Issue with gssapi on OpenSolaris

Fri Oct 7 19:03:38 EDT 2005

I have a problem on OpenSolaris with the GSSAPI. When I use the MIT
gss-sample program (with minor changes see attachment) I don't get all the
context flags transfered to the server. It looks like a bug somewhere in the
gssapi. Has anybody seen this issue or know what is wrong in the sample
program ? BTW it works on Solaris 10.

Thanks
Markus

On OpenSolaris:

$ uname -a
SunOS server1.test.com 5.11 snv_23 i86pc i386 i86pc

The first and second request sends flags:
GSS_C_MUTUAL_FLAG
GSS_C_REPLAY_FLAG
GSS_C_CONF_FLAG
GSS_C_IN TEG_FLAG

$ ./gss-client -port 10000 server1.test.com host Hello
Sending init_sec_context token (size=1759)...continue needed...

context flag: GSS_C_MUTUAL_FLAG
context flag: GSS_C_REPLAY_FLAG
context flag: GSS_C_CONF_FLAG
context flag: GSS_C_INTEG_FLAG
"user1 at TEST.COM" to "host/server1.test.com at TEST.COM", lifetime 24621, flags
1b6, locally initiated, open
Name type of source name is { 1 2 840 113554 1 2 1 1 }.
Mechanism { 1 2 840 113554 1 2 2 } supports 8 names
0: { 1 2 840 113554 1 2 1 1 }
1: { 1 2 840 113554 1 2 1 2 }
2: { 1 2 840 113554 1 2 1 3 }
3: { 1 3 6 1 5 6 2 }
4: { 1 3 6 1 5 6 2 }
5: { 1 3 6 1 5 6 4 }
6: { 1 2 840 113554 1 2 1 1 }
7: { 1 2 840 113554 1 2 2 2 }
Signature verified.

$ ./gss-client -port 10000 server1.test.com host Hello
Sending init_sec_context token (size=1758)...continue needed...

context flag: GSS_C_MUTUAL_FLAG
context flag: GSS_C_REPLAY_FLAG
context flag: GSS_C_CONF_FLAG
context flag: GSS_C_INTEG_FLAG
"user1 at TEST.COM" to "host/server1.test.com at TEST.COM", lifetime 24618, flags
1b6, locally initiated, open
Name type of source name is { 1 2 840 113554 1 2 1 1 }.
Mechanism { 1 2 840 113554 1 2 2 } supports 8 names
0: { 1 2 840 113554 1 2 1 1 }
1: { 1 2 840 113554 1 2 1 2 }
2: { 1 2 840 113554 1 2 1 3 }
3: { 1 3 6 1 5 6 2 }
4: { 1 3 6 1 5 6 2 }
5: { 1 3 6 1 5 6 4 }
6: { 1 2 840 113554 1 2 1 1 }
7: { 1 2 840 113554 1 2 2 2 }
Signature verified.

The server receives for the first request:
GSS_C_DELEG_FLAG
GSS_C_REPLAY_FLAG
GSS_C_INTEG_FLAG

an d for the second only:
GSS_C_DELEG_FLAG

$ /src/user1/gss-sample/gss-server -port 10000 host
context flag: GSS_C_DELEG_FLAG
context flag: GSS_C_REPLAY_FLAG
context flag: GSS_C_INTEG_FLAG
Accepted connection: "user1 at TEST.COM"
Received message: "Hello"
NOOP token
context flag: GSS_C_DELEG_FLAG
Accepted connection: "user1 at TEST.COM"
Received message: "Hello"
NOOP token

Wheras on Solaris 10 I get the expected result with the server getting the
exact 4 flags the client sent:
GSS_C_MUTUAL_FLAG
GSS_C_REPLAY_FLAG
GSS_C_CONF_FLAG
GSS_C_INT EG_FLAG

Solaris 10
$ uname -a
SunOS server2.test.com 5.10 Generic_118822-18 sun4u sparc SUNW,Ultra-5_10

$ ./gss-client -port 10000 server2.test.com host Hello
Sending init_sec_context token (size=1755)...continue needed...

context flag: GSS_C_MUTUAL_FLAG
context flag: GSS_C_REPLAY_FLAG
context flag: GSS_C_CONF_FLAG
context flag: GSS_C_INTEG_FLAG
"user1 at TEST.COM" to "host/server2.test.com at TEST.COM", lifetime 26716, flags
1b6, locally initiated, open
Name type of source name is { 1 2 840 113554 1 2 1 1 }.
Mechanism { 1 2 840 113554 1 2 2 } supports 8 names
0: { 1 2 840 113554 1 2 1 1 }
1: { 1 2 840 113554 1 2 1 2 }
2: { 1 2 840 113554 1 2 1 3 }
3: { 1 3 6 1 5 6 2 }
4: { 1 3 6 1 5 6 2 }
5: { 1 3 6 1 5 6 4 }
6: { 1 2 840 113554 1 2 1 1 }
7: { 1 2 840 113554 1 2 2 2 }
Signature verified.

$ ./gss-client -port 10000 server2.test.com host Hello
Sending init_sec_context token (size=1756)...continue needed...

context flag: GSS_C_MUTUAL_FLAG
context flag: GSS_C_REPLAY_FLAG
context flag: GSS_C_CONF_FLAG
context flag: GSS_C_INTEG_FLAG
"user1 at TEST.COM" to "host/server2.test.com at TEST.COM", lifetime 26714, flags
1b6, locally initiated, open
Name type of source name is { 1 2 840 113554 1 2 1 1 }.
Mechanism { 1 2 840 113554 1 2 2 } supports 8 names
0: { 1 2 840 113554 1 2 1 1 }
1: { 1 2 840 113554 1 2 1 2 }
2: { 1 2 840 113554 1 2 1 3 }
3: { 1 3 6 1 5 6 2 }
4: { 1 3 6 1 5 6 2 }
5: { 1 3 6 1 5 6 4 }
6: { 1 2 840 113554 1 2 1 1 }
7: { 1 2 840 113554 1 2 2 2 }
Signature verified.

$ ./gss-server -port 10000 host
context flag: GSS_C_MUTUAL_FLAG
context flag: GSS_C_REPLAY_FLAG
context flag: GSS_C_CONF_FLAG
context flag: GSS_C_INTEG_FLAG
Accepted connection: "user1 at TEST.COM"
Received message: "Hello"
NOOP token
context flag: GSS_C_MUTUAL_FLAG
context flag: GSS_C_REPLAY_FLAG
context flag: GSS_C_CONF_FLAG
context flag: GSS_C_INTEG_FLAG
Accepted connection: "user1 at TEST.COM"
Received message: "Hello"
NOOP token

begin 666 gss-test.tar.bz2
M0EIH.3%!629366[F+J4`(,[_D/RR"-!_________[_____X$`$ (8$*^^^'H
M^]- ^>[M&V=O9YUZ`>^^[%B[/GFHN^[Q44*>WW/=B]!]P8"'?,7W:M]]O%\W
MUCR.$\[%];<YRS<VT=[O7O"WKZ#U33K)`6PU*^]]XYZ:/O3VO$713/=JVN8S
MO5>^UY5$^>;O?/OO>Y;O>WLW8]VUK0'WOOGRR[J[Y>M7;E/L[F9X&G98K?=N
MGN>GKO=)K/7O6>^!ZO>WNN?3=N^ /OK6^;MTI5]].+IKY9W"10F("-- 31H0
M-33$-!3Q3>5/`*'J/4VIIZ@:`#(]0"4T)H30A$R$RI[)IDT3U0'I`]1Z90#0
M&@/4``T``D$B4R:$3:GH#4H?J1Z3TGJ,GJ/U$'I'E -M49/4`&@`!H(4B0DT
M)Z3:3$QI*>4>U3R0](>ID]IJ31H>H: `>H: ``(DD (IF3(U-),S1-1J>IZ>
MJ;:(GZ4\FIH-HAY0'J:/4T;2:!Z@(DA$T *>AJ:GDGDBGM,C4:F at VC)-J9&@
M: T`T `TT?_?K_9]H.M_]S^K\D\/P>@=8N52'VY@*=Q%>(@4>XM6?N/;7S9T
MN?8!250?/@O UK6[*_SY5Z<EJ+P=2=_P+$LIDA9BIE050!B,A at 0Q44I2[ E4
M$H@@2!@"D%;[;-(@G8*.2'S9Y/MVFH#BLK!R,ARF#$J^S\?M]WX"Y\@/M[A[
MO[(?[TT/;SHM=_,@=%\+IE[":PBG-0.*1V$NTF$I3"3=EF2N123"9F"1"4-+
M5+53`C2#,D04(T4`E*%+24 at 68B)A(E9)$1W-030=:8N7-$$5`YF2A*@)T<K'
MUSV58]R.Q/W?[?9_QX_]^1U9^[#3J"=CU-BQ(6::HD")D&DAI%'CH$LJ)#,R
MJF>#*7UD"AK'1C"H8TLE:V,AA TK$=G'T\O?$.<<0%FM#_W!N!Q[L-WM3,FF
M at T1/P_\M/G8&OQD-[,,M&+_WYZN_(;<(U&P;@.R 4;@Q-APRAMYTQ5C>1;U&
M\3&F,8^&'D+Z=^%2-'"B'^^6OD\JC9:H(;D/-*!C7<R&A,A7&-"L`&FL: HQ
M6PYNWX/IT;&S6MUG;$8]:I1ZB32.K';HWK*:DLAIC-6MY5"D:FRRQ0(D4AQA
M8X,27'M]Y_N4KU?@NS;^_2OZ,J=>HN,Z$\#'?9%#'LV.&D;KGI9/QG#%[W\G
M;1+&4"&%<K9;JJT(DO$7-[129J3))=$X[N"/P]_<\39WH(:HH(FJ"J*BB(BX
ML)MC&,;3;OT%GX/2_]93A(ZG-@=37;,WD#%K3"<1EQV57CZ-6W)>PO++^5%E
MN73<(\>MB[7=RM.3)]QRDMK>$DB(P&VV=-+<GJ9C6 at -,VTN?$1B;:QDDU)-A
M" U1H&QCQH(PNG^Q(;'IZ9F0UFF&9-0(BS-:.-/(D.4$QB2F3LG=E)D9'-#M
M$B'218=PI,&/'\CW3E"0) ($R8V#8)\?Z6'*0 at VR>-['FPZY8]],HQNK;FZ5
MYB&6EF8H]P-;FFAM(:8/S=,^<"JCVG_1/L)<2FKJ@<A+<V>FV"J,I (M6M2G
M!97*(%0E$2Y9BM6KU>QG,.SB84S$0+-T-LW#N@!]@0+_\PI4X7A7?(& 8$"@
MLD-H7[ ?CGJQ">K..IN$?,Q:5F5RK)':#NVA2V^3QM at B06UQC'Q0M%GZ6H,#
MUO5K@:;<-<1[;;[--/%OCX>Z:/E^4#UDGQ_%/P:R:_"1J-!)/]&M69WI*ONY
MHUIT\="/?J6(PE?9/3WLX9\WM3[)?+]YO).J=G[W2OKMY-OCM+_<IUXYV!($
M!OG7I\'%RL.SKT=44$2Q(>"0-OSJP*B'V#A>MI&I028E,,,BGRU"^HQ)`D%,
M4P0%",((8BHJ(B8AH9YYD%D&"$.!91$)\Y F3WX`PBBD\T.+)+(+2A2H9"83
MF#B2$ D$(-35`F^-"_.VTH@**9 at B18W9$!!.\3%6,95(@ YG&G&;6$8P13>\
M?/YBNHWM..6*'XS#`-F]624M$,E%1$S$1VXF3(0S:E,0(,C&J&@)$D7U?@,^
MDCW1[X*9PPZ<WWSIZK6^*A-)X0DD5^2)Q at -TRVXN!3Y3^B$SRQOPY^5_A7;^
M_U?/JOH[M$0\UD$8V99_%;P=E"IRX* )G:[ /0<:Y]=0MY\!PA*"S,U at Y(!I
M_B[!>D<XMXG*-SX-Q8L;"AT,]=(60X<J0O$-<HQA.#H:\M,GQU4W\R(!F1+R
MB>6OUVO8JB !M8(:CPC6+_58VNNN4^*!V8HTB,R'@PF(*2BUWT_J/;\J(!Y8
M`YPH)\'8>KU0$K4U[WFCRXN<3?AOQK9Y<A4MXW_1+ LTCJD2*FU@;-Z)DS?Z
M>XBI#G&*5CWN#5-Y24D/,?(B;2Y8L+'WV$1L-8(6X[5?:CS'Z&TR,45VZN26
M]_.\^OMSV=7;X-C?TB<J69"(**@8 at K1VA(^FX[6"G,2'@'XJ,#&N3^'?;7'^
MSHEPZL?F>U4I$P(P(!QS(D8^VR?G.T^KTTZTC4TQI-,8QM^\-GT*'-!U^. @
M(G9NE\%\]MJ?DC;Z(3K9%MI#6*=ML8^G at N6ITV[Y1\'U!3T&I"!]^+ at K,S&$
M>W#81:AWS3-!DRY3A[SIB2[;$SCL`8(:32<BXU>]1AHU_?\_D_X)_DGP_JI2
M63_=/PB>M..]T5R3/\G6R7#ZOL3YJL'%-R;4S2_D0UC"D8)+%=GB1\*-$3)I
M'73H?:I62ZD^J5(\WQ&:H2,.7VNR<ZM:JJO.]TFZ+F2VXKZ['W]-),"E[#(^
MS4')'01<B<PXQ1J46SM@$'%)B.PZMA?R1_FBO1' M*7([$<[G]NLY$RHR(:\
M.]%R&C<C6CSY7W+>BT-U0J V6HV(\2)A/N1;KD'H[DY)2=YJP'I2%H%H#7XT
MX82]XIY734\0D/!+T\?*>.2BO,5QVW)WIR3GMX)E4]R'SU*X0);).2/RQ=WG
M]C/4%<)&=_1$#T9.Q'L1-&2&CH+JG[@D<SRD`\+.X>[M16OA[:^9=S4>$V@\
MMVSZGFL^VL38/:([<\5,K9717U.P['AO\W-HL:>-/EF=DQ-H;&]XWJ+,<-T(
M[+;3R1^9O(82A7RD%A(6CK^;>@].*T\\/).^Q(TLJ0SP[:FT8:WJ1JOOBB :
MZ"+J0=]/-$.PD:Y3R/8(LI:_(_*F#R!<*:BDWU\S..7H5.6B'&=7K5Z<563%
M'?<2KD[E;;_(']$E)E]2!]+1A+KX0U?ISR^72!C?\;1U'.=]FL/O:R8JC$<;
M^?.W8\K"_$EEU**!O'#15^AN!$K]EFQ8RZ]E/LUO-BEI9!;ZY+9USWDX%]\L
M2"J)F'@6S-T\4-$N4/BM\GCX=<MYV.]V*8T+=V1,)61#CTO#A+#(KRPAKWX1
MQ!T9!2@;F<)IF>U20;W/?A/$PUO37C&5X6)H8PBJT:O at YE$6I7M+.B,T0L\^
M?7I)WU[OOUL`++J ^K'0DC"Q2',W#!LUM6=61$>FHV[:#P.595YLRV<*WZX#
M`^KG3! UT.D9'/.=GB/.YG9[M]EV;NJ2PE,N1.<K",.N7&F50X\-A%%R'X9/
M>^DELV at 5!MI-J-7G;/VFV?';SX0_"6R-]B.OGYV6.+3>K"&UUSK=?E8%N](F
MN!B;=6EC!D4$%RE02J)"<.>HDWU&9<9X,I3XO9-\./)>]$[M;XV#FK(C/L1U
M\K,K,PI2 at K$PC#)L1BJRB)\_=Z#KT-,.15*V@;J(V'*[;)$.5$>>B)QL)X0T
M9/,D=/-OBWK.)@7U\>'9KMCEM+260.1 ,'%DC=9PPS:YFY!M2!)VU!?)"(?G
M?7(-?98QYP,[M?%GPT-^J>J?`NLMQVUDE&_9C=;6V63>2Y?#C6,&QTG<?,.'
MQI<H[B4,KF<`Z--BVVEB\K20TF^W*-=:->2Y>,RG1]-O`;LIA"+(4SA=/60.
M-+6C?P6YQ47L,5!9X3>ORX&L)M)&UH&3 at BE:PQI97LIPV$VU\^+FMTZ3H<3(
M3#IF?D->3-O)B"XCVG@:S.G9"N:6HZC;2QKH)$ND2T. at 8\LDP6RIBA6]KB4C
M0Q>>&.P.> %;9M>+^L8\Y:2OD C\__J0R+H7,;3H^+M@[%-TV9HX&Y>+^%M_
M1FKOS/EZ6)>F.&/,-<3>`UKV<N0?!+8E$_)#-&C5\WV-/,0(2 at UWL*V<,=0^
M;?L6+C;L4%>[-&V8NNTOX;M3AQTXOPC%^[49WOX/?WR_'$!UZ'%)34=QU;'O
MV*,3:2WEK*P.,&$&$8!*C3.-GJ:R&@JL(R>.,R8:$8 ,.R6^9[GBO[R]%@;,
M;\/$<"'#;&,YN!G8XA<U="%'!H46(K2AH_:U%2<'8J-ZHN.C@#3EY#I[MFF-
MUVZ :%+IV=>FRW3#!\)>>.EG463VW[8:K8&D8%K-`R'<%)T(,Z/6S:1,0L0V
MT<K(U$R\\U\K7TCM,%JWT6S"W(QOQH%P#\V8K0>I]Y.1;J-]'RPUYZ#[!MYF
M.^VJO+'I0VYSK,UZL'BWD[9AEGO-9&@U&M at A$HSE[<V at MZL8OP:OL?%OG5<G
M.,+>,%K6-;%]ZQ:*WY?.'2QOIF[J[)H33T.C[\D<O&CV4^=XSI[IL0]^VCV;
MZ6!I(8X,7GG+*SUBE"QTWQ219A^S%,<=MS9\['6^[-G?@5-2MMZMWVG5WN<W
MS,(O3EAE<'0ZUBU%Z,<8.Z7CIO?<>J95%RSE[S16IJ,=T,*U6E0N&N'RLS)'
MN>[&,O)178LA!PV,S0QKKUSDQDA2E'N[IUI&_OD'9PE?PYQ_:68QJ<,2%9'7
M#CRG49O R6*5UPY at 5,,"RCF/;+G(I6$\7O$\45L)XI$3?SU1;*[W[X1*Y^WX
M+HZ[#$R0ZPBXQ9 CVH at C-'KX>)P<PL:NR8==LDU;&L3+K6FSH%049$600Z['
M,<(7(R,S!IJY_3H]F_%O9ZOA"!B4B68D"\'O^4_M>+LP4(/)RV.R5%:HJ-FV
M4OJ=8XZ<*'UX(QM(@[SNP[?@^'=JI V0(ZOQ\4CY,,S-GM=FUV1 at 7QCFR(S"
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M,%%PV ABV<5+F-874WW2.O2Q(!8XV)"K:.BF+:%FZ.FFJXAQ at F<2KEK(7Q0+
MPB=^ZA2P&,9Y964Q*'-'*(^^?3]?X_<?7\J_#R#]UGV'Z;(,OG%?8L?C;4.O
M[L)X?RSO)>N*[NG.-GW7_GQGW,FX>?RD",1XV7>9/9_7CU]GY^'_OE+SZ)T\
M7?XLYC]RMCTW^Y*>^,H6!&L!SPT?<$)NA[L_!\C>5MB?O;_ at N8[1*3*DS)!T
M^3C&@@@UQ9K3[8F69UJ+QCZ"ZFG\APN'HQ27QN6WA-Y +1<*8U%ZN8]E9'D\
M<<"Z`&0SVW7YW(G(N\E_0U?92FMXF'7AG(M:\C//7N+84OK&-)L_`XA2&^' 
ML#9$[;\W78^%9>7ETP]RS9T\.7DUK/I<]R:Z<YS-5F&$QSNZC@[62&$+'#T$
M5")D6(52[NQ2)=[XIJ6?(5E3\>T02RA'N)-S9Z:G0+F\!T\*S$O5%N/7'4VX
M3J%GKF7V?K-O`U:+WN'?\5F>&U1C&E'G!7OD]^^E?SI.NNATV.R<](XQ-<I5
MLU9?A9:'DFC<T<JG'E0ORVV]NS2F6+<N$899W9685 at Z6Q<G(QD&RKG'73.WX
MHY=)8:K>S+IY4(Z@];@"; ((&4A&E7)0R5(@",P&PQ<PP#(R"S R4B$@@B"J
M7"#"',#!,S"E,D2G#,H1:3ZXI,A>!F!(X(S]/#>LR;Z<-9BD6D19\X#0O=%V
M_,-K!"CT:%8:CLYY]'WORO?8?K9T??W$8P=W7Z2$Y3[)Y7VS6#I[]D;V8]%B
MZS(K=)5I\I&3MOY at 6NAW<]6=LZ_;`Y)R'"OG2*P.A at VS&B":A6*%.?WGS'TB
M7:UQQ-6&].5=PKS7AJEHZD at Z/!W2O3PF)?Y_EF%AC\E7C#-)GHGLL8R1;:0X
MDK)\9S2^D_JX34BO6S(C^2.I&VQ*CX]B+D52FB%G=+E25:%CN@*U%G+I+K&Q
MV\YEPGZD.OV_"4"G"W at RH:^^^(I/`BT5C!<O6B.GTGD4<A<V;&7;;=R\VVCJ
MHP6BB,3!:4V1#)@6JP65) \D=R3IM1L==!V97.'HO3#8K:QS$9\ST'%MNDBQ
M#/,JL93WOO?CR5^'WV(%W=*GL9"?'S<M>4U%%:9]GCL\#]4!$ 1YP/C4`0OH
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M:MU%0'Y%]R&DB"6:R^>9P6T/?PUE23FS4%NIT2XI9HINWJW_;59:I$68,+ at K
M9+$T.$LJ7??\WS$II8XP5]VZ(\$B!UI&+RMV)Q7F^0 at L9;)9V\&,,? %_)]7
MW>A[O4?A/IK.A[I>0<^@STCW?I0XFHQ.3AS>UZLC6.D>,?&0$D#Z*:=B(/#*
M/HL'>-)%R#G\K*50 at EMB7-H5>23="'*8HDL1J/9%V at E\Z_Y-,6URU'Z+CC=-
M+\YR)\,/P9LK79\EUU?JM%1DW-F4(8FD*7P),(W:1\;MSI$*_*_4BD);]_3C
M\2^O1K6(^,6+=G=X<C["8:TON-3B24.[..)G[EW/TIAJHZY-$&>?Q7DV[N[W
M/JB--O=MK>9<6;QF=3S2#@Q%RT"]#V@=DF$2.QV3$"7U[;0QM['":X at 3OA.)
M)(3+[4Q_0 at Q[+WKT+#(;)$"A%ZVVQA!P3:9C\HC?"0>JB\=MCOW/!0/?)($`
MCQ BGCB">PB,N@)_(3]S8CHM0F!.%E&5AE"F!D1%*BAU'0H`L0#-XYMD0N#>
MHE9O#PL&M 8-CSUUXWB0(/]R?7ZDN)^7ZH?66]:G]8D0R4LGTI$P_[8>D2R8
MI$O'02A->I0+!ZD^X2]()A0?]&:V3]A WM_O!!>!%^Q-T2"==HA:'$3K^NC#
MJ2X?K#[6)>EZ+F) 2)HC5 at P302)$LN! $P'4+S4(8IHE):1)$BP+Q,(DP;-9
MFAA>#&!J8VU at C;J24&#10.>')1T`X)9#8)/NX)@*;&Y+TSI*B6M]263>E4ER
MQ3$0YPS5 at M:[-O<IB&).&Y+--LUXL=C@&P=2==R:;Q/U(NK?BO!,DUI.8G%,
MTP+^*;Q(G4EM4OL;3@`ZIQPXIR3/&!(R)Q.:\@R_F at AW&I![3H)F)EE(F$[5
M:39(EA-CM;(PI6(9IQ2A,[)=>CJ0$S8)\,#Z""U%?20!A'KT#-,[C(+Q/+Y4
M\8\>A(.%<24Y%&_R?"(^*HJDZ)@-Z5WH=QR1+)>)$O"NYZ)N3 at D5WI!M$WO@
MF:<4KTW.AA<"0$_*9)X*1.1J3D)VFX3@)?DG8<$>^ FOHB]&P=O8F2O?!*A$
MB:JX)VN#VIS;`.::TG<F":*ZJDP2ES3KSO=AW8Q*L#U)L=V"1AQIZFF@#N$N
MT(XR)-$PETB1(D$RB2ALE+20*2AH-B9KDE=4PW<RD#>4.K-,1TH:BA=-$PF9
M5D8-A,[+<B8*7([XD(MAS$S4B+JN:TV[$VO!B80=Z4)KM&$%PBVNF 'X#\<,
MX'E*G\4X0+0.*#F;8H&Y3D)D)_Z50)U2"1."=B>)GA*UI2>-U"N<'RB!V;#=
MD1:C%A at GC"PF"=R@=SJBT%DM\X<&@2\YM<09(2![" \?D,TGG$[@TFM-4$\M
M?Z-1R3E<<V)-28U)IN3BG<EQ+)D:!PK6^A at GBGH35T3(3 at I!/59."10,!A=6
MI2QQ'N2-TPKD6L9I$#>FM-8(LHQF1LF=*L%0R#:^HK\QUQO3DFS>F[$>/>4;
M\4C70A7!<DU-R,;@',+C at 3$1X<Q+)DF]*!P@;DB[E?2F:8'^6/[IY8U 9&HF
M*[W!/$DVXO02R>G$XN8_>X"5&J"0*@5"!#B\$]Q<5\!.7U65.HZT\#7DD$YT
MGB^(7M<3,.IH)C[$#@)0)HD$@3-GDS +TQ$ZKJS"[1QX0?1)5(D9]Y?/\Y]N
MD&E[OM?BGEZAQ>[O_#A[YF0P]WN_B7Z'-K85&Q]$_ at P\D5LZ2B+S#77^?Z??
M]GV_M.[K]=58RW.!L?NFT_:6'$F5B758[_JA^1A.OC]AX; _@\OAYTCT4I !
M3/;A(0C9:BJ4?=+M!^OY2?3KJ5[[26M\)G]&/O'VRYHQUW"4ZUPV6RCR79 B
M2C?&7"C-QG]A."K#<F8<_O;!_=9[#\<G?WQA)WGS8*5&1CEI;("MH-MEK=*A
MC0[))+*W`#8D?@1."4:-,1C)@8J\%]4"LXP7(/UI<K8&#E3 IS,&\-" 40;2
M38^%S7!\QUDR1UV%,'E;J,LRA at 0,,6$E^1ODEUUU0)8- at T08109UGK1\Z-V'
M-J$<BXW/SM*46WDV#*WI4&-)C B<7#[-4,9O1)!NLTX:'7CQHR!I)NQX],QO
M(<!V"A ?(;80#L0, at P`]ZW6(:3;;.8V_)QP1PD'0]/,_V3O;ZG_[I C00 1(
MA5"PK-#8'HVL>: ,$5,%*IG#`(Q@,:@0%Q:P6P.PJ"BBBDFERRN]F:#$Q:,T
MQ9E405CR#M^L1ZSFPZ7P]YZH\LC6M U+XC= ]D##X< ^"#8B[S3W[(.*GY/M
M at 7/TMN\V[5W[4^>O\EV6W)-7;@@K1(9^LLV#&0B%%7*W+OW@(8 C%!.]'9X+
M:A5,TB'$ZGCV<\KT]TIL27W+[(8X(0-:62LM*AIJ;QP:( 7$'XX*+\D4X'HY
M'Q$.W0A$?P1YQX7G$LH$(HD+"<& -BLUOB61OD at 4H9 4I2?HI_-S7-1,T at G'
MXTP(DA")"\/</E&!YCYNM\QB&*,3_48,8$ >G#]#LGKZD^/M>;H=4D>)X)G:
M'=F(%OTZ-'$1WD4=+%%): 92T5^:EO*S$ H$29*::2)^9'T=[7Z&!\>EZFH6
M#+*[;RL[<U#,PFDT;C01)!VAJ4I0/);GR/AW]'4AJ8/9S9*V\NGR-,%$^OEQ
MKH8E[G2:`;XKK;M:DW]UC67#7Y#2#<29 at F)@EW>_9P_*)^X0$2]I'Q$"/!H&
MJB(1UJ07DDY&"B!"$ _;<=K*='O-0>E(8,F2*1(!X); $A8<Z$T7)3KL8 ."
MD&P9.F:0.S"UBI30R2(8&*<'^6# CU@[\\^-FM WZI#&D#*!NBS(FW1N!!B 
MSH!V"5X@%4 at 0IMD<<I,CLP#V)*G>[_FO"KAHC++",BB0:/@*,XS!74TI7<<+
M#<7E]!4D0J .M8:Y/804(4=",B">KU9N*\L(;=*W"IQ4/O6 [;J2&Q6<=8F4
M"1$U.X4:?IFJK:4-).L!I at F"+NL=&$I*@R*"C at UR(UQ/(\9X,#CEQ<G%3V,/
M9Z&82,?*$&\&?BXMN2AU\2-IA3X4CNLFTWJ:[#2A<#NY*&,<NG>C1K9(AE%"
M*0D1IT%_G/2)Q#"C[MM=_AKM<\J;09*HU8N5B%LO1LW,]_XM"<XW6!B_U at 0\
M[<DX-RUD9)Q.D*>-$FMQLXL+"*#)"=1DD.1QF Z8LN)+HB1&D=7+=-#;'-6Q
MI"-7844&<H.V6&,-% 56O>:6<8UHZB)8C0 at .``H#KNX(;H^C8-+B]!ZGB*D3
M'5-")K1:$&$@Y?N2/41X)^+I!08N0CF7I8:<,L]$E$,@<P>)GBI;@G?E=G U
MC4"$@1L&`[HM7>:);)0`.AJ1$]3FP*#BT0:DU(8&B:/DV39XA<AN,3C;7=2G
MF(^$S31U5.3PM)(0E(5%H["P^:\)Y=S\OOP8+%ZUY48[PO$C?Y[JU["M0.L?
M2[-PC+&<7U/KSIJ<+:C=[LSIGI1XD,MGRX%^1?EJHFVI+09AN*J2S(L$4V6A
MQD at H0&S!?F&..=[7;$PS,^KW`OA02RD2VA]G&%%QP at DY.!9%!B(C5+G.#.>Z
MCF at 5.3:8T1$734.H>;"O>GV20-6ST[.(3"9E at 5;8(JKL;IM-L^;Y02$QOKED
MRD203JY\\0-F-'S#)RZG.ROAX-C+T6,X'$!&C3-S>;YR^4(G9AJFT*+&AL+8
MDH4C2,7=O(1T$U @QKNAW/D7?2 7>J&A at VQ@Q;U*V,;;+RI6:B'(=>HLPG')
M$Q),ZFDVQ[<0]FT1H%%U6UK$*2SF;W'-H8B>_9Q(9LS880LM*_'8>&-(2:\O
MJ'!2:NRFGP./8)8D`\#5&YP#$I20N)*:I=&AV<(W*'?:P>V3B4_%(:D/=T<N
M8=8G6(&P+$6X(<RC.0AR<*_3$3\*P#17L=#EFMR2)O@!I\H,%?X;YI at F:6.N
MA4/J3K>2%=*Y]\M*&0R-D6?>!]K8/H+H at UL-/HG@?1G"+RNO1.7.(UUQ\Y2E
MNI["<W<T at 9N="QKC=>E :ZPLNT4#J3"KZ.6>@GRD#I$5H!(B4%2RH@& >NI 
M%3)&\1W7!ZD,0O(SP&Q^`5YF_, at M4IS:7EXA7?!3(P`AU02F!,362><PU!L@
MCK<'4AE3HAJ"T(0LQ1L+J]Q[/?8J*>OLTE$4#2>@12 L^/F EL"KX/B59MBK
M?F@!*025"4D[EZU)A87T! K$9[0M+[>/8Y1"L,&UO0>NBXDB):(J9-"R^&"@
MSC!I0P&4A.7K^IV"<T./O]C;3^:"R62)D^+9U5YGK.T7% AQI= D&@%#L(=_
ME?PR+>ML[)B-'FAZGJ(U%X>O,N-KSQ3)>)4/C_<P['<T&$3:GKB^W920#"/M
M(R $`,3T&+.$(-;N]_ )@?$T6%E^1?=M><"Q`W[4ZJ8_%QH(@X$^",3XW%#D
M#B'PBZ^]2YYAAP9Z8#4 at +VB9-:&X>+:Y7TQ>P)]\A797O57EA1VI7KB=HCI%
M5^:*AJ_=S.T['X._Y4]L'KJDA%3TTX?(%J'$WFC*@LQH^PS4T:,Q<AS.1X 4
MPW3B-)FHAJB1B!@X/$'ES-J_)T,3:&P#8"DA@(@#]@?6"Q202E*WWZ>N:4VD
M1+C#MU at R&$%@@8&CZ^I'1M&8`H%E@])!A<##B<8XLZD,E+4X-F9!:KH]- <O
M49UV$(<R.XP],IVZ=\!<_BZBBQJ/!HK?<U<>49&0R.)UN4;$[)NZ??-M`'/U
MAD<1:, at 9P>I8(VI<X2%)M=2A54*!D9!I"@U,&:-#JC& 2.P"#!P9$0)$K&U!
ML at 3M!\000#[[_I<'.!H/C at R$*'KS*M$MFS<4)3R=@93J[P"EG"72"AE>2.I4
MW(4($R!^6=.#P7NFH\;@9N!&N_OD" \K:@3<7POP'=;95Z35)4<3:7S&8U15
M-4U6GI@:@USUI6J0JBJ*HZ@](>$!=>,%?=Y_G]='P2)JUAAF$8M232&HRS ,
MC;8VW$'79B8HGU&QTKP/3 O/.A!(T*P2&0'ZL!40DRQ+40T-(4+2M !04!0M
M*-./`F)[95JN$C3I3#Z#$3C>ZY5 4#I>4L6ZD&$S#_S]T3Y8'4>9=_F(W)1I
MF0`Y2+1+`#8`6*;!G,(`:P&9.2_QW7(+1G-.*3[Y7O00H] Q2U6'P at 8,GK&E
M8J-X.+C?[G >4O! >Q")J$X34&$AR I#? !L1LE/-?CSWH??\['Q>1/B:ZE\
M7DO5ZN69JNBU8+4-"S)%!5.ME(\*"I490==C;L<8$".!&FR#2!J*6F%5R)#.
MDZL9&$ U`;@OO'UP.H0F.VK-Z4B3DH>R(YAW\5Z+$2$$3UIY4\GNHPU-R+F/
MD A[9$7?8H<7W7>V^1G3G4CUJ at DK`;E ?#>=HJ9/*1Y/7T(=(4D.CZ-!NL!]
M"5>HMWR[9FN)\S-;3:)U9:2V5U3I(^: 543ZL at 3"]3AF>U\J+LU at FQ%,#OG9
MK%&Y$XD3J%I\.W1MG?SB=C6+L")78I4.KPC$3!]C/'Q,NGC(RC'"+!H(5$7M
MD18;/1L!\XC9;G/6R"V8]W-+<@H>9&# " $#)"R2I3PGI^0^'0Y'6ISA\W4+
MR"0*HDEI64BAO>P?#Y?>S,Z>52[D<%#I!ZA]@.L2Y4US`4R,U;%SDYQ>>:DP
M8^C]%A<_&X%M!3)#FD] G!4^@@!8-MV0'3/(2Y.8YCXD+=!5,NA at MIB\MZ83
M4CE10#,(?(<&,3H,+!%:6D' ]JMT]$-#`ZH:DL;2H.E47QJ)5"1EF%Y?CWRV
M&.O2HH0BG)#F?=" ^Y^9 at -BUX60J!M9 at YF6C8@*,1H(&9RH`NG%.+TYDGDJB
MSZCU%$:D"#20*8P at 1"F5JU$(#[#@V#>.ZD[4%CIMGP\-"Q6>_1!N5.^)V\TR
M8Q)OE-).D0A M!.0W"4LU.9BF1YW2R;";SE@;U^R at J10GNV!6]8G00UC<X<8
MV$A1.( PN<ER%2R &!.3HZK$[YXDUWL69W^$6KN&`4N#BL.QPCGH[78%%/2%
MFYZ[=^1DN./H:;I:UK#7NTWA(0`=8&_?Y0L=5E:N<^65V=G2SP.P0T at K(@R"
MLD@#""FT-I)C2H0UZ64<]9?MSKIR[H'09=7-82JMZ87.5Z=O#?%)$9O"T()=
M/@BIE"XF\+'&YK('EJ,63(@)O:(*%$4EJ:;0).SLKBIV*^ ITP#3!/Z?QUTX
MAY/O*$<LD[)12?&$4D,%-SP-.Z!V]AS/'&[O^>KI#VJ-I]1P$4\<JZ+L9W>1
M2U1#&.(;[J%!Q `Y, at L9]7EH*AO3F\K+$MW6,"C6(;9ADCC'CY,SAXBT1J P
M`U#.)K,?81OD</&]@ZJ/BPPTT12Q'$:DU1R/^%,M2"7H]CU6<)T0Z&!@RIR@
MDGI9JYSJ2C@,$P&W3*FFE"@A")>$Q0'N#C/B0]ZEDEBHB O3 at F"_02]<!Z8#
M,P4R`LQ*JI$>/(YXW!=04,AILI_AQ/$+@!S7!X1.Q0>%#DCL$R"E*$"J0FM8
M8@'LM2/&$8N;2<#3DPM%>SH2+T,38,"!@I3#C%U.\+GPQU-P481<TBF "YPR
MJ42!+#FWM14U:5W9!S2ZD6^@IT3$D/@6C+5*4],3(BOJ-G)=3N:U at 5G5R)!)
ML$GM+Y!=C#*H0F(2XE.!*9,43$05!$ 1%,L#5 at 1AE0#84A at CF0$+XPT/+0!G
M`SJE0: 9!=*&)\=[I>$%I*3W\9N<PO=-"#D`?D@;>]WI/W",(#US,&0IA<]T
MQ6.O48X2_PQ2T4"P37&,L%E.`AO#0Q+(0 '8(S ]*+!QF <FA&@%4!4$*EHI
M[3U?<-(#9/90B>1?:=]5`)+ 0#49K?[>M%#*`/&(D at B'3VL_<'DO!ZT.6T Y
MCC$H8BJA)"(1D"1@@UX\3Q9%"GY^['\='O0XAJ?$X%/0H* #-#B1PLH at 6O?$
MCQ?J#)_"=E=S'-'P[+%A_H2":?3N*)RC`VIQ*D?:B4+B+8'D117@\/Y*LVD&
M$L6QZR7A4IM]L,"FT.B)XI!^U _9BHXUZ0V.%,\D[K16#0!"BY<$.X'YMZ!"
MM$1,AI+WT4JP,C<#0!+O-+!%6*U'FECS7M*+I-BGXLSD.\T<'W?F(\.6JCVS
MW=,W)0Q,;JOC,EL6 at W4N'-YDS/*.KW]G%BG43F)[B>QU]/?$D#,,.\C\4'YU
M%]Z=1J'C6'$2D=0W.FP!3 at A<(!>R:@VGRD+G0^,B,#B&J2>QR1D%&?7"`S0F
MVV^<J22DDDZ(F\3G%.0&)XDR2GPG41XP.PG)OD #<CI3B4YO;X<[;0,T%1$*
M8;D..!#@1HH.\M?D)> =T\-M.\@)VAY>FIXEST,EA&2<N8FV&L at 1.VJ)):+4
M6^Z!H,D39L)W.;"4V8&$LN)F6L-$IH9-88A,01RQ`RH(`J at DY$I\"#32%-K(
M/A"FRES#%E8T&C%-`6G",$#DLZ-F*["GY*)?@GG0+$37#9]-*G<FXT4.>NUR
M%"R0"JA$P*K[)==:KF$ENY2VB^6*<Y2Q/0AWY)51N.TL5SXH:[.G%$I!!#M6
M2H0$!S0&@ 7[S:D<-D\Y;H%DK47>[[-%BF$IB^!VU]'(RO>\*)C(/?8"50:H
M2"R!(TT-8UMD+!A&$P8R9B@"Y=B/0"1\P,%3L4L)YIE!.W&;S<Q*40[0/$#Z
MHIB%Z10T5CWB`4Q!,WD%*VS/TP\:'VC\H^YD@&+O_3[^:F\V1,%=R;PI$,I-
M!!GBV"A at PLI/YG)'M38"A*-W'+N(W&8GQ8]QK8<?;7M6ME5*_K>FA6W3#YL`
M81=%NQ\Q<EO6"WV^*L;(6((6M[1%O?-JIBS1)(V'DXG1=[UQR8X,7AC=C#AM
M;%MBS&,#G5A&F%M)>I(V3#X?B,FS&V9828IMW8W0-I%A`UOD?4:MN$II<MTA
M[#ZBF4<CG'OF;7KC#BBF_C4L6'KH,%)FD6X^1)"3:[D'53&Z2NL-ZZM<]\<`
MT-B\O J7:6HEJ]38218FCP(+"&=X('"AF;+FPJ;78Q*\5Y0//U:.`%W6M PY
M/M<Y0A9(U%&H/+6%S&=HZ; VB'TP!<B ')B,8BDX'H)/.F\O7(@A$8'L(-CW
MI2D,P<U'&!.\.&+U)5AX.H$T9W\[Y\TA42.*+!#8A@$#S(Y]5?-P10KAB]9'
M.*R.]"' ]E$C2220]HP#@F>C9>)$JL[HU:D/LG2QJ#=A]<8=5NZR$\UN\FM;
M;E3:,P&L#,H<)*,;-J"D\VW"6,"3\=<`\J*=.U,6`GP9)BMO/1U%U*]P%BID
MN73=:*:'@T P"5;=:SH%;"J2'PAM-LSJ;P**P6UE"T0[7V^^P!JPR)M!.PFX
M!2](;9[KY;Y/*8ZQ-" 6$%(H$ @5$S5F&&P\=LBR,'QY at 4)$,=L?NU G"\E1
MW0/<Q!7A`>%RI*A4XJ$:(*Z&S;FC#Y5B<]B]3"XM;!M:./D($&=)>(2FD/ZP
MN"40J?!SD,A#B-5M5$&(Q>=B+F#;D&^*O*SH^^!!E)$,Y7G%I%.[A5R'^#A+
M4,PY;.+TD..)+'>Q%V9)&#"VAW=&!QR&9A#V9B20^/S6/5@^]4\[P.T:(JTM
MM+CB;??D:/MIC%YMT=6?>L6+,;%#*"[0V/2Q:'81=GD"!<.8ALUS9L6:>I1:
M5PQ43ME*]PI'$O3"RBZ#D8Z$$$M#\5E263,_-),W!Q,,QI,=&2 at S!T#<95%(
M<;=%].QNA88UEI3;Y2N(<@YWE*V=QN&D:R9MG at 2,9MI:#=S3(T$X9H,NS$H,
MDDVM6\@07LY>T at Y,XXC)'W- -I<&9-7D]Z$%T3>H&W#6!K+*FHH2BA* +-G$
M[-K%F2NP"-O-0QI)4930<S>*Q;'EULFV:M<K"'-.V(&&H<L$0/D5AYBZLD at H
MV2O-,:<-0HQL>SD,U(#&Y(DG'-FV.L'HIT(HZ$;X(P, at G(R;C1R)"B40+AC6
MT.:Z(^TR3)!S'*E\#HD7K190%NF44I0,7:-6T:8P%R+'(CPM9:108,[$,B9@
M8(JU)T['#II/*$^H/8I)>6$194B6UTQ0F9)I=@2/`KB[=>YJ)H]9XYH*F'S1
M(2*;4BT('B5Y=5Z(0.HD,J2@$R%ZJD!U``84QF0YJ:&"$-D%+$,`$V5!CD"4
MIDK>L5NH[_A\[8._[. at 6.,>)`R>[N[BBQ*=CY>,SL36FWF-$!1=HQXYU70LA
MBM4E451@<C'4-<9H%%(?B@&(J$@LB@<5-9K#<6>[!2$D(FJ-6GE24N6$Z?1)
MR)-QNF:):4:"19 at 80I:,D at 5/=#+Y?,ML0WARYU8)&0BU`5!W?>>6E"E#ZI$[
M?)VV#EK,UG2^#O4CJ#+8?'!*"^]KFI!%8H'#JY$IWM>87: 451+&](>*&!5<
M&]\R&N1T43N1U([ \V@\U?4:(^<$#>1!(0GS+W at H&K6PC$#).*7(X/<MWM6=
MQP$B.W S^92>AM<)[O/L#PN'! .17 #MN]$*0EB at 5>T3[JG(+)E!', at 0`Z$'
MU3OVE.UB^$?TPWL_#]'_R[A.)XE?M12I: %)P$8-6RT/T//R'&*A'Q'Q%!.W
MN_,<^):/.8AF$=!&. at W?1\L!10V8H80!45GC3WTOE3Q7,[A6^ KLN_+\LX7#
M"D[WV_ /='XMM45V4E:9^H(PC0B9=DQ866ZC'L +`<,"LB(/5 at GQMPCF6%,0
M`OL)J;:<.%4>L].#>3I!QBAFY?7I3/DA1!-E^9(A^),M. ;"6[>;PV@&T) >
MWPZ(AZZ,G at P',[9<]KWFS6(J/DX2)I#U,?FX+QN:>UQ<.1PN1BWPBHX15KP0
MHB(6`B9QVET-"QNC@ 8BF2N1[4-AJ!-F?J0X3#;6HKWP"0("2$$.Z)IS*DG4
MK\Y7N_,7?/QH*B-!$,&:)YU.M$V;'CAX@=X1.9BP\.L.(RC&00-$(5"__%W)
(%.%"0;N8NI0`
`
end