00000 n -0000292570 00000 n -0000292698 00000 n -0000292820 00000 n -0000292942 00000 n -0000293065 00000 n -0000293259 00000 n -0000293449 00000 n -0000293606 00000 n -0000293773 00000 n -0000293928 00000 n -0000294035 00000 n -0000294258 00000 n -0000294367 00000 n -0000294503 00000 n -0000294628 00000 n -0000294839 00000 n -0000294947 00000 n -0000295050 00000 n -0000295260 00000 n -0000295424 00000 n -0000295576 00000 n -0000295708 00000 n -0000295855 00000 n -0000295983 00000 n -0000296116 00000 n -0000296265 00000 n -0000296434 00000 n -0000296589 00000 n -0000296775 00000 n -0000296883 00000 n -0000297006 00000 n -0000297135 00000 n -0000297284 00000 n -0000297430 00000 n -0000297584 00000 n -0000297719 00000 n -0000297849 00000 n -0000297978 00000 n -0000298122 00000 n -0000298253 00000 n -0000298388 00000 n -0000298522 00000 n -0000298703 00000 n -0000298811 00000 n -0000298947 00000 n -0000299081 00000 n -0000299228 00000 n -0000299357 00000 n -0000299491 00000 n -0000299623 00000 n -0000299750 00000 n -0000299860 00000 n -0000300029 00000 n -0000300137 00000 n -0000300277 00000 n -0000300462 00000 n -0000300594 00000 n -0000300735 00000 n -0000300874 00000 n -0000301086 00000 n -0000301191 00000 n -0000301314 00000 n -0000301446 00000 n -0000301570 00000 n -0000301698 00000 n -0000301843 00000 n -0000301975 00000 n -0000302120 00000 n -0000302261 00000 n -0000302388 00000 n -0000302529 00000 n -0000302654 00000 n -0000302779 00000 n -0000302910 00000 n -0000303032 00000 n -0000303139 00000 n -0000303352 00000 n -0000303469 00000 n -0000303590 00000 n -0000303740 00000 n -0000303916 00000 n -0000304070 00000 n -0000304230 00000 n -0000304375 00000 n -0000304512 00000 n -0000304652 00000 n -0000304790 00000 n -0000304934 00000 n -0000305090 00000 n -0000305264 00000 n -0000305416 00000 n -0000305648 00000 n -0000305766 00000 n -0000305888 00000 n -0000306050 00000 n -0000306214 00000 n -0000306351 00000 n -0000306503 00000 n -0000306643 00000 n -0000306781 00000 n -0000307007 00000 n -0000307112 00000 n -0000307236 00000 n -0000307370 00000 n -0000307534 00000 n -0000307673 00000 n -0000307809 00000 n -0000307940 00000 n -0000308082 00000 n -0000308219 00000 n -0000308373 00000 n -0000308524 00000 n -0000308631 00000 n -0000308814 00000 n -0000308932 00000 n -0000309069 00000 n -0000309199 00000 n -0000309334 00000 n -0000309485 00000 n -0000309621 00000 n -0000309767 00000 n -0000309910 00000 n -0000310052 00000 n -0000310194 00000 n -0000310337 00000 n -0000310455 00000 n -0000310636 00000 n -0000310745 00000 n -0000310864 00000 n -0000310986 00000 n -0000311114 00000 n -0000311266 00000 n -0000311392 00000 n -0000311513 00000 n -0000311633 00000 n -0000311752 00000 n -0000311875 00000 n -0000311996 00000 n -0000312118 00000 n -0000312239 00000 n -0000312361 00000 n -0000312489 00000 n -0000312616 00000 n -0000312741 00000 n -0000312865 00000 n -0000312991 00000 n -0000313100 00000 n -0000313272 00000 n -0000313374 00000 n -0000313564 00000 n -0000313759 00000 n -0000313947 00000 n -0000314110 00000 n -0000314304 00000 n -0000314414 00000 n -0000314549 00000 n -0000314680 00000 n -0000314794 00000 n -0000314964 00000 n -0000315074 00000 n -0000315198 00000 n -0000315322 00000 n -0000315449 00000 n -0000315591 00000 n -0000315696 00000 n -0000315793 00000 n +0000061087 00000 n +0000061130 00000 n +0000061216 00000 n +0000061257 00000 n +0000061343 00000 n +0000061392 00000 n +0000061478 00000 n +0000061524 00000 n +0000061610 00000 n +0000061655 00000 n +0000061741 00000 n +0000061793 00000 n +0000061879 00000 n +0000061929 00000 n +0000062015 00000 n +0000062061 00000 n +0000062147 00000 n +0000062190 00000 n +0000062276 00000 n +0000062320 00000 n +0000062406 00000 n +0000062449 00000 n +0000062535 00000 n +0000062580 00000 n +0000062666 00000 n +0000062704 00000 n +0000062790 00000 n +0000062832 00000 n +0000062918 00000 n +0000062961 00000 n +0000063047 00000 n +0000063085 00000 n +0000063171 00000 n +0000063213 00000 n +0000063299 00000 n +0000063343 00000 n +0000063429 00000 n +0000063476 00000 n +0000063562 00000 n +0000063610 00000 n +0000063695 00000 n +0000063896 00000 n +0000063946 00000 n +0000064033 00000 n +0000064083 00000 n +0000064169 00000 n +0000064202 00000 n +0000064251 00000 n +0000064337 00000 n +0000064384 00000 n +0000064471 00000 n +0000064504 00000 n +0000064619 00000 n +0000064706 00000 n +0000064731 00000 n +0000064813 00000 n +0000064900 00000 n +0000064985 00000 n +0000065072 00000 n +0000065105 00000 n +0000065160 00000 n +0000065247 00000 n +0000065303 00000 n +0000065390 00000 n +0000065423 00000 n +0000065471 00000 n +0000065558 00000 n +0000065632 00000 n +0000065719 00000 n +0000065787 00000 n +0000065874 00000 n +0000065928 00000 n +0000066015 00000 n +0000066083 00000 n +0000066170 00000 n +0000066244 00000 n +0000066331 00000 n +0000066379 00000 n +0000066466 00000 n +0000066523 00000 n +0000066610 00000 n +0000066691 00000 n +0000066746 00000 n +0000066833 00000 n +0000066914 00000 n +0000067001 00000 n +0000067034 00000 n +0000067087 00000 n +0000067174 00000 n +0000067199 00000 n +0000067255 00000 n +0000067342 00000 n +0000067411 00000 n +0000067498 00000 n +0000067549 00000 n +0000067636 00000 n +0000067723 00000 n +0000067810 00000 n +0000067866 00000 n +0000067953 00000 n +0000068003 00000 n +0000068090 00000 n +0000068155 00000 n +0000068207 00000 n +0000068294 00000 n +0000068350 00000 n +0000068437 00000 n +0000068485 00000 n +0000068572 00000 n +0000068620 00000 n +0000068707 00000 n +0000068756 00000 n +0000068797 00000 n +0000068882 00000 n +0000068907 00000 n +0000068951 00000 n +0000069038 00000 n +0000069083 00000 n +0000069170 00000 n +0000069214 00000 n +0000069301 00000 n +0000069345 00000 n +0000069432 00000 n +0000069474 00000 n +0000069561 00000 n +0000069609 00000 n +0000069696 00000 n +0000069761 00000 n +0000069809 00000 n +0000069895 00000 n +0000069920 00000 n +0000069973 00000 n +0000070059 00000 n +0000070084 00000 n +0000070138 00000 n +0000070225 00000 n +0000070250 00000 n +0000070329 00000 n +0000070416 00000 n +0000070498 00000 n +0000070584 00000 n +0000070659 00000 n +0000070746 00000 n +0000070819 00000 n +0000070906 00000 n +0000070955 00000 n +0000071033 00000 n +0000071120 00000 n +0000071145 00000 n +0000071208 00000 n +0000071295 00000 n +0000071358 00000 n +0000071445 00000 n +0000071499 00000 n +0000071586 00000 n +0000071627 00000 n +0000071674 00000 n +0000071761 00000 n +0000071786 00000 n +0000071820 00000 n +0000071854 00000 n +0000075683 00000 n +0000075727 00000 n +0000075771 00000 n +0000075815 00000 n +0000075859 00000 n +0000075903 00000 n +0000075947 00000 n +0000075991 00000 n +0000076035 00000 n +0000076079 00000 n +0000076123 00000 n +0000076167 00000 n +0000076211 00000 n +0000076255 00000 n +0000076299 00000 n +0000076343 00000 n +0000076387 00000 n +0000076431 00000 n +0000076475 00000 n +0000076519 00000 n +0000076563 00000 n +0000076607 00000 n +0000076651 00000 n +0000076695 00000 n +0000076739 00000 n +0000076783 00000 n +0000076827 00000 n +0000076871 00000 n +0000076915 00000 n +0000076959 00000 n +0000077003 00000 n +0000077047 00000 n +0000077091 00000 n +0000077135 00000 n +0000077179 00000 n +0000077223 00000 n +0000077267 00000 n +0000077311 00000 n +0000077355 00000 n +0000077399 00000 n +0000077443 00000 n +0000077487 00000 n +0000077531 00000 n +0000077575 00000 n +0000077619 00000 n +0000077663 00000 n +0000077707 00000 n +0000077751 00000 n +0000077795 00000 n +0000077839 00000 n +0000077883 00000 n +0000077927 00000 n +0000077971 00000 n +0000078015 00000 n +0000078059 00000 n +0000078103 00000 n +0000078147 00000 n +0000078191 00000 n +0000078235 00000 n +0000078279 00000 n +0000078323 00000 n +0000078367 00000 n +0000078411 00000 n +0000078455 00000 n +0000078499 00000 n +0000078543 00000 n +0000078587 00000 n +0000078631 00000 n +0000078675 00000 n +0000078719 00000 n +0000078763 00000 n +0000078807 00000 n +0000078851 00000 n +0000078895 00000 n +0000078939 00000 n +0000078983 00000 n +0000079027 00000 n +0000079071 00000 n +0000079115 00000 n +0000079159 00000 n +0000079203 00000 n +0000079247 00000 n +0000079291 00000 n +0000079335 00000 n +0000079379 00000 n +0000079423 00000 n +0000079467 00000 n +0000079511 00000 n +0000079555 00000 n +0000079599 00000 n +0000079643 00000 n +0000079687 00000 n +0000079731 00000 n +0000079775 00000 n +0000079819 00000 n +0000079863 00000 n +0000079907 00000 n +0000079951 00000 n +0000079995 00000 n +0000080039 00000 n +0000080083 00000 n +0000080127 00000 n +0000080171 00000 n +0000080215 00000 n +0000080259 00000 n +0000080303 00000 n +0000080347 00000 n +0000080391 00000 n +0000080435 00000 n +0000080479 00000 n +0000080523 00000 n +0000080567 00000 n +0000080611 00000 n +0000080655 00000 n +0000080699 00000 n +0000080743 00000 n +0000080787 00000 n +0000080831 00000 n +0000080875 00000 n +0000080919 00000 n +0000080963 00000 n +0000081007 00000 n +0000081051 00000 n +0000081095 00000 n +0000081139 00000 n +0000081183 00000 n +0000081227 00000 n +0000081271 00000 n +0000081315 00000 n +0000081359 00000 n +0000081403 00000 n +0000081447 00000 n +0000081491 00000 n +0000081535 00000 n +0000081579 00000 n +0000081623 00000 n +0000081667 00000 n +0000081711 00000 n +0000081755 00000 n +0000081799 00000 n +0000081843 00000 n +0000081887 00000 n +0000081931 00000 n +0000081975 00000 n +0000082019 00000 n +0000082063 00000 n +0000082107 00000 n +0000082151 00000 n +0000082195 00000 n +0000082239 00000 n +0000082283 00000 n +0000082327 00000 n +0000082371 00000 n +0000082415 00000 n +0000082459 00000 n +0000082503 00000 n +0000082547 00000 n +0000082591 00000 n +0000082635 00000 n +0000082679 00000 n +0000082723 00000 n +0000082767 00000 n +0000082811 00000 n +0000082855 00000 n +0000082899 00000 n +0000082943 00000 n +0000082987 00000 n +0000083031 00000 n +0000083075 00000 n +0000083119 00000 n +0000083163 00000 n +0000083207 00000 n +0000083251 00000 n +0000083295 00000 n +0000083339 00000 n +0000083383 00000 n +0000083427 00000 n +0000083471 00000 n +0000083515 00000 n +0000083559 00000 n +0000083603 00000 n +0000083647 00000 n +0000083691 00000 n +0000083735 00000 n +0000083779 00000 n +0000083823 00000 n +0000083867 00000 n +0000083911 00000 n +0000083955 00000 n +0000083999 00000 n +0000084043 00000 n +0000084087 00000 n +0000084131 00000 n +0000084175 00000 n +0000084219 00000 n +0000084263 00000 n +0000084307 00000 n +0000084351 00000 n +0000084395 00000 n +0000084439 00000 n +0000084483 00000 n +0000084527 00000 n +0000084571 00000 n +0000084615 00000 n +0000084659 00000 n +0000084703 00000 n +0000084747 00000 n +0000084791 00000 n +0000084835 00000 n +0000084879 00000 n +0000084923 00000 n +0000084967 00000 n +0000085011 00000 n +0000085055 00000 n +0000085099 00000 n +0000085143 00000 n +0000085187 00000 n +0000085231 00000 n +0000085275 00000 n +0000085319 00000 n +0000085363 00000 n +0000085407 00000 n +0000085451 00000 n +0000085495 00000 n +0000085540 00000 n +0000085585 00000 n +0000085630 00000 n +0000085675 00000 n +0000085720 00000 n +0000085765 00000 n +0000085810 00000 n +0000085855 00000 n +0000085900 00000 n +0000085945 00000 n +0000085990 00000 n +0000087128 00000 n +0000087289 00000 n +0000087458 00000 n +0000087651 00000 n +0000091401 00000 n +0000091595 00000 n +0000096208 00000 n +0000096402 00000 n +0000100424 00000 n +0000100618 00000 n +0000105295 00000 n +0000105489 00000 n +0000108864 00000 n +0000109025 00000 n +0000109259 00000 n +0000109463 00000 n +0000111991 00000 n +0000112175 00000 n +0000115562 00000 n +0000115737 00000 n +0000118870 00000 n +0000119045 00000 n +0000121911 00000 n +0000122086 00000 n +0000123648 00000 n +0000123860 00000 n +0000125016 00000 n +0000125204 00000 n +0000126725 00000 n +0000126922 00000 n +0000128358 00000 n +0000128573 00000 n +0000129938 00000 n +0000130117 00000 n +0000131659 00000 n +0000131829 00000 n +0000133376 00000 n +0000133555 00000 n +0000134989 00000 n +0000135168 00000 n +0000136881 00000 n +0000137060 00000 n +0000138608 00000 n +0000138787 00000 n +0000140477 00000 n +0000140671 00000 n +0000142391 00000 n +0000142589 00000 n +0000143950 00000 n +0000144148 00000 n +0000145832 00000 n +0000146020 00000 n +0000147693 00000 n +0000147872 00000 n +0000149972 00000 n +0000150151 00000 n +0000151924 00000 n +0000152103 00000 n +0000153783 00000 n +0000153971 00000 n +0000155826 00000 n +0000156038 00000 n +0000158096 00000 n +0000158309 00000 n +0000159876 00000 n +0000160065 00000 n +0000161340 00000 n +0000161528 00000 n +0000163054 00000 n +0000163257 00000 n +0000164983 00000 n +0000165186 00000 n +0000166036 00000 n +0000166248 00000 n +0000167758 00000 n +0000167938 00000 n +0000168696 00000 n +0000168917 00000 n +0000170715 00000 n +0000170921 00000 n +0000172803 00000 n +0000173000 00000 n +0000174586 00000 n +0000174797 00000 n +0000176366 00000 n +0000176554 00000 n +0000177456 00000 n +0000177687 00000 n +0000179554 00000 n +0000179766 00000 n +0000181714 00000 n +0000181945 00000 n +0000183955 00000 n +0000184177 00000 n +0000185990 00000 n +0000186212 00000 n +0000187950 00000 n +0000188148 00000 n +0000190047 00000 n +0000190259 00000 n +0000191158 00000 n +0000191337 00000 n +0000192800 00000 n +0000192979 00000 n +0000194295 00000 n +0000194474 00000 n +0000196096 00000 n +0000196275 00000 n +0000197772 00000 n +0000197942 00000 n +0000198286 00000 n +0000198489 00000 n +0000200392 00000 n +0000200552 00000 n +0000201675 00000 n +0000201905 00000 n +0000203429 00000 n +0000203641 00000 n +0000205430 00000 n +0000205623 00000 n +0000207029 00000 n +0000207218 00000 n +0000208909 00000 n +0000209088 00000 n +0000210834 00000 n +0000211022 00000 n +0000212929 00000 n +0000213142 00000 n +0000215027 00000 n +0000215267 00000 n +0000217360 00000 n +0000217572 00000 n +0000219173 00000 n +0000219379 00000 n +0000220540 00000 n +0000220728 00000 n +0000221926 00000 n +0000222105 00000 n +0000223111 00000 n +0000223299 00000 n +0000224926 00000 n +0000225114 00000 n +0000226383 00000 n +0000226572 00000 n +0000227880 00000 n +0000228050 00000 n +0000228522 00000 n +0000228735 00000 n +0000230550 00000 n +0000230763 00000 n +0000232341 00000 n +0000232563 00000 n +0000234382 00000 n +0000234622 00000 n +0000236345 00000 n +0000236552 00000 n +0000238397 00000 n +0000238628 00000 n +0000240518 00000 n +0000240740 00000 n +0000242686 00000 n +0000242898 00000 n +0000244947 00000 n +0000245150 00000 n +0000247484 00000 n +0000247706 00000 n +0000249950 00000 n +0000250157 00000 n +0000252137 00000 n +0000252316 00000 n +0000253874 00000 n +0000254044 00000 n +0000256044 00000 n +0000256232 00000 n +0000258319 00000 n +0000258507 00000 n +0000260317 00000 n +0000260495 00000 n +0000262345 00000 n +0000262505 00000 n +0000263289 00000 n +0000263483 00000 n +0000265084 00000 n +0000265273 00000 n +0000266934 00000 n +0000267104 00000 n +0000267926 00000 n +0000268148 00000 n +0000270284 00000 n +0000270497 00000 n +0000272551 00000 n +0000272773 00000 n +0000273995 00000 n +0000274208 00000 n +0000275805 00000 n +0000276027 00000 n +0000277850 00000 n +0000278072 00000 n +0000279804 00000 n +0000279998 00000 n +0000280725 00000 n +0000280895 00000 n +0000282572 00000 n +0000282751 00000 n +0000284566 00000 n +0000284735 00000 n +0000286578 00000 n +0000286747 00000 n +0000287736 00000 n +0000287915 00000 n +0000289563 00000 n +0000289751 00000 n +0000291242 00000 n +0000291430 00000 n +0000292855 00000 n +0000293025 00000 n +0000294693 00000 n +0000294863 00000 n +0000295420 00000 n +0000295599 00000 n +0000297205 00000 n +0000297384 00000 n +0000299054 00000 n +0000299224 00000 n +0000300773 00000 n +0000300943 00000 n +0000302243 00000 n +0000302413 00000 n +0000304039 00000 n +0000304209 00000 n +0000305796 00000 n +0000306000 00000 n +0000307587 00000 n +0000307781 00000 n +0000308949 00000 n +0000309152 00000 n +0000310725 00000 n +0000310903 00000 n +0000311589 00000 n +0000311792 00000 n +0000313470 00000 n +0000313658 00000 n +0000315387 00000 n +0000315446 00000 n +0000315549 00000 n +0000315714 00000 n +0000315796 00000 n +0000315904 00000 n +0000316083 00000 n +0000316200 00000 n +0000316334 00000 n +0000316469 00000 n +0000316616 00000 n +0000316764 00000 n +0000316941 00000 n +0000317067 00000 n +0000317205 00000 n +0000317365 00000 n +0000317513 00000 n +0000317699 00000 n +0000317855 00000 n +0000317968 00000 n +0000318085 00000 n +0000318220 00000 n +0000318361 00000 n +0000318476 00000 n +0000318587 00000 n +0000318764 00000 n +0000318867 00000 n +0000318983 00000 n +0000319132 00000 n +0000319231 00000 n +0000319344 00000 n +0000319457 00000 n +0000319570 00000 n +0000319683 00000 n +0000319796 00000 n +0000319909 00000 n +0000320022 00000 n +0000320135 00000 n +0000320250 00000 n +0000320351 00000 n +0000320464 00000 n +0000320655 00000 n +0000320752 00000 n +0000320937 00000 n +0000321040 00000 n +0000321163 00000 n +0000321284 00000 n +0000321395 00000 n +0000321590 00000 n +0000321705 00000 n +0000321828 00000 n +0000321945 00000 n +0000322062 00000 n +0000322166 00000 n +0000322354 00000 n +0000322576 00000 n +0000322714 00000 n +0000322876 00000 n +0000323012 00000 n +0000323114 00000 n +0000323331 00000 n +0000323435 00000 n +0000323566 00000 n +0000323686 00000 n +0000323892 00000 n +0000324019 00000 n +0000324103 00000 n +0000324308 00000 n +0000324466 00000 n +0000324613 00000 n +0000324740 00000 n +0000324920 00000 n +0000325029 00000 n +0000325143 00000 n +0000325287 00000 n +0000325450 00000 n +0000325599 00000 n +0000325779 00000 n +0000325882 00000 n +0000326038 00000 n +0000326148 00000 n +0000326292 00000 n +0000326433 00000 n +0000326582 00000 n +0000326698 00000 n +0000326861 00000 n +0000326971 00000 n +0000327110 00000 n +0000327236 00000 n +0000327352 00000 n +0000327481 00000 n +0000327657 00000 n +0000327760 00000 n +0000327891 00000 n +0000328020 00000 n +0000328162 00000 n +0000328286 00000 n +0000328415 00000 n +0000328542 00000 n +0000328664 00000 n +0000328769 00000 n +0000328933 00000 n +0000329036 00000 n +0000329171 00000 n +0000329351 00000 n +0000329478 00000 n +0000329614 00000 n +0000329748 00000 n +0000329954 00000 n +0000330054 00000 n +0000330172 00000 n +0000330337 00000 n +0000330428 00000 n +0000330589 00000 n +0000330715 00000 n +0000330842 00000 n +0000330982 00000 n +0000331118 00000 n +0000331226 00000 n +0000331400 00000 n +0000331506 00000 n +0000331626 00000 n +0000331738 00000 n +0000331855 00000 n +0000331957 00000 n +0000332164 00000 n +0000332276 00000 n +0000332392 00000 n +0000332537 00000 n +0000332746 00000 n +0000332881 00000 n +0000333036 00000 n +0000333162 00000 n +0000333294 00000 n +0000333428 00000 n +0000333560 00000 n +0000333736 00000 n +0000333872 00000 n +0000334026 00000 n +0000334172 00000 n +0000334398 00000 n +0000334510 00000 n +0000334626 00000 n +0000334820 00000 n +0000334964 00000 n +0000335081 00000 n +0000335227 00000 n +0000335385 00000 n +0000335503 00000 n +0000335723 00000 n +0000335822 00000 n +0000335940 00000 n +0000336068 00000 n +0000336226 00000 n +0000336397 00000 n +0000336513 00000 n +0000336624 00000 n +0000336760 00000 n +0000336891 00000 n +0000337039 00000 n +0000337184 00000 n +0000337285 00000 n +0000337462 00000 n +0000337574 00000 n +0000337705 00000 n +0000337829 00000 n +0000337996 00000 n +0000338113 00000 n +0000338243 00000 n +0000338383 00000 n +0000338520 00000 n +0000338656 00000 n +0000338792 00000 n +0000338929 00000 n +0000339041 00000 n +0000339216 00000 n +0000339319 00000 n +0000339470 00000 n +0000339572 00000 n +0000339694 00000 n +0000339826 00000 n +0000339946 00000 n +0000340061 00000 n +0000340175 00000 n +0000340288 00000 n +0000340405 00000 n +0000340520 00000 n +0000340636 00000 n +0000340751 00000 n +0000340867 00000 n +0000340989 00000 n +0000341110 00000 n +0000341229 00000 n +0000341347 00000 n +0000341467 00000 n +0000341570 00000 n +0000341736 00000 n +0000341856 00000 n +0000342025 00000 n +0000342213 00000 n +0000342394 00000 n +0000342550 00000 n +0000342738 00000 n +0000342842 00000 n +0000342995 00000 n +0000343106 00000 n +0000343214 00000 n +0000343364 00000 n +0000343468 00000 n +0000343586 00000 n +0000343704 00000 n +0000343825 00000 n +0000343961 00000 n +0000344060 00000 n trailer -<<71cc99b012ddb9744eb11230f6ad49a0>]>> +<<1ca9696980f269e0c25de21a8ecbd4b4>]>> startxref -316009 +344676 %%EOF diff --git a/docs/docbook/stylesheets/ldp.dsl.in b/docs/docbook/stylesheets/ldp.dsl.in deleted file mode 100644 index d6e06f4b6d1..00000000000 --- a/docs/docbook/stylesheets/ldp.dsl.in +++ /dev/null @@ -1,256 +0,0 @@ - - - -]]> - - -]]> -]> - - - - - - -;; ============================== -;; customize the print stylesheet -;; ============================== - -(declare-characteristic preserve-sdata? - ;; this is necessary because right now jadetex does not understand - ;; symbolic entities, whereas things work well with numeric entities. - "UNREGISTERED::James Clark//Characteristic::preserve-sdata?" - #f) - -(define %generate-article-toc% - ;; Should a Table of Contents be produced for Articles? - #t) - -(define (toc-depth nd) - 2) - -(define %generate-article-titlepage-on-separate-page% - ;; Should the article title page be on a separate page? - #t) - -(define %section-autolabel% - ;; Are sections enumerated? - #t) - -(define %footnote-ulinks% - ;; Generate footnotes for ULinks? - #f) - -(define %bop-footnotes% - ;; Make "bottom-of-page" footnotes? - #f) - -(define %body-start-indent% - ;; Default indent of body text - 0pi) - -(define %para-indent-firstpara% - ;; First line start-indent for the first paragraph - 0pt) - -(define %para-indent% - ;; First line start-indent for paragraphs (other than the first) - 0pt) - -(define %block-start-indent% - ;; Extra start-indent for block-elements - 0pt) - -(define formal-object-float - ;; Do formal objects float? - #t) - -(define %hyphenation% - ;; Allow automatic hyphenation? - #t) - -(define %admon-graphics% - ;; Use graphics in admonitions? - #f) - - - - - - - - - - -(declare-characteristic preserve-sdata? - ;; this is necessary because right now jadetex does not understand - ;; symbolic entities, whereas things work well with numeric entities. - "UNREGISTERED::James Clark//Characteristic::preserve-sdata?" - #f) - -(define %generate-legalnotice-link% - ;; put the legal notice in a separate file - #t) - -(define %admon-graphics-path% - ;; use graphics in admonitions, set their - "../images/") - -(define %admon-graphics% - #f) - -(define %funcsynopsis-decoration% - ;; make funcsynopsis look pretty - #t) - -(define %html-ext% - ;; when producing HTML files, use this extension - ".html") - -(define %generate-book-toc% - ;; Should a Table of Contents be produced for books? - #t) - -(define %generate-article-toc% - ;; Should a Table of Contents be produced for articles? - #t) - -(define %generate-part-toc% - ;; Should a Table of Contents be produced for parts? - #t) - -(define %generate-book-titlepage% - ;; produce a title page for books - #t) - -(define %generate-article-titlepage% - ;; produce a title page for articles - #t) - -(define (chunk-skip-first-element-list) - ;; forces the Table of Contents on separate page - '()) - -(define (list-element-list) - ;; fixes bug in Table of Contents generation - '()) - -(define %root-filename% - ;; The filename of the root HTML document (e.g, "index"). - "index") - -(define %shade-verbatim% - ;; verbatim sections will be shaded if t(rue) - #t) - -(define %use-id-as-filename% - ;; Use ID attributes as name for component HTML files? - #t) - -(define %graphic-extensions% - ;; graphic extensions allowed - '("gif" "png" "jpg" "jpeg" "tif" "tiff" "eps" "epsf" )) - -(define %graphic-default-extension% - "gif") - -(define %section-autolabel% - ;; For enumerated sections (1.1, 1.1.1, 1.2, etc.) - #t) - -(define (toc-depth nd) - ;; more depth (2 levels) to toc; instead of flat hierarchy - ;; 2) - 4) - -(element emphasis - ;; make role=strong equate to bold for emphasis tag - (if (equal? (attribute-string "role") "strong") - (make element gi: "STRONG" (process-children)) - (make element gi: "EM" (process-children)))) - -(define (book-titlepage-recto-elements) - ;; elements on a book's titlepage - ;; note: added revhistory to the default list - (list (normalize "title") - (normalize "subtitle") - (normalize "graphic") - (normalize "mediaobject") - (normalize "corpauthor") - (normalize "authorgroup") - (normalize "author") - (normalize "editor") - (normalize "copyright") - (normalize "revhistory") - (normalize "abstract") - (normalize "legalnotice"))) - -(define (article-titlepage-recto-elements) - ;; elements on an article's titlepage - ;; note: added othercredit to the default list - (list (normalize "title") - (normalize "subtitle") - (normalize "authorgroup") - (normalize "author") - (normalize "othercredit") - (normalize "releaseinfo") - (normalize "copyright") - (normalize "pubdate") - (normalize "revhistory") - (normalize "abstract"))) - -(mode article-titlepage-recto-mode - - (element contrib - ;; print out with othercredit information; for translators, etc. - (make sequence - (make element gi: "SPAN" - attributes: (list (list "CLASS" (gi))) - (process-children)))) - - (element othercredit - ;; print out othercredit information; for translators, etc. - (let ((author-name (author-string)) - (author-contrib (select-elements (children (current-node)) - (normalize "contrib")))) - (make element gi: "P" - attributes: (list (list "CLASS" (gi))) - (make element gi: "B" - (literal author-name) - (literal " - ")) - (process-node-list author-contrib)))) -) - -(define (article-title nd) - (let* ((artchild (children nd)) - (artheader (select-elements artchild (normalize "artheader"))) - (artinfo (select-elements artchild (normalize "articleinfo"))) - (ahdr (if (node-list-empty? artheader) - artinfo - artheader)) - (ahtitles (select-elements (children ahdr) - (normalize "title"))) - (artitles (select-elements artchild (normalize "title"))) - (titles (if (node-list-empty? artitles) - ahtitles - artitles))) - (if (node-list-empty? titles) - "" - (node-list-first titles)))) - - - - - - - - - diff --git a/docs/manpages/findsmb.1 b/docs/manpages/findsmb.1 index a6bb66b7f1b..c10076fd5c5 100644 --- a/docs/manpages/findsmb.1 +++ b/docs/manpages/findsmb.1 @@ -1,27 +1,28 @@ -.\" This manpage has been automatically generated by docbook2man-spec -.\" from a DocBook document. docbook2man-spec can be found at: -.\" +.\" This manpage has been automatically generated by docbook2man +.\" from a DocBook document. This tool can be found at: +.\" .\" Please send any bug reports, improvements, comments, patches, .\" etc. to Steve Cheng . -.TH "FINDSMB" "1" "28 January 2002" "" "" +.TH "FINDSMB" "1" "20 augustus 2002" "" "" .SH NAME findsmb \- list info about machines that respond to SMB name queries on a subnet .SH SYNOPSIS -.sp -\fBfindsmb\fR [ \fBsubnet broadcast address\fR ] + +\fBfindsmb\fR [ \fBsubnet broadcast address\fR ] + .SH "DESCRIPTION" .PP -This perl script is part of the Sambasuite. +This perl script is part of the Samba suite. .PP \fBfindsmb\fR is a perl script that prints out several pieces of information about machines -on a subnet that respond to SMB name query requests. -It uses \fB nmblookup(1)\fRto obtain this information. +on a subnet that respond to SMB name query requests. +It uses \fB nmblookup(1)\fR and \fBsmbclient(1)\fR to obtain this information. .SH "OPTIONS" .TP \fBsubnet broadcast address\fR Without this option, \fBfindsmb -\fRwill probe the subnet of the machine where +\fR will probe the subnet of the machine where \fBfindsmb\fR is run. This value is passed to \fBnmblookup\fR as part of the -B option @@ -40,16 +41,16 @@ Machines that are running Windows, Windows 95 or Windows 98 will not show any information about the operating system or server version. .PP -The command must be run on a system without \fBnmbd\fRrunning. +The command must be run on a system without \fBnmbd\fR running. If \fBnmbd\fR is running on the system, you will -only get the IP address and the DNS name of the machine. To -get proper responses from Windows 95 and Windows 98 machines, +only get the IP address and the DNS name of the machine. To +get proper responses from Windows 95 and Windows 98 machines, the command must be run as root. .PP For example running \fBfindsmb\fR on a machine without \fBnmbd\fR running would yield output similar to the following -.sp + .nf IP ADDR NETBIOS NAME WORKGROUP/OS/VERSION --------------------------------------------------------------------- @@ -64,7 +65,6 @@ IP ADDR NETBIOS NAME WORKGROUP/OS/VERSION 192.168.35.93 FROGSTAR-PC [MVENGR] [Windows 5.0] [Windows 2000 LAN Manager] 192.168.35.97 HERBNT1 *[HERB-NT] [Windows NT 4.0] [NT LAN Manager 4.0] -.sp .fi .SH "VERSION" .PP @@ -72,9 +72,9 @@ This man page is correct for version 2.2 of the Samba suite. .SH "SEE ALSO" .PP -\fBnmbd(8)\fR, +\fBnmbd(8)\fR , \fBsmbclient(1) -\fR +\fR , and \fBnmblookup(1)\fR .SH "AUTHOR" .PP The original Samba software and related utilities @@ -86,5 +86,5 @@ The original Samba man pages were written by Karl Auer. The man page sources were converted to YODL format (another excellent piece of Open Source software, available at ftp://ftp.icce.rug.nl/pub/unix/ ) and updated for the Samba 2.0 -release by Jeremy Allison. The conversion to DocBook for +release by Jeremy Allison. The conversion to DocBook for Samba 2.2 was done by Gerald Carter diff --git a/docs/manpages/smbclient.1 b/docs/manpages/smbclient.1 index 641f2d4a9f1..765c9e52734 100644 --- a/docs/manpages/smbclient.1 +++ b/docs/manpages/smbclient.1 @@ -1,21 +1,22 @@ -.\" This manpage has been automatically generated by docbook2man-spec -.\" from a DocBook document. docbook2man-spec can be found at: -.\" +.\" This manpage has been automatically generated by docbook2man +.\" from a DocBook document. This tool can be found at: +.\" .\" Please send any bug reports, improvements, comments, patches, .\" etc. to Steve Cheng . -.TH "SMBCLIENT" "1" "08 May 2002" "" "" +.TH "SMBCLIENT" "1" "20 augustus 2002" "" "" .SH NAME smbclient \- ftp-like client to access SMB/CIFS resources on servers .SH SYNOPSIS -.sp -\fBsmbclient\fR \fBservicename\fR [ \fBpassword\fR ] [ \fB-b \fR ] [ \fB-d debuglevel\fR ] [ \fB-D Directory\fR ] [ \fB-U username\fR ] [ \fB-W workgroup\fR ] [ \fB-M \fR ] [ \fB-m maxprotocol\fR ] [ \fB-A authfile\fR ] [ \fB-N\fR ] [ \fB-l logfile\fR ] [ \fB-L \fR ] [ \fB-I destinationIP\fR ] [ \fB-E \fR ] [ \fB-c \fR ] [ \fB-i scope\fR ] [ \fB-O \fR ] [ \fB-p port\fR ] [ \fB-R \fR ] [ \fB-s \fR ] [ \fB-TIXFqgbNan\fR ] + +\fBsmbclient\fR \fBservicename\fR [ \fBpassword\fR ] [ \fB-b \fR ] [ \fB-d debuglevel\fR ] [ \fB-D Directory\fR ] [ \fB-U username\fR ] [ \fB-W workgroup\fR ] [ \fB-M \fR ] [ \fB-m maxprotocol\fR ] [ \fB-A authfile\fR ] [ \fB-N\fR ] [ \fB-l logfile\fR ] [ \fB-L \fR ] [ \fB-I destinationIP\fR ] [ \fB-E \fR ] [ \fB-c \fR ] [ \fB-i scope\fR ] [ \fB-O \fR ] [ \fB-p port\fR ] [ \fB-R \fR ] [ \fB-s \fR ] [ \fB-TIXFqgbNan\fR ] + .SH "DESCRIPTION" .PP -This tool is part of the Sambasuite. +This tool is part of the Samba suite. .PP \fBsmbclient\fR is a client that can \&'talk' to an SMB/CIFS server. It offers an interface -similar to that of the ftp program (see \fBftp(1)\fR). +similar to that of the ftp program (see \fBftp(1)\fR). Operations include things like getting files from the server to the local machine, putting files from the local machine to the server, retrieving directory information from the server @@ -26,14 +27,15 @@ and so on. servicename is the name of the service you want to use on the server. A service name takes the form \fI//server/service\fR where \fIserver -\fRis the NetBIOS name of the SMB/CIFS server +\fR is the NetBIOS name of the SMB/CIFS server offering the desired service and \fIservice\fR -is the name of the service offered. Thus to connect to +is the name of the service offered. Thus to connect to the service "printer" on the SMB/CIFS server "smbserver", you would use the servicename \fI//smbserver/printer \fR + Note that the server name required is NOT necessarily -the IP (DNS) host name of the server ! The name required is +the IP (DNS) host name of the server ! The name required is a NetBIOS server name, which may or may not be the same as the IP hostname of the machine running the server. @@ -59,7 +61,7 @@ required, simply press ENTER to provide a null password.) Note: Some servers (including OS/2 and Windows for Workgroups) insist on an uppercase password. Lowercase -or mixed case passwords may be rejected by these servers. +or mixed case passwords may be rejected by these servers. Be cautious about including passwords in scripts. .TP @@ -69,7 +71,7 @@ Specifies the location of the all important .TP \fB-O socket options\fR TCP socket options to set on the client -socket. See the socket options parameter in the \fI smb.conf (5)\fR manpage for the list of valid +socket. See the socket options parameter in the \fI smb.conf (5)\fR manpage for the list of valid options. .TP \fB-R \fR @@ -85,7 +87,7 @@ cause names to be resolved as follows : \(bu lmhosts : Lookup an IP address in the Samba lmhosts file. If the line in lmhosts has -no name type attached to the NetBIOS name (see the lmhosts(5)for details) then +no name type attached to the NetBIOS name (see the lmhosts(5) for details) then any name type matches for lookup. .TP 0.2i \(bu @@ -94,14 +96,14 @@ name to IP address resolution, using the system \fI/etc/hosts \fR, NIS, or DNS lookups. This method of name resolution is operating system dependent, for instance on IRIX or Solaris this may be controlled by the \fI/etc/nsswitch.conf\fR -file). Note that this method is only used if the NetBIOS name +file). Note that this method is only used if the NetBIOS name type being queried is the 0x20 (server) name type, otherwise it is ignored. .TP 0.2i \(bu wins : Query a name with the IP address listed in the \fIwins server\fR -parameter. If no WINS server has +parameter. If no WINS server has been specified this method will be ignored. .TP 0.2i \(bu @@ -112,17 +114,15 @@ parameter. This is the least reliable of the name resolution methods as it depends on the target host being on a locally connected subnet. .RE -.PP + If this parameter is not set then the name resolve order -defined in the \fIsmb.conf\fR file parameter +defined in the \fIsmb.conf\fR file parameter (name resolve order) will be used. -.PP -.PP + The default order is lmhosts, host, wins, bcast and without this parameter or any entry in the \fIname resolve order -\fRparameter of the \fIsmb.conf\fR file the name resolution +\fR parameter of the \fIsmb.conf\fR file the name resolution methods will be attempted in this order. -.PP .TP \fB-M NetBIOS name\fR This options allows you to send messages, using @@ -139,7 +139,7 @@ The message is also automatically truncated if the message is over 1600 bytes, as this is the limit of the protocol. One useful trick is to cat the message through -\fBsmbclient\fR. For example: \fB cat mymessage.txt | smbclient -M FRED \fR will +\fBsmbclient\fR. For example: \fB cat mymessage.txt | smbclient -M FRED \fR will send the message in the file \fImymessage.txt\fR to the machine FRED. @@ -147,7 +147,7 @@ You may also find the \fI-U\fR and \fI-I\fR options useful, as they allow you to control the FROM and TO parts of the message. -See the message command parameter in the \fI smb.conf(5)\fR for a description of how to handle incoming +See the message command parameter in the \fI smb.conf(5)\fR for a description of how to handle incoming WinPopup messages in Samba. \fBNote\fR: Copy WinPopup into the startup group @@ -197,7 +197,7 @@ data, and should only be used when investigating a problem. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic. If \fIdebuglevel\fR is set to the letter 'A', then \fBall -\fRdebug messages will be printed. This setting +\fR debug messages will be printed. This setting is for developers only (and people who \fBreally\fR want to know how the code works internally). @@ -222,7 +222,7 @@ The base name is used to generate actual log file names. For example, if the name specified was "log", the debug file would be \fIlog.client\fR. -The log file generated is never removed by the client. +The log file generated is never removed by the client. .TP \fB-h\fR Print the usage message for the client. @@ -267,11 +267,11 @@ a \fBPASSWD\fR environment variable from which to read the password. A third option is to use a credentials file which -contains the plaintext of the domain name, username and password. This +contains the plaintext of the domain name, username and password. This option is mainly provided for scripts where the admin doesn't wish to pass the credentials on the command line or via environment variables. If this method is used, make certain that the permissions -on the file restrict access from unwanted users. See the +on the file restrict access from unwanted users. See the \fI-A\fR for more details. Be cautious about including passwords in scripts or in @@ -284,15 +284,14 @@ it in directly. \fB-A filename\fR This option allows you to specify a file from which to read the username, domain name, and -password used in the connection. The format of the file is +password used in the connection. The format of the file is + -.sp .nf username = password = domain = -.sp .fi If the domain parameter is missing the current workgroup name @@ -302,8 +301,8 @@ access from unwanted users. \fB-L\fR This option allows you to look at what services are available on a server. You use it as \fBsmbclient -L -host\fR and a list should appear. The \fI-I -\fRoption may be useful if your NetBIOS names don't +host\fR and a list should appear. The \fI-I +\fR option may be useful if your NetBIOS names don't match your TCP/IP DNS host names or if you are trying to reach a host on another network. .TP @@ -311,7 +310,7 @@ host on another network. This option tells \fBsmbclient\fR how to interpret filenames coming from the remote server. Usually Asian language multibyte UNIX implementations use different character sets than -SMB/CIFS servers (\fBEUC\fR instead of \fB SJIS\fR for example). Setting this parameter will let +SMB/CIFS servers (\fBEUC\fR instead of \fB SJIS\fR for example). Setting this parameter will let \fBsmbclient\fR convert between the UNIX filenames and the SMB filenames correctly. This option has not been seriously tested and may have some problems. @@ -334,7 +333,7 @@ servers. .TP \fB-T tar options\fR smbclient may be used to create \fBtar(1) -\fRcompatible backups of all the files on an SMB/CIFS +\fR compatible backups of all the files on an SMB/CIFS share. The secondary tar flags that can be given to this option are : .RS @@ -361,18 +360,18 @@ their creation dates restored properly. \fII\fR - Include files and directories. Is the default behavior when filenames are specified above. Causes tar files to be included in an extract or create (and therefore -everything else to be excluded). See example below. Filename globbing -works in one of two ways. See r below. +everything else to be excluded). See example below. Filename globbing +works in one of two ways. See r below. .TP 0.2i \(bu \fIX\fR - Exclude files and directories. Causes tar files to be excluded from an extract or create. See -example below. Filename globbing works in one of two ways now. +example below. Filename globbing works in one of two ways now. See \fIr\fR below. .TP 0.2i \(bu \fIb\fR - Blocksize. Must be followed -by a valid (greater than zero) blocksize. Causes tar file to be +by a valid (greater than zero) blocksize. Causes tar file to be written out in blocksize*TBLOCK (usually 512 byte) blocks. .TP 0.2i \(bu @@ -382,14 +381,14 @@ files that have the archive bit set. Useful only with the .TP 0.2i \(bu \fIq\fR - Quiet. Keeps tar from printing -diagnostics as it works. This is the same as tarmode quiet. +diagnostics as it works. This is the same as tarmode quiet. .TP 0.2i \(bu \fIr\fR - Regular expression include -or exclude. Uses regular expression matching for -excluding or excluding files if compiled with HAVE_REGEX_H. -However this mode can be very slow. If not compiled with -HAVE_REGEX_H, does a limited wildcard match on '*' and '?'. +or exclude. Uses regular expression matching for +excluding or excluding files if compiled with HAVE_REGEX_H. +However this mode can be very slow. If not compiled with +HAVE_REGEX_H, does a limited wildcard match on '*' and '?'. .TP 0.2i \(bu \fIN\fR - Newer than. Must be followed @@ -403,63 +402,50 @@ specified are backed up to the tar file. Useful only with the archive bit to be reset when a file is backed up. Useful with the \fIg\fR and \fIc\fR flags. .RE -.PP + \fBTar Long File Names\fR -.PP -.PP + \fBsmbclient\fR's tar option now supports long file names both on backup and restore. However, the full path -name of the file must be less than 1024 bytes. Also, when +name of the file must be less than 1024 bytes. Also, when a tar archive is created, \fBsmbclient\fR's tar option places all files in the archive with relative names, not absolute names. -.PP -.PP + \fBTar Filenames\fR -.PP -.PP + All file names can be given as DOS path names (with '\\' as the component separator) or as UNIX path names (with '/' as the component separator). -.PP -.PP + \fBExamples\fR -.PP -.PP + Restore from tar file \fIbackup.tar\fR into myshare on mypc (no password on share). -.PP -.PP + \fBsmbclient //mypc/yshare "" -N -Tx backup.tar -\fR.PP -.PP +\fR + Restore everything except \fIusers/docs\fR -.PP -.PP + \fBsmbclient //mypc/myshare "" -N -TXx backup.tar users/docs\fR -.PP -.PP -Create a tar file of the files beneath \fI users/docs\fR. -.PP -.PP + +Create a tar file of the files beneath \fI users/docs\fR. + \fBsmbclient //mypc/myshare "" -N -Tc backup.tar users/docs \fR -.PP -.PP + Create the same tar file as above, but now use a DOS path name. -.PP -.PP + \fBsmbclient //mypc/myshare "" -N -tc backup.tar users\\edocs \fR -.PP -.PP + Create a tar file of all the files and directories in the share. -.PP -.PP + \fBsmbclient //mypc/myshare "" -N -Tc backup.tar * -\fR.PP +\fR .TP \fB-D initial directory\fR Change to initial directory before starting. Probably @@ -467,7 +453,7 @@ only of any use with the tar -T option. .TP \fB-c command string\fR command string is a semicolon-separated list of -commands to be executed instead of prompting from stdin. \fI -N\fR is implied by \fI-c\fR. +commands to be executed instead of prompting from stdin. \fI -N\fR is implied by \fI-c\fR. This is particularly useful in scripts and for printing stdin to the server, e.g. \fB-c 'print -'\fR. @@ -486,14 +472,14 @@ The prompt indicates that the client is ready and waiting to carry out a user command. Each command is a single word, optionally followed by parameters specific to that command. Command and parameters are space-delimited unless these notes specifically -state otherwise. All commands are case-insensitive. Parameters to +state otherwise. All commands are case-insensitive. Parameters to commands may or may not be case sensitive, depending on the command. .PP You can specify file names which have spaces in them by quoting the name with double quotes, for example "a long file name". .PP Parameters shown in square brackets (e.g., "[parameter]") are -optional. If not given, the command will use suitable defaults. Parameters +optional. If not given, the command will use suitable defaults. Parameters shown in angle brackets (e.g., "") are required. .PP Note that all commands operating on the server are actually @@ -504,12 +490,12 @@ The commands available are given here in alphabetical order. .TP \fB? [command]\fR If \fIcommand\fR is specified, the ? command will display -a brief informative message about the specified command. If no +a brief informative message about the specified command. If no command is specified, a list of available commands will be displayed. .TP \fB! [shell command]\fR -If \fIshell command\fR is specified, the ! +If \fIshell command\fR is specified, the ! command will execute a shell locally and run the specified shell command. If no command is specified, a local shell will be run. .TP @@ -559,7 +545,7 @@ from the program. \fBget [local file name]\fR Copy the file called \fIremote file name\fR from the server to the machine running the client. If specified, name -the local copy \fIlocal file name\fR. Note that all transfers in +the local copy \fIlocal file name\fR. Note that all transfers in \fBsmbclient\fR are binary. See also the lowercase command. .TP @@ -717,7 +703,7 @@ outside the currently connected share. This is enforced by the Samba server. .TP \fBtar [IXbgNa]\fR Performs a tar operation - see the \fI-T -\fRcommand line option above. Behavior may be affected +\fR command line option above. Behavior may be affected by the tarmode command (see below). Using g (incremental) and N (newer) will affect tarmode settings. Note that using the "-" option with tar x may not work - use the command line option instead. @@ -750,18 +736,18 @@ supports the LANMAN2 protocol or above. .SH "ENVIRONMENT VARIABLES" .PP The variable \fBUSER\fR may contain the -username of the person using the client. This information is -used only if the protocol level is high enough to support +username of the person using the client. This information is +used only if the protocol level is high enough to support session-level passwords. .PP The variable \fBPASSWD\fR may contain -the password of the person using the client. This information is +the password of the person using the client. This information is used only if the protocol level is high enough to support session-level passwords. .PP The variable \fBLIBSMB_PROG\fR may contain the path, executed with system(), which the client should connect -to instead of connecting to a server. This functionality is primarily +to instead of connecting to a server. This functionality is primarily intended as a development aid, and works best when using a LMHOSTS file .SH "INSTALLATION" @@ -781,7 +767,7 @@ and writeable only by the user. .PP To test the client, you will need to know the name of a running SMB/CIFS server. It is possible to run \fBsmbd(8) -\fRas an ordinary user - running that server as a daemon +\fR as an ordinary user - running that server as a daemon on a user-accessible port (typically any port number over 1024) would provide a suitable test server. .SH "DIAGNOSTICS" @@ -808,5 +794,5 @@ The original Samba man pages were written by Karl Auer. The man page sources were converted to YODL format (another excellent piece of Open Source software, available at ftp://ftp.icce.rug.nl/pub/unix/ ) and updated for the Samba 2.0 -release by Jeremy Allison. The conversion to DocBook for +release by Jeremy Allison. The conversion to DocBook for Samba 2.2 was done by Gerald Carter -- cgit From 64e5287b06d0c7e84497c57bab664649f10826b6 Mon Sep 17 00:00:00 2001 From: Jelmer Vernooij Date: Wed, 28 Aug 2002 10:50:29 +0000 Subject: Remove obsolete questions - Preparing for new up-to-date version of faq --- docs/faq/Samba-Server-FAQ.sgml | 85 -------------------------- docs/faq/Samba-meta-FAQ.sgml | 133 +---------------------------------------- docs/faq/sambafaq.sgml | 5 +- 3 files changed, 6 insertions(+), 217 deletions(-) (limited to 'docs') diff --git a/docs/faq/Samba-Server-FAQ.sgml b/docs/faq/Samba-Server-FAQ.sgml index eddad19e253..8f57e73aa31 100644 --- a/docs/faq/Samba-Server-FAQ.sgml +++ b/docs/faq/Samba-Server-FAQ.sgml @@ -329,22 +329,6 @@ to specify a service name correctly), read on: Some clients force service names into upper case. -My client reports "cannot find domain controller", "cannot log on to the network" or similar

&NetBIOS; +&Architecture; +&debug; +&CodingSuggestions; +&internals; +&parsing; +&unix-smb; diff --git a/docs/docbook/devdoc/internals.sgml b/docs/docbook/devdoc/internals.sgml new file mode 100644 index 00000000000..79524347b63 --- /dev/null +++ b/docs/docbook/devdoc/internals.sgml @@ -0,0 +1,439 @@ + + + + DavidChappell + +

David.Chappell@mail.trincoll.edu
+ + + 8 May 1996 + + +Samba Internals + + +Character Handling + +This section describes character set handling in Samba, as implemented in +Samba 3.0 and above + + + +In the past Samba had very ad-hoc character set handling. Scattered +throughout the code were numerous calls which converted particular +strings to/from DOS codepages. The problem is that there was no way of +telling if a particular char* is in dos codepage or unix +codepage. This led to a nightmare of code that tried to cope with +particular cases without handlingt the general case. + + + +The new functions + + +The new system works like this: + + + + + all char* strings inside Samba are "unix" strings. These are + multi-byte strings that are in the charset defined by the "unix + charset" option in smb.conf. + + + + there is no single fixed character set for unix strings, but any + character set that is used does need the following properties: + + + + + must not contain NULLs except for termination + + + + must be 7-bit compatible with C strings, so that a constant + string or character in C will be byte-for-byte identical to the + equivalent string in the chosen character set. + + + + when you uppercase or lowercase a string it does not become + longer than the original string + + + + must be able to correctly hold all characters that your client + will throw at it + + + + + For example, UTF-8 is fine, and most multi-byte asian character sets + are fine, but UCS2 could not be used for unix strings as they + contain nulls. + + + + + when you need to put a string into a buffer that will be sent on the + wire, or you need a string in a character set format that is + compatible with the clients character set then you need to use a + pull_ or push_ function. The pull_ functions pull a string from a + wire buffer into a (multi-byte) unix string. The push_ functions + push a string out to a wire buffer. + + + + the two main pull_ and push_ functions you need to understand are + pull_string and push_string. These functions take a base pointer + that should point at the start of the SMB packet that the string is + in. The functions will check the flags field in this packet to + automatically determine if the packet is marked as a unicode packet, + and they will choose whether to use unicode for this string based on + that flag. You may also force this decision using the STR_UNICODE or + STR_ASCII flags. For use in smbd/ and libsmb/ there are wrapper + functions clistr_ and srvstr_ that call the pull_/push_ functions + with the appropriate first argument. + + + + You may also call the pull_ascii/pull_ucs2 or push_ascii/push_ucs2 + functions if you know that a particular string is ascii or + unicode. There are also a number of other convenience functions in + charcnv.c that call the pull_/push_ functions with particularly + common arguments, such as pull_ascii_pstring() + + + + + The biggest thing to remember is that internal (unix) strings in Samba + may now contain multi-byte characters. This means you cannot assume + that characters are always 1 byte long. Often this means that you will + have to convert strings to ucs2 and back again in order to do some + (seemingly) simple task. For examples of how to do this see functions + like strchr_m(). I know this is very slow, and we will eventually + speed it up but right now we want this stuff correct not fast. + + + + all lp_ functions now return unix strings. The magic "DOS" flag on + parameters is gone. + + + + all vfs functions take unix strings. Don't convert when passing to them + + + + + + + +Macros in byteorder.h + + +This section describes the macros defined in byteorder.h. These macros +are used extensively in the Samba code. + + + +CVAL(buf,pos) + + +returns the byte at offset pos within buffer buf as an unsigned character. + + + + +PVAL(buf,pos) +returns the value of CVAL(buf,pos) cast to type unsigned integer. + + + +SCVAL(buf,pos,val) +sets the byte at offset pos within buffer buf to value val. + + + +SVAL(buf,pos) + + returns the value of the unsigned short (16 bit) little-endian integer at + offset pos within buffer buf. An integer of this type is sometimes + refered to as "USHORT". + + + + +IVAL(buf,pos) +returns the value of the unsigned 32 bit little-endian integer at offset +pos within buffer buf. + + + +SVALS(buf,pos) +returns the value of the signed short (16 bit) little-endian integer at +offset pos within buffer buf. + + + +IVALS(buf,pos) +returns the value of the signed 32 bit little-endian integer at offset pos +within buffer buf. + + + +SSVAL(buf,pos,val) +sets the unsigned short (16 bit) little-endian integer at offset pos within +buffer buf to value val. + + + +SIVAL(buf,pos,val) +sets the unsigned 32 bit little-endian integer at offset pos within buffer +buf to the value val. + + + +SSVALS(buf,pos,val) +sets the short (16 bit) signed little-endian integer at offset pos within +buffer buf to the value val. + + + +SIVALS(buf,pos,val) +sets the signed 32 bit little-endian integer at offset pos withing buffer +buf to the value val. + + + +RSVAL(buf,pos) +returns the value of the unsigned short (16 bit) big-endian integer at +offset pos within buffer buf. + + + +RIVAL(buf,pos) +returns the value of the unsigned 32 bit big-endian integer at offset +pos within buffer buf. + + + +RSSVAL(buf,pos,val) +sets the value of the unsigned short (16 bit) big-endian integer at +offset pos within buffer buf to value val. +refered to as "USHORT". + + + +RSIVAL(buf,pos,val) +sets the value of the unsigned 32 bit big-endian integer at offset +pos within buffer buf to value val. + + + + + + +LAN Manager Samba API + + +This section describes the functions need to make a LAN Manager RPC call. +This information had been obtained by examining the Samba code and the LAN +Manager 2.0 API documentation. It should not be considered entirely +reliable. + + + + +call_api(int prcnt, int drcnt, int mprcnt, int mdrcnt, + char *param, char *data, char **rparam, char **rdata); + + + + +This function is defined in client.c. It uses an SMB transaction to call a +remote api. + + + +Parameters + +The parameters are as follows: + + + + prcnt: the number of bytes of parameters begin sent. + + + drcnt: the number of bytes of data begin sent. + + + mprcnt: the maximum number of bytes of parameters which should be returned + + + mdrcnt: the maximum number of bytes of data which should be returned + + + param: a pointer to the parameters to be sent. + + + data: a pointer to the data to be sent. + + + rparam: a pointer to a pointer which will be set to point to the returned + paramters. The caller of call_api() must deallocate this memory. + + + rdata: a pointer to a pointer which will be set to point to the returned + data. The caller of call_api() must deallocate this memory. + + + + +These are the parameters which you ought to send, in the order of their +appearance in the parameter block: + + + + + +An unsigned 16 bit integer API number. You should set this value with +SSVAL(). I do not know where these numbers are described. + + + +An ASCIIZ string describing the parameters to the API function as defined +in the LAN Manager documentation. The first parameter, which is the server +name, is ommited. This string is based uppon the API function as described +in the manual, not the data which is actually passed. + + + +An ASCIIZ string describing the data structure which ought to be returned. + + + +Any parameters which appear in the function call, as defined in the LAN +Manager API documentation, after the "Server" and up to and including the +"uLevel" parameters. + + + +An unsigned 16 bit integer which gives the size in bytes of the buffer we +will use to receive the returned array of data structures. Presumably this +should be the same as mdrcnt. This value should be set with SSVAL(). + + + +An ASCIIZ string describing substructures which should be returned. If no +substructures apply, this string is of zero length. + + + + + +The code in client.c always calls call_api() with no data. It is unclear +when a non-zero length data buffer would be sent. + + + + + +Return value + + +The returned parameters (pointed to by rparam), in their order of appearance +are: + + + + +An unsigned 16 bit integer which contains the API function's return code. +This value should be read with SVAL(). + + + +An adjustment which tells the amount by which pointers in the returned +data should be adjusted. This value should be read with SVAL(). Basically, +the address of the start of the returned data buffer should have the returned +pointer value added to it and then have this value subtracted from it in +order to obtain the currect offset into the returned data buffer. + + + +A count of the number of elements in the array of structures returned. +It is also possible that this may sometimes be the number of bytes returned. + + + + +When call_api() returns, rparam points to the returned parameters. The +first if these is the result code. It will be zero if the API call +suceeded. This value by be read with "SVAL(rparam,0)". + + + +The second parameter may be read as "SVAL(rparam,2)". It is a 16 bit offset +which indicates what the base address of the returned data buffer was when +it was built on the server. It should be used to correct pointer before +use. + + + +The returned data buffer contains the array of returned data structures. +Note that all pointers must be adjusted before use. The function +fix_char_ptr() in client.c can be used for this purpose. + + + +The third parameter (which may be read as "SVAL(rparam,4)") has something to +do with indicating the amount of data returned or possibly the amount of +data which can be returned if enough buffer space is allowed. + + + + + + +Code character table + +Certain data structures are described by means of ASCIIz strings containing +code characters. These are the code characters: + + + + +W a type byte little-endian unsigned integer + + +N a count of substructures which follow + + +D a four byte little-endian unsigned integer + + +B a byte (with optional count expressed as trailing ASCII digits) + + +z a four byte offset to a NULL terminated string + + +l a four byte offset to non-string user data + + +b an offset to data (with count expressed as trailing ASCII digits) + + +r pointer to returned data buffer??? + + +L length in bytes of returned data buffer??? + + +h number of bytes of information available??? + + + + + diff --git a/docs/docbook/devdoc/parsing.sgml b/docs/docbook/devdoc/parsing.sgml new file mode 100644 index 00000000000..0121935d26d --- /dev/null +++ b/docs/docbook/devdoc/parsing.sgml @@ -0,0 +1,239 @@ + + + + ChrisHertel + + November 1997 + + +The smb.conf file + + +Lexical Analysis + + +Basically, the file is processed on a line by line basis. There are +four types of lines that are recognized by the lexical analyzer +(params.c): + + + + +Blank lines - Lines containing only whitespace. + + +Comment lines - Lines beginning with either a semi-colon or a +pound sign (';' or '#'). + + +Section header lines - Lines beginning with an open square bracket ('['). + + +Parameter lines - Lines beginning with any other character. +(The default line type.) + + + + +The first two are handled exclusively by the lexical analyzer, which +ignores them. The latter two line types are scanned for + + + + + - Section names + + + - Parameter names + + + - Parameter values + + + + +These are the only tokens passed to the parameter loader +(loadparm.c). Parameter names and values are divided from one +another by an equal sign: '='. + + + +Handling of Whitespace + + +Whitespace is defined as all characters recognized by the isspace() +function (see ctype(3C)) except for the newline character ('\n') +The newline is excluded because it identifies the end of the line. + + + + +The lexical analyzer scans past white space at the beginning of a line. + + + +Section and parameter names may contain internal white space. All +whitespace within a name is compressed to a single space character. + + + +Internal whitespace within a parameter value is kept verbatim with +the exception of carriage return characters ('\r'), all of which +are removed. + + + +Leading and trailing whitespace is removed from names and values. + + + + + + + +Handling of Line Continuation + + +Long section header and parameter lines may be extended across +multiple lines by use of the backslash character ('\\'). Line +continuation is ignored for blank and comment lines. + + + +If the last (non-whitespace) character within a section header or on +a parameter line is a backslash, then the next line will be +(logically) concatonated with the current line by the lexical +analyzer. For example: + + + + param name = parameter value string \ + with line continuation. + + +Would be read as + + + param name = parameter value string with line continuation. + + + +Note that there are five spaces following the word 'string', +representing the one space between 'string' and '\\' in the top +line, plus the four preceeding the word 'with' in the second line. +(Yes, I'm counting the indentation.) + + + +Line continuation characters are ignored on blank lines and at the end +of comments. They are *only* recognized within section and parameter +lines. + + + + + +Line Continuation Quirks + +Note the following example: + + + param name = parameter value string \ + \ + with line continuation. + + + +The middle line is *not* parsed as a blank line because it is first +concatonated with the top line. The result is + + + +param name = parameter value string with line continuation. + + +The same is true for comment lines. + + + param name = parameter value string \ + ; comment \ + with a comment. + + +This becomes: + + +param name = parameter value string ; comment with a comment. + + + +On a section header line, the closing bracket (']') is considered a +terminating character, and the rest of the line is ignored. The lines + + + + [ section name ] garbage \ + param name = value + + +are read as + + + [section name] + param name = value + + + + + + +Syntax + +The syntax of the smb.conf file is as follows: + + + <file> :== { <section> } EOF + <section> :== <section header> { <parameter line> } + <section header> :== '[' NAME ']' + <parameter line> :== NAME '=' VALUE NL + + +Basically, this means that + + + + a file is made up of zero or more sections, and is terminated by + an EOF (we knew that). + + + + A section is made up of a section header followed by zero or more + parameter lines. + + + + A section header is identified by an opening bracket and + terminated by the closing bracket. The enclosed NAME identifies + the section. + + + + A parameter line is divided into a NAME and a VALUE. The *first* + equal sign on the line separates the NAME from the VALUE. The + VALUE is terminated by a newline character (NL = '\n'). + + + + + +About params.c + + +The parsing of the config file is a bit unusual if you are used to +lex, yacc, bison, etc. Both lexical analysis (scanning) and parsing +are performed by params.c. Values are loaded via callbacks to +loadparm.c. + + + + diff --git a/docs/docbook/devdoc/unix-smb.sgml b/docs/docbook/devdoc/unix-smb.sgml new file mode 100644 index 00000000000..be796988572 --- /dev/null +++ b/docs/docbook/devdoc/unix-smb.sgml @@ -0,0 +1,311 @@ + + + + AndrewTridgell + + April 1995 + + +NetBIOS in a Unix World + + +Introduction + +This is a short document that describes some of the issues that +confront a SMB implementation on unix, and how Samba copes with +them. They may help people who are looking at unix<->PC +interoperability. + + + +It was written to help out a person who was writing a paper on unix to +PC connectivity. + + + + + +Usernames + +The SMB protocol has only a loose username concept. Early SMB +protocols (such as CORE and COREPLUS) have no username concept at +all. Even in later protocols clients often attempt operations +(particularly printer operations) without first validating a username +on the server. + + + +Unix security is based around username/password pairs. A unix box +should not allow clients to do any substantive operation without some +sort of validation. + + + +The problem mostly manifests itself when the unix server is in "share +level" security mode. This is the default mode as the alternative +"user level" security mode usually forces a client to connect to the +server as the same user for each connected share, which is +inconvenient in many sites. + + + +In "share level" security the client normally gives a username in the +"session setup" protocol, but does not supply an accompanying +password. The client then connects to resources using the "tree +connect" protocol, and supplies a password. The problem is that the +user on the PC types the username and the password in different +contexts, unaware that they need to go together to give access to the +server. The username is normally the one the user typed in when they +"logged onto" the PC (this assumes Windows for Workgroups). The +password is the one they chose when connecting to the disk or printer. + + + +The user often chooses a totally different username for their login as +for the drive connection. Often they also want to access different +drives as different usernames. The unix server needs some way of +divining the correct username to combine with each password. + + + +Samba tries to avoid this problem using several methods. These succeed +in the vast majority of cases. The methods include username maps, the +service%user syntax, the saving of session setup usernames for later +validation and the derivation of the username from the service name +(either directly or via the user= option). + + + + + +File Ownership + + +The commonly used SMB protocols have no way of saying "you can't do +that because you don't own the file". They have, in fact, no concept +of file ownership at all. + + + +This brings up all sorts of interesting problems. For example, when +you copy a file to a unix drive, and the file is world writeable but +owned by another user the file will transfer correctly but will +receive the wrong date. This is because the utime() call under unix +only succeeds for the owner of the file, or root, even if the file is +world writeable. For security reasons Samba does all file operations +as the validated user, not root, so the utime() fails. This can stuff +up shared development diectories as programs like "make" will not get +file time comparisons right. + + + +There are several possible solutions to this problem, including +username mapping, and forcing a specific username for particular +shares. + + + + + +Passwords + + +Many SMB clients uppercase passwords before sending them. I have no +idea why they do this. Interestingly WfWg uppercases the password only +if the server is running a protocol greater than COREPLUS, so +obviously it isn't just the data entry routines that are to blame. + + + +Unix passwords are case sensitive. So if users use mixed case +passwords they are in trouble. + + + +Samba can try to cope with this by either using the "password level" +option which causes Samba to try the offered password with up to the +specified number of case changes, or by using the "password server" +option which allows Samba to do its validation via another machine +(typically a WinNT server). + + + +Samba supports the password encryption method used by SMB +clients. Note that the use of password encryption in Microsoft +networking leads to password hashes that are "plain text equivalent". +This means that it is *VERY* important to ensure that the Samba +smbpasswd file containing these password hashes is only readable +by the root user. See the documentation ENCRYPTION.txt for more +details. + + + + + +Locking + +The locking calls available under a DOS/Windows environment are much +richer than those available in unix. This means a unix server (like +Samba) choosing to use the standard fcntl() based unix locking calls +to implement SMB locking has to improvise a bit. + + + +One major problem is that dos locks can be in a 32 bit (unsigned) +range. Unix locking calls are 32 bits, but are signed, giving only a 31 +bit range. Unfortunately OLE2 clients use the top bit to select a +locking range used for OLE semaphores. + + + +To work around this problem Samba compresses the 32 bit range into 31 +bits by appropriate bit shifting. This seems to work but is not +ideal. In a future version a separate SMB lockd may be added to cope +with the problem. + + + +It also doesn't help that many unix lockd daemons are very buggy and +crash at the slightest provocation. They normally go mostly unused in +a unix environment because few unix programs use byte range +locking. The stress of huge numbers of lock requests from dos/windows +clients can kill the daemon on some systems. + + + +The second major problem is the "opportunistic locking" requested by +some clients. If a client requests opportunistic locking then it is +asking the server to notify it if anyone else tries to do something on +the same file, at which time the client will say if it is willing to +give up its lock. Unix has no simple way of implementing +opportunistic locking, and currently Samba has no support for it. + + + + + +Deny Modes + + +When a SMB client opens a file it asks for a particular "deny mode" to +be placed on the file. These modes (DENY_NONE, DENY_READ, DENY_WRITE, +DENY_ALL, DENY_FCB and DENY_DOS) specify what actions should be +allowed by anyone else who tries to use the file at the same time. If +DENY_READ is placed on the file, for example, then any attempt to open +the file for reading should fail. + + + +Unix has no equivalent notion. To implement this Samba uses either lock +files based on the files inode and placed in a separate lock +directory or a shared memory implementation. The lock file method +is clumsy and consumes processing and file resources, +the shared memory implementation is vastly prefered and is turned on +by default for those systems that support it. + + + + + +Trapdoor UIDs + +A SMB session can run with several uids on the one socket. This +happens when a user connects to two shares with different +usernames. To cope with this the unix server needs to switch uids +within the one process. On some unixes (such as SCO) this is not +possible. This means that on those unixes the client is restricted to +a single uid. + + + +Note that you can also get the "trapdoor uid" message for other +reasons. Please see the FAQ for details. + + + + + +Port numbers + +There is a convention that clients on sockets use high "unprivilaged" +port numbers (>1000) and connect to servers on low "privilaged" port +numbers. This is enforced in Unix as non-root users can't open a +socket for listening on port numbers less than 1000. + + + +Most PC based SMB clients (such as WfWg and WinNT) don't follow this +convention completely. The main culprit is the netbios nameserving on +udp port 137. Name query requests come from a source port of 137. This +is a problem when you combine it with the common firewalling technique +of not allowing incoming packets on low port numbers. This means that +these clients can't query a netbios nameserver on the other side of a +low port based firewall. + + + +The problem is more severe with netbios node status queries. I've +found that WfWg, Win95 and WinNT3.5 all respond to netbios node status +queries on port 137 no matter what the source port was in the +request. This works between machines that are both using port 137, but +it means it's not possible for a unix user to do a node status request +to any of these OSes unless they are running as root. The answer comes +back, but it goes to port 137 which the unix user can't listen +on. Interestingly WinNT3.1 got this right - it sends node status +responses back to the source port in the request. + + + + + +Protocol Complexity + +There are many "protocol levels" in the SMB protocol. It seems that +each time new functionality was added to a Microsoft operating system, +they added the equivalent functions in a new protocol level of the SMB +protocol to "externalise" the new capabilities. + + + +This means the protocol is very "rich", offering many ways of doing +each file operation. This means SMB servers need to be complex and +large. It also means it is very difficult to make them bug free. It is +not just Samba that suffers from this problem, other servers such as +WinNT don't support every variation of every call and it has almost +certainly been a headache for MS developers to support the myriad of +SMB calls that are available. + + + +There are about 65 "top level" operations in the SMB protocol (things +like SMBread and SMBwrite). Some of these include hundreds of +sub-functions (SMBtrans has at least 120 sub-functions, like +DosPrintQAdd and NetSessionEnum). All of them take several options +that can change the way they work. Many take dozens of possible +"information levels" that change the structures that need to be +returned. Samba supports all but 2 of the "top level" functions. It +supports only 8 (so far) of the SMBtrans sub-functions. Even NT +doesn't support them all. + + + +Samba currently supports up to the "NT LM 0.12" protocol, which is the +one preferred by Win95 and WinNT3.5. Luckily this protocol level has a +"capabilities" field which specifies which super-duper new-fangled +options the server suports. This helps to make the implementation of +this protocol level much easier. + + + +There is also a problem with the SMB specications. SMB is a X/Open +spec, but the X/Open book is far from ideal, and fails to cover many +important issues, leaving much to the imagination. Microsoft recently +renamed the SMB protocol CIFS (Common Internet File System) and have +published new specifications. These are far superior to the old +X/Open documents but there are still undocumented calls and features. +This specification is actively being worked on by a CIFS developers +mailing list hosted by Microsft. + + + + -- cgit From 31567c3762c0588886792265d7b48432c50f03ba Mon Sep 17 00:00:00 2001 From: Jelmer Vernooij Date: Thu, 29 Aug 2002 16:17:26 +0000 Subject: Add cifsntdomain --- docs/docbook/devdoc/cifsntdomain.sgml | 2923 +++++++++++++++++++++++++++++++++ docs/docbook/devdoc/dev-doc.sgml | 8 +- 2 files changed, 2929 insertions(+), 2 deletions(-) create mode 100644 docs/docbook/devdoc/cifsntdomain.sgml (limited to 'docs') diff --git a/docs/docbook/devdoc/cifsntdomain.sgml b/docs/docbook/devdoc/cifsntdomain.sgml new file mode 100644 index 00000000000..f64e1b37d63 --- /dev/null +++ b/docs/docbook/devdoc/cifsntdomain.sgml @@ -0,0 +1,2923 @@ + + + + LukeLeighton +
lkcl@switchboard.net
+
+ + PaulAshton +
paul@argo.demon.co.uk
+
+ + DuncanStansfield +
duncans@sco.com
+
+ + 01 November 97(version 0.0.24) +
+ +NT Domain RPC's + + +Introduction + + + +This document contains information to provide an NT workstation with login +services, without the need for an NT server. It is the sgml version of http://mailhost.cb1.com/~lkcl/cifsntdomain.txt, controlled by Luke. + + + +It should be possible to select a domain instead of a workgroup (in the NT +workstation's TCP/IP settings) and after the obligatory reboot, type in a +username, password, select a domain and successfully log in. I would +appreciate any feedback on your experiences with this process, and any +comments, corrections and additions to this document. + + + +The packets described here can be easily derived from (and are probably +better understood using) Netmon.exe. You will need to use the version +of Netmon that matches your system, in order to correctly decode the +NETLOGON, lsarpc and srvsvc Transact pipes. This document is derived from +NT Service Pack 1 and its corresponding version of Netmon. It is intended +that an annotated packet trace be produced, which will likely be more +instructive than this document. + + + +Also needed, to fully implement NT Domain Login Services, is the +document describing the cryptographic part of the NT authentication. +This document is available from comp.protocols.smb; from the ntsecurity.net +digest and from the samba digest, amongst other sources. + + + +A copy is available from: + + +http://ntbugtraq.rc.on.ca/SCRIPTS/WA.EXE?A2=ind9708;L=ntbugtraq;O=A;P=2935 + +http://mailhost.cb1.com/~lkcl/crypt.html + + +A c-code implementation, provided by Linus Nordberg +of this protocol is available from: + + +http://samba.org/cgi-bin/mfs/01/digest/1997/97aug/0391.html +http://mailhost.cb1.com/~lkcl/crypt.txt + + +Also used to provide debugging information is the Check Build version of +NT workstation, and enabling full debugging in NETLOGON. This is +achieved by setting the following REG_SZ registry key to 0x1ffffff: + + +HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters + +Incorrect direct editing of the registry can cause your +machine to fail. Then again, so can incorrect implementation of this +protocol. See "Liability:" above. + + +Bear in mind that each packet over-the-wire will have its origin in an +API call. Therefore, there are likely to be structures, enumerations +and defines that are usefully documented elsewhere. + + + +This document is by no means complete or authoritative. Missing sections +include, but are not limited to: + + + + + +Mappings of RIDs to usernames (and vice-versa). + +What a User ID is and what a Group ID is. + +The exact meaning/definition of various magic constants or enumerations. + +The reply error code and use of that error code when a +workstation becomes a member of a domain (to be described later). +Failure to return this error code will make the workstation report +that it is already a member of the domain. + +the cryptographic side of the NetrServerPasswordSet command, +which would allow the workstation to change its password. This password is +used to generate the long-term session key. [It is possible to reject this +command, and keep the default workstation password]. + + + + +Sources + + +cket Traces from Netmonitor (Service Pack 1 and above) +ul Ashton and Luke Leighton's other "NT Domain" doc. +FS documentation - cifs6.txt +FS documentation - cifsrap2.txt + + + + + +Credits + + +Paul Ashton: loads of work with Net Monitor; understanding the NT authentication system; reference implementation of the NT domain support on which this document is originally based. +Duncan Stansfield: low-level analysis of MSRPC Pipes. +Linus Nordberg: producing c-code from Paul's crypto spec. +Windows Sourcer development team + + + + + + + +Notes and Structures + + +Notes + + + +In the SMB Transact pipes, some "Structures", described here, appear to be +4-byte aligned with the SMB header, at their start. Exactly which +"Structures" need aligning is not precisely known or documented. + + + +In the UDP NTLOGON Mailslots, some "Structures", described here, appear to be +2-byte aligned with the start of the mailslot, at their start. + + + +Domain SID is of the format S-revision-version-auth1-auth2...authN. +e.g S-1-5-123-456-789-123-456. the 5 could be a sub-revision. + + + +any undocumented buffer pointers must be non-zero if the string buffer it +refers to contains characters. exactly what value they should be is unknown. +0x0000 0002 seems to do the trick to indicate that the buffer exists. a +NULL buffer pointer indicates that the string buffer is of zero length. +If the buffer pointer is NULL, then it is suspected that the structure it +refers to is NOT put into (or taken out of) the SMB data stream. This is +empirically derived from, for example, the LSA SAM Logon response packet, +where if the buffer pointer is NULL, the user information is not inserted +into the data stream. Exactly what happens with an array of buffer pointers +is not known, although an educated guess can be made. + + + +an array of structures (a container) appears to have a count and a pointer. +if the count is zero, the pointer is also zero. no further data is put +into or taken out of the SMB data stream. if the count is non-zero, then +the pointer is also non-zero. immediately following the pointer is the +count again, followed by an array of container sub-structures. the count +appears a third time after the last sub-structure. + + + + + + +Enumerations + + +MSRPC Header type +command number in the msrpc packet header + + + + MSRPC_Request: + 0x00 + + + MSRPC_Response: + 0x02 + + + MSRPC_Bind: + 0x0B + + + MSRPC_BindAck: + 0x0C + + + + + +MSRPC Packet info + +The meaning of these flags is undocumented + + + + FirstFrag: + 0x01 + + + LastFrag: + 0x02 + + + NotaFrag: + 0x04 + + + RecRespond: + 0x08 + + + NoMultiplex: + 0x10 + + + NotForIdemp: + 0x20 + + + NotforBcast: + 0x40 + + + NoUuid: + 0x80 + + + + + + + + +Structures + +VOID * +sizeof VOID* is 32 bits. + + +char +sizeof char is 8 bits. + + +UTIME +UTIME is 32 bits, indicating time in seconds since 01jan1970. documented in cifs6.txt (section 3.5 page, page 30). + + +NTTIME +NTTIME is 64 bits. documented in cifs6.txt (section 3.5 page, page 30). + + + +DOM_SID (domain SID structure) + + + + + UINT32 + num of sub-authorities in domain SID + + + + UINT8 + SID revision number + + + UINT8 + num of sub-authorities in domain SID + + + UINT8[6] + 6 bytes for domain SID - Identifier Authority. + + + + UINT16[n_subauths] + domain SID sub-authorities + + + + +Note: the domain SID is documented elsewhere. + + + + + +STR (string) + +STR (string) is a char[] : a null-terminated string of ascii characters. + + + + +UNIHDR (unicode string header) + + + + + UINT16 + length of unicode string + + + + UINT16 + max length of unicode string + + + + UINT32 + 4 - undocumented. + + + + + + + +UNIHDR2 (unicode string header plus buffer pointer) + + + + + UNIHDR + unicode string header + + + + + VOID* + undocumented buffer pointer + + + + + + + +UNISTR (unicode string) + + + + + UINT16[] + null-terminated string of unicode characters. + + + + + + + +NAME (length-indicated unicode string) + + + + + UINT32 + length of unicode string + + + UINT16[] + null-terminated string of unicode characters. + + + + + + + +UNISTR2 (aligned unicode string) + + + + UINT8[] + padding to get unicode string 4-byte aligned with the start of the SMB header. + + + UINT32 + max length of unicode string + + + UINT32 + 0 - undocumented + + + UINT32 + length of unicode string + + + UINT16[] + string of uncode characters + + + + + + + +OBJ_ATTR (object attributes) + + + + UINT32 +0x18 - length (in bytes) including the length field. + + VOID* +0 - root directory (pointer) + + VOID* +0 - object name (pointer) + + UINT32 +0 - attributes (undocumented) + + VOID* +0 - security descriptior (pointer) + + UINT32 + 0 - security quality of service + + + + + + + +POL_HND (LSA policy handle) + + + + char[20] + policy handle + + + + + + +DOM_SID2 (domain SID structure, SIDS stored in unicode) + + + + UINT32 + 5 - SID type + + + UINT32 + 0 - undocumented + + + UNIHDR2 + domain SID unicode string header + + + UNISTR + domain SID unicode string + + + +Note: there is a conflict between the unicode string header and the unicode string itself as to which to use to indicate string length. this will need to be resolved. + +Note: the SID type indicates, for example, an alias; a well-known group etc. this is documented somewhere. + + + + +DOM_RID (domain RID structure) + + + + UINT32 +5 - well-known SID. 1 - user SID (see ShowACLs) + + UINT32 + 5 - undocumented + + + UINT32 + domain RID + + + UINT32 + 0 - domain index out of above reference domains + + + + + + +LOG_INFO (server, account, client structure) + +Note: logon server name starts with two '\' characters and is upper case. + +Note: account name is the logon client name from the LSA Request Challenge, with a $ on the end of it, in upper case. + + + + VOID* + undocumented buffer pointer + + + UNISTR2 + logon server unicode string + + + UNISTR2 + account name unicode string + + + UINT16 + sec_chan - security channel type + + + UNISTR2 + logon client machine unicode string + + + + + + +CLNT_SRV (server, client names structure) + +Note: logon server name starts with two '\' characters and is upper case. + + + + VOID* + undocumented buffer pointer + + + UNISTR2 + logon server unicode string + + + VOID* + undocumented buffer pointer + + + UNISTR2 + logon client machine unicode string + + + + + + +CREDS (credentials + time stamp) + + + + char[8] + credentials + + + UTIME + time stamp + + + + + + +CLNT_INFO2 (server, client structure, client credentials) + +Note: whenever this structure appears in a request, you must take a copy of the client-calculated credentials received, because they will beused in subsequent credential checks. the presumed intention is to + maintain an authenticated request/response trail. + + + + CLNT_SRV + client and server names + + + UINT8[] + ???? padding, for 4-byte alignment with SMB header. + + + VOID* + pointer to client credentials. + + + CREDS + client-calculated credentials + client time + + + + + + +CLNT_INFO (server, account, client structure, client credentials) +Note: whenever this structure appears in a request, you must take a copy of the client-calculated credentials received, because they will be used in subsequent credential checks. the presumed intention is to maintain an authenticated request/response trail. + + + + LOG_INFO + logon account info + + + CREDS + client-calculated credentials + client time + + + + + + +ID_INFO_1 (id info structure, auth level 1) + + + + VOID* + ptr_id_info_1 + + + UNIHDR + domain name unicode header + + + UINT32 + param control + + + UINT64 + logon ID + + + UNIHDR + user name unicode header + + + UNIHDR + workgroup name unicode header + + + char[16] + arc4 LM OWF Password + + + char[16] + arc4 NT OWF Password + + + UNISTR2 + domain name unicode string + + + UNISTR2 + user name unicode string + + + UNISTR2 + workstation name unicode string + + + + + + +SAM_INFO (sam logon/logoff id info structure) + +Note: presumably, the return credentials is supposedly for the server to verify that the credential chain hasn't been compromised. + + + + CLNT_INFO2 + client identification/authentication info + + + VOID* + pointer to return credentials. + + + CRED + return credentials - ignored. + + + UINT16 + logon level + + + UINT16 + switch value + + + + + + switch (switch_value) + case 1: + { + ID_INFO_1 id_info_1; + } + + + + + +GID (group id info) + + + + UINT32 +group id + + UINT32 +user attributes (only used by NT 3.1 and 3.51) + + + + + +DOM_REF (domain reference info) + + + + VOID* + undocumented buffer pointer. + + + UINT32 + num referenced domains? + + + VOID* + undocumented domain name buffer pointer. + + + UINT32 + 32 - max number of entries + + + UINT32 + 4 - num referenced domains? + + + UNIHDR2 + domain name unicode string header + + + UNIHDR2[num_ref_doms-1] + referenced domain unicode string headers + + + UNISTR + domain name unicode string + + + DOM_SID[num_ref_doms] + referenced domain SIDs + + + + + + +DOM_INFO (domain info, levels 3 and 5 are the same)) + + + + UINT8[] + ??? padding to get 4-byte alignment with start of SMB header + + + UINT16 + domain name string length * 2 + + + UINT16 + domain name string length * 2 + + + VOID* + undocumented domain name string buffer pointer + + + VOID* +undocumented domain SID string buffer pointer + + UNISTR2 +domain name (unicode string) + + DOM_SID + domain SID + + + + + + +USER_INFO (user logon info) + +Note: it would be nice to know what the 16 byte user session key is for. + + + + NTTIME + logon time + + + NTTIME + logoff time + + + NTTIME + kickoff time + + + NTTIME + password last set time + + + NTTIME + password can change time + + + NTTIME + password must change time + + + UNIHDR + username unicode string header + + + UNIHDR + user's full name unicode string header + + + UNIHDR + logon script unicode string header + + + UNIHDR + profile path unicode string header + + + UNIHDR + home directory unicode string header + + + UNIHDR + home directory drive unicode string header + + + UINT16 + logon count + + + UINT16 + bad password count + + + UINT32 + User ID + + + UINT32 + Group ID + + + UINT32 + num groups + + + VOID* + undocumented buffer pointer to groups. + + + UINT32 + user flags + + + char[16] + user session key + + + UNIHDR + logon server unicode string header + + + UNIHDR + logon domain unicode string header + + + VOID* + undocumented logon domain id pointer + + + char[40] + 40 undocumented padding bytes. future expansion? + + + UINT32 + 0 - num_other_sids? + + + VOID* + NULL - undocumented pointer to other domain SIDs. + + + UNISTR2 + username unicode string + + + UNISTR2 + user's full name unicode string + + + UNISTR2 + logon script unicode string + + + UNISTR2 + profile path unicode string + + + UNISTR2 + home directory unicode string + + + UNISTR2 + home directory drive unicode string + + + UINT32 + num groups + + + GID[num_groups] + group info + + + UNISTR2 + logon server unicode string + + + UNISTR2 + logon domain unicode string + + + DOM_SID + domain SID + + + DOM_SID[num_sids] + other domain SIDs? + + + + + + +SH_INFO_1_PTR (pointers to level 1 share info strings) + +Note: see cifsrap2.txt section5, page 10. + + +0 for shi1_type indicates a Disk. +1 for shi1_type indicates a Print Queue. +2 for shi1_type indicates a Device. +3 for shi1_type indicates an IPC pipe. +0x8000 0000 (top bit set in shi1_type) indicates a hidden share. + + + + + + VOID* + shi1_netname - pointer to net name + + + UINT32 + shi1_type - type of share. 0 - undocumented. + + + VOID* + shi1_remark - pointer to comment. + + + + + + + +SH_INFO_1_STR (level 1 share info strings) + + + + UNISTR2 + shi1_netname - unicode string of net name + + + UNISTR2 + shi1_remark - unicode string of comment. + + + + + + +SHARE_INFO_1_CTR + +share container with 0 entries: + + + + UINT32 + 0 - EntriesRead + + + UINT32 + 0 - Buffer + + + +share container with > 0 entries: + + + + UINT32 + EntriesRead + + + UINT32 + non-zero - Buffer + + + UINT32 + EntriesRead + + + SH_INFO_1_PTR[EntriesRead] + share entry pointers + + + SH_INFO_1_STR[EntriesRead] + share entry strings + + + UINT8[] + padding to get unicode string 4-byte aligned with start of the SMB header. + + + UINT32 + EntriesRead + + + UINT32 + 0 - padding + + + + + + + +SERVER_INFO_101 + +Note: see cifs6.txt section 6.4 - the fields described therein will be of assistance here. for example, the type listed below is the same as fServerType, which is described in 6.4.1. + + + + SV_TYPE_WORKSTATION + 0x00000001 All workstations + + + SV_TYPE_SERVER + 0x00000002 All servers + + + SV_TYPE_SQLSERVER + 0x00000004 Any server running with SQL server + + + SV_TYPE_DOMAIN_CTRL + 0x00000008 Primary domain controller + + + SV_TYPE_DOMAIN_BAKCTRL + 0x00000010 Backup domain controller + + + SV_TYPE_TIME_SOURCE + 0x00000020 Server running the timesource service + + + SV_TYPE_AFP + 0x00000040 Apple File Protocol servers + + + SV_TYPE_NOVELL + 0x00000080 Novell servers + + + SV_TYPE_DOMAIN_MEMBER + 0x00000100 Domain Member + + + SV_TYPE_PRINTQ_SERVER + 0x00000200 Server sharing print queue + + + SV_TYPE_DIALIN_SERVER + 0x00000400 Server running dialin service. + + + SV_TYPE_XENIX_SERVER + 0x00000800 Xenix server + + + SV_TYPE_NT + 0x00001000 NT server + + + SV_TYPE_WFW + 0x00002000 Server running Windows for + + + SV_TYPE_SERVER_NT + 0x00008000 Windows NT non DC server + + + SV_TYPE_POTENTIAL_BROWSER + 0x00010000 Server that can run the browser service + + + SV_TYPE_BACKUP_BROWSER + 0x00020000 Backup browser server + + + SV_TYPE_MASTER_BROWSER + 0x00040000 Master browser server + + + SV_TYPE_DOMAIN_MASTER + 0x00080000 Domain Master Browser server + + + SV_TYPE_LOCAL_LIST_ONLY + 0x40000000 Enumerate only entries marked "local" + + + SV_TYPE_DOMAIN_ENUM + 0x80000000 Enumerate Domains. The pszServer and pszDomain parameters must be NULL. + + + + + + + UINT32 + 500 - platform_id + + + VOID* + pointer to name + + + UINT32 + 5 - major version + + + UINT32 +4 - minor version + + UINT32 +type (SV_TYPE_... bit field) + + VOID* + pointer to comment + + + UNISTR2 + sv101_name - unicode string of server name + + + UNISTR2 + sv_101_comment - unicode string of server comment. + + + UINT8[] + padding to get unicode string 4-byte aligned with start of the SMB header. + + + + + + + + +MSRPC over Transact Named Pipe + +For details on the SMB Transact Named Pipe, see cifs6.txt + + +MSRPC Pipes + + +The MSRPC is conducted over an SMB Transact Pipe with a name of +\PIPE\. You must first obtain a 16 bit file handle, by +sending a SMBopenX with the pipe name \PIPE\srvsvc for +example. You can then perform an SMB Trans, +and must carry out an SMBclose on the file handle once you are finished. + + + +Trans Requests must be sent with two setup UINT16s, no UINT16 params (none +known about), and UINT8 data parameters sufficient to contain the MSRPC +header, and MSRPC data. The first UINT16 setup parameter must be either +0x0026 to indicate an RPC, or 0x0001 to indicate Set Named Pipe Handle +state. The second UINT16 parameter must be the file handle for the pipe, +obtained above. + + + +The Data section for an API Command of 0x0026 (RPC pipe) in the Trans +Request is the RPC Header, followed by the RPC Data. The Data section for +an API Command of 0x0001 (Set Named Pipe Handle state) is two bytes. The +only value seen for these two bytes is 0x00 0x43. + + + +MSRPC Responses are sent as response data inside standard SMB Trans +responses, with the MSRPC Header, MSRPC Data and MSRPC tail. + + + +It is suspected that the Trans Requests will need to be at least 2-byte +aligned (probably 4-byte). This is standard practice for SMBs. It is also +independent of the observed 4-byte alignments with the start of the MSRPC +header, including the 4-byte alignment between the MSRPC header and the +MSRPC data. + + + +First, an SMBtconX connection is made to the IPC$ share. The connection +must be made using encrypted passwords, not clear-text. Then, an SMBopenX +is made on the pipe. Then, a Set Named Pipe Handle State must be sent, +after which the pipe is ready to accept API commands. Lastly, and SMBclose +is sent. + + + +To be resolved: + + + +lkcl/01nov97 there appear to be two additional bytes after the null-terminated \PIPE\ name for the RPC pipe. Values seen so far are +listed below: + + + initial SMBopenX request: RPC API command 0x26 params: + "\\PIPE\\lsarpc" 0x65 0x63; 0x72 0x70; 0x44 0x65; + "\\PIPE\\srvsvc" 0x73 0x76; 0x4E 0x00; 0x5C 0x43; + + + + + +Header + +[section to be rewritten, following receipt of work by Duncan Stansfield] + +Interesting note: if you set packed data representation to 0x0100 0000 +then all 4-byte and 2-byte word ordering is turned around! + +The start of each of the NTLSA and NETLOGON named pipes begins with: + + +offsetVariable typeVariable data +00UINT85 - RPC major version +01UINT80 - RPC minor version +02UINT82 - RPC response packet +03UINT83 - (FirstFrag bit-wise or with LastFrag) +04UINT320x1000 0000 - packed data representation +08UINT16fragment length - data size (bytes) inc header and tail. +0AUINT160 - authentication length +0CUINT32call identifier. matches 12th UINT32 of incoming RPC data. +10UINT32allocation hint - data size (bytes) minus header and tail. +14UINT160 - presentation context identifier +16UINT80 - cancel count +17UINT8in replies: 0 - reserved; in requests: opnum - see #defines. +18......start of data (goes on for allocation_hint bytes) + + + +RPC_Packet for request, response, bind and bind acknowledgement + + + + UINT8 versionmaj +reply same as request (0x05) + + UINT8 versionmin +reply same as request (0x00) + + UINT8 type +one of the MSRPC_Type enums + + UINT8 flags +reply same as request (0x00 for Bind, 0x03 for Request) + + UINT32 representation +reply same as request (0x00000010) + + UINT16 fraglength +the length of the data section of the SMB trans packet + + UINT16 authlength + + + + UINT32 callid +call identifier. (e.g. 0x00149594) + + * stub USE TvPacket +the remainder of the packet depending on the "type" + + + + + +Interface identification + +the interfaces are numbered. as yet I haven't seen more than one interface used on the same pipe name srvsvc + + +abstract (0x4B324FC8, 0x01D31670, 0x475A7812, 0x88E16EBF, 0x00000003) +transfer (0x8A885D04, 0x11C91CEB, 0x0008E89F, 0x6048102B, 0x00000002) + + + + + +RPC_Iface RW + + + + UINT8 byte[16] +16 bytes of number + + UINT32 version +the interface number + + + + + + +RPC_ReqBind RW + +the remainder of the packet after the header if "type" was Bind in the response header, "type" should be BindAck + + + + UINT16 maxtsize +maximum transmission fragment size (0x1630) + + UINT16 maxrsize +max receive fragment size (0x1630) + + UINT32 assocgid +associated group id (0x0) + + UINT32 numelements +the number of elements (0x1) + + UINT16 contextid +presentation context identifier (0x0) + + UINT8 numsyntaxes +the number of syntaxes (has always been 1?)(0x1) + + UINT8[] +4-byte alignment padding, against SMB header + + * abstractint USE RPC_Iface +num and vers. of interface client is using + + * transferint USE RPC_Iface + num and vers. of interface to use for replies + + + + + + +RPC_Address RW + + + + UINT16 length +length of the string including null terminator + + * port USE string +the string above in single byte, null terminated form + + + + + +RPC_ResBind RW + +the response to place after the header in the reply packet + + + + UINT16 maxtsize +same as request + + UINT16 maxrsize +same as request + + UINT32 assocgid +zero + + * secondaddr USE RPC_Address +the address string, as described earlier + + UINT8[] +4-byte alignment padding, against SMB header + + UINT8 numresults +the number of results (0x01) + + UINT8[] +4-byte alignment padding, against SMB header + + UINT16 result +result (0x00 = accept) + + UINT16 reason +reason (0x00 = no reason specified) + + * transfersyntax USE RPC_Iface +the transfer syntax from the request + + + + + +RPC_ReqNorm RW + +the remainder of the packet after the header for every other other request + + + + UINT32 allochint +the size of the stub data in bytes + + UINT16 prescontext +presentation context identifier (0x0) + + UINT16 opnum +operation number (0x15) + + * stub USE TvPacket +a packet dependent on the pipe name (probably the interface) and the op number) + + + + + +RPC_ResNorm RW + + + + UINT32 allochint +# size of the stub data in bytes + + UINT16 prescontext +# presentation context identifier (same as request) + + UINT8 cancelcount +# cancel count? (0x0) + + UINT8 reserved +# 0 - one byte padding + + * stub USE TvPacket +# the remainder of the reply + + + + + + +Tail + +The end of each of the NTLSA and NETLOGON named pipes ends with: + + + + ...... + end of data + + + UINT32 + return code + + + + + + +RPC Bind / Bind Ack + + +RPC Binds are the process of associating an RPC pipe (e.g \PIPE\lsarpc) +with a "transfer syntax" (see RPC_Iface structure). The purpose for doing +this is unknown. + + +Note: The RPC_ResBind SMB Transact request is sent with two uint16 setup parameters. The first is 0x0026; the second is the file handle + returned by the SMBopenX Transact response. + +Note: The RPC_ResBind members maxtsize, maxrsize and assocgid are the same in the response as the same members in the RPC_ReqBind. The + RPC_ResBind member transfersyntax is the same in the response as + the + +Note: The RPC_ResBind response member secondaddr contains the name of what is presumed to be the service behind the RPC pipe. The + mapping identified so far is: + + + + + initial SMBopenX request: + RPC_ResBind response: + + + + "\\PIPE\\srvsvc" + "\\PIPE\\ntsvcs" + + + "\\PIPE\\samr" + "\\PIPE\\lsass" + + + "\\PIPE\\lsarpc" + "\\PIPE\\lsass" + + + "\\PIPE\\wkssvc" + "\\PIPE\\wksvcs" + + + "\\PIPE\\NETLOGON" + "\\PIPE\\NETLOGON" + + + +Note: The RPC_Packet fraglength member in both the Bind Request and Bind Acknowledgment must contain the length of the entire RPC data, including the RPC_Packet header. + +Request: + + +RPC_Packet +RPC_ReqBind + + +Response: + +RPC_Packet +RPC_ResBind + + + + + +NTLSA Transact Named Pipe + +The sequence of actions taken on this pipe are: + + +Establish a connection to the IPC$ share (SMBtconX). use encrypted passwords. +Open an RPC Pipe with the name "\\PIPE\\lsarpc". Store the file handle. +Using the file handle, send a Set Named Pipe Handle state to 0x4300. +Send an LSA Open Policy request. Store the Policy Handle. +Using the Policy Handle, send LSA Query Info Policy requests, etc. +Using the Policy Handle, send an LSA Close. +Close the IPC$ share. + + +Defines for this pipe, identifying the query are: + + + LSA Open Policy: + 0x2c + + + LSA Query Info Policy: + 0x07 + + + LSA Enumerate Trusted Domains: + 0x0d + + + LSA Open Secret: + 0xff + + + LSA Lookup SIDs: + 0xfe + + + LSA Lookup Names: + 0xfd + + + LSA Close: + 0x00 + + + + + + +LSA Open Policy + +Note: The policy handle can be anything you like. + + +Request + + + + VOID* + buffer pointer + + + UNISTR2 + server name - unicode string starting with two '\'s + + + OBJ_ATTR + object attributes + + + UINT32 + 1 - desired access + + + + + + +Response + + + + + POL_HND + LSA policy handle + + + + return + 0 - indicates success + + + + + + + + + +LSA Query Info Policy + +Note: The info class in response must be the same as that in the request. + + +Request + + + + POL_HND +LSA policy handle + + UINT16 +info class (also a policy handle?) + + + + + +Response + + + + VOID* + undocumented buffer pointer + + + UINT16 + info class (same as info class in request). + + + + + +switch (info class) +case 3: +case 5: +{ +DOM_INFO domain info, levels 3 and 5 (are the same). +} + +return 0 - indicates success + + + + + + + +LSA Enumerate Trusted Domains + + +Request + +no extra data + + + + +Response + + + + UINT32 + 0 - enumeration context + + + UINT32 + 0 - entries read + + + UINT32 + 0 - trust information + + + return + 0x8000 001a - "no trusted domains" success code + + + + + + + +LSA Open Secret + + +Request + +no extra data + + + + +Response + + + + UINT32 + 0 - undocumented + + + UINT32 + 0 - undocumented + + + UINT32 + 0 - undocumented + + + UINT32 + 0 - undocumented + + + UINT32 + 0 - undocumented + + + +return 0x0C00 0034 - "no such secret" success code + + + + + + +LSA Close + + +Request + + + + POL_HND + policy handle to be closed + + + + + + +Response + + + + POL_HND +0s - closed policy handle (all zeros) + + +return 0 - indicates success + + + + + +LSA Lookup SIDS + +Note: num_entries in response must be same as num_entries in request. + + +Request + + + + POL_HND + LSA policy handle + + + UINT32 + num_entries + + + VOID* + undocumented domain SID buffer pointer + + + VOID* + undocumented domain name buffer pointer + + + VOID*[num_entries] undocumented domain SID pointers to be looked up. + +DOM_SID[num_entries] domain SIDs to be looked up. + + char[16] + completely undocumented 16 bytes. + + + + + + +Response + + + + DOM_REF +domain reference response + + UINT32 +num_entries (listed above) + + VOID* +undocumented buffer pointer + + UINT32 +num_entries (listed above) + + DOM_SID2[num_entries] +domain SIDs (from Request, listed above). + + UINT32 +num_entries (listed above) + + +return 0 - indicates success + + + + + + +LSA Lookup Names + +Note: num_entries in response must be same as num_entries in request. + + +Request + + + + POL_HND + LSA policy handle + + + UINT32 + num_entries + + + UINT32 + num_entries + + + VOID* + undocumented domain SID buffer pointer + + + VOID* + undocumented domain name buffer pointer + + + NAME[num_entries] + names to be looked up. + + + char[] + undocumented bytes - falsely translated SID structure? + + + + + + +Response + + + + DOM_REF +domain reference response + + UINT32 +num_entries (listed above) + + VOID* +undocumented buffer pointer + + UINT32 +num_entries (listed above) + + DOM_RID[num_entries] +domain SIDs (from Request, listed above). + + UINT32 +num_entries (listed above) + + +return 0 - indicates success + + + + + + +NETLOGON rpc Transact Named Pipe + +The sequence of actions taken on this pipe are: + + +tablish a connection to the IPC$ share (SMBtconX). use encrypted passwords. +en an RPC Pipe with the name "\\PIPE\\NETLOGON". Store the file handle. +ing the file handle, send a Set Named Pipe Handle state to 0x4300. +eate Client Challenge. Send LSA Request Challenge. Store Server Challenge. +lculate Session Key. Send an LSA Auth 2 Challenge. Store Auth2 Challenge. +lc/Verify Client Creds. Send LSA Srv PW Set. Calc/Verify Server Creds. +lc/Verify Client Creds. Send LSA SAM Logon . Calc/Verify Server Creds. +lc/Verify Client Creds. Send LSA SAM Logoff. Calc/Verify Server Creds. +ose the IPC$ share. + + +Defines for this pipe, identifying the query are + + + + LSA Request Challenge: + 0x04 + + + LSA Server Password Set: + 0x06 + + + LSA SAM Logon: + 0x02 + + + LSA SAM Logoff: + 0x03 + + + LSA Auth 2: + 0x0f + + + LSA Logon Control: + 0x0e + + + + +LSA Request Challenge + +Note: logon server name starts with two '\' characters and is upper case. + +Note: logon client is the machine, not the user. + +Note: the initial LanManager password hash, against which the challenge is issued, is the machine name itself (lower case). there will becalls issued (LSA Server Password Set) which will change this, later. refusing these calls allows you to always deal with the same password (i.e the LM# of the machine name in lower case). + + +Request + + + + VOID* + undocumented buffer pointer + + + UNISTR2 + logon server unicode string + + + UNISTR2 + logon client unicode string + + + char[8] + client challenge + + + + + + +Response + + + + char[8] + server challenge + + + +return 0 - indicates success + + + + + + +LSA Authenticate 2 + +Note: in between request and response, calculate the client credentials, and check them against the client-calculated credentials (this process uses the previously received client credentials). + +Note: neg_flags in the response is the same as that in the request. + +Note: you must take a copy of the client-calculated credentials received here, because they will be used in subsequent authentication packets. + + +Request + + + + LOG_INFO + client identification info + + + char[8] + client-calculated credentials + + + UINT8[] +padding to 4-byte align with start of SMB header. + + UINT32 +neg_flags - negotiated flags (usual value is 0x0000 01ff) + + + + + +Response + + + + char[8] + server credentials. + + + UINT32 + neg_flags - same as neg_flags in request. + + + +return 0 - indicates success. failure value unknown. + + + + + + +LSA Server Password Set + +Note: the new password is suspected to be a DES encryption using the old password to generate the key. + +Note: in between request and response, calculate the client credentials, and check them against the client-calculated credentials (this process uses the previously received client credentials). + +Note: the server credentials are constructed from the client-calculated credentials and the client time + 1 second. + +Note: you must take a copy of the client-calculated credentials received here, because they will be used in subsequent authentication packets. + + +Request + + + + CLNT_INFO + client identification/authentication info + + + char[] + new password - undocumented. + + + + + + +Response + + + + CREDS + server credentials. server time stamp appears to be ignored. + + + +return 0 - indicates success; 0xC000 006a indicates failure + + + + +LSA SAM Logon + + +Note: valid_user is True iff the username and password hash are valid for + the requested domain. + + + +Request + + + SAM_INFO + sam_id structure + + + + + + +Response + + + + VOID* + undocumented buffer pointer + + + CREDS + server credentials. server time stamp appears to be ignored. + + + + +if (valid_user) +{ + UINT16 3 - switch value indicating USER_INFO structure. + VOID* non-zero - pointer to USER_INFO structure + USER_INFO user logon information + + UINT32 1 - Authoritative response; 0 - Non-Auth? + + return 0 - indicates success +} +else +{ + UINT16 0 - switch value. value to indicate no user presumed. + VOID* 0x0000 0000 - indicates no USER_INFO structure. + + UINT32 1 - Authoritative response; 0 - Non-Auth? + + return 0xC000 0064 - NT_STATUS_NO_SUCH_USER. +} + + + + + + + +LSA SAM Logoff + + +Note: presumably, the SAM_INFO structure is validated, and a (currently + undocumented) error code returned if the Logoff is invalid. + + + +Request + + + + SAM_INFO + sam_id structure + + + + + + +Response + + + + VOID* + undocumented buffer pointer + + + CREDS + server credentials. server time stamp appears to be ignored. + + + +return 0 - indicates success. undocumented failure indication. + + + + + + +\\MAILSLOT\NET\NTLOGON + + +Note: mailslots will contain a response mailslot, to which the response + should be sent. the target NetBIOS name is REQUEST_NAME<20>, where + REQUEST_NAME is the name of the machine that sent the request. + + + +Query for PDC + +Note: NTversion, LMNTtoken, LM20token in response are the same as those given in the request. + + +Request + + + + UINT16 + 0x0007 - Query for PDC + + + STR + machine name + + + STR + response mailslot + + + UINT8[] + padding to 2-byte align with start of mailslot. + + + UNISTR + machine name + + + UINT32 + NTversion + + + UINT16 + LMNTtoken + + + UINT16 + LM20token + + + + + + +Response + + + + UINT16 +0x000A - Respose to Query for PDC + + STR +machine name (in uppercase) + + UINT8[] + padding to 2-byte align with start of mailslot. + + + UNISTR + machine name + + + UNISTR +domain name + + UINT32 +NTversion (same as received in request) + + UINT16 +LMNTtoken (same as received in request) + + UINT16 +LM20token (same as received in request) + + + + +SAM Logon + +Note: machine name in response is preceded by two '\' characters. + +Note: NTversion, LMNTtoken, LM20token in response are the same as those given in the request. + +Note: user name in the response is presumably the same as that in the request. + + +Request + + + + UINT16 + 0x0012 - SAM Logon + + + UINT16 + request count + + + UNISTR + machine name + + + UNISTR + user name + + + STR + response mailslot + + + UINT32 + alloweable account + + + UINT32 + domain SID size + + + char[sid_size] + domain SID, of sid_size bytes. + + + UINT8[] + ???? padding to 4? 2? -byte align with start of mailslot. + + + UINT32 + NTversion + + + UINT16 + LMNTtoken + + + UINT16 + LM20token + + + + + + +Response + + + + UINT16 + 0x0013 - Response to SAM Logon + + + UNISTR + machine name + + + UNISTR + user name - workstation trust account + + + UNISTR + domain name + + + UINT32 + NTversion + + + UINT16 + LMNTtoken + + + UINT16 + LM20token + + + + + + + + +SRVSVC Transact Named Pipe + +Defines for this pipe, identifying the query are: + + + + Net Share Enum + 0x0f + + + Net Server Get Info + 0x15 + + + + + +Net Share Enum + +Note: share level and switch value in the response are presumably the same as those in the request. + +Note: cifsrap2.txt (section 5) may be of limited assistance here. + + +Request + + + + VOID* +pointer (to server name?) + + UNISTR2 + server name + + + UINT8[] + padding to get unicode string 4-byte aligned with the start of the SMB header. + + + UINT32 + share level + + + UINT32 + switch value + + + VOID* + pointer to SHARE_INFO_1_CTR + + + SHARE_INFO_1_CTR + share info with 0 entries + + + UINT32 +preferred maximum length (0xffff ffff) + + + + +Response + + + + UINT32 + share level + + + UINT32 + switch value + + + VOID* +pointer to SHARE_INFO_1_CTR + + SHARE_INFO_1_CTR +share info (only added if share info ptr is non-zero) + + +return 0 - indicates success + + + + + +Net Server Get Info + +Note: level is the same value as in the request. + + +Request + + + + UNISTR2 + server name + + + UINT32 + switch level + + + + + + +Response + + + + UINT32 + switch level + + + VOID* + pointer to SERVER_INFO_101 + + + SERVER_INFO_101 +server info (only added if server info ptr is non-zero) + + +return 0 - indicates success + + + + + + +Cryptographic side of NT Domain Authentication + + +Definitions + + + +Add(A1,A2) +Intel byte ordered addition of corresponding 4 byte words in arrays A1 and A2 + + + +E(K,D) +DES ECB encryption of 8 byte data D using 7 byte key K + + + +lmowf() +Lan man hash + + + +ntowf() +NT hash + + + +PW +md4(machine_password) == md4(lsadump $machine.acc) == +pwdump(machine$) (initially) == md4(lmowf(unicode(machine))) + + + + +ARC4(K,Lk,D,Ld) +ARC4 encryption of data D of length Ld with key K of length Lk + + + +v[m..n(,l)] +subset of v from bytes m to n, optionally padded with zeroes to length l + + + +Cred(K,D) +E(K[7..7,7],E(K[0..6],D)) computes a credential + + + +Time() +4 byte current time + + + +Cc,Cs +8 byte client and server challenges Rc,Rs: 8 byte client and server credentials + + + + + + + +Protocol + + +C->S ReqChal,Cc S->C Cs + + + +C & S compute session key Ks = E(PW[9..15],E(PW[0..6],Add(Cc,Cs))) + + + +C: Rc = Cred(Ks,Cc) C->S Authenticate,Rc S: Rs = Cred(Ks,Cs), +assert(Rc == Cred(Ks,Cc)) S->C Rs C: assert(Rs == Cred(Ks,Cs)) + + + +On joining the domain the client will optionally attempt to change its +password and the domain controller may refuse to update it depending +on registry settings. This will also occur weekly afterwards. + + + +C: Tc = Time(), Rc' = Cred(Ks,Rc+Tc) C->S ServerPasswordSet,Rc',Tc, +arc4(Ks[0..7,16],lmowf(randompassword()) C: Rc = Cred(Ks,Rc+Tc+1) S: +assert(Rc' == Cred(Ks,Rc+Tc)), Ts = Time() S: Rs' = Cred(Ks,Rs+Tc+1) +S->C Rs',Ts C: assert(Rs' == Cred(Ks,Rs+Tc+1)) S: Rs = Rs' + + + +User: U with password P wishes to login to the domain (incidental data +such as workstation and domain omitted) + + + +C: Tc = Time(), Rc' = Cred(Ks,Rc+Tc) C->S NetLogonSamLogon,Rc',Tc,U, +arc4(Ks[0..7,16],16,ntowf(P),16), arc4(Ks[0..7,16],16,lmowf(P),16) S: +assert(Rc' == Cred(Ks,Rc+Tc)) assert(passwords match those in SAM) S: +Ts = Time() + + + +S->C Cred(Ks,Cred(Ks,Rc+Tc+1)),userinfo(logon script,UID,SIDs,etc) C: +assert(Rs == Cred(Ks,Cred(Rc+Tc+1)) C: Rc = Cred(Ks,Rc+Tc+1) + + + + + +Comments + + +On first joining the domain the session key could be computed by +anyone listening in on the network as the machine password has a well +known value. Until the machine is rebooted it will use this session +key to encrypt NT and LM one way functions of passwords which are +password equivalents. Any user who logs in before the machine has been +rebooted a second time will have their password equivalent exposed. Of +course the new machine password is exposed at this time anyway. + + + +None of the returned user info such as logon script, profile path and +SIDs *appear* to be protected by anything other than the TCP checksum. + + + +The server time stamps appear to be ignored. + + + +The client sends a ReturnAuthenticator in the SamLogon request which I +can't find a use for. However its time is used as the timestamp +returned by the server. + + + +The password OWFs should NOT be sent over the network reversibly +encrypted. They should be sent using ARC4(Ks,md4(owf)) with the server +computing the same function using the owf values in the SAM. + + + + + + +SIDs and RIDs + + +SIDs and RIDs are well documented elsewhere. + + + +A SID is an NT Security ID (see DOM_SID structure). They are of the form: + + + +revision-NN-SubAuth1-SubAuth2-SubAuth3... +revision-0xNNNNNNNNNNNN-SubAuth1-SubAuth2-SubAuth3... + + + +currently, the SID revision is 1. +The Sub-Authorities are known as Relative IDs (RIDs). + + + +Well-known SIDs + + +Universal well-known SIDs + + + + Null SID + S-1-0-0 + + + World + S-1-1-0 + + + Local + S-1-2-0 + + + Creator Owner ID + S-1-3-0 + + + Creator Group ID + S-1-3-1 + + + Creator Owner Server ID + S-1-3-2 + + + Creator Group Server ID + S-1-3-3 + + + (Non-unique IDs) + S-1-4 + + + + + + +NT well-known SIDs + + + + NT Authority + S-1-5 + + + Dialup + S-1-5-1 + + + Network + S-1-5-2 + + + Batch + S-1-5-3 + + + Interactive + S-1-5-4 + + + Service +S-1-5-6 + + AnonymousLogon(aka null logon session) + S-1-5-7 + + + Proxy +S-1-5-8 + + ServerLogon(aka domain controller account) + S-1-5-8 + + + (Logon IDs) + S-1-5-5-X-Y + + + (NT non-unique IDs) + S-1-5-0x15-... + + + (Built-in domain) + s-1-5-0x20 + + + + + + + +Well-known RIDS + + +A RID is a sub-authority value, as part of either a SID, or in the case +of Group RIDs, part of the DOM_GID structure, in the USER_INFO_1 +structure, in the LSA SAM Logon response. + + + +Well-known RID users + + +Groupname +???? +RID +DOMAIN_USER_RID_ADMIN0x000001F4 +DOMAIN_USER_RID_GUEST0x000001F5 + + + + + +Well-known RID groups + + +Groupname +???? +RID + DOMAIN_GROUP_RID_ADMINS0x00000200 + DOMAIN_GROUP_RID_USERS0x00000201 + DOMAIN_GROUP_RID_GUESTS0x00000202 + + + + + +Well-known RID aliases + + +Groupname +???? +RID + DOMAIN_ALIAS_RID_ADMINS0x00000220 + DOMAIN_ALIAS_RID_USERS0x00000221 + DOMAIN_ALIAS_RID_GUESTS0x00000222 + DOMAIN_ALIAS_RID_POWER_USERS0x00000223 + DOMAIN_ALIAS_RID_ACCOUNT_OPS0x00000224 + DOMAIN_ALIAS_RID_SYSTEM_OPS0x00000225 + DOMAIN_ALIAS_RID_PRINT_OPS0x00000226 + DOMAIN_ALIAS_RID_BACKUP_OPS0x00000227 + DOMAIN_ALIAS_RID_REPLICATOR0x00000228 + + + + + +
diff --git a/docs/docbook/devdoc/dev-doc.sgml b/docs/docbook/devdoc/dev-doc.sgml index 76ad512add7..0e017fb6a68 100644 --- a/docs/docbook/devdoc/dev-doc.sgml +++ b/docs/docbook/devdoc/dev-doc.sgml @@ -6,11 +6,13 @@ + + ]> -SAMBA Deverlopers Guide +SAMBA Developers Guide @@ -32,7 +34,7 @@ people developing samba or those interested in doing so. than one person can maintain. The most recent version of this document can be found at http://www.samba.org/ on the "Documentation" page. Please send updates to jerry@samba.org. +url="mailto:jelmer@samba.org">jelmer@samba.org.
@@ -52,5 +54,7 @@ url="http://www.fsf.org/licenses/gpl.txt">http://www.fsf.org/licenses/gpl.txt -- cgit From 60446ad6033f6f9179ac2566f670d04ff8b662c2 Mon Sep 17 00:00:00 2001 From: Jelmer Vernooij Date: Thu, 29 Aug 2002 16:18:59 +0000 Subject: Remove more obsolete documents --- docs/textdocs/Passwords.txt | 46 -- docs/textdocs/Tracing.txt | 93 --- docs/textdocs/UNIX-SMB.txt | 231 ------- docs/textdocs/cifsntdomain.txt | 1498 ---------------------------------------- 4 files changed, 1868 deletions(-) delete mode 100644 docs/textdocs/Passwords.txt delete mode 100644 docs/textdocs/Tracing.txt delete mode 100644 docs/textdocs/UNIX-SMB.txt delete mode 100644 docs/textdocs/cifsntdomain.txt (limited to 'docs') diff --git a/docs/textdocs/Passwords.txt b/docs/textdocs/Passwords.txt deleted file mode 100644 index 25d4c816f05..00000000000 --- a/docs/textdocs/Passwords.txt +++ /dev/null @@ -1,46 +0,0 @@ -Contributor: Unknown -Date: Updated April 19th 1999. -Status: Current - -Subject: NOTE ABOUT PASSWORDS -============================================================================= - -Unix systems use a wide variety of methods for checking the validity -of a password. This is primarily controlled with the Makefile defines -mentioned in the Makefile. - -Also note that some clients (notably WfWg) uppercase the password -before sending it. The server tries the password as it receives it and -also after lowercasing it. - -The Samba server can also be configured to try different -upper/lowercase combinations. This is controlled by the [global] -parameter "password level". A level of N means to try all combinations -up to N uppercase characters in the password. A high value can chew a -fair bit of CPU time and can lower the security of your system. Do not -use this options unless you really need it - the time taken for -password checking can become so high that clients time out. - -If you do use the "password level" option then you might like to use --DUFC_CRYPT in your Makefile. On some machine this makes password -checking _much_ faster. This is also useful if you use the @group -syntax in the user= option. - -If your site uses AFS (the Andrew File System), you can use the AFS section -in the Makefile. This will first attempt to authenticate a username and -password to AFS. If that succeeds, then the associated AFS rights will be -granted. Otherwise, the password checking routine falls back to whatever -Unix password checking method you are using. Note that the AFS code is -only written and tested for AFS 3.3 and later. - - -SECURITY = SERVER or DOMAIN -=========================== - -Samba can use a remote server to do its username/password -validation. This allows you to have one central machine (for example a -NT box) control the passwords for the Unix box. - -See the section on "security =" in smb.conf(5) for details. - - diff --git a/docs/textdocs/Tracing.txt b/docs/textdocs/Tracing.txt deleted file mode 100644 index 6cc1d69258d..00000000000 --- a/docs/textdocs/Tracing.txt +++ /dev/null @@ -1,93 +0,0 @@ -Contributor: Andrew Tridgell -Date: Old -Status: Questionable - -Subject: How to trace samba system calls for debugging purposes -============================================================================= - -This file describes how to do a system call trace on Samba to work out -what its doing wrong. This is not for the faint of heart, but if you -are reading this then you are probably desperate. - -Actually its not as bad as the the above makes it sound, just don't -expect the output to be very pretty :-) - -Ok, down to business. One of the big advantages of unix systems is -that they nearly all come with a system trace utility that allows you -to monitor all system calls that a program is making. This is -extremely using for debugging and also helps when trying to work out -why something is slower than you expect. You can use system tracing -without any special compilation options. - -The system trace utility is called different things on different -systems. On Linux systems its called strace. Under SunOS 4 its called -trace. Under SVR4 style systems (including solaris) its called -truss. Under many BSD systems its called ktrace. - -The first thing you should do is read the man page for your native -system call tracer. In the discussion below I'll assume its called -strace as strace is the only portable system tracer (its available for -free for many unix types) and its also got some of the nicest -features. - -Next, try using strace on some simple commands. For example, "strace -ls" or "strace echo hello". - -You'll notice that it produces a LOT of output. It is showing you the -arguments to every system call that the program makes and the -result. Very little happens in a program without a system call so you -get lots of output. You'll also find that it produces a lot of -"preamble" stuff showing the loading of shared libraries etc. Ignore -this (unless its going wrong!) - -For example, the only line that really matters in the "strace echo -hello" output is: - -write(1, "hello\n", 6) = 6 - -all the rest is just setting up to run the program. - -Ok, now you're famialiar with strace. To use it on Samba you need to -strace the running smbd daemon. The way I tend ot use it is to first -login from my Windows PC to the Samba server, then use smbstatus to -find which process ID that client is attached to, then as root I do -"strace -p PID" to attach to that process. I normally redirect the -stderr output from this command to a file for later perusal. For -example, if I'm using a csh style shell: - - strace -f -p 3872 >& strace.out - -or with a sh style shell: - - strace -f -p 3872 > strace.out 2>&1 - -Note the "-f" option. This is only available on some systems, and -allows you to trace not just the current process, but any children it -forks. This is great for finding printing problems caused by the -"print command" being wrong. - -Once you are attached you then can do whatever it is on the client -that is causing problems and you will capture all the system calls -that smbd makes. - -So how do you interpret the results? Generally I search through the -output for strings that I know will appear when the problem -happens. For example, if I am having touble with permissions on a file -I would search for that files name in the strace output and look at -the surrounding lines. Another trick is to match up file descriptor -numbers and "follow" what happens to an open file until it is closed. - -Beyond this you will have to use your initiative. To give you an idea -of wehat you are looking for here is a piece of strace output that -shows that /dev/null is not world writeable, which causes printing to -fail with Samba: - -[pid 28268] open("/dev/null", O_RDWR) = -1 EACCES (Permission denied) -[pid 28268] open("/dev/null", O_WRONLY) = -1 EACCES (Permission denied) - -the process is trying to first open /dev/null read-write then -read-only. Both fail. This means /dev/null has incorrect permissions. - -Have fun! - -(please send updates/fixes to this file to samba@samba.org) diff --git a/docs/textdocs/UNIX-SMB.txt b/docs/textdocs/UNIX-SMB.txt deleted file mode 100644 index c3d7643cbcb..00000000000 --- a/docs/textdocs/UNIX-SMB.txt +++ /dev/null @@ -1,231 +0,0 @@ -Contributor: Andrew Tridgell -Date: April 1995 - -Subject: Discussion of NetBIOS in a Unix World -============================================================================ - -This is a short document that describes some of the issues that -confront a SMB implementation on unix, and how Samba copes with -them. They may help people who are looking at unix<->PC -interoperability. - -It was written to help out a person who was writing a paper on unix to -PC connectivity. - - -Usernames -========= - -The SMB protocol has only a loose username concept. Early SMB -protocols (such as CORE and COREPLUS) have no username concept at -all. Even in later protocols clients often attempt operations -(particularly printer operations) without first validating a username -on the server. - -Unix security is based around username/password pairs. A unix box -should not allow clients to do any substantive operation without some -sort of validation. - -The problem mostly manifests itself when the unix server is in "share -level" security mode. This is the default mode as the alternative -"user level" security mode usually forces a client to connect to the -server as the same user for each connected share, which is -inconvenient in many sites. - -In "share level" security the client normally gives a username in the -"session setup" protocol, but does not supply an accompanying -password. The client then connects to resources using the "tree -connect" protocol, and supplies a password. The problem is that the -user on the PC types the username and the password in different -contexts, unaware that they need to go together to give access to the -server. The username is normally the one the user typed in when they -"logged onto" the PC (this assumes Windows for Workgroups). The -password is the one they chose when connecting to the disk or printer. - -The user often chooses a totally different username for their login as -for the drive connection. Often they also want to access different -drives as different usernames. The unix server needs some way of -divining the correct username to combine with each password. - -Samba tries to avoid this problem using several methods. These succeed -in the vast majority of cases. The methods include username maps, the -service%user syntax, the saving of session setup usernames for later -validation and the derivation of the username from the service name -(either directly or via the user= option). - -File Ownership -============== - -The commonly used SMB protocols have no way of saying "you can't do -that because you don't own the file". They have, in fact, no concept -of file ownership at all. - -This brings up all sorts of interesting problems. For example, when -you copy a file to a unix drive, and the file is world writeable but -owned by another user the file will transfer correctly but will -receive the wrong date. This is because the utime() call under unix -only succeeds for the owner of the file, or root, even if the file is -world writeable. For security reasons Samba does all file operations -as the validated user, not root, so the utime() fails. This can stuff -up shared development diectories as programs like "make" will not get -file time comparisons right. - -There are several possible solutions to this problem, including -username mapping, and forcing a specific username for particular -shares. - -Passwords -========= - -Many SMB clients uppercase passwords before sending them. I have no -idea why they do this. Interestingly WfWg uppercases the password only -if the server is running a protocol greater than COREPLUS, so -obviously it isn't just the data entry routines that are to blame. - -Unix passwords are case sensitive. So if users use mixed case -passwords they are in trouble. - -Samba can try to cope with this by either using the "password level" -option which causes Samba to try the offered password with up to the -specified number of case changes, or by using the "password server" -option which allows Samba to do its validation via another machine -(typically a WinNT server). - -Samba supports the password encryption method used by SMB -clients. Note that the use of password encryption in Microsoft -networking leads to password hashes that are "plain text equivalent". -This means that it is *VERY* important to ensure that the Samba -smbpasswd file containing these password hashes is only readable -by the root user. See the documentation ENCRYPTION.txt for more -details. - - -Locking -======= - -The locking calls available under a DOS/Windows environment are much -richer than those available in unix. This means a unix server (like -Samba) choosing to use the standard fcntl() based unix locking calls -to implement SMB locking has to improvise a bit. - -One major problem is that dos locks can be in a 32 bit (unsigned) -range. Unix locking calls are 32 bits, but are signed, giving only a 31 -bit range. Unfortunately OLE2 clients use the top bit to select a -locking range used for OLE semaphores. - -To work around this problem Samba compresses the 32 bit range into 31 -bits by appropriate bit shifting. This seems to work but is not -ideal. In a future version a separate SMB lockd may be added to cope -with the problem. - -It also doesn't help that many unix lockd daemons are very buggy and -crash at the slightest provocation. They normally go mostly unused in -a unix environment because few unix programs use byte range -locking. The stress of huge numbers of lock requests from dos/windows -clients can kill the daemon on some systems. - -The second major problem is the "opportunistic locking" requested by -some clients. If a client requests opportunistic locking then it is -asking the server to notify it if anyone else tries to do something on -the same file, at which time the client will say if it is willing to -give up its lock. Unix has no simple way of implementing -opportunistic locking, and currently Samba has no support for it. - -Deny Modes -========== - -When a SMB client opens a file it asks for a particular "deny mode" to -be placed on the file. These modes (DENY_NONE, DENY_READ, DENY_WRITE, -DENY_ALL, DENY_FCB and DENY_DOS) specify what actions should be -allowed by anyone else who tries to use the file at the same time. If -DENY_READ is placed on the file, for example, then any attempt to open -the file for reading should fail. - -Unix has no equivalent notion. To implement this Samba uses either lock -files based on the files inode and placed in a separate lock -directory or a shared memory implementation. The lock file method -is clumsy and consumes processing and file resources, -the shared memory implementation is vastly prefered and is turned on -by default for those systems that support it. - -Trapdoor UIDs -============= - -A SMB session can run with several uids on the one socket. This -happens when a user connects to two shares with different -usernames. To cope with this the unix server needs to switch uids -within the one process. On some unixes (such as SCO) this is not -possible. This means that on those unixes the client is restricted to -a single uid. - -Note that you can also get the "trapdoor uid" message for other -reasons. Please see the FAQ for details. - -Port numbers -============ - -There is a convention that clients on sockets use high "unprivilaged" -port numbers (>1000) and connect to servers on low "privilaged" port -numbers. This is enforced in Unix as non-root users can't open a -socket for listening on port numbers less than 1000. - -Most PC based SMB clients (such as WfWg and WinNT) don't follow this -convention completely. The main culprit is the netbios nameserving on -udp port 137. Name query requests come from a source port of 137. This -is a problem when you combine it with the common firewalling technique -of not allowing incoming packets on low port numbers. This means that -these clients can't query a netbios nameserver on the other side of a -low port based firewall. - -The problem is more severe with netbios node status queries. I've -found that WfWg, Win95 and WinNT3.5 all respond to netbios node status -queries on port 137 no matter what the source port was in the -request. This works between machines that are both using port 137, but -it means it's not possible for a unix user to do a node status request -to any of these OSes unless they are running as root. The answer comes -back, but it goes to port 137 which the unix user can't listen -on. Interestingly WinNT3.1 got this right - it sends node status -responses back to the source port in the request. - - -Protocol Complexity -=================== - -There are many "protocol levels" in the SMB protocol. It seems that -each time new functionality was added to a Microsoft operating system, -they added the equivalent functions in a new protocol level of the SMB -protocol to "externalise" the new capabilities. - -This means the protocol is very "rich", offering many ways of doing -each file operation. This means SMB servers need to be complex and -large. It also means it is very difficult to make them bug free. It is -not just Samba that suffers from this problem, other servers such as -WinNT don't support every variation of every call and it has almost -certainly been a headache for MS developers to support the myriad of -SMB calls that are available. - -There are about 65 "top level" operations in the SMB protocol (things -like SMBread and SMBwrite). Some of these include hundreds of -sub-functions (SMBtrans has at least 120 sub-functions, like -DosPrintQAdd and NetSessionEnum). All of them take several options -that can change the way they work. Many take dozens of possible -"information levels" that change the structures that need to be -returned. Samba supports all but 2 of the "top level" functions. It -supports only 8 (so far) of the SMBtrans sub-functions. Even NT -doesn't support them all. - -Samba currently supports up to the "NT LM 0.12" protocol, which is the -one preferred by Win95 and WinNT3.5. Luckily this protocol level has a -"capabilities" field which specifies which super-duper new-fangled -options the server suports. This helps to make the implementation of -this protocol level much easier. - -There is also a problem with the SMB specications. SMB is a X/Open -spec, but the X/Open book is far from ideal, and fails to cover many -important issues, leaving much to the imagination. Microsoft recently -renamed the SMB protocol CIFS (Common Internet File System) and have -published new specifications. These are far superior to the old -X/Open documents but there are still undocumented calls and features. -This specification is actively being worked on by a CIFS developers -mailing list hosted by Microsft. - diff --git a/docs/textdocs/cifsntdomain.txt b/docs/textdocs/cifsntdomain.txt deleted file mode 100644 index 643b8957c9f..00000000000 --- a/docs/textdocs/cifsntdomain.txt +++ /dev/null @@ -1,1498 +0,0 @@ -NT Domain Authentication ------------------------- - -Authors: - Luke Kenneth Casson Leighton (lkcl@switchboard.net) --------- - Paul Ashton (paul@argo.demon.co.uk) - - Duncan Stansfield (duncans@sco.com) - - Copyright (C) 1997 Luke Kenneth Casson Leighton - Copyright (C) 1997 Paul Ashton - Copyright (C) 1997 Duncan Stansfield - -Version: 0.024 (01Nov97) --------- - -Distribution: Unlimited and encouraged, for the purposes of implementation -------------- and comments. Feedback welcomed by the authors. - -Liability: Absolutely none accepted implicitly or explicitly, direct ----------- or consequentially, for use, abuse, misuse, lack of use, - misunderstandings, mistakes, omissions, mis-information for - anything in or not in, related to or not related to, or - pertaining to this document, or anything else that a lawyer - can think of or not think of. - -Warning: Please bear in mind that an incorrect implementation of this --------- protocol can cause NT workstation to fail irrevocably, for - which the authors accept no liability (see above). Please - contact your vendor if you have any problems. - -Sources: - Packet Traces from Netmonitor (Service Pack 1 and above) --------- - Paul Ashton and Luke Leighton's other "NT Domain" doc. - - CIFS documentation - cifs6.txt - - CIFS documentation - cifsrap2.txt - -Original: http://mailhost.cb1.com/~lkcl/cifsntdomain.txt. ---------- (Controlled copy maintained by lkcl@switchboard.net) - -Credits: - Paul Ashton: loads of work with Net Monitor; --------- understanding the NT authentication system; - reference implementation of the NT domain support on which - this document is originally based. - - Duncan Stansfield: low-level analysis of MSRPC Pipes. - - Linus Nordberg: producing c-code from Paul's crypto spec. - - Windows Sourcer development team - - -Contents: ---------- - - 1) Introduction - - 2) Structures and notes - - 2.1) Notes - 2.3) Enumerations - 2.3) Structures - - 3) Transact Named Pipe Header/Tail - - 3.1) MSRPC Pipes - 3.2) Header - 3.3) Tail - - 4) NTLSA Transact Named Pipe - - 4.1) LSA Open Policy - 4.2) LSA Query Info Policy - 4.3) LSA Enumerate Trusted Domains - 4.4) LSA Open Secret - 4.5) LSA Close - 4.6) LSA Lookup SIDS - 4.7) LSA Lookup Names - - 5) NETLOGON rpc Transact Named Pipe - - 5.1) LSA Request Challenge - 5.2) LSA Authenticate 2 - 5.3) LSA Server Password Set - 5.4) LSA SAM Logon - 5.5) LSA SAM Logoff - - 6) \\MAILSLOT\NET\NTLOGON - - 6.1) Query for PDC - 6.2) SAM Logon - - 7) SRVSVC Transact Named Pipe - - 7.1) Net Share Enum - 7.2) Net Server Get Info - - -Appendix: ---------- - - A1) Cryptographic side of NT Domain Authentication - - A1.1) Definitions - A1.2) Protocol - A1.3) Comments - - A2) SIDs and RIDs - - A2.1) Well-known SIDs - - A2.1.1) Universal well-known SIDs - A2.1.2) NT well-known SIDs - - A2.2) Well-known RIDS - - A2.2.1) Well-known RID users - A2.2.2) Well-known RID groups - A2.2.3) Well-known RID aliases - - - -1) Introduction ---------------- - - -This document contains information to provide an NT workstation with login -services, without the need for an NT server. - -It should be possible to select a domain instead of a workgroup (in the NT -workstation's TCP/IP settings) and after the obligatory reboot, type in a -username, password, select a domain and successfully log in. I would -appreciate any feedback on your experiences with this process, and any -comments, corrections and additions to this document. - - -The packets described here can be easily derived from (and are probably -better understood using) Netmon.exe. You will need to use the version -of Netmon that matches your system, in order to correctly decode the -NETLOGON, lsarpc and srvsvc Transact pipes. This document is derived from -NT Service Pack 1 and its corresponding version of Netmon. It is intended -that an annotated packet trace be produced, which will likely be more -instructive than this document. - -Also needed, to fully implement NT Domain Login Services, is the -document describing the cryptographic part of the NT authentication. -This document is available from comp.protocols.smb; from the ntsecurity.net -digest and from the samba digest, amongst other sources. - -A copy is available from: - -http://ntbugtraq.rc.on.ca/SCRIPTS/WA.EXE?A2=ind9708&L=ntbugtraq&O=A&P=2935 -http://mailhost.cb1.com/~lkcl/crypt.html - - -A c-code implementation, provided by Linus Nordberg -of this protocol is available from: - -http://samba.org/cgi-bin/mfs/01/digest/1997/97aug/0391.html -http://mailhost.cb1.com/~lkcl/crypt.txt - - -Also used to provide debugging information is the Check Build version of -NT workstation, and enabling full debugging in NETLOGON. This is -achieved by setting the following REG_SZ registry key to 0x1ffffff: - -HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters - -- Incorrect direct editing of the registry can cause your machine to fail. - Then again, so can incorrect implementation of this protocol. - See "Liability:" above. - - -Bear in mind that each packet over-the-wire will have its origin in an -API call. Therefore, there are likely to be structures, enumerations -and defines that are usefully documented elsewhere. - - -This document is by no means complete or authoritative. Missing sections -include, but are not limited to: - -- the meaning (and use by NT) of SIDs and RIDs. - -- mappings of RIDs to usernames (and vice-versa). - -- what a User ID is and what a Group ID is. - -- the exact meaning/definition of various magic constants or enumerations. - -- the reply error code and use of that error code when a workstation - becomes a member of a domain (to be described later). Failure to - return this error code will make the workstation report that it is - already a member of the domain. - -- the cryptographic side of the NetrServerPasswordSet command, which would - allow the workstation to change its password. This password is used to - generate the long-term session key. [It is possible to reject this - command, and keep the default workstation password]. - - -2) Notes and Structures ------------------------ - - -2.1) Notes ----------- - -- In the SMB Transact pipes, some "Structures", described here, appear to be - 4-byte aligned with the SMB header, at their start. Exactly which - "Structures" need aligning is not precisely known or documented. - -- In the UDP NTLOGON Mailslots, some "Structures", described here, appear to be - 2-byte aligned with the start of the mailslot, at their start. - -- Domain SID is of the format S-revision-version-auth1-auth2...authN. - e.g S-1-5-123-456-789-123-456. the 5 could be a sub-revision. - -- any undocumented buffer pointers must be non-zero if the string buffer it - refers to contains characters. exactly what value they should be is unknown. - 0x0000 0002 seems to do the trick to indicate that the buffer exists. a - NULL buffer pointer indicates that the string buffer is of zero length. - If the buffer pointer is NULL, then it is suspected that the structure it - refers to is NOT put into (or taken out of) the SMB data stream. This is - empirically derived from, for example, the LSA SAM Logon response packet, - where if the buffer pointer is NULL, the user information is not inserted - into the data stream. Exactly what happens with an array of buffer pointers - is not known, although an educated guess can be made. - -- an array of structures (a container) appears to have a count and a pointer. - if the count is zero, the pointer is also zero. no further data is put - into or taken out of the SMB data stream. if the count is non-zero, then - the pointer is also non-zero. immediately following the pointer is the - count again, followed by an array of container sub-structures. the count - appears a third time after the last sub-structure. - - -2.2) Enumerations ------------------ - -- MSRPC Header type. command number in the msrpc packet header - - MSRPC_Request: 0x00 - MSRPC_Response: 0x02 - MSRPC_Bind: 0x0B - MSRPC_BindAck: 0x0C - -- MSRPC Packet info. the meaning of these flags is undocumented - - FirstFrag: 0x01 - LastFrag: 0x02 - NotaFrag: 0x04 - RecRespond: 0x08 - NoMultiplex: 0x10 - NotForIdemp: 0x20 - NotforBcast: 0x40 - NoUuid: 0x80 - - -2.3) Structures ---------------- - -- sizeof VOID* is 32 bits. - -- sizeof char is 8 bits. - -- UTIME is 32 bits, indicating time in seconds since 01jan1970. documented - in cifs6.txt (section 3.5 page, page 30). - -- NTTIME is 64 bits. documented in cifs6.txt (section 3.5 page, page 30). - -- DOM_SID (domain SID structure) : - - UINT32 num of sub-authorities in domain SID - UINT8 SID revision number - UINT8 num of sub-authorities in domain SID - UINT8[6] 6 bytes for domain SID - Identifier Authority. - UINT16[n_subauths] domain SID sub-authorities - - Note: the domain SID is documented elsewhere. - -- STR (string) : - - char[] null-terminated string of ascii characters. - -- UNIHDR (unicode string header) : - - UINT16 length of unicode string - UINT16 max length of unicode string - UINT32 4 - undocumented. - -- UNIHDR2 (unicode string header plus buffer pointer) : - - UNIHDR unicode string header - VOID* undocumented buffer pointer - -- UNISTR (unicode string) : - - UINT16[] null-terminated string of unicode characters. - -- NAME (length-indicated unicode string) : - - UINT32 length of unicode string - UINT16[] null-terminated string of unicode characters. - -- UNISTR2 (aligned unicode string) : - - UINT8[] padding to get unicode string 4-byte aligned - with the start of the SMB header. - UINT32 max length of unicode string - UINT32 0 - undocumented - UINT32 length of unicode string - UINT16[] string of uncode characters. - -- OBJ_ATTR (object attributes) : - - UINT32 0x18 - length (in bytes) including the length field. - VOID* 0 - root directory (pointer) - VOID* 0 - object name (pointer) - UINT32 0 - attributes (undocumented) - VOID* 0 - security descriptior (pointer) - UINT32 0 - security quality of service - -- POL_HND (LSA policy handle) : - - char[20] policy handle - -- DOM_SID2 (domain SID structure, SIDS stored in unicode) : - - UINT32 5 - SID type - UINT32 0 - undocumented - UNIHDR2 domain SID unicode string header - UNISTR domain SID unicode string - - Note: there is a conflict between the unicode string header and the - unicode string itself as to which to use to indicate string - length. this will need to be resolved. - - Note: the SID type indicates, for example, an alias; a well-known group etc. - this is documented somewhere. - -- DOM_RID (domain RID structure) : - - UINT32 5 - well-known SID. 1 - user SID (see ShowACLs) - UINT32 5 - undocumented - UINT32 domain RID - UINT32 0 - domain index out of above reference domains - - -- LOG_INFO (server, account, client structure) : - - Note: logon server name starts with two '\' characters and is upper case. - - Note: account name is the logon client name from the LSA Request Challenge, - with a $ on the end of it, in upper case. - - VOID* undocumented buffer pointer - UNISTR2 logon server unicode string - UNISTR2 account name unicode string - UINT16 sec_chan - security channel type - UNISTR2 logon client machine unicode string - -- CLNT_SRV (server, client names structure) : - - Note: logon server name starts with two '\' characters and is upper case. - - VOID* undocumented buffer pointer - UNISTR2 logon server unicode string - VOID* undocumented buffer pointer - UNISTR2 logon client machine unicode string - -- CREDS (credentials + time stamp) - - char[8] credentials - UTIME time stamp - -- CLNT_INFO2 (server, client structure, client credentials) : - - Note: whenever this structure appears in a request, you must take a copy - of the client-calculated credentials received, because they will be - used in subsequent credential checks. the presumed intention is to - maintain an authenticated request/response trail. - - CLNT_SRV client and server names - UINT8[] ???? padding, for 4-byte alignment with SMB header. - VOID* pointer to client credentials. - CREDS client-calculated credentials + client time - -- CLNT_INFO (server, account, client structure, client credentials) : - - Note: whenever this structure appears in a request, you must take a copy - of the client-calculated credentials received, because they will be - used in subsequent credential checks. the presumed intention is to - maintain an authenticated request/response trail. - - LOG_INFO logon account info - CREDS client-calculated credentials + client time - -- ID_INFO_1 (id info structure, auth level 1) : - - VOID* ptr_id_info_1 - UNIHDR domain name unicode header - UINT32 param control - UINT64 logon ID - UNIHDR user name unicode header - UNIHDR workgroup name unicode header - char[16] arc4 LM OWF Password - char[16] arc4 NT OWF Password - UNISTR2 domain name unicode string - UNISTR2 user name unicode string - UNISTR2 workstation name unicode string - -- SAM_INFO (sam logon/logoff id info structure) : - - Note: presumably, the return credentials is supposedly for the server to - verify that the credential chain hasn't been compromised. - - CLNT_INFO2 client identification/authentication info - VOID* pointer to return credentials. - CRED return credentials - ignored. - UINT16 logon level - UINT16 switch value - - switch (switch_value) - case 1: - { - ID_INFO_1 id_info_1; - } - -- GID (group id info) : - - UINT32 group id - UINT32 user attributes (only used by NT 3.1 and 3.51) - -- DOM_REF (domain reference info) : - - VOID* undocumented buffer pointer. - UINT32 num referenced domains? - VOID* undocumented domain name buffer pointer. - UINT32 32 - max number of entries - UINT32 4 - num referenced domains? - - UNIHDR2 domain name unicode string header - UNIHDR2[num_ref_doms-1] referenced domain unicode string headers - - UNISTR domain name unicode string - DOM_SID[num_ref_doms] referenced domain SIDs - -- DOM_INFO (domain info, levels 3 and 5 are the same)) : - - UINT8[] ??? padding to get 4-byte alignment with start of SMB header - UINT16 domain name string length * 2 - UINT16 domain name string length * 2 - VOID* undocumented domain name string buffer pointer - VOID* undocumented domain SID string buffer pointer - UNISTR2 domain name (unicode string) - DOM_SID domain SID - -- USER_INFO (user logon info) : - - Note: it would be nice to know what the 16 byte user session key is for. - - NTTIME logon time - NTTIME logoff time - NTTIME kickoff time - NTTIME password last set time - NTTIME password can change time - NTTIME password must change time - - UNIHDR username unicode string header - UNIHDR user's full name unicode string header - UNIHDR logon script unicode string header - UNIHDR profile path unicode string header - UNIHDR home directory unicode string header - UNIHDR home directory drive unicode string header - - UINT16 logon count - UINT16 bad password count - - UINT32 User ID - UINT32 Group ID - UINT32 num groups - VOID* undocumented buffer pointer to groups. - - UINT32 user flags - char[16] user session key - - UNIHDR logon server unicode string header - UNIHDR logon domain unicode string header - VOID* undocumented logon domain id pointer - char[40] 40 undocumented padding bytes. future expansion? - - UINT32 0 - num_other_sids? - VOID* NULL - undocumented pointer to other domain SIDs. - - UNISTR2 username unicode string - UNISTR2 user's full name unicode string - UNISTR2 logon script unicode string - UNISTR2 profile path unicode string - UNISTR2 home directory unicode string - UNISTR2 home directory drive unicode string - - UINT32 num groups - GID[num_groups] group info - - UNISTR2 logon server unicode string - UNISTR2 logon domain unicode string - - DOM_SID domain SID - DOM_SID[num_sids] other domain SIDs? - -- SH_INFO_1_PTR (pointers to level 1 share info strings): - -Note: see cifsrap2.txt section5, page 10. - - 0 for shi1_type indicates a Disk. - 1 for shi1_type indicates a Print Queue. - 2 for shi1_type indicates a Device. - 3 for shi1_type indicates an IPC pipe. - 0x8000 0000 (top bit set in shi1_type) indicates a hidden share. - - VOID* shi1_netname - pointer to net name - UINT32 shi1_type - type of share. 0 - undocumented. - VOID* shi1_remark - pointer to comment. - -- SH_INFO_1_STR (level 1 share info strings) : - - UNISTR2 shi1_netname - unicode string of net name - UNISTR2 shi1_remark - unicode string of comment. - -- SHARE_INFO_1_CTR : - - share container with 0 entries: - - UINT32 0 - EntriesRead - UINT32 0 - Buffer - - share container with > 0 entries: - - UINT32 EntriesRead - UINT32 non-zero - Buffer - UINT32 EntriesRead - - SH_INFO_1_PTR[EntriesRead] share entry pointers - SH_INFO_1_STR[EntriesRead] share entry strings - - UINT8[] padding to get unicode string 4-byte - aligned with start of the SMB header. - UINT32 EntriesRead - UINT32 0 - padding - -- SERVER_INFO_101 : - -Note: see cifs6.txt section 6.4 - the fields described therein will be - of assistance here. for example, the type listed below is the - same as fServerType, which is described in 6.4.1. - - SV_TYPE_WORKSTATION 0x00000001 All workstations - SV_TYPE_SERVER 0x00000002 All servers - SV_TYPE_SQLSERVER 0x00000004 Any server running with SQL - server - SV_TYPE_DOMAIN_CTRL 0x00000008 Primary domain controller - SV_TYPE_DOMAIN_BAKCTRL 0x00000010 Backup domain controller - SV_TYPE_TIME_SOURCE 0x00000020 Server running the timesource - service - SV_TYPE_AFP 0x00000040 Apple File Protocol servers - SV_TYPE_NOVELL 0x00000080 Novell servers - SV_TYPE_DOMAIN_MEMBER 0x00000100 Domain Member - SV_TYPE_PRINTQ_SERVER 0x00000200 Server sharing print queue - SV_TYPE_DIALIN_SERVER 0x00000400 Server running dialin service. - SV_TYPE_XENIX_SERVER 0x00000800 Xenix server - SV_TYPE_NT 0x00001000 NT server - SV_TYPE_WFW 0x00002000 Server running Windows for - - SV_TYPE_SERVER_NT 0x00008000 Windows NT non DC server - SV_TYPE_POTENTIAL_BROWSER 0x00010000 Server that can run the browser - service - SV_TYPE_BACKUP_BROWSER 0x00020000 Backup browser server - SV_TYPE_MASTER_BROWSER 0x00040000 Master browser server - SV_TYPE_DOMAIN_MASTER 0x00080000 Domain Master Browser server - SV_TYPE_LOCAL_LIST_ONLY 0x40000000 Enumerate only entries marked - "local" - SV_TYPE_DOMAIN_ENUM 0x80000000 Enumerate Domains. The pszServer - and pszDomain parameters must be - NULL. - - UINT32 500 - platform_id - VOID* pointer to name - UINT32 5 - major version - UINT32 4 - minor version - UINT32 type (SV_TYPE_... bit field) - VOID* pointer to comment - - UNISTR2 sv101_name - unicode string of server name - UNISTR2 sv_101_comment - unicode string of server comment. - - UINT8[] padding to get unicode string 4-byte - aligned with start of the SMB header. - - - -3) MSRPC over Transact Named Pipe ---------------------------------- - -For details on the SMB Transact Named Pipe, see cifs6.txt - - -3.1) MSRPC Pipes ----------------- - -The MSRPC is conducted over an SMB Transact Pipe with a name of "\PIPE\". -You must first obtain a 16 bit file handle, by sending a SMBopenX with the -pipe name "\PIPE\srvsvc" for example. You can then perform an SMB Trans, -and must carry out an SMBclose on the file handle once you are finished. - -Trans Requests must be sent with two setup UINT16s, no UINT16 params (none -known about), and UINT8 data parameters sufficient to contain the MSRPC -header, and MSRPC data. The first UINT16 setup parameter must be either -0x0026 to indicate an RPC, or 0x0001 to indicate Set Named Pipe Handle -state. The second UINT16 parameter must be the file handle for the pipe, -obtained above. - -The Data section for an API Command of 0x0026 (RPC pipe) in the Trans -Request is the RPC Header, followed by the RPC Data. The Data section for -an API Command of 0x0001 (Set Named Pipe Handle state) is two bytes. The -only value seen for these two bytes is 0x00 0x43. - - -MSRPC Responses are sent as response data inside standard SMB Trans -responses, with the MSRPC Header, MSRPC Data and MSRPC tail. - - -It is suspected that the Trans Requests will need to be at least 2-byte -aligned (probably 4-byte). This is standard practice for SMBs. It is also -independent of the observed 4-byte alignments with the start of the MSRPC -header, including the 4-byte alignment between the MSRPC header and the -MSRPC data. - - -First, an SMBtconX connection is made to the IPC$ share. The connection -must be made using encrypted passwords, not clear-text. Then, an SMBopenX -is made on the pipe. Then, a Set Named Pipe Handle State must be sent, -after which the pipe is ready to accept API commands. Lastly, and SMBclose -is sent. - - -To be resolved: - - lkcl/01nov97 there appear to be two additional bytes after the null- - terminated \PIPE\ name for the RPC pipe. Values seen so far are - listed below: - - initial SMBopenX request: RPC API command 0x26 params: - - "\\PIPE\\lsarpc" 0x65 0x63; 0x72 0x70; 0x44 0x65; - "\\PIPE\\srvsvc" 0x73 0x76; 0x4E 0x00; 0x5C 0x43; - - -3.2) Header ------------ - -[section to be rewritten, following receipt of work by Duncan Stansfield] - - -Interesting note: if you set packed data representation to 0x0100 0000 -then all 4-byte and 2-byte word ordering is turned around! - -The start of each of the NTLSA and NETLOGON named pipes begins with: - -00 UINT8 5 - RPC major version -01 UINT8 0 - RPC minor version -02 UINT8 2 - RPC response packet -03 UINT8 3 - (FirstFrag bit-wise or with LastFrag) -04 UINT32 0x1000 0000 - packed data representation -08 UINT16 fragment length - data size (bytes) inc header and tail. -0A UINT16 0 - authentication length -0C UINT32 call identifier. matches 12th UINT32 of incoming RPC data. -10 UINT32 allocation hint - data size (bytes) minus header and tail. -14 UINT16 0 - presentation context identifier -16 UINT8 0 - cancel count -17 UINT8 in replies: 0 - reserved; in requests: opnum - see #defines. -18 ...... start of data (goes on for allocation_hint bytes) - - -RPC_Packet for request, response, bind and bind acknowledgement. -{ - - UINT8 versionmaj # reply same as request (0x05) - UINT8 versionmin # reply same as request (0x00) - UINT8 type # one of the MSRPC_Type enums - UINT8 flags # reply same as request (0x00 for Bind, 0x03 for Request) - UINT32 representation # reply same as request (0x00000010) - UINT16 fraglength # the length of the data section of the SMB trans packet - UINT16 authlength - UINT32 callid # call identifier. (e.g. 0x00149594) - - * stub USE TvPacket # the remainder of the packet depending on the "type" -} - - -# the interfaces are numbered. as yet I haven't seen more than one interface -# used on the same pipe name -# srvsvc -# abstract (0x4B324FC8, 0x01D31670, 0x475A7812, 0x88E16EBF, 0x00000003) -# transfer (0x8A885D04, 0x11C91CEB, 0x0008E89F, 0x6048102B, 0x00000002) -RPC_Iface RW -{ - UINT8 byte[16] # 16 bytes of number - UINT32 version # the interface number -} - - -# the remainder of the packet after the header if "type" was Bind -# in the response header, "type" should be BindAck -RPC_ReqBind RW -{ - UINT16 maxtsize # maximum transmission fragment size (0x1630) - UINT16 maxrsize # max receive fragment size (0x1630) - UINT32 assocgid # associated group id (0x0) - UINT32 numelements # the number of elements (0x1) - UINT16 contextid # presentation context identifier (0x0) - UINT8 numsyntaxes # the number of syntaxes (has always been 1?)(0x1) - UINT8[] # 4-byte alignment padding, against SMB header - - * abstractint USE RPC_Iface # num and vers. of interface client is using - * transferint USE RPC_Iface # num and vers. of interface to use for replies -} - - -RPC_Address RW -{ - UINT16 length # length of the string including null terminator - * port USE string # the string above in single byte, null terminated form -} - - -# the response to place after the header in the reply packet -RPC_ResBind RW -{ - UINT16 maxtsize # same as request - UINT16 maxrsize # same as request - UINT32 assocgid # zero - - * secondaddr USE RPC_Address # the address string, as described earlier - - UINT8[] # 4-byte alignment padding, against SMB header - - UINT8 numresults # the number of results (0x01) - - UINT8[] # 4-byte alignment padding, against SMB header - UINT16 result # result (0x00 = accept) - UINT16 reason # reason (0x00 = no reason specified) - - * transfersyntax USE RPC_Iface # the transfer syntax from the request -} - - -# the remainder of the packet after the header for every other other -# request -RPC_ReqNorm RW -{ - UINT32 allochint # the size of the stub data in bytes - UINT16 prescontext # presentation context identifier (0x0) - UINT16 opnum # operation number (0x15) - - * stub USE TvPacket # a packet dependent on the pipe name - # (probably the interface) and the op number) -} - - -# response to a request -RPC_ResNorm RW -{ - UINT32 allochint # size of the stub data in bytes - UINT16 prescontext # presentation context identifier (same as request) - UINT8 cancelcount # cancel count? (0x0) - UINT8 reserved # 0 - one byte padding - - * stub USE TvPacket # the remainder of the reply -} - - -3.3) Tail ---------- - -The end of each of the NTLSA and NETLOGON named pipes ends with: - - ...... end of data - UINT32 return code - - - -3.4 RPC Bind / Bind Ack ------------------------ - -RPC Binds are the process of associating an RPC pipe (e.g \PIPE\lsarpc) -with a "transfer syntax" (see RPC_Iface structure). The purpose for doing -this is unknown. - -Note: The RPC_ResBind SMB Transact request is sent with two uint16 setup - parameters. The first is 0x0026; the second is the file handle - returned by the SMBopenX Transact response. - -Note: The RPC_ResBind members maxtsize, maxrsize and assocgid are the - same in the response as the same members in the RPC_ReqBind. The - RPC_ResBind member transfersyntax is the same in the response as - the - -Note: The RPC_ResBind response member secondaddr contains the name - of what is presumed to be the service behind the RPC pipe. The - mapping identified so far is: - - initial SMBopenX request: RPC_ResBind response: - - "\\PIPE\\srvsvc" "\\PIPE\\ntsvcs" - "\\PIPE\\samr" "\\PIPE\\lsass" - "\\PIPE\\lsarpc" "\\PIPE\\lsass" - "\\PIPE\\wkssvc" "\\PIPE\\wksvcs" - "\\PIPE\\NETLOGON" "\\PIPE\\NETLOGON" - -Note: The RPC_Packet fraglength member in both the Bind Request and Bind - Acknowledgment must contain the length of the entire RPC data, - including the RPC_Packet header. - -Request: - - RPC_Packet - RPC_ReqBind - -Response: - - RPC_Packet - RPC_ResBind - - - -4) NTLSA Transact Named Pipe ----------------------------- - -The sequence of actions taken on this pipe are: - -- Establish a connection to the IPC$ share (SMBtconX). use encrypted passwords. -- Open an RPC Pipe with the name "\\PIPE\\lsarpc". Store the file handle. -- Using the file handle, send a Set Named Pipe Handle state to 0x4300. -- Send an LSA Open Policy request. Store the Policy Handle. -- Using the Policy Handle, send LSA Query Info Policy requests, etc. -- Using the Policy Handle, send an LSA Close. -- Close the IPC$ share. - - -Defines for this pipe, identifying the query are: - -- LSA Open Policy: 0x2c -- LSA Query Info Policy: 0x07 -- LSA Enumerate Trusted Domains: 0x0d -- LSA Open Secret: 0xff -- LSA Lookup SIDs: 0xfe -- LSA Lookup Names: 0xfd -- LSA Close: 0x00 - - -4.1) LSA Open Policy --------------------- - -Note: The policy handle can be anything you like. - -Request: - - VOID* buffer pointer - UNISTR2 server name - unicode string starting with two '\'s - OBJ_ATTR object attributes - UINT32 1 - desired access - -Response: - - POL_HND LSA policy handle - - return 0 - indicates success - - -4.2) LSA Query Info Policy --------------------------- - -Note: The info class in response must be the same as that in the request. - -Request: - - POL_HND LSA policy handle - UINT16 info class (also a policy handle?) - -Response: - - VOID* undocumented buffer pointer - UINT16 info class (same as info class in request). - - switch (info class) - case 3: - case 5: - { - DOM_INFO domain info, levels 3 and 5 (are the same). - } - - return 0 - indicates success - - -4.3) LSA Enumerate Trusted Domains ----------------------------------- - -Request: - - no extra data - -Response: - - UINT32 0 - enumeration context - UINT32 0 - entries read - UINT32 0 - trust information - - return 0x8000 001a - "no trusted domains" success code - - -4.4) LSA Open Secret --------------------- - -Request: - - no extra data - -Response: - - UINT32 0 - undocumented - UINT32 0 - undocumented - UINT32 0 - undocumented - UINT32 0 - undocumented - UINT32 0 - undocumented - - return 0x0C00 0034 - "no such secret" success code - - -4.5) LSA Close --------------- - -Request: - - POL_HND policy handle to be closed - -Response: - - POL_HND 0s - closed policy handle (all zeros) - - return 0 - indicates success - - -4.6) LSA Lookup SIDS --------------------- - -Note: num_entries in response must be same as num_entries in request. - -Request: - - POL_HND LSA policy handle - UINT32 num_entries - VOID* undocumented domain SID buffer pointer - VOID* undocumented domain name buffer pointer - VOID*[num_entries] undocumented domain SID pointers to be looked up. - DOM_SID[num_entries] domain SIDs to be looked up. - char[16] completely undocumented 16 bytes. - -Response: - - DOM_REF domain reference response - - UINT32 num_entries (listed above) - VOID* undocumented buffer pointer - - UINT32 num_entries (listed above) - DOM_SID2[num_entries] domain SIDs (from Request, listed above). - - UINT32 num_entries (listed above) - - return 0 - indicates success - - -4.7) LSA Lookup Names ---------------------- - -Note: num_entries in response must be same as num_entries in request. - -Request: - - POL_HND LSA policy handle - UINT32 num_entries - UINT32 num_entries - VOID* undocumented domain SID buffer pointer - VOID* undocumented domain name buffer pointer - NAME[num_entries] names to be looked up. - char[] undocumented bytes - falsely translated SID structure? - -Response: - - DOM_REF domain reference response - - UINT32 num_entries (listed above) - VOID* undocumented buffer pointer - - UINT32 num_entries (listed above) - DOM_RID[num_entries] domain SIDs (from Request, listed above). - - UINT32 num_entries (listed above) - - return 0 - indicates success - - - -5) NETLOGON rpc Transact Named Pipe ------------------------------------ - -The sequence of actions taken on this pipe are: - -- Establish a connection to the IPC$ share (SMBtconX). use encrypted passwords. -- Open an RPC Pipe with the name "\\PIPE\\NETLOGON". Store the file handle. -- Using the file handle, send a Set Named Pipe Handle state to 0x4300. -- Create Client Challenge. Send LSA Request Challenge. Store Server Challenge. -- Calculate Session Key. Send an LSA Auth 2 Challenge. Store Auth2 Challenge. -- Calc/Verify Client Creds. Send LSA Srv PW Set. Calc/Verify Server Creds. -- Calc/Verify Client Creds. Send LSA SAM Logon . Calc/Verify Server Creds. -- Calc/Verify Client Creds. Send LSA SAM Logoff. Calc/Verify Server Creds. -- Close the IPC$ share. - - -Defines for this pipe, identifying the query are: - -- LSA Request Challenge: 0x04 -- LSA Server Password Set: 0x06 -- LSA SAM Logon: 0x02 -- LSA SAM Logoff: 0x03 -- LSA Auth 2: 0x0f -- LSA Logon Control: 0x0e - - -5.1) LSA Request Challenge --------------------------- - -Note: logon server name starts with two '\' characters and is upper case. - -Note: logon client is the machine, not the user. - -Note: the initial LanManager password hash, against which the challenge - is issued, is the machine name itself (lower case). there will be - calls issued (LSA Server Password Set) which will change this, later. - refusing these calls allows you to always deal with the same password - (i.e the LM# of the machine name in lower case). - -Request: - - VOID* undocumented buffer pointer - UNISTR2 logon server unicode string - UNISTR2 logon client unicode string - char[8] client challenge - -Response: - - char[8] server challenge - - return 0 - indicates success - - - -5.2) LSA Authenticate 2 ------------------------ - -Note: in between request and response, calculate the client credentials, - and check them against the client-calculated credentials (this - process uses the previously received client credentials). - -Note: neg_flags in the response is the same as that in the request. - -Note: you must take a copy of the client-calculated credentials received - here, because they will be used in subsequent authentication packets. - -Request: - - LOG_INFO client identification info - - char[8] client-calculated credentials - UINT8[] padding to 4-byte align with start of SMB header. - UINT32 neg_flags - negotiated flags (usual value is 0x0000 01ff) - -Response: - - char[8] server credentials. - UINT32 neg_flags - same as neg_flags in request. - - return 0 - indicates success. failure value unknown. - - -5.3) LSA Server Password Set ----------------------------- - -Note: the new password is suspected to be a DES encryption using the old - password to generate the key. - -Note: in between request and response, calculate the client credentials, - and check them against the client-calculated credentials (this - process uses the previously received client credentials). - -Note: the server credentials are constructed from the client-calculated - credentials and the client time + 1 second. - -Note: you must take a copy of the client-calculated credentials received - here, because they will be used in subsequent authentication packets. - -Request: - - CLNT_INFO client identification/authentication info - char[] new password - undocumented. - -Response: - - CREDS server credentials. server time stamp appears to be ignored. - - return 0 - indicates success; 0xC000 006a indicates failure - - -5.4) LSA SAM Logon ------------------- - -Note: valid_user is True iff the username and password hash are valid for - the requested domain. - -Request: - - SAM_INFO sam_id structure - -Response: - - VOID* undocumented buffer pointer - CREDS server credentials. server time stamp appears to be ignored. - - if (valid_user) - { - UINT16 3 - switch value indicating USER_INFO structure. - VOID* non-zero - pointer to USER_INFO structure - USER_INFO user logon information - - UINT32 1 - Authoritative response; 0 - Non-Auth? - - return 0 - indicates success - } - else - { - UINT16 0 - switch value. value to indicate no user presumed. - VOID* 0x0000 0000 - indicates no USER_INFO structure. - - UINT32 1 - Authoritative response; 0 - Non-Auth? - - return 0xC000 0064 - NT_STATUS_NO_SUCH_USER. - } - - -5.5) LSA SAM Logoff --------------------- - -Note: presumably, the SAM_INFO structure is validated, and a (currently - undocumented) error code returned if the Logoff is invalid. - -Request: - - SAM_INFO sam_id structure - -Response: - - VOID* undocumented buffer pointer - CREDS server credentials. server time stamp appears to be ignored. - - return 0 - indicates success. undocumented failure indication. - - -6) \\MAILSLOT\NET\NTLOGON -------------------------- - -Note: mailslots will contain a response mailslot, to which the response - should be sent. the target NetBIOS name is REQUEST_NAME<20>, where - REQUEST_NAME is the name of the machine that sent the request. - - -6.1) Query for PDC ------------------- - -Note: NTversion, LMNTtoken, LM20token in response are the same as those - given in the request. - -Request: - - UINT16 0x0007 - Query for PDC - STR machine name - STR response mailslot - UINT8[] padding to 2-byte align with start of mailslot. - UNISTR machine name - UINT32 NTversion - UINT16 LMNTtoken - UINT16 LM20token - -Response: - - UINT16 0x000A - Respose to Query for PDC - STR machine name (in uppercase) - UINT8[] padding to 2-byte align with start of mailslot. - UNISTR machine name - UNISTR domain name - UINT32 NTversion (same as received in request) - UINT16 LMNTtoken (same as received in request) - UINT16 LM20token (same as received in request) - - -6.2) SAM Logon --------------- - -Note: machine name in response is preceded by two '\' characters. - -Note: NTversion, LMNTtoken, LM20token in response are the same as those - given in the request. - -Note: user name in the response is presumably the same as that in the request. - -Request: - - UINT16 0x0012 - SAM Logon - UINT16 request count - UNISTR machine name - UNISTR user name - STR response mailslot - UINT32 alloweable account - UINT32 domain SID size - char[sid_size] domain SID, of sid_size bytes. - UINT8[] ???? padding to 4? 2? -byte align with start of mailslot. - UINT32 NTversion - UINT16 LMNTtoken - UINT16 LM20token - -Response: - - UINT16 0x0013 - Response to SAM Logon - UNISTR machine name - UNISTR user name - workstation trust account - UNISTR domain name - UINT32 NTversion - UINT16 LMNTtoken - UINT16 LM20token - - - -7) SRVSVC Transact Named Pipe ------------------------------ - - -Defines for this pipe, identifying the query are: - -- Net Share Enum : 0x0f -- Net Server Get Info : 0x15 - - -7.1) Net Share Enum ------------------- - -Note: share level and switch value in the response are presumably the - same as those in the request. - -Note: cifsrap2.txt (section 5) may be of limited assistance here. - -Request: - - VOID* pointer (to server name?) - UNISTR2 server name - - UINT8[] padding to get unicode string 4-byte aligned - with the start of the SMB header. - - UINT32 share level - UINT32 switch value - - VOID* pointer to SHARE_INFO_1_CTR - SHARE_INFO_1_CTR share info with 0 entries - - UINT32 preferred maximum length (0xffff ffff) - -Response: - - UINT32 share level - UINT32 switch value - - VOID* pointer to SHARE_INFO_1_CTR - SHARE_INFO_1_CTR share info (only added if share info ptr is non-zero) - - return 0 - indicates success - - -7.2) Net Server Get Info ------------------- - -Note: level is the same value as in the request. - -Request: - - UNISTR2 server name - UINT32 switch level - -Response: - - UINT32 switch level - VOID* pointer to SERVER_INFO_101 - - SERVER_INFO_101 server info (only added if server info ptr is non-zero) - - return 0 - indicates success - - - -Appendix --------- - -A1) Cryptographic side of NT Domain Authentication --------------------------------------------------- - - -A1.1) Definitions ------------------ - -Add(A1,A2): Intel byte ordered addition of corresponding 4 byte words -in arrays A1 and A2 - -E(K,D): DES ECB encryption of 8 byte data D using 7 byte key K - -lmowf(): Lan man hash - -ntowf(): NT hash - -PW: md4(machine_password) == md4(lsadump $machine.acc) == -pwdump(machine$) (initially) == md4(lmowf(unicode(machine))) - -ARC4(K,Lk,D,Ld): ARC4 encryption of data D of length Ld with key K of -length Lk - -v[m..n(,l)]: subset of v from bytes m to n, optionally padded with -zeroes to length l - -Cred(K,D): E(K[7..7,7],E(K[0..6],D)) computes a credential - -Time(): 4 byte current time - -Cc,Cs: 8 byte client and server challenges Rc,Rs: 8 byte client and -server credentials - - -A1.2) Protocol --------------- - -C->S ReqChal,Cc S->C Cs - -C & S compute session key Ks = E(PW[9..15],E(PW[0..6],Add(Cc,Cs))) - -C: Rc = Cred(Ks,Cc) C->S Authenticate,Rc S: Rs = Cred(Ks,Cs), -assert(Rc == Cred(Ks,Cc)) S->C Rs C: assert(Rs == Cred(Ks,Cs)) - -On joining the domain the client will optionally attempt to change its -password and the domain controller may refuse to update it depending -on registry settings. This will also occur weekly afterwards. - -C: Tc = Time(), Rc' = Cred(Ks,Rc+Tc) C->S ServerPasswordSet,Rc',Tc, -arc4(Ks[0..7,16],lmowf(randompassword()) C: Rc = Cred(Ks,Rc+Tc+1) S: -assert(Rc' == Cred(Ks,Rc+Tc)), Ts = Time() S: Rs' = Cred(Ks,Rs+Tc+1) -S->C Rs',Ts C: assert(Rs' == Cred(Ks,Rs+Tc+1)) S: Rs = Rs' - -User: U with password P wishes to login to the domain (incidental data -such as workstation and domain omitted) - -C: Tc = Time(), Rc' = Cred(Ks,Rc+Tc) C->S NetLogonSamLogon,Rc',Tc,U, -arc4(Ks[0..7,16],16,ntowf(P),16), arc4(Ks[0..7,16],16,lmowf(P),16) S: -assert(Rc' == Cred(Ks,Rc+Tc)) assert(passwords match those in SAM) S: -Ts = Time() - -S->C Cred(Ks,Cred(Ks,Rc+Tc+1)),userinfo(logon script,UID,SIDs,etc) C: -assert(Rs == Cred(Ks,Cred(Rc+Tc+1)) C: Rc = Cred(Ks,Rc+Tc+1) - - -A1.3) Comments --------------- - -On first joining the domain the session key could be computed by -anyone listening in on the network as the machine password has a well -known value. Until the machine is rebooted it will use this session -key to encrypt NT and LM one way functions of passwords which are -password equivalents. Any user who logs in before the machine has been -rebooted a second time will have their password equivalent exposed. Of -course the new machine password is exposed at this time anyway. - -None of the returned user info such as logon script, profile path and -SIDs *appear* to be protected by anything other than the TCP checksum. - -The server time stamps appear to be ignored. - -The client sends a ReturnAuthenticator in the SamLogon request which I -can't find a use for. However its time is used as the timestamp -returned by the server. - -The password OWFs should NOT be sent over the network reversibly -encrypted. They should be sent using ARC4(Ks,md4(owf)) with the server -computing the same function using the owf values in the SAM. - - -A2) SIDs and RIDs ------------------ - -SIDs and RIDs are well documented elsewhere. - -A SID is an NT Security ID (see DOM_SID structure). They are of the form: - - S-revision-NN-SubAuth1-SubAuth2-SubAuth3... - S-revision-0xNNNNNNNNNNNN-SubAuth1-SubAuth2-SubAuth3... - -currently, the SID revision is 1. -The Sub-Authorities are known as Relative IDs (RIDs). - - -A2.1) Well-known SIDs ---------------------- - - -A2.1.1) Universal well-known SIDs ---------------------------------- - - Null SID S-1-0-0 - World S-1-1-0 - Local S-1-2-0 - Creator Owner ID S-1-3-0 - Creator Group ID S-1-3-1 - Creator Owner Server ID S-1-3-2 - Creator Group Server ID S-1-3-3 - - (Non-unique IDs) S-1-4 - - -A2.1.2) NT well-known SIDs --------------------------- - - NT Authority S-1-5 - Dialup S-1-5-1 - - Network S-1-5-2 - Batch S-1-5-3 - Interactive S-1-5-4 - Service S-1-5-6 - AnonymousLogon S-1-5-7 (aka null logon session) - Proxy S-1-5-8 - ServerLogon S-1-5-8 (aka domain controller account) - - (Logon IDs) S-1-5-5-X-Y - - (NT non-unique IDs) S-1-5-0x15-... - - (Built-in domain) s-1-5-0x20 - - - -A2.2) Well-known RIDS ---------------------- - -A RID is a sub-authority value, as part of either a SID, or in the case -of Group RIDs, part of the DOM_GID structure, in the USER_INFO_1 -structure, in the LSA SAM Logon response. - - -A2.2.1) Well-known RID users ----------------------------- - - DOMAIN_USER_RID_ADMIN 0x0000 01F4 - DOMAIN_USER_RID_GUEST 0x0000 01F5 - - - -A2.2.2) Well-known RID groups ----------------------------- - - DOMAIN_GROUP_RID_ADMINS 0x0000 0200 - DOMAIN_GROUP_RID_USERS 0x0000 0201 - DOMAIN_GROUP_RID_GUESTS 0x0000 0202 - - - -A2.2.3) Well-known RID aliases ------------------------------- - - DOMAIN_ALIAS_RID_ADMINS 0x0000 0220 - DOMAIN_ALIAS_RID_USERS 0x0000 0221 - DOMAIN_ALIAS_RID_GUESTS 0x0000 0222 - DOMAIN_ALIAS_RID_POWER_USERS 0x0000 0223 - - DOMAIN_ALIAS_RID_ACCOUNT_OPS 0x0000 0224 - DOMAIN_ALIAS_RID_SYSTEM_OPS 0x0000 0225 - DOMAIN_ALIAS_RID_PRINT_OPS 0x0000 0226 - DOMAIN_ALIAS_RID_BACKUP_OPS 0x0000 0227 - - DOMAIN_ALIAS_RID_REPLICATOR 0x0000 0228 - - -- cgit From f1710a46d0b51fbefc2a1b5230b76aa9ecbbcdab Mon Sep 17 00:00:00 2001 From: Jelmer Vernooij Date: Thu, 29 Aug 2002 20:14:34 +0000 Subject: Split up documents at chapter level, not at sect1 level --- docs/docbook/Makefile.in | 5 +-- docs/docbook/projdoc/samba-doc.sgml | 6 +-- docs/docbook/samba.dsl | 85 +++++++++++++++++++++++++++++++++++++ 3 files changed, 90 insertions(+), 6 deletions(-) create mode 100644 docs/docbook/samba.dsl (limited to 'docs') diff --git a/docs/docbook/Makefile.in b/docs/docbook/Makefile.in index f1fb97d1e2e..26cdc9a1bcf 100644 --- a/docs/docbook/Makefile.in +++ b/docs/docbook/Makefile.in @@ -59,7 +59,8 @@ manpages: $(MANPAGES) pdf: ../Samba-HOWTO-Collection.pdf ps: ../Samba-HOWTO-Collection.ps txt: ../Samba-HOWTO-Collection.txt -html: $(HTMLDIR)/samba-doc.html $(MANPAGES_HTML) +html: $(MANPAGES_HTML) + $(DOCBOOK2HTML) -d samba.dsl -o $(HTMLDIR) $< html-single: ../Samba-HOWTO-Collection.html ../Samba-Developers-Guide.html ../Samba-HOWTO-Collection.txt: $(SGMLDIR)/samba-doc.sgml @@ -81,8 +82,6 @@ html-single: ../Samba-HOWTO-Collection.html ../Samba-Developers-Guide.html $(DOCBOOK2HTML) -u -o .. $< mv ../dev-doc.html $@ -$(HTMLDIR)/samba-doc.html: $(SGMLDIR)/samba-doc.sgml - $(DOCBOOK2HTML) -o $(HTMLDIR) $< $(HTMLDIR)/%.html: $(MANSGMLDIR)/%.sgml $(DOCBOOK2HTML) -o $(HTMLDIR) $< diff --git a/docs/docbook/projdoc/samba-doc.sgml b/docs/docbook/projdoc/samba-doc.sgml index a50389b7f01..75c5c379d32 100644 --- a/docs/docbook/projdoc/samba-doc.sgml +++ b/docs/docbook/projdoc/samba-doc.sgml @@ -18,9 +18,9 @@ - - - + + + ]> diff --git a/docs/docbook/samba.dsl b/docs/docbook/samba.dsl new file mode 100644 index 00000000000..75239c0f206 --- /dev/null +++ b/docs/docbook/samba.dsl @@ -0,0 +1,85 @@ + + + + + + ]]> + + + ]]> +]> + + + + + +;; =================================================================== +;; Generic Parameters +;; (Generic currently means: both print and html) +(define (chunk-element-list) + (list (normalize "preface") + (normalize "chapter") + (normalize "appendix") + (normalize "article") + (normalize "glossary") + (normalize "bibliography") + (normalize "index") + (normalize "colophon") + (normalize "setindex") + (normalize "reference") + (normalize "refentry") + (normalize "part") +; (normalize "sect1") + (normalize "section") + (normalize "book") ;; just in case nothing else matches... + (normalize "set") ;; sets are definitely chunks... + )) + +(define %chapter-autolabel% #t) +(define %section-autolabel% #t) +(define (toc-depth nd) 3) + +(define %root-filename% "index") ;; name for the root html file +(define %html-ext% ".html") ;; default extension for html output files +(define %html-prefix% "") ;; prefix for all filenames generated (except root) +(define %use-id-as-filename% #t) ;; if #t uses ID value, if present, as filename + ;; otherwise a code is used to indicate level + ;; of chunk, and general element number + ;; (nth element in the document) + +; === HTML settings === +(define %html-pubid% "-//W3C//DTD HTML 4.01 Transitional//EN") ;; Nearly true :-( +(define %html40% #t) + +; === Media objects === +(define preferred-mediaobject-extensions ;; this magic allows to use different graphical + (list "png" "jpg" "jpeg")) ;; formats for printing and putting online +(define acceptable-mediaobject-extensions + (list "bmp" "gif" "eps" "epsf" "avi" "mpg" "mpeg" "qt")) +(define preferred-mediaobject-notations + (list "PNG" "JPG" "JPEG")) +(define acceptable-mediaobject-notations + (list "EPS" "BMP" "GIF" "linespecific")) +; === Rendering === +(define %admon-graphics% #t) ;; use symbols for Caution|Important|Note|Tip|Warning + +; === Books only === +(define %generate-book-titlepage% #t) +(define %generate-book-toc% #t) +(define ($generate-chapter-toc$) #f) ;; never generate a chapter TOC in books + +; === Articles only === +(define %generate-article-titlepage% #t) +(define %generate-article-toc% #t) ;; make TOC + + + + + + + -- cgit From 4fc06a9e2274546807beb411e9bcf47931f8b4f6 Mon Sep 17 00:00:00 2001 From: Jelmer Vernooij Date: Thu, 29 Aug 2002 20:43:08 +0000 Subject: Several small fixes --- docs/docbook/Makefile.in | 11 +++++++---- docs/docbook/manpages/smb.conf.5.sgml | 2 +- docs/docbook/samba.dsl | 7 ++----- 3 files changed, 10 insertions(+), 10 deletions(-) (limited to 'docs') diff --git a/docs/docbook/Makefile.in b/docs/docbook/Makefile.in index 26cdc9a1bcf..b225eb97809 100644 --- a/docs/docbook/Makefile.in +++ b/docs/docbook/Makefile.in @@ -51,16 +51,18 @@ all: @echo "ps - Build PostScript version of HOWTO Collection" @echo "pdf - Build PDF version of HOWTO Collection" @echo -n "html-single - Build single file HTML version of HOWTO Collection" - @echo "and developers guide" - @echo "html - Build HTML version of HOWTO Collection and manpages" + @echo " and developers guide" + @echo "html - Build HTML version of HOWTO Collection" + @echo "htmlman - Build html version of manpages" @echo "txt - Build plain text version of HOWTO Collection" manpages: $(MANPAGES) pdf: ../Samba-HOWTO-Collection.pdf ps: ../Samba-HOWTO-Collection.ps txt: ../Samba-HOWTO-Collection.txt -html: $(MANPAGES_HTML) - $(DOCBOOK2HTML) -d samba.dsl -o $(HTMLDIR) $< +htmlman: $(MANPAGES_HTML) +html: + $(DOCBOOK2HTML) -d samba.dsl -o $(HTMLDIR) projdoc/samba-doc.sgml html-single: ../Samba-HOWTO-Collection.html ../Samba-Developers-Guide.html ../Samba-HOWTO-Collection.txt: $(SGMLDIR)/samba-doc.sgml @@ -85,6 +87,7 @@ html-single: ../Samba-HOWTO-Collection.html ../Samba-Developers-Guide.html $(HTMLDIR)/%.html: $(MANSGMLDIR)/%.sgml $(DOCBOOK2HTML) -o $(HTMLDIR) $< + mv $(HTMLDIR)/index.html $@ $(MANDIR)/%: $(MANSGMLDIR)/%.sgml $(DOCBOOK2MAN) -o $(MANDIR) $< diff --git a/docs/docbook/manpages/smb.conf.5.sgml b/docs/docbook/manpages/smb.conf.5.sgml index 251341dbb1a..053c6c1c718 100644 --- a/docs/docbook/manpages/smb.conf.5.sgml +++ b/docs/docbook/manpages/smb.conf.5.sgml @@ -3467,7 +3467,7 @@ - Default : ldap filter = (&(uid=%u)(objectclass=sambaAccount)) + Default : ldap filter = (&(uid=%u)(objectclass=sambaAccount))
diff --git a/docs/docbook/samba.dsl b/docs/docbook/samba.dsl index 75239c0f206..80197dfa77b 100644 --- a/docs/docbook/samba.dsl +++ b/docs/docbook/samba.dsl @@ -44,13 +44,10 @@ (define %section-autolabel% #t) (define (toc-depth nd) 3) -(define %root-filename% "index") ;; name for the root html file +(define %root-filename% "Samba-HOWTO") ;; name for the root html file (define %html-ext% ".html") ;; default extension for html output files (define %html-prefix% "") ;; prefix for all filenames generated (except root) -(define %use-id-as-filename% #t) ;; if #t uses ID value, if present, as filename - ;; otherwise a code is used to indicate level - ;; of chunk, and general element number - ;; (nth element in the document) +(define %use-id-as-filename% #t) ; === HTML settings === (define %html-pubid% "-//W3C//DTD HTML 4.01 Transitional//EN") ;; Nearly true :-( -- cgit From 46c49248e3f2ab307218b476b9a659bf54c3031e Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Fri, 30 Aug 2002 06:27:17 +0000 Subject: paranoid server security defaults to yes --- docs/docbook/manpages/smb.conf.5.sgml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'docs') diff --git a/docs/docbook/manpages/smb.conf.5.sgml b/docs/docbook/manpages/smb.conf.5.sgml index 053c6c1c718..da6e996f171 100644 --- a/docs/docbook/manpages/smb.conf.5.sgml +++ b/docs/docbook/manpages/smb.conf.5.sgml @@ -5293,7 +5293,7 @@ to the logs and exit. - Default: paranoid server security = no + Default: paranoid server security = yes -- cgit From f736b83da65339a225876e50c836b209b2857074 Mon Sep 17 00:00:00 2001 From: Jelmer Vernooij Date: Fri, 30 Aug 2002 06:44:07 +0000 Subject: Remove obsolete documents --- docs/textdocs/outdated/NTDOMAIN.txt | 51 ------- docs/textdocs/outdated/PRINTER_DRIVER.txt | 240 ------------------------------ docs/textdocs/outdated/PROJECTS | 88 ----------- 3 files changed, 379 deletions(-) delete mode 100644 docs/textdocs/outdated/NTDOMAIN.txt delete mode 100644 docs/textdocs/outdated/PRINTER_DRIVER.txt delete mode 100644 docs/textdocs/outdated/PROJECTS (limited to 'docs') diff --git a/docs/textdocs/outdated/NTDOMAIN.txt b/docs/textdocs/outdated/NTDOMAIN.txt deleted file mode 100644 index 8408acb979a..00000000000 --- a/docs/textdocs/outdated/NTDOMAIN.txt +++ /dev/null @@ -1,51 +0,0 @@ -!== -!== NTDOMAIN.txt for Samba release 2.0.4 18 May 1999 -!== -Contributor: Luke Kenneth Casson Leighton (samba-bugs@samba.org) - Copyright (C) 1997 Luke Kenneth Casson Leighton -Created: October 20, 1997 -Updated: February 25, 1999 (Jerry Carter) - -Subject: NT Domain Logons -=========================================================================== - -As of 1.9.18alpha1, Samba supports logins for NT 3.51 and 4.0 Workstations, -without the need, use or intervention of NT Server. This document describes -how to set this up. Over the continued development of the 1.9.18alpha -series, this process (and therefore this document) should become simpler. - -One useful thing to do is to get this version of Samba up and running -with Win95 profiles, as you would for the current stable version of -Samba (currently at 1.9.17p4), and is fully documented. You will need -to set up encrypted passwords. Even if you don't have any Win95 machines, -using your Samba Server to store the profile for one of your NT Workstation -users is a good test that you have 1.9.18alpha1 correctly configured *prior* -to attempting NT Domain Logons. - -The support is still experimental, so should be used at your own risk. - -NT is not as robust as you might have been led to believe: during the -development of the Domain Logon Support, one person reported having to -reinstall NT from scratch: their workstation had become totally unuseable. - -[further reports on ntsec@iss.net by independent administrators showing - similar symptoms lead us to believe that the SAM database file may be - corruptible. this _is_ recoverable (or, at least the machine is accessible), - by deleting the SAM file, under which circumstances all user account details - are lost, but at least the Administrator can log in with a blank password. - this is *not* possible except if the NT system is installed in a FAT - partition.] - -This *has* been reported to the NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM digest. - -========================================================================== -Please note that Samba 2.0 does not **officially** support domain logons -for Windows NT clients. Of course, domain logon support for Windows 9x -clients is complete and official. These are two different issues. - -Samba's capability to act as a Primary Domain Controller for Windows NT -domains is not advertised as it is not completed yet. For more information -regarding how to obtain the latest development (HEAD branch) source code -and what features are available, please refer to the NT Domain FAQ on-line -at the Samba web site under the documentation page. - diff --git a/docs/textdocs/outdated/PRINTER_DRIVER.txt b/docs/textdocs/outdated/PRINTER_DRIVER.txt deleted file mode 100644 index 5bf82e0cfe4..00000000000 --- a/docs/textdocs/outdated/PRINTER_DRIVER.txt +++ /dev/null @@ -1,240 +0,0 @@ -!== -!== PRINTER_DRIVER.txt for Samba release 2.0.4 18 May 1999 -!== -========================================================================== - Supporting the famous PRINTER$ share - - Jean-Francois.Micouleau@utc.fr, 10/26/97 - modified by herb@sgi.com 1/2/98 - -=========================================================================== - -Disclaimer: - - This ONLY works with Windows 95 - It does NOT work with Windows NT 4 - - -Goal: - - When you click on a samba shared printer, you can now install the driver - automatically onto the Windows 95 machine, as you would from an NT server. - -How To: - - It's a three step config. - - First, create a new directory, where you will put the driver files, and - make a share in smb.conf pointing to it. - - Example: - - [printer$] - path=/usr/local/samba/printer - public=yes - writable=no - browseable=yes - - Second, you have to build the list of drivers required for a specific - printer. This is the most complicated thing to do. Get the files - 'msprint.inf' and 'msprint2.inf' from Windows 95, the easiest way is to - grab them from a working Windows 95 computer. They are usually located - in 'c:\windows\inf'. Look in them for the printer you have. Run the new - program 'make_printerdef' with the file name and the printer name as - parameters. If you have drivers for an unsupported or updated printer, - first install these drivers on an Windows 95 system. There will be a - file created in your inf directory named 'oem?.inf' (where the ? is some - number). Use this file instead of msprint.inf. - - Example: (from the /usr/local/samba/lib directory) - - make_printerdef msprint.inf "Apple LaserWriter" >> printers.def - - The program will print out a list of required files to stderr. - Copy all the files listed into the directory you created in step 1. - If you have "preserve case = yes" make sure your files names match - EXACTLY the names listed. - - Third, you need to add 2 new parameters in smb.conf. One is in the - [global] section, called 'printer driver file' pointing to the printer - description file you just created, and the other in each printer share, - called 'printer driver location' pointing to where the client will get - the drivers. Don't forget to set correctly the printer driver parameter - to the Windows printer name. - - Example: - - [global] - printer driver file=/usr/local/samba/lib/printers.def - - [lp] - comment = My old printer laser - browseable = yes - printable = yes - public = yes - writable = no - create mode = 0700 - printer driver=Apple LaserWriter - printer driver location=\\%h\PRINTER$ - - %h will expand to the computer name, and PRINTER$ is the name of the - share created in step one. - - -If it doesn't work for you, don't send flame ! It worked for me. In case of -trouble don't hesitate to send me a mail with your smb.conf file and -printers.def - - -******* added by herb@sgi.com - -For those of you who like to know the details, and in case I have guessed -wrong on some of the fields - The following is the format of the entries -in the printers.def file: (entries are 1 single line - they are split here -for readability) - -:::: -:: - -The and the can be empty. -If no or are specified in the inf file, -these will default to the section name for the printer. - -The following is an excerpt from the MSPRINT2.INF file on a WIN95 machine. -I have deleted all but the entries relating to installing a driver for the -"QMS ColorScript 100 Model 30" printer. Using this "file" I'll try to -explain how the printers.def file is created. - -make_printerdef is run with the first argument being the name of this -file (MSPRINT2.INF in this case) and the second argument being the -name of the printer ("QMS ColorScript 100 Model 30" in this case). - -The printer name is first found in the "Model section" to obtain the -name of the "Installer Section" (this is the name after the equal sign). -We ignore the alternate name. - -The "Installer Section" contains entries for "CopyFiles" and "DataSection". -The "CopyFiles" line gives a list of all the required files for this -printer. If the name begins with an @ it is the name of a file (after -you strip off the @), otherwise it is the name of a "Copy Section" which -in turn is a list of files required. This printer has one file listed -"QCS30503.SPD" and two sections "COLOR_QMS_100_30" and "PSCRIPT". The -"COLOR_QMS_100_30" section is listed in the "[DestinationDirs]" as -having a value of 23. This means that all files listed in this section -should go into the "color" subdirectory. The list of files to copy for -this printer is thus: - -QCS30503.SPD,color\QMS10030.ICM,PSCRIPT.DRV,PSCRIPT.HLP,PSCRIPT.INI, -TESTPS.TXT,APPLE380.SPD,FONTS.MFM,ICONLIB.DLL,PSMON.DLL - -From the "Data Section" we obtain values for "DriverFile", "HelpFile", -and "LanguageMonitor". The % around the value for "LanguageMonitor" -indicates that it is a string that can be localized so its actual value -is obtained from the "[Strings]" section. The "Data Section" could also -have contained an entry for "DefaultDataType". - -Using the information we have obtained we can now construct the entry -for the printers.def file. - - -> QMS ColorScript 100 Model 30 (name given - on the command line) - -> PSCRIPT.DRV (given in Data Section) - -> QCS30503.SPD (defaults to Install Section name) - -> PSCRIPT.HLP (given in Data Section) - -> PostScript Language Monitor (given in Data Section) - -> RAW (default if not specified) - - -So.... the enty (actually one line but split here for readability) would -be: - -QMS ColorScript 100 Model 30:PSCRIPT.DRV:QCS30503.SPD: -PSCRIPT.HLP:PostScript Language Monitor:RAW: -QCS30503.SPD,color\QMS10030.ICM,PSCRIPT.DRV,PSCRIPT.HLP,PSCRIPT.INI, -TESTPS.TXT,APPLE380.SPD,FONTS.MFM,ICONLIB.DLL,PSMON.DLL - ----------------------- Info from MSPRINT2.INF ------------------------ -; -; The Manufacturer section lists all of the manufacturers that we will -; display in the Dialog box - -[Manufacturer] -"QMS" - - -; -; Model sections. Each section here corresponds with an entry listed in the -; [Manufacturer] section, above. The models will be displayed in the order -; that they appear in the INF file. -; -; Each model lists a variation of its own name as a compatible ID. This -; is done primarily as an optimization during upgrade. -; -[QMS] -"QMS ColorScript 100 Model 30" = QCS30503.SPD,QMS_ColorScript_100_Model_30 - - -; -; Installer Sections -; -; These sections control file installation, and reference all files that -; need to be copied. The section name will be assumed to be the driver -; file, unless there is an explicit DriverFile section listed. -; -[QCS30503.SPD] -CopyFiles=@QCS30503.SPD,COLOR_QMS_100_30,PSCRIPT -DataSection=PSCRIPT_DATA - -; Copy Sections -; -; Lists of files that are actually copied. These sections are referenced -; from the installer sections, above. Only create a section if it contains -; two or more files (if we only copy a single file, identify it in the -; installer section, using the @filename notation) or if it's a color -; profile (since the DestinationDirs can only handle sections, and not -; individual files). -; -[COLOR_QMS_100_30] -QMS10030.ICM - -[PSCRIPT] -PSCRIPT.DRV -PSCRIPT.HLP -PSCRIPT.INI -TESTPS.TXT -APPLE380.SPD -FONTS.MFM -ICONLIB.DLL -PSMON.DLL - - -; -; Data Sections -; -; These sections contain data that is shared between devices. -; -[PSCRIPT_DATA] -DriverFile=PSCRIPT.DRV -HelpFile=PSCRIPT.HLP -LanguageMonitor=%PS_MONITOR% - - -; -; Color profiles go to the colors directory. All other files go to the -; system directory -; - -[DestinationDirs] -DefaultDestDir=11 -COLOR_QMS_100_30=23 -COLOR_TEKTRONIX_200I=23 -COLOR_TEKTRONIX_III_PXI=23 - - -; -; Localizable Strings -; -[Strings] -MS="Microsoft" -PS_MONITOR="PostScript Language Monitor,PSMON.DLL" - diff --git a/docs/textdocs/outdated/PROJECTS b/docs/textdocs/outdated/PROJECTS deleted file mode 100644 index 3008bea430d..00000000000 --- a/docs/textdocs/outdated/PROJECTS +++ /dev/null @@ -1,88 +0,0 @@ - Samba Projects Directory - ======================== - - ->>>>> NOTE: THIS FILE IS NOW VERY OUT OF DATE <<<<< - - -This is a list of who's working on what in Samba. It's not guaranteed -to be uptodate or accurate but I hope it will help us getting -coordinated. - -If you are working on something to do with Samba and you aren't here -then please let me know! Also, if you are listed below and you have -any corrections or updates then please let me know. - -Email contact: -samba-bugs@samba.org - -======================================================================== -Documentation and FAQ - -Docs and FAQ files for the Samba suite of software. - -Contact samba-bugs@samba.org with the diffs. These are urgently -required. - -The FAQ is being added to on an ad hoc basis, see the web pages for info. - -Mark Preston was working on a set of formatted docs for Samba. Is this -still happening? Contact mpreston@sghms.ac.uk - -Status last updated 2nd October 1996 -======================================================================== - -======================================================================== -Netbeui support - -This aimed to produce patches so that Samba can be used with clients -that do not have TCP/IP. It will try to remain as portable as possible. -Contact Brian.Onn@Canada.Sun.COM (Brian Onn) Unfortunately it died, and -although a lot of people have expressed interest nobody has come forward -to do it. The Novell port (see Samba web pages) includes NetBEUI -functionality in a proprietrary library which should still be helpful as -we have the interfaces. Alan Cox (a.cox@li.org) has the information -required to write the state machine if someone is going to do the work. - -Status last updated 2nd October 1996 -======================================================================== - -======================================================================== -Smbfs - -A mountable smb filesystem for Linux using the userfs userspace filesystem - -Contact lendecke@namu01.gwdg.de (Volker Lendecke) - -This works really well, and is measurably more efficient than commercial -client software. It is now part of the Linux kernel. Long filename support -is in use. - -Status last updated June 1997 -======================================================================== - -======================================================================== -Admin Tool - -Aims to produce a nice smb.conf editor and other useful tools for -administering a Samba system. - -Contact: Steve Brown (steve@unicorn.dungeon.com) - -In the design phase. - -Status last updated 4th September 1994 -======================================================================== - - -======================================================================== -Lanman Client. - -Contact: john@amanda.xs4all.nl (John Stewart) - -Aims to produce a reliable LANMAN Client implementation for LINUX, -and possibly other variations of UNIX. Project ably started by -Tor Lillqvist; tml@hemuli.tte.vtt.fi - -Status last updated 17th January 1995 -======================================================================== -- cgit From 0a92c4db1fed6eff577a67e9c4fd54bd4fe4afac Mon Sep 17 00:00:00 2001 From: Jelmer Vernooij Date: Fri, 30 Aug 2002 18:01:26 +0000 Subject: Put PRINTER_DRIVER back in --- docs/textdocs/outdated/PRINTER_DRIVER.txt | 240 ++++++++++++++++++++++++++++++ 1 file changed, 240 insertions(+) create mode 100644 docs/textdocs/outdated/PRINTER_DRIVER.txt (limited to 'docs') diff --git a/docs/textdocs/outdated/PRINTER_DRIVER.txt b/docs/textdocs/outdated/PRINTER_DRIVER.txt new file mode 100644 index 00000000000..5bf82e0cfe4 --- /dev/null +++ b/docs/textdocs/outdated/PRINTER_DRIVER.txt @@ -0,0 +1,240 @@ +!== +!== PRINTER_DRIVER.txt for Samba release 2.0.4 18 May 1999 +!== +========================================================================== + Supporting the famous PRINTER$ share + + Jean-Francois.Micouleau@utc.fr, 10/26/97 + modified by herb@sgi.com 1/2/98 + +=========================================================================== + +Disclaimer: + + This ONLY works with Windows 95 + It does NOT work with Windows NT 4 + + +Goal: + + When you click on a samba shared printer, you can now install the driver + automatically onto the Windows 95 machine, as you would from an NT server. + +How To: + + It's a three step config. + + First, create a new directory, where you will put the driver files, and + make a share in smb.conf pointing to it. + + Example: + + [printer$] + path=/usr/local/samba/printer + public=yes + writable=no + browseable=yes + + Second, you have to build the list of drivers required for a specific + printer. This is the most complicated thing to do. Get the files + 'msprint.inf' and 'msprint2.inf' from Windows 95, the easiest way is to + grab them from a working Windows 95 computer. They are usually located + in 'c:\windows\inf'. Look in them for the printer you have. Run the new + program 'make_printerdef' with the file name and the printer name as + parameters. If you have drivers for an unsupported or updated printer, + first install these drivers on an Windows 95 system. There will be a + file created in your inf directory named 'oem?.inf' (where the ? is some + number). Use this file instead of msprint.inf. + + Example: (from the /usr/local/samba/lib directory) + + make_printerdef msprint.inf "Apple LaserWriter" >> printers.def + + The program will print out a list of required files to stderr. + Copy all the files listed into the directory you created in step 1. + If you have "preserve case = yes" make sure your files names match + EXACTLY the names listed. + + Third, you need to add 2 new parameters in smb.conf. One is in the + [global] section, called 'printer driver file' pointing to the printer + description file you just created, and the other in each printer share, + called 'printer driver location' pointing to where the client will get + the drivers. Don't forget to set correctly the printer driver parameter + to the Windows printer name. + + Example: + + [global] + printer driver file=/usr/local/samba/lib/printers.def + + [lp] + comment = My old printer laser + browseable = yes + printable = yes + public = yes + writable = no + create mode = 0700 + printer driver=Apple LaserWriter + printer driver location=\\%h\PRINTER$ + + %h will expand to the computer name, and PRINTER$ is the name of the + share created in step one. + + +If it doesn't work for you, don't send flame ! It worked for me. In case of +trouble don't hesitate to send me a mail with your smb.conf file and +printers.def + + +******* added by herb@sgi.com + +For those of you who like to know the details, and in case I have guessed +wrong on some of the fields - The following is the format of the entries +in the printers.def file: (entries are 1 single line - they are split here +for readability) + +:::: +:: + +The and the can be empty. +If no or are specified in the inf file, +these will default to the section name for the printer. + +The following is an excerpt from the MSPRINT2.INF file on a WIN95 machine. +I have deleted all but the entries relating to installing a driver for the +"QMS ColorScript 100 Model 30" printer. Using this "file" I'll try to +explain how the printers.def file is created. + +make_printerdef is run with the first argument being the name of this +file (MSPRINT2.INF in this case) and the second argument being the +name of the printer ("QMS ColorScript 100 Model 30" in this case). + +The printer name is first found in the "Model section" to obtain the +name of the "Installer Section" (this is the name after the equal sign). +We ignore the alternate name. + +The "Installer Section" contains entries for "CopyFiles" and "DataSection". +The "CopyFiles" line gives a list of all the required files for this +printer. If the name begins with an @ it is the name of a file (after +you strip off the @), otherwise it is the name of a "Copy Section" which +in turn is a list of files required. This printer has one file listed +"QCS30503.SPD" and two sections "COLOR_QMS_100_30" and "PSCRIPT". The +"COLOR_QMS_100_30" section is listed in the "[DestinationDirs]" as +having a value of 23. This means that all files listed in this section +should go into the "color" subdirectory. The list of files to copy for +this printer is thus: + +QCS30503.SPD,color\QMS10030.ICM,PSCRIPT.DRV,PSCRIPT.HLP,PSCRIPT.INI, +TESTPS.TXT,APPLE380.SPD,FONTS.MFM,ICONLIB.DLL,PSMON.DLL + +From the "Data Section" we obtain values for "DriverFile", "HelpFile", +and "LanguageMonitor". The % around the value for "LanguageMonitor" +indicates that it is a string that can be localized so its actual value +is obtained from the "[Strings]" section. The "Data Section" could also +have contained an entry for "DefaultDataType". + +Using the information we have obtained we can now construct the entry +for the printers.def file. + + -> QMS ColorScript 100 Model 30 (name given + on the command line) + -> PSCRIPT.DRV (given in Data Section) + -> QCS30503.SPD (defaults to Install Section name) + -> PSCRIPT.HLP (given in Data Section) + -> PostScript Language Monitor (given in Data Section) + -> RAW (default if not specified) + + +So.... the enty (actually one line but split here for readability) would +be: + +QMS ColorScript 100 Model 30:PSCRIPT.DRV:QCS30503.SPD: +PSCRIPT.HLP:PostScript Language Monitor:RAW: +QCS30503.SPD,color\QMS10030.ICM,PSCRIPT.DRV,PSCRIPT.HLP,PSCRIPT.INI, +TESTPS.TXT,APPLE380.SPD,FONTS.MFM,ICONLIB.DLL,PSMON.DLL + +---------------------- Info from MSPRINT2.INF ------------------------ +; +; The Manufacturer section lists all of the manufacturers that we will +; display in the Dialog box + +[Manufacturer] +"QMS" + + +; +; Model sections. Each section here corresponds with an entry listed in the +; [Manufacturer] section, above. The models will be displayed in the order +; that they appear in the INF file. +; +; Each model lists a variation of its own name as a compatible ID. This +; is done primarily as an optimization during upgrade. +; +[QMS] +"QMS ColorScript 100 Model 30" = QCS30503.SPD,QMS_ColorScript_100_Model_30 + + +; +; Installer Sections +; +; These sections control file installation, and reference all files that +; need to be copied. The section name will be assumed to be the driver +; file, unless there is an explicit DriverFile section listed. +; +[QCS30503.SPD] +CopyFiles=@QCS30503.SPD,COLOR_QMS_100_30,PSCRIPT +DataSection=PSCRIPT_DATA + +; Copy Sections +; +; Lists of files that are actually copied. These sections are referenced +; from the installer sections, above. Only create a section if it contains +; two or more files (if we only copy a single file, identify it in the +; installer section, using the @filename notation) or if it's a color +; profile (since the DestinationDirs can only handle sections, and not +; individual files). +; +[COLOR_QMS_100_30] +QMS10030.ICM + +[PSCRIPT] +PSCRIPT.DRV +PSCRIPT.HLP +PSCRIPT.INI +TESTPS.TXT +APPLE380.SPD +FONTS.MFM +ICONLIB.DLL +PSMON.DLL + + +; +; Data Sections +; +; These sections contain data that is shared between devices. +; +[PSCRIPT_DATA] +DriverFile=PSCRIPT.DRV +HelpFile=PSCRIPT.HLP +LanguageMonitor=%PS_MONITOR% + + +; +; Color profiles go to the colors directory. All other files go to the +; system directory +; + +[DestinationDirs] +DefaultDestDir=11 +COLOR_QMS_100_30=23 +COLOR_TEKTRONIX_200I=23 +COLOR_TEKTRONIX_III_PXI=23 + + +; +; Localizable Strings +; +[Strings] +MS="Microsoft" +PS_MONITOR="PostScript Language Monitor,PSMON.DLL" + -- cgit From 67543ea43d6c76f10f6757ae35a29044ce0020c5 Mon Sep 17 00:00:00 2001 From: Jelmer Vernooij Date: Sat, 7 Sep 2002 19:06:37 +0000 Subject: "disable charset" -> "display charset". oops --- docs/docbook/manpages/smb.conf.5.sgml | 2 +- docs/htmldocs/smb.conf.5.html | 3699 +++++++++++++++++++++++---------- docs/manpages/smb.conf.5 | 224 +- 3 files changed, 2684 insertions(+), 1241 deletions(-) (limited to 'docs') diff --git a/docs/docbook/manpages/smb.conf.5.sgml b/docs/docbook/manpages/smb.conf.5.sgml index da6e996f171..89ffa0934a3 100644 --- a/docs/docbook/manpages/smb.conf.5.sgml +++ b/docs/docbook/manpages/smb.conf.5.sgml @@ -628,7 +628,7 @@ dfree command disable netbios disable spoolss - disable charset + display charset dns proxy domain admin group domain guest group diff --git a/docs/htmldocs/smb.conf.5.html b/docs/htmldocs/smb.conf.5.html index 6f0e88c4d35..5d1cc21da71 100644 --- a/docs/htmldocs/smb.conf.5.html +++ b/docs/htmldocs/smb.conf.5.html @@ -1,10 +1,12 @@ + smb.confsmb.conf

If you decide to use a path =If you decide to use a path = line in your [homes] section then you may find it useful to use the %S macro. For example :

		
 		

An important point is that if guest access is specified in the [homes] section, all home directories will be - visible to all clients without a passwordwithout a password. In the very unlikely event that this is actually desirable, it - would be wise to also specify read only - access.

Note that the browseableNote that the browseable flag for auto home directories will be inherited from the global browseable flag, not the [homes] browseable flag. This is useful as - it means setting browseable = nobrowseable = no in the [homes] section will hide the [homes] share but make any auto home directories visible.

All aliases given for a printer in the printcap file are legitimate printer names as far as the server is concerned. If your printing subsystem doesn't work like that, you will have to set up a pseudo-printcap. This is a file consisting of one or more lines like this:

		
 		

Each alias should be an acceptable printer name for your printing subsystem. In the [global] section, specify @@ -470,24 +461,44 @@ NAME="AEN102" >parameters define the specific attributes of sections.

Some parameters are specific to the [global] section - (e.g., securitysecurity). Some parameters are usable - in all sections (e.g., create modecreate mode). All others are permissible only in normal sections. For the purposes of the following descriptions the [homes] and [printers] - sections will be considered normal. The letter GG in parentheses indicates that a parameter is specific to the - [global] section. The letter SS indicates that a parameter can be specified in a service specific - section. Note that all SS parameters can also be specified in the [global] section - in which case they will define the default behavior for all services.

Note that this paramater is not available when Samba listens +>Note that this parameter is not available when Samba listens on port 445, as clients no longer send this information

the name of your NIS home directory server. This is obtained from your NIS auto.map entry. If you have - not compiled Samba with the --with-automount--with-automount option then this value will be the same as %L.

controls if names that have characters that aren't of the "default" case are mangled. For example, if this is yes then a name like "Mail" would be mangled. - Default nono.

controls whether filenames are case sensitive. If they aren't then Samba must do a filename search and match on passed - names. Default nono.

controls what the default case is for new - filenames. Default lowerlower.

controls if new files are created with the case that the client passes, or if they are forced to be the - "default" case. Default yesyes.

yesyes.

  • add group script

  • add printer commandaddprinter command

  • add user to group script

  • delete group script

  • ads server

  • delete printer commanddeleteprinter command

  • delete user from group script

  • disable netbios

  • display charset

  • dos charset

  • hide unwriteable files

  • hostname lookups

  • name cache timeout

  • ntlm auth

  • paranoid server security

  • realm

  • smb ports

  • unicode

  • unix charset

  • wtmp directory

  • wins partners

  • COMPLETE LIST OF SERVICE PARAMETERS

  • block size

  • mangling method

  • vfs path

  • EXPLANATION OF EACH PARAMETER

    abort shutdown script (G)
  • This parameter only exists in the HEAD cvs branchThis parameter only exists in the HEAD cvs branch This a full path name to a script called by that should stop a shutdown procedure issued by the

    This command will be run as user.

    Default: NoneDefault: None.

    Example: add printer command (G)addprinter command (G)

    With the introduction of MS-RPC based printing @@ -4440,7 +4747,7 @@ CLASS="COMMAND" >The add printer commandaddprinter command is automatically invoked with the following parameter (in @@ -4514,7 +4821,7 @@ CLASS="PARAMETER" >Once the add printer commandaddprinter command has been executed, will return an ACCESS_DENIED error to the client.

    See also delete printer command deleteprinter command, ,

    Default: noneDefault: none

    Example:

    This parameter is only used for add file shares. To add printer shares, see the add printer +>addprinter command

    See also , .

    Default: noneDefault: none

    Example:

    Default: add machine script = <empty string> +>add machine script = <empty string>

    ads server (G)

    If this option is specified, samba does + not try to figure out what ads server to use itself, but + uses the specified ads server. Either one DNS name or IP + address can be used.

    Default: ads server =

    Example: ads server = 192.168.1.2

    add user script (G)

    This is the full pathname to a script that will - be run AS ROOTAS ROOT by smbd to create the required UNIX users - ON DEMANDON DEMAND when a user accesses the Samba server.

    In order to use this option, smbd - must NOTNOT be set to smbd will - call the specified script AS ROOTAS ROOT, expanding any

    See also , ,

    Default: add user script = <empty string> +>add user script = <empty string>

    This is the full pathname to a script that will - be run AS ROOTAS ROOT by smbd(8) when a new group is requested. It will expand any smbd(8) when a new group is requested. It will expand any %g to the group name passed. This script is only useful for installations using the Windows NT domain administration tools. -

    Default: no admin usersDefault: no admin users

    Example: admin users = jason

    add user to group script (G)

    Full path to the script that will be called when + a user is added to a group using the Windows NT domain administration + tools. It will be run by smbd(8) + AS ROOT. Any %g will be + replaced with the group name and any %u will + be replaced with the user name. +

    Default: add user to group script =

    Example: admin users = jasonadd user to group script = /usr/sbin/adduser %u %g

    Synonym for

    This option only takes effect when the

    This is a synonym for the smbd will use when authenticating a user. This option defaults to sensible values based on

    Default: auth methods = <empty string>auth methods = <empty string>

    Example: available = no, then ALL, then ALL attempts to connect to the service will fail. Such failures are logged.

    nmbd to bind to ports 137 and 138 on the interfaces listed in the interfaces parameter. smbd(8) to bind only to the interface list given in the interfaces parameter. This restricts the networks that bind interfaces only is set then - unless the network address 127.0.0.1127.0.0.1 is added to the smbpasswd - by default connects to the localhost - 127.0.0.1localhost - 127.0.0.1 address as an SMB client to issue the password change request. If bind interfaces only is set then unless the - network address 127.0.0.1127.0.0.1 is added to the nmbd at the address - 127.0.0.1127.0.0.1 to determine if they are running. - Not adding 127.0.0.1127.0.0.1 will cause smbd
    block size (S)

    This parameter controls the behavior of + smbd(8) when reporting disk free + sizes. By default, this reports a disk block size of 1024 bytes. +

    Changing this parameter may have some effect on the + efficiency of client writes, this is not yet confirmed. This + parameter was added to allow advanced administrators to change + it (usually to a higher value) and test the effect it has on + client write performance without re-compiling the code. As this + is an experimental option it may be removed in a future release. +

    Changing this option does not change the disk free reporting + size, just the block size unit reported to the client.

    Default: block size = 1024

    Example: block size = 65536

    browsable (S)

    See the

    See the discussion in the section NAME MANGLING.

    Synonym for case sensitive.

    See also , .

    Default: noneDefault: none

    Example:

    If you want to set the string that is displayed next to the machine name then see the parameter.

    Default: No comment stringDefault: No comment string

    Example:

    Default: no valueDefault: no value

    Example:

    A synonym for this parameter is notnot set here will be removed from the modes set on a file when it is created.

    Following this Samba will bit-wise 'OR' the UNIX mode created from this parameter with the value of the

    This parameter does not affect directory modes. See the parameter for details.

    See also the parameter for forcing particular mode bits to be set on created files. See also the parameter for masking mode bits on created directories. See also the Note that this parameter does not apply to permissions set by Windows NT/2000 ACL editors. If the administrator wishes to enforce a mask on access control lists also, they need to set the

    This is a synonym for csc policy (S)

    This stands for This stands for client-side caching - policy, and specifies how clients capable of offline caching will cache the files in the share. The valid values are: manual, documents, programs, disable.

    Note that the parameter

    Note that the parameter

    Samba 2.2 debug log messages are timestamped by default. If you are running at a high

    Note that the parameter

    Synonym for

    A synonym for

    See the section on NAME MANGLING. Also note the

    This parameter is only applicable to printable services. When smbd is serving Printer Drivers to Windows NT/2k/XP clients, each printer on the Samba @@ -6185,8 +6672,12 @@ NAME="DEFAULTSERVICE" >

    This parameter specifies the name of a service which will be connected to if the service actually requested cannot - be found. Note that the square brackets are NOTNOT given in the parameter value (see example below).

    Typically the default service would be a ,

    Example:

    [global]
    @@ -6242,16 +6727,39 @@ CLASS="PROGRAMLISTING"
     [pub]
     	path = /%S
     		

    delete group script (G)

    This is the full pathname to a script that will + be run AS ROOT by smbd(8) when a group is requested to be deleted. It will expand any %g to the group name passed. This script is only useful for installations using the Windows NT domain administration tools. +

    delete printer command (G)
    deleteprinter command (G)

    With the introduction of MS-RPC based printer @@ -6276,7 +6784,7 @@ CLASS="FILENAME" >The delete printer commanddeleteprinter command is automatically called with only one parameter: Once the delete printer commanddeleteprinter command has been executed, will return an ACCESS_DENIED error to the client.

    See also add printer command addprinter command, ,

    Default: noneDefault: none

    Example:

    This parameter is only used to remove file shares. To delete printer shares, see the delete printer +>deleteprinter command

    See also , .

    Default: noneDefault: none

    Example:

    Default: delete user script = <empty string> +>delete user script = <empty string>

    delete user from group script (G)

    Full path to the script that will be called when + a user is removed from a group using the Windows NT domain administration + tools. It will be run by smbd(8) + AS ROOT. Any %g will be + replaced with the group name and any %u will + be replaced with the user name. +

    Default: delete user from group script =

    Example: delete user from group script = /usr/sbin/deluser %u %g

    delete veto files (S)
    This option is used when Samba is attempting to delete a directory that contains one or more vetoed directories (see the

    See also the

    Synonym for

    Note: Your script should NOTNote: Your script should NOT be setuid or setgid and should be owned by (and writeable only by) root!

    Default: Default: By default internal routines for determining the disk capacity and remaining space will be used. -

    Example:

    Where the script dfree (which must be made executable) could be:

     
     		#!/bin/sh
     		df $1 | tail -1 | awk '{print $2" "$4}'
     		

    or perhaps (on Sys V based systems):

     
     		#!/bin/sh
     		/usr/bin/df -k $1 | tail -1 | awk '{print $3" "$5}'
     		

    Note that you may have to replace the command names @@ -6701,7 +7252,7 @@ NAME="DIRECTORY" >

    Synonym for notnot set here will be removed from the modes set on a directory when it is created.

    Following this Samba will bit-wise 'OR' the UNIX mode created from this parameter with the value of the Note that this parameter does not apply to permissions set by Windows NT/2000 ACL editors. If the administrator wishes to enforce a mask on access control lists also, they need to set the .

    See the

    See also the parameter for masking mode bits on created files, and the parameter.

    Also refer to the

    Synonym for

    NoteNote that users who can access the Samba server through other means can easily bypass this restriction, so it is primarily useful for standalone "appliance" systems. @@ -6865,7 +7424,7 @@ CLASS="CONSTANT" >.

    See also the , ,

    disable netbios (G)

    Enabling this parameter will disable netbios support + in Samba. Netbios is the only available form of browsing in + all windows versions except for 2000 and XP.

    Note that clients that only support netbios won't be able to + see your samba server when netbios support is disabled. +

    Default: disable netbios = no

    Example: disable netbios = yes

    disable spoolss (G)

    Enabling this parameter will disables Samba's support +>Enabling this parameter will disable Samba's support for the SPOOLSS set of MS-RPC's and will yield identical behavior as Samba 2.0.x. Windows NT/2000 clients will downgrade to using Lanman style printing commands. Windows 9x/ME will be uneffected by @@ -6918,13 +7502,17 @@ NAME="DISABLESPOOLSS" Wizard or by using the NT printer properties dialog window. It will also disable the capability of Windows NT/2000 clients to download print drivers from the Samba host upon demand. - Be very careful about enabling this parameter.Be very careful about enabling this parameter.

    See also use client driver

    display charset (G)

    Specifies the charset that samba will use + to print messages to stdout and stderr and SWAT will use. + Should generally be the same as the unix charset. +

    Default: display charset = ASCII

    Example: display charset = UTF8

    dns proxy (G)

    See also the parameter

    See also ,

    Default: no domain administratorsDefault: no domain administrators

    Example:

    See also ,

    Default: no domain guestsDefault: no domain guests

    Example: true, the Samba server will serve Windows 95/98 Domain logons for the to claim a special domain specific NetBIOS name that identifies it as a domain master browser for its given

    If domain logons = yes. Experimentation is the best policy :-)

    Default: Default: none (i.e., all directories are OK - to descend)

    Example:

    dos charset (G)

    DOS SMB clients assume the server has + the same charset as they do. This option specifies which + charset Samba should talk to DOS clients. +

    The default depends on which charsets you have instaled. + Samba tries to use charset 850 but falls back to ASCII in + case it is not available. Run testparm(1) + to check the default on your system. +

    dos filemode (S)
    program for information on how to set up and maintain this file), or set the security = [server|domain|ads] parameter which causes

    Default: no enumports commandDefault: no enumports command

    Example:

    This is a synonym for

    It is generally much better to use the real

    This parameter specifies a set of UNIX mode bit - permissions that will alwaysalways be set on a file created by Samba. This is done by bitwise 'OR'ing these bits onto the mode bits of a file that is being created or having its @@ -7653,7 +8308,7 @@ CLASS="PARAMETER" parameter is applied.

    See also the parameter for details on masking mode bits on files.

    See also the

    This parameter specifies a set of UNIX mode bit - permissions that will alwaysalways be set on a directory created by Samba. This is done by bitwise 'OR'ing these bits onto the mode bits of a directory that is being created. The default for this @@ -7712,7 +8371,7 @@ CLASS="PARAMETER" applied.

    See also the parameter

    See also the force directory - security mode (S)force directory security mode (S)

    This parameter controls what UNIX permission bits @@ -7768,8 +8426,12 @@ NAME="FORCEDIRECTORYSECURITYMODE" allows a user to modify all the user/group/world permissions on a directory without restrictions.

    NoteNote that users who can access the Samba server through other means can easily bypass this restriction, so it is primarily useful for standalone "appliance" systems. @@ -7777,7 +8439,7 @@ NAME="FORCEDIRECTORYSECURITYMODE" it set as 0000.

    See also the , ,

    If the .

    See also .

    Default: no forced groupDefault: no forced group

    Example:

    NoteNote that users who can access the Samba server through other means can easily bypass this restriction, so it is primarily useful for standalone "appliance" systems. @@ -7919,7 +8589,7 @@ NAME="FORCESECURITYMODE" this set to 0000.

    See also the , ,

    See also

    Default: no forced userDefault: no forced user

    Example:

    Synonym for

    This is a username which will be used for access to services which are specified as lp(1).

    Default: This paramater does not accept % marcos, becouse + many parts of the system require this value to be + constant for correct operation

    Default: specified at compile time, usually - "nobody"

    Example: for a service, then no password is required to connect to the service. Privileges will be those of the .

    See the section below on for a service, then only guest connections to the service are permitted. This parameter will have no effect if is not set for the service.

    See the section below on

    See also , and .

    Default: no file are hiddenDefault: no file are hidden

    Example: hide unreadable (S)hide unreadable (G)

    This parameter prevents clients from seeing the @@ -8331,13 +9017,30 @@ CLASS="COMMAND" >

    hide unwriteable files (G)

    This parameter prevents clients from seeing + the existance of files that cannot be written to. Defaults to off. + Note that unwriteable directories are shown as usual. +

    Default: hide unwriteable = no

    homedir map (G)

    If

    NOTE :NOTE :A working NIS client is required on the system for this option to work.

    See also ,

    Default: homedir map = <empty string>homedir map = <empty string>

    Example:

    See also the

    hostname lookups (G)

    Specifies whether samba should use (expensive) + hostname lookups or use the ip addresses instead. An example place + where hostname lookups are currently used is when checking + the hosts deny and hosts allow. +

    Default: hostname lookups = yes

    Example: hostname lookups = no

    hosts allow (S)

    Note that the localhost address 127.0.0.1 will always be allowed access unless specifically denied by a

    You can also specify hosts by network/netmask pairs and by netgroup names if your system supports netgroups. The - EXCEPTEXCEPT keyword can also be used to limit a wildcard list. The following examples may provide some help:

    for a way of testing your host access to see if it does what you expect.

    Default: Default: none (i.e., all hosts permitted access) -

    Example: hosts allow - - hosts listed here are NOTNOT permitted access to services unless the specific services have their own lists to override this one. Where the lists conflict, the list takes precedence.

    Default: Default: none (i.e., no hosts specifically excluded) -

    Example:

    This is not be confused with may be useful for NT clients which will not supply passwords to Samba.

    NOTE :NOTE : The use of option be only used if you really know what you are doing, or perhaps on a home network where you trust - your spouse and kids. And only if you reallyreally trust them :-).

    Default: no host equivalencesDefault: no host equivalences

    Example: .

    Default: no file includedDefault: no file included

    Example:

    The permissions on new files and directories are normally governed by , , and New files inherit their read/write bits from the parent directory. Their execute bits continue to be determined by , and as usual.

    Note that the setuid bit is neverNote that the setuid bit is never set via inheritance (the code explicitly prohibits this).

    See also , , and

    See also .

    Default: Default: all active interfaces except 127.0.0.1 - that are broadcast capable

    This is a list of users that should not be allowed - to login to this service. This is really a paranoidparanoid check to absolutely ensure an improper setting does not breach your security.

    +&group+&group means check the UNIX group database, followed by the NIS netgroup database, and @@ -8975,7 +9755,7 @@ CLASS="PARAMETER" This is useful in the [homes] section.

    See also .

    Default: no invalid usersDefault: no invalid users

    Example:

    Keepalives should, in general, not be needed if the socket being used has the SO_KEEPALIVE attribute set on it (see

    For UNIXes that support kernel based has oplocked. This allows complete data consistency between - SMB/CIFS, NFS and local file access (and is a veryvery cool feature :-).

    See also the and

    Default : noneDefault : none

    Default : ldap filter = (&(uid=%u)(objectclass=sambaAccount))ldap filter = (&(uid=%u)(objectclass=sambaAccount))

    This option is used to define whether or not Samba should use SSL when connecting to the ldap server - This is NOTNOT related to Samba's previous SSL support which was enabled by specifying the ldap suffix (G)

    Default : noneDefault : none

    It specifies where users are added to the tree.

    Default : noneDefault : none

    Default : noneDefault : none

    For more discussions on level2 oplocks see the CIFS spec.

    Currently, if yes). Note also, the

    See also the and .

    See also

    If Samba is set to produce Lanman announce broadcasts needed by OS/2 clients (see the

    See also A boolean variable that controls whether all printers in the printcap will be loaded for browsing by default. See the printers section for more details.

    true doesn't - mean that Samba will becomebecome the local master browser on a subnet, just that nmbd will participate will participate in elections for local master browser.

    Setting this value to nmbd - nevernever to become a local master browser.

    Default:

    Synonym for This option specifies the directory where lock files will be placed. The lock files are used to implement the The time in microseconds that smbd should pause before attempting to gain a failed lock. See , real locking will be performed by the server.

    This option mayThis option may be useful for read-only - filesystems which maymay not need locking (such as CDROM drives), although setting this parameter of

    This parameter specifies the local path to which the home directory will be connected (see

    Note that in prior versions of Samba, the Thereafter, the directories and any of the contents can, if required, be made read-only. It is not advisable that the NTuser.dat file be made read-only - rename it to NTuser.man to - achieve the desired effect (a MANMANdatory profile).

    The script must be a relative path to the [netlogon] service. If the [netlogon] service specifies a This option is only useful if Samba is set up as a logon server.

    Default: no logon script definedDefault: no logon script defined

    Example:

    See also the A value of 0 will disable caching completely.

    See also the

    See also the parameter.

    Default: Default: depends on the setting of printing

    Example: This command should be a program or script which takes a printer name and job number to resume the print job. See also the

    See also the

    See also the parameter.

    Default: Default: depends on the setting of printing

    Example 1:

    If a Samba server is a member of a Windows NT Domain (see the security = domain) parameter) then periodically a running , and the security = domain) parameter.

    This parameter specifies the name of a file which will contain output created by a magic script (see the

    Default: magic output = <magic script name>.out +>magic output = <magic script name>.out

    If the script generates output, output will be sent to the file specified by the Note that some shells are unable to interpret scripts containing CR/LF instead of CR as the end-of-line marker. Magic scripts must be executable - as isas is on the host, which for some hosts and some shells will require filtering at the DOS end.

    Magic scripts are EXPERIMENTALMagic scripts are EXPERIMENTAL and - should NOTNOT be relied upon.

    Default: None. Magic scripts disabled.Default: None. Magic scripts disabled.

    Example:

    See the section on NAME MANGLING

    off the ends of filenames on some CDROMs (only visible under some UNIXes). To do this use a map of (*;1 *;).

    Default: no mangled mapDefault: no mangled map

    Example:

    See the section on NAME MANGLING for details on how to control the mangling process.

    Note that the character to use may be specified using the

    mangling method (G)

    controls the algorithm used for the generating + the mangled names. Can take two different values, "hash" and + "hash2". "hash" is the default and is the algorithm that has been + used in Samba for many years. "hash2" is a newer and considered + a better algorithm (generates less collisions) in the names. + However, many Win32 applications store the mangled names and so + changing to the new algorithm must not be done + lightly as these applications may break unless reinstalled. + New installations of Samba may set the default to hash2.

    Default: mangling method = hash

    Example: mangling method = hash2

    mangled stack (G)

    This controls what character is used as - the magicmagic character in name mangling. The default is a '~' but this may interfere with some software. Use this option to set @@ -10842,7 +11737,7 @@ CLASS="PARAMETER" > parameter to be set such that owner execute bit is not masked out (i.e. it must include 100). See the parameter to be set such that the world execute bit is not masked out (i.e. it must include 001). See the parameter to be set such that the group execute bit is not masked out (i.e. it must include 010). See the parameter

    This parameter is only useful in security modes other than - Means user logins with an invalid password are treated as a guest login and mapped into the guest account. Note that this can cause problems as it means that any user incorrectly typing @@ -11003,8 +11898,12 @@ HREF="#GUESTACCOUNT" will not know the reason they cannot access files they think they should - there will have been no message given to them that they got their password wrong. Helpdesk services will - hatehate you if you set the modes other than share. This is because in these modes the name of the resource being - requested is notnot sent to the server until after the server has successfully authenticated the client so the server cannot make authentication decisions at the correct time (connection @@ -11066,7 +11969,7 @@ CLASS="PARAMETER" >

    Record lock files are used to implement this feature. The lock files will be stored in the directory specified by the will remote "Out of Space" to the client. See all LANMAN1: First modern: First modern version of the protocol. Long filename support.

    See also nmbd(8) when acting as a WINS server (

    See also the xedit, then - removes it afterwards. NOTE THAT IT IS VERY IMPORTANT - THAT THIS COMMAND RETURN IMMEDIATELY. That's why I have the '&' on the end. If it doesn't return immediately then your PCs may freeze when sending messages (they should recover @@ -11546,7 +12457,7 @@ CLASS="PARAMETER" >message command = /bin/mail -s 'message from %f on - %m' root < %s; rm %s

    If you don't have a message command then the message @@ -11562,8 +12473,12 @@ CLASS="COMMAND" >message command = rm %s

    Default: no message commandDefault: no message command

    Example:

    Synonym for

    See also , and

    See also the The value of the parameter (a string) is the lowest SMB protocol dialect than Samba will support. Please refer to the

    If you are viewing this parameter as a security measure, you should also refer to the nmbd(8) when acting as a WINS server (.

    See also

    name cache timeout (G)

    Specifies the number of seconds it takes before + entries in samba's hostname resolve cache time out. If + the timeout is set to 0. the caching is disabled. +

    Default: name cache timeout = 660

    Example: name cache timeout = 0

    name resolve order (G)
    wins : Query a name with the IP address listed in the bcast : Do a broadcast on each of the known local interfaces listed in the

    See also .

    Default: empty string (no additional names)Default: empty string (no additional names)

    Example:

    See also .

    Default: machine DNS nameDefault: machine DNS name

    Example:

    Default: non unix account range = <empty string> +>non unix account range = <empty string>

    list and is only really useful in shave level security.

    See also the

    A synonym for

    DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ - AND UNDERSTOOD THE SAMBA OPLOCK CODE.

    Default: oplock contention limit (S)

    This is a veryThis is a very advanced to behave in a similar way to Windows NT.

    DO NOT CHANGE THIS PARAMETER UNLESS YOU HAVE READ - AND UNDERSTOOD THE SAMBA OPLOCK CODE.

    Default:

    Oplocks may be selectively turned off on certain files with a share. See the parameter for details.

    See also the and

    ntlm auth (G)

    This parameter determines whether or not smbd will + attempt to authenticate users using the NTLM password hash. + If disabled, only the lanman password hashes will be used. +

    Please note that at least this option or lanman auth should be enabled in order to be able to log in. +

    Default : ntlm auth = yes

    os level (G)
    in the local broadcast area.

    Note :Note :By default, Samba will win a local master browsing election over all Microsoft operating systems except a Windows NT 4.0/2000 Domain Controller. This @@ -12459,8 +13447,8 @@ NAME="OS2DRIVERMAP" path to a file containing a mapping of Windows NT printer driver names to OS/2 printer driver names. The format is:

    <nt driver name> = <os2 driver - name>.<device name>

    <nt driver name> = <os2 driver + name>.<device name>

    For example, a valid entry using the HP LaserJet 5 printer driver would appear as

    Default: os2 driver map = <empty string> +>os2 driver map = <empty string>

    . It should be possible to enable this without changing your
    paranoid server security (G)

    Some version of NT 4.x allow non-guest + users with a bad passowrd. When this option is enabled, samba will not + use a broken NT 4.x server as password server, but instead complain + to the logs and exit. +

    Default: paranoid server security = yes

    passdb backend (G)

    This paramater is in two parts, the backend's name, and a 'location' +>This parameter is in two parts, the backend's name, and a 'location' string that has meaning only to that particular backed. These are separated by a : character.

    See also - The TDB based password storage backend. Takes a path to the TDB as an optional argument (defaults to passdb.tdb in the - The TDB based password storage backend, with non unix account support. Takes a path to the TDB as an optional argument (defaults to passdb.tdb in the directory.

    See also )

    See also

    nisplussam - The NIS+ based passdb backend. Takes name NIS domain as an optional argument. Only works with sun NIS+ servers.

  • plugin - Allows Samba to load an arbitary passdb backend from the .so specified as a compulsary argument. @@ -12745,8 +13758,12 @@ NAME="PASSWDCHAT" >passwd chat (G)

    This string controls the "chat"This string controls the "chat" conversation that takes places between smbd(8) uses to determine what to send to the

    Note that this parameter only is only used if the yes. This - sequence is then called AS ROOTAS ROOT when the SMB password in the smbpasswd file is being changed, without access to the old password cleartext. This means that root must be able to reset the user's password without knowing the text of the previous password. In the presence of NIS/YP, this means that the passwd program must be executed on the NIS master. @@ -12831,7 +13852,7 @@ CLASS="CONSTANT" if the expect string is a full stop then no string is expected.

    If the

    See also , , and

    This boolean specifies if the passwd chat script - parameter is run in debugdebug mode. In this mode the strings passed to and received from the passwd chat are printed in the smbd(8) log with a and should be turned off after this has been done. This option has no effect if the

    See also , ,

    Also note that many passwd programs insist in Also note that many passwd programs insist in reasonable - passwords, such as a minimum length, or the inclusion of mixed case chars and digits. This can pose a problem as some clients (such as Windows for Workgroups) uppercase the password before sending it.

    NoteNote that if the true then this program is called AS ROOT then this program is called AS ROOT before the SMB password in the unix password sync parameter - is set this parameter MUST USE ABSOLUTE PATHSMUST USE ABSOLUTE PATHS - for ALLALL programs called, and must be examined for security implications. Note that by default .

    See also

    The name of the password server is looked up using the parameter

    NOTE:NOTE: Using a password server means your UNIX box (running Samba) is only as secure as your - password server. DO NOT CHOOSE A PASSWORD SERVER THAT - YOU DON'T COMPLETELY TRUST.

    Never point a Samba server at itself for password @@ -13245,7 +14298,7 @@ CLASS="PARAMETER" Primary or Backup Domain controllers to authenticate against by doing a query for the name WORKGROUP<1C>WORKGROUP<1C> and then contacting each server returned in the list of IP addresses from the name resolution source.

    See also the

    Default: password server = <empty string>password server = <empty string>

    Note that this path will be based on if one was specified.

    Default: noneDefault: none

    Example:

    See also .

    Default: none (no command executed)Default: none (no command executed)

    Example: postexec = echo \"%u disconnected from %S - from %m (%I)\" >> /tmp/log

    Of course, this could get annoying after a while :-)

    See also and .

    Default: none (no command executed)Default: none (no command executed)

    Example: preexec = echo \"%u connected to %S from %m - (%I)\" >> /tmp/log

    This boolean option controls whether a non-zero return code from

    See also

    Synonym for

    Note that if you just want all printers in your printcap file loaded then the option is easier.

    Default: no preloaded servicesDefault: no preloaded services

    Example: This controls if new filenames are created with the case that the client passes, or if they are forced to be the

    See the section on NAME MANGLING for a fuller discussion.

    %z - the size of the spooled print job (in bytes)

    The print command MUSTThe print command MUST contain at least one occurrence of nobody account. If this happens then create an alternative guest account that can print and set the

    print command = echo Printing %s >> +>print command = echo Printing %s >> /tmp/print.log; lpr -P %p %s; rm %s

    You may have to vary this command considerably depending on how you normally print files on your system. The default for the parameter varies depending on the setting of the

    For printing = CUPS : If SAMBA is compiled against libcups, then printcap = cups uses the CUPS API to @@ -13893,7 +14966,7 @@ NAME="PRINTOK" >

    Synonym for Note that a printable service will ALWAYS allow writing to the service path (user privileges permitting) via the spooling of print data. The

    Synonym for /etc/printcap). See the discussion of the [printers] section above for reasons why you might want to do this.

    . This should be supplemented by an addtional setting printing = cups in the [global] section.

    A minimal printcap file would look something like this:

    		print1|My Printer 1
    @@ -14027,17 +15094,18 @@ CLASS="PROGRAMLISTING"
     		print4|My Printer 4
     		print5|My Printer 5
     		

    where the '|' separates aliases of a printer. The fact that the second alias has a space in it gives a hint to Samba that it's a comment.

    NOTENOTE: Under AIX the default printcap name is

    Default: printer admin = <empty string>printer admin = <empty string>

    printer driver (S)

    Note :Note :This is a deprecated parameter and will be removed in the next major release following version 2.2. Please see the instructions in @@ -14116,7 +15188,7 @@ TARGET="_top" sensitive) that describes the appropriate printer driver for your system. If you don't know the exact string to use then you should first try with no

    See also printer driver file (G)

    Note :Note :This is a deprecated parameter and will be removed in the next major release following version 2.2. Please see the instructions in @@ -14195,7 +15271,7 @@ CLASS="FILENAME" >.

    See also .

    Default: None (set in compile).Default: None (set in compile).

    Example: printer driver location (S)

    Note :Note :This is a deprecated parameter and will be removed in the next major release following version 2.2. Please see the instructions in @@ -14257,7 +15341,7 @@ CLASS="FILENAME" >.

    See also

    Default: Default: none (but may be lp - on many systems)

    Example:

    Synonym for This option can be set on a per printer basis

    See also the discussion in the [printers] section.

    Synonym for

    Synonym for

    Default: Default: depends on the setting of printing

    Example:

    Default: Default: depends on the setting of printing

    This is a list of users that are given read-only access to a service. If the connecting user is in this list then they will not be given write access, no matter what the option is set to. The list can include group names using the syntax described in the parameter.

    See also the parameter and the

    Default: read list = <empty string>read list = <empty string>

    Example:

    Note that this is an inverted synonym for

    In general this parameter should be viewed as a system tuning tool and left severely alone. See also

    realm (G)

    This option specifies the kerberos realm to use. The realm is + used as the ADS equivalent of the NT4domain. It + is usually set to the DNS name of the kerberos server. +

    Default: realm =

    Example: realm = mysambabox.mycompany.com

    remote announce (G)

    Default: remote announce = <empty string> +>remote announce = <empty string>

    Default: remote browse sync = <empty string> +>remote browse sync = <empty string>

    Synonym for

    Synonym for root directory - option, includingincluding some files needed for complete operation of the server. To maintain full operability of the server you will need to mirror some system files @@ -15027,7 +16152,7 @@ CLASS="PARAMETER" (such as CDROMs) after a connection is closed.

    See also

    Default: root postexec = <empty string> +>root postexec = <empty string>

    See also and

    Default: root preexec = <empty string> +>root preexec = <empty string>

    parameter except that the command is run as root.

    See also and security = user, see the It is possible to use smbd in a hybrid mode in a hybrid mode where it is offers both user and share level security under different SECURITY = SHARE -

    When clients connect to a share level security server they @@ -15252,8 +16385,12 @@ CLASS="COMMAND" >Note that smbd ALWAYS ALWAYS uses a valid UNIX user to act on behalf of the client, even in

  • If the parameter is set, then all the other stages are missed and only the

    Is a username is sent with the share connection request, then this username (after mapping - see

  • If the client did a previous If the client did a previous logon - request (the SessionSetup SMB call) then the username sent in this SMB will be added as a potential username.

  • Any users on the , then this guest user will be used, otherwise access is denied.

    Note that it can be veryNote that it can be very confusing in share-level security as to which UNIX username will eventually be used in granting access.

    See also the section NOTE ABOUT USERNAME/PASSWORD VALIDATION.

    SECURITY = USER -

    This is the default security setting in Samba 2.2. With user-level security a client must first "log-on" with a valid username and password (which can be mapped using the parameter). Encrypted passwords (see the parameter) can also be used in this security mode. Parameters such as and

    NoteNote that the name of the resource being - requested is notnot sent to the server until after the server has successfully authenticated the client. This is why guest shares don't work in user level security without allowing the server to automatically map unknown users into the . See the parameter for details on doing this.

    See also the section NOTE ABOUT USERNAME/PASSWORD VALIDATION.

    SECURITY = SERVER -

    In this mode Samba will try to validate the username/password @@ -15492,8 +16653,12 @@ CLASS="FILENAME" > for details on how to set this up.

    NoteNote that from the client's point of view

    NoteNote that the name of the resource being - requested is notnot sent to the server until after the server has successfully authenticated the client. This is why guest shares don't work in user level security without allowing the server to automatically map unknown users into the . See the parameter for details on doing this.

    See also the section NOTE ABOUT USERNAME/PASSWORD VALIDATION.

    See also the parameter and the SECURITY = DOMAIN -

    This mode will only work correctly if smbpasswd(8) has been used to add this machine into a Windows NT Domain. It expects the

    NoteNote that a valid UNIX user must still exist as well as the account on the Domain Controller to allow Samba to have a valid UNIX account to map file access to.

    NoteNote that from the client's point of view . It only affects how the server deals with the authentication, it does not in any way affect what the client sees.

    NoteNote that the name of the resource being - requested is notnot sent to the server until after the server has successfully authenticated the client. This is why guest shares don't work in user level security without allowing the server to automatically map unknown users into the . See the parameter for details on doing this.

    BUG:BUG: There is currently a bug in the implementation of

    See also the section NOTE ABOUT USERNAME/PASSWORD VALIDATION.

    See also the parameter and the

    NoteNote that users who can access the Samba server through other means can easily bypass this restriction, so it is primarily useful for standalone @@ -15717,7 +16918,7 @@ CLASS="CONSTANT" >.

    See also the , , This option gives full share compatibility and enabled by default.

    You should NEVERYou should NEVER turn this parameter off as many Windows applications will break if you do so.

    . This option can be use with preserve case = yes

    See the section on NAME MANGLING.

    parameter will always cause the OpenPrinterEx() on the server - to fail. Thus the APW icon will never be displayed. Note : Note :This does not prevent the same user from having administrative privilege on an individual printer.

    See also , , shutdown script (G)

    This parameter only exists in the HEAD cvs branchThis parameter only exists in the HEAD cvs branch This a full path name to a script called by %r will be substituted with the - switch -r-r. It means reboot after shutdown for NT.

    %f will be substituted with the - switch -f-f. It means force the shutdown even if applications do not respond for NT.

    Default: NoneDefault: None.

    Example:

    Shutdown script example: -
    		#!/bin/bash
     		
    @@ -16086,15 +17305,12 @@ CLASS="PROGRAMLISTING"
     
     		/sbin/shutdown $3 $4 +$time $1 &
     		
    Shutdown does not return so we need to launch it in background.

    See also

    smb ports (G)

    Specifies which ports the server should listen on + for SMB traffic. +

    Default: smb ports = 445 139

    socket address (G)
  • Those marked with a '*'Those marked with a '*' take an integer argument. The others can optionally take a 1 or 0 argument to enable or disable the option, by default they will be enabled if you @@ -16305,8 +17541,12 @@ CLASS="COMMAND" >SAMBA_NETBIOS_NAME = myhostname

    Default: No default valueDefault: No default value

    Examples:

    This variable controls controls whether samba will try to use Simple and Protected NEGOciation (as specified by rfc2478) with WindowsXP and Windows2000sp2 clients to agree upon an authentication mechanism. As of samba 3.0alpha it must be set to "no" for these clients to join a samba domain controller. It can be set to "yes" to allow samba to participate in an AD domain controlled by a Windows2000 domain controller.

    Default: use spnego = yesDefault: use spnego = yes

    See also the

    See also the

    Synonym for

    unicode (G)

    Specifies whether Samba should try + to use unicode on the wire by default. +

    Default: unicode = yes

    unix charset (G)

    Specifies the charset the unix machine + Samba runs on uses. Samba needs to know this in order to be able to + convert text to the charsets other SMB clients use. +

    Default: unix charset = ASCII

    unix extensions(G)
    passwd programparameter is called AS ROOTparameter is called AS ROOT - to allow the new UNIX password to be set without access to the old UNIX password (as the SMB password change code has no access to the old password cleartext, only the new).

    See also , .

    In order for this parameter to work correctly the If this parameter is enabled for a printer, then any attempt to open the printer with the PRINTER_ACCESS_ADMINISTER right is mapped to PRINTER_ACCESS_USE instead. Thus allowing the OpenPrinterEx() - call to succeed. This parameter MUST not be able enabled on a print share which has valid print driver installed on the Samba - server.

    See also disable spoolss

    NOTE:NOTE: The use of

    Synonym for

    Synonym for

    To restrict a service to a particular set of users you can use the

    See the section NOTE ABOUT USERNAME/PASSWORD VALIDATION for more information on how @@ -17149,7 +18438,7 @@ HREF="#AEN236" >Default: The guest account if a guest service, - else <empty string>.

    Examples:

    		!sys = mary fred
     		guest = *
     		

    Note that the remapping is applied to all occurrences @@ -17320,7 +18600,7 @@ CLASS="CONSTANT" >fred. The only exception to this is the username passed to the

    Default: no username mapDefault: no username map

    Example:

    See also the . It specifies a directory pathname that is used to store the utmp or utmpx files (depending on the UNIX system) that record user connections to a Samba server. See also the /var/run/utmp on Linux).

    Default: no utmp directoryDefault: no utmp directory

    Example: utmp directory = /var/run/utmp

    wtmp directory(G)

    This parameter is only available if Samba has + been configured and compiled with the option --with-utmp. It specifies a directory pathname that is + used to store the wtmp or wtmpx files (depending on the UNIX system) that + record user connections to a Samba server. The difference with + the utmp directory is the fact that user info is kept after a user + has logged out. + + See also the utmp parameter. By default this is + not set, meaning the system will use whatever utmp file the + native system is set to use (usually + /var/run/wtmp on Linux).

    Default: no wtmp directory

    Example: wtmp directory = /var/log/wtmp

    . This is useful in the [homes] section.

    See also

    Default: Default: No valid users list (anyone can login) -

    Example:

    Each entry must be a unix path, not a DOS path and - must notnot include the unix directory separator '/'.

    failfail unless you also set the

    See also and .

    Default: Default: No files or directories are vetoed. -

    Examples:
    Examples:
    ; Veto any files containing the word Security, 
     ; any ending in .tmp, and any directory containing the
    @@ -17565,9 +18914,6 @@ veto files = /*Security*/*.tmp/*root*/
     ; Veto the Apple specific files that a NetAtalk server
     ; creates.
     veto files = /.AppleDouble/.bin/.AppleDesktop/Network Trash Folder/

    This parameter is only valid when the parameter.

    Default: Default: No files are vetoed for oplock - grants

    You might want to do this on files that you know will @@ -17624,6 +18974,31 @@ CLASS="COMMAND" >

    vfs path (S)

    This parameter specifies the directory + to look in for vfs modules. The name of every vfs object + will be prepended by this directory +

    Default: vfs path =

    Example: vfs path = /usr/lib/samba/vfs

    vfs object (S)

    Default : no valueDefault : no value

    .

    Default : no valueDefault : no value

    Default: the name of the shareDefault: the name of the share

    system call will not return any data.

    Warning:Warning: Turning off user enumeration may cause some programs to behave oddly. For example, the finger program relies on having access to the @@ -17810,8 +19201,12 @@ CLASS="COMMAND" > system call will not return any data.

    Warning:Warning: Turning off group enumeration may cause some programs to behave oddly.

    Default: winbind gid = <empty string> +>winbind gid = <empty string>

    Default: winbind uid = <empty string> +>winbind uid = <empty string>

    Default: winbind use default domain = <falseg> +>winbind use default domain = <falseg>

    You should point this at your WINS server if you have a multi-subnetted network.

    NOTENOTE. You need to set up Samba to point to a WINS server if you have multiple subnets and wish cross-subnet browsing to work correctly.

    in the docs/ directory of your Samba source distribution.

    Default: not enabledDefault: not enabled

    Example: nmbd to be your WINS server. - Note that you should NEVERNEVER set this to trueThis controls what workgroup your server will appear to be in when queried by clients. Note that this parameter also controls the Domain name used with the security = domain setting.

    Default: set at compile time to WORKGROUPDefault: set at compile time to WORKGROUP

    Example:

    Synonym for

    If this integer parameter is set to non-zero value, Samba will create an in-memory cache for each oplocked file - (it does notnot do this for non-oplocked files). All writes that the client does not request to be flushed directly to disk will be stored in this cache if possible. @@ -18203,7 +19618,7 @@ NAME="WRITELIST" >This is a list of users that are given read-write access to a service. If the connecting user is in this list then they will be given write access, no matter what the

    See also the

    Default: write list = <empty string> +>write list = <empty string>

    wins partners (G)

    A space separated list of partners' IP addresses for + WINS replication. WINS partners are always defined as push/pull + partners as defining only one way WINS replication is unreliable. + WINS replication is currently experimental and unreliable between + samba servers. +

    Default: wins partners =

    Example: wins partners = 192.168.0.1 172.16.1.2

    write ok (S)

    Synonym for

    An inverted synonym is printable = yes) - will ALWAYSALWAYS allow writing to the directory (user privileges permitting), but only via spooling operations.

    WARNINGS

    VERSION

    SEE ALSO

    AUTHOR

    .\" Please send any bug reports, improvements, comments, patches, .\" etc. to Steve Cheng . -.TH "SMB.CONF" "5" "22 augustus 2002" "" "" +.TH "SMB.CONF" "5" "07 September 2002" "" "" .SH NAME smb.conf \- The configuration file for the Samba suite .SH "SYNOPSIS" @@ -13,7 +13,7 @@ file for the Samba suite. \fIsmb.conf\fR contains runtime configuration information for the Samba programs. The \fIsmb.conf\fR file is designed to be configured and administered by the \fBswat(8)\fR -program. The complete description of the file format and + program. The complete description of the file format and possible parameters held within are here for reference purposes. .SH "FILE FORMAT" .PP @@ -376,7 +376,7 @@ machine. Only some are recognized, and those may not be WinNT and Win2k. Anything else will be known as "UNKNOWN". If it gets it wrong then sending a level 3 log to samba@samba.org -should allow it to be fixed. + should allow it to be fixed. .TP \fB%I\fR The IP address of the client machine. @@ -598,7 +598,7 @@ each parameter for details. Note that some are synonyms. \fIdisable spoolss\fR .TP 0.2i \(bu -\fIdisable charset\fR +\fIdisplay charset\fR .TP 0.2i \(bu \fIdns proxy\fR @@ -1433,7 +1433,7 @@ each parameter for details. Note that some are synonyms. \fBabort shutdown script (G)\fR \fBThis parameter only exists in the HEAD cvs branch\fR This a full path name to a script called by -\fBsmbd(8)\fRthat +\fBsmbd(8)\fR that should stop a shutdown procedure issued by the \fIshutdown script\fR. This command will be run as user. @@ -1457,7 +1457,7 @@ will perform the necessary operations for adding the printer to the print system and to add the appropriate service definition to the \fIsmb.conf\fR file in order that it can be shared by \fBsmbd(8)\fR -. + The \fIaddprinter command\fR is automatically invoked with the following parameter (in @@ -1548,7 +1548,7 @@ Example: \fBadd share command = /usr/local/bin/addshare\fR .TP \fBadd machine script (G)\fR This is the full pathname to a script that will -be run by smbd(8)when a machine is added +be run by smbd(8) when a machine is added to it's domain using the administrator username and password method. This option is only required when using sam back-ends tied to the @@ -1574,16 +1574,16 @@ Example: \fBads server = 192.168.1.2\fR \fBadd user script (G)\fR This is the full pathname to a script that will be run \fBAS ROOT\fR by smbd(8) -under special circumstances described below. + under special circumstances described below. Normally, a Samba server requires that UNIX users are created for all users accessing files on this server. For sites that use Windows NT account databases as their primary user database creating these users and keeping the user list in sync with the -Windows NT PDC is an onerous task. This option allows smbdto create the required UNIX users +Windows NT PDC is an onerous task. This option allows smbd to create the required UNIX users \fBON DEMAND\fR when a user accesses the Samba server. -In order to use this option, smbd +In order to use this option, smbd must \fBNOT\fR be set to \fIsecurity = share\fR and \fIadd user script\fR must be set to a full pathname for a script that will create a UNIX @@ -1591,7 +1591,7 @@ user given one argument of \fI%u\fR, which expands into the UNIX user name to create. When the Windows user attempts to access the Samba server, -at login (session setup in the SMB protocol) time, smbdcontacts the \fIpassword server\fR and +at login (session setup in the SMB protocol) time, smbd contacts the \fIpassword server\fR and attempts to authenticate the given user with the given password. If the authentication succeeds then \fBsmbd\fR attempts to find a UNIX user in the UNIX password database to map the @@ -1617,7 +1617,7 @@ Example: \fBadd user script = /usr/local/samba/bin/add_user .TP \fBadd group script (G)\fR This is the full pathname to a script that will -be run \fBAS ROOT\fR by smbd(8)when a new group is requested. It will expand any \fI%g\fR to the group name passed. This script is only useful for installations using the Windows NT domain administration tools. +be run \fBAS ROOT\fR by smbd(8) when a new group is requested. It will expand any \fI%g\fR to the group name passed. This script is only useful for installations using the Windows NT domain administration tools. .TP \fBadmin users (S)\fR This is a list of users who will be granted @@ -1635,7 +1635,7 @@ Example: \fBadmin users = jason\fR \fBadd user to group script (G)\fR Full path to the script that will be called when a user is added to a group using the Windows NT domain administration -tools. It will be run by smbd(8) +tools. It will be run by smbd(8) \fBAS ROOT\fR. Any \fI%g\fR will be replaced with the group name and any \fI%u\fR will be replaced with the user name. @@ -1670,7 +1670,7 @@ Example: \fBalgorithmic rid base = 100000\fR This option only takes effect when the \fIsecurity\fR option is set to server or domain. If it is set to no, then attempts to connect to a resource from -a domain or workgroup other than the one which smbdis running +a domain or workgroup other than the one which smbd is running in will fail, even if that domain is trusted by the remote server doing the authentication. @@ -1687,7 +1687,7 @@ Default: \fBallow trusted domains = yes\fR .TP \fBannounce as (G)\fR This specifies what type of server -\fBnmbd\fR +\fBnmbd\fR will announce itself as, to a network neighborhood browse list. By default this is set to Windows NT. The valid options are : "NT Server" (which can also be written as "NT"), @@ -1738,8 +1738,8 @@ Default: \fBavailable = yes\fR \fBbind interfaces only (G)\fR This global parameter allows the Samba admin to limit what interfaces on a machine will serve SMB requests. If -affects file service smbd(8)and -name service nmbd(8)in slightly +affects file service smbd(8) and +name service nmbd(8) in slightly different ways. For name service it causes \fBnmbd\fR to bind @@ -1768,8 +1768,8 @@ interfaces as it will not cope with non-permanent interfaces. If \fIbind interfaces only\fR is set then unless the network address \fB127.0.0.1\fR is added -to the \fIinterfaces\fR parameter list \fBsmbpasswd(8)\fR -and \fBswat(8)\fRmay +to the \fIinterfaces\fR parameter list \fBsmbpasswd(8)\fR +and \fBswat(8)\fR may not work as expected due to the reasons covered below. To change a users SMB password, the \fBsmbpasswd\fR @@ -1780,7 +1780,7 @@ network address \fB127.0.0.1\fR is added to the \fIinterfaces\fR parameter list then \fB smbpasswd\fR will fail to connect in it's default mode. \fBsmbpasswd\fR can be forced to use the primary IP interface of the local host by using its \fI-r remote machine\fR -parameter, with \fIremote machine\fR set + parameter, with \fIremote machine\fR set to the IP name of the primary interface of the local host. The \fBswat\fR status page tries to connect with @@ -1793,7 +1793,7 @@ and \fBnmbd\fR. Default: \fBbind interfaces only = no\fR .TP \fBblocking locks (S)\fR -This parameter controls the behavior of smbd(8)when given a request by a client +This parameter controls the behavior of smbd(8) when given a request by a client to obtain a byte range lock on a region of an open file, and the request has a time limit associated with it. @@ -1811,7 +1811,7 @@ Default: \fBblocking locks = yes\fR .TP \fBblock size (S)\fR This parameter controls the behavior of -smbd(8)when reporting disk free +smbd(8) when reporting disk free sizes. By default, this reports a disk block size of 1024 bytes. Changing this parameter may have some effect on the @@ -1832,7 +1832,7 @@ Example: \fBblock size = 65536\fR See the \fI browseable\fR. .TP \fBbrowse list (G)\fR -This controls whether \fBsmbd(8)\fRwill serve a browse list to +This controls whether \fBsmbd(8)\fR will serve a browse list to a client doing a \fBNetServerEnum\fR call. Normally set to true. You should never need to change this. @@ -1858,7 +1858,7 @@ sensitive. This SMB allows a client to tell a server to "watch" a particular directory for any changes and only reply to the SMB request when a change has occurred. Such constant scanning of -a directory is expensive under UNIX, hence an \fBsmbd(8)\fRdaemon only performs such a scan +a directory is expensive under UNIX, hence an \fBsmbd(8)\fR daemon only performs such a scan on each requested directory once every \fIchange notify timeout\fR seconds. @@ -2051,7 +2051,7 @@ Default: \fBdebug hires timestamp = no\fR .TP \fBdebug pid (G)\fR When using only one log file for more then one -forked smbd-process there may be hard to follow which process +forked smbdprocess there may be hard to follow which process outputs which message. This boolean parameter is adds the process-id to the timestamp message headers in the logfile when turned on. @@ -2114,7 +2114,7 @@ do this all the time, setting \fBdefault devmode = yes\fR will instruct smbd to generate a default one. For more information on Windows NT/2k printing and Device Modes, -see the MSDN documentation. +see the MSDN documentation . Default: \fBdefault devmode = no\fR .TP @@ -2153,7 +2153,7 @@ Example: .TP \fBdelete group script (G)\fR This is the full pathname to a script that will -be run \fBAS ROOT\fR by smbd(8)when a group is requested to be deleted. It will expand any \fI%g\fR to the group name passed. This script is only useful for installations using the Windows NT domain administration tools. +be run \fBAS ROOT\fR by smbd(8) when a group is requested to be deleted. It will expand any \fI%g\fR to the group name passed. This script is only useful for installations using the Windows NT domain administration tools. .TP \fBdeleteprinter command (G)\fR With the introduction of MS-RPC based printer @@ -2248,7 +2248,7 @@ Example: \fBdelete user script = /usr/local/samba/bin/del_user \fBdelete user from group script (G)\fR Full path to the script that will be called when a user is removed from a group using the Windows NT domain administration -tools. It will be run by smbd(8) +tools. It will be run by smbd(8) \fBAS ROOT\fR. Any \fI%g\fR will be replaced with the group name and any \fI%u\fR will be replaced with the user name. @@ -2455,7 +2455,7 @@ Default: \fBdisplay charset = ASCII\fR Example: \fBdisplay charset = UTF8\fR .TP \fBdns proxy (G)\fR -Specifies that nmbd(8) +Specifies that nmbd(8) when acting as a WINS server and finding that a NetBIOS name has not been registered, should treat the NetBIOS name word-for-word as a DNS name and do a lookup with the DNS server for that name on behalf of @@ -2518,13 +2518,13 @@ directory shipped with the source code. Default: \fBdomain logons = no\fR .TP \fBdomain master (G)\fR -Tell \fB nmbd(8)\fRto enable WAN-wide browse list +Tell \fB nmbd(8)\fR to enable WAN-wide browse list collation. Setting this option causes \fBnmbd\fR to claim a special domain specific NetBIOS name that identifies it as a domain master browser for its given \fIworkgroup\fR. Local master browsers in the same \fIworkgroup\fR on broadcast-isolated subnets will give this \fBnmbd\fR their local browse lists, -and then ask \fBsmbd(8)\fR +and then ask \fBsmbd(8)\fR for a complete copy of the browse list for the whole wide area network. Browser clients will then contact their local master browser, and will receive the domain-wide browse list, instead of just the list @@ -2572,7 +2572,7 @@ charset Samba should talk to DOS clients. The default depends on which charsets you have instaled. Samba tries to use charset 850 but falls back to ASCII in case it is not available. Run testparm(1) -to check the default on your system. + to check the default on your system. .TP \fBdos filemode (S)\fR The default behavior in Samba is to provide @@ -2594,7 +2594,7 @@ granularity on time resolution is two seconds. Setting this parameter for a share causes Samba to round the reported time down to the nearest two second boundary when a query call that requires one second resolution is made to \fBsmbd(8)\fR -. + This option is mainly used as a compatibility option for Visual C++ when used against Samba shares. If oplocks are enabled on a @@ -2615,7 +2615,7 @@ file they can change the timestamp on it. Under POSIX semantics, only the owner of the file or root may change the timestamp. By default, Samba runs with POSIX semantics and refuses to change the timestamp on a file if the user \fBsmbd\fR is acting -on behalf of is not the file owner. Setting this option to true allows DOS semantics and smbdwill change the file +on behalf of is not the file owner. Setting this option to true allows DOS semantics and smbd will change the file timestamp as DOS requires. Default: \fBdos filetimes = no\fR @@ -2629,9 +2629,9 @@ Samba see the file ENCRYPTION.txt in the Samba documentation directory \fIdocs/\fR shipped with the source code. In order for encrypted passwords to work correctly -\fBsmbd(8)\fRmust either +\fBsmbd(8)\fR must either have access to a local \fIsmbpasswd(5) -\fRprogram for information on how to set up +\fR program for information on how to set up and maintain this file), or set the security = [server|domain|ads] parameter which causes \fBsmbd\fR to authenticate against another server. @@ -2720,7 +2720,7 @@ that it is the only one accessing the file and it will aggressively cache file data. With some oplock types the client may even cache file open/close operations. This can give enormous performance benefits. -When you set \fBfake oplocks = yes\fR, \fBsmbd(8)\fRwill +When you set \fBfake oplocks = yes\fR, \fBsmbd(8)\fR will always grant oplock requests no matter how many clients are using the file. @@ -2739,7 +2739,7 @@ Default: \fBfake oplocks = no\fR .TP \fBfollow symlinks (S)\fR This parameter allows the Samba administrator -to stop \fBsmbd(8)\fR +to stop \fBsmbd(8)\fR from following symbolic links in a particular share. Setting this parameter to no prevents any file or directory that is a symbolic link from being followed (the user will get an @@ -2921,7 +2921,7 @@ Example: \fBforce user = auser\fR This parameter allows the administrator to configure the string that specifies the type of filesystem a share is using that is reported by \fBsmbd(8) -\fRwhen a client queries the filesystem type +\fR when a client queries the filesystem type for a share. The default type is NTFS for compatibility with Windows NT but this can be changed to other strings such as Samba or FAT @@ -3022,7 +3022,7 @@ Example: \fBhide files = The above example is based on files that the Macintosh SMB client (DAVE) available from -Thursbycreates for internal use, and also still hides +Thursby creates for internal use, and also still hides all files beginning with a dot. .TP \fBhide local users(G)\fR @@ -3046,7 +3046,7 @@ Default: \fBhide unwriteable = no\fR .TP \fBhomedir map (G)\fR If\fInis homedir -\fR is true, and \fBsmbd(8)\fRis also acting +\fR is true, and \fBsmbd(8)\fR is also acting as a Win95/98 \fIlogon server\fR then this parameter specifies the NIS (or YP) map from which the server for the user's home directory should be extracted. At present, only the Sun @@ -3078,7 +3078,7 @@ to browse Dfs trees hosted on the server. See also the \fI msdfs root\fR share level parameter. For more information on setting up a Dfs tree on Samba, -refer to msdfs_setup.html. +refer to msdfs_setup.html Default: \fBhost msdfs = no\fR .TP @@ -3141,7 +3141,7 @@ deny access from one particular host Note that access still requires suitable user-level passwords. See \fBtestparm(1)\fR -for a way of testing your host access to see if it does + for a way of testing your host access to see if it does what you expect. Default: \fBnone (i.e., all hosts permitted access) @@ -3345,7 +3345,7 @@ allows the use of them to be turned on or off. Kernel oplocks support allows Samba \fIoplocks \fR to be broken whenever a local UNIX process or NFS operation accesses a file that \fBsmbd(8)\fR -has oplocked. This allows complete data consistency between + has oplocked. This allows complete data consistency between SMB/CIFS, NFS and local file access (and is a \fBvery\fR cool feature :-). @@ -3360,7 +3360,7 @@ and \fIlevel2 oplocks Default: \fBkernel oplocks = yes\fR .TP \fBlanman auth (G)\fR -This parameter determines whether or not smbdwill +This parameter determines whether or not smbd will attempt to authenticate users using the LANMAN password hash. If disabled, only clients which support NT password hashes (e.g. Windows NT/2000 clients, smbclient, etc... but not Windows 95/98 or the MS DOS @@ -3385,7 +3385,7 @@ Name (DN) name used by Samba to contact the ldap server when retreiving user account information. The \fIldap admin dn\fR is used in conjunction with the admin dn password stored in the \fIprivate/secrets.tdb\fR file. See the -\fBsmbpasswd(8)\fRman +\fBsmbpasswd(8)\fR man page for more information on how to accmplish this. Default : \fBnone\fR @@ -3396,7 +3396,7 @@ The default is to match the login name with the uid attribute for all entries matching the sambaAccount objectclass. Note that this filter should only return one entry. -Default : \fBldap filter = (%u)(objectclass=sambaAccount))\fR +Default : \fBldap filter = (&(uid=%u)(objectclass=sambaAccount))\fR .TP \fBldap ssl (G)\fR This option is used to define whether or not Samba should @@ -3467,7 +3467,7 @@ parameters. Default: \fBlevel2 oplocks = yes\fR .TP \fBlm announce (G)\fR -This parameter determines if \fBnmbd(8)\fRwill produce Lanman announce +This parameter determines if \fBnmbd(8)\fR will produce Lanman announce broadcasts that are needed by OS/2 clients in order for them to see the Samba server in their browse list. This parameter can have three values, true, false, or @@ -3512,7 +3512,7 @@ more details. Default: \fBload printers = yes\fR .TP \fBlocal master (G)\fR -This option allows \fB nmbd(8)\fRto try and become a local master browser +This option allows \fB nmbd(8)\fR to try and become a local master browser on a subnet. If set to false then \fB nmbd\fR will not attempt to become a local master browser on a subnet and will also lose in all browsing elections. By default this value is set to true. Setting this value to true doesn't @@ -3898,14 +3898,14 @@ Example 2: \fBlprm command = /usr/bin/cancel %p-%j \fBmachine password timeout (G)\fR If a Samba server is a member of a Windows NT Domain (see the security = domain) -parameter) then periodically a running smbd(8)process will try and change the MACHINE ACCOUNT +parameter) then periodically a running smbd(8) process will try and change the MACHINE ACCOUNT PASSWORD stored in the TDB called \fIprivate/secrets.tdb \fR. This parameter specifies how often this password will be changed, in seconds. The default is one week (expressed in seconds), the same as a Windows NT Domain member server. See also \fBsmbpasswd(8) -\fR, and the security = domain) parameter. +\fR and the security = domain) parameter. Default: \fBmachine password timeout = 604800\fR .TP @@ -4053,7 +4053,7 @@ Example: \fBmangling method = hash2\fR .TP \fBmangled stack (G)\fR This parameter controls the number of mangled names -that should be cached in the Samba server smbd(8). +that should be cached in the Samba server smbd(8) This stack is a list of recently mangled base names (extensions are only maintained if they are longer than 3 characters @@ -4121,7 +4121,7 @@ This parameter is only useful in security modes other than \fIsecurity = share and domain. This parameter can take three different values, which tell -smbd(8)what to do with user +smbd(8) what to do with user login requests that don't match a valid UNIX user in some way. The three settings are : @@ -4225,7 +4225,7 @@ Default: \fBmax mux = 50\fR .TP \fBmax open files (G)\fR This parameter limits the maximum number of -open files that one smbd(8)file +open files that one smbd(8) file serving process may have open for a client at any one time. The default for this parameter is set very high (10,000) as Samba uses only one bit per unopened file. @@ -4239,7 +4239,7 @@ Default: \fBmax open files = 10000\fR \fBmax print jobs (S)\fR This parameter limits the maximum number of jobs allowable in a Samba printer queue at any given moment. -If this number is exceeded, \fB smbd(8)\fRwill remote "Out of Space" to the client. +If this number is exceeded, \fB smbd(8)\fR will remote "Out of Space" to the client. See all \fItotal print jobs\fR. @@ -4292,7 +4292,7 @@ processes concurrently running on a system and is intended as a stopgap to prevent degrading service to clients in the event that the server has insufficient resources to handle more than this number of connections. Remember that under normal operating -conditions, each user will have an smbdassociated with him or her +conditions, each user will have an smbd associated with him or her to handle connections to all shares from a given host. Default: \fBmax smbd processes = 0\fR ## no limit @@ -4310,7 +4310,7 @@ Default: \fBmax ttl = 259200\fR .TP \fBmax wins ttl (G)\fR This option tells nmbd(8) -when acting as a WINS server ( \fIwins support = yes\fR) what the maximum + when acting as a WINS server ( \fIwins support = yes\fR) what the maximum \&'time to live' of NetBIOS names that \fBnmbd\fR will grant will be (in seconds). You should never need to change this parameter. The default is 6 days (518400 seconds). @@ -4457,7 +4457,7 @@ Dfs links are specified in the share directory by symbolic links of the form \fImsdfs:serverA\\shareA,serverB\\shareB \fR and so on. For more information on setting up a Dfs tree on Samba, refer to msdfs_setup.html -. + See also \fIhost msdfs \fR @@ -4486,7 +4486,7 @@ cause names to be resolved as follows : \(bu lmhosts : Lookup an IP address in the Samba lmhosts file. If the line in lmhosts has -no name type attached to the NetBIOS name (see the lmhosts(5)for details) then +no name type attached to the NetBIOS name (see the lmhosts(5) for details) then any name type matches for lookup. .TP 0.2i \(bu @@ -4523,7 +4523,7 @@ first, followed by a broadcast attempt, followed by a normal system hostname lookup. .TP \fBnetbios aliases (G)\fR -This is a list of NetBIOS names that nmbd(8)will advertise as additional +This is a list of NetBIOS names that nmbd(8) will advertise as additional names by which the Samba server is known. This allows one machine to appear in browse lists under multiple names. If a machine is acting as a browse server or logon server none @@ -4605,7 +4605,7 @@ Example: \fBnon unix account range = 10000-20000\fR .TP \fBnt acl support (S)\fR This boolean parameter controls whether -smbd(8)will attempt to map +smbd(8) will attempt to map UNIX permissions into Windows NT access control lists. This parameter was formally a global parameter in releases prior to 2.2.2. @@ -4614,7 +4614,7 @@ Default: \fBnt acl support = yes\fR .TP \fBnt pipe support (G)\fR This boolean parameter controls whether -smbd(8)will allow Windows NT +smbd(8) will allow Windows NT clients to connect to the NT SMB specific IPC$ pipes. This is a developer debugging option and can be left alone. @@ -4622,7 +4622,7 @@ alone. Default: \fBnt pipe support = yes\fR .TP \fBnt status support (G)\fR -This boolean parameter controls whether smbd(8)will negotiate NT specific status +This boolean parameter controls whether smbd(8) will negotiate NT specific status support with Windows NT/2k/XP clients. This is a developer debugging option and should be left alone. If this option is set to no then Samba offers @@ -4637,7 +4637,7 @@ Default: \fBnt status support = yes\fR Allow or disallow client access to accounts that have null passwords. -See also smbpasswd (5). +See also smbpasswd (5) Default: \fBnull passwords = no\fR .TP @@ -4694,11 +4694,11 @@ Default: \fBoplock break wait time = 0\fR .TP \fBoplock contention limit (S)\fR This is a \fBvery\fR advanced -smbd(8)tuning option to +smbd(8) tuning option to improve the efficiency of the granting of oplocks under multiple client contention for the same file. -In brief it specifies a number, which causes smbdnot to +In brief it specifies a number, which causes smbd not to grant an oplock even when requested if the approximate number of clients contending for an oplock on the same file goes over this limit. This causes \fBsmbd\fR to behave in a similar @@ -4733,7 +4733,7 @@ oplocks\fR and \fI level2 oplocks\fR parameters. Default: \fBoplocks = yes\fR .TP \fBntlm auth (G)\fR -This parameter determines whether or not smbdwill +This parameter determines whether or not smbd will attempt to authenticate users using the NTLM password hash. If disabled, only the lanman password hashes will be used. @@ -4744,7 +4744,7 @@ Default : \fBntlm auth = yes\fR \fBos level (G)\fR This integer value controls what level Samba advertises itself as for browse elections. The value of this -parameter determines whether nmbd(8) +parameter determines whether nmbd(8) has a chance of becoming a local master browser for the \fI WORKGROUP\fR in the local broadcast area. \fBNote :\fRBy default, Samba will win @@ -4773,9 +4773,9 @@ LaserJet 5L\fR. The need for the file is due to the printer driver namespace problem described in the Samba -Printing HOWTO. For more details on OS/2 clients, please +Printing HOWTO For more details on OS/2 clients, please refer to the OS2-Client-HOWTO -containing in the Samba documentation. + containing in the Samba documentation. Default: \fBos2 driver map = \fR @@ -4794,7 +4794,7 @@ Default: \fBpam password change = no\fR .TP \fBpanic action (G)\fR This is a Samba developer option that allows a -system command to be called when either smbd(8) +system command to be called when either smbd(8) crashes. This is usually used to draw attention to the fact that a problem occurred. @@ -4808,7 +4808,7 @@ users with a bad passowrd. When this option is enabled, samba will not use a broken NT 4.x server as password server, but instead complain to the logs and exit. -Default: \fBparanoid server security = no\fR +Default: \fBparanoid server security = yes\fR .TP \fBpassdb backend (G)\fR This option allows the administrator to chose which backends to retrieve and store passwords with. This allows (for example) both @@ -4893,9 +4893,9 @@ Example: \fBpassdb backend = plugin:/usr/local/samba/lib/my_passdb.so:my_plugin_ .TP \fBpasswd chat (G)\fR This string controls the \fB"chat"\fR -conversation that takes places between smbdand the local password changing +conversation that takes places between smbd and the local password changing program to change the user's password. The string describes a -sequence of response-receive pairs that smbd(8)uses to determine what to send to the +sequence of response-receive pairs that smbd(8) uses to determine what to send to the \fIpasswd program\fR and what to expect back. If the expected output is not received then the password is not changed. @@ -4944,7 +4944,7 @@ changed*"\fR This boolean specifies if the passwd chat script parameter is run in \fBdebug\fR mode. In this mode the strings passed to and received from the passwd chat are printed -in the smbd(8)log with a +in the smbd(8) log with a \fIdebug level\fR of 100. This is a dangerous option as it will allow plaintext passwords to be seen in the \fBsmbd\fR log. It is available to help @@ -4977,7 +4977,7 @@ it. password sync\fR parameter is set to true then this program is called \fBAS ROOT\fR before the SMB password in the smbpasswd(5) -file is changed. If this UNIX password change fails, then + file is changed. If this UNIX password change fails, then \fBsmbd\fR will fail to change the SMB password also (this is by design). @@ -5221,7 +5221,7 @@ return code from \fIpreexec Default: \fBpreexec close = no\fR .TP \fBpreferred master (G)\fR -This boolean parameter controls if nmbd(8)is a preferred master browser +This boolean parameter controls if nmbd(8) is a preferred master browser for its workgroup. If this is set to true, on startup, \fBnmbd\fR @@ -5432,7 +5432,7 @@ Example: \fBprinter admin = admin, @staff\fR parameter and will be removed in the next major release following version 2.2. Please see the instructions in the Samba 2.2. Printing -HOWTOfor more information +HOWTO for more information on the new method of loading printer drivers onto a Samba server. This option allows you to control the string @@ -5458,7 +5458,7 @@ Example: \fBprinter driver = HP LaserJet 4L\fR parameter and will be removed in the next major release following version 2.2. Please see the instructions in the Samba 2.2. Printing -HOWTOfor more information +HOWTO for more information on the new method of loading printer drivers onto a Samba server. This parameter tells Samba where the printer driver @@ -5486,7 +5486,7 @@ Example: \fBprinter driver file = parameter and will be removed in the next major release following version 2.2. Please see the instructions in the Samba 2.2. Printing -HOWTOfor more information +HOWTO for more information on the new method of loading printer drivers onto a Samba server. This parameter tells clients of a particular printer @@ -5541,7 +5541,7 @@ QNX, SOFTQ, and CUPS. To see what the defaults are for the other print -commands when using the various options use the testparm(1)program. +commands when using the various options use the testparm(1) program. This option can be set on a per printer basis @@ -5613,7 +5613,7 @@ Example: \fBqueuepause command = enable %p \fR .TP \fBread bmpx (G)\fR -This boolean parameter controls whether smbd(8)will support the "Read +This boolean parameter controls whether smbd(8) will support the "Read Block Multiplex" SMB. This is now rarely used and defaults to no. You should never need to set this parameter. @@ -5688,7 +5688,7 @@ Default: \fBrealm = \fR Example: \fBrealm = mysambabox.mycompany.com\fR .TP \fBremote announce (G)\fR -This option allows you to setup nmbd(8)to periodically announce itself +This option allows you to setup nmbd(8) to periodically announce itself to arbitrary IP addresses with an arbitrary workgroup name. This is useful if you want your Samba server to appear @@ -5718,7 +5718,7 @@ Default: \fBremote announce = \fR .TP \fBremote browse sync (G)\fR -This option allows you to setup nmbd(8)to periodically request +This option allows you to setup nmbd(8) to periodically request synchronization of browse lists with the master browser of a Samba server that is on a remote segment. This option will allow you to gain browse lists for multiple workgroups across routed networks. This @@ -5843,7 +5843,7 @@ Samba and is one of the most important settings in the \fI smb.conf\fR file. The option sets the "security mode bit" in replies to protocol negotiations with smbd(8) -to turn share level security on or off. Clients decide + to turn share level security on or off. Clients decide based on this bit whether (and how) to transfer user and password information to the server. @@ -6008,7 +6008,7 @@ parameter. \fBSECURITY = DOMAIN \fR -This mode will only work correctly if smbpasswd(8)has been used to add this +This mode will only work correctly if smbpasswd(8) has been used to add this machine into a Windows NT Domain. It expects the \fIencrypted passwords\fR parameter to be set to true. In this mode Samba will try to validate the username/password by passing @@ -6176,7 +6176,7 @@ Default :\fBshow add printer wizard = yes\fR \fBshutdown script (G)\fR \fBThis parameter only exists in the HEAD cvs branch\fR This a full path name to a script called by -\fBsmbd(8)\fRthat +\fBsmbd(8)\fR that should start a shutdown procedure. This command will be run as the user connected to the @@ -6267,7 +6267,7 @@ You may find that on some systems Samba will say "Unknown socket option" when you supply an option. This means you either incorrectly typed it or you need to add an include file to includes.h for your OS. If the latter is the case please -send the patch to samba@samba.org. +send the patch to samba@samba.org . Any of the supported socket options may be combined in any way you like, as long as your OS allows it. @@ -6365,7 +6365,7 @@ This variable controls controls whether samba will try to use Simple and Protect Default: \fBuse spnego = yes\fR .TP \fBstat cache (G)\fR -This parameter determines if smbd(8)will use a cache in order to +This parameter determines if smbd(8) will use a cache in order to speed up case insensitive name mappings. You should never need to change this parameter. @@ -6431,7 +6431,7 @@ the process to be suspended until the kernel has ensured that all outstanding data in kernel disk buffers has been safely stored onto stable storage. This is very slow and should only be done rarely. Setting this parameter to no (the -default) means that smbdignores the Windows applications requests for +default) means that smbd ignores the Windows applications requests for a sync call. There is only a possibility of losing data if the operating system itself that Samba is running on crashes, so there is little danger in this default setting. In addition, this fixes many @@ -6490,7 +6490,7 @@ Default: \fBsyslog only = no\fR .TP \fBtemplate homedir (G)\fR When filling out the user information for a Windows NT -user, the winbindd(8)daemon +user, the winbindd(8) daemon uses this parameter to fill in the home directory for that user. If the string \fI%D\fR is present it is substituted with the user's Windows NT domain name. If the string \fI%U @@ -6501,7 +6501,7 @@ Default: \fBtemplate homedir = /home/%D/%U\fR .TP \fBtemplate shell (G)\fR When filling out the user information for a Windows NT -user, the winbindd(8)daemon +user, the winbindd(8) daemon uses this parameter to fill in the login shell for that user. Default: \fBtemplate shell = /bin/false\fR @@ -6518,7 +6518,7 @@ Example: \fBtime offset = 60\fR .TP \fBtime server (G)\fR This parameter determines if -nmbd(8)advertises itself as a time server to Windows +nmbd(8) advertises itself as a time server to Windows clients. Default: \fBtime server = no\fR @@ -6530,7 +6530,7 @@ Synonym for \fI debug timestamp\fR. This parameter accepts an integer value which defines a limit on the maximum number of print jobs that will be accepted system wide at any given time. If a print job is submitted -by a client which will exceed this number, then smbdwill return an +by a client which will exceed this number, then smbd will return an error indicating that no space is available on the server. The default value of 0 means that no such limit exists. This parameter can be used to prevent a server from exceeding its capacity and is @@ -7016,7 +7016,7 @@ Default: \fBwide links = yes\fR .TP \fBwinbind cache time (G)\fR This parameter specifies the number of seconds the -winbindd(8)daemon will cache +winbindd(8) daemon will cache user and group information before querying a Windows NT server again. @@ -7024,7 +7024,7 @@ Default: \fBwinbind cache type = 15\fR .TP \fBwinbind enum users (G)\fR On large installations using -winbindd(8)it may be +winbindd(8) it may be necessary to suppress the enumeration of users through the \fB setpwent()\fR, \fBgetpwent()\fR and @@ -7043,7 +7043,7 @@ Default: \fBwinbind enum users = yes \fR .TP \fBwinbind enum groups (G)\fR On large installations using -winbindd(8)it may be +winbindd(8) it may be necessary to suppress the enumeration of groups through the \fB setgrent()\fR, \fBgetgrent()\fR and @@ -7059,7 +7059,7 @@ Default: \fBwinbind enum groups = yes \fR .TP \fBwinbind gid (G)\fR The winbind gid parameter specifies the range of group -ids that are allocated by the winbindd(8)daemon. This range of group ids should have no +ids that are allocated by the winbindd(8) daemon. This range of group ids should have no existing local or NIS groups within it as strange conflicts can occur otherwise. @@ -7085,7 +7085,7 @@ Example: \fBwinbind separator = +\fR .TP \fBwinbind uid (G)\fR The winbind gid parameter specifies the range of group -ids that are allocated by the winbindd(8)daemon. This range of ids should have no +ids that are allocated by the winbindd(8) daemon. This range of ids should have no existing local or NIS users within it as strange conflicts can occur otherwise. @@ -7155,7 +7155,7 @@ program \fBnsupdate\fR is provided in the examples directory of the Samba source code. .TP \fBwins proxy (G)\fR -This is a boolean that controls if nmbd(8)will respond to broadcast name +This is a boolean that controls if nmbd(8) will respond to broadcast name queries on behalf of other hosts. You may need to set this to yes for some older clients. @@ -7163,7 +7163,7 @@ Default: \fBwins proxy = no\fR .TP \fBwins server (G)\fR This specifies the IP address (or DNS name: IP -address for preference) of the WINS server that nmbd(8)should register with. If you have a WINS server on +address for preference) of the WINS server that nmbd(8) should register with. If you have a WINS server on your network then you should set this to the WINS server's IP. You should point this at your WINS server if you have a @@ -7182,7 +7182,7 @@ Example: \fBwins server = 192.9.200.1\fR .TP \fBwins support (G)\fR This boolean controls if the -nmbd(8)process in Samba will act as a WINS server. You should +nmbd(8) process in Samba will act as a WINS server. You should not set this to true unless you have a multi-subnetted network and you wish a particular \fBnmbd\fR to be your WINS server. Note that you should \fBNEVER\fR set this to true @@ -7290,7 +7290,7 @@ problem - but be aware of the possibility. .PP On a similar note, many clients - especially DOS clients - limit service names to eight characters. smbd(8) -has no such limitation, but attempts to connect from such + has no such limitation, but attempts to connect from such clients will fail if they truncate the service names. For this reason you should probably keep your service names down to eight characters in length. @@ -7306,14 +7306,14 @@ This man page is correct for version 2.2 of the Samba suite. .SH "SEE ALSO" .PP -samba(7), -\fBsmbpasswd(8)\fR, -\fBswat(8)\fR, -\fBsmbd(8)\fR, -\fBnmbd(8)\fR, -\fBsmbclient(1)\fR, -\fBnmblookup(1)\fR, -\fBtestparm(1)\fR, +samba(7) +\fBsmbpasswd(8)\fR +\fBswat(8)\fR +\fBsmbd(8)\fR +\fBnmbd(8)\fR +\fBsmbclient(1)\fR +\fBnmblookup(1)\fR +\fBtestparm(1)\fR \fBtestprns(1)\fR .SH "AUTHOR" .PP @@ -7325,6 +7325,6 @@ to the way the Linux kernel is developed. The original Samba man pages were written by Karl Auer. The man page sources were converted to YODL format (another excellent piece of Open Source software, available at -ftp://ftp.icce.rug.nl/pub/unix/) and updated for the Samba 2.0 +ftp://ftp.icce.rug.nl/pub/unix/ ) and updated for the Samba 2.0 release by Jeremy Allison. The conversion to DocBook for Samba 2.2 was done by Gerald Carter -- cgit From 898f30fffb4e613e4a7efa0463c54fbc3b1f3cca Mon Sep 17 00:00:00 2001 From: Jelmer Vernooij Date: Sun, 15 Sep 2002 13:23:56 +0000 Subject: Add reference to CUPS documentation about how to use unix -> windows clients using samba --- docs/docbook/projdoc/UNIX_INSTALL.sgml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) (limited to 'docs') diff --git a/docs/docbook/projdoc/UNIX_INSTALL.sgml b/docs/docbook/projdoc/UNIX_INSTALL.sgml index aab193c4519..c307636d5fa 100644 --- a/docs/docbook/projdoc/UNIX_INSTALL.sgml +++ b/docs/docbook/projdoc/UNIX_INSTALL.sgml @@ -359,13 +359,16 @@ Printing from UNIX to a Client PC To use a printer that is available via a smb-based - server from a unix host you will need to compile the + server from a unix host with LPR you will need to compile the smbclient program. You then need to install the script "smbprint". Read the instruction in smbprint for more details. There is also a SYSV style script that does much the same thing called smbprint.sysv. It contains instructions. + + See the CUPS manual for information about setting up + printing from a unix host with CUPS to a smb-based server. -- cgit From 1e14815f4cd9e8a9ca5c0d41de902f9c0dd6410c Mon Sep 17 00:00:00 2001 From: Jelmer Vernooij Date: Sun, 15 Sep 2002 13:26:16 +0000 Subject: Add document on tracing system calls --- docs/docbook/devdoc/Tracing.sgml | 129 +++++++++++++++++++++++++++++++++++++++ 1 file changed, 129 insertions(+) create mode 100644 docs/docbook/devdoc/Tracing.sgml (limited to 'docs') diff --git a/docs/docbook/devdoc/Tracing.sgml b/docs/docbook/devdoc/Tracing.sgml new file mode 100644 index 00000000000..3a0e4ba1a97 --- /dev/null +++ b/docs/docbook/devdoc/Tracing.sgml @@ -0,0 +1,129 @@ + + + + AndrewTridgell + + Samba Team + + + + +Tracing samba system calls + + +This file describes how to do a system call trace on Samba to work out +what its doing wrong. This is not for the faint of heart, but if you +are reading this then you are probably desperate. + + + +Actually its not as bad as the the above makes it sound, just don't +expect the output to be very pretty :-) + + + +Ok, down to business. One of the big advantages of unix systems is +that they nearly all come with a system trace utility that allows you +to monitor all system calls that a program is making. This is +extremely using for debugging and also helps when trying to work out +why something is slower than you expect. You can use system tracing +without any special compilation options. + + + +The system trace utility is called different things on different +systems. On Linux systems its called strace. Under SunOS 4 its called +trace. Under SVR4 style systems (including solaris) its called +truss. Under many BSD systems its called ktrace. + + + +The first thing you should do is read the man page for your native +system call tracer. In the discussion below I'll assume its called +strace as strace is the only portable system tracer (its available for +free for many unix types) and its also got some of the nicest +features. + + + +Next, try using strace on some simple commands. For example, strace +ls or strace echo hello. + + + +You'll notice that it produces a LOT of output. It is showing you the +arguments to every system call that the program makes and the +result. Very little happens in a program without a system call so you +get lots of output. You'll also find that it produces a lot of +"preamble" stuff showing the loading of shared libraries etc. Ignore +this (unless its going wrong!) + + + +For example, the only line that really matters in the strace echo +hello output is: + + + +write(1, "hello\n", 6) = 6 + + +all the rest is just setting up to run the program. + + +Ok, now you're familiar with strace. To use it on Samba you need to +strace the running smbd daemon. The way I tend ot use it is to first +login from my Windows PC to the Samba server, then use smbstatus to +find which process ID that client is attached to, then as root I do +strace -p PID to attach to that process. I normally redirect the +stderr output from this command to a file for later perusal. For +example, if I'm using a csh style shell: + + +strace -f -p 3872 >& strace.out + +or with a sh style shell: + +strace -f -p 3872 > strace.out 2>&1 + + +Note the "-f" option. This is only available on some systems, and +allows you to trace not just the current process, but any children it +forks. This is great for finding printing problems caused by the +"print command" being wrong. + + + +Once you are attached you then can do whatever it is on the client +that is causing problems and you will capture all the system calls +that smbd makes. + + + +So how do you interpret the results? Generally I search through the +output for strings that I know will appear when the problem +happens. For example, if I am having touble with permissions on a file +I would search for that files name in the strace output and look at +the surrounding lines. Another trick is to match up file descriptor +numbers and "follow" what happens to an open file until it is closed. + + + +Beyond this you will have to use your initiative. To give you an idea +of what you are looking for here is a piece of strace output that +shows that /dev/null is not world writeable, which +causes printing to fail with Samba: + + + +[pid 28268] open("/dev/null", O_RDWR) = -1 EACCES (Permission denied) +[pid 28268] open("/dev/null", O_WRONLY) = -1 EACCES (Permission denied) + + + +The process is trying to first open /dev/null read-write +then read-only. Both fail. This means /dev/null has +incorrect permissions. + + + -- cgit From 060c0bda078923b11c34539323f9def176c006bc Mon Sep 17 00:00:00 2001 From: Jelmer Vernooij Date: Wed, 18 Sep 2002 13:34:47 +0000 Subject: Update introduction somewhat --- docs/docbook/devdoc/dev-doc.sgml | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) (limited to 'docs') diff --git a/docs/docbook/devdoc/dev-doc.sgml b/docs/docbook/devdoc/dev-doc.sgml index 0e017fb6a68..c1ffb735bad 100644 --- a/docs/docbook/devdoc/dev-doc.sgml +++ b/docs/docbook/devdoc/dev-doc.sgml @@ -31,9 +31,11 @@ This book is a collection of documents that might be useful for people developing samba or those interested in doing so. -than one person can maintain. The most recent version of this document -can be found at http://www.samba.org/ -on the "Documentation" page. Please send updates to http://devel.samba.org/. +Please send updates to jelmer@samba.org. -- cgit From 575b8674863341d3dbd04d8618a3a5f2ff5651ee Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Mon, 23 Sep 2002 02:49:01 +0000 Subject: Fix typo. --- docs/docbook/projdoc/PAM-Authentication-And-Samba.sgml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'docs') diff --git a/docs/docbook/projdoc/PAM-Authentication-And-Samba.sgml b/docs/docbook/projdoc/PAM-Authentication-And-Samba.sgml index 594516640de..adcd059bc2f 100644 --- a/docs/docbook/projdoc/PAM-Authentication-And-Samba.sgml +++ b/docs/docbook/projdoc/PAM-Authentication-And-Samba.sgml @@ -154,7 +154,7 @@ password required /lib/security/pam_smbpass.so nodelay smbconf=/etc/samba. Note: PAM allows stacking of authentication mechanisms. It is -also possible to pass information obtained within on PAM module through +also possible to pass information obtained within one PAM module through to the next module in the PAM stack. Please refer to the documentation for your particular system implementation for details regarding the specific capabilities of PAM in this environment. Some Linux implmentations also -- cgit From b959419ed38e66a12b63cad3e5fbfa849f952acc Mon Sep 17 00:00:00 2001 From: Volker Lendecke Date: Mon, 23 Sep 2002 16:21:01 +0000 Subject: Ok, getting a bit more ambitious. Stop me, if this is wrong. ;-) When creating a group you have to take care of the fact that the underlying unix might not like the group name. This change gets around that problem by giving the add group script the chance to invent a group name. It then must only return the newly created numerical gid. Volker --- docs/manpages/smb.conf.5 | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) (limited to 'docs') diff --git a/docs/manpages/smb.conf.5 b/docs/manpages/smb.conf.5 index 990ba027ab6..89671344817 100644 --- a/docs/manpages/smb.conf.5 +++ b/docs/manpages/smb.conf.5 @@ -1616,8 +1616,13 @@ Example: \fBadd user script = /usr/local/samba/bin/add_user %u\fR .TP \fBadd group script (G)\fR -This is the full pathname to a script that will -be run \fBAS ROOT\fR by smbd(8) when a new group is requested. It will expand any \fI%g\fR to the group name passed. This script is only useful for installations using the Windows NT domain administration tools. +This is the full pathname to a script that will be run \fBAS ROOT\fR +by smbd(8) when a new group is requested. It will expand any \fI%g\fR +to the group name passed. This script is only useful for +installations using the Windows NT domain administration tools. The +script is free to create a group with an arbitrary name to circumvent +unix group name restrictions. In that case the script must print the +numeric gid of the created group on stdout. .TP \fBadmin users (S)\fR This is a list of users who will be granted -- cgit From 4d20cf56f2fbe60f2dfa2ae62de1f132f24348aa Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Fri, 27 Sep 2002 06:45:23 +0000 Subject: Doco patch from metze. This reformats the 'ldap ssl' docs, and add doco for the new 'ldap passwd sync' option. Andrew Bartlett --- docs/docbook/manpages/smb.conf.5.sgml | 44 ++++++++++++++++++++++++++++------- 1 file changed, 35 insertions(+), 9 deletions(-) (limited to 'docs') diff --git a/docs/docbook/manpages/smb.conf.5.sgml b/docs/docbook/manpages/smb.conf.5.sgml index 89ffa0934a3..cc521d358d5 100644 --- a/docs/docbook/manpages/smb.conf.5.sgml +++ b/docs/docbook/manpages/smb.conf.5.sgml @@ -656,8 +656,9 @@ ldap filter ldap ssl ldap suffix - ldap suffix - ldap suffix + ldap user suffix + ldap machine suffix + ldap passwd sync lm announce lm interval @@ -3484,13 +3485,16 @@ The ldap ssl can be set to one of three values: - (a) on - Always use SSL when contacting the - ldap server, (b) off - - Never use SSL when querying the directory, or (c) start_tls - - Use the LDAPv3 StartTLS extended operation - (RFC2830) for communicating with the directory server. - - + + + On = Always use SSL when contacting the + ldap server. + + Off = Never use SSL when querying the directory. + + Start_tls = Use the LDAPv3 StartTLS extended operation + (RFC2830) for communicating with the directory server. + Default : ldap ssl = on @@ -3533,7 +3537,29 @@ + + ldap passwd sync (G) + This option is used to define whether + or not Samba should sync the LDAP password with the NT + and LM hashes for normal accounts (NOT for + workstation, server or domain trusts) on a password + change via SAMBA. + + + The ldap passwd sync can be set to one of three values: + + + Yes = Try to update the LDAP, NT and LM passwords and update the pwdLastSet time. + + No = Update NT and LM passwords and update the pwdLastSet time. + + Only = Only update the LDAP password and let the LDAP server do the rest. + + + Default : ldap passwd sync = no + + -- cgit From 685387b0109e880e30191fbea0aad1e5c677273a Mon Sep 17 00:00:00 2001 From: Volker Lendecke Date: Fri, 27 Sep 2002 07:02:43 +0000 Subject: Do not update manpages directly... --- docs/docbook/manpages/smb.conf.5.sgml | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) (limited to 'docs') diff --git a/docs/docbook/manpages/smb.conf.5.sgml b/docs/docbook/manpages/smb.conf.5.sgml index cc521d358d5..0c565e7e511 100644 --- a/docs/docbook/manpages/smb.conf.5.sgml +++ b/docs/docbook/manpages/smb.conf.5.sgml @@ -1139,7 +1139,16 @@ add group script (G) This is the full pathname to a script that will - be run AS ROOT by smbd(8) when a new group is requested. It will expand any %g to the group name passed. This script is only useful for installations using the Windows NT domain administration tools. + be run AS ROOT by smbd(8) when a new group is + requested. It will expand any + %g to the group name passed. + This script is only useful for installations using the + Windows NT domain administration tools. The script is + free to create a group with an arbitrary name to + circumvent unix group name restrictions. In that case + the script must print the numeric gid of the created + group on stdout. -- cgit From bba2ee620a286dcc7fcd509c8954227e203274a1 Mon Sep 17 00:00:00 2001 From: Jelmer Vernooij Date: Fri, 27 Sep 2002 16:45:57 +0000 Subject: Apply Vance Lankhaars' cifs2002 documentation patch - mostly grammar and English typo fixes and updates of documentation --- docs/README.Win32-Viruses | 23 ++-- docs/docbook/docbook.txt | 2 +- docs/docbook/global.ent | 2 +- docs/docbook/manpages/findsmb.1.sgml | 4 +- docs/docbook/manpages/make_smbcodepage.1.sgml | 4 +- docs/docbook/manpages/nmbd.8.sgml | 16 +-- docs/docbook/manpages/pdbedit.8.sgml | 45 +++---- docs/docbook/manpages/rpcclient.1.sgml | 34 ++--- docs/docbook/manpages/samba.7.sgml | 31 ++--- docs/docbook/manpages/smb.conf.5.sgml | 4 +- docs/docbook/manpages/smbcacls.1.sgml | 6 +- docs/docbook/manpages/smbcontrol.1.sgml | 2 +- docs/docbook/manpages/smbgroupedit.8.sgml | 8 +- docs/docbook/manpages/smbmount.8.sgml | 4 +- docs/docbook/manpages/smbpasswd.8.sgml | 27 ++-- docs/docbook/manpages/smbspool.8.sgml | 6 +- docs/docbook/manpages/smbtar.1.sgml | 4 +- docs/docbook/manpages/swat.8.sgml | 4 +- docs/docbook/manpages/winbindd.8.sgml | 174 ++++---------------------- 19 files changed, 138 insertions(+), 262 deletions(-) (limited to 'docs') diff --git a/docs/README.Win32-Viruses b/docs/README.Win32-Viruses index 07f03360cbc..4646da83cf2 100644 --- a/docs/README.Win32-Viruses +++ b/docs/README.Win32-Viruses @@ -1,9 +1,9 @@ -While this article is specific to the recent Nimda worm, +While this article is specific to the Nimda worm, the information can be applied to preventing the spread of many Win32 viruses. Thanks to the Samba Users Group of Japan (SUGJ) for this article. =============================================================================== -Steps againt Nimba Worm for Samba +Steps against Nimba Worm for Samba Author: HASEGAWA Yosuke Translator: TAKAHASHI Motonobu @@ -14,11 +14,11 @@ The information in this article applies to Windows 95/98/Me/NT/2000 SYMPTOMS - This article has described the measure against Nimba Worm for Samba + This article describes measures against Nimba Worm for Samba server. DESCRIPTION - Nimba Worm is infected through the shared disk on a network besides + Nimba Worm is infected through shared disks on a network, as well as through Microsoft IIS, Internet Explorer and mailer of Outlook series. At this time, the worm copies itself by the name *.nws and *.eml on @@ -36,23 +36,22 @@ DESCRIPTION veto files = /*.eml/*.nws/riched20.dll/ ----- - Setting up "veto files" parameter, the matched files on the Samba - server are completely hidden from the clients and become impossible + By setting the "veto files" parameter, matched files on the Samba + server are completely hidden from the clients and making it impossible to access them at all. - In addition to it, the following setting are also pointed out by the + In addition to it, the following setting is also pointed out by the samba-jp:09448 thread: when the - "(Jreadme.txt.{3050F4D8-98B5-11CF-BB82-00AA00BDCE0B}"(B file exists on - a Samba server, it is visible only with "readme.txt" and a dangerous - code may be performed when this file is double-clicked. + "readme.txt.{3050F4D8-98B5-11CF-BB82-00AA00BDCE0B}" file exists on + a Samba server, it is visible only as "readme.txt" and dangerous + code may be executed if this file is double-clicked. Setting the following, ----- veto files = /*.{*}/ ----- - no files having CLSID in its file extension can be accessed from any + any files having CLSID in its file extension will be inaccessible from any clients. This technical article is created based on the discussion of samba-jp:09448 and samba-jp:10900 threads. - diff --git a/docs/docbook/docbook.txt b/docs/docbook/docbook.txt index 019b073b511..84848fd88f2 100644 --- a/docs/docbook/docbook.txt +++ b/docs/docbook/docbook.txt @@ -40,7 +40,7 @@ The Output ---------- The current Samba CVS tree contains the SGML/DocBook source files as well -as the following autogenerated formats +as the following autogenerated formats: * man pages * HTML diff --git a/docs/docbook/global.ent b/docs/docbook/global.ent index 91286de98be..d88c489a4a2 100644 --- a/docs/docbook/global.ent +++ b/docs/docbook/global.ent @@ -21,7 +21,7 @@ - + diff --git a/docs/docbook/manpages/findsmb.1.sgml b/docs/docbook/manpages/findsmb.1.sgml index d8f436c4a12..7b2371fdb71 100644 --- a/docs/docbook/manpages/findsmb.1.sgml +++ b/docs/docbook/manpages/findsmb.1.sgml @@ -45,7 +45,7 @@ will probe the subnet of the machine where findsmb is run. This value is passed to nmblookup as part of the - -B option + -B option. @@ -73,7 +73,7 @@ get proper responses from Windows 95 and Windows 98 machines, the command must be run as root. - For example running findsmb on a machine + For example, running findsmb on a machine without nmbd running would yield output similar to the following diff --git a/docs/docbook/manpages/make_smbcodepage.1.sgml b/docs/docbook/manpages/make_smbcodepage.1.sgml index a36f9b968c1..774b3d8f8bb 100644 --- a/docs/docbook/manpages/make_smbcodepage.1.sgml +++ b/docs/docbook/manpages/make_smbcodepage.1.sgml @@ -57,10 +57,10 @@ inputfile This is the input file to process. In - the c case this will be a text + the c case, this will be a text codepage definition file such as the ones found in the Samba source/codepages directory. In - the d case this will be the + the d case, this will be the binary format codepage definition file normally found in the lib/codepages directory in the Samba install directory path. diff --git a/docs/docbook/manpages/nmbd.8.sgml b/docs/docbook/manpages/nmbd.8.sgml index d5c89064e74..2b8e0661203 100644 --- a/docs/docbook/manpages/nmbd.8.sgml +++ b/docs/docbook/manpages/nmbd.8.sgml @@ -67,7 +67,7 @@ In addition, nmbd can act as a WINS proxy, relaying broadcast queries from clients that do - not understand how to talk the WINS protocol to a WIN + not understand how to talk the WINS protocol to a WINS server. @@ -99,7 +99,7 @@ If this parameter is specified it causes the server to run "interactively", not as a daemon, even if the server is executed on the command line of a shell. Setting this - parameter negates the implicit deamon mode when run from the + parameter negates the implicit daemon mode when run from the command line. @@ -136,9 +136,9 @@ Samba as part of the build process. Common defaults are /usr/local/samba/lib/lmhosts, /usr/samba/lib/lmhosts or - /etc/lmhosts. See the - lmhosts(5) man page for details on the - contents of this file. + /etc/lmhosts. See the + lmhosts(5) + man page for details on the contents of this file. @@ -169,15 +169,15 @@ Note that specifying this parameter here will override the log level parameter in the - smb.conf file. + smb.conf(5) file. -l <log directory> The -l parameter specifies a directory into which the "log.nmbd" log file will be created - for operational data from the running - nmbd server. The default log directory is compiled into Samba + for operational data from the running nmbd + server. The default log directory is compiled into Samba as part of the build process. Common defaults are /usr/local/samba/var/log.nmb, /usr/samba/var/log.nmb or diff --git a/docs/docbook/manpages/pdbedit.8.sgml b/docs/docbook/manpages/pdbedit.8.sgml index 213275b7ccb..45ccbaee64a 100644 --- a/docs/docbook/manpages/pdbedit.8.sgml +++ b/docs/docbook/manpages/pdbedit.8.sgml @@ -41,11 +41,11 @@ Samba suite. The pdbedit program is used to manage the users accounts - stored in the sam database and can be run only by root. + stored in the sam database and can only be run by root. - The pdbedit tool use the passdb modular interface and is + The pdbedit tool uses the passdb modular interface and is independent from the kind of users database used (currently there - are smbpasswd, ldap, nis+ and tdb based and more can be addedd + are smbpasswd, ldap, nis+ and tdb based and more can be added without changing the tool). There are five main ways to use pdbedit: adding a user account, @@ -58,7 +58,7 @@ -l - This option list all the user accounts + This option lists all the user accounts present in the users database. This option prints a list of user/uid pairs separated by the ':' character. @@ -75,8 +75,8 @@ -v - This option sets the verbose listing format. - It will make pdbedit list the users in the database printing + This option enables the verbose listing format. + It causes pdbedit to list the users in the database, printing out the account fields in a descriptive format. Example: pdbedit -l -v @@ -108,7 +108,7 @@ -w This option sets the "smbpasswd" listing format. - It will make pdbedit list the users in the database printing + It will make pdbedit list the users in the database, printing out the account fields in a format compatible with the smbpasswd file format. (see the smbpasswd(5) for details) @@ -124,8 +124,8 @@ -u username - This option specifies that the username to be - used for the operation requested (listing, adding, removing) + This option specifies the username to be + used for the operation requested (listing, adding, removing). It is required in add, remove and modify operations and optional in list operations. @@ -198,9 +198,9 @@ -a This option is used to add a user into the - database. This command need the user name be specified with - the -u switch. When adding a new user pdbedit will also - ask for the password to be used + database. This command needs a user name specified with + the -u switch. When adding a new user, pdbedit will also + ask for the password to be used. Example: pdbedit -a -u sorce new password: @@ -227,7 +227,7 @@ -x This option causes pdbedit to delete an account - from the database. It need the username be specified with the + from the database. It needs a username specified with the -u switch. Example: pdbedit -x -u bob @@ -237,22 +237,25 @@ -i passdb-backend - Use a different passdb backend to retrieve users than the one specified in smb.conf. Can be used to import data into your - local user database. + Use a different passdb backend to retrieve users + than the one specified in smb.conf. Can be used to import data into + your local user database. - This option will ease migration from one passdb backend to another. - + This option will ease migration from one passdb backend to + another. - Example: pdbedit -i smbpasswd:/etc/smbpasswd.old - + Example: pdbedit -i smbpasswd:/etc/smbpasswd.old + -e passdb-backend - Export all currently available users to the specified password database backend. + Exports all currently available users to the + specified password database backend. - This option will ease migration from one passdb backend to another and will ease backupping + This option will ease migration from one passdb backend to + another and will ease backing up. Example: pdbedit -e smbpasswd:/root/samba-users.backup diff --git a/docs/docbook/manpages/rpcclient.1.sgml b/docs/docbook/manpages/rpcclient.1.sgml index f1ba474cfba..7a7a19c837b 100644 --- a/docs/docbook/manpages/rpcclient.1.sgml +++ b/docs/docbook/manpages/rpcclient.1.sgml @@ -127,8 +127,8 @@ -l|--logfile=logbasename File name for log/debug files. The extension - '.client' will be appended. The log file is never removed - by the client. + '.client' will be appended. The log file is + never removed by the client. @@ -137,14 +137,15 @@ -N|--nopass instruct rpcclient not to ask - for a password. By default, rpcclient will prompt - for a password. See also the -U option. + for a password. By default, rpcclient will + prompt for a password. See also the -U + option. -s|--conf=smb.conf - Specifies the location of the all important + Specifies the location of the all-important smb.conf file. @@ -162,8 +163,8 @@ A third option is to use a credentials file which contains the plaintext of the username and password. This - option is mainly provided for scripts where the admin doesn't - desire to pass the credentials on the command line or via environment + option is mainly provided for scripts where the admin does not + wish to pass the credentials on the command line or via environment variables. If this method is used, make certain that the permissions on the file restrict access from unwanted users. See the -A for more details. @@ -203,7 +204,7 @@ of SIDs to usernames. - lookupnames - Resolve s list + lookupnames - Resolve a list of usernames to SIDs. @@ -290,7 +291,7 @@ enumjobs <printer> - - List the jobs and status of a given printer. + - List the jobs and status of a given printer. This command corresponds to the MS Platform SDK EnumJobs() function (* This command is currently unimplemented). @@ -339,7 +340,7 @@ getdriverdir <arch> - Execute a GetPrinterDriverDirectory() - RPC to retreive the SMB share name and subdirectory for + RPC to retrieve the SMB share name and subdirectory for storing printer driver files for a given architecture. Possible values for arch are "Windows 4.0" (for Windows 95/98), "Windows NT x86", "Windows NT PowerPC", "Windows @@ -359,10 +360,11 @@ against a given printer. - setdriver <printername> <drivername> - - Execute a SetPrinter() command to update the printer driver associated - with an installed printer. The printer driver must already be correctly - installed on the print server. + setdriver <printername> + <drivername> + - Execute a SetPrinter() command to update the printer driver + associated with an installed printer. The printer driver must + already be correctly installed on the print server. See also the enumprinters and enumdrivers commands for obtaining a list of @@ -374,8 +376,8 @@ GENERAL OPTIONS - debuglevel - Set the current debug level - used to log information. + debuglevel - Set the current + debug level used to log information. help (?) - Print a listing of all known commands or extended help on a particular command. diff --git a/docs/docbook/manpages/samba.7.sgml b/docs/docbook/manpages/samba.7.sgml index 5d81d9d4468..ce443e78d97 100644 --- a/docs/docbook/manpages/samba.7.sgml +++ b/docs/docbook/manpages/samba.7.sgml @@ -22,8 +22,10 @@ The Samba software suite is a collection of programs that implements the Server Message Block (commonly abbreviated as SMB) protocol for UNIX systems. This protocol is sometimes - also referred to as the Common Internet File System (CIFS), - LanManager or NetBIOS protocol. + also referred to as the Common Internet File System (CIFS). For a + more thorough description, see + http://www.ubiqx.org/cifs/. Samba also implements the NetBIOS + protocol in nmbd. @@ -39,7 +41,7 @@ nmbd The nmbd - daemon provides NetBIOS nameserving and browsing + daemon provides NetBIOS nameservice and browsing support. The configuration file for this daemon is described in smb.conf @@ -68,7 +70,7 @@ testprns The testprns utility supports testing printer names defined - in your printcap> file used + in your printcap file used by Samba. @@ -115,12 +117,14 @@ component is described in a separate manual page. It is strongly recommended that you read the documentation that comes with Samba and the manual pages of those components that you use. If the - manual pages aren't clear enough then please send a patch or - bug report to - samba@samba.org - - + manual pages and documents aren't clear enough then please visit + http://devel.samba.org + for information on how to file a bug report or submit a patch. + If you require help, visit the Samba webpage at + http://www.samba.org/ and + explore the many option available to you. + @@ -164,11 +168,10 @@ http://lists.samba.org. - If you have patches to submit or bugs to report - then you may mail them directly to samba-patches@samba.org. - Note, however, that due to the enormous popularity of this - package the Samba Team may take some time to respond to mail. We - prefer patches in diff -u format. + If you have patches to submit, visit + http://devel.samba.org/ + for information on how to do it properly. We prefer patches in + diff -u format. diff --git a/docs/docbook/manpages/smb.conf.5.sgml b/docs/docbook/manpages/smb.conf.5.sgml index 0c565e7e511..c0893f1005a 100644 --- a/docs/docbook/manpages/smb.conf.5.sgml +++ b/docs/docbook/manpages/smb.conf.5.sgml @@ -2904,9 +2904,9 @@ system print command such as lpr(1) or lp(1). - This paramater does not accept % marcos, becouse + This paramater does not accept % macros, because many parts of the system require this value to be - constant for correct operation + constant for correct operation. Default: specified at compile time, usually "nobody" diff --git a/docs/docbook/manpages/smbcacls.1.sgml b/docs/docbook/manpages/smbcacls.1.sgml index 69aa9674928..766d2a78b11 100644 --- a/docs/docbook/manpages/smbcacls.1.sgml +++ b/docs/docbook/manpages/smbcacls.1.sgml @@ -35,8 +35,8 @@ This tool is part of the Samba suite. - The smbcacls program manipulates NT Access Control Lists - (ACLs) on SMB file shares. + The smbcacls program manipulates NT Access Control + Lists (ACLs) on SMB file shares. @@ -79,7 +79,7 @@ -S acls This command sets the ACLs on the file with only the ones specified on the command line. All other ACLs are - erased. Note that the ACL specified must contain at least a revision, + erased. Note that the ACL specified must contain at least a revision, type, owner and group for the call to succeed. diff --git a/docs/docbook/manpages/smbcontrol.1.sgml b/docs/docbook/manpages/smbcontrol.1.sgml index 9a6f31b336a..166ef63e87f 100644 --- a/docs/docbook/manpages/smbcontrol.1.sgml +++ b/docs/docbook/manpages/smbcontrol.1.sgml @@ -121,7 +121,7 @@ The printnotify message-type sends a message to smbd which in turn sends a printer notify message to - any Windows NT clients connected to a printer. This message-type + any Windows NT clients connected to a printer. This message-type takes the following arguments: diff --git a/docs/docbook/manpages/smbgroupedit.8.sgml b/docs/docbook/manpages/smbgroupedit.8.sgml index b9607312ffe..53bc0bec610 100644 --- a/docs/docbook/manpages/smbgroupedit.8.sgml +++ b/docs/docbook/manpages/smbgroupedit.8.sgml @@ -19,7 +19,7 @@ smbroupedit -v [l|s] - -a UNIX-groupname [-d NT-groupname|-p prividge| + -a UNIX-groupname [-d NT-groupname|-p privilege|] @@ -73,10 +73,10 @@ etc. For examples, Users - SID : S-1-5-32-545 + SID : S-1-5-32-545 Unix group: -1 Group type: Local group - Comment : + Comment : Privilege : No privilege @@ -195,7 +195,7 @@ Domain Admins (S-1-5-21-1108995562-3116817432-1375597819-512) -> -1 -To verify that you mapping has taken effect: +To verify that your mapping has taken effect: diff --git a/docs/docbook/manpages/smbmount.8.sgml b/docs/docbook/manpages/smbmount.8.sgml index ec4dbbaff1f..c4b91a5572d 100644 --- a/docs/docbook/manpages/smbmount.8.sgml +++ b/docs/docbook/manpages/smbmount.8.sgml @@ -73,7 +73,7 @@ given. - Note that password which contain the arguement delimiter + Note that passwords which contain the argument delimiter character (i.e. a comma ',') will failed to be parsed correctly on the command line. However, the same password defined in the PASSWD environment variable or a credentials file (see @@ -222,7 +222,7 @@ ttl=<arg> - how long a directory listing is cached in milliseconds + sets how long a directory listing is cached in milliseconds (also affects visibility of file size and date changes). A higher value means that changes on the server take longer to be noticed but it can give diff --git a/docs/docbook/manpages/smbpasswd.8.sgml b/docs/docbook/manpages/smbpasswd.8.sgml index 3c7a6a5150a..c0b7ac33591 100644 --- a/docs/docbook/manpages/smbpasswd.8.sgml +++ b/docs/docbook/manpages/smbpasswd.8.sgml @@ -24,7 +24,6 @@ -r <remote machine> -R <name resolve order> -m - -j DOMAIN -U username[%password] -h -s @@ -56,7 +55,7 @@ UNIX machine the encrypted SMB passwords are usually stored in the smbpasswd(5) file. - When run by an ordinary user with no options. smbpasswd + When run by an ordinary user with no options, smbpasswd will prompt them for their old SMB password and then ask them for their new password twice, to ensure that the new password was typed correctly. No passwords will be echoed on the screen @@ -89,7 +88,7 @@ password command. Note that the default passdb backends require the user to already exist in the system password file (usually /etc/passwd), else the request to add the - user will fail. + user will fail. This option is only available when running smbpasswd as root. @@ -220,12 +219,12 @@ -R name resolve order - This option allows the user of smbpasswd to determine + This option allows the user of smbpasswd to determine what name resolution services to use when looking up the NetBIOS name of the host being connected to. - The options are :"lmhosts", "host", "wins" and "bcast". They cause - names to be resolved as follows : + The options are :"lmhosts", "host", "wins" and "bcast". They + cause names to be resolved as follows : lmhosts : Lookup an IP address in the Samba lmhosts file. If the line in lmhosts has @@ -244,14 +243,14 @@ wins : Query a name with the IP address listed in the wins server - parameter. If no WINS server has been specified this method - will be ignored. + parameter. If no WINS server has been specified this method + will be ignored. bcast : Do a broadcast on each of the known local interfaces listed in the interfaces parameter. This is the least - reliable of the name resolution methods as it depends on the - target host being on a locally connected subnet. + reliable of the name resolution methods as it depends on the + target host being on a locally connected subnet. The default order is lmhosts, host, wins, bcast @@ -267,7 +266,7 @@ being changed is a MACHINE account. Currently this is used when Samba is being used as an NT Primary Domain Controller. - This option is only available when running smbpasswd as root. + This option is only available when running smbpasswd as root. @@ -305,15 +304,15 @@ -w password - This parameter is only available is Samba - has been configured to use the experiemental + This parameter is only available if Samba + has been configured to use the experimental --with-ldapsam option. The -w switch is used to specify the password to be used with the ldap admin dn. Note that the password is stored in the private/secrets.tdb and is keyed off of the admin's DN. This means that if the value of ldap - admin dn ever changes, the password will beed to be + admin dn ever changes, the password will need to be manually updated as well. diff --git a/docs/docbook/manpages/smbspool.8.sgml b/docs/docbook/manpages/smbspool.8.sgml index d5c9c0a1148..d164cb0864e 100644 --- a/docs/docbook/manpages/smbspool.8.sgml +++ b/docs/docbook/manpages/smbspool.8.sgml @@ -9,7 +9,7 @@ smbspool - send print file to an SMB printer + send a print file to an SMB printer @@ -79,11 +79,11 @@ The copies argument (argv[4]) contains the number of copies to be printed of the named file. If - no filename is provided than this argument is not used by + no filename is provided then this argument is not used by smbspool. The options argument (argv[5]) contains - the print options in a single string and is presently + the print options in a single string and is currently not used by smbspool. The filename argument (argv[6]) contains the diff --git a/docs/docbook/manpages/smbtar.1.sgml b/docs/docbook/manpages/smbtar.1.sgml index d1585d7ca39..bd70493b6bf 100644 --- a/docs/docbook/manpages/smbtar.1.sgml +++ b/docs/docbook/manpages/smbtar.1.sgml @@ -164,7 +164,7 @@ BUGS The smbtar script has different - options from ordinary tar and tar called from smbclient. + options from ordinary tar and from smbclient's tar command. @@ -173,7 +173,7 @@ Sites that are more careful about security may not like the way the script handles PC passwords. Backup and restore work - on entire shares, should work on file lists. smbtar works best + on entire shares; should work on file lists. smbtar works best with GNU tar and may not work well with other versions. diff --git a/docs/docbook/manpages/swat.8.sgml b/docs/docbook/manpages/swat.8.sgml index dc6989d5663..c0052f3d53d 100644 --- a/docs/docbook/manpages/swat.8.sgml +++ b/docs/docbook/manpages/swat.8.sgml @@ -62,7 +62,7 @@ swat in demo mode. In that mode anyone will be able to modify the smb.conf file. - Do NOT enable this option on a production + WARNING: Do NOT enable this option on a production server. @@ -168,7 +168,7 @@ swat will rewrite your smb.conf file. It will rearrange the entries and delete all - comments, include= and copy=" + comments, include= and copy= options. If you have a carefully crafted smb.conf then back it up or don't use swat! diff --git a/docs/docbook/manpages/winbindd.8.sgml b/docs/docbook/manpages/winbindd.8.sgml index 0325f9bfe14..32ea86b0d69 100644 --- a/docs/docbook/manpages/winbindd.8.sgml +++ b/docs/docbook/manpages/winbindd.8.sgml @@ -46,10 +46,10 @@ The pam_winbind module in the 2.2.2 release only supports the auth and account - module-types. The latter is simply + module-types. The latter simply performs a getpwnam() to verify that the system can obtain a uid for the user. If the libnss_winbind library has been correctly - installed, this should always suceed. + installed, this should always succeed. The following nsswitch databases are implemented by @@ -156,156 +156,26 @@ group: files winbind file. All parameters should be specified in the [global] section of smb.conf. - - - winbind separator - The winbind separator option allows you - to specify how NT domain names and user names are combined - into unix user names when presented to users. By default, - winbindd will use the traditional '\' - separator so that the unix user names look like - DOMAIN\username. In some cases this separator character may - cause problems as the '\' character has special meaning in - unix shells. In that case you can use the winbind separator - option to specify an alternative separator character. Good - alternatives may be '/' (although that conflicts - with the unix directory separator) or a '+ 'character. - The '+' character appears to be the best choice for 100% - compatibility with existing unix utilities, but may be an - aesthetically bad choice depending on your taste. - - Default: winbind separator = \ - - Example: winbind separator = + - - - - - winbind uid - The winbind uid parameter specifies the - range of user ids that are allocated by the winbindd daemon. - This range of ids should have no existing local or NIS users - within it as strange conflicts can occur otherwise. - - Default: winbind uid = <empty string> - - Example: winbind uid = 10000-20000 - - - - - - winbind gid - The winbind gid parameter specifies the - range of group ids that are allocated by the winbindd daemon. - This range of group ids should have no existing local or NIS - groups within it as strange conflicts can occur otherwise. - - Default: winbind gid = <empty string> - - Example: winbind gid = 10000-20000 - - - - - - winbind cache time - This parameter specifies the number of - seconds the winbindd daemon will cache user and group information - before querying a Windows NT server again. When a item in the - cache is older than this time winbindd will ask the domain - controller for the sequence number of the server's account database. - If the sequence number has not changed then the cached item is - marked as valid for a further winbind cache time - seconds. Otherwise the item is fetched from the - server. This means that as long as the account database is not - actively changing winbindd will only have to send one sequence - number query packet every winbind cache time - seconds. - - Default: winbind cache time = 15 - - - - - winbind enum users - On large installations it may be necessary - to suppress the enumeration of users through the - setpwent(), getpwent() and - endpwent() group of system calls. If - the winbind enum users parameter is false, - calls to the getpwent system call will not - return any data. - - Warning: Turning off user enumeration - may cause some programs to behave oddly. For example, the finger - program relies on having access to the full user list when - searching for matching usernames. - - Default: winbind enum users = yes - - - - - winbind enum groups - On large installations it may be necessary - to suppress the enumeration of groups through the - setgrent(), getgrent() and - endgrent() group of system calls. If - the winbind enum groups parameter is - false, calls to the getgrent() system - call will not return any data. - - Warning: Turning off group - enumeration may cause some programs to behave oddly. - - - Default: winbind enum groups = no - - - - - - - template homedir - When filling out the user information - for a Windows NT user, the winbindd daemon - uses this parameter to fill in the home directory for that user. - If the string %D is present it is - substituted with the user's Windows NT domain name. If the - string %U is present it is substituted - with the user's Windows NT user name. - - Default: template homedir = /home/%D/%U - - - - - - template shell - When filling out the user information for - a Windows NT user, the winbindd daemon - uses this parameter to fill in the shell for that user. - - - Default: template shell = /bin/false - - - - - winbind use default domain - This parameter specifies whether the winbindd - daemon should operate on users without domain component in their username. - Users without a domain component are treated as is part of the winbindd server's - own domain. While this does not benifit Windows users, it makes SSH, FTP and e-mail - function in a way much closer to the way they would in a native unix system. - - Default: winbind use default domain = <falseg> - - Example: winbind use default domain = true - - - + + + winbind separator + + winbind uid + + winbind gid + + winbind cache time + + winbind enum users + + winbind enum groups + + template homedir + + template shell + + winbind use default domain + -- cgit From d60afa48e3214a4fa4c0a937635c3acf2a4b4a65 Mon Sep 17 00:00:00 2001 From: Gerald Carter Date: Mon, 30 Sep 2002 04:58:55 +0000 Subject: This is an initial draft of printing internals. Not done (not really even started), and not in SGML. Plain ASCII right now, but I'll do some more work on it tomorrow. --- docs/docbook/devdoc/printing.sgml | 73 +++++++++++++++++++++++++++++++++++++++ 1 file changed, 73 insertions(+) create mode 100644 docs/docbook/devdoc/printing.sgml (limited to 'docs') diff --git a/docs/docbook/devdoc/printing.sgml b/docs/docbook/devdoc/printing.sgml new file mode 100644 index 00000000000..3cce7ab99ca --- /dev/null +++ b/docs/docbook/devdoc/printing.sgml @@ -0,0 +1,73 @@ +!= +!= Samba Printing Internals +!= +!= Author : Gerald Carter +!= +!=================================================================== + +The purpose of this document is to provide some insight into +Samba's printing functionality and also to describe the semantics +of certain features of Windows client printing. + +Print Queue TDB's +------------------ + +* matching lanman jobids, spoolss jobids, & lpd jobids +* why ? +* caching time + + +ChangeID & Client Caching of Printer Information +------------------------------------------------ + +[To be filled in later] + + +Windows NT/2K Printer Change Notify +----------------------------------- + +When working with Windows NT+ clients, it is possible for a +print server to use RPC to send asynchronous change notification +events to clients for certain printer and print job attributes. +This can be useful when the client needs to know that a new +job has been added to the queue for a given printer or that the +driver for a printer has been changed. Note that this is done +entirely orthogonal to cache updates based on a new ChangeID for +a printer object. + +The basic set of RPC's used to implement change notification are + + * RemoteFindFirstPrinterChangeNotifyEx ( RFFPCN ) + * RemoteFindNextPrinterChangeNotifyEx ( RFNPCN ) + * FindClosePrinterChangeNotify( FCPCN ) + * ReplyOpenPrinter + * ReplyClosePrinter + * RouteRefreshPrinterChangeNotify ( RRPCN ) + +One additional RPC is available to a server, but is never used by the +Windows spooler service: + + * RouteReplyPrinter() + +The opnum for all of these RPC's are defined in include/rpc_spoolss.h + +Windows NT print servers use a bizarre method of sending print +notification event to clients. The process of registering a new change +notification handle is as follows. The 'C' is for client and the +'S' is for server. All error conditions have been eliminated. + +C: Obtain handle to printer or to the printer + server via the standard OpenPrinterEx() call. +S: Respond with a valid handle to object + +C: Send a RFFPCN request with the previously obtained + handle and either (a) + + + +* Back Channel +* Methods of sending an event +* Id numbers (print server handles, jobids, & printer handles ) +* event types ( jobs & printer attributes ) +* aggegating notifications + -- cgit From ac0d1acc5542b0f02a85e38e5adfcc8098ff166a Mon Sep 17 00:00:00 2001 From: John Terpstra Date: Mon, 30 Sep 2002 05:39:33 +0000 Subject: Added from samba mailing lists. Might help someone one day. --- docs/textdocs/CUPS-PrintingInfo.txt | 589 ++++++++++++++++++++++++++++++++++++ 1 file changed, 589 insertions(+) create mode 100644 docs/textdocs/CUPS-PrintingInfo.txt (limited to 'docs') diff --git a/docs/textdocs/CUPS-PrintingInfo.txt b/docs/textdocs/CUPS-PrintingInfo.txt new file mode 100644 index 00000000000..bbe14f33e8f --- /dev/null +++ b/docs/textdocs/CUPS-PrintingInfo.txt @@ -0,0 +1,589 @@ +Date: Sun, 22 Sep 2002 15:38:02 +0200 +From: "Kurt Pfeifle" +Reply-To: kpfeifle@danka.de +Organization: Danka Deutschland GmbH +To: samba@lists.samba.org +Subject: CUPS filtering mechanism explained, was: [cups raw mode, was Re: [Samba] unlink data file in cups_job_submit] + +Paul Janzen wrote on Samba digest: + + > Message: 7 + > To: Gerald Carter + > Cc: samba@lists.samba.org + > From: Paul Janzen + > Subject: cups raw mode, was Re: [Samba] unlink data file in cups_job_submit + > Date: 21 Sep 2002 12:09:23 -0700 + > + > + > Gerald Carter writes: + > + > > Looks right to me [:-)] Applying it now. Thanks. I've been meaning to + > > track this one down. + > + > + > Thanks! + > + > While we are on the subject... [:-)] + > + > If I am using native printer drivers on Windows clients, I would like + > the "raw" option to get propagated to CUPS. Otherwise cups does not + > pass the data on to the printer. + +Paul, + +I see you know about what you call the "raw data passthrough feature". +I guess you mean the lines in "/etc/cups/mime.types" and +"/etc/cups/mime.convs" which need to be uncommented to allow "raw" +printing ? + +Here is some clarification (likely not very useful for you, but +possibly for some other readers of the Samba list): + +### If you have "printing = cups" and "printcap = cups" enabled, +--- everything is handled by Samba accessing the CUPS API. (And any + "print command" directive in Samba will be ignored.) If the CUPS + API is not available (because Samba might not be compiled against +libcups), it automatically maps to the "System V" command set, with +"-oraw" enabled automatically. + + > (If I enable cups's application/ + > octet-stream raw-data passthrough feature, both cupsomatic and the + > Windows driver add PJL headers and footers, which is not what I want + > either.) + +### According to my experience, cupsomatic on the Samba/CUPS server +--- does *not* add any features if a file is really printed "raw". + However, if you have loaded the driver for the Windows client +from the CUPS server, using the "cupsaddsmb" utility, and if this +driver is one using a "Foomatic" PPD, the PJL header in question is +already added on the Windows client, at the time when the driver +initially generated the PostScript data -- and CUPS in true "-oraw" +manner doesn't remove this PJL header and passes the file "as is" +to its printer communication backend. + +NOTE, please, that the editing in the "mime.convs" and the +----- "mime.types" file does not *enforce* "raw" printing, it + only *allows* it. Any file arriving from Windows is +"auto-typed" by CUPS, which might consecutively lead to its +treatment by various filters automatically (depending on the +actual outcome of the auto-typing and the configuration of the +printqueue in question): + + --> Files generated by PCL drivers and destined to PCL + printers get auto-typed "application/octet-stream" + and are indeed printed "raw". Also, unknown file + types are getting tagged as "application/octet-stream". + + --> Files generated by a PostScript driver (and destined + for any target printer type) are auto-typed. Depending + on the driver, the discovered MIME type may be + + * application/postscript or + * application/vnd.cups-postscript + +"application/postscript" goes first thru the "pstops" filter + (where also the page counting and accounting takes place + currently), and the outcome will be of MIME type + "application/vnd.cups-postscript". The pstopsfilter reads and + uses information from the PPD and inserts user-provided options + into the PostScript file. As a consequence, the filtered file + will possibly have the PJL header you don't want. + +"application/postscript" will be all files with a ".ps", ".ai", + ".eps" suffix or which have as their first character string one + of "%!" or "<04>%". + +"application/vnd.cups-postscript" will be those files which do both, + first... + ...carry a string "LANGUAGE=POSTSCRIPT" (or similar variations + with different capitalization) amongst the first 512 bytes, + *plus*... + ...contain the "PJL super escape code" amongst the first 128 + bytes ("<1B>%-12345X"). Very likely, most PostScript files + generated on Windows using a CUPS- or other PPD, will have + to be auto-typed as "vnd.cups-postscript". + Probably a file produced with a "Generic PostScript driver" + will be just "application/postscript" (have not checked). + +Once the file is in "application/vnd.cups-postscript" format, +either "pstoraster" or "cupsomatic" will take over (depending +on the printer configuration, as determined by the PPD in use). + +NOTE: a printer queue with *no* PPD associated to it is a "raw" +----- printer and all files will go directly there as received + by the spooler; the exeption are file types +"application/octet-stream" which need the mentioned "passthrough +feature" enabled. "Raw" queues don't do any filtering at all, they +hand the file directly to the CUPS backend. This backend is +responsible for the sending of the data to the device (as visible +in the "device URI" notation as lpd://, socket://, smb://, ipp://, +http://, parallel:/, serial:/, usb:/ etc.) + +NOTE, please, also the following fact: "cupsomatic"/Foomatic are +----- *not* native CUPS drivers and they don't ship with CUPS. + They are a Third Party add-on, developed at Linuxprinting.org. +As such, they are a brilliant hack to make all models (driven by +Ghostscript drivers/filters in traditional spoolers) also work via +CUPS, with the same (good or bad!) quality as in these other +spoolers. "cupsomatic" is only a vehicle to execute a ghostscript +commandline at that stage in the CUPS filtering chain, where +"normally" the native CUPS "pstoraster" filter would kick in. +cupsomatic by-passes pstoraster, "kidnaps" the printfile from CUPS +away and re-directs it to go through Ghostscipt. CUPS accepts this, +because the associated CUPS-O-Matic-/Foomatic-PPD carries a line +reading + + *cupsFilter: "application/vnd.cups-postscript 0 cupsomatic" + +This line persuades CUPS to hand the file to cupsomatic, once it +has successfully converted it to the MIME type +"application/vnd.cups-postscript". This conversion will not +happen for Jobs arriving from Windows which are autotyped +"application/octet-stream", with the according changes in +"/etc/cups/mime.types" in place. + +See small drawings at the end... + +I am not a programmer, so please correct me if I am wrong. + + > With traditional lpr, you can just add "-oraw" to the "print command" + > line in smb.conf. With cups, you don't have that alternative. + +You *do* have it, I think. + +But you need to disable the settings "printing = cups" and "printcap = += cups" and use "printing = bsd" and "printcap = /etc/printcap" +instead. [Additionally, you will probably have to enable and configure +the CUPS mini-LPD daemon ("cups-lpd") run from inetd... but I have not +checked, so take this item with a grain of salt and a proper dose of +caution, please.] + + > The result is that to support both unix printing and native-driver + > Windows printing from CUPS, you have to have two logical printers per + > physical printer: one ("cooked") for Unix clients and one ("raw") for + > Samba to use. + +Yes, that is one current workaround, if you don't want the auto-typing +of CUPS influencing Samba/Windows client PostScript jobs. + +CUPS is widely configurable and flexible, even regarding its filtering +mechanism. Another workaround in some situations would be to have +lines in "/etc/cups/mime.types" saying + + application/postscript application/vnd.cups-raw 0 - + application/vnd.cups-postscript application/vnd.cups-raw 0 - + +This would prevent all Postscript files to be filtered (or rather, they +will go thru the virtual "nullfilter" denoted with "-". (This could only +be useful for PS printers, or if you want to print PS code on non-PS +printers ;-) + +A single line of + + */* application/vnd.cups-raw 0 - + +would effectively send *all* files towards the backend immediately +(good luck!) + +Last, you could have the following (without the need for a Samba +patch): + + application/vnd.cups-postscript application/vnd.cups-raw 0 my_PJL_stripping_filter + +You'd need to write a "my_PJL_stripping_filter" (could be a shellscript) +which parses the PostScript and removes the undesired PJL. This would +need to conform to CUPS filter design (mainly, receive and pass the +parameters printername, job-id, username, jobtitle, copies, printoptions +and possibly the filename). It would just go as world executably into +"/usr/lib/cups/filters/" and work from there, called by cups if it +encounters a MIME type "application/vnd.cups-postscript" + + > The attached patch allows you to specify an option string for cups + > printers in smb.conf. + +I think your patch is in any case very useful (if it works as +advertised ;-). It is the most generic, simple and flexible +approach to complement CUPS. + + > So, if you want to use native Windows drivers, + > all you need is + > + > cups printer options = raw + > + > in smb.conf. You can add any other options that cups and the printer + > understand. + +Now this last sentence makes me very curious. Do you mean you can add +*multiple* options to this directive? Which syntax would be required +for this ? (Some CUPS options are specified by an "-o option=value" +pair on the commandline, some are single values, like the "-o raw" +one...) + +I am thinking on one specific usage now: + +----------------------------------------------------------------------- +-> passing any available IPP job attribute to the printer / the spooler +----------------------------------------------------------------------- + +For example, CUPS can handle "-o job-hold-until=indefinite". This +keeps the job in the queue "on hold". It will only be printed upon +manual release by the printer operator. This is a requirement in +many "central reproduction departments", where a few operators +manage the jobs of hundreds of users on some big machine, where no +user is allowed to have direct access. (The operators often need to +load the proper paper type before running the 10.000 page job +requested by marketing for the mailing, etc.). + +A lot more useful applications come to mind, if I could pass +"any other options that cups and the printer understand" via +the smb.conf directive!! + +Thanks a lot! + +Cheers, +Kurt + +P.S.: List, please give me some feedback, if you think this type of + explanation could be useful in the Samba HOWTO Collection. In + that case, I'll try to write it up in a nicer form. + + +######################################################################### +# +# CUPS in and of itself has this (general) filter chain (CAPITAL +# letters are FILE-FORMATS or MIME types, other are filters (this is +# true for pre-1.1.15 of pre-4.3 versions of CUPS and ESP PrintPro): +# +# -FILEFORMAT +# | +# | +# V +# tops +# | +# | +# V +# APPLICATION/POSTSCRIPT +# | +# | +# V +# pstops +# | +# | +# V +# APPLICATION/VND.CUPS-POSTSCRIPT +# | +# | +# V +# pstoraster # as shipped with CUPS, independent from any Ghostscipt +# | # installation on the system +# | (= "postscipt interpreter") +# | +# V +# APPLICATION/VND.CUPS-RASTER +# | +# | +# V +# rasterto (f.e. Gimp-Print filters may be plugged in here) +# | (= "raster driver") +# | +# V +# SOMETHING-DEVICE-SPECIFIC +# | +# | +# V +# backend +# +# +# ESP PrintPro has some enhanced "rasterto" filters as compared to +# CUPS, and also a somewhat improved "pstoraster" filter. +# +# NOTE: Gimp-Print and some other 3rd-Party-Filters (like TurboPrint) to +# CUPS and ESP PrintPro plug-in where rasterto is noted. +# +# +######################################################################### +# +# This is how "cupsomatic" comes into play: +# ========================================= +# +# -FILEFORMAT +# | +# | +# V +# tops +# | +# | +# V +# APPLICATION/POSTSCRIPT +# | +# | +# V +# pstops +# | +# | +# V +# APPLICATION/VND.CUPS-POSTSCRIPT ----------------+ +# | | +# | V +# V cupsomatic +# pstoraster (constructs complicated +# | (= "postscipt interpreter") Ghostscript commandline +# | to let the file be +# V processed by a +# APPLICATION/VND.CUPS-RASTER "-sDEVICE=" +# | call...) +# | | +# V | +# rasterto V +# | (= "raster driver") +-------------------------+ +# | | Ghostscript at work.... | +# V | | +# SOMETHING-DEVICE-SPECIFIC *-------------------------+ +# | | +# | | +# V | +# backend <------------------------------------+ +# | +# | +# V +# THE PRINTER +# +# +# +# Note, that cupsomatic "kidnaps" the printfile after the +# "APPLICATION/VND.CUPS-POSTSCRPT" stage and deviates it through +# the CUPS-external, systemwide Ghostscript installation, bypassing the +# "pstoraster" filter (therefor also bypassing the CUPS-raster-drivers +# "rasterto", and hands the rasterized file directly to the CUPS +# backend... +# +# cupsomatic is not made by the CUPS developers. It is an independent +# contribution to printing development, made by people from +# Linuxprinting.org. (see also http://www.cups.org/cups-help.html) +# +# NOTE: Gimp-Print and some other 3rd-Party-Filters (like TurboPrint) to +# CUPS and ESP PrintPro plug-in where rasterto is noted. +# +# +######################################################################### +# +# And this is how it works for ESP PrintPro from 4.3: +# =================================================== +# +# -FILEFORMAT +# | +# | +# V +# tops +# | +# | +# V +# APPLICATION/POSTSCRIPT +# | +# | +# V +# pstops +# | +# | +# V +# APPLICATION/VND.CUPS-POSTSCRIPT +# | +# | +# V +# gsrip +# | (= "postscipt interpreter") +# | +# V +# APPLICATION/VND.CUPS-RASTER +# | +# | +# V +# rasterto (f.e. Gimp-Print filters may be plugged in here) +# | (= "raster driver") +# | +# V +# SOMETHING-DEVICE-SPECIFIC +# | +# | +# V +# backend +# +# NOTE: Gimp-Print and some other 3rd-Party-Filters (like TurboPrint) to +# CUPS and ESP PrintPro plug-in where rasterto is noted. +# +# +######################################################################### +# +# This is how "cupsomatic" would come into play with ESP PrintPro: +# ================================================================ +# +# +# -FILEFORMAT +# | +# | +# V +# tops +# | +# | +# V +# APPLICATION/POSTSCRIPT +# | +# | +# V +# pstops +# | +# | +# V +# APPLICATION/VND.CUPS-POSTSCRIPT ----------------+ +# | | +# | V +# V cupsomatic +# gsrip (constructs complicated +# | (= "postscipt interpreter") Ghostscript commandline +# | to let the file be +# V processed by a +# APPLICATION/VND.CUPS-RASTER "-sDEVICE=" +# | call...) +# | | +# V | +# rasterto V +# | (= "raster driver") +-------------------------+ +# | | Ghostscript at work.... | +# V | | +# SOMETHING-DEVICE-SPECIFIC *-------------------------+ +# | | +# | | +# V | +# backend <------------------------------------+ +# | +# | +# V +# THE PRINTER +# +# NOTE: Gimp-Print and some other 3rd-Party-Filters (like TurboPrint) to +# CUPS and ESP PrintPro plug-in where rasterto is noted. +# +######################################################################### +# +# And this is how it works for CUPS from 1.1.15: +# ============================================== +# +# -FILEFORMAT +# | +# | +# V +# tops +# | +# | +# V +# APPLICATION/POSTSCRIPT +# | +# | +# V +# pstops +# | +# | +# V +# APPLICATION/VND.CUPS-POSTSCRIPT-----+ +# | +# +------------------v------------------------------+ +# | Ghostscript | +# | at work... | +# | (with | +# | "-sDEVICE=cups") | +# | | +# | (= "postscipt interpreter") | +# | | +# +------------------v------------------------------+ +# | +# | +# APPLICATION/VND.CUPS-RASTER <-------+ +# | +# | +# V +# rasterto +# | (= "raster driver") +# | +# V +# SOMETHING-DEVICE-SPECIFIC +# | +# | +# V +# backend +# +# +# NOTE: since version 1.1.15 CUPS "outsourced" the pstoraster process to +# Ghostscript. GNU Ghostscript needs to be patched to handle the +# CUPS requirement; ESP Ghostscript has this builtin. In any case, +# "gs -h" needs to show up a "cups" device. pstoraster is now a +# calling an appropriate "gs -sDEVICE=cups..." commandline to do +# the job. It will output "application/vnd.cup-raster", which will +# be finally processed by a CUPS raster driver "rasterto" +# Note the difference to "cupsomatic", which will *not* output +# CUPS-raster, but a final version of the printfile, ready to be +# sent to the printer. cupsomatic also doesn't use the "cups" +# devicemode in Ghostscript, but one of the classical devicemodes.... +# +# NOTE: Gimp-Print and some other 3rd-Party-Filters (like TurboPrint) to +# CUPS and ESP PrintPro plug-in where rasterto is noted. +# +######################################################################### +# +# And this is how it works for CUPS from 1.1.15, with cupsomatic included: +# ======================================================================== +# +# -FILEFORMAT +# | +# | +# V +# tops +# | +# | +# V +# APPLICATION/POSTSCRIPT +# | +# | +# V +# pstops +# | +# | +# V +# APPLICATION/VND.CUPS-POSTSCRIPT-----+ +# | +# +------------------v------------------------------+ +# | Ghostscript . Ghostscript at work.... | +# | at work... . (with "-sDEVICE= | +# | (with . " | +# | "-sDEVICE=cups") . | +# | . | +# | (CUPS standard) . (cupsomatic) | +# | . | +# | (= "postscript interpreter") | +# | . | +# +------------------v--------------v---------------+ +# | | +# | | +# APPLICATION/VND.CUPS-RASTER <-------+ | +# | | +# | | +# V | +# rasterto | +# | (= "raster driver") | +# | | +# V | +# SOMETHING-DEVICE-SPECIFIC <------------------------+ +# | +# | +# V +# backend +# +# +# NOTE: Gimp-Print and some other 3rd-Party-Filters (like TurboPrint) to +# CUPS and ESP PrintPro plug-in where rasterto is noted. +# +########################################################################## + +I hope this helps more people understand how CUPS works and how they +can possibly tweak it to their needs. + + -- cgit From a4a3469ffb44061c58bbcd807a9585ae13326f7b Mon Sep 17 00:00:00 2001 From: Gerald Carter Date: Mon, 30 Sep 2002 16:51:35 +0000 Subject: more details opn change notification --- docs/docbook/devdoc/printing.sgml | 89 +++++++++++++++++++++++++++++++++++---- 1 file changed, 80 insertions(+), 9 deletions(-) (limited to 'docs') diff --git a/docs/docbook/devdoc/printing.sgml b/docs/docbook/devdoc/printing.sgml index 3cce7ab99ca..1d4085bb88e 100644 --- a/docs/docbook/devdoc/printing.sgml +++ b/docs/docbook/devdoc/printing.sgml @@ -60,14 +60,85 @@ C: Obtain handle to printer or to the printer server via the standard OpenPrinterEx() call. S: Respond with a valid handle to object -C: Send a RFFPCN request with the previously obtained - handle and either (a) +C: Send a RFFPCN request with the previously obtained + handle with either (a) set of flags for change events + to monitor, or (b) a PRINTER_NOTIFY_OPTIONS structure + containing the event information to monitor. The windows + spooler has only been observed to use (b). +S: The opens a new TCP session to the client (thus requiring + all print clients to be CIFS servers as well) and sends + a ReplyOpenPrinter() request to the client. +C: The client responds with a printer handle that can be used to + send event notification messages. +S: The server replies success to the RFFPCN request. + +C: The windows spooler follows the RFFPCN with a RFNPCN + request to fetch the current values of all monitored + attributes. +S: The server replies with an array SPOOL_NOTIFY_INFO_DATA + structures (contained in a SPOOL_NOTIFY_INFO structure). + +C: If the change notification handle is ever released by the + client via a PCPCN request, the server sends a ReplyClosePrinter() + request back to the client first. However a request of this + nature from the client is often an indication that the previous + notification event was not marshalled correctly by the server + or a piece of data was wrong. +S: The server closes the internal change notification handle + (POLICY_HND) and does not send any further change notification + events to the client for that printer or job. + +The current list of notification events supported by Samba can be +found by examining the internal tables in srv_spoolss_nt.c + + * printer_notify_table[] + * job_notify_table[] + +When an event occurs that could be monitored, smbd sends a messages +to itself about the change. The list of events to be transmitted +are queued by the smbd process sending the message to prevent and +overload of TDB usage and the internal message is sent during smbd's +idle loop (refer to printing/notify.c and the functions +send_spoolss_notify2_msg() and print_notify_send_messages() ). + + +The decision of whether or not the change is to be sent to connected +clients is made by the routine which actually sends the notification. +( refer to srv_spoolss_nt.c:recieve_notify2_message() ). + +Because it possible to recieve a listing of multiple changes for +multiple printers the notification events must be split into +categories by the printer name. This makes it possible to group +multiple change events to be sent in a single RPC according to the +printer handle obtained via a ReplyOpenPrinter(). + +The actual change notification is performed using the RRPCN request +RPC. This packet contains + + * the printer handle registered with the client's spooler on + which the change occurred + * The change_low value which was sent as part of the last + RFNPCN request from the client + * The SPOOL_NOTIFY_INFO container with the event information + - the version and flags field are predefined and should not + be changed + - The count field is the number of entries in the + SPOOL_NOTIFY_INFO_DATA array + o The type defines whether or not this event is for a printer + or a print job + o The field is the flag identifying the event + o the notify_data union contains the new valuie of the attribute + o The enc_type defines the size of the structure for marshalling + and unmarshalling + o (a) the id must be 0 for a printer event on a printer handle. + (b) the id must be the job id for an event on a printer job + (c) the id must be the matching number of the printer index used + in the response packet to the RFNPCN when using a print server + handle for notification. Samba currently uses the snum of + the printer for this which can break if the list of services + has been modified since the notification handle was registered. + o The size is either (a) the string length in UNICODE for strings, + (b) the size in bytes of the security descriptor, or (c) 0 for + data values. - -* Back Channel -* Methods of sending an event -* Id numbers (print server handles, jobids, & printer handles ) -* event types ( jobs & printer attributes ) -* aggegating notifications - -- cgit From a42414fe5aff8a9e0fccd1c73a86e3b472f2c149 Mon Sep 17 00:00:00 2001 From: Gerald Carter Date: Mon, 30 Sep 2002 19:52:11 +0000 Subject: more updates--printing backend inmterface & Print queue tdb's --- docs/docbook/devdoc/printing.sgml | 129 ++++++++++++++++++++++++++++++++++++-- 1 file changed, 124 insertions(+), 5 deletions(-) (limited to 'docs') diff --git a/docs/docbook/devdoc/printing.sgml b/docs/docbook/devdoc/printing.sgml index 1d4085bb88e..2e9d429439e 100644 --- a/docs/docbook/devdoc/printing.sgml +++ b/docs/docbook/devdoc/printing.sgml @@ -1,6 +1,6 @@ != != Samba Printing Internals -!= +!= != Author : Gerald Carter != !=================================================================== @@ -9,18 +9,137 @@ The purpose of this document is to provide some insight into Samba's printing functionality and also to describe the semantics of certain features of Windows client printing. + +Printing Interface to Various Backends +-------------------------------------- + +Samba uses a table of function pointers to seven functions. The +function prototypes are defined in the printif structure declared +in printing.h. + + * retrieve the contents of a print queue + * pause the print queue + * resume a paused print queue + * delete a job from the queue + * pause a job in the print queue + * result a paused print job in the queue + * submit a jobn to the print queue + +Currently there are only two printing backend implementations +defined. + + * a generic set of functions for working with standard UNIX + printing subsystems + * a set of CUPS specific functions (this is only enabled if + the CUPS libraries were located at compile time). + + + Print Queue TDB's ------------------ -* matching lanman jobids, spoolss jobids, & lpd jobids -* why ? -* caching time +Samba provides periodic caching of the output from the "lpq command" +for performance reasons. This cache time is configurable in seconds. +Obviously the longer the cache time the less often smbd will be +required to exec a copy of lpq. However, the accuracy of the print +queue contents displayed to clients will be diminished as well. + +The list of currently opened print queue TDB's can eb found +be examining the list of tdb_print_db structures ( see print_db_head +in printing.c ). A queue TDB is opened using the wrapper function +printing.c:get_print_db_byname(). The function ensures that smbd +does not open more than MAX_PRINT_DBS_OPEN in an effort to prevent +a large print server from exhausting all available file descriptors. +If the number of open queue TDB's exceeds the MAX_PRINT_DBS_OPEN +limit, smbd falls back to a most recently used algorithm for maintaining +a list of open TDB's. + +There are two ways in which a a print job can be entered into +a print queue's TDB. The first is to submit the job from a Windows +client which will insert the job information directly into the TDB. +The second method is to have the print job picked up by executing the +"lpq command". + +/* included from printing.h */ +struct printjob { + pid_t pid; /* which process launched the job */ + int sysjob; /* the system (lp) job number */ + int fd; /* file descriptor of open file if open */ + time_t starttime; /* when the job started spooling */ + int status; /* the status of this job */ + size_t size; /* the size of the job so far */ + int page_count; /* then number of pages so far */ + BOOL spooled; /* has it been sent to the spooler yet? */ + BOOL smbjob; /* set if the job is a SMB job */ + fstring filename; /* the filename used to spool the file */ + fstring jobname; /* the job name given to us by the client */ + fstring user; /* the user who started the job */ + fstring queuename; /* service number of printer for this job */ + NT_DEVICEMODE *nt_devmode; +}; + +The current manifestation of the printjob structure contains a field +for the UNIX job id returned from the "lpq command" and a Windows job +ID (32-bit bounded by PRINT_MAX_JOBID). When a print job is returned +by the "lpq command" that does not match an existing job in th queue's +TDB, a 32-bit job ID above the is generating by adding UNIX_JOB_START to +the id reported by lpq. + +In order to match a 32-bit Windows jobid onto a 16-bit lanman print job +id, smbd uses an in memory TDB to match the former to a number approriate +for old lanman clients. + +When updating a print queue, smbd will performs the following +steps ( refer to print.c:print_queue_update() ): + + 1) Check to see if another sbmd is currently in the process of + updating the queue contents by checking the pid stored in + "LOCK/". If so, then do not update the TDB. + 2) Lock the mutex entry in the TDB and store our own pid. + Check that this succeeded, else fail. + 3) Store the updated time stamp for the new cache listing + 4) Retrieve the queue listing via "lpq command" + 5) foreach job in the queue + { + if the job is a UNIX job, create a new entry; + if the job has a Windows based jobid, then + { + Lookup the record by the jobid; + if the lookup failed, then + treat it as a UNIX job; + else + update the job status only + } + } + 6) Delete any jobs in the TDB that are not in the in the lpq + listing + 7) Store the print queue status in the TDB + 8) update the cache time stamp again + +Note that it is the contents of this TDB that is returned to Windows +clients and not the actual listing from the "lpq command". + +The NT_DEVICEMODE stored as part of the printjob structure is used to +store a pointer to a non-default DeviceMode associated with the print +job. The pointer will be non-null when the client included a Device +Mode in the OpePrinterEx() call and subsequently submitted a job for +printing on that sam handle. If the client did not include a Device +Mode in the OpenPrinterEx() request, the nt_devmode field is NULL +and the job has the printer's device mode associated with it by default. + +Only non-default Device Mode are stored with print jobs in the print +queue TDB. Otherwise, the Device Mode is obtained from the printer +object when the client issues a GetJob(level == 2) request. + + + + ChangeID & Client Caching of Printer Information ------------------------------------------------ -[To be filled in later] + [To be filled in later] Windows NT/2K Printer Change Notify -- cgit From cb96e1a1d9a07314bb60e431484cfd05aef83de6 Mon Sep 17 00:00:00 2001 From: Gerald Carter Date: Mon, 30 Sep 2002 20:18:12 +0000 Subject: * add the Developers guide to the repository * fix syntax errors in developer's docs * update Makefile.in to place HTML files in htmldocs & text files in textdocs/ --- docs/Samba-Developers-Guide.pdf | 2060 ++++++++ docs/Samba-HOWTO-Collection.pdf | 8137 +++++++++++++++-------------- docs/docbook/Makefile.in | 21 +- docs/docbook/devdoc/internals.sgml | 1 + docs/docbook/devdoc/parsing.sgml | 2 +- docs/htmldocs/Samba-Developers-Guide.html | 7734 +++++++++++++++++++++++++++ docs/htmldocs/Samba-HOWTO-Collection.html | 3593 +++++++------ 7 files changed, 15980 insertions(+), 5568 deletions(-) create mode 100644 docs/Samba-Developers-Guide.pdf create mode 100644 docs/htmldocs/Samba-Developers-Guide.html (limited to 'docs') diff --git a/docs/Samba-Developers-Guide.pdf b/docs/Samba-Developers-Guide.pdf new file mode 100644 index 00000000000..282325e02a2 --- /dev/null +++ b/docs/Samba-Developers-Guide.pdf @@ -0,0 +1,2060 @@ +%PDF-1.3 +% +1 0 obj<>endobj +2 0 obj<>endobj +3 0 obj<>endobj +4 0 obj<>endobj +5 0 obj<>endobj +6 0 obj<>endobj +7 0 obj<>endobj +8 0 obj<>endobj +9 0 obj<>endobj +10 0 obj<>endobj +11 0 obj<>endobj +12 0 obj<>endobj +13 0 obj<>endobj +14 0 obj<>endobj +15 0 obj<>endobj +16 0 obj<>endobj +17 0 obj<>endobj +18 0 obj<>endobj +19 0 obj<>endobj +20 0 obj<>endobj +21 0 obj<>endobj +22 0 obj<>endobj +23 0 obj<>endobj +24 0 obj<>endobj +25 0 obj<>endobj +26 0 obj<>endobj +27 0 obj<>endobj +28 0 obj<>endobj +29 0 obj<>endobj +30 0 obj<>endobj +31 0 obj<>endobj +32 0 obj<>endobj +33 0 obj<>endobj +34 0 obj<>endobj +35 0 obj<>endobj +36 0 obj<>endobj +37 0 obj<>endobj +38 0 obj<>endobj +39 0 obj<>endobj +40 0 obj<>endobj +41 0 obj<>endobj +42 0 obj<>endobj +43 0 obj<>endobj +44 0 obj<>endobj +45 0 obj<>endobj +46 0 obj<>endobj +47 0 obj<>endobj +48 0 obj<>endobj +49 0 obj<>endobj +50 0 obj<>endobj +51 0 obj<>endobj +52 0 obj[10 0 R +11 0 R +12 0 R +13 0 R +14 0 R +15 0 R +16 0 R +17 0 R +18 0 R +19 0 R +20 0 R +21 0 R +22 0 R +23 0 R +24 0 R +25 0 R +26 0 R +27 0 R +28 0 R +29 0 R +30 0 R +31 0 R +32 0 R +33 0 R +34 0 R +35 0 R +36 0 R +37 0 R +38 0 R +39 0 R +40 0 R +41 0 R +42 0 R +43 0 R +44 0 R +45 0 R +46 0 R +47 0 R +48 0 R +49 0 R +50 0 R +51 0 R]endobj +53 0 obj<>endobj +54 0 obj<>endobj +55 0 obj<>endobj +56 0 obj<>endobj +57 0 obj<>endobj +58 0 obj<>endobj +59 0 obj<>endobj +60 0 obj<>endobj +61 0 obj<>endobj +62 0 obj<>endobj +63 0 obj<>endobj +64 0 obj<>endobj +65 0 obj<>endobj +66 0 obj<>endobj +67 0 obj<>endobj +68 0 obj<>endobj +69 0 obj<>endobj +70 0 obj<>endobj +71 0 obj<>endobj +72 0 obj<>endobj +73 0 obj<>endobj +74 0 obj<>endobj +75 0 obj<>endobj +76 0 obj<>endobj +77 0 obj<>endobj +78 0 obj<>endobj +79 0 obj<>endobj +80 0 obj<>endobj +81 0 obj<>endobj +82 0 obj<>endobj +83 0 obj<>endobj +84 0 obj<>endobj +85 0 obj<>endobj +86 0 obj<>endobj +87 0 obj<>endobj +88 0 obj<>endobj +89 0 obj<>endobj +90 0 obj<>endobj +91 0 obj<>endobj +92 0 obj<>endobj +93 0 obj<>endobj +94 0 obj<>endobj +95 0 obj<>endobj +96 0 obj<>endobj +97 0 obj[53 0 R +54 0 R +55 0 R +56 0 R +57 0 R +58 0 R +59 0 R +60 0 R +61 0 R +62 0 R +63 0 R +64 0 R +65 0 R +66 0 R +67 0 R +68 0 R +69 0 R +70 0 R +71 0 R +72 0 R +73 0 R +74 0 R +75 0 R +76 0 R +77 0 R +78 0 R +79 0 R +80 0 R +81 0 R +82 0 R +83 0 R +84 0 R +85 0 R +86 0 R +87 0 R +88 0 R +89 0 R +90 0 R +91 0 R +92 0 R +93 0 R +94 0 R +95 0 R +96 0 R]endobj +98 0 obj<>endobj +99 0 obj<>endobj +100 0 obj<>endobj +101 0 obj<>endobj +102 0 obj<>endobj +103 0 obj<>endobj +104 0 obj<>endobj +105 0 obj<>endobj +106 0 obj<>endobj +107 0 obj<>endobj +108 0 obj<>endobj +109 0 obj<>endobj +110 0 obj<>endobj +111 0 obj<>endobj +112 0 obj<>endobj +113 0 obj<>endobj +114 0 obj<>endobj +115 0 obj<>endobj +116 0 obj<>endobj +117 0 obj<>endobj +118 0 obj[98 0 R +99 0 R +100 0 R +101 0 R +102 0 R +103 0 R +104 0 R +105 0 R +106 0 R +107 0 R +108 0 R +109 0 R +110 0 R +111 0 R +112 0 R +113 0 R +114 0 R +115 0 R +116 0 R +117 0 R]endobj +119 0 obj<>endobj +120 0 obj<>endobj +121 0 obj<>endobj +122 0 obj<>endobj +123 0 obj<>endobj +124 0 obj<>endobj +125 0 obj<>endobj +126 0 obj<>endobj +127 0 obj<>endobj +128 0 obj<>endobj +129 0 obj<>endobj +130 0 obj<>endobj +131 0 obj<>endobj +132 0 obj<>endobj +133 0 obj<>endobj +134 0 obj<>endobj +135 0 obj<>endobj +136 0 obj<>endobj +137 0 obj<>endobj +138 0 obj<>endobj +139 0 obj<>endobj +140 0 obj<>endobj +141 0 obj<>endobj +142 0 obj<>endobj +143 0 obj<>endobj +144 0 obj<>endobj +145 0 obj<>endobj +146 0 obj<>endobj +147 0 obj<>endobj +148 0 obj<>endobj +149 0 obj<>endobj +150 0 obj<>endobj +151 0 obj<>endobj +152 0 obj<>endobj +153 0 obj<>endobj +154 0 obj<>endobj +155 0 obj<>endobj +156 0 obj<>endobj +157 0 obj<>endobj +158 0 obj<>endobj +159 0 obj<>endobj +160 0 obj<>endobj +161 0 obj[120 0 R +122 0 R +124 0 R +125 0 R +126 0 R +127 0 R +128 0 R +129 0 R +130 0 R +131 0 R +132 0 R +133 0 R +134 0 R +135 0 R +136 0 R +137 0 R +138 0 R +139 0 R +140 0 R +141 0 R +142 0 R +143 0 R +144 0 R +145 0 R +146 0 R +147 0 R +148 0 R +149 0 R +150 0 R +151 0 R +152 0 R +153 0 R +154 0 R +155 0 R +156 0 R +157 0 R +158 0 R +159 0 R +160 0 R]endobj +162 0 obj<>endobj +163 0 obj<>endobj +164 0 obj<>endobj +165 0 obj<>endobj +166 0 obj<>endobj +167 0 obj<>endobj +168 0 obj<>endobj +169 0 obj<>endobj +170 0 obj<>endobj +171 0 obj<>endobj +172 0 obj<>endobj +173 0 obj<>endobj +174 0 obj<>endobj +175 0 obj<>endobj +176 0 obj<>endobj +177 0 obj<>endobj +178 0 obj<>endobj +179 0 obj<>endobj +180 0 obj<>endobj +181 0 obj<>endobj +182 0 obj<>endobj +183 0 obj<>endobj +184 0 obj<>endobj +185 0 obj<>endobj +186 0 obj<>endobj +187 0 obj<>endobj +188 0 obj<>endobj +189 0 obj<>endobj +190 0 obj<>endobj +191 0 obj<>endobj +192 0 obj<>endobj +193 0 obj<>endobj +194 0 obj<>endobj +195 0 obj<>endobj +196 0 obj<>endobj +197 0 obj<>endobj +198 0 obj<>endobj +199 0 obj<>endobj +200 0 obj<>endobj +201 0 obj<>endobj +202 0 obj<>endobj +203 0 obj<>endobj +204 0 obj<>endobj +205 0 obj<>endobj +206 0 obj<>endobj +207 0 obj<>endobj +208 0 obj<>endobj +209 0 obj<>endobj +210 0 obj<>endobj +211 0 obj<>endobj +212 0 obj<>endobj +213 0 obj[162 0 R +163 0 R +164 0 R +165 0 R +166 0 R +167 0 R +168 0 R +169 0 R +170 0 R +171 0 R +172 0 R +173 0 R +174 0 R +175 0 R +176 0 R +177 0 R +178 0 R +179 0 R +180 0 R +181 0 R +182 0 R +183 0 R +184 0 R +185 0 R +186 0 R +187 0 R +188 0 R +189 0 R +190 0 R +191 0 R +192 0 R +193 0 R +194 0 R +195 0 R +196 0 R +197 0 R +198 0 R +199 0 R +200 0 R +201 0 R +202 0 R +203 0 R +204 0 R +205 0 R +206 0 R +207 0 R +208 0 R +209 0 R +210 0 R +211 0 R +212 0 R]endobj +214 0 obj<>endobj +215 0 obj<>endobj +216 0 obj<>endobj +217 0 obj<>endobj +218 0 obj<>endobj +219 0 obj<>endobj +220 0 obj<>endobj +221 0 obj<>endobj +222 0 obj<>endobj +223 0 obj<>endobj +224 0 obj<>endobj +225 0 obj<>endobj +226 0 obj<>endobj +227 0 obj<>endobj +228 0 obj[214 0 R +215 0 R +216 0 R +217 0 R +218 0 R +219 0 R +220 0 R +221 0 R +222 0 R +223 0 R +224 0 R +225 0 R +226 0 R +227 0 R]endobj +229 0 obj<>endobj +230 0 obj<>endobj +231 0 obj<>endobj +232 0 obj<>endobj +233 0 obj[230 0 R +232 0 R]endobj +234 0 obj<>endobj +235 0 obj<>endobj +236 0 obj<>endobj +237 0 obj<>endobj +238 0 obj<>endobj +239 0 obj<>endobj +240 0 obj<>endobj +241 0 obj<>endobj +242 0 obj<>endobj +243 0 obj<>endobj +244 0 obj<>endobj +245 0 obj<>endobj +246 0 obj[235 0 R +237 0 R +239 0 R +241 0 R +243 0 R +245 0 R]endobj +247 0 obj<>endobj +248 0 obj<>endobj +249 0 obj<>endobj +250 0 obj<>endobj +251 0 obj<>endobj +252 0 obj<>endobj +253 0 obj<>endobj +254 0 obj<>endobj +255 0 obj<>endobj +256 0 obj<>endobj +257 0 obj<>endobj +258 0 obj<>endobj +259 0 obj<>endobj +260 0 obj<>endobj +261 0 obj<>endobj +262 0 obj<>endobj +263 0 obj<>endobj +264 0 obj<>endobj +265 0 obj<>endobj +266 0 obj<>endobj +267 0 obj<>endobj +268 0 obj<>endobj +269 0 obj<>endobj +270 0 obj<>endobj +271 0 obj<>endobj +272 0 obj<>endobj +273 0 obj<>endobj +274 0 obj<>endobj +275 0 obj<>endobj +276 0 obj<>endobj +277 0 obj<>endobj +278 0 obj<>endobj +279 0 obj<>endobj +280 0 obj<>endobj +281 0 obj<>endobj +282 0 obj<>endobj +283 0 obj<>endobj +284 0 obj<>endobj +285 0 obj<>endobj +286 0 obj<>endobj +287 0 obj<>endobj +288 0 obj<>endobj +289 0 obj<>endobj +290 0 obj<>endobj +291 0 obj<>endobj +292 0 obj<>endobj +293 0 obj<>endobj +294 0 obj<>endobj +295 0 obj<>endobj +296 0 obj<>endobj +297 0 obj<>endobj +298 0 obj<>endobj +299 0 obj<>endobj +300 0 obj<>endobj +301 0 obj<>endobj +302 0 obj<>endobj +303 0 obj<>endobj +304 0 obj<>endobj +305 0 obj<>endobj +306 0 obj<>endobj +307 0 obj<>endobj +308 0 obj<>endobj +309 0 obj<>endobj +310 0 obj<>endobj +311 0 obj<>endobj +312 0 obj<>endobj +313 0 obj<>endobj +314 0 obj<>endobj +315 0 obj<>endobj +316 0 obj<>endobj +317 0 obj<>endobj +318 0 obj<>endobj +319 0 obj<>endobj +320 0 obj<>endobj +321 0 obj<>endobj +322 0 obj<>endobj +323 0 obj<>endobj +324 0 obj<>endobj +325 0 obj<>endobj +326 0 obj<>endobj +327 0 obj<>endobj +328 0 obj<>endobj +329 0 obj<>endobj +330 0 obj<>endobj +331 0 obj<>endobj +332 0 obj<>endobj +333 0 obj<>endobj +334 0 obj<>endobj +335 0 obj<>endobj +336 0 obj<>endobj +337 0 obj<>endobj +338 0 obj<>endobj +339 0 obj<>endobj +340 0 obj<>endobj +341 0 obj<>endobj +342 0 obj<>endobj +343 0 obj<>endobj +344 0 obj<>endobj +345 0 obj<>endobj +346 0 obj<>endobj +347 0 obj<>endobj +348 0 obj<>endobj +349 0 obj<>endobj +350 0 obj<>endobj +351 0 obj<>endobj +352 0 obj<>endobj +353 0 obj<>endobj +354 0 obj<>endobj +355 0 obj<>endobj +356 0 obj<>endobj +357 0 obj<>endobj +358 0 obj<>endobj +359 0 obj<>endobj +360 0 obj<>endobj +361 0 obj<>endobj +362 0 obj<>endobj +363 0 obj<>endobj +364 0 obj<>endobj +365 0 obj<>endobj +366 0 obj<>endobj +367 0 obj<>endobj +368 0 obj<>endobj +369 0 obj<>endobj +370 0 obj<>endobj +371 0 obj<>endobj +372 0 obj<>endobj +373 0 obj<>endobj +374 0 obj<>endobj +375 0 obj<>endobj +376 0 obj<>endobj +377 0 obj<>endobj +378 0 obj<>endobj +379 0 obj<>endobj +380 0 obj<>endobj +381 0 obj<>endobj +382 0 obj<>endobj +383 0 obj<>endobj +384 0 obj<>endobj +385 0 obj<>endobj +386 0 obj<>endobj +387 0 obj<>endobj +388 0 obj<>endobj +389 0 obj<>endobj +390 0 obj<>endobj +391 0 obj<>endobj +392 0 obj<>endobj +393 0 obj<>endobj +394 0 obj<>endobj +395 0 obj<>endobj +396 0 obj<>endobj +397 0 obj<>endobj +398 0 obj<>endobj +399 0 obj<>endobj +400 0 obj<>endobj +401 0 obj<>endobj +402 0 obj<>endobj +403 0 obj<>endobj +404 0 obj<>endobj +405 0 obj<>endobj +406 0 obj<>endobj +407 0 obj<>endobj +408 0 obj<>endobj +409 0 obj<>endobj +410 0 obj<>endobj +411 0 obj<>endobj +412 0 obj<>endobj +413 0 obj<>endobj +414 0 obj<>endobj +415 0 obj<>endobj +416 0 obj<>endobj +417 0 obj<>endobj +418 0 obj<>endobj +419 0 obj<>endobj +420 0 obj<>endobj +421 0 obj<>endobj +422 0 obj<>endobj +423 0 obj<>endobj +424 0 obj<>endobj +425 0 obj<>endobj +426 0 obj<>endobj +427 0 obj<>endobj +428 0 obj<>endobj +429 0 obj<>endobj +430 0 obj<>endobj +431 0 obj<>endobj +432 0 obj<>endobj +433 0 obj<>/XObject<<>>>>>>endobj +434 0 obj<>stream +x+2T0BCs#c3\..}7K#4CCK=ccS=3=DFKjYjN~AjQ{ifJfHkW S?endstream +endobj +435 0 obj<>/XObject<<>>>>/Annots 52 0 R>>endobj +436 0 obj<>stream +xZnH}W$Ƹn_s!, lf'$4'\ oR4HI\U]]]?'*_%U2.O4Õ5]Iʢer` O\&Mpܤ uIJIk(L B0I$*{von8րضYp3 Y`as:l}C#6nޱȚA֫6A»ZE=9`yT(̭G9[4z@;W~Pfܾq?Y?zԏfnMwt* +Mk燀G0)#̶6pf%Umnכ4k'O2uCU֚+L4y &NvK3=Nur-*;afݬ ;> ѡȊ{~?vK [߉}pxY4G=fy_Vdz_o{xyUA3k(`qѡPOX*6o]MzOC}!}$R|h0ˋ^}8Ŋ>ݾ ]ݼKfkQsi/ c."Dw( M2loD$!fx. კWQ?}`{BfP3 aca/;&$wbapyLvɒho?xz4V篰>o7ܵEߗCmpֲ5!7uM1sbvg 7? G2^^-<7{o -%ξU +2Eϓendstream +endobj +437 0 obj<>/XObject<<>>>>/Annots 97 0 R>>endobj +438 0 obj<>stream +xZr7}Wf8`0GYUɲlҵ5&9Z^sNJ.UkW<@h4g*+We:-ϊϧ_$MYs"%p5Mޥ|eڼv| \f(8IbA-\ZN5r`MɬB,:̶ڒ4%ȫXRsMU:g LcPu#+ [՝H|Q %:@ 䳒V0hUX6)6m, cbGL1uGÖXΎ# hn@L1-G+U`P;dIUI!b "ڶ(_5M\ 2;, -Ԥ̛HMM%Qg&/<0"_)( +̠,ࠖV6|0"MQ RA4BLX=T) ]+i4 JzlRL!D|eDqlHAK2ʛqBZ2+ȄRHJlJ(@&h RېO!i )3Q^8+hgTBD% ")Ӧnlx@o4VQ:i$! 8fifZi _A-Խcի<Š0&FSL D_ZgZ@T. 1- M$f"-b0T[ +o*Z*D!7d @ #b-#2$7iޭoQF8aAs* >br]B!=040T.M1:ZE$L$6B0b/a1Š" )`P[&H6sZ+Vp4U0@L1EҰcʰQ%diLu"*EZŸ CdX8 +;L(JW18kAd%~j&dbH  tj=I*(L_%R +{d@kp:!= iryzf1^w<4-lx.ն_m7\8Fmx ZU8avjpQEQ Gȅ]ߐ6[~紗1y:Oio:,?PQ `ztbQ6qC ~[#]ooŮu^'j,_ VZQ8_ +rRT>vƑUKkm\++nEe̗ogACF ?̭v +ޣ˓jk>u|6] $u<;GrBά_NsV[hNW7qNȴ|MSs̷q:OW8972,|e<t2_ 9Ճi]ux^7EEW{<.p:@{[.>w۷W| l.K9nYRT*^Ň(˺bX/XZ@]Z+x(nV>N)'4,#dT^O&Rn ;_ I|}} +Q]ce} r a}o}pdxޣ/p<̪Te>= Y3|u) 1>/XObject<<>>>>/Annots 118 0 R>>endobj +440 0 obj<>stream +xXMS9WcFGbE] wmMRDP**ӛnu[=:įu%,JďZV;|.4 +`!F .yep)&*!9e *S4L .OVE9&kz9 mj /E%BfdRU&՚$ I*>ɛf-ɤ(ՖQ-6pR)49Z]Ѧe٢z,Dj|f|SK~ӆ!2 Ҧ1Ԫ +MWk'0HjD2ǤV#Is*,bDzZ400 .HY bNJRUC3 ؑ!sTMlC X0AJJD,l֜ QTv h r!=FDTZLpЦjI"6AR* $Ӧtfa-9FA/3Y%9Q$" QF)(D2Qb8E=BheDC9JW3`QT )Hoz0i1XEEk,Q&xU)35#l&,Oߍ'/Zİ[mvHXIRA"wcq_UÅq-'-kd[/_]t:!m㳋suMAU:דf2݆l?|>Y7ed߷U0x#iG 1ͳ![RuUݰ3)ûbѮnv {76ޔW9|!wɖ G8'e4iwݙ_Р5~>.hH Q׌1>0{~~h?8s0 4}u\'L hQ݃*SM=)ֆ_c\jb]}}pͦ*o^1>;>Ȁyx{MZGÒS܇O"TUs´tXv=f1뾲6re0 `$EuFLtxæѬMsY*g +}W- iWixѰ*u݂߷l,3>/XObject<<>>>>>>endobj +442 0 obj<>stream +x}0 E|a iH؊Ā6"~\ډY,#? CPu,!d+c1pdoPYpiM5;&vOW[\WǫEjz%`>`؊9Ұ7~endstream +endobj +443 0 obj<>/XObject<<>>>>/Annots 161 0 R>>endobj +444 0 obj<>stream +xWRH}Wې ŲӘ% U@)U)jHjԂ9j,*ѹ&c4a,VhxSo"&I%=*bL'̲axŽ {D4!_(JLȁ$΁M9™@.hD3l#Kup%0FE` # hY3 G\ D sIQ'(:*ĀqD%$H9r035)#C 〲gDMˁu0 ei8K:< $i(&92aEbcВF#Ni6C@ Ubਪ!&f٧0 0@92pDncwMфKEȀ:F#R4FÀ= ( ltH~Fնa41' +c`NGhI,FX֘SlZdvLZ3O!fٞrJU 3iHӐ1HHוgHwD~[U b΂:`@+}2i9KE0 =l"`n QS}71CJrTKQ:Tj`u a4ЊVKCzDV {N$]@@Fc5 $|q=; C04q8ƈY< ``)pysyH*Y KE1L +x0 b9:0CrxeΟx:gnҕ~9S yrZ|婖F&eNĹWH ;s&.K┇ۢR *K,ժd[UjIѵrݕbjWJgY]QoDVY*@j(j-j9o'n_҃J5<"_ZZd> LuzuZsk.m5quΚ kVH^D+U!e-=J\L! +kzw~vx͙'K\F'&J6[Ig=.fR0f:Kj7čeb% +$_NnᄐYWt*jTv9zkCѪYaXVAQT}ZDqzyym6 ;CF=0Ra&1d`sy%E]Aۏ ؏yH+)dʎU. 8y^QOWscoSUxXpWrެƦv u}WjiNF#h,?o`ub*W-6n`.<Ӎh_q*2J=;7Iy+՟>Rb\7ͳ5)f7?!p1Temʧ;RqwfÉ%aN ϲv\mJ/l?0is5Fjk75>UKXx7^>Q[ߩM ..]sZ1p% [IGk_xy| "63Pd18'gߧ|/tI׏_ѿ.endstream +endobj +445 0 obj<>/XObject<<>>>>/Annots 213 0 R>>endobj +446 0 obj<>stream +xuXRJIUpt lؒ#I{N<(IQ}838#$0s& Mj{2I&Sޚ f6f9XLYaRALY*dD;HF4)mMSpkb) +7j 6 gm&Q Èv`CNr.v]5%&uMeH TCk*; fGJTAWzi֔s2_~Zh[c|uߢ j|g:=4IV7~M]$N%y>t/w)wiۻ;6~۠ÓztJO~3s2ݶ7gLܲ;oIг +_u'3ˡG1ݪ-ʚo!BKsYJ疞D>-=BIOkv5>r]Ve4XTRr[4jW]tNO2}趦p5\PXiݲzElEI]xؙr+4Uӊ_]]^2&z= ~0gh<ʡ6Y=x)/7;^ç\0^q.VYGv8Yہ qi6/x,7#b1O "_ޮN>endstream +endobj +447 0 obj<>/XObject<<>>>>/Annots 228 0 R>>endobj +448 0 obj<>stream +xeMs@>f`8M,^rau +"f+~U3t $J1ljO 照_@x!~x{Lmq>#(F7%{Aͱt.j`.צlW`QͩHд礪[6j~:]c5`KX0uQ50=u;tզ*3u˛j*"Nj܏/l]l9?BlP'wP Έ^%ŕx4G~3y7{{0',&R'>/XObject<<>>>>>>endobj +450 0 obj<>stream +xW[S8~W7\P iiADŖ\I&|xᒋtn'FلO)F>M Mggx?\4*ٌV aoTidRj5&#|v0d +73Yl~7t1gUy`͊USYtpԎ̳d)!o.V׋|.dx8爖"_ 2:Sk`u*ODR"P"Zj9e)e{ƊY8@JEc9)ɦx4G ji.pʑ +vma%MsT^d2ڋ pؽ :hO<[wCZ&LhViE!:;m}h|6ܧOJ'̖󓣐N!?A!˩= ;^ab2-3]-ߵ&vhʅyu㡶TmJ[D(Lao\o9cj-tT M #Z~@HƠ +vIAcP#ZqyL6/5\83"(Z"& wE 8Be̊*[CnVd)*us(:އv,e{q&5H1 wqXxCcOdW@5>cJC/ ZW R,^#$^Mi Q%`X1{tg v<b5H8SED1۸%GR6Ѕ 9}}5Qi/N^U}g@047%T)UQgs59J|`\Fw("K+#s*|Ľ8 o=dV+ngzEtq'BPҧ',uϲ7 F$10= Hx3o+>>\\r۟\,b +C{v2B&U : +ti-ߺM-2P41ɺnɎyq"Ul3 +nĴ!( ˜7>|?*uS +g2s{{g +} xN'ɇ%{QAǪ5y} h||vDRЂ١:6)^"<ߊg0I/w`gz +O6ȴ5yD1cL܉T}&h[_%E"${B|5Nd?1,()7[Pav2:YФ2Tch:E_x$:nV@xendstream +endobj +451 0 obj<>/XObject<<>>>>>>endobj +452 0 obj<>stream +xVkOFίHy&a[HV*Qxwfl}ϝC0HՊ8sߓ1oL ]H'dD,t1'`2_{n'û)Ǵk:%h-N\92mΓ"˴|_4"f7_Wy2l&ǣ8=I7 HzF̖|mߊtYT^DR!:mRVnTD6(\zx‰LYGJ}啭{v9iGYS{jNHTEi<'%oȋ tx9IeUU(`l]*>dzXR0'Z +)Ac)m>Q3Ռpػ!pJ`U_hi3e[ 2]).Dhp)YTA#cQd!R L}2t3(ؙL=B +MK,q 7*u8«\AVb^  r8WN4^; G.gnQX~;=,P`ĺ@bo]H\1xu54qr,+ 22(K-=Sv-V;Z|z8yZ 4EBYO‹@gk>)Xо3UJ`P"lN֍,wjJkԚ` ǣQXr/k[x&)R'C:UT*J!讗G- |^vqDTPiHjkγƱ?sq1emg&V;Xqo2G˯kV Hm1:82}F hMpo1^ΧJ=}Gz!3W{z-!@a޶ +A,.OP[Ly_[Ԯh=NSQ*J-`r=Kkxv}ax +za<<&* cbMMvN48LFpYʬ)`XGP򪛃ZF4VŀrC[: bR!j{6`Blve({XY7HGFǑv>:DG,uK -tTU=^::톡`VdqvwZdߚ &DûE{ꊦWtu~"݋t1J)nȯ?Oj>endstream +endobj +453 0 obj<>/XObject<<>>>>>>endobj +454 0 obj<>stream +xuW]o8|ϯطKu^pТ-Q/钔߯R"eݙYɥLRngru#E{2Le~?->T/ϋ_e6E7w(OMqڥOME>[v\W {Nlh͋ry9,NnhQ +V(+A^56oUR^r FjD-jVA7pmq*W9n-5ԍ)jA",uv!e{]k_^k++e }U>iLܞKEIE8fl^!k|dܦ(r+a+_?<|yp̈́!dRaG赗JS ABbUB=cÀaD;k]5ԯeݨX9~Z!b~L6f6M``"*O/'g<(rĉE]תd|ceq]K<{Sj CkT^Î$6;]v  +Ն +nم(:+p 5M$J,u:؋#;Ak/`PNjkBJ}bBk2lE1Ū@_:tDv~sfU]Hx'5Xyo RPMW;9m5U]!x:.*v`%5q4ɂD G"a S(yza{Y5n8F(O%%E|$pay~++'S%푠ԘC[60J hl (2-b6M^gIe +D9{1> ٨iɣfn>sUeR7_K| d"lBBȣ Ȝ.n$pQ^%[CVL i)|U 0"fO:TxNTzpf 8j9%k Ј>_@Qλ d\Oh['p0l;ee!ƨոTTLp2ôhk يIP"K2v|FpcRPx@cZ)n\nMYi5]ġ:{P»Į'6 ƴԃ>)z+LjMJJ>/XObject<<>>>>>>endobj +456 0 obj<>stream +xmWnF}W Xql/"MRXA`X#i#r]Z,DDݹ9sflAs[=s->?0mby]L_Y-ni5|N| ljڲXkZ]1lK*D[NbT!66շn٥X]vS\(5%O`1Q҈"5 &iƆ&QqŻHE;{Kw1B}L"m.^Wn7}vzgV-T&I( `$fpeFĈ{A)ÐN1U}edqL#u0ZCW6JZ`g2 ÆĻm;-.K +.!Z}85&;לKQ@_|&..pmoNhؖ:G'0:0#J`Lܷ8Zˌ"mLL!)%L41F`BўN41q.Ls0GQCU)%D~-/cAelqVh7Vr[L5?:&ps˪bV0aZzwe2q\qq`6'GB2 U(kf>Ѕ#Cu@TDaA7Pl|D6u^Z?w"|gj#Fuߖ_zmIjKU<(H9*1eu™@C~XˡMh߳{p5 +:ԉ)CO7HџRvLeY`34c]&!%Ԃ!g+&P/|E3'@!{gtdD.wsyY|C;pl^^d)$x*v$z30ۨs'KU 1Diendstream +endobj +457 0 obj<>/XObject<<>>>>>>endobj +458 0 obj<>stream +xVkoF_qA$p0oP>)UުR=[{ !ls6Uj 3;^ǧQzC7QҡA㍨?᷏>`MʍC7wv(Xp4 vXZY(dv:Q.rK_76XSV}J;, ;KpZ%jE^2I%%A4RY0Z&l.oo$Ya[{GU+Y߬݁_FPM'^jTV N)7̨̿j=5t7ҴAw>O0ބIiץ4]: xkF9>̂-{E, (ļnA% Ց>_& s,]%/2eIcJҢ)%8ӕ, +<>7`uaFssZL>hNHf+ e:3SXnTdt^sxM +282UC|. +X?D"Mw- +%wd*A|M_LĒ69tq.ۨe{ k?D;'h-a bb{jF׻Ag1 +w$[\{^S=rJCĖtsT&oRm8Fָ:3瘃=]Zi| ㄊi%>Iy %QSJ'uE;g nSѺ\̥ra$V-<; +c,erk6Μ=?}D +RҖ6*yAbS+(FKIlMí;cE8gB.(idb)磫~ sPx?B6uF%_09d|t0v-HeaEEs8,kqg(#A04pqGOژ"<Dq;u+{A+fm>/XObject<<>>>>>>endobj +460 0 obj<>stream +xV]s6|LrƢI}OԓNH#`H}Iv:m-##g?;|UIJ0ZKڭ .߮͝'wgѦlptQ@HPO-båE4X%~9X^ң*urv}?!knjI*!}tKηPZ)(V2vȚVQ)*K-!U>e]L>/q. AC2REmUL%SUP$jYyniF> Z苚:-Vĺ(H~yIڮhMZf%Bv!2U&i[&~}ҜxDX-r@5jǟ~g,ί<iyq/^`qk bDeti4P_,J+zu=O +5dҡa+BUȨ Lh:%tUy~VZm'ٷC";q'jiszlv%mŮnbvu]QǑ<$UH~5U*S!=̴}c۽>,{!^-l4 % +fnt#oٝ1o>]n߸Ի"ϦM7xˁ7-/<@n"Rw ޼JBn1"1SpB@Wl"SJ>Z1[Ә +'n5B]`d/cMsKAJs$ l{klVgu˦,-$#"RŠ8vUi^eq`XJel5fJ ,)ydQ( q3b>d&^a4mH`LDQFaLkl %eP/准N1\p݉Σ% +6y,&EgENZd" ѯ{gpnDԦ*/[u:Pyfϻ t'dVƃ0q` l; r>ti>C`q+FHX6/ə*1L5 +zMdh_7ft~OJ(_=uq)7pKU{O%6vHv o 3f! f? :=A-*q&mn0pq +gI0qgh׳Pendstream +endobj +461 0 obj<>/XObject<<>>>>>>endobj +462 0 obj<>stream +xWkF=ppß)$M8і.a%d5Үo%oV-MbIofgޛ|;ůG3)Eř4/13|1iw1)n\Lά[:v&ZƳ7)(. :ݥEOyI4g0g;='hg\[G^]|\7ehMgN؞åe4X%^f5X} y;b"YiE +:N :CeM!* +$A8,MbEUtbqK,gRR5M{<ɃK NF>RZ[ jnZwV+a¦J)#qoZgfo`GQ:6:#Y?b1pgd>tˉ7$OJ\:eR L<$:Q_?Ž@4ם>t};An?A;-QZ `u͂4Zxr 紁o$D *uG r^f3S|&.Ha|_G(w nC:}!J +/zHz2#2y_JLY +._;VZ|â fTuf[pR51xq$pcоůW_膥ђ>hM1\fӶWw#sl=l=}<_^endstream +endobj +463 0 obj<>/XObject<<>>>>>>endobj +464 0 obj<>stream +xU]O@|ϯ 7NBAD+UuۗH;'Gw&ͿÇU|ݙ͟AJcMh:r;'c:˦x-2N(t}NiFy"\cW֔^[Nxx ˡ,^$Q +M,F;: 5xGR횶9V-TV +#igE}j^УteTU*N ?N9(- +fnTkKX`mhu-6 +}( (KtPYsa*]ǚNiC;Ѐ;M趢mAhyu]/u] [C9 ++d(|I4x2:M1|2lC|;F k7JH6sx9ȱ;) 6bd:v*l#:Alt5Ee[" r~']1n93 +xjZ4Me< (mHp8\5#l*Hݨ < H*1!2dCMW +u` x]=E)mkj6*_<-]r#Q\ yYJ?OY0]z3ӤhY!a(wN&2 5 +h=jAT ,z3E~ܓ2jw/9$~AVJiU6y-9MgY/\^`5>؟Vxvyke$/鄙?0endstream +endobj +465 0 obj<>/XObject<<>>>>/Annots 233 0 R>>endobj +466 0 obj<>stream +x}Wr6}WteVeS2o3^;ij6r "A1pP4@I%^>}iɌoF7tyMe{r^O|𷥋r4O.ok/NwtqN1oniQŭqJJcfimq5i#L`IT{.ڥ(x9]\WH5FR%z8TS-J9rm#lSAuC7t>CeJs-f-QeE-^Rk} QLL.PТxpFDoG{éi9Q#u(^X*dTZ)PxCp1 +lٷ(6JQ25A}Z (K9@"PT~%(RKn+H[P?*aVV&hTf 4%~m솄G;8SOZ +gX>]wr"x=f4'w?≳>BdόzۻRN }Ӌx-vpeʖFL@8sۘX:` i 9'`PI~:pAqcfbliHƂIe =2qGKV),e+Ϟ6Z#ݚ{7%w{F'/eˁ:tCk\ \x6l}Ai:U?:}-]>͞Ԅ}N7Wheo22g|fSԾ.[MQ^7$\߂-&Y9g0=@ q 3*_hUGg[aT Gcz465*N-{Avz k&- Ͻ`Q dM.0Y<T+ݣ$CuoU5<0vxE7YB+2k~Tq>Q#cvdžL_mJEr}`q+EωFFqZB(=j\_ښ HYD\Q'{&I3WFƝS|Iz-p;8lgȧq)}ɧYt# [O0T~T= +_;QL\;|vA?pIh:ro5DNpYu|l܃5ru)SÏuVF?j6~ S + iGPXpofWV%rg䒧{h]Ig{n?❏6 foĿqo)]p6󳫋t_\7׷7gaqT.Fendstream +endobj +467 0 obj<>/XObject<<>>>>>>endobj +468 0 obj<>stream +xmWas8_ߚ%7BN皶7s_2:d'[a:&F}Ő7>O(-.ɀFA2Ǐ_\\pHNiH/+/IL C^$"u.*St̚=\z)iҺL$'a2R&HgIfӗ*5⟋b^ʭt{k$!oxOpPsh8LƇ$?lۨfTQjdWy(G:=I,gd_VZ^'y VIcsGTh_L)s'kK+Ѫui[=KbkUd9cemNr*(" VL^)SQ|ǘIMM*C>*tve7>_-NQ)s2 =jdSZ~dP Wy %e*cc1 }[VL'0 37(ӉPo +y<$gQ,}]fL7ꞃ +:BZuOhmeiiK,>cԚ+nȦ .Od[a!dȖu0v)HpaKIhiiH裯a=,W=>'JN$D[%̖k$y@'p@?SM:SJ[MCѺ4醐ĻٓX e@ -{$N={]|_~m^uDZTFt٨K[-z}6sI9ߠ3(jG_J뽂"Fn&oD0B45]H@1>u>irt@׵:X8"ʳݱLGfUmaQ̨T]0Q̭2 +g::;~PFG-) +bB*e'Vj}9âwԦÏN{r@Q7JȄhə:AJ$܆c-ѱR>prM4x;@dD6AJ7PcU„ !8qF9w3L?,#._TH#~7{)"<'7(Z&7 ;i0z}* '[H +49mb0|W:ꣃ^<),opa%5W hOKlcNK > *JD( >'C5ö]Ƿ5`dG"$j]ѓ;N05}xrtd}, ;vmҫQg`Gðb.@f*-n'aGmfjSC^5`1! s_uܴrn׹%L|0l)'WXDFXmNi# b;I%c˲·aaQg/VPr׌Tl3W3'tO +RG?oj^<%6qP(LxGKg쩅S.uu2<h)4ް|СTʌo #c:(;p1wK%.UMo>~B7%Rx ~]k8M&Nimzϳ=4Lk_7gdncGx:N[|/c~+,endstream +endobj +469 0 obj<>/XObject<<>>>>>>endobj +470 0 obj<>stream +x}WnF}W m]l)}k5&h-?0`,ɥ5pIrZ4E"r9s\ɜ.ߜ Z^SR\FthY _kN>oO.n?Ⓐ>^oh_IrvXѝmtmU?lu8>[>8UߔM cwb]mnI4Q4Vתv^GA+h*+ᏱzOYkE/p|~F2Y@aA`L8a7`6>exN‹oʶh,>4XwǰCGؤ:39$*) XeA:3C#bx2doVᡇUm^mAe=ߝ)' ɰzH C\Q= b r\(<6 +}{wO5UCj4Vql~-7+t"T ,6l9EF7='] M?ƒn-'f (b,yQvZxGf}\*p~Oӑlc 4N/ t٢Q䙸F.]+i]wB0-sO[F*,lq56[$_wsz6,f|ABS = *'ꇛn.k/:4gqE(NE[Yo"gRZ(G@~Y@0YK{S#c􋡉RB$7p%2&snok~͜ś >t@+`iihݨCOe)I G0dza$On[^~^d6b;?qzdX]-KwTrk +9䎝 ֦^R/(-jO4x{(SH5 +IQU^9c^B򌫈ÄZǏ?>c'X`POza戻ѯhYe2 Ҿ 80miqC Hu8! >AdDOSLljdq"z% g )>=+ %`8vQ%6$l" BO畳)`\xݝ&v PDN/#OA }wU+ $[hcL%QűxqG.a6 +GfEaa~03ce&~9\\]ג&_WM QfPM-cm;&n,/Qy#$Kȡc_h$i>/XObject<<>>>>>>endobj +472 0 obj<>stream +xU_o0S2*5n$}8$1䋞| ͂ea,n[Ҩ}T X::aGG&,jœa;\p9ګwy琕N8M +}aU(+VDh|cT3Vo,Zp_0`+\g?zmB3~_ n%x0"z+r] +k.PjSӧ8RuVIA&rBXlXJ@YfW$(*|\|:ܜXL@$m@#AK|CѧIڔL[m +B]-PK[9D. E9sJh[磁ļA >^:8ޜ ߩ?B ++v 0~ΖOSՔI0vrsi=T$O2A]AHq;y]Z(k$n"L86p5;DQ}%D:C=H:G;0'4K˞'٥%^D/mϝgIǓ!tѫx<5k^6txO^]i%Kts5z_z endstream +endobj +473 0 obj<>/XObject<<>>>>>>endobj +474 0 obj<>stream +xVMs6W${LFI'mZĩk=iU@H$ }vPRPќ1%qg)!NL*;:ND0pT4=#2ElaO1P䏷 ˞1]/RӢ IAiiQ?gQWol)&/Liqݑ^s֭Ҵ B/ϩ+K5,$+ij + A赐p#Zsw1{Q`~[q:'>Ortt[0n{%\L&7f5$qh/1yAA*CX:z^*MB{5 +7bWkgIf*xΚHcCb-:xE+]DΝ^Ij?z +V>YKBVjf%K{6L?!\ +rhܠv]nPlR[/>h$j8]Ѣ.Kl׏hŵ`yͷp^xp7&F,G舴Qԗ9RC+zӚc^ @2=9f1f2q3D냀F-0m@[a'#NӏյCCP +&L'#zF?ϼn7G"L^:FS_bqioClyq> endstream +endobj +475 0 obj<>/XObject<<>>>>>>endobj +476 0 obj<>stream +xWnF}W RIVtɛ6$HcE \Z*|}셢mĠ9s oB)).ɘnW+-;ZRo߿\x3Ʉ61_.hi]e,?zz _L4TԇzbLm2Wu.ҍ1ʶWeI$+٭f+ik-ss+L"qH#eB{4}IU2gܸJQD-* )0;9}l1K%:;~,7^ ٦cendstream +endobj +477 0 obj<>/XObject<<>>>>>>endobj +478 0 obj<>stream +xTMo@+ ,|bNSEr#U%uwɯ,PT)2ڵg{c `@ 8)#h[],$cP@aE5ۨjE ^('F.Ǐ BB-cu_^NL5Jk(_`\P 7.VȝJI@g:'6-l;H b6$?}9 q[NXۡ\B/I%jSiT~=c;]/\U^Z:ZhTש&LziI)֚ʞfGa[P+Y'9 XE<j<]Sב\4-XE>nvc/$qo1'OZ8J#dUMҰ}NS 6<9ngor$4blCGܼ |+b }Irh /XB6J﹛>gEX,[ﲳ"XC>/XObject<<>>>>>>endobj +480 0 obj<>stream +xVMo6W Ѓm`+v] 5Cuef#^Nf(Yڴ 9͛G~Pi4}ݏ!gSҴQڃٌiRO 1NI: Fx+9>^}p2|)Mޝo4rήhe +ݛ{Ӹ!q eI\٪b 4 t (  +AxV.%9K +c5-l) P\U[ɭdG0as;B!r0>%A5RH늲VUi>b(Nұ-}S$XFPbOߪ\=A`oğ,Bx&lHy]$w(qyvvIެ-@w~_:Y42_:a6Z-s^!V[vLRTT0:w=93`G )rɴ++"I4;Y](޸2^a첀 +[^yhUTk0uRG +\ +MFՁt*+kl*~r,-xO" ^n /؝[tNJ{sdt"[ .yZs)bq4/fUDRQ +DB::i "S2ę+ӷnO]6iAKRAtALgݬGu֔ !![n~R e(QDLBj@ 2Q/,QcqsqkS:UEKN?G=+6jDJ7IbxyS [$<æjrWn1|4@0EtgFrcGx41!y[]}BS +L!,媪Zk'*{6^Dy--ҥ{ˋܵ gC]Gc{Ҏ!PS&.qmΞ6zgt8ʸ=9ͩJX^TА|y y| 7[71Ԋ_ 򛟱I2>!6Ŧi!G;SY4Mhɺ٤3|P`a +N(:$!{?`n{:ޡ8 +ΪC着gK*A\|ntf  A]:(?RCOGőbifY\W7 :nI[VII{*ݮ`O;7GA hV]@#\#MV<Wt^137endstream +endobj +481 0 obj<>/XObject<<>>>>>>endobj +482 0 obj<>stream +xV[oF~W7 MMJ٬VK+UK3C=&lx d7*(wsߝ||JBbJ7(}J.4 ^ЈFC/r> 7'A%h̆ChP'co؜6w`O7m0|`k0? Pd"QBq$=Qz%j\$L6KkJM jK>u\+eYsU64Vʲ&QBsOxWǧ> (+Z)J٣uBm*Tʹ`lzեFST8+{4=S-(U3UzB#1p UƈPHkYiH,U%J墼3p9U ) +MV螨28y4R2 + "A \y!X՘$`?nN[]!g%n*b˷Vç1{(>:g_(R18:{oxS4XыN9rM|߁I (Tdy.rT  T 1{iB)b%e5AtUfU)&5h֛u58CĚI UR;(-O˧)+`UHB@k~=h WR̛Hsy0d1ӽN9!(%A+гEbvLSDI<&7 +55V P})>--E5KㆴZQ`[O7 +̠Þo Pq ÀQK'Ca|̳AG.fR@c` _vTvDXEÿoOOwM`g/]~.ݹS61:cKvZ-K7/ cVʟv/HG7l:KE?pBY/d}CEKpޡ͚UV0 +lOWμ7a5 :g]Y2謭Rn$}ue~xd!7`yxLq2ȔsE\yAZ?KYOA2o,9||, endstream +endobj +483 0 obj<>/XObject<<>>>>>>endobj +484 0 obj<>stream +xmSR0+F`cCzf:rQd9QkK=%Lfl}O RT7JD"F/./S1|F79U ŬDU +YN|;h:Ѹu/j?wp=:G[N*i^V?G#z ;Nҩx@&bSkLcm5vU// m 茕a_6u]@Lٴ"j]y<0Wӣ s]y&5 ,Tq~:YczΠ›5 g#;E7hI7ˋMX3>HXQՆ@d9,dyϤ~ҋ+4gIvI"rC/ +Y"3Ҙ<璸 + W6fƴUJL`;7@Rt^ yIΩ;{… Emvgc,OcJ^0V}`h GdQE(5+JJ:*ߏ=;|Bi9un1W[ +mmPpvR&W3/sQ÷qu5> %2endstream +endobj +485 0 obj<>/XObject<<>>>>>>endobj +486 0 obj<>stream +x}WnF|W([lh 4A hvȥ1ew9J +q=9{t&w&rq%Est:?Wo7rys?Xř>xp'9? +o9œO}׊ϭ{|W_p?)/pRC+zX(1W>$)}7MVXQo +-D*x7r;qMW[7*艘Vxq m -O* dIcM1m$;xŷt5$JJ#Vf_.Dlj5&ז~eϧ%E_eYJgX{0F[)Vlx$K+]|X^6Qwl0[dI%z'R/2w|$e 9 +4Pf );SCIrA/"NF+1۬‡!9q1P 2SĆ!XAjPA+ZΗC̠ ӱ*J_L|:5w1D;Ţ4w7҃MG_$,_5@+҂q](ؼHDb"ґ(hz~ussmZF+17/_悸zWQ%hm}\- ߔofh"eU(C3'd2E:fJDy63½/Ghda .#2Klr`k.>)apkQnxr%5X +t0R.^T>q3Fd9hl v,W[ ЫP&k$N^ǯŒi 6_ڳ|F43O\D+jt+)Ha~ hLvOX"dgt7 +Nr77;;_}ח|*C>><u9endstream +endobj +487 0 obj<>/XObject<<>>>>>>endobj +488 0 obj<>stream +x}W]O8}W\̪Za(+$>fh$8g;c;-{n]!Mq<)~F4ٔtxJNg;ƯT/&/Fpjqpr3шLg NOi-J ^jZj< OR(Y|Q HL72+jtFT*Qx0 ar*[A*TiGg1$5Z8%BC>}rsA#QM2}o}:xq^-=_Q4SSeKi/R/lbՐnkIƒʥMErKyLX> 3%R +5zKp&cH5jZ9)ϏO/w_Dϛ]m<[ 0e~ !:EݖEhDEF%4ը=|2 UPk9gRzSY7SF2tzR–2[KڨP"Lܒx<<K!ٚ-)fR1+ +T/e\6ub7Ȑpo]b>* 8) *vV'VccJT^¶V.oL/<,Zf맏 u̸`&sۄY%Cis.aʐlm2@3b߫Yo@Ft."љ@rLHlu`*TR zӷIU0ڂv9$RjC2)([fMۖ]{ܳ=h\26Y$SB+BO߾,n U;{?2wg3NppTkOb 1 &gIV,@ՠmzP0AMHBGN"⁖V?djO֦浑E GrPzcK2lB_Pc ٵhBtmJ|Ao$Hn}-j :@VFԱ )dL7&M2Z34Qt v@wCb `u2Jot %I+xaAx:PV[,=k,\*pR*Q8[;~-60bo)Gq#gAvݫaζ+>d(2p$cv$6j§e=?|a>v=k|mOc~BVE~YBDގ|i] +;^b>c6%-kCwJ/PL])^qD9`Jpdya^Xbܜ/pzq꒮y=oIqwxvz;d6Φxûx拃?yendstream +endobj +489 0 obj<>/XObject<<>>>>>>endobj +490 0 obj<>stream +x}WMs8 W`|i:3Gv4K.DYl(R8_dJvP$<<WQG\.ЦԜ!!@)n|ʌpW1gS[Z''K̒ Mp ܒC,e }uxuHqhqx{FL ^S.J+) q9)na5΂1YDjZ,N\RD)aw̖T(<5WQ#P8F UнOȓ4\]g3\[tg,aJs8v@88TuIՍy6>{aog +Ik\{9I\oF\t!&ƍGzqED_ 5(>Xj&p! SzCOqqwK{vBy٨T)3wZ@#T;Wƃ\]t1;|_r6w0pX\E_YV8 -Py*IPW+OR.e (k٩'Xĺ㰝K*afa\OiOW + N)3Y~3d!'.NYq q Q6H. ?[Ts)aX;p BT{>64ݽR1" a7(Nc;$7yBqQW "MV'éZϠk,&]E_ HAPku!PDaH(8p|i]W.I}#@VT\d(xfɞv^ MiUÉrII923* 0`885/U@7#ApSyb/9aYoN >>мM{ߘ +J`rwւ6z6d4A@iPѺK6G+5Y/D12Ҍ$3N"jo@h̅&< Lݑ~A͠G5ߔZ \N͝Ų6fwV!C9:y D@Q[L%eWL_%0b%‹"aUxȤїwwq3vB.<;}=,LHͭY$f4{~Bܰ}1p @BmR " +j/c܅܃u. Wy޵!(2J02b2[9*~j w'HiN_IA4:π>/XObject<<>>>>>>endobj +492 0 obj<>stream +xeT]o@|Wxi"1_TH!UWC^:rs }猝TTdvggfg,(GhJq-iL<2ttSSZbPZҧSJ _1iH՘V^"xrm gLI[R?%°_>*]GS7 0BRQ-y:ֲmțş$ƛܨ+:T2H.h:eG)ꖄ.p D=NPc({"*H8Ȥ^aUѷu 7o"5|B+2MGxرݳ #JU b]5Im^e$sӊ +0wtAe˻"@pzEY> Yp g`dAdHՍ0-0$Hڣk]A`d-ޥ`E5ΔOցDTa~L]Ѝl5{ZKH+LIWA<yb܀N$s,[i<=[۠hDPyz8G;q,|kyJvƸnc͏q`.PqPHraTO H.}2ZV/mD!wLWaS+€>/XObject<<>>>>>>endobj +494 0 obj<>stream +xWnF}WL+Hl)i@_ژew=\B}h.LΜ9sfٌ;.)ϦjE/S&KZx?[+8) Ooi>u9d%9QyYS&ʽ^?{iAYws2_%s7Q*ItUt1[rC'Fü$.ǑdZOۍ%F 㰯X1  A +=6RX?TA;Ӓ@9ƚTՎa7 +/h~~,8_2"]TžHͣZ< həVc:8'̇8JzvG:nҹn5Wc*IB{Q7Z=Ŋ CDBqGA2SK*fP֫JY{fBހ6Zycc~ijɔVԌiAEOZ +GTL۲τF+gP֪q`*.5;$(/.ViLW. >dx:98dа)֨Jx暆_ܐ+kȒ>#sUQH+րEGϺˡYhh…}m]ohw)~9CF_t?R: T*w@˼ H w>qF'0vʢ5jq:Bj ׎{q?ijkfΒFh1 ;rrR  \pv 厎 6z(mrx +7Њ~HN.:\gnfoZe)8 4.!#`ĩ8@('OΛOWQG}C]Q'?8*MtQ0Ɇ`"d3:B"<5G! +F13\aKJ#QiէSdN6B.'E摦hk?a*ŨJ2t>#UYΡ v wǎYxZ?8 M*ZbZ7H1iRhgn*pD(ۯQcٞX!Qneal~:QJ"7uS1p +%2ҷP,*O +B+_'\OGhEo_6Iqfa'J8nck`a-Z b1ۨ*AnTj9Мa+i,{nXּb9JQ^cSW]fV/WWU_zEW.>:_g \eendstream +endobj +495 0 obj<>/XObject<<>>>>>>endobj +496 0 obj<>stream +xU]o6|XbR(.9h61p(`ŭ"UYJR`@_\rӪ%Uh%_3^fYNrb-3m;!v\fC,Sz4SzrE:Ѻيi:RV1julRjGʞt$Y*UFxTk3=n)gicNf4ϳǕjc'I>DnPΘ' SMzl.{mN` nm#ֳ`P–=+_m],w&ŶqB@}zK/1#;QE2XVlմHoPW5X}I -v6 htK;יz +`GȪ;zƹt_<8Z0m%]ZzfF#n͡`g}ד3N5$ HϪQi*ͼigRB&lgu*Whi-Mc0h XYۈ>Ht0kzIM4:]oK(.ztqud2\ QFqA5O껡셌m #{k*bY~;9??<%1st}=yl5׏Cu<ߔ?ߔ]@bȀĺCH>AC]4{V$.8gt'aqYʆp0G J[9﹊89zzSlyqAyE:.8@ Fkdf44E &WlĿ|^~ endstream +endobj +497 0 obj<>/XObject<<>>>>/Annots 246 0 R>>endobj +498 0 obj<>stream +xWmOFίˁD8B5*ǥ$H$[]:/}f \_@;;/<3zP {PVt.~8HNO. =.!D)S4z|6Eiw;p p,!Fg N{nt>gB>; d z0$LUhD) +M7t[?Ȩ5 9 ' +Hs*-$d!3Opt"g/DyiM]/xhv5^饛!|/h҆&-Rxc7dej Jz +dB!kN\=À6V~Bf'ңˬJ2$S/k&kJ!x!)9t'}it$dD_LhS +Cz`#z"[۠BcN2y5[T͞\f +zvçc*UsvͬN +UI^}JptM8ɞQH֐*WB6^  o"qHJeB=Ȑ* d֌kQ\΄ T*BB- ia@YDmIq ~f77K+*q%vo[G{N.ғMI5Mf +2=oXZFfU~i j) +(SpQ8Ab18аhND #ҳ-}Z/ѯ"4D&x2Ɵ/߮](ݳۋEo?bk>Zػ;;v pҵ;4Z*ISCPu52vgKI˅I@'0 EQ=c(01M\"Fn[W+~W+ |b7,5p kɧ-gl$*f;B,0F#뼿wBoAn8S_,h?|q>~ή +[fTzK|*3z>*owkcN4!<{j۽;WydI=0v0]AXz0`W[{0,W%pD +HfݫgG.mWmyD͌Z p'󹱊7.^4]NhUi?- {jCȵMj6]3sR1VR+JFN>}*z5P\P)1RXDx-"^'}TXȐGeY E# %JSɛPzHrGQUPt?~CӅmʵ[n(1? +wPح$" 5s~FFf퇰/EY[)ufM +YFo^\~99-endstream +endobj +499 0 obj<>/XObject<<>>>>>>endobj +500 0 obj<>stream +xWMs8WtNc'SJS{X"[$@;_ABR,@w~! oHgWt@|2mYx6I>>}pH>[i, ή{&2O%+S[mוjKqT(xG%6MVN~\q +.ͯ)oLt$Kbr]ʙɩq,v^=RVX l8JvX-ܰcT󃓹k_ц)gY +>LE4oml@/. YI;3 +*?(wNA҉294^3Yݙ=ԾYU@* ޮؾ}R|X%7IEv%L +ciݙZ?d)vl$-2Eev P-ɱsB> 6}? }.0epP5?>w0N[?}Yn)M)Ӆ qԩd<¾EƮ@Nڪ +u>_ :czR +U|Uꕟ?f`6sMAno{;YqMw@ HhtJLG2uL(aӅ> @#r_tDEr 7=LيRPQDorvEe&W >+`[>EԄ;mP(85&SVpm5/kn,[@"QOT*o2 =KF @[jQM^9jYk!`6K :dDɜd>V^$[ydзHX|;ZD2qUiY8C:LN>Ruʊd@'PH HXC>kK )*- +yl37MqeZGLG-g1N ^<@<|=om?qX< +?z\9-}7O4zBz-fʖyX~բ J2&9JTSt,z*&d8',/4-IBjus4troZ.+s 4[z6h8Gjd[nr + hA]Ǥpٲr)< м }@nC(;f(Ln `%Bp|I4TR<ߵpAq1." "(>3Gი fYpH~߳Jl9!*np{Q(?lNP\ycZ*iqYk*_(獰U#!J[Z>\}C7Itu I!L9! 5k +"M,T!{AZCQ֪.Z +B!i`"i^(yt9L[̩X2$wWR(ft0*L#3`% pHctUa_ +diX.'tG*!}7]GF4t<] `1qp靑+:vP 9f^;A"'[. Rm0XFU[RP8u]O1I>ċo8fq:[k jHPp`)f|gEo ]_ƴendstream +endobj +501 0 obj<>/XObject<<>>>>>>endobj +502 0 obj<>stream +xn1yL#6[$Ԥ)l{[mܰ?Uڧx UH9G$%$ 9f5 +VC!RqOe / vŹE!Pȳ)n4fSA8Tʶ˦dޣV76 +jk: ])̀ /aB=ʺ D9${Y*a'93TqU|c.58;__y0H80^u8fpMÁ}}wҜy,\|2Ovrz3¥mȰԒ6į1˳47)Cї=}Cendstream +endobj +503 0 obj<>/XObject<<>>>>>>endobj +504 0 obj<>stream +xUQS@~ϯGNl`_89H{LSI.~ݷ{G\($ȱ)a.~% +^o5 PCm+@HO {_"}6B ʰ=8Dm4<0K\jVG+\XrN'4ŒB + <łdžHʜ RLQ[h;W4/x)lGvRXö5 kjhy6ԩ_Qw:0L`r}0NclQZ.%;QsۚeE\ZqW3e$j["|؏nXJ̕K-]O'_vM_ja˵l>b`16oy7nX6 1?8 {fb^%Oi"AXZ36WͼYʄminjS_F_1Cendstream +endobj +505 0 obj<>/XObject<<>>>>>>endobj +506 0 obj<>stream +xUQo0~W#, At+SNU +1u-iK'9mDžl9ul0~Yi;&/C_֗o]p]g蝄 г@L)za hΠCW'' G#Hq*_v+d=]@ktàYj)2*m'tܮ`6)(=yax& I<{/)U9{ka^w!bѨ 0j?KWSY&X,$$->/XObject<<>>>>>>endobj +508 0 obj<>stream +xVn@sR׆DB"ڬx[KkH!(UQ߼y.6ՆЃN|h-: ڣwscc0p_DmjtCbƭD9RI + I&;4DikPHUM.Rd1d|*,(ؤHF vFqSXpfvʅI]B%.e "6$Vc@v#tpqEԸ >*3b ,LA7e6*VםyxDiVKX׽׭(\oj>kjɄ*)rZ.8[Ueƥh>QХ8VͼwԈ0Mզ9;9XoUȧIԓ + '>* ( +֝Z4$dXߣN[sJ[{zLnk) B3 dVL- +$[ؼJFlv>/XObject<<>>>>>>endobj +510 0 obj<>stream +xVQo0~WcMB^RC;!15S)&/4P$wO-,w[V϶~;H|[pڽqN.`,Љ!Xb8#*YI#h3Pqu]8+"_ź[c +sku U(͖JE(W`>\N|f 4iȌL7;q5Л>zpW\UX@Ҕ'@4OS A) <2\"݀XfVӡ$YD4 a'ͪ2'emx`d y*{P3}Tg*Zh|$\ ])C, N*$<{J?-*Z$_n7Fq"ex~xֶӷdwD}2\?Եendstream +endobj +511 0 obj<>/XObject<<>>>>>>endobj +512 0 obj<>stream +xU[O0~8o+rk.a +h7 R&N뭉;;UASѪ;g 6>$y2-D^VBa \1tQkk!.SX<Î6 N qaqQ->&3 N~dg:׿+؂<'%< KVHȒwЍEpBS"\_NG %a8TkKW1WIY z{8p ǯqƼGTV9-\Pzt+ 4ER ՊK.אq Q;%)΃/$ u "7"Ƿw9J!N?cgu'K$1jE5cTjA(NF÷s(8J9ӫnاX`uBcߍ.;bއ"Y,,+ZX6\!& ]]|LJ@nCJZ_0[n6"nnTm!(hF-min5=UQ)OL2DReozEcj(P:| zU6AN~ <E0*;hK#1_.Ǐ$6cӏ" A3|Na _Q! X+pN3H `]ޗ_Uendstream +endobj +513 0 obj<>/XObject<<>>>>>>endobj +514 0 obj<>stream +xVMo@+Vծm\%"i9@`z xװޥ?bUμώ \=v p? +񿇏bV/zQώv_ĝw.)bQ1qt<2xEKTr_?Cn!iL (O$ebKF(SFx%!s?hph>ZkFtv%ڋlw?ì"!c,"(|0KL].ڊƛqxD eN3[O/BLpļe@04onpZfL,~8<,T&E߆h*R+%uD_c^M2M&knv*lS :fͧۇW3ɅPz}}ci'hHYdLFr%1UWT5Ӛ#אJe¶ax8=|Z9cN i +gxì(dDgzLdIr^ 5YÕ, gޟ0Ϊu2'ulկLypmς+%FcQ]߳~ \5 (׸siՌFU:*Ԩ"1bՒC?H;_;82t'endstream +endobj +515 0 obj<>/XObject<<>>>>>>endobj +516 0 obj<>stream +xo0+m$PVXj%쥚P?w&VxB9 _!M% /aAF|߇Oӯ'F(\bC0I -d[ +B +JKW9a<,oRPeNΕ#$9 +64WTBtq&R<7XYr~&p" +\SKSxZ0+A9xsW.:AábU~ѝKQg;!oȓzMSj՜݈9Ow$yg~sB ^4UFIsnɱY-|w!ʅbDhooR6U4QN?OY<Ƕ:\|0UFf/$RPW2 +;*`G;O:؎[K)G;fs`^&"n p<ƙc?J̮n![ZJKO۩c)l/ڿ)hEa ~v(If$endstream +endobj +517 0 obj<>/XObject<<>>>>>>endobj +518 0 obj<>stream +xUS@~_)W>F<5b_prGڿ{@Иap}< ll`\' >8-| +i}la8t=@ a,.G;ó)Z\*<)4څT3V]^'6OΦtzNf'\(V$ܳvS"Pf 6c>AӲrGbťytˀ%m!G||c`&@לNS'<+!!/j<.1=kU%ZدcΏ +cJkqLf' XVEhmjAS"Ж[W?گl Fж62~ɴ/Hd\e ,yG7mR(Xw bizC_IȕLX{yEF뭜,dxc+5&N\fR(T8\p5Òg~e:M !(Wi*MYIj|" {> ) ^Y.п`lFEzOrM.Eh~c7H`5pJ{I= ATQŪ*Xv}l\v?41endstream +endobj +519 0 obj<>/XObject<<>>>>>>endobj +520 0 obj<>stream +xV]8}ϯ]f !hd3jU![Sck>Cn6QPB=>&,B~1vfydr + dLpa?ܭB/aXrl^a-R|8eEGb9/(Rx,)d%{hg&W&$=$@I1LeDI:BQŀ1t*=v.3ď8](5 =ݸKԔBt"$%!Ѳu.[MUتU}aӪb OTҏm|j"?R#XnGK~VZ԰OF>:NV7|6oUvd -^&H${NFu^ +߮kV(j['E0xAȁ`L>/XObject<<>>>>>>endobj +522 0 obj<>stream +xVaOHίN$|BJB^öή]_ovr!T̼y3{>;$Em8У$iAM3B8iz?ѹN#I*%--DCf0(M#` Fvҍ:yxfmr~sd49__ׇaH,6靤}%H +oXH'+@Od~cdףy;Tߦ.7Fe;bytˡJ43sOWAB|7zK%{,%ݎQd͎uRX`ĺ{ZjIp PzUj2Iodd֢׳pL͑]S,wiY1[mWk]Q[ +wE^A]]ҝǔ r*V..'ɰVƠ1*y^j:ʤu!Z _RrۏCd@Rs]l9%>+dpNpzBz9NDxa2)!, ֛l6Mg#f`5`8f25 J<|V]U!UQMǔR`pGJg(Ze`R$Ģ,dZ󉋖wSoG2kyeQ*$5J+{'3?C܊c=t)Һ'kF)ހ Wămi~na+hI?s`^[Tg‰u`8y +}R}Ruhha@[Z/?o[< B`s)4;caɈÄyB(MC;;B>˳tȩG4*rSpI +E(e?6 Yfex0\ ^w0>ҖF[\X~ԅŅ,<%.d_=RTٓ oGs} n9nk[ (џ5"kQ|`lR:W찬\q) KfvByiLq(8|,QX +Xv2s&Ec| `Xesm V`cpӢ9"ju'?zo|zܾ0lD2Fc4ޓ:KYq'F\{u=y]6koЋ! r>=rÔendstream +endobj +523 0 obj<>/XObject<<>>>>>>endobj +524 0 obj<>stream +xV]oH}Wܭ!j_|OIZ[`4f }ό1E4+518s )'~DqU'vRP7!%>T6:63I; {> (.FBi󊘤U/ÏJдb9'SYrOo'dj -xcB>Ն/ϝ0#侨JPVr<ß *[0UE0A-&574a+yif'9[xK[maRdCTIql,xmz:Fj6-YYYinlL/1,iA(ͰoQA ?<pmIaj%$*i>w9IpAE0szuB'VNs.IWT +J6ւ4 $ȋ(@| i_\endstream +endobj +525 0 obj<>/XObject<<>>>>>>endobj +526 0 obj<>stream +xUˎ0- yHi lU6_6Cb13 $.QEuoBH#$PvNtڹ*ABQ"R(* te]+ԗw*2EnZ}0YWLz`^7)"ܛ{jw\ p&*Ќ6}[+? HuCy4bVj%cmEDE{Jֶ+þ81]6 ,&Yd>}<ٞ0Xhm<9p#ezt#=`YxhR +??ZiYZ.VHN4:J&Jl'N94}Q]R{p9 =܎4m^m+DxRao,ڢ4I)w^R8PՒp}kNÛ O(#s|޾ V8(x=RKܔ&}dZ7fe|t~endstream +endobj +527 0 obj<>/XObject<<>>>>>>endobj +528 0 obj<>stream +xVےF}+ujQftaMaSή\~SAY3%_K1 >}f80|sH|bbE>~z>_0KiEΖ[}90=?8qf pi)"4NY(~Y+mBwm5,&"{nگʗVy~F؏\}-Q.ۦpgyd٫ڂ]銽ӻ C`l;uy(h 0+Og栚u/&_Tr0ۮ}wG;l1vPltы_PrYfiV#3FVe==Y^c˵Yb?D&OEϡ(U!5uI4 h^9aN" zUKl]CN5y, 7737v@|1}cT_LۈZZE$ +xz{4[T{XɍjjnȬ$6`Z.Q;]SД~7ِ7 B؏<( +r˙:?6q:Li"OByۭs1b +|w{][!?~<)QӔ@&6 8v$";=GnU:"QA-6Jrz/b,+%e#0|EfYk`y]W Y-~5Ǵv=*-sD/FQr(u=K]jںtNwB@L<D@Ժ͖$ZH.vݡJ.t5x!؜Ey1x_9frA[^Ԯ;k ĉ8"x>̦p6j;>/XObject<<>>>>>>endobj +530 0 obj<>stream +xVr@ :L6qlstB9$2=Ngepk{%|}%&t|j$=w ԇ(8}Ά=+8ҁ8FΛ.LLb ǁI5 bPL@ #Va] "{k 3wӣiYӣ/rWN{{{y= ;[7[$ȱ0P8N H mj 1c3mLJ>no.`DD،My(bG.Ew R&հM+2:A:F$q+Q\Rڂw;>/XObject<<>>>>>>endobj +532 0 obj<>stream +xVr6}W8/rRK))}حx&Q\3-Ids ]VTX )sHCJG 0s2sl>[?=q=ᐢ Aٔ (Jz?\Sɭ'?2i p<aWOP,(,RYX* +I$b-)U\eTaD"Eꮕz)u|c͛X}6:+i^՟:Л}XD>/XObject<<>>>>>>endobj +534 0 obj<>stream +xUQo@~WL{IoZmIkm{hr KZͮpjm59ٝoM_>˖m^/{~%Bjz||>Z8D{D mCO3u2n&'o +u\(= +/!#k]a8D% +&l L }oI #IPl'2 +>䙜 h0@ 9Es;*ԂJ"PrU(X0)DHӚe +¸.޲Hʃ撕E|bAeNIaN6ql<$!W2 *W>hh9VSg6zelv]ᷳf>/XObject<<>>>>>>endobj +536 0 obj<>stream +xU[o0~WiӗucjtOHI%]HhB-FD;Lz8LY>-z C|mtڂ r9 ^0UѱZ!sfuX zu>tV/ARo5!W=-0"KatGpޘOa¢6ȓ !9LDT4eQADgiKP~fhЬ:nm + mT)"(ƺpp]Z$9UE U!(0D9Ac-JZ +Yr(rM0Vͷa7u$߄DUn, i @V,l$}QaA>-ޚ3!%9iy%NXE,u䅤PHϕMv?}: [ʵC"0}6ߗ*O#Ubo/9*Fk'Ya'Bݭ aP^,v!~I( 9uZRb!#-=e '#H fG3 6\. +Y\zկt~{j%h#}fy>]Zl[I ,%|Ҥ~ $ɒ׺;'vHN}:߻!endstream +endobj +537 0 obj<>/XObject<<>>>>>>endobj +538 0 obj<>stream +xTMo0 W=e{-6];k;̠)!-HQ/+K0`###E +YjAΫQkVC@iO2ʝ +-N +zES%}4@1]-p Zj9 ,F}b㴠>v| +O>/XObject<<>>>>>>endobj +540 0 obj<>stream +xUn@s$Ux ئ7R@ N/I=(nmDؐ8$(,$Ͼ}E׆aڲL f6t=m &1;43ptgGӋ>0P9 ~Ȳ39$)CgQt>n'ZJ$&\b9Op wA%7 I/ +.oNtC-,P"#HYA +C1TpZkOx_ SBT7H)JDA{0w* +1p[$jJKmTڪ{5L8/T5 ?5QYCXÈERV(kL3q\?!{ M+ +[ʫq8\zGJmְ.̹mV;i`ɺ΁9\r)S l`i1pag:>87|py6!>`s8[6pz~7nP횮-B:[?[endstream +endobj +541 0 obj<>/XObject<<>>>>>>endobj +542 0 obj<>stream +xV]o@|ϯX!Zv J1E^7ν ]6.4mA$ssc_\pBA;xrlc{wBG"f;r텓1.D)aq NBUFߨ,.`67~N\,M$`4B!,^Ò$&[a8XZ#/e꿣|RDՊ`X|؇E(V +;|Qh`B.wj*=%_6YKB e| d\L SⲒj֋^gcSTya:>?$ OG8;3{b qg{{?Op54 ($bu<>/XObject<<>>>>>>endobj +544 0 obj<>stream +xUMo8W CR%ّܦ]H^,jd+.IECrbq + Kz >)L3׃$N<9LfSW#`|>g$?~#M8;v1xai +), + I >RH4P* 6b#J+ʭ+zAl^Wsdg,X]\μwOYGb$d=>vpQ_̘V邞i95\a_)8gp捭 ;Q>ӁwJZPwRJ':(s(ovuӵH5L[lrx4& 5 53s`Zߚh:ѐם +VL$FVLHbj[ N +)i1s.sOca %,jCZ˳! 9!dg!¡!aFP3*`LP6& e(~~Tk` +Xݲ][(Qz+r(b R1הہW@Խ}8%ftG/_u䡑͚85ez=@$hO5|]|{ v\:T`gƷO!_lCFI>?,EOђvHD('R0 h.2/-dXXιun +m(2qnh7}4}jg+:nI.G;DCsڭC\~@iFPGqO90.=qي@ zɜ+FJYYK8.kEkK9-irv$3j1RVrendstream +endobj +545 0 obj<>/XObject<<>>>>>>endobj +546 0 obj<>stream +xVn@}+1Qc6Ę)wEJЧ61]g/Pk!E};3s "zOu04g/gBoPGQzHn8醽]sO'E +q M>rTF|F| Kiafæ 0^(LYm tTJ>'3.aQVPѷNA JaOtrfJ)f|Fb{dL?9;mklA6ϯo/n.n 5)x +JX.E![Fd_R(y)`$􂇥UXPaʸn ߟPX-ݪ4[(\n2bc wI}vMo9,B!ND9nqjnи]êgWը6Pj6jE^ +"瘏 iɥX%ht`eeiY1r!L&) q1 ` rnjauC)pAcP5r'!jYLeM*}KFcUȩJM[I6DcY> 3`cV +'9O +RnLqC +祴ZE ߍ9ÀQ+9([(9¨{cߔD7;oHg|z}3I>i5B[cvF6͟˒XlX]#SDf?$go;SQ6U&ì݇q? <<~r g8JH\ZZ(X )5zk#~ѕ<u>v~'&endstream +endobj +547 0 obj<>/XObject<<>>>>>>endobj +548 0 obj<>stream +xUMo@Wѩ0^p{6R1)%Y NҪ3 $qC{,ey3of a! \8!B%dvcF6\֝-.c^ÍmO1ٸ3zMnˍxl^qYoRB /SO?ÅUA 9x^c!g`+yԐu-!2Va!6DB)S:0+}2ki*B6"/X!>F^5/>ƽ<]6AKx#, z0bS0)C#)UaZ>-7CEz# 2T9.,ju$Z8kà}VȷĦQRh,mоՅ l#Lw̢&z+"wضgkh,x.:HDTyq -ώ~SXZBl6蚺`4Mg#1NL!⴮VJZo%e qba`{ /d٦/ :I1Bl-M83'AK>S %]ٴC"Q޻x=@/;f+cqrO|9\ǟVGױݝ9 ȷW,{_첌j5áUNkvL*hGZ8QI5p}RkTD^42U+HRSbVt +OZ!֫O&q>&MDnZc x'k'tQ`VAu €Mƃ/ߍJendstream +endobj +549 0 obj<>/XObject<<>>>>>>endobj +550 0 obj<>stream +xՕoo0)e+5Y$L$ + +1Mir@`ءOiiaZb s95\pBA3tpl0=}JIp\'p{v/E-;hO2]ƻ>. +Xq'% Y& +%*MQJ*#W$ɋdۧeoKIuv>?ӫFb AR$ +Ü6PTpK.qJ,Ogf˙ n$MP%Ĩ.@Z&m̓9%aع|gyz7FLx#e4xWT[ȗ"&/$fK,%}~̔f9fH>!ZE%Z ϦW;D + ˋjeZsMA ,}c +WJ/jw%<$E_,hdYΧ?Ϻ}PsO9f 5Dkw4ݷ(]+nz/ st_X[砶a3l٫mi67 اczsa|BSX`&ǧrw >J2sݭJLZUV4Ӧz{tu>hEoV QцK\b!+ WUgadZ:|oAD1]n:q 7STendstream +endobj +551 0 obj<>/XObject<<>>>>>>endobj +552 0 obj<>stream +xU]o@|W[R)vئ/(Q +)A*OIT]1ww{qpHzvvvg8pׁ/d= 6ȳ}.rE?10ǩ-7өi₁k\`JBY&g KY +A$ޞ@9M4˕m Xni;.\]Oc-XytIylX^1P&9UxyɷL8sǂ)zBa^EثbM3$Ak॔BQUҬRiյ_ v$! iuVK,nSjL'xvaӈ߁ɣ5dgM(f1l6Q+PX*:3fQ>/XObject<<>>>>>>endobj +554 0 obj<>stream +xUMs0W +ΥzqZRw2 +,Z#Iq}={wzCoB$yϱBz:pG~0m+<ױmAgqݕ qVD!)PIqx9F~Gq!TkSqڟN+&4K Y)|66X^Hђ ̸@ T`\CAo( V\o +“)XZ!c40]P +\2nX>yq.H}MA + q$2=nQ]RX<]Wg\)$ xfBcrU4Q Lӳ 7m6S ϴbgp)xv9[#`snHC5׆a +k]*9-]Mh!0Do$FAG{?;Bv4 B3їa +#%LQտ2$’QF.i S"2d)5?tD -γ=0) 6p:|n܇xt{f@ N}PQA;5OJJ9{yŜxs۵k^4c.ƿ9p֗fuϳ-OT!}=R 4-q)OCIzmhFv0B؟ޜE5`eJuILżɵBgxC}VqsC*endstream +endobj +555 0 obj<>/XObject<<>>>>>>endobj +556 0 obj<>stream +xVQoH~>Pp>۩;JmuG_,.CtBHxgvo >.ıBm{ՕkG ECu2y3ׇdɃ?2Ď 56kO{1M-by!n16edVB!HR18c@$_l؏a09LdV;&/.z/˝!Q@j bzƢ<-^bxg\;yNԾzgE[,R+`~]m֛Pps!xye,b۽nU{.kD:U5] k,CVP2 Iyfh|]Es[ؐ:/("c I`)*;ToUBsAA٣.l_B NDj,5b׌= %6t ߏ-h2 FXᢢiEVG3z-@%.A<EWqk.ǐ,W;X-q(“)N:`zvDe%1p͉G"HX7p +UFEh^pP)>~TJuU P27AD57/y{:UvHoͻ'si!Ϥ\*PE,kc]8rK}ZpV6O LwS`߈Jn%HZD:v1 P$ l7u- cj,UݩAb4d,eRTX1އ&v.o cGb 9- Ku0"ia[ԩ\E=`.:vE : +xߣ:|oAgUɟbYendstream +endobj +557 0 obj<>/XObject<<>>>>>>endobj +558 0 obj<>stream +xV]s6|FI(VeL3(IIQYo_p|-?p-Xfn^VF!KKTR) +F(z Eʀʸ̀tDd)<> 10{ +"-(ֹH Vf) .2ҥHDI8ґ$Q)J5w$HeP.=Fm+8SUƘ2QJU uZg9|gC֘Df5i)+C;)&a9ĂFi6J{%_GvPii(zD2FNد,CYw` +PS 2}9yj^S iGY+X+lR{SI@t +\5>DY2w ݕf2'd+ +A4 N-^:O ^*Yb-re?ڟyOyjx'Om8 %˂Ѯ5EO$voC=[2J..X|gFti>://]W'yx~aVXOյn,[:!.ep=D|rE$>̅LRl9ao/"TH70kev] ^QUH^F~3>_Ӷ*$o%=`.%)/NP3 iQIG_S 5jުyHzqWaӺDR\mRo|T\3;=4!5q>`%O3tFo~0'zm`i|(K%+v2ANI& +p񍅲Ehy+R{[} \3u;|ͦdzWlqUWC6l<0Jauj|$)~@|HbP|{~I|G8l,{{٫/_˫~i?h70"oV ⹠>,hA^2#$D%C8]/:oN=Ņoһ9ux2V)?=m%ֲb/ĴUfRM1w<; 9M#>/XObject<<>>>>>>endobj +560 0 obj<>stream +xmO0S"&N$ݻLlRK͚Ĕ~Ɯ6/iQf CwB2pROc` ;d%Y + +P,P,DiM\k!`~uÙԍecXQ(b;h_ǣ8 +)^F>/XObject<<>>>>>>endobj +562 0 obj<>stream +xUQo@~W#M\EX^.Ԑ̽Nז;d-zf{mԶBH&w +<z VێeZzdT6e.~0<ߴO( iĀRH6$k̖XJQUwCU6CdmĄX%iI^Zl| UGu4GMXyQ_]< +- .r HdU^P ]V 6WGaD*\ǕP; '1^OqjYWjU +s8x8O:pl&F܉R؀V/b%y%=p8sC̶6|҆4*u"7Бs6Ɏ89sA>2yk(D;'z{Ut}[zV` ·е:9Yy(/2:~@(,ƼvA!ᾁ\WHijg9|>/XObject<<>>>>>>endobj +564 0 obj<>stream +xO00h)P qHKOl5Q̙ep0i}R zk%º @<@.BڮJ\c}t:9>vpO[y!--ʷm8ѭZ[qM7&6oFp}Ubt04-hȜ 0@ܐΩMejDrͪyRQ֓n.:5q 8 ]<2B&?e7F"!(KW뜷~A!$p 1,endstream +endobj +565 0 obj<>endobj +566 0 obj<>endobj +567 0 obj<>endobj +568 0 obj<>endobj +569 0 obj<>endobj +570 0 obj<>endobj +571 0 obj<>endobj +572 0 obj<>endobj +573 0 obj<>endobj +574 0 obj<>endobj +575 0 obj<>endobj +576 0 obj<>endobj +577 0 obj<>endobj +578 0 obj<>endobj +579 0 obj<>endobj +580 0 obj<>endobj +581 0 obj<>endobj +582 0 obj<>endobj +583 0 obj<>endobj +584 0 obj<>endobj +585 0 obj<>endobj +586 0 obj<>endobj +587 0 obj<>endobj +588 0 obj<>endobj +589 0 obj<>endobj +590 0 obj<>endobj +591 0 obj<>endobj +592 0 obj<>endobj +593 0 obj<>endobj +594 0 obj<>endobj +595 0 obj<>endobj +596 0 obj<>endobj +597 0 obj<>endobj +598 0 obj<>endobj +599 0 obj<>endobj +600 0 obj<>endobj +601 0 obj<>endobj +602 0 obj<>endobj +603 0 obj<>endobj +604 0 obj<>endobj +605 0 obj<>endobj +606 0 obj<>endobj +607 0 obj<>endobj +608 0 obj<>endobj +609 0 obj<>endobj +610 0 obj<>endobj +611 0 obj<>endobj +612 0 obj<>endobj +613 0 obj<>endobj +614 0 obj<>endobj +615 0 obj<>endobj +616 0 obj<>endobj +617 0 obj<>endobj +618 0 obj<>endobj +619 0 obj<>endobj +620 0 obj<>endobj +621 0 obj<>endobj +622 0 obj<>endobj +623 0 obj<>endobj +624 0 obj<>endobj +625 0 obj<>endobj +626 0 obj<>endobj +627 0 obj<>endobj +628 0 obj<>endobj +629 0 obj<>endobj +630 0 obj<>endobj +631 0 obj<>endobj +632 0 obj<>endobj +633 0 obj<>endobj +634 0 obj<>endobj +635 0 obj<>endobj +636 0 obj<>endobj +637 0 obj<>endobj +638 0 obj<>endobj +639 0 obj<>endobj +640 0 obj<>endobj +641 0 obj<>endobj +642 0 obj<>endobj +643 0 obj<>endobj +644 0 obj<>endobj +645 0 obj<>endobj +646 0 obj<>endobj +647 0 obj<>endobj +648 0 obj<>endobj +649 0 obj<>endobj +650 0 obj<>endobj +651 0 obj<>endobj +652 0 obj<>endobj +653 0 obj<>endobj +654 0 obj<>endobj +655 0 obj<>endobj +656 0 obj<>endobj +657 0 obj<>endobj +658 0 obj<>endobj +659 0 obj<>endobj +660 0 obj<>endobj +661 0 obj<>endobj +662 0 obj<>endobj +663 0 obj<>endobj +664 0 obj<>endobj +665 0 obj<>endobj +666 0 obj<>endobj +667 0 obj<>endobj +668 0 obj<>endobj +669 0 obj<>endobj +670 0 obj<>endobj +671 0 obj<>1<>4<>5<>8<>10<>12<>16<>18<>23<>26<>30<>32<>]>>>>endobj +xref +0 672 +0000000000 65535 f +0000000015 00000 n +0000000245 00000 n +0000001811 00000 n +0000001885 00000 n +0000001963 00000 n +0000002040 00000 n +0000002119 00000 n +0000002202 00000 n +0000002278 00000 n +0000002359 00000 n +0000002460 00000 n +0000002562 00000 n +0000002663 00000 n +0000002764 00000 n +0000002866 00000 n +0000002968 00000 n +0000003070 00000 n +0000003171 00000 n +0000003273 00000 n +0000003375 00000 n +0000003477 00000 n +0000003579 00000 n +0000003681 00000 n +0000003782 00000 n +0000003884 00000 n +0000003986 00000 n +0000004088 00000 n +0000004190 00000 n +0000004292 00000 n +0000004394 00000 n +0000004496 00000 n +0000004598 00000 n +0000004699 00000 n +0000004800 00000 n +0000004902 00000 n +0000005004 00000 n +0000005106 00000 n +0000005208 00000 n +0000005310 00000 n +0000005412 00000 n +0000005514 00000 n +0000005616 00000 n +0000005718 00000 n +0000005820 00000 n +0000005922 00000 n +0000006024 00000 n +0000006126 00000 n +0000006228 00000 n +0000006330 00000 n +0000006431 00000 n +0000006531 00000 n +0000006631 00000 n +0000006941 00000 n +0000007042 00000 n +0000007144 00000 n +0000007246 00000 n +0000007348 00000 n +0000007450 00000 n +0000007551 00000 n +0000007653 00000 n +0000007755 00000 n +0000007857 00000 n +0000007959 00000 n +0000008061 00000 n +0000008163 00000 n +0000008264 00000 n +0000008366 00000 n +0000008468 00000 n +0000008570 00000 n +0000008672 00000 n +0000008774 00000 n +0000008876 00000 n +0000008978 00000 n +0000009080 00000 n +0000009182 00000 n +0000009283 00000 n +0000009384 00000 n +0000009486 00000 n +0000009588 00000 n +0000009690 00000 n +0000009792 00000 n +0000009894 00000 n +0000009996 00000 n +0000010098 00000 n +0000010200 00000 n +0000010302 00000 n +0000010404 00000 n +0000010506 00000 n +0000010608 00000 n +0000010710 00000 n +0000010812 00000 n +0000010914 00000 n +0000011016 00000 n +0000011118 00000 n +0000011219 00000 n +0000011319 00000 n +0000011419 00000 n +0000011743 00000 n +0000011844 00000 n +0000011946 00000 n +0000012049 00000 n +0000012152 00000 n +0000012255 00000 n +0000012358 00000 n +0000012461 00000 n +0000012564 00000 n +0000012667 00000 n +0000012770 00000 n +0000012873 00000 n +0000012976 00000 n +0000013079 00000 n +0000013182 00000 n +0000013285 00000 n +0000013388 00000 n +0000013491 00000 n +0000013594 00000 n +0000013697 00000 n +0000013800 00000 n +0000013975 00000 n +0000014030 00000 n +0000014117 00000 n +0000014172 00000 n +0000014259 00000 n +0000014326 00000 n +0000014412 00000 n +0000014514 00000 n +0000014617 00000 n +0000014720 00000 n +0000014823 00000 n +0000014925 00000 n +0000015028 00000 n +0000015131 00000 n +0000015234 00000 n +0000015337 00000 n +0000015440 00000 n +0000015542 00000 n +0000015645 00000 n +0000015748 00000 n +0000015851 00000 n +0000015954 00000 n +0000016057 00000 n +0000016160 00000 n +0000016263 00000 n +0000016366 00000 n +0000016468 00000 n +0000016570 00000 n +0000016673 00000 n +0000016776 00000 n +0000016879 00000 n +0000016982 00000 n +0000017085 00000 n +0000017188 00000 n +0000017291 00000 n +0000017394 00000 n +0000017497 00000 n +0000017600 00000 n +0000017703 00000 n +0000017806 00000 n +0000017908 00000 n +0000018009 00000 n +0000018110 00000 n +0000018439 00000 n +0000018542 00000 n +0000018645 00000 n +0000018748 00000 n +0000018851 00000 n +0000018954 00000 n +0000019057 00000 n +0000019160 00000 n +0000019262 00000 n +0000019365 00000 n +0000019468 00000 n +0000019571 00000 n +0000019674 00000 n +0000019777 00000 n +0000019880 00000 n +0000019982 00000 n +0000020085 00000 n +0000020188 00000 n +0000020291 00000 n +0000020394 00000 n +0000020497 00000 n +0000020600 00000 n +0000020703 00000 n +0000020806 00000 n +0000020909 00000 n +0000021011 00000 n +0000021113 00000 n +0000021216 00000 n +0000021319 00000 n +0000021422 00000 n +0000021525 00000 n +0000021628 00000 n +0000021731 00000 n +0000021834 00000 n +0000021937 00000 n +0000022040 00000 n +0000022143 00000 n +0000022246 00000 n +0000022349 00000 n +0000022452 00000 n +0000022555 00000 n +0000022658 00000 n +0000022761 00000 n +0000022864 00000 n +0000022967 00000 n +0000023070 00000 n +0000023173 00000 n +0000023276 00000 n +0000023379 00000 n +0000023481 00000 n +0000023582 00000 n +0000023683 00000 n +0000024108 00000 n +0000024211 00000 n +0000024314 00000 n +0000024417 00000 n +0000024520 00000 n +0000024623 00000 n +0000024726 00000 n +0000024829 00000 n +0000024932 00000 n +0000025035 00000 n +0000025138 00000 n +0000025241 00000 n +0000025344 00000 n +0000025447 00000 n +0000025550 00000 n +0000025679 00000 n +0000025763 00000 n +0000025849 00000 n +0000025923 00000 n +0000026009 00000 n +0000026042 00000 n +0000026120 00000 n +0000026207 00000 n +0000026313 00000 n +0000026399 00000 n +0000026471 00000 n +0000026557 00000 n +0000026616 00000 n +0000026703 00000 n +0000026794 00000 n +0000026880 00000 n +0000026951 00000 n +0000027037 00000 n +0000027102 00000 n +0000027136 00000 n +0000027170 00000 n +0000030104 00000 n +0000030147 00000 n +0000030190 00000 n +0000030233 00000 n +0000030276 00000 n +0000030319 00000 n +0000030362 00000 n +0000030405 00000 n +0000030448 00000 n +0000030491 00000 n +0000030534 00000 n +0000030577 00000 n +0000030620 00000 n +0000030663 00000 n +0000030706 00000 n +0000030749 00000 n +0000030792 00000 n +0000030835 00000 n +0000030878 00000 n +0000030921 00000 n +0000030964 00000 n +0000031007 00000 n +0000031050 00000 n +0000031093 00000 n +0000031136 00000 n +0000031179 00000 n +0000031222 00000 n +0000031265 00000 n +0000031308 00000 n +0000031351 00000 n +0000031394 00000 n +0000031437 00000 n +0000031480 00000 n +0000031523 00000 n +0000031566 00000 n +0000031609 00000 n +0000031652 00000 n +0000031695 00000 n +0000031738 00000 n +0000031781 00000 n +0000031824 00000 n +0000031867 00000 n +0000031910 00000 n +0000031953 00000 n +0000031996 00000 n +0000032039 00000 n +0000032082 00000 n +0000032125 00000 n +0000032168 00000 n +0000032211 00000 n +0000032254 00000 n +0000032297 00000 n +0000032340 00000 n +0000032383 00000 n +0000032426 00000 n +0000032469 00000 n +0000032512 00000 n +0000032555 00000 n +0000032598 00000 n +0000032641 00000 n +0000032684 00000 n +0000032727 00000 n +0000032770 00000 n +0000032813 00000 n +0000032856 00000 n +0000032899 00000 n +0000032942 00000 n +0000032985 00000 n +0000033028 00000 n +0000033071 00000 n +0000033114 00000 n +0000033157 00000 n +0000033200 00000 n +0000033243 00000 n +0000033286 00000 n +0000033329 00000 n +0000033372 00000 n +0000033415 00000 n +0000033458 00000 n +0000033501 00000 n +0000033544 00000 n +0000033587 00000 n +0000033630 00000 n +0000033673 00000 n +0000033716 00000 n +0000033759 00000 n +0000033802 00000 n +0000033845 00000 n +0000033888 00000 n +0000033931 00000 n +0000033974 00000 n +0000034017 00000 n +0000034060 00000 n +0000034103 00000 n +0000034146 00000 n +0000034189 00000 n +0000034232 00000 n +0000034275 00000 n +0000034318 00000 n +0000034361 00000 n +0000034404 00000 n +0000034447 00000 n +0000034490 00000 n +0000034533 00000 n +0000034576 00000 n +0000034619 00000 n +0000034662 00000 n +0000034705 00000 n +0000034748 00000 n +0000034791 00000 n +0000034834 00000 n +0000034877 00000 n +0000034920 00000 n +0000034963 00000 n +0000035006 00000 n +0000035049 00000 n +0000035092 00000 n +0000035135 00000 n +0000035178 00000 n +0000035221 00000 n +0000035264 00000 n +0000035307 00000 n +0000035350 00000 n +0000035393 00000 n +0000035436 00000 n +0000035479 00000 n +0000035522 00000 n +0000035565 00000 n +0000035608 00000 n +0000035651 00000 n +0000035694 00000 n +0000035737 00000 n +0000035780 00000 n +0000035823 00000 n +0000035866 00000 n +0000035909 00000 n +0000035952 00000 n +0000035995 00000 n +0000036038 00000 n +0000036081 00000 n +0000036124 00000 n +0000036167 00000 n +0000036210 00000 n +0000036253 00000 n +0000036296 00000 n +0000036339 00000 n +0000036382 00000 n +0000036425 00000 n +0000036468 00000 n +0000036511 00000 n +0000036554 00000 n +0000036597 00000 n +0000036640 00000 n +0000036683 00000 n +0000036726 00000 n +0000036769 00000 n +0000036812 00000 n +0000036855 00000 n +0000036898 00000 n +0000036941 00000 n +0000036984 00000 n +0000037027 00000 n +0000037070 00000 n +0000037113 00000 n +0000037156 00000 n +0000037199 00000 n +0000037242 00000 n +0000037285 00000 n +0000037328 00000 n +0000037371 00000 n +0000037414 00000 n +0000037457 00000 n +0000037500 00000 n +0000037543 00000 n +0000037586 00000 n +0000037629 00000 n +0000037672 00000 n +0000037715 00000 n +0000037758 00000 n +0000037801 00000 n +0000037844 00000 n +0000037887 00000 n +0000037930 00000 n +0000038505 00000 n +0000038661 00000 n +0000038828 00000 n +0000039016 00000 n +0000041152 00000 n +0000041340 00000 n +0000043961 00000 n +0000044150 00000 n +0000045607 00000 n +0000045763 00000 n +0000045992 00000 n +0000046190 00000 n +0000047898 00000 n +0000048069 00000 n +0000050000 00000 n +0000050171 00000 n +0000050953 00000 n +0000051118 00000 n +0000052748 00000 n +0000052913 00000 n +0000054450 00000 n +0000054615 00000 n +0000056332 00000 n +0000056497 00000 n +0000058227 00000 n +0000058401 00000 n +0000059696 00000 n +0000059870 00000 n +0000061162 00000 n +0000061336 00000 n +0000062674 00000 n +0000062839 00000 n +0000063736 00000 n +0000063925 00000 n +0000065881 00000 n +0000066037 00000 n +0000067813 00000 n +0000067978 00000 n +0000069941 00000 n +0000070106 00000 n +0000070819 00000 n +0000070993 00000 n +0000072022 00000 n +0000072187 00000 n +0000073829 00000 n +0000073994 00000 n +0000074614 00000 n +0000074788 00000 n +0000076148 00000 n +0000076322 00000 n +0000077470 00000 n +0000077635 00000 n +0000078271 00000 n +0000078436 00000 n +0000080201 00000 n +0000080366 00000 n +0000082234 00000 n +0000082399 00000 n +0000084358 00000 n +0000084514 00000 n +0000085295 00000 n +0000085478 00000 n +0000087127 00000 n +0000087292 00000 n +0000088207 00000 n +0000088405 00000 n +0000090121 00000 n +0000090295 00000 n +0000092104 00000 n +0000092278 00000 n +0000092867 00000 n +0000093041 00000 n +0000093791 00000 n +0000093965 00000 n +0000094699 00000 n +0000094873 00000 n +0000095695 00000 n +0000095869 00000 n +0000096684 00000 n +0000096867 00000 n +0000097727 00000 n +0000097901 00000 n +0000098649 00000 n +0000098814 00000 n +0000099434 00000 n +0000099617 00000 n +0000100370 00000 n +0000100544 00000 n +0000101497 00000 n +0000101680 00000 n +0000103010 00000 n +0000103193 00000 n +0000104237 00000 n +0000104402 00000 n +0000104977 00000 n +0000105160 00000 n +0000106211 00000 n +0000106385 00000 n +0000107263 00000 n +0000107437 00000 n +0000108516 00000 n +0000108699 00000 n +0000109540 00000 n +0000109723 00000 n +0000110488 00000 n +0000110662 00000 n +0000111193 00000 n +0000111367 00000 n +0000112043 00000 n +0000112226 00000 n +0000113142 00000 n +0000113316 00000 n +0000114266 00000 n +0000114440 00000 n +0000115367 00000 n +0000115550 00000 n +0000116436 00000 n +0000116610 00000 n +0000117373 00000 n +0000117547 00000 n +0000118214 00000 n +0000118388 00000 n +0000119204 00000 n +0000119378 00000 n +0000120347 00000 n +0000120512 00000 n +0000121934 00000 n +0000122117 00000 n +0000122837 00000 n +0000123020 00000 n +0000123632 00000 n +0000123797 00000 n +0000124174 00000 n +0000124230 00000 n +0000124329 00000 n +0000124482 00000 n +0000124561 00000 n +0000124664 00000 n +0000124851 00000 n +0000124940 00000 n +0000125052 00000 n +0000125146 00000 n +0000125295 00000 n +0000125389 00000 n +0000125508 00000 n +0000125617 00000 n +0000125726 00000 n +0000125819 00000 n +0000125972 00000 n +0000126071 00000 n +0000126185 00000 n +0000126302 00000 n +0000126419 00000 n +0000126550 00000 n +0000126643 00000 n +0000126748 00000 n +0000126851 00000 n +0000126964 00000 n +0000127110 00000 n +0000127210 00000 n +0000127322 00000 n +0000127475 00000 n +0000127572 00000 n +0000127682 00000 n +0000127797 00000 n +0000127907 00000 n +0000128017 00000 n +0000128128 00000 n +0000128239 00000 n +0000128354 00000 n +0000128469 00000 n +0000128585 00000 n +0000128701 00000 n +0000128812 00000 n +0000128923 00000 n +0000129039 00000 n +0000129142 00000 n +0000129294 00000 n +0000129386 00000 n +0000129480 00000 n +0000129582 00000 n +0000129730 00000 n +0000129864 00000 n +0000129968 00000 n +0000130092 00000 n +0000130198 00000 n +0000130322 00000 n +0000130405 00000 n +0000130559 00000 n +0000130653 00000 n +0000130757 00000 n +0000130866 00000 n +0000130970 00000 n +0000131072 00000 n +0000131177 00000 n +0000131285 00000 n +0000131392 00000 n +0000131493 00000 n +0000131614 00000 n +0000131747 00000 n +0000131877 00000 n +0000131966 00000 n +0000132055 00000 n +0000132206 00000 n +0000132293 00000 n +0000132400 00000 n +0000132492 00000 n +0000132654 00000 n +0000132747 00000 n +0000132848 00000 n +0000132947 00000 n +0000133061 00000 n +0000133181 00000 n +0000133291 00000 n +0000133407 00000 n +0000133531 00000 n +0000133641 00000 n +0000133745 00000 n +0000133855 00000 n +0000133953 00000 n +0000134116 00000 n +0000134219 00000 n +0000134332 00000 n +0000134450 00000 n +0000134558 00000 n +0000134654 00000 n +0000134811 00000 n +0000134906 00000 n +0000134997 00000 n +0000135154 00000 n +0000135250 00000 n +0000135351 00000 n +0000135528 00000 n +0000135621 00000 n +0000135724 00000 n +0000135814 00000 n +0000135945 00000 n +0000136042 00000 n +0000136139 00000 n +trailer +<]>> +startxref +136539 +%%EOF diff --git a/docs/Samba-HOWTO-Collection.pdf b/docs/Samba-HOWTO-Collection.pdf index 85326c8b8ce..81199718981 100644 --- a/docs/Samba-HOWTO-Collection.pdf +++ b/docs/Samba-HOWTO-Collection.pdf @@ -1,6 +1,6 @@ %PDF-1.3 % -1 0 obj<>endobj +1 0 obj<>endobj 2 0 obj<>endobj 3 0 obj<>endobj 4 0 obj<>endobj @@ -13,50 +13,50 @@ 11 0 obj<>endobj 12 0 obj<>endobj 13 0 obj<>endobj -14 0 obj<>endobj -15 0 obj<>endobj -16 0 obj<>endobj -17 0 obj<>endobj -18 0 obj<>endobj -19 0 obj<>endobj -20 0 obj<>endobj -21 0 obj<>endobj -22 0 obj<>endobj -23 0 obj<>endobj -24 0 obj<>endobj -25 0 obj<>endobj -26 0 obj<>endobj -27 0 obj<>endobj -28 0 obj<>endobj -29 0 obj<>endobj -30 0 obj<>endobj -31 0 obj<>endobj -32 0 obj<>endobj -33 0 obj<>endobj -34 0 obj<>endobj -35 0 obj<>endobj -36 0 obj<>endobj -37 0 obj<>endobj -38 0 obj<>endobj -39 0 obj<>endobj -40 0 obj<>endobj -41 0 obj<>endobj -42 0 obj<>endobj -43 0 obj<>endobj -44 0 obj<>endobj -45 0 obj<>endobj -46 0 obj<>endobj -47 0 obj<>endobj -48 0 obj<>endobj -49 0 obj<>endobj -50 0 obj<>endobj -51 0 obj<>endobj -52 0 obj<>endobj -53 0 obj<>endobj -54 0 obj<>endobj -55 0 obj<>endobj -56 0 obj<>endobj -57 0 obj<>endobj +14 0 obj<>endobj +15 0 obj<>endobj +16 0 obj<>endobj +17 0 obj<>endobj +18 0 obj<>endobj +19 0 obj<>endobj +20 0 obj<>endobj +21 0 obj<>endobj +22 0 obj<>endobj +23 0 obj<>endobj +24 0 obj<>endobj +25 0 obj<>endobj +26 0 obj<>endobj +27 0 obj<>endobj +28 0 obj<>endobj +29 0 obj<>endobj +30 0 obj<>endobj +31 0 obj<>endobj +32 0 obj<>endobj +33 0 obj<>endobj +34 0 obj<>endobj +35 0 obj<>endobj +36 0 obj<>endobj +37 0 obj<>endobj +38 0 obj<>endobj +39 0 obj<>endobj +40 0 obj<>endobj +41 0 obj<>endobj +42 0 obj<>endobj +43 0 obj<>endobj +44 0 obj<>endobj +45 0 obj<>endobj +46 0 obj<>endobj +47 0 obj<>endobj +48 0 obj<>endobj +49 0 obj<>endobj +50 0 obj<>endobj +51 0 obj<>endobj +52 0 obj<>endobj +53 0 obj<>endobj +54 0 obj<>endobj +55 0 obj<>endobj +56 0 obj<>endobj +57 0 obj<>endobj 58 0 obj[14 0 R 15 0 R 16 0 R @@ -101,50 +101,50 @@ 55 0 R 56 0 R 57 0 R]endobj -59 0 obj<>endobj -60 0 obj<>endobj -61 0 obj<>endobj -62 0 obj<>endobj -63 0 obj<>endobj -64 0 obj<>endobj -65 0 obj<>endobj -66 0 obj<>endobj -67 0 obj<>endobj -68 0 obj<>endobj -69 0 obj<>endobj -70 0 obj<>endobj -71 0 obj<>endobj -72 0 obj<>endobj -73 0 obj<>endobj -74 0 obj<>endobj -75 0 obj<>endobj -76 0 obj<>endobj -77 0 obj<>endobj -78 0 obj<>endobj -79 0 obj<>endobj -80 0 obj<>endobj -81 0 obj<>endobj -82 0 obj<>endobj -83 0 obj<>endobj -84 0 obj<>endobj -85 0 obj<>endobj -86 0 obj<>endobj -87 0 obj<>endobj -88 0 obj<>endobj -89 0 obj<>endobj -90 0 obj<>endobj -91 0 obj<>endobj -92 0 obj<>endobj -93 0 obj<>endobj -94 0 obj<>endobj -95 0 obj<>endobj -96 0 obj<>endobj -97 0 obj<>endobj -98 0 obj<>endobj -99 0 obj<>endobj -100 0 obj<>endobj -101 0 obj<>endobj -102 0 obj<>endobj +59 0 obj<>endobj +60 0 obj<>endobj +61 0 obj<>endobj +62 0 obj<>endobj +63 0 obj<>endobj +64 0 obj<>endobj +65 0 obj<>endobj +66 0 obj<>endobj +67 0 obj<>endobj +68 0 obj<>endobj +69 0 obj<>endobj +70 0 obj<>endobj +71 0 obj<>endobj +72 0 obj<>endobj +73 0 obj<>endobj +74 0 obj<>endobj +75 0 obj<>endobj +76 0 obj<>endobj +77 0 obj<>endobj +78 0 obj<>endobj +79 0 obj<>endobj +80 0 obj<>endobj +81 0 obj<>endobj +82 0 obj<>endobj +83 0 obj<>endobj +84 0 obj<>endobj +85 0 obj<>endobj +86 0 obj<>endobj +87 0 obj<>endobj +88 0 obj<>endobj +89 0 obj<>endobj +90 0 obj<>endobj +91 0 obj<>endobj +92 0 obj<>endobj +93 0 obj<>endobj +94 0 obj<>endobj +95 0 obj<>endobj +96 0 obj<>endobj +97 0 obj<>endobj +98 0 obj<>endobj +99 0 obj<>endobj +100 0 obj<>endobj +101 0 obj<>endobj +102 0 obj<>endobj 103 0 obj[59 0 R 60 0 R 61 0 R @@ -189,49 +189,49 @@ 100 0 R 101 0 R 102 0 R]endobj -104 0 obj<>endobj -105 0 obj<>endobj -106 0 obj<>endobj -107 0 obj<>endobj -108 0 obj<>endobj -109 0 obj<>endobj -110 0 obj<>endobj -111 0 obj<>endobj -112 0 obj<>endobj -113 0 obj<>endobj -114 0 obj<>endobj -115 0 obj<>endobj -116 0 obj<>endobj -117 0 obj<>endobj -118 0 obj<>endobj -119 0 obj<>endobj -120 0 obj<>endobj -121 0 obj<>endobj -122 0 obj<>endobj -123 0 obj<>endobj -124 0 obj<>endobj -125 0 obj<>endobj -126 0 obj<>endobj -127 0 obj<>endobj -128 0 obj<>endobj -129 0 obj<>endobj -130 0 obj<>endobj -131 0 obj<>endobj -132 0 obj<>endobj -133 0 obj<>endobj -134 0 obj<>endobj -135 0 obj<>endobj -136 0 obj<>endobj -137 0 obj<>endobj -138 0 obj<>endobj -139 0 obj<>endobj -140 0 obj<>endobj -141 0 obj<>endobj -142 0 obj<>endobj -143 0 obj<>endobj -144 0 obj<>endobj -145 0 obj<>endobj -146 0 obj<>endobj +104 0 obj<>endobj +105 0 obj<>endobj +106 0 obj<>endobj +107 0 obj<>endobj +108 0 obj<>endobj +109 0 obj<>endobj +110 0 obj<>endobj +111 0 obj<>endobj +112 0 obj<>endobj +113 0 obj<>endobj +114 0 obj<>endobj +115 0 obj<>endobj +116 0 obj<>endobj +117 0 obj<>endobj +118 0 obj<>endobj +119 0 obj<>endobj +120 0 obj<>endobj +121 0 obj<>endobj +122 0 obj<>endobj +123 0 obj<>endobj +124 0 obj<>endobj +125 0 obj<>endobj +126 0 obj<>endobj +127 0 obj<>endobj +128 0 obj<>endobj +129 0 obj<>endobj +130 0 obj<>endobj +131 0 obj<>endobj +132 0 obj<>endobj +133 0 obj<>endobj +134 0 obj<>endobj +135 0 obj<>endobj +136 0 obj<>endobj +137 0 obj<>endobj +138 0 obj<>endobj +139 0 obj<>endobj +140 0 obj<>endobj +141 0 obj<>endobj +142 0 obj<>endobj +143 0 obj<>endobj +144 0 obj<>endobj +145 0 obj<>endobj +146 0 obj<>endobj 147 0 obj[104 0 R 105 0 R 106 0 R @@ -275,50 +275,50 @@ 144 0 R 145 0 R 146 0 R]endobj -148 0 obj<>endobj -149 0 obj<>endobj -150 0 obj<>endobj -151 0 obj<>endobj -152 0 obj<>endobj -153 0 obj<>endobj -154 0 obj<>endobj -155 0 obj<>endobj -156 0 obj<>endobj -157 0 obj<>endobj -158 0 obj<>endobj -159 0 obj<>endobj -160 0 obj<>endobj -161 0 obj<>endobj -162 0 obj<>endobj -163 0 obj<>endobj -164 0 obj<>endobj -165 0 obj<>endobj -166 0 obj<>endobj -167 0 obj<>endobj -168 0 obj<>endobj -169 0 obj<>endobj -170 0 obj<>endobj -171 0 obj<>endobj -172 0 obj<>endobj -173 0 obj<>endobj -174 0 obj<>endobj -175 0 obj<>endobj -176 0 obj<>endobj -177 0 obj<>endobj -178 0 obj<>endobj -179 0 obj<>endobj -180 0 obj<>endobj -181 0 obj<>endobj -182 0 obj<>endobj -183 0 obj<>endobj -184 0 obj<>endobj -185 0 obj<>endobj -186 0 obj<>endobj -187 0 obj<>endobj -188 0 obj<>endobj -189 0 obj<>endobj -190 0 obj<>endobj -191 0 obj<>endobj +148 0 obj<>endobj +149 0 obj<>endobj +150 0 obj<>endobj +151 0 obj<>endobj +152 0 obj<>endobj +153 0 obj<>endobj +154 0 obj<>endobj +155 0 obj<>endobj +156 0 obj<>endobj +157 0 obj<>endobj +158 0 obj<>endobj +159 0 obj<>endobj +160 0 obj<>endobj +161 0 obj<>endobj +162 0 obj<>endobj +163 0 obj<>endobj +164 0 obj<>endobj +165 0 obj<>endobj +166 0 obj<>endobj +167 0 obj<>endobj +168 0 obj<>endobj +169 0 obj<>endobj +170 0 obj<>endobj +171 0 obj<>endobj +172 0 obj<>endobj +173 0 obj<>endobj +174 0 obj<>endobj +175 0 obj<>endobj +176 0 obj<>endobj +177 0 obj<>endobj +178 0 obj<>endobj +179 0 obj<>endobj +180 0 obj<>endobj +181 0 obj<>endobj +182 0 obj<>endobj +183 0 obj<>endobj +184 0 obj<>endobj +185 0 obj<>endobj +186 0 obj<>endobj +187 0 obj<>endobj +188 0 obj<>endobj +189 0 obj<>endobj +190 0 obj<>endobj +191 0 obj<>endobj 192 0 obj[148 0 R 149 0 R 150 0 R @@ -363,47 +363,52 @@ 189 0 R 190 0 R 191 0 R]endobj -193 0 obj<>endobj -194 0 obj<>endobj -195 0 obj<>endobj -196 0 obj<>endobj -197 0 obj<>endobj -198 0 obj<>endobj -199 0 obj<>endobj -200 0 obj<>endobj -201 0 obj<>endobj -202 0 obj<>endobj -203 0 obj<>endobj -204 0 obj<>endobj -205 0 obj<>endobj -206 0 obj<>endobj -207 0 obj<>endobj -208 0 obj<>endobj -209 0 obj<>endobj -210 0 obj<>endobj -211 0 obj<>endobj -212 0 obj<>endobj -213 0 obj<>endobj -214 0 obj<>endobj -215 0 obj<>endobj -216 0 obj<>endobj -217 0 obj<>endobj -218 0 obj<>endobj -219 0 obj<>endobj -220 0 obj<>endobj -221 0 obj<>endobj -222 0 obj<>endobj -223 0 obj<>endobj -224 0 obj<>endobj -225 0 obj<>endobj -226 0 obj<>endobj -227 0 obj<>endobj -228 0 obj<>endobj -229 0 obj<>endobj -230 0 obj<>endobj -231 0 obj<>endobj -232 0 obj<>endobj -233 0 obj[193 0 R +193 0 obj<>endobj +194 0 obj<>endobj +195 0 obj<>endobj +196 0 obj<>endobj +197 0 obj<>endobj +198 0 obj<>endobj +199 0 obj<>endobj +200 0 obj<>endobj +201 0 obj<>endobj +202 0 obj<>endobj +203 0 obj<>endobj +204 0 obj<>endobj +205 0 obj<>endobj +206 0 obj<>endobj +207 0 obj<>endobj +208 0 obj<>endobj +209 0 obj<>endobj +210 0 obj<>endobj +211 0 obj<>endobj +212 0 obj<>endobj +213 0 obj<>endobj +214 0 obj<>endobj +215 0 obj<>endobj +216 0 obj<>endobj +217 0 obj<>endobj +218 0 obj<>endobj +219 0 obj<>endobj +220 0 obj<>endobj +221 0 obj<>endobj +222 0 obj<>endobj +223 0 obj<>endobj +224 0 obj<>endobj +225 0 obj<>endobj +226 0 obj<>endobj +227 0 obj<>endobj +228 0 obj<>endobj +229 0 obj<>endobj +230 0 obj<>endobj +231 0 obj<>endobj +232 0 obj<>endobj +233 0 obj<>endobj +234 0 obj<>endobj +235 0 obj<>endobj +236 0 obj<>endobj +237 0 obj<>endobj +238 0 obj[193 0 R 194 0 R 195 0 R 196 0 R @@ -442,63 +447,70 @@ 229 0 R 230 0 R 231 0 R -232 0 R]endobj -234 0 obj<>endobj -235 0 obj<>endobj -236 0 obj<>endobj -237 0 obj<>endobj -238 0 obj<>endobj -239 0 obj<>endobj -240 0 obj<>endobj -241 0 obj<>endobj -242 0 obj<>endobj -243 0 obj<>endobj -244 0 obj<>endobj -245 0 obj<>endobj -246 0 obj<>endobj -247 0 obj<>endobj -248 0 obj<>endobj -249 0 obj<>endobj -250 0 obj<>endobj -251 0 obj<>endobj -252 0 obj<>endobj -253 0 obj<>endobj -254 0 obj<>endobj -255 0 obj<>endobj -256 0 obj<>endobj -257 0 obj<>endobj -258 0 obj<>endobj -259 0 obj<>endobj -260 0 obj<>endobj -261 0 obj<>endobj -262 0 obj<>endobj -263 0 obj<>endobj -264 0 obj<>endobj -265 0 obj<>endobj -266 0 obj<>endobj -267 0 obj<>endobj -268 0 obj<>endobj -269 0 obj<>endobj -270 0 obj<>endobj -271 0 obj<>endobj -272 0 obj<>endobj -273 0 obj<>endobj -274 0 obj[235 0 R -237 0 R -239 0 R +232 0 R +233 0 R +234 0 R +235 0 R +236 0 R +237 0 R]endobj +239 0 obj<>endobj +240 0 obj<>endobj +241 0 obj<>endobj +242 0 obj<>endobj +243 0 obj<>endobj +244 0 obj<>endobj +245 0 obj<>endobj +246 0 obj<>endobj +247 0 obj[239 0 R 240 0 R 241 0 R 242 0 R 243 0 R 244 0 R 245 0 R -246 0 R -247 0 R -248 0 R -249 0 R -250 0 R +246 0 R]endobj +248 0 obj<>endobj +249 0 obj<>endobj +250 0 obj<>endobj +251 0 obj<>endobj +252 0 obj<>endobj +253 0 obj<>endobj +254 0 obj<>endobj +255 0 obj<>endobj +256 0 obj<>endobj +257 0 obj<>endobj +258 0 obj<>endobj +259 0 obj<>endobj +260 0 obj<>endobj +261 0 obj<>endobj +262 0 obj<>endobj +263 0 obj<>endobj +264 0 obj<>endobj +265 0 obj<>endobj +266 0 obj<>endobj +267 0 obj<>endobj +268 0 obj<>endobj +269 0 obj<>endobj +270 0 obj<>endobj +271 0 obj<>endobj +272 0 obj<>endobj +273 0 obj<>endobj +274 0 obj<>endobj +275 0 obj<>endobj +276 0 obj<>endobj +277 0 obj<>endobj +278 0 obj<>endobj +279 0 obj<>endobj +280 0 obj<>endobj +281 0 obj<>endobj +282 0 obj<>endobj +283 0 obj<>endobj +284 0 obj<>endobj +285 0 obj<>endobj +286 0 obj<>endobj +287 0 obj<>endobj +288 0 obj[249 0 R 251 0 R -252 0 R 253 0 R 254 0 R 255 0 R @@ -519,59 +531,9 @@ 270 0 R 271 0 R 272 0 R -273 0 R]endobj -275 0 obj<>endobj -276 0 obj<>endobj -277 0 obj<>endobj -278 0 obj<>endobj -279 0 obj<>endobj -280 0 obj<>endobj -281 0 obj<>endobj -282 0 obj<>endobj -283 0 obj<>endobj -284 0 obj<>endobj -285 0 obj<>endobj -286 0 obj<>endobj -287 0 obj<>endobj -288 0 obj<>endobj -289 0 obj<>endobj -290 0 obj<>endobj -291 0 obj<>endobj -292 0 obj<>endobj -293 0 obj<>endobj -294 0 obj<>endobj -295 0 obj<>endobj -296 0 obj<>endobj -297 0 obj<>endobj -298 0 obj<>endobj -299 0 obj<>endobj -300 0 obj<>endobj -301 0 obj<>endobj -302 0 obj<>endobj -303 0 obj<>endobj -304 0 obj<>endobj -305 0 obj<>endobj -306 0 obj<>endobj -307 0 obj<>endobj -308 0 obj<>endobj -309 0 obj<>endobj -310 0 obj<>endobj -311 0 obj<>endobj -312 0 obj<>endobj -313 0 obj<>endobj -314 0 obj<>endobj -315 0 obj<>endobj -316 0 obj<>endobj -317 0 obj<>endobj -318 0 obj<>endobj -319 0 obj<>endobj -320 0 obj<>endobj -321 0 obj<>endobj -322 0 obj<>endobj -323 0 obj<>endobj -324 0 obj<>endobj -325 0 obj<>endobj -326 0 obj[275 0 R +273 0 R +274 0 R +275 0 R 276 0 R 277 0 R 278 0 R @@ -583,9 +545,59 @@ 284 0 R 285 0 R 286 0 R -287 0 R -288 0 R -289 0 R +287 0 R]endobj +289 0 obj<>endobj +290 0 obj<>endobj +291 0 obj<>endobj +292 0 obj<>endobj +293 0 obj<>endobj +294 0 obj<>endobj +295 0 obj<>endobj +296 0 obj<>endobj +297 0 obj<>endobj +298 0 obj<>endobj +299 0 obj<>endobj +300 0 obj<>endobj +301 0 obj<>endobj +302 0 obj<>endobj +303 0 obj<>endobj +304 0 obj<>endobj +305 0 obj<>endobj +306 0 obj<>endobj +307 0 obj<>endobj +308 0 obj<>endobj +309 0 obj<>endobj +310 0 obj<>endobj +311 0 obj<>endobj +312 0 obj<>endobj +313 0 obj<>endobj +314 0 obj<>endobj +315 0 obj<>endobj +316 0 obj<>endobj +317 0 obj<>endobj +318 0 obj<>endobj +319 0 obj<>endobj +320 0 obj<>endobj +321 0 obj<>endobj +322 0 obj<>endobj +323 0 obj<>endobj +324 0 obj<>endobj +325 0 obj<>endobj +326 0 obj<>endobj +327 0 obj<>endobj +328 0 obj<>endobj +329 0 obj<>endobj +330 0 obj<>endobj +331 0 obj<>endobj +332 0 obj<>endobj +333 0 obj<>endobj +334 0 obj<>endobj +335 0 obj<>endobj +336 0 obj<>endobj +337 0 obj<>endobj +338 0 obj<>endobj +339 0 obj<>endobj +340 0 obj[289 0 R 290 0 R 291 0 R 292 0 R @@ -621,59 +633,9 @@ 322 0 R 323 0 R 324 0 R -325 0 R]endobj -327 0 obj<>endobj -328 0 obj<>endobj -329 0 obj<>endobj -330 0 obj<>endobj -331 0 obj<>endobj -332 0 obj<>endobj -333 0 obj<>endobj -334 0 obj<>endobj -335 0 obj<>endobj -336 0 obj<>endobj -337 0 obj<>endobj -338 0 obj<>endobj -339 0 obj<>endobj -340 0 obj<>endobj -341 0 obj<>endobj -342 0 obj<>endobj -343 0 obj<>endobj -344 0 obj<>endobj -345 0 obj<>endobj -346 0 obj<>endobj -347 0 obj<>endobj -348 0 obj<>endobj -349 0 obj<>endobj -350 0 obj<>endobj -351 0 obj<>endobj -352 0 obj<>endobj -353 0 obj<>endobj -354 0 obj<>endobj -355 0 obj<>endobj -356 0 obj<>endobj -357 0 obj<>endobj -358 0 obj<>endobj -359 0 obj<>endobj -360 0 obj<>endobj -361 0 obj<>endobj -362 0 obj<>endobj -363 0 obj<>endobj -364 0 obj<>endobj -365 0 obj<>endobj -366 0 obj<>endobj -367 0 obj<>endobj -368 0 obj<>endobj -369 0 obj<>endobj -370 0 obj<>endobj -371 0 obj<>endobj -372 0 obj<>endobj -373 0 obj<>endobj -374 0 obj<>endobj -375 0 obj<>endobj -376 0 obj<>endobj -377 0 obj<>endobj -378 0 obj[327 0 R +325 0 R +326 0 R +327 0 R 328 0 R 329 0 R 330 0 R @@ -685,9 +647,59 @@ 336 0 R 337 0 R 338 0 R -339 0 R -340 0 R -341 0 R +339 0 R]endobj +341 0 obj<>endobj +342 0 obj<>endobj +343 0 obj<>endobj +344 0 obj<>endobj +345 0 obj<>endobj +346 0 obj<>endobj +347 0 obj<>endobj +348 0 obj<>endobj +349 0 obj<>endobj +350 0 obj<>endobj +351 0 obj<>endobj +352 0 obj<>endobj +353 0 obj<>endobj +354 0 obj<>endobj +355 0 obj<>endobj +356 0 obj<>endobj +357 0 obj<>endobj +358 0 obj<>endobj +359 0 obj<>endobj +360 0 obj<>endobj +361 0 obj<>endobj +362 0 obj<>endobj +363 0 obj<>endobj +364 0 obj<>endobj +365 0 obj<>endobj +366 0 obj<>endobj +367 0 obj<>endobj +368 0 obj<>endobj +369 0 obj<>endobj +370 0 obj<>endobj +371 0 obj<>endobj +372 0 obj<>endobj +373 0 obj<>endobj +374 0 obj<>endobj +375 0 obj<>endobj +376 0 obj<>endobj +377 0 obj<>endobj +378 0 obj<>endobj +379 0 obj<>endobj +380 0 obj<>endobj +381 0 obj<>endobj +382 0 obj<>endobj +383 0 obj<>endobj +384 0 obj<>endobj +385 0 obj<>endobj +386 0 obj<>endobj +387 0 obj<>endobj +388 0 obj<>endobj +389 0 obj<>endobj +390 0 obj<>endobj +391 0 obj<>endobj +392 0 obj[341 0 R 342 0 R 343 0 R 344 0 R @@ -723,59 +735,9 @@ 374 0 R 375 0 R 376 0 R -377 0 R]endobj -379 0 obj<>endobj -380 0 obj<>endobj -381 0 obj<>endobj -382 0 obj<>endobj -383 0 obj<>endobj -384 0 obj<>endobj -385 0 obj<>endobj -386 0 obj<>endobj -387 0 obj<>endobj -388 0 obj<>endobj -389 0 obj<>endobj -390 0 obj<>endobj -391 0 obj<>endobj -392 0 obj<>endobj -393 0 obj<>endobj -394 0 obj<>endobj -395 0 obj<>endobj -396 0 obj<>endobj -397 0 obj<>endobj -398 0 obj<>endobj -399 0 obj<>endobj -400 0 obj<>endobj -401 0 obj<>endobj -402 0 obj<>endobj -403 0 obj<>endobj -404 0 obj<>endobj -405 0 obj<>endobj -406 0 obj<>endobj -407 0 obj<>endobj -408 0 obj<>endobj -409 0 obj<>endobj -410 0 obj<>endobj -411 0 obj<>endobj -412 0 obj<>endobj -413 0 obj<>endobj -414 0 obj<>endobj -415 0 obj<>endobj -416 0 obj<>endobj -417 0 obj<>endobj -418 0 obj<>endobj -419 0 obj<>endobj -420 0 obj<>endobj -421 0 obj<>endobj -422 0 obj<>endobj -423 0 obj<>endobj -424 0 obj<>endobj -425 0 obj<>endobj -426 0 obj<>endobj -427 0 obj<>endobj -428 0 obj<>endobj -429 0 obj<>endobj -430 0 obj[379 0 R +377 0 R +378 0 R +379 0 R 380 0 R 381 0 R 382 0 R @@ -787,9 +749,59 @@ 388 0 R 389 0 R 390 0 R -391 0 R -392 0 R -393 0 R +391 0 R]endobj +393 0 obj<>endobj +394 0 obj<>endobj +395 0 obj<>endobj +396 0 obj<>endobj +397 0 obj<>endobj +398 0 obj<>endobj +399 0 obj<>endobj +400 0 obj<>endobj +401 0 obj<>endobj +402 0 obj<>endobj +403 0 obj<>endobj +404 0 obj<>endobj +405 0 obj<>endobj +406 0 obj<>endobj +407 0 obj<>endobj +408 0 obj<>endobj +409 0 obj<>endobj +410 0 obj<>endobj +411 0 obj<>endobj +412 0 obj<>endobj +413 0 obj<>endobj +414 0 obj<>endobj +415 0 obj<>endobj +416 0 obj<>endobj +417 0 obj<>endobj +418 0 obj<>endobj +419 0 obj<>endobj +420 0 obj<>endobj +421 0 obj<>endobj +422 0 obj<>endobj +423 0 obj<>endobj +424 0 obj<>endobj +425 0 obj<>endobj +426 0 obj<>endobj +427 0 obj<>endobj +428 0 obj<>endobj +429 0 obj<>endobj +430 0 obj<>endobj +431 0 obj<>endobj +432 0 obj<>endobj +433 0 obj<>endobj +434 0 obj<>endobj +435 0 obj<>endobj +436 0 obj<>endobj +437 0 obj<>endobj +438 0 obj<>endobj +439 0 obj<>endobj +440 0 obj<>endobj +441 0 obj<>endobj +442 0 obj<>endobj +443 0 obj<>endobj +444 0 obj[393 0 R 394 0 R 395 0 R 396 0 R @@ -825,29 +837,9 @@ 426 0 R 427 0 R 428 0 R -429 0 R]endobj -431 0 obj<>endobj -432 0 obj<>endobj -433 0 obj<>endobj -434 0 obj<>endobj -435 0 obj<>endobj -436 0 obj<>endobj -437 0 obj<>endobj -438 0 obj<>endobj -439 0 obj<>endobj -440 0 obj<>endobj -441 0 obj<>endobj -442 0 obj<>endobj -443 0 obj<>endobj -444 0 obj<>endobj -445 0 obj<>endobj -446 0 obj<>endobj -447 0 obj<>endobj -448 0 obj<>endobj -449 0 obj<>endobj -450 0 obj<>endobj -451 0 obj<>endobj -452 0 obj[431 0 R +429 0 R +430 0 R +431 0 R 432 0 R 433 0 R 434 0 R @@ -859,2302 +851,2431 @@ 440 0 R 441 0 R 442 0 R -443 0 R -444 0 R -445 0 R +443 0 R]endobj +445 0 obj<>endobj +446 0 obj<>endobj +447 0 obj<>endobj +448 0 obj<>endobj +449 0 obj<>endobj +450 0 obj<>endobj +451 0 obj<>endobj +452 0 obj<>endobj +453 0 obj<>endobj +454 0 obj<>endobj +455 0 obj<>endobj +456 0 obj<>endobj +457 0 obj<>endobj +458 0 obj<>endobj +459 0 obj<>endobj +460 0 obj<>endobj +461 0 obj<>endobj +462 0 obj<>endobj +463 0 obj<>endobj +464 0 obj<>endobj +465 0 obj<>endobj +466 0 obj<>endobj +467 0 obj<>endobj +468 0 obj<>endobj +469 0 obj<>endobj +470 0 obj<>endobj +471 0 obj<>endobj +472 0 obj<>endobj +473 0 obj<>endobj +474 0 obj<>endobj +475 0 obj<>endobj +476 0 obj<>endobj +477 0 obj<>endobj +478 0 obj<>endobj +479 0 obj[445 0 R 446 0 R 447 0 R 448 0 R 449 0 R 450 0 R -451 0 R]endobj -453 0 obj<>endobj -454 0 obj<>endobj -455 0 obj[454 0 R]endobj -456 0 obj<>endobj -457 0 obj<>endobj -458 0 obj<>endobj -459 0 obj<>endobj -460 0 obj[457 0 R -459 0 R]endobj -461 0 obj<>endobj -462 0 obj<>endobj -463 0 obj<>endobj -464 0 obj<>endobj -465 0 obj<>endobj -466 0 obj<>endobj -467 0 obj[462 0 R +451 0 R +452 0 R +453 0 R +454 0 R +455 0 R +456 0 R +457 0 R +458 0 R +459 0 R +460 0 R +461 0 R +462 0 R +463 0 R 464 0 R -466 0 R]endobj -468 0 obj<>endobj -469 0 obj<>endobj -470 0 obj<>endobj -471 0 obj<>endobj -472 0 obj[469 0 R -471 0 R]endobj -473 0 obj<>endobj -474 0 obj<>endobj -475 0 obj[474 0 R]endobj -476 0 obj<>endobj -477 0 obj<>endobj -478 0 obj<>endobj -479 0 obj<>endobj -480 0 obj[477 0 R -479 0 R]endobj -481 0 obj<>endobj -482 0 obj<>endobj -483 0 obj<>endobj -484 0 obj<>endobj -485 0 obj<>endobj -486 0 obj<>endobj -487 0 obj[482 0 R -484 0 R +465 0 R +466 0 R +467 0 R +468 0 R +469 0 R +470 0 R +471 0 R +472 0 R +473 0 R +474 0 R +475 0 R +476 0 R +477 0 R +478 0 R]endobj +480 0 obj<>endobj +481 0 obj<>endobj +482 0 obj[481 0 R]endobj +483 0 obj<>endobj +484 0 obj<>endobj +485 0 obj<>endobj +486 0 obj<>endobj +487 0 obj[484 0 R 486 0 R]endobj -488 0 obj<>endobj -489 0 obj<>endobj -490 0 obj[489 0 R]endobj -491 0 obj<>endobj -492 0 obj<>endobj -493 0 obj<>endobj -494 0 obj<>endobj -495 0 obj<>endobj -496 0 obj<>endobj -497 0 obj<>endobj -498 0 obj<>endobj -499 0 obj<>endobj -500 0 obj<>endobj -501 0 obj<>endobj -502 0 obj<>endobj -503 0 obj[492 0 R -494 0 R -496 0 R -498 0 R -500 0 R -502 0 R]endobj -504 0 obj<>endobj -505 0 obj<>endobj -506 0 obj<>endobj -507 0 obj<>endobj -508 0 obj<>endobj -509 0 obj<>endobj -510 0 obj<>endobj -511 0 obj[505 0 R -507 0 R -509 0 R -510 0 R]endobj -512 0 obj<>endobj -513 0 obj<>endobj -514 0 obj<>endobj -515 0 obj<>endobj -516 0 obj<>endobj -517 0 obj<>endobj -518 0 obj<>endobj -519 0 obj<>endobj -520 0 obj<>endobj -521 0 obj<>endobj -522 0 obj<>endobj -523 0 obj[512 0 R -514 0 R -516 0 R -518 0 R -520 0 R -522 0 R]endobj -524 0 obj<>endobj -525 0 obj<>endobj -526 0 obj[525 0 R]endobj -527 0 obj<>endobj -528 0 obj<>endobj -529 0 obj<>endobj -530 0 obj<>endobj -531 0 obj<>endobj -532 0 obj<>endobj -533 0 obj<>endobj -534 0 obj<>endobj -535 0 obj<>endobj -536 0 obj<>endobj -537 0 obj[528 0 R -530 0 R -532 0 R +488 0 obj<>endobj +489 0 obj<>endobj +490 0 obj<>endobj +491 0 obj<>endobj +492 0 obj<>endobj +493 0 obj<>endobj +494 0 obj[489 0 R +491 0 R +493 0 R]endobj +495 0 obj<>endobj +496 0 obj<>endobj +497 0 obj<>endobj +498 0 obj<>endobj +499 0 obj[496 0 R +498 0 R]endobj +500 0 obj<>endobj +501 0 obj<>endobj +502 0 obj[501 0 R]endobj +503 0 obj<>endobj +504 0 obj<>endobj +505 0 obj<>endobj +506 0 obj<>endobj +507 0 obj[504 0 R +506 0 R]endobj +508 0 obj<>endobj +509 0 obj<>endobj +510 0 obj<>endobj +511 0 obj<>endobj +512 0 obj<>endobj +513 0 obj<>endobj +514 0 obj[509 0 R +511 0 R +513 0 R]endobj +515 0 obj<>endobj +516 0 obj<>endobj +517 0 obj[516 0 R]endobj +518 0 obj<>endobj +519 0 obj<>endobj +520 0 obj<>endobj +521 0 obj<>endobj +522 0 obj<>endobj +523 0 obj<>endobj +524 0 obj<>endobj +525 0 obj<>endobj +526 0 obj<>endobj +527 0 obj<>endobj +528 0 obj<>endobj +529 0 obj<>endobj +530 0 obj[519 0 R +521 0 R +523 0 R +525 0 R +527 0 R +529 0 R]endobj +531 0 obj<>endobj +532 0 obj<>endobj +533 0 obj<>endobj +534 0 obj<>endobj +535 0 obj<>endobj +536 0 obj<>endobj +537 0 obj<>endobj +538 0 obj[532 0 R 534 0 R -536 0 R]endobj -538 0 obj<>endobj -539 0 obj<>endobj -540 0 obj<>endobj -541 0 obj<>endobj -542 0 obj<>endobj -543 0 obj<>endobj -544 0 obj[539 0 R +536 0 R +537 0 R]endobj +539 0 obj<>endobj +540 0 obj<>endobj +541 0 obj<>endobj +542 0 obj<>endobj +543 0 obj<>endobj +544 0 obj<>endobj +545 0 obj<>endobj +546 0 obj<>endobj +547 0 obj<>endobj +548 0 obj<>endobj +549 0 obj<>endobj +550 0 obj[539 0 R 541 0 R -543 0 R]endobj -545 0 obj<>endobj -546 0 obj<>endobj -547 0 obj[546 0 R]endobj -548 0 obj<>endobj -549 0 obj<>endobj -550 0 obj<>endobj -551 0 obj<>endobj -552 0 obj<>endobj -553 0 obj<>endobj -554 0 obj[549 0 R -551 0 R -553 0 R]endobj -555 0 obj<>endobj -556 0 obj<>endobj -557 0 obj<>endobj -558 0 obj<>endobj -559 0 obj<>endobj -560 0 obj<>endobj -561 0 obj[556 0 R -558 0 R -560 0 R]endobj -562 0 obj<>endobj -563 0 obj<>endobj -564 0 obj<>endobj -565 0 obj<>endobj -566 0 obj<>endobj -567 0 obj<>endobj -568 0 obj<>endobj -569 0 obj<>endobj -570 0 obj[563 0 R -565 0 R -567 0 R -569 0 R]endobj -571 0 obj<>endobj -572 0 obj<>endobj -573 0 obj<>endobj -574 0 obj<>endobj -575 0 obj<>endobj -576 0 obj<>endobj -577 0 obj[572 0 R -574 0 R -576 0 R]endobj -578 0 obj<>endobj -579 0 obj<>endobj -580 0 obj[579 0 R]endobj -581 0 obj<>endobj -582 0 obj<>endobj -583 0 obj[582 0 R]endobj -584 0 obj<>endobj -585 0 obj<>endobj -586 0 obj<>endobj -587 0 obj<>endobj -588 0 obj<>endobj -589 0 obj<>endobj -590 0 obj<>endobj -591 0 obj<>endobj -592 0 obj<>endobj -593 0 obj<>endobj -594 0 obj<>endobj -595 0 obj<>endobj -596 0 obj<>endobj -597 0 obj<>endobj -598 0 obj<>endobj -599 0 obj<>endobj -600 0 obj[585 0 R -587 0 R -589 0 R -591 0 R -593 0 R +543 0 R +545 0 R +547 0 R +549 0 R]endobj +551 0 obj<>endobj +552 0 obj<>endobj +553 0 obj[552 0 R]endobj +554 0 obj<>endobj +555 0 obj<>endobj +556 0 obj<>endobj +557 0 obj<>endobj +558 0 obj<>endobj +559 0 obj<>endobj +560 0 obj<>endobj +561 0 obj<>endobj +562 0 obj<>endobj +563 0 obj<>endobj +564 0 obj[555 0 R +557 0 R +559 0 R +561 0 R +563 0 R]endobj +565 0 obj<>endobj +566 0 obj<>endobj +567 0 obj[566 0 R]endobj +568 0 obj<>endobj +569 0 obj<>endobj +570 0 obj<>endobj +571 0 obj<>endobj +572 0 obj<>endobj +573 0 obj<>endobj +574 0 obj[569 0 R +571 0 R +573 0 R]endobj +575 0 obj<>endobj +576 0 obj<>endobj +577 0 obj[576 0 R]endobj +578 0 obj<>endobj +579 0 obj<>endobj +580 0 obj<>endobj +581 0 obj<>endobj +582 0 obj<>endobj +583 0 obj<>endobj +584 0 obj[579 0 R +581 0 R +583 0 R]endobj +585 0 obj<>endobj +586 0 obj<>endobj +587 0 obj<>endobj +588 0 obj<>endobj +589 0 obj<>endobj +590 0 obj<>endobj +591 0 obj[586 0 R +588 0 R +590 0 R]endobj +592 0 obj<>endobj +593 0 obj<>endobj +594 0 obj<>endobj +595 0 obj<>endobj +596 0 obj<>endobj +597 0 obj<>endobj +598 0 obj<>endobj +599 0 obj<>endobj +600 0 obj[593 0 R 595 0 R 597 0 R 599 0 R]endobj -601 0 obj<>endobj -602 0 obj<>endobj -603 0 obj<>endobj -604 0 obj<>endobj -605 0 obj<>endobj -606 0 obj<>endobj -607 0 obj<>endobj -608 0 obj<>endobj -609 0 obj[602 0 R +601 0 obj<>endobj +602 0 obj<>endobj +603 0 obj<>endobj +604 0 obj<>endobj +605 0 obj<>endobj +606 0 obj<>endobj +607 0 obj[602 0 R 604 0 R -606 0 R -608 0 R]endobj -610 0 obj<>endobj -611 0 obj<>endobj -612 0 obj<>endobj -613 0 obj<>endobj -614 0 obj<>endobj -615 0 obj<>endobj -616 0 obj<>endobj -617 0 obj<>endobj -618 0 obj<>endobj -619 0 obj<>endobj -620 0 obj<>endobj -621 0 obj<>endobj -622 0 obj<>endobj -623 0 obj<>endobj -624 0 obj<>endobj -625 0 obj<>endobj -626 0 obj<>endobj -627 0 obj<>endobj -628 0 obj<>endobj -629 0 obj<>endobj -630 0 obj<>endobj -631 0 obj<>endobj -632 0 obj<>endobj -633 0 obj<>endobj -634 0 obj<>endobj -635 0 obj<>endobj -636 0 obj<>endobj -637 0 obj<>endobj -638 0 obj<>endobj -639 0 obj<>endobj -640 0 obj<>endobj -641 0 obj<>endobj -642 0 obj<>endobj -643 0 obj<>endobj -644 0 obj<>endobj -645 0 obj<>endobj -646 0 obj<>endobj -647 0 obj<>endobj -648 0 obj<>endobj -649 0 obj<>endobj -650 0 obj<>endobj -651 0 obj<>endobj -652 0 obj<>endobj -653 0 obj<>endobj -654 0 obj<>endobj -655 0 obj<>endobj -656 0 obj[611 0 R -613 0 R -615 0 R +606 0 R]endobj +608 0 obj<>endobj +609 0 obj<>endobj +610 0 obj[609 0 R]endobj +611 0 obj<>endobj +612 0 obj<>endobj +613 0 obj[612 0 R]endobj +614 0 obj<>endobj +615 0 obj<>endobj +616 0 obj<>endobj +617 0 obj<>endobj +618 0 obj<>endobj +619 0 obj<>endobj +620 0 obj<>endobj +621 0 obj<>endobj +622 0 obj<>endobj +623 0 obj<>endobj +624 0 obj<>endobj +625 0 obj<>endobj +626 0 obj<>endobj +627 0 obj<>endobj +628 0 obj[615 0 R 617 0 R 619 0 R 621 0 R 623 0 R 625 0 R -627 0 R -629 0 R -631 0 R -633 0 R +627 0 R]endobj +629 0 obj<>endobj +630 0 obj<>endobj +631 0 obj[630 0 R]endobj +632 0 obj<>endobj +633 0 obj<>endobj +634 0 obj<>endobj +635 0 obj<>endobj +636 0 obj<>endobj +637 0 obj<>endobj +638 0 obj<>endobj +639 0 obj<>endobj +640 0 obj[633 0 R 635 0 R 637 0 R -639 0 R -641 0 R -643 0 R -645 0 R -647 0 R -649 0 R -651 0 R -653 0 R -655 0 R]endobj -657 0 obj<>endobj -658 0 obj<>endobj -659 0 obj<>endobj -660 0 obj<>endobj -661 0 obj[658 0 R -660 0 R]endobj -662 0 obj<>endobj -663 0 obj<>endobj -664 0 obj<>endobj -665 0 obj<>endobj -666 0 obj[663 0 R -665 0 R]endobj -667 0 obj<>endobj -668 0 obj<>endobj -669 0 obj[668 0 R]endobj -670 0 obj<>endobj -671 0 obj<>endobj -672 0 obj<>endobj -673 0 obj<>endobj -674 0 obj[671 0 R -673 0 R]endobj -675 0 obj<>endobj -676 0 obj<>endobj -677 0 obj<>endobj -678 0 obj<>endobj -679 0 obj[676 0 R -678 0 R]endobj -680 0 obj<>endobj -681 0 obj<>endobj -682 0 obj<>endobj -683 0 obj<>endobj -684 0 obj<>endobj -685 0 obj<>endobj -686 0 obj<>endobj -687 0 obj<>endobj -688 0 obj<>endobj -689 0 obj<>endobj -690 0 obj<>endobj -691 0 obj<>endobj -692 0 obj<>endobj -693 0 obj<>endobj -694 0 obj<>endobj -695 0 obj<>endobj -696 0 obj[681 0 R -683 0 R -685 0 R -687 0 R -689 0 R -691 0 R -693 0 R -695 0 R]endobj -697 0 obj<>endobj -698 0 obj<>endobj -699 0 obj<>endobj -700 0 obj<>endobj -701 0 obj[698 0 R -700 0 R]endobj -702 0 obj<>endobj -703 0 obj<>endobj -704 0 obj[703 0 R]endobj -705 0 obj<>endobj -706 0 obj<>endobj -707 0 obj<>endobj -708 0 obj<>endobj -709 0 obj<>endobj -710 0 obj<>endobj -711 0 obj<>endobj -712 0 obj<>endobj -713 0 obj<>endobj -714 0 obj<>endobj -715 0 obj<>endobj -716 0 obj<>endobj -717 0 obj[706 0 R -708 0 R -710 0 R -712 0 R +639 0 R]endobj +641 0 obj<>endobj +642 0 obj<>endobj +643 0 obj<>endobj +644 0 obj<>endobj +645 0 obj<>endobj +646 0 obj<>endobj +647 0 obj<>endobj +648 0 obj<>endobj +649 0 obj<>endobj +650 0 obj<>endobj +651 0 obj<>endobj +652 0 obj<>endobj +653 0 obj<>endobj +654 0 obj<>endobj +655 0 obj<>endobj +656 0 obj<>endobj +657 0 obj<>endobj +658 0 obj<>endobj +659 0 obj<>endobj +660 0 obj<>endobj +661 0 obj<>endobj +662 0 obj<>endobj +663 0 obj<>endobj +664 0 obj<>endobj +665 0 obj<>endobj +666 0 obj<>endobj +667 0 obj<>endobj +668 0 obj<>endobj +669 0 obj<>endobj +670 0 obj<>endobj +671 0 obj<>endobj +672 0 obj<>endobj +673 0 obj<>endobj +674 0 obj<>endobj +675 0 obj<>endobj +676 0 obj<>endobj +677 0 obj<>endobj +678 0 obj<>endobj +679 0 obj<>endobj +680 0 obj<>endobj +681 0 obj<>endobj +682 0 obj<>endobj +683 0 obj<>endobj +684 0 obj<>endobj +685 0 obj<>endobj +686 0 obj<>endobj +687 0 obj[642 0 R +644 0 R +646 0 R +648 0 R +650 0 R +652 0 R +654 0 R +656 0 R +658 0 R +660 0 R +662 0 R +664 0 R +666 0 R +668 0 R +670 0 R +672 0 R +674 0 R +676 0 R +678 0 R +680 0 R +682 0 R +684 0 R +686 0 R]endobj +688 0 obj<>endobj +689 0 obj<>endobj +690 0 obj<>endobj +691 0 obj<>endobj +692 0 obj[689 0 R +691 0 R]endobj +693 0 obj<>endobj +694 0 obj<>endobj +695 0 obj<>endobj +696 0 obj<>endobj +697 0 obj[694 0 R +696 0 R]endobj +698 0 obj<>endobj +699 0 obj<>endobj +700 0 obj[699 0 R]endobj +701 0 obj<>endobj +702 0 obj<>endobj +703 0 obj<>endobj +704 0 obj<>endobj +705 0 obj[702 0 R +704 0 R]endobj +706 0 obj<>endobj +707 0 obj<>endobj +708 0 obj<>endobj +709 0 obj<>endobj +710 0 obj[707 0 R +709 0 R]endobj +711 0 obj<>endobj +712 0 obj<>endobj +713 0 obj<>endobj +714 0 obj<>endobj +715 0 obj<>endobj +716 0 obj<>endobj +717 0 obj<>endobj +718 0 obj<>endobj +719 0 obj<>endobj +720 0 obj<>endobj +721 0 obj<>endobj +722 0 obj<>endobj +723 0 obj<>endobj +724 0 obj<>endobj +725 0 obj<>endobj +726 0 obj<>endobj +727 0 obj[712 0 R 714 0 R -716 0 R]endobj -718 0 obj<>endobj -719 0 obj<>endobj -720 0 obj<>endobj -721 0 obj<>endobj -722 0 obj<>endobj -723 0 obj<>endobj -724 0 obj<>endobj -725 0 obj<>endobj -726 0 obj[719 0 R -721 0 R -723 0 R -725 0 R]endobj -727 0 obj<>endobj -728 0 obj<>endobj -729 0 obj[728 0 R]endobj -730 0 obj<>endobj -731 0 obj<>endobj -732 0 obj<>endobj -733 0 obj<>endobj -734 0 obj<>endobj -735 0 obj<>endobj -736 0 obj<>endobj -737 0 obj<>endobj -738 0 obj<>endobj -739 0 obj<>endobj -740 0 obj<>endobj -741 0 obj<>endobj -742 0 obj[731 0 R -733 0 R -735 0 R -737 0 R +716 0 R +718 0 R +720 0 R +722 0 R +724 0 R +726 0 R]endobj +728 0 obj<>endobj +729 0 obj<>endobj +730 0 obj<>endobj +731 0 obj<>endobj +732 0 obj[729 0 R +731 0 R]endobj +733 0 obj<>endobj +734 0 obj<>endobj +735 0 obj[734 0 R]endobj +736 0 obj<>endobj +737 0 obj<>endobj +738 0 obj<>endobj +739 0 obj<>endobj +740 0 obj<>endobj +741 0 obj<>endobj +742 0 obj<>endobj +743 0 obj<>endobj +744 0 obj<>endobj +745 0 obj<>endobj +746 0 obj<>endobj +747 0 obj<>endobj +748 0 obj[737 0 R 739 0 R -741 0 R]endobj -743 0 obj<>endobj -744 0 obj<>endobj -745 0 obj[744 0 R]endobj -746 0 obj<>endobj -747 0 obj<>endobj -748 0 obj[747 0 R]endobj -749 0 obj<>endobj -750 0 obj<>endobj -751 0 obj[750 0 R]endobj -752 0 obj<>endobj -753 0 obj<>endobj -754 0 obj<>endobj -755 0 obj<>endobj -756 0 obj<>endobj -757 0 obj<>endobj -758 0 obj<>endobj -759 0 obj<>endobj -760 0 obj[753 0 R -755 0 R -757 0 R -759 0 R]endobj -761 0 obj<>endobj -762 0 obj<>endobj -763 0 obj[762 0 R]endobj -764 0 obj<>endobj -765 0 obj<>endobj -766 0 obj<>endobj -767 0 obj<>endobj -768 0 obj<>endobj -769 0 obj<>endobj -770 0 obj[765 0 R +741 0 R +743 0 R +745 0 R +747 0 R]endobj +749 0 obj<>endobj +750 0 obj<>endobj +751 0 obj<>endobj +752 0 obj<>endobj +753 0 obj<>endobj +754 0 obj<>endobj +755 0 obj<>endobj +756 0 obj<>endobj +757 0 obj[750 0 R +752 0 R +754 0 R +756 0 R]endobj +758 0 obj<>endobj +759 0 obj<>endobj +760 0 obj<>endobj +761 0 obj<>endobj +762 0 obj<>endobj +763 0 obj<>endobj +764 0 obj<>endobj +765 0 obj<>endobj +766 0 obj<>endobj +767 0 obj<>endobj +768 0 obj<>endobj +769 0 obj<>endobj +770 0 obj<>endobj +771 0 obj<>endobj +772 0 obj[759 0 R +761 0 R +763 0 R +765 0 R 767 0 R -769 0 R]endobj -771 0 obj<>endobj -772 0 obj<>endobj -773 0 obj[772 0 R]endobj -774 0 obj<>endobj -775 0 obj<>endobj -776 0 obj<>endobj -777 0 obj<>endobj -778 0 obj<>endobj -779 0 obj<>endobj -780 0 obj<>endobj -781 0 obj<>endobj -782 0 obj<>endobj -783 0 obj<>endobj -784 0 obj<>endobj -785 0 obj<>endobj -786 0 obj<>endobj -787 0 obj<>endobj -788 0 obj<>endobj -789 0 obj<>endobj -790 0 obj<>endobj -791 0 obj<>endobj -792 0 obj<>endobj -793 0 obj<>endobj -794 0 obj<>endobj -795 0 obj<>endobj -796 0 obj<>endobj -797 0 obj<>endobj -798 0 obj<>endobj -799 0 obj<>endobj -800 0 obj<>endobj -801 0 obj<>endobj -802 0 obj<>endobj -803 0 obj<>endobj -804 0 obj<>endobj -805 0 obj<>endobj -806 0 obj<>endobj -807 0 obj<>endobj -808 0 obj<>endobj -809 0 obj<>endobj -810 0 obj<>endobj -811 0 obj<>endobj -812 0 obj<>endobj -813 0 obj<>endobj -814 0 obj<>endobj -815 0 obj<>endobj -816 0 obj<>endobj -817 0 obj<>endobj -818 0 obj<>endobj -819 0 obj<>endobj -820 0 obj<>endobj -821 0 obj<>endobj -822 0 obj<>endobj -823 0 obj<>endobj -824 0 obj<>endobj -825 0 obj<>endobj -826 0 obj<>endobj -827 0 obj<>endobj -828 0 obj<>endobj -829 0 obj<>endobj -830 0 obj<>endobj -831 0 obj<>endobj -832 0 obj<>endobj -833 0 obj<>endobj -834 0 obj<>endobj -835 0 obj<>endobj -836 0 obj<>endobj -837 0 obj<>endobj -838 0 obj<>endobj -839 0 obj<>endobj -840 0 obj<>endobj -841 0 obj<>endobj -842 0 obj<>endobj -843 0 obj<>endobj -844 0 obj<>endobj -845 0 obj<>endobj -846 0 obj<>endobj -847 0 obj<>endobj -848 0 obj<>endobj -849 0 obj<>endobj -850 0 obj<>endobj -851 0 obj<>endobj -852 0 obj<>endobj -853 0 obj<>endobj -854 0 obj<>endobj -855 0 obj<>endobj -856 0 obj<>endobj -857 0 obj<>endobj -858 0 obj<>endobj -859 0 obj<>endobj -860 0 obj<>endobj -861 0 obj<>endobj -862 0 obj<>endobj -863 0 obj<>endobj -864 0 obj<>endobj -865 0 obj<>endobj -866 0 obj<>endobj -867 0 obj<>endobj -868 0 obj<>endobj -869 0 obj<>endobj -870 0 obj<>endobj -871 0 obj<>endobj -872 0 obj<>endobj -873 0 obj<>endobj -874 0 obj<>endobj -875 0 obj<>endobj -876 0 obj<>endobj -877 0 obj<>endobj -878 0 obj<>endobj -879 0 obj<>endobj -880 0 obj<>endobj -881 0 obj<>endobj -882 0 obj<>endobj -883 0 obj<>endobj -884 0 obj<>endobj -885 0 obj<>endobj -886 0 obj<>endobj -887 0 obj<>endobj -888 0 obj<>endobj -889 0 obj<>endobj -890 0 obj<>endobj -891 0 obj<>endobj -892 0 obj<>endobj -893 0 obj<>endobj -894 0 obj<>endobj -895 0 obj<>endobj -896 0 obj<>endobj -897 0 obj<>endobj -898 0 obj<>endobj -899 0 obj<>endobj -900 0 obj<>endobj -901 0 obj<>endobj -902 0 obj<>endobj -903 0 obj<>endobj -904 0 obj<>endobj -905 0 obj<>endobj -906 0 obj<>endobj -907 0 obj<>endobj -908 0 obj<>endobj -909 0 obj<>endobj -910 0 obj<>endobj -911 0 obj<>endobj -912 0 obj<>endobj -913 0 obj<>endobj -914 0 obj<>endobj -915 0 obj<>endobj -916 0 obj<>endobj -917 0 obj<>endobj -918 0 obj<>endobj -919 0 obj<>endobj -920 0 obj<>endobj -921 0 obj<>endobj -922 0 obj<>endobj -923 0 obj<>endobj -924 0 obj<>endobj -925 0 obj<>endobj -926 0 obj<>endobj -927 0 obj<>endobj -928 0 obj<>endobj -929 0 obj<>endobj -930 0 obj<>endobj -931 0 obj<>endobj -932 0 obj<>endobj -933 0 obj<>endobj -934 0 obj<>endobj -935 0 obj<>endobj -936 0 obj<>endobj -937 0 obj<>endobj -938 0 obj<>endobj -939 0 obj<>endobj -940 0 obj<>endobj -941 0 obj<>endobj -942 0 obj<>endobj -943 0 obj<>endobj -944 0 obj<>endobj -945 0 obj<>endobj -946 0 obj<>endobj -947 0 obj<>endobj -948 0 obj<>endobj -949 0 obj<>endobj -950 0 obj<>endobj -951 0 obj<>endobj -952 0 obj<>endobj -953 0 obj<>endobj -954 0 obj<>endobj -955 0 obj<>endobj -956 0 obj<>endobj -957 0 obj<>endobj -958 0 obj<>endobj -959 0 obj<>endobj -960 0 obj<>endobj -961 0 obj<>endobj -962 0 obj<>endobj -963 0 obj<>endobj -964 0 obj<>endobj -965 0 obj<>endobj -966 0 obj<>endobj -967 0 obj<>endobj -968 0 obj<>endobj -969 0 obj<>endobj -970 0 obj<>endobj -971 0 obj<>endobj -972 0 obj<>endobj -973 0 obj<>endobj -974 0 obj<>endobj -975 0 obj<>endobj -976 0 obj<>endobj -977 0 obj<>endobj -978 0 obj<>endobj -979 0 obj<>endobj -980 0 obj<>endobj -981 0 obj<>endobj -982 0 obj<>endobj -983 0 obj<>endobj -984 0 obj<>endobj -985 0 obj<>endobj -986 0 obj<>endobj -987 0 obj<>endobj -988 0 obj<>endobj -989 0 obj<>endobj -990 0 obj<>endobj -991 0 obj<>endobj -992 0 obj<>endobj -993 0 obj<>endobj -994 0 obj<>endobj -995 0 obj<>endobj -996 0 obj<>endobj -997 0 obj<>endobj -998 0 obj<>endobj -999 0 obj<>endobj -1000 0 obj<>endobj -1001 0 obj<>endobj -1002 0 obj<>endobj -1003 0 obj<>endobj -1004 0 obj<>endobj -1005 0 obj<>endobj -1006 0 obj<>endobj -1007 0 obj<>endobj -1008 0 obj<>endobj -1009 0 obj<>endobj -1010 0 obj<>endobj -1011 0 obj<>endobj +774 0 obj<>endobj +775 0 obj[774 0 R]endobj +776 0 obj<>endobj +777 0 obj<>endobj +778 0 obj[777 0 R]endobj +779 0 obj<>endobj +780 0 obj<>endobj +781 0 obj[780 0 R]endobj +782 0 obj<>endobj +783 0 obj<>endobj +784 0 obj<>endobj +785 0 obj<>endobj +786 0 obj<>endobj +787 0 obj<>endobj +788 0 obj<>endobj +789 0 obj<>endobj +790 0 obj<>endobj +791 0 obj<>endobj +792 0 obj[783 0 R +785 0 R +787 0 R +789 0 R +791 0 R]endobj +793 0 obj<>endobj +794 0 obj<>endobj +795 0 obj<>endobj +796 0 obj<>endobj +797 0 obj<>endobj +798 0 obj<>endobj +799 0 obj<>endobj +800 0 obj<>endobj +801 0 obj[794 0 R +796 0 R +798 0 R +800 0 R]endobj +802 0 obj<>endobj +803 0 obj<>endobj +804 0 obj[803 0 R]endobj +805 0 obj<>endobj +806 0 obj<>endobj +807 0 obj[806 0 R]endobj +808 0 obj<>endobj +809 0 obj<>endobj +810 0 obj<>endobj +811 0 obj<>endobj +812 0 obj<>endobj +813 0 obj<>endobj +814 0 obj[809 0 R +811 0 R +813 0 R]endobj +815 0 obj<>endobj +816 0 obj<>endobj +817 0 obj[816 0 R]endobj +818 0 obj<>endobj +819 0 obj<>endobj +820 0 obj<>endobj +821 0 obj<>endobj +822 0 obj<>endobj +823 0 obj<>endobj +824 0 obj<>endobj +825 0 obj<>endobj +826 0 obj<>endobj +827 0 obj<>endobj +828 0 obj<>endobj +829 0 obj<>endobj +830 0 obj<>endobj +831 0 obj<>endobj +832 0 obj<>endobj +833 0 obj<>endobj +834 0 obj<>endobj +835 0 obj<>endobj +836 0 obj<>endobj +837 0 obj<>endobj +838 0 obj<>endobj +839 0 obj<>endobj +840 0 obj<>endobj +841 0 obj<>endobj +842 0 obj<>endobj +843 0 obj<>endobj +844 0 obj<>endobj +845 0 obj<>endobj +846 0 obj<>endobj +847 0 obj<>endobj +848 0 obj<>endobj +849 0 obj<>endobj +850 0 obj<>endobj +851 0 obj<>endobj +852 0 obj<>endobj +853 0 obj<>endobj +854 0 obj<>endobj +855 0 obj<>endobj +856 0 obj<>endobj +857 0 obj<>endobj +858 0 obj<>endobj +859 0 obj<>endobj +860 0 obj<>endobj +861 0 obj<>endobj +862 0 obj<>endobj +863 0 obj<>endobj +864 0 obj<>endobj +865 0 obj<>endobj +866 0 obj<>endobj +867 0 obj<>endobj +868 0 obj<>endobj +869 0 obj<>endobj +870 0 obj<>endobj +871 0 obj<>endobj +872 0 obj<>endobj +873 0 obj<>endobj +874 0 obj<>endobj +875 0 obj<>endobj +876 0 obj<>endobj +877 0 obj<>endobj +878 0 obj<>endobj +879 0 obj<>endobj +880 0 obj<>endobj +881 0 obj<>endobj +882 0 obj<>endobj +883 0 obj<>endobj +884 0 obj<>endobj +885 0 obj<>endobj +886 0 obj<>endobj +887 0 obj<>endobj +888 0 obj<>endobj +889 0 obj<>endobj +890 0 obj<>endobj +891 0 obj<>endobj +892 0 obj<>endobj +893 0 obj<>endobj +894 0 obj<>endobj +895 0 obj<>endobj +896 0 obj<>endobj +897 0 obj<>endobj +898 0 obj<>endobj +899 0 obj<>endobj +900 0 obj<>endobj +901 0 obj<>endobj +902 0 obj<>endobj +903 0 obj<>endobj +904 0 obj<>endobj +905 0 obj<>endobj +906 0 obj<>endobj +907 0 obj<>endobj +908 0 obj<>endobj +909 0 obj<>endobj +910 0 obj<>endobj +911 0 obj<>endobj +912 0 obj<>endobj +913 0 obj<>endobj +914 0 obj<>endobj +915 0 obj<>endobj +916 0 obj<>endobj +917 0 obj<>endobj +918 0 obj<>endobj +919 0 obj<>endobj +920 0 obj<>endobj +921 0 obj<>endobj +922 0 obj<>endobj +923 0 obj<>endobj +924 0 obj<>endobj +925 0 obj<>endobj +926 0 obj<>endobj +927 0 obj<>endobj +928 0 obj<>endobj +929 0 obj<>endobj +930 0 obj<>endobj +931 0 obj<>endobj +932 0 obj<>endobj +933 0 obj<>endobj +934 0 obj<>endobj +935 0 obj<>endobj +936 0 obj<>endobj +937 0 obj<>endobj +938 0 obj<>endobj +939 0 obj<>endobj +940 0 obj<>endobj +941 0 obj<>endobj +942 0 obj<>endobj +943 0 obj<>endobj +944 0 obj<>endobj +945 0 obj<>endobj +946 0 obj<>endobj +947 0 obj<>endobj +948 0 obj<>endobj +949 0 obj<>endobj +950 0 obj<>endobj +951 0 obj<>endobj +952 0 obj<>endobj +953 0 obj<>endobj +954 0 obj<>endobj +955 0 obj<>endobj +956 0 obj<>endobj +957 0 obj<>endobj +958 0 obj<>endobj +959 0 obj<>endobj +960 0 obj<>endobj +961 0 obj<>endobj +962 0 obj<>endobj +963 0 obj<>endobj +964 0 obj<>endobj +965 0 obj<>endobj +966 0 obj<>endobj +967 0 obj<>endobj +968 0 obj<>endobj +969 0 obj<>endobj +970 0 obj<>endobj +971 0 obj<>endobj +972 0 obj<>endobj +973 0 obj<>endobj +974 0 obj<>endobj +975 0 obj<>endobj +976 0 obj<>endobj +977 0 obj<>endobj +978 0 obj<>endobj +979 0 obj<>endobj +980 0 obj<>endobj +981 0 obj<>endobj +982 0 obj<>endobj +983 0 obj<>endobj +984 0 obj<>endobj +985 0 obj<>endobj +986 0 obj<>endobj +987 0 obj<>endobj +988 0 obj<>endobj +989 0 obj<>endobj +990 0 obj<>endobj +991 0 obj<>endobj +992 0 obj<>endobj +993 0 obj<>endobj +994 0 obj<>endobj +995 0 obj<>endobj +996 0 obj<>endobj +997 0 obj<>endobj +998 0 obj<>endobj +999 0 obj<>endobj +1000 0 obj<>endobj +1001 0 obj<>endobj +1002 0 obj<>endobj +1003 0 obj<>endobj +1004 0 obj<>endobj +1005 0 obj<>endobj +1006 0 obj<>endobj +1007 0 obj<>endobj +1008 0 obj<>endobj +1009 0 obj<>endobj +1010 0 obj<>endobj +1011 0 obj<>endobj +1012 0 obj<>endobj +1013 0 obj<>endobj +1014 0 obj<>endobj +1015 0 obj<>endobj +1016 0 obj<>endobj +1017 0 obj<>endobj +1018 0 obj<>endobj +1019 0 obj<>endobj +1020 0 obj<>endobj +1021 0 obj<>endobj +1022 0 obj<>endobj +1023 0 obj<>endobj +1024 0 obj<>endobj +1025 0 obj<>endobj +1026 0 obj<>endobj +1027 0 obj<>endobj +1028 0 obj<>endobj +1029 0 obj<>endobj +1030 0 obj<>endobj +1031 0 obj<>endobj +1032 0 obj<>endobj +1033 0 obj<>endobj +1034 0 obj<>endobj +1035 0 obj<>endobj +1036 0 obj<>endobj +1037 0 obj<>endobj +1038 0 obj<>endobj +1039 0 obj<>endobj +1040 0 obj<>endobj +1041 0 obj<>endobj +1042 0 obj<>endobj +1043 0 obj<>endobj +1044 0 obj<>endobj +1045 0 obj<>endobj +1046 0 obj<>endobj +1047 0 obj<>endobj +1048 0 obj<>endobj +1049 0 obj<>endobj +1050 0 obj<>endobj +1051 0 obj<>endobj +1052 0 obj<>endobj +1053 0 obj<>endobj +1054 0 obj<>endobj +1055 0 obj<>endobj +1056 0 obj<>endobj +1057 0 obj<>endobj +1058 0 obj<>endobj +1059 0 obj<>endobj +1060 0 obj<>endobj +1061 0 obj<>endobj +1062 0 obj<>endobj +1063 0 obj<>endobj +1064 0 obj<>endobj +1065 0 obj<>endobj +1066 0 obj<>endobj +1067 0 obj<>endobj +1068 0 obj<>endobj -1012 0 obj<>/XObject<<>>>>>>endobj -1013 0 obj<>stream +1069 0 obj<>/XObject<<>>>>>>endobj +1070 0 obj<>stream x+2T0BCs#c3\..}7K#4K=3cS`g`NvurT(JM.QpO.M+I, r endstream endobj -1014 0 obj<>/XObject<<>>>>/Annots 58 0 R>>endobj -1015 0 obj<>stream -x\r# }߯8U5%8*bɵycTHjt1$ѶU\3gh4f(YWfU]-^WOdmEV.⅃kGhIZ5)vͤBe~Rc\qi,zFȚ9UjLlB95%c4Gz nË̛I؊k^<ה|1%A1S"S`J4SHfٱPΌcuұjJNZL" 88)Ʃ)a:FzLe+<ٱHJ*[ylT;ʆqE.3kP'amC&aҌƪ)U!ɔ9M1NM ㊢gTC1md &aZ1cUa -et$C`4854+1 : -: cuL -l]Iƪrz=A@rCnn0NeECnNbZ: ԔX 9JsI(=ӵ b -s5S`67aL=bUaE&P@R8pAA#=V۬N, *qtPdM`!4mkZy /Gϕ :%%L!H'Ay M$11"WqJ"ƭ]EIv7H)jެxzZ7*]+ )125}J7fՄxgd\ÎX -ァnf[7ju/K&޾ѽǸ^~` ?rݍD=x[^߮l:"GJޡ -S]]j8-qfgrm\06g O'ow2fo_f߼,$Y$-ý:esEהQU'9DW#3WcGLځ[ -W;zH=ՑRrXhтxwJv -}𣽷Yo'+"ZXzY=Na^p3" ); -7FwsZ. -+!c4 -Jj>{<,iF:'+~8qVi(Aw> w;qA[[*քѩ}D~4;>hgdL-qb*;hD7F GO<#c3go ->CN^$~@e# Fи'BuF8'ndS t4CzIj'bu}'"ބX oqWO^0Y mQKZaI"-ėfy `ǒ78s9#jl{ !.|)S쿶k?U&n~@A:p*O?}'r|~ -g:DS+t+Cd7^>ڻDqo|yyBߦP՝کx8Mm?_3LG;5/p>|ls/\C|zKendstream -endobj -1016 0 obj<>/XObject<<>>>>/Annots 103 0 R>>endobj -1017 0 obj<>stream -x\r}WCB)ʒR$,d}Nt@4uqRE`f{z6KQj% mFaƇlY1ApQ59NdAF*yQLZ2PLJpu#(DC61j,t0ئq0I%uhW,cu;X2cJ>U46hwmB I2m7`ôHܵZOh'cڦz*TccLKpbVp1i!$1XB`B&f Ce,fT2[YUC,a!0Nf.e,9M%*II,i08V=ksm=bc&KYXv04nEM2[H"0X8X`; E4"2[%b խ53 b .oI(艌d 5" Agil'L,ae $XƲ7%,JňE`AWE%Xa% w[ʂe :KXT [%X`'YPW,fⱌjUd Apd 57#0Xc h>1ئKX`Rq4$.IIvZd7q:Gb"),21Rl-vH,aQV'33Ie [ Xr膫b,֢gczVdЧWo=2 DUvIܴ8FW -aFF2ƴ56Ld( -|!ǮG"ˆd 6lN$[b%dG 0qjqD%!98۲i9Ib|:g񕃱h,a;(`<0Lvk -H mhr(zB, @8Bꎕ>jJJBb>v~v/A -b6tg$cf X²g;l%u7"5̌ŝH,cHXgÞ)J%[Gd,j@,a8p<1cQ"l#I"blU\gEౌ`D9(qAk -\CH3#;leS#( -.DIF2$NY`X¢~=>XP0Yl$ɪ,`JJs Zs&µĆG"^X*R(GF.<8H##5,aTX¢?U7(ɖDL\(4db,I瑡aZ|r< -|ڡ+diq6(nּ}̜d,D,ae{!H* 1EΆP ,pM!% :C},a.086'>3c0 XpX4f*rj -\TlPEDw٠86n,c +;K,Z>g Cp8tJ -ZhBSiA*LD2[IBC$"0[ΉMP}`Px9kY<˵mz\Y'I\2SHkn Ӣk~Pگ FN - 41C%,Ms0tcElX0Fv1Y8&c,c a6Anw1w$Nr5D2Ƃ ;` 8rcmf`q!jXପ2Vfߑʌ"(*սsiCрtp3.2`\fS#`Z"íP&sdr-:" p$Sn\iSסֳ"QeBm9%}L/SBw[HdBeA,-xR뤼7NnLLkBĄ.qg'wəc܃Uvrxdrg~{>Ϟqe#ɵ1Q!=~~12J&L{8+G -\>'yU4buҥ;6i|_Hhb{!4b?<.O'/35RHpBQkUZ|vd`h֯dd}y[\i.*?&.Pjof~3 .t4m4qa0*;Gj3Kێ]aV -F %Baʅ=Pՠ7W?I=>8XhR<|^*;w?||2(2SG3u1_ EdBBg3#}BZ)JE='!I^m`~W2œ AD,ݫ ;A$|%F"G<#lӉ$>xxFiήW32`+i,\ĩѰ0Ge(\J&OWV+ -rs1 &]NZߗp)$n2?B;RWkEp#5s'_(}Xg~2[\f YR6 ~/@I]ՆO]=sQ$F E`M+U-!#n|֟.~O;bݾGx3zX0{T2wb*]^2u -4|ֆ*>vO!]-8uRjƍ}t`9hlmE;RhX곜^]%ޛdĔ]&Qw)|Fo5 -WnWW:A9Z p%dFHZhqu|iwhLdgK@%+~Yk? Q -{7U{.N'$gkp!}~CZ拾b)l~=o RYz~H7VL"_ABnT!nT{]mpr+|r>A ,~um/9pyf$^ÝaNޢ9|OOO.aKS-&G:;"YPU *CA t~@;x9OxPQoMcۣm -=ݷ?zF$u'.~Xish?n|'ryTuKe54wС>&ϻYPp5捤$d*mWdџK['n8M)^L.f†#i^w<ҋi"۾+ee3-N߭$k jܘu5 \?-ߘ RdHӗ:^$N&kz-yu+%ً~vM.qoNjɣ>/XObject<<>>>>/Annots 147 0 R>>endobj -1019 0 obj<>stream -x[s ~_q'wyɇNGԙq-yW:I b՞:=BRi`aڳR:Lʐ;aՠ` -`f9HRe`1Wz 0RDpcE:20q7+WA^G9,!r>X^IbˀulEAñÞKF Eg=B̑i'@bx .N|7BғvA#= !6n,fp: ={ vJ۹c6I{Gig`8DZ9iIBk8JJCSxoNXa1WI|F,Rt޴U1XڳE0u,arFP]"8)&FzLCҙXѥSE%ucD0gFvж{Na`cERN,A(FN)Bdf -3#0Eʰ؀ɕ°ܰ|fQcRVe䆍,if(h -u,?hk`qWu"#Q #ȉYxh  @% ctyaEL-k"^-2mE+`,-ҔCm5,?”TZSleEh RDG5X1,ܳԧe UQHlȥHKHibFvԸy76U:!Ҫ O2X\%(JAN;rB䶵#=&ˑTc\=SDzLv):Lu,0,Hei| -$7u6bF9=QQ_P࿵iPU.翵Q`RB -F(Qll*ZyHrB­4%U 1B ~E!k\rD B91 zt"k 8艚3N@u0c4ApqlCl!Nz"hDKPfN!̂d'l  C@'ЧvepA_ B#$j%}%3NbXu\w~ g9Ol΢E'W|tҳVfح8iɕg -I<,=&>Q{RΛm8YݑplՔz1jblYd^̊QS$(!/]E&NAT+$mvIT[<*ttp7~i8qiLud u4Ʌ=nf'4tվ6EI4L7# qX!UJ®j\ KM2/bU\K}褶3v঳}7}̗v3ŌDy.?M1Ɯ7]n(MhټoD)q95qF5؅[SMF^jCg]q?,ݲ2]52ᨀW2k2 ]6`-Aq.,hMSqÎILQh`],&yM -Ttɘ_uאceTp#LGۅl]I]GtfˡXԫ snWϽ,XCs`bGْeF,c ([x̰&ޗ^kW9naV[TzbUXReN0rPrxZ֙,ކHXq]N^Mn֭ %EFBkHIr]׭d<[=q4Ұb԰~[d]% +em=wD)}48nۄeYnK0W,l~-"DŽB C%e 9 Y?#R4v/LPo8kԵ ro$(wo3S//< pnMv̛\F 7 v#jU@\CCBHΆSNBz`{#}fHJLYMw-]kYuRYNRt gLO .XjY|%8RJ1QvjR@Z9'LxPx շ 5)$%+z:9ݭvNv[ܳ |M -=pw$̎* X$ZV9RV= ,icNcJLx٢"v4RB |qsܱwcԄaP=4G}lpM}s˿fgb=}:Q7dgFÃn>1?٧sr4ھYś@ծav+%qlo 9& d#}$:YƏ|ĿRx|_鲍[\c[M3jk2z6{xNNٚᙒ=wteu6u09a6>z;Zx9CH#\$8/~05i\.$S'T(YlbG&9B.jzwm[_O#[znendstream -endobj -1020 0 obj<>/XObject<<>>>>/Annots 192 0 R>>endobj -1021 0 obj<>stream -x\r }W)q,s3yIq[$m1EQ#YQԒ3xW,oRah4Fdg&d|0='O&u.&G.'UuPGp9i%q.?(#de~lە/'>h,cY5P1تlaIżE!4?#2[4bEV,am10XⱄSY1زC[ԢPCDk@$&N3Vu y% .EYK8 "M;X/E\WȪGj#2e m -Tu5$ - Vt &tEl0q'q[հ?1X2f2' •W&rsE\q'<Ҧe 4e032>V7\U.Pp[Pb IJie c# -yl -fMRDB%6,a(Tcy` g c,% sb-Z2ۨ1l2eR.d C!46lYq0X4YP'ff,61XD*Jk5y4 %91:5ͩ9_^OWG# dS0Xl؂b ~>3aXa1Z2 W2u+ĺ\ư=>g1JCeXf` >-4Ȅ3cQWNe :u% 23$c1*Y 3"2FbԠ0r?D3gb mtQmlx(2! aװ|Q833aQFA– U Ĵ81A#%aJt7` -d0ӄeH{,61XW;Kl<IYUS sl'"d|SHbkb P$s&Ϋ;@ D!Si $cg,ayK}b`Q՗j:f -$8GlNI-I/IEd,zq|(c՘'ʀªI2VQb 6j^I۔nb&(dcEG%(e  l3cppC 2hPH`'B,a1Xb&];9;bō\8&Q82ñ9Kc%,JD,aY7Uƪ2U6U"(aTP# -Z8J$Neva9U 3ikmGtb#< -)P,g9Tꆊ8lSqzD6#өF{Nܚ2!Aph8""IrѤˌ.IcQ8H?Y48P{4N@ Hҍ>X61"2Q{zKI3dʦU5>?<\r_n7;mKLy$aGLjۯe 0C,ہ|>|F>ڮ;yYAu/ \4h<ɧ8geBT<ʻ8'A׋l urOQhzuq| 9X"kV] !Zhk\\~ܓ}{ZFY'/XjCi*mh;yů|5HHn j\4 -nԕB"rf23"`]Qj_ՔywitF >+͡Pѣ6~WW$UDUpdQæe{⡲PuM=+8슢J[IQZV|tJ?t$r}rJmΦН>AiJư! uJst9mݗo^ Jk *㼾PL氖Bl[ŲW$ls6iѢ~^p^>0jZU -؃@t=5:qFr fVG0We& -թE7q0"d'$]uD$"vn}߽y{{|n =N&,AkkX&o paďp3ML i5SR! -ǿy2ȭoP< "diCp=!BAbv+P^]h#3XVhbFd-¡R]Wd-`*Qw ^:u^lPݥyNW m:}3Tsp mf~N"דy%]ElQR2B9ޅL7?ӡhڡOSUA8n&p_Ý,%@O!fb(TLQ⏷F?^D JkW ;Ǽ} ;y!W =kgj97W?<ժY(F -[Zi_9 Qmcif:1T 7/qbE InZYOEs7d9 MvӰWcGӻ2I ?xԦLQ,tSAn$=^]f ~Sݎ 7R*)睷AnWQFrv9/ 6d~CFʌ~ K;~~^lCMYwLɍGN.^wt0=obvjQzz!1!f[dx7j7|erdP]~?i9?]piLսzuq\W - ۂa 6jpnLqC6+ER*j Z>:'k\V6n/>R=>/XObject<<>>>>/Annots 233 0 R>>endobj -1023 0 obj<>stream -x[Ms7W-rՊSJvIRb_hrd1!9!%'u7nPڢI7o@Fcϳ,I4yRluNR<x#=IURt́er}f*Im8WINZJ =PE$墂M+7sH hCuͤL59vxi> l)K,7M|SA4g`m* BY!Ș*FFg+k0 k0ض k*3Tl1ؼt`rRZ՝ZUV#c|ϊ58_Y1o+V`|e3v`-WVb`9+k0b{y5F``b5m_5,rW c(k0 b2~IWgHaȼLb{Ajr~iX`/;Lȴ5lOi[ɺY`.*`K0`~-[Wq[ǬFEfd5l_G3)DlCLгX k00ED1b^LJy=&R1d^VH #8uk1?mX"_+ˣXz΀&@+ۼ@QLhh1X'Fm ,! hC[ilXbEm rCp@ 2!N&e&9<.hCǵ*g fPC"a,Yi,L{.1⦜䞅X H`8e +X6떑ֳҍnn}[>q%9 -N to4JZ \ZD .dOxҰ@:{bE/g FÞ-'BPaɠ BP:+)B ҁB2P03BJCPwae T䬧4V:`j4j[wcL$irsԳJLn\ӲOoEs L '"'A鍊]?R+rqsh7g\OWbVnvW'pR'c< Ę%V=94iNA PI JB0t\l5uziOut@ǟ,,/dA aS+Ϻj5gy5Fv/hclG%wv@DQFЫk]Ӈ\̄X\>F̚6h\nrpbi\*Z}ǫJ:55 -'=c U:h,d (FGD^B{_ jU50]ye\ޠ^t(s/۞D8\IewJACgt~]?`8igˉvw}_JijNۏD#h춶|g+\]2['ju퐅t:š?;(,Z|7rsOS\?KBM4#乙/LO)@8̆0`Kqu?L @-k}RߺYWZAe<|o26TST$f'33 -</d\= tz^y\`yy/hf>9zC5Akߴ|Z3'|6AMEDnNl}dR|!g-ϑ.e4zw^x:]-D^9!BzoՃ [}(^nQ5:D!V YU9~+ůOO?nYHcdvQd,3*Hy sh9 Ba EEvHBw&T'8NP /un:sq!ʾl_:0!>M62|ksk 8}bnv'W 8`8 _qЩw҃|V}=W/~W׋ emh~@_ Eendstream -endobj -1024 0 obj<>/XObject<<>>>>>>endobj -1025 0 obj<>stream +1071 0 obj<>/XObject<<>>>>/Annots 58 0 R>>endobj +1072 0 obj<>stream +x[Ms W-撒8qu,HI\@7䪘T#4 (KR?K<)b~R<=IrΓbWM67Wن8~ܐ'/jOҿ#i|xd*e^wGq춻9#P菟2z8fl,FykMr*F#qd[&Lme]FFO +,U[.&d:n[x佲'[Te߭9qX1Z bX\MzzH~{n̞SBK-c(?%NQZl0Z͸05Rm3{(yxA!{m:$ ܥT_ ɩؚp.B,?rV8ب:q?ꐫ P9__(r(i~-eeRZt <4rS&ږ:&Oʍ#oR #{c7f, PMW?v=xne8B")}7Q11zN<ϥi/{W/29|װ#hBbt=Avb;)JrlΊSDSǡ@Aspg3;3Vz~d밑?^}gX}.ƿ2ֻxv"ǣ $ӵ$(%.)>]ޜ"7Hp;v9|.q {1.$gBm8b^f^_"&[>h.:~5rGn~+ۻ&M_|⎯[$}E ۊ=dp5f}tpe\9M[V/Iٽ6=6&o}``'/m)>s][d۴TI ޘSZO endstream +endobj +1073 0 obj<>/XObject<<>>>>/Annots 103 0 R>>endobj +1074 0 obj<>stream +x\MsW!@)+V%+!*",e{3@ч)JVćb?e1+_;?)fWE[.Wb'pUtob];eb}?*qL$u!ZףI"YwnU:]Ň '7VTY`ĊNY`5YеDV vZJۚ%He'вN*vu2ԋRH4{;?p@5ɤb EX`;/`}?`XL"+ Zyb0jxUԘE(+tecgm%pU@s90SLN*Li +t +[T$\robgV vPF>}bpoY1L} c('{hb .mzn &ƚ@8am +0X`'zb+fBt* UA0U3C˒;,#mcXTgLu2+,B!ɬ`0osV1Ma[ ¨:bx f|b +g͌tl~ЌN]M3,b@`p⽱V#cE k0Cn4@5}m,B&B83jeRqФW$ vRX14MUERP(\6Ny`%#)pU 9;;&E< F D%H+Ԝ06C XI`$ͬ`3Ů!%CDg +Dl`Er?5̜@*)xob,&r/+[MDR aֱgFkLX\#dq=a=9 4ªG )+*@QuR1Xu`ڏi J<`گ,J,UL]M2쇝i'cdWYqQk'ņ#3+ʘ!U p2+f mSUFl+[x>bX2wǡ~|9>U bQOy a`aya&黜V1 \e`KX0ybaX +ێL-CW 'L40)U6 HDLF>Ak#r! Y3Qr(N)PqM+ü=R1!EGgS$ְ3Zp%J&|!&l䝳 aK]>adJ*8B%dwɃX8mMTw'7b8+ bۗuUs|f[{\ƋPŋc~j'͈ȤK~sؽ69'm5VofA*} +'I|[0?͇GLMQWR#&Xml0eqGe7pq[kRZ2Wũ̀`҆Kcuq:p&ͨ˃Vmc}،\(s\H|P|5|Dit@BX l|+,b]#Z-ؽmJ_=zAű Є4tmov!F79EͲŅ^gZֳat{ss3BUVDݏ3*gy5)Z:u%)Zw||R详S|ENס&*eUxD+ICu7^ #+=4MXޒ? M@oɽS&ŋ|3l3`M?jז+ųXTQtvXq≵"r } b.ҽ:5ϕ$Gv ;Wt V4"9׫ft$#!gƖg1+n5ufYL48ţ<Ƹkf0F'{w氵%HY\g-xwhos 3dqޡSS-n)ÕnZ=@/$g֞gd^%@+iÞ{{E [u -Rkt^=z;oЅGh(^2<6w:hzٞ/Fgzy&p +ŲO|7lB쩸IЇRUաl HfLfǏT-k+㘠Tn7,a?|1.~O/D_ҟ9{ʭyu8,cb;Η_8z@C'hm爷vx9,fMT}5۾w_6x+wskKv9le5L Cwp>{>K2;wuڠ3IP_]^Py +zk@TtKFO5 z/Z  h'qW;7cv|,ݽͱ>(9nxy"y&O忶K;;ru*nhMgOSsMZ%Q4 hRu۟uq>I4{z#mކ3=BW{}r>'DwMɗBhi4Mx5 .lkkO_fa^L8P=z:~j@(˟|Yʽ_ W8Kl;}o<Դ/"|ehB3N0\lv2(҉eh-qt-<>`Tw,M%\R$]Fvc׶]Rx.=zlhz^1%#EDX]*=&(QE'9vLۮ_*ߝ9Zx1|ɵ'K7J6A y UKM\;~f]0ZAtת5d>/XObject<<>>>>/Annots 147 0 R>>endobj +1076 0 obj<>stream +x[r}Wlɩ +/!ȑ˴*E>t4 *.YNÃ3=ӗϲ$ɓNg4/7.[{429{*q6spdys0cU>Т8E5AqKf\R$ &*.i``|zaƱ<*6I-:(W; MAU[C MDnV-!YT9I1ؚFVlRխؤ)="8*rbRyd0c[ƪ@UmZ%uEp^ŁqpdIl1Fauf32mq[J_)*3iTU2GE*>R +#+ &#Fz {i.)n_? KFiKH9-fduڴ9"രf͸F."(0yi+k1*8 UXkQ9 +"W4R{IVt: M1#SIl=2W )R +p_EX jDУ`Hz VbudE˳H#:q2]8ڑs4pHz Kz `Ú,j72ă" U"8㰳bɼFzLq׎uULݖI nD`i   +ji`dXdT%Ga<^ 8%U !3"r.PTf@0X9u048a³C`z bw5ej Nl[iMAGYf9U 6H"# L\!QTi57cEOU D(v66@LԆe( J% Fȁ%W4c<63&0DV ۓ -¥YFz "`#.b ' X-1`ǀv;v0y]5Bbb. 2+j7/umā!+Tv_o~90n(8fXG7ڏŭPۺg S|˶)+3GDkÎ.ףAxVu(vqm;Ъ|z9;Yj E0=o:GS}zgTJgt6 ym< B>edyq`w7s9yGEq+ +gRLggxoGu3>tŠ4x,!"2[ +eC̺ f|tg-(âz1ɶۼ6ŴQQl)}Å^Mȍl.:ʞ!?cxrpG=!5|}Q}UROTiXETyR?iVczVx3mg!hE'R sGj\WUk_@2I"n/?2ϥlfc`*ľrD,jnkDɲ{-%UO'r*T h$$q\ gi}1nN2EeP1VbRM,-oNJc=$LIF +x9 iHic'|#β4=:{h|P͵u2?D_MKpno3k 39rئ"t0!SݑI֤40-*wtA,|:`KIƾg]:rJJݍDh֩" .%Ґs#Yk/P$kCH ݍ 挍IAN^$V!wk5, :{C7ǥ>ukpV*zX~ C ]"; .vdkDf7|?2>~-C/TLђ0L_[Яx$cZ,X_cTKp-|_dW9 +ԍy94\X$wªT 繘6CmPxWϫFj]x#aLXKxHqo[<~7݆bkr m-/Cq^ LL𕸯t/~FvE_ҽE?قC;`6jś,&Gͽk'l؈]6 (TP%fbo[qX +^EGɑ؅7hs]p[%o+~4|A[\o *TG߻nQ_~(endstream +endobj +1077 0 obj<>/XObject<<>>>>/Annots 192 0 R>>endobj +1078 0 obj<>stream +x[]w }S>H&}%;uJcjEYLvEe?l^ J["9^ 8Iԓ$IGTE?d`?qp~;>HE\$Yl^mcE=ae۶: Mmcm޲yAj ^N+Gz 6P$C=[|-ڳmk VU)A d\:%= +aZc[cKY$UC+ KT]I)RA0*be[6i_ į9jI"E$"ӂ6` `lɱ"XY.JzL!uΝ҂ƊsMY 7 HtulMuØ8+z LƆ"dkF6XOM[(1X8xYV: 50a$DLlXZ-?+ĥ Qa ױPΉ8(Bcul+kP2{d3s(3L +$'F@tH "r"p8JVzL_ci`3 +:Ǵ$cu0ؖca`u`SZ…d )&>)+ÁEJ@6L U3ISFm`[Tc+6rð f*\ӱy+LW+sTE2 U-9rX"sÈ:LCTp: ePcx=mlP`;)@)gUAZQ\%=Xbc%9.y0q4cfTaq*=)p+(1XF?cM%Ǵ<9OW2t +A) ʡ*\My35lqRM%1، ԦFX֬ .v"jh9襜P*9X1%=+cƚ +!,2[ZlF@ME50/s$1X$ֳC20݄՛R Q9yl"TN2$|1RO<}bHNe{JlL'y p.׫Qaބ~dO,z Y's,;2hOS}>9>20L:8复?=>~/kŴ_u4U[y$%2̨[y -yB#Cq} Qݰ{؋b+GM(֮&*QW:вXبX vmr,dIR3N!ŨrXʣKIU08lUQh Ȥys>m8G_ [bk<}Bf)c[Au-jd>,G_]͌ȷ?c` >q1x4h=:똳b + +mÑTaD3hi5:["~lT{T<{ޞ{"/,~{yc-T], khlFE،.H>v%Ef4z*tKɢ]П*=U{W)XwI!+TByN C|ZևMk7C>j`;vQwgzRΘ6n(uE'~ij@n!GNkƅκ3iD3DQYe?LT$ZXDCSp¢J; +.c+"a|■+Ցmc\B7 +U@\Yܰn>?<Z U| Rw4Ͳ9nv6&I<jZ}x'fA{/FOì+2nq5k8+u7E)FUҳ ۦD+%A ˦ gDt{/AУAp$=&kt`ü,(?މ{TA=H+v?dFɯU2Ǜa$Mƅxzqԅj?k3f^dzn!w t%VV/q"ᖽaq3V><\<¶B|ŭ0js-US(>fN:v&5+8W;o x]uQ4PIZ3!Z*El~|=+Go,5{S{ 3/rGW?wُ8]v&c&<C@j2?fe|ѯbKƞ'[ L2'VY?%AkBzٟnƚګ^ !|e/<?X$_G^`ˎ +|g7p5g%/X;n8䗞I~s]qkT"ƯWX%ˋuanG1+@]ݾPS׻xhWO}'`hypN-n/kR;<}6כ|W *ԙ@I iņ.$R6o/ah^+h{*[ MK?N;4jRMgaTz\mN^  +Amm!uщTei]lş׷I?|`4@vmpWD~ڍëǢ;.)kO}d*4}o.< J1p Zlroe'|'diuǣw?IoxU㔸Tƅ)qI)B;QoAou3YB sG]}wLqk2fTܪ??Z1fwh/%[j Hq9,x=B ZݘLOt=qۊyd +&zLΰ+ nn̎y&~זr3_hz\[Og*t2;&̟FE-brkpR?{YgtaD{09KZs]^<ϓ]endstream +endobj +1079 0 obj<>/XObject<<>>>>/Annots 238 0 R>>endobj +1080 0 obj<>stream +x[MsWMRU7N)lU%Ed‹.+`A ՠ!Y:H*ozgw3I,ɫd+}fc!LFKY8ry-s_ +S"JnB񍎓Hr(r*8Ǎ U" r\SZx- RXr˕/ (&s[~(CF(A 398[- (k i.@ajh~ 4fB,5BZcɍ-5kwkgHS􆼁j hVa(cU65[pEYnj1@*c՘,Fd :kLaF+6b͞/Zi_ɪv 8)9s !6UsLj 6ceS a.FY=* ) , BY"{5DY +#{(+Pme<).l>ldmOY<.QVcWs* 0C˥F +p,RHk1XlݴE=U| :ȼyg! +1wCSPB?9Ce  +Qb* JY5+U +38,NU.,,NMF0B;)Sӂ 9(d1h)A1 1_)EVaX* aab_NTWA r}`Z,mP) +?+*Lk*dxo@J\"1XY'0^܇a`RԲ8HPgPڡQ 5J*L$#k3u yiĒ"H4=H^[=gR.5 "XbhVa£CT؃j;.<=y9!30jL}b)VaUY ֽٞ=( +NyOr +"s`S ,"5[tJV܉ 캍RA+ `GQIyڃG@qn@ja`ǡ()VۿID,`A_w`pR"o2CՁpbÒC/LDa` dy+fS&U]$7SikMa%,Wn<RHTCs'vQuXq~&nò]M:rU>Bw|u2(>X#13MC5vohS;;~ܪ^O47'7+6Tw{``d',兎o(TLevÀC{@Ə΄)džO'LbtZ-qNަ12yr>hO=v롛Nއ#\nEXXc]ct[>ϰ_)`ͰS{MF{CXVUu8Pm6IUIVo ʚ +Zd1˹ )U@48%l#uҕ*oU ec; +MMj~Vq̛$jD>ʨz י̗KY>*OR/MbrA +!8P`ZYOr9c+0yDkNopqq<į8SZW8_8<6~lk_ё4nBr?82e>py&? ;jL*]C8~g^jԄv)> ?"ںhS[wfuy z?zh aUg{Ѵiv$p._vH&{3.5=#͋WsZY|7i ; ZYt>2͵؉o4> 3v¿-htWW;rhf'T!dƟ&j68Z' qCm;{EWoMq^u_?hנO&a=r%JQYm4mqD>5I'?]$*T? +gq%nN%fE~S +2:T6mlLF55x_*d>)brg^NzbaWBl'0P;iZă@C?~.2`'4/C9y1a+};_Au+:tH[r7_lh[:oL)6L-\"{\xVBCwm'$z͆~)q 9j>M?y{7~~-:wƄUt~6 1*3%:'qXGf"X&՝8Wo +#+cxmbvv+B)ZEsoCz(L"].[;CZEL94sogʹ%Vbڶ~<OmEA/THyK0վ\=.>w_6]Kdӊz\RG^`_޼oxėdm$p7.%w}K,9Ѱ{.U;~.dykY%va|t1*tD ͚rkOe8oxaR4>(kp `̫Ӄ38Gm|zkp Tofr/򨦄(ޛ^Ֆwݺn=*||kPTÑ#{"գ2OR(Gn l"l?BW3 mㅳE-/;Wdďi3 m n4s0lU?7'05h|x r;rW/'ow㒗dķY-Zc޹?Cendstream +endobj +1081 0 obj<>/XObject<<>>>>/Annots 247 0 R>>endobj +1082 0 obj<>stream +xUMS0W",>czhIj\fb; NݕG1ӡ%iIiWPLd42=n.ylA;"z +2ȉ0/- K ri[DI)<(G)؂,5CPBI #LK Ga s:ްC$;J11]s2p,-J$̂3-AqP% X +MIQmjO2 %6WL;nh΢&(C*C|.Qb@FqZ9}E.y~kS_hҳZ23gzdh\Yj@]߲7::gneW_kֆ/RjIRecig*؊ڸk6+\դRIVzzq<_G]nrrt U+<, }]3ءg`E?aAޞ؃S/񮖙HOG.:V8}KrhtW{\9Gãoendstream +endobj +1083 0 obj<>/XObject<<>>>>>>endobj +1084 0 obj<>stream xA0 g;Gz3Ѹ?@H$"oN^LӤ{k_AR s"MpA[XlDŽf i+A/GBhrPC8$yײm'R?Us跡F.]Ƃ jq?xyƜ;endstream endobj -1026 0 obj<>/XObject<<>>>>/Annots 274 0 R>>endobj -1027 0 obj<>stream -xY[SH~Wt2U .M*&a؇y6($$;#b\2tnjJ&jU̼~C>}C/Qq`q"1ue%ΩU+0$y%1)F&Ma V 3y6MKFDG8V`ց^s`q+0MXVb?lB>tjϙ,' Ւ}dcMfcfA"+0RGXVb -5;V`|,+p )^|VVbZcw|DJ 6a,En>XwChCG IZRb1]++0 S HL-~:Z]_\4ϝCA'OS_w晨T]^]ퟰѯQvfA3u#ҳx.Z -?s[ꊺRFq^Zuzej_c?tg^u޴U]J7Tީ|$njo9S}ں]Qꖕ3ۼyoJnZ8,Nx*k$+(TpCӃdզWks;#/'unwyqⵔn.X%aFF&˟:oj5vFCy=~ޚ0Gb5BV@QQꓮto~-V@*쟧4dJ P{e1*vORtϜ?moVyJYTW[:TiDD6+{^<^MyQ~3馰.>bɗ[M_Uf -T6PS[Br[&ChF>\pyߛV靚]?t@FXgD`cV_b.'V8Jsv -dnS"}᥺n4$ܖK4o)Mo4M!WMMhނ"f:UMy8fJw T]tCq):^B.LlĄnQ> f5tS2?% B:e]u>&}Vrbڄ=Ly53^jr(}tUtbbWO'Gؙo'?;\\|y8S'|'3"8S[yw7g}vHgh[uSWc|Xbq x#o[}Sc%,8zaV7G*^iϵ/j\ԝ-% W};%t{G_NMa`zի{ۑ_1XIzdG)>.X(%X؟"zުڋY۫|M2|Ex%'9 \>endstream -endobj -1028 0 obj<>/XObject<<>>>>/Annots 326 0 R>>endobj -1029 0 obj<>stream -xZ]s|ׯ؇<8 O)>\e霓*$IB@%v:BSWs3=7.l<7?-fۺyyqWg.OGs!ªQft٘SUq>Z -'6S8)bgV14xIo]"L],d63@N (NRY`!_`Hc#t -"4빼\Rax6 x2e*1 OP$3iLhP LI8XABș6>IR1%c8T1c .'JXEV1%@%ao] t%^ # H0  *%+.ϑiSi ɴ p*9m 3!3,dI뇦s+Ґ S*~h2IPᩛC#P4X_m078R &Kf.iKX`)csp}EV1Sg*e#+| -5 U>+FNluˊ.٠e[7y&ml)gK@ S' ΔpC!ZV 6!}qbu'`Hu`ȘU {F+c9U g J1q2eC&`藘6.abhp9 1IƮiFʳxz0b 0Y`a81w1aC -4/DzC}妒xvr;V0XX`qS#ש˺0Xe' M*{B"# O23P$ݸgqպ[m]봱^v^KνpWmٸksm]o6EqX;|%lh -/AwmqW--^\n]=6nWUqe{M~|,T՗IN|إ_GwSw+廵Vn]?DJ7un+eX8hw纫 c~`OEk]{[8C5 s)]vrb8us^Ke4n -?#n`<)a}x {5-w]Uh;گnvs,&x6sPw/1_} o@'O>/XObject<<>>>>/Annots 378 0 R>>endobj -1031 0 obj<>stream -xZ]oF}a -IU`p"vۂh$~ϹC\W~ϝ;~b3K47$D rI1IL^ȬM627' -|>*NI$3,IAdNb "1ljVaE"eT)@Hn,K%[2pȤ88/$vwfВgfiL`gS-,j_ U$Z1,E1  ,F3 :NAlNAzFB^Uj 5GZUd)%ը@HW*Hܙ, -rK5 PU,:9#XN=+B #d!IflRUlU`Zq@sS:591X903~`0{Vc)ƬAQ/U )yRcy>1؂UU$ G4{Va7 -E4ksj VMy,Gp*ȓh7_ SQ3J-9!4e -XaHc$GjL8(Vax;K`V|86a+!ʝȓ/0Xt)(u5&+qP`;V ;{Cg9Q&4sNX'9+PrC8Ƣ99uv'a+y# -ukf₇XÊsd 8Vņ,.xHX~t8a SApi:QB|OK<1Ǡx/psGc^d 3 -z\Hman:qCn=nq'4,C^b)9DfQ)&_s޼1}7foUގ,GRg%AkoaIy iaݙ5GbA_D,[sao5 -{ ъGSnm}@\GfgA a6iw?y۾+7BgAnkQ^agNϖMU/]!m6.Wf/âNuEծkgի@rǢMtjSUt+V4G2|) '6Ѻl6omiC=m6lI\-{+x Zo lHXk4[?-:WOTlGqAi쌏}UOuq!pnh[x{8rTq=eǨ@J8'JikeW\}ݛ/ېY -n7_E4eSuun6z{\x%(\VS_p@_ g -FœdMUrD0V 2Iܵ8/ޛժ:=|^ݪGhl^CXf#I{vs:a/6'  w砬]k+P3(kQoeDZ0[)4 dxج^vq VhulR8\}3).yW;"+)3m -rR.|lLֻ)tX儓/m>C@+ oF@ål,ݶ7gUz{l?P3D{%G~\nv,!v:laM/ OS}L]8}1T6rv vFpzS2#Jx wm_qY5US -樃!Fxt^= -s݅Ʃ _s[ܵ^~8\8c#;;<:{Gh s0HVґpIݓrM+yYPKOgW;tq͏.&1t7ې{<$C?z;13& iv0݉^Z?PшoQOGon.ߝqGZámFSOg ^om )P RF?' endstream -endobj -1032 0 obj<>/XObject<<>>>>/Annots 430 0 R>>endobj -1033 0 obj<>stream -xZ]SH}W[!E RY4-$=綬bhrpt?ۂ?NB'4yd,'i#דtvlsm09M2̣Y'SQr)RcqtZhVayxjVᵉ4V`SMH* ^N DˆRDml2;504f$ -n3#1#cdSY\ȕx!a1dgo5r6^XĻ`gU>c}zD Z@0`QX* V~Xfp8'Ni 6zeA^ -`8 -M2e#  -BVHj 6̦ 5*YJ; -N*DNSI 'l\0Uv Xr.cWFVcv':Va(0tFm ;Q ;}PA8RcESp(ɱ՘p0b*fҲEt: tJBO\6lkrI+TIm:Va^ZBc%-@vjqf#ґ,62Xf*Ly(YaZ8RpZ ;H99Rc(@ -9+YT#'tI=V $IŠUy`k6b@ QT1c-(XH|"TȯR"oچrtq)B|eGKk&"{JK2'v8 Z1 -n.FQtw "4w|rsױ[ǹoi'|*?fYN@ C!^=eoؕ:Sf]slY4?WfS/MoۃS俚l=v}װXo;pbcud?WSw9BңëPo Ci*dK5;SS.si7_6?]{4 -+o^}%I۲^XU1FpkOӼozd~יߺxU.Me qocӮm%og7n<qmUok+mM%r`ɿijiWϪy ͋j]"sKs[$s5}#KzA5DxvnqK?KHo+&N v6RhbDz[tpvyW/pp{yDDڿo;.7S6ڧ^j}XWdV\o]v h\oW6ʉcr}RfL{|./۶6/zbjwN -`c_ 7iʇf׳JrDwXuݪ X.|@8.NC4wΧuRxm]r[ulofã;x3ibUVV9km&xZw46w"fYm1b@\^(o5{R9foriGLw9_׺>b` C61kz=-J45y2+1} -WV@#j˗c9r1VX=#M_Uk\plGVM3|7?}2ޛX0ÿ1uϮ> 3ڈbp;||wWcY?{\H',)|wgendstream -endobj -1034 0 obj<>/XObject<<>>>>/Annots 452 0 R>>endobj -1035 0 obj<>stream -xnFsi1%BNI$47)ZV*)I];t?ٙ^( -OQQRuXA'E yt< Z< 5̢ aRl( 5;&ˆƩ3C* $Qa? l(ƼȚ@8 ӠbspqD *899*Jx|CF Uku`I8 HL ->P(Y2Tl%CE -g+jE`du3W3[ɬJFA+MQIQI>gPxd<汾᱾D}OSOuөNXvSmOjp7;U0睩d^䠒9|UDeR<e$L!Ԑ ىE7 ,Tbrӛ-ӻF̳s<6jW$1o5!c+*Gɩaj n;f XOj=9U0<#ʩf -![_#W p OɾFc[bC+f|7ŏNm5FfDkh`Ȑ=C6i8CD #8!<UWbK<&OH17PCE.1QY0ԂORڠprrϤ88&+sYcuϻnw)-<\CZWgH5+~3Z~+!]`iDpi<^Ooh86f"_קZE49Sް-x HxU6muDij;PSSI-Uy){z:bw>χY_ِ>c1 -_'ƳD*eZv}{z;u/б72E/L‰ٴ(ѶGkDv}[nB/z6͍J˪֙U5eS7. s~7c3tX =e^OR}gx]^c>7/ pX{F7ǭl33Z}]]s7-ze0kTum"gj9 euyG>lB[^-/\]q]> -Na ٳ>ww޵߶S< w,ƛM?te5p7<8b!_Aendstream -endobj -1036 0 obj<>/XObject<<>>>>/Annots 455 0 R>>endobj -1037 0 obj<>stream -xVMo6WL6bڲ-)=n|鑖(D$!Im -~̛7oQFSeQ~EE;)G_>fh1_D>j"_9WK|)Bq腅|&?݌&4Ҧ6e'rE?KiH6lG "8zTGkdIVJC))ˆs%0|}P%tSP* Rjld+꽪,Ȁ@Zc;h{~}7C8Aּ7ȶN;F -H޶*{uRARB}pwi%V"_i,g|oXџZ2ƳψwIsA[C"62#wJ:-yeL܎.L|BX{7*{Y1畎ifb6T:^7%SվF:Z-\1/r=8ٝmbd10xAbWz?'ŏASE(h׶oJ}LY%YFwI!vY&l )A'Q-l(Uz`Zy -}@R)D ߦՓPXJ9˗ctzjq D"Bz;Uh Gl6`U=gar\πņ,QA2mil -E:GX ̝ˀo@yDz>7{2zKo*: q( Ez6Oa@0XQ(MGWVwhhDݬ=+ٯ٩ɸ!z)7KthM;bc,g;NJJUFy! ~F)=[(DʅH4*)Y'a7tËΛ;F&Ϻ Ҡ1}Fu9{Rmt2;+e֎Uk(}?^a` :FYNfcɏ`@f9kĹm >7oATV4 _V#endstream -endobj -1038 0 obj<>/XObject<<>>>>>>endobj -1039 0 obj<>stream -xV]o6}ϯK]?8vi M4@IF"JsIivԴ8v,~s;S:|IYs0I&4?:JVX /+fGdԃo/^ߞ|,WSZ 4Y$tJ%JkRʌ.TZTZ&/_`nASXasd u%ˉfS'.;R:ؖ_GMseesUi>:ǙִBat:yE[[r&̄&'%U!x464M)a²WDpnpq#JTXu;$)/E29"qOdMsJQ%)w9hemRQ'T*2h ВtKBo|$̴!D8i} -s$y,զDh$ۇaYH zVp8х @5`w^&PaRW2pr酪͋bsߏu4vΣ>YOj$(`Մ:K 1E@'d] A#q-x̄۴( =SAtIZ|md -G 04 fļe!9[}5|n\V qm2QP*ƵJ'7/i Ka -'R|Z>E] C5]wo~39rlPj|EEyhǓ:41KS̾m,ď}1BvF#>3MpW#RVHmxkDwZO}'x%#5k( yY.Ђ~}،b3e76&HyI ݓ RB`ef4E~Q=a"1Ǿlwhb0WSs6(Vz\cz}ת+֮n;^`vŮ69V]ޝ%ӞbHCy /_\BkV^fAP\RAStq~hρ~'uu>]b_i]z} V'p;N0r6{o{=4ߐendstream -endobj -1040 0 obj<>/XObject<<>>>>>>endobj -1041 0 obj<>stream -xWkS7ίux72IZfBm&3Ȼ2Vؕ -?0%)a8sP:јjix2ʆ4{ZIӽއ 4xrBӂpߧiݘ;f a7{N{K%C>/pM9*\iYXOӞ.植_(}~/&Q<;ɶ!iw وjgʸs:ڌ Y*U -[.in,N\-LS&]X^w]KI?pErV: `DdѢ5|t"<VPTA 4~RUcDʽem -L$4}F7QD edSҵ` v\LVHrc7E;id07TJYy7J4%jC X%HEDL0CQW\͗++]5)^pwLr+]7:sDԜRn)\PaϞGJuY#\}"+Nއd-@nmO/H"‡m4yUC5B odD<^:2v ļL)L>#6<5Bc -q3d@"HhsQf"=)rQlmSٿ -rU? Gq095Uf*u'JVaF`{R-BԎq; ۟Wara) eɣSPA=7i*ΝLaSn ީRyer׼rtq4 q6˚g`^3 -!ԅ -!+7!/)?X~k9:k詄+ 6,-m=-mFiS}(g"l}y2w~ni,sJ>ʼbVJz8ٮ/*h/b;P( uضPmc aqR6Y8@WG?բP[pi]廫CݳdKz Zqe̽f_#@JsaFFR{asbiKSUܽuM k…Cox LGI;'c|ʘ k7ߞӕ50xɃcwӅ<|+0ry/Xlendstream -endobj -1042 0 obj<>/XObject<<>>>>>>endobj -1043 0 obj<>stream -xVOF_1=j'!?Њ+Gt@I6Yws5!}ځ=w{3(.~c?8F]'р{+%-i/oOQףּ?y}s9xD%xg|w4KZq4h䚆g4++ȭ$ٕ(%(T.$ik,eyZUr!<_.K˙r۵<{i_ѝ;vu/~) Ӌ q§ғ6A=fz't;NH$=4Z^hh"2r?wW7wW3q4PA)=9~9|bXRyX+|70d߰}+1%r(>4)s('[ z+ZTڔ}|܉ C#֙ ?Ї ߨ;F6WP~wM5TFHc®qotE2?/CwL@_L|m?ȚC+-NlDV>/XObject<<>>>>>>endobj -1045 0 obj<>stream -xV]s8}ϯp1!@:;̤-ɋl pcKԒ!=WɄ/KG{g!x@#J~Ч"p2KIkrto<N8|{U0iO>|RRdLQJ@StC.M8 -$I[ahY:ꪤ]\$T,]W*OIXdZG? /(&EH)30E/6ؠ;=]mb,Ξn## xTRa.j1T'U!6ӊ:İL$`=3`d%,di09ʣhdt(?| EA€n3QdjC O Xl{Ъy;v jklNlr =]X(3#?h蝤@_)kQ喖oHP 쀢mf PxR sXo -Qfl Ա}JʴtSƙ6;2E$Z[u дƜ.2^,LL4@3W\tQ\ :9˽O" \~f`B(\&`ժ,$`+iNe n|eymGa]^ ކw^!*^k[F/ԁs~C@и.g!~iS %i/?t#')#iH, ah` c;v2Yf^g4F^d>I7ϊg)L-rܺ6V, -HEW -c0ʳGng7 -U#GU~l-e!2n&6ive]`a\W+,'k1he̫uvaBi >n+,T)#@]6AdHa"98`{ rmGĝj&1;k X!E8a.gP#Ln>rJ%v`GL ]]>o#[JL7} `U! e(J+ϵ)zi]!Vb9<ff}RĎnf LtӶ-l>6Y\r͑&ƔGWmZ:h,U!b#waOLͺ}c qjKdK7p= $W&4p?Nnpy"6'G!nj7،qS0PQsǧIlg J$<w㾩<[U7Ƌ8i}S_2uqGLݵ"zX|"#>/XObject<<>>>>>>endobj -1047 0 obj<>stream -xmVmoH_1ʗ+RKҒ>EB-G!N{MڻfwMȿu Bic23_f4ſ-t=S?s:Xgjb(/VGf紪kq!tJxV̦޸V_9fYMkEۍ)7\iuR?wd5)Pt:_xѨ1(n]\=Yc Rw$_!o ;mb`d0jfD!N1Qf`5HB(g ݁ 8A&OOJmlB91yKv녂X]ު/ qe(MEFc@9tv++@~ t*^Ӡ)03^_|k{u1c#Srx"¼:!軲`*$*UMppQ? 4/P -ivBr߁ 6 rS0٭*e 7W77ohI\hsm4JT+1r^Kr(-d>س -fz㗃.K˰"55w/Ӕ`rYxtA3=D eF 7NQhNÚw&u -w$kLr-p_)Nto.w_veG([>^8]qWϗrqk7~.{;endstream -endobj -1048 0 obj<>/XObject<<>>>>>>endobj -1049 0 obj<>stream -xVMs6Wd&>kٙAD3LLDj`Њ}dc{[u21~&di~q|p0}.;]_tLY _gs -1_\E㥅#RAMkɉz'I$fn^^LIBk)+&rH2+G$F{#ArLI^:8,BS#milMГT!)RBXOr*^>'(#2דY5!,kv IR(xHFV0w^6M#0*Ә7حUG:()JˤnzϨM[TZ܄ -Wtdl&ꠑ b[% (VmjLl8GrшW V%;Ja+{ D_Nj Hր92NGa?),p#$ 7Ue\S frYtv@*E[6&rf?m}Kںa:3m:9 -~ .τ''_2QӠ._^ɕ *U%l1) (ZrpT{7t=^ܩGmZw Ί'p .1F@WTɸL4u]759M3""|VQ ߰.z)G裎PoAҺ1Vc[GCFoi/#+ETTD)JW)-@tBofk>(]޾[RqJ.7Wi@' ]hh:hrGo -zWIkI=@`AYi-YK_DQ/b,@8Uvߞgdendstream -endobj -1050 0 obj<>/XObject<<>>>>>>endobj -1051 0 obj<>stream -xWNH%_CB0#f24&=ݙn$m!ݮzޫ 3ŔN1tJO5rc&Z5?]в 9>e~x~S4wTjLSr肌D? XcRwW9R5Ը2Y|#Mf`I4=I)-uhh:1|ﭥf)wulA:?*e,8YnR)]s-Ѓnxg7axGEO2kg𴼸_RpeQ ټySHhTU"N1UT#[oLUq'|CZ#umz@cw DuASP;*Y9ˇ,]k7KRX|+$9%렛v \dB0ʪ;iVmwҶF#4vbjO yyep2,"B[뎬+E!u `QdaYa*j'SmV@L32R/J,c[7`ՅTR[> ,oD14G_-G~ցa;x `:Vmfmyc>ldoF5WރWuzWF'^O~WxMdFJE]@T\.TO BqIT7&SWޣzac(ŇZd(8HQɰ4X*t7V"MQ_B۝H/ҢCo=%*Wh(W2)]t8{ً7OAd[8J]fA -HHlܥs'ƾ^ D(z:+z~PguR|g%òp7El|o օ'-mj~|P@Nk)gRb~Xaӽp̸0 -X7$@:J1S{>$k$V(<:88\h-PA'yRsEV}=^t:Un i_5ظThGki7 ܐ&ۮN "*0C=6s؋tglI$H@YD r- "o ,3#zTӣ"/i>ٶb ,+R&-Jap@.`8k͓Srv A$@`?R;,`;S]IJk8Op:u?q`tv}Pzxmtw Nj*&}Oͣ-Yep#MttesNNjU`HQ\2 q5:bxeCjFrnT֨-`&S3[i+|,pEG򋣛oKH|;c c@RV UxNߪ dSf'y %/,bn3mU&\q!_o}.ԍvoI9:=i|;n cp<>`סb.xɌ\}/Dendstream -endobj -1052 0 obj<>/XObject<<>>>>>>endobj -1053 0 obj<>stream -xWNI}+j7lo@ -izZi%$3Ӷ;t;=8==d DQ$c{rSoG}_&zY'وF࿓4zlA6hp5;:<~fs$_LhVz4+5FAY3z ɕ)I \ғ5zӡpxJ9Wz)Q -VZvM)XaG! -]m*3t G,[k?dC1CH^UP!j/9<^%uxQf@yɯvRr17 ~>;M0e4aet2)"S ,4\n|枞.\]>=u2䗶%-=*c@˜QSc^m|JkcHC$2}7` ,F^@\(ȨP.W[Nڕm+g]ѧ\kfqjO Q -h3~kgksH4dt;oU 7P'K Y#OIS+l1Se)ĀսO`?!X -Bfty{]^u{s7ߏ_Gk M!#O(}f7PO12ǎ_-wj.`*(_؁@hj,f&J: -ʢ;dW|`2Ra`5a'uT4Do7BlbuEW4o 7Tk7VmS=qIK =ޱzYb^T"|\QZ[Ԯrgmu̞{9Pws&g>|Ѹ_C"H<1hW\cnaLONPv_8(/p~\I7&Fendstream -endobj -1054 0 obj<>/XObject<<>>>>>>endobj -1055 0 obj<>stream -xuWn8}W ,j9v\-z]ضƻy%b#*)eIȹ9sfbJrFW Jʋ%>g%elKibWN ./ifUi-]Mg8>=>-qxTSBԈ\I -%uMɻ?o?~ͩQLMC.7M=MI5eU˔2cIP%|ӫxa>(/4'f]k7Z=<^yLי?'~BBgϜw}" zhQdZz: QIn_= dNڝujdk`XZ뚔863*p(޶ysLH8(=)}Y}9XY?WH_ PH[B!|{uL?('ւWtNluvɉH(TJZ=1 -kP3B "F$A?X+8uSj冈88ʀrH{^^"P 4ǝF$; XDj:y\-˻gijJU@/k7 -=v^]?0t8ahGfGgjX)P>p*Bzc>OAz@#'7=tsyۖQ;YD][rC]:WRf?܅=:FU?"PsFcLssսT–sʹw HC/BZ)Vo?-@2xX:߃(qmfdYA: bqwi՜5d` [;,*z,n-v6bNW**j$L'w2P7Qpx>/XObject<<>>>>/Annots 288 0 R>>endobj +1086 0 obj<>stream +xmr8]s*Q|؛B0EeRM^* +'v^ՓS,JBU囯JJU:hpjҠpfѦhn6X^d(Bl),nXVD4h<>1>}v+PM,O$r6]++>J܉#/-E=y6CYxRo$ p+@"u$ua'yNk'!0(c._@nbcN>Nv;ǬαDxcbեE>;#b30d)l&6 ))Q>;#b{m䳳8"64gg3(LqqHp0$gg4kЇGl吖[0ȯx>YCWߗ0-q nS ƎI1tM=_1|ίӌnbҥl_̳|-{Zw߂mUP [ o6fCCKOE*hӮia:^ {**j\W61-<Է28S &֮xxڙskȺ(DP"!YcBK€IV|[sA۽\aU;o+^L@)zC {of_nT &lRD R$>tEEUUDOA=w\I)*uëk ݷnm'H r6Uү让*~+^vU0,~}5(I嫏~~qp\m3R}2yGx +ii)O7~si0; +/S߹%d`tMe)l<=6M޵PM{,wT8`g˴}BmlwlLM4))VQцx04`j|:b.Ud욞(6 f2vm3& %Vhj0]~k$f\Ҧ0uۈ/!h8 ~ee;9MN6|n7'Ʀb)At邞/l?_З̰|xo;p@mN]Y4m~?v-vGK,0t'u n_[k[s|h?v8qy *VrCGyh1nǓ|E5'>K +FZYNStеd"U;~M'kUGi1H^endstream +endobj +1087 0 obj<>/XObject<<>>>>/Annots 340 0 R>>endobj +1088 0 obj<>stream +xZr+|y*B; Hb53(fVcX-ʮ.@Ee.Y߄?~E%n7gBB8+2XOX 4zblV1e1ı˒^z@ oaz`Rfi@2@*Q aS +m6@ + 23L',xˮb>(;咖" tQ rMt!HU%Ixd#kf) +lQ@~a3;'`l*+ΡVU vkKx"g +Ģ82W0*bF/:/l*<@*梋Y.w[p7A&sn!U xM3ANph)Q aᒻf #!WYH+@&P@*[ vaD[`WZT1dvmMWh +CnLG1Xl&"fЌ,'"kǣ@D@@Hd!T -PV0Es`Ӊ`; +U QdqEX\`(JJR1|92UtxxV0X9ke#`U R ט `VT1J1+jH(]0dCQ1X`uY`p!V1 Yk](=`O +Oü `t@8RH*\YX#0 )ʩ,z$0yΩ6`N 6Hs]HSx:Ch2+"bpLa"bOeEM%8V9b] k +EDAr8XE9C`mk[`[|f|b*cQyq}oZ r:#:śo@% @zBt b0 +)`Dk/U HUL8F[B5o DLbQ4*F@}Ud"+X)DV0Xlȳ`gИLh_>HN 1;E{Ӂ^'N1rzb+`Wbk]#kItcIolə!StY/a5#Dqj@8uR1XbmYX /2PpQR1X\:CV0XShmT[{oO{eg &;pCrTOl듋ld}mI+!Rd"+,^P2塤n$ +Q,@T( D&j,.BLMt5|``',VįH*-&S1dZY`\Y`eg|@ȁyn jʼn|PIX`1q  䏬`詨 +F]d}mkw!rp SY`qrd3(K(9[ܐnU W7>bʧjҐO7bޗ)+ +*v@^U~id`?a"b,eo}gFX>wمgeukЀ!0%!8"!4p2g͡:?spn:P}<>C|p`ض01,BFs80Է؅̟a@6 ~:3w8ΘΔ@pB{ p2 N"o]'G!wwy*LKwKͦ{T~o.~{WmZwKUҴ:ROnSKcuo&MyܯUO}]}t{>r\~;w tY˧;>#΍hl,)ONc!Sx j8Ұ|eN]39~S*wS>q}}&)?۸zo9f$7i'~1~n^} v?[Q=ͫb~Í& 'sBej{j5XW?,̉{hZU5ڡflSMts3%j?UǾޢQu]~Zz;Tu%j CY[ I+=3!D&I­6Ivu׷GOEm߿Cy,qS^xA_㓒19gMjnRz6];]#m^:/U~JRA>ɗ4Gq|w[]>5lvC>h{"#]umpۧH`Οs6uF5SqڹxpñXcATp5/Ǫ?Ժ]V۾i_;!5C1yfͮ~x>/ EDAiw۶* +u}sek6 GXmlNM'eSr|uFGejiq>s?kbz?5:Xg](RXTqeXl@;nG7ƳOfiŬg4>/XObject<<>>>>/Annots 392 0 R>>endobj +1090 0 obj<>stream +xZko_1E +Ԋć $[/b' +mJ9wș#% Zl`>R?N&n&ntx4o—_7Ouhу9q(NMtRtP@)yF ɜJtr fQw*rir "' jY`6n:^tH b0f`'JCR1ؔQNLY``ֻ sbkM'j jd08YН@zcfc0h 9o!ptLT 6d`dH<0BpᐑT 6CmdZ䍥7[[nj9NI/8X)̟ONd<\y%('e-֖(|l3`DH_k$\Y`bS2U 60@L2 zQ;Ki98z* s"a 98G-Рb*J+>R;()p`FN 9錾Vu uEV0S2?p׎9% ;J8JFN L&=TLwS(V0ndC3-d:$М,p}p6?I`SVXkYbEW",.LY, M5+Pe3mTDV0Xؙ*+h.bdYd,8Gc w rŁL ʑU ;`5@68eTbydfѻS +GL +Y &sPY2 ?p2}/}S s!`F\N9DV0qa@h\XAxF (tRH`qm#+.Yb#fbChT }sR1]​YoI` ؊Ȍ$NuHT/QsAtK4xKe'2 T( b᳇p9YPCVx3O߅R{"dp'rf^G.B8l"G.Bpi!G2}iAR[{6 "p24"xG'R7E=+T!^adoC*V8-D.-/[]&:8L }T#\=ٹē>nOQ\[7rvl6p c7]6\7/`̯벮|D uWݠc=TGWbF]8uw״a"-|w!=+]w?{p'%%.?)6ixyvqWFs/6_hUӷY`Icx̓i~˹W@~zj<Ӑ`yusve[6垓# Sxy] Ds[Obendstream +endobj +1091 0 obj<>/XObject<<>>>>/Annots 444 0 R>>endobj +1092 0 obj<>stream +xYrH+كd 6, A%aDCm*ĦSit3کN\w/\IRcrT2rRP>0v 5[#* ƚUl5 OGRd9버d|6h S(p +c).@@j4$_@3qn)h08`3 +SbvG0E98\A9}S$wݳN^`g:R:vZ*Èo@j 30،b+/Qpno0ĵ+RcT +S5&``qbsvxʷqX>F# ‚\@$7㸟b(١Q8,إ$ E @bP.H9go ZD;ܮ>t,V|b.g2b{_)Wgo31_)TGixn3mB󹇐|L +PlNo~74B?O-+D'^I<{x5RgxZ3N#XvQo/}۬IdNe=VsW2W][5smƾ[mo_N{GnV>jl`lVp1 _]b'+LtYm̢jYZ(eLGb; v40&'W%vhE.0:e`1v}yq? oXs^Hhs׷.;0vu~oְ8~ `7jW3GbvhW?l?/_m[aykQ36[3v%ڙlӅ.yم{3ʮ\kv :Ϥ +_զz݌\*5čQDذuSyf(vIjkoTgFՁ0[o:vw?Pe߽$4 %w=G_} |n-Z}ֻ}?:{OUw`S@kM~U^0OŽ##t}Ɇ=F-rxz?>~\ݞ|juה!)lka zSkjn\nd.U Zwn=6lfmڭ8蒅̾-hΑMðs u=.v[m\m]:J7î|zެO ԬC S ?[z[[ml P#ًתGՔC%[b֌YYƴz?n'k&Bm  U }k[ zv;A.ָJ/~D|.OĿ2ri/o/ 9p;0Yc姳hK|9}UK2>/XObject<<>>>>/Annots 479 0 R>>endobj +1094 0 obj<>stream +x}]oF+I]$nԽ MQ6[KRv{fV)@Q4Ù]RPHT,ϗ8^<9f$ !1gEvi4_JjBH.#9rzER{<♡$E|{ 5#d9K8a$79e GD]q 4ҪpH0\@gi6H?AI:Ks#`p` L0ziSiP}"gOI.,:vMM:Gm +Du+K- ?tvP$7gc^cv&1rBZ؄23gpߓ@lBH.F',B.WqeG>-sh +'ݮa Pp#`@bWvn="tYo4d!Y]*kk6.\\d84uYd*FJJe󳟋nlU$.l qE#7RͶ~< e$E,mT mGL8.%[0u,.vgnӟ%D7sjwH2XU/OU}PRu}6Hˡ6y4M>/XObject<<>>>>/Annots 482 0 R>>endobj +1096 0 obj<>stream +xVMoFWLq$lIshƺ"V.* ?ov)[v 7ͼ_ rJ+ʛ8קzMh1_gSjhfSMwu6jS92.Lfsl]=ޭi:M LWmo_큂UפLAn~yg<ps* =Sg:ߩ sӨ#WB0J|Cvgm1-eY4JV'3Aj۷kH#Fmkv漓 #Fퟗ3`rH(Ӷ/>IШQiZ]@0Pы^eGU(} L _󻍊th.]6 M|m鞝 &uBtGiі,?$6&XUv*)1ьjN@ћ wA6QO{ *}RFk(D#R|,H4SC{;&i ʠ1JkyR(4ĎYuޒC^ɣ\cF? +>p}MWGc=BQY۝q:3 +ax%^(30pcWD&iI2K9Yq ǁ+Q~o'ǀ{1G8ޭ| 3_jfRP1* yendstream +endobj +1097 0 obj<>/XObject<<>>>>>>endobj +1098 0 obj<>stream +xW]o6}ϯK]'.-IW؂f(HCRIw.)ծvKۉ.97wGc{L'.(FrI[ǧ)͖'|Ld%v:|3|L['_=8]|{h'.b9uh V^nizF^HruJх*+2 +U@| 3Z҃|&e$BI{/s(aIEYLjQK2˸ȓP. `8 x0 D +RHy\z*wH /AS`Py'>6@[Im|ENMt i)"CYd +ܲNVEo9׀̾mEʶn+3U(%Ɏ9~7&a. T2es[6\gD5DBV*<j*:ʝH u2k= 0p-mX Ip`3uW!SBH mz8hW toi֬|Kx"t e$ևXy'yԓpQ @.t/ +1Q\vKK-Z^uk#o- |Hͤ in8qDN+=Rc*}ר+6v@;^ź)^oZ>wy>֨00vٹ*{RAGytyb@n=7rT%>^_d_}Y hpUqӎ#'#m{-z]G|^endstream +endobj +1099 0 obj<>/XObject<<>>>>>>endobj +1100 0 obj<>stream +xWmS7ίX:S||#e!)d&3Nt1y)0>zR)M4PVٌ}dLdHV}~x4i +h;}czm::Kt4`j~sҔK;Mi4:sCԖ^̿"`I*.:$qcQ.J˜TzJg=U ],IVzkRaOq#w0 θ!`]-BuNw= Z[JU[lhi,:8WrkS9ŭ$Ijo7!_]{/'o}dF/{  9rHFv5MF'3H VP#N Hk^l0(zN [(s"(F.8=皝cM:Y2ג< YVX%- `սt + \60-O[@BtU\&?[]yI(XspH5{ul/0ApeX.ˌ_plOދbnȟGhC[`@P)EeI S#(0F }Y i 9EDN.TL0-Cdn+]Ь]p7L y[ ]:3nԒ;T.6 +n(7WO7h'cY:.y&>D'܇%;r/s J@O("&JyJRax:γ&e'bcrʞiMР<6,B1U:I̔ DT]Bs FnR +4VB(W1rQy.AYwg̪ʟSmhiMٖ%e0^@p#GOv-*G_͝xasa) Es#QAn=7if6΃LKQE r'ݼtw ^V4^$t^Zxu+_R<0Y Y1xә y|vOV/C``)s V0, z]GG/qҮ[8Ϝ 9]_j{^, +Iw*1-ou > 6\f"eb- I +9c,!,fIih'p(OVZ>/XObject<<>>>>>>endobj +1102 0 obj<>stream +xVmOFίZ5Hy%/|hŕB^ +UM?l썽 }fNIڪ-0Y3333OCM(.NQ&y4l!~*Ip>DFh`4yw=xL2!iwN4e\YtJ.d3QIKQ\sIFYY=t  ;_As2F[\IKΌuZ27N%@f]ڄ4ř1{(2ۅ09Bh41(t\KPg*[S%bcV9ڪ<#8!9]} + W)hn*Jl!'9|dm +.$-MXۉM kђkcݐu: Qh3 vcSS`I&z=k/`*k,wEn3`q칹p*̰@ne3K,` Oi`_&F9/@Fdt(4 ԇ=gQL`7ԧtsPqp38*ĨBT#Fo_o噥t:y { 'Qh! 0e|jA5d9&Ex8T3*vx1z];-6| o*S@Ww3vJϟD  ntqEJiWe*Le:dXonw!v2ѼMV +$ +wSaW@y`*{c6|lRr] 'ܵDCSLTC|-my`bҕ߇+To9 *Hj* J?Лmfh[ iƷJ 7M7d4ŸI0yHDtCv)9,4V GT4sȄ9)8n.[,"~#4ź;@+~ǡ׳N֦KD]^}x|b{h~&Y$?uKk75}&r Vو&f7Z\~x{I?U#j=m/t9RaOt2 {-O>gkendstream +endobj +1103 0 obj<>/XObject<<>>>>>>endobj +1104 0 obj<>stream +x}Wr8}WK @H;;̤-f;ƖXK{d'Iv2!%ݣs=R=P?lDiqҏ4Et~9!~KI+bto<8G÷ ƃ3O_i0x1rOqٛ2*] +qH$hI26F9:mi\$t,S&"e*JMg$rUaH>Sopqֱ! +MHHY[IKfgXQ$.G` s6R3ZG?,oJ@ UL8Z$3iUHSF}ǔVLdF8܂壣,-&U<)Gg$;JJiȳ$!Kҙ6b:u"z} 0s=9-#^/ǃf&%߇LV=WJT%j[B?@0;x,7ԙ _}*Ae}.Sކ=wX!UQAQ g?{:t.ghڐ (<,N-@v +۔88 Li=3M&dI= C +ܱÐD4T!L"!L*T"RrgZzu cYD"~2c~'Ǻ2 1:?ʖJECdbpY_=$6px39$Vwk+,w'klhgѱuǺi|}!4 uqa3O@rG {i. }2au0fPFB =}cd^j&1; X#=8Yܦ.+tQ%_8RE@L >}F8n较A+CP +f+N/?7T+Y a_3!!CRŧق ,ݴm#{K=)@蹯M‘Kn9\V,hLyFmtca\"AZ{<S*MA?`^EZLs=wsyp4F #Bв8EPh^]8qla֮Y'q'KQijN iN1>2*.nz{UspdD=Ct`QqT kVG|s?˦aWkh"1{:-;$~-o +溬/zM<ɷ ~H-k<<.qmŘ'% endstream +endobj +1105 0 obj<>/XObject<<>>>>>>endobj +1106 0 obj<>stream +xmVn8}W k}ꦒ5Xg{AXw +d:dϚ⢇oJߧ(5b=} /ow Ch~o4r}0ّөk@hsOg!J %-haAJر+#Mx]! V mq&U: Us&".mWx8,D"gt]:fS5x*4T0ANA] d +:Go)<>\^Ϗ7<‡a\nHs*så4ﮂHÏk G>{1zxDi2|b(@]qafg[8.v^*awjlVxjl+Y0JvLvɕ{7V’g%5#iTʥiϱ/f: >Zk<pp16?6[̲|~u>#4dendstream +endobj +1107 0 obj<>/XObject<<>>>>>>endobj +1108 0 obj<>stream +xVn8}W -N>Hln-Q67%=CIi*X$q,qg߳13ghDhA'r,8hEgѸl}(} oh2$G$%Yśյ{m{:ڒNI?Awı|ѝĝ S $ഉ5-6+vʼn>^2jM.Y2CېAOf8F,tOmTXc80mFJE%vP^!/Xl*-Tg6z93*%#YB0H$0G΁ 3|j4@z@ũmes@]B6/)@_:Wֱ/֡LO)@r!A/YbyX=Nn׫MB;foM]Q\3sZ3G3sDw^ÃH +|*ƙVCU"}hY>Zx^z +ǥ81/ ~{8̔oJli,*U!l1O؊\RS{73^\GmZv]^ &}`+wFTθZwum5{9 |Y " +2Alo//)NV[-7qI;O/^_fuzCiuE@@KkAR:'ӂ['O"8XKJCYnDz!:Hcʕ`K2}|D{ +LҙQhj,"wS]E$oN3t`J@fVF-8Ym"0 +۷;KlTfC'msכHSEE =Qa${YtoG:uѐ ,Gm[ xUQc^~-a xTWr$|x>jKfGX[f͆xU(BvoxpEWމ7 c C,0+GCvj*W6c7\L.){xq;bzo6EK\IYx>/XObject<<>>>>>>endobj +1110 0 obj<>stream +xWnH+XN㍅2$$!-ﷺJ6,KU]ݭG:S-(-NSZ,Ki|974_`rY<{1r>>mV_by~9M&|IL*=@mȗI*JDSaSLޭ~ &uݍۼ*oVJZkj@E p9ܶU4r|{N0c~҇ypz릭kÀ{ll{U㌆ixbjvO yiap&}[ꎬz,:]*6gL"0rZy@`*zĔ)8##HgP1qz YVHNj! wmQL`yk#1~OnjOɞ΢6֤LW]M*{8S|MOF η*+N;>=;^.NݼlW/zdamʕ53 C)֯Fۮ8:x$W\])gb$U) !?pܥ#Sdx 7DBjw:) +Me'C)i?7^2A¨;$Xg4g_W2DLJ{ZY%h[ꖧ&GG#g? ? X"_^` =|HH3Sybf&DsU^e^|g)%:UYȪ/~.P "2T?s+> +]ʜl L׶ve1]vx2f{1>;F{4P+|l6V-3!z ),9lK'CyPTe[\an7&Hnd`J^ "0l6[Ea~$,)>l|)VlQ n.nn(s.~7Xe9r4>0R^QRD|a4M'4xUYc\*ÞXF sINƖ؊qCښL( =Mv (ȘgҍwKCh?[BkX)IFs |YF<Ȫ!dg63../)})Mg?:-OQ̗x7>/XObject<<>>>>>>endobj +1112 0 obj<>stream +xWkO9ί/ y~JWH[6 VBB'qة!ͿsɣSZd|s|z4>~4hBEu|< i|1!~ybt9b8{٧1 ͑dr1$$)+NPZ)YGD_VĆ%K(m!4y^UpȈJ8ou5y +!rԧ`Ȃ_=z:AAa)+S2A:T&=Y7Z ,xHZh&c sʮ]x!Q(Ч9QЬ<}5 zUB^sx|kK9<)OKP? (7jcoXYh0<%_KEVO' +`"ϝ 6}PIB=DX{7K7J\st(cDgnHJZA@0BV >0.sW,i#1ҕ^Z62{B(}h탞&9==fq󹳢,G4^NP9*SX@ʹ`q Kb +gT]5|9]TgTMXxLxp+֤:(Rim=SqTg.inAi&;d՟<)sq R{Mw>>{@ϏW;=䗶%-9Jb$|J~SGl +-xJkcHC$R|7 (,Z@UL¨ +֨feC51Z 4A\m9mWUi!DT@@5*U7 VFD\t;=DgaqȒPU欑]>IpjŐ;`;XB蚁 fY)R[ͭs毻?1ZonviDyXg7bG;Ew2>T ^B൳f& 6[ZSNjUҫC⫄c~/N 3ɏeSI_(cB hF;VN*[6;_hqk^>ۚT?="SW9l!W֟e73 >䵵05޶X7-<p!Z6N=֓f01=`Xn;UPdZ:, /;Ta! [BbA[-8 * hc$k4'}9D0tU_V]Kam9 O1VT3m%s~]R2XH`5aouT@׈7l6*u>;4oV 7vfg˵5bxȸUXg>/XObject<<>>>>>>endobj +1114 0 obj<>stream +xW]oF|X(*dَi8I Mj~9Gbܑ;MV*g ֑Jy.|Ƴ 0k;J6UADܮװk45u6TNn ߐ*-sG;J$MoËR ٪6`ut(7^~#ʬvuQwխam)?ZzoV9+twmn +[Ǚ(Hۭ>R H:v~6/evq1CB6 +Wy_T{X;^{7Q&v"SnTn*u =\0# bdAs:y]7i8nIlT >z+d̓Xi,Cz#H6nz {w)0Pce 웪D>c+VcK׍ 1|2 QLY7NI_7SnCXgSQaȱBM0.x޶eԟFQז̬#6pV>BJA*~PsFg:~ઋTrsʹw 2vV_tZխ }-9 {)|ep|r_:AqmfdYA: b H#Ҫ9j:rWt^`Mks?PєvMtEG@1:bHq[r'iOBĀ<zux%AV\nߋ?QD{ad6Fo?=49d{R“ A4( 2y#1mk0\rIW +4V`;$TerTAxAAcL|Vd4Ey4)0Um_^D+S ltRZm5Y 7-#XOZY樄%lGCvgKi_Π-Aqf-jDSq׈Uͱ֊> Ӈn%< >$9Cl.WSSjx^6>1Wfc}|x dlw]Ictf&D}nyu L+T icuQHGHؼގg@?2RvƢ Wl/gW4'Wܽtn胍;Å\\NsN䯓rrendstream +endobj +1115 0 obj<>/XObject<<>>>>/Annots 487 0 R>>endobj +1116 0 obj<>stream +xWnF}WLiIu `Nb~J.6& wiE3,1%AJܝ9sf3>h21yih%NJ[$.MA?MW0*Ls;%uGZnmɁKC}EEEfc]5/~ ƅڽޢ"C, 1Z)UP"B3cw̲؃>vZ(*xe: "+2`S[~~oP2Ea/h@ei +j(7|O@-`ZCXMȤZ*S/L4Λ,hٶPA 5R/I@@zBoH{ ~#'!0N5tEsOFC>8Y]H<B+ Duph!Aꆙ=B(\,L}R53f`3ŕMxb~Y +7ޫbdȰEY +1\Hkߐ4DH + E["0ZL2R$FZ4̥Dt)kЗkC~ٮ=f79xyK.r~q'+j2w겴U[xxCOڔ` +q[_/dm [G'0EM Dt?H-r%BB pk'b.9B92ᅑC`0icF4&8wNhZuoXx݂xy-l@F)/Ղifڊ W֚[ـ Lm}O+˷ǻ(Sv9g_*XϖEJ0);LOt: KsWވ>ظα.+|h{hҟƣ(O_;u EFendstream +endobj +1117 0 obj<>/XObject<<>>>>>>endobj +1118 0 obj<>stream +xVr6}W<QEMMif7mɋ_ QK9 ^LI鴝;Asvބ4ǿVKJ˛y0$5%>G%B<_|oay}:{$X ?lGᎢ9mdZ6xN>j'pJtf^,i^LlEr'n0RjqDlRgrBa-G`[C*ک\.Yh)EALs--wB!Ů UaN% yۜaF$, 1C#t635 +^dEs0692H8lWQ*-y돢h87RQT ]J7}y39hNa` rd0 C2H2kѐfty] ^ 3ʱ[:O;/ * [0H0_9ʴ;sSyTC/+eYHkhgV2L{ِ {%ۆTFKUeݢσxѠ-,Au)fP宇] 8Q8YkD}  <:iE= +9m2XKZD,pآ}VhAS"_l)=|޻l+(H.qLGm9+}Ltl{hڽ3]̧hNˋp?A|AX&U"e6(ʼnv C g%TVAq\Up/RbюP&!U'~t.C@P4S6%~Kab(f;ŸiGe/N>/XObject<<>>>>>>endobj +1120 0 obj<>stream +xWn8}W ڇMZıSlnq/y%f#.I%R%K.9sɔ&;'lBy6jgo% V/_V4/0<.yvl~IgVdzGbq<1$[FSZoZҺ'O/?( ++SzѭҹSnme6hI肶RKZY ITw'Mϲ*o*aIi/m)r;Ilu-'S&}IQ-ڡ$HKh=^i^ZW26`hٷ25loՁ[U {48V.&+!xzTUNpt8t!E?[{(;rWMQhrS%^¼ߡ~QZ')C6"UP2ф6yI6΀W$z@9nHL0B`HLs5U5t38Vmcc%P.5?Cbݧc19wM 7_-1gchO +1B5j\D`bs(O +K4HW`*C%cw/VX2ICzPlQh76 +btc(rUjw1AW7tw9w%ZQS2|9g+ `q_2M'_'A w0ۘkqECW +<@)?hFW?ٝu:s_'"Xi/{ fxS|/&'|W:>v5be% 4.G w+ȊU#C>0!ạFIbb#Ѱ9* l{hif#y>4j[tq-ΧXEh⷗/y +^($wG>hyjag>k}>endstream +endobj +1121 0 obj<>/XObject<<>>>>>>endobj +1122 0 obj<>stream +xWmoG_1"JTR4N/R-{3jdnvgfvSch8duԏ& |YGgt:x2V}o~Txŕ*ӗy6GbetNqt:XF@I^OdG#4¹uKmFYWWtyiI*hn,7Ʀ$ +hVr~22UZ9RZn)RA k|kjqoa@sFZ$LV|etDĀi G*tVu~mcS2j QLۜ=9@n7#M6Ov8'Jd~Oᤜ8:v +1I, 9I+,`JPϏIH(JxLHT<7i=_&wkeM0$Fբ2jG)?䖦RI˴ \h PUK:[k̈́3svLwwa0Y NeY[RqwD:QȘ!K6\# wn܋L~UHStLsc} fSma:*JɭG[-ɱV*<RveL#fdfһcĮ DŬHqu{3`i6pE45~  tņigC +H~J.@7r_`BgCWٻFhe$Td s͇>M8ExCJGmaRK 1p贐B8>[~e;uN3଍@Wg`4yx!nQړuOQT%9#f3V 3ON= F1Y6꧈uWIbˈ_/:}f#̅9Դ4lh&9n,|XR^nQn;+|ma\^&2bfR6(r+^YkzVK:>*dUBc;V_͔)V}᠜ ++)nDe(袜h|Nd9TnWMpk)2֯صi7a8DjV,@ViNNiJ+1ʋB`8>{h T6 DeL{/-ؗI!;qE^br`1aq^$3|誼vB&Qb n.^tެ +&"D&/A.Or\ҷe:dBZtc\0nCeC.ܹ[o'hg֚8-bw W7oί߿_Kh/Fe-f פ^*^t~{^N.,V۷BB?6L@NK0ՌҜQ8I[ZS2@YK+сLG=MѻTxtb,{~}qNw|e's:Gx dpڭ8پg;Fc>9诣endstream +endobj +1123 0 obj<>/XObject<<>>>>>>endobj +1124 0 obj<>stream +xX]s6|ӉhI%vN2C^ BdMqew gB)(%5gL/~rHqv/t6K.)wGi6M ?^1wiMj\.iǴLOhߗ|z~"vѽ$=Iˍ4n?ɄGӹNnBeF+Iv2#WG,^ۇU"-T--X+08"!F4KR>&вPoMa#Y2EV'4-?<>u*ҵm!d?v+Yj@1iC[0|*9$=.=-uďG>/(Nc:-թLV$H YfIq:K9[jG:F*I y~Q@Q>'{]N(W%@\I TRnQ$ʇ2rnv 3kSTw Lo-0+YL64Tj䀇qYi6*İy5I,䋨s. +]Q|k$GpV0=|+A^)c&!:G:!Vn_C#C>DjǚfTƹR綡'%H wY +e}CxdV*}4&|!6+|hþPAG~F~o%z]pP(5dCFu a'%z6/%(D)dl9;<̫Yx9Fq(1"xH#o-_/^XhPddպ't>H];`0mr;d +¢h6a] ۡCrȫ`Q0;|x(늫qP) !u m{j/7T\ UЋ,O>ޥ{ZP-m!TAoijA;}k!aC4Op_knM7> +6vtB0ʶЬ gtyXVv)^3P|@jm +7O=??V㠔-V"'%: +$XRAu(5lo\y׻zmdY ; x+֐-J +\AoS0 p ܈ނ.>s ,q@` }\@`_O] Ri=Y݀= C֩hlݢװa|R3}B>s=!-VGȞ q~D}`2d׸\r(f3-& ,^/n>&a<KKZz[сX = Dp ^0.j?!Ah(YZe/FVT^|ɏHdN0~rl\1*LRީ L';J~`h1; 7o<7dyvտq|:WAiK1je@)6ϡ^@f"#<]`܍ës l;O/ښjG/#Džs8G 2:^.n[#"I2;(rX8jup(7ZB`с0@55>Z.6^)>j"UcT%D󴒼0,ۼЀ`&`!U GKhX-/[[jܷJ8# '0hmkv>T%GRP>/XObject<<>>>>>>endobj +1126 0 obj<>stream +xXaOHί(/$0!V'w ÑVtmr^u$p37 UޫG}O:R9uG#_ +z4r1p]/o,|wE Z;?"=Y%?|1\wgK2sբ(vTTT2#aNߕlApX <$ߧ"IA>M1y'dqއ:[=:wNjt%vT#JxZiIZl${UPuTǭ*͍ 4Y]OͽUQJuՃa?VTJ60gGz_[~|@g/~-jӍ)wV%'iWW#zP5۲ݲ{u} '6%>;~'$MQ•EZZ<~>iWlKQO;J4;2AZ$bٔu%-Em_."kw֦.gYVd4eEee4 + M1s𵂿Eр(- QScp0@ZxEFA'KaQQ!\4P+: ˰SCS؏VRKy4eRJz(;`&\9+\J|&#ػ(J-!rAh׆TlUqd<6cΛ|v/ \>J6/ǏOlPKf9_x3O&um^FFVӼ,Ob kd?qQaEA{P:@o҂"b~U#trQթM1Yl<7yJ˺hy+h" )aP(P\X? U?/CК>8!:( pΤ +UÎ"z2#SP[r%bT\ BR`k⧆ЩӋFs(GYPP7) @,#ό㥼2H^lε)QThW5 +D탛([M۵ 󒭿(.2۱:YOa @؞nF.4E\sϖ\=SU˧܋xrx-Qط,AnΖuHnt_G LnQᥦS \yS,<=bN(7̧*D"aJyb|4W܉:ZPl6ZG;xfB!fBC-G(e|WԷs0hxRɩ3b͡y/716CN&cct x&*VpxOW,[厳Uk5$Iv$Ik vQך +$CgDwI zd#I+ e\$Ɓz& Ύg7I=cW!cnR|,iypq A+kJJ];Ң27yOHo&x4GBsrYZQc]8?\X@WR>/XObject<<>>>>>>endobj +1128 0 obj<>stream +xWo6|$%;qR` $n+ +hJ*JN%-]fݻw?|OÀgG=6~h?hp9"|*$-vs0fhR?z }-Opyk3~Jc(\ ]K +q¸C'EIRh* \jJV")[}JJ?QKYxߎzt=ܲ1~h%[LS̆TJʖ(%dT.PJmpu{w>],6mt8ѧZϦ ~SaKw5lX$?8^_,RfX=7}JEeagO6EjՖ-oF&2q@vH8y(Ctr3}2.?NፓFQa™6M#r)<[9B0K6҉y4 iފ~ЄQM4sgs!L0f_gDqqEƇ3 κ9CNBZoXuÁLB֣N5N4X1iōvF@魐O)90gʀeK ]&JF3 .!氇q*,;iDztM}GP[jҼpEhEAG{wDh)vNh7;J`cYWBI4i=}{7PF2/M)uw|GHy!,].]Pʷq{`BRe:GP KfmX絚n<=m\|5i MqO#eq]{uZ hD)a,jrުbG7}VF6;70JDIzHQQO +Ă(Z9I-җb +0Jfr'vs'4kih" 6x hb6MUX Λ9~s5fsU^n5ڟ{΂s4d;hY sS}nma77cc}xWpn*foʹc&H>] {Ufҙ]\Ca`L\qKrHGΆ=w& TNNϣ endstream +endobj +1129 0 obj<>/XObject<<>>>>>>endobj +1130 0 obj<>stream +xW]o6}ϯS +8Gdi`} %tE*%)YQ ؆]Dsνu1 rF ʪIZGLhNnhZ9ZK,ηG<6m.Ɵ&6[&-fMMOh]R破%v'}57?/&t5E08'gYK?i:eWlȡ9Sl뵍KR\!;>^D&d & 1u2c\ Irǽ$e-8d4G6nKkF$rU&HBe"@8p0;pޗ!x.W,D\S#+nI"KԴS)|e/7k*yj|-;\~ő5e{uCx>LXɮjM?^er'a$7Zr>H96x7]5w4(TK7FL6XtgK4a;Zڄm \fsyV9zd/!JinD8V2c)DZ.T@cqO-dz0Hex $@f?|#_-:1TYq1dߖk^dOYʄԦrEcu 5$ұVHdAXzlA|Ԭ #p/KcrGn#V!_p;tӋ&.Jχݕ/bB Rv"b[hEGrbOJ@^GX2@U^nX/>Y/Эmmɐj$_B鳆BjAb/ Pb M L긾qW9,v݇EĄ>z0"א +YziHE}L !ecp.\áCwZO."k +$(읪0Q8x NXFd$i!IZYX|t]<@YD "ʶЍ}UmY|(+K҆Yix*u $zFx%㹿OS#ZiV[k62-)魸cԵ#-&˪ c~Dk^2)#(/:Lߣ>/XObject<<>>>>/Annots 494 0 R>>endobj +1132 0 obj<>stream +xXo6~_qĊ81`ɒ[\tBKF"]eGi-H&>}1ߎR_J!)+oڏ??Jd@Y285O=>ZvL?ƪIh:QrNQh!Lwt6gIy2(|)sͳ}Q:7[KVfu܎)- lʌ^U d\ף`罥[vrU 6No>y8AТ0ZoY!EEN8RzeɟJBPh!,vlZi!=QdV5*=^Ҧ2d/aIY-{1XK8 +h_6ηFr‚;bV/֏~/4^ؚSΨ?}:> +Jhuf/nmcd 5~$VZ_02@Rz20ė +\"3"9w\Uai:B$ ЀNjr6>DB9>cZ=<ueO+AϢ%#dۺpJajZ(?lLwbNtFa2mX7\2ٍۧ:h Qw_ cJb UX;ƫU'\M\@f(OmUȞ(= `P%/ Al?CB*y e͢inUػ0ZB[lDn&5)Q;q)&8ʽP0y\ye6Nԭh{P9U6Pt4SGz1z-rueW +Paked~ⷄ#}iX"xk壡 l o٠a#<[Uƚc*#nO:cC8X3őb?zl@t %(c)ĖU]Wr D;|qA"8㣢r[m6yBfBO^E{tJBTɄM_+D! +di蜚 ]\ %> BW[2&'KbtZt֘0%ymsL@e1Nݾ @TPS^/6{i\[rofig<Ќ>LgCtd}v';*szkӈaSϏAZK 1&ڏp&\b=Hi}[Mr˜z.,xb)L&ow2F"ːV_t)3O<3Fch|g;qc OСn ӐK¸HK&]ɞPh ᄐRU+2Y]B{v?nOWwquh2J&c 9?hsfendstream +endobj +1133 0 obj<>/XObject<<>>>>/Annots 499 0 R>>endobj +1134 0 obj<>stream +xW]oG}W\ɍšW'ڤ5VT50βCff;3 f*R$&{[KҨGUt(MxGxHxL A2Gä_lRijn'wf M'Kk&Ê^=Lɐq*}"oOvi:LxD'֡iv>]JIH%9M"{RR +IZq4ndNkaVv)HCb5|2ODաv[))\-*#ﵶVT)?͋OJX*s0%aI$*SYphAv!2Hb%Rʍ.6 +ׁOui a/(V bHcq?YY\2ܡKe&cD{EJ[#=meVvtE|ƹZ=Hws7y|.?pvFrĂjڊA | @RjG`*p S-mDx:I)8ru`*2 \\^`4꼒֊/>>LB pxĝ\&{/E l*#&Nc&s01DFHa>U(PƕF͚ E{haC \iDG뀗09=D Eg UÌoXag!)X])LzL(d**[V( ٜT{UF Y ߱㞜^i'MzN 71<$rB 1.,^=`Uӵ+zw I;0\T+..|0yH c()BeK!@g0v ``npJ#a[Jal;“38NDe cQcJ)qv|<D tZ#jv׮xrTUx x\)9ăV"m@6?ŧ,.TQ2RKGt||u,D*W; "1 a͟Oچ0?Rn'wcxD<8^putVljxY x]%?S>[yl7ڣ#|{KoR6q7 =iCendstream +endobj +1135 0 obj<>/XObject<<>>>>>>endobj +1136 0 obj<>stream +xVko6_qCT%9->4I(vhJ+Jqwxq.d%&sFM(oNFqY&qN{g8#^KrP8&hn[jWw}UIWrhZǖ5-w;h-d-hjEY\=U-Hs!Po5%Cz->Q0vs% Vhl%:&mC~BE4tNC#i#xnCGlVaַZ}/7T;Q[9 Vp4BU:JpWÙ,'V^\:݈"*L<l<@iKce4tp@pnzZXzk~SpV[lsKW'' oI/oT^%ZTrnӵ= {&:8*Nw emujmh; bDɩyfK0{*eAaU Y4 +d \T6+[ WFKe+^BX;K@d̙YRTQb3IN-duJQC]T#z +=_W߂;; B8nz-a.=8 =ۛ;q_c9x@W֊&ȟQyDcJ6w1dNuQ?4=Gk=o֕k&C؏#v@dE7DϚA[E-9|#ZW@Yؕo:.bV"$ѕ&\uO$Ӫ  cAiiϨ21@*=V>p\'. K7N|̛  yف;&1#~>Uo" oXnP:8ۻd1_-^TeJ#6]$p ˸4q1u zOXzyAꝸ2ؑGeNQ1#{뽽'XXendstream +endobj +1137 0 obj<>/XObject<<>>>>>>endobj +1138 0 obj<>stream +x1O0׎)TK,,@Ssnʈ,pwᄃQ0 +;PcZbC Pt O)hj<6|N𨁓u90ƣF,%QًnWLqa8̐\&g)[wXu5Ÿ"jÁ.C6`.~K&01št"f`ƣ3efN(EijY_˚H*[x.~ rPendstream +endobj +1139 0 obj<>/XObject<<>>>>>>endobj +1140 0 obj<>stream +xWn7}W Udu}H\X}3RĆK*$ײ=]jMe@s=sfv1ƴb-Ծ-h2]d4[.x>$m <ߚ'i6|\C>&#ZmjU$|fSfK:*N ;'>Y}1wL Ja +;\e n:&,~'ʵ a +vSKhʵtd7QO>@n]ejᔿ󖄧Ԛ?=7ڈRc2[2@UPZ},1֡jk-ó\-*-9b9l#K{gU! A`:="ps d&/ݣʥ)T9!O*g`DT\y>XAA:HV`]qs!X (b` 0jEM*l P[D1A0|a؉p S-wUCƱ2V#ם"yϊ'¿IۭjzP//ݡ$<U{;-P]JQ!BF!EJ`imeiI)Go#}ޗTfܪqu0qlݑ5< +-RtΖ2cY´ӵHP2B#UBG Kإ-F +"QU =y6Vk{!$$R qi"%{;Y=*۲İ<ssx +h80T DF3TI8rt 48fP1isbgyfPAwh-y p@B1,|>D +0P3$ b7#E0f <[g8!9mY9빉y53HGClC±ISl"uccD//H(g nM?tSKK y;,g!< WAvUyW_5/AnXsuzi֎3U  3Me?(<хɽy)e}ye:Pas]P&U!Z_Dõ2Ctzzjvx17Iϴ*UHBqwJ&?0]&8d3Unqb,[n4lY{ '~mb+'J!M5wIBϚmzrkt'X{i$jם-]K=[ T: +w6+<ٯ.DD1҆D:RNJ|Ʊ0?kzvR܌)mFe=VpCwq%t™d5XԘ,kj2>_m|xl1WF'kqendstream +endobj +1141 0 obj<>/XObject<<>>>>/Annots 502 0 R>>endobj +1142 0 obj<>stream +xXnF}W Pq_"շ\\f~}"Eˉ@ٹ9sƟ41-'4]P]Պ/f_F4[-: +?I1Ύh:_ӳO&q“Up{n F2XF&0Xǫ"tL(|{/)=\Z_ huOk솬f<13>ZT.hcoG?4&"EʖFm*NO|˴8f &`o}ww?#>iL  Iǚ/٩ekgRT?#?U#j> *\G20U^6Aόi6s'B}=;N)pB)5RU* =HƢJ} ☁gQfT'@Wa+`ta6C+ʨz +Sc(ÑD< m;+鞵.v]h1 =[?RZ5ˆq]`΂gCqWp +նIL-| 0T8% +"  -F$RF K^#ڻeRYyPk[7\0Tz n?⾎"P-? *O?Rt,Q]R&2f5`hBcl0+ةzذ•NSvPJ@kU&P[oDz&lp:zJ^q7N}NvFQߩ0Nr zنE!6*\z ǔsQ ӉT;etݮ3Y*󨊚Lzk[\31{4ؠz54 PR h~Y&:"MB&o;Oэg乏@1?Z"眾;(` mb +J7Nv{:%%y=5c Ѫyyh/ x&$\'2DE\V; zKc㼘`u#Sw']L-2?Hز*e7 ^!z#E2:M;6*|M=Y l=i\Xy?Hʲx96ۡqDoRe8Ѡ4=Z$iտͪީƋe0ZMi[WWwX'uwIa_+×J6[΂;SR/E7endstream +endobj +1143 0 obj<>/XObject<<>>>>/Annots 507 0 R>>endobj +1144 0 obj<>stream +xUM6+*̇ ʁdrɤ6̥e,9<,>O&5ȭ~k(>)sZd$,Q$kZs?ǟT(ɒV<ɨ׳i7>4mUh6K6,KrZkԯi1>)V>#J*zuFoWgDr\>܏KJSڗ+[/:5fK7mu^R8`C$+pY LPqĦ neOh_):$]$s@slTJ J>ScC r&Qz 9PdlI/J8mh+B'֝{SBi=RH&$̣ $TQEM* C؃@\Nu;ax=)sEJgN(k&ZI 8<0v_YO ӎcx/ზ9|4POyp._cf'b2v>; z6fN. |_˽̗IB@E97 0endstream +endobj +1145 0 obj<>/XObject<<>>>>/Annots 514 0 R>>endobj +1146 0 obj<>stream +xWo6~_q@bvd<0hDz"e#% N$ww]4OLI4ן qtK%ͦѬy(ipXR0YLfWJNn'z7Mƛ$$%v +hQLiUt{Yf>2WVG`ĺYd0~l%ЈQ' ]4 >@7[_[28=˅1Ʌ>}%JS'ӏJ̄wsv3`X5i-yT=tQ}hj>x +NnV㩂9M0dh͸4›.0SYУ^SXhGzKO_ zfMʷ%;zK7`[SHrs`҄;7 ewSL'$AD#oۭcI1ތvU8)v9V_ hdm6 &sUkirZgsېyރlS-3:1?t/4`Ny vo"o RY^Oz@/GWJбuSř}ʛ͌mVḬYH~/4>5 ?ƒwbcsc +TR ̄1`G"8>BP!cͅX󥡮ysn_֕b-nOk&/\endstream +endobj +1147 0 obj<>/XObject<<>>>>>>endobj +1148 0 obj<>stream +xun0~"Œ\K9&M}k".z&TI*޾CIN[#a췳hoFeNņdX+EuUb瘎,O˃f,6UI;EZN.ڈi ρB`OZIORk q ޺pi„kFzAWŊ|;y>=>/XObject<<>>>>/Annots 517 0 R>>endobj +1150 0 obj<>stream +xW]s8}W! 龥Nmhyʒ+a{dcN3yιWSߔ3\PV & ~i|8-4?/rliztt9w.%~nh9NhN&\N|||a5{O 6{U/_EBy$LN?ÊLzn`B9XS9U8aeq~9Jy0%x,[j?W[ _dxNU{ʕ44[ wL0(Z +/Ip$Ju2AڕE,Tԋ6/ +q2L/c10Z$-l66tzZ"`+v/*A)\|̄Z8٢t= 2xk}E0jc8kF!@_)){x:(-'XВˈDcW2@* H~Ry:%r#j]ые&R8QJ:/fMd;벴 C +Ok) ɜ6Q|MIno=~aXԈBU(kR>vl ,CeD 8ZTmf>6 C,uFhN=o+*,}]WGணr2CWL^09xNE^pCcE3ͅ45u9 (h;YTR!&pA[]$ՊvLY:4~ma +J] d܁/@2dJAWʖKuqwH6ts A{|qG';(jɣuXϱ0~VO}7$2%J瀠F/DS!#"{Qa=Gŀޘ0d,A/뉸A:"w^ +)X~ SdQРF}kB! +~ml}H/pK9U-b'ػ3g/>pʛ=v JQ,*JκrQ.HOrZP MLNJ%w eKu' Z-TRy~RNn5a?;$ i%~J:Dma*"Ǹ^CBNx:/ahBCp+_j Kcm-\5+Hǁ}s`*M',P߀Jj|͈o(a\6rMaHXor/a /BiuG@ 7氯8kOlN|L׸T3< psQ(㭅q?Π8N*Mm1=h\bYvq%1isu\uw|9/W`]  +@endstream +endobj +1151 0 obj<>/XObject<<>>>>>>endobj +1152 0 obj<>stream +xXr6+vt2#˒HN/;;$I@$h&-_߷)Cb۷ u0 Li~B3JxBxFgs<)^_Y}7>/\.h:ECfsZ&Z$J°r$4.(Y)VyNkcWt/D5 q"-V[፥ҪgGf=L2 >`Ƅ#kd%'nJ2ehZ8%(7}\8/ 2w +Siv 쇫ч1-Vy*\?υ#lzVC:{jz`:TV a +5޼ϛ[" ņ.\9ϩZHQZdB(]|INy9^)>:=k8ReJi 2uc'sP_%8RٔlxEbp5_}'vf`QU"yDR_9;8y-"<ȔEfJ'bp&#Ull"3Ml,"9CA,ZM/GBE' ^P-Jy>XnB4E25v;bc(ve(@;wLK*=* oJUgƹOnHW8+&/WEdvB(sRR8 @ P\C\zhO"Uei%'ta&rW+UM9֫(KJ¡Cvjqdpc1jyAGຂl7[,CBDS 2!36j8%݈C '8@6 +t]e:/(Vi,kuӖn8ԂJ9 +0bKGk4yĒ=47Fgt)r`H#NK~/p< h,#M-JWVJ,'0C{85~W/T5 lu&[HG} Ǡ[km7ehʆ]#T.1r ],4kMkh-Up%fV +TaGE!Ʀ!*hPSҖuz<Лug }'L0!:pA FuOo9IOaA'T-{5P;A#/U{` +eie^vdb}ߏ@I"n>[3V\h{*6]+KagaFBT Y` ʾt1Ϧh, tO +h, &+`AȍHDžxkfCuIx(lmc^Wl{!6 ^7 + Vko +YYid?M%x3As;ߞΨa!z=|{IQ6ΗV&"d8>ǃ0(yh;Dv}LJafm;)u!|thQeXPO@!4#q; OV-@p'"צxUۭ3fptyAwfJLR\$< +=j'l~6q0x]-~;Izendstream +endobj +1153 0 obj<>/XObject<<>>>>>>endobj +1154 0 obj<>stream +x}WMs6Wز"99u=ͤF "b`Ҵ}ނDJ'c #ow߾]}fbENZ-Ys?( /d_lFV7k$;)m(T+OHL9]J +Sj=lhӪvF O𷷿韇OnQanbJWd* 2T犤S}p Ҟ|&^cwvZ[cUë́~zQ Y\UY+ŹOKHF*  +DžKBA̅Oeaؔ*6 g }Iʀ|@J[*Tu:JR8Q(`63C %suYZWicVo_7)0~#*p{%kbQR($mxP-öB>L+k +2&;T("AڢT$ѷ4GntIfn::{3z0v_ ypTf!]as]5 3M ف EE98Tb=w}X8`PpD? iky)66֗D1t:JцAƃi,|D4 ]ï(2CQCk#349p+2zsVu4A]Zm${\e`;coTI H&!#bOez;Nnyɓ$.RҎ aMeNGЖMX`z1..O5Ƕ{ .(yLJB ƟN\$]af}\~>/XObject<<>>>>/Annots 530 0 R>>endobj +1156 0 obj<>stream +xXn8}W H_%w}HXtc_hH*q_gH̤vZ` ̙9gv11~&LiSZ\1tb>Dci (ϼś(4̀y4rͦ(iF<;cv.ь<[.;ä<;Ѭj>_z& l#w` Ƙ}2dM-Њvuq~N 6;^&cZOe*IȚ\+v,#zW[{ʈ&QUVR%Bti(ւ +Q7udy@wsW]uuc*7GrIF+e'WyNVt+;ݱ5(wBƺke FtcԴutW+{L)ݯD- +iemy w +K{YKMr_>ں{_ u/ƒu)[؁Q323FV%3T,w8SLl"aE/_ G ;3iZj|LeeQ8͑A:Mqގr E.@6_ł $=/lg3׌و]\lA +8}_XΓvjc%kkW`K_Y)Y%nx(}C@Y:}{$QET. +S*JN[-4M +r:f+?4pk'4] Ft;8U~mUܦ5pݵt㗃V*g +sF=|V{G@fn2-MyiYIwbUE:\ +7:}y/ 5?XGpheگh11LFLYoj]y22kWYs0Xt̑m~ +37ڌe$NrFq|-U므~U&vp9ރ>;iq%|ܻfdGendstream +endobj +1157 0 obj<>/XObject<<>>>>>>endobj +1158 0 obj<>stream +x_o0W}R>됪i릦8Mlf;E|; iPM`s\`J>Sg4_/88/i{ hT%KъI4ωY:V9r:yvv”Z(>VgLI.mx:G {@|8SB6q6On/IcRPbWt0dXwGHaB:~W̟6S#<ʶLGi + #ƹඐK0$WԆ8% +=,&?M]rJE!< <0q;_K ^z7gcz.!uNa{ZK} Sɮ;r*4n"4 职aa};3doo뱤vCCwU +tɇv6<誇3Q܀aˀxOP2VzG1Ժ_x0FfPqtjN*\_oxeЭU)0VՍ8_ċq\ᵀP9Nendstream +endobj +1159 0 obj<>/XObject<<>>>>/Annots 538 0 R>>endobj +1160 0 obj<>stream +xWr8+]eQ$kY<q"r|YLq zyug'>4pLIG}GgG:Ϣ14OiމGcMрgQ)|Mޙ o~+I( +8.ЛEw +}Zx2EŝRVzC,MU4J ;]|wI{ 8ʤMR+ۗF7rf;UgTgYs)OEx,p!ѮI"%"+eA2fVeR\71A=1pՀl$Ԫl:Liu{-( ZJaiK|7C7QRPhBX|:H(0eeBWq[@jeтZ;hN>cL ǔ(QP4G'-cqEwIaF'_ K&0*wZ)Ftu7(.>/XObject<<>>>>/Annots 550 0 R>>endobj +1162 0 obj<>stream +xW[o6~ϯ8( +bŒm^P`,C]>m+D؏wHQV:HwsѷF,qJYu6Fx}YD IREq4i%iJghL גؘ!&| ˤdڣ6fr:8Bэ,UNl0:|T +,j`Co7z +@h)Ӏ +Gd˝s -jya bY +AFq@ | l1q}jm) Es`}#?[8Õ%FKcLvR}pkfwk~ +E~p EnFJ7w;ACvr”\JP*R0:uߩjIST=LJ{Om,j3M1ߺz핾IV~+ ONw<9yV! "btEݵV+^0pKIץe֠Z:z%T߳0#h+Xq4º.HKV/5E 1¬>vDُ^eDQ145R9#t9B`̱ue%Zю6* 7mDC(W\csS % L0* "gɪ)mC,@R^m2 _1uT7AciV9 +UfHsx%YS``@iPp(Dmk?[ٮgj0`WvnWQCZya$g`5[rE0մw/̶t[㞝[8 z??)n?W {yJ&(僛7߾ߵCX}E5k|L3]^Mjw|0_gUendstream +endobj +1163 0 obj<>/XObject<<>>>>/Annots 553 0 R>>endobj +1164 0 obj<>stream +xXnF}WTXBeز"i]ElI! +FA>>4dd-]SNEZjӰCE+[Ň `LA2I<⻋pt?J})E30oos˶[7ivvh"PV%5z#?4CxxE62ng80N׎V4;ɿ_4/+u簰Z/oCmƤ +15;`4sB~>Ͼ;/%..9뇞?d$AHfk +,iID J偢LG]R$kA;m+ҩ$:Ttj()Ldנ^3zj'I.Ҝ +#=0_s~ፉWBEE/*dZ祱.ɰLrp {Ӛ#Jd4v:>Si"JTzbekZ 0/2#o[[86F÷PnT,He3kJ8@抇6B@ى 񍌴|Iɍ(by :6RB1(sJb!rF_&)_De p*<.Rl}4+2*كα":rcs(VaT-r +M)E: ZםO + ^ԘI4O,Ti5Нx:@6uTƁ,cVXTΜUmLل 1$"8f t >}/bhr1;;fX#Y JQb2 NS +b,0c2)ceMp3,Kѫ w2ekARPeT[*g$)Q)70\FRjhLt_b~L~L'7Շfϟbs#8zX5w"&D04H&;B +j N o1M 3h_E=a`B0M\&{[@{UAu3Y*Ŵ +w3sRSX̻4 #e@)֍i;i:ǡ +Eba.DcqQ@+D({e6 +LA|R&ʈ+$쵎evp-};m 0\7iaӚrU `Dhp(K-sx fH.b8"\iPIeY |p@2z +`j]9DdJ`^?a)cXs0{/V Y +LT7 +Q&oӍ/AApk7Iv3G3lDuhLϣAY%Њd]Ѡ\ FbG-rc +lM[-Ղcvբ܄b}$ё}>>bףwˁSkl cm7P' ZnO +G)=lvZh7d| }˚3~pW3 +#/e,3vBܒi(_N'n&N;=mxScfV@;vaM1ҀV&< vwVsiuv.o0@90i-7*)Kٮ"ȗj~IM6+CvUr3w4dz,pM}`5ͧes1emDϭ@.hx3C{^oaUdYvu뾐~T EH9GB0` cMn&N>/XObject<<>>>>/Annots 564 0 R>>endobj +1166 0 obj<>stream +xXOH_1tD' qRʩII?,&qk{}kfכH=GU?͛7u? CGS4!⯖ ~ /p80]e49h{VjgR\n|m'c=Kڣ +5g +u˦ P%rI!eBPwIqpX+Y7~*E_=Éb5dtf;Ow44z?>IoohjBwW˻_BFqܮˋbu>+_mY٩뙉Ya:eU-Y +F[4k[:k +8IX冚R!FZ gMiBOȅXgaVb!5ZQF +]lZb:]^s#]>kx+j"GRPT4 &Oz&#ksmy7wfsڤp\P^Koh$𦙶B'e!ݔhȾ|wp;K<-50kC%wSOzF -ٲaʒjs{47{ r ~FýsÊrxFOro^&IW,cK-nOv_a6?=ܛLS0wvEu379mVy 5YRj"RȜڅ#&@zj7at%J#YGf,ʽ8sZֱхȜ +ykpAHphO&i`4/Q4d1z)\Eݠ LQRbmʃGM+ac,'פFtJ 23 :Q3ښp B! B 5LD#Rkzgld.dʤ +nYIȖl)en=MrZ]A|y^5m+L=]-kFFߡqåK +Vx]~LW0 ón<ۏk"3 ?hx̌&ܶDHl$3 +#|֏(+D.T6y=w71粒p #/_Rendstream +endobj +1167 0 obj<>/XObject<<>>>>/Annots 567 0 R>>endobj +1168 0 obj<>stream +xWmOH_15%~K Wtҩ qw]$Yi);<_[.8؃ar,l>o)É5im_9mn_h%:d@ 1 'c=rk}X-졁z!.?Cn@<$r50|,>^eeQE2M5zt,<ܭ!GteJ9p}YZb;dQyh7!ˬD,iz &8³`IkY<}1D|^(@ ޝH8\PG"l(Bby5TVZÁ}odMb֋ +sW>ܘL,4WdҲ%\ߍa_h} A,=(4G,HāVwͽF5KM+$Eڅ !}BPX; +D)suѭ.ؿ VeSKAS ~ͤlk}ľEm7Xs@z:> +>V%OfsDoqrsb>Mƽӛ`vLJ&GIFsvw9yl 3Ԝ:DufoՀzycÅv {xPGS)[gR&6fxϺy h:iz,X׀&.M/ښw07OYߒȺ1rY1~ biVx[xGcї:f>FNec/Istqǥ_{M7Ydu:~zd^1 )(O;wNP^>UzNRl)Ē]9DH83ؚM%R+p}vtH"7t.4'WZH.5\3d'eh+28 XpB%r4+p4/{ث3X ^M8;8/T}eA<-4JDKffaUBHE8,õxMI)|cfgIvmkt'zk&ITcMUbREyJ%- ()ZFEx: &1)>TZe`2/>v{vy<_xÉ 2ޯMc1 o"o8 ӠW_7cendstream +endobj +1169 0 obj<>/XObject<<>>>>/Annots 574 0 R>>endobj +1170 0 obj<>stream +xWr8+rRj#zXlĵǛ0=|Lrmզ*f394xJY;OdӻxH&4LxO}4O5cd>ò~jIht3..xP"OqhG8x1{|1%S;F儆CJWt>4>4_'mϢ\ +ʍ#TIʌdȬM5S(~FE#N((Kn&AYLӯs 4WAX'Uk-srʦp*$qt~V.9xaDNKQ!4VBd=}ĵW+ڙE(T襤\EX//O;]9Ts$n[]GAyBWpD<;pF*rmV* +Jc/}`3!i)و`C=] lx N1'l)ŎFrWh<7}P)ʖ6"U(2=}_pi3Taɔ˧|"s | Fx{` 㧣L)V,B8wyJ)CIj5X Eqa/,vb5c%#L}نw`~Ӑ&is14pN{;(vgoQGtJs8|1Mg_/?z)|lEo$G"=4|2$>/XObject<<>>>>/Annots 577 0 R>>endobj +1172 0 obj<>stream +xX]o6}ϯĊ?2k[x Dl$Q#8sIvŽ*sϽʟC#(+/bAŀA2bA$#iX~G#,8.9ϓ)47&8V7[iz*#UY'B8+Τ庶n Y'kKʩLok077ȖPrFG>kIxp@K0L&GdUh#Eg`r2s gLUˤsMgbzM#lѵQIjBrep6Otn )Fˬ4ܳ#yk-KCQVG{km#./FUNw|/w_w gerf;L$r詳3 MX=:j2; +IzWu!KKʠ3,UePoo.jG{ [EYKj'^Q(X:)?&%pE_U뽥Vhr~ӫv$j5t{t,^Rkw]N)C^QcH}nPQa{zxhLו'+xL}N8hö/HS;4&t5`WE r{`:ZlX(5).W[NtLh OF:DԉnzwҍP}L=:Ӵip7lZgL/Hm 3l=P2]Bj +t/XwmKT _`Q)Ʀ0f~4@'^h4i/99%+Gf؝T>e4ZO&s̀ang$$^ൄJHJ)R + +xgN ի 3X >/̶k1m:u09Dp+WBK/o@mW҃у{5\fFgVwMqJHw <zPL;cq~}} &362 Ng,-'dXRvxvhl%n>^%q=1'I2Wnʻ_]rAendstream +endobj +1173 0 obj<>/XObject<<>>>>>>endobj +1174 0 obj<>stream +xSM0+Hx=nԏV M⭱1U6Phy 1I E ) !7×Ҕqe]a8RY#ڱ#VZv aqc4P/먔 H7v(@$tq $6VHA^BDiYm^.ߙܵl&5+!l{?*b=&:ͼ'z(1Wf1灎ń}A4i@b +԰Ez:NHސGSB&,P};i-fٕ|@g煐im7,2?bzyH}V{)rGf+ڝ4p-IfFtQ ?zڰ@#U(/[o2H0>гtd_o LJuIQ,|O'n ފ>/XObject<<>>>>>>endobj +1176 0 obj<>stream +xWnF}W MXހ<uyH$K.¿]Iڂ$;3g̞Y=]Li)3YP^]L咎ov 'dJe4IJ*vB77ld.'L4KgpZ]^lBVE0ŝ2kkUު/&Ӳr߯49ܯojoM^:.t/Er 1S!]nU6dJژyO>tcch)DBS4Ϥ;Mo"sҚ +8rd92=9i^Smp{#Nt$i";c+IXHĖEhƇ2vItHL_ uE&} +t,t3~Q1R{,P΋`Fna@!*r +;*Ek&E(,D* +4)~'eٞVηǣfs^VI_$Riq +QS#;]'?zik27 +H˄ށSmJLnc'97ZqLhh_ޯɄwjt|HBbFEA59p1SV )}[{l%P<߇jןL@;~Vq2M1v#o{KA|qq4*Gz!X"3&)}i\AZl}6ޕN|Z^@Wk||^}c6>:;T j-j:6ʙS輯Xvə5`%лp8@AbԉaX)F.a)Z -A RmO]#)k= rw*,ݚJOmUh#tȲ @ +I+OmcKhJLevR(x*E%5(oEi@0 z<8nx( ZDn%+)e1Vq"_ĆQp99d0A8%H #VBDL\KQH8q2 U>jx: KL-GzS.J#YZo<@,=d Cс(3-"@p,AC)$V* WU&%©5s l8fD bӰ7V{~ +~Yw Uthľ2V6ZΜ!}fZ>J}3! 0^9}u9uIrs8!'T:C<79~ 6zu3a;g..Arx]'G8w<'?1OE Fendstream +endobj +1177 0 obj<>/XObject<<>>>>>>endobj +1178 0 obj<>stream +xVnF}WLvEbv EZEQyX+i#.-]Rn-es~=iOL1%SʃQ4?͈&$P:z~%d$ ;$Ex{Ѩך t1[G3TmCG(цJiX.AA*F(p XՍ!{k,iDQeL/4>;ۄ95MCYN5Ykƣrx^1*|9̯l$URKt麖9Q ].5k|mJ+FF=ݨ^d’\fJdT}'e&nǓ US\EߨgBXC5N.N?_.]|~gZO\ +9F=e$sBWWgm+|InFćIDEltuĴ]kh,>շ2Ǟ W'?U& b;?a}i^Nl9)?u&Z2cX!!"WƼpffa*=3BX[Ȃ-B롙=#H/A-[uPt [bay$'0x)x믍ʶEI[@~ +D ϓ /+l-anBjmC鲡: BAv`E( G_z$Š%焽4rM|0?>lKv!'6d>62۶xWpD)=1Vk,⍿ԟ`%“Bl R|췫$P{[K7AUip>.=P۶*a˰ [;NPlw'yȜ@<גּ/=ÿ#0nޞ$Nbi4o/2sVg ƺx#>/XObject<<>>>>>>endobj +1180 0 obj<>stream +xWmoH_1H%py H͵U[JNٵCY8$B03 '#߈c(NbA!GMs=Dsr8;>;۳cdv4Egf._FsZl1e"OotY|CUA3yT{οZޝw`DXl[hčD:P qZRRR'P5 D' MAE'ؐ>9^.pbrS1A +mJmcUB\:V3D/-b*yzc[3^XkԾC/)ROA8Al~  +4T.3C":K|,# %xe.9om&N?>|&o6J ̏$HRQNm!@ 4n(@H9ɮ8VTM/Nz^>G&Sb(E <@frή|4ӝ1вMp S~V(9UtP9"6;u4 \VAAV6ަHkg1qֻc(.ӦMCՅsf4bn3b޼h5=0/))"g?qL +vpSs8JUt] YU 96tJ2 2Bwb%PEN^8$ 90{k\9#>/XObject<<>>>>>>endobj +1182 0 obj<>stream +xWnF}W v͒7'nȥQ`E]3CR% ̙3/gc{L Mgghb#OєfWx,4mwӇ_ޫ27{'l=ev6YFfx,M ,Z~iāW73i$Vd7U|qE8*M+23OtBUUrA|TťϝK/< c.-%qpEEnCLڳ (Ek-l I@@뼶7iJxrFj(Myڛ!*C`nϴ).LDл:TEKW() yk}#u"zTy)5~:>ԃ?5NeNMpk4!7/=&ggnEp 9NoסHwݾ}u,w..3@b/,Z/oVg?Lendstream +endobj +1183 0 obj<>/XObject<<>>>>>>endobj +1184 0 obj<>stream +xen0<ܚJ@1z6~~BLU޾뒞*k%K~? #PA$"dq!R5ࠃs[dnxAכ*/h7ݽ>3B20V"c~eehƚ;][ R;5pȍћn629Ʋf]H9S&"&o{GF/'Ƚ=63x>/XObject<<>>>>/Annots 584 0 R>>endobj +1186 0 obj<>stream +xuWnF}W if)IkX@XK evV{fh:E4wr朙 ]߄SP\]G;<\byhZY㗳y4Ņ]Ig 44KdC*ruU=@1ynY#S]ȋ]n*'Wlؔ)UʪB{mkzƁlJSp%'St9AkyfeLo+N8ѩs9BeOdez)!_VNT6.BHa [P52i$& ]z}{9he0gSima'^e# SaMmLn5=CC\6vͶ:AZR<|^?HQVR[/h9|0퓶#*b2앧@ 5o3m]"xq %mk?MžVy~D5@)M ϤjX,{0(C%;$㒪!niĮ&MfL&iX :.b%*e< +0MdR\AvT#Wjk GzFR~n3!D7B)nX$w7Vȭ+o] 9ȏ54! 弲t:M̎D ̀tmi$! KVo G}9āzYk` NxPlSL;yӈ< +%`cQ6cv'Ã.} +43=f9oU!62EDCwIU5*x)|Gx`}K5b`9A'\/,?7ئ ̉^()\^ @A'v +ۦkRg: pSJ:}H1W4;t*7+mcobSw[1iHM.1VV¢5 ű<l +fqjl5f;GA6AqS=+ eVR!ZNٴuoQnS s+9rQH*D?iʆ#7vE\|E|6d< jTYdߋDԚ♥i. Cv/4,B1K)`׎QKO#o5j T`8KrҒ:v{BγGrx|Q𓝶>^Tv8eޚT;(ACh=[zf=}eʄM;{A<ΚGח,㮿c .W[-vd"y㪕÷ ( $ ~BtBtB3,4X (5O 1ֹ݄1]k>*7` " D&*؜ g1 +i[4"nm@A„;aw +Uº8Ү+Ltff4K{)\`F,SY{Mb1x2Ё_dGs!ý#z4)/ ' 6P7,"Ajd*{]r>zh2[pG| <_~1߯>eQendstream +endobj +1187 0 obj<>/XObject<<>>>>>>endobj +1188 0 obj<>stream +xVMo8W tjDΡ=E  BKF"$~ߌ>+[$yfg oA%6ճy:=w[_5qM 춴 sgN6R]B89S,URh2u~CElOBes~vI@왲`m.gtYm~ՖL GU{bαz&Sڗ t_:1_Ue{J=B6 ꃂ8 ܸ*"ƁzHRmUiV3^kʜ:H9aU].p>+ϸ"dog7?9p~_: ~~&źdt3LKB>`Z`jyT끽Rg/ :*c!PdUJZ$4s#5) aƊ:bd3;M\u$ N׽nO,#)LҾ)g" ^׶GR7G^`%2n0!>F]7]f;ry\; :t-eoE{lttRD:b4) +/JZw.޻֯#eZK{$ V(O]vs)`w!%==?=v-@q-k+΍f1ߠqT^& h 7aKuUu{7csQ7ygBt^6gKbWQc^0D{8D3 ̍;BʤY0XRB8zuc0Z>@* kL7d(RUls1">'Fym<0.#-&!x!>eXUSHb@֚߰ś|Eb@cҪ",w,`2 | x$ k0k~=9Hjs^Ѐ!S8L(mVĻܻ__D\2bqv~s?;G޳ޮfGgendstream +endobj +1189 0 obj<>/XObject<<>>>>/Annots 591 0 R>>endobj +1190 0 obj<>stream +xVao6_q0@bŲ;)I t}hK$z$~HIؐ Dݻw ~"i2t2pNhq4o:P4SNF8O|z3#kE>:zl~gw74r x5-S +oȤֹGJU)e,h[~s['S _*jC%{]nvmEx֘W5eEl^H"59O{J{&;?0$o'Q2=u3a4Yy칻]'Oa;EHmKx*i7i8&)@O%4٫J@ae8@6`1Ȣ%RUWH좒_=mur4m3\4W!=5K]1)=o{#Ӷm +EVڅhvnW5ȇRi RA"/L7P"E +K,Զ0QfE3qxcЖh) G@]b(C=XeLÅtfj+84C/@/BQp8ZJX*0F\yΫk^(|h3Mvک)&ʪDu;ZVVz]tw}솼b-b!?<ie~j]A/NEʌaikH%F۞emeJ.7$( u:rףRφ&lG{=>~ɇvaas Y71CU}[ۢO#b^hAܢ"V/@ +u5: p7s`G?(PSOXBZn ͝cy.yatf3㚥}fpҚЦ)w+n+X6j-/F@+ߤq&=)]S^еӉ<,x21܈4{cey) X~/A&Xز~Ojwь*4ܧ^텁AɃOxzFW +|y *7>^0v&<cl,;GuVkMAt17צP(ƲKl)뫧ɉm~,#5}×ָKٗ“\i8]Ք=}^~ =׀endstream +endobj +1191 0 obj<>/XObject<<>>>>/Annots 600 0 R>>endobj +1192 0 obj<>stream +xW]o6}ϯK!Q)!P`NE1,{%f#*I߹r֧S8ÛogπCŔgov6GCgqԧaY{(gdM)ьgѼ^:a<>ĸ;<+pwkoĻȎF>dz)>g$`8Aa(Fc9@0 e{{y4zw<{~L-(A<2i䳣d+$+=i1*]jL(S$Uko2?deƗpir9Qekۏc}:% +KkTwpUMĖZu$2i+B0f,KG182t] B}xXkC{]4HCKT"p v9ϻ%}&^"$ҔzT?&$wb͠9~AIN>pݘLpͅے{tȽnLcOؼAW8\$B}h>,Қlh&C)>e>Pmh6H1y; {q7\_I?Oߡ +[:V<;bbU"S:p",ӻ/u&$e% 9%0F䔂s + J,(Yߗw +'V5H +l! Vl nu ~#e ɧB66)fO)מ B+ ڕQnCx$[:g_ C;(4YS)u >ZFnI9_ ~N  CqU'5P>u (hu9E +adB kQ׎ͺN=6WψƢ+{1#Rh5 F7I^DQ"et[pQйrsG2P<8Zwh`8k2~|x:u[6'(t[h2=5d\ 6A`+lYs8d}&dcl +D~LC= }дb#9yw-(Yfw[NƫA@{N Jz(8dq:gʬNyP߾Ela&D +1IZF%Z32Nݬ?\IPqBJyP0Fz6e+}.ːќga0jԖjzxtX7'FDګ4F<;QC 5bCbD7O N;W2)<(kIG;un'RuOV*dusU]W*\;]e~{l9ά?Q< />F]6/9?m^1~3<8>_g sendstream +endobj +1193 0 obj<>/XObject<<>>>>/Annots 607 0 R>>endobj +1194 0 obj<>stream +x}VMo6W3]d)4tEz腖(Ԋ )ۊ-"9fLiSZhSR&_?>X)ŋ8ZPIêAw28|b]V|^h> vg|1,xĽyu%ѺYt$Ʒj 3%e`|yfFZ6I6R;ƕ!A/JhqKVY҄dE)(Iα5|ij/>tyx4MF' +) N>f04~( +҃mDòj_Ԩ ag8ӃӉq A4h+KI%8U]Tda]-tKKF3AF=QAB-Cv1-l {ɷR` Hxʽ3Nzf?S!q:Pw קOBkM&?cC _}8 ڼRhKϢܡeW#HP.= yN\UX$d4wP"M5M6W8\&DjSOOS$i@P&±> =`;\wm/DӄRYO,2tT_<1rT G݉^[ma06BXwn. 8qWɃJjcMzIz cun&tBBO2:QnÑۃdkߢ^$X:A"Z0.) ci&Θ%:Fxc0.gJ>n Ҭpn[/%7;]&r`}3sA {e]t%鵚T,;M޵g7^&<{ѿXAaD%@O#* EwNm5AMzK0T;Tx +Ak]F +)S#A<^H71v2g^y<^,ƇevoUn'נs|YvdB}IY#*+E|2WE~xp p8J}P+<{G.>?N/ϿR>0Yɡo?5I-|x_"wn/QZJ7o/.%P+ 7x<%}}|V-iWjNo>>/XObject<<>>>>>>endobj +1196 0 obj<>stream +xWMoFW zrP[YrzK08n =".%ŨM(6l͛׳\k.논ZIR]ͮz~=[fdj1[M_ݜ|ZW`kM*s''k2SMƦreStwgWrXy>r7[*i⁥mVqV\LR;fH׮墤.q#THG+}*epG7v;mk=.U0#mvԶ +)L>kj2f3:nĐӶ\˃*joMyBP* '% )6.\}7n ]"\ZySVx''* +!E)7-BI.m $S%2$ݙ&$̸nTԕ +#ڇU0QWi@3<|JƢxK}R-fHC7*5ᬵ Uibwb ^Z)&޿\ŀ5Y$S.k HG.UZbpсn p ,-H?An4bǢ9qz8Ay#h򝢜< +@0vC`7>/XObject<<>>>>>>endobj +1198 0 obj<>stream +xWMsHWtq2Uc1GCZ Yb +4D3vTmdt^i_sl:9~^-oMr9^zz'矯h>Zgw'k)}*N mjMFmM+剽Qg2 o3z/ oM߯l~d-'.qx|2Jv;됉$HmxȹQ꒥k(,ǔ~&yF威# ^,rL;VUԐ2KDi 7qkY7U8V3 +?PoN2/#O\sKrXYp?ž˄MM%4o,z 0^'r`R§I/W~zsA{38ST\5ҎBdr$&,4jΨ*Oƣ(WF `昍c:MB{7Fvڃz^Ľܳo p7Ӏ/HEk(K ׍_馰 $!ՈO1B+ܠ4iPqUsx]B1 + p|,)g›D]{-07{\+% ,whݩؖwB|Яֱ&jotBSHձpӡS $ B`% Dz 2ܥv*,Yo7MHc(Y0У|G +D2E# Q$A*`U,~HVv$b+]?9zit.1eaLiy$2c:71c gxLaB +E 2!AfX2 ݂&h)1?[ʕQ"0SH1LQy 1x*X t;zTcC }S>u:+ 5"kJ۸^~o>nMkaHY|b%؝Ve1%6θй裲)Gۭ[W[1>~h=a{8e*lfQX?Mh2@UbT-'2d"H78ӽ0ݡCnM 6y(LΊ N(ⰁbhK0$8xGna;vwOZ~7j |y[^b>x\}\[ykSD>^?}zuus5Y,k}@)endstream +endobj +1199 0 obj<>/XObject<<>>>>>>endobj +1200 0 obj<>stream +xX]o6}ϯS$NIڷ4]>$f@KU{IڲLs=)]ߔn/ꆊbrA7WkqizM +Wn$yqM3^P~ÕkN㕳[\94qjO*Ba?ǖnӗvکPKt'%2Ʈ={䒽^YmŊEkA%^KB"ޚW]RlCe]U!OۻB#HMSL+c[X[gT6zJjϽjDh+j|"π[(CTjBqh@U;: SoD4JY8C""h ӗ*LaLѧ'ܦAG'7#m6#u.b};gN5 nv`#dh];M0Aե\GBk8V= ZK3پ6L>GmXxG"(Tli{8}K$ I=FL}#se\.T#qbތK7X! r}"Q% #S@ +@՜Jn3=Pp=hİr!mhM3{LMzWڶ8ZSP_9 j;9ס8ob`x I5"Q/LF@^c,XwR-ᇌdܗO3 T æ`æPuy*IpǝB}#(Z"p3xH)M2Y݄<'\z w`~̻ Y@XS +s S2j)ӉyXWjRI1X3jE?ľlFHy*sP&Oή0ΘU[m [9|΢}C%Cܝ 6fטzfRx~H>ۂ%Z\3F@q|4X[Z~k'<}Ϸ?α1]Ʈ`\3c> +R&/4vۆ #}ry + klpAj]2Kfc]IH{ɷ..ZVtLǰ ƁPRqݪoLb` +e0ʖ#HjeóK`l6d(&{b7D8lcm}T>`]oT6A$Du jӯc@ \o%oCizD6)?<>(RzU[P娳wq|Jr(E5m5^xz'V}N%P&L,:xcRKY¬0([_E_YdBC%Ui F"t1v9Ȇ_OW%yNbSQs[t̲T0VT(@ 4%x`>b#]#׽"`lwGJw:[ m%e\|tf.XYv̄2سYr1D#1@V>e14 +\Õ-,NS0:D*K=ȟXjabYB ּ >~Ыŋj]f}nneqvH߸l$Y>~v{?B3_GGʣendstream +endobj +1201 0 obj<>/XObject<<>>>>/Annots 610 0 R>>endobj +1202 0 obj<>stream +xuW]S8}W7 1jviYZv Ql%ؒ+ {dctڡX_s~h?#i2<&CMfɌ9~㯕ϓ[&Qx'OGƳs/izFUJPIyp.QXI`iH/T9d~q+ Dy,23'@p|^7" H d`83su(`] +* r  v c^8.WDrSkiqa_*)(-Y7̚m(Jb0(ewww ]{NуYq\` )8Uv)'66<զH%/6JRe*xq7"5ȵ+y0(Ga:u"\&(V0UӘB/gi-|ɬ)-CR&UUbucicA϶;X3%MܝoG:nY5 "XyDC3P[zjۏ@C\2# "6{ wg-5D WJeڳeڤ%*jо +m;cgrPr|Spz<,`8 +g2S"C#P{ّBG=U +Н +,t7DMM 9,!= F{=!@ۘP/LT`A4@MqeB }1]a,c^5LT\#COdM֮1a0cehaҏairMK6=`9~wZT`)NP Э +kWl$凗 5÷x4.j˱Ǯ9.gbkYpCo|,؍xAMmo'Z' +xCq@ p4v; EDJ_3\J y]3~h.cB_w.W5V9TyR2TB'0Vm7T(2@"P2+.aUC0{gs<2m+,g: ~:ὢձ ϑ6h,rI +2@lt=cg4"+X$0Q6gRzp%pB 8hf8'&bfǷB`jPjnj (K0tZi(\pf`: ;bּ^=,7\nj,%l-[X̓vټEu|B"j`,7kP >w`4x1|x6eSf:&"0?Gendstream +endobj +1203 0 obj<>/XObject<<>>>>/Annots 613 0 R>>endobj +1204 0 obj<>stream +xX]oH|=H(ْ{886{!9gMr3[C4ab[|tWUW7EL i՚b-jt%;M{~\G1].VђJTЗg<6çx^Gg<^DSpq*vл/yrK ,Ɖbv{h.$K'xREaO\ӗ7TNQmqzq&[`aUT*u+,.}nTˏov],h3Ļl;qftSfKe2GBg,:hGgM^|lpJSTuRH '=kekn)2J4rVe6mJdﰹC\('ޠ9TSg_5Þζ!Ly,4_7h)$A! RUF'sqWƁ")ΏoT>02|ѽ%_3#ΆM}GUM^lJHէ?jWO[ɵTgD5.?11F͵T+[Ӗ&ƴ^3 Kר\lk]oSq'2i)$W&R[͡{f ôq ()mBoo};?^;i"wZ4$07ãTCob qC +Q)Lۆs $  ?eN(rS2Ix&90i%8{}pɎ*4n4`a{]#p,,/0}| \ha~;FY|pѵ51( 8 *CxgE:GDWUfZU~\t0"\ΖKNekjQ̘\}S:U6ƺy]uaܸ R\᪾9YP_A* .~4ŵrMN 3gB,=n{DU)j*)ߖ'(F'n(Ra!ȗIqzk˚;kjgu&: g; ߲;KdCȹ3z fw-i)I,uNIs^>ܣ`XI̕T[}bHRLeNl`B7ӾG&>* d螓n 9)젼5!58RG(@t6P*]=0~Cy)-7"0ą7 ?R気)Hک>G| |%}GeᎭE`~ ǐقm`];yT0~*_] [G~ @?:PwFY8ey ~+4^GWW?3}ԕk5G)Nxc_Ƴ/2CW`D]]-UwL? +qXZ?CANj0oIB_8unbT1ѼRl HNmx? \m֫bq+sy,Ɵ:6 ГM/rh_K:=w^ ~Yendstream +endobj +1205 0 obj<>/XObject<<>>>>/Annots 628 0 R>>endobj +1206 0 obj<>stream +xW]o6}ϯ@QEcɒm@.Cn %Q6ID)Kk;Ms/yHl6d1{RRłos/hESodG[+NglIY~ +˹eMUFw18,ႏ3o + yabfs4Zcdngxs8fdtdq +/&ef!? Zl1Ub9Uln-DZ} +n+0=g CS g6K4۬+V;*Kd*@Q]1!NIG\.^0ѵoOܿlg"v\.Fx7M6o0} + ZrO!=7[sZty(Tf-*7P$"kɣ3-سN>Rd%:ojVkGRg6܈GKv'GM9Tilb"M\V"R!n ( +|\.$mMUYVGdmXg:ٟddswjy?xpaY @^QQՆ^zqۏo}x0ب 3Kٞ"U&eFxqKhb6} ϊ,/PiN |fl7p/หtoqvQ%^گy0,mC (%l$~ 0kwOh_ +YxcO(yqqm |^oAm '/4K~f4O1flpcGh\yK bmcmGd>3<\~Z]z/a{endstream +endobj +1207 0 obj<>/XObject<<>>>>/Annots 631 0 R>>endobj +1208 0 obj<>stream +xV]o6|^,Ym P|R.FC)HJRv wGqRZ$\QD0!F\seÙ½~Q9c (Wp{:Y`<:}dX`˅c酋1Ft_ez)+fVx iaK džWM eSz?0D=͘SCuLR`6?}8Ֆ+0~ +Y1Q8.Nb_Նc,KrYU.(JOL`(._~:1mc֬ⴄ"JG`/[D]ȝfD-QHu֟mLN†i`OĖCV|588|ujY8@OIi~tdZMKrY1Kf & U\"= ndGqϕȶ, g4>< +bww 4ìW.C R/ +(dm6\1nymZV v,ajc+ ;*Mm:W;Xk'@=򾕝 C}Nj@vGL k)ux#Y鈢$.ݷx]{%6> ow@9@ ^\T:IAۃ*7'rX3S4`,D VgHqjM 7oz{1+>D{,=Ni}ml5 #@TީO? 8L{М;yb@~Ep&k}H4JQjpdeQW,BGN1>:w׮SX/7*κueBBL8/B?Q.eVŶi);/b(bezᶵ:'s?Ǡ(ɫt(#Eendstream +endobj +1209 0 obj<>/XObject<<>>>>>>endobj +1210 0 obj<>stream +xWmo6_qȌbɒ C]eaX舍D:$XwGJ]0,x{y绽 Nb o nD{@smw?|TA6Ft(i/p/6tG=\ ra0M'ߎU%Vyεy=׆V٢3:e9˅ɶ[\%/T2]2JojZmR<*,1/YmE`2UK1f1lukJ Mmޛއ t/9 /3ʼ9C*4Od{R>gen1p&hP m6saLXH,GjtfuZY,r! R0i44 NF^It^ d|R/*4Wˌ nT )2Vr;x6GP\L1{ii&ð8zt)%⎴VMxPoUg!qEIA*sO HLfe,/{W>/XObject<<>>>>>>endobj +1212 0 obj<>stream +xVko6_qj3D%[C'@ѥfcw,6ItD*^?6f2Hǹs6}] &EJ !_gG=%#nh㝣C5BtMTN̖Ӓ)"Ja#һe*VBz1ڄ1$*4aIf:O))DE!_&{]/9" ȏ"{g0[Ά|8Uo:D, Ǻ8ڨs=,``G=&75_X0A3%jH7Ms1lM4$S=<%>fft]{@B=y5V֟endstream +endobj +1213 0 obj<>/XObject<<>>>>>>endobj +1214 0 obj<>stream +xWnF}W HI "ij4@bEH.KZ{.%܇:#s=s梯WCߐf#R_  h:&4y6G#i.Ȏ ߈dFӋ߬X˗*U(ȗ"ufietw+rT݄{kRyqܡa-PV&Q>FͿ2}fe~ ]ey&C~Й0 +fPc ,7$ZM\[0([5X$o.: ^:i9EH]ߖ2Q+;h9<;:6T3!"⑈|h)4TXM מB}>&Ikow:y:>P= eM#kGlx)ݕ >d."k 5Әτ  Vc`>Nanx[i-5BfлPC\Ue$*c&Fn҆p;4*cTfyFg.4_^Iˡ!L{xy^z2P;j|3uRး9D6ԅT2Dbq'8F4]GI<'5r|*H\ݭV<{ =֢Ʒv7:4Un M+A4wWj\͒eYE #Jj5H{x=Ft8`ōaűvLT4in#$޽uN 7޾OF[NɺF?8.|$qkKkw(gh/?֓Siqտ;endstream +endobj +1215 0 obj<>/XObject<<>>>>>>endobj +1216 0 obj<>stream +xXnF}W >ȀE:m h륀cEI~},)*;2X\Μ9BD4RoHqv1mB z(h_9Ά{ADGQL6_po^VP[ycOSvڰܹ5Md84CƭJc.f*-JGURQs`C-͂Xk-Zz&R3e`}Vp:2}BLMJdAҙU>U!^|!rDzPL 8֒IP&\*S0|":t96Uy@PNDw; _Z҄~ ­(ܒ e:u \ɠܦ:դḙWBY\XWNw0xͽ--rhs]4OǺmM|\fT:kF<^mT/T^QrOV.E҃(tۘ'P]:W>Qm\7(rɊ&+cJX{8OsKR[; C 3q-QrX<~dH7RW^~` [yJ$RV]~!nquBGLεY gqԄwMw@Melv .=V-l.*~߼ml-VǴ"@b0g62*!=']JJt1K}v@[%Mk~[t:jZ\khev%cK,Ԣ0IVZ'm_2&\-;QV:D*`!Ra4Gc԰o?`2LQ`5-C@r+8Ğ.! 6:|~ +)u53{ F;-5+Y/@J,8p:a'$!OY U^kdnF=r]d@=܎$ӧnZ7'T /L: Sv3WQV|sBd2lmrJENW*6Jb1\C+[dО/W5wKsXH.]dŏ-o-ry}ut=B؆L'J«2u.{ !v3D mR=b6øa A* s1E "< Gd蟲ϯ>aSt3vG!p*!7]_sFC8?G_endstream +endobj +1217 0 obj<>/XObject<<>>>>>>endobj +1218 0 obj<>stream +xWko6_q C +Բe;o LJ-;ITCJrRp@-s} 1~BOhQRACe0I4 Bs?΂sR6X<]qp.`_a5]V +tB΢V*9MM!3Q&Ǿ/V(j5*zyb0OŨf坭@K3jwJiny0a_`YK*;!Js!jوDhoEU +`~'HiAdx =2}՚@v#7O}8{gîdu烠MЇ;A>珣C(:='Z Y:Zԏ'tN*}=k~kXOz>{SөA*u-T;WkI)f\oOm5M2շ^2svx@ԟZk]?i{Ц@so^ߏiX]V׾|v`]( 6ld8LU +-)4L8XوF &㆔HInU܉*TuVve)? &nR͂qs%?GXwpju06p>5=l> 渫⒚Fj_мendstream +endobj +1219 0 obj<>/XObject<<>>>>>>endobj +1220 0 obj<>stream +xeSr0+|tfgܖN{EVz$@Oo~/rdQ-q[B,PFQW^i]QˍfqX ѴIYWhQW<3 +O"l ~g9$ DĠM7#`]cۏ]'둋l0rc3\v;;#HGڀH;+:#EoFiVJ ;7C16^*85`yQviC @4'pAf24N}96Ss>Y|[w|#շ~->v6N˓*[otQiU|mU'>5/?0endstream +endobj +1221 0 obj<>/XObject<<>>>>/Annots 640 0 R>>endobj +1222 0 obj<>stream +xWn8}W P+|߷\mm6v,hJ )ٲAlK"93gΜC4{h;(t)dpC/ i2U'V[K-݉pJBB`Glx~(JQ*UCuۏ˷42&(u6+!?o$,6Ġ`/'Rcstg*sKNYbd". ݈'Е( +Sg\'xmuwˆݳ Rڃ50եN%@w 8Bpf<ǘWJ +*0+# XLWlH*G]$f h4FڀDgpA*z>PE.@n-,OeWʚP5}Y͌};)Coh +v@ ̀*/~e ?̎Л:ma/7Hy۶zp)MmRD8ד-ǛZ)RR7tFpPE{orm]Jt?w#d-' =#m̠ #c>IF^qk9 b0%Hb`m>LР]3QȲʑ8Ǔ# OB?O*3LLϾyrTdE 4VUj+ԘvMi'ADSš@ W0`$ 3lu'd FׄLyD[9 +$&}#l~<G>/XObject<<>>>>/Annots 687 0 R>>endobj +1224 0 obj<>stream +xW[sV~ؗNOH’h&q.NPۍyy8HP[ vԙV{/\KG~@q~6q&D3gJ(ij%#@̟%$9M'3'lΆ0pDN.'X,ftmZaMbu9XyN@qSx&@XrN.|@1#COCkTDU(X.B=2 +}z!`HFl@{/|=ΟZ>&\d2z\4>+@ f>WİV=ν|AW7{ܬ G@B"1JF7*o|=#7-l<<>[tbEfA E\i2tbl|=V::g֍Zh[ +҆LI"`QE":+U\BǺiTcIMpb m,c#&4rd( )ct^ZQel7;2h4k#ćY+'F(.@bS#ŕZi<œ.R]ViuAYZ|mjBbQY!M\IiU~G6AS*2M6N9-aI"Oo댓=y|CUV.T5A^^դ15FeXpÔ#.Y%2^{$Z> U\/Tϳ^}:`YuMpSbKk.+c?Wؚu[,x'-UnSX[zk.+3z%0V :Ѹf=e}-S;NP2pRMT%(+n,tMZ\Ɩ۩V@ީmfSUeme,6=33[ +a rfv ͺ3>>vL6{ X4к5%Z J(KKVnjXؠl.xxm +΂2jgRO(m?d}a0l4% .t` fӟeqXaH:âxwpq!I3&H^F99"8OQ&^ c lAz;N-xciq+tqdbA&Tٮ3tbl28QIb_~o%9o2?sWɲc}),:r3.Lt$â<+Ŭo]&drD7ah dćlPVn}P1V +6gL #7Ά5vXvr2m_nfE_B-2@.Df Rvre'\i#o:ۓOon3qG8e]ΟG/9Ǚ,pǛ+˯4 iu\N"FE{~0_貸?bendstream +endobj +1225 0 obj<>/XObject<<>>>>/Annots 692 0 R>>endobj +1226 0 obj<>stream +xWnF}W ْ7iq&*PŊ\YL]ewiYً.IK̙3/'π&C)OYw?>rr1fCٔjfxUG~.FgIv/hﲦj̿6tC3j-8tB‡ڧYޙ-%YilZiе(UA+KB$l Ɛ7KIKRn.bcfE~8D[h4f !ڹkNR,?KU6U)#@.\x?)֧×h.` /GaJXz+Zt>KPJB^5,h]%^,-u7҉1i6Pז>z.!bv\׫J"߅`tZVI轝|[ʧtz"]#EUmKS[2)VS +so5Uq|(u˵(jzZ-h%du4s8ӗlžuJs(pE$.B n;/K%ifI㋾/~ӥbs6r'>C(w"=ǾEp༃ZKnp|^рy}K-s[2Bdz 4z}s ^"xz 5\Lvҏ\JX.*O0qPw@ڽm4D {M>׊DM҆Ś6D3θ4]vpەV7?[lf Q:Lӓ.M-0Fo!&UE0(˸5PJEW7Yp1 i菮¬@9XXK H|2UZet-4^D.W@WBq;MJu*Bف2g!$/}>@]Q{ξa-6XAcǵ/Q9 +ljq%;" `G 42h:I K/𧁓+֡YDSW]B.I X9Zz0p[\f^E#Lr)-iP<^m[!Tr} S F|0^Abk_l)UDs|{N7Zڙkzv^*" g}ֆnAB>TQ4֪ϼjYR.De]z{?lۏ:ãɦn.1/57Žo8^NWL3^L.x>}'Cvplendstream +endobj +1227 0 obj<>/XObject<<>>>>/Annots 697 0 R>>endobj +1228 0 obj<>stream +xWioF_1uRX,.;mخu*.6!w.iY}ܥAQuDo|ԣ.ѸOM&S,ХQ܋4Gc*$!χ !pF9F?dt{(Q4ƃ ~h=ST?g§u;9 z N}H(~2 ӣz=h2i4iM^M?B9VGIg%]I"bCke)[R۹HJK"8*$1JT68rMY e+]j#7}+إ_S҆SUȤ4&kS|*c.tjsUz?Hm>Iy錡EOmaᶳ|oy*P)kwRy;3;sY/ocg̽dK"e9Hف?|N %Fm5*I&,Țq5>"eaS&5(zm5 Mgi泺{ܵ&wj- \Ԉ.ٓ,dSZM5(Ɣ/M@mAW@p'=kl[%_.˥IVsE<@lawSSrK>:Ž,^,1¬@ݭ*Y:Jel m^qB "uq3)Y +P-1U2N # @VU {Uf+aaxS)K勳daGwq2dF3Q,\@~*nR!7Vf Sգ׵(ÿb m=~ۈ}m!dLқl.7f1BGkq6rbGG_5HX-s*,@2ΥGwMᴔ &s<ɩ VDDꓞ": |8e"C^T%i:UuSj%!}բBE 2X9WkBsg@XU-L?].~ N 8~lWn p_H&EӁId#: JWd7ݹz [1LdD􂾉p@Deq+K$/SjLj/oISS8ʔW^x%nU ʭgY0L+ Cst/ +^7V~0xG~;wڡK1'GcğI498FC,i:la>LR:(Κ149=:A4cVף_oendstream +endobj +1229 0 obj<>/XObject<<>>>>>>endobj +1230 0 obj<>stream +xWnF}WLV +Xhaq!XQ@/+r)mLr]ҊgvIb4 /;3g93r4>~h21Q?li4!Iw31?;Nhiv62b#ҐLdXX*4}_%/ t*TvJ*RntX0%YDvMvOY0DN)~S=DetE$TeFI,;*)27¶爖̿Y$ZiѹV% B%bLCFծ|0׸8̊ nٍ.3[1P˾Z*Q oӻ;\;=Y=3:\ٝL KH#ltѸ8q8w+etnsIOPC~ * V1b 7*TnQ[M2D5 κҍTM+ZG!tTD;_A;Cf\ r- w-&fs+9:TdH\vQ +=fhZZJeVz~e"* 2?5ka̠TJ=௝ȃcs. h(,NM"MxʡOjP%!5վ N۟O}80+3e PV.5dnKRdl. +U˖o{7a$4ڗ2 `bpi0WV0;WLY7FgϢ'L8w2eLJI jn0jQ5|NwbC+P|Ge/QlD,Q@7Fʫk>]ekh!&IluvZsõq2NF U:C+mڈt/T<|e: %Wx#F41z ^SjײP9D zГʷZݠRFHFDnMntRAOm Kf'Zm!-ԗR']C?ܑ;\ɋ)|/bԳ`#xPg j*n <& ]$NM9)+$Nk<@ Jr8r*pi8my{a1=MkeI1XyǨvFwÇr8ΑW7A;lZR@Yp*]]'o\e7rE/xB.2|՘+|m¢af5>^3s9&ϧ*4kWh0 +L4M]јC=d0q&s1eV߃7Ԙ`s:l*,xgX $[&WٝjJCI+7<>@Mn4WBX7>pT[hBZ4{ןo?xOЭƇ!ȟ@Z( 5~kWX#v a4V 1VawfL7WΧԸנ a5p;A>=;dLS|ɈOx8?^ +Cendstream +endobj +1231 0 obj<>/XObject<<>>>>/Annots 700 0 R>>endobj +1232 0 obj<>stream +xWmOH_1Z5;!/rz +T b{SMȿgvؤPU!33όB_HSJ(ϩU`Dx,h2:hR)i?0(M!0$z7sZڜqCF׽#Φgg#`dѹ>Ep`G!(oܞ8s}b1qxL۳OtBaHc;hZFLR Kta`v@ˋ$/'GH֔TmMt"퇀EQ?,F4ADML TaKTw:c|\?8 dJJ=c^/OSC/:Z_֦"$f0\#ԕ,I**4GyAqS{407k}So6pIQMNқ˵=,蛀n֢zoh[/vwҕȔb8ܾm^Uܑ SJ  lE;]@kWe&=3"M!MRMDjQRJ6yCM16s[]g)"U KTTEkLm:qRڗcSGi49_vr˗BsA(CRڀ&__RrQ"[ skRԡmlgm:.{ 1*8IlfEJ<c)myԵco38& > *7P)ku2U~;u-"B:|!Ogd϶hWIl6\P}RkMos@͙bĆh,)P>U2p5d5Hò)*FH`&7S iFi?Œ<)ZSg·s@{U1"ގL6Tt=%q!9m4k؆r +C7< +ݴi4?߱],'Û+qۙ +(ӥ8n/6c*OMN{(s |g\>G' (# ga@{Ι9&+Y]1܇K @.If߰r. Tvda%Yvϖ,KV3Tq%ƨ?G|QG#}zqysA'WWWLÑ{f1U_6a5Ov^p|4Bﲂ/~,Zm +q\TS]ȃ=< $Q4Ĭg{ĥm?0uK;ghF[mTh &wnlzd0|olR#Zq? %BIUj?\Y +Z^xDN[PXxyEr%.Ub,`#SEsbۊȜW)nb iݦo +c3Lh_T~S{Ea]Iw2os 5/W8/rn4.ÉD \,N0t^@ӿ EŔ8o}-0rT[[gU)7^q}d>g4#A~3$'SLVFaXVtOo &xs +o֖l8t̲Z@:kBb; J?gJ<Yb\%6zU1eV^s_d M73oOWyk'7:mNwtbw.OOh=sO4!yt5t}tc/n:96C:cFRd6 fSֳ쐿:Y(endstream +endobj +1233 0 obj<>/XObject<<>>>>/Annots 705 0 R>>endobj +1234 0 obj<>stream +xXr8}W<[6u$e*{׵_ 0&.Zi(&;S/"ӧŘFbB9%(I/&i4d(|SF2Zx9f:xhEs-KIۋwcZo|uh\ %N)IO +W.Kު]T,,5.h*+먲^ӚV|%}6Jt +/46 W$_ea=)ϯGtAYJ'Yʔ;6 &umofgSFDK,Hh +K"2ˉhXʝ<ҳ<"&ц%d^d A+UlK'J^ʎ$s9($qZ떥B]QbHy/ݛވ|Ԏa۝6(Iŗc)j8OOKvQZ ̘gO4,TiiLIyPVFh *Zd Z!GJ^ԃ2[w@$,+6keDg<ӔKFP?O6{B"{uHʶu pE.iCDd;b.(kh.NAW!a&Q늩y_z2 =@~7d̲=}^ +cbUS!:3JviEn8v(j*d4zz83\joYzJBċPYMA(URkλ7ީC +:Vd>g'RO+MU4쑙 `4૯t +`Og'd2\(>o^(ѣNql>+Z:(q\y MCk +%ͱǂTH5gO_Ax >9zw1b62,s[/ zW x]{s_1SDwc\${^ЛlHFϑg66^͠찔dNZ;[/RM:[STr:: ؕbAU~8.zs5ϓz^D1O:M% &~UW= +-v X;9,)]NʷZNPuks}/vWT=aDӪCa&c +b1'%a¼ +|o3sChLhk!nt`xnf8M}nFuޚ^nnV08UɃq߳PLN}ŗ(Q/Lfxuś?Uobd˯O>*~ױ2?ieV:tq,p+\#YS Jr 7eB>qěpAXX}?A!~;u6@9`XFʕ#f}gLXwRR"Շ’k)q5BZ6ZحMp\;mc<6M> qQ3yHcD/VX<ҍT)Oݫ >tgw9.)]/F(3Gb +/Cendstream +endobj +1235 0 obj<>/XObject<<>>>>/Annots 710 0 R>>endobj +1236 0 obj<>stream +xX]oF}/B>(Kv_ +'I7RˈJ3,ghΐM(>uDH8s/ٔ&7%$g2|~ς-Y|1.h_D3ܝ/Ѣw_ƷsNi֩?urAK2R%vXr2SQ*nlsYXRV +R<SS"4VzkLѯ֟&4ƈoq{6%S3dK{h}R.e> \8UǪZGKIKF{Cv7 EљϨ0$L!8H>~2n#ZN >J蝤2M{mTfG;|pLͫ12[ZY^eVTH73a;1ErI\ e{ۋKՖ b A9H:;@)ȢpghE=J8'P]o *96_q7H *!ڟoz2NLGֳI\,h[vV԰ZeE'x6~R:{) +q{E/]W$0~^ݫ2d-eHA@ +΂""^ >C}{# V #~ e77mG"+|qSBx^ )܌rQc Dϔbb=N2oA "L$o~ *~0M/?>|X9ʚ0&9Ofm$c#=rD!zpT_*in`sIpF.ncm2?FH/iV|&MY3.!ȿ=%Zɲ}2Ó0ܝ ?q@96(_ x{3}7Av-lsT[* SASFu`v/_a{U+o FeD}EwN݁gU' u+ }گLk γ=28] L<! Ǔ7Ge-EQau4e{~0͓~Z~T*y|?;Qx[lYЎI>K/z$3ںB{`A/G9;Ŝ*XMz}D~QXۡx/߬~Yafz&lan '},;] AW@ z>,+,^KED7 h,U>4(ol6^(] 5|3u7o)m| /GA}_kKJ +]fi?|~M>G7 ?5x&G,Z.Ob^6;/˫%JgV:k>ޘ.0['t&1+~_s/~ɘ/rq^WKv}g?endstream +endobj +1237 0 obj<>/XObject<<>>>>/Annots 727 0 R>>endobj +1238 0 obj<>stream +xXrF}WtRS"x/˖.vLf]> !10`Q܇(KU=O=i2ᘒfÛh4D*h0G)dh?xqrƋċ$t=ڋ=>Ù)V1'9;>3(*ԶOr7糩OXW2xV6%+Z0'ijJ.tҨ +M#dNIW%"UN,;{!|sïeI5DAw*b%q֯]o"W")S”%aLX^&iJG,x/]Ëa8ks.gO_R6$Ӑ\8EDKC=T%!Oxȑ6(i* Kwۂ-3 , UsdxCl6ߛz!EmE܁EYUnE^e^eZg YhxJՖES)]*kǽk5H.^(iĐtqI3tZGH+,b@!&w'YZ!$2wJ>ЖWzն zP `b-+mY>z\X̾,k*\P!8BSr{'RL<I~Z6 nezDu~!G|Ul,'J uZ&JlTteׂFW1c1RO[@֊QBATGܦ8L!j Iuڌp4i0 z_?j{%'@֛33k̵S2(߹&i5O,oGXendstream +endobj +1239 0 obj<>/XObject<<>>>>/Annots 732 0 R>>endobj +1240 0 obj<>stream +xX]s|ׯTENQI_wWII*w,wӳ!ĩϾلoB)])ߜl>N4[kh2>>^]'W4/)Ngd?SC; _53 &3ZCX0Š[*)Qd.W\mtrPAFQ8&I 'nXքVӠۗ)R_F0 P`tpMNڨEI>??& FWUe!σrI;B‘1 sFkȤS"ȔecSw|D#=&GoX/郼82xnn0XAםmC"uHFv؝i*˸WTe*d "qOqFm[' +ZQ; +_Lktj񘳉s#EFHcc` ݔV ;İ3}܇Z+ ޑl뗇ҋ N8ؽfp&>;h'XdHeG63-#{.06ևwO6 nBBGf_X:&?zNgM- 8=X~ BW(.CQkļM`/OQZܣ@Ԏɞڡ" +'biCQh[ۢ8c"4SL^hCZU*ō 3c`jT0yV̓.>){OWF7p [Ӂ.I#gc&pG/;GKoG>/XObject<<>>>>>>endobj +1242 0 obj<>stream +xXio_Q"i] |Xۓf'E6l-}^U)v23!WO=d@1Q/Űߣ4rc6WHx:EB">Yd貦:%%V;R//V~϶7էLk] 5*UɦyW(>,?zʬ눯!py_•8ݰb[:͊rBLiUJmg U _RWV gwojj'~}"Lk\ĸ6Ҵ;~.+ܐu}_6$w +4$葔d¯RJ!וMM]DsSZ Vڭmm{a J[JR+SR¢{w %/At&I[RT]K=E?7q6&d1MU: Z&z\:&bUEtX[\N˨ >zPK#Z@t~]IT6sk_<ů>>) x|?mtiD"M|w3CRF3׶LR0ޗ61vgDG_a+V0#L^`Eo%@E}bf߽Lq&AȰT; ~T!`ڭ%V<ʄd-Iat#?q6<r0ds?mYXiPqfJпڸTCk QcB\+_ͭsROL}Jxhr AyPzG0% x*tJW Qo|PcLV2t' @VXz-O$GʐŊ¢J^`tnxf0Ѿ)ݔMtc{]<Ǜ;ԍ-vY +< @qy~5N$e{m1m0*A\gU+1ýO_0vPJ`{kkt7iylB͑W:}S?\TAȂ,Dqau0[8<`(QW](8lAorD E) ʭx, %ٵf,=n#A[BD[ޘfۯ:>{ydBfH|jė0Dpt+,a0Θh:0]f7y&X19R8Ա)w4y_,vP7" xǐ53(_5Er3Qp37e4+6El=\]B %%o/L$nibQ~U`I:b#}H +WE`oYfiT4\h5s$@Zrpy[a#|ߜ|%,'C F +e,O: h^}#_)0>P=;uXOhD]ҠxpQişO友DN*m'N2Y~ @C̭Xh08š/ѩ)G':kExoDD[;e +h2HjYMi a7~KpZ|flwݸL{&۬׶H/vM.]t:MƲg/.9`!xÛLMt?Lt6xGM6;ѿ a endstream +endobj +1243 0 obj<>/XObject<<>>>>>>endobj +1244 0 obj<>stream +xWo6V h +ت8]`ntY׺؆(hH+RU)uMlt|w٘F4˄lj:̦-)Ǎٌ5h2FW2FWg{9gi4{qlm2wXhz8{rB1-rd-Mi8GH/e1S&mQ՚6%)U Z|c[\ HYR#`[#{wU QeO J %+k,:q*,qFI +sLI4a;3VЭ54;QYm-{Y?6;TTX~֭!-P-mgN.  #V:\"{C%mD-#ZlRB>mZVfJr9Tu>SLᅭ}9R/ZWnV(@,EuWid|A\Ȝ^$\p!I24ۭKtbe*eʹ~r0XQ60n>wX̱ޯ 1e*qd\E1y-iyx_>yќrM.cW A•c+솾%8f2v|<\h x06u +\4Ϫebꭋ +[:J{F+{nd*.tv?l8'!h.QT8a=wl#^7/X`"q~N73/dn?{-ŝt1le@,,bUHǵ8ʽ/҂D4yBCj,B1&x(b$v  +ݦ\:y}eWҶRV5؈@.8KJH>xbD<}BS w1C!i.<օk+#|#A-+޺Zo so 3@XzTɾSiu}gZY7zBV ]b\#̺==hݩok9| rD0n,B٘xV93g4 QC{ec^c":&+~H>Z&Ba8JWӷɃw8 H]^,I}K3^~%ۯ,(&sLY4K8A[.i`%ut[-+Pu Q@ŮnO&x)Iww;sz]06vE% #>/XObject<<>>>>>>endobj +1246 0 obj<>stream +xXo8=8l7IY`qH.&][hDjIPjwq8E?$rf޼y^SQ<񊎏i“ t4;::yq{ tne*Mtlg/8wڟNq𗍶 r@ƒmBqWgd^ @W}GնM8M_N85 ګ:HْFw:n+G3otTѸ/ p6j=Z.ϸ4+Wj+2 +/bZ,VX,>jv-1,]K.dȏWդUѯDF?9ۺrKU}"Dlxj*:0Ha&m0֍2674&*#7 %nɭ$Y"BH=B -b0U׶aFoWu-7Gڮ/4t{/O4E(0gNx ֔\MD_ zq!)֏{+Yp؊zBkst^Y]3GDԠ+W,"Z0tP5PDKV@n{Pp -H {=D^:)T#O8_3%?8O.Uq?8tOP sk9|7׎i:!P#Q {oj巄38&w p6ܺC0 +n#?AY dvh3ٵl+JXZ(7 +;T=cD,o22ֶ›&":L X|Ln|2SgMM'K?z@2<ɄaDž'{5r=T+m4/=|1]<.=1 eJ*֦bêgY@i@6=-8I H-}U);aD3z)Oe:,"I|<ok`Zjc)p+N ysA;Gh=? +.BwLj"`UɾH-aנH7O`%` זB 2c(5Qq3T`[͊m^,}`$#-.4 )Ϭ*v6*1#x cm#GP:RvEîG(R9 jlYUNEx K/gv"Jw.Vl^e3>hT+X*^ޘ&kA@Yb5$9+dg [6abEŦ=f e"\FjmmuƎّ(IZ7 r@0L;ӎⷙ8^CFTBÕ bwzj&oBq a>ZkG 'ߘYolP n3&>$\ @v2<]<ЖQ( h邬':+(OUĖ>6fCSůK\fsUz7Y !b -^ ܒOe7{{h+k,/8:;+J/wϷIv1qKurO?7>^bѭlN߾}}p>>9׷~O׮hkܭ5]v~!GW+nAoa|[ȗKD4 #.A1˄ x3?8endstream +endobj +1247 0 obj<>/XObject<<>>>>>>endobj +1248 0 obj<>stream +xXao6_A؉ge4Ax(hXKJRv(ٲk6u${R RLGb<q~6b<ϫ)*:{??p%./|ENnbU"6+vbbqTC1G#>o[,p*@]N.D2UGC[9;nJ[pB$8='iZ;%T_ɋVnw"*䤋OjJ"C8d ~QP]ZYٹЄ;IVyir!#b8mQxS +'֋\U&vrCI*)CʋIRRJ%*Y8'QBBb]V*7ۆ2_Br{sŻ y͎djE zSW^|jLBDp,Qqttb  f]EQRD__?R:36hOmRIHn'a1x̬. +sٵ3N?}qbfh-a!)%ze'=RflbKe# [>@8Dĝ?y{ +hq닟1C5MP`t-Y4! `2J>!3|)AM`}~1 r! <[h `QVƌ餣FWALbM*aP)kxErDB~"4aOsd[ 52'cȄ;øQnN'c`(KH[ gCP:IhJvpKXUJA¯{`dle)Ňq$nB+Яn^ܫhHS+a(kk(5'2 (u %sAC^2%N,K WX45:e39RBs64F7c֟Mˡֳ)\t ~ƨ_ iHMC>phi&@ +TT{P<6 +T`$/ȃX̡2F%ZZ^f/&-b!) +mKPG#Ht_>֙>T +PeD~өVfV[^ j +[8\ ǦqꑸKM% jTKo{q Ot}ޮ.bUE`Ё5ޱ6U0 х輦_W ,x>U|C6 +A)͜i/(1_`\X{N a\"F1$ͬ!% +>zYeT6׎#hʲN:_f(lG?;M ۖ]q݆܄RW2:(wJD +\jm 9DsÉ *rfYx:Eh&W . + .-ǼHu_$fLp$\@htWNx/E'o9GH} “`bE~kx>8vkj<~OS/DNz$h +lfxzwezK/jWWNͽp/ξ]wz{udoa^7o(kڻYp V%]^Fw…Y-, L-1,b+8" .jM&e2): x6zKWW[n[؃Ȓ +`"nE>su?͒$@f ~ju@)rW]ţg7[(ѽpSJXLh2]ؿQ]&FcZP~t8AJ+\]nKhO" f~J^M%ng"endstream +endobj +1249 0 obj<>/XObject<<>>>>>>endobj +1250 0 obj<>stream +x}Wko8_0pw-+WCڴ@%.HU,))h (ѐ;وNgGh@0x>#6x4&?{0LˣOci( 4OtN˄i0et4lF}RS$Kju)4U#e)1{(HlT xv44!=J"oQpؕ"M@R,<&SNIc xlF=EIY[ⴰt[K8Tݚ=)hYP& eBZ>俨z0Fc8;jŠl-(Q:TSDFƔ:Aa:hʋL&ǝUկL?:/* w{Eˠ%ķ)7 +B39A4dsF.mQ.܍j5ז8 +z_u搠QPl4#Qthx%0oty~_԰,/u"Ge[)O9|AsߊA mAKĻ@ 0y=VYحq,qm s)m.v좲`έi_S;f v+f 4.m/E͸zA/rl|=Z[c#-Bh r_vETy0/*ONrys}qxpX|浒Ω\L I*+|Y=ɧY4ƭV1w7̺Txs^ x#&(/x~CAti.E_ԟ x!֗+m]Q~a={dtȝm{8;%ocRendstream +endobj +1251 0 obj<>/XObject<<>>>>>>endobj +1252 0 obj<>stream +xW]oF|X#Ɏ桀c'N-Fȣy cV_; bvwvfvhAs-tI+Jʣw'XPr- Zެ(NisI+KeoQEђh\Li:73tF.V(IT)0U%E\I6G9'Nڈ겜uiΖٱ6~Oocb&#.N(K] +UхE!O> dm%Y<&+ו$[De*RٔZeT"r(5U* #S>~Da6JxJMLkiqcu}x.kQ)٭EW|#""WUq/3 5 o^q8\$R1A vfJ*i%RN$_'7"/9+J nׯt/L{JB}?YUBGAFg4k\%ڠg*w@~qbMZ#$k,x=%زB +(ʌO~d[Zk^bjr )蔵]$6}=@F9% +O` 2cTP*Y W#6pO|RF,=LSyd/0>UE2D4#%LZֳ) 9(BTlBm Csg5"E|0Ƌձ K˃a OW)Zd0_*2ޥA@z1an=9 i\Y<@ 2<5.}9Q̾ƽnbA.n6W77f #3L^=v/6xٰlCףYr!J5ߧ)Z?:;JD!?8S gBOԣŏКNn`-v 2PP0o3LQ~m"vM& ͝x'7w+Io?V[((NCK,l>8gO9s Qz̑OwW]aǃ?12@=qХJ fF4}ϖ LhxwQyبԩ,B>فiTjeEvJzbRY޶(i3 {X) +h!W<1jlv|TwxIgj0h5>~Θ">DE\l!7Y7h~vLEZ; bsME/g~Ƅ +;< C x~aZ99=NOtr/:7endstream +endobj +1253 0 obj<>/XObject<<>>>>>>endobj +1254 0 obj<>stream +xmT]O0|ط Ҥ6!p9xqMk`;oG;5{wggvAB1~ MGt1B (d4Nxo< ǔ$UHSJBxSVIݐβ:.IZj(Flȭj5K—p!B5ؾF $$CR\cɈeW2 +P٩6@ȦK$ɪnJQ]e&-n=ev>}竊hJ]>a P@]JZtuш([CJ=+Cܪ)^L,~$ВYq(05ֲa8ų[Ecu"y/ڼZ{F3$ӇY۰dB1T#qDV+eEgkgt]U=ĄD0M@ .@f%Wrp?Y4fRod]Nz\ѓJ`s; C'O7$=8蒭4"oE>x5 mxή¡@ LP +'ra>lVGM%TZJZgatws$*%ii7AvA Χ?Hno]{5-9=kOz+8NR\a(N]61l©yendstream +endobj +1255 0 obj<>/XObject<<>>>>/Annots 735 0 R>>endobj +1256 0 obj<>stream +xW]oJ}ϯ"%nڤH^xzI^ 7^wnȿ~$ +Q;gΜ>vǟM4:>~3M1MI +ϒixi| ic8m̷4Bf*e_3FYUK!Eʕ?< Ns>|%muC)BQe#ke)]KU.TI᳨]TUE.i5\Uc`I^dP2iS2.Oߓru1+2{5;Yc?ЗZ!!>Ij&+]F6 yyL 7lu/hRDzg_7e!Uh(ꍦ2ǥvgrq*`Ô%U= [WG ͂;5ozrrC@)U^ǻjq,#vLi6#! +T;% cfj4!VhBvQWSYk}[OPv`6bKʫDmAFStDSV8W+ēP9LB^"VBVpVik6Fx'Kڣ%@?TO>hɉ]M*ѫP4 aK*bNTD<$<R;(kE?yGAE1n@yڦp#X2%λW;mz6s{ȹV"3΍;zzӧ d<B1_h;OcXb{H${QNđߋN'9x4ᙀ)m)W~w⩔|Ovͼ-1#X3RAcFaCև(3=Ɇn9ZR㞀g:E Fjs- B|]|owkU8]puQٌ\)'7Y_}>#_}h (w /f@ 8/P EkL, +9ޕ.ڤ)]`n /ms5Лk> .,Hc'VBg t.ʭ-r^ѕ]ZUJzY_{QR}0g}"B֖ ((vvz3oӋd2:_&09~a {4Iendstream +endobj +1257 0 obj<>/XObject<<>>>>>>endobj +1258 0 obj<>stream +xWMo8W @؎c;hva/r%:V#HuGJ$Ţj[|yf` }d(cI˃~җi?h:!*-`tz^zp|2z~|~ptu*̗p2C&p<}n%ډow^Y&;<+Un$W(t;,d0{ ,=l[&p˯tc`v ?(/[e`XIaSUJTyJ9"y4D} )>%K[Iȵ9Ud×_fbTFWp*Yv:s`e SeY\ip%2bFN7Uw/_:83t)};r彰./$]YmUI"0Q%r,%KL`9X7NJg,*aXoF䰔ݾ#hYD= LHhM]|ǚ"qJyZ? /ɋPҕ2wZz!ך tftÆP=/tnV7+y`%k. +/_*v\S`p/u +coTQ잴l15x4"Xw<%g\rA3^F$PGk "1={& ]OM-R8i@%h`[xUI:n,,oLP<dJXEDsay +srBd@s8~D*TrY9%X!򷦢fA+'{Q=P@kDdG)VX<=:!Z}}xSE'ۦM(5S,9n<:RGZQ(y~80Zfח- .365X$iR[#tݜU)yj+>/XObject<<>>>>>>endobj +1260 0 obj<>stream +xTMoFW ЃbDJC@}hz(rXCqr]Yտ%J.Yf޼q)3ZTvER<ϒ55/%9 dOcUQ$!JfӂiSSr"6o;g=%z:[<S^VSP|`cڝ5GӊTjχlIxagڭj=A[C}MJk mwdM{; Q72DA&}<'v#,m ,Bnxǎ &sƢ[rE#uMCцS?~Au3J L.ho'>;^TR stܑ> oMpmkJWW o,ouhdB#{غw/Zs^ND׳:'xuYxh0I%݉I6և w*e|D~a=XZWR0R)S=c0INe>)NO̡HցT7^{tD;o8nקKDxJm)>qf=jK'cig ~ϑ +mxS;BQ)S5b[)fPfrcM?ÿT-{V)?G+졭&ĊUrmvၤ-eʴ=|DD=ĥyӈ#_@ /)֨QT6וh?* +v:%<㤏FhG>V(F_p,~SUE|d>i=ZF+nyLoV;,+yU듗Gzi83숰'Qb)ktw~%'m!O67]ct5Bb |>Zt4PBqho}[dv);bv:T!Uo318nL܋m K*Eq LHV^U䤜tck]`nG*)kGzܕ*1٦ҪYok*YbNȜ-R[!#}jwpYVQ/!(A`{Y; xGffLWl;3oy쑯My p[Gv}NjA}.ǥPPAwnwhBƙ,9y}Pi9f .`˅CZ"TtuaE<@u$'JSN+0/{_MF]D +jۊ%x;YL1 BJR&mPK<`rMtctK3n)~XŰ*~`(:PFpo|hEL6xss"fJǒ#e_MG]jqgF.W硠\(™&dF^ r,9 /FU(nH +eϓƠʴ6dăeX?R&xLo3oZj$SQ& YRLh<ئ2ZB[Hs6o1f1R)jY F!p'T!nc>–'!.WEEyL6W^*aq8NA2XN?vZ3-c+xMQxmʺ:^[ht3.jiuLjg\ll<$tN_oA']Y:|oPƔa$ox +Em;<4X 61 7:= )c2f4ol.)7x@6gtM7ȚHzED7DeJ>u8x-AXϐU[}XcAT Rѽ>/XObject<<>>>>/Annots 757 0 R>>endobj +1264 0 obj<>stream +xX]s}ϯ臩 + +gi0ͽI&7*^-@Zr=-`TmRӭ}ѣ.^=Q^t.>^\0p4BJߝ7UBs^O1xᨋma xd `tx:I)  B^q*L&@WJI0z77@np#Ś +wJҰǘOu ףMƴZTfVXjKpeJ8CrGV5d5[HcHtiiVo܅VSvNb5Zʴ*A=̦d<ׅpr-BƬ_eN*A bU%e,a)HQSJ 5m %UȂD2E\BB$2Ce +Ȱidջ*ddu'~_.P`_qa6UAu:0f+pn&ct2T2[8uX|cz>R2&/3 R17,JZ^5Be<<=\jZv qQgyz'څ980b6egE&6Wr6 Hc~2Woh>>ckXeU+J]+t,9GÀg+ ȌbG|k2sژ|FQPg&Zex"DrtF\$D./M#wm M43qd"Cߜ;agѴ>\ep)AUAJ-8d[Q}k=.]l+3D +fSB=apt 'l=|nZvuWwh'#t㽟y U90RAF}zNaQ(e)d2 +&o]y,Ƿwù6z ZB|A֓s0kS!Aj`W#sY(Feܿwq||E\Yd]W@Q# ـn3vsץ^0 a0_bs߲ =Hi.*/i4_.^_5BlN3p[^e7}[nE ci%bc~*?VjL]o[ q7*T;@>PShNbg[0` 2gM>>rtΐ˔EA;?yyz?{rw;j\>R׶U ߔі90S 2G^|f#7[`@ꪪ3S.ټ&3\OfǢmp ` O *Y(aۊHĻVX0č;÷*]" X%>d \m5Z}=@hvxBO!tP־>|44f.Oir>eYy0Vyˊ%W0&C@-l&Up}xDѹqqr"Qj}F(̇s~WЛ;wYW( u`5 *m!WUo"#Jes+\H@~Lu|~)|p@xW=e1g=`j³6e"]W$m$fsq6ԙnO.p.JyXvyd hTY+:9-8BE6WADyܙf}6FUc/vLJ1L|" xs^4 k3iD 9ĘmCZs (12 +qnRMN4h}>}mJυɃfS%l[.fa0ǻ?/.w ,Yendstream +endobj +1265 0 obj<>/XObject<<>>>>>>endobj +1266 0 obj<>stream +xVoF~_1RBcrTܵq,U KIH׋& htNqv1K:~[Lh:[S-JI5X|uGO܇Lh\kyX](XjgˀVI}wBVʷ"H^[su\M'/YbwYXF|xҤ8I* +]Zl>u[7[Ȓȩ@FeyCU Łu Zo$SIVIE\So7s[>BNRk{ٜ޺S26kd$MD1nL©|oK'IZ& $hx >dVܐk֖*4|N;J$K*tN˯il\U*:*"epmrpAo2|P׫D"gv>H' =BFgL2N|z@l7lH*,mAf" \?^mw MCKꤸ(N4$dbԢ(k$J=͵̤30_SiS4ȥL`YgOOwWyL}R0 tE{XS8,P秗+ Q(,$W2|-l/hakRKiR݆m%41TbngU|*&f,}[hĿx%N zhMz'Kmz? +^6BǕS̱.4Oc,^W:'v[ᨽ2ZLjw)9]:gcQfw!{⏋_9endstream +endobj +1267 0 obj<>/XObject<<>>>>/Annots 772 0 R>>endobj +1268 0 obj<>stream +xWoH~_1 + @ ^ڞ\vb/x}v)}3A*wg曙of^ÿO>  +='ǗQ0-IHhvqR0G{ܨ9Y䪽 (hJ dqƷ^fhɘq6{a 8 Rn0,rh4{\qldqFl}d #ZK?E^h8jZ&:#0~u9n~ѽ|4#G‚vK8V;#oGE?Q[͎ϑÁR_}m㔢j\Zިd'ʌG Ng2#vix#B&]zIW⚶*Lq6IBiALmGN#U7ȩmhأ&bB5c]o>>Q[)4E`r=0|o8×[ooxjQpP%]_n/NR%<&s:,l ؅JR4,GX9k}U#r426R85>9pqӴ:Ja(N$ :BrWq%)7e7:eFqgC4X{x@m`A5>+T#`R,= f69=2+K|#&/Fγǧ{_q}Ů}v\[=Xd]ˣp?$"q\WMOnTD͋V4hR/;-2LfLczP)ޘ.Euwpan+tr& p3*gBu0C1muZm{T~`H- :yC{Sښ+ocan8^cGnL"lJʐs"׮"<Pt2cͿ +3w$~'8G(P! 柣A(̗ +e&!'nE.S8vCL2D鳑v]@2D˴S5/“ybpb/BथL4}X\ 7uғ5\ބשċe;Hg%0j}GCo݇O_ +(?endstream +endobj +1269 0 obj<>/XObject<<>>>>/Annots 775 0 R>>endobj +1270 0 obj<>stream +xXrF}Wt)/ &^\E7eɔZc3̀4>gMR,$ݧnՀtH U?d:I4Mzo+) 8z`OnjI2~2oqy՘Zi22 L;IEAk[=K-?8{1YfL+ȉr-T;zi2;[ |!UB{#oJ)˵tJMriqh'Hjot4c94p)+So챎dR*ʣKvX`( +fd,iz'N ),yœ\) %&E֒1g\~PH'gc[SyʤU 6J7.W(Xi@:scKQvI/T㲍 l8.yHVЖ7{S `Sy0a2=;{re?s\9Wnr]dbGudEU4A~YbhW~ՉLyi-5 kPJ +r0/i-ד(zϢNjF xC'YaF4^X|XDbRgbcO]!R ~ !^ !pTћ:D1h xoS_4&^!fA;kIMy ȸbbׄu"u[f6BGr^;߫ *v.T L155q̨{jʲ + Ydk%O Ŋo9c#0õ3&4r1:6 G5%mpݛz 'ۄ\ߺGeF9dmˋ!Վ+. ZNZz<$-&7?P %*?L_HS .aހ H\#;'l l)Lr=ϯ&k]^615N]!Yz 9)фnM 17.Qx#zuࣛ3r'S%АOce.׋rxr#ZoZ`(NnMkxvw*OpN`Qw,Lz#͓H 2} +hC)'^ -N篞ͲsB4L+D3sV΋C{R_O[?كp~![[&s)7HW%hG+IS?J@9S>/XObject<<>>>>/Annots 778 0 R>>endobj +1272 0 obj<>stream +xX[oH~ϯ8T-k)Htv`xX_B;36v.(xf;߹Nvwա`ub[6l?>;ե9g15k[.y]\Xv!H,=]tڞ嘽Vlwdvu>MBmM/%j +QZb%sR/gd>moi%lY2J(JJwA볩$ldA"_-I>MXv֩Z4l-hL[QRs}]d2%#c9zFf쩷.G<e&))J `QRD楲H!㓜rqZSh6}۱<tv|:[7[=#;|+%Q`<VBE,SqK}uUx=j^'J;KK,TJ| N*ZAPzNZ-'(!"I$^{foufKU!S]ǁ56rߨa*8i|x)9-ӭGSs]+yt9qʏo&PEFq,׵?`CEY(E$H ",kIhQB+s'JrTSA6N4ih_NHߧX_ZŕZ#`Uv-Gͪ$r#Y{FUdr2II%ą6KНX"-A>|IV]pH +>=ZBGW_&/2QA2qՕh(`h0id U*Qo9Ԇ55G9*kt TdEjJ"M#-ǢcQE]Meg?cƶƊ#<G-|1'Z-7 +tj2~KKP)ft,1;Eq]Nr|\W77VX6"[{W,CfDyVBոXc/tBw?J0gt:1LiIneGu @s۪Nn`u -ɧ($iZ̙*Rq\g_tq~l')\@Wj#>LJr 2Y(,aHj`qʩaڛI)U$ױ0ݚ +ПuܠbF VͰP32CʘL0MZX:R7Qڶ9xa0<6AFח4FA4Uy7wՕ#Auk;^ G/NݺMxnOnw丶SvVnvs1{>.Vx7׎Š"d6~q&h3ڒAyQ~^.S%PO(xPMD䗱Xd}W^ք( vv` ERED2o|%QPۙ'h;Cn:|l,NCt[[Vf n.1Us-:Q9}_HӷE~s6ON~;I:endstream +endobj +1273 0 obj<>/XObject<<>>>>/Annots 781 0 R>>endobj +1274 0 obj<>stream +xT[o0~8CZS;vn&@b 7qtIG ;YDVF"YwwI9 Nӡ3|^x.'x6&8yDG0*]\FXY#^i`CفhhFKg./,Em>^RՅk\HDkkZ_rr P\K=~,ߋUY^(0Zh-mqyKyC}}DYI"vGLnU)r*`{d0#35:;djUvGQz6(gyeP6αU)remv솏s7d^7823U2z@Lۙ-h$"/@$\i^e`yon>7`]:8VA4oSad:ǔ3ǵZn +L+ڕ: ;_/{t7>/XObject<<>>>>>>endobj +1276 0 obj<>stream +xWMoFW | ȴQn)(R܆ewI}3K+rg{o].iqE׷GdN7w-]zM|q9_$w/VG?՜V]*'3oǺUz ƮX +Noyr<>=˗WRych 4L跠NE?.<*. +u'<<$9MjxL1 ծՈfhvR&6dI2aR=٫,6n1Q!8# ]w(tMV+4f2D_#3qFusBJm& hpW>Zy ؔyjW"F \ + M?!_`O8O,8(vgvhtռD(/#=4:3@pM'Υ -WϲDۘ7d^qeJ.֨βO@F;1X",Lr[eʌNPT- :X8H7&ӈK?Ѷ#9m }8q}g Щ*vUg83T~ "mՀrZL8t58p/q&׫y|&YףBNendstream +endobj +1277 0 obj<>/XObject<<>>>>>>endobj +1278 0 obj<>stream +xWnF}W I%YRq][m^+r)mLrR| IY(/;3gΜ}? +hM4P :Ϧˋ/f3? +7#?90姟4d6y$4;wkkd75`\$#O5 8\`!΂U9)~fs <-:zzG;UĶ{ 'ݖyj] +ڀӝVA Nf`KAMbtx,. +7B,GѲ (TLTKuX@Iauv + HՊՙ^0,,2XBc~=jo8‚uhbY$.Әsu$t) ^0)ڰF/Saa#W.ᎫֿTo8B|6& h`yyTRQ?EG%ZZڍ^ П%#5c!/"ܸ2m!@V<1HgKqZB"U'dWuUrBkEbNՐp@DڅYk0=fډ%X̠ıiD8ڇB_oa{ ΰ㇮ҝ>Jqo=I억lGvJ0ޠ"VL{g&u4$F;~} +7S(QP,|:X}Ө6\컎Ux(<󿌾w9 +w?#Ҹ2-|M5rxQ/8E[XfhMNh~ ,t-ìE"F}K7+XJ1˞t:TqˮÝg)#uww6 J*Vb a~WfýOr^AWO.6*iլJ+& +" +$[W}as]x(Yi DQAyVnȦ'LU3 Uこ3Q'H–'Xn W{u R>/XObject<<>>>>>>endobj +1280 0 obj<>stream +x}X]O8}W7@j3-mV+QV] + i&.Ƭe5?~ϵ4 eؾ{R:_J ǔN锶/'4IJ䌌%ٰYLӰ2{En.aIi2h i)=~ =dG$բOۧ?~P?1?ԇ뭅wRa>k6훝-,: ė˭@y?xO/靥ѷ/cjDiʩ\BVY'Kh[z|:VjlЇ}3:.`b?q'hU. ʭQN8dl(ױ'fҫMcȡc!3Q!â"K?> {'|]!ۀQ{ +dtU/ȑG!ڲZ*(#L&눧q^ghuAn(IaAY!aJBibv)O/W+B(k.Pڃ㬖f \EӋV~#[32T=+i7]arWEF<SNJV mVZ礖,+82V\g`N)/} @[6 <~PMYr=s7t='$ۯ<=13Ke dq +c:ʲcWJ)/N+K A=M"!UMㄯ| *ʷƣ]db Zӻ aQQ jD=f ; x&Vf+K *OO@1<}SIy=q#Ѡ/"qku>[lo2 QEG.AI3faHpn0ٺ)\+کH#騇T'³!A,{3u [,oesEe+N^D }E3}|6ۼnieB9%kBr=\VAQĬؕC «AxCq|Yxh:Qm3otw_4f+W` קi|{MAb:dCߠίgtkx%l~}?9O>LcdL~ȏ燃VAVendstream +endobj +1281 0 obj<>/XObject<<>>>>>>endobj +1282 0 obj<>stream +xWˎ8w #HtiF4I Iq|kAG5jf5q8ع\[/ !E1%Ǟf/>M؛x6E= I; )#+D5 Yy6=)hx6uj}Z'}󪒬*KV@vRSI2R Û(H^d|Wuˌ:اZI;[苑tMi/=FA䅠?hIrݣO1QHpϧ%$ 58v쯝B*εg'h'=eF˅-\aHo֟fVmue2\#n#lAyz@vdfښ V~~ygQK)ڬ7P,nia],β0to!GqJ8.|QZ5NGճWNgjOb ]tg϶ȴN bg.(#IPa p*q:Zc/uBU{c5G-dH^y4Ir*dJ;p5::s1 MRYs?3(/TAF;1(%8[4e,a IKН9Ez`&5Ա奝|1b;&[M#b}hF# si5>/XObject<<>>>>>>endobj +1284 0 obj<>stream +xW]oF|X%NaҒ,rCZMQȣx SyG(t&13hL#bBsJʣQX \s5e8;pvijpvrfutv7KZe4lU*&FJN[??|)ppy+oWFM.NukGHʼ$(+[E񹭍W<*ݔc>jÏ&UI^lh[ԖTT*Ǿֵ}v +b, +JlMhl4)RNƑmSA;R^3p$|FbO4@@m8d9LIЙ- +lM=G --l TUy `*$9.(j)uCQSrl h.-CgfmS^|[@Ćqgǵ" +xDn!Q%i8Ae=W֥}|j[U`dKܓq|@]4gY~Hh0nuF+v 2u.۽ mSص*x#ɷX͂,aj[[{vZ%A~jd-Z?esD[oU f:SM!<$WmU)Nl[_o{",Z5\hj*V5#_ +͝ϕŭC0o( +ЛPVz~h. ؟| _gidF>?3]#g<0Yj  s*0|\nѥn--?:$zQFnglF׌@Z(fȍ`OUhD\ BImI-HS@K/-h_O_p+2PydWma@fEyԶk i Jfy +Nz2`ӵ&ABC."ov[[oI}tMbN+AгDnm'PeozC^Wtպz "sn`vz9n j,r +x-΄|ۗ2uD#|`tMx>(Gc6~u?endstream +endobj +1285 0 obj<>/XObject<<>>>>>>endobj +1286 0 obj<>stream +xWnF}W R'i%m 1<4}XK V=KR"-S#4d̙3'g@!'O|/s=zF4g4W/Bvvo'4P |Fa)N7dy~%iCwO$Hkx~>97Ά` DPjItLp>*Vr> oo- +<`>KCzx ꆞoBJoEiPf>|!j"*R$aTN`)"$%%%nzど,km +@"ՊaU;Uq'Me4B-)@l+6tl$0!T)28B\(t 5X,:x`m͍6_ENb#_4ƫCHev`'ttYk<fu>+q=L9***_XW FcE;Ԯ*pF 8 FM( Bv|BKȵiVyNt/lMpySn:^قeaB +z2i.̶B~s2iz$b%uP:[{_y2z.a$xc!=C$Bst$EJFuRq{%^tMxbQ5+Y]Q:V[V+[%uotDcj|Tñmk>G|^*Pf:~5fTe*{.H{Xvb&vav%5x`$Kjʥ" 5bHXy9ZeN5949 *6Mv;ࠝ^'7%璀S~YO7/3^ CZ5'{?4āy7ãZ(22ƀO[?7jG+ob Y_Hb_ҧ A0 L9~Cw"3g偃FJu>/XObject<<>>>>>>endobj +1288 0 obj<>stream +xWMSF+:*hm_JRr6S{9HG3뙑, S-GCwHSA0R=f@4i<;v gێ`MsgcbyzL!-Sc:2) h,Ws +i-*QH|%jA HĆ&AU0U@׺*bQkOG: ETUGd.c𧍨L&Q”Tr*nZ&U"YZa0^`Ru&+w&h9ћxE%-x3tҸhlwIRҺ2ɴr=TO*@)`؂Jߩ5R/|U$`k^`]DAʔ,p=a0Gt6s|:UDq_TWkWoa- ,`3p~!`n.pb?/``r +ty{~sr6 *W_e-;kV&L=U1|RĘ[oYT3d-[Jd*'ն|JS 18t6e qn)?}oa%{tՈ B"$)^(K[Sƍ5V{Y?Mĝ̯ϏeV"!eAL//ԽF֎=8*( 7-%g-eg!,OM@5JUQh/pljN{pW6owmGw|ظ` AKDt]ק+b.b7rwroɛcU$BGSU9xp۽=vƀo#|] mKܚd</$.x3\F緋sZ⪷+=X^}9(<xCh4Lu݅+t7by}囹`'/|P8Po;Fՙ3}V5BW3bSzgx!To@Bc't U˚uR~3?Y -QOn PLj 9Cf/TU)jxׯ n% -|bu.:t~@z -X*ܸDAeOD/@h8[R&u Eq]UV'{I3^6_0ū؀|XP4*iϩ۬O4j?̾=G9C-f= p93%/Hxghzd;V?Γb$k]Q-j!|>& -7>WIE8l7xiHrHGvXyH*ovx;p 1n_7b+\o3o?{K7F$Mvx9 ;|9Uhgq}nendstream -endobj -1056 0 obj<>/XObject<<>>>>/Annots 460 0 R>>endobj -1057 0 obj<>stream -xWSFb/qfldž0-I (NdɾD): }IVd{vm!-&4Sf' \OWiJ<`܃d)x pw`B)\`~8^cMN4[+//1S JF-jؤ(㒜M]@:JWLz`jcJ+RE %$#]ՖL{{9*,J Hq䡢83G#>^,tt/)r3y4eqI0 N:}4| #Puʈz۫w_=u!le/ aiɲh:V: RKL -4AS1[J] ~z/\}p{j( 4t-!4+L-q$mAv2]/,u0v eαYU JTT--p>IC=nrc3#)MC1{FŐ? kc r O;Zol빓,#KԉwAkMwdIs;%عTe%=%X(ḭp̻J̬ڔttM}׏|0ԫSwaʗJ4 4`y<ٍ*/A nY*ʱ.+XTlϯr4bX*yMY(.T5 IA妀)_hR3Kk T+e -&>J*tT#C!ٲZ=Ƒ zI J"ʹ'cmBh!F|X]HLk Dn`mر6N?tlqrP(4#UF 0|&dCFs "͡|񆩁g0؍hmqiV4~{2Ydn3HnQjɗ>&e7KW$[2KΖ7KT -=X]DB^ux,Vw3*uc~#c[bc)+^DD?y|#(['S=9V O_mpq| ؆7]D]endstream -endobj -1058 0 obj<>/XObject<<>>>>>>endobj -1059 0 obj<>stream -xVn6+kْM7MK.D[l$R$}CJl X8y1Z,).ќutI{!Y?]S2X՚9g7 -"<4)}/UܼXҽҋr9M / ~īptF ]DqDy&8$hkT.S#Bғ<ҾՙSF*B+[Y2đ:CR])=@.+@!@/BX’S:8B3Ӏ̺Y|9ģMiǨ'by*JS$_EPltD%mMrn4[HVn_i{y3yVќL'8$sZ+s/x";Lcd^h@y& -|߁duf$@1ʬm;s3yTC/+eUJkhWFd?ACNHwm8IOEiYͳlh3@~ H5,{QY.2^U@]okM>/XObject<<>>>>>>endobj -1061 0 obj<>stream -xW]s8}ﯸf$e -]fY.ٗ(R{d;ftι^Ji3^PV]M)Y2jJ*‹r,.Hg/ޯ&甦.dZ:'8Ni -Q^#Kr^&-|meBNRep*R>ɒDY`#ej2y(KI7WSHl>~ V:~7qIږfWG|KB紕ZJ(,Գ̩@"BzեK[ !)ړ)p>ݷQpR;ߚDn%pm/̫' ~6(Ѳo9#d#j'_8ԧcbtNQr + ӭj8|=clvR#!8* AhyC LZT.)C6d$UPBYa!TE%_qvL_$|B7$&CRhoMYq *p?AQqPKV)]Bk$; 5HM8̩F옑wu 7/=4't^N'N8`\r Wq%xH'_W|\A*U*g^(\,sNy+P(m:6(\Ӎ5"@4V?(!RGa9w'ZQQk c~䜭bwr/[Ԧk_'w4r7ׯEB_qgDp\U(,poR>W4NMYmHЬ#@P`'|+e>>v5beBuh <k{@΁H8"*jY m.`;<òsݰ,3h#v -5#G)+ϭ1\1KN\FjOa - !Uh~aQ.HLiIRl8&o(0NcLA7mGRFOx蔵eG0Rm -wlϸ;̪pBARXmd7kxLVV!b$F^v{Ha.ũGK e{y pXBoE -%O1fA NkzK52 y]7iL+q i(lXJ@*b".6*:LcTۡ*Zz -$X'>b82E@_"69]'6^aaʃ q,y[gc쇮b]i{6Mͯ2,-o7Jw&+Ơ=VեWm)*,tYPSôfBX,x%cm%: 𿢶8/U0w~)STA&tt9 Ueaq' P˚hE -'Qso^G.Hi^GV |A/[ާBw&y -So ,g3g].VQg~Jendstream -endobj -1062 0 obj<>/XObject<<>>>>>>endobj -1063 0 obj<>stream -xWS7_|(L?)LHC4f:l+I[dk6aݷoJ{w@CPV} !Vlb׻k̰ r~&>5?Z}R/=S -*d`uOGtC{-7 ,yp$Ijot43cs_"$a囝^CrT䢢S6Bfϭڗ0λŜ+nW;HstC17/GH R9&uv/}X)^m"jgAvgG*kL}Xol+nE'/.i0mt4 ,!;u@!"'B]PZ,x#<&Q!*џ"Ss0 K)ԐÓ1.rJ<:5')J<s@!qhC]ݦ0վ -8jXY7ǹLU Jdt%n2FaWhD9 jKU$>*]?XdB>{y)mBCS4)%UM:5+7dƳB!d}"9bZH6m^(ml|G_%fZГ ry码KCsjNY3n_V(Ữ `Cr@Tvt3&R<%E*Je+Zk^'uUؿ?@2 r&ل^7+) -nZ)Gd0N i%,`wuN3`@rc"ܼд(Iĉ6*jXRqb^m3N0 -6~0%=g2' ÛQLJrX} =p߹GJJaӫd {ip8˨;ƣqTHlr؏AV^i<7l&rڭYYFLM4twPބ+8RӓojzDA8@pbA>n: R'9c}Wp<*EdasSm RHP ""css&0!4pcuݘ,TQm8-`谋ܔI+6wY J4%g -A"'UJ *!a2yKdYι |\h/Z>׋>`+f;;WAg EܒO9h:hy`K3d8͙8&z;C3cD)4X ۴>6>`IWUr 8[<)@( :^߶ f( j5>6 hE: Mg|o_p/5.h5cƱ`kyJGvM#6AjiUFFfe|aQ1ڑu*E>|};2_cq  _J`R5wpkوoQtkWL_8i"М GC\[r֎O'gҰϏO >"]endstream -endobj -1064 0 obj<>/XObject<<>>>>>>endobj -1065 0 obj<>stream -xX]s۶}ӉdrmN;qZW-e҇@$$"& %߳ P6ٳ ?t~B3ʪpD's|='4-dx~5?84_h F4ώxh;FZ;ѝ4/ʒ*]-d}~aRΖ%[;;J5ʹ[o3g76S%*eCikb۲)g9 ۖ@FSm - -ϨRYaj86즦zRDǤv4/'Wt8L'5c𘂥ʨ`liSZ3E@S+SNhcP\#m<9!;.OG>(WA-pS:𭼷Q Ƅ4@ ĩix:8vXSVV*g&8( }=ZEx30;«`)8,Xzn ~O P? -pQt{C2U#H*CNw ņ'%za׀9sgR'd8]y@73r>XrmѳtK}"x,[ϦEѾ$B"#oV^ t%l#@0k ti>7)C'țg*^P}((6WS/n쀿=9CP}a,۽TtSH@^D4IǻߋƬxz -9T@e[ ~TyxM*4JNYq_׻ᚆʦ {m) tl#"6O6G<~{y]Rڷ܃[8\lyV(}꒶\̰N,4H밈w"r)_:y)@1jknRM{Gτ cL#BE -3(ڲl}Pq$J\I8ҤryU=P.a=Tz`9b] ?(g"b7H=:6pKx28q}BnI7"ԏ -5U| &c r*bl@I3G {(y)0-lm@4E6Ʀjߘx3X/1ޯä*8>oS.&tvs"~n 5\#Ttн08?._8}2f#F{endstream -endobj -1066 0 obj<>/XObject<<>>>>>>endobj -1067 0 obj<>stream -xXmo6_1pdk;A^E'q $\ޢhDRqm[69/<( it1sʃ (Y%'A0PO>%kI:OTkg4k' \;J׈Ra2Q˜9}S:7G2F -/Mm|Io,Idp:Jۧ'O4$7c8"s~4!bp2kOiV:'Rdk%iQJuFPօ?b5CBKcK&׹7!pU - (Q==:s5Je-Q.pT[Vң,DëKzP5,kUl8_]*DY!}F@n<܎n -D=i)y<}DЮ3ӎ4W!f_wdhwd{`affZZ&~} (EHnɭMSIϲh,Ջʡ Rh3V" jbV/MUQ[gBA,`~?;]NVzŃ B -h3W!t|-SG3؏VRKuy2RZz(`&B-ל /kB.$`K?E ]cDF=ݏg Xݣkp*ʵqu<,mhVf6Pc|vo>J6'n>|)7%?8:r;8lÏ.\O16O&OqH&?{6MZhO*tiь\SUXFtք޶2B?qQaEA{bh7FeK{ *C}BK,6nrٙhm~^Opa=4U@J8g2.iG hY DEZ;r%e|bI BEex! aR!e[P͙oo0$cR5\- @9}fe?~i!Gx[ -DQc\Sl776kؿ%[QS3e e}"B)¹=ݼ-[I\{φ\0Sv]˗܋xi[ZY~ݜ,댑:ܘ8DAΘܢPvR ܒy[,<=bN%WlF"aGyb| W<Zlj`^WVy\YhR|g"<]shU(T՝װqN -/ <7%fMQ̡99rމ9dtѶ6F ;PRwtM^YnZ4mݧۺZi5Xtͫ55^m+M KCҔwRݻ4pBJ"m -HY;W@?z+G[ W7a5zAIYM(xQ+,}pq檠@+k -JJr}c;v2 yOHo]x#)K1UaМ,2Bb m@7"+)0lۣle><.O -|p=Gk~d c cȿ;%~1s_$:/endstream -endobj -1068 0 obj<>/XObject<<>>>>>>endobj -1069 0 obj<>stream -xWn8}W MDN -C.,hH*Jv{|C&H`Sp̙3GjC.GM^;Rb]A}A O\ώZtI\CLn,:°5iSBM!H-^IRJ$%\09kϳ\B'"Q!Q;l7lĬِ|iHRIR"$̂ --L6S >@t9tAKM?<<'-ɟ!:zMfq <YE*o.p a3Yd=LDcǰ`MGlw6DbՎ-wF2v@vH()c@:\O'WQaaf>/XObject<<>>>>>>endobj -1071 0 obj<>stream -xXn8+.rG~ufL41pdCIF"U㿟sIJV&A|9^ق^.֔UgdN"Y/H󛇳ݜ>7GNe>lBk%ֵiI_gs:_̓+ͳl%݊`|Bð1 )KtD7Z2[ɏށ$HhbEJSژUzGVgN)tN\֥9u"-%/z9`]/Rg>wJ'IYNˆ~(DV(--S!S5UoҢD%2GOښ$..% Q$w%)Mxߓ ]LI\9+LN -xRSpȼOp.\\" -Q{p%8 YvPQ*Y*zoArlF\LaC1OmH%̧-ifYSW'<ʸ{CȄl| %Qo3ZK,_(>%ђsQa%%Qkӻ\s5KNtSjurEu{O;ǶcMʵ`<n̳x6@$| QWJs!2QJH' bw!Cj!ҽi@@RNûMhm բ|:FjzW$6pŐe+$Cdtv;n8Ȟ ͉iLjֆ@kH䝾J1%؁mX/ +Z+KO$1d(s`-GY5#ժWUmpCBLd xeBcZ)g/ m qIQMa/l t8Z`Ɖ , Dj\-O%ky`Qf;[38:j>/Tls5lb7BƠVo؄a**i;2carRL$f֏_.PwO,צyʀUYO)4IϕzBbg͊x:[pGnendstream +endobj +1289 0 obj<>/XObject<<>>>>>>endobj +1290 0 obj<>stream +xWn6|W,`lv}HeN"],I%6CQ\.;3;{0)fN+*t2|9YJO hS mJ)m{G|͐LEs:)$)O[)<=W;g#v?M>ҴBi*49:xv=#|W@+Z"?Zr4_.;+:B{r +*c $Yxe4ya}%>IϿpoe%iטhÓ pt|xn8&^'ר]I/@'v `xB'dqI_e&x% +ZD|MNpb40T}:2·c{P[2k_>pQ(1rqV[* \(18 +KdUT8Utǟf{A%2[Yb|yr]іI&!??L`%TcIƙP\CmddDTXX!Cm,m5ʑ|E(!JqF̯FA:EYAiGw `wu4.(V eG3qv!Ѿ}D6`Rnf@sPa\#69̬'Bx.K푖B^ 1jl YYRGŽ'vP bGE(~"oһ)4LV퍎zb'5 oƫ=]z2O @yf$`b /t1_dFh,#1~"t*z8R)+ܘ']9F~L1Dbrl8M~^T=R`o;kDuJ b7\9~=k ٽf,!6.$5̪VyԈ]jQ5EsVAE0—rގ +>}*)\3V9G$lx'+Y$p̨Lxk1Ta@yyFʧGpO:>.Ryob$Pd_.|0|IjAϏ8i%]K)˖v?Sy2ڈ8‚s;3u +d6w.c9,q~!KEz"Y?K_\Rx1=45\V b S +3_P-{ q$4l=TQ;wxFqtt0K&SGvVUxb6D?Ž.yn<_bŹX&ב}bN5qAcM0(ư1vW+wr2 XFqODd>ϵ:iQLrJ ~k$DF.{nM)+ >~M^1oiEJ{߭W0 c6: ^7;1,Vr5Ϧ >AQendstream +endobj +1291 0 obj<>/XObject<<>>>>>>endobj +1292 0 obj<>stream +xTo0W COYqIbr1?JԱ0-dd^$if9 ˰z1aYro@(=RH7iң^U+kz'(@I lw.l4F-_,lLjثAiJǻBXYL"cA hJz$bpQ7+פ.`&qƗ6lWbՐ!"s*֌I8rv!ڕnܡFiޫw\ >[|QKqba>2:dU£7j26x? 4SI/T]2#\\\5ϒg)W]ah^NyRLse,o endstream +endobj +1293 0 obj<>/XObject<<>>>>>>endobj +1294 0 obj<>stream +x}V]oF|ؗ"`1N>4A]hɥt;տeLQe>fgfgbAs[͒TbNXLMzXϛwh9M7 MuRQǾqUb!oN7yzU,k;upv\b\0=m|(*~cQe4Xf \O +Dv+QC:1ؘ2\ojA::9P`boS:^NEALA,L Z WڨҤEy?XF KRI;enR(N)3kfeȀJ[n~aRt㟚xTf=O;XGCeg'Y'oTFA҃<4ZuB >5պ3\z }#cɽ~~Neђ p^]OY-tV4u[H\&Wë:溠8h7'LUB)wW:=P+Uܱ =`c;-葱C\:, W; )N67W 9A *Tk!T0<(r0iKɦ'LBv*QV ٨*SDpgU&a !%^ }Y Ir +PX`gܟo5G T. +u)Rf ڐD<Ͻԕq)Z])ݛPLnB.'@@[N1"5xhkVc¸@MU8"吃*b5(BpWOFx@6[([$gD"o[a,@ۄ bRUU # R(0.TK*ID>X㡃dŞCe\ +NF [[<++ `lME](>[!:a@z^AaO )ѐ*!{oK&77?H>QyOтCqTb`\cITlb3'"/tLuOBzEe/Hy<vn4C$`j*1 >̭LaF[/?nݞV|Ш9'(I-2VB/2,Y"ZR +·jkuk&Phx qfXϵWM} +cDuā(>Nξ=u:): j}[?.10⯋T1endstream +endobj +1295 0 obj<>/XObject<<>>>>>>endobj +1296 0 obj<>stream +xWnF+$YeI9$NZP,ɥ._7CJh(#͛7/4)-gt']4_-<ßה|u3^0~}q醦SZX-iL&N/Kt6O}߮ci4[: kʌBuFi㽶T(:MP(b"*g=Q[|6Ф@Kh +1z<.wK4zׅ=O&.xc5Z%hÀO !HPJ{w,!2d- ; gI,F(ȱIqJ[v3uN +b&$!(Ғ4vSb6Tk2TB{7{K##sy\N5' +ƖA3C&&'0r(( ?gmP\/8@%tUBKUd&lÕ[hlE+*װc7L/DK"u) iu=x]v#U9ī.#ߛ4Tٰ%zc, F]'E*:gsW8hF`2p^/㎫CI th ;>/XObject<<>>>>>>endobj +1298 0 obj<>stream +xmWaO8ί˕6($>"p{jӝMƋi{c' +g޼yoƼMh ]ObFiy6N4$t9SXIyxp5'S.&q2=ub~˳/74eTU2eF42>Wz-?_›47Gk_f;O 뛚|!)JVDv+-Urc^A)^Uٔ䭨ȩg*-H+|BL= ix(4\BNMY"KP**x'ZN!QT Y(ni@T^BWTyBOPտK V41(Du2`2m.I"şb-1JB+S207ƛ> >W`0i,=It=e2]]A뽗V#NVTKmSkݖL)ǁ=ƖCB; =h(5 [:+HK!rɵzЦq HBjkt*4h`*"rIm](pQ>qGQA6*k9oUIPJX)/;Ȕ + l +ۙ dT'4"*w['==|$+%[ Yoi/`uT<70WA5yN٢J% `[s|ra5`A 1lTcj񁗆+8*BLrɋB@Hdd,Z4&SˊuИ=9mvmo{ [˨ZH8pJMf(֛^ yANA]G1 +BfF|,B -DM±p!D)a '`FQ"L' +h -1F`^H>SGF`Y#;?Bv#87 L]؞+_PńHX?=] -=zDn*{I`Uqg6zTjA̐!wghטxEI#^؂@2v2H-[d zz)nmSuLV'B̐5lR {كm0\(:V4^2 -]%s$aY+Ee }&B_C|+d饩o# 11 1np-&*,%?-Ԯt[;U#04^R+Fd$i!I:{hYw?@IDo"vЍudmY|H+KҖYiᦫx*MzBx$g͊<fǮoZ[k44-)魸3'-:˪m~@2!)/X_H$ϳ րtxO\߼0bo d -6he}<'xz;A{1c4lV2rg,ASj4J#8߮Xe -Q7}@bF;wo !#Vrram񒆄tl] <6HBC -S7@c<7PIi!X >4Ȱ1stj 9 sKljv_>~G7`- #!9?bu -h -Cf(TI0rGR,Ÿ-3 >/Hr2p>+ ?;'x K8tN>?$J?z'vb~> 緄6IoUtwk>/XObject<<>>>>/Annots 467 0 R>>endobj -1073 0 obj<>stream -xXQs6~;+asvfۻL^hH*Jq|>(igND|ь7՜i2 -?ͦdJUfer>0:ۛ5vhklW׋d +1jJX WvnAmvz^&cI=ѶT5^iu*kQ?*<܎꽾/!H1TL64]%s?U򔨄n??H +͵/52vieo2ם)UV8tpMV*7@}P5M} JTVve!^ ճa6[]OqKR+|0smjyUWlt|e^x1Fnq"r6lOa?ғO vտ~>}B ?O-}݈ ]ڢqJ֜KrEǪ@Nħ"( QSU -D\Xbw*8v\alOڷ^>3X2, __0+¹t275%m=4uRM?joh-:Yf þkd -lE{eccdNf74J];cӘ~i>@*\([%PJ7Dđ -Cpn0tL 3j&=&v9^nz?>vɞ]@ W>0@Lq CNJl<3FRug#_fo|v>#w -2ș ~+\Y2"HߖQ](d blJ Oܨ8PTGյ.JZ\_$YV(@^yLم W@rL67EIk<_ EKhK]yrX4=JL7i՜KrtF؆/F=ZY?vCS`*82J h*$0+N 2僢@f Y`UuWjAa4d XȔ\Lj WbpkNWpD$s]9y1P -^5O"A޹L_".(i蔣.&=Ķh B2'6I*ׄ[}#|ۮVE_X"E|Z=L -SKFPi+ IpaK¿Mh'EH )ϡӏm cck42fPuˎo^Η\n;UlU$m$:ŭZ8ܹ6v WtrF.UÒOF*MkptSM1և9;dg=,>g!k/1p/m47๋EqMΓ -#"f< l@6^(CE;w5Nc¼0w:KU:!L_uIJK ՆE_] ;+_sF{-sp^LdbV@3\EǃI!l6IX3٘rt.&SFlc{`h%@fm ̓IqANFtsBQ 4L(PfFϓȮrE[vDW=4w,=4Cm>/XObject<<>>>>/Annots 472 0 R>>endobj -1075 0 obj<>stream -xW]oH}ϯ[RݍԄBTR48=tf 3cNVV4q^~OL> FgGhHՒGOl8q,p»fP ?A7`OM7WiDX ^iIg]FqDFeev$ DeײY"lJ2Roe ǰٙ3CkRVnUpDf|ݐZ*.+WZW3S,DKZfջUi?Y&zcNK֣nT'L*=3y\m-io>ۏqy$+kwvbRqwk$5)M$B8l\"Ӹoh+, #/8lDQ]k@rt+j )`ۺr*ʅ=W"<5NT*luE֠O51#ppQU}\xXⅰw0_fXeyg+ۥP4?<<2E- ee]rDП҅viy~]*D.V xiD -Lu-JP%|F"h*,R7;XX+eQ-., FC<ľ%Q -& D&x~2PyPG cn}09^RJ'<~V0ΎŬawB=}3 -O߲ʰs37X!"f<t9 kAwMbCGcj=?D _{BspD_z!7*/ -^.aQpI uvz}z͐7'Q|u;gU-Xd+&ocL6BS ơy{zc< "Ì<,c'>3/"oLЍ>/XObject<<>>>>>>endobj -1077 0 obj<>stream -xVnF|W}pHE)NKn (X+ pPdذ-s33g>bJ'GIi0s>H ;1<=&= ߧtҜף4;ORQu!s*JV+yK)H.HGV\➖ax7T=3)(+ h  -+G{ toY=gts~}JglT1d(И M --q!%@˹feN|UYYjZ6? ҽx6VH\ W^1A[W$tL59Ϗʟ} VWXK t)Yu"2SFi^pAa%Xpbf>vfd J>\*bY&[Ip9 4mβb5*6OJ_ҧRrhFazJCJtf{,ڲyhE&[ر8 _I#oIrй{VIL -*s @N9eZ6Rl|:?beHD%$YT2EŒ=ӈxVcm~@h̙*()2=DFe~JAMn^{JxI_|Ў܏A?>n? ܰD׎It{`LXN5 rP xn5!+xe# صU(،6Hة_zwClsfot@{L*;,,n$VjV39 ?c13LF.yahVu*ՐY*)8+2$Y 10Ec[A`k TH;AMn~~.h:Kv!i-̸za0rb m]nx>GVcbk`m`Gĺ(΀|:p8Hs443;ryfq{L>^Rp!$7Ҫy=. Xo(~ҝΦ)u/%D_Ҏ=d' # i Y{ C\ ضdQޛ`=f` Fp4Cl@#]' $yendstream -endobj -1078 0 obj<>/XObject<<>>>>>>endobj -1079 0 obj<>stream -xW]o6}ϯ@6Z#nCڵO+![hDKJ[IC~s量isZ%ه;Zh˫kZ4f3䓏yiiG7j6Rj,?_>ћ>&ފ:P-bĢʅWFf=J\,.yF^ Xif*7CF~fCjD༬M=MVWI8˪H|6VȒctxzM)xUw6)Unźts"T#WpÇ?7Q@Ȁ7ƪ#*.V)~[eFS!sx ۂC -YP5=`2NN87`.kI: (d*}>Vf= ؛Pd巠l2A4\V })7'sHyuL܆ؼ4` 1? ->|lU#M <ۅP5g֠\\f9`e^ -\(BBZ>ԒXû%]H[P&OszI7Vԡ`%d#--C5a[ђ6 -%x4k9Qp7U->,ΣtPHATuU}(àCy^*&$ݿ)c8RjhU_)!wru2*GCйktLF0h;'BLyr^3U%ztl9 6.4X&Gd>9Ǎ;vsN$Gkɓb!|d\|`87s*wbfO+I<k2Uϐy6k2ds.\[v;+mC24ݭh8XC5\s8+Hv֓)6 u#^(#΢a> u .6Nݽڮ\fԸorͥc'4uSNWAn y6{k] AR U2>..G|7.5>X1쏳%endstream -endobj -1080 0 obj<>/XObject<<>>>>/Annots 475 0 R>>endobj -1081 0 obj<>stream -xXmo6_q0b9v8))[o6Z,9Rd9) x)]{J]^S\]Dwzi~3I)?(_<_GSCEtlvELfAğe<;dAvMBpb%qmࣣt%IttNωL$z{H~e2IN\^rAe43JbŶEV6SqFzJtn.PexPV$*'}홰-3e;:mpL$4GQ:IJQʨpr= J^}@,eɚYlm -U4ullT"z  C&ZbvNVJDu`a36Zd.(}m 'ߑN;LP8HΨUZoCjo}0FcEt?3*q\U -},**Ef2s h"TDb7TǺ.]{+1\}nԜnIgnT2zQc/D_: ;sF𭀻ovj{71j52r;_&TֈA xN'ZZm=\yu" -In1]a:/LRgB$xyh{L@' ȊɧGC 1T{GD5xF{J9OHv '+dãfmDALh]V[A6$X#rJd^/Y#]>i]8 Z㖰sGwHBER(yFw{ 4@rrKf(z?AP -7.V>ijAC5h; -(O 'a0ɼJkѱc,/ˆSehws $?ў j'@ -!0RO$ X܆ubʆk9t t%GC^+CFAeU'03f=9Yܯ~DXf\fwHp)0λ&K8xKZ;!<!CH_*Qb+"5C)-*o~{wn)- NdE)gbԽ)v% -ٸi5\4=woA}/x1[dtyA%@~vj~Xr3?endstream -endobj -1082 0 obj<>/XObject<<>>>>/Annots 480 0 R>>endobj -1083 0 obj<>stream -xTM6W̭^ R)zfHk셖FtIj]>JvV j޼y KL)+xEEY)) GH,ΩHs8msO.fbͭEtU:)dauv_YggXUӷWrJZUKUrYLO醤&g{P{i4aiGc|Z>ފu|S}E;JP)PfYL7V;Ņ.q -}Aa2:(#,,j7!jvOK2;>Ay+ǎk1,8DŽRQ}(Z:%#%5SrCQz}~P_mEPgLkSkN>/XObject<<>>>>/Annots 487 0 R>>endobj -1085 0 obj<>stream -xW]F}W\)%x1)v!ڥ҇=$ !;cp+@ܹܻb/Ř&sJ( f8SAI4rz]=q4:/&QLW -_~t-jp4Gc;]BGxW8]7#Zo|uC›f/4q;A8-rUIUʌV*/ןz#P:RTZ)hzE"Xŋ`o8iϢ8ꪴTF 9EjIz/KMXzut2o!vdAX(%7;Jx 3ʔiiO^T9iIZKeUyIaqb8IV:S& ey23.I99SGr\hI_Jd\%4JR -T( Jݡ-/LZR^=Gu9zΗN9j.ϹPޜ`?y`ڞV_^iI>Cq&<"}u$ϷWZ$D8Փ/0UNոp'eN"EJHJ,:BS"p3l[wcr47sdHnㅷZݭARH -"y,]Dw )?LEiQr4n5HE j\syU)װ"zh=.2Ϝҟ]Ƒs\N=?%we R_[`(KAǴV+zjSҞ?_ո7ɐKP`)aE  6:8%#),(j XVR&j, t!gU-bV x~#+ѳG39F] 洛?`eYX~n\ouq!16 \֜J~j:bq3k?24JwD=DX¦;$߱t΅[y}vH0ā05 Vu`՝94 -{"5MH0ߐ4VE _a@qo{dOWsMCG7t^m =Aɛ75kۛ*Ϛan9H[(+PX,i{ Ug"{A?\~gt~fFZ;ȲzIZ61./Yڞ=$;C@. >c[LS -v.oĀI~Mh֞}`? 2S$ -gvb֗{2ap<߀fo(]xi/&~j -=endstream -endobj -1086 0 obj<>/XObject<<>>>>>>endobj -1087 0 obj<>stream -xuAo0 -j7=r۰vEZm,y\~OmA aZd72bCYm"]Ӻ*瘎,O˃f,6UI;EȳZN.ڈi ρB`OZIORk !u/k`; $" (Hvϋ%jwjód =}"z>/XObject<<>>>>/Annots 490 0 R>>endobj -1089 0 obj<>stream -xWMo8W rrD (n{ȅh[TI)^}CJ$ ,E{oFSߔV3/)-Fd_c_?fUɒ -]UMtL{OtL }Wr.Msav%-n=՞rs8IK/ک@w NwJwrO#.L8Fi$ZI+X$TԳc^V !$y3FC&N^K=i뻌>؊݋ - mX<ڢt vAmpJ[_Q, ֍6x:*-,heDt+B -MA$0{Ӝ-aEi܊ZW,t- NQ<ݬA I5,N-bƔ O) <ʌ#vy>j+30\=ZNf7TC€F G?:'U8+*,bSWGbxr2E̿6`*q }8fZJQ C!MM-E]sl(<6(g@.#@"mt"ͷl{fms2Da+)gF\XA, -2Jl)%nPʖKuyץ(i t5A8u5c/X]E:q+网~Y|M W*v^T` k(Zz`J įe.u c|EBe,p~o[u_>Wi0ϘPQPdC^! (HD Eـ^Bh -ymmR!1TA:"w^ -qX<y Elߎ]uG#73!EkDC4͸6nۈ:{:Gky}6@tN3PkԚJ~&t) Hd܌Cl+~ZgΣYo~P4Rv "mi44̖qՇϏrY>tY5 [!Ґja !5eIo̤O*NWړBli7g/?˚ JU,J޺2eD_Fۗ FZ7%4!ҹӶQNWނr?3f1bhNaG}jzu^n5r0;$Zuv[j& - S9ƕ/:pUlr!u^-=(eбvr〫f 8XnGiM(@v +g -<ɵ)I cljk*8>]V< ņw>1؛niqֆ2!Ɖ't+ /.M5C d& 2qo  6Sm&KrS[Lam=K 6oԳ1$_3r/q4uy^jy:lz_+endstream -endobj -1090 0 obj<>/XObject<<>>>>>>endobj -1091 0 obj<>stream -xXS8~ L@(pR{Eeb[>I&}+ݔ2W~*MtzL'sO9N|FRfG'pbwx=)"!ptD8Z$ +K+.(y.J8Z,6Oxr+R`wB"UVvPᴡҨgGfm'cź(d$k "Ɍ`Ƅ%x%G O$3iJSJaْ.hᔠL"CaicIFIuU~?\ >$pXNhȳPXf)q|.a҈eekt`ZWF a5>9 7~G g)S{"wI=PE'u%Y$x2dX|2%תxJA"4<+ɕJL0\eZVM`]kk7oN2S3iiiRU"~Df_Z;8y6u<@JK/bNsM)#Ql"&_Mlpd,FW\}~x>hR\>y髯`+[.n>{M(R4]l yB4A'bQCYTY8nq+7d+0鷫K@*%Ja-)D89uA.1wPA0#gdƽ^ -ګir>)9Ǣ4t BN8t(D]A 7FE[we{̏+h.h>t-d{Ő44gi7ҡtB&C9cQV^u΂M[NM޵O+[bl~htU-YF'􌑶E)јFْ ?'XD@\(KrSK*|s+#%L@)p~!4Oli_>--o(A|!Z4=fz)yfh D!; u|c#N=S= -w;Y[ -s?7<="/2U;l4^y-C۠z<(6akk Sb1O <5aCt d3I>LQvT( W{)f5P38%@^* Aeid^Z2FqL`d8YwtQkދ -.O+.\t?zU螋~gaCW ۚgO ~Яt$, O -h, 4+a #FȴHDžxjǧfAuI8(=Iz\wwH(A_5H[?Av%yv LzT_-`pue,:F5.S>xa>jVpw itoM} -RFv<_Yݖ'pW^vȆ`Dk m;P酵@2cY0<@f2aiZc()趫747yhZSp'i(h6YscID}ӍIXsE2; /Q}k:Pt8%bhi&.;Dm[7 m -HU Fdxcq_ xw|͝r+LYݺy:g'Njs3z*qp3v~pzo-mvv:pƫ'3xcf~dendstream -endobj -1092 0 obj<>/XObject<<>>>>>>endobj -1093 0 obj<>stream -xWr6 +0>yg';-4ӝ&mN{ȅ(ԒR}(RىGk8i劒bvAk|.g%eb9]/>oN.i>M[5mR $GQns锓Aҹ)UҖ9eXvuc;oo~/_ܢҤ͗O\$H˖2UHJ ;@FÔrrZ)\&R:戄C:[^"lX]ͮfͤ*30oS(rXVl$/t:TY!<%;9H -ҧ8*~) -y=ޒB%N*ToJ_Ҷkgi勴T}B'-.SZ>iS0%Q8!RV$Vչ8.lSJយ)0>"[LV@lNr4yX3xzBbY`Ft;?2>heHƭ1j(]"~coUIH&>#bOAr `o$|?QJEԯ LoqxmT+(=,1Q/<4We_3z>vt~7XFwAc2dkBB~ ,xc=>[o<=,/W -|bLÛhKA&ڲA`d1=LПD6Vt$Bþ&CNFylw6X<|hK`]so}?[4%Tůplr}9[Wlɟ'뤈Cendstream -endobj -1094 0 obj<>/XObject<<>>>>/Annots 503 0 R>>endobj -1095 0 obj<>stream -xXMo6W rp6zpФ4m\e"z;3$.v(({3v1)A6E -y}1MC}b9ǿ jXf ߵ*D!]NR7hh^&3X[bH2ߢѰtt5OgbZ6hI%4dY\U mt-9hU F6NOF Y6K-mfsqn lJ;]g))l& `ody XxeVhv']Q1I[h ݪ;ٜLP o;o -:` -f taSL=N#8|'|Bͭ,N(uG -׊[cyVYCjgrwu#}12Z&-!jE'jieMs>$:ls9t&*.@*YZnd9\GX[cdc-; -8=ަwф~I&),^0:]鈥z]z.󡒃4uIjZ^eRs9p\0 ocYDt Qi@A; A]aԸeNMgP`*gj4L?*}$ֿ d(rfz>t_c"YmԙTA;#D`pjCqrXb:m>d(8r]׃֧w\ч.*0a5`إ\HwjKnd}.[.jTZv< !0RXZ2fA?Y:neq>`i}d׃B$%>Oo/ǏƮȖ1C/S) P6l}OB+(j(]% hh:qØAKU& -+R+=|!i9R52VA11{jv$-d :X-TUlztU HMfꙬ$Bi.-)zbUDsLd|E;(RSqH 2&m%?ֹ7e9Sot>/XObject<<>>>>>>endobj -1097 0 obj<>stream -xO06K=TBEp؋븍.U=vEUgs0)>3JX/dJoi:9F>,,7ɺpL6shG:mF3Җ *}Li<_%Klႚuz&Nw'e+t("#,#' :2JᄱI+؝x- P/kXFի$MƝԊN!uLed,1Umxt 61vY!i'xNQ*ç+TttB5"̥`8@ƙ վɝP^3*ыd vxt,?!mPks}HxM@Fsa-!>)aH:( qI<{bږ_?J*r$ @!Z'j!! -doاjz.!r3u1[(0+ -Ҋ{* Ş4{ks0d > #;"G~l'pC;Icd >٬kGVxaHo%x>׼*ھqs`Fy7LIZㅁxn;2LS\endstream -endobj -1098 0 obj<>/XObject<<>>>>/Annots 511 0 R>>endobj -1099 0 obj<>stream -xWvH+j"9'-]d$l ԶB- _?Wg8uVIL=iܧp'8Eo~o UNx8dh/&фᝩ>Np2𿖴<80RA1|{ +=/h&]OÉQފrʑD义(r s+T1D"e[ZD'ke-7b^Q$oSi^ap,-uM̵He @%0[,{7{ n+gtI,D׉/egMH?ѽB0pz!庼pFȊ_~_X3Ȇw*pZ%7"ؖN)ku 0Ldt['dT:n10ezC Oxwe[l(LJFf#h TTXvYG0i*&Jt=q 1 - Q%,5^3`S0j >סI"+Ӎ2`0su -N74%>Fnd l`{+[IUCjݮȵF@/l-Sш$X,MJ?SozK$ 3eBʒ.|P#DrٲX趡M&P!r%5?xު/cYbɩ6 <PE6Ǝ]`odYb+^"E:r+?b=`HP}:H(04fA85xsh@gc-L0VB9KSG)C.-<,*0ȳ7 nt*]F%5L-#x:d|J4fvg4LumF@6 7D gX6*W?DĤc40TT ct;NEd^ZғnT8ea P;#?4OO 3i{8[w>JZ݀ɻ¦lF0aHя:VGv]t}ڦ1Lqw]Erk!Rj^_{1 DzWZ܅_}u6a(./ZbRa CeYvn AĿB(MyWhkLj)%񝕑e̟mivxNE Dcݚ/+ҎJTa9Qqc -x - оs:Q32 -%Ċ'osS3 ?KV*l [쎑@8W>mpy&!p9x Eσg2[[H6 -Md͏!|(X{Ə%[it5 -b̪n9ΗV[iM§LE1)<h⾆şendstream -endobj -1100 0 obj<>/XObject<<>>>>/Annots 523 0 R>>endobj -1101 0 obj<>stream -xXYoF~-RwyHzEZyX+6UvI+,/)JQ9V9栿\4OH3Q07\DQl1 ftLEF|fq0b~E 41__-sZL0hW|r:(EE(pM5v#ּ nÒ'FrE gyWKA~rBnvK<{rz˜s0vni톮~Hwkb{F!? %B25󻇞$ ȬܦW.ʀ^]R8aZp x$L ժL }ٴ(}F: -26іJC-QSˌJXL8 L+:ʕX[ǦX -,VrVaQ\'b?cbTQ r .ݪ|.>*s)qv(~Ut?nSk^9H_cZ$fÝwUk_4xnh?o܋frCk嫀axAJ9JeScGêds8'y^l*k`֝`zRYtU%r%q]Un4.S1ۧD/@FzĀ*\Z?z"hfN [=_k%0.Aeh{M-\ -VK;6S+iMLSmoH (F92kPOdwZZT܂YyNL~cYDt dr$Ku0Wuez&PPKs4iP,j\YWr.ԚB(j h{`uH7kjKfNI.À+CAK.%aG]CkG|`>W^_i*@K5_faL^gY@S0 Ufc>/XObject<<>>>>/Annots 526 0 R>>endobj -1103 0 obj<>stream -xXF_Q"-+  LC@4`;ݜn3a߫n IVJnW; ~z: |)km+?ֺ;K߻z->ݷwz]^O_*iS_Z6j!~ 6~k8W'TIn[wϵ65;moգ]4nt:]9:[(OͿhy:_ T¢nxz>8:=:=ݡ?z]Vj2-.Ə4/%..9֤Wo2}ݿӄtʔ2MA2ɢ#0$AtLII"YΈK/9 wEс_&rCF{P>[DQUnlˍJ%^:-u>^ Mc) -Z-H =z˄3K߮bIݭQݝaL#<(c&N!PS<( .tpҥzs4jgFyux #1;CdI%YF3vh@.fG,`LCe8\Er% s fO&wԁ̰J48rRf;zf, 1X&⌔=#/%+l?:pY&\e‚je*k{t ZΩ\RK:S˨_j^hV=.?ch4eAv\(zxGOBJh c?؉dk{ $ Q(?.8dE4E@G*R U0-x42m]aZUO^_?TC-p SWm ]&4)nҵ&%̝b=JB;P  #$Tf =Z^AU^ji'Ub2 yC^HWWҷ_{VEs&mZE>|sYJN - N~ F>HT*YvgsX$+ Օ BJE[ZY!d6Ҧ-Y-2Fjˢ>[Ed9=>.hx#E\%"c) !Xc̣׋BsPXAw府WRKS{%TSCdo_YRBT{[dXP Կy.om4??`%4mxv'߾'E7нd xU?!eendstream -endobj -1104 0 obj<>/XObject<<>>>>/Annots 537 0 R>>endobj -1105 0 obj<>stream -xXaOHί;]*c' Hbo[:ߛ]o@J-Q7y3͘/~!Eٞ}RҜ7(qv//0:Aԫ{5v^m3}e; !CŰvˌok,3 -z{s.nmgkv[;?z8ۯW Q;jr , ZA::Ɨ{†Y͒zucs~6;=0Nb&QuGeQ"A($^TI^R|U= -{UE\RRR-&Q&Z/q_KLUɼHx,{vpjg.qVhBÛ;U&W SDigc=Mt՜239\ u0ࢤڐ|4h.sh:?LZTQ&kY՞F*Do75kط({FPLVƅQI{&bZ&D=I4U+"%DV&O .R4f"[§cG nS*ԃG*~2*Ѿ,o\`߰u2vt5Lz"EDj; 89^RGr+T<蓩4@}߅{뙜4l(׋RGeRTOsk:tqKOëóty}KwWcM.n^~2ul$~ee*g?_g&6FV(ZϗijFk4s[:(lv"h,I#4=&]!'^۠Ξ~bVuQ9A]s#k~0!In|xn[g^? na10;auendKnm#qIF -u!ڡY'7=$ΒnBfM1I:k%ڵf!TSdۉMM~. go3|4JgXI F--;Cx1Tz&Ǜ\a(AN:ȏagw7= \cWl1sp<{dKc#`QKV-JYݔqt9#ϺYMWz b*:4'#Q% -X>F|<͵<' -Lφ|!u!-0n&>мTb`;φbFW0rUY-87 LjlqCٜHF"rJY9fntqn&q̵ -)0d*JUeH94Y5٤J:@B{j# <>+feɊ\Ch L/P::D]~%܃nVbdld[F. WXxW,gg3wp-<հV,S g]HKzůG#[13β7/6,A-A? ^P~glΆI hN(@1B]~R/`(?X޻endstream -endobj -1106 0 obj<>/XObject<<>>>>/Annots 544 0 R>>endobj -1107 0 obj<>stream -xWMs8 W`rrgbٖe_i3ӦVZmT\)*v;M" q2)h|AYy2X|z{2_^D OYR2_E[Ay?ϗQt%%%_Kڜ9HP9oq±xxMͧxCC`6[=~2=\^,t+f#GYkAV5ښg7Np?=8=UUI<t{>CFw6$љV=n;"(I#u)HV|dw@ +7&=?cSf_}Ez͢(x^6ƒ(&Q-U&/䵞kw -p#zy\nDS3Uq֕ {]gTRtv -~*sh,q[EB*uحvQ-PMʒB8Q,%pGt!!Ybxkd؝m;'~}8P'*D6} - ~;az2Q<=W -YM%`Vi!9E!  m*H[ø6tMG8z-9]J% {dulr >#NFe.US@d,Q^ϣh|aP(7C@}Y(N$dZ>譬$\,@=\ }>6`?LTndtSg2<ԍ(7xt>hɑA'{5ʑZG7)طt"*yF -H!`j s/H$~-z"=scJ)~4ӝeޥ 2ۉJD Q(".ڍtsjN_>wyc8Df܊GqÊg ,3Vqтm;Jm8DgFo[}jX}aT1/B!-<Ȋr);gB&JҎ}zFԇv0s]`OPtIjV€kᢱfm1wFZW -3R1ҎMv?ٻjs4[mr5[١k}~ oh?nq80^Ʈ]Lbb-oғOJ"endstream -endobj -1108 0 obj<>/XObject<<>>>>>>endobj -1109 0 obj<>stream -xWr6}WIڌn%/Iܦ:f: IH@ɚNgPyhĶBpouգq#Jnҥ`i8g$-/^.^RG%M4]AV:KJuQ2\HM}4'>:hLi? 0-*9I$ɭOޔdg0JD tIidhQ%-[R/2z2iIP!Eiki\ hKpAV@+ХC҅p̕ݔzW‰O -ɜJQ?K;qd8k3adF)+mly~BV,2 ~c6o*ZR["ڐuB" ~Fep![,BÃ$>kٳ>4ea"]O[W6·; -5+)n~u sg?+`"Qp)_}0]o*~7Qxg>zEj*^Y[3JͲ/so=oP/oZ?{Ɉ2|w'ָJF۷,s Rq.QRW:/ԋ\dX [HUTx>~қNkHڡيuF,IY6AF -tmHdz>G\I2 ,ы -G[>C=WCIۛ^2y{:!epϳ~ڠ碓`|]69]#ƪ -b0b+i2E#InY\ PmDv*[yXc G4)?5)6S"+KĂػ7&.2bi^tC!C -D%8(?$}$"g kQN -ҊHoeႆ'ÙmdI{EE`%>VP@>$(x]ň=9:CT­!A"lqhk ,YͭWa7[zeڳ -Axrw/FӃq>\;~+<P(dJ6Ҥ{,ain c";&NlPl@j!ӠE/@z(X1ramJy|*c4ǛAM2 97MB_yc :ѸzpNNyt vuK S -9olq{.KVuDNp/o(fo+~ܲ¯t lW +^S-2 -rvrl䷲Ȱ"q|=zn5Fr %3G8T /75}2q_Yd>/XObject<<>>>>/Annots 547 0 R>>endobj -1111 0 obj<>stream -xUMo@WLoD*k voF9Jk\|Y`7.q;@89PYFf?f{gBvW"3ta)d[Mo l<$Cw_-^\b ʅ /GY -Z -'ip?` DbxڰJރZ6p[=CٽӨyJQ0f!ƽ*u4#˻{ڑi.VZ>"[Ӽ ?` )Rފ'EEHDz^f9?ó bu 33tNUx qFރk/˥n3]Z`Kz{ّF`#r:Ą]Ei6<_z~$v\;tOo2,HW(Gk4pT;\Vf񈑕)UD^%z-JTex>Jh#:_tj櫚&{'I=3,*&OREwM瀮/> 1Z;;O -X H3Qx[,:G+)GUE3!Hm"9_ -^>r]Ɵ`{^Fgh)W1e3xowA 5٠f+@ÁW'YF8}F a8` -6;AJՊzbbTr%w -( q;o[4mQ( -3|h4I!Ng!J6lWpՃ(-E9hdNџoY䄋֙> Ԫ}Ot?k\IBK_!endstream -endobj -1112 0 obj<>/XObject<<>>>>>>endobj -1113 0 obj<>stream -xW]o7|X0IrIФ1."Ixw<6<<;Kd8t"w3Ʉ7%QQ1~-h%;I ]iYaleIX=ƓŻhtw2+vʄZ&FSWq^,IFLplI+4+/ٌW.uJ CRx - 7.姭 -k(\d#G;9.&5p|-ZI83sxm;'cx-⇣H8ۚ2+'Nb! uӖ"XeY6ej='o-$4qװ(BBG (g,G0RP.S2a-`:niA!UZwT =h:'E*,,d! 2l4 hh6zTb+w_ႨG!47HZHӌ>Raz][db.,֠ :yd-sR +[vȕk꒴耄x|]Lb_^,叼at57K7MEJ\wap ]T 4Ho,WrB7w{.S Z@qݵ BoW\}lv#߄9*d 6"nʑ{;ޥPmnYMPKFPҭCܶ)\P4=h[PN>y>kt'Gz~BCZF2 :{\R8}k݇upŸ)CH[ %endstream -endobj -1114 0 obj<>/XObject<<>>>>>>endobj -1115 0 obj<>stream -xVmOFίꎆ'NLBʼn;*U&UU$^b{@_{gv"eg !0xIq0 0N45}4ʽD`),Wdj2 aa͂Q,PiYZ iyGє\,ӣa+*HYkz^ -m!~(\$,a34* -Q6aI,e’|t] ,I=Z{dE#pNbH7@!ʼn>!GAn0E50 -]ٸX/k~a`0?SSO]pEXojB3EPpt]6r*!j4hXcR"^S/V""$QFړ5'cx#]yOWC8ُzKe%h0az`J_$UW WjDLcjUU)4 l"-x]B=@W_;W??8L2lN%M'$`D2voHSmW5V4=bE,dl:^(EyՆ+Cž.HG}3(8'e^$4|H%0J/KXTsXiUbkn2e6,mJr av{bGEbI^/۾؟p 3޿@#˼k5kN}1Lc>,|WZabB%0zV? 3} 3Ft2%G6eyYendstream -endobj -1116 0 obj<>/XObject<<>>>>>>endobj -1117 0 obj<>stream -xWoHbJBFTm*PUtZ6ή?8U(!͛dLg|B3&Wє9_i}vy5\l1eB8~vFtM#ei Ue -RyސA;byKS[M N؊2\J%[6ӭ9Okho+G7*[){_ꌏW^G$ɗtce:OV|s i_2SBSZLxis[wc]J>/XObject<<>>>>>>endobj -1119 0 obj<>stream -xVnF}W NXd9q @.MT+r%mL2ܥ%%ZQ:1@s9s|=4lh6'S.xҴ*Y/Ƨlx7+Z{CF;2}EI3>jKa^fò26 -w/IN)3NrkkVو.#Z韗66/S9eh\4[Mi<\Lf/Wߺ:ϨP| Vj\]UxZ> *,i<sҼL&<Py3yN -8A 9Hu^UYV_KǙ,hCׅ$aPs\3ċVͳ -eJ^;:h&9HˤTm1EG3a) :*6LI:h9LDPmTE4H_( Dp3i>J 2-Oc~>;D~]G:b8S@U_}2mI_BlkKVO7#/{ /Qu")Pt PB貄?7Bw`Ҡq8܀07Dej8l@61pΜG3sSӡ΃AL#穪&XWP"h v=\>:`ՍxAVT+ l;1b8Yy[{k Q[iıWdֱ%[Y+x7(4Xő~UXQ :2I[':4ۇw[)+:N{QQ u'镖r'atxgV0nL*lrT?bב6)"+?;ȅq#OBlxh kfA}ys_Xo]ZPU_t\'X>8Ol]oOlgendstream -endobj -1120 0 obj<>/XObject<<>>>>>>endobj -1121 0 obj<>stream -xuN0EH(vP@4UcAD%Ks|F1 QQ,bI!2dZ;;`RZ4`>/XObject<<>>>>/Annots 554 0 R>>endobj -1123 0 obj<>stream -xWMoFW t ش$K\ NZprbE$$]Z7$En )Ǜ7oFic(_3e42zpO~/ˇl7tqn:#CzK_VYr.^*UZP9O⤛=i@ujmN*׆QT9+-w -RE\IL\'7ۇwwphdL2D>וE,TD{f?KI45XE@վEbv,vq\ q.[ԁ3\R6]soj8w>|Yd`iq}!q(7+&Bo # #d1HM.0F:(+Ǻ!VEc{{OM.qV؄ĘmXa(M2.{rcN9,uoFW aq?bendstream -endobj -1124 0 obj<>/XObject<<>>>>>>endobj -1125 0 obj<>stream -xVMo6W tΡM{"{%F"UoFEyo޼ق[vI elixMq?ZbAG6-sͩf"@ڠUoT'sXjMoɺI(lN/9-7(7ʞ)  -rF`6 7mxߴg**WXZo9}@MU&tC*th#АQJ/>(!\2!+(i*=$J;j&kMVg)'#3gWL8;gWOKAvy/Xw Y`I!P)XZdz`kvX?[Yj5 \:=ňFB:uؓbٌ~FW];a)uS)Ȧ$c -vHfµTCj$;|E*WX &LF}'#LȵQMY\yvhN]K{$Se-/1 w@tJ‹]g  -+S㬹k -4ĝDC CDO/Ϗ]&z?Ql\ -s#2Ys7h Zxj-uswE]UM'\=j8g>ř6׵$%’U4L,r:h1G*s#ir2{h̳:%To^L'O0/) - Th[o\wkL QwB!2ˈl jg,^@G;zՔ328 `Pz'l.(_?؅K6L6_2/I l:w1LeE@OR<܃W4$e6?7o} e-C*mxo~+Uzݙ;vn7;`/ ~~?~ endstream -endobj -1126 0 obj<>/XObject<<>>>>/Annots 561 0 R>>endobj -1127 0 obj<>stream -xWo6a -IJe;vR2 V{2%іIH*#%`E 'ɻw1"'وSJ0 E^43DpD%Qx<4fWᘢ0`u|9ĪYt^a-\c=#֦v#.zk iC7I)+5ddR#yEE ߜh-DHBMU^IT;~loa-L( Y8e 7ԥ)/+@s=I{eN~"o;׿S7$o'Q2=53~4}y옻m'K1٭X$=Q -֛8&t)ۻO%4d%2BHCEJHUBl^*ƒjC I[*d*u]*KxӲOӟoX]X$1ͻK*fG]h ^A װn4 [%7z5d7m>yIa91mۀ\`ڄG,@P[*<9~ 4Exr;@XZ3:S1iz>,rFyX6o`;[SDf)^Wsݸ. 0ym\6Zšy{_p_Ь.5Ij҆|ԍ ߲3Kp5u&9<$uendstream +endobj +1299 0 obj<>/XObject<<>>>>>>endobj +1300 0 obj<>stream +xVn6+4 8vr!A[`ٶ@.D[\SBRVկRN%=,P hy>htϧMoY%V"bF뜐y:uvrIZ?"rA3p|4t]H5]ޏVAYCʓ I#6Zi)[Q0MHm5wROF yNB[Q  [ RLRS2;* bXmgZz/ `v +q@U;2 u+hLMX*k$^=;_L Nhͧ뢘Mđ\zc(&]*/1iۜiX2@zUeXD +H YNKM2X +&(7E";UDXVgCޖ{$˴&xʭ)P,L/+H#LZhȴ~kπ,"PV|,qK3kHpꇨmRȬlX +"L/%$3@w'9P" ZM ](0 YH{N"P0zL0|:ma?$tW)/i `aXFT>0 +ΰQi_TDXG1BwQ/ ᯜUU~h7iYM~9ĂCh<&t{i(a9tJ)a:`SO`T 8߬ɴ0|I7BEݲp> H82 hEJɟj9|1(ݍo{.w;&7O>}L$~+1E0x<5|1 [!=%w@: *pD3o#M='<xGTe h A5{(^GD,a3IA清b9`Ƥe(mm*͝_fmTF>!L)@lOm3չp +/47[ P-`)Q[)?pAaYg] k6XcvPQǬ[mW7\ `aGtLc[׈]1r=gKL/id׷7_yj/Fyv>/XObject<<>>>>>>endobj +1302 0 obj<>stream +xVoHbėRq1PBN4!'p(]N^c7׷pY᦭Y̾yf=i?N4P M7C|ȽO?x1ཝ_G/d2=uHp0:8^+ؤtX$YʊoV"%/V%&*'|+J\xрx zpyZYxLfJ(E[J L* R!sRbz@"yolusp-^'XЂ#h];؇c@Ld&&܁01g/pQ?-\?^LQlcK"5b`$u{H0ni [PXuTJ;M2ѝ($ZׁHWgRij$M[* 5qRe= +vl.)ЇZHjxoVD] d~\9 +B2 +@qr\ +K +\uqѷLgPNEV@!2J?n* u8[vQ >_rb%yڭZDC +j"I S!4rRw'ɱȦ.3UjT%>6:ּ[r?_9ce5}1^%FBڲd`ΘFXER 2FkBH4AAx}mֳ7@ݽ]s ]f2n4gbUcqC[mYHU9ByI6i+ѥ nCPDb|8']!t,WVu\X5(]ȕ  `a,>5_Tu3ڒ *yAy4Z UNԀ| 휥Em#J찑  谂 lP{ڨ@Ұ]9` +Oݤ.5:WA> HrD<iPZH芘Wyԃߵ`D*&Py֠rhF! 2e=5pUUyYhe! +, 4;l + F#*m&6Dl=WylK'Vd&bjk\M] hn1.@T-wlv #D`2S )hkp Tgu~DC3qܶڧvzܳ#fr!n1،19<=bw4B[ڊ/1OG9xurFKxt'+7ɾ?);Nԛ|6>4[q?5endstream +endobj +1303 0 obj<>/XObject<<>>>>>>endobj +1304 0 obj<>stream +xV]s6|>9Z4)~gi:IH"`вRdCQnwoN" +tH$ BF)3rE_c9o2Mi6 +CZo?oM48`ȯ.t2u?]9qZ֚ޫGIw:m?krEժɏ>F[I+U 4N(3JfkDQH䰇rT)]!HUuӆ_2BWXoURde*ϥU*i¹ [#]!6#>N7qtDӭO\6u{]<lA^2r6\= lxuV@:u5pEiCڂqs,ʷK`Y>mD}]n^h]{};f4 _}x{wpd_/G}_PWh$9b(8sM]k̖E¥ H0zvkNu#@*=;Ѧ)&ץ`KDҷ6m6^[ 0urLAJP`yO >W5CoQx-Z#MȻ WW d+mNJ5秨%A=22hOgUez;j}X*D s l#!$Shi'tLYC(}s/m8&w#fKzkGGrz@{lA12VqC F nR_h8ɏOm0E- .' +|gNa}s_І[qY JF=:s]QЍO77>/XObject<<>>>>/Annots 792 0 R>>endobj +1306 0 obj<>stream +xWn7}W bVź䥰]_)q ++Jb%7K{\I( +Cv̜9svԡ3uhإހ,9Aoh.>/`oGq2 QNW?hcs x| ǜF]X{I0N;o#`Q9~ښ!o= #CxLE +fN֯dIW)eZI+lDVwta}2[)GJ5^( +H-s5I]S|wyRĒܮϛw 8!!H*UZ )*#rIvARyek ᬅ# Q:@C,pb2<#o;.HE.hQJIh+xypf-Nᜧ.qdC +%tJihYJY y3Kt'e2]40ZZm6B$ pEW3QvMψ2,|\d+#]0 uΫB2:PGeۡ( p@lkW'$A(l0*U2&Tlg뿃{?z'幺xHqV~Bul# gDac@ q"oW 2w0l/$\V*ueN_#Vzw.AښZY+|9V~ڥ-V,t& MXjYvEYЕ5Ffe?Y4Pτ/",Zqk@, ̊Sc+_C5(NK[KYAk 9Kަxm#A@qUn\ZHN' eytI&#H;R\ΉwvО<â S߱Pzrr?%˂5h^BuJv7'xBC.TAR,~/b-[5R- X 35RQ [":"R%Zh|gVsMe!lྶ%aEIhHuAu}@l[1 뫢c吝-1\TE +H:kPD6v&ۇ4|FŹCzPki#xmmpKL`vw= DtaGDvPZo31 <8ywx&t|U%(xS6 eg>+L$S,cؘ N#W 6ha;fu(<et*^ a-tJA(>,U $hy=[΅>a7ĢɝL+Mx8){~+ |$ằ}¥̕.7Vx |GAOօ_Wb1P%8~H$ VsC7.of31u1&@'82>F!y7u{=;Z bendstream +endobj +1307 0 obj<>/XObject<<>>>>/Annots 801 0 R>>endobj +1308 0 obj<>stream +xWnF}W R"u(DnĊk1(VJbBrY.iE/]Z}h0Μ9sffW'>t`Lq><_74Ƹ D2wDcqv/&j/՚ hp.BNp?R~<#~읷4"RdH|,t bs/2R:?1 諔4ѫ>^Vrzӻ,UE^Ul."oXUc;8 &˙4Asxvc,+mZN4xwܡї*7w UQJp{"dc-`W +2A4 031d2!?#q~y{uٮy:{79q8&7QDAtZ,Hendstream +endobj +1309 0 obj<>/XObject<<>>>>/Annots 804 0 R>>endobj +1310 0 obj<>stream +xW[oH~ϯ8KJ&R`a&)aVQ3sѢ&~Z4hSO~|ow.uaMEl+qna=ZHiבg; <ʝ5(GzVw7<1O'KosrI+w3_f鹧9-d^^by]$8 E TQVdKwQ(t=VmJm6hC 9/ۣQO%Ix-!˜sX5..܈ (7%6u_|B#t pN/CBΔjt}t I4/Vt:+""oPmrh7]]!on8ҵ$ TO1.pHe^ V+x @w`p=49n:F.?LN k(UyiD|R>''zIPEU\0-(hwq ЈJrubkVuHkrVH?ϔ= 8>C/#ndM!򡲫^6SNPV2oZ"Y4%W!|Ѓ`&9=?nXo*0cv֣V/@&^c$s6ca*T(BEGYcL*}hCL p:ׂ \A$@?72P+v5a6k?w =wCR>h^Ez^e&ˋ?/bendstream +endobj +1311 0 obj<>/XObject<<>>>>/Annots 807 0 R>>endobj +1312 0 obj<>stream +xV]S6}ϯ/ 3&_ ,-3 dM[Zlɵl(=WxBeݯs=߃4OtFi9Gc~u0IhF|-SAk_,ؘ&4i&j/p)b!&h6) +YࢠBKdҴII5P& +>Y4b5:6vp¶CܓЀƁvu=/e r }_C V:G~K!,@0dsognSRmDt5Et PrYwdMB'=ĩ)-$3hps=(pWR+mz(h$mѨ +RS)TFS=n,F>t< ɈdFQ=0GHhrFKwTF eF0vYXO~*QR6ܣL0Awىn@]B +mU+ ݀R'Xv07LQG -DQo)V;M_H G?b6A֨cW1RUWHl_mtr4m#7_W!=څs.mɔIX˷U{pdbpܷ)>‡+$MjHCpZjuN^S@{ojtntMv -JyaDbWȓe*_d6JܦY}OՖ"ɉrtj5MrסuK(Wf -8KLm$P Ћd.)֢J24W/EqJ -mUN@K m*Q|x WrKJCnk̬S 3$yEB|y4O&Ue* R(b">'~p숶#GjrKTM!$,n!I4CGw8giܻ&i|JhEF FVǨ{Ğԕ2D#kQ hѶrwڿw&Fs4C.,PXY^8}Wm#F+K.%F9f^4 -! Z%שd{Qrin=2G9][ PO56CN@k۷[ͭnBOLzG[ڣ[1tʄ){]X45LpY$M\6W8ncN\U&lz/xyC}`endstream -endobj -1128 0 obj<>/XObject<<>>>>/Annots 570 0 R>>endobj -1129 0 obj<>stream -xW]o6}ϯK!Ql3!P`IE1,{%f#*Iѿ߹rehD&y?=р7iL %Q?MGQL$SNQ3Vh8Ҥ?f||7O~u9x2_Lpv<NΣq<`˫XoīȎ!>G)>c7~alg!p0zy#֦fD͗(d6y䔋6!gi8$-HW8w-i\W "C/©'QK拴!$ zQ͓k(:.H1; {7_Hw9Ϗߠ -:=Z<bbU"S:pMCY7-_L3H8orKYes|%\'K4ih)$Z(YdѢS*X T +lvsYb[Li0.OH>A0𷂔1j/QII^r* mWFPsBWeg} -<`MXnEQS)u >fFI9 _A !&w v`}ũږ1@b0*3_XkfS-]JApgDvcyv@R@m wnLR(^8L=@R8({99 9t -piZCm^nKֈ@.^3~@K^hBʔ;k٢!+:ϙ»|no\pD,9KQe] /u,*KmR=wn;=@xRr%P3ύ LrzǕ}UMǓX˥WA҆`Sw| 6MAx2bAy<`B6 -j6&̶ h(|Nd>Ӑ߇M+VGzׂbࠑe&XvuFIk`t4O]_鼬pc˜s^: -f*$&2VԳuiuL$NH`,U&mț lMV*duvUSW`+^xzؾx鍮Կ2 `Qxrּ bڟ 6>teqGqmϝO1^KGxNfqh>/XObject<<>>>>/Annots 577 0 R>>endobj -1131 0 obj<>stream -x}VMo6W3Sd)tƋ -Q67%);Re)ؖHǛ7o7ƴtNi%#1|I4͓4 -z:[$׭|h:I8;La)>Yx8ڝKG&Z뱤8ixghw'ݺ7a?s1_.hFN;JWFZ:Oސ3sp&'^ZR(%; vsMƞ,CFt5&xL]dIrS! |IqY/> .D%Pٰ)G J㳌i!3AyYjox%EI8/U`~?Bd 2 k%)G$[*ĦLeax -#9 \KkM頊6c/3NɎ3Fwa]æB{|* A_ʓVw:|?:S8Vtn¦oO( 6H= SAWop-ЎEA=']ǯ6pâ>Km f S0 Ԕ"Be1&"X c3MeaNQ e5`5%=;>Ee"l! ߱u 3~kY4LQƎ W)+T9 jb* jqKܶUbL_!?5JY>w"Rk}SqCER8P[#3[{v^XQtڙc8vBYnи;>Dt-p Ԇv&TdK 1Ssv]B`+Ԁ9w^?Quv ̕f5CgQQr^w+b>9ɣ\>[YD[ h+=sI&ˏ=%\"hPPwA7xviBm(9ЂTH:]y3e]^31u+QVhbvۉ7*k9,;0CES,". uGUQc'1GC,>/XObject<<>>>>>>endobj -1133 0 obj<>stream -xWMoFW rrP[drzK08n =".%(M-6l͛ד\k.\^KR\.j~5[fdb1x>y,.dF֩$rU5|&ɌNWuF7V>ϓ 9_,aTT>!7vSlpo6UcK-Vnmj耞>ve(iڵ\}C\1z I)yb/0n}& V[Ze6K۝-mdycJ=ZZ{]J7cH iY\aMA5ȷg7.Vth -e2ewp;;xDwgr_ۭQy"Tۘ$^Ҷ80;U"]LߝiAŒF58M]>}8^UZcu4i3HϧTIn,j΍JḤ' i4*X;}3ߪYcZYUf/!;p)|̶bՏ^ [~E2<4L@@v cBP\5iIMWR]Dֺ)%xR-B`y:d:lz P ]T&| $mѠDMC%I,1%=WT: L!VJ"WQɤ>`bސ*pIײak |,H}zjIfXSՀ@PvQyih  D2YJAdNt ӔAQ6$5m(TIaRQRޣRZm 7`]n Rh,M|,eI%#ήB:$dmlt:5lPfp@Q(K46fg|dd h:W~\f7`JA˃~ux}_GIre ?7#FHG.UZbp݁n p ,-H?An4bǢ9aPAy h򭢜v< -@0vߎKlFw>GSڎfp0:s] -چEE6ή G ޸oP@!kb| PDv -;c&-S,`Dzhg(@FMk/F+;;RWun@̀XIP RD*q3ۇ1ONKbwթLa[ `@{&'c!& ϧq/cB̤pp̰I T?س`k1N 0uljrPA߱/=t#~X7HN -F#[(wlgIy.NtgT!l 1찌O՘ee0Z//?ppĀ #-F(#[+LXyscݿ4ޓMllu}'>/endstream -endobj -1134 0 obj<>/XObject<<>>>>>>endobj -1135 0 obj<>stream -xWr6+vrRflYeY=*q3+| DL @Uoiw:I"o{u6~fAW+J˳tFWs\os?N.|pMo}X]Oo}^>a{viI9mwZVfM'߼r:W*Ek(ᡡ+_9TdD< ڦwFz[۟g3_!l_5n7:^'>Rǖ:d:R{e|n:g3 -+bJ?.k#mK^yQ9jt+@Łl׶:E5<#)QdC_(MjB;Q_69Q)*DQjJnf)Jc(nrjMlQ -S *j6p>t45npj2c\7Rjy·+gZ2Й5:ɑCdH -EF5Y0۞&Hduq1Z#0iRIUUt)؝QTT"х`yGxf,xIv,L;kofO%o̦U`z|Kz0)lӤf?A{ 8SP|>Qp%ł}er":Ԑl&P]h#WGأCk.'3UZ71tcq=(.6H] > 2wtӁgA2 X(GVOUCnV׹EXe J ,4#jT158s攨a0^NG - %+\%rr%$'f_p 螖J w*&VDUW `D /Xi -:u.aO"=z9p.S9d ,Yowupc(Y;0ғ|G%!Xd(ٳT# Q$Q2`rrJaιql~ȴL  -A ^F:1fu~@!S@&bnOJRe -B( j|ЍNަϰVS%D8r2YR'lR2f:Cx: /$#@M1q0 x^9!7=LV*q{ʧN'xƔ1> }G}nP'(٢>":.4Q頄v?LhXv}…Q-8J*PTi,TK7&ׇLŀ((SE谭PqAX<|aҢ#,Yh9w;Nja΄El=@n euc>ak,2(钷۸t~Qh׮1aaƒPY缒lVۃV%VbQ\tU^{e W,&꽟߷BS\2MS3),x&aPE 9 2@1V$amDžendstream -endobj -1136 0 obj<>/XObject<<>>>>>>endobj -1137 0 obj<>stream -xXMoFW |rdrrs[)hoŊ\J\fwiU}3(APAjw>߼y ]τfS>ʮhz{݌?T|\\~~OZr{-$ɦ=Z\Wߍ 7\$^plo>'i>?'IQU@XOZnZ5[/v*fE~냮}F_ޯbrMkGn>lc^Lն:p/`A;mIenKS;C3UET*{jt`844Σ%m!Rΐ.m -f˜ -e&xӜ}EPߦAG06j䱾+Ac]ژfi8^[*&HhǪ'A+cIp&5Y9۵Ɵ'( +oȡ]eM@>=-u?x~ N;IAR*mMW\٦h?E_^į+bZY:>U#qbތK*_# r] Q}KF^KP[ukKu&VkiKl n͘1cjj%kgh LAaW|3(VR^1(@ώgC&dZ0M; vTڗZ?P~xH&0}٬ xZ47-s1O;mPA׀@OibUɪk3Zp/ouC7̻5Y@XS -s ၉`Z`B5汮[cɱTg -?ľlFH:8DU]B<9nnL8cjBTۢxܪ -qG[{ -ğyA~%;+qwah`djQQ}W61̤% -T1=>̑ 5}59K؀3덀h8Ɍ~k'<}w?α1]ƮQ*[6y۶a,1 ȍ3(^`6F~vaDǝ|9;eEAi ;g1J!YЭ -̎m&$̰lFyiP^\CʲlI{sխVj|5ģ0슾5l[ziU|4oҨ )`[zG*̿Q[Ee'=[s4.^ǎ]1D6r4BN ܭ+'WNn!P4qTQRwG.wt.V94B1:(ɱ B.426(OQsYA"sU;8(J_zzZ{I')&FѲH}L6=y HS#Id -< -YB1= -z !LKDrRO?T>/|A ^+h=~MD٧6x/n1SXVJh&hK|EGQF}yIZ?" QeWpm>/XObject<<>>>>/Annots 580 0 R>>endobj -1139 0 obj<>stream -xWMs6WΌE[-ɧ6mXDB"`Ҳ}.Hi&1}o.>9~4tFiytl:Kft5Ur҇d,^9;O.+̮`tt'Ƌ,n.h<sZfb -sZJ5 )zKsmk8KAk雱+c3z~GZ):W5,Ph_-i4&p9 ^l?` R_h9 .~pP鲦YaVgA7lh@!`J+hm -$> B?([w2UGπ랥(Н{wK ?K)B㾢E,h:1}E)Ѽ^#Xh?J ߄\D)RQcA -.k涁>.L梲]@% ^j1?W|*jL -u̬?i4\!hrkvҾ>ļ.w%vmQ*u>tn[,CB5mKvޭ8.̮ QS -*!mklH)~A,U -))8*nHj+ם2J6!`Xl9=5Y8?}[~j@'(!ţ7+te%z߭eܾnDޒG}X;xVn2Ѕ7Ok'PS@N |s*1ҧmK]81/Wd*k{֓.n)i' ~9e'yGՔfs~-LLg ?h>/XObject<<>>>>/Annots 583 0 R>>endobj -1141 0 obj<>stream -xX]oH|=H(=l|}yˈ&9Z!i,X-s>*ŴbEIq5ftE+ZnyNӁ`)\QL"SA1oO9}u?}*>v-zO9 A!ZDvNsY.dfKFxRynϞLӷ7”WNUQeC~![UcaYDU*t),.|nݔv^h3Jt:qfp=Pj eb=jTZmyԎJS)SϚ>)I.$..Nz.UJo̒lY<"^@ڤ.QsOxX"TN_|װ"OؚDfS1D lL. Y*S:12iM~y|G!;S-zGL-q pm2İ?]*ʤcD`OnpIjLJ '7uU]+3 l$L{MO0i8ML8_)E'Moi]8}տ 5L+ʨHĦdW`5e3C@\&s`tG@q#z3}Q,,Ԅgtaw+UDl07J'UDpS - 3ATRsO CBe[[Qj⹻q^iϰAčD{JB=x*b,vv# -b*L^tΆ2gUVc$=AU½r>)*,y;큨&=ąDk&\1Mr5~uf(9׆tI!!#5Iչc\^֔oZGʇ[iBϲKeCȹmw| x ^-f)2U.k b *E3d ޝݻC} 7X2 -! I1 :shSuw_EQї k輦@w+{MyOh{eF } GW -n Mξ$u&P2m]0~y)@Fݾu/>-'3"hm0ą!CR1Hw aC,H ϫ*[xP! s}h0ϴ9Kww@ 1+% r7P`p89xA8eYI+p+H<3?{0KygOsSƮ*qﳱg_11d¤F3g 8 b'3~W@'}ˍI~M)pk(|*@uIciKɄI|;tFb6 Zmy$=8+^h0xwvQ+]&0zW@~]uendstream -endobj -1142 0 obj<>/XObject<<>>>>/Annots 600 0 R>>endobj -1143 0 obj<>stream -xWmo6_q@QEcɒۀt]~h-ާe(H'Jq 9JuR Msoϑ^4¿f!W#oD !R,n@7ǫp<Fޜr -7iW]67A0ǡf-)jt -9vmX}A]t[cزn+ -`]֛Zt>eb2,Ve5E;Jd*ꬺ&UJd+z =3kSEGvfIIZR. hIt\粨DtA*YnDCx`+*}d\ni,b*K*"U$ /2+eDPRJA1 "wG"UÁ0fx8qh`Ͱ-栋 < F`q0*L$T;8Nqro@9YK]@Z.jtC*iS,YQ/JN&#.=Хճch<躌`цCC'z7)Mu -^Qؕ\<4%,P"#,^? vVX8P~ 7XI:; g6c*:BM0 ;?];^6Gpc$kN*"sjNz{Mǀk6ewUx.HRmdiGePZ{縫7GvO*Xδ~@{Ӌ\vU墙 C"KNlH/ymW'Xy(y_8hc՜qȖW}mgӞ+0R qg5K8Al_*M;*K.Dd*Q]1!NID\v.^0to%_,f]N \#ERnY; -F@j#ET] fZD@B<`Gg71,EFQ\"(qvRcuU5kt nl$z]d-Á!&ĥlMR7NM\Ѡ`~=i~Jq e0VFDAqV'C1^VD;󍢫cq>|yw6A-Bް}\ N^\7Ӈ_p?Dְ35i@ҫCYa_ز3CJL?\sx^gTMrV *:V`,KO W3Ee/\:9FXօd#~m{vwpJ=6 RZbtH)eh$BV$b7 -Řd\k<kq+*[2vr˘#f}wx_0Ac.KyThszڱa0ųYh Ճ,V>vNfo675oՈendstream -endobj -1144 0 obj<>/XObject<<>>>>>>endobj -1145 0 obj<>stream -xVn6}WLq,:IIZ,HIMG"UkREq,Z S9g诳"axyu&9~O_sX$ lt{q cqE88׫ϟpr_/Pt!'!dFZzUYUU1YP=w]ҧC8l9v%m՗ )Y( # -XZQ5 Yijf>uwSe-Pk%p^9ЇGR[BJٟkFѣRVel 9܂spґ"=V564HlUSK@H ;ʇdxb$ Yxŵڝ2m]<ĩ(`RQn OSsiV!,uUXLtZ X+ -ثVbzm)XCa r4C*^+cDVzʨ#GCm*|J[}66Tz~vus3F͓H/=I(o:vĞfRX -5ӠK8iz ' pjl4;<7L768\EsbFr|ĺ_%qLWKyQųAZ\jHCHm&8"m(dŒ &CZq -}Z9:i`yݫ{kݯj .VYqvˠG^}$o%˛IγF,N~kl|ztf7.fE 9#ml/TcȩVpMP;>ro>\p㹛gz=1g38:(/4]dni׷h\tk*w U&_ q;J186_ -ܭ] scG;KUἿbjt%G0 GW4] _c]$ ^-\лݐSAw!'vUBB%к]T8Olў&=_!endstream -endobj -1146 0 obj<>/XObject<<>>>>>>endobj -1147 0 obj<>stream -xVmo6_qȌboŐ4VyY#l}E:b#I5ݑR8Vu/)RD=sm=ׇcHV/ha45ä`9OAv^{f`p }~/b_?VNV4|ot t`N8_*a|d~)s!RNj v!e -^L@iTr.1YsiASS.^Sa4:RkHuQ@=ZC(h /A`.yX|T\.f̹/y舆9o,>X;pi-{'3_p]05KJ,)3YU^JnBFȔq\Y;.F8DY\滇T!M\+$]A!:ݧskL~?z q'U RIq: W)o~w0ߏTp#+Q73Lc%$Z -yf&[̞dA1n-a0 nJ ržcfQBs9"YkӮfʟGs(>qZ&6cqai)7kj|'LH$SQE5U85)NŨ5=hR0p-JE !Gt rBf͸&i͍.<ߥ51rbfs -݇I\(8h}TQ'e5wrչz:@㛳W;; "4tw.4aڴ pTؗд2_!Dm<"ys~vp烷5P^ x6^S# EQWv[uYbͰz;<{sL3MlHR|WW AT7DJaAs -k~p#B+NF -]𳔕0kgL%^kVG<ӗF9ۨ'|:$\/Nx #2FLw /S{ 7-{Qh2&)Czu~j -dendstream -endobj -1148 0 obj<>/XObject<<>>>>>>endobj -1149 0 obj<>stream -xVkoHί8Ԑ*!@ZED$Rv[PCil{glSu78qOocշ813Dy˹ 4F}̃,dϿܾ=!̇Nj?o ,X_钧aAHJmVRJG&˟n -(g)̞oz\եڧٞRp-|B'xRB(D1C` "U>Y%Ltg/kO,ohu@>"RSi%bn V`ӞEQZSxcT(sY5Q՞͈i-}f ]&xnsI6m2Xkt'*HD֏7ql.l9mb8!!Y3T"$M&yիߙw]5ё!AZ W!W&d*)y'N˂y_qb|'X6EvQmB\%*#QH5’X,u熡dJN.O/9"P"{g0#ʻuX%;;LիW{aPJk7c]CG_ zRJ&N8xsy?s -S !RCjkѓ^ÜId0SX]ap<ǣ $:h WyOendstream -endobj -1150 0 obj<>/XObject<<>>>>>>endobj -1151 0 obj<>stream -xWnF}W HI%9AP$MHQQ0PȕUvI+BH$M wr̜ᗋ1wL ]O)+/FɈ3 I+nܜ{q};Nh-lٯVsJeRuVKXi?;ň\.r6E"G]?Lx&,jx ߮#7 de޽<꟩Μ!Q{'[{U-UQ.d+Kz,+i)I, ILWpR N&Õ)ץP\ύ ϕ{/QyADA %>Ns,tR7p.Lj2w($] Vzt@kEZ"mP0ѳ3QhpU&j+ZiC9T&m܁"I;Q2.pOR%eƗ}ǢkNݕrB5p[IKm%Z -%}kNA+{Ƥ`Nq <\2{U>r-uxS=0҆kr -b&*%Ijuc2VGIVP ́`=P(mֲ3Zys&tG_)#%%'߯1VОCu q-bҩ3Si#,xj~ TYcT} }8`&?,&#AF,A;`Pf[J/=l3 n, 7qA;@=-S u# duE&T,2+mJQĴÙ |`5a-_mKt,*Yqq bw? L˼! 5K)jeS3 -$9]}U'*".Ȑm,w,7Ofɘ1=rO'VfΤR&z{1lZNAfЏ  -^;/َw3Z$tnMf'Mqk[Q#t* *U `ʬେ6C& -ހG3!%66hmK;4TeWֲXˍûgZeq8%2t(6 /U/5v[zr.޹!NE('u8q#rkk\x!g.Iqq1'1-=QU**R9A[BBO[ - Q -EՠtH_nO޿~E_!ot֔$0^& <~X\=,҇-7d6G7l=yendstream -endobj -1152 0 obj<>/XObject<<>>>>>>endobj -1153 0 obj<>stream -xWn6}W 6}pX@zC/4EȤU3Y:K1D9 aԇ!M'ׇx;& ,b1? ԭ1{*o~"<5emi],Y ҉uj+בPk_8nK-h%)BDoza1gƱR(=ZJM:(r Qrqm39(]$OŹN\ՙM_fVX+Ѩ30,$axͱ"?+nLR_3B)LCkmX́;H~ϥrWBxNIeO4q?nMJ tXwe־v&>Q=V_]S{yjT6ggfA zpDYBCr9pX130E8U8Nj6!'FN~8JX`7,S,A?rDiB[A LcNR? -T p"iY  # -1DьSg[MVqd3Da=j%)3Vtjmkf,` -Jw]z#\'H۳[%, bJ #*FAD\^7] -R#TMծX踠sĀ[3 &qnD6Tƍ#!ZءHEk<ՆBC.!4 Ns'fbKI VZ$G_ԋ8HrDh_:~R7|5\-V&(W٨r4sF~*'kk/`\ZXbzQ#KF}=kCj&C^xxyn- ]s{Y{ZK*D)2Y#:e-mXJX&};X4Ӧ|ǟܮ؎kYޭ!p -^I 2JG+mihKBZU"'ȗ.84y+w߽4uD6zYfu7F/I?CS*?r{s}z ][{V>p?SAo81Dn54EӉU)Int -%JIHު2Te.2k ECvdfa8Ƽp7v(~e\貔cnmQUyn-I޼Rg)!m? >g'O&F{G>B #s6kci/ -LA~*DɰKaNpIk]I+Zc1#"5y˷K|;r` d>PIZ'`ڀT>1&8_qu]Dgg}ƣ /'H}@-@A"D:>wXԌ6χ.؛Ks(L*YX8},:=;n"Z(~ya -_ @<.SmB%M,I]M{_kaw>/XObject<<>>>>>>endobj -1157 0 obj<>stream -xmQM0WqU$ -WxI="b[ɌBGi*+4ՆmZ /~|Ѣ?1z Wzu'DٖxpVM)gόB0,u[6̸Gb쓱w4G0NHNA΄Gx_LT -) |xw:MVVguΚ|썌Qwr|0 On! :0b4!c# &;qK,͆|(9O!M&E'uԜԳ&,S*b'k7_Us`).(ot/6Usq3Ný_ºp·lf@fއ\endstream -endobj -1158 0 obj<>/XObject<<>>>>/Annots 609 0 R>>endobj -1159 0 obj<>stream -xWnF}W Rhočqb郁bEMH.{f1$"ڝg ǿ& ~/?:0h4S) ?eЉanWit {B;MN4 |l<-.i00`u qīXսgnr99OPO4K wRUQƮteY -)D*R'/>!;+k+SMliǻa8{!aa@N;TQKo20lL ҇ɥ^X++ 0ņNMEOLJSj8:U*<6Yg֦N@i*7dJ' U<`+REBJr"b0KUUkE6emlR]zmviȳ 8%>KMnIg7 `mc{Ow ewp ZjɤN z~.م7?ރ `BilpL!]U&d;ŪN;[]B3BbU]M|wLEa j+_1!Z4f-o.>BjVJ*-ۦ3 >Tt:?=RdRMfjZ ->"k@3!d6U*=vI{d$@N%&WmU.Ll -QP:߫M91:%'p6?.D}t\fjxLeEFVF(2VzB-X 29[8 vvy -^X-L%%/g=.}ۻ۷AZm5G!BURcmU?WPن^AXk. - ZBE9P'(h6zgpKUjWY"!bD{ =xzv5&nTraec4 U&} qabE4$~D[FϠl 3aK ?qW_88AR˜b CkYQ9pqW._(HD] x]+cgi+):yCqބZzɤzU` o 8j#'ATˮ@ ?+au5جMG0'd G2 -rmg7ӽQ0[{f: xo|<^::,nendstream -endobj -1160 0 obj<>/XObject<<>>>>/Annots 656 0 R>>endobj -1161 0 obj<>stream -xWKsHWek+$a 6r9퍹l9 J4x~ݣATV߭'>ϧ808{c3oBi7)I8 3 H -g^A9]݃'t+Fc<+(H^Dg4eĠ(({ MfgxXP,鏧g"PC:Qb3Džcj -Å3VTPz=. ŋIBv`ƱCd$@g=_ @ # upj-\ ]}z\|z\`2q~l8=nvpH.'~1 -/DFȏiDDУUV&+Wd֚UP*TV24U+M`7қ9xYj LIaqUYWo^S֒hS,LEgUhGTDjXR[,yYcx2(+C]Ԇ6z9͎ ]k浾#EVO2:] -Ţp 4+XgjY zjeD?gմк<+mfBQ.6idUu l(BJ?TQ皘bcM7p.Z<(?̥G|^B_:2^6K /"[PvC^j*TJ3 ._丹VMf8t (ZsVS6y銈R\y 9B7h-\?# Ep.8=Rι'bi,V -)JgMDA]h\aJӉ9~/ -euD!7ZI\x|Dշa ->"d8y$XNqTK4r [j=_KrKpCw}`.„ХZ:Gz6*[ϖ'XXx"\r;7^具6=Fw.9F'wQ5ӎtR:шC< C?‹4aO~hMNhBO>Y Lendstream -endobj -1162 0 obj<>/XObject<<>>>>/Annots 661 0 R>>endobj -1163 0 obj<>stream -xWnF}W XNӦ4Qч(VbB*K^ta(8erfg@!])OYwǀd4fCٔj]N~OWφ2^˚./g&G L HZx{ɗnf'# hX -jfygdy:jBעTT, UGCXO%Wxt.f"6FmVtI Œ!:D;7z AjS6G -ܦ*r4ȅ cpl}:|qѻJ -+p=> -S|Y75<Wj)dA-qT֙r爬尐N͎a4gg`C@][ @ #^Uɗ.\blHOJE,ފwU>+5RTՆ>7%y%^0iUq+@gpsٕ9mt÷8<(@DQôG,jA+aD HB -C J,q"45[dݦ$\7ʥ]@Kw/Fba66Tf:.{}jcF~/Dv o/>8 G(mnp|$Aw+kč%瘂ᔹ?C)[ ѫ]c0I5,rΆ+N -g0b -4ΤAOBC-gڀ!ѓu8a8vV誒&G*݆6*|dLbP))Эcy)X]q\Ǽ^A1E:=$Blmr=@ԞkkikL0"U.Qķw+P`TR-9Y,2ȄJ9VZ3RsK0W:,mݷ[AIbm>^bA<C-Nh\{:̜Rh7̯d8.ДX@? .0 "A}ơBxIvYw06]mn X+iwxn7Ġ(%Bv#^LY#׈ݮ*xpb6+o+_`atyhjy7  2*AXF{@)h/ٖQ{#oJiᡘ - I(\\]r Bby$s2tK#%F{-4̶(S6aKXirǁXB X(Hj AK<_/Ł|ܩvfƚ -HÙth-WǞj@tivɿa"Wendstream -endobj -1164 0 obj<>/XObject<<>>>>/Annots 666 0 R>>endobj -1165 0 obj<>stream -xWkoF_uRD,JdIvqR)UE]'$]B)<Ҳ;{v{IJ}Ki`DyuOxÿR~C(PEQ2 -%ݸAvi8c[Zd0c6I85p*^\0&{Mw=4!&c.>Mt)=&פּ¯7VeI 58]|$-*fINX.dqFk4wKbSk߲>uA b.%~ ]64PSo65{QJs߅f<ٶ,YsG[*{qPva2dǗsacFnc'xVew=7S7 ["p)3s'B(Yק; M37THj(k9yD>%Tu] Ƶ+f֔8^njAoScx{: S Wől Q̈́6 J37 i&a(pȨsơriƬUvet~10"L)h@8N-\_tKx);Rnt&]YkFr[+.O*g) 꺵6gPϷ-a[ͼv&O:uwTMUqdozڅ*H4֝mmRWP -U2xP%5l}=8qΡ v{Ҿ{͵\ǭ[BjY3:M*iF%Y?rO+w]A*Y(xQn<1;\?:gz-t+JT'cA|lXɏ%a=GPD +]5//_J75K)DQh RKBR#[,c<))r5|)Bױhc:z`-931JbAxU.a#=gxS)勳Sdm#Gq 2dFKQ/\@~* ED`|ydCfô;[:o]_P^:_oYm%$K"u9lnȔ{uvYݟ|P )cvXsX}UnZlh*ۃ2t/Ccq=}IX鴔 Fpp';`5jҹ$ЃOzPnD 勔6hʹҏsp堭zqjxzPE C]C(αzz'S#?+ޓ`*L-+ .J3_p$9=o$%O,(!,V{xtz{S.v^YC]Kᕺ6tX3Eq>/XObject<<>>>>>>endobj -1167 0 obj<>stream -xWnF}WLf -ؖha+q!XQ@/+r)mLr]ҊgvIb4 /;3g93|4~i21E 4tGk$%G׋9 HtB`@(xȜʍJC2QiI+=JK$(֙P)=<[KYmH$HWxV1ڭ6ŧgqr#JRzR\ ݋l%Hęʕ-(ՓX*)27v爖̿Y%$ZiхV)%B\CAծ|078 n6ٍҘ3[% P˾Z)Q"oӿ;\˃,{ Wjv.+ʨrs)=4n4Ϲq2 -rG:q|M$'G -!̈́A|L}uLDK* -&D=D%)զ*b:pzw/3lǻX9&LH]vQn- 5Opyh -=b5 -X2FV2"ƈt.χtkv:ozsj `33?U(j+6| iMU>W>3K}9s{Eε"F367tHk 3 ᙐ̓mP{rEY$UsĸNƎQ|Y//6ӖwKi#)mnʔo2:Db*AlAv#ewW]aܽ4[=pp:!Ha˒gxha4{\>߿_,I~~gjpSdnc x^&( NkUFΒ.ONE6q%bRoњz=N%\3e"5VLGl)mh 3K9Ŵ}:_ႦzJM cr0\/ߴƕZ;x'#I"Tnm SX\L\nq -n>X~# 6'sɶkOxN. /yBUZr؞I>{4# -ԴF{Q]0+tO =ՖMqXǻxEdEp9|C&?Y6[uJ,5~kWX#v a4Vk1VawfL7ķ..~j_}}k' ²^ ,Qo2wwt>9')d[s dendstream -endobj -1168 0 obj<>/XObject<<>>>>/Annots 669 0 R>>endobj -1169 0 obj<>stream -xWmO9_1Z5`MҼˉpEIHw!.t%3lR<3G'>4pLiGXNfшF >𿒴 _13DS}.(aXti;؅Ynk]`>zm;?[zkNhҾZcw6nk]0~[Kk<"sivi7R(+tihrD?$ʌJҧSJ*Q+Ju&[j S]dv.N2Flw>hTW8ou\ AbMR9eS|#~'F+YZZV!ߵ*#>;0]lu!ҕ*!%fPlW^k++ -*& 1I<qS[}18ܮT1FĶ9ǃt/=F${IiXWݮ}khSpv•Ȍܾ^GUޓ S++bI[]@kW GfsdD6i֟kR!J#?5V6qCN1.r]2S)𔔥Af.V8+Mұɣ@-[c}en;ɑ)Qag)RȤBq8-0΁K4ЕPu:[&_ p1v"8Hf IB"Y c6-]zԍ(E4 MB|EI2S(ovs[jreGᰜw5BZ< I[)N$]T䋴bSk -P &pJ4M{,F̵-Juexe -0:)0=O3H -J=+Pd $[60 :Wl+=F[EWM m(mط@¢`lDŽ -dUH8pđиRDU"roN񭵟XKR7Y#]7 34*u^Xg0_.84m39[w9 d̄fpK__`4>Y -7B 1T#A|3#gU8P-f=1J FjݬbVtieeΨgcuO]h.UZiEC^ d;G1+n|>"o,wWy'[6 ҙܴ;ox5p<i4 i<2ޜ\~>/XObject<<>>>>/Annots 674 0 R>>endobj -1171 0 obj<>stream -xXr8}W4[6e],yumd"e2$I@C{ARIʲ%ݍӧO7ŐHg5>!|h8F4Mkh2wxbx34O ;^!&є&?\bp?ᐖ#\W?I'Hvݽ7u ĪLൃ$H۫S1Ž<*QV=TNAW!a.6ox  kM:@AiEް*:ŊN;%Z9d s3)-ZGr5[jQ~ =arX"B;sGoXV(zQ&mT8ţsݦZ[zZA'׈?`E*Tܕ2|J7vB&#9nk=jEZΥ~ʵ6jeu0vDM:Tr:HC -sYls^*t\bf|y,FYͺdƣr<:Fʪ{ tC4dmװV *0Ӛyke|KE)d KMh^)H8XWi\cI7PAr 2-q`盪I+H9&sC 1}uzl6`~1?. `[{V -ɩHdƈ'=[Ӧؿ ecD,Y>-Ow~]Dwޝ[K,xYs)oL'ڦv˗R=q(>Tyrk^|e?8w+uAp-n|ûͣ-~ oqh7BtBA+:!1CL#yW1j}Y2|*%ބOBʪ/^ ܔ -4$ѧ)«lN:ټ.%=c\i 7J[mupC~|FbRIIsܹp%õȶ^@Ǖl2ƃ*w(^$-"($°RA*pfUz D[/>_܎i: 㻷9wam)-j63t{tn6a;wˋ/Z (|endstream -endobj -1172 0 obj<>/XObject<<>>>>/Annots 679 0 R>>endobj -1173 0 obj<>stream -xX]oF}/B>-}Y8q56Nڠ^F䐚a9C+=w(Eۧ],~sν_/4)f4_R\\L ǔ?~bZE Z,Yz~b~5h1fX.e\4&emoBdRr{I;i%JdXbrRSQ"wu)QY]. KZ;AYbjJom)2ńF9$logܞlKH4 R*}^8xg{eRc)2ihoqF:(6:4)ɯ ۈ6(K'`%t&)LA^nKc"SQnNh{9E{uL훨12[(ЭFudE{iS!ޠi'@TcS*d}#j «lo|8QH4'S(F׉S|PJ(-*siEJ8'Щ,7.:96q7K? Wh~'}doRUřts[,ēMm@1 *DƮG"wDIgfNbAH-1@Ev+3ib%CӁ\ -놌-ʆ@*/!<ԲxbSJjO&G{nJ }~; "cǹ׾m(.c<ųG @TĴW E05fm"$+ O!Z.K" jC_g(fRF/ek@Θb 'c!*tx-NKZ Hhճff:[Z@E".(Y"{#ΕߍLJ!=~:{"zO" 4dJShKOZ}|F{.;: 2Ss#z}O~ZP@O6}Gq`>,zTqeI!8bVCpCh.H$"BC -txwwO>1-+dRe;AuwYݫgo{od4W5"gneQr5|XJEÚBٸ6'1Р f)g4ȇk<:GWYϱUQ#EΓedWd1zHϟw[AxE9[B*ocKR{uj|l3T1z8zmF@46 0G|џVG8i`j<5bkA/\L9Y6{Ujxk`+\ rO\UIC q4_ m$}'^!꙾ീvܪst* A¶v`z#j>/XObject<<>>>>/Annots 696 0 R>>endobj -1175 0 obj<>stream -xXMsFWt)) ?˖,ŎVdZa )I6.UIfunvҧ~4pLIqҋzxÿۓh4D*h0G)dhԿ.xqrċ$t=ڋ=)V1'9;ĵ|̫}?_L%ɓNPvx9 -g=du0Ʃh,Z G*Oz~}sA>͗x:y*ht޹ %n*Ӵ4,]!4.X~y6W ܫ'=:aЍ~й[ó `aPC5/:= u풼;##"`ޞQsIԈօi*qssŭwfX"vf*eMQS7km8?ϜĆƋ&fF.b~">m}7|?aU^e^ejM*/7S)`-37gtRzGZ D=s8XLЄu:Ru징cDf|o;㓐׷of`*#IMww{47P $kx6\%q?J\o~][_W0(d7{M~@x0+60I[BY($tMU{>DɄP!&Ѵp[ -qK+Tof}c<9}_n"5&"E.b R3gt *IxF<=?$7=30)}OkVS$"ݡ`hGzv[ّRsRþh!b *K$m$bwo*kq^Cv J-w7RV"ZU@k ]VE̱Ũq'Dރ2Y(9H\+wPܱo-zWh ŗk[i3G[ -`{_ժT|UGOc$(ٴjN}e -W;kLOc o{ 88 -W*|_ː Fm#frΩ+'bjϡGwW^ --^T[b=o2XxYC -H>17ڥ4g %DŽ4@u8 *!_.!+:[ijk¿[pWHVH]aaBaرQI{0h&oP%b^,=ڴ'r̋qi # OYK+𬳜-/"Fh -\iu}G-K!aONd81q9> t=?4[^rGNȚeӂ OrџZĿ{3GޞmVX ;ae^ԟ~qxa_K<2L28*dcfc_ 0k 4LjđM\: ')d$*N !BH0W%_>)M\{ts!v"BC5} *k@jSm٠e&t~Yi7<^AUbAXWl$טC:gf+iY/4|iYO:endstream -endobj -1176 0 obj<>/XObject<<>>>>/Annots 701 0 R>>endobj -1177 0 obj<>stream -xXr۸}W܇Tȴ$ےcg3f$(l s9BϦ4SZrNiu6I&?/dIIrEMO:]^%t=_$3<]ϓIb.j3o$gw볋OW4:3h3z֪my|B% JuՔItMΈTfDBndڨFgi6a|BKĽF*jI>>SJi 25\^Rfv=JW||6t8乔"Bկ8ȼ-#mepNxCNJ֎FTL裮ʤFX/rFr/jGjqTQIkN&r+ ޟ7,Ū¹T;V[ , CGe̗UC&s+3L:m9l=df˛dS=N: -.xHW@ցZ>ZTi3JqĈ %5%Yte>3#+^mfG#*k~H|}mvǔ*}%!/+R"й>8h66=ot^k]h+O P8 pV(/4h,&g&/YmhQKќqA^(*:uR'9G-{e@iں\!p)CAX[ >1I3=πNf`3F742LpsɼΒeBjZ%.諪3}t=гY2L ʻ =e Q:lkjӢ3mNբ_<><% .W0,Ue!ۃryxX۲3–1Y JϣkȤ9Ȕgcӿ-|5=ҋJ a2~ -62ๅuxڼnHC'}9ISY ֠"x5S9H%kdW 5j:>کTdsja09wx칀Ԩx ,A$a *_ B;QkA/z$CŌvL'ቈPjK38}3zZ'l4rG8Z'&o/`TR1LK㈛ ga㡀 3VВؖ΅*IďBf-nKp4N|"N+ch?'4mU*J|/ !r|@PTr1ȦD]PJguBb(xQq jd\qjf(CmQ)u/yXiҙ, lUgۂ1Ԩ1a :86\qu2R+{z{ٞz000r97 ҈w -3zdv:([  -hv#`]1<35];l¦$t<g*<ˆiBaf`keä*0c,e')B2CaѯyG^]ֵ0#H%;#X è3Ry P F^dIm%8=D!&|XRYY j ]+㮆g$<3,}oR-b8^ m_1ݼ~65,#r0|% 5,nZsPۭp 'c}'HVF5"H'i4]v],q<j஀ʵwd+VԚC_ q*4+6Xvb9)sO0-_F!A\{" 5w_Vo1a4;R FN G5p -I;͑#|1hšq 8x<;%@6/994c2>9oXT?гK߲\*8q2y-2~; da/w;}NAwB5·K/|~1K'0|UxboE*Y̗j ~}Fendstream -endobj -1178 0 obj<>/XObject<<>>>>>>endobj -1179 0 obj<>stream -xXko_1uQlzXEak;eE.͍I.3\Jݦm8<̬;h:ф"?dz)~Ҕʍ4_/42eٔ -e)΍.k3]Rb#EjWlKxѮ>mf _xQ -M6 ^vtAgQ4WfSG| ˣ 'ј۲q oV >WeBN*Pj+֯Vi*¸OgRue/;{oR;*M?u?OOwD~ĆFtj>ꟶ:NA>9 G)c0E>25Mj/]]51vbDgac*,*W03L5^bEn>JnxYALi}A;)C( |Hxɚ$°F`p~Clx.!p2&7;~p۱7}cQ̔q58Rz6DC1>*9z(Zb5yN*w^鵏Ui[ma4F~a.TQaALB9 -UBIt1lCQcV4t' @^6X~.O$GʐŚJ^`xokdLo3 20Ҿ)ݖMtc{]<Ǜ;T- -<-@req5N$e{m5m0*A\gU+1ӽWo{a|8!cwߤs|5G]Ukcp-CrlUyW" F]u6X`зqx> #s- QiQp(؆Qf^ZXR [\YfK2X>{V|kfl -n!:xc5nBlUt Չ z?4#ʉRW_^Q\eךWXWD`d]?[1ъ#t6bb6y&X39R8Ա)w4y~Yp}-nD2 1a)fP&r66fzRv,'Z]y?7e4+El=\B %eo/L$nibQ~S`I:b#}H -WEˀoYfiT4\h5s$@:rpyka#|ߞ%,'C F -eN& h^}#a)0>PZ=;uXOhD]=Ҡwp=‘işODN=*m'N2Y~ @C̭폠Xj08/ѩ)G'z kExoED[;c -j2Hi]MiDO|aj{ݤh6DMgػx|Z?~pll%d=.۔f NF4Ӊl[+H76nx_)LːوΦCYL }<[]_qendstream -endobj -1180 0 obj<>/XObject<<>>>>>>endobj -1181 0 obj<>stream -xWkoF_ `$F=C6Mm<>/XObject<<>>>>>>endobj -1183 0 obj<>stream -xXoFb/rGvIѠ(+ X+ic.# ofʤArg͛7o99]ٜ/k<_]Ң,fEF;O/CήMmd'\'Lgg5)jv6*ƓGM(l5^yjzAS -^eч\[] >lGMh7NU~D.htbb8x9G)KZi [I*Q"-ckOe\.w岉hU߮E48So$Ne2kg+*fm%Z#l|ۦ+U~"l8j3H~kFmko? v$t ǯ~#Jc*!p_*o-=ٵڡu!Э-$#@":\Z;]gvM{ۢo}u pb^߁`MQhL9{0$ax_K8=lzB|g:[ҽuIOw^ YDP0tP5P@KT@ପnGPd8Vmچ IVMrN R<#N׌qE42ѭɝv{4=p`ADG)-eE [Kت3r{7M2m>8` F0~!Ξ9cSvzGhs]ZU"?Vay wT8YqhG"'y4ajLN' -u8 mn:I‡hE+HmXa"!7F5luFTE":bPcxX}K&qee 3  As>ͺ]Z2x$.O1exѥGH_G?2r8pFNjqdLK_GKϥ!e k tG< -iذjDD,cpZ.:PM{n Ncc|+ҾnrO_UiNDz oJ$>^X54c)pNiSAGh=? -ΣBwj"`eH`נH7O`%` מ|s6c(6Qa;T`[͚m^,}`$#-.4 )Ϥ*9v6*1#x cm#`~(GciON(R1 _UزAV5jz9]>/ivP.Pu8ϘpbSb,1AӤZRAj}ƴgL0 tX\SMd="ש^Ay5%)p2rO.ApXM~쯫} ؀^h)vl|⍗H_ѧ>/XObject<<>>>>>>endobj -1185 0 obj<>stream -xX]oF|8(-ɶ>'nZ*" -y/"yQ}gHNݝ󷋑HLz"b |?ofS9ƗUb}~qqFFbg'X$b_L%:ZPX+SQ9e¬ų5kgH<OM'|تX^fzFԻ׋P F/rhf2(P!s|ק LQV|Ύ[V%eDgANI.?;=)Jd=vBZK9g ?Ƈ$7 -2+ ύ*"4:۷oǩYoPA'!IH+U̎lwF 8V>  Ʒbp=&# U _31d;$IԪ@R;<wB !$sEg RA,ʘ!t*ȀtIsBl)"]3c2e-ZBUır&Li!쎜r+uyF椳>w0ptsז}[Y*10JRn(ND Nڧ]\VR;Aʁ?'|a~ Yh8EJ{IE{o!>͋⯄A`$4p$;H,` 5#ɞ8̮f/\bրѧTmJ aZbwbOT(#:6N5bmM6 !|MUSgĽ -EH86\/_w'VTąw]j,!^zy,lvݘw!*3^,Ծ M,N4,s2Ǚ.D5=r\tHh8f7uݴTVP/p؞ #T& }eM{7kʲk N;˻%<"ƕ`Ul}EX$3_Wbij,T6YMVK Zxr{tYB!,Zdز( }lYĻ@Ȭ:ϭ(]_G1SWKxL" E3Wf4Gk&Lniu~_1s(A`:Hl ֛wz,p{xv;R/z54/7ӛh:$Hb6X-.dlendstream -endobj -1186 0 obj<>/XObject<<>>>>>>endobj -1187 0 obj<>stream -x}Wo6``[ Čg~H8Y!%:,HwjZ׶\ݽِ;و.g1`(f4~Whb/~~uviL!4hDDLsZH7f$@VϋI^'NzZ-K!Q^=iG=TgTv3\ڜg/A߸(f/S~JD'_,;Etl:95[\1'\QyoE XM.ukzB -fOptN0D!_kBdI3QJlҿDh*\rwtWn'T?+QN kRe+S[[/ -J;j4xy3Қ:.~ɔss*J.텀=Rh B:wep\ob9q?VK_-C!(~کB46N݊tRAun9 UGeMAs)wT$ 409VKgWCX -9|xkh_L#cMt>W /G*SG{ -~Iɭ2 <5w]i0`)))z;awee5fdc-WʂqxA=ӣ/^A;Ѻi)ֱ(&7;cy3 @wnaL\XFz}xpN{]u?#m7/V8ca8^5VvN0Ťo Vf%tj)OUg[>LZF D# aAEZNLm(u -%,aՌƅ/ -cZF9FnHSI'\]%b,0]t4+1*oEnCaXUqxo[|_^NzQ&Hc%k-28ZfҸ-\k"6|7L]Ntsw}|p\}WNj -76Hh:3 -k8z^ B `}3a7so<9Ț"/wy&dagCl<%g#KSm5ΗU+zT|F|2%t_< ¥qu?endstream -endobj -1188 0 obj<>/XObject<<>>>>>>endobj -1189 0 obj<>stream -xW]OH|W"EHa N@; e Ǚc8] oFGs:XPR;{_i68]ҼY k+B84)_4$Z&*S Ϧ\ *+ᔮ8 e GRiWgRmUꍥ똖JyL$MKΊum񺦛ޜ;b9Wr_OVbQ]̵MkmPB ?`}RT-R}o[G5ޅزB -(ʌO@KAd-\D^k^bjr )蔵]$6}=@F9% -O` 2cTP*Y W#7p -.d #Ad<^EHBVOQ"}o&NY-pBF|EMJxRE*g١ĹWɳZW]B"q|0Ƌձ K˃a OW)Zd0l C b fj=ȘJ074 -, _Irrx`{ʾ_֜(f_[^7A u`oOVx&p}CַZUq0_X6,%ǚ\-5%uLr"7BOԓŏКNn`-v 2PP0o3LQ~m"v&Mx%7w+Io?V[((R?X|qF>K :1F1Gn/㿻 \;+x{y3 {X) -hK<$y*c՞&p*}l6P Ka2kb*q8eWs ޣX8ޗnlG>cbs)v\ D4_p+ӣ9vlG?1Kl8-u]Vc`z;?'uxtKz|.❿v\9Jendstream -endobj -1190 0 obj<>/XObject<<>>>>>>endobj -1191 0 obj<>stream -xmT]O0|ط+M)M!p9xqMk`;oG;5{wggvALcbJ&t>B ј.$Ji&xo<ǔUH e%!|<Iݐβ:.IZj(Flȭj5K—p!B5ؾD'`LgY40CR\cɈeW2 -P٩6@ȦKI6NUy+ݔTi"˼ϣ[,)$JIDLroX]-9}>kO-b}i2Y Eө_?Wendstream -endobj -1192 0 obj<>/XObject<<>>>>/Annots 704 0 R>>endobj -1193 0 obj<>stream -xW]oJ}WԗTRU壹C܂+}X:u)gv`ܫ*Jٝ3g Ͻi: %yo _l|:h|§lOY4lG$܋bM^{1qIբwz{A!-Vi2"uIrrg}[.K+<%\ސ1\V:pP+h.˴uc>8#d%keMTkvz;8GFS#WrNה U3(CϩOe&'I!⵰Dˊe&i/\u]?/BtoTRKzWZӉcCO__,`f+úuzWPy༐jP}*F6QoQ- -.s-5tN[]=+҅qv)РAA#zB}jZ( *px(d Tǥgc+Ağ(O6 -o$nܕt0>W) -#Z #7Y]2SxgI#ؔ;S/i)#P#5TVz`L'gcMWu >~%h\-6ThуDMώH !p!Fei8ݘ6L9o.*NOCߺ:j0hGբ'W|ד*J\ּD;l39 Zk.*J:`(i`C4sGRIM4)n?jiVip84$_[#U"hS|vTZ ^{: +m+PLD7^VNVCVp830mZږ%LA\>&'v!.@B TxƜ^TcR$ nTz )ǐQXG?&Y݌V5:9bW`g&U+p6uဃG@6 LKػG{o:x b4*P -Nu"10PF=ɗJИatn!]4#{ՂWI}l!IH!4{=E- n  ["l/yA#[#h\+iɗف}'c>pe+È%QiB^0e4fBNwlBpqX ->07>CWw;;^M҆9}_IlڀwLl9d:`g0ORbabi"t]4caJ7^/&Mq#t^0ttģ /5y1/8Nf٘s {֓Lendstream -endobj -1194 0 obj<>/XObject<<>>>>>>endobj -1195 0 obj<>stream -xWn8}W [l@QҠyhE( -Q6tE* Iيd"ms9sɐ7وSJ˓A2 d>*I09?K&&޸\ޜpBNs|Zod diI7S=Z'2r3RY)hWՇ<0Xfm-ϗA8 -  -j++rD کT8ZXGr0G#zrSЭ 9+x=iQJQjoUeMx6LNǝ.CtM&Y4(G+"}2̾?Nv 4 -2㹒aMhaHGf#5Y֕r;Zƭv8ghe!Sw]_Q6VꇷGmU0Q%t;.%mc,xrn)dƥE<\&I7G䰔=e2_"ꑰ\`fl*$m?{@QB5. -DHK @b^IX{ vf$tUtk5|nmb@%z2$q;TKaL:pG*LuLV֮E{ֺ|0@8Xɾ4 \ - tNBk^!zU)WBVlzh=IV*d e,6| q&5ZwN:D5M!KVfXBIBr3@f/BP*85wO)ġpk3GSF5ɗn (K~`?__Ia?qœPX -;F DJ,]X<݋ "ZxR mӍʭ쉶կ}@'1rLY0P$lAq4{\\cv'-*=_R@#*PǓFNU?;Q66sg _3(VFbQz{ X|ۢtu# N` J,E)X4Y2R݇tFoy(V?&g‰DNh+!J 09Tԋ{Xh4yGtBY< -m0{*awlU/؂e/'BQ)OB"Z<6jCh?8 rFb 0d;5䥓k酊!6uL9%sV 3g?^2@I rIKTCHxf)tUܚn;Xs~{$fװ1+NV{V`i6;dưcv$a0{;-'Q`͓9(7`VڿPD:ap7:o^28R5\{lh|=->fr8;|L~>acJ񲂽Ŷͅl - Φs,p05?NjYendstream -endobj -1196 0 obj<>/XObject<<>>>>>>endobj -1197 0 obj<>stream -xTMo@+F!4*bCU|e=ƛڻ8kCBޙy͛y0O L`!&QtZ˖l#T -auyq&o׏1i4Ý"\_CO˙ښM«\W#-_V!\BYdNn3شPVF# @eYf*"U"0 7VƗ;d?k]d) hzj@"g/yĵdMYZ{g]_G8l_Fq2KNZJ -\pn5T4/M=N8 -:;Nzf͖V9r -moX&g5@08-oa Q |7k tv@9ۗ ]ZbO?āW=w܍=I)~ՙO qHC^8SE;PU㈝E^> mkb/Nٿ4n GD:<Թ5U#7O/,|xِ*8V˨)uzCR9,s1 -ks.!4g~+ذ!`mk>/XObject<<>>>>/Annots 717 0 R>>endobj -1199 0 obj<>stream -xXrF}Wt%T V֊U9b1>e ɉ 2t@@RQ KN?.b㿘P_1?b釋E4dM(I(Fbu3 h_U?Cd9KUY~_' ,Fhl#͂xY4*tu -HO!_)`>Q_8,K϶ -I>~IcɌG^om4`Ajrڑ;+]x@C{qNRt@AݒVs D0@`uҶD.̂\tEh)'lЇj+X=޿1F?~Gn+Tb,uU-1oX{rCN}毝Jp݇^)LLffB0YԝNF_5BN:"-*E/afWz{MZoaipؗ3- v$pwɺEeE֥IG/?D*XÄH4.w;W:!wwiȸ>t q?@Y1/%{UzLm3)4FkI],c'IaQD'`Pz2HWB+Ќa%:ē)Sn 7P2fVWOL@쬥r!W@{Qfs]zk,Jx^Qc0,`^Vn$/?U{Vr\B:";z` 56 b&xHo\|zoV}ZTqGaĚbbM TCXa`y%תjq.m yL=ELFTK+C3( `f 7g>'.WyAy3/ճ+Tž%2q. -Ý/ - -F2~{iʹ nƳ 4|:b&M벴 -xF%8]ti|vh18 :_r "y(id[5X9'~2e"j, dKւaz :M ȍ,gHyXE 4|zkHqLuC2(8-mݎ= chy(&^{>QkQl!^2iॸ !!˦ l17\._.Xendstream -endobj -1200 0 obj<>/XObject<<>>>>/Annots 726 0 R>>endobj -1201 0 obj<>stream -xX]sF}11ܧRnm5xH l,iUʄsw%I8`sϽzOF!gݠooO^r8 -BJWSB3O>xVgᰋc0 `_Bw ]]ASe-)1ږt|Yf@Wv8޹ +ev{증"7"%-4iKy_U,:Nɔy [YmXSȕ, -~9v 5\8UY {&J+JlM(ef!}ԅVNIdIeDȘDVJBFV;WYun*Q0fE8U#۵sGV剈بQ'l%ebRV% -w? xkT hR- -ı "=$[G֓3d0o:z>} g@(9@0dђ:`"Z=Ǩ٥õsmt8np\QU^s8 >9o( ul T"DC :I+:E,[aAKa`5F)!y;U w -<\wz)JZ|ty 0%Gm F,"JLsZ`MS8<2mKg<1F&* D`<oFendstream -endobj -1202 0 obj<>/XObject<<>>>>/Annots 729 0 R>>endobj -1203 0 obj<>stream -xVn8}W 8@,[cniXP"m+ -I IɲmĐL b_ sȊ$xa\sZp+}`:y4f?<80_Ez0~\A ϗ1:>r+wY28H??Y30N5'Tf*F%2k.U`NvLե~Žʓ.5?ƢHdtx%d!F&ۋ\U`rVks-ȑwJ8NF4wauYn -3sV\'joۄPέEp2aG(j;Bqe4` -Zwyl\`pJc o㺖౭,͔X|N]4UΎON4UBU^0I<c%F@Q#RT2 -0ײmՐmvu=*˒^[ 3t#^u!=RXM$ZM3D4@͐ZmS=^K n/yz]f(6.ǔh_vG,!NXϛP^[R;̈Cnv3Vbf:  e& ݻ -Q$tsG*&Ж++\ܺTH&ЙF( duܲR_12͏ _Wz'3py;"ƒ5h0]M^ܽ=2E؊(nx Lf@'w4 !0&w@c-";qM2_`V2Z8&N{j*s(㠼h8̟bgY/+'?փREmendstream -endobj -1204 0 obj<>/XObject<<>>>>/Annots 742 0 R>>endobj -1205 0 obj<>stream -xWmsF ίЄiCf` :r/sIӃo{ Nl>_Ikr7mgzɄޕHz$l0_&Cf7'wQ gcoV-RXL^p&Co WMo!2ٔ5{N XxqYMGfɍ|X WMfAF#X WMn^A$10CO'fy|1e(N`q ;i$ -0Rfr$)d鰒M){uV`9'x'Q (KrSŔ)8 IjH -p3 ǘV Id-#حϟ!J {UF -A?@vT"ٵɺ_bk&UkqȰԉrt#2cvJG%#L>v"4Gsi׉2L|~ݯ ׍Ve柟>̫S' -Ue!/FH֋H8%*aQoB:G{W6nC`0kqu=-hHςن4##kFq_? ];"-m4l\+laLbuFk&$sDN|i$,,Vi(yQUĀ 4ѻ[H0[QXwʻB*,n1қ4S0 WK쵁2 ?DZCxhgcN[.#?poaG~c_ߥaչVq|E^X-{ǵʯqcu=&EeGC͙BbKGcȓ*G/IL]dʯh: 8k"Y]#{\֗`P%[md.HSG*=9TPؚ7KfVCϫNDw?ʎZ KQ~@ȑ}a>~xx*:hx^jha%e2>tԳ'g 7}s NR'E%2G W%-LET~D~M AuhaJJ'8K+MB((yR?vZp3ybsř X :r  GpcXNZJP1 q1Q2/DZÒ;3DtyW"_Bj N"MyGQ%)NjxZ,OG&Gʚ -[aʋoVX3{V79Â>vIu=ވ&tNXQaQ QLr9{ۚ -[y\KC:acV{6W;@չej nY5ZE0I#|[^YY+jp’*#IZ{d1Ǔ7 g擮o?Ldendstream -endobj -1206 0 obj<>/XObject<<>>>>/Annots 745 0 R>>endobj -1207 0 obj<>stream -xX]6}_qg:ǒdهR, %aAD`KA{d@N;$u=Wx1>h2јiN ),yɓX) `"QK>g\~@-N:B;צI5Z56Vr^`΍-G@&P]  ۃsjw(wx5kP)^d3Mחo/{w("8<#ۇgre?A9WnX,2!Kr2I'5U `.jAi Vn'5`;AZj6z[Ak8"y}`(`OBo xr#53@'` [a脜4ϼ~~?\:EDAB2g B<T8d}oqU-TV"Dph S4&C!fFkIMy=$ʸ%b Ԁy"v[f6B-{r^ߪ tw&TD %omkQԔed6.I<-/9|™Q{E.|űP.Fk(k71^o869׷nf|p6;~w{w~yBlոpfu#WQ~bg'"c%4t =q),AA;q3eU{&?K ]\&t0ef#ͦ,~okcWðv9G.NX<GsO?H -u!0#>卍\ohƺxԥ."?yhfN6**0/rd3[>/XObject<<>>>>/Annots 748 0 R>>endobj -1209 0 obj<>stream -xXmOHί!UJĵH|I(HTr6&18ޜn3v^L½ޝ}gu⑋o:>5N\{Cn+ܦ)<{ {J\LN]†G9[nw;4 a&AMi>lvrbiOcZj-Z<2Xc+εLJg oFJًKu\ &4bXwY% -DB3IIqi)YMRDfHa㓜˴|xiZb%3cJfN֚"XT)\]%*(wG~DS!<7zNG>Qw - lqb+c08%V ExFIDLbUg%g>:4xϠCSx0Rd*}z Yyh3CmHW9ERzNmʔDFH$^ -Xfڙ]*C{U3ߨa4Me1nOy9 -ijN 3יF -."gEi*,~:Zh=dR$xY/i āZJÊ߱14A<'qVU$sQqkRfcdP T/>1qԙYz:HC+C#׵K-Xاn;^kw:fs|9Sٺބ7|!{Nh7;W1vQZ~݆w1{>5.EkQ|:,濋2 ݧ?>ϊ10=mWvHʌQy{RҶt8PR?wQTHX[ƿ j< n.1U\wtbe>/XObject<<>>>>/Annots 751 0 R>>endobj -1211 0 obj<>stream -xTKo@W̱+~D6qj{zY'-|u@0>$x<D?(:B݇q (I䅧[GohF+[tv U3]y&@^!:sM]["4V(d2*r_=P+>/XObject<<>>>>>>endobj -1213 0 obj<>stream -xWMSF+UF؆`7[!fS8CHFȚ4HxGF&) -0h?^~hAs|-hky2?WķTȃ|Lm.>6l]nhcV{ZKn{9킱[2SuK,VUS\[$;rx7^Ţ\!j\ynwe:Zg&ԔiW2ڶ2eIe|2eWJcqa$9/.cgױ$qB҄h,sUƆmZRkupXT/Gƶ8wD&gR{δpdC~KZU]_8 {Ry|h=q IUkH&7pv4!Rg ]JRUפ:fygg~:RTR-18QYWkzd#fk3̘.j1DNwvA6,!SU0upU'Qմã<￐s @slƗ&dXf2_<v~d̶R8jě0@ ~׃ppy tvbh7]} VLcgo4ۄaKgevOS<+ua8w}X5C^ QU*%V*#Nsn;&#X狼a0,NN/b>wOgOgS"FFс 8K -,@an =TsOUjf嶈x.g2oH2eԳ2w{BϷ֊Ai&r/1*/IU&Kf% -ei9ɬz   xPQÇdkK!Cրz?q_+T0S-fORҽjZ(ܣPʥ)n{EDi 5S>\1K4*qJ> >(1:#xzZ4ئR;g@  >V ٕqfgM2JN Kܭ` c[C}2 hBsRХؕQ#odKz&B5Igj:8lH:,GYH dY{ʼnSM0esebŢZFqЗLTwVxD ^x1 vKkt18L$_Rlʾ.:UPNr (jAK $Xy1 ny|(}E봘q88krږѿA*no^^.] ^lj9оendstream -endobj -1214 0 obj<>/XObject<<>>>>>>endobj -1215 0 obj<>stream -xWnF}W UIeYRq][m^+r)mLrR| Ib(8/;3gΜ}= -ht:0= Gt6 49~X>'p5?:8 y3GsF#{5db2"]-)l-7IBKMj`%MN]PR|tt#шp zIt2z1}y<,ld\JdcReqíUݰ2'l“\. u&[QAtskY%v:^T2Ljs̊6*1Q1܄S.%6=\D2zc32n_I}Y2qQbF+=4# -估Hp8{k Q -$Yr$1hKP6f2c2_h!׈&|pe8 .W,6{DcVD4^wW+|Jpܐ@^ *bp2[ -J-cwQ xb>]pMEb} eDu}rT|" L2 3#uS8gH@V$ΤefaW#UPwT{ÉX\C$pƜ&AĥKIp tRcp6 骩A9rNj׫X 3(scЉR'.Ëa0[TU 0Żz*d.y,DFrW-N -'&TB?s8NKC -6B򊼮*XqpWNpmًVRH0Kc Ǭ?\AV%˜y8֠\c^}Pe|s=l8i<PR@6W+qOPqlB$HYQ qa8xv Vqk'i6OeEkbZ[K (/,oU+1PS]/жא9fc+|FM\p:c:BfA 3zWM^ sѳ:Ve2gl*l*IHZǴ5@EL:'myj`oMPBQ~ ,wìH"zG6 ~,eρq:D^8gΎ>c AgBdҩծ~hq:l -=R+5SꍗhJ:p5cƢ䁿gII翪P\J'hpFTP|ձ9i2Ij A%C'3R'J-Yn׭6)N*G F* ug0L&F Sg2gal;:wp!d -CȿB-\p&U5UHԊ=L8V|liA %kKހ$eOqI0 T@J%ч*'#;{=Zn>]U+hxendstream -endobj -1216 0 obj<>/XObject<<>>>>>>endobj -1217 0 obj<>stream -x}XmOHίoyသN'%PN~A6lqwM{f_g M%'ػ;3<3?4!h|J`pj@aQ  AvqnonCvloۄש^` WƼ^Rzj|~Bpq?%\5ss6*$CإY9tZy2& zQ"нMc62 2,":Ȋh{.|ޛGge_Сq,іBy jitS2"> #3<}ێs}}OdiN%0s&TzO|#%m< ^-_=Q D^;!wJWxڹU[M6#<|PGѡ9n =pI<7&foSwpKw 3' YfTw泠_ݕʍSƝ],Z;ָ | -Vx HTcuK|3HMHr9vRy!OElؚRq7$+hӨFh&ʀ'1 -$#^ -1q&ZZW_rSNceBqcZ:5{<@eAo(b1:Wp6\L7wqwWY@D]PHl0SαptwtoF@LuSA:4a3yjeY:Z&­do&_'VU 'U^G"B\ޢՖs4~ xw݋inAThl ɹw -SլFPeP -9G18̧E}e9¿$Ә\;} 0RM  -k TJ 8,jOe]r"1 ;H`cШgߩ%͍RWyxse1~[z:Z9^C[׏g#Eq4%;k˞oE֧$c4endstream -endobj -1218 0 obj<>/XObject<<>>>>>>endobj -1219 0 obj<>stream -xWK0+IcԮZ$dx퀶3vوR$gb23o&0 BL7 \b (l $ER%VG#3k -; DiQ+G'A6]>O4N8s܍}hY;W(fɲfCjYN-gi<<,%8Ѳ7F™/Ƈ6H0 +C|5O5wPs퀹>pm(l #`[|[=0A*ʖJ ˬ8 s7HS\QpbQUP2SA; - uG.ʵҥRPKH4dk90&/V7+vym%wOXːGw&|6dtA~1b},8- &fAE%TG?i۩`ڝ2ȲK$R+)st{G>6jp[N[q|l1[1,-EXĴLnPC!3,Kx%37>)D"4F[.EC=:Ne=ifSQ&*hH 'd#¬wæ]\Iw /yƗ) k$~]DΨwh=bb- FHtwxٽ=,JHTjx]Ng,ksuNB`Yq(*AM1P!r;5†#6 HT5߫' -N\_m ~҉=Y'y"mG9e^$iM>t8qѰ|NV0WEG_IQF~CnxÔZZb,Vhe>/XObject<<>>>>>>endobj -1221 0 obj<>stream -xWn6}W ))I zhQ}%$$=CĒ83sΌMh -t11.&Zs_#[.i2U#r1]F7on,{!WJu-TCNZlW49U:gUUƩ4,k[hL"+%[w#$\IñJ%] z˖!)swՈ,֪u%2|ˆM-Eï̩@84KU'L{h#զ\֔Z^e'(\mƕ}zP6od_nUb|a(<FWZ?q>F49*{2nR7{+{v|$4ޓD+)T;9\d)<择2pv БZm]Hh3<-{wD@$IiސE- ̪ZU A])8Ż -Qraվб;/:i8bLf,G@ [A L霏}#QkJt,Uܴ\.] {B}g@Bs z¤nns_oQ}L^hm4B:(Vt@?6^UHj= v[IJǰIUt99IS#{+ z+h+VO `HJ9lvO)&ЃA7 m7 iͽv1rk̷pJrseqi i.QNH'_HlO]ñjN?/OO:yn,A ,`1ȆiȢ}de8w~Ge´ -LЬ?[œ&Wd} Zk a?x "΁.5#goF-3]$%#F[:kyy%fa^jr=};#;#x#?5ԣg$^#.|酟dd1[KTfՅEB!tptit@>/XObject<<>>>>>>endobj -1223 0 obj<>stream -xWnF+.Ȍ$[\4 hC 9̐Q=wH)jmə?'O]/ U]A[LC ݬܭ3>4D|)%ۮ413ԊʿcG~U<z"ޔUE(+j4F& '&sJWj6r2L*aJmІ3ujהAb (]B0P.ÑwzF ą h.QܔnCMzާTlsND-52G[{>(@ykxXeeϱC!_Xׄ'/oh T3/.|;dîvČf޽yMbr\?gtTNֹ+#2ಐ=CWYNH$J`Ahk0ׂ^ ۀ.OxS~ R?ye ` -zkZmctUI3$Q5+.W.E]眅:+Ѹ,G=ȣ'$PE 8(ۀNFTLT@<\5\#\fZ8c-n hDL;xzƴ$him3>Bͩ9V >}Ry60UXiQZ|]}!c%Zjx"uǕ8@9PEjNhUm{ xVkT+(y3dRr.Щ1qBT0-Glu7^qqdMO,4xr9cqS -F`MJ6W4réظ@PUFt$}$lj~1YOdUP/hcWH62eĵ%l'Y4GF~iK#D7C@Fh淓:/q` -f+V7E{guJhCP@9XH@hKn4c1!ЫF&1\}F.4.prHydx-tVR\ -VіMa74+Wuuڕ;k o-½8pCƘ C+6v -ZGJ.)Νg>&oMu܆|nhQ& 81"dg(-v0Qccb{Tn˦@B':y޴37/x -3><i^H?p_l:G#E:ccɗendstream -endobj -1224 0 obj<>/XObject<<>>>>>>endobj -1225 0 obj<>stream -xWMSF+:>AZkT6U6  Y+!0FX i>gFFE.lk?{s44i4(?xS:MO))1EpC -ؚ̦;UB;UZmqhc p".6k˺bݾ栛wk^lV{( -&8&4eG*ZSm/"(tjӉN;*jkJLu -{x ud,Hq -Y"h0ZYl; u6aY hZvȪ5O ->1#o"T5~;F2mEQ9wh-ƿ գ-- 0$Dl yUf0< -֔ˌ20_SL'M]äQw=ש=?q.YnE(1M:kWFDn=2=4މf7Uiu1 i5s4N?lD)eFkoKq(swoo>׈?Nfdc[![8H%endstream -endobj -1226 0 obj<>/XObject<<>>>>>>endobj -1227 0 obj<>stream -xWMoFW tH$˲]m*ȕ rI }3IJ."cQzou1)fNWKJi2,YҴ _,fVtJqC^ٚ*֊jGW%6ZUuSi|5B]U:BZW#nrr4xX'v1*#AQBxo<ߩW'&":^uEn+*]mm'u^WΠ&tnxp(?IT*4wҘ' -%{G;kO_/;-A -]i5gR\B|ԔfmQ5r -KgJ tRWer`3Bkc

    )tޛ5Aj9fۀLVEfa~mZm+T0@0 <5% @g't7Bsoa*!Y遮kBTe뙙JawC]"Td(jjp6)56S6=\sB!:Ev}tG32jiv%Y}7vb'>@ьᛡ|l`>u9xprâ(6%X ()/xH/{ۘ*ER2;^OģkgKBF!pnNCzukjFIHe'e%ijB*ڻr)..b7x0ZwP'sS7:O-A7djm3"DXm' -Wxr-[6="#K88;e!x}oτ.WUeQY -W9@Q Gkn?Iݚ,_2Ek)0A oFU0xR eNUGmxQ# %*pG©OF5qi|A[#])*kX0>rC'#z;/mLt_mھ.y+|{xwp>QVCG&./ Mʋ|69c|Ǯd>o_endstream -endobj -1230 0 obj<>/XObject<<>>>>>>endobj -1231 0 obj<>stream -xWn6}Wܗ):=,R1PesHw.IǶ: CƵs9P~QJYb^i+Z6>(˛b9}psZuC37VA:*W=KZ SKRҿ_k7zY,Pʂm 5y2\*V2p१7 -Я'ZI -ZoOHlxՒ -Fu\v ӬN(Z祈07pٍ$/:ɏf:(B JJEi?VtsIza,NtJxwh)r -z/Q=H@ ~zɰenz$qMƝHϨVR|P5Ě z"H$}gwR'IJO$p oj }#^.PoIxzzyN%Ѣ P'j,}FxIV4IۓWt.XMFMA_@qtn}PDOVx%Hn銄ػ+ KxQ0nГqa(\c 8N=0Hvyb <чV^i5lkG6$n0[o;*8:nXvl3VfoՉ~t=Tv0`ųF9RDqno"zvmwZf|,߉Qah$ȀFS38ow:(vEb..8H }2D -z -d~41 m&°I_ɸT -{~◽*1r> z+ߜAW@{Uqlw~kIEj^b"z<81,ACы \B/Yw+&*Jgab<4cF}W5lC={KJ -]Qp #}>@9 _^'R/mǗ|-o'^endstream -endobj -1232 0 obj<>/XObject<<>>>>>>endobj -1233 0 obj<>stream -xWMoFW tH,+)uZ%"ҊfH@jg޼yfń7)hL,|yS9M/w4*CV)!xL/ l -+K[;:!&IyRu]Dc+ڽjM>Q 4̢)~itԽj#PStK?z O&q,cD! n=%A\A/*D%FڠDh -W} xbGIKdMYD]6z;|Giӷs.T+䯀׃0Cwv -L6Z ud+ G ٢@?PT_"6^WNG,K&bA+JeVk(tבXB8*( 0]-{W*T}֙Ɗ,[> .iS-m g`ƺ:ʜ-ɮ>p)-i͚jІRU)kg_tC Wd [͵f`a?hrTRJ`{nYTG#K)9uAK!tH U ꅕfb<@[H|%Ta<)QOR_G[oi/[@o:czf?I߈+q:hׁ7bOUچmlzZ`=o\̧/x~]^x!(Od,KbZ(Al$E ˑT]צBpt7bݱF+er fFCʫB؄6UqudV ==9!dOv0l(fqĂv`'7Ry9uM4ZMi@uϑ? -\WA]uI`g6&ǰ^[P{:S]+q~-=ƅW^1a)ݱ[CҒ7˛E%~I>&ʒˋJAr -[nڪ]D] Z\_g BT`%vU|K0T4r wWo?3Z|׈ۇ[3O6i\q{-/z=_seendstream -endobj -1234 0 obj<>/XObject<<>>>>>>endobj -1235 0 obj<>stream -xuWao6_q9CڎY[uaeDx~H)vI޽{q5)ft;jL)]KX9~"r!LiaQLi2AȝB&?L>OKAT[A@'DS.`dPzO#2W&Ujd.7((roEZd4G+zBdlڶj0+skXK}L 3@Ǎcb{ .MmZ!@hOҽ1O![\8Cr mo^:ڌ8\Rg,qNmuW3UH[[Vz /I -^Jʃ{ -8Ŋk()D@N%5Q^UXSeL8D䒺oQ2\Mn'S&{<.4G9Yj[U'Ct*J=X]f<.о4$prFrL\~uB_ -:bd-?dqtnfzpX(@.GtmQ_{k3I% wtBSX#a@~vhNX?u]lk/s&bب̴:?ZT qp 2cZ}C) 2},F,Ț5pО#9m<ߦQ9rN9G!5N(ٛA!EITA&qޣc'oEA B^ ggCfNrQ~!jP#&r,1$7h3Ɖp9 MLDF e1ۥ"z4t5B A#ct&w+W5rY.J-nVcup\*GP0{d s;_*hX]6eߗuٟgd0p7y5[}C"\R% O V̎`h ]G װxrde` {%f3i32'ci SZؗ,q|a6X%n7C?s/x}t ,0g "rvxհMAv4/sg䫽rЭ+k-05/ p Zu7Y "e>|@߬ɤ&kyهLݤ?0z_/Rð2Ϗ)endstream -endobj -1236 0 obj<>/XObject<<>>>>>>endobj -1237 0 obj<>stream -xVn6+4 8evCmmqM -IYUoH9PА͛7|HisZ(+/fɌV*zvryfWm.~#k}u&'dh]"DŽ\Vt6_a5_#&&mwp2W"2-JliQ.w~JƓQgʕ<=]^Zr2kBl):F kv; RTw -|9Ni(Kcqj霬U#K攉 nF;&Sj RTczjL Ɋ}ZmŤJ+Nҩ=|r26^VY*Hr>[kϬ0I2\SƂL0ęrzVA d - C@rً#ZE>UL)dVrSHg;j|#}dZPc@@ql.>HqƨMȬRl/XOL'%t$# FR{H蓧2^EL@84Q` 2M -Dx<``}wx#oϯvv{ȵgka -13A*tWmi -_[RX'2PR0z}S[g&j3f06Ap)J}lp Qrgp>Z4X Bp\CLVe.aa#('nTv4rgiso< _dEПp>^pnWXM / L7p}f\4L/p7?: -hNXF k4^pdOXX~ *~`iGC=n``<JÌRl9P(;1d$JTX\N:݌d;7@¦*t+:5=V qu.3"w"{ lf1S,߲slQa~sd#G#x%x AcKlʱ̨Rl nP0VLs* p-k!q@[ bpaOuHLWx^/\-nWQ?)QóQ^\xt9^0[_6\>endstream -endobj -1238 0 obj<>/XObject<<>>>>>>endobj -1239 0 obj<>stream -xVO8_1emhRIDGq:dI4IQ`O(u7ozOAy}OWK܋;mypt9$ߧe' -C^R*Sb#* TV$xJPؘl,{q=I6Q9/.ξ/(MrI*˟=Ļ gQF057ke12)LE)1042d'|K[K <佹q[:{G˸4ڙ> 1IQ$$r8ܞ9G@_~tyJ> 5 --RUy>2y7bn1`I, (āhʪ@nA{,5ozvvݧ5g]PEdM!a=`n#3FV#c~z)[#MO#Z d3U( ȡGJC=Vԁ"LC -bYylYI$ݨ3+ B3Zx^ 8u2mXJpBIncZ"_#^%EM+;%ؒHXůpJwt _ZEs5Gc]_נ9"W ,.`Iw2ҖLU |σf:C;eQ+4b4ݸYsx{iĽ[.$1ӏ4:lZaB%YnJ]'p4F&ޘNaKendstream -endobj -1240 0 obj<>/XObject<<>>>>>>endobj -1241 0 obj<>stream -xVr6}WlL-7_MDI:u կYr&3Z='hS2< e0tFRK|}q:xR*M 2FaHlqNT?ICxBY}9`b$ ( b~e7Hwou!邏+WN=IFf@o?,߭݌nETJ -xDx @QԌQ2'e\#@G:'=RVN -A36D:D~-"$(Sy.RINc%^Xt'qq4#[K@s+/Du]_A kr5j27KYѓ0J7V#J Kx0SoJJI -IY_.k("=e<]E$㛀V" -6RXB6V^{E6H+Z߀"BmQRa+`8 w7Fa8"={&X xuw+J& I1y-Y!-;5h@οꨊ/9`4siS30SYIM&-EASUE*,S>ӭO\6u{]m,;ѽ:5.;Uvhn#]?wZO:X'Z -v9B\ESr6uY0[N '#H.٭v:N*hOGGZ\-mג6Ihe_<\Rc a8}lɰ~T']y|Rp@l UMrE0٣jH({G by~>ӱ}fu.zӆwZK UsV%t97d0<_\7VAy\֚gQ{hV(( R>ar}}Txfl`aZC\sqNx8ǚop 8Pt3.7iBI]kZ_[;=EW9:]0Sx(?N4endstream -endobj -1242 0 obj<>/XObject<<>>>>/Annots 760 0 R>>endobj -1243 0 obj<>stream -xWnF}W bI%9@P؆/Ԧ$WrW]ZKg/j㴨 &wvg̙3G8?"Q|6Ft6C*i8橠9S|>p2c$hǒ8)O)aGFjԏ+GZwA09v8 -i…F -2IWuP4nUKݧ뽧!]d]GM/>GakGp BьRVw0OlJ+%SG<{9$aI}:2p7Zr.DT{R5cDu/pr[H'I(&-}uV>ЕH+e͚qn& SatreA,vXl\Y<Ɠ #0A^ -(=는3[+d=`ii4 RF&Gd-dz/Ox_8M`N x4z/F:pvO|'tdVE[.gwsFCsO j 8XGnCmZ"$F86{d "K߶r+dE@UM S0Rd{JTCYiGir6xGv@DjBg.&μ\jہqIs΋,k|5mFiGɓ'xj,ajo%+o}[鱰ۭLNOy|+ ~IycW*s /OZ57/ki)jNZm&<ĒcNkqPtI|(!W#d$S "O|tǮg8:;.OzuwN j˭;7W[h xkVpY%Nͼ~'O7=d%>=9@3/+ eC8 0q/|Ꙍ5?w  -֒&t?8 - 1f ̼C]wh>7 U9E#L̤7wdihfDko*F;!mWR0A8y; kWkYtPu`!-7/hU:bYچv! 5 @ox- N Eau#1!En>FfLHd*| jCW7soϏ>4=kUj -Zr~$hMO&SOCzZ>zq/endstream -endobj -1244 0 obj<>/XObject<<>>>>/Annots 763 0 R>>endobj -1245 0 obj<>stream -xVnF+>)%YR 'ȍqm"FŊ\J. wiU~{,ZR[a Ù7o[/"i2$o^4]131&gs1i ==-^Ms܏_)d2ル7~Mє g ܤ!E$&.oؑ[v -8ӗ>>i[|yJI:⯽F3`~b*Ovx=(jŸ|.wԒeLoOd+8Zƒ} O?zPU課[eGFncTC4o7W;/O6U6ԧpՅcCчp)6>7^BiًY5FԩJ@K5٬QЍ'i uJl](45++2*wr5BeJ13Xd y[أvU%!5hbnBMlWi$(mx~ }_oAhSAPTj>/XObject<<>>>>/Annots 770 0 R>>endobj -1247 0 obj<>stream -xW]o6}ϯKS#qȖY22SMl O=~ƻ͗7caa>J,-a.KSOYv #gf-Ȳ| O|+ZgqUyWeB>=>ѯR*AkAtV*&WV/hqrzzOfs\uKzxkNzmuNi:l bkH;NUU9DCِjvښVOau9з7@_uJ7z;oțt]{!K%yrqԵ/pQiI㥣t.ܽ1Gޮ:g4z<9vї -:o#@ HN2Fv -ᷠ|uLtMNsOl7tItM5; cA5yClgzVԍ:&5aۭ+-^WQVio -cU?/#+b 4 -^ Yu9s}M -]{ɺ$78 b\֧Swivͥq>@rYi "96]PbtLimM'9,VRU1'it=Y3g;ͳ#sN(;D6z*z&]Pcl z`dC) lo|1u'Kh"ò%3sC,'TZyKtVVzTVjP. Jv,t\XPh9ʗ&?""*e7y,HXc. "X3ʈ<\WMc8O~MѨ̎F|OQNLk X|gzr/6bU{8]A;|/C*2&,etcE[j E90 X)[L}pڨ@@ 4u83^C3& -k걹=E>/XObject<<>>>>>>endobj -1249 0 obj<>stream -xTn@+J{r{}Ze6Hx L;3Nd+*^&1"X$e$ -#̣4̐.|(|rs8F^l@^ʽEP`Y+ڍlW|k$z?3^:$ SFUmq((ȼBQXډZz W)4\lRgBqZ*knW5ga92cY~k-ݑ.,H3P{Ю"8TO\A~Qo^#AdfZM!tˁ-3\Y*Ǧ_ؿH]|e_j[cFt^r^Onq1 mTrTP(HJ4tL݆'_)OP)͢R[&ʰ4 H;ezZӟd~jX1rvg oYξsirtSr3ܿgHvդ "J/C>XKŽO:NC&͖a6OCq<Ϯ_{;_endstream -endobj -1250 0 obj<>/XObject<<>>>>/Annots 773 0 R>>endobj -1251 0 obj<>stream -x}Wao6_q0Rٲ'-Plvak NJH*ޑXݻw9-͒V*E&[x9JT.\>~lC 7jfStl+Z.h[a-mwٯ;_e;nۯqe~V\}[`gG-"h&5`A0L(mHc全vI^'9^3lA/V);\.  a1<3mO5::'_W%gtE0VK 1[q"ueZ$PIL ɝţ @J9{>/Z%BL+Rk#{vF&h*<# tYl5>͎Z>lDJbt\'aGn&2}E6DZ6n1ƘPwJ:d[) R3; @J̒!#\e&88l |yA H @HhG!Q)bh}K; UDj-@=`Bt<bMROixG3{=*}Bs\f[vʐn36V(粅>`tP֨9;gZOAE'DIh^[Aƒ$Xv߰ՏFF0(-+Zz>t5R4Dc:x2=LK=KkR*k s{Qվ^,NqFOi{vGҍ ~CO0}ɨ QhNء#C2zv!\+{0 -i} AB 0BI![(go W0=֭2z=&3W,eʋ0b6 v qV*tH.0Cbs:z/vfGB #OEJAdՃ|Tt<m>]*4فg@@kֶx*ޅwo𒴆a2ex<ί_u:ܝb7/@Qg#Gl{77Pf^w~h&ƶΚaSMGV!,H. x*y,!ȔApyLd8wD{ < *7̡o4m)#пPǽ3u=&A%q6+c!mg0!kQEJ]U-|\Nzg]<+ bE -QƑs}O`Yon?`kYVendstream -endobj -1252 0 obj<>/XObject<<>>>>>>endobj -1253 0 obj<>stream -xWn7+TbYe)Ѓ؀&M@_#.\Zl @%93o{C{4)TGɔWM|8\avx}vN-kY\]Ҳ"NiY+M˟؃d8Ť1i./^ {~Ԗ~?o"ŝn.֤%D{J]=iTBkG]GV:p)Q?w|MU[(Rq L8}B -UҷLaI;>:@:N gɜ\G.l9 ʠ)>T(ƙڔ%vrd%5d -hwCr17:(a[#9<WwL)GU@ -)1˅K.BJ|`FrE Bۮ 7SRII-i2WO|Bw.%1w`'v]NܠZ -m4?:F$LG2 ;6L(ABsX"_QM KV[^:013W9'sxw<]G߷BBBŤ[Npܟ8 XB'q-* as*E+.@ -CV&t/A:&?ɸDWC+LUWBԴ11ojͻP;@FWoEeIJڀ>WbgZjVBŮ L@AI~a AkZ데(N A=&[bTAb*/!Oo2}L7.(z)~*n90~JJ+di֑`T=TCrM(QU<|`Iǐpj\/@- #ΥY )Lk-#U}Yvd;r dm!C@90'FݲX嚎 T&h G^y6+ - @S?bJ p,ǘkB.TuB `!z6$iCsBWP#*Gri$ WL5[Nnҏ,{sbB $wT SP_3[TOHΙ'%ɔgY'Zc0j2AX - }0k~NߠU0L#1caxϡMi3ؗb}`p~HDѳ7|+Sh<A 1G]Dk{Q Uk1F]I#k67_nÓޑ>Dak`F+&'-+)C ɩ$ Nc_M/"ma $N\!_>]ӷbg_?8p j8w.诣/لendstream -endobj -1254 0 obj<>endobj -1255 0 obj<>endobj -1256 0 obj<>endobj -1257 0 obj<>endobj -1258 0 obj<>endobj -1259 0 obj<>endobj -1260 0 obj<>endobj -1261 0 obj<>endobj -1262 0 obj<>endobj -1263 0 obj<>endobj -1264 0 obj<>endobj -1265 0 obj<>endobj -1266 0 obj<>endobj -1267 0 obj<>endobj -1268 0 obj<>endobj -1269 0 obj<>endobj -1270 0 obj<>endobj -1271 0 obj<>endobj -1272 0 obj<>endobj -1273 0 obj<>endobj -1274 0 obj<>endobj -1275 0 obj<>endobj -1276 0 obj<>endobj -1277 0 obj<>endobj -1278 0 obj<>endobj -1279 0 obj<>endobj -1280 0 obj<>endobj -1281 0 obj<>endobj -1282 0 obj<>endobj -1283 0 obj<>endobj -1284 0 obj<>endobj -1285 0 obj<>endobj -1286 0 obj<>endobj -1287 0 obj<>endobj -1288 0 obj<>endobj -1289 0 obj<>endobj -1290 0 obj<>endobj -1291 0 obj<>endobj -1292 0 obj<>endobj -1293 0 obj<>endobj -1294 0 obj<>endobj -1295 0 obj<>endobj -1296 0 obj<>endobj -1297 0 obj<>endobj -1298 0 obj<>endobj -1299 0 obj<>endobj -1300 0 obj<>endobj -1301 0 obj<>endobj -1302 0 obj<>endobj -1303 0 obj<>endobj -1304 0 obj<>endobj -1305 0 obj<>endobj -1306 0 obj<>endobj -1307 0 obj<>endobj -1308 0 obj<>endobj -1309 0 obj<>endobj -1310 0 obj<>endobj -1311 0 obj<>endobj -1312 0 obj<>endobj -1313 0 obj<>endobj -1314 0 obj<>endobj -1315 0 obj<>endobj -1316 0 obj<>endobj -1317 0 obj<>endobj -1318 0 obj<>endobj -1319 0 obj<>endobj -1320 0 obj<>endobj -1321 0 obj<>endobj -1322 0 obj<>endobj -1323 0 obj<>endobj -1324 0 obj<>endobj -1325 0 obj<>endobj -1326 0 obj<>endobj -1327 0 obj<>endobj -1328 0 obj<>endobj -1329 0 obj<>endobj -1330 0 obj<>endobj -1331 0 obj<>endobj -1332 0 obj<>endobj -1333 0 obj<>endobj -1334 0 obj<>endobj -1335 0 obj<>endobj -1336 0 obj<>endobj -1337 0 obj<>endobj -1338 0 obj<>endobj -1339 0 obj<>endobj -1340 0 obj<>endobj -1341 0 obj<>endobj -1342 0 obj<>endobj -1343 0 obj<>endobj -1344 0 obj<>endobj -1345 0 obj<>endobj -1346 0 obj<>endobj -1347 0 obj<>endobj -1348 0 obj<>endobj -1349 0 obj<>endobj -1350 0 obj<>endobj -1351 0 obj<>endobj -1352 0 obj<>endobj -1353 0 obj<>endobj -1354 0 obj<>endobj -1355 0 obj<>endobj -1356 0 obj<>endobj -1357 0 obj<>endobj -1358 0 obj<>endobj -1359 0 obj<>endobj -1360 0 obj<>endobj -1361 0 obj<>endobj -1362 0 obj<>endobj -1363 0 obj<>endobj -1364 0 obj<>endobj -1365 0 obj<>endobj -1366 0 obj<>endobj -1367 0 obj<>endobj -1368 0 obj<>endobj -1369 0 obj<>endobj -1370 0 obj<>endobj -1371 0 obj<>endobj -1372 0 obj<>endobj -1373 0 obj<>endobj -1374 0 obj<>endobj -1375 0 obj<>endobj -1376 0 obj<>endobj -1377 0 obj<>endobj -1378 0 obj<>endobj -1379 0 obj<>endobj -1380 0 obj<>endobj -1381 0 obj<>endobj -1382 0 obj<>endobj -1383 0 obj<>endobj -1384 0 obj<>endobj -1385 0 obj<>endobj -1386 0 obj<>endobj -1387 0 obj<>endobj -1388 0 obj<>endobj -1389 0 obj<>endobj -1390 0 obj<>endobj -1391 0 obj<>endobj -1392 0 obj<>endobj -1393 0 obj<>endobj -1394 0 obj<>endobj -1395 0 obj<>endobj -1396 0 obj<>endobj -1397 0 obj<>endobj -1398 0 obj<>endobj -1399 0 obj<>endobj -1400 0 obj<>endobj -1401 0 obj<>endobj -1402 0 obj<>endobj -1403 0 obj<>endobj -1404 0 obj<>endobj -1405 0 obj<>endobj -1406 0 obj<>endobj -1407 0 obj<>endobj -1408 0 obj<>endobj -1409 0 obj<>endobj -1410 0 obj<>endobj -1411 0 obj<>endobj -1412 0 obj<>endobj -1413 0 obj<>endobj -1414 0 obj<>endobj -1415 0 obj<>endobj -1416 0 obj<>endobj -1417 0 obj<>endobj -1418 0 obj<>endobj -1419 0 obj<>endobj -1420 0 obj<>endobj -1421 0 obj<>endobj -1422 0 obj<>endobj -1423 0 obj<>endobj -1424 0 obj<>endobj -1425 0 obj<>endobj -1426 0 obj<>endobj -1427 0 obj<>endobj -1428 0 obj<>endobj -1429 0 obj<>endobj -1430 0 obj<>endobj -1431 0 obj<>endobj -1432 0 obj<>endobj -1433 0 obj<>endobj -1434 0 obj<>endobj -1435 0 obj<>endobj -1436 0 obj<>endobj -1437 0 obj<>endobj -1438 0 obj<>endobj -1439 0 obj<>endobj -1440 0 obj<>endobj -1441 0 obj<>endobj -1442 0 obj<>endobj -1443 0 obj<>endobj -1444 0 obj<>endobj -1445 0 obj<>endobj -1446 0 obj<>endobj -1447 0 obj<>endobj -1448 0 obj<>endobj -1449 0 obj<>endobj -1450 0 obj<>endobj -1451 0 obj<>endobj -1452 0 obj<>endobj -1453 0 obj<>endobj -1454 0 obj<>endobj -1455 0 obj<>endobj -1456 0 obj<>endobj -1457 0 obj<>endobj -1458 0 obj<>endobj -1459 0 obj<>endobj -1460 0 obj<>endobj -1461 0 obj<>endobj -1462 0 obj<>endobj -1463 0 obj<>endobj -1464 0 obj<>endobj -1465 0 obj<>endobj -1466 0 obj<>endobj -1467 0 obj<>1<>6<>7<>12<>18<>23<>33<>36<>38<>43<>50<>55<>57<>60<>73<>90<>93<>100<>109<>115<>117<>119<>]>>>>endobj +.(DY'83֕8&Жi_L?C6|N?Lߓ`Qtޞx6cZ 6wm,7j3?Nq!ua9Z}ϳ)VylZ +G176AAi0URj sAl:k/ˉ3ӂj ^~XnN_xq~s ;ʏwok$}ʑ9 sbNllʊ]dS:zKUgA=LYj/qV8Nw-@%NBVOs+Zh ŴNAoLP`/@83Î:_h!z/@p%8T}r5{q6_o6?ԙA݉V0iTr +um=ZbܱƋSLٔƑnk7🵙 >LcZލj2[Di}| qendstream +endobj +1313 0 obj<>/XObject<<>>>>/Annots 814 0 R>>endobj +1314 0 obj<>stream +xV]o6}ϯKS##O뺥-[6,֒5KJdsg)]/fKer_>=ˮdFe̩yv\ o=~Z,dI+Eyu6VY^]*iy#R9G^ rR4շ`%V&3~_o5y'6M446eWY(W;UV !5M/s]׋7@_up =Wח {I:ARɭnqVTж1=::?ǩFǙ&1vjӹ{mEc$]+'\N4z<9ї +:o#@ R^d0؊r#;F,6.4)~_Ix*ooSDŽ&nT\RT11>:v k!KݨdCnue`*2jUk0vX!c!EAX>br+6ʽr;7vmB< zwatdw'hwBsilqQj2K#otCj p țQTWHkkz$ +;$M!$xzNTT@ː5zDj6+c,es1VmGUuyȚkRmd*e +]A4ՠv? u>g {FOֺ8 b]k9[m"Yy] i2oTdX}sB`n׾|c9h:O}iPuC`*xeJl߆rqOfq 9֪B5T+_H! .:qvxooX±GiNGNW 2"*c ֯5}Ҩ}" B&Hg`u yٽxgzFgPiMd@D9G4^Ƨ~Lo +ח }0ٗ|o+RK )*ǁK ֠ԧ]^B`j#Zk]#0 8G"-u83: 0šz,>/XObject<<>>>>>>endobj +1316 0 obj<>stream +xuMo@W=90`;>iR%UPs&]gwP@FR2,r +.J糌傟9߆PGe4#P޶X.PV`4E)'宱86m iH8@N7HѶTn# rQ-IlR&MBI^_/Q8%9'8rHy,A(BƐr-,fz߱!J|cE2~" |,CaC_?'߼'>& Mb3|8!@S׃r%:VF0]I* =*vO7Ŗ@Hƅ4Rwz=rnӟ ڂؘyjIء/'ʺoҊ>uxzs>yGڷ/[22+~Nٮjv9·ah>/XObject<<>>>>/Annots 817 0 R>>endobj +1318 0 obj<>stream +xuW]o6}ϯ0,+vŶkW`[k`(ZPFRqw.)9!,[8s/4߂P\̳9[~c*.?^,+<\-نZЗhhd熶[/zjng^rNo+bX&̝uA+jBV/-WlA6-bXC>XQڐ* +Si +OړW^ur`/3u ba@Km LGۓdd3. j)U[q&8ׄF2m$䛆Ţ @J9{9/bZ%\ N`⹳Ap?s~a9K08(ufD#@,M\Nc9^H" dh/ zoPv $ +mn. 6gS?H Ca@$m24dm 8n1ƘP-u;%yZ[)6AJm R3; @J̒!#\Jppp |{E9 +@HhG!Q)_4g #5؉v=Z n sxz>>:U1{3*dTd}䖝22;4K*`.04*WYfSI(N0I?h z7UҘ$ؘH\>l %Ƃ`C\#C%ϭCq~Gh㴸H_2XCZUB;Qv?;ndXYb.D8 +uI<$Z4Rz!nG Y)'VpI,:I?pGˋ zU& BbQVS1 + a< `S*'c9.{/`b +卌Bc `DĢ֠|u=Zq(_*yJ݆ LHŜ|m¨'F1i#p%z'UjEM|gz'J*[<FvK`suh,թO8/ƳD& 7Ys,ug HJgǖi=Զ2xb3w0J ƒq]FHL,x~3ZNyv1mm)zKxN{K޻2*l Tf GrUHMc2C^a@.y!蕴Ep^q?f4&=Fa2 o46 ΆuYT3\ +>#aIPTHn{H!?`!-Jꅏ@>p.AC.9RpynXBFn7l^ /[U6endstream +endobj +1319 0 obj<>/XObject<<>>>>>>endobj +1320 0 obj<>stream +xWKo7WLu IJAl@㺎Z /]TIe~3ܵ >AKrf 3:SL'SϦ:O7h'889ٌ5//hQO(NjOAbgbRzW蘴Kaχd}CV?iK7ym}icҒ{MT*R.ꊌ#o+8䔎fcQtƻH-)|Ҹ&e>PF*R۵J0֤-X'}䌃\E.l9 ʠ)>T(ƙڔ%vrd%5d +hwCr71:(a[%9<Ww.M)G* A 0r)=쇋l XV\??Ȫhzk5TRRgAգӳ K:8eICľɜF#=-뇇?F"C>/XObject<<>>>>>>endobj +1322 0 obj<>stream +xWo6~_qVl9N cźtC=BKD5~ߑb, Y[KxC[8^:x?6TQ~u|Kσ4]%)_0+苨6#ʦNHP-;r֙S&eI< UM)ZY;+tNR=@Ns3"_8+DxPk`Yw +osDY<6@ʝ8N:Urɉrp[e#UU8/" DڞNoop<CƐJ(+|hކ'F?L݁X15`׵_a@r9ǽSO!RYGxn,pu+%NtD{m\LG/`2nCVU +pi*G,Iz/eYVBٚR>m$sS2t2Upͱpw닯/ί>?ي\؋CB_ ֈ, Ir$LdcR8id*&t +xXᴱp*F +71Ir بR9V ]9sov +hU~T@X>Ba wZߟ0m]3:3**0kS(诒0i&ihT]HH"bm!уBarFE5N=I'2@mu|=@2f-FОYݮǻ~Pؘ- 5w{] W +DB0s2{*F'@ :`|11>0s:֛o/.^*%)ƭyWl?H߇/#RVB5!mO8H:M/h `:`R7u ek tH4JdGiZ?vq]c\.RLVoo6F4h]yM7,XG"|ݯ΀P7}J4 7-֏.x`$o 4D M^EH t&ˍ!49UGl^//}U4^)iŠ'kpCEhC8r2s%༕(mPE|gb4su6cg~T7a>64X7Yq^eލnYe80WFf~}S(q W K Wx&H]G0`Nq#+B' +M] G8;O(vUrwA.5Cl0::i+۟`WvJ '^~\^etW[~7"2cendstream +endobj +1323 0 obj<>/XObject<<>>>>>>endobj +1324 0 obj<>stream +xVao6_qdŒ>mIhqPesH%'v XݻG~>Jh߄SO)FY<SYIEX$xx4~mlFa7xCƓK(O>tD3ZaoX/֪T~zBIҚYxp+&|U$+F)./O~+Ii/m!2I,ÛgښGޮia{ǡG4LmTj]ʘ[Xf[Q%eF{{9tT2d H :7ǩmw'( 2} UX{X0sI!E=ti5DRQ(2vNS~gz>PS KArPm!*ͯyCҺ%cDzVMd5X0>穋";zf쬩A? =ĽЫKF:}^HǐMrlcp\ %Cm96i6}`ځ(*=(J_E0Sٖ*)PMb=ctL'e5c+jnLG,,&=zn07\xAgxVYr]@w7W]󼲊Sw1͑#np +kPhc#QpzqBI*"5&G$ :<ԱK=/Q@(?o FFg\ 4&A:&hОv,,>/XObject<<>>>>>>endobj +1326 0 obj<>stream +xUMO@WFS !JE6&1aw݊:NSc)wf޼7B_ +YQ +E= HG!4dq} + +})-4 +Ir0EAF]HvIrgϮbQ)RHs `Qx<[wWp:]̆يJm(uifRv{_kS|?FVty F+HWo7 ryw ȕz`-{vCh?q †5 |-kՋ^O6C >X(n B?I>-Q$gVJyX.pת)D[rM6!M GI{o/^gl\ʢycpS!~8{ [V2o;N-R"EО]-&?&uendstream +endobj +1327 0 obj<>endobj +1328 0 obj<>endobj +1329 0 obj<>endobj +1330 0 obj<>endobj +1331 0 obj<>endobj +1332 0 obj<>endobj +1333 0 obj<>endobj +1334 0 obj<>endobj +1335 0 obj<>endobj +1336 0 obj<>endobj +1337 0 obj<>endobj +1338 0 obj<>endobj +1339 0 obj<>endobj +1340 0 obj<>endobj +1341 0 obj<>endobj +1342 0 obj<>endobj +1343 0 obj<>endobj +1344 0 obj<>endobj +1345 0 obj<>endobj +1346 0 obj<>endobj +1347 0 obj<>endobj +1348 0 obj<>endobj +1349 0 obj<>endobj +1350 0 obj<>endobj +1351 0 obj<>endobj +1352 0 obj<>endobj +1353 0 obj<>endobj +1354 0 obj<>endobj +1355 0 obj<>endobj +1356 0 obj<>endobj +1357 0 obj<>endobj +1358 0 obj<>endobj +1359 0 obj<>endobj +1360 0 obj<>endobj +1361 0 obj<>endobj +1362 0 obj<>endobj +1363 0 obj<>endobj +1364 0 obj<>endobj +1365 0 obj<>endobj +1366 0 obj<>endobj +1367 0 obj<>endobj +1368 0 obj<>endobj +1369 0 obj<>endobj +1370 0 obj<>endobj +1371 0 obj<>endobj +1372 0 obj<>endobj +1373 0 obj<>endobj +1374 0 obj<>endobj +1375 0 obj<>endobj +1376 0 obj<>endobj +1377 0 obj<>endobj +1378 0 obj<>endobj +1379 0 obj<>endobj +1380 0 obj<>endobj +1381 0 obj<>endobj +1382 0 obj<>endobj +1383 0 obj<>endobj +1384 0 obj<>endobj +1385 0 obj<>endobj +1386 0 obj<>endobj +1387 0 obj<>endobj +1388 0 obj<>endobj +1389 0 obj<>endobj +1390 0 obj<>endobj +1391 0 obj<>endobj +1392 0 obj<>endobj +1393 0 obj<>endobj +1394 0 obj<>endobj +1395 0 obj<>endobj +1396 0 obj<>endobj +1397 0 obj<>endobj +1398 0 obj<>endobj +1399 0 obj<>endobj +1400 0 obj<>endobj +1401 0 obj<>endobj +1402 0 obj<>endobj +1403 0 obj<>endobj +1404 0 obj<>endobj +1405 0 obj<>endobj +1406 0 obj<>endobj +1407 0 obj<>endobj +1408 0 obj<>endobj +1409 0 obj<>endobj +1410 0 obj<>endobj +1411 0 obj<>endobj +1412 0 obj<>endobj +1413 0 obj<>endobj +1414 0 obj<>endobj +1415 0 obj<>endobj +1416 0 obj<>endobj +1417 0 obj<>endobj +1418 0 obj<>endobj +1419 0 obj<>endobj +1420 0 obj<>endobj +1421 0 obj<>endobj +1422 0 obj<>endobj +1423 0 obj<>endobj +1424 0 obj<>endobj +1425 0 obj<>endobj +1426 0 obj<>endobj +1427 0 obj<>endobj +1428 0 obj<>endobj +1429 0 obj<>endobj +1430 0 obj<>endobj +1431 0 obj<>endobj +1432 0 obj<>endobj +1433 0 obj<>endobj +1434 0 obj<>endobj +1435 0 obj<>endobj +1436 0 obj<>endobj +1437 0 obj<>endobj +1438 0 obj<>endobj +1439 0 obj<>endobj +1440 0 obj<>endobj +1441 0 obj<>endobj +1442 0 obj<>endobj +1443 0 obj<>endobj +1444 0 obj<>endobj +1445 0 obj<>endobj +1446 0 obj<>endobj +1447 0 obj<>endobj +1448 0 obj<>endobj +1449 0 obj<>endobj +1450 0 obj<>endobj +1451 0 obj<>endobj +1452 0 obj<>endobj +1453 0 obj<>endobj +1454 0 obj<>endobj +1455 0 obj<>endobj +1456 0 obj<>endobj +1457 0 obj<>endobj +1458 0 obj<>endobj +1459 0 obj<>endobj +1460 0 obj<>endobj +1461 0 obj<>endobj +1462 0 obj<>endobj +1463 0 obj<>endobj +1464 0 obj<>endobj +1465 0 obj<>endobj +1466 0 obj<>endobj +1467 0 obj<>endobj +1468 0 obj<>endobj +1469 0 obj<>endobj +1470 0 obj<>endobj +1471 0 obj<>endobj +1472 0 obj<>endobj +1473 0 obj<>endobj +1474 0 obj<>endobj +1475 0 obj<>endobj +1476 0 obj<>endobj +1477 0 obj<>endobj +1478 0 obj<>endobj +1479 0 obj<>endobj +1480 0 obj<>endobj +1481 0 obj<>endobj +1482 0 obj<>endobj +1483 0 obj<>endobj +1484 0 obj<>endobj +1485 0 obj<>endobj +1486 0 obj<>endobj +1487 0 obj<>endobj +1488 0 obj<>endobj +1489 0 obj<>endobj +1490 0 obj<>endobj +1491 0 obj<>endobj +1492 0 obj<>endobj +1493 0 obj<>endobj +1494 0 obj<>endobj +1495 0 obj<>endobj +1496 0 obj<>endobj +1497 0 obj<>endobj +1498 0 obj<>endobj +1499 0 obj<>endobj +1500 0 obj<>endobj +1501 0 obj<>endobj +1502 0 obj<>endobj +1503 0 obj<>endobj +1504 0 obj<>endobj +1505 0 obj<>endobj +1506 0 obj<>endobj +1507 0 obj<>endobj +1508 0 obj<>endobj +1509 0 obj<>endobj +1510 0 obj<>endobj +1511 0 obj<>endobj +1512 0 obj<>endobj +1513 0 obj<>endobj +1514 0 obj<>endobj +1515 0 obj<>endobj +1516 0 obj<>endobj +1517 0 obj<>endobj +1518 0 obj<>endobj +1519 0 obj<>endobj +1520 0 obj<>endobj +1521 0 obj<>endobj +1522 0 obj<>endobj +1523 0 obj<>endobj +1524 0 obj<>endobj +1525 0 obj<>endobj +1526 0 obj<>endobj +1527 0 obj<>endobj +1528 0 obj<>endobj +1529 0 obj<>endobj +1530 0 obj<>endobj +1531 0 obj<>endobj +1532 0 obj<>endobj +1533 0 obj<>endobj +1534 0 obj<>endobj +1535 0 obj<>endobj +1536 0 obj<>endobj +1537 0 obj<>endobj +1538 0 obj<>endobj +1539 0 obj<>endobj +1540 0 obj<>endobj +1541 0 obj<>endobj +1542 0 obj<>endobj +1543 0 obj<>endobj +1544 0 obj<>endobj +1545 0 obj<>endobj +1546 0 obj<>endobj +1547 0 obj<>endobj +1548 0 obj<>endobj +1549 0 obj<>endobj +1550 0 obj<>endobj +1551 0 obj<>endobj +1552 0 obj<>endobj +1553 0 obj<>1<>7<>8<>13<>19<>24<>35<>38<>40<>45<>53<>58<>60<>63<>76<>93<>96<>103<>112<>118<>122<>124<>126<>127<>]>>>>endobj xref -0 1468 +0 1554 0000000000 65535 f 0000000015 00000 n 0000000250 00000 n @@ -3377,1254 +3498,1340 @@ xref 0000024834 00000 n 0000024938 00000 n 0000025042 00000 n -0000025145 00000 n -0000025249 00000 n -0000025353 00000 n -0000025457 00000 n -0000025561 00000 n -0000025664 00000 n -0000025768 00000 n -0000025872 00000 n -0000025976 00000 n -0000026080 00000 n -0000026184 00000 n -0000026288 00000 n -0000026625 00000 n -0000026678 00000 n -0000026765 00000 n -0000026819 00000 n -0000026905 00000 n -0000026972 00000 n -0000027058 00000 n -0000027161 00000 n -0000027265 00000 n -0000027369 00000 n -0000027473 00000 n -0000027577 00000 n -0000027681 00000 n -0000027785 00000 n -0000027889 00000 n -0000027993 00000 n -0000028097 00000 n -0000028201 00000 n -0000028305 00000 n -0000028409 00000 n -0000028513 00000 n -0000028617 00000 n -0000028721 00000 n -0000028825 00000 n -0000028929 00000 n -0000029033 00000 n -0000029136 00000 n -0000029240 00000 n -0000029344 00000 n -0000029448 00000 n -0000029552 00000 n -0000029656 00000 n -0000029760 00000 n -0000029864 00000 n -0000029968 00000 n -0000030072 00000 n -0000030176 00000 n -0000030280 00000 n -0000030383 00000 n -0000030485 00000 n -0000030587 00000 n -0000030900 00000 n -0000031004 00000 n -0000031107 00000 n -0000031211 00000 n -0000031315 00000 n -0000031419 00000 n -0000031523 00000 n -0000031627 00000 n -0000031731 00000 n -0000031835 00000 n -0000031939 00000 n -0000032043 00000 n -0000032147 00000 n -0000032251 00000 n -0000032355 00000 n -0000032459 00000 n -0000032563 00000 n -0000032667 00000 n -0000032771 00000 n -0000032875 00000 n -0000032979 00000 n -0000033082 00000 n -0000033186 00000 n -0000033290 00000 n -0000033394 00000 n -0000033497 00000 n -0000033601 00000 n -0000033705 00000 n -0000033808 00000 n -0000033912 00000 n -0000034016 00000 n -0000034120 00000 n -0000034224 00000 n -0000034328 00000 n -0000034432 00000 n -0000034536 00000 n -0000034640 00000 n -0000034744 00000 n -0000034847 00000 n -0000034951 00000 n -0000035055 00000 n -0000035159 00000 n -0000035263 00000 n -0000035367 00000 n -0000035471 00000 n -0000035575 00000 n -0000035679 00000 n -0000035783 00000 n -0000035887 00000 n -0000035990 00000 n -0000036092 00000 n -0000036194 00000 n -0000036619 00000 n -0000036722 00000 n -0000036826 00000 n -0000036930 00000 n -0000037034 00000 n -0000037138 00000 n -0000037242 00000 n -0000037346 00000 n -0000037450 00000 n -0000037554 00000 n -0000037658 00000 n -0000037761 00000 n -0000037865 00000 n -0000037969 00000 n -0000038072 00000 n -0000038176 00000 n -0000038280 00000 n -0000038384 00000 n -0000038487 00000 n -0000038591 00000 n -0000038695 00000 n -0000038799 00000 n -0000038903 00000 n -0000039007 00000 n -0000039111 00000 n -0000039215 00000 n -0000039319 00000 n -0000039423 00000 n -0000039527 00000 n -0000039631 00000 n -0000039735 00000 n -0000039839 00000 n -0000039943 00000 n -0000040047 00000 n -0000040151 00000 n -0000040254 00000 n -0000040358 00000 n -0000040462 00000 n -0000040566 00000 n -0000040670 00000 n -0000040774 00000 n -0000040878 00000 n -0000040982 00000 n -0000041086 00000 n -0000041190 00000 n -0000041294 00000 n -0000041398 00000 n -0000041502 00000 n -0000041606 00000 n -0000041709 00000 n -0000041810 00000 n -0000041912 00000 n -0000042337 00000 n -0000042441 00000 n -0000042545 00000 n -0000042649 00000 n -0000042753 00000 n -0000042857 00000 n -0000042961 00000 n -0000043065 00000 n -0000043168 00000 n -0000043272 00000 n -0000043376 00000 n -0000043480 00000 n -0000043584 00000 n -0000043688 00000 n -0000043792 00000 n -0000043896 00000 n -0000044000 00000 n -0000044104 00000 n -0000044208 00000 n -0000044312 00000 n -0000044416 00000 n -0000044519 00000 n -0000044623 00000 n -0000044727 00000 n -0000044831 00000 n -0000044935 00000 n -0000045039 00000 n -0000045143 00000 n -0000045247 00000 n -0000045351 00000 n -0000045455 00000 n -0000045559 00000 n -0000045663 00000 n -0000045767 00000 n -0000045870 00000 n -0000045974 00000 n -0000046078 00000 n -0000046182 00000 n -0000046286 00000 n -0000046390 00000 n -0000046494 00000 n -0000046598 00000 n -0000046702 00000 n -0000046806 00000 n -0000046910 00000 n -0000047014 00000 n -0000047118 00000 n -0000047222 00000 n -0000047326 00000 n -0000047429 00000 n -0000047531 00000 n -0000047633 00000 n -0000048058 00000 n -0000048162 00000 n -0000048266 00000 n -0000048370 00000 n -0000048473 00000 n -0000048577 00000 n -0000048681 00000 n -0000048785 00000 n -0000048889 00000 n -0000048993 00000 n -0000049096 00000 n -0000049200 00000 n -0000049304 00000 n -0000049408 00000 n -0000049512 00000 n -0000049615 00000 n -0000049719 00000 n -0000049823 00000 n -0000049927 00000 n -0000050031 00000 n -0000050135 00000 n -0000050239 00000 n -0000050424 00000 n -0000050477 00000 n -0000050564 00000 n -0000050589 00000 n -0000050643 00000 n -0000050730 00000 n -0000050784 00000 n -0000050871 00000 n -0000050904 00000 n -0000050952 00000 n -0000051039 00000 n -0000051086 00000 n -0000051172 00000 n -0000051219 00000 n -0000051305 00000 n -0000051346 00000 n -0000051391 00000 n -0000051478 00000 n -0000051523 00000 n -0000051609 00000 n -0000051642 00000 n -0000051697 00000 n -0000051783 00000 n -0000051808 00000 n -0000051861 00000 n -0000051948 00000 n -0000051998 00000 n -0000052085 00000 n -0000052118 00000 n -0000052237 00000 n -0000052323 00000 n -0000052366 00000 n -0000052453 00000 n -0000052496 00000 n -0000052583 00000 n -0000052624 00000 n -0000052670 00000 n -0000052757 00000 n -0000052782 00000 n -0000052828 00000 n -0000052915 00000 n -0000052961 00000 n -0000053046 00000 n -0000053090 00000 n -0000053177 00000 n -0000053228 00000 n -0000053315 00000 n -0000053364 00000 n -0000053451 00000 n -0000053499 00000 n -0000053585 00000 n -0000053650 00000 n -0000053713 00000 n -0000053800 00000 n -0000053858 00000 n -0000053945 00000 n -0000054039 00000 n -0000054125 00000 n -0000054227 00000 n -0000054276 00000 n -0000054379 00000 n -0000054422 00000 n -0000054508 00000 n -0000054556 00000 n -0000054643 00000 n -0000054684 00000 n -0000054771 00000 n -0000054815 00000 n -0000054902 00000 n -0000054946 00000 n -0000055032 00000 n -0000055097 00000 n -0000055143 00000 n -0000055230 00000 n -0000055255 00000 n -0000055304 00000 n -0000055391 00000 n -0000055445 00000 n -0000055532 00000 n -0000055583 00000 n -0000055670 00000 n -0000055721 00000 n -0000055807 00000 n -0000055861 00000 n -0000055947 00000 n -0000056004 00000 n -0000056054 00000 n -0000056141 00000 n -0000056191 00000 n -0000056277 00000 n -0000056341 00000 n -0000056428 00000 n -0000056469 00000 n -0000056533 00000 n -0000056620 00000 n -0000056645 00000 n -0000056687 00000 n -0000056773 00000 n -0000056824 00000 n -0000056911 00000 n -0000056958 00000 n -0000057045 00000 n -0000057086 00000 n -0000057135 00000 n -0000057222 00000 n -0000057270 00000 n -0000057357 00000 n -0000057399 00000 n -0000057485 00000 n -0000057526 00000 n -0000057569 00000 n -0000057656 00000 n -0000057706 00000 n -0000057793 00000 n -0000057841 00000 n -0000057928 00000 n -0000057982 00000 n -0000058067 00000 n -0000058116 00000 n -0000058161 00000 n -0000058248 00000 n -0000058305 00000 n -0000058392 00000 n -0000058488 00000 n -0000058574 00000 n -0000058615 00000 n -0000058677 00000 n -0000058764 00000 n -0000058789 00000 n -0000058838 00000 n -0000058925 00000 n -0000058950 00000 n -0000058998 00000 n -0000059085 00000 n -0000059135 00000 n -0000059221 00000 n -0000059265 00000 n -0000059351 00000 n -0000059395 00000 n -0000059481 00000 n -0000059531 00000 n -0000059617 00000 n -0000059667 00000 n -0000059752 00000 n -0000059801 00000 n -0000059885 00000 n -0000059932 00000 n -0000060016 00000 n -0000060097 00000 n -0000060145 00000 n -0000060232 00000 n -0000060280 00000 n -0000060367 00000 n -0000060417 00000 n -0000060504 00000 n -0000060552 00000 n -0000060639 00000 n -0000060688 00000 n -0000060736 00000 n -0000060823 00000 n -0000060871 00000 n -0000060956 00000 n -0000061001 00000 n -0000061087 00000 n -0000061130 00000 n -0000061216 00000 n -0000061257 00000 n -0000061343 00000 n -0000061392 00000 n -0000061478 00000 n -0000061524 00000 n -0000061610 00000 n -0000061655 00000 n -0000061741 00000 n -0000061793 00000 n -0000061879 00000 n -0000061929 00000 n -0000062015 00000 n -0000062061 00000 n -0000062147 00000 n -0000062190 00000 n -0000062276 00000 n -0000062320 00000 n -0000062406 00000 n -0000062449 00000 n -0000062535 00000 n -0000062580 00000 n -0000062666 00000 n -0000062704 00000 n -0000062790 00000 n -0000062832 00000 n -0000062918 00000 n -0000062961 00000 n -0000063047 00000 n -0000063085 00000 n -0000063171 00000 n -0000063213 00000 n -0000063299 00000 n -0000063343 00000 n -0000063429 00000 n -0000063476 00000 n -0000063562 00000 n -0000063610 00000 n -0000063695 00000 n -0000063896 00000 n -0000063946 00000 n -0000064033 00000 n -0000064083 00000 n -0000064169 00000 n -0000064202 00000 n -0000064251 00000 n -0000064337 00000 n -0000064384 00000 n -0000064471 00000 n -0000064504 00000 n -0000064619 00000 n -0000064706 00000 n -0000064731 00000 n -0000064813 00000 n -0000064900 00000 n -0000064985 00000 n -0000065072 00000 n -0000065105 00000 n -0000065160 00000 n -0000065247 00000 n -0000065303 00000 n -0000065390 00000 n +0000025146 00000 n +0000025250 00000 n +0000025354 00000 n +0000025458 00000 n +0000025562 00000 n +0000025666 00000 n +0000025770 00000 n +0000025873 00000 n +0000025977 00000 n +0000026081 00000 n +0000026185 00000 n +0000026289 00000 n +0000026392 00000 n +0000026496 00000 n +0000026599 00000 n +0000026701 00000 n +0000026803 00000 n +0000027180 00000 n +0000027283 00000 n +0000027387 00000 n +0000027491 00000 n +0000027594 00000 n +0000027697 00000 n +0000027801 00000 n +0000027905 00000 n +0000028009 00000 n +0000028090 00000 n +0000028143 00000 n +0000028230 00000 n +0000028284 00000 n +0000028370 00000 n +0000028437 00000 n +0000028523 00000 n +0000028626 00000 n +0000028730 00000 n +0000028834 00000 n +0000028938 00000 n +0000029042 00000 n +0000029146 00000 n +0000029250 00000 n +0000029354 00000 n +0000029458 00000 n +0000029562 00000 n +0000029666 00000 n +0000029770 00000 n +0000029874 00000 n +0000029978 00000 n +0000030082 00000 n +0000030186 00000 n +0000030290 00000 n +0000030394 00000 n +0000030498 00000 n +0000030601 00000 n +0000030705 00000 n +0000030809 00000 n +0000030913 00000 n +0000031017 00000 n +0000031121 00000 n +0000031225 00000 n +0000031329 00000 n +0000031433 00000 n +0000031537 00000 n +0000031641 00000 n +0000031745 00000 n +0000031848 00000 n +0000031950 00000 n +0000032052 00000 n +0000032365 00000 n +0000032469 00000 n +0000032572 00000 n +0000032676 00000 n +0000032780 00000 n +0000032884 00000 n +0000032988 00000 n +0000033092 00000 n +0000033196 00000 n +0000033300 00000 n +0000033404 00000 n +0000033508 00000 n +0000033612 00000 n +0000033716 00000 n +0000033820 00000 n +0000033924 00000 n +0000034028 00000 n +0000034132 00000 n +0000034236 00000 n +0000034340 00000 n +0000034444 00000 n +0000034547 00000 n +0000034651 00000 n +0000034755 00000 n +0000034859 00000 n +0000034962 00000 n +0000035066 00000 n +0000035170 00000 n +0000035273 00000 n +0000035377 00000 n +0000035481 00000 n +0000035585 00000 n +0000035689 00000 n +0000035793 00000 n +0000035897 00000 n +0000036001 00000 n +0000036105 00000 n +0000036209 00000 n +0000036312 00000 n +0000036416 00000 n +0000036520 00000 n +0000036624 00000 n +0000036728 00000 n +0000036832 00000 n +0000036936 00000 n +0000037040 00000 n +0000037144 00000 n +0000037248 00000 n +0000037352 00000 n +0000037455 00000 n +0000037557 00000 n +0000037659 00000 n +0000038084 00000 n +0000038187 00000 n +0000038291 00000 n +0000038395 00000 n +0000038499 00000 n +0000038603 00000 n +0000038707 00000 n +0000038811 00000 n +0000038915 00000 n +0000039019 00000 n +0000039123 00000 n +0000039226 00000 n +0000039330 00000 n +0000039434 00000 n +0000039537 00000 n +0000039641 00000 n +0000039745 00000 n +0000039849 00000 n +0000039952 00000 n +0000040056 00000 n +0000040160 00000 n +0000040264 00000 n +0000040368 00000 n +0000040472 00000 n +0000040576 00000 n +0000040680 00000 n +0000040784 00000 n +0000040888 00000 n +0000040992 00000 n +0000041096 00000 n +0000041200 00000 n +0000041304 00000 n +0000041408 00000 n +0000041512 00000 n +0000041616 00000 n +0000041719 00000 n +0000041823 00000 n +0000041927 00000 n +0000042031 00000 n +0000042135 00000 n +0000042239 00000 n +0000042343 00000 n +0000042447 00000 n +0000042551 00000 n +0000042655 00000 n +0000042759 00000 n +0000042863 00000 n +0000042967 00000 n +0000043071 00000 n +0000043174 00000 n +0000043275 00000 n +0000043377 00000 n +0000043802 00000 n +0000043906 00000 n +0000044010 00000 n +0000044114 00000 n +0000044218 00000 n +0000044322 00000 n +0000044426 00000 n +0000044530 00000 n +0000044633 00000 n +0000044737 00000 n +0000044841 00000 n +0000044945 00000 n +0000045049 00000 n +0000045153 00000 n +0000045257 00000 n +0000045361 00000 n +0000045465 00000 n +0000045569 00000 n +0000045673 00000 n +0000045777 00000 n +0000045881 00000 n +0000045984 00000 n +0000046088 00000 n +0000046192 00000 n +0000046296 00000 n +0000046400 00000 n +0000046504 00000 n +0000046608 00000 n +0000046712 00000 n +0000046816 00000 n +0000046920 00000 n +0000047024 00000 n +0000047128 00000 n +0000047232 00000 n +0000047335 00000 n +0000047439 00000 n +0000047543 00000 n +0000047647 00000 n +0000047751 00000 n +0000047855 00000 n +0000047959 00000 n +0000048063 00000 n +0000048167 00000 n +0000048271 00000 n +0000048375 00000 n +0000048479 00000 n +0000048583 00000 n +0000048687 00000 n +0000048791 00000 n +0000048894 00000 n +0000048996 00000 n +0000049098 00000 n +0000049523 00000 n +0000049627 00000 n +0000049731 00000 n +0000049835 00000 n +0000049938 00000 n +0000050042 00000 n +0000050146 00000 n +0000050250 00000 n +0000050354 00000 n +0000050458 00000 n +0000050562 00000 n +0000050666 00000 n +0000050770 00000 n +0000050874 00000 n +0000050978 00000 n +0000051082 00000 n +0000051186 00000 n +0000051290 00000 n +0000051393 00000 n +0000051497 00000 n +0000051601 00000 n +0000051705 00000 n +0000051809 00000 n +0000051912 00000 n +0000052016 00000 n +0000052120 00000 n +0000052224 00000 n +0000052328 00000 n +0000052432 00000 n +0000052536 00000 n +0000052639 00000 n +0000052742 00000 n +0000052846 00000 n +0000052950 00000 n +0000053054 00000 n +0000053343 00000 n +0000053396 00000 n +0000053483 00000 n +0000053508 00000 n +0000053562 00000 n +0000053649 00000 n +0000053703 00000 n +0000053790 00000 n +0000053823 00000 n +0000053871 00000 n +0000053958 00000 n +0000054005 00000 n +0000054091 00000 n +0000054138 00000 n +0000054224 00000 n +0000054265 00000 n +0000054310 00000 n +0000054397 00000 n +0000054442 00000 n +0000054528 00000 n +0000054561 00000 n +0000054616 00000 n +0000054701 00000 n +0000054726 00000 n +0000054779 00000 n +0000054866 00000 n +0000054916 00000 n +0000055003 00000 n +0000055036 00000 n +0000055155 00000 n +0000055241 00000 n +0000055284 00000 n +0000055371 00000 n +0000055414 00000 n +0000055501 00000 n +0000055542 00000 n +0000055588 00000 n +0000055675 00000 n +0000055700 00000 n +0000055746 00000 n +0000055833 00000 n +0000055879 00000 n +0000055964 00000 n +0000056008 00000 n +0000056095 00000 n +0000056146 00000 n +0000056233 00000 n +0000056282 00000 n +0000056369 00000 n +0000056417 00000 n +0000056503 00000 n +0000056568 00000 n +0000056631 00000 n +0000056718 00000 n +0000056776 00000 n +0000056863 00000 n +0000056957 00000 n +0000057043 00000 n +0000057145 00000 n +0000057194 00000 n +0000057297 00000 n +0000057340 00000 n +0000057426 00000 n +0000057474 00000 n +0000057561 00000 n +0000057602 00000 n +0000057689 00000 n +0000057733 00000 n +0000057820 00000 n +0000057864 00000 n +0000057950 00000 n +0000058015 00000 n +0000058061 00000 n +0000058148 00000 n +0000058173 00000 n +0000058222 00000 n +0000058309 00000 n +0000058363 00000 n +0000058450 00000 n +0000058501 00000 n +0000058588 00000 n +0000058639 00000 n +0000058725 00000 n +0000058779 00000 n +0000058864 00000 n +0000058921 00000 n +0000058971 00000 n +0000059058 00000 n +0000059083 00000 n +0000059133 00000 n +0000059220 00000 n +0000059270 00000 n +0000059356 00000 n +0000059420 00000 n +0000059507 00000 n +0000059548 00000 n +0000059612 00000 n +0000059699 00000 n +0000059724 00000 n +0000059766 00000 n +0000059852 00000 n +0000059903 00000 n +0000059990 00000 n +0000060037 00000 n +0000060124 00000 n +0000060165 00000 n +0000060214 00000 n +0000060301 00000 n +0000060349 00000 n +0000060436 00000 n +0000060478 00000 n +0000060564 00000 n +0000060605 00000 n +0000060648 00000 n +0000060735 00000 n +0000060785 00000 n +0000060872 00000 n +0000060920 00000 n +0000061007 00000 n +0000061061 00000 n +0000061146 00000 n +0000061195 00000 n +0000061240 00000 n +0000061327 00000 n +0000061384 00000 n +0000061471 00000 n +0000061567 00000 n +0000061653 00000 n +0000061694 00000 n +0000061756 00000 n +0000061843 00000 n +0000061868 00000 n +0000061917 00000 n +0000062004 00000 n +0000062029 00000 n +0000062077 00000 n +0000062164 00000 n +0000062214 00000 n +0000062301 00000 n +0000062345 00000 n +0000062432 00000 n +0000062476 00000 n +0000062563 00000 n +0000062613 00000 n +0000062699 00000 n +0000062749 00000 n +0000062834 00000 n +0000062883 00000 n +0000062968 00000 n +0000063041 00000 n +0000063088 00000 n +0000063175 00000 n +0000063200 00000 n +0000063248 00000 n +0000063335 00000 n +0000063383 00000 n +0000063470 00000 n +0000063520 00000 n +0000063607 00000 n +0000063655 00000 n +0000063742 00000 n +0000063791 00000 n +0000063839 00000 n +0000063926 00000 n +0000063974 00000 n +0000064059 00000 n +0000064104 00000 n +0000064190 00000 n +0000064233 00000 n +0000064319 00000 n +0000064360 00000 n +0000064446 00000 n +0000064495 00000 n +0000064581 00000 n +0000064627 00000 n +0000064713 00000 n +0000064758 00000 n +0000064844 00000 n +0000064896 00000 n +0000064982 00000 n +0000065032 00000 n +0000065118 00000 n +0000065164 00000 n +0000065250 00000 n +0000065293 00000 n +0000065379 00000 n 0000065423 00000 n -0000065471 00000 n -0000065558 00000 n -0000065632 00000 n -0000065719 00000 n -0000065787 00000 n -0000065874 00000 n -0000065928 00000 n -0000066015 00000 n -0000066083 00000 n -0000066170 00000 n -0000066244 00000 n -0000066331 00000 n -0000066379 00000 n -0000066466 00000 n -0000066523 00000 n -0000066610 00000 n -0000066691 00000 n -0000066746 00000 n -0000066833 00000 n -0000066914 00000 n -0000067001 00000 n -0000067034 00000 n -0000067087 00000 n -0000067174 00000 n -0000067199 00000 n -0000067255 00000 n -0000067342 00000 n -0000067411 00000 n -0000067498 00000 n -0000067549 00000 n -0000067636 00000 n -0000067723 00000 n -0000067810 00000 n -0000067866 00000 n -0000067953 00000 n +0000065509 00000 n +0000065552 00000 n +0000065638 00000 n +0000065683 00000 n +0000065769 00000 n +0000065807 00000 n +0000065893 00000 n +0000065935 00000 n +0000066021 00000 n +0000066064 00000 n +0000066150 00000 n +0000066188 00000 n +0000066274 00000 n +0000066316 00000 n +0000066402 00000 n +0000066446 00000 n +0000066532 00000 n +0000066579 00000 n +0000066665 00000 n +0000066713 00000 n +0000066798 00000 n +0000066999 00000 n +0000067049 00000 n +0000067136 00000 n +0000067186 00000 n +0000067272 00000 n +0000067305 00000 n +0000067354 00000 n +0000067440 00000 n +0000067487 00000 n +0000067574 00000 n +0000067607 00000 n +0000067722 00000 n +0000067809 00000 n +0000067834 00000 n +0000067916 00000 n 0000068003 00000 n -0000068090 00000 n -0000068155 00000 n -0000068207 00000 n -0000068294 00000 n +0000068088 00000 n +0000068175 00000 n +0000068208 00000 n +0000068263 00000 n 0000068350 00000 n -0000068437 00000 n -0000068485 00000 n -0000068572 00000 n -0000068620 00000 n -0000068707 00000 n -0000068756 00000 n -0000068797 00000 n -0000068882 00000 n -0000068907 00000 n -0000068951 00000 n -0000069038 00000 n -0000069083 00000 n -0000069170 00000 n -0000069214 00000 n -0000069301 00000 n -0000069345 00000 n -0000069432 00000 n -0000069474 00000 n -0000069561 00000 n -0000069609 00000 n -0000069696 00000 n -0000069761 00000 n -0000069809 00000 n -0000069895 00000 n -0000069920 00000 n -0000069973 00000 n -0000070059 00000 n -0000070084 00000 n -0000070138 00000 n -0000070225 00000 n -0000070250 00000 n -0000070329 00000 n -0000070416 00000 n -0000070498 00000 n -0000070584 00000 n -0000070659 00000 n -0000070746 00000 n -0000070819 00000 n -0000070906 00000 n -0000070955 00000 n -0000071033 00000 n -0000071120 00000 n -0000071145 00000 n -0000071208 00000 n -0000071295 00000 n -0000071358 00000 n -0000071445 00000 n -0000071499 00000 n -0000071586 00000 n -0000071627 00000 n -0000071674 00000 n -0000071761 00000 n -0000071786 00000 n -0000071820 00000 n -0000071854 00000 n -0000075683 00000 n +0000068406 00000 n +0000068493 00000 n +0000068526 00000 n +0000068574 00000 n +0000068661 00000 n +0000068735 00000 n +0000068822 00000 n +0000068890 00000 n +0000068977 00000 n +0000069031 00000 n +0000069118 00000 n +0000069186 00000 n +0000069273 00000 n +0000069347 00000 n +0000069434 00000 n +0000069482 00000 n +0000069569 00000 n +0000069626 00000 n +0000069713 00000 n +0000069794 00000 n +0000069849 00000 n +0000069936 00000 n +0000070017 00000 n +0000070104 00000 n +0000070137 00000 n +0000070190 00000 n +0000070277 00000 n +0000070302 00000 n +0000070358 00000 n +0000070445 00000 n +0000070514 00000 n +0000070601 00000 n +0000070652 00000 n +0000070739 00000 n +0000070826 00000 n +0000070913 00000 n +0000070969 00000 n +0000071056 00000 n +0000071106 00000 n +0000071193 00000 n +0000071258 00000 n +0000071310 00000 n +0000071397 00000 n +0000071453 00000 n +0000071540 00000 n +0000071588 00000 n +0000071675 00000 n +0000071723 00000 n +0000071810 00000 n +0000071859 00000 n +0000071900 00000 n +0000071987 00000 n +0000072031 00000 n +0000072118 00000 n +0000072163 00000 n +0000072250 00000 n +0000072294 00000 n +0000072381 00000 n +0000072425 00000 n +0000072512 00000 n +0000072554 00000 n +0000072641 00000 n +0000072689 00000 n +0000072776 00000 n +0000072849 00000 n +0000072897 00000 n +0000072983 00000 n +0000073008 00000 n +0000073061 00000 n +0000073147 00000 n +0000073172 00000 n +0000073226 00000 n +0000073313 00000 n +0000073338 00000 n +0000073393 00000 n +0000073479 00000 n +0000073547 00000 n +0000073633 00000 n +0000073708 00000 n +0000073795 00000 n +0000073865 00000 n +0000073951 00000 n +0000074030 00000 n +0000074117 00000 n +0000074174 00000 n +0000074256 00000 n +0000074342 00000 n +0000074417 00000 n +0000074504 00000 n +0000074577 00000 n +0000074664 00000 n +0000074742 00000 n +0000074829 00000 n +0000074878 00000 n +0000074926 00000 n +0000075013 00000 n +0000075038 00000 n +0000075086 00000 n +0000075173 00000 n +0000075198 00000 n +0000075261 00000 n +0000075348 00000 n +0000075411 00000 n +0000075498 00000 n +0000075552 00000 n +0000075639 00000 n +0000075680 00000 n 0000075727 00000 n -0000075771 00000 n -0000075815 00000 n -0000075859 00000 n -0000075903 00000 n -0000075947 00000 n -0000075991 00000 n -0000076035 00000 n -0000076079 00000 n -0000076123 00000 n -0000076167 00000 n -0000076211 00000 n -0000076255 00000 n -0000076299 00000 n -0000076343 00000 n -0000076387 00000 n -0000076431 00000 n -0000076475 00000 n -0000076519 00000 n -0000076563 00000 n -0000076607 00000 n -0000076651 00000 n -0000076695 00000 n -0000076739 00000 n -0000076783 00000 n -0000076827 00000 n -0000076871 00000 n -0000076915 00000 n -0000076959 00000 n -0000077003 00000 n -0000077047 00000 n -0000077091 00000 n -0000077135 00000 n -0000077179 00000 n -0000077223 00000 n -0000077267 00000 n -0000077311 00000 n -0000077355 00000 n -0000077399 00000 n -0000077443 00000 n -0000077487 00000 n -0000077531 00000 n -0000077575 00000 n -0000077619 00000 n -0000077663 00000 n -0000077707 00000 n -0000077751 00000 n -0000077795 00000 n -0000077839 00000 n -0000077883 00000 n -0000077927 00000 n -0000077971 00000 n -0000078015 00000 n -0000078059 00000 n -0000078103 00000 n -0000078147 00000 n -0000078191 00000 n -0000078235 00000 n -0000078279 00000 n -0000078323 00000 n -0000078367 00000 n -0000078411 00000 n -0000078455 00000 n -0000078499 00000 n -0000078543 00000 n -0000078587 00000 n -0000078631 00000 n -0000078675 00000 n -0000078719 00000 n -0000078763 00000 n -0000078807 00000 n -0000078851 00000 n -0000078895 00000 n -0000078939 00000 n -0000078983 00000 n -0000079027 00000 n -0000079071 00000 n -0000079115 00000 n -0000079159 00000 n -0000079203 00000 n -0000079247 00000 n -0000079291 00000 n -0000079335 00000 n -0000079379 00000 n -0000079423 00000 n -0000079467 00000 n -0000079511 00000 n -0000079555 00000 n -0000079599 00000 n -0000079643 00000 n -0000079687 00000 n -0000079731 00000 n -0000079775 00000 n -0000079819 00000 n -0000079863 00000 n -0000079907 00000 n -0000079951 00000 n -0000079995 00000 n -0000080039 00000 n -0000080083 00000 n -0000080127 00000 n -0000080171 00000 n -0000080215 00000 n -0000080259 00000 n -0000080303 00000 n -0000080347 00000 n -0000080391 00000 n -0000080435 00000 n -0000080479 00000 n -0000080523 00000 n -0000080567 00000 n -0000080611 00000 n -0000080655 00000 n -0000080699 00000 n -0000080743 00000 n -0000080787 00000 n -0000080831 00000 n -0000080875 00000 n -0000080919 00000 n -0000080963 00000 n -0000081007 00000 n -0000081051 00000 n -0000081095 00000 n -0000081139 00000 n -0000081183 00000 n -0000081227 00000 n -0000081271 00000 n -0000081315 00000 n -0000081359 00000 n -0000081403 00000 n -0000081447 00000 n -0000081491 00000 n -0000081535 00000 n -0000081579 00000 n -0000081623 00000 n -0000081667 00000 n -0000081711 00000 n -0000081755 00000 n -0000081799 00000 n -0000081843 00000 n -0000081887 00000 n -0000081931 00000 n -0000081975 00000 n -0000082019 00000 n -0000082063 00000 n -0000082107 00000 n -0000082151 00000 n -0000082195 00000 n -0000082239 00000 n -0000082283 00000 n -0000082327 00000 n -0000082371 00000 n -0000082415 00000 n -0000082459 00000 n -0000082503 00000 n -0000082547 00000 n -0000082591 00000 n -0000082635 00000 n -0000082679 00000 n -0000082723 00000 n -0000082767 00000 n -0000082811 00000 n -0000082855 00000 n -0000082899 00000 n -0000082943 00000 n -0000082987 00000 n -0000083031 00000 n -0000083075 00000 n -0000083119 00000 n -0000083163 00000 n -0000083207 00000 n -0000083251 00000 n -0000083295 00000 n -0000083339 00000 n -0000083383 00000 n -0000083427 00000 n -0000083471 00000 n -0000083515 00000 n -0000083559 00000 n -0000083603 00000 n -0000083647 00000 n -0000083691 00000 n -0000083735 00000 n -0000083779 00000 n -0000083823 00000 n -0000083867 00000 n -0000083911 00000 n -0000083955 00000 n -0000083999 00000 n -0000084043 00000 n -0000084087 00000 n -0000084131 00000 n -0000084175 00000 n -0000084219 00000 n -0000084263 00000 n -0000084307 00000 n -0000084351 00000 n -0000084395 00000 n -0000084439 00000 n -0000084483 00000 n -0000084527 00000 n -0000084571 00000 n -0000084615 00000 n -0000084659 00000 n -0000084703 00000 n -0000084747 00000 n -0000084791 00000 n -0000084835 00000 n -0000084879 00000 n -0000084923 00000 n -0000084967 00000 n -0000085011 00000 n -0000085055 00000 n -0000085099 00000 n -0000085143 00000 n -0000085187 00000 n -0000085231 00000 n -0000085275 00000 n -0000085319 00000 n -0000085363 00000 n -0000085407 00000 n -0000085451 00000 n -0000085495 00000 n -0000085540 00000 n -0000085585 00000 n -0000085630 00000 n -0000085675 00000 n -0000085720 00000 n -0000085765 00000 n -0000085810 00000 n -0000085855 00000 n -0000085900 00000 n -0000085945 00000 n -0000085990 00000 n -0000087128 00000 n -0000087289 00000 n -0000087458 00000 n -0000087651 00000 n -0000091401 00000 n -0000091595 00000 n -0000096208 00000 n -0000096402 00000 n -0000100424 00000 n -0000100618 00000 n -0000105295 00000 n -0000105489 00000 n -0000108864 00000 n -0000109025 00000 n -0000109259 00000 n -0000109463 00000 n -0000111991 00000 n -0000112175 00000 n -0000115562 00000 n -0000115737 00000 n -0000118870 00000 n -0000119045 00000 n -0000121911 00000 n -0000122086 00000 n -0000123648 00000 n -0000123860 00000 n -0000125016 00000 n -0000125204 00000 n -0000126725 00000 n -0000126922 00000 n -0000128358 00000 n -0000128573 00000 n -0000129938 00000 n -0000130117 00000 n -0000131659 00000 n -0000131829 00000 n -0000133376 00000 n -0000133555 00000 n -0000134989 00000 n -0000135168 00000 n -0000136881 00000 n -0000137060 00000 n -0000138608 00000 n -0000138787 00000 n -0000140477 00000 n -0000140671 00000 n -0000142391 00000 n -0000142589 00000 n -0000143950 00000 n -0000144148 00000 n -0000145832 00000 n -0000146020 00000 n -0000147693 00000 n -0000147872 00000 n -0000149972 00000 n -0000150151 00000 n -0000151924 00000 n -0000152103 00000 n -0000153783 00000 n -0000153971 00000 n -0000155826 00000 n -0000156038 00000 n -0000158096 00000 n -0000158309 00000 n -0000159876 00000 n -0000160065 00000 n -0000161340 00000 n -0000161528 00000 n -0000163054 00000 n -0000163257 00000 n -0000164983 00000 n -0000165186 00000 n -0000166036 00000 n -0000166248 00000 n -0000167758 00000 n -0000167938 00000 n -0000168696 00000 n -0000168917 00000 n -0000170715 00000 n -0000170921 00000 n -0000172803 00000 n -0000173000 00000 n -0000174586 00000 n -0000174797 00000 n -0000176366 00000 n -0000176554 00000 n -0000177456 00000 n -0000177687 00000 n -0000179554 00000 n -0000179766 00000 n -0000181714 00000 n -0000181945 00000 n -0000183955 00000 n -0000184177 00000 n -0000185990 00000 n -0000186212 00000 n -0000187950 00000 n -0000188148 00000 n -0000190047 00000 n -0000190259 00000 n -0000191158 00000 n -0000191337 00000 n -0000192800 00000 n -0000192979 00000 n -0000194295 00000 n -0000194474 00000 n -0000196096 00000 n -0000196275 00000 n -0000197772 00000 n -0000197942 00000 n -0000198286 00000 n -0000198489 00000 n -0000200392 00000 n -0000200552 00000 n -0000201675 00000 n -0000201905 00000 n -0000203429 00000 n -0000203641 00000 n -0000205430 00000 n -0000205623 00000 n -0000207029 00000 n -0000207218 00000 n -0000208909 00000 n -0000209088 00000 n -0000210834 00000 n -0000211022 00000 n -0000212929 00000 n -0000213142 00000 n -0000215027 00000 n -0000215267 00000 n -0000217360 00000 n -0000217572 00000 n -0000219173 00000 n -0000219379 00000 n -0000220540 00000 n -0000220728 00000 n -0000221926 00000 n -0000222105 00000 n -0000223111 00000 n -0000223299 00000 n -0000224926 00000 n -0000225114 00000 n -0000226383 00000 n -0000226572 00000 n -0000227880 00000 n -0000228050 00000 n -0000228522 00000 n -0000228735 00000 n -0000230550 00000 n -0000230763 00000 n -0000232341 00000 n -0000232563 00000 n -0000234382 00000 n -0000234622 00000 n -0000236345 00000 n -0000236552 00000 n -0000238397 00000 n -0000238628 00000 n -0000240518 00000 n -0000240740 00000 n -0000242686 00000 n -0000242898 00000 n -0000244947 00000 n -0000245150 00000 n -0000247484 00000 n -0000247706 00000 n -0000249950 00000 n -0000250157 00000 n -0000252137 00000 n -0000252316 00000 n -0000253874 00000 n -0000254044 00000 n -0000256044 00000 n -0000256232 00000 n -0000258319 00000 n -0000258507 00000 n -0000260317 00000 n -0000260495 00000 n -0000262345 00000 n -0000262505 00000 n -0000263289 00000 n -0000263483 00000 n -0000265084 00000 n -0000265273 00000 n -0000266934 00000 n -0000267104 00000 n -0000267926 00000 n -0000268148 00000 n -0000270284 00000 n -0000270497 00000 n -0000272551 00000 n -0000272773 00000 n -0000273995 00000 n -0000274208 00000 n -0000275805 00000 n -0000276027 00000 n -0000277850 00000 n -0000278072 00000 n -0000279804 00000 n -0000279998 00000 n -0000280725 00000 n -0000280895 00000 n -0000282572 00000 n -0000282751 00000 n -0000284566 00000 n -0000284735 00000 n -0000286578 00000 n -0000286747 00000 n -0000287736 00000 n -0000287915 00000 n -0000289563 00000 n -0000289751 00000 n -0000291242 00000 n -0000291430 00000 n -0000292855 00000 n -0000293025 00000 n -0000294693 00000 n -0000294863 00000 n -0000295420 00000 n -0000295599 00000 n -0000297205 00000 n -0000297384 00000 n -0000299054 00000 n -0000299224 00000 n -0000300773 00000 n -0000300943 00000 n -0000302243 00000 n -0000302413 00000 n -0000304039 00000 n -0000304209 00000 n -0000305796 00000 n -0000306000 00000 n -0000307587 00000 n -0000307781 00000 n -0000308949 00000 n -0000309152 00000 n -0000310725 00000 n -0000310903 00000 n -0000311589 00000 n -0000311792 00000 n -0000313470 00000 n -0000313658 00000 n -0000315387 00000 n -0000315446 00000 n -0000315549 00000 n -0000315714 00000 n -0000315796 00000 n -0000315904 00000 n -0000316083 00000 n -0000316200 00000 n -0000316334 00000 n -0000316469 00000 n -0000316616 00000 n -0000316764 00000 n -0000316941 00000 n -0000317067 00000 n -0000317205 00000 n -0000317365 00000 n -0000317513 00000 n -0000317699 00000 n -0000317855 00000 n -0000317968 00000 n -0000318085 00000 n -0000318220 00000 n -0000318361 00000 n -0000318476 00000 n -0000318587 00000 n -0000318764 00000 n -0000318867 00000 n -0000318983 00000 n -0000319132 00000 n -0000319231 00000 n -0000319344 00000 n -0000319457 00000 n -0000319570 00000 n -0000319683 00000 n -0000319796 00000 n -0000319909 00000 n -0000320022 00000 n -0000320135 00000 n -0000320250 00000 n -0000320351 00000 n -0000320464 00000 n -0000320655 00000 n -0000320752 00000 n -0000320937 00000 n -0000321040 00000 n -0000321163 00000 n -0000321284 00000 n -0000321395 00000 n -0000321590 00000 n -0000321705 00000 n -0000321828 00000 n -0000321945 00000 n -0000322062 00000 n -0000322166 00000 n -0000322354 00000 n -0000322576 00000 n -0000322714 00000 n -0000322876 00000 n -0000323012 00000 n -0000323114 00000 n -0000323331 00000 n -0000323435 00000 n -0000323566 00000 n -0000323686 00000 n -0000323892 00000 n -0000324019 00000 n -0000324103 00000 n -0000324308 00000 n -0000324466 00000 n -0000324613 00000 n -0000324740 00000 n -0000324920 00000 n -0000325029 00000 n -0000325143 00000 n -0000325287 00000 n -0000325450 00000 n -0000325599 00000 n -0000325779 00000 n -0000325882 00000 n -0000326038 00000 n -0000326148 00000 n -0000326292 00000 n -0000326433 00000 n -0000326582 00000 n -0000326698 00000 n -0000326861 00000 n -0000326971 00000 n -0000327110 00000 n -0000327236 00000 n -0000327352 00000 n -0000327481 00000 n -0000327657 00000 n -0000327760 00000 n -0000327891 00000 n -0000328020 00000 n -0000328162 00000 n -0000328286 00000 n -0000328415 00000 n -0000328542 00000 n -0000328664 00000 n -0000328769 00000 n -0000328933 00000 n -0000329036 00000 n -0000329171 00000 n -0000329351 00000 n -0000329478 00000 n -0000329614 00000 n -0000329748 00000 n -0000329954 00000 n -0000330054 00000 n -0000330172 00000 n -0000330337 00000 n -0000330428 00000 n -0000330589 00000 n -0000330715 00000 n -0000330842 00000 n -0000330982 00000 n -0000331118 00000 n -0000331226 00000 n -0000331400 00000 n -0000331506 00000 n -0000331626 00000 n -0000331738 00000 n -0000331855 00000 n -0000331957 00000 n -0000332164 00000 n -0000332276 00000 n -0000332392 00000 n -0000332537 00000 n -0000332746 00000 n -0000332881 00000 n -0000333036 00000 n -0000333162 00000 n -0000333294 00000 n -0000333428 00000 n -0000333560 00000 n -0000333736 00000 n -0000333872 00000 n -0000334026 00000 n -0000334172 00000 n -0000334398 00000 n -0000334510 00000 n -0000334626 00000 n -0000334820 00000 n -0000334964 00000 n -0000335081 00000 n -0000335227 00000 n -0000335385 00000 n -0000335503 00000 n -0000335723 00000 n -0000335822 00000 n -0000335940 00000 n -0000336068 00000 n -0000336226 00000 n -0000336397 00000 n -0000336513 00000 n -0000336624 00000 n -0000336760 00000 n -0000336891 00000 n -0000337039 00000 n -0000337184 00000 n -0000337285 00000 n -0000337462 00000 n -0000337574 00000 n -0000337705 00000 n -0000337829 00000 n -0000337996 00000 n -0000338113 00000 n -0000338243 00000 n -0000338383 00000 n -0000338520 00000 n -0000338656 00000 n -0000338792 00000 n -0000338929 00000 n -0000339041 00000 n -0000339216 00000 n -0000339319 00000 n -0000339470 00000 n -0000339572 00000 n -0000339694 00000 n -0000339826 00000 n -0000339946 00000 n -0000340061 00000 n -0000340175 00000 n -0000340288 00000 n -0000340405 00000 n -0000340520 00000 n -0000340636 00000 n -0000340751 00000 n -0000340867 00000 n -0000340989 00000 n -0000341110 00000 n -0000341229 00000 n -0000341347 00000 n -0000341467 00000 n -0000341570 00000 n -0000341736 00000 n -0000341856 00000 n -0000342025 00000 n -0000342213 00000 n -0000342394 00000 n -0000342550 00000 n -0000342738 00000 n -0000342842 00000 n -0000342995 00000 n -0000343106 00000 n -0000343214 00000 n -0000343364 00000 n -0000343468 00000 n -0000343586 00000 n -0000343704 00000 n -0000343825 00000 n -0000343961 00000 n -0000344060 00000 n +0000075814 00000 n +0000075839 00000 n +0000075873 00000 n +0000075907 00000 n +0000080020 00000 n +0000080064 00000 n +0000080108 00000 n +0000080152 00000 n +0000080196 00000 n +0000080240 00000 n +0000080284 00000 n +0000080328 00000 n +0000080372 00000 n +0000080416 00000 n +0000080460 00000 n +0000080504 00000 n +0000080548 00000 n +0000080592 00000 n +0000080636 00000 n +0000080680 00000 n +0000080724 00000 n +0000080768 00000 n +0000080812 00000 n +0000080856 00000 n +0000080900 00000 n +0000080944 00000 n +0000080988 00000 n +0000081032 00000 n +0000081076 00000 n +0000081120 00000 n +0000081164 00000 n +0000081208 00000 n +0000081252 00000 n +0000081296 00000 n +0000081340 00000 n +0000081384 00000 n +0000081428 00000 n +0000081472 00000 n +0000081516 00000 n +0000081560 00000 n +0000081604 00000 n +0000081648 00000 n +0000081692 00000 n +0000081736 00000 n +0000081780 00000 n +0000081824 00000 n +0000081868 00000 n +0000081912 00000 n +0000081956 00000 n +0000082000 00000 n +0000082044 00000 n +0000082088 00000 n +0000082132 00000 n +0000082176 00000 n +0000082220 00000 n +0000082264 00000 n +0000082308 00000 n +0000082352 00000 n +0000082396 00000 n +0000082440 00000 n +0000082484 00000 n +0000082528 00000 n +0000082572 00000 n +0000082616 00000 n +0000082660 00000 n +0000082704 00000 n +0000082748 00000 n +0000082792 00000 n +0000082836 00000 n +0000082880 00000 n +0000082924 00000 n +0000082968 00000 n +0000083012 00000 n +0000083056 00000 n +0000083100 00000 n +0000083144 00000 n +0000083188 00000 n +0000083232 00000 n +0000083276 00000 n +0000083320 00000 n +0000083364 00000 n +0000083408 00000 n +0000083452 00000 n +0000083496 00000 n +0000083540 00000 n +0000083584 00000 n +0000083628 00000 n +0000083672 00000 n +0000083716 00000 n +0000083760 00000 n +0000083804 00000 n +0000083848 00000 n +0000083892 00000 n +0000083936 00000 n +0000083980 00000 n +0000084024 00000 n +0000084068 00000 n +0000084112 00000 n +0000084156 00000 n +0000084200 00000 n +0000084244 00000 n +0000084288 00000 n +0000084332 00000 n +0000084376 00000 n +0000084420 00000 n +0000084464 00000 n +0000084508 00000 n +0000084552 00000 n +0000084596 00000 n +0000084640 00000 n +0000084684 00000 n +0000084728 00000 n +0000084772 00000 n +0000084816 00000 n +0000084860 00000 n +0000084904 00000 n +0000084948 00000 n +0000084992 00000 n +0000085036 00000 n +0000085080 00000 n +0000085124 00000 n +0000085168 00000 n +0000085212 00000 n +0000085256 00000 n +0000085300 00000 n +0000085344 00000 n +0000085388 00000 n +0000085432 00000 n +0000085476 00000 n +0000085520 00000 n +0000085564 00000 n +0000085608 00000 n +0000085652 00000 n +0000085696 00000 n +0000085740 00000 n +0000085784 00000 n +0000085828 00000 n +0000085872 00000 n +0000085916 00000 n +0000085960 00000 n +0000086004 00000 n +0000086048 00000 n +0000086092 00000 n +0000086136 00000 n +0000086180 00000 n +0000086224 00000 n +0000086268 00000 n +0000086312 00000 n +0000086356 00000 n +0000086400 00000 n +0000086444 00000 n +0000086488 00000 n +0000086532 00000 n +0000086576 00000 n +0000086620 00000 n +0000086664 00000 n +0000086708 00000 n +0000086752 00000 n +0000086796 00000 n +0000086840 00000 n +0000086884 00000 n +0000086928 00000 n +0000086972 00000 n +0000087016 00000 n +0000087060 00000 n +0000087104 00000 n +0000087148 00000 n +0000087192 00000 n +0000087236 00000 n +0000087280 00000 n +0000087324 00000 n +0000087368 00000 n +0000087412 00000 n +0000087456 00000 n +0000087500 00000 n +0000087544 00000 n +0000087588 00000 n +0000087632 00000 n +0000087676 00000 n +0000087720 00000 n +0000087764 00000 n +0000087808 00000 n +0000087852 00000 n +0000087896 00000 n +0000087941 00000 n +0000087986 00000 n +0000088031 00000 n +0000088076 00000 n +0000088121 00000 n +0000088166 00000 n +0000088211 00000 n +0000088256 00000 n +0000088301 00000 n +0000088346 00000 n +0000088391 00000 n +0000088436 00000 n +0000088481 00000 n +0000088526 00000 n +0000088571 00000 n +0000088616 00000 n +0000088661 00000 n +0000088706 00000 n +0000088751 00000 n +0000088796 00000 n +0000088841 00000 n +0000088886 00000 n +0000088931 00000 n +0000088976 00000 n +0000089021 00000 n +0000089066 00000 n +0000089111 00000 n +0000089156 00000 n +0000089201 00000 n +0000089246 00000 n +0000089291 00000 n +0000089336 00000 n +0000089381 00000 n +0000089426 00000 n +0000089471 00000 n +0000089516 00000 n +0000089561 00000 n +0000089606 00000 n +0000089651 00000 n +0000089696 00000 n +0000089741 00000 n +0000089786 00000 n +0000089831 00000 n +0000089876 00000 n +0000089921 00000 n +0000089966 00000 n +0000090011 00000 n +0000090056 00000 n +0000090101 00000 n +0000090146 00000 n +0000090191 00000 n +0000090236 00000 n +0000090281 00000 n +0000090326 00000 n +0000090371 00000 n +0000090416 00000 n +0000090461 00000 n +0000090506 00000 n +0000090551 00000 n +0000090596 00000 n +0000090641 00000 n +0000090686 00000 n +0000090731 00000 n +0000090776 00000 n +0000090821 00000 n +0000090866 00000 n +0000090911 00000 n +0000090956 00000 n +0000092166 00000 n +0000092327 00000 n +0000092496 00000 n +0000092689 00000 n +0000095924 00000 n +0000096118 00000 n +0000100265 00000 n +0000100459 00000 n +0000104021 00000 n +0000104215 00000 n +0000108467 00000 n +0000108661 00000 n +0000112096 00000 n +0000112290 00000 n +0000112962 00000 n +0000113123 00000 n +0000113357 00000 n +0000113561 00000 n +0000115832 00000 n +0000116016 00000 n +0000119096 00000 n +0000119271 00000 n +0000122110 00000 n +0000122285 00000 n +0000124842 00000 n +0000125017 00000 n +0000127007 00000 n +0000127219 00000 n +0000128342 00000 n +0000128530 00000 n +0000130082 00000 n +0000130279 00000 n +0000131757 00000 n +0000131972 00000 n +0000133324 00000 n +0000133503 00000 n +0000135075 00000 n +0000135245 00000 n +0000136792 00000 n +0000136971 00000 n +0000138427 00000 n +0000138606 00000 n +0000140310 00000 n +0000140489 00000 n +0000142070 00000 n +0000142249 00000 n +0000143936 00000 n +0000144130 00000 n +0000145802 00000 n +0000146000 00000 n +0000147430 00000 n +0000147618 00000 n +0000149309 00000 n +0000149497 00000 n +0000151274 00000 n +0000151453 00000 n +0000153517 00000 n +0000153696 00000 n +0000155513 00000 n +0000155692 00000 n +0000157430 00000 n +0000157618 00000 n +0000159467 00000 n +0000159689 00000 n +0000161700 00000 n +0000161913 00000 n +0000163466 00000 n +0000163655 00000 n +0000165047 00000 n +0000165217 00000 n +0000165561 00000 n +0000165749 00000 n +0000167272 00000 n +0000167475 00000 n +0000169179 00000 n +0000169382 00000 n +0000170329 00000 n +0000170541 00000 n +0000172051 00000 n +0000172231 00000 n +0000172986 00000 n +0000173207 00000 n +0000174967 00000 n +0000175173 00000 n +0000177046 00000 n +0000177243 00000 n +0000178822 00000 n +0000179033 00000 n +0000180548 00000 n +0000180736 00000 n +0000181621 00000 n +0000181852 00000 n +0000183656 00000 n +0000183868 00000 n +0000185809 00000 n +0000186040 00000 n +0000188010 00000 n +0000188232 00000 n +0000190084 00000 n +0000190287 00000 n +0000191623 00000 n +0000191845 00000 n +0000193503 00000 n +0000193716 00000 n +0000195652 00000 n +0000195840 00000 n +0000196474 00000 n +0000196653 00000 n +0000198167 00000 n +0000198346 00000 n +0000199744 00000 n +0000199923 00000 n +0000201579 00000 n +0000201758 00000 n +0000203323 00000 n +0000203493 00000 n +0000203834 00000 n +0000204037 00000 n +0000205928 00000 n +0000206088 00000 n +0000207203 00000 n +0000207433 00000 n +0000208921 00000 n +0000209133 00000 n +0000210882 00000 n +0000211075 00000 n +0000212444 00000 n +0000212633 00000 n +0000214304 00000 n +0000214483 00000 n +0000216213 00000 n +0000216401 00000 n +0000218295 00000 n +0000218508 00000 n +0000220361 00000 n +0000220601 00000 n +0000222697 00000 n +0000222909 00000 n +0000224492 00000 n +0000224713 00000 n +0000225962 00000 n +0000226150 00000 n +0000227431 00000 n +0000227610 00000 n +0000228672 00000 n +0000228860 00000 n +0000230424 00000 n +0000230612 00000 n +0000232030 00000 n +0000232219 00000 n +0000233483 00000 n +0000233663 00000 n +0000234313 00000 n +0000234526 00000 n +0000236285 00000 n +0000236498 00000 n +0000238036 00000 n +0000238258 00000 n +0000240052 00000 n +0000240292 00000 n +0000242022 00000 n +0000242229 00000 n +0000244067 00000 n +0000244298 00000 n +0000246206 00000 n +0000246428 00000 n +0000248341 00000 n +0000248553 00000 n +0000250571 00000 n +0000250774 00000 n +0000253026 00000 n +0000253248 00000 n +0000255457 00000 n +0000255664 00000 n +0000257636 00000 n +0000257815 00000 n +0000259414 00000 n +0000259584 00000 n +0000261574 00000 n +0000261762 00000 n +0000263838 00000 n +0000264026 00000 n +0000265807 00000 n +0000265985 00000 n +0000267830 00000 n +0000267990 00000 n +0000268767 00000 n +0000268961 00000 n +0000270551 00000 n +0000270731 00000 n +0000272479 00000 n +0000272658 00000 n +0000273555 00000 n +0000273777 00000 n +0000275844 00000 n +0000276057 00000 n +0000278106 00000 n +0000278303 00000 n +0000279502 00000 n +0000279715 00000 n +0000281331 00000 n +0000281553 00000 n +0000283376 00000 n +0000283598 00000 n +0000285365 00000 n +0000285559 00000 n +0000286334 00000 n +0000286504 00000 n +0000288163 00000 n +0000288342 00000 n +0000290174 00000 n +0000290343 00000 n +0000292198 00000 n +0000292367 00000 n +0000293477 00000 n +0000293665 00000 n +0000295366 00000 n +0000295554 00000 n +0000297033 00000 n +0000297221 00000 n +0000298709 00000 n +0000298879 00000 n +0000300540 00000 n +0000300710 00000 n +0000301451 00000 n +0000301630 00000 n +0000303217 00000 n +0000303396 00000 n +0000305055 00000 n +0000305225 00000 n +0000306760 00000 n +0000306930 00000 n +0000308214 00000 n +0000308384 00000 n +0000309999 00000 n +0000310169 00000 n +0000311752 00000 n +0000311947 00000 n +0000313660 00000 n +0000313872 00000 n +0000315587 00000 n +0000315781 00000 n +0000317495 00000 n +0000317707 00000 n +0000318992 00000 n +0000319195 00000 n +0000320713 00000 n +0000320891 00000 n +0000321557 00000 n +0000321760 00000 n +0000323436 00000 n +0000323624 00000 n +0000325347 00000 n +0000325535 00000 n +0000327063 00000 n +0000327242 00000 n +0000328750 00000 n +0000328928 00000 n +0000329654 00000 n +0000329713 00000 n +0000329816 00000 n +0000329981 00000 n +0000330063 00000 n +0000330171 00000 n +0000330339 00000 n +0000330451 00000 n +0000330580 00000 n +0000330710 00000 n +0000330852 00000 n +0000330995 00000 n +0000331167 00000 n +0000331286 00000 n +0000331417 00000 n +0000331572 00000 n +0000331715 00000 n +0000331896 00000 n +0000332046 00000 n +0000332151 00000 n +0000332260 00000 n +0000332387 00000 n +0000332520 00000 n +0000332627 00000 n +0000332730 00000 n +0000332896 00000 n +0000332994 00000 n +0000333105 00000 n +0000333249 00000 n +0000333341 00000 n +0000333447 00000 n +0000333553 00000 n +0000333659 00000 n +0000333765 00000 n +0000333871 00000 n +0000333977 00000 n +0000334083 00000 n +0000334189 00000 n +0000334296 00000 n +0000334389 00000 n +0000334497 00000 n +0000334677 00000 n +0000334769 00000 n +0000334949 00000 n +0000335045 00000 n +0000335161 00000 n +0000335275 00000 n +0000335379 00000 n +0000335569 00000 n +0000335677 00000 n +0000335793 00000 n +0000335903 00000 n +0000336013 00000 n +0000336110 00000 n +0000336293 00000 n +0000336510 00000 n +0000336641 00000 n +0000336796 00000 n +0000336925 00000 n +0000337022 00000 n +0000337228 00000 n +0000337327 00000 n +0000337453 00000 n +0000337568 00000 n +0000337763 00000 n +0000337885 00000 n +0000337962 00000 n +0000338156 00000 n +0000338309 00000 n +0000338451 00000 n +0000338573 00000 n +0000338748 00000 n +0000338850 00000 n +0000338957 00000 n +0000339096 00000 n +0000339254 00000 n +0000339398 00000 n +0000339567 00000 n +0000339665 00000 n +0000339816 00000 n +0000339919 00000 n +0000340056 00000 n +0000340190 00000 n +0000340332 00000 n +0000340441 00000 n +0000340599 00000 n +0000340702 00000 n +0000340834 00000 n +0000340953 00000 n +0000341062 00000 n +0000341186 00000 n +0000341351 00000 n +0000341449 00000 n +0000341575 00000 n +0000341699 00000 n +0000341836 00000 n +0000341955 00000 n +0000342079 00000 n +0000342201 00000 n +0000342318 00000 n +0000342418 00000 n +0000342571 00000 n +0000342669 00000 n +0000342799 00000 n +0000342967 00000 n +0000343088 00000 n +0000343218 00000 n +0000343346 00000 n +0000343540 00000 n +0000343634 00000 n +0000343746 00000 n +0000343905 00000 n +0000343988 00000 n +0000344143 00000 n +0000344261 00000 n +0000344380 00000 n +0000344512 00000 n +0000344640 00000 n +0000344740 00000 n +0000344908 00000 n +0000345006 00000 n +0000345118 00000 n +0000345222 00000 n +0000345333 00000 n +0000345429 00000 n +0000345624 00000 n +0000345730 00000 n +0000345840 00000 n +0000345979 00000 n +0000346182 00000 n +0000346309 00000 n +0000346456 00000 n +0000346574 00000 n +0000346700 00000 n +0000346828 00000 n +0000346954 00000 n +0000347124 00000 n +0000347252 00000 n +0000347398 00000 n +0000347538 00000 n +0000347752 00000 n +0000347858 00000 n +0000347968 00000 n +0000348156 00000 n +0000348292 00000 n +0000348401 00000 n +0000348541 00000 n +0000348693 00000 n +0000348803 00000 n +0000349011 00000 n +0000349104 00000 n +0000349216 00000 n +0000349338 00000 n +0000349490 00000 n +0000349655 00000 n +0000349763 00000 n +0000349866 00000 n +0000349996 00000 n +0000350121 00000 n +0000350263 00000 n +0000350402 00000 n +0000350496 00000 n +0000350661 00000 n +0000350767 00000 n +0000350892 00000 n +0000351010 00000 n +0000351171 00000 n +0000351280 00000 n +0000351404 00000 n +0000351538 00000 n +0000351669 00000 n +0000351799 00000 n +0000351929 00000 n +0000352059 00000 n +0000352164 00000 n +0000352327 00000 n +0000352424 00000 n +0000352569 00000 n +0000352663 00000 n +0000352777 00000 n +0000352901 00000 n +0000353015 00000 n +0000353124 00000 n +0000353232 00000 n +0000353339 00000 n +0000353450 00000 n +0000353559 00000 n +0000353669 00000 n +0000353777 00000 n +0000353886 00000 n +0000354001 00000 n +0000354115 00000 n +0000354227 00000 n +0000354338 00000 n +0000354451 00000 n +0000354547 00000 n +0000354713 00000 n +0000354817 00000 n +0000354965 00000 n +0000355126 00000 n +0000355306 00000 n +0000355479 00000 n +0000355627 00000 n +0000355787 00000 n +0000355911 00000 n +0000356050 00000 n +0000356181 00000 n +0000356293 00000 n +0000356408 00000 n +0000356521 00000 n +0000356697 00000 n +0000356795 00000 n +0000356942 00000 n +0000357045 00000 n +0000357145 00000 n +0000357297 00000 n +0000357395 00000 n +0000357507 00000 n +0000357619 00000 n +0000357734 00000 n +0000357864 00000 n +0000357957 00000 n +0000358076 00000 n +0000358211 00000 n +0000358301 00000 n +0000358409 00000 n +0000358499 00000 n trailer -<<1ca9696980f269e0c25de21a8ecbd4b4>]>> +<<87d2ccdfffaca9782ac75b2582cbd107>]>> startxref -344676 +359159 %%EOF diff --git a/docs/docbook/Makefile.in b/docs/docbook/Makefile.in index b225eb97809..98b74e12eec 100644 --- a/docs/docbook/Makefile.in +++ b/docs/docbook/Makefile.in @@ -57,13 +57,13 @@ all: @echo "txt - Build plain text version of HOWTO Collection" manpages: $(MANPAGES) -pdf: ../Samba-HOWTO-Collection.pdf -ps: ../Samba-HOWTO-Collection.ps -txt: ../Samba-HOWTO-Collection.txt +pdf: ../Samba-HOWTO-Collection.pdf ../Samba-Developers-Guide.pdf +ps: ../Samba-HOWTO-Collection.ps ../Samba-Developers-Guide.ps +txt: ../textdocs/Samba-HOWTO-Collection.txt ../textdocs/Samba-Developers-Guide.txt htmlman: $(MANPAGES_HTML) +html-single: ../htmldocs/Samba-HOWTO-Collection.html ../htmldocs/Samba-Developers-Guide.html html: $(DOCBOOK2HTML) -d samba.dsl -o $(HTMLDIR) projdoc/samba-doc.sgml -html-single: ../Samba-HOWTO-Collection.html ../Samba-Developers-Guide.html ../Samba-HOWTO-Collection.txt: $(SGMLDIR)/samba-doc.sgml $(DOCBOOK2TXT) -o .. $< @@ -73,14 +73,21 @@ html-single: ../Samba-HOWTO-Collection.html ../Samba-Developers-Guide.html $(DOCBOOK2PS) -o .. $< mv ../samba-doc.ps $@ -../Samba-HOWTO-Collection.pdf: ../Samba-HOWTO-Collection.html +../Samba-Developers-Guide.ps: $(SGMLDIR)/samba-doc.sgml + $(DOCBOOK2PS) -o .. $< + mv ../samba-doc.ps $@ + +../Samba-HOWTO-Collection.pdf: ../htmldocs/Samba-HOWTO-Collection.html + $(HTMLDOC) --book --color --links -f $@ $< + +../Samba-Developers-Guide.pdf: ../htmldocs/Samba-Developers-Guide.html $(HTMLDOC) --book --color --links -f $@ $< -../Samba-HOWTO-Collection.html: $(SGMLDIR)/samba-doc.sgml +../htmldocs/Samba-HOWTO-Collection.html: $(SGMLDIR)/samba-doc.sgml $(DOCBOOK2HTML) -u -o .. $< mv ../samba-doc.html $@ -../Samba-Developers-Guide.html: devdoc/dev-doc.sgml +../htmldocs/Samba-Developers-Guide.html: devdoc/dev-doc.sgml $(DOCBOOK2HTML) -u -o .. $< mv ../dev-doc.html $@ diff --git a/docs/docbook/devdoc/internals.sgml b/docs/docbook/devdoc/internals.sgml index 79524347b63..982cfd2e108 100644 --- a/docs/docbook/devdoc/internals.sgml +++ b/docs/docbook/devdoc/internals.sgml @@ -26,6 +26,7 @@ telling if a particular char* is in dos codepage or unix codepage. This led to a nightmare of code that tried to cope with particular cases without handlingt the general case. + The new functions diff --git a/docs/docbook/devdoc/parsing.sgml b/docs/docbook/devdoc/parsing.sgml index 0121935d26d..8d929617f5a 100644 --- a/docs/docbook/devdoc/parsing.sgml +++ b/docs/docbook/devdoc/parsing.sgml @@ -196,7 +196,7 @@ terminating character, and the rest of the line is ignored. The lines <section> :== <section header> { <parameter line> } <section header> :== '[' NAME ']' <parameter line> :== NAME '=' VALUE NL - + Basically, this means that diff --git a/docs/htmldocs/Samba-Developers-Guide.html b/docs/htmldocs/Samba-Developers-Guide.html new file mode 100644 index 00000000000..f7a452bfc59 --- /dev/null +++ b/docs/htmldocs/Samba-Developers-Guide.html @@ -0,0 +1,7734 @@ + +SAMBA Developers Guide


    Abstract

    Last Update : Mon aug 26 12:41:19 CEST 2002

    This book is a collection of documents that might be useful for +people developing samba or those interested in doing so. +It's nothing more than a collection of documents written by samba developers about +the internals of various parts of samba and the SMB protocol. It's still incomplete. +The most recent version of this document +can be found at http://devel.samba.org/. +Please send updates to jelmer@samba.org.

    This documentation is distributed under the GNU General Public License (GPL) +version 2. A copy of the license is included with the Samba source +distribution. A copy can be found on-line at http://www.fsf.org/licenses/gpl.txt

    Table of Contents
    Definition of NetBIOS Protocol and Name Resolution Modes
    NETBIOS
    BROADCAST NetBIOS
    NBNS NetBIOS
    Samba Architecture
    Introduction
    Multithreading and Samba
    Threading smbd
    Threading nmbd
    nbmd Design
    The samba DEBUG system
    New Output Syntax
    The DEBUG() Macro
    The DEBUGADD() Macro
    The DEBUGLVL() Macro
    New Functions
    dbgtext()
    dbghdr()
    format_debug_text()
    Coding Suggestions
    Samba Internals
    Character Handling
    The new functions
    Macros in byteorder.h
    CVAL(buf,pos)
    PVAL(buf,pos)
    SCVAL(buf,pos,val)
    SVAL(buf,pos)
    IVAL(buf,pos)
    SVALS(buf,pos)
    IVALS(buf,pos)
    SSVAL(buf,pos,val)
    SIVAL(buf,pos,val)
    SSVALS(buf,pos,val)
    SIVALS(buf,pos,val)
    RSVAL(buf,pos)
    RIVAL(buf,pos)
    RSSVAL(buf,pos,val)
    RSIVAL(buf,pos,val)
    LAN Manager Samba API
    Parameters
    Return value
    Code character table
    The smb.conf file
    Lexical Analysis
    Handling of Whitespace
    Handling of Line Continuation
    Line Continuation Quirks
    Syntax
    About params.c
    NetBIOS in a Unix World
    Introduction
    Usernames
    File Ownership
    Passwords
    Locking
    Deny Modes
    Trapdoor UIDs
    Port numbers
    Protocol Complexity
    Tracing samba system calls
    NT Domain RPC's
    Introduction
    Sources
    Credits
    Notes and Structures
    Notes
    Enumerations
    Structures
    MSRPC over Transact Named Pipe
    MSRPC Pipes
    Header
    Tail
    RPC Bind / Bind Ack
    NTLSA Transact Named Pipe
    LSA Open Policy
    LSA Query Info Policy
    LSA Enumerate Trusted Domains
    LSA Open Secret
    LSA Close
    LSA Lookup SIDS
    LSA Lookup Names
    NETLOGON rpc Transact Named Pipe
    LSA Request Challenge
    LSA Authenticate 2
    LSA Server Password Set
    LSA SAM Logon
    LSA SAM Logoff
    \\MAILSLOT\NET\NTLOGON
    Query for PDC
    SAM Logon
    SRVSVC Transact Named Pipe
    Net Share Enum
    Net Server Get Info
    Cryptographic side of NT Domain Authentication
    Definitions
    Protocol
    Comments
    SIDs and RIDs
    Well-known SIDs
    Well-known RIDS

    Definition of NetBIOS Protocol and Name Resolution Modes

    NETBIOS

    NetBIOS runs over the following tranports: TCP/IP; NetBEUI and IPX/SPX. +Samba only uses NetBIOS over TCP/IP. For details on the TCP/IP NetBIOS +Session Service NetBIOS Datagram Service, and NetBIOS Names, see +rfc1001.txt and rfc1002.txt.

    +NetBEUI is a raw NetBIOS frame protocol implementation that allows NetBIOS +datagrams to be sent out over the 'wire' embedded within LLC frames. +NetBEUI is not required when using NetBIOS over TCP/IP protocols and it +is preferable NOT to install NetBEUI if it can be avoided.

    +IPX/SPX is also not required when using NetBIOS over TCP/IP, and it is +preferable NOT to install the IPX/SPX transport unless you are using Novell +servers. At the very least, it is recommended that you do not install +'NetBIOS over IPX/SPX'.

    [When installing Windows 95, you will find that NetBEUI and IPX/SPX are +installed as the default protocols. This is because they are the simplest +to manage: no Windows 95 user-configuration is required].

    +NetBIOS applications (such as samba) offer their services (for example, +SMB file and print sharing) on a NetBIOS name. They must claim this name +on the network before doing so. The NetBIOS session service will then +accept connections on the application's behalf (on the NetBIOS name +claimed by the application). A NetBIOS session between the application +and the client can then commence.

    +NetBIOS names consist of 15 characters plus a 'type' character. This is +similar, in concept, to an IP address and a TCP port number, respectively. +A NetBIOS-aware application on a host will offer different services under +different NetBIOS name types, just as a host will offer different TCP/IP +services on different port numbers.

    +NetBIOS names must be claimed on a network, and must be defended. The use +of NetBIOS names is most suitable on a single subnet; a Local Area Network +or a Wide Area Network.

    +NetBIOS names are either UNIQUE or GROUP. Only one application can claim a +UNIQUE NetBIOS name on a network.

    There are two kinds of NetBIOS Name resolution: Broadcast and Point-to-Point.


    NBNS NetBIOS

    rfc1001.txt describes, amongst other things, the implementation and use +of, a 'NetBIOS Name Service'. NT/AS offers 'Windows Internet Name Service' +which is fully rfc1001/2 compliant, but has had to take specific action +with certain NetBIOS names in order to make it useful. (for example, it +deals with the registration of <1c> <1d> <1e> names all in different ways. +I recommend the reading of the Microsoft WINS Server Help files for full +details).

    +The use of a WINS server cuts down on broadcast network traffic for +NetBIOS name resolution. It has the effect of pulling all the broadcast +isolated subnets together into a single NetBIOS scope, across your LAN +or WAN, while avoiding the use of TCP/IP broadcast packets.

    When you have a WINS server on your LAN, WINS clients will be able to +contact the WINS server to resolve NetBIOS names. Note that only those +WINS clients that have registered with the same WINS server will be +visible. The WINS server _can_ have static NetBIOS entries added to its +database (usually for security reasons you might want to consider putting +your domain controllers or other important servers as static entries, +but you should not rely on this as your sole means of security), but for +the most part, NetBIOS names are registered dynamically.

    This provides some confusion for lots of people, and is worth mentioning +here: a Browse Server is NOT a WINS Server, even if these services are +implemented in the same application. A Browse Server _needs_ a WINS server +because a Browse Server is a WINS client, which is _not_ the same thing].

    Clients can claim names, and therefore offer services on successfully claimed +names, on their broadcast-isolated subnet. One way to get NetBIOS services +(such as browsing: see ftp.microsoft.com/drg/developr/CIFS/browdiff.txt; and +SMB file/print sharing: see cifs6.txt) working on a LAN or WAN is to make +your routers forward all broadcast packets from TCP/IP ports 137, 138 and 139. +You will find, however, if you do this on a large LAN or a WAN, that your +network is completely swamped by NetBIOS and browsing packets, which is why +WINS was developed to minimise the necessity of broadcast traffic.

    +WINS Clients therefore claim names from the WINS server. If the WINS +server allows them to register a name, the client's NetBIOS session service +can then offer services on this name. Other WINS clients will then +contact the WINS server to resolve a NetBIOS name.


    Samba Architecture


    Multithreading and Samba

    People sometimes tout threads as a uniformly good thing. They are very +nice in their place but are quite inappropriate for smbd. nmbd is +another matter, and multi-threading it would be very nice.

    The short version is that smbd is not multithreaded, and alternative +servers that take this approach under Unix (such as Syntax, at the +time of writing) suffer tremendous performance penalties and are less +robust. nmbd is not threaded either, but this is because it is not +possible to do it while keeping code consistent and portable across 35 +or more platforms. (This drawback also applies to threading smbd.)

    The longer versions is that there are very good reasons for not making +smbd multi-threaded. Multi-threading would actually make Samba much +slower, less scalable, less portable and much less robust. The fact +that we use a separate process for each connection is one of Samba's +biggest advantages.


    Threading smbd

    A few problems that would arise from a threaded smbd are:

    1. It's not only to create threads instead of processes, but you + must care about all variables if they have to be thread specific + (currently they would be global).

    2. if one thread dies (eg. a seg fault) then all threads die. We can + immediately throw robustness out the window.

    3. many of the system calls we make are blocking. Non-blocking + equivalents of many calls are either not available or are awkward (and + slow) to use. So while we block in one thread all clients are + waiting. Imagine if one share is a slow NFS filesystem and the others + are fast, we will end up slowing all clients to the speed of NFS.

    4. you can't run as a different uid in different threads. This means + we would have to switch uid/gid on _every_ SMB packet. It would be + horrendously slow.

    5. the per process file descriptor limit would mean that we could only + support a limited number of clients.

    6. we couldn't use the system locking calls as the locking context of + fcntl() is a process, not a thread.


    Threading nmbd

    This would be ideal, but gets sunk by portability requirements.

    Andrew tried to write a test threads library for nmbd that used only +ansi-C constructs (using setjmp and longjmp). Unfortunately some OSes +defeat this by restricting longjmp to calling addresses that are +shallower than the current address on the stack (apparently AIX does +this). This makes a truly portable threads library impossible. So to +support all our current platforms we would have to code nmbd both with +and without threads, and as the real aim of threads is to make the +code clearer we would not have gained anything. (it is a myth that +threads make things faster. threading is like recursion, it can make +things clear but the same thing can always be done faster by some +other method)

    Chris tried to spec out a general design that would abstract threading +vs separate processes (vs other methods?) and make them accessible +through some general API. This doesn't work because of the data +sharing requirements of the protocol (packets in the future depending +on packets now, etc.) At least, the code would work but would be very +clumsy, and besides the fork() type model would never work on Unix. (Is there an OS that it would work on, for nmbd?)

    A fork() is cheap, but not nearly cheap enough to do on every UDP +packet that arrives. Having a pool of processes is possible but is +nasty to program cleanly due to the enormous amount of shared data (in +complex structures) between the processes. We can't rely on each +platform having a shared memory system.


    nbmd Design

    Originally Andrew used recursion to simulate a multi-threaded +environment, which use the stack enormously and made for really +confusing debugging sessions. Luke Leighton rewrote it to use a +queuing system that keeps state information on each packet. The +first version used a single structure which was used by all the +pending states. As the initialisation of this structure was +done by adding arguments, as the functionality developed, it got +pretty messy. So, it was replaced with a higher-order function +and a pointer to a user-defined memory block. This suddenly +made things much simpler: large numbers of functions could be +made static, and modularised. This is the same principle as used +in NT's kernel, and achieves the same effect as threads, but in +a single process.

    Then Jeremy rewrote nmbd. The packet data in nmbd isn't what's on the +wire. It's a nice format that is very amenable to processing but still +keeps the idea of a distinct packet. See "struct packet_struct" in +nameserv.h. It has all the detail but none of the on-the-wire +mess. This makes it ideal for using in disk or memory-based databases +for browsing and WINS support.


    The samba DEBUG system

    New Output Syntax

    The syntax of a debugging log file is represented as:

      >debugfile< :== { >debugmsg< }
    +
    +  >debugmsg<  :== >debughdr< '\n' >debugtext<
    +
    +  >debughdr<  :== '[' TIME ',' LEVEL ']' FILE ':' [FUNCTION] '(' LINE ')'
    +
    +  >debugtext< :== { >debugline< }
    +
    +  >debugline< :== TEXT '\n'

    TEXT is a string of characters excluding the newline character.

    LEVEL is the DEBUG level of the message (an integer in the range + 0..10).

    TIME is a timestamp.

    FILE is the name of the file from which the debug message was +generated.

    FUNCTION is the function from which the debug message was generated.

    LINE is the line number of the debug statement that generated the +message.

    Basically, what that all means is:

    1. A debugging log file is made up of debug messages.

    2. Each debug message is made up of a header and text. The header is +separated from the text by a newline.

    3. The header begins with the timestamp and debug level of the +message enclosed in brackets. The filename, function, and line +number at which the message was generated follow. The filename is +terminated by a colon, and the function name is terminated by the +parenthesis which contain the line number. Depending upon the +compiler, the function name may be missing (it is generated by the +__FUNCTION__ macro, which is not universally implemented, dangit).

    4. The message text is made up of zero or more lines, each terminated +by a newline.

    Here's some example output:

        [1998/08/03 12:55:25, 1] nmbd.c:(659)
    +      Netbios nameserver version 1.9.19-prealpha started.
    +      Copyright Andrew Tridgell 1994-1997
    +    [1998/08/03 12:55:25, 3] loadparm.c:(763)
    +      Initializing global parameters

    Note that in the above example the function names are not listed on +the header line. That's because the example above was generated on an +SGI Indy, and the SGI compiler doesn't support the __FUNCTION__ macro.


    The DEBUG() Macro

    Use of the DEBUG() macro is unchanged. DEBUG() takes two parameters. +The first is the message level, the second is the body of a function +call to the Debug1() function.

    That's confusing.

    Here's an example which may help a bit. If you would write

    printf( "This is a %s message.\n", "debug" );

    to send the output to stdout, then you would write

    DEBUG( 0, ( "This is a %s message.\n", "debug" ) );

    to send the output to the debug file. All of the normal printf() +formatting escapes work.

    Note that in the above example the DEBUG message level is set to 0. +Messages at level 0 always print. Basically, if the message level is +less than or equal to the global value DEBUGLEVEL, then the DEBUG +statement is processed.

    The output of the above example would be something like:

        [1998/07/30 16:00:51, 0] file.c:function(128)
    +      This is a debug message.

    Each call to DEBUG() creates a new header *unless* the output produced +by the previous call to DEBUG() did not end with a '\n'. Output to the +debug file is passed through a formatting buffer which is flushed +every time a newline is encountered. If the buffer is not empty when +DEBUG() is called, the new input is simply appended.

    ...but that's really just a Kludge. It was put in place because +DEBUG() has been used to write partial lines. Here's a simple (dumb) +example of the kind of thing I'm talking about:

        DEBUG( 0, ("The test returned " ) );
    +    if( test() )
    +      DEBUG(0, ("True") );
    +    else
    +      DEBUG(0, ("False") );
    +    DEBUG(0, (".\n") );

    Without the format buffer, the output (assuming test() returned true) +would look like this:

        [1998/07/30 16:00:51, 0] file.c:function(256)
    +      The test returned
    +    [1998/07/30 16:00:51, 0] file.c:function(258)
    +      True
    +    [1998/07/30 16:00:51, 0] file.c:function(261)
    +      .

    Which isn't much use. The format buffer kludge fixes this problem.


    The DEBUGADD() Macro

    In addition to the kludgey solution to the broken line problem +described above, there is a clean solution. The DEBUGADD() macro never +generates a header. It will append new text to the current debug +message even if the format buffer is empty. The syntax of the +DEBUGADD() macro is the same as that of the DEBUG() macro.

        DEBUG( 0, ("This is the first line.\n" ) );
    +    DEBUGADD( 0, ("This is the second line.\nThis is the third line.\n" ) );

    Produces

        [1998/07/30 16:00:51, 0] file.c:function(512)
    +      This is the first line.
    +      This is the second line.
    +      This is the third line.


    The DEBUGLVL() Macro

    One of the problems with the DEBUG() macro was that DEBUG() lines +tended to get a bit long. Consider this example from +nmbd_sendannounce.c:

      DEBUG(3,("send_local_master_announcement: type %x for name %s on subnet %s for workgroup %s\n",
    +            type, global_myname, subrec->subnet_name, work->work_group));

    One solution to this is to break it down using DEBUG() and DEBUGADD(), +as follows:

      DEBUG( 3, ( "send_local_master_announcement: " ) );
    +  DEBUGADD( 3, ( "type %x for name %s ", type, global_myname ) );
    +  DEBUGADD( 3, ( "on subnet %s ", subrec->subnet_name ) );
    +  DEBUGADD( 3, ( "for workgroup %s\n", work->work_group ) );

    A similar, but arguably nicer approach is to use the DEBUGLVL() macro. +This macro returns True if the message level is less than or equal to +the global DEBUGLEVEL value, so:

      if( DEBUGLVL( 3 ) )
    +    {
    +    dbgtext( "send_local_master_announcement: " );
    +    dbgtext( "type %x for name %s ", type, global_myname );
    +    dbgtext( "on subnet %s ", subrec->subnet_name );
    +    dbgtext( "for workgroup %s\n", work->work_group );
    +    }

    (The dbgtext() function is explained below.)

    There are a few advantages to this scheme:

    1. The test is performed only once.

    2. You can allocate variables off of the stack that will only be used +within the DEBUGLVL() block.

    3. Processing that is only relevant to debug output can be contained +within the DEBUGLVL() block.


    New Functions


    Coding Suggestions

    So you want to add code to Samba ...

    One of the daunting tasks facing a programmer attempting to write code for +Samba is understanding the various coding conventions used by those most +active in the project. These conventions were mostly unwritten and helped +improve either the portability, stability or consistency of the code. This +document will attempt to document a few of the more important coding +practices used at this time on the Samba project. The coding practices are +expected to change slightly over time, and even to grow as more is learned +about obscure portability considerations. Two existing documents +samba/source/internals.doc and +samba/source/architecture.doc provide +additional information.

    The loosely related question of coding style is very personal and this +document does not attempt to address that subject, except to say that I +have observed that eight character tabs seem to be preferred in Samba +source. If you are interested in the topic of coding style, two oft-quoted +documents are:

    http://lxr.linux.no/source/Documentation/CodingStyle

    http://www.fsf.org/prep/standards_toc.html

    But note that coding style in Samba varies due to the many different +programmers who have contributed.

    Following are some considerations you should use when adding new code to +Samba. First and foremost remember that:

    Portability is a primary consideration in adding function, as is network +compatability with de facto, existing, real world CIFS/SMB implementations. +There are lots of platforms that Samba builds on so use caution when adding +a call to a library function that is not invoked in existing Samba code. +Also note that there are many quite different SMB/CIFS clients that Samba +tries to support, not all of which follow the SNIA CIFS Technical Reference +(or the earlier Microsoft reference documents or the X/Open book on the SMB +Standard) perfectly.

    Here are some other suggestions:

    1. use d_printf instead of printf for display text + reason: enable auto-substitution of translated language text

    2. use SAFE_FREE instead of free + reason: reduce traps due to null pointers

    3. don't use bzero use memset, or ZERO_STRUCT and ZERO_STRUCTP macros + reason: not POSIX

    4. don't use strcpy and strlen (use safe_* equivalents) + reason: to avoid traps due to buffer overruns

    5. don't use getopt_long, use popt functions instead + reason: portability

    6. explicitly add const qualifiers on parm passing in functions where parm + is input only (somewhat controversial but const can be #defined away)

    7. when passing a va_list as an arg, or assigning one to another + please use the VA_COPY() macro + reason: on some platforms, va_list is a struct that must be + initialized in each function...can SEGV if you don't.

    8. discourage use of threads + reason: portability (also see architecture.doc)

    9. don't explicitly include new header files in C files - new h files + should be included by adding them once to includes.h + reason: consistency

    10. don't explicitly extern functions (they are autogenerated by + "make proto" into proto.h) + reason: consistency

    11. use endian safe macros when unpacking SMBs (see byteorder.h and + internals.doc) + reason: not everyone uses Intel

    12. Note Unicode implications of charset handling (see internals.doc). See + pull_* and push_* and convert_string functions. + reason: Internationalization

    13. Don't assume English only + reason: See above

    14. Try to avoid using in/out parameters (functions that return data which + overwrites input parameters) + reason: Can cause stability problems

    15. Ensure copyright notices are correct, don't append Tridge's name to code + that he didn't write. If you did not write the code, make sure that it + can coexist with the rest of the Samba GPLed code.

    16. Consider usage of DATA_BLOBs for length specified byte-data. + reason: stability

    17. Take advantage of tdbs for database like function + reason: consistency

    18. Don't access the SAM_ACCOUNT structure directly, they should be accessed + via pdb_get...() and pdb_set...() functions. + reason: stability, consistency

    19. Don't check a password directly against the passdb, always use the + check_password() interface. + reason: long term pluggability

    20. Try to use asprintf rather than pstrings and fstrings where possible

    21. Use normal C comments / * instead of C++ comments // like + this. Although the C++ comment format is part of the C99 + standard, some older vendor C compilers do not accept it.

    22. Try to write documentation for API functions and structures + explaining the point of the code, the way it should be used, and + any special conditions or results. Mark these with a double-star + comment start / ** so that they can be picked up by Doxygen, as in + this file.

    23. Keep the scope narrow. This means making functions/variables + static whenever possible. We don't want our namespace + polluted. Each module should have a minimal number of externally + visible functions or variables.

    24. Use function pointers to keep knowledge about particular pieces of + code isolated in one place. We don't want a particular piece of + functionality to be spread out across lots of places - that makes + for fragile, hand to maintain code. Instead, design an interface + and use tables containing function pointers to implement specific + functionality. This is particularly important for command + interpreters.

    25. Think carefully about what it will be like for someone else to add + to and maintain your code. If it would be hard for someone else to + maintain then do it another way.

    The suggestions above are simply that, suggestions, but the information may +help in reducing the routine rework done on new code. The preceeding list +is expected to change routinely as new support routines and macros are +added.


    Samba Internals


    The new functions

    The new system works like this:

    1. all char* strings inside Samba are "unix" strings. These are + multi-byte strings that are in the charset defined by the "unix + charset" option in smb.conf.

    2. there is no single fixed character set for unix strings, but any + character set that is used does need the following properties: +

      1. must not contain NULLs except for termination +

      2. must be 7-bit compatible with C strings, so that a constant + string or character in C will be byte-for-byte identical to the + equivalent string in the chosen character set. +

      3. when you uppercase or lowercase a string it does not become + longer than the original string +

      4. must be able to correctly hold all characters that your client + will throw at it +

      For example, UTF-8 is fine, and most multi-byte asian character sets + are fine, but UCS2 could not be used for unix strings as they + contain nulls. +

    3. when you need to put a string into a buffer that will be sent on the + wire, or you need a string in a character set format that is + compatible with the clients character set then you need to use a + pull_ or push_ function. The pull_ functions pull a string from a + wire buffer into a (multi-byte) unix string. The push_ functions + push a string out to a wire buffer.

    4. the two main pull_ and push_ functions you need to understand are + pull_string and push_string. These functions take a base pointer + that should point at the start of the SMB packet that the string is + in. The functions will check the flags field in this packet to + automatically determine if the packet is marked as a unicode packet, + and they will choose whether to use unicode for this string based on + that flag. You may also force this decision using the STR_UNICODE or + STR_ASCII flags. For use in smbd/ and libsmb/ there are wrapper + functions clistr_ and srvstr_ that call the pull_/push_ functions + with the appropriate first argument. +

      You may also call the pull_ascii/pull_ucs2 or push_ascii/push_ucs2 + functions if you know that a particular string is ascii or + unicode. There are also a number of other convenience functions in + charcnv.c that call the pull_/push_ functions with particularly + common arguments, such as pull_ascii_pstring() +

    5. The biggest thing to remember is that internal (unix) strings in Samba + may now contain multi-byte characters. This means you cannot assume + that characters are always 1 byte long. Often this means that you will + have to convert strings to ucs2 and back again in order to do some + (seemingly) simple task. For examples of how to do this see functions + like strchr_m(). I know this is very slow, and we will eventually + speed it up but right now we want this stuff correct not fast.

    6. all lp_ functions now return unix strings. The magic "DOS" flag on + parameters is gone.

    7. all vfs functions take unix strings. Don't convert when passing to them


    Macros in byteorder.h

    This section describes the macros defined in byteorder.h. These macros +are used extensively in the Samba code.


    LAN Manager Samba API

    This section describes the functions need to make a LAN Manager RPC call. +This information had been obtained by examining the Samba code and the LAN +Manager 2.0 API documentation. It should not be considered entirely +reliable.

    call_api(int prcnt, int drcnt, int mprcnt, int mdrcnt, 
    +	char *param, char *data, char **rparam, char **rdata);

    This function is defined in client.c. It uses an SMB transaction to call a +remote api.


    Parameters

    The parameters are as follows:

    1. prcnt: the number of bytes of parameters begin sent.

    2. drcnt: the number of bytes of data begin sent.

    3. mprcnt: the maximum number of bytes of parameters which should be returned

    4. mdrcnt: the maximum number of bytes of data which should be returned

    5. param: a pointer to the parameters to be sent.

    6. data: a pointer to the data to be sent.

    7. rparam: a pointer to a pointer which will be set to point to the returned + paramters. The caller of call_api() must deallocate this memory.

    8. rdata: a pointer to a pointer which will be set to point to the returned + data. The caller of call_api() must deallocate this memory.

    These are the parameters which you ought to send, in the order of their +appearance in the parameter block:

    1. An unsigned 16 bit integer API number. You should set this value with +SSVAL(). I do not know where these numbers are described.

    2. An ASCIIZ string describing the parameters to the API function as defined +in the LAN Manager documentation. The first parameter, which is the server +name, is ommited. This string is based uppon the API function as described +in the manual, not the data which is actually passed.

    3. An ASCIIZ string describing the data structure which ought to be returned.

    4. Any parameters which appear in the function call, as defined in the LAN +Manager API documentation, after the "Server" and up to and including the +"uLevel" parameters.

    5. An unsigned 16 bit integer which gives the size in bytes of the buffer we +will use to receive the returned array of data structures. Presumably this +should be the same as mdrcnt. This value should be set with SSVAL().

    6. An ASCIIZ string describing substructures which should be returned. If no +substructures apply, this string is of zero length.

    The code in client.c always calls call_api() with no data. It is unclear +when a non-zero length data buffer would be sent.


    Return value

    The returned parameters (pointed to by rparam), in their order of appearance +are:

    1. An unsigned 16 bit integer which contains the API function's return code. +This value should be read with SVAL().

    2. An adjustment which tells the amount by which pointers in the returned +data should be adjusted. This value should be read with SVAL(). Basically, +the address of the start of the returned data buffer should have the returned +pointer value added to it and then have this value subtracted from it in +order to obtain the currect offset into the returned data buffer.

    3. A count of the number of elements in the array of structures returned. +It is also possible that this may sometimes be the number of bytes returned.

    When call_api() returns, rparam points to the returned parameters. The +first if these is the result code. It will be zero if the API call +suceeded. This value by be read with "SVAL(rparam,0)".

    The second parameter may be read as "SVAL(rparam,2)". It is a 16 bit offset +which indicates what the base address of the returned data buffer was when +it was built on the server. It should be used to correct pointer before +use.

    The returned data buffer contains the array of returned data structures. +Note that all pointers must be adjusted before use. The function +fix_char_ptr() in client.c can be used for this purpose.

    The third parameter (which may be read as "SVAL(rparam,4)") has something to +do with indicating the amount of data returned or possibly the amount of +data which can be returned if enough buffer space is allowed.


    The smb.conf file

    Lexical Analysis

    Basically, the file is processed on a line by line basis. There are +four types of lines that are recognized by the lexical analyzer +(params.c):

    1. Blank lines - Lines containing only whitespace.

    2. Comment lines - Lines beginning with either a semi-colon or a +pound sign (';' or '#').

    3. Section header lines - Lines beginning with an open square bracket ('[').

    4. Parameter lines - Lines beginning with any other character. +(The default line type.)

    The first two are handled exclusively by the lexical analyzer, which +ignores them. The latter two line types are scanned for

    1. - Section names

    2. - Parameter names

    3. - Parameter values

    These are the only tokens passed to the parameter loader +(loadparm.c). Parameter names and values are divided from one +another by an equal sign: '='.


    Handling of Line Continuation

    Long section header and parameter lines may be extended across +multiple lines by use of the backslash character ('\\'). Line +continuation is ignored for blank and comment lines.

    If the last (non-whitespace) character within a section header or on +a parameter line is a backslash, then the next line will be +(logically) concatonated with the current line by the lexical +analyzer. For example:

    	param name = parameter value string \
    +	with line continuation.

    Would be read as

        param name = parameter value string     with line continuation.

    Note that there are five spaces following the word 'string', +representing the one space between 'string' and '\\' in the top +line, plus the four preceeding the word 'with' in the second line. +(Yes, I'm counting the indentation.)

    Line continuation characters are ignored on blank lines and at the end +of comments. They are *only* recognized within section and parameter +lines.


    Line Continuation Quirks

    Note the following example:

    	param name = parameter value string \
    +    \
    +    with line continuation.

    The middle line is *not* parsed as a blank line because it is first +concatonated with the top line. The result is

    param name = parameter value string         with line continuation.

    The same is true for comment lines.

    	param name = parameter value string \
    +	; comment \
    +    with a comment.

    This becomes:

    param name = parameter value string     ; comment     with a comment.

    On a section header line, the closing bracket (']') is considered a +terminating character, and the rest of the line is ignored. The lines

    	[ section   name ] garbage \
    +    param  name  = value

    are read as

    	[section name]
    +    param name = value


    Syntax

    The syntax of the smb.conf file is as follows:

      <file>            :==  { <section> } EOF
    +  <section>         :==  <section header> { <parameter line> }
    +  <section header>  :==  '[' NAME ']'
    +  <parameter line>  :==  NAME '=' VALUE NL

    Basically, this means that

    1. a file is made up of zero or more sections, and is terminated by + an EOF (we knew that).

    2. A section is made up of a section header followed by zero or more + parameter lines.

    3. A section header is identified by an opening bracket and + terminated by the closing bracket. The enclosed NAME identifies + the section.

    4. A parameter line is divided into a NAME and a VALUE. The *first* + equal sign on the line separates the NAME from the VALUE. The + VALUE is terminated by a newline character (NL = '\n').


    NetBIOS in a Unix World


    Usernames

    The SMB protocol has only a loose username concept. Early SMB +protocols (such as CORE and COREPLUS) have no username concept at +all. Even in later protocols clients often attempt operations +(particularly printer operations) without first validating a username +on the server.

    Unix security is based around username/password pairs. A unix box +should not allow clients to do any substantive operation without some +sort of validation.

    The problem mostly manifests itself when the unix server is in "share +level" security mode. This is the default mode as the alternative +"user level" security mode usually forces a client to connect to the +server as the same user for each connected share, which is +inconvenient in many sites.

    In "share level" security the client normally gives a username in the +"session setup" protocol, but does not supply an accompanying +password. The client then connects to resources using the "tree +connect" protocol, and supplies a password. The problem is that the +user on the PC types the username and the password in different +contexts, unaware that they need to go together to give access to the +server. The username is normally the one the user typed in when they +"logged onto" the PC (this assumes Windows for Workgroups). The +password is the one they chose when connecting to the disk or printer.

    The user often chooses a totally different username for their login as +for the drive connection. Often they also want to access different +drives as different usernames. The unix server needs some way of +divining the correct username to combine with each password.

    Samba tries to avoid this problem using several methods. These succeed +in the vast majority of cases. The methods include username maps, the +service%user syntax, the saving of session setup usernames for later +validation and the derivation of the username from the service name +(either directly or via the user= option).


    File Ownership

    The commonly used SMB protocols have no way of saying "you can't do +that because you don't own the file". They have, in fact, no concept +of file ownership at all.

    This brings up all sorts of interesting problems. For example, when +you copy a file to a unix drive, and the file is world writeable but +owned by another user the file will transfer correctly but will +receive the wrong date. This is because the utime() call under unix +only succeeds for the owner of the file, or root, even if the file is +world writeable. For security reasons Samba does all file operations +as the validated user, not root, so the utime() fails. This can stuff +up shared development diectories as programs like "make" will not get +file time comparisons right.

    There are several possible solutions to this problem, including +username mapping, and forcing a specific username for particular +shares.


    Passwords

    Many SMB clients uppercase passwords before sending them. I have no +idea why they do this. Interestingly WfWg uppercases the password only +if the server is running a protocol greater than COREPLUS, so +obviously it isn't just the data entry routines that are to blame.

    Unix passwords are case sensitive. So if users use mixed case +passwords they are in trouble.

    Samba can try to cope with this by either using the "password level" +option which causes Samba to try the offered password with up to the +specified number of case changes, or by using the "password server" +option which allows Samba to do its validation via another machine +(typically a WinNT server).

    Samba supports the password encryption method used by SMB +clients. Note that the use of password encryption in Microsoft +networking leads to password hashes that are "plain text equivalent". +This means that it is *VERY* important to ensure that the Samba +smbpasswd file containing these password hashes is only readable +by the root user. See the documentation ENCRYPTION.txt for more +details.


    Locking

    The locking calls available under a DOS/Windows environment are much +richer than those available in unix. This means a unix server (like +Samba) choosing to use the standard fcntl() based unix locking calls +to implement SMB locking has to improvise a bit.

    One major problem is that dos locks can be in a 32 bit (unsigned) +range. Unix locking calls are 32 bits, but are signed, giving only a 31 +bit range. Unfortunately OLE2 clients use the top bit to select a +locking range used for OLE semaphores.

    To work around this problem Samba compresses the 32 bit range into 31 +bits by appropriate bit shifting. This seems to work but is not +ideal. In a future version a separate SMB lockd may be added to cope +with the problem.

    It also doesn't help that many unix lockd daemons are very buggy and +crash at the slightest provocation. They normally go mostly unused in +a unix environment because few unix programs use byte range +locking. The stress of huge numbers of lock requests from dos/windows +clients can kill the daemon on some systems.

    The second major problem is the "opportunistic locking" requested by +some clients. If a client requests opportunistic locking then it is +asking the server to notify it if anyone else tries to do something on +the same file, at which time the client will say if it is willing to +give up its lock. Unix has no simple way of implementing +opportunistic locking, and currently Samba has no support for it.


    Port numbers

    There is a convention that clients on sockets use high "unprivilaged" +port numbers (>1000) and connect to servers on low "privilaged" port +numbers. This is enforced in Unix as non-root users can't open a +socket for listening on port numbers less than 1000.

    Most PC based SMB clients (such as WfWg and WinNT) don't follow this +convention completely. The main culprit is the netbios nameserving on +udp port 137. Name query requests come from a source port of 137. This +is a problem when you combine it with the common firewalling technique +of not allowing incoming packets on low port numbers. This means that +these clients can't query a netbios nameserver on the other side of a +low port based firewall.

    The problem is more severe with netbios node status queries. I've +found that WfWg, Win95 and WinNT3.5 all respond to netbios node status +queries on port 137 no matter what the source port was in the +request. This works between machines that are both using port 137, but +it means it's not possible for a unix user to do a node status request +to any of these OSes unless they are running as root. The answer comes +back, but it goes to port 137 which the unix user can't listen +on. Interestingly WinNT3.1 got this right - it sends node status +responses back to the source port in the request.


    Protocol Complexity

    There are many "protocol levels" in the SMB protocol. It seems that +each time new functionality was added to a Microsoft operating system, +they added the equivalent functions in a new protocol level of the SMB +protocol to "externalise" the new capabilities.

    This means the protocol is very "rich", offering many ways of doing +each file operation. This means SMB servers need to be complex and +large. It also means it is very difficult to make them bug free. It is +not just Samba that suffers from this problem, other servers such as +WinNT don't support every variation of every call and it has almost +certainly been a headache for MS developers to support the myriad of +SMB calls that are available.

    There are about 65 "top level" operations in the SMB protocol (things +like SMBread and SMBwrite). Some of these include hundreds of +sub-functions (SMBtrans has at least 120 sub-functions, like +DosPrintQAdd and NetSessionEnum). All of them take several options +that can change the way they work. Many take dozens of possible +"information levels" that change the structures that need to be +returned. Samba supports all but 2 of the "top level" functions. It +supports only 8 (so far) of the SMBtrans sub-functions. Even NT +doesn't support them all.

    Samba currently supports up to the "NT LM 0.12" protocol, which is the +one preferred by Win95 and WinNT3.5. Luckily this protocol level has a +"capabilities" field which specifies which super-duper new-fangled +options the server suports. This helps to make the implementation of +this protocol level much easier.

    There is also a problem with the SMB specications. SMB is a X/Open +spec, but the X/Open book is far from ideal, and fails to cover many +important issues, leaving much to the imagination. Microsoft recently +renamed the SMB protocol CIFS (Common Internet File System) and have +published new specifications. These are far superior to the old +X/Open documents but there are still undocumented calls and features. +This specification is actively being worked on by a CIFS developers +mailing list hosted by Microsft.


    Tracing samba system calls

    This file describes how to do a system call trace on Samba to work out +what its doing wrong. This is not for the faint of heart, but if you +are reading this then you are probably desperate.

    Actually its not as bad as the the above makes it sound, just don't +expect the output to be very pretty :-)

    Ok, down to business. One of the big advantages of unix systems is +that they nearly all come with a system trace utility that allows you +to monitor all system calls that a program is making. This is +extremely using for debugging and also helps when trying to work out +why something is slower than you expect. You can use system tracing +without any special compilation options.

    The system trace utility is called different things on different +systems. On Linux systems its called strace. Under SunOS 4 its called +trace. Under SVR4 style systems (including solaris) its called +truss. Under many BSD systems its called ktrace.

    The first thing you should do is read the man page for your native +system call tracer. In the discussion below I'll assume its called +strace as strace is the only portable system tracer (its available for +free for many unix types) and its also got some of the nicest +features.

    Next, try using strace on some simple commands. For example, strace +ls or strace echo hello.

    +You'll notice that it produces a LOT of output. It is showing you the +arguments to every system call that the program makes and the +result. Very little happens in a program without a system call so you +get lots of output. You'll also find that it produces a lot of +"preamble" stuff showing the loading of shared libraries etc. Ignore +this (unless its going wrong!)

    For example, the only line that really matters in the strace echo +hello output is:

    write(1, "hello\n", 6)                  = 6

    all the rest is just setting up to run the program.

    Ok, now you're familiar with strace. To use it on Samba you need to +strace the running smbd daemon. The way I tend ot use it is to first +login from my Windows PC to the Samba server, then use smbstatus to +find which process ID that client is attached to, then as root I do +strace -p PID to attach to that process. I normally redirect the +stderr output from this command to a file for later perusal. For +example, if I'm using a csh style shell:

    strace -f -p 3872 >& strace.out

    or with a sh style shell:

    strace -f -p 3872 > strace.out 2>&1

    Note the "-f" option. This is only available on some systems, and +allows you to trace not just the current process, but any children it +forks. This is great for finding printing problems caused by the +"print command" being wrong.

    Once you are attached you then can do whatever it is on the client +that is causing problems and you will capture all the system calls +that smbd makes.

    So how do you interpret the results? Generally I search through the +output for strings that I know will appear when the problem +happens. For example, if I am having touble with permissions on a file +I would search for that files name in the strace output and look at +the surrounding lines. Another trick is to match up file descriptor +numbers and "follow" what happens to an open file until it is closed.

    Beyond this you will have to use your initiative. To give you an idea +of what you are looking for here is a piece of strace output that +shows that /dev/null is not world writeable, which +causes printing to fail with Samba:

    [pid 28268] open("/dev/null", O_RDWR)   = -1 EACCES (Permission denied)
    +[pid 28268] open("/dev/null", O_WRONLY) = -1 EACCES (Permission denied)

    The process is trying to first open /dev/null read-write +then read-only. Both fail. This means /dev/null has +incorrect permissions.


    NT Domain RPC's

    Introduction

    This document contains information to provide an NT workstation with login +services, without the need for an NT server. It is the sgml version of http://mailhost.cb1.com/~lkcl/cifsntdomain.txt, controlled by Luke.

    It should be possible to select a domain instead of a workgroup (in the NT +workstation's TCP/IP settings) and after the obligatory reboot, type in a +username, password, select a domain and successfully log in. I would +appreciate any feedback on your experiences with this process, and any +comments, corrections and additions to this document.

    The packets described here can be easily derived from (and are probably +better understood using) Netmon.exe. You will need to use the version +of Netmon that matches your system, in order to correctly decode the +NETLOGON, lsarpc and srvsvc Transact pipes. This document is derived from +NT Service Pack 1 and its corresponding version of Netmon. It is intended +that an annotated packet trace be produced, which will likely be more +instructive than this document.

    Also needed, to fully implement NT Domain Login Services, is the +document describing the cryptographic part of the NT authentication. +This document is available from comp.protocols.smb; from the ntsecurity.net +digest and from the samba digest, amongst other sources.

    A copy is available from:

    http://ntbugtraq.rc.on.ca/SCRIPTS/WA.EXE?A2=ind9708;L=ntbugtraq;O=A;P=2935

    http://mailhost.cb1.com/~lkcl/crypt.html

    A c-code implementation, provided by Linus Nordberg +of this protocol is available from:

    http://samba.org/cgi-bin/mfs/01/digest/1997/97aug/0391.html

    http://mailhost.cb1.com/~lkcl/crypt.txt

    Also used to provide debugging information is the Check Build version of +NT workstation, and enabling full debugging in NETLOGON. This is +achieved by setting the following REG_SZ registry key to 0x1ffffff:

    HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters

    Incorrect direct editing of the registry can cause your +machine to fail. Then again, so can incorrect implementation of this +protocol. See "Liability:" above.

    Bear in mind that each packet over-the-wire will have its origin in an +API call. Therefore, there are likely to be structures, enumerations +and defines that are usefully documented elsewhere.

    This document is by no means complete or authoritative. Missing sections +include, but are not limited to:

    1. Mappings of RIDs to usernames (and vice-versa).

    2. What a User ID is and what a Group ID is.

    3. The exact meaning/definition of various magic constants or enumerations.

    4. The reply error code and use of that error code when a +workstation becomes a member of a domain (to be described later). +Failure to return this error code will make the workstation report +that it is already a member of the domain.

    5. the cryptographic side of the NetrServerPasswordSet command, +which would allow the workstation to change its password. This password is +used to generate the long-term session key. [It is possible to reject this +command, and keep the default workstation password].


    Sources

    cket Traces from Netmonitor (Service Pack 1 and above)
    ul Ashton and Luke Leighton's other "NT Domain" doc.
    FS documentation - cifs6.txt
    FS documentation - cifsrap2.txt


    Credits

    Paul Ashton: loads of work with Net Monitor; understanding the NT authentication system; reference implementation of the NT domain support on which this document is originally based.
    Duncan Stansfield: low-level analysis of MSRPC Pipes.
    Linus Nordberg: producing c-code from Paul's crypto spec.
    Windows Sourcer development team


    Notes and Structures

    Notes

    1. In the SMB Transact pipes, some "Structures", described here, appear to be +4-byte aligned with the SMB header, at their start. Exactly which +"Structures" need aligning is not precisely known or documented.

    2. In the UDP NTLOGON Mailslots, some "Structures", described here, appear to be +2-byte aligned with the start of the mailslot, at their start.

    3. Domain SID is of the format S-revision-version-auth1-auth2...authN. +e.g S-1-5-123-456-789-123-456. the 5 could be a sub-revision.

    4. any undocumented buffer pointers must be non-zero if the string buffer it +refers to contains characters. exactly what value they should be is unknown. +0x0000 0002 seems to do the trick to indicate that the buffer exists. a +NULL buffer pointer indicates that the string buffer is of zero length. +If the buffer pointer is NULL, then it is suspected that the structure it +refers to is NOT put into (or taken out of) the SMB data stream. This is +empirically derived from, for example, the LSA SAM Logon response packet, +where if the buffer pointer is NULL, the user information is not inserted +into the data stream. Exactly what happens with an array of buffer pointers +is not known, although an educated guess can be made.

    5. an array of structures (a container) appears to have a count and a pointer. +if the count is zero, the pointer is also zero. no further data is put +into or taken out of the SMB data stream. if the count is non-zero, then +the pointer is also non-zero. immediately following the pointer is the +count again, followed by an array of container sub-structures. the count +appears a third time after the last sub-structure.


    Structures


    USER_INFO (user logon info)

    Note: it would be nice to know what the 16 byte user session key is for.

    NTTIME

    logon time

    NTTIME

    logoff time

    NTTIME

    kickoff time

    NTTIME

    password last set time

    NTTIME

    password can change time

    NTTIME

    password must change time

    UNIHDR

    username unicode string header

    UNIHDR

    user's full name unicode string header

    UNIHDR

    logon script unicode string header

    UNIHDR

    profile path unicode string header

    UNIHDR

    home directory unicode string header

    UNIHDR

    home directory drive unicode string header

    UINT16

    logon count

    UINT16

    bad password count

    UINT32

    User ID

    UINT32

    Group ID

    UINT32

    num groups

    VOID*

    undocumented buffer pointer to groups.

    UINT32

    user flags

    char[16]

    user session key

    UNIHDR

    logon server unicode string header

    UNIHDR

    logon domain unicode string header

    VOID*

    undocumented logon domain id pointer

    char[40]

    40 undocumented padding bytes. future expansion?

    UINT32

    0 - num_other_sids?

    VOID*

    NULL - undocumented pointer to other domain SIDs.

    UNISTR2

    username unicode string

    UNISTR2

    user's full name unicode string

    UNISTR2

    logon script unicode string

    UNISTR2

    profile path unicode string

    UNISTR2

    home directory unicode string

    UNISTR2

    home directory drive unicode string

    UINT32

    num groups

    GID[num_groups]

    group info

    UNISTR2

    logon server unicode string

    UNISTR2

    logon domain unicode string

    DOM_SID

    domain SID

    DOM_SID[num_sids]

    other domain SIDs?


    SH_INFO_1_PTR (pointers to level 1 share info strings)

    Note: see cifsrap2.txt section5, page 10.

    0 for shi1_type indicates a Disk.
    1 for shi1_type indicates a Print Queue.
    2 for shi1_type indicates a Device.
    3 for shi1_type indicates an IPC pipe.
    0x8000 0000 (top bit set in shi1_type) indicates a hidden share.


    SERVER_INFO_101

    Note: see cifs6.txt section 6.4 - the fields described therein will be of assistance here. for example, the type listed below is the same as fServerType, which is described in 6.4.1.

    SV_TYPE_WORKSTATION

    0x00000001 All workstations

    SV_TYPE_SERVER

    0x00000002 All servers

    SV_TYPE_SQLSERVER

    0x00000004 Any server running with SQL server

    SV_TYPE_DOMAIN_CTRL

    0x00000008 Primary domain controller

    SV_TYPE_DOMAIN_BAKCTRL

    0x00000010 Backup domain controller

    SV_TYPE_TIME_SOURCE

    0x00000020 Server running the timesource service

    SV_TYPE_AFP

    0x00000040 Apple File Protocol servers

    SV_TYPE_NOVELL

    0x00000080 Novell servers

    SV_TYPE_DOMAIN_MEMBER

    0x00000100 Domain Member

    SV_TYPE_PRINTQ_SERVER

    0x00000200 Server sharing print queue

    SV_TYPE_DIALIN_SERVER

    0x00000400 Server running dialin service.

    SV_TYPE_XENIX_SERVER

    0x00000800 Xenix server

    SV_TYPE_NT

    0x00001000 NT server

    SV_TYPE_WFW

    0x00002000 Server running Windows for

    SV_TYPE_SERVER_NT

    0x00008000 Windows NT non DC server

    SV_TYPE_POTENTIAL_BROWSER

    0x00010000 Server that can run the browser service

    SV_TYPE_BACKUP_BROWSER

    0x00020000 Backup browser server

    SV_TYPE_MASTER_BROWSER

    0x00040000 Master browser server

    SV_TYPE_DOMAIN_MASTER

    0x00080000 Domain Master Browser server

    SV_TYPE_LOCAL_LIST_ONLY

    0x40000000 Enumerate only entries marked "local"

    SV_TYPE_DOMAIN_ENUM

    0x80000000 Enumerate Domains. The pszServer and pszDomain parameters must be NULL.


    MSRPC over Transact Named Pipe

    For details on the SMB Transact Named Pipe, see cifs6.txt


    MSRPC Pipes

    The MSRPC is conducted over an SMB Transact Pipe with a name of +\PIPE\. You must first obtain a 16 bit file handle, by +sending a SMBopenX with the pipe name \PIPE\srvsvc for +example. You can then perform an SMB Trans, +and must carry out an SMBclose on the file handle once you are finished.

    Trans Requests must be sent with two setup UINT16s, no UINT16 params (none +known about), and UINT8 data parameters sufficient to contain the MSRPC +header, and MSRPC data. The first UINT16 setup parameter must be either +0x0026 to indicate an RPC, or 0x0001 to indicate Set Named Pipe Handle +state. The second UINT16 parameter must be the file handle for the pipe, +obtained above.

    The Data section for an API Command of 0x0026 (RPC pipe) in the Trans +Request is the RPC Header, followed by the RPC Data. The Data section for +an API Command of 0x0001 (Set Named Pipe Handle state) is two bytes. The +only value seen for these two bytes is 0x00 0x43.

    MSRPC Responses are sent as response data inside standard SMB Trans +responses, with the MSRPC Header, MSRPC Data and MSRPC tail.

    It is suspected that the Trans Requests will need to be at least 2-byte +aligned (probably 4-byte). This is standard practice for SMBs. It is also +independent of the observed 4-byte alignments with the start of the MSRPC +header, including the 4-byte alignment between the MSRPC header and the +MSRPC data.

    First, an SMBtconX connection is made to the IPC$ share. The connection +must be made using encrypted passwords, not clear-text. Then, an SMBopenX +is made on the pipe. Then, a Set Named Pipe Handle State must be sent, +after which the pipe is ready to accept API commands. Lastly, and SMBclose +is sent.

    To be resolved:

    lkcl/01nov97 there appear to be two additional bytes after the null-terminated \PIPE\ name for the RPC pipe. Values seen so far are +listed below:

            initial SMBopenX request:         RPC API command 0x26 params:
    +        "\\PIPE\\lsarpc"                  0x65 0x63; 0x72 0x70; 0x44 0x65;
    +        "\\PIPE\\srvsvc"                  0x73 0x76; 0x4E 0x00; 0x5C 0x43;


    Header

    [section to be rewritten, following receipt of work by Duncan Stansfield]

    Interesting note: if you set packed data representation to 0x0100 0000 +then all 4-byte and 2-byte word ordering is turned around!

    The start of each of the NTLSA and NETLOGON named pipes begins with:

    offset: 00

    Variable type: UINT8

    Variable data: 5 - RPC major version

    offset: 01

    Variable type: UINT8

    Variable data: 0 - RPC minor version

    offset: 02

    Variable type: UINT8

    Variable data: 2 - RPC response packet

    offset: 03

    Variable type: UINT8

    Variable data: 3 - (FirstFrag bit-wise or with LastFrag)

    offset: 04

    Variable type: UINT32

    Variable data: 0x1000 0000 - packed data representation

    offset: 08

    Variable type: UINT16

    Variable data: fragment length - data size (bytes) inc header and tail.

    offset: 0A

    Variable type: UINT16

    Variable data: 0 - authentication length

    offset: 0C

    Variable type: UINT32

    Variable data: call identifier. matches 12th UINT32 of incoming RPC data.

    offset: 10

    Variable type: UINT32

    Variable data: allocation hint - data size (bytes) minus header and tail.

    offset: 14

    Variable type: UINT16

    Variable data: 0 - presentation context identifier

    offset: 16

    Variable type: UINT8

    Variable data: 0 - cancel count

    offset: 17

    Variable type: UINT8

    Variable data: in replies: 0 - reserved; in requests: opnum - see #defines.

    offset: 18

    Variable type: ......

    Variable data: start of data (goes on for allocation_hint bytes)


    Interface identification

    the interfaces are numbered. as yet I haven't seen more than one interface used on the same pipe name srvsvc

    abstract (0x4B324FC8, 0x01D31670, 0x475A7812, 0x88E16EBF, 0x00000003)
    +transfer (0x8A885D04, 0x11C91CEB, 0x0008E89F, 0x6048102B, 0x00000002)


    RPC Bind / Bind Ack

    RPC Binds are the process of associating an RPC pipe (e.g \PIPE\lsarpc) +with a "transfer syntax" (see RPC_Iface structure). The purpose for doing +this is unknown.

    Note: The RPC_ResBind SMB Transact request is sent with two uint16 setup parameters. The first is 0x0026; the second is the file handle + returned by the SMBopenX Transact response.

    Note: The RPC_ResBind members maxtsize, maxrsize and assocgid are the same in the response as the same members in the RPC_ReqBind. The + RPC_ResBind member transfersyntax is the same in the response as + the

    Note: The RPC_ResBind response member secondaddr contains the name of what is presumed to be the service behind the RPC pipe. The + mapping identified so far is:

    Note: The RPC_Packet fraglength member in both the Bind Request and Bind Acknowledgment must contain the length of the entire RPC data, including the RPC_Packet header.

    Request:

    RPC_Packet
    RPC_ReqBind

    Response:

    RPC_Packet
    RPC_ResBind


    NTLSA Transact Named Pipe

    The sequence of actions taken on this pipe are:

    Establish a connection to the IPC$ share (SMBtconX). use encrypted passwords.
    Open an RPC Pipe with the name "\\PIPE\\lsarpc". Store the file handle.
    Using the file handle, send a Set Named Pipe Handle state to 0x4300.
    Send an LSA Open Policy request. Store the Policy Handle.
    Using the Policy Handle, send LSA Query Info Policy requests, etc.
    Using the Policy Handle, send an LSA Close.
    Close the IPC$ share.

    Defines for this pipe, identifying the query are:


    NETLOGON rpc Transact Named Pipe

    The sequence of actions taken on this pipe are:

    tablish a connection to the IPC$ share (SMBtconX). use encrypted passwords.
    en an RPC Pipe with the name "\\PIPE\\NETLOGON". Store the file handle.
    ing the file handle, send a Set Named Pipe Handle state to 0x4300.
    eate Client Challenge. Send LSA Request Challenge. Store Server Challenge.
    lculate Session Key. Send an LSA Auth 2 Challenge. Store Auth2 Challenge.
    lc/Verify Client Creds. Send LSA Srv PW Set. Calc/Verify Server Creds.
    lc/Verify Client Creds. Send LSA SAM Logon . Calc/Verify Server Creds.
    lc/Verify Client Creds. Send LSA SAM Logoff. Calc/Verify Server Creds.
    ose the IPC$ share.

    Defines for this pipe, identifying the query are


    LSA SAM Logon

    Note: valid_user is True iff the username and password hash are valid for + the requested domain.


    Response

    if (valid_user)
    +{
    +	UINT16      3 - switch value indicating USER_INFO structure.
    +    VOID*     non-zero - pointer to USER_INFO structure
    +    USER_INFO user logon information
    +
    +    UINT32    1 - Authoritative response; 0 - Non-Auth?
    +
    +    return    0 - indicates success
    +}
    +else
    +{
    +	UINT16    0 - switch value.  value to indicate no user presumed.
    +    VOID*     0x0000 0000 - indicates no USER_INFO structure.
    +
    +    UINT32    1 - Authoritative response; 0 - Non-Auth?
    +
    +    return    0xC000 0064 - NT_STATUS_NO_SUCH_USER.
    +}


    \\MAILSLOT\NET\NTLOGON

    Note: mailslots will contain a response mailslot, to which the response + should be sent. the target NetBIOS name is REQUEST_NAME<20>, where + REQUEST_NAME is the name of the machine that sent the request.


    SRVSVC Transact Named Pipe

    Defines for this pipe, identifying the query are:


    Cryptographic side of NT Domain Authentication


    Protocol

    C->S ReqChal,Cc S->C Cs

    C & S compute session key Ks = E(PW[9..15],E(PW[0..6],Add(Cc,Cs)))

    C: Rc = Cred(Ks,Cc) C->S Authenticate,Rc S: Rs = Cred(Ks,Cs), +assert(Rc == Cred(Ks,Cc)) S->C Rs C: assert(Rs == Cred(Ks,Cs))

    On joining the domain the client will optionally attempt to change its +password and the domain controller may refuse to update it depending +on registry settings. This will also occur weekly afterwards.

    C: Tc = Time(), Rc' = Cred(Ks,Rc+Tc) C->S ServerPasswordSet,Rc',Tc, +arc4(Ks[0..7,16],lmowf(randompassword()) C: Rc = Cred(Ks,Rc+Tc+1) S: +assert(Rc' == Cred(Ks,Rc+Tc)), Ts = Time() S: Rs' = Cred(Ks,Rs+Tc+1) +S->C Rs',Ts C: assert(Rs' == Cred(Ks,Rs+Tc+1)) S: Rs = Rs'

    User: U with password P wishes to login to the domain (incidental data +such as workstation and domain omitted)

    C: Tc = Time(), Rc' = Cred(Ks,Rc+Tc) C->S NetLogonSamLogon,Rc',Tc,U, +arc4(Ks[0..7,16],16,ntowf(P),16), arc4(Ks[0..7,16],16,lmowf(P),16) S: +assert(Rc' == Cred(Ks,Rc+Tc)) assert(passwords match those in SAM) S: +Ts = Time()

    S->C Cred(Ks,Cred(Ks,Rc+Tc+1)),userinfo(logon script,UID,SIDs,etc) C: +assert(Rs == Cred(Ks,Cred(Rc+Tc+1)) C: Rc = Cred(Ks,Rc+Tc+1)


    Comments

    On first joining the domain the session key could be computed by +anyone listening in on the network as the machine password has a well +known value. Until the machine is rebooted it will use this session +key to encrypt NT and LM one way functions of passwords which are +password equivalents. Any user who logs in before the machine has been +rebooted a second time will have their password equivalent exposed. Of +course the new machine password is exposed at this time anyway.

    None of the returned user info such as logon script, profile path and +SIDs *appear* to be protected by anything other than the TCP checksum.

    The server time stamps appear to be ignored.

    The client sends a ReturnAuthenticator in the SamLogon request which I +can't find a use for. However its time is used as the timestamp +returned by the server.

    The password OWFs should NOT be sent over the network reversibly +encrypted. They should be sent using ARC4(Ks,md4(owf)) with the server +computing the same function using the owf values in the SAM.


    SIDs and RIDs

    SIDs and RIDs are well documented elsewhere.

    A SID is an NT Security ID (see DOM_SID structure). They are of the form:

    revision-NN-SubAuth1-SubAuth2-SubAuth3...
    revision-0xNNNNNNNNNNNN-SubAuth1-SubAuth2-SubAuth3...

    currently, the SID revision is 1. +The Sub-Authorities are known as Relative IDs (RIDs).


    Well-known RIDS

    A RID is a sub-authority value, as part of either a SID, or in the case +of Group RIDs, part of the DOM_GID structure, in the USER_INFO_1 +structure, in the LSA SAM Logon response.

    \ No newline at end of file diff --git a/docs/htmldocs/Samba-HOWTO-Collection.html b/docs/htmldocs/Samba-HOWTO-Collection.html index ffb6939e173..71e27a2e801 100644 --- a/docs/htmldocs/Samba-HOWTO-Collection.html +++ b/docs/htmldocs/Samba-HOWTO-Collection.html @@ -1,10 +1,12 @@ + SAMBA Project Documentation

    SAMBA Project Documentation

    SAMBA Project Documentation

    SAMBA Team

    SAMBA Team

    Abstract

    Abstract

    Last UpdateLast Update : Thu Aug 15 12:48:45 CDT 2002

    This book is a collection of HOWTOs added to Samba documentation over the years. @@ -73,34 +68,34 @@ CLASS="TOC" >Table of Contents

    1. How to Install and Test SAMBA
    1.1. Step 0: Read the man pages
    1.2. Step 1: Building the Binaries
    1.3. Step 2: The all important step
    1.4. Step 3: Create the smb configuration file.
    1.5. Step 4: Test your config file with
    1.6. Step 5: Starting the smbd and nmbd
    1.6.1. Step 5a: Starting from inetd.conf
    1.6.2. Step 5b. Alternative: starting it as a daemon
    1.7. Step 6: Try listing the shares available on your server
    1.8. Step 7: Try connecting with the unix client
    1.9. Step 8: Try connecting from a DOS, WfWg, Win9x, WinNT, Win2k, OS/2, etc... client
    1.10. What If Things Don't Work?
    1.10.1. Diagnosing Problems
    1.10.2. Scope IDs
    1.10.3. Choosing the Protocol Level
    1.10.4. Printing from UNIX to a Client PC
    1.10.5. Locking
    1.10.6. Mapping Usernames
    2. Diagnosing your samba server
    2.1. Introduction
    2.2. Assumptions
    2.3. Tests
    2.3.1. Test 1
    2.3.2. Test 2
    2.3.3. Test 3
    2.3.4. Test 4
    2.3.5. Test 5
    2.3.6. Test 6
    2.3.7. Test 7
    2.3.8. Test 8
    2.3.9. Test 9
    2.3.10. Test 10
    2.3.11. Test 11
    2.4. Still having troubles?
    3. Integrating MS Windows networks with Samba
    3.1. Agenda
    3.2. Name Resolution in a pure Unix/Linux world
    3.2.1. /etc/hosts
    3.2.2. /etc/resolv.conf
    3.2.3. /etc/host.conf
    3.2.4. /etc/nsswitch.conf
    3.3. Name resolution as used within MS Windows networking
    3.3.1. The NetBIOS Name Cache
    3.3.2. The LMHOSTS file
    3.3.3. HOSTS file
    3.3.4. DNS Lookup
    3.3.5. WINS Lookup
    3.4. How browsing functions and how to deploy stable and dependable browsing using Samba
    3.5. MS Windows security options and how to configure Samba for seemless integration
    3.5.1. Use MS Windows NT as an authentication server
    3.5.2. Make Samba a member of an MS Windows NT security domain
    3.5.3. Configure Samba as an authentication server
    3.5.3.1. Users
    3.5.3.2. MS Windows NT Machine Accounts
    3.6. Conclusions
    4. Configuring PAM for distributed but centrally managed authentication
    4.1. Samba and PAM
    4.2. Distributed Authentication
    4.3. PAM Configuration in smb.conf
    5. Hosting a Microsoft Distributed File System tree on Samba
    5.1. Instructions
    5.1.1. Notes
    6. UNIX Permission Bits and Windows NT Access Control Lists
    6.1. Viewing and changing UNIX permissions using the NT security dialogs
    6.2. How to view file security on a Samba share
    6.3. Viewing file ownership
    6.4. Viewing file or directory permissions
    6.4.1. File Permissions
    6.4.2. Directory Permissions
    6.5. Modifying file or directory permissions
    6.6. Interaction with the standard Samba create mask parameters
    6.7. Interaction with the standard Samba file attribute mapping
    7. Printing Support in Samba 2.2.x
    7.1. Introduction
    7.2. Configuration
    7.2.1. Creating [print$]
    7.2.2. Setting Drivers for Existing Printers
    7.2.3. Support a large number of printers
    7.2.4. Adding New Printers via the Windows NT APW
    7.2.5. Samba and Printer Ports
    7.3. The Imprints Toolset
    7.3.1. What is Imprints?
    7.3.2. Creating Printer Driver Packages
    7.3.3. The Imprints server
    7.3.4. The Installation Client
    7.4.
    8. Debugging Printing Problems
    8.1. Introduction
    8.2. Debugging printer problems
    8.3. What printers do I have?
    8.4. Setting up printcap and print servers
    8.5. Job sent, no output
    8.6. Job sent, strange output
    8.7. Raw PostScript printed
    8.8. Advanced Printing
    8.9. Real debugging
    9. Security levels
    9.1. Introduction
    9.2. More complete description of security levels
    10. security = domain in Samba 2.x
    10.1. Joining an NT Domain with Samba 2.2
    10.2. Samba and Windows 2000 Domains
    10.3. Why is this better than security = server?
    11. Unified Logons between Windows NT and UNIX using Winbind
    11.1. Abstract
    11.2. Introduction
    11.3. What Winbind Provides
    11.3.1. Target Uses
    11.4. How Winbind Works
    11.4.1. Microsoft Remote Procedure Calls
    11.4.2. Name Service Switch
    11.4.3. Pluggable Authentication Modules
    11.4.4. User and Group ID Allocation
    11.4.5. Result Caching
    11.5. Installation and Configuration
    11.5.1. Introduction
    11.5.2. Requirements
    11.5.3. Testing Things Out
    11.5.3.1. Configure and compile SAMBA
    11.5.3.2. Configure nsswitch.conf and the -winbind libraries
    11.5.3.3. Configure smb.conf
    11.5.3.4. Join the SAMBA server to the PDC domain
    11.5.3.5. Start up the winbindd daemon and test it!
    11.5.3.6. Fix the init.d startup scripts
    11.5.3.7. Configure Winbind and PAM
    11.6. Limitations
    11.7. Conclusion
    12. How to Configure Samba 2.2 as a Primary Domain Controller
    12.1. Prerequisite Reading
    12.2. Background
    12.3. Configuring the Samba Domain Controller
    12.4. Creating Machine Trust Accounts and Joining Clients to the Domain
    12.4.1. Manual Creation of Machine Trust Accounts
    12.4.2. "On-the-Fly" Creation of Machine Trust Accounts
    12.4.3. Joining the Client to the Domain
    12.5. Common Problems and Errors
    12.6. System Policies and Profiles
    12.7. What other help can I get?
    12.8. Domain Control for Windows 9x/ME
    12.8.1. Configuration Instructions: Network Logons
    12.8.2. Configuration Instructions: Setting up Roaming User Profiles
    12.8.2.1. Windows NT Configuration
    12.8.2.2. Windows 9X Configuration
    12.8.2.3. Win9X and WinNT Configuration
    12.8.2.4. Windows 9X Profile Setup
    12.8.2.5. Windows NT Workstation 4.0
    12.8.2.6. Windows NT Server
    12.8.2.7. Sharing Profiles between W95 and NT Workstation 4.0
    12.9. DOMAIN_CONTROL.txt : Windows NT Domain Control & Samba
    13. How to Act as a Backup Domain Controller in a Purely Samba Controlled Domain
    13.1. Prerequisite Reading
    13.2. Background
    13.3. What qualifies a Domain Controller on the network?
    13.3.1. How does a Workstation find its domain controller?
    13.3.2. When is the PDC needed?
    13.4. Can Samba be a Backup Domain Controller?
    13.5. How do I set up a Samba BDC?
    13.5.1. How do I replicate the smbpasswd file?
    14. Storing Samba's User/Machine Account information in an LDAP Directory
    14.1. Purpose
    14.2. Introduction
    14.3. Supported LDAP Servers
    14.4. Schema and Relationship to the RFC 2307 posixAccount
    14.5. Configuring Samba with LDAP
    14.5.1. OpenLDAP configuration
    14.5.2. Configuring Samba
    14.6. Accounts and Groups management
    14.7. Security and sambaAccount
    14.8. LDAP specials attributes for sambaAccounts
    14.9. Example LDIF Entries for a sambaAccount
    14.10. Comments
    15. Improved browsing in samba
    15.1. Overview of browsing
    15.2. Browsing support in samba
    15.3. Problem resolution
    15.4. Browsing across subnets
    15.4.1. How does cross subnet browsing work ?
    15.5. Setting up a WINS server
    15.6. Setting up Browsing in a WORKGROUP
    15.7. Setting up Browsing in a DOMAIN
    15.8. Forcing samba to be the master
    15.9. Making samba the domain master
    15.10. Note about broadcast addresses
    15.11. Multiple interfaces
    16. Samba performance issues
    16.1. Comparisons
    16.2. Oplocks
    16.2.1. Overview
    16.2.2. Level2 Oplocks
    16.2.3. Old 'fake oplocks' option - deprecated
    16.3. Socket options
    16.4. Read size
    16.5. Max xmit
    16.6. Locking
    16.7. Share modes
    16.8. Log level
    16.9. Wide lines
    16.10. Read raw
    16.11. Write raw
    16.12. Read prediction
    16.13. Memory mapping
    16.14. Slow Clients
    16.15. Slow Logins
    16.16. Client tuning
    16.17. My Results
    17. OS2 Client HOWTOSamba and other CIFS clients
    17.1. FAQsMacintosh clients?
    OS2 Client
    17.1.1. How can I configure OS/2 Warp Connect or OS/2 Warp 4 as a client for Samba?
    17.1.2. How can I configure OS/2 Warp 3 (not Connect), OS/2 1.2, 1.3 or 2.x for Samba?
    17.1.3. Are there any other issues when OS/2 (any version) is used as a client?
    17.1.4. How do I get printer driver download working for OS/2 clients?
    Windows for Workgroups
    Use latest TCP/IP stack from Microsoft
    Delete .pwl files after password change
    Configure WfW password handling
    Case handling of passwords
    Windows '95/'98
    Windows 2000 Service Pack 2
    18. HOWTO Access Samba source code via CVS
    18.1. Introduction
    18.2. CVS Access to samba.org
    18.2.1. Access via CVSweb
    18.2.2. Access via cvs
    19. Reporting Bugs
    19.1. Introduction
    19.2. General info
    19.3. Debug levels
    19.4. Internal errors
    19.5. Attaching to a running process
    19.6. Patches
    IndexGroup mapping HOWTO
    Portability
    HPUX
    SCO Unix
    DNIX

    Default: panic action = <empty string>panic action = <empty string>

    Example:


    Chapter 1. How to Install and Test SAMBA

    How to Install and Test SAMBA

    1.1. Step 0: Read the man pages

    Step 0: Read the man pages

    The man pages distributed with SAMBA contain lots of useful info that will help to get you started. @@ -1452,12 +1415,10 @@ TARGET="_top" >



    1.2. Step 1: Building the Binaries

    Step 1: Building the Binaries

    To do this, first run the program



    1.3. Step 2: The all important step

    Step 2: The all important step

    At this stage you must fetch yourself a coffee or other drink you find stimulating. Getting the rest @@ -1568,12 +1527,10 @@ NAME="AEN56" >



    1.4. Step 3: Create the smb configuration file.

    Step 3: Create the smb configuration file.

    There are sample configuration files in the examples subdirectory in the distribution. I suggest you read them @@ -1633,16 +1590,14 @@ CLASS="FILENAME" >



    1.6. Step 5: Starting the smbd and nmbd

    Step 5: Starting the smbd and nmbd

    You must choose to start smbd and nmbd either as daemons or from



    1.6.1. Step 5a: Starting from inetd.conf

    Step 5a: Starting from inetd.conf

    NOTE; The following will be different if you use NIS or NIS+ to distributed services maps.



    1.6.2. Step 5b. Alternative: starting it as a daemon

    Step 5b. Alternative: starting it as a daemon

    To start the server as a daemon you should create a script something like this one, perhaps calling @@ -1876,13 +1825,11 @@ CLASS="FILENAME" >



    1.7. Step 6: Try listing the shares available on your - server

    Step 6: Try listing the shares available on your + server



    1.8. Step 7: Try connecting with the unix client

    Step 7: Try connecting with the unix client



    1.9. Step 8: Try connecting from a DOS, WfWg, Win9x, WinNT, - Win2k, OS/2, etc... client

    Step 8: Try connecting from a DOS, WfWg, Win9x, WinNT, + Win2k, OS/2, etc... client

    Try mounting disks. eg:



    1.10. What If Things Don't Work?

    What If Things Don't Work?

    If nothing works and you start to think "who wrote this pile of trash" then I suggest you do step 2 again (and @@ -2052,12 +1993,10 @@ NAME="AEN174" easier.



    1.10.1. Diagnosing Problems

    Diagnosing Problems

    If you have installation problems then go to



    1.10.2. Scope IDs

    Scope IDs

    By default Samba uses a blank scope ID. This means all your windows boxes must also have a blank scope ID. @@ -2084,12 +2021,10 @@ NAME="AEN183" >



    1.10.3. Choosing the Protocol Level

    Choosing the Protocol Level

    The SMB protocol has many dialects. Currently Samba supports 5, called CORE, COREPLUS, LANMAN1, @@ -2125,30 +2060,29 @@ CLASS="FILENAME" >



    1.10.4. Printing from UNIX to a Client PC

    Printing from UNIX to a Client PC

    To use a printer that is available via a smb-based - server from a unix host you will need to compile the + server from a unix host with LPR you will need to compile the smbclient program. You then need to install the script "smbprint". Read the instruction in smbprint for more details.

    There is also a SYSV style script that does much the same thing called smbprint.sysv. It contains instructions.

    See the CUPS manual for information about setting up + printing from a unix host with CUPS to a smb-based server.



    1.10.5. Locking

    Locking

    One area which sometimes causes trouble is locking.



    1.10.6. Mapping Usernames

    Mapping Usernames

    If you have different usernames on the PCs and the unix server then take a look at the "username map" option. @@ -2220,17 +2152,13 @@ NAME="AEN208" CLASS="CHAPTER" >


    Chapter 2. Diagnosing your samba server

    Diagnosing your samba server

    2.1. Introduction

    Introduction

    This file contains a list of tests you can perform to validate your Samba server. It also tells you what the likely cause of the problem @@ -2247,12 +2175,10 @@ ignore your email.



    2.2. Assumptions

    Assumptions

    In all of the tests I assume you have a Samba server called BIGSERVER and a PC called ACLIENT both in workgroup TESTGROUP. I also assume the @@ -2297,20 +2223,16 @@ best way to check this is with "testparm smb.conf"



    2.3. Tests

    Tests

    2.3.1. Test 1

    Test 1

    In the directory in which you store your smb.conf file, run the command "testparm smb.conf". If it reports any errors then your smb.conf @@ -2327,12 +2249,10 @@ CLASS="FILENAME" >



    2.3.2. Test 2

    Test 2

    Run the command "ping BIGSERVER" from the PC and "ping ACLIENT" from the unix box. If you don't get a valid response then your TCP/IP @@ -2353,12 +2273,10 @@ this is done via the ipfwadm program.)



    2.3.3. Test 3

    Test 3

    Run the command "smbclient -L BIGSERVER" on the unix box. You should get a list of available shares back.



    2.3.4. Test 4

    Test 4

    Run the command "nmblookup -B BIGSERVER __SAMBA__". You should get the IP address of your Samba server back.



    2.3.5. Test 5

    Test 5

    run the command



    2.3.6. Test 6

    Test 6

    Run the command



    2.3.7. Test 7

    Test 7

    Run the command



    2.3.8. Test 8

    Test 8

    On the PC type the command



    2.3.9. Test 9

    Test 9

    Run the command



    2.3.10. Test 10

    Test 10

    Run the command



    2.3.11. Test 11

    Test 11

    From file manager try to browse the server. Your samba server should appear in the browse list of your local workgroup (or the one you @@ -2745,12 +2647,10 @@ for encrypted passwords (refer to the Makefile).



    2.4. Still having troubles?

    Still having troubles?

    Try the mailing list or newsgroup, or use the ethereal utility to sniff the problem. The official samba mailing list can be reached at @@ -2774,17 +2674,13 @@ TARGET="_top" CLASS="CHAPTER" >


    Chapter 3. Integrating MS Windows networks with Samba

    Integrating MS Windows networks with Samba

    3.1. Agenda

    Agenda

    To identify the key functional mechanisms of MS Windows networking to enable the deployment of Samba as a means of extending and/or @@ -2846,12 +2742,10 @@ TYPE="a" >



    3.2. Name Resolution in a pure Unix/Linux world

    Name Resolution in a pure Unix/Linux world

    The key configuration files covered in this section are:



    3.2.1. /etc/hosts

    Contains a static list of IP Addresses and names. eg:



    3.2.2. /etc/resolv.conf

    This file tells the name resolution libraries:



    3.2.4. /etc/nsswitch.conf

    This file controls the actual name resolution targets. The file typically has resolver object specifications as follows:



    3.3. Name resolution as used within MS Windows networking

    Name resolution as used within MS Windows networking

    MS Windows networking is predicated about the name each machine is given. This name is known variously (and inconsistently) as @@ -3226,12 +3110,10 @@ Since we are primarily concerned with TCP/IP this demonstration is limited to this area.



    3.3.1. The NetBIOS Name Cache

    The NetBIOS Name Cache

    All MS Windows machines employ an in memory buffer in which is stored the NetBIOS names and IP addresses for all external @@ -3253,12 +3135,10 @@ is called "nmblookup".



    3.3.2. The LMHOSTS file

    The LMHOSTS file

    This file is usually located in MS Windows NT 4.0 or 2000 in



    3.3.3. HOSTS file

    HOSTS file

    This file is usually located in MS Windows NT 4.0 or 2000 in



    3.3.4. DNS Lookup

    DNS Lookup

    This capability is configured in the TCP/IP setup area in the network configuration facility. If enabled an elaborate name resolution sequence @@ -3407,12 +3283,10 @@ lookup is used.



    3.3.5. WINS Lookup

    WINS Lookup

    A WINS (Windows Internet Name Server) service is the equivaent of the rfc1001/1002 specified NBNS (NetBIOS Name Server). A WINS server stores @@ -3468,13 +3342,11 @@ of the WINS server.



    3.4. How browsing functions and how to deploy stable and -dependable browsing using Samba

    How browsing functions and how to deploy stable and +dependable browsing using Samba

    As stated above, MS Windows machines register their NetBIOS names (i.e.: the machine name for each service type in operation) on start @@ -3535,13 +3407,11 @@ and so on.



    3.5. MS Windows security options and how to configure -Samba for seemless integration

    MS Windows security options and how to configure +Samba for seemless integration

    MS Windows clients may use encrypted passwords as part of a challenege/response authentication model (a.k.a. NTLMv1) or @@ -3657,8 +3527,9 @@ CLASS="PARAMETER" >password level must be set to the maximum -number of upper case letter which couldcould appear is a password. Note that is the server OS uses the traditional DES version of crypt(), then a



    3.5.1. Use MS Windows NT as an authentication server

    Use MS Windows NT as an authentication server

    This method involves the additions of the following parameters in the smb.conf file:



    3.5.2. Make Samba a member of an MS Windows NT security domain

    Make Samba a member of an MS Windows NT security domain

    This method involves additon of the following paramters in the smb.conf file:



    3.5.3. Configure Samba as an authentication server

    Configure Samba as an authentication server

    This mode of authentication demands that there be on the Unix/Linux system both a Unix style account as well as an @@ -3840,12 +3705,10 @@ to be created for each user, as well as for each MS Windows NT/2000 machine. The following structure is required.



    3.5.3.1. Users

    Users

    A user account that may provide a home directory should be created. The following Linux system commands are typical of @@ -3872,12 +3735,10 @@ CLASS="PROGRAMLISTING" >



    3.5.3.2. MS Windows NT Machine Accounts

    MS Windows NT Machine Accounts

    These are required only when Samba is used as a domain controller. Refer to the Samba-PDC-HOWTO for more details.



    3.6. Conclusions

    Conclusions

    Samba provides a flexible means to operate as...


    Chapter 4. Configuring PAM for distributed but centrally -managed authentication

    Configuring PAM for distributed but centrally +managed authentication

    4.1. Samba and PAM

    Samba and PAM

    A number of Unix systems (eg: Sun Solaris), as well as the xxxxBSD family and Linux, now utilize the Pluggable Authentication @@ -4187,7 +4042,7 @@ password required /lib/security/pam_smbpass.so nodelay smbconf=/etc/samba. >

    Note: PAM allows stacking of authentication mechanisms. It is -also possible to pass information obtained within on PAM module through +also possible to pass information obtained within one PAM module through to the next module in the PAM stack. Please refer to the documentation for your particular system implementation for details regarding the specific capabilities of PAM in this environment. Some Linux implmentations also @@ -4206,12 +4061,10 @@ PAM documentation for further helpful information.



    4.2. Distributed Authentication

    Distributed Authentication

    The astute administrator will realize from this that the combination of



    4.3. PAM Configuration in smb.conf

    PAM Configuration in smb.conf

    There is an option in smb.conf called


    Chapter 5. Hosting a Microsoft Distributed File System tree on Samba

    Hosting a Microsoft Distributed File System tree on Samba

    5.1. Instructions

    Instructions

    The Distributed File System (or Dfs) provides a means of separating the logical view of files and directories that users @@ -4444,12 +4291,10 @@ CLASS="USERINPUT" takes users directly to the appropriate shares on the network.



    5.1.1. Notes

    Notes

    smb.conf